33283de130de34526eb1027d141a3dd8_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

33283de130de34526eb1027d141a3dd8_JaffaCakes118
Size

7.4MB
MD5

33283de130de34526eb1027d141a3dd8
SHA1

290fa0d1861b1049ebc876a1d31a2b84a0d6a902
SHA256

c8a8e02831964464950afb00b4a5349733bce2a251ad5ab7757c58a6a4a8dda5
SHA512

2e44a84da4de3f73207a5c271f7e3669701a554332be3adaaa775184f060ab984918257abc34ea9ab017046d1416972cfb516c6c1f2796402c7165b331cf84bf
SSDEEP

196608:jMCtX/IdvtgPgdpZOQ7mp40GzmkQPnpxpV41wGvf4dt3hkH:jT/sjPZOb4FmkGwwswdtU

Score

3^/10

Malware Config

Signatures

Unsigned PE 88 IoCs

Checks for missing Authenticode signature.

resource
33283de130de34526eb1027d141a3dd8_JaffaCakes118
unpack001/$PLUGINSDIR/InstallOptions.dll
unpack001/$SYSDIR/msvcp60.dll
unpack001/ComDlls/LinkSimulate.dll
unpack001/ComDlls/TGSearch.dll
unpack001/ComDlls/ThunderAgent.dll
unpack001/ComDlls/ThunderAgent_Now.dll
unpack001/Components/Community/XLCommunity.dll
unpack001/Components/DownAndPlay/DapCtrl.dll
unpack001/Components/DownAndPlay/DapCtrl1.4.19.22.380.dll
unpack001/Components/DownAndPlay/DapPlayer.dll
unpack001/Components/DownAndPlay/DapPlayer3.0.44.68.380.dll
unpack001/Components/DownAndPlay/DownAndPlay.dll
unpack001/Components/DownAndPlay/PlayerHelper.dll.new
unpack001/Components/DownAndPlay/XLNet.dll
unpack001/Components/DownAndPlay/npDapCtrlFirefox.dll
unpack001/Components/DownAndPlay/xlsf.dll
unpack001/Components/DownAndPlay/xlsf_Now.dll
unpack001/Components/DownloadStat/DownloadStat.dll
unpack001/Components/ExplorerHelper/ExplorerHelper.dll
unpack001/Components/ExplorerHelper/NsThunderLoader.dll
unpack001/Components/ExplorerHelper/NsThunderLoaderInstaller.dll
unpack001/Components/ExplorerHelper/ThunderComponent.dll
unpack001/Components/ExplorerHelper/XLNonIESvr.exe
unpack001/Components/ExplorerHelper/regxpcom.exe
unpack001/Components/InMedia/InMediaSetup.exe
unpack001/Components/InMedia/MediaAddin15.dll
unpack001/Components/InMedia/PlayerHelper.dll.new
unpack001/Components/InMedia/ThunderMinisite.exe
unpack001/Components/InMedia/XLIPC.dll
unpack001/Components/InMedia/XLNet.dll
unpack001/Components/InMedia/iEmbed15.dll
unpack001/Components/InMedia/iEmbedShell.dll
unpack001/Components/InMedia/peerid.dll
unpack001/Components/KanKan/IJL15.DLL
unpack001/Components/KanKan/PlayerHelper.dll
unpack001/Components/KanKan/XAFilter.ax
unpack001/Components/KanKan/XLNet.dll
unpack001/Components/KanKan/XPlayer.dll
unpack001/Components/KanKan/Xdrm.dll
unpack001/Components/KanKan/XmvSource.dll
unpack001/Components/KanKan/atl71.dll
unpack001/Components/P4PClient/P4PClient.dll
unpack001/Components/ResWorker/DataProcessor_00.dll
unpack001/Components/ResWorker/DsBho_00.dll
unpack001/Components/ResWorker/DsXlCom.dll
unpack001/Components/ResWorker/MediaWorker.dll
unpack001/Components/Search/XLSearch.dll
unpack001/Components/Security/LeakScan.exe
unpack001/Components/Security/ThunderSafe.dll
unpack001/Components/Security/XL360/XL360.dll
unpack001/Components/Security/XLDiagnose/XLDiagnose.dll
unpack001/Components/Security/XLSafeUI.dll
unpack001/Components/UserExperience/UserExperience.dll
unpack001/Components/VPShell/VPShell.dll
unpack001/Plugins/GouGouTop/GouGouTop.dll
unpack001/Plugins/XLSafeHost/XLSafeHost.dll
unpack001/Program/BHOStub.dll
unpack001/Program/BugReport.dll
unpack001/Program/BugReport.exe
unpack001/Program/DSConvert.dll
unpack001/Program/FloatBar.dll
unpack001/Program/FtpExplorer.exe
unpack001/Program/LanguageSetter.exe
unpack001/Program/RegisterDll.dll
unpack001/Program/SetupHelper.exe
unpack001/Program/TaskManager.dll
unpack001/Program/Thunder5.exe
unpack001/Program/WMZEx.dll
unpack001/Program/XLNet.dll
unpack001/Program/al.dll
unpack001/Program/asyn_dns.dll
unpack001/Program/atl71.dll
unpack001/Program/bd.dll
unpack001/Program/download_interface.dll
unpack001/Program/historyinfoTransfer.dll
unpack001/Program/historyinfo_manage.dll
unpack001/Program/iTargetAD.dll
unpack001/Program/msvcirt.dll
unpack001/Program/stlport_vc646.dll
unpack001/Program/streammedialib.dll
unpack001/Program/upnp.exe
unpack001/Program/wmz.dll
unpack001/Program/xldc.dll
unpack001/Thunder.exe
unpack001/uninst.exe
unpack004/$PLUGINSDIR/InstallOptions.dll
unpack004/$PLUGINSDIR/System.dll

NSIS installer 2 IoCs

installer

resource	yara_rule
sample	nsis_installer_1
static1/unpack001/uninst.exe	nsis_installer_1

Files

33283de130de34526eb1027d141a3dd8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

42134c4fb1b2d3cf6b447e018a5de700

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetFileSize
GetModuleFileNameA
GetTickCount
GetCurrentProcess
CopyFileA
SetFileTime
GetCommandLineA
GetWindowsDirectoryA
GetTempPathA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
CloseHandle
lstrcmpiA
lstrcmpA
GetEnvironmentVariableA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
SetErrorMode
GetModuleHandleA
LoadLibraryA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
SetFilePointer
FindClose
MulDiv
FindNextFileA
FindFirstFileA
DeleteFileA
ExitProcess

user32

ExitWindowsEx
CharNextA
DialogBoxParamA
GetClassInfoA
SystemParametersInfoA
RegisterClassA
EndDialog
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
CheckDlgButton
GetAsyncKeyState
IsDlgButtonChecked
GetMessagePos
LoadBitmapA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
CreateDialogParamA
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxA
CharPrevA
wvsprintfA
DispatchMessageA
PeekMessageA
SendMessageTimeoutA
FindWindowExA
IsWindow
GetDlgItem
LoadImageA
GetDC
EnableWindow
InvalidateRect
CreateWindowExA
GetWindowLongA
DrawFocusRect
DestroyWindow
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
ShowWindow
TrackPopupMenu
wsprintfA
SendMessageA
CallWindowProcA
MapWindowPoints
GetWindowRect
ScreenToClient
PtInRect
LoadCursorA
SetCursor
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
SetWindowLongA

gdi32

SetBkColor
GetDeviceCaps
GetCurrentObject
GetObjectA
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegEnumKeyA
RegEnumValueA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegQueryValueExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 290KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 304KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/InstallOptions.dll
.dll windows:4 windows x86 arch:x86

57354bdeea3dfae6e948101add87501a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetCurrentDirectoryA
GetCurrentDirectoryA
GetPrivateProfileIntA
GetModuleHandleA
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
MultiByteToWideChar
GlobalAlloc

user32

GetDlgCtrlID
GetClientRect
SetWindowRgn
MapWindowPoints
LoadImageA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
PtInRect
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
LoadIconA

gdi32

SetTextColor
GetObjectA
SelectObject
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
CreateCompatibleDC

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetDesktopFolder
SHGetMalloc
ShellExecuteA

comdlg32

GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError

Exports

Exports

dialog
initDialog
show

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 954B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/ioSpecial.ini
$PLUGINSDIR/modern-header.bmp
$PLUGINSDIR/modern-wizard.bmp
$SYSDIR/msvcp60.dll
.dll windows:4 windows x86 arch:x86

c428a646f4c250be02cf420ab15d34b4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

msvcp60.pdb

Imports

msvcrt

localeconv
_Gettnames
__mb_cur_max
fgetc
fgetwc
fputc
fputwc
ungetc
ungetwc
__CxxFrameHandler
setvbuf
fflush
??2@YAPAXI@Z
_CxxThrowException
fclose
fgetpos
fseek
sprintf
strcspn
strtol
_errno
fwrite
fsetpos
_Strftime
_Getdays
_Getmonths
strtoul
free
_iob
realloc
setlocale
malloc
__crtCompareStringA
__lc_collate_cp
_unlock
__lc_handle
_lock
__setlc_active
__unguarded_readlc_active
__crtLCMapStringA
__lc_codepage
towlower
towupper
strcmp
_pctype
_isctype
_ftol
strtod
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_except_handler3
__dllonexit
_onexit
_initterm
_adjust_fdiv
memset
memmove
memchr
memcpy
strlen
memcmp
wcslen
??4exception@@QAEAAV0@ABV0@@Z
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
??0exception@@QAE@ABQBD@Z
?what@exception@@UBEPBDXZ
sqrt
sin
pow
log
ldexp
exp
cos
fopen
atan2

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
MultiByteToWideChar
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
Sleep
InterlockedExchange
DeleteCriticalSection
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
DisableThreadLibraryCalls

Exports

Exports

??$?5DU?$char_traits@D@std@@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAC@Z
??$?5DU?$char_traits@D@std@@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAD@Z
??$?5DU?$char_traits@D@std@@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAE@Z
??$?5DU?$char_traits@D@std@@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@PAC@Z
??$?5DU?$char_traits@D@std@@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@PAD@Z
??$?5DU?$char_traits@D@std@@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@PAE@Z
??$?5DU?$char_traits@D@std@@M@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$complex@M@0@@Z
??$?5DU?$char_traits@D@std@@N@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$complex@N@0@@Z
??$?5DU?$char_traits@D@std@@O@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$complex@O@0@@Z
??$?5DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??$?5GU?$char_traits@G@std@@@std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAG@Z
??$?5GU?$char_traits@G@std@@@std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@PAF@Z
??$?5GU?$char_traits@G@std@@@std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@PAG@Z
??$?5GU?$char_traits@G@std@@M@std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAV?$complex@M@0@@Z
??$?5GU?$char_traits@G@std@@N@std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAV?$complex@N@0@@Z
??$?5GU?$char_traits@G@std@@O@std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAV?$complex@O@0@@Z
??$?5GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??$?6DU?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@C@Z
??$?6DU?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@D@Z
??$?6DU?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@E@Z
??$?6DU?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBC@Z
??$?6DU?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
??$?6DU?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBE@Z
??$?6DU?$char_traits@D@std@@M@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$complex@M@0@@Z
??$?6DU?$char_traits@D@std@@N@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$complex@N@0@@Z
??$?6DU?$char_traits@D@std@@O@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$complex@O@0@@Z
??$?6DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??$?6GU?$char_traits@G@std@@@std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@G@Z
??$?6GU?$char_traits@G@std@@@std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@PBF@Z
??$?6GU?$char_traits@G@std@@@std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@PBG@Z
??$?6GU?$char_traits@G@std@@M@std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@ABV?$complex@M@0@@Z
??$?6GU?$char_traits@G@std@@N@std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@ABV?$complex@N@0@@Z
??$?6GU?$char_traits@G@std@@O@std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@ABV?$complex@O@0@@Z
??$?6GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??$?8GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??$?8GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
??$?8GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NPBGABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??$?8M@std@@YA_NABMABV?$complex@M@0@@Z
??$?8M@std@@YA_NABV?$complex@M@0@0@Z
??$?8M@std@@YA_NABV?$complex@M@0@ABM@Z
??$?8N@std@@YA_NABNABV?$complex@N@0@@Z
??$?8N@std@@YA_NABV?$complex@N@0@0@Z
??$?8N@std@@YA_NABV?$complex@N@0@ABN@Z
??$?8O@std@@YA_NABOABV?$complex@O@0@@Z
??$?8O@std@@YA_NABV?$complex@O@0@0@Z
??$?8O@std@@YA_NABV?$complex@O@0@ABO@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??$?9GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??$?9GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
??$?9GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NPBGABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??$?9M@std@@YA_NABMABV?$complex@M@0@@Z
??$?9M@std@@YA_NABV?$complex@M@0@0@Z
??$?9M@std@@YA_NABV?$complex@M@0@ABM@Z
??$?9N@std@@YA_NABNABV?$complex@N@0@@Z
??$?9N@std@@YA_NABV?$complex@N@0@0@Z
??$?9N@std@@YA_NABV?$complex@N@0@ABN@Z
??$?9O@std@@YA_NABOABV?$complex@O@0@@Z
??$?9O@std@@YA_NABV?$complex@O@0@0@Z
??$?9O@std@@YA_NABV?$complex@O@0@ABO@Z
??$?DM@std@@YA?AV?$complex@M@0@ABMABV10@@Z
??$?DM@std@@YA?AV?$complex@M@0@ABV10@0@Z
??$?DM@std@@YA?AV?$complex@M@0@ABV10@ABM@Z
??$?DN@std@@YA?AV?$complex@N@0@ABNABV10@@Z
??$?DN@std@@YA?AV?$complex@N@0@ABV10@0@Z
??$?DN@std@@YA?AV?$complex@N@0@ABV10@ABN@Z
??$?DO@std@@YA?AV?$complex@O@0@ABOABV10@@Z
??$?DO@std@@YA?AV?$complex@O@0@ABV10@0@Z
??$?DO@std@@YA?AV?$complex@O@0@ABV10@ABO@Z
??$?GM@std@@YA?AV?$complex@M@0@ABMABV10@@Z
??$?GM@std@@YA?AV?$complex@M@0@ABV10@0@Z
??$?GM@std@@YA?AV?$complex@M@0@ABV10@@Z
??$?GM@std@@YA?AV?$complex@M@0@ABV10@ABM@Z
??$?GN@std@@YA?AV?$complex@N@0@ABNABV10@@Z
??$?GN@std@@YA?AV?$complex@N@0@ABV10@0@Z
??$?GN@std@@YA?AV?$complex@N@0@ABV10@@Z
??$?GN@std@@YA?AV?$complex@N@0@ABV10@ABN@Z
??$?GO@std@@YA?AV?$complex@O@0@ABOABV10@@Z
??$?GO@std@@YA?AV?$complex@O@0@ABV10@0@Z
??$?GO@std@@YA?AV?$complex@O@0@ABV10@@Z
??$?GO@std@@YA?AV?$complex@O@0@ABV10@ABO@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@D@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@DABV10@@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??$?HGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@0@Z
??$?HGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@G@Z
??$?HGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@PBG@Z
??$?HGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@GABV10@@Z
??$?HGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBGABV10@@Z
??$?HM@std@@YA?AV?$complex@M@0@ABMABV10@@Z
??$?HM@std@@YA?AV?$complex@M@0@ABV10@0@Z
??$?HM@std@@YA?AV?$complex@M@0@ABV10@@Z
??$?HM@std@@YA?AV?$complex@M@0@ABV10@ABM@Z
??$?HN@std@@YA?AV?$complex@N@0@ABNABV10@@Z
??$?HN@std@@YA?AV?$complex@N@0@ABV10@0@Z
??$?HN@std@@YA?AV?$complex@N@0@ABV10@@Z
??$?HN@std@@YA?AV?$complex@N@0@ABV10@ABN@Z
??$?HO@std@@YA?AV?$complex@O@0@ABOABV10@@Z
??$?HO@std@@YA?AV?$complex@O@0@ABV10@0@Z
??$?HO@std@@YA?AV?$complex@O@0@ABV10@@Z
??$?HO@std@@YA?AV?$complex@O@0@ABV10@ABO@Z
??$?KM@std@@YA?AV?$complex@M@0@ABMABV10@@Z
??$?KM@std@@YA?AV?$complex@M@0@ABV10@0@Z
??$?KM@std@@YA?AV?$complex@M@0@ABV10@ABM@Z
??$?KN@std@@YA?AV?$complex@N@0@ABNABV10@@Z
??$?KN@std@@YA?AV?$complex@N@0@ABV10@0@Z
??$?KN@std@@YA?AV?$complex@N@0@ABV10@ABN@Z
??$?KO@std@@YA?AV?$complex@O@0@ABOABV10@@Z
??$?KO@std@@YA?AV?$complex@O@0@ABV10@0@Z
??$?KO@std@@YA?AV?$complex@O@0@ABV10@ABO@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??$?MGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??$?MGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
??$?MGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NPBGABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??$?NDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?NDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??$?NDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??$?NGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??$?NGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
??$?NGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NPBGABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??$?ODU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?ODU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??$?ODU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??$?OGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??$?OGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
??$?OGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NPBGABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??$?PDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?PDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??$?PDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??$?PGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??$?PGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
??$?PGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NPBGABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??$?XMM@std@@YAAAV?$complex@M@0@AAV10@ABV10@@Z
??$?XNN@std@@YAAAV?$complex@N@0@AAV10@ABV10@@Z
??$?XOO@std@@YAAAV?$complex@O@0@AAV10@ABV10@@Z
??$?YMM@std@@YAAAV?$complex@M@0@AAV10@ABV10@@Z
??$?YNN@std@@YAAAV?$complex@N@0@AAV10@ABV10@@Z
??$?YOO@std@@YAAAV?$complex@O@0@AAV10@ABV10@@Z
??$?ZMM@std@@YAAAV?$complex@M@0@AAV10@ABV10@@Z
??$?ZNN@std@@YAAAV?$complex@N@0@AAV10@ABV10@@Z
??$?ZOO@std@@YAAAV?$complex@O@0@AAV10@ABV10@@Z
??$?_0MM@std@@YAAAV?$complex@M@0@AAV10@ABV10@@Z
??$?_0NN@std@@YAAAV?$complex@N@0@AAV10@ABV10@@Z
??$?_0OO@std@@YAAAV?$complex@O@0@AAV10@ABV10@@Z
??$_Fabs@M@std@@YAMABV?$complex@M@0@PAH@Z
??$_Fabs@N@std@@YANABV?$complex@N@0@PAH@Z
??$_Fabs@O@std@@YAOABV?$complex@O@0@PAH@Z
??$abs@M@std@@YAMABV?$complex@M@0@@Z
??$abs@N@std@@YANABV?$complex@N@0@@Z
??$abs@O@std@@YAOABV?$complex@O@0@@Z
??$arg@M@std@@YAMABV?$complex@M@0@@Z
??$arg@N@std@@YANABV?$complex@N@0@@Z
??$arg@O@std@@YAOABV?$complex@O@0@@Z
??$conj@M@std@@YA?AV?$complex@M@0@ABV10@@Z
??$conj@N@std@@YA?AV?$complex@N@0@ABV10@@Z
??$conj@O@std@@YA?AV?$complex@O@0@ABV10@@Z
??$cos@M@std@@YA?AV?$complex@M@0@ABV10@@Z
??$cos@N@std@@YA?AV?$complex@N@0@ABV10@@Z
??$cos@O@std@@YA?AV?$complex@O@0@ABV10@@Z
??$cosh@M@std@@YA?AV?$complex@M@0@ABV10@@Z
??$cosh@N@std@@YA?AV?$complex@N@0@ABV10@@Z
??$cosh@O@std@@YA?AV?$complex@O@0@ABV10@@Z
??$exp@M@std@@YA?AV?$complex@M@0@ABV10@@Z
??$exp@N@std@@YA?AV?$complex@N@0@ABV10@@Z
??$exp@O@std@@YA?AV?$complex@O@0@ABV10@@Z
??$getline@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??$getline@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@D@Z
??$getline@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??$getline@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@G@Z
??$imag@M@std@@YAMABV?$complex@M@0@@Z
??$imag@N@std@@YANABV?$complex@N@0@@Z
??$imag@O@std@@YAOABV?$complex@O@0@@Z
??$log10@M@std@@YA?AV?$complex@M@0@ABV10@@Z
??$log10@N@std@@YA?AV?$complex@N@0@ABV10@@Z
??$log10@O@std@@YA?AV?$complex@O@0@ABV10@@Z
??$log@M@std@@YA?AV?$complex@M@0@ABV10@@Z
??$log@N@std@@YA?AV?$complex@N@0@ABV10@@Z
??$log@O@std@@YA?AV?$complex@O@0@ABV10@@Z
??$norm@M@std@@YAMABV?$complex@M@0@@Z
??$norm@N@std@@YANABV?$complex@N@0@@Z
??$norm@O@std@@YAOABV?$complex@O@0@@Z
??$polar@M@std@@YA?AV?$complex@M@0@ABM0@Z
??$polar@M@std@@YA?AV?$complex@M@0@ABM@Z
??$polar@N@std@@YA?AV?$complex@N@0@ABN0@Z
??$polar@N@std@@YA?AV?$complex@N@0@ABN@Z
??$polar@O@std@@YA?AV?$complex@O@0@ABO0@Z
??$polar@O@std@@YA?AV?$complex@O@0@ABO@Z
??$pow@M@std@@YA?AV?$complex@M@0@ABMABV10@@Z
??$pow@M@std@@YA?AV?$complex@M@0@ABV10@0@Z
??$pow@M@std@@YA?AV?$complex@M@0@ABV10@ABM@Z
??$pow@M@std@@YA?AV?$complex@M@0@ABV10@H@Z
??$pow@N@std@@YA?AV?$complex@N@0@ABNABV10@@Z
??$pow@N@std@@YA?AV?$complex@N@0@ABV10@0@Z
??$pow@N@std@@YA?AV?$complex@N@0@ABV10@ABN@Z
??$pow@N@std@@YA?AV?$complex@N@0@ABV10@H@Z
??$pow@O@std@@YA?AV?$complex@O@0@ABOABV10@@Z
??$pow@O@std@@YA?AV?$complex@O@0@ABV10@0@Z
??$pow@O@std@@YA?AV?$complex@O@0@ABV10@ABO@Z
??$pow@O@std@@YA?AV?$complex@O@0@ABV10@H@Z
??$real@M@std@@YAMABV?$complex@M@0@@Z
??$real@N@std@@YANABV?$complex@N@0@@Z
??$real@O@std@@YAOABV?$complex@O@0@@Z
??$sin@M@std@@YA?AV?$complex@M@0@ABV10@@Z
??$sin@N@std@@YA?AV?$complex@N@0@ABV10@@Z
??$sin@O@std@@YA?AV?$complex@O@0@ABV10@@Z
??$sinh@M@std@@YA?AV?$complex@M@0@ABV10@@Z
??$sinh@N@std@@YA?AV?$complex@N@0@ABV10@@Z
??$sinh@O@std@@YA?AV?$complex@O@0@ABV10@@Z
??$sqrt@M@std@@YA?AV?$complex@M@0@ABV10@@Z
??$sqrt@N@std@@YA?AV?$complex@N@0@ABV10@@Z
??$sqrt@O@std@@YA?AV?$complex@O@0@ABV10@@Z
??0?$_Complex_base@M@std@@QAE@ABM0@Z
??0?$_Complex_base@N@std@@QAE@ABN0@Z
??0?$_Complex_base@O@std@@QAE@ABO0@Z
??0?$_Mpunct@D@std@@QAE@ABV_Locinfo@1@I_N@Z
??0?$_Mpunct@D@std@@QAE@I_N@Z
??0?$_Mpunct@G@std@@QAE@ABV_Locinfo@1@I_N@Z
??0?$_Mpunct@G@std@@QAE@I_N@Z
??0?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAE@ABV01@@Z
??0?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_filebuf@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
??0?$basic_filebuf@GU?$char_traits@G@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_filebuf@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_fstream@DU?$char_traits@D@std@@@std@@QAE@ABV01@@Z
??0?$basic_fstream@DU?$char_traits@D@std@@@std@@QAE@PBDH@Z
??0?$basic_fstream@DU?$char_traits@D@std@@@std@@QAE@XZ
??0?$basic_fstream@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
??0?$basic_fstream@GU?$char_traits@G@std@@@std@@QAE@PBDH@Z
??0?$basic_fstream@GU?$char_traits@G@std@@@std@@QAE@XZ
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@ABV01@@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PBDH@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@XZ
??0?$basic_ifstream@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
??0?$basic_ifstream@GU?$char_traits@G@std@@@std@@QAE@PBDH@Z
??0?$basic_ifstream@GU?$char_traits@G@std@@@std@@QAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@QAE@ABV01@@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IAE@XZ
??0?$basic_ios@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
??0?$basic_ios@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@ABV01@@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@ABV01@@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_istringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??0?$basic_istringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@1@H@Z
??0?$basic_istringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@ABV01@@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@PBDH@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@XZ
??0?$basic_ofstream@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
??0?$basic_ofstream@GU?$char_traits@G@std@@@std@@QAE@PBDH@Z
??0?$basic_ofstream@GU?$char_traits@G@std@@@std@@QAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@ABV01@@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N1@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N1@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??0?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@1@H@Z
??0?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@W4_Uninitialized@1@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE@ABV01@@Z
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@W4_Uninitialized@1@@Z
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@XZ
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@IIABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@IDABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD0ABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDIABV?$allocator@D@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@IIABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@IGABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG0ABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGIABV?$allocator@G@1@@Z
??0?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??0?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??0?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@1@H@Z
??0?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??0?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@1@H@Z
??0?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??0?$codecvt@DDH@std@@QAE@ABV_Locinfo@1@I@Z
??0?$codecvt@DDH@std@@QAE@I@Z
??0?$codecvt@GDH@std@@QAE@ABV_Locinfo@1@I@Z
??0?$codecvt@GDH@std@@QAE@I@Z
??0?$collate@D@std@@QAE@ABV_Locinfo@1@I@Z
??0?$collate@D@std@@QAE@I@Z
??0?$collate@G@std@@QAE@ABV_Locinfo@1@I@Z
??0?$collate@G@std@@QAE@I@Z
??0?$complex@M@std@@QAE@ABM0@Z
??0?$complex@M@std@@QAE@ABV?$complex@N@1@@Z
??0?$complex@M@std@@QAE@ABV?$complex@O@1@@Z
??0?$complex@N@std@@QAE@ABN0@Z
??0?$complex@N@std@@QAE@ABV?$complex@M@1@@Z
??0?$complex@N@std@@QAE@ABV?$complex@O@1@@Z
??0?$complex@O@std@@QAE@ABO0@Z
??0?$complex@O@std@@QAE@ABV?$complex@M@1@@Z
??0?$complex@O@std@@QAE@ABV?$complex@N@1@@Z
??0?$ctype@D@std@@QAE@ABV_Locinfo@1@I@Z
??0?$ctype@D@std@@QAE@PBF_NI@Z
??0?$ctype@G@std@@QAE@ABV_Locinfo@1@I@Z
??0?$ctype@G@std@@QAE@I@Z
??0?$messages@D@std@@QAE@ABV_Locinfo@1@I@Z
??0?$messages@D@std@@QAE@I@Z
??0?$messages@G@std@@QAE@ABV_Locinfo@1@I@Z
??0?$messages@G@std@@QAE@I@Z
??0?$money_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$money_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$money_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$money_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$money_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$money_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$moneypunct@D$00@std@@QAE@ABV_Locinfo@1@I@Z
??0?$moneypunct@D$00@std@@QAE@I@Z
??0?$moneypunct@D$0A@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$moneypunct@D$0A@@std@@QAE@I@Z
??0?$moneypunct@G$00@std@@QAE@ABV_Locinfo@1@I@Z
??0?$moneypunct@G$00@std@@QAE@I@Z
??0?$moneypunct@G$0A@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$moneypunct@G$0A@@std@@QAE@I@Z
??0?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$numpunct@D@std@@QAE@ABV_Locinfo@1@I@Z
??0?$numpunct@D@std@@QAE@I@Z
??0?$numpunct@G@std@@QAE@ABV_Locinfo@1@I@Z
??0?$numpunct@G@std@@QAE@I@Z
??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0Init@ios_base@std@@QAE@XZ
??0_Locinfo@std@@QAE@ABV01@@Z
??0_Locinfo@std@@QAE@HPBD@Z
??0_Locinfo@std@@QAE@PBD@Z
??0_Lockit@std@@QAE@XZ
??0_Timevec@std@@QAE@ABV01@@Z
??0_Timevec@std@@QAE@PAX@Z
??0_Winit@std@@QAE@XZ
??0__non_rtti_object@std@@QAE@ABV01@@Z
??0__non_rtti_object@std@@QAE@PBD@Z
??0bad_alloc@std@@QAE@ABV01@@Z
??0bad_alloc@std@@QAE@PBD@Z
??0bad_cast@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@PBD@Z
??0bad_exception@std@@QAE@ABV01@@Z
??0bad_exception@std@@QAE@PBD@Z
??0bad_typeid@std@@QAE@ABV01@@Z
??0bad_typeid@std@@QAE@PBD@Z
??0codecvt_base@std@@QAE@I@Z
??0ctype_base@std@@QAE@I@Z
??0domain_error@std@@QAE@ABV01@@Z
??0domain_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0facet@locale@std@@IAE@I@Z
??0ios_base@std@@IAE@XZ
??0ios_base@std@@QAE@ABV01@@Z
??0length_error@std@@QAE@ABV01@@Z
??0length_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0locale@std@@AAE@PAV_Locimp@01@@Z
??0locale@std@@QAE@ABV01@0H@Z
??0locale@std@@QAE@ABV01@@Z
??0locale@std@@QAE@ABV01@PBDH@Z
??0locale@std@@QAE@PBDH@Z
??0locale@std@@QAE@W4_Uninitialized@1@@Z
??0locale@std@@QAE@XZ
??0logic_error@std@@QAE@ABV01@@Z
??0logic_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0messages_base@std@@QAE@I@Z
??0money_base@std@@QAE@I@Z
??0ostrstream@std@@QAE@PADHH@Z
??0out_of_range@std@@QAE@ABV01@@Z
??0out_of_range@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0overflow_error@std@@QAE@ABV01@@Z
??0overflow_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0range_error@std@@QAE@ABV01@@Z
??0range_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0runtime_error@std@@QAE@ABV01@@Z
??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0strstream@std@@QAE@PADHH@Z
??0time_base@std@@QAE@I@Z
??0underflow_error@std@@QAE@ABV01@@Z
??0underflow_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??1?$_Mpunct@D@std@@UAE@XZ
??1?$_Mpunct@G@std@@UAE@XZ
??1?$basic_filebuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_filebuf@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_fstream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_fstream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_ifstream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ifstream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_istream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??1?$basic_istringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@UAE@XZ
??1?$basic_ofstream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ofstream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??1?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@UAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??1?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??1?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@UAE@XZ
??1?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??1?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@UAE@XZ
??1?$codecvt@DDH@std@@UAE@XZ
??1?$codecvt@GDH@std@@UAE@XZ
??1?$collate@D@std@@UAE@XZ
??1?$collate@G@std@@UAE@XZ
??1?$ctype@D@std@@UAE@XZ
??1?$ctype@G@std@@UAE@XZ
??1?$messages@D@std@@UAE@XZ
??1?$messages@G@std@@UAE@XZ
??1?$money_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@UAE@XZ
??1?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@UAE@XZ
??1?$money_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@UAE@XZ
??1?$money_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@UAE@XZ
??1?$moneypunct@D$00@std@@UAE@XZ
??1?$moneypunct@D$0A@@std@@UAE@XZ
??1?$moneypunct@G$00@std@@UAE@XZ
??1?$moneypunct@G$0A@@std@@UAE@XZ
??1?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@UAE@XZ
??1?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@UAE@XZ
??1?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@UAE@XZ
??1?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@UAE@XZ
??1?$numpunct@D@std@@UAE@XZ
??1?$numpunct@G@std@@UAE@XZ
??1?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@UAE@XZ
??1?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@UAE@XZ
??1?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@UAE@XZ
??1?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@UAE@XZ
??1Init@ios_base@std@@QAE@XZ
??1_Locinfo@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
??1_Timevec@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1__non_rtti_object@std@@UAE@XZ
??1bad_alloc@std@@UAE@XZ
??1bad_cast@std@@UAE@XZ
??1bad_exception@std@@UAE@XZ
??1bad_typeid@std@@UAE@XZ
??1codecvt_base@std@@UAE@XZ
??1ctype_base@std@@UAE@XZ
??1domain_error@std@@UAE@XZ
??1facet@locale@std@@UAE@XZ
??1ios_base@std@@UAE@XZ
??1istrstream@std@@UAE@XZ

Sections

.text
Size: 172KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 204KB - Virtual size: 201KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ComDlls/LinkSimulate.dll
.dll regsvr32 windows:4 windows x86 arch:x86

d610efff26feeb97f00e3f202df7a666

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\thunder_doc\389Project\LinkSimulate\LinkSimulate\Release\LinkSimulate.pdb

Imports

kernel32

SetThreadLocale
DeleteCriticalSection
RaiseException
EnterCriticalSection
InitializeCriticalSection
lstrlenW
GetLastError
GetModuleFileNameW
GetThreadLocale
InterlockedIncrement
InterlockedDecrement
lstrlenA
LockResource
FindResourceExW
LocalFree
GetModuleHandleW
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
lstrcmpiW
LeaveCriticalSection
FreeLibrary
GetStringTypeW
GetStringTypeA
LoadLibraryA
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
GetVersionExA
InterlockedExchange
GetACP
GetLocaleInfoA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
VirtualFree
VirtualAlloc
HeapCreate
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
Sleep
GetCPInfo
GetOEMCP
LCMapStringA
WideCharToMultiByte
LCMapStringW
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW

user32

CharNextW
UnregisterClassA

advapi32

RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegEnumKeyExW
RegOpenKeyExW

ole32

CoCreateInstance
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
StringFromGUID2
CLSIDFromProgID
OleRun
CLSIDFromString

oleaut32

SysStringByteLen
SysAllocStringByteLen
LoadRegTypeLi
SysFreeString
LoadTypeLi
SysAllocString
UnRegisterTypeLi
SysStringLen
RegisterTypeLi
VarUI4FromStr
VariantClear
GetErrorInfo

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 84KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ComDlls/TDAtOnce.dll
.dll regsvr32 windows:4 windows x86 arch:x86

1cfbf88466592bdb45d5036616c3461c

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

3d:c3:09:c2:ed:0e:e4:35:09:fc:8b:d8:68:bc:4c:fd
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

26/04/2006, 00:00

Not After

31/05/2009, 23:59

Subject

CN=ShenZhen Thunder Networking Technologies Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Department of System Engineering,O=ShenZhen Thunder Networking Technologies Ltd.,L=ShenZhen,ST=GuangDong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce.pdb

Imports

kernel32

GlobalUnlock
GlobalLock
OutputDebugStringA
FreeLibrary
SizeofResource
LoadResource
LoadLibraryExA
GetModuleHandleA
GlobalFree
GlobalHandle
LockResource
GetVersionExA
GetProcAddress
LoadLibraryA
GetPrivateProfileStringA
InterlockedExchange
GetVersion
CompareStringA
CompareStringW
lstrcmpiW
GetEnvironmentVariableA
GetEnvironmentVariableW
GetStringTypeExA
GetStringTypeExW
WritePrivateProfileStringA
GetUserDefaultLangID
DisableThreadLibraryCalls
CopyFileA
MoveFileA
DeleteFileA
SetEnvironmentVariableA
FlushFileBuffers
CloseHandle
CreateFileA
GetTimeZoneInformation
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetConsoleMode
MulDiv
SetFilePointer
GetLocaleInfoW
SetConsoleCtrlHandler
IsValidCodePage
GetOEMCP
GetCPInfo
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
Sleep
HeapSize
GetCurrentThread
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStdHandle
WriteFile
ExitProcess
FatalAppExitA
HeapCreate
HeapDestroy
GetCommandLineA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
HeapReAlloc
RtlUnwind
VirtualQuery
GetSystemInfo
VirtualProtect
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
GetThreadLocale
GetLocaleInfoA
GetACP
lstrcmpA
GetModuleFileNameA
IsDBCSLeadByte
InterlockedDecrement
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetPrivateProfileIntA
MultiByteToWideChar
FindResourceA
GlobalAlloc
lstrcpyA
GetCurrentProcess
FlushInstructionCache
lstrcmpiA
lstrlenA
GetLastError
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
lstrlenW
WideCharToMultiByte
GetConsoleCP

user32

MoveWindow
GetSysColor
CharUpperBuffA
CharLowerBuffA
DefWindowProcA
IsWindow
SetParent
KillTimer
SetTimer
IsWindowVisible
ShowWindow
GetWindowLongA
SetWindowLongA
CharNextA
DestroyMenu
SetWindowContextHelpId
SetWindowPos
GetClientRect
SendDlgItemMessageA
MapDialogRect
GetSubMenu
GetCursorPos
wsprintfA
TrackPopupMenu
LoadMenuA
LoadImageA
SetRectEmpty
GetWindowRect
MonitorFromPoint
GetMonitorInfoA
UnregisterClassA
CharUpperW
CharUpperA
CharLowerW
CharLowerA
FindWindowExA
SendMessageTimeoutA
WindowFromPoint
CreateDialogIndirectParamA
RegisterWindowMessageA
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
CreateAcceleratorTableA
CreateWindowExA
RegisterClassExA
LoadCursorA
GetClassInfoExA
SendMessageA
GetDesktopWindow
SetFocus
GetFocus
GetWindow
DestroyAcceleratorTable
BeginPaint
EndPaint
CallWindowProcA
DestroyWindow
FillRect
ReleaseCapture
GetClassNameA
GetDlgItem
GetParent
IsChild
SetCapture
RedrawWindow
InvalidateRgn
InvalidateRect
ReleaseDC
GetDC
ScreenToClient
ClientToScreen

gdi32

GetStockObject
GetObjectA
CreateSolidBrush
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
DeleteDC
SelectObject
DeleteObject
CreatePatternBrush
GetDeviceCaps

advapi32

RegOpenKeyA
RegQueryValueExA
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA

ole32

CoCreateInstance
CoTaskMemRealloc
CoInitialize
CoUninitialize
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
CoTaskMemAlloc
CLSIDFromString
CLSIDFromProgID
CoGetClassObject
OleLockRunning
StringFromGUID2
CoTaskMemFree

oleaut32

SysAllocStringLen
VarUI4FromStr
SysStringByteLen
SysAllocStringByteLen
SysAllocString
VariantChangeType
VariantClear
VariantInit
VarBstrCmp
SysFreeString
VarBstrCat
DispCallFunc
OleCreateFontIndirect
LoadTypeLi
SysStringLen
LoadRegTypeLi

shlwapi

UrlGetPartA
UrlCombineA
UrlIsA
StrStrIA
StrChrA
PathCombineA
PathRemoveFileSpecA
PathFileExistsA
StrStrA

comctl32

InitCommonControlsEx

urlmon

CoInternetGetSession

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
RegisterServerDirect

Sections

.text
Size: 244KB - Virtual size: 243KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ComDlls/TDAtOnce_Now.dll
.dll regsvr32 windows:4 windows x86 arch:x86

1cfbf88466592bdb45d5036616c3461c

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

3d:c3:09:c2:ed:0e:e4:35:09:fc:8b:d8:68:bc:4c:fd
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

26/04/2006, 00:00

Not After

31/05/2009, 23:59

Subject

CN=ShenZhen Thunder Networking Technologies Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Department of System Engineering,O=ShenZhen Thunder Networking Technologies Ltd.,L=ShenZhen,ST=GuangDong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Program Files\Thunder Network\Thunder\ComDlls\TDAtOnce.pdb

Imports

kernel32

GlobalUnlock
GlobalLock
OutputDebugStringA
FreeLibrary
SizeofResource
LoadResource
LoadLibraryExA
GetModuleHandleA
GlobalFree
GlobalHandle
LockResource
GetVersionExA
GetProcAddress
LoadLibraryA
GetPrivateProfileStringA
InterlockedExchange
GetVersion
CompareStringA
CompareStringW
lstrcmpiW
GetEnvironmentVariableA
GetEnvironmentVariableW
GetStringTypeExA
GetStringTypeExW
WritePrivateProfileStringA
GetUserDefaultLangID
DisableThreadLibraryCalls
CopyFileA
MoveFileA
DeleteFileA
SetEnvironmentVariableA
FlushFileBuffers
CloseHandle
CreateFileA
GetTimeZoneInformation
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetConsoleMode
MulDiv
SetFilePointer
GetLocaleInfoW
SetConsoleCtrlHandler
IsValidCodePage
GetOEMCP
GetCPInfo
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
Sleep
HeapSize
GetCurrentThread
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStdHandle
WriteFile
ExitProcess
FatalAppExitA
HeapCreate
HeapDestroy
GetCommandLineA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
HeapReAlloc
RtlUnwind
VirtualQuery
GetSystemInfo
VirtualProtect
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
GetThreadLocale
GetLocaleInfoA
GetACP
lstrcmpA
GetModuleFileNameA
IsDBCSLeadByte
InterlockedDecrement
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetPrivateProfileIntA
MultiByteToWideChar
FindResourceA
GlobalAlloc
lstrcpyA
GetCurrentProcess
FlushInstructionCache
lstrcmpiA
lstrlenA
GetLastError
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
lstrlenW
WideCharToMultiByte
GetConsoleCP

user32

MoveWindow
GetSysColor
CharUpperBuffA
CharLowerBuffA
DefWindowProcA
IsWindow
SetParent
KillTimer
SetTimer
IsWindowVisible
ShowWindow
GetWindowLongA
SetWindowLongA
CharNextA
DestroyMenu
SetWindowContextHelpId
SetWindowPos
GetClientRect
SendDlgItemMessageA
MapDialogRect
GetSubMenu
GetCursorPos
wsprintfA
TrackPopupMenu
LoadMenuA
LoadImageA
SetRectEmpty
GetWindowRect
MonitorFromPoint
GetMonitorInfoA
UnregisterClassA
CharUpperW
CharUpperA
CharLowerW
CharLowerA
FindWindowExA
SendMessageTimeoutA
WindowFromPoint
CreateDialogIndirectParamA
RegisterWindowMessageA
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
CreateAcceleratorTableA
CreateWindowExA
RegisterClassExA
LoadCursorA
GetClassInfoExA
SendMessageA
GetDesktopWindow
SetFocus
GetFocus
GetWindow
DestroyAcceleratorTable
BeginPaint
EndPaint
CallWindowProcA
DestroyWindow
FillRect
ReleaseCapture
GetClassNameA
GetDlgItem
GetParent
IsChild
SetCapture
RedrawWindow
InvalidateRgn
InvalidateRect
ReleaseDC
GetDC
ScreenToClient
ClientToScreen

gdi32

GetStockObject
GetObjectA
CreateSolidBrush
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
DeleteDC
SelectObject
DeleteObject
CreatePatternBrush
GetDeviceCaps

advapi32

RegOpenKeyA
RegQueryValueExA
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA

ole32

CoCreateInstance
CoTaskMemRealloc
CoInitialize
CoUninitialize
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
CoTaskMemAlloc
CLSIDFromString
CLSIDFromProgID
CoGetClassObject
OleLockRunning
StringFromGUID2
CoTaskMemFree

oleaut32

SysAllocStringLen
VarUI4FromStr
SysStringByteLen
SysAllocStringByteLen
SysAllocString
VariantChangeType
VariantClear
VariantInit
VarBstrCmp
SysFreeString
VarBstrCat
DispCallFunc
OleCreateFontIndirect
LoadTypeLi
SysStringLen
LoadRegTypeLi

shlwapi

UrlGetPartA
UrlCombineA
UrlIsA
StrStrIA
StrChrA
PathCombineA
PathRemoveFileSpecA
PathFileExistsA
StrStrA

comctl32

InitCommonControlsEx

urlmon

CoInternetGetSession

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
RegisterServerDirect

Sections

.text
Size: 244KB - Virtual size: 243KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ComDlls/TGSearch.dll
.dll regsvr32 windows:4 windows x86 arch:x86

22b894d60c31d921826904ca3d98219d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapDestroy
FreeLibrary
InterlockedIncrement
InterlockedDecrement
GetModuleHandleA
GetShortPathNameA
MultiByteToWideChar
lstrlenW
GetModuleFileNameA
lstrlenA
DisableThreadLibraryCalls
GetLastError
DeleteCriticalSection
WideCharToMultiByte
LoadLibraryA
GetProcAddress
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
WriteFile
HeapFree
HeapAlloc
HeapReAlloc
GetCommandLineA
GetVersion
ExitProcess
GetCPInfo
GetACP
GetOEMCP
GetEnvironmentVariableA
GetVersionExA
HeapCreate
VirtualFree
VirtualAlloc
RtlUnwind
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW

user32

FindWindowExA
wsprintfA
keybd_event
SetFocus
SetWindowTextA
CharNextA
GetForegroundWindow
IsWindowVisible

advapi32

RegQueryInfoKeyA
RegEnumKeyExA
RegOpenKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegEnumValueA

ole32

CoTaskMemFree
StringFromIID
CoTaskMemAlloc
CoTaskMemRealloc

oleaut32

SysStringLen
LoadRegTypeLi
VarUI4FromStr
SysFreeString

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ComDlls/ThunderAgent.dll
.dll regsvr32 windows:4 windows x86 arch:x86

f9c0ebae14ff883305cb97050fcbaf18

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

PathFileExistsA
PathCombineA
PathRemoveFileSpecA
SHDeleteKeyA
PathMatchSpecA
SHGetValueA

kernel32

GetThreadLocale
GetVersionExA
MultiByteToWideChar
WideCharToMultiByte
RaiseException
InitializeCriticalSection
DeleteCriticalSection
lstrlenA
lstrlenW
UnmapViewOfFile
lstrcatA
CloseHandle
MapViewOfFile
GetLastError
CreateFileMappingA
GetCurrentThreadId
lstrcpyA
OutputDebugStringA
EnterCriticalSection
LeaveCriticalSection
lstrcmpiA
GetModuleFileNameA
GetLocaleInfoA
GetProcAddress
LoadLibraryA
CopyFileA
MoveFileA
DeleteFileA
InterlockedIncrement
InterlockedDecrement
lstrcpynA
IsDBCSLeadByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetModuleHandleA
LCMapStringW
GetACP
InterlockedExchange
UnhandledExceptionFilter
WriteFile
QueryPerformanceCounter
GetTickCount
IsBadReadPtr
GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
LCMapStringA
GetStringTypeW
GetStringTypeA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
IsBadCodePtr
LocalFree
HeapFree
RtlUnwind
HeapAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapReAlloc
GetCommandLineA
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
HeapSize
GetOEMCP
GetCPInfo
SetHandleCount

user32

FindWindowA
CharNextA
wsprintfA
MessageBoxA
SendMessageA

advapi32

RegCreateKeyExA
RegEnumKeyExA
RegQueryInfoKeyA
RegDeleteValueA
RegDeleteKeyA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

shell32

ShellExecuteA

ole32

StringFromIID
CoCreateInstance
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc

oleaut32

LoadTypeLi
LoadRegTypeLi
VarUI4FromStr
SysStringLen
SysAllocStringLen
VariantClear
SysFreeString

wininet

InternetGetCookieA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
RegisterServerDirect

Sections

.text
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ComDlls/ThunderAgent_Now.dll
.dll regsvr32 windows:4 windows x86 arch:x86

f9c0ebae14ff883305cb97050fcbaf18

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

PathFileExistsA
PathCombineA
PathRemoveFileSpecA
SHDeleteKeyA
PathMatchSpecA
SHGetValueA

kernel32

GetThreadLocale
GetVersionExA
MultiByteToWideChar
WideCharToMultiByte
RaiseException
InitializeCriticalSection
DeleteCriticalSection
lstrlenA
lstrlenW
UnmapViewOfFile
lstrcatA
CloseHandle
MapViewOfFile
GetLastError
CreateFileMappingA
GetCurrentThreadId
lstrcpyA
OutputDebugStringA
EnterCriticalSection
LeaveCriticalSection
lstrcmpiA
GetModuleFileNameA
GetLocaleInfoA
GetProcAddress
LoadLibraryA
CopyFileA
MoveFileA
DeleteFileA
InterlockedIncrement
InterlockedDecrement
lstrcpynA
IsDBCSLeadByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetModuleHandleA
LCMapStringW
GetACP
InterlockedExchange
UnhandledExceptionFilter
WriteFile
QueryPerformanceCounter
GetTickCount
IsBadReadPtr
GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
LCMapStringA
GetStringTypeW
GetStringTypeA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
IsBadCodePtr
LocalFree
HeapFree
RtlUnwind
HeapAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapReAlloc
GetCommandLineA
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
HeapSize
GetOEMCP
GetCPInfo
SetHandleCount

user32

FindWindowA
CharNextA
wsprintfA
MessageBoxA
SendMessageA

advapi32

RegCreateKeyExA
RegEnumKeyExA
RegQueryInfoKeyA
RegDeleteValueA
RegDeleteKeyA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

shell32

ShellExecuteA

ole32

StringFromIID
CoCreateInstance
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc

oleaut32

LoadTypeLi
LoadRegTypeLi
VarUI4FromStr
SysStringLen
SysAllocStringLen
VariantClear
SysFreeString

wininet

InternetGetCookieA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
RegisterServerDirect

Sections

.text
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ComDlls/XunLeiBHO.dll
.dll regsvr32 windows:4 windows x86 arch:x86

d3e20c15711888b19ca5a617862484d5

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

3d:c3:09:c2:ed:0e:e4:35:09:fc:8b:d8:68:bc:4c:fd
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

26/04/2006, 00:00

Not After

31/05/2009, 23:59

Subject

CN=ShenZhen Thunder Networking Technologies Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Department of System Engineering,O=ShenZhen Thunder Networking Technologies Ltd.,L=ShenZhen,ST=GuangDong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wininet

InternetGetCookieA

kernel32

InterlockedDecrement
MultiByteToWideChar
InterlockedIncrement
lstrlenA
GetFileAttributesA
InterlockedExchange
GetLastError
lstrlenW
lstrcmpiA
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
WritePrivateProfileStringA
GetPrivateProfileStringA
FreeLibrary
GetProcAddress
LoadLibraryA
GetPrivateProfileIntA
OutputDebugStringA
lstrcpyA
CloseHandle
WideCharToMultiByte
MapViewOfFile
OpenFileMappingA
WaitForSingleObject
GetCurrentThreadId
CreateFileMappingA
CreateEventA
TerminateThread
SetEvent
ResumeThread
SetThreadPriority
CreateThread
ResetEvent
GetLocalTime
DisableThreadLibraryCalls
GetModuleFileNameA
RemoveDirectoryA
WriteFile
CreateFileA
DeleteFileA
CreateDirectoryA
CopyFileA
MoveFileA
VirtualFree
FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
FindResourceExA
FindResourceA
LoadResource
LockResource
SizeofResource
FindFirstFileA
ExitProcess
FindClose
HeapCreate
UnmapViewOfFile
WriteConsoleA
SetStdHandle
GetConsoleMode
GetConsoleCP
SetLastError
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
SetFilePointer
GetStringTypeW
GetStringTypeA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
LCMapStringW
LCMapStringA
Sleep
GetStdHandle
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
RtlUnwind
VirtualAlloc
GetModuleHandleA
TerminateProcess

user32

CharUpperBuffA
UnregisterClassA
wsprintfA

advapi32

RegDeleteKeyA
RegOpenKeyA
RegCreateKeyA
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey

ole32

CoCreateInstance
CLSIDFromProgID
CoGetMalloc
CLSIDFromString
IIDFromString

oleaut32

SysAllocStringLen
SysStringByteLen
SysAllocStringByteLen
SysAllocString
VariantClear
VariantInit
SysFreeString
VarBstrCmp
SysStringLen

shlwapi

SHDeleteValueA
PathRemoveFileSpecA
PathCombineA
SHDeleteKeyA
SHSetValueA
SHGetValueA

ws2_32

htons
WSAStartup
WSACreateEvent
WSACleanup
closesocket
WSASetLastError
socket
WSAEventSelect
gethostbyname
connect
WSAResetEvent
WSAEnumNetworkEvents
WSAWaitForMultipleEvents
WSAGetLastError
send

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
RegisterServerDirect

Sections

.text
Size: 100KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ComDlls/skin/DOWNLOAD_NORMAL.bmp
ComDlls/skin/DOWNLOAD_PRESS.BMP
ComDlls/skin/FB_BG.bmp
ComDlls/skin/MENU_NORMAL.bmp
ComDlls/skin/MENU_PRESS.bmp
ComDlls/xunleiBHO_Now.dll
.dll regsvr32 windows:4 windows x86 arch:x86

d3e20c15711888b19ca5a617862484d5

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

3d:c3:09:c2:ed:0e:e4:35:09:fc:8b:d8:68:bc:4c:fd
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

26/04/2006, 00:00

Not After

31/05/2009, 23:59

Subject

CN=ShenZhen Thunder Networking Technologies Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Department of System Engineering,O=ShenZhen Thunder Networking Technologies Ltd.,L=ShenZhen,ST=GuangDong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wininet

InternetGetCookieA

kernel32

InterlockedDecrement
MultiByteToWideChar
InterlockedIncrement
lstrlenA
GetFileAttributesA
InterlockedExchange
GetLastError
lstrlenW
lstrcmpiA
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
WritePrivateProfileStringA
GetPrivateProfileStringA
FreeLibrary
GetProcAddress
LoadLibraryA
GetPrivateProfileIntA
OutputDebugStringA
lstrcpyA
CloseHandle
WideCharToMultiByte
MapViewOfFile
OpenFileMappingA
WaitForSingleObject
GetCurrentThreadId
CreateFileMappingA
CreateEventA
TerminateThread
SetEvent
ResumeThread
SetThreadPriority
CreateThread
ResetEvent
GetLocalTime
DisableThreadLibraryCalls
GetModuleFileNameA
RemoveDirectoryA
WriteFile
CreateFileA
DeleteFileA
CreateDirectoryA
CopyFileA
MoveFileA
VirtualFree
FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
FindResourceExA
FindResourceA
LoadResource
LockResource
SizeofResource
FindFirstFileA
ExitProcess
FindClose
HeapCreate
UnmapViewOfFile
WriteConsoleA
SetStdHandle
GetConsoleMode
GetConsoleCP
SetLastError
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
SetFilePointer
GetStringTypeW
GetStringTypeA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
LCMapStringW
LCMapStringA
Sleep
GetStdHandle
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
RtlUnwind
VirtualAlloc
GetModuleHandleA
TerminateProcess

user32

CharUpperBuffA
UnregisterClassA
wsprintfA

advapi32

RegDeleteKeyA
RegOpenKeyA
RegCreateKeyA
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey

ole32

CoCreateInstance
CLSIDFromProgID
CoGetMalloc
CLSIDFromString
IIDFromString

oleaut32

SysAllocStringLen
SysStringByteLen
SysAllocStringByteLen
SysAllocString
VariantClear
VariantInit
SysFreeString
VarBstrCmp
SysStringLen

shlwapi

SHDeleteValueA
PathRemoveFileSpecA
PathCombineA
SHDeleteKeyA
SHSetValueA
SHGetValueA

ws2_32

htons
WSAStartup
WSACreateEvent
WSACleanup
closesocket
WSASetLastError
socket
WSAEventSelect
gethostbyname
connect
WSAResetEvent
WSAEnumNetworkEvents
WSAWaitForMultipleEvents
WSAGetLastError
send

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
RegisterServerDirect

Sections

.text
Size: 100KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Components/Community/XLCommunity.dll
.dll regsvr32 windows:4 windows x86 arch:x86

648dceca8064a911c4bab15e1d6da555

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

PathIsDirectoryA
PathIsUNCA
PathIsRootA
PathFileExistsA
PathFindFileNameA

wininet

InternetOpenUrlA
InternetTimeFromSystemTime
InternetTimeToSystemTime
InternetReadFile
InternetCloseHandle
HttpQueryInfoA
InternetSetCookieA
InternetOpenA

ws2_32

socket
closesocket
connect
inet_addr
ntohl
ntohs
WSASocketA
sendto
recvfrom
WSAStartup
gethostbyname
htons
send
recv
setsockopt
htonl

msimg32

TransparentBlt

imagehlp

MakeSureDirectoryPathExists

mfc42

ord3721
ord3402
ord324
ord2135
ord2302
ord665
ord4202
ord6385
ord5572
ord5442
ord2915
ord3318
ord353
ord926
ord6927
ord4234
ord4299
ord6197
ord4710
ord2688
ord5981
ord6215
ord4277
ord2764
ord3286
ord3619
ord3626
ord2414
ord1641
ord2860
ord3742
ord6650
ord6591
ord6807
ord6857
ord6823
ord6855
ord6832
ord6859
ord6867
ord6847
ord6839
ord6846
ord6858
ord6816
ord6815
ord6812
ord6845
ord6856
ord6835
ord4589
ord4588
ord4899
ord4370
ord4892
ord6817
ord5076
ord4340
ord4347
ord4720
ord4889
ord4531
ord4545
ord4543
ord4526
ord4529
ord4524
ord4963
ord4960
ord4108
ord6054
ord5281
ord3748
ord1725
ord5260
ord6614
ord4432
ord6514
ord4275
ord2086
ord6648
ord6282
ord6283
ord2370
ord6199
ord6880
ord3092
ord6334
ord4287
ord4284
ord6453
ord3610
ord2575
ord4396
ord3574
ord656
ord2289
ord2846
ord1200
ord2727
ord6467
ord2730
ord2729
ord4003
ord3353
ord4622
ord3579
ord614
ord290
ord2582
ord4402
ord3370
ord3640
ord693
ord2463
ord6605
ord6696
ord1651
ord3693
ord640
ord2450
ord4133
ord4297
ord6172
ord5788
ord472
ord5789
ord1640
ord323
ord1601
ord1194
ord3394
ord2587
ord4406
ord3729
ord804
ord2380
ord4267
ord755
ord5678
ord5875
ord5736
ord470
ord2645
ord3874
ord3005
ord465
ord466
ord2241
ord1238
ord940
ord3258
ord354
ord6928
ord1979
ord5186
ord5683
ord2448
ord5834
ord3903
ord2044
ord6442
ord1233
ord6597
ord6800
ord6658
ord6241
ord6814
ord6803
ord654
ord6140
ord341
ord5603
ord5858
ord2803
ord4204
ord2411
ord2023
ord4218
ord2578
ord4398
ord3582
ord801
ord616
ord541
ord3988
ord3573
ord4129
ord2763
ord5787
ord283
ord816
ord562
ord2919
ord3597
ord6358
ord384
ord2358
ord2298
ord1642
ord2642
ord6930
ord6654
ord4123
ord5710
ord6478
ord3571
ord2405
ord5785
ord6785
ord1140
ord4476
ord603
ord273
ord275
ord3908
ord613
ord289
ord3797
ord1193
ord1151
ord2580
ord4400
ord3630
ord682
ord4243
ord6242
ord6762
ord6007
ord3998
ord3910
ord3273
ord729
ord2504
ord438
ord1706
ord430
ord1175
ord2100
ord6889
ord6676
ord3089
ord1997
ord5465
ord798
ord5194
ord533
ord1105
ord4023
ord6663
ord6380
ord4341
ord4349
ord4723
ord5240
ord3712
ord784
ord517
ord4262
ord6131
ord6216
ord2116
ord4464
ord5037
ord3754
ord4508
ord1949
ord4034
ord1228
ord2452
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord4079
ord4698
ord5307
ord5289
ord5714
ord3738
ord815
ord561
ord3953
ord5500
ord1134
ord2725
ord1132
ord1131
ord6354
ord1799
ord446
ord743
ord5431
ord3348
ord4351
ord2989
ord619
ord2625
ord297
ord2033
ord4226
ord1113
ord1114
ord3443
ord3786
ord6379
ord2753
ord3584
ord803
ord543
ord5620
ord1081
ord2917
ord961
ord6312
ord4425
ord6010
ord5773
ord2601
ord3180
ord3183
ord3176
ord3507
ord3614
ord2393
ord1990
ord5187
ord700
ord715
ord398
ord415
ord913
ord4189
ord6929
ord5953
ord3996
ord3301
ord6907
ord809
ord1088
ord2122
ord556
ord6128
ord5148
ord3752
ord3021
ord4224
ord536
ord3708
ord781
ord4130
ord6200
ord3061
ord6134
ord6136
ord3767
ord3706
ord4278
ord2111
ord6070
ord3763
ord1756
ord4219
ord2581
ord1771
ord6366
ord2413
ord2024
ord4401
ord3639
ord692
ord6662
ord5873
ord3698
ord765
ord6883
ord6143
ord6779
ord6194
ord4333
ord5782
ord2152
ord3317
ord5280
ord1775
ord6052
ord4998
ord4853
ord4376
ord5265
ord1265
ord1146
ord1644
ord2863
ord6270
ord2438
ord3654
ord2584
ord4220
ord4774
ord2864
ord3914
ord686
ord2514
ord6905
ord2859
ord2754
ord4538
ord4506
ord2379
ord1168
ord2862
ord2078
ord4160
ord4271
ord939
ord1199
ord941
ord535
ord2818
ord924
ord922
ord3287
ord858
ord4000
ord6008
ord795
ord609
ord641
ord567
ord818
ord810
ord3733
ord4424
ord4627
ord4080
ord3079
ord3825
ord3831
ord3830
ord3398
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5277
ord2124
ord2446
ord5261
ord1727
ord5065
ord3749
ord6376
ord2055
ord2648
ord4441
ord4837
ord3798
ord5290
ord4353
ord6374
ord5163
ord2385
ord5241
ord4407
ord1776
ord4078
ord6055
ord537
ord539
ord6877
ord861
ord860
ord2614
ord823
ord2107
ord2841
ord6383
ord5440
ord6394
ord5450
ord3663
ord825
ord540
ord800
ord269

msvcrt

islower
wcslen
fclose
fseek
fread
fopen
fwrite
_mbsrchr
_mbsnbcat
_ismbcalpha
isupper
_mbstok
abs
_atoi64
atof
_mbsnbcpy
_strlwr
_beginthreadex
_snprintf
strstr
_mbsnbicmp
printf
_CxxThrowException
realloc
isalnum
strchr
sprintf
_ftol
strcmp
_purecall
free
tolower
_mbscmp
isalpha
isdigit
strncpy
strncmp
localtime
gmtime
_access
time
mktime
difftime
toupper
atoi
strlen
memcmp
_mbsicmp
strcpy
memcpy
memmove
_wtoi
memset
__CxxFrameHandler
_strnicmp
_mbsinc
_ismbcspace
_mbsicoll
malloc
wcstombs
mbstowcs
memchr
??1type_info@@UAE@XZ
__dllonexit
_onexit
_except_handler3
?terminate@@YAXXZ
_initterm
_adjust_fdiv
wcscmp
_wcsicmp
_itoa

kernel32

MultiByteToWideChar
GetModuleHandleA
lstrcpyW
SystemTimeToFileTime
DeleteFileA
lstrcmpiA
GetProcessHeap
HeapFree
HeapReAlloc
HeapAlloc
WideCharToMultiByte
CreateDirectoryA
GetTempPathA
FindClose
FindFirstFileA
GetTempFileNameA
LocalFree
GetWindowsDirectoryA
CreateSemaphoreA
ReleaseSemaphore
LocalAlloc
lstrlenA
CopyFileA
WritePrivateProfileStringA
InterlockedExchange
WaitForSingleObject
GetLocalTime
lstrcmpA
GetTickCount
lstrcatA
GlobalAlloc
SystemTimeToTzSpecificLocalTime
GetSystemTime
GlobalUnlock
GlobalLock
GlobalSize
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
lstrcpyA
InterlockedDecrement
InterlockedIncrement
GetPrivateProfileIntA
OutputDebugStringA
TerminateThread
WaitForMultipleObjects
ResumeThread
CreateThread
CreateEventA
GetFullPathNameA
GetPrivateProfileStringA
FreeLibrary
GetProcAddress
LoadLibraryA
CloseHandle
SetEvent
MoveFileA
GetCurrentThreadId
ResetEvent
WritePrivateProfileSectionA
GetFileAttributesA
GlobalFree
CreateFileA
GetModuleFileNameA

user32

GetClassLongA
SetClassLongA
LoadStringA
SetParent
ReleaseCapture
SetCapture
GetWindowTextA
MessageBoxA
DeleteMenu
AppendMenuA
ModifyMenuA
FrameRect
SetWindowPos
SetRectEmpty
SendMessageA
EnableWindow
PostMessageA
UpdateWindow
UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
SetFocus
GetFocus
SetWindowLongA
LoadBitmapA
GetSysColorBrush
FillRect
GetDC
ReleaseDC
InflateRect
DrawFrameControl
GetDesktopWindow
GetMenuStringA
GetSystemMetrics
ShowCursor
GetKeyState
DestroyCursor
RegisterWindowMessageA
CopyIcon
SystemParametersInfoA
RegisterClassA
DefWindowProcA
LoadIconA
DrawFocusRect
OffsetRect
SetRect
DestroyIcon
RegisterClipboardFormatA
KillTimer
TrackMouseEvent
PtInRect
CopyRect
CreatePopupMenu
IsWindow
HideCaret
EqualRect
SetWindowRgn
FlashWindowEx
RegisterHotKey
UnregisterHotKey
SetForegroundWindow
IsIconic
EnumChildWindows
GetWindow
DrawTextA
WindowFromPoint
GetWindowRect
SetTimer
IntersectRect
IsRectEmpty
GetCursor
GetWindowLongA
GetClientRect
LoadMenuA
GetSubMenu
EnableMenuItem
ClientToScreen
GetMenuItemCount
GetMenuItemInfoA
SetMenuItemInfoA
InvalidateRect
GetParent
GetCursorPos
ScreenToClient
LoadCursorA
SetCursor
GetSysColor
DrawIconEx
LoadImageA
IsWindowVisible
MapWindowPoints

gdi32

RoundRect
GetTextExtentExPointA
CreatePen
RestoreDC
BitBlt
SaveDC
CreateRectRgnIndirect
CreateFontA
SetStretchBltMode
CreateCompatibleDC
SelectObject
StretchBlt
GetTextMetricsA
GetStockObject
Rectangle
DeleteObject
GetCurrentObject
GetTextColor
GetBkColor
SetROP2
GetTextExtentPoint32W
SetBkMode
SetTextColor
TextOutA
MoveToEx
LineTo
DeleteDC
CreateRoundRectRgn
CreateSolidBrush
SetBkColor
CreateBrushIndirect
CreatePenIndirect
GetTextExtentPoint32A
GetObjectA
SetViewportOrgEx
CreateFontIndirectA
CreateCompatibleBitmap

advapi32

RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

shell32

SHGetSpecialFolderPathA
ShellExecuteA
SHGetFileInfoA

comctl32

ImageList_LoadImageA
ImageList_Destroy
ImageList_Draw
ImageList_GetImageInfo
_TrackMouseEvent

ole32

CoCreateInstance
CoInitialize
CreateStreamOnHGlobal
RevokeDragDrop
RegisterDragDrop
CoUninitialize

olepro32

ord251

oleaut32

SysStringLen
SysAllocString
SysFreeString
VariantClear
SysAllocStringLen

msvcp60

?_Copy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?_Xran@std@@YAXXZ
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?_Xlen@std@@YAXXZ
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer

Sections

.text
Size: 688KB - Virtual size: 686KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 160KB - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 644KB - Virtual size: 643KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Components/Community/faces/-1.gif
.gif
Components/Community/faces/-2.gif
.gif
Components/Community/faces/0.gif
.gif
Components/Community/faces/1.gif
.gif
Components/Community/faces/10.gif
.gif
Components/Community/faces/11.gif
.gif
Components/Community/faces/12.gif
.gif
Components/Community/faces/13.gif
.gif
Components/Community/faces/14.gif
.gif
Components/Community/faces/15.gif
.gif
Components/Community/faces/16.gif
.gif
Components/Community/faces/17.gif
.gif
Components/Community/faces/18.gif
.gif
Components/Community/faces/19.gif
.gif
Components/Community/faces/2.gif
.gif
Components/Community/faces/20.gif
.gif
Components/Community/faces/21.gif
.gif
Components/Community/faces/22.gif
.gif
Components/Community/faces/23.gif
.gif
Components/Community/faces/24.gif
.gif
Components/Community/faces/25.gif
.gif
Components/Community/faces/26.gif
.gif
Components/Community/faces/27.gif
.gif
Components/Community/faces/28.gif
.gif
Components/Community/faces/29.gif
.gif
Components/Community/faces/3.gif
.gif
Components/Community/faces/30.gif
.gif
Components/Community/faces/31.gif
.gif
Components/Community/faces/32.gif
.gif
Components/Community/faces/33.gif
.gif
Components/Community/faces/34.gif
.gif
Components/Community/faces/35.gif
.gif
Components/Community/faces/36.gif
.gif
Components/Community/faces/37.gif
.gif
Components/Community/faces/38.gif
.gif
Components/Community/faces/39.gif
.gif
Components/Community/faces/4.gif
.gif
Components/Community/faces/40.gif
.gif
Components/Community/faces/5.gif
.gif
Components/Community/faces/6.gif
.gif
Components/Community/faces/7.gif
.gif
Components/Community/faces/8.gif
.gif
Components/Community/faces/9.gif
.gif
Components/Community/faces/offline/-1.gif
.gif
Components/Community/faces/offline/-2.gif
.gif
Components/Community/faces/offline/0.gif
.gif
Components/Community/faces/offline/1.gif
.gif
Components/Community/faces/offline/10.gif
.gif
Components/Community/faces/offline/11.gif
.gif
Components/Community/faces/offline/12.gif
.gif
Components/Community/faces/offline/13.gif
.gif
Components/Community/faces/offline/14.gif
.gif
Components/Community/faces/offline/15.gif
.gif
Components/Community/faces/offline/16.gif
.gif
Components/Community/faces/offline/17.gif
.gif
Components/Community/faces/offline/18.gif
.gif
Components/Community/faces/offline/19.gif
.gif
Components/Community/faces/offline/2.gif
.gif
Components/Community/faces/offline/20.gif
.gif
Components/Community/faces/offline/21.gif
.gif
Components/Community/faces/offline/22.gif
.gif
Components/Community/faces/offline/23.gif
.gif
Components/Community/faces/offline/24.gif
.gif
Components/Community/faces/offline/25.gif
.gif
Components/Community/faces/offline/26.gif
.gif
Components/Community/faces/offline/27.gif
.gif
Components/Community/faces/offline/28.gif
.gif
Components/Community/faces/offline/29.gif
.gif
Components/Community/faces/offline/3.gif
.gif
Components/Community/faces/offline/30.gif
.gif
Components/Community/faces/offline/31.gif
.gif
Components/Community/faces/offline/32.gif
.gif
Components/Community/faces/offline/33.gif
.gif
Components/Community/faces/offline/34.gif
.gif
Components/Community/faces/offline/35.gif
.gif
Components/Community/faces/offline/36.gif
.gif
Components/Community/faces/offline/37.gif
.gif
Components/Community/faces/offline/38.gif
.gif
Components/Community/faces/offline/39.gif
.gif
Components/Community/faces/offline/4.gif
.gif
Components/Community/faces/offline/40.gif
.gif
Components/Community/faces/offline/5.gif
.gif
Components/Community/faces/offline/6.gif
.gif
Components/Community/faces/offline/7.gif
.gif
Components/Community/faces/offline/8.gif
.gif
Components/Community/faces/offline/9.gif
.gif
Components/Community/local/default.html
.html
Components/Community/local/img/dot.gif
.gif
Components/Community/local/img/lbg.gif
.gif
Components/Community/local/img/rbg.gif
.gif
Components/Community/server.ini
Components/Community/toolbar.bmp
Components/DownAndPlay/DapCtrl.dll
.dll regsvr32 windows:4 windows x86 arch:x86

ad3e50d0b0d1cef7ceba5d318e908c98

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\Projects\DapCtrlNT\Release\DapCtrl.pdb

Imports

kernel32

InterlockedDecrement
lstrcpynA
IsDBCSLeadByte
MulDiv
GlobalUnlock
GlobalLock
lstrcmpA
SetLastError
LockResource
LoadResource
GlobalFree
GlobalHandle
DeleteFileA
lstrcatA
FindClose
FindNextFileA
FindFirstFileA
CopyFileA
OutputDebugStringA
WaitForMultipleObjects
GetFileSize
CreateFileA
CompareStringA
CompareStringW
GetTempPathA
MoveFileA
GetDiskFreeSpaceExA
GetFileAttributesExA
CreateEventA
SetEvent
ResetEvent
GetVolumeInformationA
FreeResource
SizeofResource
Sleep
LocalFree
SetEndOfFile
FlushFileBuffers
SetStdHandle
InterlockedIncrement
GetStringTypeW
GetStringTypeA
SetFilePointer
IsBadCodePtr
IsBadReadPtr
UnhandledExceptionFilter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
ReadFile
WriteFile
SetEnvironmentVariableW
SetEnvironmentVariableA
LCMapStringW
LCMapStringA
GetCPInfo
GetOEMCP
HeapSize
TerminateProcess
SetUnhandledExceptionFilter
TlsGetValue
TlsSetValue
TlsFree
TlsAlloc
GetCurrentProcessId
QueryPerformanceCounter
IsBadWritePtr
VirtualFree
HeapCreate
HeapDestroy
GetCommandLineA
GetLocalTime
GetSystemTimeAsFileTime
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapReAlloc
ExitProcess
RtlUnwind
LoadLibraryA
GetProcAddress
FreeLibrary
FindResourceA
GlobalAlloc
GetModuleFileNameA
GetModuleHandleA
lstrcpyA
lstrlenW
lstrcmpiA
lstrlenA
WaitForSingleObject
TerminateThread
HeapAlloc
GetProcessHeap
HeapFree
GetCurrentProcess
FlushInstructionCache
LeaveCriticalSection
EnterCriticalSection
RaiseException
GetLastError
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetCurrentThreadId
WinExec
CreateThread
CloseHandle
GetTickCount
DeleteCriticalSection
InitializeCriticalSection

user32

SetWindowLongA
GetWindowLongA
SendMessageA
ShowWindow
EndDialog
KillTimer
IsWindow
DispatchMessageA
GetMessageA
TranslateMessage
PostMessageA
SendMessageTimeoutA
UnregisterClassA
FindWindowA
MoveWindow
GetWindowRect
SetWindowRgn
MapWindowPoints
SystemParametersInfoA
SetCursor
PtInRect
GetCursorPos
LoadBitmapA
DrawTextA
DestroyWindow
wsprintfA
LoadCursorA
DefWindowProcA
CharUpperBuffA
GetClassInfoExA
CharNextA
CreateWindowExA
RegisterClassExA
GetSysColor
ReleaseCapture
SetCapture
FillRect
GetClientRect
GetDC
ReleaseDC
InvalidateRect
InvalidateRgn
GetDesktopWindow
CallWindowProcA
EndPaint
BeginPaint
DestroyAcceleratorTable
IsWindowVisible
SetTimer
MapDialogRect
SetWindowContextHelpId
GetActiveWindow
DialogBoxIndirectParamA
RegisterWindowMessageA
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
PeekMessageA
CreateAcceleratorTableA
SendDlgItemMessageA
GetParent
GetClassNameA
SetWindowPos
RedrawWindow
GetDlgItem
SetFocus
GetFocus
IsChild
GetWindow

gdi32

CreateCompatibleDC
BitBlt
DeleteDC
SelectObject
DeleteObject
GetObjectA
GetStockObject
CreateSolidBrush
CombineRgn
GetPixel
CreateRectRgn
TextOutA
SetTextColor
SetBkMode
CreateFontA
StretchBlt
Rectangle
CreateCompatibleBitmap
GetDeviceCaps

comdlg32

GetSaveFileNameA

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyA
RegEnumKeyA
RegCreateKeyA
RegQueryInfoKeyA
RegEnumKeyExA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegDeleteKeyA

shell32

SHGetFileInfoA
SHFileOperationA

ole32

OleUninitialize
OleInitialize
CoCreateInstance
CLSIDFromString
CoGetClassObject
CreateStreamOnHGlobal
OleLockRunning
CoTaskMemAlloc
StringFromGUID2
StringFromCLSID
CoTaskMemFree
CLSIDFromProgID

oleaut32

CreateErrorInfo
SysFreeString
SysAllocStringLen
SysStringLen
SysAllocStringByteLen
OleLoadPicture
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
LoadRegTypeLi
OleCreateFontIndirect
VarUI4FromStr
SetErrorInfo
VariantChangeType
SysStringByteLen
VarBstrCmp
VariantInit
VariantCopy
VariantClear
SysAllocString

shlwapi

PathRemoveFileSpecA
SHDeleteKeyA
PathFindExtensionA
PathFileExistsA

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

ws2_32

htonl
shutdown
send
recv
connect
socket
sendto
inet_addr
bind
listen
accept
closesocket
WSACleanup
inet_ntoa
gethostbyname
htons
WSAStartup

iphlpapi

GetAdaptersInfo

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
RegisterServerDirect

Sections

.text
Size: 248KB - Virtual size: 247KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Components/DownAndPlay/DapCtrl1.4.19.22.380.dll
.dll regsvr32 windows:4 windows x86 arch:x86

ad3e50d0b0d1cef7ceba5d318e908c98

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\Projects\DapCtrlNT\Release\DapCtrl.pdb

Imports

kernel32

InterlockedDecrement
lstrcpynA
IsDBCSLeadByte
MulDiv
GlobalUnlock
GlobalLock
lstrcmpA
SetLastError
LockResource
LoadResource
GlobalFree
GlobalHandle
DeleteFileA
lstrcatA
FindClose
FindNextFileA
FindFirstFileA
CopyFileA
OutputDebugStringA
WaitForMultipleObjects
GetFileSize
CreateFileA
CompareStringA
CompareStringW
GetTempPathA
MoveFileA
GetDiskFreeSpaceExA
GetFileAttributesExA
CreateEventA
SetEvent
ResetEvent
GetVolumeInformationA
FreeResource
SizeofResource
Sleep
LocalFree
SetEndOfFile
FlushFileBuffers
SetStdHandle
InterlockedIncrement
GetStringTypeW
GetStringTypeA
SetFilePointer
IsBadCodePtr
IsBadReadPtr
UnhandledExceptionFilter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
ReadFile
WriteFile
SetEnvironmentVariableW
SetEnvironmentVariableA
LCMapStringW
LCMapStringA
GetCPInfo
GetOEMCP
HeapSize
TerminateProcess
SetUnhandledExceptionFilter
TlsGetValue
TlsSetValue
TlsFree
TlsAlloc
GetCurrentProcessId
QueryPerformanceCounter
IsBadWritePtr
VirtualFree
HeapCreate
HeapDestroy
GetCommandLineA
GetLocalTime
GetSystemTimeAsFileTime
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapReAlloc
ExitProcess
RtlUnwind
LoadLibraryA
GetProcAddress
FreeLibrary
FindResourceA
GlobalAlloc
GetModuleFileNameA
GetModuleHandleA
lstrcpyA
lstrlenW
lstrcmpiA
lstrlenA
WaitForSingleObject
TerminateThread
HeapAlloc
GetProcessHeap
HeapFree
GetCurrentProcess
FlushInstructionCache
LeaveCriticalSection
EnterCriticalSection
RaiseException
GetLastError
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetCurrentThreadId
WinExec
CreateThread
CloseHandle
GetTickCount
DeleteCriticalSection
InitializeCriticalSection

user32

SetWindowLongA
GetWindowLongA
SendMessageA
ShowWindow
EndDialog
KillTimer
IsWindow
DispatchMessageA
GetMessageA
TranslateMessage
PostMessageA
SendMessageTimeoutA
UnregisterClassA
FindWindowA
MoveWindow
GetWindowRect
SetWindowRgn
MapWindowPoints
SystemParametersInfoA
SetCursor
PtInRect
GetCursorPos
LoadBitmapA
DrawTextA
DestroyWindow
wsprintfA
LoadCursorA
DefWindowProcA
CharUpperBuffA
GetClassInfoExA
CharNextA
CreateWindowExA
RegisterClassExA
GetSysColor
ReleaseCapture
SetCapture
FillRect
GetClientRect
GetDC
ReleaseDC
InvalidateRect
InvalidateRgn
GetDesktopWindow
CallWindowProcA
EndPaint
BeginPaint
DestroyAcceleratorTable
IsWindowVisible
SetTimer
MapDialogRect
SetWindowContextHelpId
GetActiveWindow
DialogBoxIndirectParamA
RegisterWindowMessageA
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
PeekMessageA
CreateAcceleratorTableA
SendDlgItemMessageA
GetParent
GetClassNameA
SetWindowPos
RedrawWindow
GetDlgItem
SetFocus
GetFocus
IsChild
GetWindow

gdi32

CreateCompatibleDC
BitBlt
DeleteDC
SelectObject
DeleteObject
GetObjectA
GetStockObject
CreateSolidBrush
CombineRgn
GetPixel
CreateRectRgn
TextOutA
SetTextColor
SetBkMode
CreateFontA
StretchBlt
Rectangle
CreateCompatibleBitmap
GetDeviceCaps

comdlg32

GetSaveFileNameA

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyA
RegEnumKeyA
RegCreateKeyA
RegQueryInfoKeyA
RegEnumKeyExA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegDeleteKeyA

shell32

SHGetFileInfoA
SHFileOperationA

ole32

OleUninitialize
OleInitialize
CoCreateInstance
CLSIDFromString
CoGetClassObject
CreateStreamOnHGlobal
OleLockRunning
CoTaskMemAlloc
StringFromGUID2
StringFromCLSID
CoTaskMemFree
CLSIDFromProgID

oleaut32

CreateErrorInfo
SysFreeString
SysAllocStringLen
SysStringLen
SysAllocStringByteLen
OleLoadPicture
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
LoadRegTypeLi
OleCreateFontIndirect
VarUI4FromStr
SetErrorInfo
VariantChangeType
SysStringByteLen
VarBstrCmp
VariantInit
VariantCopy
VariantClear
SysAllocString

shlwapi

PathRemoveFileSpecA
SHDeleteKeyA
PathFindExtensionA
PathFileExistsA

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

ws2_32

htonl
shutdown
send
recv
connect
socket
sendto
inet_addr
bind
listen
accept
closesocket
WSACleanup
inet_ntoa
gethostbyname
htons
WSAStartup

iphlpapi

GetAdaptersInfo

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
RegisterServerDirect

Sections

.text
Size: 248KB - Virtual size: 247KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Components/DownAndPlay/DapPlayer.dll
.dll regsvr32 windows:4 windows x86 arch:x86

5de76c9dafd9e2c9a3d26a238ba166c5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

MulDiv
WinExec
GetFileSize
CreateFileA
WaitForMultipleObjects
GetTempPathA
CreateThread
GetFileAttributesExA
CreateEventA
GetVolumeInformationA
OutputDebugStringA
LocalFree
ResetEvent
MoveFileA
SetEvent
WaitForSingleObject
TerminateThread
GetPrivateProfileIntA
GetTickCount
GetVersionExA
GetEnvironmentVariableA
LeaveCriticalSection
CloseHandle
lstrcmpA
GlobalLock
GlobalUnlock
GlobalAlloc
LockResource
GlobalHandle
GlobalFree
FreeResource
InterlockedIncrement
InterlockedDecrement
lstrcatA
DeleteCriticalSection
HeapDestroy
InitializeCriticalSection
lstrcpyA
CopyFileA
FindFirstFileA
DeleteFileA
FindNextFileA
FindClose
LoadLibraryA
GetProcAddress
DisableThreadLibraryCalls
GetFileAttributesA
IsDBCSLeadByte
lstrcpynA
lstrcmpiA
LoadLibraryExA
GetLastError
FindResourceA
LoadResource
SizeofResource
FreeLibrary
WideCharToMultiByte
GetModuleHandleA
GetShortPathNameA
lstrlenA
MultiByteToWideChar
lstrlenW
GetModuleFileNameA
GetCurrentProcess
FlushInstructionCache
GetCurrentThreadId
EnterCriticalSection
GetDiskFreeSpaceExA

user32

PostMessageA
SetClassLongA
GetClassLongA
SetWindowsHookExA
UnhookWindowsHookEx
SystemParametersInfoA
FindWindowA
SetParent
SetActiveWindow
MessageBoxA
CallNextHookEx
GetWindowRect
WindowFromPoint
FillRect
DefWindowProcA
EndPaint
BeginPaint
ShowWindow
GetParent
GetSystemMetrics
GetWindowLongA
RegisterClassExA
wsprintfA
LoadCursorA
GetClassInfoExA
SetWindowLongA
CallWindowProcA
CreateWindowExA
CharNextA
EnumChildWindows
DrawTextA
GetSysColor
GetKeyState
PtInRect
UnionRect
IsDialogMessageA
GetNextDlgTabItem
GetWindow
SendMessageA
IsChild
GetFocus
CreateDialogIndirectParamA
RegisterWindowMessageA
SetWindowTextA
GetWindowTextA
GetWindowTextLengthA
SetFocus
ReleaseDC
GetDC
GetClientRect
SetWindowPos
IsWindow
RedrawWindow
GetClassNameA
GetDesktopWindow
CreateAcceleratorTableA
ReleaseCapture
SetCapture
InvalidateRect
InvalidateRgn
DestroyWindow
GetDlgItem
SetWindowRgn
OffsetRect
EqualRect
IntersectRect
SetTimer
LoadBitmapA
KillTimer
GetDialogBaseUnits
SendMessageTimeoutA
GetCursorPos
DestroyCursor

gdi32

SetWindowOrgEx
SaveDC
CreateMetaFileA
SetViewportOrgEx
SetMapMode
LPtoDP
CreateDCA
SetWindowExtEx
TextOutA
MoveToEx
LineTo
CreatePen
GetTextExtentPointA
GetTextMetricsA
CreateFontIndirectA
RestoreDC
CloseMetaFile
DeleteMetaFile
CreateRectRgnIndirect
CreateCompatibleBitmap
GetDeviceCaps
SetBkColor
Rectangle
SetTextColor
SetBkMode
GetStockObject
CreateSolidBrush
DeleteObject
StretchBlt
CreateCompatibleDC
SelectObject
BitBlt
DeleteDC
CreateFontA
GetObjectA

advapi32

RegOpenKeyA
RegQueryValueA
RegEnumKeyA
RegQueryValueExA
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
EqualSid
FreeSid
RegCreateKeyA
RegEnumValueA
RegQueryInfoKeyA
RegSetValueExA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA

ole32

CLSIDFromProgID
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
OleLoadFromStream
CreateDataAdviseHolder
CLSIDFromString
OleRegGetUserType
OleRegEnumVerbs
OleSaveToStream
WriteClassStm
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
OleRegGetMiscStatus
StringFromCLSID
OleLockRunning
CreateOleAdviseHolder
CoInitialize
CoUninitialize
CoTaskMemFree

oleaut32

SysAllocStringByteLen
SysAllocStringLen
OleCreateFontIndirect
OleCreatePropertyFrame
VariantInit
SysStringByteLen
VariantChangeType
OleTranslateColor
SysStringLen
LoadRegTypeLi
VariantClear
RegisterTypeLi
LoadTypeLi
SysAllocString
VarUI4FromStr
SysFreeString
GetErrorInfo
CreateErrorInfo
SetErrorInfo

msvcrt

time
_itoa
_adjust_fdiv
_initterm
_onexit
__dllonexit
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_except_handler3
atoi
abs
fputs
fwrite
fread
_ui64toa
_wcsupr
fgets
strcspn
strstr
wcscmp
_strnicmp
_mbsupr
_atoi64
fopen
fclose
isspace
isalpha
isdigit
??0exception@@QAE@ABQBD@Z
??1exception@@UAE@XZ
_CxxThrowException
??0exception@@QAE@ABV0@@Z
_ultoa
atol
_mbsicmp
strncpy
_snprintf
strtok
toupper
tolower
memmove
strcpy
strcat
strcmp
sprintf
_mbscmp
_purecall
memcmp
wcslen
srand
rand
??2@YAPAXI@Z
realloc
malloc
free
_vsnprintf
_putenv
__CxxFrameHandler
strlen
memcpy
_ftol
??3@YAXPAX@Z
memset

msvcp60

?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIPBDI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?_Xran@std@@YAXXZ
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??_7logic_error@std@@6B@
??_7runtime_error@std@@6B@
??1logic_error@std@@UAE@XZ
??0logic_error@std@@QAE@ABV01@@Z
??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??1runtime_error@std@@UAE@XZ
??0runtime_error@std@@QAE@ABV01@@Z
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z

shlwapi

SHDeleteKeyA
PathFileExistsA
UrlEscapeA
UrlUnescapeA
PathRemoveFileSpecA

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

ws2_32

htonl
shutdown
send
recv
connect
inet_ntoa
htons
inet_addr
bind
listen
accept
closesocket
gethostbyname
sendto
socket
WSAStartup
WSACleanup

iphlpapi

GetAdaptersInfo

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
RegisterServerDirect

Sections

.text
Size: 224KB - Virtual size: 220KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Components/DownAndPlay/DapPlayer3.0.44.68.380.dll
.dll regsvr32 windows:4 windows x86 arch:x86

5de76c9dafd9e2c9a3d26a238ba166c5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

MulDiv
WinExec
GetFileSize
CreateFileA
WaitForMultipleObjects
GetTempPathA
CreateThread
GetFileAttributesExA
CreateEventA
GetVolumeInformationA
OutputDebugStringA
LocalFree
ResetEvent
MoveFileA
SetEvent
WaitForSingleObject
TerminateThread
GetPrivateProfileIntA
GetTickCount
GetVersionExA
GetEnvironmentVariableA
LeaveCriticalSection
CloseHandle
lstrcmpA
GlobalLock
GlobalUnlock
GlobalAlloc
LockResource
GlobalHandle
GlobalFree
FreeResource
InterlockedIncrement
InterlockedDecrement
lstrcatA
DeleteCriticalSection
HeapDestroy
InitializeCriticalSection
lstrcpyA
CopyFileA
FindFirstFileA
DeleteFileA
FindNextFileA
FindClose
LoadLibraryA
GetProcAddress
DisableThreadLibraryCalls
GetFileAttributesA
IsDBCSLeadByte
lstrcpynA
lstrcmpiA
LoadLibraryExA
GetLastError
FindResourceA
LoadResource
SizeofResource
FreeLibrary
WideCharToMultiByte
GetModuleHandleA
GetShortPathNameA
lstrlenA
MultiByteToWideChar
lstrlenW
GetModuleFileNameA
GetCurrentProcess
FlushInstructionCache
GetCurrentThreadId
EnterCriticalSection
GetDiskFreeSpaceExA

user32

PostMessageA
SetClassLongA
GetClassLongA
SetWindowsHookExA
UnhookWindowsHookEx
SystemParametersInfoA
FindWindowA
SetParent
SetActiveWindow
MessageBoxA
CallNextHookEx
GetWindowRect
WindowFromPoint
FillRect
DefWindowProcA
EndPaint
BeginPaint
ShowWindow
GetParent
GetSystemMetrics
GetWindowLongA
RegisterClassExA
wsprintfA
LoadCursorA
GetClassInfoExA
SetWindowLongA
CallWindowProcA
CreateWindowExA
CharNextA
EnumChildWindows
DrawTextA
GetSysColor
GetKeyState
PtInRect
UnionRect
IsDialogMessageA
GetNextDlgTabItem
GetWindow
SendMessageA
IsChild
GetFocus
CreateDialogIndirectParamA
RegisterWindowMessageA
SetWindowTextA
GetWindowTextA
GetWindowTextLengthA
SetFocus
ReleaseDC
GetDC
GetClientRect
SetWindowPos
IsWindow
RedrawWindow
GetClassNameA
GetDesktopWindow
CreateAcceleratorTableA
ReleaseCapture
SetCapture
InvalidateRect
InvalidateRgn
DestroyWindow
GetDlgItem
SetWindowRgn
OffsetRect
EqualRect
IntersectRect
SetTimer
LoadBitmapA
KillTimer
GetDialogBaseUnits
SendMessageTimeoutA
GetCursorPos
DestroyCursor

gdi32

SetWindowOrgEx
SaveDC
CreateMetaFileA
SetViewportOrgEx
SetMapMode
LPtoDP
CreateDCA
SetWindowExtEx
TextOutA
MoveToEx
LineTo
CreatePen
GetTextExtentPointA
GetTextMetricsA
CreateFontIndirectA
RestoreDC
CloseMetaFile
DeleteMetaFile
CreateRectRgnIndirect
CreateCompatibleBitmap
GetDeviceCaps
SetBkColor
Rectangle
SetTextColor
SetBkMode
GetStockObject
CreateSolidBrush
DeleteObject
StretchBlt
CreateCompatibleDC
SelectObject
BitBlt
DeleteDC
CreateFontA
GetObjectA

advapi32

RegOpenKeyA
RegQueryValueA
RegEnumKeyA
RegQueryValueExA
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
EqualSid
FreeSid
RegCreateKeyA
RegEnumValueA
RegQueryInfoKeyA
RegSetValueExA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA

ole32

CLSIDFromProgID
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
OleLoadFromStream
CreateDataAdviseHolder
CLSIDFromString
OleRegGetUserType
OleRegEnumVerbs
OleSaveToStream
WriteClassStm
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
OleRegGetMiscStatus
StringFromCLSID
OleLockRunning
CreateOleAdviseHolder
CoInitialize
CoUninitialize
CoTaskMemFree

oleaut32

SysAllocStringByteLen
SysAllocStringLen
OleCreateFontIndirect
OleCreatePropertyFrame
VariantInit
SysStringByteLen
VariantChangeType
OleTranslateColor
SysStringLen
LoadRegTypeLi
VariantClear
RegisterTypeLi
LoadTypeLi
SysAllocString
VarUI4FromStr
SysFreeString
GetErrorInfo
CreateErrorInfo
SetErrorInfo

msvcrt

time
_itoa
_adjust_fdiv
_initterm
_onexit
__dllonexit
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_except_handler3
atoi
abs
fputs
fwrite
fread
_ui64toa
_wcsupr
fgets
strcspn
strstr
wcscmp
_strnicmp
_mbsupr
_atoi64
fopen
fclose
isspace
isalpha
isdigit
??0exception@@QAE@ABQBD@Z
??1exception@@UAE@XZ
_CxxThrowException
??0exception@@QAE@ABV0@@Z
_ultoa
atol
_mbsicmp
strncpy
_snprintf
strtok
toupper
tolower
memmove
strcpy
strcat
strcmp
sprintf
_mbscmp
_purecall
memcmp
wcslen
srand
rand
??2@YAPAXI@Z
realloc
malloc
free
_vsnprintf
_putenv
__CxxFrameHandler
strlen
memcpy
_ftol
??3@YAXPAX@Z
memset

msvcp60

?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIPBDI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?_Xran@std@@YAXXZ
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??_7logic_error@std@@6B@
??_7runtime_error@std@@6B@
??1logic_error@std@@UAE@XZ
??0logic_error@std@@QAE@ABV01@@Z
??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??1runtime_error@std@@UAE@XZ
??0runtime_error@std@@QAE@ABV01@@Z
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z

shlwapi

SHDeleteKeyA
PathFileExistsA
UrlEscapeA
UrlUnescapeA
PathRemoveFileSpecA

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

ws2_32

htonl
shutdown
send
recv
connect
inet_ntoa
htons
inet_addr
bind
listen
accept
closesocket
gethostbyname
sendto
socket
WSAStartup
WSACleanup

iphlpapi

GetAdaptersInfo

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
RegisterServerDirect

Sections

.text
Size: 224KB - Virtual size: 220KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Components/DownAndPlay/DownAndPlay.dll
.dll regsvr32 windows:4 windows x86 arch:x86

f22aa1b034b8ac0f767b9e53d0fcc678

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
RemoveDirectoryA
InitializeCriticalSection
WideCharToMultiByte
lstrlenW
MultiByteToWideChar
lstrlenA
GetLongPathNameA
GetTempPathA
CreateEventA
SetEvent
ResetEvent
DisableThreadLibraryCalls
DeleteFileA
WaitForSingleObject
CloseHandle
OutputDebugStringA
CreateThread
GetTickCount
WritePrivateProfileStringA

user32

PostMessageA
ShowWindow
CreateDialogParamA
DestroyWindow
IsWindow
DefWindowProcA
LoadStringA
SendMessageTimeoutA

oleaut32

SysAllocStringLen
SysAllocString
SysFreeString

atl

ord16
ord15
ord18
ord57
ord32
ord31
ord21

msvcp60

?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

msvcrt

__dllonexit
free
_purecall
memcpy
_adjust_fdiv
_initterm
?terminate@@YAXXZ
_except_handler3
_onexit
strncpy
_ui64toa
strlen
__CxxFrameHandler
isalnum
sprintf
??2@YAPAXI@Z
_CxxThrowException
malloc

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

ws2_32

WSAStartup
WSACleanup
closesocket
accept
listen
bind
inet_addr
htons
socket
connect
recv
send

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Components/DownAndPlay/PlayerHelper.dll.new
.dll windows:4 windows x86 arch:x86

20a3347ed63625383c658c0ce1ceca6a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InitializeCriticalSection
DeleteCriticalSection
CreateEventA
GetPrivateProfileStringA
GetPrivateProfileIntA
CreateThread
DeleteFileA
GetLastError
FreeLibrary
GetProcAddress
LoadLibraryA
MoveFileA
CloseHandle
WriteFile
CreateFileA
GetTempFileNameA
GetTempPathA
TerminateThread
WaitForSingleObject
InterlockedDecrement
WaitForMultipleObjects
LeaveCriticalSection
EnterCriticalSection
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
ReadFile
HeapDestroy
OutputDebugStringA
GetModuleHandleA
GetVolumeInformationA
WritePrivateProfileStringA
GetSystemDirectoryA
GetTickCount
lstrlenA
GetFileAttributesA
GetModuleFileNameA
lstrlenW
SetEvent
WideCharToMultiByte
LocalFree
MultiByteToWideChar

advapi32

RegQueryValueExA
RegOpenKeyExA

ole32

CoCreateInstance
OleRun

oleaut32

VariantChangeType
GetErrorInfo
SysAllocString
VariantInit
VariantClear
SysFreeString
VariantCopy
SysAllocStringByteLen
SysStringByteLen

iphlpapi

GetAdaptersInfo

wininet

InternetOpenUrlA
InternetOpenA
InternetCloseHandle
HttpQueryInfoA
InternetReadFile
InternetSetCookieA
InternetGetCookieA

ws2_32

gethostbyname
inet_addr
htons
WSAGetLastError
closesocket
sendto
setsockopt
WSACreateEvent
WSAResetEvent
WSAEventSelect
WSAEnumNetworkEvents
WSAWaitForMultipleEvents
send
recv
connect
htonl
ntohl
WSACloseEvent
inet_ntoa
socket

msvcp60

??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??_8?$basic_ofstream@DU?$char_traits@D@std@@@std@@7B@
??0?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAE@PAU_iobuf@@@Z
??_7?$basic_ofstream@DU?$char_traits@D@std@@@std@@6B@
?open@?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAEPAV12@PBDH@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@D@Z
?_Init@?$basic_filebuf@DU?$char_traits@D@std@@@std@@IAEXPAU_iobuf@@W4_Initfl@12@@Z
??1?$basic_filebuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??_7logic_error@std@@6B@
??1logic_error@std@@UAE@XZ
??0logic_error@std@@QAE@ABV01@@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??0ios_base@std@@IAE@XZ
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??_7?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@6B@
?_Tidy@?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??1ios_base@std@@UAE@XZ
??_8?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@7B@
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N1@Z
??0?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??_7?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@6B@
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??1?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Xran@std@@YAXXZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Xlen@std@@YAXXZ
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z

msvcrt

??0exception@@QAE@ABV0@@Z
_strnicmp
_stricmp
_adjust_fdiv
_initterm
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_onexit
__dllonexit
wcslen
_ui64toa
_ultoa
malloc
free
fclose
strrchr
_except_handler3
sscanf
?what@exception@@UBEPBDXZ
??0exception@@QAE@ABQBD@Z
??0exception@@QAE@XZ
strncmp
atoi
time
srand
rand
sprintf
strncpy
strtoul
atol
strstr
_purecall
_atoi64
??2@YAPAXI@Z
memmove
??1exception@@UAE@XZ
_CxxThrowException
_itoa
__CxxFrameHandler

Exports

Exports

ForceRequestMovieADs
GetCancelEvent
GetFileByMoviePos
GetFileByMoviePosEx
GetFileByMoviePosExEx
GetPosListByMovie
InitHelper
PrepareForMovie
SendStat
SendStatEx
SetPlatformID
UninitHelper

Sections

.text
Size: 168KB - Virtual size: 166KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Components/DownAndPlay/XLNet.dll
.dll windows:4 windows x86 arch:x86

4e96b197ce8b5dfcf3e0d7a86735d74b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleFileNameA
GetSystemTime
WritePrivateProfileStringA
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
TerminateThread
CloseHandle
WaitForMultipleObjects
CreateEventA
GlobalFree
SetLastError
GetLastError
WaitForSingleObject
DeleteFileA

ws2_32

gethostbyname
inet_addr
getservbyname
htons
gethostbyaddr
ntohs
getservbyport
WSACleanup
WSAStartup
WSACreateEvent
WSAGetLastError
socket
bind
WSAEnumNetworkEvents
WSAWaitForMultipleEvents
send
WSAResetEvent
recv
connect
closesocket
getsockopt
setsockopt
htonl
inet_ntoa
WSAEventSelect
WSASetLastError

wininet

InternetQueryOptionA
InternetCanonicalizeUrlA
InternetCrackUrlA

msvcp60

?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?_Xlen@std@@YAXXZ
?_Xran@std@@YAXXZ
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

msvcrt

strtoul
fputc
_errno
_fdopen
fprintf
ftell
_stricmp
_strnicmp
_itoa
_adjust_fdiv
malloc
_initterm
_onexit
__dllonexit
fwrite
fopen
fread
fclose
time
srand
rand
strncmp
_ismbcspace
_mbschr
_mbscmp
atoi
_mbsrchr
__CxxFrameHandler
sprintf
??2@YAPAXI@Z
free
strncpy
calloc
strchr
_beginthreadex
memmove
strstr

Exports

Exports

XLGetHostByName
XLHttpAddRequestHeaders
XLHttpEndRequest
XLHttpOpenRequest
XLHttpQueryInfo
XLHttpSendRequest
XLNetCloseHandle
XLNetConnect
XLNetOpen
XLNetOpenUrl
XLNetQueryOption
XLNetReadFile
XLNetSetOption
XLNetWriteFile
XLSktAttach
XLSktClose
XLSktConnect
XLSktConnectEx
XLSktGetOpt
XLSktRecv
XLSktSend
XLSktSetOpt
XLSktSetProxy
XLSktSocket
XLUnZip
XLZip

Sections

.text
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Components/DownAndPlay/npDapCtrlFirefox.dll
.dll windows:4 windows x86 arch:x86

d713823ae9b5af032ca21e42f25e215f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CopyFileA
LoadLibraryA
GetProcAddress
FreeLibrary
GetCurrentThreadId
GetLastError
OutputDebugStringA
DisableThreadLibraryCalls
LocalFree
WideCharToMultiByte

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

ole32

CoInitialize
CoCreateInstance
CoUninitialize

oleaut32

SysAllocString
VariantClear

msvcrt

_purecall
??2@YAPAXI@Z
__CxxFrameHandler
_mbsnbcpy
strlen
_mbscmp
fclose
_strtime
free
wcslen
_CxxThrowException
_initterm
malloc
_adjust_fdiv
__dllonexit
_onexit
??1type_info@@UAE@XZ
_snprintf
_vsnprintf
sprintf
memcmp
??3@YAXPAX@Z
fopen

Exports

Exports

NP_GetEntryPoints
NP_Initialize
NP_Shutdown

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Components/DownAndPlay/nsIDapCtrlFirefox.xpt
Components/DownAndPlay/xlsf.dll
.dll regsvr32 windows:4 windows x86 arch:x86

1b749b157df87ae05bd2f9c5d7a48614

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

PathRemoveFileSpecA
PathCombineA
UrlUnescapeA
UrlEscapeA
PathAddBackslashA

kernel32

GetLocaleInfoA
GetThreadLocale
GetVersionExA
RaiseException
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetEvent
WaitForSingleObject
ResetEvent
CloseHandle
WaitForMultipleObjects
GetLastError
CreateThread
InterlockedDecrement
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
CompareStringA
CompareStringW
Sleep
SizeofResource
LockResource
LoadResource
FindResourceA
FindResourceExA
FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleFileNameA
GetFileAttributesA
CopyFileA
MoveFileA
DeleteFileA
GetACP
SetThreadPriority
GetTickCount
GetFileSize
CreateFileA
SetFilePointer
ReadFile
IsBadWritePtr
IsBadReadPtr
OutputDebugStringA
GetCurrentThreadId
CreateEventA
GetModuleHandleA
CreateSemaphoreA
InterlockedIncrement
GetCurrentProcess
ReleaseSemaphore
GetSystemInfo
VirtualAlloc
VirtualFree
DisableThreadLibraryCalls
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
IsBadCodePtr
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
WriteFile
UnhandledExceptionFilter
GetEnvironmentStringsW
InterlockedExchange
GetLocalTime
SetEndOfFile
LocalFree
GetCommandLineA
ExitProcess
HeapCreate
lstrcpyA
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
SetEnvironmentVariableW
SetEnvironmentVariableA
LCMapStringW
VirtualQuery
VirtualProtect
RtlUnwind
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
LCMapStringA
GetCPInfo
GetOEMCP
SetUnhandledExceptionFilter
TerminateProcess
TlsGetValue
TlsSetValue
TlsFree
SetLastError
HeapDestroy
TlsAlloc

user32

SetRect
wsprintfA
GetMessageA
DispatchMessageA
TranslateMessage
MessageBoxA

advapi32

RegOpenKeyExA
RegSetValueA
RegEnumKeyExA
RegDeleteKeyA
RegQueryValueW
RegOpenKeyA
RegCreateKeyA
RegSetValueExA
RegQueryValueExA
RegCloseKey

ole32

CLSIDFromString
CoFreeUnusedLibraries
CoTaskMemFree
StringFromGUID2
CLSIDFromProgID
CoCreateInstance
CoUninitialize
CoInitialize
CoTaskMemAlloc

oleaut32

SysAllocStringLen
VariantInit
SysAllocString
SysFreeString
SafeArrayGetDim
SafeArrayLock
SafeArrayUnlock
VariantClear

wininet

HttpQueryInfoA
InternetReadFile
InternetCrackUrlA
InternetQueryDataAvailable
InternetSetFilePointer
InternetOpenA
InternetOpenUrlA
InternetCloseHandle

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
RegisterServerDirect

Sections

.text
Size: 216KB - Virtual size: 214KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

_TEXT64
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Components/DownAndPlay/xlsf_Now.dll
.dll regsvr32 windows:4 windows x86 arch:x86

1b749b157df87ae05bd2f9c5d7a48614

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

PathRemoveFileSpecA
PathCombineA
UrlUnescapeA
UrlEscapeA
PathAddBackslashA

kernel32

GetLocaleInfoA
GetThreadLocale
GetVersionExA
RaiseException
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetEvent
WaitForSingleObject
ResetEvent
CloseHandle
WaitForMultipleObjects
GetLastError
CreateThread
InterlockedDecrement
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
CompareStringA
CompareStringW
Sleep
SizeofResource
LockResource
LoadResource
FindResourceA
FindResourceExA
FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleFileNameA
GetFileAttributesA
CopyFileA
MoveFileA
DeleteFileA
GetACP
SetThreadPriority
GetTickCount
GetFileSize
CreateFileA
SetFilePointer
ReadFile
IsBadWritePtr
IsBadReadPtr
OutputDebugStringA
GetCurrentThreadId
CreateEventA
GetModuleHandleA
CreateSemaphoreA
InterlockedIncrement
GetCurrentProcess
ReleaseSemaphore
GetSystemInfo
VirtualAlloc
VirtualFree
DisableThreadLibraryCalls
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
IsBadCodePtr
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
WriteFile
UnhandledExceptionFilter
GetEnvironmentStringsW
InterlockedExchange
GetLocalTime
SetEndOfFile
LocalFree
GetCommandLineA
ExitProcess
HeapCreate
lstrcpyA
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
SetEnvironmentVariableW
SetEnvironmentVariableA
LCMapStringW
VirtualQuery
VirtualProtect
RtlUnwind
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
LCMapStringA
GetCPInfo
GetOEMCP
SetUnhandledExceptionFilter
TerminateProcess
TlsGetValue
TlsSetValue
TlsFree
SetLastError
HeapDestroy
TlsAlloc

user32

SetRect
wsprintfA
GetMessageA
DispatchMessageA
TranslateMessage
MessageBoxA

advapi32

RegOpenKeyExA
RegSetValueA
RegEnumKeyExA
RegDeleteKeyA
RegQueryValueW
RegOpenKeyA
RegCreateKeyA
RegSetValueExA
RegQueryValueExA
RegCloseKey

ole32

CLSIDFromString
CoFreeUnusedLibraries
CoTaskMemFree
StringFromGUID2
CLSIDFromProgID
CoCreateInstance
CoUninitialize
CoInitialize
CoTaskMemAlloc

oleaut32

SysAllocStringLen
VariantInit
SysAllocString
SysFreeString
SafeArrayGetDim
SafeArrayLock
SafeArrayUnlock
VariantClear

wininet

HttpQueryInfoA
InternetReadFile
InternetCrackUrlA
InternetQueryDataAvailable
InternetSetFilePointer
InternetOpenA
InternetOpenUrlA
InternetCloseHandle

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
RegisterServerDirect

Sections

.text
Size: 216KB - Virtual size: 214KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

_TEXT64
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Components/DownloadStat/DownloadStat.dll
.dll regsvr32 windows:4 windows x86 arch:x86

635d9d1014011670cb00e7f917d3335b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

mfc42

ord1132
ord6467
ord1131
ord6354
ord800
ord1187
ord535
ord939
ord2818
ord858
ord537
ord540
ord823
ord1799
ord446
ord743
ord1200
ord2393
ord614
ord2915
ord860
ord290
ord1113
ord1114
ord6877
ord2729
ord2727
ord2730
ord4226
ord4003
ord5572
ord5683
ord5500
ord4202
ord4278
ord1168
ord941
ord6930
ord815
ord825
ord561
ord3738
ord4424
ord4622
ord4080
ord3079
ord269
ord826
ord600
ord1578
ord1255
ord1253
ord1570
ord1197
ord1243
ord342
ord1182
ord1577
ord1575
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5714
ord5289
ord5307
ord4698
ord4079
ord2725
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord4274
ord1176
ord1116

msvcrt

strlen
isalnum
_mbsrchr
_strlwr
sprintf
_beginthreadex
sscanf
_mbsnbcmp
memmove
_CxxThrowException
__CxxFrameHandler
wcslen
_mbscmp
__dllonexit
_onexit
??1type_info@@UAE@XZ
free
_initterm
malloc
_adjust_fdiv

kernel32

LoadLibraryA
GetProcAddress
FreeLibrary
EnterCriticalSection
LeaveCriticalSection
Sleep
GetCurrentThreadId
PulseEvent
CloseHandle
lstrlenW
WideCharToMultiByte
InitializeCriticalSection
GetLastError
GetSystemTime
lstrlenA
WritePrivateProfileStringA
LocalFree
LocalAlloc
GetModuleFileNameA
CreateEventA
MultiByteToWideChar
WaitForMultipleObjects

user32

wsprintfA

oleaut32

VariantClear
SysAllocString
SysFreeString
SysStringLen

msvcp60

?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_Xlen@std@@YAXXZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Xran@std@@YAXXZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IPBDI@Z
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
ResetServer

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Components/ExplorerHelper/ExplorerHelper.dll
.dll regsvr32 windows:4 windows x86 arch:x86

e4f6d67b1fba1c8058bc3b7a703929f7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

SHSetValueA
PathCombineA
PathFileExistsA
SHGetValueA
SHRegGetPathA
PathAppendA
SHEnumKeyExA
SHDeleteKeyA
PathRemoveFileSpecA
SHCopyKeyA
PathFindFileNameA

mfc42

ord1775
ord4407
ord5241
ord2385
ord5163
ord6374
ord4353
ord5280
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4627
ord4425
ord3597
ord800
ord795
ord609
ord641
ord860
ord540
ord324
ord2302
ord4234
ord6197
ord6380
ord3092
ord6199
ord4710
ord4853
ord4376
ord825
ord6055
ord1776
ord5290
ord4078
ord4424
ord3721
ord567
ord2575
ord4396
ord3574
ord2727
ord6467
ord2730
ord2729
ord1799
ord446
ord743
ord4622
ord614
ord290
ord4226
ord4003
ord1113
ord3258
ord823
ord1168
ord4274
ord6375
ord4486
ord2554
ord2512
ord6052
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord3953
ord3738
ord815
ord5500
ord561
ord1132
ord1131
ord6354
ord861
ord539
ord537
ord941
ord858
ord535
ord2514
ord4998
ord269
ord826
ord600
ord1578
ord1255
ord5265
ord1253
ord1570
ord1197
ord1243
ord342
ord1182
ord1577
ord1575
ord1176
ord1116
ord3402
ord5731

msvcrt

strcat
wcscmp
strcpy
__CxxFrameHandler
_strnicmp
_stricmp
strlen
strstr
__dllonexit
_onexit
free
_initterm
malloc
_adjust_fdiv
??1type_info@@UAE@XZ
memset

kernel32

lstrcatA
lstrcmpiA
GetSystemDirectoryA
GetModuleFileNameA
GetProcAddress
LoadLibraryA
LocalFree
LocalAlloc
GetModuleHandleA
FreeLibrary
GetVersionExA
MultiByteToWideChar

user32

LoadIconA
SendMessageA
SetForegroundWindow
EnableWindow

advapi32

RegCreateKeyExA
RegCloseKey
RegOpenKeyExA

shell32

ShellExecuteA

ole32

CLSIDFromString
StringFromCLSID
ProgIDFromCLSID
CoTaskMemFree

oleaut32

SysAllocStringLen
SysFreeString

msvcp60

??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??Ostd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

Exports

Exports

CheckDefault
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
SetDefault

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Components/ExplorerHelper/IThunderComponent.xpt
Components/ExplorerHelper/IThunderDownload.xpt
Components/ExplorerHelper/NsThunderLoader.dll
.dll windows:4 windows x86 arch:x86

5e179d164188f94230b8f3641c5ebf2d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WideCharToMultiByte
MultiByteToWideChar
InterlockedDecrement
FindFirstFileA
GetModuleFileNameA
lstrcatA
FindClose
lstrlenA
SetCurrentDirectoryA
GetLastError
LocalFree
DisableThreadLibraryCalls

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

ole32

CoInitialize
CoUninitialize
CoCreateInstance
CLSIDFromProgID

oleaut32

VariantClear
GetErrorInfo
SysAllocString
SysFreeString
SysAllocStringLen

shlwapi

PathIsRootA

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

msvcrt

_CxxThrowException
_stat
_adjust_fdiv
malloc
_initterm
free
_onexit
__dllonexit
fopen
fgets
??3@YAXPAX@Z
_mbsrchr
_ismbcalpha
??2@YAPAXI@Z
__CxxFrameHandler
memset
sprintf
strlen
strcpy
memcpy
_fullpath
fclose
strncmp
??1type_info@@UAE@XZ

nspr4

PR_smprintf_free
PR_GetEnv
PR_AtomicIncrement
PR_smprintf
PR_UnloadLibrary
PR_FindSymbol
PR_LoadLibraryWithFlags
PR_SetEnv
PR_FindSymbolAndLibrary
PR_Free
PR_GetLibraryFilePathname
PR_AtomicDecrement

plc4

PL_strrchr

Exports

Exports

NSGetModule

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Components/ExplorerHelper/NsThunderLoaderInstaller.dll
.dll regsvr32 windows:4 windows x86 arch:x86

010d328133240c24863d78e97a8b2589

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CopyFileA
lstrcpyA
DeleteFileA
FindClose
FindNextFileA
FindFirstFileA
CloseHandle
Process32Next
GetModuleFileNameA
CreateToolhelp32Snapshot
DisableThreadLibraryCalls
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapDestroy
DeleteCriticalSection
lstrlenA
lstrcatA
Process32First
Sleep

user32

MessageBoxA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

shell32

ShellExecuteA
SHGetSpecialFolderPathA

msvcrt

_stricmp
_adjust_fdiv
malloc
_initterm
free
_onexit
_mbsrchr
memcpy
??3@YAXPAX@Z
__dllonexit

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 332B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Components/ExplorerHelper/ThunderComponent.dll
.dll windows:4 windows x86 arch:x86

54592fdad997979962f77228392f8e72

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentProcessId
GetLastError
DisableThreadLibraryCalls
OutputDebugStringA
lstrcpyA
lstrcatA
GetPrivateProfileStringA
GetModuleFileNameA
SetCurrentDirectoryA
InterlockedDecrement
lstrlenA
MultiByteToWideChar
GetModuleHandleA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetFileAttributesA
WideCharToMultiByte
LocalFree

user32

GetWindowRect
GetSubMenu
SetMenuItemInfoA
TrackPopupMenuEx
GetDC
ReleaseDC
GetWindowLongA
SetTimer
KillTimer
SetParent
ScreenToClient
BringWindowToTop
ShowWindow
GetCursorPos
WindowFromPoint
GetWindowThreadProcessId
GetParent
DestroyMenu
DestroyWindow
GetDesktopWindow
CreateDialogParamA
SetWindowLongA
SetWindowPos
wsprintfA
LoadImageA
LoadMenuA
MessageBoxA
GetClientRect

gdi32

BitBlt
DeleteDC
GetObjectA
DeleteObject
CreateCompatibleDC
SelectObject

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

ole32

CLSIDFromProgID
CoCreateInstance

oleaut32

GetErrorInfo
SysFreeString
SysAllocString

winmm

timeKillEvent
timeSetEvent

msvcrt

strcat
_chkesp
fopen
fgets
strncmp
fclose
_fullpath
_CxxThrowException
free
_initterm
malloc
_adjust_fdiv
_stricmp
_strlwr
??1type_info@@UAE@XZ
memcpy
strcpy
strlen
sprintf
memset
__CxxFrameHandler
atoi
sscanf
strstr
??3@YAXPAX@Z
??2@YAPAXI@Z
_stat

nspr4

PR_UnloadLibrary
PR_FindSymbol
PR_LoadLibraryWithFlags
PR_Free
PR_GetLibraryFilePathname
PR_FindSymbolAndLibrary
PR_SetEnv
PR_smprintf
PR_smprintf_free
PR_GetEnv
PR_AtomicIncrement
PR_AtomicDecrement

plc4

PL_strrchr

Exports

Exports

NSGetModule

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Components/ExplorerHelper/XLNonIESvr.exe
.exe windows:4 windows x86 arch:x86

44fd6c6fa8e202378791e7bfeb9e7073

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

userenv

GetUserProfileDirectoryA

shlwapi

StrStrIA
UrlIsA
SHGetValueA
PathFileExistsA
PathRemoveFileSpecA
PathRemoveBlanksA

comdlg32

GetOpenFileNameA

shell32

ShellExecuteA

kernel32

GetModuleHandleA
GetStartupInfoA
CreateFileMappingA
MapViewOfFile
GetFileSize
UnmapViewOfFile
GetPrivateProfileIntA
GetModuleFileNameA
CloseHandle
CreateFileA
DeleteFileA
GetPrivateProfileStringA
GetCurrentProcess
CopyFileA
WritePrivateProfileStringA
CreateDirectoryA
GetUserDefaultLCID
WideCharToMultiByte
MultiByteToWideChar

user32

MessageBoxA
FindWindowA

advapi32

RegOpenKeyExA
OpenProcessToken
RegCloseKey
RegQueryValueExA

ole32

CLSIDFromProgID
CoCreateInstance
CoInitialize

oleaut32

SysAllocStringLen
VariantChangeType
SysFreeString
VariantClear
VariantCopy

msvcrt

memmove
_stricmp
_strnicmp
memchr
_purecall
__CxxFrameHandler
??3@YAXPAX@Z
strchr
sprintf
strstr
??2@YAPAXI@Z
_except_handler3
?terminate@@YAXXZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp

msvcp60

?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Xran@std@@YAXXZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?_Xlen@std@@YAXXZ

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Components/ExplorerHelper/regxpcom.exe
.exe windows:4 windows x86 arch:x86

8a5fa7e9e22145cbaf8580dbd2f15762

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

nspr4

PR_SetEnv
PR_GetEnv
PR_smprintf
PR_smprintf_free
PR_LoadLibraryWithFlags
PR_UnloadLibrary
PR_FindSymbol
PR_Free
PR_GetLibraryFilePathname
PR_FindSymbolAndLibrary

plc4

PL_strrchr

kernel32

GetModuleFileNameA
SetCurrentDirectoryA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

msvcrt

free
memset
strlen
_controlfp
_except_handler3
_stat
__p__commode
_adjust_fdiv
__p__fmode
_initterm
__getmainargs
__setusermatherr
exit
??3@YAXPAX@Z
strcmp
??2@YAPAXI@Z
printf
_fullpath
sprintf
malloc
__set_app_type
_XcptFilter
__p___initenv
strcpy
fclose
strncmp
fgets
fopen
_exit

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Components/ExplorerHelper/thunder.xpi
.zip
chrome/thunder.jar
.zip
content/contents.rdf
.xml
content/download.gif
.gif
content/download.js
.js
content/downloadall.gif
.gif
content/icon.bmp
content/main.js
.js
content/main.xul
content/menu.css
content/product.js
.js
content/public.js
.js
locale/en-US/contents.rdf
.xml
locale/en-US/thunder.dtd
locale/zh-CN/contents.rdf
.xml
locale/zh-CN/thunder.dtd
install.rdf
.xml
Components/InMedia/InMediaSetup.exe
.exe windows:4 windows x86 arch:x86

eab1ec6cbdfaabff4a2072b8aeb7c4f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Components/InMedia/MediaAddin15.dll
.dll regsvr32 windows:4 windows x86 arch:x86

5632ddd12e78b86598e2552a5ea80ec3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcmpA
FlushInstructionCache
GetCurrentProcess
GetPrivateProfileIntA
GetPrivateProfileStringA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
CreateMutexA
ReadFile
CreateFileA
WriteFile
MoveFileA
DeleteFileA
CreateThread
GlobalLock
_lclose
_lread
OpenFile
_lwrite
_llseek
GetSystemDirectoryA
GetVolumeInformationA
WritePrivateProfileStringA
GetTickCount
GetFileAttributesA
GlobalUnlock
GlobalAlloc
GlobalHandle
LocalFree
GlobalFree
FreeResource
GetCurrentThreadId
lstrcpyA
MulDiv
LockResource
HeapDestroy
DisableThreadLibraryCalls
IsDBCSLeadByte
lstrcpynA
lstrcmpiA
LoadLibraryExA
FindResourceA
LoadResource
SizeofResource
WideCharToMultiByte
InitializeCriticalSection
GetModuleFileNameA
GetModuleHandleA
GetShortPathNameA
lstrlenA
MultiByteToWideChar
lstrlenW
WaitForMultipleObjects
TerminateThread
GetLastError
WaitForSingleObject
InterlockedDecrement
InterlockedIncrement
SetEvent
ResetEvent
CloseHandle
CreateEventA
LoadLibraryA
GetProcAddress
FreeLibrary
Sleep
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
ReleaseMutex

user32

GetWindow
SendMessageA
GetParent
IsChild
GetFocus
DestroyWindow
CreateDialogIndirectParamA
RegisterClassExA
LoadCursorA
GetClassInfoExA
RegisterWindowMessageA
SetWindowLongA
SetWindowTextA
GetWindowTextA
UnionRect
GetWindowLongA
SetFocus
CallWindowProcA
EndPaint
FillRect
GetClientRect
BeginPaint
PtInRect
GetKeyState
GetSysColor
DrawTextA
GetNextDlgTabItem
EnumChildWindows
DefWindowProcA
SetRectEmpty
CharNextA
GetDC
IsDialogMessageA
SetWindowPos
IsWindow
RedrawWindow
GetClassNameA
GetDesktopWindow
CreateAcceleratorTableA
ReleaseCapture
SetCapture
InvalidateRect
InvalidateRgn
GetDlgItem
SetWindowRgn
OffsetRect
EqualRect
IntersectRect
wsprintfA
CreateWindowExA
PostMessageA
ReleaseDC
KillTimer
GetForegroundWindow
SetTimer
ShowWindow
GetDialogBaseUnits
GetWindowTextLengthA
PostThreadMessageA
PeekMessageA
GetMessageA
PostQuitMessage
GetCursorPos
ScreenToClient
LoadBitmapA
GetCapture
SetCursor
CopyRect
FindWindowExA

gdi32

CreateFontIndirectA
GetDeviceCaps
DeleteDC
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
CreateRectRgnIndirect
DeleteMetaFile
CloseMetaFile
RestoreDC
GetTextMetricsA
SetWindowOrgEx
SaveDC
CreateMetaFileA
SetViewportOrgEx
SetMapMode
LPtoDP
CreateDCA
CombineRgn
CreateRectRgn
GetRgnBox
GetTextExtentPointA
GetObjectA
SetBkColor
GetStockObject
SelectObject
Rectangle
SetTextColor
SetBkMode
CreateSolidBrush
SetWindowExtEx
DeleteObject

advapi32

RegEnumValueA
RegQueryInfoKeyA
RegSetValueExA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA
RegQueryValueExA

shell32

ShellExecuteA

ole32

CreateOleAdviseHolder
OleLockRunning
StringFromCLSID
CoCreateInstance
CLSIDFromString
CLSIDFromProgID
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
CreateDataAdviseHolder
OleRegGetMiscStatus
OleRegGetUserType
OleRegEnumVerbs
OleSaveToStream
WriteClassStm
StringFromIID
CoTaskMemAlloc
CoUninitialize
OleLoadFromStream
CoInitialize
CoTaskMemRealloc
CoTaskMemFree

oleaut32

SysStringByteLen
VarUI4FromStr
LoadRegTypeLi
DispCallFunc
OleCreatePropertyFrame
SysFreeString
SysAllocStringByteLen
OleCreateFontIndirect
SysStringLen
OleTranslateColor
VariantClear
SysAllocString
VariantChangeType
SysAllocStringLen

shlwapi

SHDeleteKeyA
AssocQueryStringA

iphlpapi

GetAdaptersInfo

msvfw32

DrawDibClose
DrawDibOpen
DrawDibDraw

winmm

waveOutPrepareHeader
waveOutPause
waveOutWrite
waveOutUnprepareHeader
waveOutReset
waveOutOpen
waveOutClose
waveOutRestart

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

ws2_32

WSAWaitForMultipleEvents
gethostbyname
WSAStartup
closesocket
sendto
socket
inet_addr
htons
connect
recv
send
setsockopt
inet_ntoa
WSACreateEvent
WSAEventSelect
WSAGetLastError
WSAEnumNetworkEvents
WSAResetEvent
WSACloseEvent

msvcrt

?what@exception@@UBEPBDXZ
??0exception@@QAE@ABQBD@Z
??0exception@@QAE@XZ
_ultoa
atol
?terminate@@YAXXZ
??1type_info@@UAE@XZ
__dllonexit
_onexit
_initterm
_adjust_fdiv
_stricmp
_strlwr
_itoa
_except_handler3
strcmp
??1exception@@UAE@XZ
_CxxThrowException
_callnewh
??0exception@@QAE@ABV0@@Z
rand
_splitpath
__RTDynamicCast
abs
strrchr
time
srand
strncmp
strncpy
atoi
strcpy
_mbsrchr
strlen
strcat
sprintf
realloc
malloc
free
memset
_purecall
memcmp
wcslen
wcscpy
__CxxFrameHandler
??2@YAPAXI@Z
memcpy
??3@YAXPAX@Z

msvcp60

?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@PBDH@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@D@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?close@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??_7logic_error@std@@6B@
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?nothrow@std@@3Unothrow_t@1@B
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHABV12@@Z
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0logic_error@std@@QAE@ABV01@@Z
??1logic_error@std@@UAE@XZ
??0logic_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 140KB - Virtual size: 138KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Components/InMedia/PlayerHelper.dll.new
.dll windows:4 windows x86 arch:x86

20a3347ed63625383c658c0ce1ceca6a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InitializeCriticalSection
DeleteCriticalSection
CreateEventA
GetPrivateProfileStringA
GetPrivateProfileIntA
CreateThread
DeleteFileA
GetLastError
FreeLibrary
GetProcAddress
LoadLibraryA
MoveFileA
CloseHandle
WriteFile
CreateFileA
GetTempFileNameA
GetTempPathA
TerminateThread
WaitForSingleObject
InterlockedDecrement
WaitForMultipleObjects
LeaveCriticalSection
EnterCriticalSection
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
ReadFile
HeapDestroy
OutputDebugStringA
GetModuleHandleA
GetVolumeInformationA
WritePrivateProfileStringA
GetSystemDirectoryA
GetTickCount
lstrlenA
GetFileAttributesA
GetModuleFileNameA
lstrlenW
SetEvent
WideCharToMultiByte
LocalFree
MultiByteToWideChar

advapi32

RegQueryValueExA
RegOpenKeyExA

ole32

CoCreateInstance
OleRun

oleaut32

VariantChangeType
GetErrorInfo
SysAllocString
VariantInit
VariantClear
SysFreeString
VariantCopy
SysAllocStringByteLen
SysStringByteLen

iphlpapi

GetAdaptersInfo

wininet

InternetOpenUrlA
InternetOpenA
InternetCloseHandle
HttpQueryInfoA
InternetReadFile
InternetSetCookieA
InternetGetCookieA

ws2_32

gethostbyname
inet_addr
htons
WSAGetLastError
closesocket
sendto
setsockopt
WSACreateEvent
WSAResetEvent
WSAEventSelect
WSAEnumNetworkEvents
WSAWaitForMultipleEvents
send
recv
connect
htonl
ntohl
WSACloseEvent
inet_ntoa
socket

msvcp60

??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??_8?$basic_ofstream@DU?$char_traits@D@std@@@std@@7B@
??0?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAE@PAU_iobuf@@@Z
??_7?$basic_ofstream@DU?$char_traits@D@std@@@std@@6B@
?open@?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAEPAV12@PBDH@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@D@Z
?_Init@?$basic_filebuf@DU?$char_traits@D@std@@@std@@IAEXPAU_iobuf@@W4_Initfl@12@@Z
??1?$basic_filebuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??_7logic_error@std@@6B@
??1logic_error@std@@UAE@XZ
??0logic_error@std@@QAE@ABV01@@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??0ios_base@std@@IAE@XZ
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??_7?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@6B@
?_Tidy@?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??1ios_base@std@@UAE@XZ
??_8?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@7B@
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N1@Z
??0?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??_7?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@6B@
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??1?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Xran@std@@YAXXZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Xlen@std@@YAXXZ
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z

msvcrt

??0exception@@QAE@ABV0@@Z
_strnicmp
_stricmp
_adjust_fdiv
_initterm
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_onexit
__dllonexit
wcslen
_ui64toa
_ultoa
malloc
free
fclose
strrchr
_except_handler3
sscanf
?what@exception@@UBEPBDXZ
??0exception@@QAE@ABQBD@Z
??0exception@@QAE@XZ
strncmp
atoi
time
srand
rand
sprintf
strncpy
strtoul
atol
strstr
_purecall
_atoi64
??2@YAPAXI@Z
memmove
??1exception@@UAE@XZ
_CxxThrowException
_itoa
__CxxFrameHandler

Exports

Exports

ForceRequestMovieADs
GetCancelEvent
GetFileByMoviePos
GetFileByMoviePosEx
GetFileByMoviePosExEx
GetPosListByMovie
InitHelper
PrepareForMovie
SendStat
SendStatEx
SetPlatformID
UninitHelper

Sections

.text
Size: 168KB - Virtual size: 166KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Components/InMedia/ThunderMinisite.exe
.exe windows:4 windows x86 arch:x86

7196c8554649fd4e0bf7d041af9759f6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
GlobalUnlock
GlobalLock
InterlockedIncrement
lstrcmpA
FlushInstructionCache
GetCurrentProcess
InterlockedDecrement
WideCharToMultiByte
MoveFileA
WriteFile
CreateFileA
DeleteFileA
MultiByteToWideChar
GetModuleFileNameA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetVolumeInformationA
WritePrivateProfileStringA
GetSystemDirectoryA
GetTickCount
GetFileAttributesA
GetModuleHandleA
TerminateThread
lstrlenW
GetStartupInfoA
LocalFree
GlobalAlloc
DeleteCriticalSection
HeapDestroy
InitializeCriticalSection
CreateMutexA
GetLastError
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
FindResourceA
LoadResource
LockResource
GlobalHandle
GlobalFree
FreeResource
OutputDebugStringA
WaitForMultipleObjects
ResetEvent
SetEvent
WaitForSingleObject
CreateThread
CreateEventA
CloseHandle
LoadLibraryA
GetProcAddress
ReadFile
FreeLibrary

user32

DefWindowProcA
RegisterWindowMessageA
DestroyWindow
GetWindow
SetWindowLongA
SetWindowTextA
GetWindowTextA
GetWindowTextLengthA
GetWindowLongA
GetClassInfoExA
GetDlgItem
CallWindowProcA
EndPaint
LoadCursorA
RegisterClassExA
CreateDialogIndirectParamA
ShowWindow
GetMessageA
LoadAcceleratorsA
TranslateAcceleratorA
TranslateMessage
SendMessageA
DispatchMessageA
PostMessageA
FillRect
GetClientRect
BeginPaint
ReleaseDC
GetDC
SetFocus
IsChild
GetFocus
SetWindowPos
GetClassNameA
GetParent
IsWindow
GetSysColor
IsIconic
GetLastActivePopup
SetForegroundWindow
DrawTextA
GetCursorPos
LoadBitmapA
FlashWindowEx
ClientToScreen
ScreenToClient
SetWindowRgn
MoveWindow
PostQuitMessage
IsDialogMessageA
GetCapture
PtInRect
KillTimer
SetTimer
IsWindowEnabled
SetRectEmpty
CopyRect
GetWindowRect
SystemParametersInfoA
MapWindowPoints
GetSystemMetrics
LoadImageA
IsWindowVisible
GetForegroundWindow
GetWindowThreadProcessId
BringWindowToTop
AttachThreadInput
SetActiveWindow
wsprintfA
CreateWindowExA
InvalidateRgn
InvalidateRect
SetCapture
ReleaseCapture
CreateAcceleratorTableA
GetDesktopWindow
RedrawWindow

gdi32

CombineRgn
CreateRectRgnIndirect
CreateRectRgn
GetStockObject
CreateFontIndirectA
SetTextColor
SetBkMode
GetObjectA
GetDeviceCaps
CreateSolidBrush
DeleteObject
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
BitBlt
CreateRoundRectRgn
DeleteDC

advapi32

RegOpenKeyExA
RegQueryValueExA

ole32

StringFromCLSID
CoTaskMemFree
CoCreateInstance
CoTaskMemAlloc
OleLockRunning
CLSIDFromString
CLSIDFromProgID
CreateStreamOnHGlobal
OleInitialize
OleUninitialize

oleaut32

SysStringLen
DispCallFunc
SysFreeString
SysAllocStringLen
SysAllocString
LoadRegTypeLi
VariantClear
OleCreateFontIndirect
VariantCopy
VariantInit
LoadTypeLi

wininet

InternetSetCookieA

ws2_32

sendto
WSACreateEvent
closesocket
inet_addr
htons
WSAGetLastError
socket
inet_ntoa
gethostbyname
WSACloseEvent
WSAResetEvent
WSAEnumNetworkEvents
WSAWaitForMultipleEvents
WSAEventSelect

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

iphlpapi

GetAdaptersInfo

comctl32

ImageList_Draw
ImageList_Destroy
ImageList_Create
ImageList_AddMasked
InitCommonControlsEx
ImageList_LoadImageA

msvcp60

?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Xlen@std@@YAXXZ
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHIIPBDI@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Xran@std@@YAXXZ
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??_8?$basic_ofstream@DU?$char_traits@D@std@@@std@@7B@
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAE@PAU_iobuf@@@Z
??_7?$basic_ofstream@DU?$char_traits@D@std@@@std@@6B@
?open@?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAEPAV12@PBDH@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@D@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?_Init@?$basic_filebuf@DU?$char_traits@D@std@@@std@@IAEXPAU_iobuf@@W4_Initfl@12@@Z
??1?$basic_filebuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_8?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@7B@
??0ios_base@std@@IAE@XZ
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1ios_base@std@@UAE@XZ
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Tidy@?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEXXZ
??_7?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@6B@
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??_7?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@6B@
??0?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N1@Z

msvcrt

_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
??1type_info@@UAE@XZ
_onexit
__dllonexit
?terminate@@YAXXZ
??0exception@@QAE@XZ
atol
_itoa
_ultoa
__CxxFrameHandler
??2@YAPAXI@Z
free
_purecall
malloc
_except_handler3
time
wcscmp
sprintf
memmove
??0exception@@QAE@ABV0@@Z
_CxxThrowException
??1exception@@UAE@XZ
atoi
?what@exception@@UBEPBDXZ
??0exception@@QAE@ABQBD@Z
rand
srand
strrchr
fclose
__p__commode
__p__fmode
__set_app_type
_controlfp
_stricmp
realloc

Sections

.text
Size: 140KB - Virtual size: 138KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Components/InMedia/XLIPC.dll
.dll windows:4 windows x86 arch:x86

1ec9e8f3000a8abb62bbb3178bbc96a6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetOverlappedResult
WaitForMultipleObjects
GetLastError
WriteFile
CreateThread
CreateEventA
TerminateThread
CloseHandle
WaitForSingleObject
SetEvent
ResetEvent
DisconnectNamedPipe
ConnectNamedPipe
WaitNamedPipeA
CreateFileA
CreateNamedPipeA
ReadFile
GetModuleFileNameA
WritePrivateProfileStringA

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

msvcrt

_adjust_fdiv
_onexit
__dllonexit
malloc
sprintf
free
vsprintf
_CxxThrowException
_strdate
_strtime
_purecall
memmove
__CxxFrameHandler
??3@YAXPAX@Z
??2@YAPAXI@Z
_initterm
_stricmp

msvcp60

?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?_Xlen@std@@YAXXZ
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Xran@std@@YAXXZ
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z

Exports

Exports

FinitReceiver
FinitSender
InitReceiver
InitSender
ReceiveProcData
SendProcData

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Components/InMedia/XLNet.dll
.dll windows:4 windows x86 arch:x86

4e96b197ce8b5dfcf3e0d7a86735d74b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleFileNameA
GetSystemTime
WritePrivateProfileStringA
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
TerminateThread
CloseHandle
WaitForMultipleObjects
CreateEventA
GlobalFree
SetLastError
GetLastError
WaitForSingleObject
DeleteFileA

ws2_32

gethostbyname
inet_addr
getservbyname
htons
gethostbyaddr
ntohs
getservbyport
WSACleanup
WSAStartup
WSACreateEvent
WSAGetLastError
socket
bind
WSAEnumNetworkEvents
WSAWaitForMultipleEvents
send
WSAResetEvent
recv
connect
closesocket
getsockopt
setsockopt
htonl
inet_ntoa
WSAEventSelect
WSASetLastError

wininet

InternetQueryOptionA
InternetCanonicalizeUrlA
InternetCrackUrlA

msvcp60

?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?_Xlen@std@@YAXXZ
?_Xran@std@@YAXXZ
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

msvcrt

strtoul
fputc
_errno
_fdopen
fprintf
ftell
_stricmp
_strnicmp
_itoa
_adjust_fdiv
malloc
_initterm
_onexit
__dllonexit
fwrite
fopen
fread
fclose
time
srand
rand
strncmp
_ismbcspace
_mbschr
_mbscmp
atoi
_mbsrchr
__CxxFrameHandler
sprintf
??2@YAPAXI@Z
free
strncpy
calloc
strchr
_beginthreadex
memmove
strstr

Exports

Exports

XLGetHostByName
XLHttpAddRequestHeaders
XLHttpEndRequest
XLHttpOpenRequest
XLHttpQueryInfo
XLHttpSendRequest
XLNetCloseHandle
XLNetConnect
XLNetOpen
XLNetOpenUrl
XLNetQueryOption
XLNetReadFile
XLNetSetOption
XLNetWriteFile
XLSktAttach
XLSktClose
XLSktConnect
XLSktConnectEx
XLSktGetOpt
XLSktRecv
XLSktSend
XLSktSetOpt
XLSktSetProxy
XLSktSocket
XLUnZip
XLZip

Sections

.text
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Components/InMedia/iEmbed15.dll
.dll regsvr32 windows:4 windows x86 arch:x86

abd4eeaf5de619cfd5112f683da873ac

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateThread
CreateEventA
InitializeCriticalSection
DeleteCriticalSection
CloseHandle
WaitForSingleObject
WaitForMultipleObjects
GetProcAddress
LoadLibraryA
FreeLibrary
MoveFileA
DeleteFileA
GetFileAttributesA
GetModuleFileNameA
DisableThreadLibraryCalls
lstrcpyA
MultiByteToWideChar
lstrlenA
lstrcatA
WideCharToMultiByte
lstrlenW
HeapDestroy
InterlockedDecrement
InterlockedIncrement
GetTempPathA
ReadFile
GetCurrentProcess
CreateFileA
WriteFile
FindClose
FindNextFileA
FindFirstFileA
GetLastError
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
Sleep
GetTickCount
GetPrivateProfileIntA
GetPrivateProfileStringA
OutputDebugStringA
OpenFileMappingA
CreateMutexA
ReleaseMutex
CreateProcessA
GetVolumeInformationA
WritePrivateProfileStringA
GetSystemDirectoryA
GetModuleHandleA
TerminateThread
LocalFree
FlushInstructionCache
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
SetFilePointer
SetEvent

user32

RegisterWindowMessageA
PostQuitMessage
IsWindow
DispatchMessageA
TranslateMessage
GetMessageA
PeekMessageA
PostMessageA
LoadStringA
CharNextA
CreateWindowExA
CallWindowProcA
GetWindowLongA
SetWindowLongA
GetClassInfoExA
LoadCursorA
wsprintfA
DestroyWindow
RegisterClassExA
SendMessageA
DefWindowProcA
GetDesktopWindow
ShowWindow
IsDialogMessageA

advapi32

RegQueryValueExA
RegOpenKeyExA

ole32

OleUninitialize
OleInitialize
CoCreateInstance

oleaut32

RegisterTypeLi
SysAllocStringLen
LoadTypeLi
SysAllocString
SysFreeString
VariantClear

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

iphlpapi

GetAdaptersInfo

shlwapi

PathFileExistsA

comctl32

InitCommonControlsEx

msvcp60

??0logic_error@std@@QAE@ABV01@@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEPADPAD@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@PBDH@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@D@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?close@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??0logic_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??_7logic_error@std@@6B@
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHABV12@@Z
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??1logic_error@std@@UAE@XZ

msvcrt

__RTDynamicCast
_itoa
_stricmp
_strnicmp
_adjust_fdiv
_initterm
_onexit
__dllonexit
??1type_info@@UAE@XZ
?terminate@@YAXXZ
strstr
?what@exception@@UBEPBDXZ
??0exception@@QAE@ABQBD@Z
??0exception@@QAE@XZ
atol
_ultoa
malloc
vsprintf
strrchr
_except_handler3
memmove
realloc
srand
rand
abs
localtime
strftime
time
mktime
sscanf
??1exception@@UAE@XZ
??0exception@@QAE@ABV0@@Z
_ftol
wcslen
sprintf
strncmp
memset
free
_purecall
memcmp
strncpy
strcpy
??2@YAPAXI@Z
_CxxThrowException
atoi
_strdate
_strtime
strlen
memcpy
__CxxFrameHandler

ws2_32

WSAGetLastError
bind
socket
inet_addr
htons
recvfrom
WSAEnumNetworkEvents
WSAWaitForMultipleEvents
WSACreateEvent
inet_ntoa
WSAResetEvent
setsockopt
send
recv
connect
sendto
WSAStartup
WSAEventSelect
closesocket
gethostbyname
WSACloseEvent

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
PluginEventHandler
PluginEventListener
PluginGetInfo
PluginInit
PluginInitEx
PluginInstall
PluginUninit
PluginUninstall
SetAutoPopup

Sections

.text
Size: 188KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Components/InMedia/iEmbedShell.dll
.dll regsvr32 windows:4 windows x86 arch:x86

49e64360de6e6f43956349032834766f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetFileAttributesA
DeleteFileA
GetPrivateProfileIntA
WritePrivateProfileStringA
CopyFileA
GetProcAddress
GetModuleFileNameA
FreeLibrary
LoadLibraryA
CloseHandle
FlushFileBuffers
RtlUnwind
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
RaiseException
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
ExitProcess
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
GetStringTypeA
GetStringTypeW
ReadFile
SetStdHandle
LCMapStringA
LCMapStringW

advapi32

RegEnumKeyExA
RegOpenKeyExA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegQueryValueExA
RegQueryInfoKeyA

shlwapi

SHDeleteKeyA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
PluginEventHandler
PluginEventListener
PluginGetInfo
PluginInit
PluginInitEx
PluginInstall
PluginUninit
PluginUninstall

Sections

.text
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Components/InMedia/inmedia.cfg
Components/InMedia/peerid.dll
.dll regsvr32 windows:4 windows x86 arch:x86

c13cf1aae4b84f0d17967fb6ec4e509a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
LoadLibraryExA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
DisableThreadLibraryCalls
InitializeCriticalSection
HeapDestroy
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InterlockedDecrement
FindResourceA
GetVolumeInformationA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetSystemDirectoryA
GetTickCount
GetProcAddress
LoadLibraryA
CreateFileA
InterlockedExchange
LoadResource
SizeofResource
FreeLibrary
WideCharToMultiByte
GetModuleFileNameA
GetModuleHandleA
GetShortPathNameA
lstrlenA
MultiByteToWideChar
InterlockedIncrement
lstrlenW
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoW
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
ReadFile
SetStdHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
IsBadCodePtr
IsBadReadPtr
GetEnvironmentStringsW
GetEnvironmentStrings
SetEndOfFile
FreeEnvironmentStringsW
HeapFree
RtlUnwind
HeapAlloc
HeapReAlloc
GetTimeZoneInformation
GetSystemTime
GetLocalTime
RaiseException
GetCommandLineA
GetVersion
GetEnvironmentVariableA
GetVersionExA
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
ExitProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCPInfo
GetACP
GetOEMCP
TerminateProcess
GetCurrentProcess
HeapSize
WriteFile
SetFilePointer
FlushFileBuffers
CloseHandle
SetUnhandledExceptionFilter
Sleep
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA

user32

CharNextA

advapi32

RegEnumValueA
RegQueryInfoKeyA
RegSetValueExA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA
RegQueryValueExA

ole32

CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
StringFromIID

oleaut32

SysFreeString
VarUI4FromStr
LoadRegTypeLi
SysStringLen
SysAllocStringLen
SysAllocString

iphlpapi

GetAdaptersInfo

shlwapi

SHDeleteKeyA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 156KB - Virtual size: 154KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Components/InMedia/toolbar.bmp
Components/KanKan/IJL15.DLL
.dll windows:4 windows x86 arch:x86

43fd8fd13d2d05654de14de52b9d512d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FreeEnvironmentStringsA
CloseHandle
ReadFile
WriteFile
SetFilePointer
LoadLibraryA
GetProcAddress
FreeLibrary
OutputDebugStringA
GetCurrentThreadId
GetModuleFileNameA
lstrlenA
RtlUnwind
ExitProcess
TerminateProcess
GetCurrentProcess
GetCommandLineA
GetVersion
GetModuleHandleA
HeapAlloc
HeapFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
CreateFileA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
InterlockedDecrement
InterlockedIncrement
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetStdHandle
FlushFileBuffers

Exports

Exports

ijlErrorStr
ijlFree
ijlGetLibVersion
ijlInit
ijlRead
ijlWrite

Sections

.text
Size: 312KB - Virtual size: 309KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Components/KanKan/PPlayer.dll
.dll regsvr32 windows:4 windows x86 arch:x86

55b91a60ee351e324e41e10e86259fe5

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

3d:c3:09:c2:ed:0e:e4:35:09:fc:8b:d8:68:bc:4c:fd
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

26/04/2006, 00:00

Not After

31/05/2009, 23:59

Subject

CN=ShenZhen Thunder Networking Technologies Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Department of System Engineering,O=ShenZhen Thunder Networking Technologies Ltd.,L=ShenZhen,ST=GuangDong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Program Files\Thunder Network\KanKan\PPlayer.pdb

Imports

winmm

waveOutGetVolume

kernel32

FindResourceExW
GetPrivateProfileStringW
WideCharToMultiByte
GetProcAddress
SetCurrentDirectoryW
GetCurrentDirectoryW
WritePrivateProfileStringW
MoveFileW
DeleteFileW
GetLocalTime
CreateFileA
ReadFile
GetFileSize
GetVolumeInformationA
CreateProcessW
Sleep
GetTempPathW
CreateEventW
SetEvent
ResetEvent
WaitForMultipleObjects
InterlockedExchange
MoveFileA
DeleteFileA
FindClose
FindNextFileW
FindFirstFileW
SetThreadLocale
GetThreadLocale
CopyFileW
RaiseException
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoW
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetFileAttributesW
GetFileType
SetHandleCount
IsValidCodePage
GetOEMCP
GetModuleFileNameA
GetStdHandle
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
HeapCreate
ExitProcess
GetCPInfo
LCMapStringW
LCMapStringA
GetCommandLineA
VirtualQuery
GetSystemInfo
GetModuleHandleA
VirtualProtect
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RtlUnwind
GetSystemTimeAsFileTime
HeapSize
HeapReAlloc
HeapDestroy
GetLocaleInfoA
GetACP
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
GetVersionExA
EnterCriticalSection
LeaveCriticalSection
FlushInstructionCache
GetCurrentProcess
GetCurrentThreadId
SetLastError
GetLastError
lstrlenW
InitializeCriticalSection
DeleteCriticalSection
TerminateThread
WaitForSingleObject
lstrcmpiW
MulDiv
FreeLibrary
InterlockedDecrement
InterlockedIncrement
CreateFileW
SetFilePointer
WriteFile
CreateToolhelp32Snapshot
GetCurrentProcessId
Process32FirstW
Process32NextW
GetTickCount
CreateThread
CloseHandle
OutputDebugStringW
CreateDirectoryW
lstrcmpW
GlobalHandle
GlobalFree
LockResource
GlobalLock
GlobalUnlock
lstrlenA
GlobalAlloc
GetModuleFileNameW
LoadResource
GetModuleHandleW
LoadLibraryExW
SizeofResource
MultiByteToWideChar
LoadLibraryW
FindResourceW
GetStartupInfoA

user32

GetAsyncKeyState
SetWindowsHookExW
LoadMenuW
ScreenToClient
SetWindowLongW
UnregisterClassA
ShowWindow
GetClassInfoExW
LoadCursorW
DefWindowProcW
RegisterClassExW
CreateWindowExW
GetWindowLongW
CallWindowProcW
LoadBitmapW
SetTimer
DrawTextW
FillRect
PeekMessageW
ReleaseDC
GetDC
PostMessageW
EndPaint
BeginPaint
GetParent
GetSystemMetrics
CallNextHookEx
SetParent
GetForegroundWindow
SetActiveWindow
GetSubMenu
TrackPopupMenu
UnhookWindowsHookEx
EnableMenuItem
ShowCursor
GetCursorPos
SetLayeredWindowAttributes
GetCursor
TrackMouseEvent
SetCursor
SetClassLongW
CopyAcceleratorTableW
IsDialogMessageW
GetMessageW
PostThreadMessageW
GetClientRect
KillTimer
CopyRect
wsprintfW
CharNextW
FindWindowW
SystemParametersInfoW
GetDialogBaseUnits
SetCapture
ReleaseCapture
DestroyCursor
DestroyWindow
GetSysColor
MapDialogRect
SetWindowPos
SendDlgItemMessageW
GetWindow
IsChild
GetDlgItem
SetWindowContextHelpId
SendMessageW
SetWindowTextW
GetWindowTextW
GetWindowTextLengthW
GetFocus
RegisterWindowMessageW
CreateDialogIndirectParamW
InvalidateRect
SetFocus
IsWindow
InvalidateRgn
RedrawWindow
GetClassNameW
GetDesktopWindow
GetKeyState
MoveWindow
IntersectRect
EqualRect
OffsetRect
SetWindowRgn
GetNextDlgTabItem
UnionRect
PtInRect
MessageBoxW
LoadStringW
CreateAcceleratorTableW
EnumChildWindows
DestroyAcceleratorTable
ClientToScreen

gdi32

CloseMetaFile
DeleteMetaFile
CreateRectRgnIndirect
CreateFontW
CreateSolidBrush
LPtoDP
SaveDC
SetMapMode
SetWindowOrgEx
SetViewportOrgEx
RestoreDC
CreateDCW
SetWindowExtEx
GetDeviceCaps
GetTextMetricsW
SetBkColor
GetTextExtentPoint32W
StretchBlt
GetObjectW
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
CreateBrushIndirect
SetTextColor
SetBkMode
DeleteDC
GetStockObject
SelectObject
DeleteObject
CreateFontIndirectW
CreateMetaFileW
TextOutW
LineTo
MoveToEx
CreatePen
Rectangle
GetTextExtentPointW

advapi32

RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyW
RegOpenKeyW
RegQueryValueExW
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW

shell32

ShellExecuteW
SHGetFolderPathW
SHBrowseForFolderW
SHGetPathFromIDListW

ole32

OleSaveToStream
WriteClassStm
CreateOleAdviseHolder
CreateDataAdviseHolder
OleRegGetMiscStatus
OleRegGetUserType
OleRegEnumVerbs
OleLoadFromStream
CoInitialize
CoUninitialize
CLSIDFromString
CLSIDFromProgID
CoGetClassObject
OleLockRunning
StringFromGUID2
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance

oleaut32

SysFreeString
SysAllocString
VarUI4FromStr
SysStringLen
VariantInit
VariantClear
SysAllocStringLen
SysStringByteLen
OleCreateFontIndirect
LoadRegTypeLi
LoadTypeLi
OleTranslateColor
SysAllocStringByteLen
VariantChangeType
OleCreatePropertyFrame
RegisterTypeLi
GetErrorInfo

shlwapi

PathFileExistsW

ws2_32

WSAGetLastError
htonl
bind
shutdown
setsockopt
closesocket
listen
recvfrom
recv
send
connect
ntohs
ntohl
inet_ntoa
socket
sendto
htons
WSAStartup
WSACleanup
select
gethostbyname
inet_addr
gethostbyaddr
accept
ioctlsocket

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

iphlpapi

GetAdaptersInfo

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 508KB - Virtual size: 504KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 152KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 116KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Components/KanKan/PlayerHelper.dll
.dll windows:4 windows x86 arch:x86

20a3347ed63625383c658c0ce1ceca6a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InitializeCriticalSection
DeleteCriticalSection
CreateEventA
GetPrivateProfileStringA
GetPrivateProfileIntA
CreateThread
DeleteFileA
GetLastError
FreeLibrary
GetProcAddress
LoadLibraryA
MoveFileA
CloseHandle
WriteFile
CreateFileA
GetTempFileNameA
GetTempPathA
TerminateThread
WaitForSingleObject
InterlockedDecrement
WaitForMultipleObjects
LeaveCriticalSection
EnterCriticalSection
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
ReadFile
HeapDestroy
OutputDebugStringA
GetModuleHandleA
GetVolumeInformationA
WritePrivateProfileStringA
GetSystemDirectoryA
GetTickCount
lstrlenA
GetFileAttributesA
GetModuleFileNameA
lstrlenW
SetEvent
WideCharToMultiByte
LocalFree
MultiByteToWideChar

advapi32

RegQueryValueExA
RegOpenKeyExA

ole32

CoCreateInstance
OleRun

oleaut32

VariantChangeType
GetErrorInfo
SysAllocString
VariantInit
VariantClear
SysFreeString
VariantCopy
SysAllocStringByteLen
SysStringByteLen

iphlpapi

GetAdaptersInfo

wininet

InternetOpenUrlA
InternetOpenA
InternetCloseHandle
HttpQueryInfoA
InternetReadFile
InternetSetCookieA
InternetGetCookieA

ws2_32

gethostbyname
inet_addr
htons
WSAGetLastError
closesocket
sendto
setsockopt
WSACreateEvent
WSAResetEvent
WSAEventSelect
WSAEnumNetworkEvents
WSAWaitForMultipleEvents
send
recv
connect
htonl
ntohl
WSACloseEvent
inet_ntoa
socket

msvcp60

??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??_8?$basic_ofstream@DU?$char_traits@D@std@@@std@@7B@
??0?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAE@PAU_iobuf@@@Z
??_7?$basic_ofstream@DU?$char_traits@D@std@@@std@@6B@
?open@?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAEPAV12@PBDH@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@D@Z
?_Init@?$basic_filebuf@DU?$char_traits@D@std@@@std@@IAEXPAU_iobuf@@W4_Initfl@12@@Z
??1?$basic_filebuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??_7logic_error@std@@6B@
??1logic_error@std@@UAE@XZ
??0logic_error@std@@QAE@ABV01@@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??0ios_base@std@@IAE@XZ
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??_7?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@6B@
?_Tidy@?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??1ios_base@std@@UAE@XZ
??_8?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@7B@
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N1@Z
??0?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??_7?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@6B@
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??1?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Xran@std@@YAXXZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Xlen@std@@YAXXZ
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z

msvcrt

??0exception@@QAE@ABV0@@Z
_strnicmp
_stricmp
_adjust_fdiv
_initterm
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_onexit
__dllonexit
wcslen
_ui64toa
_ultoa
malloc
free
fclose
strrchr
_except_handler3
sscanf
?what@exception@@UBEPBDXZ
??0exception@@QAE@ABQBD@Z
??0exception@@QAE@XZ
strncmp
atoi
time
srand
rand
sprintf
strncpy
strtoul
atol
strstr
_purecall
_atoi64
??2@YAPAXI@Z
memmove
??1exception@@UAE@XZ
_CxxThrowException
_itoa
__CxxFrameHandler

Exports

Exports

ForceRequestMovieADs
GetCancelEvent
GetFileByMoviePos
GetFileByMoviePosEx
GetFileByMoviePosExEx
GetPosListByMovie
InitHelper
PrepareForMovie
SendStat
SendStatEx
SetPlatformID
UninitHelper

Sections

.text
Size: 168KB - Virtual size: 166KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Components/KanKan/XAFilter.ax
.dll regsvr32 windows:4 windows x86 arch:x86

674830c68ee84b9a1ada4313fff60d42

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\Dev\XAFilter\pdb\XAFilter.pdb

Imports

winmm

timeSetEvent
timeGetTime

shfolder

SHGetFolderPathW

ws2_32

gethostbyname
htons
sendto
htonl
WSASocketW
setsockopt
closesocket
inet_addr

kernel32

EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
WideCharToMultiByte
lstrlenW
CloseHandle
GetCurrentDirectoryW
SetCurrentDirectoryW
MultiByteToWideChar
lstrlenA
GetLastError
GetModuleFileNameA
GetVersionExW
DisableThreadLibraryCalls
lstrcpynW
InterlockedIncrement
InterlockedDecrement
CreateEventW
SetEvent
ResetEvent
WaitForMultipleObjects
ReleaseSemaphore
GetSystemInfo
VirtualFree
lstrcmpW
DuplicateHandle
GetCurrentProcess
GetCurrentThreadId
CreateSemaphoreW
VirtualAlloc
GetModuleHandleW
lstrcmpiW
InterlockedExchange
SetThreadPriority
GetThreadPriority
GetCurrentThread
GetTickCount
GlobalFree
CreateFileW
GetFileSize
GlobalAlloc
GlobalLock
GlobalUnlock
ReadFile
MulDiv
LoadResource
SizeofResource
FindResourceW
LoadLibraryExW
RaiseException
SetLastError
WaitForSingleObject
Sleep
CreateThread
FindResourceExW
OutputDebugStringA
LoadLibraryA
HeapSize
WriteFile
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
ExitProcess
GetModuleHandleA
HeapReAlloc
RtlUnwind
GetProcessHeap
HeapAlloc
EnumSystemLocalesA
GetVersionExA
HeapFree
GetCommandLineA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
CompareStringA
CompareStringW
GetStringTypeA
GetStringTypeW
IsValidLocale
GetLocaleInfoW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FreeLibrary
LoadLibraryW
GetProcAddress
CopyFileW
CreateDirectoryW
GetModuleFileNameW
FindClose
FindNextFileW
DeleteFileW
FindFirstFileW
GetFileAttributesW
OutputDebugStringW
InterlockedCompareExchange
IsProcessorFeaturePresent
LockResource
GetConsoleCP
GetLocaleInfoA
GetConsoleMode
SetFilePointer
GetUserDefaultLCID
FlushInstructionCache
FlushFileBuffers
CreateFileA
GetThreadLocale
SetEndOfFile

user32

AdjustWindowRectEx
DestroyWindow
CreateWindowExW
ReleaseCapture
GetWindowLongW
CreateAcceleratorTableW
SetWindowLongW
EndPaint
GetSysColor
BeginPaint
ScreenToClient
ClientToScreen
GetClientRect
GetDlgItem
SetFocus
SetCapture
MoveWindow
RegisterClassExW
GetParent
LoadCursorW
FillRect
IsChild
GetClassInfoExW
GetFocus
InvalidateRect
DestroyAcceleratorTable
RedrawWindow
GetMenu
GetWindowTextLengthW
GetWindowTextW
GetClassNameW
DefWindowProcW
SetWindowTextW
CallWindowProcW
IsWindow
InvalidateRgn
SendMessageW
CharNextW
GetDC
GetDesktopWindow
ReleaseDC
DispatchMessageW
GetQueueStatus
RegisterWindowMessageW
MsgWaitForMultipleObjects
PeekMessageW
GetWindowRect
PostThreadMessageW
GetMessageW
UnregisterClassA
GetWindow
SetWindowPos

gdi32

ExtTextOutW
SetBkColor
GetTextExtentPoint32W
GetObjectW
GetStockObject
BitBlt
CreateCompatibleBitmap
CreateSolidBrush
DeleteObject
DeleteDC
SelectObject
CreateDIBSection
CreateCompatibleDC
GetDeviceCaps
SetTextColor
CreateFontIndirectW

advapi32

RegCreateKeyExW
RegDeleteValueW
RegCreateKeyW
RegSetValueW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegDeleteKeyW
RegQueryInfoKeyW

shell32

ShellExecuteW

ole32

CoInitialize
CoUninitialize
CoCreateInstance
StringFromGUID2
CoTaskMemAlloc
CoTaskMemFree
CreateStreamOnHGlobal
CoTaskMemRealloc
OleInitialize
OleUninitialize
CLSIDFromProgID
CoGetClassObject
CLSIDFromString
OleLockRunning
CoFreeUnusedLibraries

oleaut32

SysStringLen
SysStringByteLen
SysAllocStringLen
VariantInit
OleCreateFontIndirect
VariantClear
GetErrorInfo
LoadTypeLi
SysFreeString
SysAllocString
OleLoadPicture
VarUI4FromStr
LoadRegTypeLi

ijl15

ord3
ord4
ord2

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 456KB - Virtual size: 453KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Components/KanKan/XLNet.dll
.dll windows:4 windows x86 arch:x86

4e96b197ce8b5dfcf3e0d7a86735d74b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleFileNameA
GetSystemTime
WritePrivateProfileStringA
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
TerminateThread
CloseHandle
WaitForMultipleObjects
CreateEventA
GlobalFree
SetLastError
GetLastError
WaitForSingleObject
DeleteFileA

ws2_32

gethostbyname
inet_addr
getservbyname
htons
gethostbyaddr
ntohs
getservbyport
WSACleanup
WSAStartup
WSACreateEvent
WSAGetLastError
socket
bind
WSAEnumNetworkEvents
WSAWaitForMultipleEvents
send
WSAResetEvent
recv
connect
closesocket
getsockopt
setsockopt
htonl
inet_ntoa
WSAEventSelect
WSASetLastError

wininet

InternetQueryOptionA
InternetCanonicalizeUrlA
InternetCrackUrlA

msvcp60

?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?_Xlen@std@@YAXXZ
?_Xran@std@@YAXXZ
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

msvcrt

strtoul
fputc
_errno
_fdopen
fprintf
ftell
_stricmp
_strnicmp
_itoa
_adjust_fdiv
malloc
_initterm
_onexit
__dllonexit
fwrite
fopen
fread
fclose
time
srand
rand
strncmp
_ismbcspace
_mbschr
_mbscmp
atoi
_mbsrchr
__CxxFrameHandler
sprintf
??2@YAPAXI@Z
free
strncpy
calloc
strchr
_beginthreadex
memmove
strstr

Exports

Exports

XLGetHostByName
XLHttpAddRequestHeaders
XLHttpEndRequest
XLHttpOpenRequest
XLHttpQueryInfo
XLHttpSendRequest
XLNetCloseHandle
XLNetConnect
XLNetOpen
XLNetOpenUrl
XLNetQueryOption
XLNetReadFile
XLNetSetOption
XLNetWriteFile
XLSktAttach
XLSktClose
XLSktConnect
XLSktConnectEx
XLSktGetOpt
XLSktRecv
XLSktSend
XLSktSetOpt
XLSktSetProxy
XLSktSocket
XLUnZip
XLZip

Sections

.text
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Components/KanKan/XPlayer.dll
.dll regsvr32 windows:4 windows x86 arch:x86

c6a50680083f5b72112cd57d284dc508

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LocalFree
SetStdHandle
FlushFileBuffers
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
UnhandledExceptionFilter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
InterlockedCompareExchange
GetFileType
GetStdHandle
SetHandleCount
LCMapStringW
LCMapStringA
SetUnhandledExceptionFilter
GetCPInfo
GetOEMCP
HeapSize
TerminateProcess
IsBadWritePtr
VirtualFree
HeapCreate
HeapDestroy
TlsGetValue
TlsSetValue
TlsFree
TlsAlloc
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetCommandLineA
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
IsProcessorFeaturePresent
GetModuleHandleW
DeviceIoControl
GetDiskFreeSpaceA
GlobalMemoryStatus
GetLocalTime
UnmapViewOfFile
CreateFileMappingA
MapViewOfFile
CreateThread
TerminateThread
CreateProcessA
Sleep
GetModuleHandleA
GetTickCount
SizeofResource
WriteFile
InterlockedDecrement
InterlockedIncrement
GetModuleFileNameA
CreateDirectoryA
CopyFileA
GetProcAddress
FindFirstFileA
DeleteFileA
FindNextFileA
FindClose
GetFileAttributesA
OutputDebugStringA
InterlockedExchange
DisableThreadLibraryCalls
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GlobalAlloc
GlobalLock
GlobalUnlock
HeapReAlloc
RtlUnwind
ExitProcess
RaiseException
GetCurrentProcess
FlushInstructionCache
HeapAlloc
SetLastError
LockResource
LoadLibraryA
FindResourceA
LoadResource
FreeLibrary
GetLastError
lstrlenW
MulDiv
lstrcpynA
GetProcessHeap
HeapFree
WideCharToMultiByte
CreateFileA
GetFileSize
ReadFile
SetFilePointer
CloseHandle
GetCurrentProcessId
GetCurrentThreadId
lstrlenA
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
GetStartupInfoA

user32

wvsprintfA
EnableWindow
GetDlgItem
CallNextHookEx
DestroyWindow
CreateWindowExA
GetClientRect
PostMessageA
SetWindowsHookExA
GetForegroundWindow
PtInRect
GetClassLongA
SetClassLongA
GetCursorPos
WindowFromPoint
SetTimer
KillTimer
MoveWindow
RegisterClassExA
DefWindowProcA
LoadCursorA
MessageBoxA
FindWindowExA
GetMessageA
TranslateMessage
DispatchMessageA
CallWindowProcA
EndDialog
SendMessageA
GetNextDlgTabItem
CopyAcceleratorTableA
IsDialogMessageA
InvalidateRect
IntersectRect
EqualRect
OffsetRect
SetWindowRgn
UnionRect
SetCursor
MapDialogRect
SetWindowContextHelpId
SetWindowPos
EnumChildWindows
ShowWindow
GetKeyState
IsWindow
GetWindow
SetFocus
GetFocus
GetParent
IsChild
SystemParametersInfoA
SendDlgItemMessageA
GetSysColor
DrawTextA
LoadBitmapA
BeginPaint
EndPaint
FillRect
GetDC
ReleaseDC
GetDialogBaseUnits
wsprintfA
SetWindowLongA
GetWindowLongA
UnhookWindowsHookEx
IsWindowEnabled

gdi32

SetWindowExtEx
CloseMetaFile
DeleteMetaFile
CreateRectRgnIndirect
CreateSolidBrush
SetBkColor
Rectangle
SetTextColor
SetBkMode
LPtoDP
SaveDC
SetMapMode
SetWindowOrgEx
SetViewportOrgEx
RestoreDC
GetObjectA
CreateCompatibleDC
CreateCompatibleBitmap
GetStockObject
BitBlt
SetStretchBltMode
StretchBlt
DeleteDC
CreateMetaFileA
GetDeviceCaps
CreateFontIndirectA
SelectObject
GetTextMetricsA
GetTextExtentPointA
DeleteObject

advapi32

RegOpenKeyA
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegCreateKeyA
RegOpenKeyExA
RegQueryValueA
RegCreateKeyExA

shell32

SHGetFolderPathA

ole32

GetRunningObjectTable
CreateItemMoniker
CreateDataAdviseHolder
CoCreateInstance
CoInitialize
CoUninitialize
CoFreeUnusedLibraries
CreateStreamOnHGlobal
OleRegEnumVerbs
OleRegGetUserType
CreateOleAdviseHolder
OleRegGetMiscStatus
CoTaskMemFree
CoTaskMemAlloc

oleaut32

SysAllocStringByteLen
OleCreatePropertyFrame
LoadTypeLi
LoadRegTypeLi
VariantChangeType
SysStringByteLen
SysStringLen
SysAllocStringLen
OleTranslateColor
VariantClear
SysAllocString
VariantInit
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
SysFreeString
SafeArrayDestroy
GetErrorInfo

atl71

ord30
ord38
ord43
ord44
ord11
ord10
ord54
ord48
ord60
ord18
ord64
ord49
ord23
ord61
ord15
ord50
ord51
ord58
ord31
ord46
ord32
ord27
ord26
ord28
ord36
ord65
ord42
ord47
ord66

shlwapi

StrCmpW

winmm

waveOutSetVolume
waveOutGetVolume

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 184KB - Virtual size: 183KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Components/KanKan/Xdrm.dll
.dll regsvr32 windows:4 windows x86 arch:x86

1dfc8d2416f1e5ce9c8a6e5e2fa2cb61

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DeleteAtom
Sleep
FindAtomA
CloseHandle
SetFilePointer
ReadFile
GetFileSize
CreateFileA
GetVolumeInformationA
lstrlenW
lstrlenA
GetShortPathNameA
GetModuleHandleA
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
lstrcmpiA
lstrcpynA
WaitForSingleObject
DisableThreadLibraryCalls
InitializeCriticalSection
HeapDestroy
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetFileAttributesA
FindClose
FindNextFileA
DeleteFileA
FindFirstFileA
GetProcAddress
LoadLibraryA
CopyFileA
CreateDirectoryA
InterlockedDecrement
InterlockedIncrement
TerminateThread
CreateThread
GetLocalTime
WritePrivateProfileStringA
GetPrivateProfileStringA
GetModuleFileNameA
MultiByteToWideChar
GetLastError
WideCharToMultiByte
AddAtomA
IsDBCSLeadByte
OutputDebugStringA
RaiseException
FlushFileBuffers
SetStdHandle
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
WriteFile
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
RtlUnwind
HeapFree
HeapAlloc
HeapReAlloc
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapSize
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetEnvironmentVariableA
GetVersionExA
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA

user32

CharNextA
wsprintfA

advapi32

RegQueryValueExA
RegEnumValueA
RegQueryInfoKeyA
RegSetValueExA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA
RegCreateKeyA

ole32

StringFromIID
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc

oleaut32

SysStringLen
SysFreeString
LoadRegTypeLi
VarUI4FromStr

shlwapi

SHDeleteKeyA

wininet

InternetReadFile
InternetOpenUrlA
InternetOpenA
InternetCloseHandle

iphlpapi

GetAdaptersInfo

shfolder

SHGetFolderPathA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Components/KanKan/XmvSource.dll
.dll regsvr32 windows:4 windows x86 arch:x86

162f6c88b9fe9655bdbb45b9362a0fba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

MapViewOfFile
OpenFileMappingA
UnmapViewOfFile
LoadLibraryA
OutputDebugStringA
GetFileAttributesA
FindClose
FindNextFileA
DeleteFileA
FindFirstFileA
GetLastError
GetProcAddress
CopyFileA
CreateDirectoryA
InterlockedIncrement
InterlockedDecrement
GetFileType
GetModuleFileNameA
CreateFileA
GetFileSize
ReadFile
SetFilePointer
FreeLibrary
CloseHandle
RtlUnwind
GetCommandLineA
GetVersion
HeapFree
HeapAlloc
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
GetCPInfo
GetACP
GetOEMCP
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
SetHandleCount
GetStdHandle
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
SetStdHandle
FlushFileBuffers
RaiseException

user32

wsprintfA

advapi32

RegCreateKeyA
RegCloseKey
RegSetValueExA
RegQueryValueExA

shfolder

SHGetFolderPathA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
WMCreateStreamForURL

Sections

.text
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Components/KanKan/atl71.dll
.dll windows:4 windows x86 arch:x86

7c3004ebf21f282412fa952c164aa2bb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

atl71.pdb

Imports

kernel32

InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExW
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetCurrentThreadId
lstrlenW
lstrcpyW
GetLastError
DisableThreadLibraryCalls
GetVersionExA
InterlockedIncrement
InterlockedDecrement
FreeLibrary
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
lstrcmpiW
lstrcpynW
CloseHandle
ReadFile
GetFileSize
CreateFileW
GetModuleHandleW
GetModuleFileNameW
WideCharToMultiByte
HeapFree
GetProcessHeap
WaitForSingleObject
GlobalAlloc
FindResourceA
MulDiv
lstrcatW
HeapAlloc
FlushInstructionCache
GetCurrentProcess
GlobalUnlock
GlobalLock
lstrcmpW
SetLastError
GlobalFree
GlobalHandle
LockResource
lstrcmpA
GetModuleHandleA
GetTickCount
GetProcAddress
ExitProcess
HeapSize
DebugBreak
HeapReAlloc
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
lstrcatA
lstrcpyA
lstrlenA
GetModuleFileNameA
RtlUnwind
VirtualQuery
LocalAlloc
LoadLibraryA

shlwapi

PathFindExtensionW

Exports

Exports

AtlAdvise
AtlAxAttachControl
AtlAxCreateControl
AtlAxCreateControlEx
AtlAxCreateControlLic
AtlAxCreateControlLicEx
AtlAxCreateDialogA
AtlAxCreateDialogW
AtlAxDialogBoxA
AtlAxDialogBoxW
AtlAxGetControl
AtlAxGetHost
AtlAxWinInit
AtlCallTermFunc
AtlComModuleGetClassObject
AtlComModuleRegisterClassObjects
AtlComModuleRegisterServer
AtlComModuleRevokeClassObjects
AtlComModuleUnregisterServer
AtlComPtrAssign
AtlComQIPtrAssign
AtlCreateRegistrar
AtlCreateTargetDC
AtlDevModeW2A
AtlFreeMarshalStream
AtlGetObjectSourceInterface
AtlGetVersion
AtlHiMetricToPixel
AtlIPersistPropertyBag_Load
AtlIPersistPropertyBag_Save
AtlIPersistStreamInit_Load
AtlIPersistStreamInit_Save
AtlInternalQueryInterface
AtlLoadTypeLib
AtlMarshalPtrInProc
AtlModuleAddTermFunc
AtlPixelToHiMetric
AtlRegisterClassCategoriesHelper
AtlRegisterTypeLib
AtlSetErrorInfo
AtlUnRegisterTypeLib
AtlUnadvise
AtlUnmarshalPtr
AtlUpdateRegistryFromResourceD
AtlWaitWithMessageLoop
AtlWinModuleAddCreateWndData
AtlWinModuleExtractCreateWndData
AtlWinModuleInit
AtlWinModuleRegisterClassExA
AtlWinModuleRegisterClassExW
AtlWinModuleRegisterWndClassInfoA
AtlWinModuleRegisterWndClassInfoW
AtlWinModuleTerm

Sections

.text
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Components/P4PClient/P4PClient.dll
.dll regsvr32 windows:4 windows x86 arch:x86

bf292fbc16e068116c121beaeb2c46ea

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenW
FlushInstructionCache
GetCurrentProcess
WritePrivateProfileStringA
lstrcatA
WideCharToMultiByte
InterlockedIncrement
lstrlenA
InterlockedDecrement
GlobalUnlock
GlobalLock
GlobalAlloc
lstrcmpA
HeapDestroy
DeleteCriticalSection
DisableThreadLibraryCalls
FreeLibrary
GetProcAddress
lstrcpyA
GetModuleFileNameA
InitializeCriticalSection
lstrcpyW
MultiByteToWideChar
EnterCriticalSection
GetCurrentThreadId
LeaveCriticalSection
OutputDebugStringA
LoadLibraryA

user32

UnregisterClassA
DefWindowProcA
SetTimer
KillTimer
GetWindow
SetWindowTextA
GetWindowTextA
GetWindowTextLengthA
GetSysColor
CallWindowProcA
RegisterWindowMessageA
DestroyWindow
PostMessageA
MoveWindow
SendMessageA
IsWindow
RegisterClassExA
wsprintfA
LoadCursorA
GetClassInfoExA
SetWindowLongA
GetWindowLongA
CreateWindowExA
LoadStringA
ShowWindow
CharNextA
InvalidateRgn
InvalidateRect
SetCapture
ReleaseCapture
CreateAcceleratorTableA
GetDesktopWindow
RedrawWindow
GetParent
GetClassNameA
SetWindowPos
GetFocus
IsChild
SetFocus
GetDC
ReleaseDC
BeginPaint
GetClientRect
FillRect
EndPaint
GetDlgItem

gdi32

GetStockObject
DeleteDC
BitBlt
GetObjectA
CreateCompatibleBitmap
CreateSolidBrush
GetDeviceCaps
SelectObject
CreateCompatibleDC
DeleteObject

ole32

CoTaskMemAlloc
StringFromCLSID
CoTaskMemFree
CoCreateInstance
CLSIDFromString
CLSIDFromProgID
OleUninitialize
OleInitialize
OleLockRunning
CreateStreamOnHGlobal

oleaut32

VariantClear
DispCallFunc
SysAllocString
OleCreateFontIndirect
LoadTypeLi
RegisterTypeLi
SysAllocStringLen
SysStringLen
LoadRegTypeLi
SysFreeString

msvcp60

?_Xran@std@@YAXXZ
?_Xlen@std@@YAXXZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??0runtime_error@std@@QAE@ABV01@@Z
??1runtime_error@std@@UAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??_7runtime_error@std@@6B@
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

msvcrt

strncpy
??2@YAPAXI@Z
??0exception@@QAE@ABQBD@Z
memmove
??1exception@@UAE@XZ
_CxxThrowException
__CxxFrameHandler
sprintf
??0exception@@QAE@ABV0@@Z
time
wcsrchr
_mbsnbcpy
_purecall
_except_handler3
strrchr
_snprintf
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_initterm
malloc
_adjust_fdiv
_wcsicmp
_strupr
free

shlwapi

PathCombineA

wininet

InternetSetCookieA

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Components/P4PClient/p4p.dat
Components/P4PClient/p4p_local.htm
.html
Components/ResWorker/DataProcessor_00.dll
.dll windows:4 windows x86 arch:x86

9de6b589940138ff813379f04425c7ec

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_adjust_fdiv
malloc
_initterm
free
_onexit
__dllonexit
isdigit
strstr
tolower
strchr
isspace
isalnum
isalpha
fseek
ftell
fread
fopen
fclose
fprintf
_purecall
memmove
atoi
strncmp
??2@YAPAXI@Z
??3@YAXPAX@Z
strrchr
strncpy
_snprintf
__CxxFrameHandler
_stricmp

msvcp60

??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?_Refcnt@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEAAEPBD@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
?_Xran@std@@YAXXZ
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z

kernel32

GetPrivateProfileStringA
GetFileAttributesA
GetModuleFileNameA
WaitForSingleObject
GetTickCount
OpenFileMappingA
GetLastError
CreateFileMappingA
MapViewOfFile
CreateMutexA
UnmapViewOfFile
CloseHandle
ReleaseMutex

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Exports

Exports

get_chain_head_type
get_data_from_template
get_last_title
get_monitor_version_in_template
get_pageurl_by_dspider
get_preurl_for_hub
get_software_count_monitor
get_software_stat_monitor
get_title
init_monitor_mgr
init_template_mgr
is_domain_disable
is_monitor_cookie_in_template
is_monitor_in_template
is_text_valid_by_template
is_url_valid
put_last_title
put_title_pair
set_pageurl_invalid
uninit_monitor_mgr
uninit_template_mgr

Sections

.text
Size: 88KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Components/ResWorker/DsBho_00.dll
.dll windows:4 windows x86 arch:x86

474e34edcfdab16c0827bbaf5ea4d68a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wininet

InternetGetCookieA

kernel32

OutputDebugStringA
InitializeCriticalSection
FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleFileNameA
LeaveCriticalSection
EnterCriticalSection
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
lstrlenW
ReleaseMutex
CreateMutexA
WaitForSingleObject
FindClose
FindNextFileA
DeleteFileA
FindFirstFileA
GetFileAttributesA
WritePrivateProfileStringA
GetPrivateProfileStringA
HeapDestroy
WideCharToMultiByte

advapi32

RegOpenKeyExA
RegCloseKey
RegQueryValueExA

ole32

CoGetClassObject

oleaut32

SysFreeString
VariantCopy
VariantChangeType
VariantClear
SysAllocStringLen

msvcp60

?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Xran@std@@YAXXZ
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIPBDI@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?_Xlen@std@@YAXXZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z

urlmon

CoInternetGetSession

msvcrt

_stricmp
__dllonexit
_onexit
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
malloc
free
__CxxFrameHandler
strrchr
_snprintf
??2@YAPAXI@Z
toupper
time
strncmp
strchr
asctime
localtime
memmove
fopen
fclose
fprintf
fflush
gmtime
strncpy

Exports

Exports

DsCreateBhoInstance
DsDestroyBhoInstance
DsEventBeforeNavigate2
DsEventOnClick
DsEventOnNewWindow3
DsEventOnProgressChange
DsEventOnQuit
DsInvoke
DsSetSite

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Components/ResWorker/DsXlCom.dll
.dll regsvr32 windows:4 windows x86 arch:x86

bab33a4717514a3e820b2f45d1128615

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

WSAGetLastError

mfc42

ord6467
ord1131
ord6354
ord3953
ord5500
ord2727
ord2730
ord2729
ord1799
ord446
ord743
ord614
ord290
ord4226
ord4003
ord1113
ord3258
ord1132
ord1105
ord1575
ord1168
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord1255
ord1578
ord600
ord826
ord269
ord815
ord561
ord3738
ord4424
ord4622
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5714
ord5289
ord5307
ord4698
ord4079
ord2725
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord4274
ord823
ord1116
ord825
ord1176
ord1114

msvcrt

_snprintf
atoi
strncpy
realloc
sprintf
_CxxThrowException
localtime
time
malloc
free
__CxxFrameHandler
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@ABQBD@Z
__dllonexit
_onexit
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
memmove
strncmp
strrchr
printf
strstr
strchr

kernel32

GetCurrentThreadId
WritePrivateProfileStringA
GetStdHandle
GetLastError
CreateEventA
MultiByteToWideChar
lstrlenW
lstrcpynA
WideCharToMultiByte
GetModuleFileNameA
SetFilePointer
lstrlenA
lstrcmpiA
LoadLibraryA
GetProcAddress
FreeLibrary
DeleteFileA
GetFileSize
CloseHandle
ReadFile
GetPrivateProfileStringA
GetPrivateProfileIntA
WriteFile
GetFileAttributesA
FindClose
FindFirstFileA
LocalFree
LocalAlloc
WaitForSingleObject
SetEvent
CreateFileA
TerminateThread
CreateThread

user32

wsprintfA

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA

oleaut32

SysAllocStringLen
SysFreeString
SysStringLen

msvcp60

??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHIIPBDI@Z
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
??1?$ctype@D@std@@UAE@XZ
?id@?$ctype@D@std@@2V0locale@2@A
?_Id_cnt@id@locale@std@@0HA
?_Getfacet@locale@std@@QBEPBVfacet@12@I_N@Z
?_Iscloc@locale@std@@QBE_NXZ
??_7facet@locale@std@@6B@
??_7ctype_base@std@@6B@
??_7?$ctype@D@std@@6B@
??0_Locinfo@std@@QAE@PBD@Z
_Getctype
?_Cltab@?$ctype@D@std@@0PBFB
?_Term@?$ctype@D@std@@KAXXZ
??1_Locinfo@std@@QAE@XZ
??_7bad_cast@std@@6B@
??1ctype_base@std@@UAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Xlen@std@@YAXXZ
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Xran@std@@YAXXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1ios_base@std@@UAE@XZ
??1?$basic_ifstream@DU?$char_traits@D@std@@@std@@UAE@XZ
?close@?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAEPAV12@XZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADHD@Z
??1locale@std@@QAE@XZ
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
??1bad_cast@std@@UAE@XZ
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@
??1?$basic_filebuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?open@?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAEPAV12@PBDH@Z
??_7?$basic_ifstream@DU?$char_traits@D@std@@@std@@6B@
??0?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??0ios_base@std@@IAE@XZ
??_8?$basic_ifstream@DU?$char_traits@D@std@@@std@@7B@
?do_toupper@?$ctype@D@std@@MBEDD@Z
?do_toupper@?$ctype@D@std@@MBEPBDPADPBD@Z
?do_tolower@?$ctype@D@std@@MBEDD@Z
?do_tolower@?$ctype@D@std@@MBEPBDPADPBD@Z
??0bad_cast@std@@QAE@ABV01@@Z

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
InitCompress
StatInfoMgr_test

Sections

.text
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Components/ResWorker/MediaWorker.dll
.dll windows:4 windows x86 arch:x86

c00fa774264cade4c3f3126d72b7404a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wmvcore

WMCreateEditor

avifil32

AVIFileOpenA
AVIStreamSampleToTime
AVIStreamStart
AVIStreamLength
AVIStreamRelease
AVIFileGetStream
AVIFileExit
AVIFileRelease
AVIFileInit

kernel32

WideCharToMultiByte
lstrcmpiA
lstrlenA
lstrcatA
CloseHandle
ReadFile
CreateFileA
MultiByteToWideChar
GetFileSize
lstrlenW

user32

wsprintfA

ole32

CoInitialize
CoCreateInstance
CoUninitialize

oleaut32

SysAllocString
SysFreeString

msvcrt

_adjust_fdiv
malloc
_initterm
free
_ftol
__CxxFrameHandler
wcslen
??2@YAPAXI@Z
??3@YAXPAX@Z

Exports

Exports

ExtractMediaTag

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 450B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Components/ResWorker/dllswitch.ini
Components/ResWorker/dsmonitortemp.xml
Components/Search/XLSearch.dll
.dll regsvr32 windows:4 windows x86 arch:x86

c7912199a211172b9a2e85bfc9d296b3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord2864
ord4275
ord2379
ord4407
ord3610
ord2411
ord2023
ord4218
ord2578
ord4398
ord3582
ord656
ord6242
ord2860
ord2080
ord6197
ord3089
ord5981
ord3495
ord3663
ord3571
ord3626
ord613
ord2414
ord5785
ord4123
ord289
ord6199
ord1641
ord1146
ord5789
ord5678
ord5736
ord3693
ord3619
ord537
ord3742
ord818
ord860
ord1206
ord6467
ord1223
ord2727
ord2730
ord2729
ord4003
ord2152
ord1233
ord3258
ord2078
ord4160
ord6215
ord2614
ord2818
ord6282
ord4774
ord4538
ord6453
ord858
ord535
ord4083
ord1803
ord4274
ord6375
ord4486
ord2554
ord2512
ord3262
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord323
ord5714
ord4622
ord3738
ord561
ord815
ord5500
ord1132
ord1131
ord6354
ord823
ord1799
ord446
ord743
ord614
ord290
ord4226
ord1113
ord1114
ord539
ord924
ord922
ord2393
ord4129
ord6283
ord1140
ord4277
ord6663
ord4202
ord1997
ord5572
ord5448
ord2915
ord798
ord3318
ord532
ord5450
ord6394
ord5440
ord6383
ord4220
ord2584
ord3654
ord2438
ord2863
ord6605
ord1644
ord1193
ord1151
ord541
ord1116
ord6930
ord6928
ord6143
ord939
ord3317
ord6883
ord4278
ord6877
ord6662
ord2764
ord6779
ord941
ord1601
ord616
ord1253
ord1255
ord1578
ord600
ord826
ord269
ord3136
ord4465
ord3259
ord3147
ord2982
ord5277
ord2124
ord2446
ord5261
ord1727
ord5065
ord3749
ord6376
ord2055
ord2648
ord4441
ord4837
ord3798
ord5290
ord4353
ord6374
ord5163
ord2385
ord5241
ord1640
ord2380
ord2754
ord3797
ord540
ord3874
ord800
ord640
ord825
ord567
ord1168
ord609
ord3574
ord4424
ord4627
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord5289
ord2985
ord4396
ord1776
ord4078
ord6055
ord1570
ord1197
ord1243
ord342
ord1182
ord1577
ord1575
ord1176
ord5731
ord801

msvcrt

memset
_mbsicmp
_ftol
malloc
memcpy
_mbscmp
_mbsicoll
strlen
_mbsnbcpy
_mbsrchr
_mbsnbcat
_mbstok
strchr
__dllonexit
_onexit
??1type_info@@UAE@XZ
free
_initterm
_adjust_fdiv
__CxxFrameHandler

kernel32

LocalFree
WideCharToMultiByte
GetModuleFileNameA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetProcAddress
MultiByteToWideChar
CopyFileA
DeleteFileA
LocalAlloc

user32

SetRect
DestroyIcon
LoadCursorA
SetWindowLongA
LoadMenuA
GetFocus
GetSubMenu
TrackPopupMenuEx
SetWindowPos
TrackMouseEvent
GetMenuItemCount
GetMenuItemInfoA
SetMenuItemInfoA
DrawIconEx
LoadImageA
IsWindow
GetParent
SetCursor
EnableWindow
GetWindow
SendMessageA
GetWindowRect
GetSystemMetrics
GetKeyState
PtInRect
GetDesktopWindow
KillTimer
LoadBitmapA
InvalidateRect
GetClientRect
ValidateRect
GetSysColor
InflateRect

gdi32

GetTextExtentPoint32A
CreateFontIndirectA
CreatePen
CreateCompatibleDC
GetObjectA
BitBlt
SelectObject
Rectangle
GetStockObject

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

shell32

SHGetSpecialFolderPathA
ShellExecuteA

oleaut32

SysAllocStringLen
SysFreeString

msvcp60

?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Components/Security/AVNameConfig.ini
Components/Security/Clients.ini
Components/Security/LeakScan.exe
.exe windows:4 windows x86 arch:x86

e5d462c87d9486d152a16b733f3535fc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WritePrivateProfileStringW
GetModuleHandleA
GetStartupInfoA
GetVersionExW
GetModuleFileNameW
GetSystemDirectoryW

user32

GetSystemMetrics

advapi32

RegCloseKey
RegOpenKeyExW

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

shlwapi

PathAppendW
PathFileExistsW
PathStripToRootW

msvcrt

_exit
_controlfp
_except_handler3
__set_app_type
__p__fmode
memset
_snwprintf
wcsncpy
wcslen
__p__commode
memcpy
??2@YAPAXI@Z
_itow
free
swscanf
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Components/Security/Plugins.ini
Components/Security/Skin/1.bmp
Components/Security/Skin/2.bmp
Components/Security/Skin/3.bmp
Components/Security/Skin/CLIENT_NORMAL.bmp
Components/Security/Skin/CLIENT_PRESS.bmp
Components/Security/Skin/danger.ico
Components/Security/Skin/leak.ico
Components/Security/Skin/toolbar.bmp
Components/Security/ThunderSafe.dll
.dll regsvr32 windows:4 windows x86 arch:x86

235cb0c69b422731ad339cd1e0bef13b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\project\security\ThunderSafe\Release\ThunderSafe.pdb

Imports

kernel32

SetEvent
CreateEventW
GetLocalTime
MoveFileExW
WriteFile
CreateFileW
lstrcmpA
lstrcatW
CreateProcessW
GetPrivateProfileSectionW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
ReadFile
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TlsGetValue
TlsSetValue
TlsFree
TlsAlloc
TerminateProcess
GetModuleHandleA
IsBadWritePtr
VirtualFree
HeapCreate
GetModuleFileNameA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetCommandLineA
VirtualQuery
GetSystemInfo
VirtualAlloc
ResetEvent
CreateThread
GetCurrentThreadId
ExitThread
RtlUnwind
ExitProcess
HeapSize
HeapReAlloc
HeapDestroy
RaiseException
GetVersionExA
FreeEnvironmentStringsW
GetEnvironmentStringsW
LoadLibraryA
IsBadReadPtr
IsBadCodePtr
GetOEMCP
GetCPInfo
GetStringTypeA
GetStringTypeW
SetFilePointer
WritePrivateProfileStringW
GetPrivateProfileIntW
DisableThreadLibraryCalls
GetLastError
GlobalAlloc
GlobalLock
GlobalUnlock
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
SetLastError
InterlockedDecrement
HeapFree
DeleteCriticalSection
InitializeCriticalSection
DeleteFileW
FindResourceExW
GetSystemTime
SizeofResource
ResumeThread
GetCurrentThread
InterlockedExchange
SetThreadPriority
WaitForSingleObject
CloseHandle
GetPrivateProfileSectionNamesW
GetModuleFileNameW
lstrcpyW
FindResourceW
LoadResource
LockResource
FlushFileBuffers
SetStdHandle
LCMapStringW
LCMapStringA
lstrlenA
GetProcessHeap
HeapAlloc
GetCurrentProcess
FlushInstructionCache
MultiByteToWideChar
FreeLibrary
LoadLibraryW
GetProcAddress
lstrlenW
GetPrivateProfileStringW
WideCharToMultiByte
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
VirtualProtect
GetEnvironmentStrings

user32

SetParent
ScreenToClient
DrawStateW
IsWindowVisible
IsWindowEnabled
DrawEdge
GetSystemMetrics
DrawFocusRect
ClientToScreen
GetWindowRect
PtInRect
ReleaseCapture
GetDlgCtrlID
GetCapture
KillTimer
SystemParametersInfoW
SetTimer
UpdateWindow
LoadIconW
AdjustWindowRectEx
GetMenu
GetActiveWindow
IsWindow
InflateRect
EndPaint
BeginPaint
CallWindowProcW
DefWindowProcW
LoadImageW
DrawIconEx
InvalidateRect
GetDesktopWindow
CreateWindowExW
GetWindow
MapDialogRect
SetWindowContextHelpId
EndDialog
DestroyIcon
GetSysColor
FillRect
GetParent
GetDC
PostMessageW
MessageBoxW
EnableWindow
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
GetWindowLongW
MoveWindow
wsprintfW
SetWindowPos
ShowWindow
GetDlgItem
SendDlgItemMessageW
GetClientRect
SetWindowLongW
DestroyWindow
SendMessageW
SetRect
SetCapture

gdi32

DeleteObject
Rectangle
GetStockObject
SetTextColor
SetBkMode
SetBkColor
ExtTextOutW
CreatePen
SelectObject
GetBkColor
CreateFontIndirectW
CreateSolidBrush
GetObjectW
TextOutW
LineTo
MoveToEx

comdlg32

GetOpenFileNameW

advapi32

RegCloseKey
RegOpenKeyExW
RegQueryValueExW

shell32

SHGetSpecialFolderPathW
ShellExecuteW

ole32

StgOpenStorage
StgCreateDocfile
CreateStreamOnHGlobal
CLSIDFromString
CoCreateInstance
CoSetProxyBlanket
CoTaskMemFree

oleaut32

VariantCopy
VarBstrCat
SysStringByteLen
SysAllocStringByteLen
SysAllocStringLen
LoadTypeLi
LoadRegTypeLi
SysStringLen
VariantChangeType
SafeArrayDestroy
VariantClear
VariantInit
SysFreeString
SysAllocString

atl71

ord44
ord37
ord31
ord47
ord32
ord23
ord61
ord58
ord43
ord60
ord48
ord15
ord18
ord22
ord64
ord35
ord11
ord30
ord65
ord42
ord66
ord10

shlwapi

PathAppendW
PathFileExistsW
StrStrA
SHGetValueW
StrChrW
PathCombineW
PathRemoveFileSpecW
StrCpyW
StrCmpIW
PathFindExtensionW
StrStrIW

comctl32

ImageList_Destroy
ImageList_LoadImageW
ImageList_GetIconSize
InitCommonControlsEx
_TrackMouseEvent
ImageList_Draw

ws2_32

recv
closesocket
send
WSAAsyncSelect
connect
WSAGetLastError
WSASetLastError
WSAStartup
socket
sendto
WSACleanup
htons

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 204KB - Virtual size: 203KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 356KB - Virtual size: 354KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Components/Security/XL360/XL360.dll
.dll regsvr32 windows:4 windows x86 arch:x86

58285c5e29257d3bc16209d276f18e2b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

PathRemoveFileSpecA
PathAddBackslashA
PathAppendA
UrlIsA
PathCombineA
PathFileExistsA

mfc42

ord3626
ord3663
ord692
ord800
ord2414
ord781
ord3693
ord2302
ord4234
ord2086
ord2864
ord1168
ord4160
ord6215
ord1641
ord4299
ord6880
ord4710
ord765
ord6334
ord3092
ord2642
ord2818
ord4224
ord860
ord537
ord3920
ord2379
ord6453
ord823
ord858
ord2614
ord538
ord3698
ord2370
ord6199
ord4853
ord5875
ord3571
ord640
ord2450
ord6172
ord1640
ord323
ord1146
ord2727
ord6467
ord2730
ord2729
ord1799
ord446
ord743
ord4622
ord614
ord290
ord4226
ord4003
ord539
ord535
ord861
ord4376
ord2645
ord3619
ord4275
ord1771
ord6366
ord2413
ord2024
ord4219
ord2581
ord4401
ord3639
ord2380
ord3721
ord795
ord755
ord825
ord4297
ord5787
ord5788
ord283
ord472
ord470
ord3708
ord941
ord4480
ord613
ord5789
ord289
ord3089
ord5678
ord5794
ord2754
ord5736
ord4124
ord3021
ord5440
ord6383
ord5450
ord6394
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord3738
ord561
ord815
ord6438
ord5500
ord1132
ord1131
ord6354
ord6779
ord939
ord4129
ord2763
ord6927
ord1116
ord826
ord269
ord324
ord567
ord540
ord641
ord609
ord3597
ord4425
ord4627
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5277
ord2124
ord2446
ord5261
ord1727
ord5065
ord3749
ord6376
ord2055
ord2648
ord4441
ord4837
ord3798
ord5280
ord4353
ord6374
ord5163
ord2385
ord5241
ord4407
ord1775
ord4078
ord6052
ord2514
ord4998
ord5265
ord3573
ord3574
ord4424
ord3402
ord5290
ord4396
ord1776
ord6055
ord2575
ord600
ord1578
ord1255
ord1253
ord1570
ord1197
ord1243
ord342
ord1182
ord1577
ord1575
ord1176
ord4133

msvcrt

__CxxFrameHandler
??1type_info@@UAE@XZ
_mbscmp
_snprintf
strchr
_beginthread
atoi
strncpy
memmove
_ftol
strrchr
strncat
__dllonexit
_onexit
_adjust_fdiv
malloc
_initterm
free

kernel32

GetWindowsDirectoryA
CreateProcessA
GetCurrentProcessId
OpenProcess
TerminateProcess
CloseHandle
SetEvent
GetPrivateProfileIntA
FreeLibrary
LoadLibraryA
GetProcAddress
GetModuleFileNameA
WritePrivateProfileStringA
GetPrivateProfileStringA
LocalAlloc
GetLastError
GetCurrentProcess
CreateEventA
DeleteFileA
ReadFile
CreateFileA
GetFileSize
GetLocalTime
WriteFile
ResetEvent
MoveFileA
WaitForSingleObject
LocalFree

user32

DispatchMessageA
TranslateMessage
LoadCursorA
SetCursor
ExitWindowsEx
SetRectEmpty
SetRect
PtInRect
DrawIconEx
GetSysColor
CopyRect
TrackMouseEvent
FindWindowExA
GetWindowThreadProcessId
SetParent
InvalidateRect
LoadBitmapA
DrawStateA
GetClientRect
EnableWindow
SetTimer
GetParent
PostMessageA
DestroyIcon
BringWindowToTop
KillTimer
FillRect
SendMessageA
GetWindowRect
OffsetRect
GetDesktopWindow
LoadImageA
PeekMessageA

gdi32

Rectangle
SelectObject
GetTextExtentPoint32A
CreateFontIndirectA
GetStockObject
GetObjectA
CreateSolidBrush
CreatePen

advapi32

RegQueryValueExA
RegOpenKeyExA
AdjustTokenPrivileges
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA

shell32

ShellExecuteA
SHGetSpecialFolderPathA

oleaut32

SysAllocString
SysFreeString

msvcp60

?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Xran@std@@YAXXZ
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Refcnt@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEAAEPBD@Z
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?_Xlen@std@@YAXXZ
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z

ws2_32

socket
WSAStartup
sendto
WSACleanup
htons

setupapi

SetupIterateCabinetA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Components/Security/XLDiagnose/Config.ini
Components/Security/XLDiagnose/XLDiagnose.dll
.dll regsvr32 windows:4 windows x86 arch:x86

ef6c7453eb08ae1af397007e685a19c2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

PathCombineA
PathRemoveFileSpecA
PathAddBackslashA

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

imagehlp

CheckSumMappedFile

mfc42

ord640
ord2450
ord5875
ord6172
ord1640
ord323
ord1641
ord1146
ord2727
ord6467
ord2730
ord2729
ord823
ord1799
ord446
ord743
ord4622
ord614
ord290
ord641
ord609
ord4226
ord4003
ord1601
ord537
ord539
ord2086
ord2575
ord3402
ord3573
ord5265
ord4998
ord2514
ord6052
ord1775
ord4407
ord5280
ord4425
ord3597
ord567
ord324
ord2302
ord4234
ord4299
ord6880
ord4710
ord2642
ord1200
ord6453
ord3920
ord2864
ord2379
ord3619
ord4275
ord3721
ord795
ord755
ord4133
ord4297
ord5787
ord5788
ord283
ord472
ord470
ord4480
ord1771
ord6366
ord2413
ord2024
ord4219
ord2581
ord4401
ord3639
ord2414
ord613
ord5789
ord289
ord3089
ord5678
ord1168
ord5794
ord2754
ord2380
ord5736
ord4124
ord3021
ord5440
ord6383
ord5450
ord6394
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord3738
ord561
ord815
ord5500
ord1132
ord1131
ord6354
ord858
ord4129
ord2763
ord6927
ord1116
ord269
ord3626
ord3663
ord825
ord540
ord860
ord800
ord3571
ord3574
ord4424
ord4627
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5277
ord2124
ord2446
ord5261
ord1727
ord5065
ord3749
ord6376
ord2055
ord2648
ord4441
ord4837
ord3798
ord5290
ord4353
ord6374
ord5163
ord2385
ord5241
ord4396
ord1776
ord4078
ord6055
ord826
ord600
ord1578
ord1255
ord1253
ord1570
ord1197
ord1243
ord342
ord1182
ord1577
ord1575
ord1176
ord692

msvcrt

malloc
_adjust_fdiv
??1type_info@@UAE@XZ
__CxxFrameHandler
_mbscmp
strtoul
_mbschr
_mbsstr
memmove
strncpy
_ftol
_snprintf
strncat
sprintf
strstr
_strnicmp
_initterm
free
_onexit
__dllonexit

kernel32

lstrcatA
lstrlenA
lstrcpyA
GetPrivateProfileStringA
CreateFileA
CloseHandle
ReadFile
GetVersionExA
LocalFree
LocalAlloc
GetFileAttributesA
GetModuleFileNameA
LoadLibraryA
FreeLibrary
GetProcAddress
IsBadReadPtr
UnmapViewOfFile
lstrcmpiA
MapViewOfFile
CreateFileMappingA
GetFileSize
GetSystemDirectoryA

user32

CopyRect
DestroyIcon
GetDesktopWindow
GetSysColor
LoadImageA
DrawIconEx
PtInRect
SetRect
SetRectEmpty
SendMessageA
LoadCursorA
SetCursor
TrackMouseEvent
GetParent
PostMessageA
FillRect
KillTimer
SetTimer
GetWindowRect
OffsetRect
SetParent
EnableWindow
InvalidateRect
LoadBitmapA
DrawStateA
GetClientRect

gdi32

GetObjectA
Rectangle
SelectObject
GetTextExtentPoint32A
CreateFontIndirectA
GetStockObject
CreateSolidBrush

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

shell32

SHGetFolderPathA
ShellExecuteA
SHGetSpecialFolderPathA

msvcp60

?_Xran@std@@YAXXZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Xlen@std@@YAXXZ
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer

Sections

.text
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Components/Security/XLDiagnose/XLDiagnose.ini
Components/Security/XLSafeUI.dll
.dll regsvr32 windows:4 windows x86 arch:x86

3077234f6bd5b320ee8404095ab3fd21

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\project\security\XLSafeUI\XLSafeUI\Release\XLSafeUI.pdb

Imports

kernel32

FlushFileBuffers
SetStdHandle
GetSystemInfo
VirtualProtect
SetFilePointer
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetCPInfo
GetOEMCP
IsBadCodePtr
IsBadReadPtr
LoadLibraryA
WriteFile
UnhandledExceptionFilter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
CloseHandle
GetStdHandle
SetHandleCount
TerminateProcess
GetModuleHandleA
TlsGetValue
TlsSetValue
TlsFree
TlsAlloc
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
VirtualQuery
SetUnhandledExceptionFilter
GetModuleFileNameA
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetCommandLineA
GetCurrentThreadId
RtlUnwind
ExitProcess
HeapSize
HeapReAlloc
HeapDestroy
RaiseException
CreateToolhelp32Snapshot
Process32FirstW
lstrcmpiW
Process32NextW
RemoveDirectoryW
GetPrivateProfileStringW
GetTickCount
GetPrivateProfileSectionW
WideCharToMultiByte
FindResourceExW
InterlockedExchange
SizeofResource
FreeLibrary
LoadLibraryW
GetProcAddress
MulDiv
GetLastError
GlobalAlloc
GlobalLock
GlobalUnlock
lstrlenW
FindResourceW
LoadResource
GetVersionExA
LockResource
lstrlenA
MultiByteToWideChar
SetLastError
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
GetModuleFileNameW
CreateDirectoryW
HeapAlloc
GetProcessHeap
HeapFree
GetCurrentProcess
FlushInstructionCache
lstrcpyW
lstrcatW
FindFirstFileW
DeleteFileW
FindNextFileW
FindClose
DeleteCriticalSection
InitializeCriticalSection
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
GetFileType

user32

GetActiveWindow
SetWindowLongW
SendDlgItemMessageW
DestroyWindow
SetScrollInfo
GetScrollInfo
ScrollWindow
SetFocus
CallWindowProcW
UpdateWindow
BringWindowToTop
LoadIconW
GetDesktopWindow
DefWindowProcW
IsWindow
WindowFromPoint
ScreenToClient
SetClassLongW
ReleaseCapture
FillRect
MessageBoxW
SetCapture
ShowWindow
LoadImageW
GetWindowTextLengthW
GetWindowTextW
DestroyIcon
EndDialog
DrawIconEx
SetRect
GetParent
MapWindowPoints
GetDlgItem
GetClientRect
MoveWindow
GetWindowLongW
LoadCursorW
DrawTextW
LoadBitmapW
TrackMouseEvent
GetCursorPos
SetCursor
SystemParametersInfoW
AnimateWindow
KillTimer
SetTimer
IsWindowVisible
InvalidateRect
EndPaint
BeginPaint
ClientToScreen
GetWindowRect
SendMessageW
SetWindowTextW
PtInRect
CopyRect
DrawStateW
CreateWindowExW
GetWindow
MapDialogRect
SetWindowContextHelpId
SetWindowPos

gdi32

GetTextExtentPointW
GetTextExtentExPointW
CreatePen
MoveToEx
LineTo
CreateFontW
GetObjectW
RestoreDC
SaveDC
DeleteDC
GetStockObject
SetBkColor
ExtTextOutW
SetTextColor
SetBkMode
SelectObject
DeleteObject
CreateFontIndirectW
GetDeviceCaps
CreateSolidBrush

advapi32

RegCloseKey
RegOpenKeyExW
RegQueryValueExW

shell32

SHGetSpecialFolderPathW
SHGetFileInfoW
ShellExecuteW

ole32

CoCreateInstance
CLSIDFromString
CreateStreamOnHGlobal

oleaut32

VariantClear
VariantInit
SysAllocStringLen
SysStringLen
LoadTypeLi
LoadRegTypeLi
SysFreeString
SysAllocString

atl71

ord32
ord61
ord23
ord35
ord44
ord43
ord66
ord31
ord48
ord65
ord30
ord10
ord11
ord37
ord15
ord18
ord22
ord64
ord58
ord42
ord47
ord60

shlwapi

PathRemoveBackslashW
PathFileExistsW
StrCpyW
PathIsDirectoryW
PathCombineW

comctl32

ImageList_Draw
ImageList_AddMasked
ImageList_Create
ImageList_SetBkColor

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 216KB - Virtual size: 213KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Components/Security/config.ini
Components/UserExperience/UserExperience.dll
.dll regsvr32 windows:4 windows x86 arch:x86

badf35382af919ef6e7eef24ba7d3e7d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord2725
ord2727
ord2730
ord2729
ord4003
ord823
ord1949
ord446
ord743
ord6055
ord4078
ord1776
ord4407
ord5241
ord2385
ord5163
ord6374
ord4353
ord5290
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord4627
ord3663
ord800
ord818
ord540
ord567
ord2915
ord539
ord4275
ord6442
ord1233
ord1200
ord1113
ord3258
ord861
ord1114
ord924
ord1168
ord2379
ord535
ord5572
ord6453
ord858
ord4129
ord5289
ord6663
ord6282
ord2818
ord4278
ord6927
ord5450
ord5500
ord2841
ord5440
ord6383
ord2107
ord537
ord5683
ord6283
ord6929
ord4277
ord1176
ord1575
ord1577
ord1182
ord1116
ord342
ord1243
ord1197
ord1570
ord1253
ord1255
ord1578
ord600
ord826
ord269
ord5307
ord4698
ord4079
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord2554
ord4486
ord3953
ord6354
ord1131
ord6467
ord1132
ord815
ord825
ord561
ord3738
ord4424
ord4622
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord6394
ord5714
ord6375
ord6648
ord4274

msvcrt

strlen
memset
free
??1type_info@@UAE@XZ
_adjust_fdiv
_initterm
_onexit
__dllonexit
strrchr
__CxxFrameHandler
memcpy
malloc
_ismbcalpha

kernel32

LocalFree
FindFirstFileA
FindClose
GetModuleFileNameA
GetPrivateProfileStringA
GetPrivateProfileIntA
LocalAlloc

user32

EnableWindow
RegisterWindowMessageA

advapi32

RegCloseKey
RegEnumKeyExA
RegOpenKeyExA

oleaut32

SysFreeString

ws2_32

closesocket
htons
htonl
WSACancelAsyncRequest
WSACleanup
WSAStartup
WSAAsyncGetHostByName
socket
sendto

shlwapi

PathIsRootA
SHGetValueA

msvcp60

?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Components/VPShell/VPShell.dll
.dll regsvr32 windows:4 windows x86 arch:x86

e2dfda1fa90b551990af3e1b0c44e5ca

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord561
ord815
ord5500
ord1132
ord6467
ord1131
ord6354
ord2727
ord2730
ord2729
ord4003
ord1799
ord446
ord743
ord4226
ord614
ord290
ord1113
ord3738
ord1114
ord1176
ord1575
ord1168
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord1255
ord1578
ord600
ord826
ord1116
ord269
ord4424
ord4622
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5714
ord5289
ord5307
ord4698
ord4079
ord2725
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord4274
ord823
ord3258
ord825

msvcrt

free
_onexit
__dllonexit
??1type_info@@UAE@XZ
_initterm
strncmp
__CxxFrameHandler
strchr
strncpy
strstr
malloc
_adjust_fdiv
__RTDynamicCast
_CIpow
_purecall
sscanf
_snprintf

kernel32

GetLastError
lstrlenA
lstrcmpiA
SetFilePointer
ReadFile
MultiByteToWideChar
CreateFileA
GetFileSize
CloseHandle
lstrlenW
WideCharToMultiByte
GetPrivateProfileIntA
OutputDebugStringA
LoadLibraryA
GetProcAddress
FreeLibrary
Sleep
EnterCriticalSection
LeaveCriticalSection
CreateThread
SetEvent
WaitForSingleObject
DeleteCriticalSection
InitializeCriticalSection
CreateEventA
ResetEvent
LocalFree
LocalAlloc

user32

wsprintfA

oleaut32

SysFreeString
SysStringLen
SysAllocStringLen

msvcp60

?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer

Sections

.text
Size: 80KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Components/version.ini
Languages/zh_cn/Community.ini
Languages/zh_cn/Community.xml
.xml
Languages/zh_cn/Connection.ini
Languages/zh_cn/FloatBar1.bmp
Languages/zh_cn/FloatBar2.bmp
Languages/zh_cn/FloatBar3.bmp
Languages/zh_cn/FtpGlance.ini
Languages/zh_cn/GouGouTop.ini
Languages/zh_cn/InMedia.ini
Languages/zh_cn/Language.ini
Languages/zh_cn/LiveUpdate.ini
Languages/zh_cn/P4PClient.ini
Languages/zh_cn/Thunder.ini
Languages/zh_cn/XLSearch.ini
Languages/zh_cn/dynamichelp.xml
.xml
Languages/zh_tw/Community.ini
Languages/zh_tw/Community.xml
.xml
Languages/zh_tw/Connection.ini
Languages/zh_tw/FloatBar1.bmp
Languages/zh_tw/FloatBar2.bmp
Languages/zh_tw/FloatBar3.bmp
Languages/zh_tw/FtpGlance.ini
Languages/zh_tw/GouGouTop.ini
Languages/zh_tw/InMedia.ini
Languages/zh_tw/Language.INI
Languages/zh_tw/LiveUpdate.ini
Languages/zh_tw/P4PClient.ini
Languages/zh_tw/Thunder.ini
Languages/zh_tw/XLSearch.ini
Languages/zh_tw/dynamichelp.xml
.xml
Plugins/GouGouTop/GouGouTop.dll
.dll regsvr32 windows:4 windows x86 arch:x86

282ad2e0530972fbfff6046604e4b2d9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord825
ord1949
ord3663
ord6055
ord4078
ord1776
ord4407
ord5241
ord2385
ord5163
ord6374
ord4353
ord5290
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord2982
ord3147
ord3259
ord4465
ord3136
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4627
ord4424
ord818
ord567
ord6467
ord1601
ord4160
ord4275
ord4003
ord446
ord743
ord2727
ord2730
ord2729
ord1168
ord6215
ord858
ord3005
ord1200
ord823
ord3258
ord2152
ord924
ord465
ord466
ord2241
ord1238
ord6453
ord6197
ord2379
ord5450
ord6394
ord2841
ord2107
ord5440
ord6383
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord3262
ord4622
ord3738
ord561
ord815
ord3953
ord5500
ord1134
ord1132
ord1131
ord6354
ord1176
ord1575
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord1255
ord1578
ord540
ord2915
ord537
ord5572
ord535
ord2135
ord800
ord600
ord826
ord269
ord1116

msvcrt

__CxxFrameHandler
_mbsicmp
memset
__dllonexit
_onexit
free
_initterm
malloc
??1type_info@@UAE@XZ
_adjust_fdiv

kernel32

LocalFree
lstrlenA
MultiByteToWideChar
GetModuleFileNameA
GetFullPathNameA
LocalAlloc

user32

RegisterWindowMessageA
GetClientRect
IsWindow
EnableWindow

oleaut32

SysFreeString
SysAllocStringLen
VariantClear

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/GouGouTop/Thumbs.db
Plugins/GouGouTop/Tree.bmp
Plugins/XLSafeHost/XLSafeHost.dll
.dll regsvr32 windows:4 windows x86 arch:x86

3b2df4d698d4b1a095a855dba8b0b5e9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentProcess
HeapFree
GetProcessHeap
HeapAlloc
LeaveCriticalSection
InterlockedIncrement
EnterCriticalSection
InterlockedDecrement
SetLastError
MultiByteToWideChar
lstrlenA
GlobalUnlock
GlobalLock
GlobalAlloc
GetLastError
FreeLibrary
WideCharToMultiByte
GetProcAddress
LoadLibraryW
lstrcpyA
CloseHandle
SetEvent
WaitForSingleObject
CreateEventW
GetFileSize
CreateFileW
WriteFile
SetFilePointer
ReadFile
TerminateThread
GetLocalTime
ResetEvent
GetCurrentThreadId
lstrcpynW
FlushFileBuffers
SetStdHandle
FlushInstructionCache
VirtualProtect
GetCPInfo
GetOEMCP
LoadLibraryA
IsBadCodePtr
IsBadReadPtr
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
UnhandledExceptionFilter
TlsGetValue
TlsSetValue
TlsFree
TlsAlloc
VirtualQuery
TerminateProcess
GetModuleHandleA
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
GetModuleFileNameA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetVersion
CreateToolhelp32Snapshot
Process32FirstW
lstrcmpiW
Process32NextW
lstrcatW
lstrcpyW
FindFirstFileW
DeleteFileW
FindNextFileW
SetUnhandledExceptionFilter
GetCommandLineA
CreateThread
ExitThread
RtlUnwind
ExitProcess
HeapSize
HeapReAlloc
HeapDestroy
FindClose
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSection
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetModuleFileNameW
GetPrivateProfileSectionNamesW
lstrcmpW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
lstrlenW
GetSystemInfo
RaiseException
GetVersionExA
GetStringTypeW
LCMapStringA
LCMapStringW
GetStringTypeA

user32

SystemParametersInfoW
GetCursorPos
TrackMouseEvent
KillTimer
SetTimer
IsWindowVisible
ScreenToClient
GetWindowRect
PtInRect
DrawTextW
AnimateWindow
LoadImageW
DrawIconEx
InvalidateRect
DestroyIcon
LoadBitmapW
GetClientRect
CopyRect
DrawStateW
FillRect
EndDialog
PostMessageW
GetParent
ShowWindow
LoadCursorW
SetClassLongW
GetDlgItem
SetWindowTextW
SendMessageW
CreateWindowExW
GetWindow
MapDialogRect
SetWindowContextHelpId
SetWindowPos
SendDlgItemMessageW
MessageBoxW
SetForegroundWindow
GetActiveWindow
SetWindowLongW
DestroyWindow
SetRect

gdi32

GetObjectW
DeleteObject
TextOutW
SelectObject
CreateFontIndirectW
SetTextColor
SetBkMode
GetStockObject
CreateSolidBrush

shell32

ShellExecuteW

ole32

CoCreateInstance
CreateStreamOnHGlobal

oleaut32

SysAllocString
VariantClear
SysFreeString
SysAllocStringLen
SysStringLen
VariantInit

atl71

ord64
ord22
ord18
ord15
ord48
ord60
ord42
ord32
ord61
ord23
ord35
ord37
ord11
ord10
ord44
ord43
ord31
ord30
ord65
ord66

shlwapi

PathIsDirectoryW
PathRemoveFileSpecW
PathFileExistsW
PathRemoveBackslashW
PathAppendW
SHRegGetPathW
SHGetValueW
StrStrIW
StrCmpIW
PathFindExtensionW
PathIsRelativeW
PathCombineW

msimg32

GradientFill

ws2_32

ntohl
ntohs
htons
WSAStartup
socket
sendto
WSACleanup

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Profiles/UserConfig.ini
Program/BHOStub.dll
.dll regsvr32 windows:4 windows x86 arch:x86

718b852a89b36206882c92ebbd79acc3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4627
ord4424
ord3742
ord567
ord825
ord818
ord4275
ord2152
ord1232
ord1168
ord6453
ord5572
ord2915
ord800
ord700
ord858
ord913
ord4204
ord5594
ord398
ord540
ord860
ord2818
ord861
ord537
ord2379
ord823
ord2727
ord6467
ord2055
ord2729
ord1799
ord446
ord743
ord614
ord1206
ord290
ord1223
ord4622
ord4226
ord4003
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord3738
ord561
ord815
ord5500
ord1132
ord1131
ord6354
ord1176
ord1575
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord1255
ord1578
ord600
ord826
ord269
ord2648
ord4441
ord4837
ord3798
ord5290
ord4353
ord6374
ord5163
ord5241
ord2385
ord4407
ord1776
ord4078
ord2730
ord6055
ord1116

msvcrt

__CxxFrameHandler
memcpy
atoi
strcpy
_mbsnbcpy
wcscmp
__dllonexit
_onexit
free
??1type_info@@UAE@XZ
_adjust_fdiv
malloc
_initterm

kernel32

LocalFree
MultiByteToWideChar
GetModuleHandleA
GetProcAddress
OpenFileMappingA
MapViewOfFile
CloseHandle
UnmapViewOfFile
LocalAlloc

user32

RegisterWindowMessageA
DefWindowProcA
SendMessageA
PostMessageA
wsprintfA
EnableWindow

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegDeleteValueA

oleaut32

SysAllocStringLen
SysFreeString

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Program/BugReport.dll
.dll windows:4 windows x86 arch:x86

4a8e11c1ddb090c76ccedf18d48f9b8e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

TerminateProcess
GetCurrentProcess
EnterCriticalSection
WritePrivateProfileStringA
lstrcpyA
GetModuleFileNameA
CreateFileA
CloseHandle
WriteFile
lstrlenA
GetCurrentThreadId
lstrcatA
GetVersionExA
VirtualQuery
GetFileSize
SetFilePointer
ReadFile
CreateEventA
ResumeThread
SetThreadPriority
TerminateThread
WaitForSingleObject
lstrcpynA
CopyFileA
DeleteFileA
GetPrivateProfileIntA
FileTimeToSystemTime
FileTimeToLocalFileTime
FindClose
FindFirstFileA
GetPrivateProfileStringA
GetTickCount
GetTempPathA
FreeLibrary
GetProcAddress
LoadLibraryA
GetLastError
VirtualQueryEx
GetThreadSelectorEntry
ReadProcessMemory
GetLocalTime
IsDebuggerPresent
GetCurrentThread
OutputDebugStringA
UnhandledExceptionFilter
DeleteCriticalSection
SetEvent
InitializeCriticalSection
FlushFileBuffers
SetEnvironmentVariableA
CompareStringW
CompareStringA
InterlockedCompareExchange
VirtualProtect
FlushInstructionCache
GetThreadContext
SetThreadContext
SuspendThread
VirtualAlloc
SetLastError
RtlUnwind
CreateThread
TlsSetValue
ExitThread
RaiseException
GetCommandLineA
GetVersion
ExitProcess
HeapReAlloc
HeapAlloc
HeapSize
WideCharToMultiByte
GetTimeZoneInformation
HeapFree
TlsAlloc
TlsFree
TlsGetValue
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
SetUnhandledExceptionFilter
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
InterlockedDecrement
InterlockedIncrement
SetStdHandle

user32

MessageBeep
wsprintfA

shell32

ShellExecuteA

imagehlp

SymLoadModule
SymGetModuleInfo
SymGetSymFromAddr
SymSetOptions
SymInitialize
SymFunctionTableAccess
SymGetModuleBase

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Exports

Exports

IndulgeExceptionFilter
InitBugReport
SetBugShowMode
SetRestartInfo
SetStackLevel
StartSendReport
StopSendReport

Sections

.text
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Program/BugReport.exe
.exe windows:4 windows x86 arch:x86

1d711dcbf06dca783f9fc201d0a891c4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4627
ord4424
ord3742
ord800
ord818
ord860
ord540
ord567
ord825
ord3626
ord3663
ord2414
ord4275
ord2152
ord6197
ord6880
ord2864
ord1641
ord3571
ord755
ord6172
ord5789
ord2753
ord640
ord5785
ord1640
ord323
ord1146
ord470
ord4673
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord4622
ord3738
ord561
ord815
ord641
ord765
ord2514
ord2621
ord2982
ord5265
ord4376
ord4853
ord4998
ord4710
ord6052
ord1775
ord5280
ord4425
ord3597
ord324
ord4234
ord3402
ord3698
ord1168
ord2301
ord2302
ord4160
ord2863
ord2379
ord858
ord537
ord535
ord940
ord2915
ord6283
ord6282
ord6648
ord2764
ord6199
ord3092
ord2818
ord6215
ord538
ord2645
ord665
ord1979
ord5572
ord5442
ord3318
ord5186
ord354
ord6385
ord939
ord941
ord4129
ord809
ord556
ord1949
ord1088
ord2122
ord4284
ord3874
ord2754
ord6194
ord4333
ord3706
ord3797
ord4123
ord5875
ord5782
ord3089
ord1151
ord1193
ord816
ord2860
ord562
ord2370
ord5277
ord2124
ord2446
ord5261
ord1727
ord5065
ord3749
ord6376
ord2055
ord2648
ord4441
ord4837
ord3798
ord5290
ord4353
ord6374
ord5163
ord2385
ord5241
ord4407
ord1776
ord4078
ord6055
ord1134
ord3619
ord1576

msvcrt

_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_setmbcp
__CxxFrameHandler
_mbsnbicmp
__p___argv
__p___argc
_mbscmp
_mbschr
strstr
__dllonexit
_onexit
_exit
_XcptFilter
_controlfp

kernel32

GetModuleHandleA
GetWindowsDirectoryA
OutputDebugStringA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetPrivateProfileSectionA
CreateProcessA
WaitForSingleObject
CloseHandle
GetStartupInfoA

user32

DrawIcon
IsIconic
SendMessageA
GetCursorPos
SetTimer
KillTimer
DestroyCursor
SetCursor
LoadCursorA
GetWindowLongA
UpdateWindow
MapWindowPoints
GetParent
GetSystemMenu
PtInRect
LoadIconA
EnableWindow
GetClientRect
LoadBitmapA
DrawIconEx
DrawTextA
InvalidateRect
GetWindow
GetWindowRect
DestroyIcon
GetSysColor
CopyIcon
AppendMenuA
GetSystemMetrics
LoadImageA

gdi32

GetTextExtentPoint32A
CreateRectRgnIndirect
CreateFontIndirectA
GetObjectA
CreateCompatibleDC
SetStretchBltMode
StretchBlt
SetBkMode
CreateFontA
GetStockObject

shell32

ShellExecuteA

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 652B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Program/DSConvert.dll
.dll windows:4 windows x86 arch:x86

6b2afd1b7baad8a9765151fd7d63580a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString
SysReAllocStringLen
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

user32

GetKeyboardType
DestroyWindow
LoadStringA
MessageBoxA
CharNextA
MessageBoxA
LoadStringA
GetSystemMetrics
CharNextA
CharToOemA

kernel32

GetACP
Sleep
VirtualFree
VirtualAlloc
GetCurrentThreadId
InterlockedDecrement
InterlockedIncrement
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
lstrcpynA
LoadLibraryExA
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetCommandLineA
FreeLibrary
FindFirstFileA
FindClose
ExitProcess
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
WriteFile
WaitForSingleObject
VirtualQuery
SetEvent
ResetEvent
LeaveCriticalSection
InitializeCriticalSection
GetVersionExA
GetThreadLocale
GetStdHandle
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLocalTime
GetLastError
GetDiskFreeSpaceA
GetDateFormatA
GetCurrentThreadId
GetCPInfo
FreeLibrary
FormatMessageA
EnumCalendarInfoA
EnterCriticalSection
DeleteCriticalSection
CreateEventA
CompareStringA
CloseHandle
Sleep

Exports

Exports

ConvertDateTimeToSystemTime

Sections

.text
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 1024B - Virtual size: 676B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 12KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Program/FloatBar.dll
.dll windows:4 windows x86 arch:x86

1a9f9416e8c41b9c2595ebe96dc61782

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleFileNameA
GetCommandLineA
GetVersion
HeapAlloc
HeapFree
EnterCriticalSection
LeaveCriticalSection
GetLastError
CloseHandle
InitializeCriticalSection
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
HeapReAlloc
RtlUnwind
SetStdHandle
FlushFileBuffers
ReadFile
CreateFileA
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetFilePointer
SetEndOfFile
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement

Exports

Exports

IsMonitorLink

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Program/FtpExplorer.exe
.exe windows:4 windows x86 arch:x86

987d799bf3cc5abbbdcadf89c2d0278e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathCombineA

mfc42

ord1665
ord4436
ord1724
ord5256
ord4427
ord408
ord706
ord2151
ord1233
ord6779
ord4129
ord2764
ord1265
ord6215
ord4248
ord2627
ord4284
ord4457
ord6197
ord4413
ord5860
ord2528
ord1008
ord2514
ord641
ord693
ord807
ord686
ord772
ord2107
ord1175
ord6154
ord2530
ord4364
ord4056
ord5471
ord4121
ord2389
ord5234
ord6369
ord5279
ord5248
ord2444
ord2100
ord1848
ord2582
ord4402
ord3370
ord3640
ord798
ord384
ord533
ord801
ord541
ord3998
ord941
ord5710
ord4243
ord3996
ord4287
ord2862
ord1642
ord2453
ord2865
ord1168
ord5651
ord3127
ord3616
ord920
ord5933
ord3337
ord3810
ord3789
ord350
ord4220
ord2584
ord3654
ord2438
ord6270
ord2863
ord940
ord939
ord3301
ord1997
ord6407
ord858
ord1200
ord5194
ord1644
ord1146
ord6283
ord6662
ord4277
ord6663
ord6142
ord500
ord4204
ord4033
ord3676
ord3130
ord2141
ord5575
ord434
ord1816
ord5265
ord4376
ord4853
ord4998
ord6052
ord1775
ord5280
ord4425
ord3402
ord3721
ord324
ord795
ord2302
ord4234
ord5953
ord4710
ord2096
ord2408
ord6282
ord5683
ord2841
ord2448
ord5450
ord5834
ord6394
ord3903
ord5440
ord6383
ord2044
ord6222
ord6418
ord1938
ord3295
ord4366
ord5086
ord1710
ord1715
ord5064
ord3610
ord2411
ord2023
ord4218
ord2578
ord4398
ord6740
ord656
ord6502
ord554
ord2116
ord2089
ord6612
ord4163
ord6625
ord3874
ord6784
ord4268
ord4454
ord2859
ord5882
ord2012
ord6146
ord5885
ord5981
ord6199
ord3317
ord5861
ord4612
ord4610
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord4079
ord4698
ord5307
ord5289
ord5714
ord4622
ord3738
ord561
ord815
ord2621
ord2725
ord2649
ord6241
ord3097
ord924
ord4160
ord6358
ord6907
ord6007
ord6883
ord3286
ord3910
ord1621
ord1199
ord1271
ord6905
ord3730
ord6649
ord6311
ord4171
ord6877
ord2494
ord2626
ord5871
ord5030
ord2652
ord1669
ord2123
ord6927
ord3619
ord3626
ord2414
ord1641
ord5572
ord2915
ord6778
ord809
ord556
ord1949
ord1088
ord2122
ord2763
ord2754
ord6194
ord4333
ord3706
ord3797
ord6172
ord4123
ord5875
ord5789
ord5782
ord1151
ord1193
ord816
ord562
ord2860
ord1842
ord4242
ord5237
ord796
ord674
ord6491
ord529
ord366
ord620
ord6067
ord2011
ord6000
ord2117
ord6565
ord6619
ord5252
ord6069
ord4499
ord3582
ord616
ord3092
ord5161
ord5162
ord5160
ord4905
ord4742
ord4976
ord4948
ord4358
ord4377
ord4854
ord5287
ord4835
ord2370
ord2642
ord5951
ord6334
ord2301
ord2289
ord3095
ord4299
ord6880
ord5655
ord1576
ord2645
ord1133
ord6734
ord640
ord2405
ord1640
ord323
ord2243
ord6209
ord1941
ord3573
ord3398
ord3733
ord810
ord3287
ord4125
ord6008
ord3297
ord3303
ord4271
ord3914
ord4506
ord5606
ord1803
ord298
ord4230
ord6265
ord6229
ord332
ord4083
ord3495
ord1864
ord3701
ord1709
ord3089
ord5153
ord3571
ord2714
ord4023
ord2569
ord5785
ord6605
ord6458
ord5787
ord3220
ord2767
ord3986
ord647
ord3521
ord5746
ord4157
ord333
ord6402
ord6266
ord4290
ord1750
ord1708
ord3955
ord5473
ord407
ord645
ord4247
ord2088
ord5484
ord4815
ord4816
ord4658
ord6143
ord3988
ord2455
ord5884
ord2921
ord3693
ord2923
ord5788
ord6604
ord6603
ord3289
ord2919
ord491
ord1907
ord489
ord768
ord4258
ord1908
ord4715
ord1690
ord5288
ord2054
ord4431
ord497
ord771
ord5849
ord4439
ord4259
ord5282
ord4077
ord4151
ord2878
ord2879
ord3403
ord5472
ord975
ord5012
ord3350
ord4303
ord4467
ord5103
ord5100
ord3059
ord2390
ord2723
ord1865
ord470
ord755
ord2379
ord2380
ord289
ord2567
ord2864
ord613
ord4275
ord818
ord567
ord3742
ord4424
ord4627
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5277
ord2124
ord2446
ord5261
ord1727
ord5065
ord3749
ord6376
ord2055
ord2648
ord4441
ord4837
ord3798
ord5290
ord4353
ord6374
ord5163
ord2385
ord5241
ord4407
ord1776
ord4078
ord6055
ord2393
ord3663
ord1871
ord2614
ord823
ord2818
ord535
ord537
ord860
ord540
ord800
ord825
ord3597
ord955

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
??1type_info@@UAE@XZ
_onexit
__dllonexit
_CxxThrowException
memcmp
_mbslwr
localtime
_except_handler3
fwrite
_setmbcp
fopen
__CxxFrameHandler
memchr
sscanf
realloc
memcpy
strlen
_snprintf
strcpy
free
memset
strncpy
_stricmp
strcmp
fclose
strcat
_mbsnbcpy
abs
strncmp
atoi
isdigit
strchr
isspace
_atoi64
sprintf
strstr
strtok
_strnicmp
_strupr
strrchr
isalpha
__p___argv
_purecall
strncat
_itoa
_mbsrchr

kernel32

ReadFile
GetCurrentThread
GetCurrentProcess
IsBadReadPtr
GetThreadSelectorEntry
ReadProcessMemory
GetStartupInfoA
VirtualQuery
CreateFileA
SetFilePointer
WriteFile
GetLocalTime
SetErrorMode
SetUnhandledExceptionFilter
MulDiv
lstrcpynA
HeapFree
HeapAlloc
HeapDestroy
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
GetModuleHandleA
GetLastError
SystemTimeToTzSpecificLocalTime
GetSystemTime
DeleteFileA
GlobalUnlock
GlobalLock
GlobalAlloc
GetTempPathA
CloseHandle
CreateMutexA
lstrcmpiA
GetModuleFileNameA
GetVersionExA
GetWindowsDirectoryA
GetPrivateProfileIntA
GetPrivateProfileStringA
VirtualQueryEx
HeapCreate
WritePrivateProfileStringA

user32

OffsetRect
SetWindowPos
GetDlgCtrlID
SystemParametersInfoA
InflateRect
CopyRect
ScreenToClient
FillRect
GetSysColorBrush
IsRectEmpty
EndDeferWindowPos
BeginDeferWindowPos
GetClassLongA
RedrawWindow
SetCapture
ReleaseCapture
ReleaseDC
GetDCEx
wsprintfA
GetSystemMetrics
SetParent
AppendMenuA
DeleteMenu
GetSystemMenu
SetMenu
GetMenu
GetMenuItemID
GetMenuItemCount
RemovePropA
TrackPopupMenuEx
keybd_event
SetWindowsHookExA
CallNextHookEx
WindowFromPoint
RemoveMenu
InsertMenuA
EqualRect
IntersectRect
CreatePopupMenu
GetMenuStringA
MessageBeep
SetPropA
RegisterWindowMessageA
GetWindowRect
GetCursorPos
PtInRect
CopyIcon
MapWindowPoints
GetSysColor
SetCursor
DestroyCursor
EnumChildWindows
KillTimer
SetTimer
GetDesktopWindow
GetWindow
IsWindow
GetPropA
IsIconic
ShowWindow
SetForegroundWindow
UnhookWindowsHookEx
SetWindowLongA
CreateWindowExA
UpdateWindow
GetKeyState
GetWindowDC
DestroyIcon
LoadMenuA
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetSubMenu
ClientToScreen
LoadCursorA
EnableWindow
GetClientRect
RegisterClassExA
DefWindowProcA
GetWindowLongA
DestroyWindow
PostMessageA
InvalidateRect
SendMessageA
GetParent

gdi32

CreateRectRgnIndirect
GetObjectA
CreateFontIndirectA
GetTextExtentPoint32A
GetStockObject
CreatePen
CreateCompatibleDC
SetPixel
CreateSolidBrush
PatBlt
CreateCompatibleBitmap
BitBlt
Rectangle
GetTextColor
GetDeviceCaps

comdlg32

GetOpenFileNameA
GetSaveFileNameA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

shell32

SHGetSpecialFolderPathA
ShellExecuteA
SHGetFileInfoA
SHGetSpecialFolderLocation

comctl32

_TrackMouseEvent
ImageList_LoadImageA
ImageList_ReplaceIcon
ord17

ole32

CoInitializeEx
CoUninitialize

ws2_32

htonl
bind
WSACancelAsyncRequest
closesocket
recv
send
WSAAsyncGetHostByName
connect
getpeername
getsockname
socket
listen
accept
ioctlsocket
setsockopt
WSAStartup
WSACleanup
ntohl
gethostname
WSAAsyncSelect
inet_ntoa
shutdown
ntohs
inet_addr
gethostbyname
htons
WSASetLastError
WSAGetLastError

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

imagehlp

SymInitialize
SymSetOptions
SymLoadModule
SymGetModuleBase
SymGetSymFromAddr
StackWalk
SymFunctionTableAccess
SymGetModuleInfo

Sections

.text
Size: 124KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Program/KanKan.ico
Program/LanguageSetter.exe
.exe windows:4 windows x86 arch:x86

22d6c73b090c314bb850d30243f48134

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord825
ord2621
ord1134
ord823
ord773
ord501
ord800
ord537
ord1083
ord5607
ord2762
ord2393
ord6153
ord3811
ord2818
ord3790
ord922
ord924
ord6928
ord6930
ord2781
ord668
ord2770
ord356
ord665
ord6385
ord353
ord939
ord926
ord5651
ord3127
ord3616
ord5442
ord3318
ord5186
ord860
ord540
ord561
ord354
ord3663
ord535
ord5572
ord2915
ord5645
ord5583
ord858
ord3701
ord500
ord772
ord5860
ord6142
ord5440
ord6383
ord5450
ord6394
ord1832
ord3126
ord349
ord550
ord3337
ord1833
ord2917
ord1979
ord2803
ord958
ord6312
ord4177
ord6010
ord5773
ord2601
ord3180
ord3183
ord3176
ord3507
ord1576
ord815
ord3738
ord4424
ord4622
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5714
ord5289
ord5307
ord4698
ord4079
ord2725
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord4274
ord350
ord4673
ord1168

msvcrt

??1type_info@@UAE@XZ
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
free
calloc
memmove
_CxxThrowException
time
srand
rand
_mbscoll
_getcwd
_chdir
_mbscmp
__CxxFrameHandler
_setmbcp
_stricmp
atoi
fclose
_splitpath
fputs
strstr
fopen
fgets
_controlfp

kernel32

GetLongPathNameA
GetTempPathA
MoveFileA
SetCurrentDirectoryA
GetCurrentDirectoryA
FindClose
FindNextFileA
FindFirstFileA
WideCharToMultiByte
MultiByteToWideChar
SetFileAttributesA
CreateProcessA
GetDriveTypeA
GetTickCount
SetVolumeLabelA
GetDiskFreeSpaceA
CloseHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetModuleHandleA
GetStartupInfoA
GetLastError
WaitForSingleObject
DeleteFileA
GetFileAttributesA
GetPrivateProfileStringA
CreateDirectoryA
GetPrivateProfileIntA
GetCommandLineA

user32

OemToCharBuffA
FindWindowA
wsprintfA
CharToOemBuffA

advapi32

RegSetValueExA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyA

shell32

SHFileOperationA

Sections

.text
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Program/RegLicense.txt
Program/RegLicenseE.txt
Program/RegisterDll.dll
.dll windows:4 windows x86 arch:x86

b1df2dbe09b343d110fc7a0d35e46d7d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

gethostname
inet_ntoa
ntohl
recvfrom
sendto
bind
WSACloseEvent
socket
connect
recv
send
WSAEnumNetworkEvents
WSAEventSelect
closesocket
WSAResetEvent
WSAGetLastError
setsockopt
ntohs
inet_addr
htons
WSAWaitForMultipleEvents
WSACreateEvent
WSAStartup
htonl
gethostbyname

iphlpapi

GetAdaptersInfo

kernel32

GetProcAddress
FreeLibrary
TerminateThread
CloseHandle
WaitForMultipleObjects
LeaveCriticalSection
WritePrivateProfileStringA
GetLocalTime
EnterCriticalSection
InitializeCriticalSection
CreateThread
CreateEventA
DeleteCriticalSection
GetModuleFileNameA
GetPrivateProfileStringA
OutputDebugStringA
GetCurrentThreadId
GetPrivateProfileIntA
WaitForSingleObject
SetEvent
Sleep
UnmapViewOfFile
MapViewOfFile
GetLastError
CreateFileMappingA
OpenFileMappingA
GetTickCount
ResetEvent
CreateMutexA
LoadLibraryA

user32

TranslateMessage
PeekMessageA
DispatchMessageA

advapi32

SetSecurityDescriptorDacl
InitializeSecurityDescriptor

msvcp60

?_Xran@std@@YAXXZ
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Xlen@std@@YAXXZ
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??1bad_alloc@std@@UAE@XZ
??_7bad_alloc@std@@6B@
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0logic_error@std@@QAE@ABV01@@Z
??1logic_error@std@@UAE@XZ
??_7logic_error@std@@6B@
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z

msvcirt

?close@fstream@@QAEXXZ
??_Dfstream@@QAEXXZ
??0fstream@@QAE@XZ
??0exception@@QAE@ABQBD@Z
??1ios@@UAE@XZ
??0exception@@QAE@ABV0@@Z
?what@exception@@UBEPBDXZ
??0exception@@QAE@XZ
??1exception@@UAE@XZ
??1fstream@@UAE@XZ

msvcrt

_adjust_fdiv
malloc
_initterm
_onexit
_snprintf
sprintf
printf
__CxxFrameHandler
??2@YAPAXI@Z
memmove
rand
_atoi64
_CxxThrowException
fclose
fread
fseek
_fsopen
strrchr
strncpy
_purecall
_itoa
atoi
strstr
srand
time
fwrite
strtoul
free
_strdup
_ultoa
memchr
atol
??1type_info@@UAE@XZ
__dllonexit

wininet

InternetCloseHandle
InternetOpenUrlA
InternetOpenA
HttpQueryInfoA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

Exports

Exports

Authentication
GetAuthenInfo
GetConnectLastError
GetConnectStatus
GetMessageNum
GetPasswQuestion
GetSessionID
GetSessionKey
GetUserMessage
GetUserNameInfo
IsConnect
IsKickout
Logout
ModifyMailBox
ModifyPassword
QueryNewPassword
Register
Registerexit
Registerinit
ResetPassword
SavePassword
SetAutoLogin
SetDownloadMessage
SetPruductFlag
SetRetryGetMessage
SetUserMessage
SetUserNameandPassw
TestMyXunleiConnect
setregisterproxy

Sections

.text
Size: 172KB - Virtual size: 170KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Program/SCID.dat
Program/SetupHelper.exe
.exe windows:4 windows x86 arch:x86

26972750cd5f63a1433b2c771010f2fb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcp60

??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

msvcrt

memcpy
rand
srand
time
_mbsstr
memset
__CxxFrameHandler
strlen
??2@YAPAXI@Z
??1type_info@@UAE@XZ
_CxxThrowException
_onexit
__dllonexit
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_strnicmp
_strlwr
_itoa
_stricmp
_ltoa
sprintf
strcat
strcpy
strcmp
_XcptFilter
_exit
free
_ftol
ceil
_mbsnbcpy
sscanf
_snprintf
memcmp
_except_handler3
_mbsupr
_mbsrchr
strncpy
strncat
strstr

historyinfo_manage

get_version
get_category_info
uninit
get_item_info
init
get_root_info

shlwapi

SHSetValueA
PathCombineA
SHDeleteKeyA
SHGetValueA

kernel32

CloseHandle
Sleep
TerminateProcess
OpenProcess
SystemTimeToFileTime
GetLocalTime
GetFileTime
CreateFileA
WaitForSingleObject
SetEvent
OpenEventA
MoveFileExA
GetStartupInfoA
GetSystemTime
ReadFile
IsBadWritePtr
CreateProcessA
RemoveDirectoryA
SetFileAttributesA
FindClose
GetProcessHeap
HeapAlloc
GetModuleHandleA
HeapFree
lstrcpyA
lstrlenA
MultiByteToWideChar
LocalFree
GetVersionExA
CopyFileA
lstrcmpiA
LoadLibraryA
GetProcAddress
FreeLibrary
CreateDirectoryA
GetModuleFileNameA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
OutputDebugStringA
GetFileAttributesA
FindNextFileA
DeleteFileA
FindFirstFileA
GetLastError

user32

DialogBoxParamA
RegisterWindowMessageA
SendMessageA
wsprintfA
GetDlgItem
EndDialog
CharLowerBuffA
GetWindowThreadProcessId
FindWindowA
PostMessageA

advapi32

GetAclInformation
RegEnumKeyExA
RegOpenKeyExA
SetNamedSecurityInfoA
SetEntriesInAclA
BuildExplicitAccessWithNameA
GetEffectiveRightsFromAclA
BuildTrusteeWithNameA
GetNamedSecurityInfoA
RegCloseKey
RegQueryValueExA
SetFileSecurityA
GetSecurityDescriptorControl
SetSecurityDescriptorDacl
RegOpenKeyA
RegSetValueExA
LookupAccountNameA
GetFileSecurityA
InitializeSecurityDescriptor
GetSecurityDescriptorDacl
RegDeleteKeyA
GetLengthSid
InitializeAcl
GetAce
EqualSid
AddAce
AddAccessAllowedAce

ole32

CoUninitialize
CoCreateInstance
StgOpenStorage
StgCreateDocfile
CoInitialize
CLSIDFromProgID

oleaut32

SysFreeString
SysAllocStringLen
VariantClear
SysAllocString

shell32

ShellExecuteA
SHGetSpecialFolderPathA
SHFileOperationA

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

historyinfotransfer

historyinfoTransfer

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Program/SpecialSite.ini
Program/TaskManager.dll
.dll regsvr32 windows:4 windows x86 arch:x86

a772fb9452e659ea3d53e1a41a17f0ff

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

PathIsRootA
PathIsUNCA
PathIsDirectoryA
PathCombineA

mfc42

ord537
ord922
ord1200
ord2841
ord5450
ord6394
ord2107
ord5440
ord6383
ord1799
ord3262
ord4226
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord3738
ord561
ord815
ord5500
ord1132
ord1131
ord6354
ord801
ord860
ord541
ord539
ord861
ord6283
ord6282
ord5608
ord6143
ord3811
ord858
ord924
ord3258
ord4278
ord4277
ord4021
ord2614
ord6883
ord548
ord6673
ord940
ord5861
ord2820
ord6648
ord5431
ord3348
ord4351
ord2989
ord2625
ord297
ord619
ord2033
ord3443
ord3786
ord5860
ord500
ord1206
ord1223
ord446
ord743
ord4020
ord4129
ord2764
ord5683
ord6662
ord6929
ord1168
ord926
ord3988
ord6781
ord1116
ord1255
ord1578
ord600
ord826
ord269
ord2919
ord1193
ord2915
ord5572
ord941
ord535
ord823
ord3663
ord1601
ord825
ord290
ord540
ord614
ord800
ord3579
ord4424
ord4622
ord4080
ord3079
ord3825
ord3831
ord3830
ord3353
ord2976
ord3081
ord2985
ord3136
ord4465
ord3259
ord3147
ord2982
ord4003
ord2729
ord2730
ord6467
ord2727
ord1253
ord1570
ord1197
ord1243
ord342
ord1182
ord1577
ord1575
ord1176
ord2818

msvcrt

_ismbcalpha
strcpy
__CxxFrameHandler
_mbsrchr
_mbsnbcpy
strlen
memset
isalnum
__dllonexit
_onexit
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
atol
memcpy
_mbscmp
_CxxThrowException
memcmp
_ftol
_mbsnbcat
rand
sscanf
_mbsnbcmp
memmove
_mbsicmp
free
malloc
realloc
_mbsnbicmp
sprintf

kernel32

LocalFree
LocalAlloc
FindFirstFileA
GetModuleFileNameA
GetProcAddress
GetLastError
FreeLibrary
GetSystemTime
InterlockedIncrement
GetTickCount
MultiByteToWideChar
IsBadReadPtr
DeleteFileA
CopyFileA
FindClose
CreateDirectoryA

user32

SetTimer
KillTimer

ole32

StgIsStorageFile
StgOpenStorage
StgCreateDocfile
CoTaskMemFree

oleaut32

SysStringByteLen
SysAllocStringByteLen
VariantClear
VariantCopy
SysAllocStringLen
SysFreeString

msvcp60

?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer

Sections

.text
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Program/Thunder.ico
Program/Thunder5.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 832KB - Virtual size: 828KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 184KB - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 28KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 760KB - Virtual size: 756KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Silvana
Size: 458B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Program/Thunder_cfg.ini
Program/WMZEx.dll
.dll windows:4 windows x86 arch:x86

2d2cabec7bf72dc33376d566b5a9498f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
FreeLibrary
LoadLibraryA
GetCurrentProcess
OutputDebugStringA
WriteProcessMemory
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
RtlUnwind
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement

Exports

Exports

PatchCode

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Program/Whatsnew.txt
Program/XLNet.dll
.dll windows:4 windows x86 arch:x86

4e96b197ce8b5dfcf3e0d7a86735d74b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleFileNameA
GetSystemTime
WritePrivateProfileStringA
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
TerminateThread
CloseHandle
WaitForMultipleObjects
CreateEventA
GlobalFree
SetLastError
GetLastError
WaitForSingleObject
DeleteFileA

ws2_32

gethostbyname
inet_addr
getservbyname
htons
gethostbyaddr
ntohs
getservbyport
WSACleanup
WSAStartup
WSACreateEvent
WSAGetLastError
socket
bind
WSAEnumNetworkEvents
WSAWaitForMultipleEvents
send
WSAResetEvent
recv
connect
closesocket
getsockopt
setsockopt
htonl
inet_ntoa
WSAEventSelect
WSASetLastError

wininet

InternetQueryOptionA
InternetCanonicalizeUrlA
InternetCrackUrlA

msvcp60

?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?_Xlen@std@@YAXXZ
?_Xran@std@@YAXXZ
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

msvcrt

strtoul
fputc
_errno
_fdopen
fprintf
ftell
_stricmp
_strnicmp
_itoa
_adjust_fdiv
malloc
_initterm
_onexit
__dllonexit
fwrite
fopen
fread
fclose
time
srand
rand
strncmp
_ismbcspace
_mbschr
_mbscmp
atoi
_mbsrchr
__CxxFrameHandler
sprintf
??2@YAPAXI@Z
free
strncpy
calloc
strchr
_beginthreadex
memmove
strstr

Exports

Exports

XLGetHostByName
XLHttpAddRequestHeaders
XLHttpEndRequest
XLHttpOpenRequest
XLHttpQueryInfo
XLHttpSendRequest
XLNetCloseHandle
XLNetConnect
XLNetOpen
XLNetOpenUrl
XLNetQueryOption
XLNetReadFile
XLNetSetOption
XLNetWriteFile
XLSktAttach
XLSktClose
XLSktConnect
XLSktConnectEx
XLSktGetOpt
XLSktRecv
XLSktSend
XLSktSetOpt
XLSktSetProxy
XLSktSocket
XLUnZip
XLZip

Sections

.text
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Program/addins.ini
Program/al.dll
.dll regsvr32 windows:4 windows x86 arch:x86

daebcebd13ee9e21b0b812d6762e2160

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleA
HeapDestroy
DisableThreadLibraryCalls
lstrcpyA
lstrcatA
WideCharToMultiByte
FreeLibrary
GetProcAddress
LoadLibraryA
CreateEventA
GetShortPathNameA
ResetEvent
SetEvent
WaitForSingleObject
WaitForMultipleObjects
GetTickCount
GetLastError
GetLocalTime
Sleep
GlobalMemoryStatus
lstrlenA
MultiByteToWideChar
lstrlenW
InterlockedIncrement
EnterCriticalSection
GetPrivateProfileSectionNamesA
GetPrivateProfileSectionA
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameA
InterlockedDecrement
CloseHandle
VirtualAlloc
VirtualFree
GetSystemInfo
GetSystemDirectoryA
GetPrivateProfileStringA
GetVolumeInformationA
CreateDirectoryA
GetFileAttributesA
DeleteFileA
MoveFileA
FindFirstFileA
FindClose
FlushFileBuffers
GetFileSize
SetEndOfFile
SetFilePointer
ReadFile
WriteFile
CreateFileA
GetCurrentThreadId
RaiseException
CreateThread
WritePrivateProfileStringA
GetDiskFreeSpaceA
GetSystemDefaultLangID
GetVersionExA

user32

CharNextA
GetSystemMetrics

ole32

CoCreateInstance

oleaut32

LoadTypeLi
SysAllocString
RegisterTypeLi
SysFreeString

stlport_vc646

?_M_decrement@?$_Rb_global@_N@_STL@@SAPAU_Rb_tree_node_base@2@PAU32@@Z
?_Rebalance@?$_Rb_global@_N@_STL@@SAXPAU_Rb_tree_node_base@2@AAPAU32@@Z
?_M_compare@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@SAHPBD000@Z
?erase@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEPADPAD0@Z
?_M_append_dispatch@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEAAV12@PAD0ABU__false_type@2@@Z
??4?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEAAV01@ABV01@@Z
??0?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@ABV01@@Z
?assign@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEAAV12@PBD0@Z
?find@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBEIDI@Z
?_M_throw_out_of_range@?$_String_base@DV?$allocator@D@_STL@@@_STL@@QBEXXZ
?append@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEAAV12@PAD0ABUforward_iterator_tag@2@@Z
??_8?$basic_ofstream@DV?$char_traits@D@_STL@@@_STL@@7B@
??0?$basic_ios@DV?$char_traits@D@_STL@@@_STL@@IAE@XZ
??0?$basic_ostream@DV?$char_traits@D@_STL@@@_STL@@QAE@PAV?$basic_streambuf@DV?$char_traits@D@_STL@@@1@@Z
??0?$basic_filebuf@DV?$char_traits@D@_STL@@@_STL@@QAE@XZ
??_7?$basic_ofstream@DV?$char_traits@D@_STL@@@_STL@@6B@
?init@?$basic_ios@DV?$char_traits@D@_STL@@@_STL@@IAEXPAV?$basic_streambuf@DV?$char_traits@D@_STL@@@2@@Z
?open@?$basic_filebuf@DV?$char_traits@D@_STL@@@_STL@@QAEPAV12@PBDH@Z
?clear@?$basic_ios@DV?$char_traits@D@_STL@@@_STL@@QAEXH@Z
?_M_put_char@?$basic_ostream@DV?$char_traits@D@_STL@@@_STL@@QAEXD@Z
?_M_put_nowiden@?$basic_ostream@DV?$char_traits@D@_STL@@@_STL@@QAEXPBD@Z
?put@?$basic_ostream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV12@D@Z
?flush@?$basic_ostream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV12@XZ
??0?$allocator@D@_STL@@QAE@XZ
?close@?$basic_filebuf@DV?$char_traits@D@_STL@@@_STL@@QAEPAV12@XZ
?_M_throw_failure@ios_base@_STL@@IAEXXZ
??0__Named_exception@_STL@@QAE@ABV01@@Z
??1?$basic_ostream@DV?$char_traits@D@_STL@@@_STL@@UAE@XZ
??1?$basic_ios@DV?$char_traits@D@_STL@@@_STL@@UAE@XZ
??_D?$basic_ofstream@DV?$char_traits@D@_STL@@@_STL@@QAEXXZ
?deallocate@?$__node_alloc@$00$0A@@_STL@@SAXPAXI@Z
?_M_deallocate@?$__node_alloc@$00$0A@@_STL@@CAXPAXI@Z
?_M_allocate@?$__node_alloc@$00$0A@@_STL@@CAPAXI@Z
?append@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEAAV12@PBD0ABUforward_iterator_tag@2@@Z
??1Init@ios_base@_STL@@QAE@XZ
??0Init@ios_base@_STL@@QAE@XZ
??1_Loc_init@ios_base@_STL@@QAE@XZ
??0_Loc_init@ios_base@_STL@@QAE@XZ
?what@__Named_exception@_STL@@UBEPBDXZ
??0?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@XZ
??0?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@PBDABV?$allocator@D@1@@Z
?_M_assign_dispatch@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEAAV12@PAD0ABU__false_type@2@@Z
?_M_deallocate_block@?$_String_base@DV?$allocator@D@_STL@@@_STL@@QAEXXZ
?get_allocator@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBE?AV?$allocator@D@2@XZ
??1?$_String_base@DV?$allocator@D@_STL@@@_STL@@QAE@XZ
?deallocate@?$_STLP_alloc_proxy@PADDV?$allocator@D@_STL@@@_STL@@QAEXPADI@Z
??1?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@XZ
??1?$allocator@D@_STL@@QAE@XZ
??1?$_STLP_alloc_proxy@PADDV?$allocator@D@_STL@@@_STL@@QAE@XZ
??0logic_error@_STL@@QAE@ABV01@@Z
??1logic_error@_STL@@UAE@XZ
??_7logic_error@_STL@@6B@
??0__Named_exception@_STL@@QAE@ABV?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@1@@Z
??1?$basic_ofstream@DV?$char_traits@D@_STL@@@_STL@@UAE@XZ
??1?$basic_filebuf@DV?$char_traits@D@_STL@@@_STL@@UAE@XZ
??0runtime_error@_STL@@QAE@ABV01@@Z
?find@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBEIPBDII@Z
?append@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEAAV12@ID@Z
?_M_range_initialize@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEXPAD0ABUforward_iterator_tag@2@@Z
?rfind@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBEIDI@Z
??_D?$basic_stringstream@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEXXZ
??1ios_base@_STL@@UAE@XZ
??_7?$basic_ios@DV?$char_traits@D@_STL@@@_STL@@6B@
??1?$basic_stringstream@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@UAE@XZ
?str@?$basic_stringstream@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBE?AV?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@2@XZ
??0?$basic_stringstream@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@H@Z
?replace@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEAAV12@PAD0PBD1ABUrandom_access_iterator_tag@2@@Z
?_M_throw_length_error@?$_String_base@DV?$allocator@D@_STL@@@_STL@@QBEXXZ
?find_first_of@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBEIPBDII@Z
??1?$_Osentry@DV?$char_traits@D@_STL@@@_STL@@QAE@XZ
?_M_handle_exception@?$basic_ios@DV?$char_traits@D@_STL@@@_STL@@QAEXH@Z
??1locale@_STL@@QAE@XZ
?_M_use_facet@locale@_STL@@QBEPAVfacet@12@ABVid@12@@Z
?id@?$num_put@DV?$ostreambuf_iterator@DV?$char_traits@D@_STL@@@_STL@@@_STL@@2V0locale@2@A
?getloc@ios_base@_STL@@QBE?AVlocale@2@XZ
??1runtime_error@_STL@@UAE@XZ
?_M_list@?$_Stl_prime@_N@_STL@@2QBIB
?append@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEAAV12@PBD@Z
?_M_check_exception_mask@ios_base@_STL@@IAEXXZ
?_M_append_dispatch@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEAAV12@PBD0ABU__false_type@2@@Z
?_M_allocate_block@?$_String_base@DV?$allocator@D@_STL@@@_STL@@QAEXI@Z
??0?$_STLP_alloc_proxy@PADDV?$allocator@D@_STL@@@_STL@@QAE@ABV?$allocator@D@1@PAD@Z
?deallocate@?$allocator@D@_STL@@QAEXPADI@Z
?_Rebalance_for_erase@?$_Rb_global@_N@_STL@@SAPAU_Rb_tree_node_base@2@PAU32@AAPAU32@11@Z
?_M_increment@?$_Rb_global@_N@_STL@@SAPAU_Rb_tree_node_base@2@PAU32@@Z

ws2_32

gethostname
WSAIoctl
WSASocketA
ntohs
WSAEventSelect
socket
ioctlsocket
inet_addr
gethostbyname
htons
WSAWaitForMultipleEvents
WSAGetLastError
connect
ntohl
sendto
recvfrom
closesocket
recv
inet_ntoa

iphlpapi

GetIpAddrTable
SendARP
GetAdaptersInfo
GetTcpTable

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

msvcrt

_itoa
_adjust_fdiv
_initterm
_onexit
__dllonexit
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_except_handler3
_strtime
_strdate
__RTtypeid
?name@type_info@@QBEPBDXZ
strtoul
strtol
_errno
_snprintf
_atoi64
atol
_ui64toa
_ultoa
_i64toa
time
srand
rand
_unlink
_ftol
sprintf
??0exception@@QAE@ABQBD@Z
??1exception@@UAE@XZ
malloc
free
printf
_purecall
_getpid
??0exception@@QAE@ABV0@@Z
_CxxThrowException
memmove
__CxxFrameHandler
??2@YAPAXI@Z
memcpy

advapi32

LockServiceDatabase
RegQueryValueExA
RegOpenKeyA
RegSetValueExA
RegCreateKeyExA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
CloseServiceHandle
UnlockServiceDatabase
OpenSCManagerA
GetUserNameA
RegCloseKey

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 276KB - Virtual size: 275KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Program/asyn_dns.dll
.dll windows:4 windows x86 arch:x86

957f94aaadefaa504af46b2c983e8589

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
WritePrivateProfileStringA
CreateThread
GetCurrentThreadId
WaitForSingleObject
FreeLibrary
GetProcAddress
LoadLibraryA
FindFirstFileA
CreateEventA
ResetEvent
SetWaitableTimer
CreateWaitableTimerA
CancelWaitableTimer
GetLastError
FindClose
GetVersionExA
GetWindowsDirectoryA
GetTickCount
SetEvent
PostQueuedCompletionStatus
InitializeCriticalSection
QueueUserAPC
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetSystemDirectoryA
DisableThreadLibraryCalls
GetOverlappedResult
RaiseException
GetModuleHandleA
GetModuleFileNameA

ws2_32

sendto
WSAGetOverlappedResult
inet_ntoa
WSASetLastError
htonl
WSAGetLastError
gethostbyname
getservbyname
htons
gethostbyaddr
ntohs
getservbyport
WSAEnumNetworkEvents
WSAWaitForMultipleEvents
inet_addr
recvfrom
WSAEventSelect
WSACreateEvent
socket
WSACloseEvent
closesocket

iphlpapi

GetNetworkParams

stlport_vc646

??0Init@ios_base@_STL@@QAE@XZ
??1_Loc_init@ios_base@_STL@@QAE@XZ
??0_Loc_init@ios_base@_STL@@QAE@XZ
?_M_allocate@?$__node_alloc@$00$0A@@_STL@@CAPAXI@Z
??0?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@XZ
??1?$_String_base@DV?$allocator@D@_STL@@@_STL@@QAE@XZ
?append@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEAAV12@PAD0ABUforward_iterator_tag@2@@Z
?_M_deallocate_block@?$_String_base@DV?$allocator@D@_STL@@@_STL@@QAEXXZ
??1Init@ios_base@_STL@@QAE@XZ
?substr@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBE?AV12@II@Z
??0?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@ABV01@@Z
?_M_deallocate@?$__node_alloc@$00$0A@@_STL@@CAXPAXI@Z
?deallocate@?$__node_alloc@$00$0A@@_STL@@SAXPAXI@Z
??1?$_STLP_alloc_proxy@PADDV?$allocator@D@_STL@@@_STL@@QAE@XZ
??0?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@PBDABV?$allocator@D@1@@Z
??1?$allocator@D@_STL@@QAE@XZ
??1?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@XZ
?deallocate@?$_STLP_alloc_proxy@PADDV?$allocator@D@_STL@@@_STL@@QAEXPADI@Z
?append@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEAAV12@PBD0ABUforward_iterator_tag@2@@Z
?_Rebalance_for_erase@?$_Rb_global@_N@_STL@@SAPAU_Rb_tree_node_base@2@PAU32@AAPAU32@11@Z
?_Rebalance@?$_Rb_global@_N@_STL@@SAXPAU_Rb_tree_node_base@2@AAPAU32@@Z
?_M_decrement@?$_Rb_global@_N@_STL@@SAPAU_Rb_tree_node_base@2@PAU32@@Z
?_M_compare@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@SAHPBD000@Z
??0__Named_exception@_STL@@QAE@ABV01@@Z
??0runtime_error@_STL@@QAE@ABV01@@Z
?what@__Named_exception@_STL@@UBEPBDXZ
?_M_assign_dispatch@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEAAV12@PAD0ABU__false_type@2@@Z
?find@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBEIDI@Z
??1runtime_error@_STL@@UAE@XZ
??_7runtime_error@_STL@@6B@
?reserve@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEXI@Z
?_M_append_dispatch@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEAAV12@PAD0ABU__false_type@2@@Z
?cout@_STL@@3V?$basic_ostream@DV?$char_traits@D@_STL@@@1@A
?cerr@_STL@@3V?$basic_ostream@DV?$char_traits@D@_STL@@@1@A
?deallocate@?$allocator@D@_STL@@QAEXPADI@Z
?_M_range_initialize@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEXPBD0ABUforward_iterator_tag@2@@Z
??0?$_STLP_alloc_proxy@PADDV?$allocator@D@_STL@@@_STL@@QAE@ABV?$allocator@D@1@PAD@Z
?_M_throw_out_of_range@?$_String_base@DV?$allocator@D@_STL@@@_STL@@QBEXXZ
?find_first_of@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBEIPBDII@Z
?find_first_not_of@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBEIPBDII@Z
?_M_allocate_block@?$_String_base@DV?$allocator@D@_STL@@@_STL@@QAEXI@Z
??0logic_error@_STL@@QAE@ABV01@@Z
??1logic_error@_STL@@UAE@XZ
?_M_append_dispatch@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEAAV12@PBD0ABU__false_type@2@@Z
??_7logic_error@_STL@@6B@
??0__Named_exception@_STL@@QAE@ABV?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@1@@Z
?append@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEAAV12@PBD@Z
??4?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEAAV01@ABV01@@Z
?get_allocator@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBE?AV?$allocator@D@2@XZ
?_M_increment@?$_Rb_global@_N@_STL@@SAPAU_Rb_tree_node_base@2@PAU32@@Z
??_D?$basic_stringstream@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEXXZ
??1ios_base@_STL@@UAE@XZ
??_7?$basic_ios@DV?$char_traits@D@_STL@@@_STL@@6B@
??1?$basic_stringstream@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@UAE@XZ
?str@?$basic_stringstream@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBE?AV?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@2@XZ
?_M_put_char@?$basic_ostream@DV?$char_traits@D@_STL@@@_STL@@QAEXD@Z
??0?$basic_stringstream@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@H@Z
??1?$_Osentry@DV?$char_traits@D@_STL@@@_STL@@QAE@XZ
?_M_throw_failure@ios_base@_STL@@IAEXXZ
?_M_handle_exception@?$basic_ios@DV?$char_traits@D@_STL@@@_STL@@QAEXH@Z
??1locale@_STL@@QAE@XZ
?_M_use_facet@locale@_STL@@QBEPAVfacet@12@ABVid@12@@Z
?id@?$num_put@DV?$ostreambuf_iterator@DV?$char_traits@D@_STL@@@_STL@@@_STL@@2V0locale@2@A
?getloc@ios_base@_STL@@QBE?AVlocale@2@XZ
?_M_list@?$_Stl_prime@_N@_STL@@2QBIB
?erase@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEPADPAD0@Z

msvcrt

_itoa
_adjust_fdiv
malloc
_initterm
_onexit
__dllonexit
??1type_info@@UAE@XZ
__RTtypeid
?name@type_info@@QBEPBDXZ
_purecall
atol
_ultoa
_CIpow
_ftol
fopen
fread
fgetc
fclose
sprintf
strchr
__CxxFrameHandler
memmove
??2@YAPAXI@Z
_CxxThrowException
strncpy
??0exception@@QAE@ABV0@@Z
isdigit
isalpha
_strdate
_strtime
free
calloc
strtoul

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

Exports

Exports

adns_cancel
adns_commit
adns_get_complete_code
adns_get_host
adns_get_ip
adns_get_ip_count
adns_get_notify_handle
asyn_dns_cancel
asyn_dns_commit
asyn_dns_init
asyn_dns_uninit

Sections

.text
Size: 76KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Program/atl71.dll
.dll windows:4 windows x86 arch:x86

7c3004ebf21f282412fa952c164aa2bb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

atl71.pdb

Imports

kernel32

InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExW
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetCurrentThreadId
lstrlenW
lstrcpyW
GetLastError
DisableThreadLibraryCalls
GetVersionExA
InterlockedIncrement
InterlockedDecrement
FreeLibrary
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
lstrcmpiW
lstrcpynW
CloseHandle
ReadFile
GetFileSize
CreateFileW
GetModuleHandleW
GetModuleFileNameW
WideCharToMultiByte
HeapFree
GetProcessHeap
WaitForSingleObject
GlobalAlloc
FindResourceA
MulDiv
lstrcatW
HeapAlloc
FlushInstructionCache
GetCurrentProcess
GlobalUnlock
GlobalLock
lstrcmpW
SetLastError
GlobalFree
GlobalHandle
LockResource
lstrcmpA
GetModuleHandleA
GetTickCount
GetProcAddress
ExitProcess
HeapSize
DebugBreak
HeapReAlloc
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
lstrcatA
lstrcpyA
lstrlenA
GetModuleFileNameA
RtlUnwind
VirtualQuery
LocalAlloc
LoadLibraryA

shlwapi

PathFindExtensionW

Exports

Exports

AtlAdvise
AtlAxAttachControl
AtlAxCreateControl
AtlAxCreateControlEx
AtlAxCreateControlLic
AtlAxCreateControlLicEx
AtlAxCreateDialogA
AtlAxCreateDialogW
AtlAxDialogBoxA
AtlAxDialogBoxW
AtlAxGetControl
AtlAxGetHost
AtlAxWinInit
AtlCallTermFunc
AtlComModuleGetClassObject
AtlComModuleRegisterClassObjects
AtlComModuleRegisterServer
AtlComModuleRevokeClassObjects
AtlComModuleUnregisterServer
AtlComPtrAssign
AtlComQIPtrAssign
AtlCreateRegistrar
AtlCreateTargetDC
AtlDevModeW2A
AtlFreeMarshalStream
AtlGetObjectSourceInterface
AtlGetVersion
AtlHiMetricToPixel
AtlIPersistPropertyBag_Load
AtlIPersistPropertyBag_Save
AtlIPersistStreamInit_Load
AtlIPersistStreamInit_Save
AtlInternalQueryInterface
AtlLoadTypeLib
AtlMarshalPtrInProc
AtlModuleAddTermFunc
AtlPixelToHiMetric
AtlRegisterClassCategoriesHelper
AtlRegisterTypeLib
AtlSetErrorInfo
AtlUnRegisterTypeLib
AtlUnadvise
AtlUnmarshalPtr
AtlUpdateRegistryFromResourceD
AtlWaitWithMessageLoop
AtlWinModuleAddCreateWndData
AtlWinModuleExtractCreateWndData
AtlWinModuleInit
AtlWinModuleRegisterClassExA
AtlWinModuleRegisterClassExW
AtlWinModuleRegisterWndClassInfoA
AtlWinModuleRegisterWndClassInfoW
AtlWinModuleTerm

Sections

.text
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Program/bd.dll
.dll regsvr32 windows:4 windows x86 arch:x86

e1d3896cc1e6067b9009fc8ed952048c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcatA
WideCharToMultiByte
FreeLibrary
GetProcAddress
LoadLibraryA
InterlockedDecrement
lstrcpyA
GetPrivateProfileSectionA
GetPrivateProfileSectionNamesA
WaitForSingleObject
GetTickCount
GlobalMemoryStatus
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
DeleteCriticalSection
HeapDestroy
GetModuleFileNameA
GetModuleHandleA
GetShortPathNameA
lstrlenW
lstrlenA
MultiByteToWideChar
InterlockedIncrement
VirtualAlloc
VirtualFree
GetSystemInfo
GetSystemDirectoryA
GetPrivateProfileStringA
GetVolumeInformationA
CreateDirectoryA
GetFileAttributesA
DeleteFileA
MoveFileA
FindFirstFileA
FindClose
FlushFileBuffers
GetFileSize
SetEndOfFile
SetFilePointer
ReadFile
WriteFile
CreateFileA
SetEvent
GetCurrentThreadId
RaiseException
ResetEvent
CreateThread
CloseHandle
CreateEventA
WritePrivateProfileStringA
GetDiskFreeSpaceA
GetSystemDefaultLangID
GetLastError
GetVersionExA

user32

CharNextA
GetSystemMetrics

ole32

CoCreateInstance

oleaut32

LoadTypeLi
SysAllocString
RegisterTypeLi
SysFreeString

stlport_vc646

??0?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@ABV01@@Z
?assign@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEAAV12@PBD0@Z
?find@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBEIDI@Z
?_M_throw_out_of_range@?$_String_base@DV?$allocator@D@_STL@@@_STL@@QBEXXZ
?append@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEAAV12@PAD0ABUforward_iterator_tag@2@@Z
??_8?$basic_ofstream@DV?$char_traits@D@_STL@@@_STL@@7B@
??0?$basic_ios@DV?$char_traits@D@_STL@@@_STL@@IAE@XZ
??0?$basic_ostream@DV?$char_traits@D@_STL@@@_STL@@QAE@PAV?$basic_streambuf@DV?$char_traits@D@_STL@@@1@@Z
??0?$basic_filebuf@DV?$char_traits@D@_STL@@@_STL@@QAE@XZ
??_7?$basic_ofstream@DV?$char_traits@D@_STL@@@_STL@@6B@
?init@?$basic_ios@DV?$char_traits@D@_STL@@@_STL@@IAEXPAV?$basic_streambuf@DV?$char_traits@D@_STL@@@2@@Z
?open@?$basic_filebuf@DV?$char_traits@D@_STL@@@_STL@@QAEPAV12@PBDH@Z
?clear@?$basic_ios@DV?$char_traits@D@_STL@@@_STL@@QAEXH@Z
?_M_put_nowiden@?$basic_ostream@DV?$char_traits@D@_STL@@@_STL@@QAEXPBD@Z
?_M_put_char@?$basic_ostream@DV?$char_traits@D@_STL@@@_STL@@QAEXD@Z
?put@?$basic_ostream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV12@D@Z
?flush@?$basic_ostream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV12@XZ
?_M_increment@?$_Rb_global@_N@_STL@@SAPAU_Rb_tree_node_base@2@PAU32@@Z
?close@?$basic_filebuf@DV?$char_traits@D@_STL@@@_STL@@QAEPAV12@XZ
?_M_throw_failure@ios_base@_STL@@IAEXXZ
??1?$basic_filebuf@DV?$char_traits@D@_STL@@@_STL@@UAE@XZ
??1?$basic_ostream@DV?$char_traits@D@_STL@@@_STL@@UAE@XZ
??_7?$basic_ios@DV?$char_traits@D@_STL@@@_STL@@6B@
??1ios_base@_STL@@UAE@XZ
??4?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEAAV01@ABV01@@Z
??_D?$basic_ofstream@DV?$char_traits@D@_STL@@@_STL@@QAEXXZ
?deallocate@?$__node_alloc@$00$0A@@_STL@@SAXPAXI@Z
?_M_deallocate@?$__node_alloc@$00$0A@@_STL@@CAXPAXI@Z
?_M_allocate@?$__node_alloc@$00$0A@@_STL@@CAPAXI@Z
?erase@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEPADPAD0@Z
??1Init@ios_base@_STL@@QAE@XZ
??0Init@ios_base@_STL@@QAE@XZ
??1_Loc_init@ios_base@_STL@@QAE@XZ
??0_Loc_init@ios_base@_STL@@QAE@XZ
??1?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@XZ
?_M_compare@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@SAHPBD000@Z
??0?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@PBDABV?$allocator@D@1@@Z
?_M_assign_dispatch@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEAAV12@PAD0ABU__false_type@2@@Z
?deallocate@?$allocator@D@_STL@@QAEXPADI@Z
??1?$_String_base@DV?$allocator@D@_STL@@@_STL@@QAE@XZ
?_M_deallocate_block@?$_String_base@DV?$allocator@D@_STL@@@_STL@@QAEXXZ
?deallocate@?$_STLP_alloc_proxy@PADDV?$allocator@D@_STL@@@_STL@@QAEXPADI@Z
??1?$allocator@D@_STL@@QAE@XZ
??1?$_STLP_alloc_proxy@PADDV?$allocator@D@_STL@@@_STL@@QAE@XZ
?_Rebalance@?$_Rb_global@_N@_STL@@SAXPAU_Rb_tree_node_base@2@AAPAU32@@Z
?_M_decrement@?$_Rb_global@_N@_STL@@SAPAU_Rb_tree_node_base@2@PAU32@@Z
??0__Named_exception@_STL@@QAE@ABV01@@Z
??0runtime_error@_STL@@QAE@ABV01@@Z
?what@__Named_exception@_STL@@UBEPBDXZ
??1?$basic_ios@DV?$char_traits@D@_STL@@@_STL@@UAE@XZ
?_M_append_dispatch@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEAAV12@PAD0ABU__false_type@2@@Z
?_M_allocate_block@?$_String_base@DV?$allocator@D@_STL@@@_STL@@QAEXI@Z
?find@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBEIPBDII@Z
?append@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEAAV12@ID@Z
?_M_range_initialize@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEXPAD0ABUforward_iterator_tag@2@@Z
?rfind@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBEIDI@Z
??_D?$basic_stringstream@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEXXZ
??1?$basic_stringstream@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@UAE@XZ
?str@?$basic_stringstream@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBE?AV?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@2@XZ
??0?$basic_stringstream@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@H@Z
?replace@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEAAV12@PAD0PBD1ABUrandom_access_iterator_tag@2@@Z
?_M_throw_length_error@?$_String_base@DV?$allocator@D@_STL@@@_STL@@QBEXXZ
?find_first_of@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBEIPBDII@Z
??1?$_Osentry@DV?$char_traits@D@_STL@@@_STL@@QAE@XZ
?_M_handle_exception@?$basic_ios@DV?$char_traits@D@_STL@@@_STL@@QAEXH@Z
??1locale@_STL@@QAE@XZ
?_M_use_facet@locale@_STL@@QBEPAVfacet@12@ABVid@12@@Z
?id@?$num_put@DV?$ostreambuf_iterator@DV?$char_traits@D@_STL@@@_STL@@@_STL@@2V0locale@2@A
?getloc@ios_base@_STL@@QBE?AVlocale@2@XZ
?_M_list@?$_Stl_prime@_N@_STL@@2QBIB
??0__Named_exception@_STL@@QAE@ABV?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@1@@Z
??1runtime_error@_STL@@UAE@XZ
??0logic_error@_STL@@QAE@ABV01@@Z
??1logic_error@_STL@@UAE@XZ
??_7logic_error@_STL@@6B@
?append@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEAAV12@PBD@Z
?find_first_not_of@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBEIPBDII@Z
??4?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEAAV01@PBD@Z
?assign@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEAAV12@ABV12@II@Z
?_M_range_initialize@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEXPAD0@Z
??0?$_String_base@DV?$allocator@D@_STL@@@_STL@@QAE@ABV?$allocator@D@1@@Z
?find_last_of@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBEIPBDII@Z
?substr@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBE?AV12@II@Z
?find_last_not_of@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBEIPBDII@Z
??_7runtime_error@_STL@@6B@
?_M_check_exception_mask@ios_base@_STL@@IAEXXZ
??0?$_STLP_alloc_proxy@PADDV?$allocator@D@_STL@@@_STL@@QAE@ABV?$allocator@D@1@PAD@Z
?_M_append_dispatch@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEAAV12@PBD0ABU__false_type@2@@Z
?get_allocator@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBE?AV?$allocator@D@2@XZ
??0?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@XZ
?append@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEAAV12@PBD0ABUforward_iterator_tag@2@@Z

ws2_32

connect
send
setsockopt
recv
closesocket
ntohs
WSASocketA
WSAIoctl
gethostname
htons
socket
WSAGetLastError
inet_addr
gethostbyname
inet_ntoa

iphlpapi

GetAdaptersInfo

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

msvcrt

_itoa
_adjust_fdiv
malloc
_initterm
free
_onexit
__dllonexit
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_except_handler3
srand
rand
isspace
isalpha
isdigit
_strtime
_strdate
__RTtypeid
?name@type_info@@QBEPBDXZ
strtoul
strtol
_errno
_snprintf
??0exception@@QAE@ABQBD@Z
??1exception@@UAE@XZ
_atoi64
atol
_ui64toa
_ultoa
_i64toa
strstr
sscanf
sprintf
_getpid
??0exception@@QAE@ABV0@@Z
time
_purecall
_CxxThrowException
memmove
??3@YAXPAX@Z
__CxxFrameHandler
??2@YAPAXI@Z
memcpy

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyA
RegCreateKeyExA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
CloseServiceHandle
UnlockServiceDatabase
LockServiceDatabase
OpenSCManagerA
GetUserNameA
RegCloseKey

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 188KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Program/bootstrap.dat
Program/dhtnodes.dat
Program/download-complete.wav
Program/download_interface.dll
.dll regsvr32 windows:4 windows x86 arch:x86

31c44741119b6ddbf66c0dbc11c14bf6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

stlport_vc646

?flush@?$basic_ostream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV12@XZ
??0?$_Isentry@DV?$char_traits@D@_STL@@@_STL@@QAE@AAV?$basic_istream@DV?$char_traits@D@_STL@@@1@_N@Z
??0?$basic_istringstream@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@ABV?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@1@H@Z
?find@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBEIABV12@I@Z
?get@?$num_get@DV?$istreambuf_iterator@DV?$char_traits@D@_STL@@@_STL@@@_STL@@QBE?AV?$istreambuf_iterator@DV?$char_traits@D@_STL@@@2@V32@0AAVios_base@2@AAHAAG@Z
?precision@ios_base@_STL@@QAEHH@Z
?setf@ios_base@_STL@@QAEHHH@Z
??1?$basic_istringstream@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@UAE@XZ
?write@?$basic_ostream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV12@PBDH@Z
?width@ios_base@_STL@@QAEHH@Z
?sputc@?$basic_streambuf@DV?$char_traits@D@_STL@@@_STL@@QAEHD@Z
?assign@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEAAV12@ID@Z
?allocate@?$__node_alloc@$00$0A@@_STL@@SAPAXI@Z
?c_str@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBEPBDXZ
??1?$_STLP_alloc_proxy@PAGGV?$allocator@G@_STL@@@_STL@@QAE@XZ
?deallocate@?$allocator@G@_STL@@QAEXPAGI@Z
?close@?$basic_ofstream@DV?$char_traits@D@_STL@@@_STL@@QAEXXZ
?_Transfer@?$_List_global@_N@_STL@@SAXPAU_List_node_base@2@00@Z
?length@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBEIXZ
?empty@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBE_NXZ
??0?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@IDABV?$allocator@D@1@@Z
??Y?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEAAV01@PBD@Z
?find@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBEIPBDI@Z
?size@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBEIXZ
?append@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEAAV12@ABV12@@Z
??0?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@U_String_reserve_t@1@IABV?$allocator@D@1@@Z
??1strstream@_STL@@UAE@XZ
?rdbuf@?$basic_ios@DV?$char_traits@D@_STL@@@_STL@@QAEPAV?$basic_streambuf@DV?$char_traits@D@_STL@@@2@PAV32@@Z
??0strstream@_STL@@QAE@PADHH@Z
?imbue@?$basic_streambuf@DV?$char_traits@D@_STL@@@_STL@@MAEXABVlocale@2@@Z
?overflow@strstreambuf@_STL@@MAEHH@Z
?_M_xsputnc@?$basic_streambuf@DV?$char_traits@D@_STL@@@_STL@@MAEHDH@Z
?xsputn@?$basic_streambuf@DV?$char_traits@D@_STL@@@_STL@@MAEHPBDH@Z
?pbackfail@strstreambuf@_STL@@MAEHH@Z
?uflow@?$basic_streambuf@DV?$char_traits@D@_STL@@@_STL@@MAEHXZ
?underflow@strstreambuf@_STL@@MAEHXZ
?xsgetn@?$basic_streambuf@DV?$char_traits@D@_STL@@@_STL@@MAEHPADH@Z
?showmanyc@?$basic_streambuf@DV?$char_traits@D@_STL@@@_STL@@MAEHXZ
?sync@?$basic_streambuf@DV?$char_traits@D@_STL@@@_STL@@MAEHXZ
?seekpos@strstreambuf@_STL@@MAE?AV?$fpos@H@2@V32@H@Z
?seekoff@strstreambuf@_STL@@MAE?AV?$fpos@H@2@JHH@Z
?setbuf@strstreambuf@_STL@@MAEPAV?$basic_streambuf@DV?$char_traits@D@_STL@@@2@PADH@Z
??1strstreambuf@_STL@@UAE@XZ
??0strstreambuf@_STL@@QAE@PADH0@Z
?setp@?$basic_streambuf@DV?$char_traits@D@_STL@@@_STL@@IAEXPAD0@Z
?setg@?$basic_streambuf@DV?$char_traits@D@_STL@@@_STL@@IAEXPAD00@Z
??0strstream@_STL@@QAE@XZ
??0strstreambuf@_STL@@QAE@H@Z
?str@strstream@_STL@@QAEPADXZ
?pcount@strstream@_STL@@QBEHXZ
?freeze@strstream@_STL@@QAEX_N@Z
?good@ios_base@_STL@@QBE_NXZ
?setstate@?$basic_ios@DV?$char_traits@D@_STL@@@_STL@@QAEXH@Z
?find@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBEID@Z
??0?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@PAD0@Z
?begin@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEPADXZ
??Y?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEAAV01@D@Z
??Y?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEAAV01@ABV01@@Z
??6?$basic_ostream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV01@G@Z
?close@?$basic_ifstream@DV?$char_traits@D@_STL@@@_STL@@QAEXXZ
?open@?$basic_ifstream@DV?$char_traits@D@_STL@@@_STL@@QAEXPBDH@Z
??0?$basic_ifstream@DV?$char_traits@D@_STL@@@_STL@@QAE@XZ
?open@?$basic_ofstream@DV?$char_traits@D@_STL@@@_STL@@QAEXPBDH@Z
??0?$basic_ofstream@DV?$char_traits@D@_STL@@@_STL@@QAE@XZ
??A?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEAADI@Z
?gptr@?$basic_streambuf@DV?$char_traits@D@_STL@@@_STL@@IBEPADXZ
?egptr@?$basic_streambuf@DV?$char_traits@D@_STL@@@_STL@@IBEPADXZ
?resize@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEXID@Z
??A?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBEABDI@Z
??7ios_base@_STL@@QBE_NXZ
?data@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBEPBDXZ
?assign@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEAAV12@PBDI@Z
?assign@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEAAV12@PBD@Z
?find_last_of@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBEIPBDI@Z
?rfind@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBEIPBDI@Z
?sputn@?$basic_streambuf@DV?$char_traits@D@_STL@@@_STL@@QAEHPBDH@Z
?deallocate@?$allocator@PAX@_STL@@QAEXPAPAXI@Z
??_Distrstream@_STL@@QAEXXZ
??0istrstream@_STL@@QAE@PADH@Z
?sgetn@?$basic_streambuf@DV?$char_traits@D@_STL@@@_STL@@QAEHPADH@Z
??5?$basic_istream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV01@AAH@Z
??6?$basic_ostream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV01@H@Z
??0istrstream@_STL@@QAE@PBDH@Z
?freeze@ostrstream@_STL@@QAEX_N@Z
?str@ostrstream@_STL@@QAEPADXZ
??_Dostrstream@_STL@@QAEXXZ
?pcount@ostrstream@_STL@@QBEHXZ
?init@?$basic_ios@DV?$char_traits@D@_STL@@@_STL@@IAEXPAV?$basic_streambuf@DV?$char_traits@D@_STL@@@2@@Z
?eof@ios_base@_STL@@QBE_NXZ
??1?$basic_ifstream@DV?$char_traits@D@_STL@@@_STL@@UAE@XZ
??5?$basic_istream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV01@AAI@Z
??0runtime_error@_STL@@QAE@ABV?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@1@@Z
??1?$basic_string@GV?$char_traits@G@_STL@@V?$allocator@G@2@@_STL@@QAE@XZ
??1?$_String_base@GV?$allocator@G@_STL@@@_STL@@QAE@XZ
?deallocate@?$_STLP_alloc_proxy@PAGGV?$allocator@G@_STL@@@_STL@@QAEXPAGI@Z
??0?$basic_string@GV?$char_traits@G@_STL@@V?$allocator@G@2@@_STL@@QAE@XZ
??1?$allocator@G@_STL@@QAE@XZ
?append@?$basic_string@GV?$char_traits@G@_STL@@V?$allocator@G@2@@_STL@@AAEAAV12@PBG0ABUforward_iterator_tag@2@@Z
?append@?$basic_string@GV?$char_traits@G@_STL@@V?$allocator@G@2@@_STL@@AAEAAV12@PAG0ABUforward_iterator_tag@2@@Z
?_M_append_dispatch@?$basic_string@GV?$char_traits@G@_STL@@V?$allocator@G@2@@_STL@@AAEAAV12@PBG0ABU__false_type@2@@Z
?sbumpc@?$basic_streambuf@DV?$char_traits@D@_STL@@@_STL@@QAEHXZ
??0?$basic_string@GV?$char_traits@G@_STL@@V?$allocator@G@2@@_STL@@QAE@PBGABV?$allocator@G@1@@Z
?erase@?$basic_string@GV?$char_traits@G@_STL@@V?$allocator@G@2@@_STL@@QAEPAGPAG0@Z
??0?$basic_string@GV?$char_traits@G@_STL@@V?$allocator@G@2@@_STL@@QAE@ABV01@@Z
?reserve@?$basic_string@GV?$char_traits@G@_STL@@V?$allocator@G@2@@_STL@@QAEXI@Z
?_M_allocate_block@?$_String_base@GV?$allocator@G@_STL@@@_STL@@QAEXI@Z
??0?$_STLP_alloc_proxy@PAGGV?$allocator@G@_STL@@@_STL@@QAE@ABV?$allocator@G@1@PAG@Z
?get_allocator@?$basic_string@GV?$char_traits@G@_STL@@V?$allocator@G@2@@_STL@@QBE?AV?$allocator@G@2@XZ
?assign@?$basic_string@GV?$char_traits@G@_STL@@V?$allocator@G@2@@_STL@@QAEAAV12@PBG0@Z
??4?$basic_string@GV?$char_traits@G@_STL@@V?$allocator@G@2@@_STL@@QAEAAV01@ABV01@@Z
?_M_append_dispatch@?$basic_string@GV?$char_traits@G@_STL@@V?$allocator@G@2@@_STL@@AAEAAV12@PAG0ABU__false_type@2@@Z
?_M_deallocate_block@?$_String_base@GV?$allocator@G@_STL@@@_STL@@QAEXXZ
?_M_range_initialize@?$basic_string@GV?$char_traits@G@_STL@@V?$allocator@G@2@@_STL@@AAEXPAG0@Z
?push_back@?$basic_string@GV?$char_traits@G@_STL@@V?$allocator@G@2@@_STL@@QAEXG@Z
?insert@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEXPAD00ABUforward_iterator_tag@2@@Z
?close@?$basic_filebuf@DV?$char_traits@D@_STL@@@_STL@@QAEPAV12@XZ
?_M_check_exception_mask@ios_base@_STL@@IAEXXZ
??1?$basic_filebuf@DV?$char_traits@D@_STL@@@_STL@@UAE@XZ
??1?$basic_ostream@DV?$char_traits@D@_STL@@@_STL@@UAE@XZ
??1?$basic_ios@DV?$char_traits@D@_STL@@@_STL@@UAE@XZ
??_D?$basic_ofstream@DV?$char_traits@D@_STL@@@_STL@@QAEXXZ
?_M_decrement@?$_Rb_global@_N@_STL@@SAPAU_Rb_tree_node_base@2@PAU32@@Z
?_Rebalance@?$_Rb_global@_N@_STL@@SAXPAU_Rb_tree_node_base@2@AAPAU32@@Z
?_M_increment@?$_Rb_global@_N@_STL@@SAPAU_Rb_tree_node_base@2@PAU32@@Z
?_M_compare@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@SAHPBD000@Z
?find@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBEIDI@Z
?getloc@ios_base@_STL@@QBE?AVlocale@2@XZ
?id@?$num_put@DV?$ostreambuf_iterator@DV?$char_traits@D@_STL@@@_STL@@@_STL@@2V0locale@2@A
?_M_use_facet@locale@_STL@@QBEPAVfacet@12@ABVid@12@@Z
??1locale@_STL@@QAE@XZ
?_M_handle_exception@?$basic_ios@DV?$char_traits@D@_STL@@@_STL@@QAEXH@Z
?_M_throw_failure@ios_base@_STL@@IAEXXZ
??1?$_Osentry@DV?$char_traits@D@_STL@@@_STL@@QAE@XZ
?find_first_of@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBEIPBDII@Z
?_M_throw_length_error@?$_String_base@DV?$allocator@D@_STL@@@_STL@@QBEXXZ
?replace@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEAAV12@PAD0PBD1ABUrandom_access_iterator_tag@2@@Z
??0?$basic_stringstream@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@H@Z
?_M_put_char@?$basic_ostream@DV?$char_traits@D@_STL@@@_STL@@QAEXD@Z
?str@?$basic_stringstream@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBE?AV?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@2@XZ
??1?$basic_stringstream@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@UAE@XZ
??_7?$basic_ios@DV?$char_traits@D@_STL@@@_STL@@6B@
??1ios_base@_STL@@UAE@XZ
??_D?$basic_stringstream@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEXXZ
?rfind@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBEIDI@Z
?_M_range_initialize@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEXPAD0ABUforward_iterator_tag@2@@Z
?append@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEAAV12@ID@Z
?erase@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEPADPAD0@Z
?find@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBEIPBDII@Z
?what@__Named_exception@_STL@@UBEPBDXZ
??0runtime_error@_STL@@QAE@ABV01@@Z
?seekg@?$basic_istream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV12@JH@Z
?tellg@?$basic_istream@DV?$char_traits@D@_STL@@@_STL@@QAE?AV?$fpos@H@2@XZ
?read@?$basic_istream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV12@PADH@Z
??_7?$basic_istream@DV?$char_traits@D@_STL@@@_STL@@6B@
??1?$basic_istream@DV?$char_traits@D@_STL@@@_STL@@UAE@XZ
??_D?$basic_ifstream@DV?$char_traits@D@_STL@@@_STL@@QAEXXZ
?_M_inside@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@ABE_NPAD@Z
?_M_move@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEXPAD00@Z
?_M_insert_dispatch@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEXPAD00ABU__false_type@2@@Z
?_M_copy@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEXPAD00@Z
?replace@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEAAV12@PAD000ABUforward_iterator_tag@2@@Z
?replace@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEAAV12@PAD000ABUrandom_access_iterator_tag@2@@Z
??6?$basic_ostream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV01@PBX@Z
??6?$basic_ostream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV01@_N@Z
??6?$basic_ostream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV01@I@Z
??6?$basic_ostream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV01@N@Z
?sputbackc@?$basic_streambuf@DV?$char_traits@D@_STL@@@_STL@@QAEHD@Z
??_D?$basic_istringstream@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEXXZ
??_8?$basic_ifstream@DV?$char_traits@D@_STL@@@_STL@@7B@
??0?$allocator@D@_STL@@QAE@XZ
?_M_list@?$_Stl_prime@_N@_STL@@2QBIB
??4?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEAAV01@ABV01@@Z
??0__Named_exception@_STL@@QAE@ABV?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@1@@Z
??_7logic_error@_STL@@6B@
??1logic_error@_STL@@UAE@XZ
??0logic_error@_STL@@QAE@ABV01@@Z
??0__Named_exception@_STL@@QAE@ABV01@@Z
?get_allocator@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBE?AV?$allocator@D@2@XZ
?append@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEAAV12@PBD0ABUforward_iterator_tag@2@@Z
?_M_allocate_block@?$_String_base@DV?$allocator@D@_STL@@@_STL@@QAEXI@Z
??1Init@ios_base@_STL@@QAE@XZ
??0Init@ios_base@_STL@@QAE@XZ
??1_Loc_init@ios_base@_STL@@QAE@XZ
??0_Loc_init@ios_base@_STL@@QAE@XZ
?deallocate@?$__node_alloc@$00$0A@@_STL@@SAXPAXI@Z
?_M_assign_dispatch@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEAAV12@PAD0ABU__false_type@2@@Z
?assign@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEAAV12@PBD0@Z
?append@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEAAV12@PBD@Z
?append@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEAAV12@PAD0ABUforward_iterator_tag@2@@Z
?_M_append_dispatch@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEAAV12@PBD0ABU__false_type@2@@Z
?_M_allocate@?$__node_alloc@$00$0A@@_STL@@CAPAXI@Z
??6?$basic_ostream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV01@K@Z
??0?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@PBDIABV?$allocator@D@1@@Z
??0?$_String_base@DV?$allocator@D@_STL@@@_STL@@QAE@ABV?$allocator@D@1@I@Z
??0?$basic_ostringstream@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@H@Z
?str@?$basic_ostringstream@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBE?AV?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@2@XZ
??1?$basic_ostringstream@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@UAE@XZ
??_D?$basic_ostringstream@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEXXZ
?_M_deallocate@?$__node_alloc@$00$0A@@_STL@@CAXPAXI@Z
??0?$_STLP_alloc_proxy@PADDV?$allocator@D@_STL@@@_STL@@QAE@ABV?$allocator@D@1@PAD@Z
?_M_range_initialize@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEXPBD0ABUforward_iterator_tag@2@@Z
?rfind@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBEIPBDII@Z
?substr@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBE?AV12@II@Z
?_M_throw_out_of_range@?$_String_base@DV?$allocator@D@_STL@@@_STL@@QBEXXZ
?find_last_of@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBEIPBDII@Z
?_M_append_dispatch@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEAAV12@PAD0ABU__false_type@2@@Z
??0?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@ABV01@@Z
?deallocate@?$allocator@D@_STL@@QAEXPADI@Z
??1?$allocator@D@_STL@@QAE@XZ
??1?$_STLP_alloc_proxy@PADDV?$allocator@D@_STL@@@_STL@@QAE@XZ
??0?$_String_base@DV?$allocator@D@_STL@@@_STL@@QAE@ABV?$allocator@D@1@@Z
?_M_range_initialize@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEXPBD0@Z
??1?$_String_base@DV?$allocator@D@_STL@@@_STL@@QAE@XZ
??0?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@XZ
??0?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@PBDABV?$allocator@D@1@@Z
?reserve@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEXI@Z
?find_first_not_of@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBEIDI@Z
??0?$basic_istream@DV?$char_traits@D@_STL@@@_STL@@QAE@PAV?$basic_streambuf@DV?$char_traits@D@_STL@@@1@@Z
??_7?$basic_ifstream@DV?$char_traits@D@_STL@@@_STL@@6B@
?_M_assign_dispatch@?$basic_string@GV?$char_traits@G@_STL@@V?$allocator@G@2@@_STL@@AAEAAV12@PAG0ABU__false_type@2@@Z
?_M_open@_Filebuf_base@_STL@@QAE_NPBDH@Z
?_M_insert_dispatch@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEXPADPBD1ABU__false_type@2@@Z
?assign@?$char_traits@D@_STL@@SAXAADABD@Z
?end@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEPADXZ
?append@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEAAV12@PAD0@Z
?push_back@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEXD@Z
?erase@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEAAV12@II@Z
?__stl_throw_out_of_range@_STL@@YAXPBD@Z
?_M_clear@?$vector@PAXV?$allocator@PAX@_STL@@@_STL@@IAEXXZ
?_M_set@?$vector@PAXV?$allocator@PAX@_STL@@@_STL@@IAEXPAPAX00@Z
?_M_insert_overflow@?$vector@PAXV?$allocator@PAX@_STL@@@_STL@@IAEXPAPAXABQAXABU__true_type@2@I_N@Z
??1?$_STLP_alloc_proxy@PAPAXPAXV?$allocator@PAX@_STL@@@_STL@@QAE@XZ
??0?$_Vector_base@PAXV?$allocator@PAX@_STL@@@_STL@@QAE@ABV?$allocator@PAX@1@@Z
?erase@?$vector@PAXV?$allocator@PAX@_STL@@@_STL@@QAEPAPAXPAPAX0@Z
?_M_fill_insert@?$vector@PAXV?$allocator@PAX@_STL@@@_STL@@QAEXPAPAXIABQAX@Z
??1?$vector@PAXV?$allocator@PAX@_STL@@@_STL@@QAE@XZ
??0logic_error@_STL@@QAE@ABV?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@1@@Z
?_M_skip_whitespace@?$basic_istream@DV?$char_traits@D@_STL@@@_STL@@QAEX_N@Z
?id@?$num_get@DV?$istreambuf_iterator@DV?$char_traits@D@_STL@@@_STL@@@_STL@@2V0locale@2@A
??0?$istreambuf_iterator@DV?$char_traits@D@_STL@@@_STL@@QAE@PAV?$basic_streambuf@DV?$char_traits@D@_STL@@@1@@Z
?rdbuf@?$basic_ios@DV?$char_traits@D@_STL@@@_STL@@QBEPAV?$basic_streambuf@DV?$char_traits@D@_STL@@@2@XZ
?get@?$num_get@DV?$istreambuf_iterator@DV?$char_traits@D@_STL@@@_STL@@@_STL@@QBE?AV?$istreambuf_iterator@DV?$char_traits@D@_STL@@@2@V32@0AAVios_base@2@AAHAAJ@Z
??1?$_Isentry@DV?$char_traits@D@_STL@@@_STL@@QAE@XZ
??0?$_Osentry@DV?$char_traits@D@_STL@@@_STL@@QAE@AAV?$basic_ostream@DV?$char_traits@D@_STL@@@1@@Z
??0?$basic_stringstream@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@ABV?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@1@H@Z
?_M_formatted_get@?$basic_istream@DV?$char_traits@D@_STL@@@_STL@@QAEXAAD@Z
??1?$allocator@PAX@_STL@@QAE@XZ
?_Rebalance_for_erase@?$_Rb_global@_N@_STL@@SAPAU_Rb_tree_node_base@2@PAU32@AAPAU32@11@Z
??_7runtime_error@_STL@@6B@
??1runtime_error@_STL@@UAE@XZ
?insert@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEAAV12@IABV12@@Z
?find_last_not_of@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBEIPBDII@Z
?_M_range_initialize@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEXPAD0@Z
?assign@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEAAV12@ABV12@II@Z
??4?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEAAV01@PBD@Z
?find_first_not_of@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBEIPBDII@Z
??_8?$basic_ofstream@DV?$char_traits@D@_STL@@@_STL@@7B@
??0?$basic_ios@DV?$char_traits@D@_STL@@@_STL@@IAE@XZ
?open@?$basic_filebuf@DV?$char_traits@D@_STL@@@_STL@@QAEPAV12@PBDH@Z
?clear@?$basic_ios@DV?$char_traits@D@_STL@@@_STL@@QAEXH@Z
?_M_put_nowiden@?$basic_ostream@DV?$char_traits@D@_STL@@@_STL@@QAEXPBD@Z
??0?$basic_ostream@DV?$char_traits@D@_STL@@@_STL@@QAE@PAV?$basic_streambuf@DV?$char_traits@D@_STL@@@1@@Z
??0?$basic_filebuf@DV?$char_traits@D@_STL@@@_STL@@QAE@XZ
?peek@?$basic_istream@DV?$char_traits@D@_STL@@@_STL@@QAEHXZ
??_7?$basic_ofstream@DV?$char_traits@D@_STL@@@_STL@@6B@
??0ostrstream@_STL@@QAE@XZ
?put@?$basic_ostream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV12@D@Z
??1?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@XZ
?deallocate@?$_STLP_alloc_proxy@PADDV?$allocator@D@_STL@@@_STL@@QAEXPADI@Z
?clear@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEXXZ
?_M_deallocate_block@?$_String_base@DV?$allocator@D@_STL@@@_STL@@QAEXXZ
?seekg@?$basic_istream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV12@V?$fpos@H@2@@Z
??1?$basic_ofstream@DV?$char_traits@D@_STL@@@_STL@@UAE@XZ
?allocate@?$_STLP_alloc_proxy@PAGGV?$allocator@G@_STL@@@_STL@@QAEPAGI@Z

kernel32

WriteFile
CreateFileA
ReadFile
CreateProcessA
GetProcessHeap
HeapAlloc
HeapFree
OutputDebugStringA
RaiseException
WriteFileGather
ReadFileScatter
lstrcatA
lstrcpyA
DisableThreadLibraryCalls
HeapDestroy
GetShortPathNameA
lstrlenW
IsBadCodePtr
VirtualQuery
InterlockedDecrement
lstrlenA
InterlockedIncrement
LoadLibraryA
FreeLibrary
GetProcAddress
lstrcpynA
SetFileAttributesA
CopyFileA
InitializeCriticalSection
DeleteCriticalSection
GetLastError
LeaveCriticalSection
EnterCriticalSection
WaitForMultipleObjects
ResetEvent
FindClose
FindNextFileA
FindFirstFileA
RemoveDirectoryA
QueryPerformanceFrequency
QueryPerformanceCounter
CreateWaitableTimerA
SetWaitableTimer
GetSystemTime
GetFileAttributesExA
CompareFileTime
ReleaseMutex
CreateMutexA
GetLongPathNameA
CreateThread
Sleep
QueueUserAPC
SetFilePointer
SetEndOfFile
GetFileSize
FlushFileBuffers
MoveFileA
DeleteFileA
GetFileAttributesA
CreateDirectoryA
GetVersionExA
GetModuleFileNameA
GetModuleHandleA
GetDiskFreeSpaceA
GetPrivateProfileSectionA
GetPrivateProfileSectionNamesA
WritePrivateProfileStringA
GetSystemInfo
VirtualFree
VirtualAlloc
WideCharToMultiByte
MultiByteToWideChar
GetVolumeInformationA
GetPrivateProfileStringA
GetSystemDirectoryA
GetTickCount
WaitForSingleObject
SetEvent
CreateEventA
GetOverlappedResult
WaitForMultipleObjectsEx
GetCurrentThreadId
CloseHandle
CreateIoCompletionPort
CancelIo
SetLastError
GetQueuedCompletionStatus
WaitForSingleObjectEx
PostQueuedCompletionStatus

ole32

CoCreateGuid
IIDFromString
CoCreateInstance
CoInitializeEx
CoUninitialize
CLSIDFromString

oleaut32

SysAllocString
RegisterTypeLi
SysFreeString
LoadTypeLi

ws2_32

accept
WSAWaitForMultipleEvents
getsockname
WSAEnumNetworkEvents
WSAEventSelect
htons
connect
WSAGetOverlappedResult
closesocket
WSASocketA
WSAIoctl
inet_addr
gethostname
WSAGetLastError
gethostbyname
inet_ntoa
shutdown
WSARecv
WSASend
setsockopt
socket
listen
bind
htonl
getpeername
ntohl
sendto
recvfrom
WSACreateEvent
WSACloseEvent
WSAStartup
WSACleanup
WSARecvFrom
WSASendTo
ioctlsocket
ntohs

asyn_dns

ord2
ord4
ord3
ord1

msvcp60

??0bad_alloc@std@@QAE@ABV01@@Z
??_7bad_alloc@std@@6B@
??0bad_alloc@std@@QAE@PBD@Z
??1bad_alloc@std@@UAE@XZ

msvcrt

tolower
strncmp
vsprintf
abort
printf
ceil
free
malloc
fclose
fread
fopen
?what@exception@@UBEPBDXZ
fflush
fwrite
fseek
_close
_read
_open
strrchr
strtok
_strdate
_strtime
memcpy
strlen
memset
strcmp
ftell
sqrt
toupper
memcmp
??8type_info@@QBEHABV0@@Z
??9type_info@@QBEHABV0@@Z
_stricmp
_itoa
_ultow
swprintf
realloc
exit
_mbsnbicmp
_mbsstr
_strnicmp
??1type_info@@UAE@XZ
__dllonexit
_onexit
_except_handler3
?terminate@@YAXXZ
_initterm
_adjust_fdiv
??0exception@@QAE@XZ
__RTtypeid
?name@type_info@@QBEPBDXZ
__RTDynamicCast
_purecall
atof
_ftol
_strlwr
rand
isspace
isalpha
isdigit
_snprintf
??0exception@@QAE@ABQBD@Z
??1exception@@UAE@XZ
_atoi64
atol
_ui64toa
_ultoa
_i64toa
sprintf
strncpy
??0exception@@QAE@ABV0@@Z
_putenv
time
srand
_CxxThrowException
memmove
__CxxFrameHandler
??2@YAPAXI@Z
atoi
strchr
strstr
_mbsicmp
sscanf
_CIpow

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

wininet

InternetGetCookieA
InternetQueryOptionA

user32

GetDesktopWindow
SetWindowTextA
GetDlgItem
FindWindowA
CharNextA

advapi32

CryptGenRandom
CryptReleaseContext
CryptAcquireContextA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl

shell32

ShellExecuteA

mswsock

GetAcceptExSockaddrs
AcceptEx

iphlpapi

GetNetworkParams
GetAdaptersInfo
SendARP

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
add_emule_server
add_emule_server_byLink
cancel_speed_limit
close_bt_reimport_task
connect_emule_server
create_continued_bt_task
create_continued_emule_task
create_continued_task
create_ed2k_link
create_new_bt_task
create_new_emule_task
create_new_task
create_predownload_task
create_upload_bt_task
create_upload_emule_task
debug_p2p_pipe_choke_remote
debug_p2p_pipe_query_info
debug_p2p_pipe_release_info
debug_p2p_pipe_simulate_remote_choke_local
delete_emule_server
delete_emule_temp_files
delete_task
delete_tempfile
emule_tempfile_reimport
erase_emule_tempfile_reimport_result
fetch_server_connection_info
fix_pre_download_parameter
fix_task_parameter
get_bt_cfg_file_list
get_bt_data_file_list
get_bt_file_id
get_bt_file_info
get_bt_peer_info_list
get_bt_reimport_progress
get_bt_reimport_root_path
get_bt_task_info
get_client_hash
get_connect_period
get_connector_parameter
get_credits_file
get_crypt_option
get_current_upload_speed
get_dht_status
get_download_bandwidth
get_dspider_ctrl_flag
get_ed2k_server_link
get_emule_hub_host
get_emule_hub_port
get_emule_kad_port
get_emule_listen_port
get_emule_peer_info_list
get_emule_server_count
get_emule_server_info
get_emule_server_list
get_emule_status
get_emule_task_AICH_hash
get_emule_task_bcid
get_emule_task_cid
get_emule_task_fileid
get_emule_task_gcid
get_emule_task_info
get_emule_tempfile_reimport_result
get_enrollsp1_info
get_failure_detail
get_final_filename
get_global_connection_limit
get_kademlia_node_hash
get_kadnode_file
get_last_modified
get_mod_version
get_nickname
get_origin_readbytes
get_peer_id
get_play_port
get_reconnect_period
get_reimport_ed2k_link
get_reimport_file_name
get_secure_file
get_secureident_option
get_server_list_file
get_small_file_size
get_source_search_period
get_source_upmost
get_task_gcid
get_task_url
get_temp_file_list
get_thunder_peer_extern_credit
get_torrent_file_name
get_upnp_status
get_url_str
hold_connect_ranking
import_clients_credit
init
is_AICH_enable
is_bt_tempfile_exist
is_compress_enable
is_ed2k_enable
is_emule_temp_file_exist
is_kad_enable
is_nated
is_p2sp_enable
is_protocol_forbidded
is_registered
is_source_exchange_enable
is_support_dispatch_strategy
is_support_schema
is_tempfile_exist
notify_del_uncomp_task
notify_hub_bt_deleted
notify_hub_bt_moved
notify_hub_deleted
notify_hub_moved
on_playing
parse_ed2k_server_url
parse_ed2k_url
parse_filename
parse_seed_file
parse_url
query_new_connect_info
query_part_cid
query_resource_info
query_task_info
read_ie_proxy
register_client
release_bt_data_file_list
release_bt_peer_info_list
release_ed2k_link
release_peer_info_list
release_seed_file_info
release_temp_file_list
report_crack
report_crack_cancel
reset_bt_task_need_download_file
sametime_connecting_peers
set_AICH_enable
set_added_resource_count
set_bt_file_download_order
set_bt_task_stat_para
set_client_hash
set_compress_enable
set_connector_parameter
set_cookie
set_crypt_option
set_cur_language
set_dht_switch
set_dispatch_strategy
set_ed2k_enable
set_emule_crypt_option
set_emule_hub_host
set_emule_hub_port
set_emule_kad_port
set_emule_listen_port
set_emule_server_priority
set_emule_switch
set_emule_task_stat_para
set_forbid_p2p_service
set_global_connection_limit
set_hub_proxy
set_iobuffer_size
set_kad_enable
set_kademlia_node_hash
set_last_modified
set_listen_port
set_nichname
set_p2sp_enable
set_product_identifier
set_proxy_info
set_recommend_info
set_report_strategy
set_res_query_cid
set_res_use_strategy
set_retry_strategy
set_sametime_connecting_peers
set_secureident_option
set_source_exchange_enable
set_source_upmost
set_speed_limit
set_stat_ref_url
set_task_type
set_thread_num
set_thunder_peer_extern_credit
set_upload_speed_limit
set_upnp_switch
set_user_name
set_xl_file_system_bufsize
set_xl_file_system_flush_bufsize
start_bt_reimport_task
start_predownload_task
start_task
stop_batch_task
stop_emule_server
stop_task
uninit
update_datafile
url_info_to_str
verify_proxy

Sections

.text
Size: 4.3MB - Virtual size: 4.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 800KB - Virtual size: 799KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 240KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 500KB - Virtual size: 497KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Program/getAllurl.htm
.html .vbs polyglot
Program/geturl.htm
.html .js polyglot
Program/historyinfoTransfer.dll
.dll windows:4 windows x86 arch:x86

87517b0b9e4cf03c20a717d423e1edd2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

historyinfo_manage

flush_to_disk
create_default_content
delete_content
get_root_info
init
update_item_info
uninit
update_category_info
add_item_to_category
add_category_to_category

mfc42

ord600
ord826
ord269
ord1578
ord6467
ord1255
ord1253
ord1570
ord1197
ord1243
ord342
ord1182
ord1577
ord537
ord800
ord4278
ord5710
ord4129
ord535
ord540
ord825
ord823
ord2107
ord858
ord941
ord860
ord920
ord919
ord5934
ord934
ord5683
ord5933
ord3663
ord2841
ord5450
ord5440
ord6383
ord6394
ord1168
ord961
ord5187
ord2917
ord2803
ord6312
ord4177
ord6385
ord5442
ord3318
ord6010
ord5773
ord2601
ord3180
ord3183
ord3176
ord3507
ord3614
ord665
ord354
ord3584
ord1116
ord803
ord2614
ord5620
ord1081
ord4277
ord2763
ord6283
ord6282
ord940
ord6648
ord2393
ord700
ord715
ord398
ord415
ord913
ord4189
ord6929
ord6927
ord1575
ord1176
ord1990
ord543

msvcrt

_mbsicmp
atol
atoi
sscanf
__dllonexit
_onexit
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
_mbscmp
__CxxFrameHandler
malloc
free

kernel32

InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
HeapReAlloc
GetProcessHeap
HeapAlloc
LocalFree
LocalAlloc

Exports

Exports

historyinfoTransfer

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Program/historyinfo_manage.dll
.dll windows:4 windows x86 arch:x86

ca621e5b05bb42f6728130d1b83de5d8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetSystemTime
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InterlockedIncrement
InterlockedDecrement
DisableThreadLibraryCalls

msvcrt

__CxxFrameHandler
fclose
sscanf
fread
srand
fflush
fseek
??3@YAXPAX@Z
_except_handler3
__dllonexit
_onexit
free
_initterm
malloc
_adjust_fdiv
rand
??2@YAPAXI@Z
sprintf
fwrite
time
fopen
_memicmp

msvcp60

??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
??1_Winit@std@@QAE@XZ

Exports

Exports

add_category_to_category
add_item_to_category
adjust_sub_order
create_default_content
delete_category
delete_content
delete_item
flush_to_disk
get_category_info
get_item_info
get_parent_id
get_root_info
get_version
init
move_category
move_item
uninit
update_category_info
update_item_info
verify_data

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 778B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Program/iTargetAD.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

BeginPlayStatusAD
ClickOnStatusAD
CloseMainAD
CloseNewAD
FocusOnMainAD
GetStatusADPlayInfo
RefreshMainAD
RefreshMainADWhenOperate
RefreshNextStatusAD
ReportCrashFlash
ResizeMainAD
SetMainAdHolder
SetMainAdKeyword
SetNewADHolder
SetSocks5Proxy
Shutdown
Start
StopPlayStatusAD

Sections

.text
Size: 512B - Virtual size: 30B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 509B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Program/id.dat
Program/ipfilter.dat
Program/msvcirt.dll
.dll windows:5 windows x86 arch:x86

c9e4d1c3c611270cb8fe488259e71c2a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

msvcirt.pdb

Imports

msvcrt

isxdigit
strtol
_errno
strtoul
toupper
sprintf
fflush
_iob
fputc
fwrite
fgetc
isdigit
ftell
fseek
__badioinfo
free
_initterm
malloc
_adjust_fdiv
?terminate@@YAXXZ
_except_handler3
__dllonexit
_onexit
isspace
strtod
_setmode
_sopen
??_U@YAPAXI@Z
_read
_write
memmove
__pioinfo
_lseek
_close
??2@YAPAXI@Z
__CxxFrameHandler
??3@YAXPAX@Z
fread
_purecall

kernel32

UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedDecrement
InterlockedIncrement
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
SetUnhandledExceptionFilter

Exports

Exports

??0Iostream_init@@QAE@AAVios@@H@Z
??0Iostream_init@@QAE@XZ
??0exception@@QAE@ABQBD@Z
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@XZ
??0filebuf@@QAE@ABV0@@Z
??0filebuf@@QAE@H@Z
??0filebuf@@QAE@HPADH@Z
??0filebuf@@QAE@XZ
??0fstream@@QAE@ABV0@@Z
??0fstream@@QAE@H@Z
??0fstream@@QAE@HPADH@Z
??0fstream@@QAE@PBDHH@Z
??0fstream@@QAE@XZ
??0ifstream@@QAE@ABV0@@Z
??0ifstream@@QAE@H@Z
??0ifstream@@QAE@HPADH@Z
??0ifstream@@QAE@PBDHH@Z
??0ifstream@@QAE@XZ
??0ios@@IAE@ABV0@@Z
??0ios@@IAE@XZ
??0ios@@QAE@PAVstreambuf@@@Z
??0iostream@@IAE@ABV0@@Z
??0iostream@@IAE@XZ
??0iostream@@QAE@PAVstreambuf@@@Z
??0istream@@IAE@ABV0@@Z
??0istream@@IAE@XZ
??0istream@@QAE@PAVstreambuf@@@Z
??0istream_withassign@@QAE@ABV0@@Z
??0istream_withassign@@QAE@PAVstreambuf@@@Z
??0istream_withassign@@QAE@XZ
??0istrstream@@QAE@ABV0@@Z
??0istrstream@@QAE@PAD@Z
??0istrstream@@QAE@PADH@Z
??0logic_error@@QAE@ABQBD@Z
??0logic_error@@QAE@ABV0@@Z
??0ofstream@@QAE@ABV0@@Z
??0ofstream@@QAE@H@Z
??0ofstream@@QAE@HPADH@Z
??0ofstream@@QAE@PBDHH@Z
??0ofstream@@QAE@XZ
??0ostream@@IAE@ABV0@@Z
??0ostream@@IAE@XZ
??0ostream@@QAE@PAVstreambuf@@@Z
??0ostream_withassign@@QAE@ABV0@@Z
??0ostream_withassign@@QAE@PAVstreambuf@@@Z
??0ostream_withassign@@QAE@XZ
??0ostrstream@@QAE@ABV0@@Z
??0ostrstream@@QAE@PADHH@Z
??0ostrstream@@QAE@XZ
??0stdiobuf@@QAE@ABV0@@Z
??0stdiobuf@@QAE@PAU_iobuf@@@Z
??0stdiostream@@QAE@ABV0@@Z
??0stdiostream@@QAE@PAU_iobuf@@@Z
??0streambuf@@IAE@PADH@Z
??0streambuf@@IAE@XZ
??0streambuf@@QAE@ABV0@@Z
??0strstream@@QAE@ABV0@@Z
??0strstream@@QAE@PADHH@Z
??0strstream@@QAE@XZ
??0strstreambuf@@QAE@ABV0@@Z
??0strstreambuf@@QAE@H@Z
??0strstreambuf@@QAE@P6APAXJ@ZP6AXPAX@Z@Z
??0strstreambuf@@QAE@PADH0@Z
??0strstreambuf@@QAE@PAEH0@Z
??0strstreambuf@@QAE@XZ
??1Iostream_init@@QAE@XZ
??1exception@@UAE@XZ
??1filebuf@@UAE@XZ
??1fstream@@UAE@XZ
??1ifstream@@UAE@XZ
??1ios@@UAE@XZ
??1iostream@@UAE@XZ
??1istream@@UAE@XZ
??1istream_withassign@@UAE@XZ
??1istrstream@@UAE@XZ
??1logic_error@@UAE@XZ
??1ofstream@@UAE@XZ
??1ostream@@UAE@XZ
??1ostream_withassign@@UAE@XZ
??1ostrstream@@UAE@XZ
??1stdiobuf@@UAE@XZ
??1stdiostream@@UAE@XZ
??1streambuf@@UAE@XZ
??1strstream@@UAE@XZ
??1strstreambuf@@UAE@XZ
??4Iostream_init@@QAEAAV0@ABV0@@Z
??4exception@@QAEAAV0@ABV0@@Z
??4filebuf@@QAEAAV0@ABV0@@Z
??4fstream@@QAEAAV0@AAV0@@Z
??4ifstream@@QAEAAV0@ABV0@@Z
??4ios@@IAEAAV0@ABV0@@Z
??4iostream@@IAEAAV0@AAV0@@Z
??4iostream@@IAEAAV0@PAVstreambuf@@@Z
??4istream@@IAEAAV0@ABV0@@Z
??4istream@@IAEAAV0@PAVstreambuf@@@Z
??4istream_withassign@@QAEAAV0@ABV0@@Z
??4istream_withassign@@QAEAAVistream@@ABV1@@Z
??4istream_withassign@@QAEAAVistream@@PAVstreambuf@@@Z
??4istrstream@@QAEAAV0@ABV0@@Z
??4logic_error@@QAEAAV0@ABV0@@Z
??4ofstream@@QAEAAV0@ABV0@@Z
??4ostream@@IAEAAV0@ABV0@@Z
??4ostream@@IAEAAV0@PAVstreambuf@@@Z
??4ostream_withassign@@QAEAAV0@ABV0@@Z
??4ostream_withassign@@QAEAAVostream@@ABV1@@Z
??4ostream_withassign@@QAEAAVostream@@PAVstreambuf@@@Z
??4ostrstream@@QAEAAV0@ABV0@@Z
??4stdiobuf@@QAEAAV0@ABV0@@Z
??4stdiostream@@QAEAAV0@AAV0@@Z
??4streambuf@@QAEAAV0@ABV0@@Z
??4strstream@@QAEAAV0@AAV0@@Z
??4strstreambuf@@QAEAAV0@ABV0@@Z
??5istream@@QAEAAV0@AAC@Z
??5istream@@QAEAAV0@AAD@Z
??5istream@@QAEAAV0@AAE@Z
??5istream@@QAEAAV0@AAF@Z
??5istream@@QAEAAV0@AAG@Z
??5istream@@QAEAAV0@AAH@Z
??5istream@@QAEAAV0@AAI@Z
??5istream@@QAEAAV0@AAJ@Z
??5istream@@QAEAAV0@AAK@Z
??5istream@@QAEAAV0@AAM@Z
??5istream@@QAEAAV0@AAN@Z
??5istream@@QAEAAV0@AAO@Z
??5istream@@QAEAAV0@P6AAAV0@AAV0@@Z@Z
??5istream@@QAEAAV0@P6AAAVios@@AAV1@@Z@Z
??5istream@@QAEAAV0@PAC@Z
??5istream@@QAEAAV0@PAD@Z
??5istream@@QAEAAV0@PAE@Z
??5istream@@QAEAAV0@PAVstreambuf@@@Z
??6ostream@@QAEAAV0@C@Z
??6ostream@@QAEAAV0@D@Z
??6ostream@@QAEAAV0@E@Z
??6ostream@@QAEAAV0@F@Z
??6ostream@@QAEAAV0@G@Z
??6ostream@@QAEAAV0@H@Z
??6ostream@@QAEAAV0@I@Z
??6ostream@@QAEAAV0@J@Z
??6ostream@@QAEAAV0@K@Z
??6ostream@@QAEAAV0@M@Z
??6ostream@@QAEAAV0@N@Z
??6ostream@@QAEAAV0@O@Z
??6ostream@@QAEAAV0@P6AAAV0@AAV0@@Z@Z
??6ostream@@QAEAAV0@P6AAAVios@@AAV1@@Z@Z
??6ostream@@QAEAAV0@PAVstreambuf@@@Z
??6ostream@@QAEAAV0@PBC@Z
??6ostream@@QAEAAV0@PBD@Z
??6ostream@@QAEAAV0@PBE@Z
??6ostream@@QAEAAV0@PBX@Z
??7ios@@QBEHXZ
??Bios@@QBEPAXXZ
??_7exception@@6B@
??_7filebuf@@6B@
??_7fstream@@6B@
??_7ifstream@@6B@
??_7ios@@6B@
??_7iostream@@6B@
??_7istream@@6B@
??_7istream_withassign@@6B@
??_7istrstream@@6B@
??_7logic_error@@6B@
??_7ofstream@@6B@
??_7ostream@@6B@
??_7ostream_withassign@@6B@
??_7ostrstream@@6B@
??_7stdiobuf@@6B@
??_7stdiostream@@6B@
??_7streambuf@@6B@
??_7strstream@@6B@
??_7strstreambuf@@6B@
??_8fstream@@7Bistream@@@
??_8fstream@@7Bostream@@@
??_8ifstream@@7B@
??_8iostream@@7Bistream@@@
??_8iostream@@7Bostream@@@
??_8istream@@7B@
??_8istream_withassign@@7B@
??_8istrstream@@7B@
??_8ofstream@@7B@
??_8ostream@@7B@
??_8ostream_withassign@@7B@
??_8ostrstream@@7B@
??_8stdiostream@@7Bistream@@@
??_8stdiostream@@7Bostream@@@
??_8strstream@@7Bistream@@@
??_8strstream@@7Bostream@@@
??_Dfstream@@QAEXXZ
??_Difstream@@QAEXXZ
??_Diostream@@QAEXXZ
??_Distream@@QAEXXZ
??_Distream_withassign@@QAEXXZ
??_Distrstream@@QAEXXZ
??_Dofstream@@QAEXXZ
??_Dostream@@QAEXXZ
??_Dostream_withassign@@QAEXXZ
??_Dostrstream@@QAEXXZ
??_Dstdiostream@@QAEXXZ
??_Dstrstream@@QAEXXZ
??_Eexception@@UAEPAXI@Z
??_Efilebuf@@UAEPAXI@Z
??_Efstream@@UAEPAXI@Z
??_Eifstream@@UAEPAXI@Z
??_Eios@@UAEPAXI@Z
??_Eiostream@@UAEPAXI@Z
??_Eistream@@UAEPAXI@Z
??_Eistream_withassign@@UAEPAXI@Z
??_Eistrstream@@UAEPAXI@Z
??_Elogic_error@@UAEPAXI@Z
??_Eofstream@@UAEPAXI@Z
??_Eostream@@UAEPAXI@Z
??_Eostream_withassign@@UAEPAXI@Z
??_Eostrstream@@UAEPAXI@Z
??_Estdiobuf@@UAEPAXI@Z
??_Estdiostream@@UAEPAXI@Z
??_Estreambuf@@UAEPAXI@Z
??_Estrstream@@UAEPAXI@Z
??_Estrstreambuf@@UAEPAXI@Z
??_Gexception@@UAEPAXI@Z
??_Gfilebuf@@UAEPAXI@Z
??_Gfstream@@UAEPAXI@Z
??_Gifstream@@UAEPAXI@Z
??_Gios@@UAEPAXI@Z
??_Giostream@@UAEPAXI@Z
??_Gistream@@UAEPAXI@Z
??_Gistream_withassign@@UAEPAXI@Z
??_Gistrstream@@UAEPAXI@Z
??_Glogic_error@@UAEPAXI@Z
??_Gofstream@@UAEPAXI@Z
??_Gostream@@UAEPAXI@Z
??_Gostream_withassign@@UAEPAXI@Z
??_Gostrstream@@UAEPAXI@Z
??_Gstdiobuf@@UAEPAXI@Z
??_Gstdiostream@@UAEPAXI@Z
??_Gstreambuf@@UAEPAXI@Z
??_Gstrstream@@UAEPAXI@Z
??_Gstrstreambuf@@UAEPAXI@Z
?adjustfield@ios@@2JB
?allocate@streambuf@@IAEHXZ
?attach@filebuf@@QAEPAV1@H@Z
?attach@fstream@@QAEXH@Z
?attach@ifstream@@QAEXH@Z
?attach@ofstream@@QAEXH@Z
?bad@ios@@QBEHXZ
?base@streambuf@@IBEPADXZ
?basefield@ios@@2JB
?binary@filebuf@@2HB
?bitalloc@ios@@SAJXZ
?blen@streambuf@@IBEHXZ
?cerr@@3Vostream_withassign@@A
?cin@@3Vistream_withassign@@A
?clear@ios@@QAEXH@Z
?clog@@3Vostream_withassign@@A
?close@filebuf@@QAEPAV1@XZ
?close@fstream@@QAEXXZ
?close@ifstream@@QAEXXZ
?close@ofstream@@QAEXXZ
?clrlock@ios@@QAAXXZ
?clrlock@streambuf@@QAEXXZ
?cout@@3Vostream_withassign@@A
?dbp@streambuf@@QAEXXZ
?dec@@YAAAVios@@AAV1@@Z
?delbuf@ios@@QAEXH@Z
?delbuf@ios@@QBEHXZ
?doallocate@streambuf@@MAEHXZ
?doallocate@strstreambuf@@MAEHXZ
?eatwhite@istream@@QAEXXZ
?eback@streambuf@@IBEPADXZ
?ebuf@streambuf@@IBEPADXZ
?egptr@streambuf@@IBEPADXZ
?endl@@YAAAVostream@@AAV1@@Z
?ends@@YAAAVostream@@AAV1@@Z
?eof@ios@@QBEHXZ
?epptr@streambuf@@IBEPADXZ
?fLockcInit@ios@@0HA
?fail@ios@@QBEHXZ
?fd@filebuf@@QBEHXZ
?fd@fstream@@QBEHXZ
?fd@ifstream@@QBEHXZ
?fd@ofstream@@QBEHXZ
?fill@ios@@QAEDD@Z
?fill@ios@@QBEDXZ
?flags@ios@@QAEJJ@Z
?flags@ios@@QBEJXZ
?floatfield@ios@@2JB
?flush@@YAAAVostream@@AAV1@@Z
?flush@ostream@@QAEAAV1@XZ
?freeze@strstreambuf@@QAEXH@Z
?gbump@streambuf@@IAEXH@Z
?gcount@istream@@QBEHXZ
?get@istream@@IAEAAV1@PADHH@Z
?get@istream@@QAEAAV1@AAC@Z
?get@istream@@QAEAAV1@AAD@Z
?get@istream@@QAEAAV1@AAE@Z
?get@istream@@QAEAAV1@AAVstreambuf@@D@Z
?get@istream@@QAEAAV1@PACHD@Z
?get@istream@@QAEAAV1@PADHD@Z
?get@istream@@QAEAAV1@PAEHD@Z
?get@istream@@QAEHXZ
?getdouble@istream@@AAEHPADH@Z
?getint@istream@@AAEHPAD@Z
?getline@istream@@QAEAAV1@PACHD@Z
?getline@istream@@QAEAAV1@PADHD@Z
?getline@istream@@QAEAAV1@PAEHD@Z
?good@ios@@QBEHXZ
?gptr@streambuf@@IBEPADXZ
?hex@@YAAAVios@@AAV1@@Z
?ignore@istream@@QAEAAV1@HH@Z
?in_avail@streambuf@@QBEHXZ
?init@ios@@IAEXPAVstreambuf@@@Z
?ipfx@istream@@QAEHH@Z
?is_open@filebuf@@QBEHXZ
?is_open@fstream@@QBEHXZ
?is_open@ifstream@@QBEHXZ
?is_open@ofstream@@QBEHXZ
?isfx@istream@@QAEXXZ
?iword@ios@@QBEAAJH@Z
?lock@ios@@QAAXXZ
?lock@streambuf@@QAEXXZ
?lockbuf@ios@@QAAXXZ
?lockc@ios@@KAXXZ
?lockptr@ios@@IAEPAU_CRT_CRITICAL_SECTION@@XZ
?lockptr@streambuf@@IAEPAU_CRT_CRITICAL_SECTION@@XZ
?oct@@YAAAVios@@AAV1@@Z
?open@filebuf@@QAEPAV1@PBDHH@Z
?open@fstream@@QAEXPBDHH@Z
?open@ifstream@@QAEXPBDHH@Z
?open@ofstream@@QAEXPBDHH@Z
?openprot@filebuf@@2HB
?opfx@ostream@@QAEHXZ
?osfx@ostream@@QAEXXZ
?out_waiting@streambuf@@QBEHXZ
?overflow@filebuf@@UAEHH@Z
?overflow@stdiobuf@@UAEHH@Z
?overflow@strstreambuf@@UAEHH@Z
?pbackfail@stdiobuf@@UAEHH@Z
?pbackfail@streambuf@@UAEHH@Z
?pbase@streambuf@@IBEPADXZ
?pbump@streambuf@@IAEXH@Z
?pcount@ostrstream@@QBEHXZ
?pcount@strstream@@QBEHXZ
?peek@istream@@QAEHXZ
?pptr@streambuf@@IBEPADXZ
?precision@ios@@QAEHH@Z
?precision@ios@@QBEHXZ
?put@ostream@@QAEAAV1@C@Z
?put@ostream@@QAEAAV1@D@Z
?put@ostream@@QAEAAV1@E@Z
?putback@istream@@QAEAAV1@D@Z
?pword@ios@@QBEAAPAXH@Z
?rdbuf@fstream@@QBEPAVfilebuf@@XZ
?rdbuf@ifstream@@QBEPAVfilebuf@@XZ
?rdbuf@ios@@QBEPAVstreambuf@@XZ
?rdbuf@istrstream@@QBEPAVstrstreambuf@@XZ
?rdbuf@ofstream@@QBEPAVfilebuf@@XZ
?rdbuf@ostrstream@@QBEPAVstrstreambuf@@XZ
?rdbuf@stdiostream@@QBEPAVstdiobuf@@XZ
?rdbuf@strstream@@QBEPAVstrstreambuf@@XZ
?rdstate@ios@@QBEHXZ
?read@istream@@QAEAAV1@PACH@Z
?read@istream@@QAEAAV1@PADH@Z
?read@istream@@QAEAAV1@PAEH@Z
?sbumpc@streambuf@@QAEHXZ
?seekg@istream@@QAEAAV1@J@Z
?seekg@istream@@QAEAAV1@JW4seek_dir@ios@@@Z
?seekoff@filebuf@@UAEJJW4seek_dir@ios@@H@Z
?seekoff@stdiobuf@@UAEJJW4seek_dir@ios@@H@Z
?seekoff@streambuf@@UAEJJW4seek_dir@ios@@H@Z
?seekoff@strstreambuf@@UAEJJW4seek_dir@ios@@H@Z
?seekp@ostream@@QAEAAV1@J@Z
?seekp@ostream@@QAEAAV1@JW4seek_dir@ios@@@Z
?seekpos@streambuf@@UAEJJH@Z
?setb@streambuf@@IAEXPAD0H@Z
?setbuf@filebuf@@UAEPAVstreambuf@@PADH@Z
?setbuf@fstream@@QAEPAVstreambuf@@PADH@Z
?setbuf@ifstream@@QAEPAVstreambuf@@PADH@Z
?setbuf@ofstream@@QAEPAVstreambuf@@PADH@Z
?setbuf@streambuf@@UAEPAV1@PADH@Z
?setbuf@strstreambuf@@UAEPAVstreambuf@@PADH@Z
?setf@ios@@QAEJJ@Z
?setf@ios@@QAEJJJ@Z
?setg@streambuf@@IAEXPAD00@Z
?setlock@ios@@QAAXXZ
?setlock@streambuf@@QAEXXZ
?setmode@filebuf@@QAEHH@Z
?setmode@fstream@@QAEHH@Z
?setmode@ifstream@@QAEHH@Z
?setmode@ofstream@@QAEHH@Z
?setp@streambuf@@IAEXPAD0@Z
?setrwbuf@stdiobuf@@QAEHHH@Z
?sgetc@streambuf@@QAEHXZ
?sgetn@streambuf@@QAEHPADH@Z
?sh_none@filebuf@@2HB
?sh_read@filebuf@@2HB
?sh_write@filebuf@@2HB
?snextc@streambuf@@QAEHXZ
?sputbackc@streambuf@@QAEHD@Z
?sputc@streambuf@@QAEHH@Z
?sputn@streambuf@@QAEHPBDH@Z
?stdiofile@stdiobuf@@QAEPAU_iobuf@@XZ
?stossc@streambuf@@QAEXXZ
?str@istrstream@@QAEPADXZ
?str@ostrstream@@QAEPADXZ
?str@strstream@@QAEPADXZ
?str@strstreambuf@@QAEPADXZ
?sunk_with_stdio@ios@@0HA
?sync@filebuf@@UAEHXZ
?sync@istream@@QAEHXZ
?sync@stdiobuf@@UAEHXZ
?sync@streambuf@@UAEHXZ
?sync@strstreambuf@@UAEHXZ
?sync_with_stdio@ios@@SAXXZ
?tellg@istream@@QAEJXZ
?tellp@ostream@@QAEJXZ
?text@filebuf@@2HB
?tie@ios@@QAEPAVostream@@PAV2@@Z
?tie@ios@@QBEPAVostream@@XZ
?unbuffered@streambuf@@IAEXH@Z
?unbuffered@streambuf@@IBEHXZ
?underflow@filebuf@@UAEHXZ
?underflow@stdiobuf@@UAEHXZ
?underflow@strstreambuf@@UAEHXZ
?unlock@ios@@QAAXXZ
?unlock@streambuf@@QAEXXZ
?unlockbuf@ios@@QAAXXZ
?unlockc@ios@@KAXXZ
?unsetf@ios@@QAEJJ@Z
?what@exception@@UBEPBDXZ
?width@ios@@QAEHH@Z
?width@ios@@QBEHXZ
?write@ostream@@QAEAAV1@PBCH@Z
?write@ostream@@QAEAAV1@PBDH@Z
?write@ostream@@QAEAAV1@PBEH@Z
?writepad@ostream@@AAEAAV1@PBD0@Z
?ws@@YAAAVistream@@AAV1@@Z
?x_curindex@ios@@0HA
?x_lockc@ios@@0U_CRT_CRITICAL_SECTION@@A
?x_maxbit@ios@@0JA
?x_statebuf@ios@@0PAJA
?xalloc@ios@@SAHXZ
?xsgetn@streambuf@@UAEHPADH@Z
?xsputn@streambuf@@UAEHPBDH@Z
__dummy_export
_mtlock
_mtunlock

Sections

.text
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 568B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Program/nodes.dat
Program/register.ini
Program/server.bak
Program/server.met
Program/stlport_vc646.dll
.dll windows:4 windows x86 arch:x86

b1603c3e1c5acc291efe3235cc214391

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcp60

??1bad_alloc@std@@UAE@XZ
??0bad_alloc@std@@QAE@ABV01@@Z
??0bad_alloc@std@@QAE@PBD@Z

msvcrt

sprintf
?what@exception@@UBEPBDXZ
_fcvt
setlocale
??9type_info@@QBEHABV0@@Z
atoi
_fpclass
_ecvt
strncat
getc
_CIcosh
_CIsinh
??1type_info@@UAE@XZ
_except_handler3
?terminate@@YAXXZ
__dllonexit
_onexit
_initterm
_adjust_fdiv
_isnan
_copysign
_iob
putc
_finite
ungetc
feof
ftell
fsetpos
fseek
fgetpos
setvbuf
fflush
realloc
memchr
_get_osfhandle
__pioinfo
abort
_vsnprintf
free
malloc
??0exception@@QAE@XZ
strncpy
??1exception@@UAE@XZ
memmove
_CxxThrowException
__CxxFrameHandler
??4exception@@QAEAAV0@ABV0@@Z
??0exception@@QAE@ABV0@@Z
??2@YAPAXI@Z
strchr
strcspn
strstr
_fstat
_hypot

kernel32

EnumSystemLocalesA
WriteFile
lstrcmpiA
CompareStringW
CompareStringA
LCMapStringW
LCMapStringA
GetLocaleInfoA
GetCPInfo
GetVersionExA
MultiByteToWideChar
GetStringTypeW
GetStringTypeA
WideCharToMultiByte
UnmapViewOfFile
CreateFileMappingA
MapViewOfFile
GetLastError
ReadFile
CreateFileA
SetEndOfFile
SetFilePointer
CloseHandle
GetSystemInfo
GetFileSize
GetFileType
OutputDebugStringA
DisableThreadLibraryCalls
InterlockedDecrement
InterlockedIncrement
InterlockedExchange
Sleep

Exports

Exports

??0?$_Isentry@DV?$char_traits@D@_STL@@@_STL@@AAE@ABV01@@Z
??0?$_Isentry@DV?$char_traits@D@_STL@@@_STL@@QAE@AAV?$basic_istream@DV?$char_traits@D@_STL@@@1@U_No_Skip_WS@1@@Z
??0?$_Isentry@DV?$char_traits@D@_STL@@@_STL@@QAE@AAV?$basic_istream@DV?$char_traits@D@_STL@@@1@_N@Z
??0?$_Isentry@GV?$char_traits@G@_STL@@@_STL@@AAE@ABV01@@Z
??0?$_Isentry@GV?$char_traits@G@_STL@@@_STL@@QAE@AAV?$basic_istream@GV?$char_traits@G@_STL@@@1@U_No_Skip_WS@1@@Z
??0?$_Isentry@GV?$char_traits@G@_STL@@@_STL@@QAE@AAV?$basic_istream@GV?$char_traits@G@_STL@@@1@_N@Z
??0?$_Osentry@DV?$char_traits@D@_STL@@@_STL@@AAE@ABV01@@Z
??0?$_Osentry@DV?$char_traits@D@_STL@@@_STL@@QAE@AAV?$basic_ostream@DV?$char_traits@D@_STL@@@1@@Z
??0?$_Osentry@GV?$char_traits@G@_STL@@@_STL@@AAE@ABV01@@Z
??0?$_Osentry@GV?$char_traits@G@_STL@@@_STL@@QAE@AAV?$basic_ostream@GV?$char_traits@G@_STL@@@1@@Z
??0?$_STLP_alloc_proxy@PADDV?$allocator@D@_STL@@@_STL@@QAE@ABV01@@Z
??0?$_STLP_alloc_proxy@PADDV?$allocator@D@_STL@@@_STL@@QAE@ABV?$allocator@D@1@PAD@Z
??0?$_STLP_alloc_proxy@PAGGV?$allocator@G@_STL@@@_STL@@QAE@ABV01@@Z
??0?$_STLP_alloc_proxy@PAGGV?$allocator@G@_STL@@@_STL@@QAE@ABV?$allocator@G@1@PAG@Z
??0?$_STLP_alloc_proxy@PAPAXPAXV?$allocator@PAX@_STL@@@_STL@@QAE@ABV01@@Z
??0?$_STLP_alloc_proxy@PAPAXPAXV?$allocator@PAX@_STL@@@_STL@@QAE@ABV?$allocator@PAX@1@PAPAX@Z
??0?$_String_base@DV?$allocator@D@_STL@@@_STL@@QAE@ABV01@@Z
??0?$_String_base@DV?$allocator@D@_STL@@@_STL@@QAE@ABV?$allocator@D@1@@Z
??0?$_String_base@DV?$allocator@D@_STL@@@_STL@@QAE@ABV?$allocator@D@1@I@Z
??0?$_String_base@GV?$allocator@G@_STL@@@_STL@@QAE@ABV01@@Z
??0?$_String_base@GV?$allocator@G@_STL@@@_STL@@QAE@ABV?$allocator@G@1@@Z
??0?$_String_base@GV?$allocator@G@_STL@@@_STL@@QAE@ABV?$allocator@G@1@I@Z
??0?$_Vector_base@PAXV?$allocator@PAX@_STL@@@_STL@@QAE@ABV01@@Z
??0?$_Vector_base@PAXV?$allocator@PAX@_STL@@@_STL@@QAE@ABV?$allocator@PAX@1@@Z
??0?$_Vector_base@PAXV?$allocator@PAX@_STL@@@_STL@@QAE@IABV?$allocator@PAX@1@@Z
??0?$__debug_alloc@V?$__malloc_alloc@$0A@@_STL@@@_STL@@QAE@XZ
??0?$__debug_alloc@V?$__node_alloc@$00$0A@@_STL@@@_STL@@QAE@XZ
??0?$__debug_alloc@V__new_alloc@_STL@@@_STL@@QAE@XZ
??0?$allocator@D@_STL@@QAE@ABV01@@Z
??0?$allocator@D@_STL@@QAE@XZ
??0?$allocator@G@_STL@@QAE@ABV01@@Z
??0?$allocator@G@_STL@@QAE@XZ
??0?$allocator@PAX@_STL@@QAE@ABV01@@Z
??0?$allocator@PAX@_STL@@QAE@XZ
??0?$basic_filebuf@DV?$char_traits@D@_STL@@@_STL@@QAE@XZ
??0?$basic_filebuf@GV?$char_traits@G@_STL@@@_STL@@QAE@XZ
??0?$basic_fstream@DV?$char_traits@D@_STL@@@_STL@@QAE@HH@Z
??0?$basic_fstream@DV?$char_traits@D@_STL@@@_STL@@QAE@PBDH@Z
??0?$basic_fstream@DV?$char_traits@D@_STL@@@_STL@@QAE@PBDHJ@Z
??0?$basic_fstream@DV?$char_traits@D@_STL@@@_STL@@QAE@XZ
??0?$basic_fstream@GV?$char_traits@G@_STL@@@_STL@@QAE@HH@Z
??0?$basic_fstream@GV?$char_traits@G@_STL@@@_STL@@QAE@PBDH@Z
??0?$basic_fstream@GV?$char_traits@G@_STL@@@_STL@@QAE@PBDHJ@Z
??0?$basic_fstream@GV?$char_traits@G@_STL@@@_STL@@QAE@XZ
??0?$basic_ifstream@DV?$char_traits@D@_STL@@@_STL@@QAE@HH@Z
??0?$basic_ifstream@DV?$char_traits@D@_STL@@@_STL@@QAE@PBDH@Z
??0?$basic_ifstream@DV?$char_traits@D@_STL@@@_STL@@QAE@PBDHJ@Z
??0?$basic_ifstream@DV?$char_traits@D@_STL@@@_STL@@QAE@XZ
??0?$basic_ifstream@GV?$char_traits@G@_STL@@@_STL@@QAE@HH@Z
??0?$basic_ifstream@GV?$char_traits@G@_STL@@@_STL@@QAE@PBDH@Z
??0?$basic_ifstream@GV?$char_traits@G@_STL@@@_STL@@QAE@PBDHJ@Z
??0?$basic_ifstream@GV?$char_traits@G@_STL@@@_STL@@QAE@XZ
??0?$basic_ios@DV?$char_traits@D@_STL@@@_STL@@IAE@XZ
??0?$basic_ios@DV?$char_traits@D@_STL@@@_STL@@QAE@PAV?$basic_streambuf@DV?$char_traits@D@_STL@@@1@@Z
??0?$basic_ios@GV?$char_traits@G@_STL@@@_STL@@IAE@XZ
??0?$basic_ios@GV?$char_traits@G@_STL@@@_STL@@QAE@PAV?$basic_streambuf@GV?$char_traits@G@_STL@@@1@@Z
??0?$basic_iostream@DV?$char_traits@D@_STL@@@_STL@@QAE@PAV?$basic_streambuf@DV?$char_traits@D@_STL@@@1@@Z
??0?$basic_iostream@GV?$char_traits@G@_STL@@@_STL@@QAE@PAV?$basic_streambuf@GV?$char_traits@G@_STL@@@1@@Z
??0?$basic_istream@DV?$char_traits@D@_STL@@@_STL@@QAE@PAV?$basic_streambuf@DV?$char_traits@D@_STL@@@1@@Z
??0?$basic_istream@GV?$char_traits@G@_STL@@@_STL@@QAE@PAV?$basic_streambuf@GV?$char_traits@G@_STL@@@1@@Z
??0?$basic_istringstream@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@ABV?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@1@H@Z
??0?$basic_istringstream@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@H@Z
??0?$basic_istringstream@GV?$char_traits@G@_STL@@V?$allocator@G@2@@_STL@@QAE@ABV?$basic_string@GV?$char_traits@G@_STL@@V?$allocator@G@2@@1@H@Z
??0?$basic_istringstream@GV?$char_traits@G@_STL@@V?$allocator@G@2@@_STL@@QAE@H@Z
??0?$basic_ofstream@DV?$char_traits@D@_STL@@@_STL@@QAE@HH@Z
??0?$basic_ofstream@DV?$char_traits@D@_STL@@@_STL@@QAE@PBDH@Z
??0?$basic_ofstream@DV?$char_traits@D@_STL@@@_STL@@QAE@PBDHJ@Z
??0?$basic_ofstream@DV?$char_traits@D@_STL@@@_STL@@QAE@XZ
??0?$basic_ofstream@GV?$char_traits@G@_STL@@@_STL@@QAE@HH@Z
??0?$basic_ofstream@GV?$char_traits@G@_STL@@@_STL@@QAE@PBDH@Z
??0?$basic_ofstream@GV?$char_traits@G@_STL@@@_STL@@QAE@PBDHJ@Z
??0?$basic_ofstream@GV?$char_traits@G@_STL@@@_STL@@QAE@XZ
??0?$basic_ostream@DV?$char_traits@D@_STL@@@_STL@@QAE@PAV?$basic_streambuf@DV?$char_traits@D@_STL@@@1@@Z
??0?$basic_ostream@GV?$char_traits@G@_STL@@@_STL@@QAE@PAV?$basic_streambuf@GV?$char_traits@G@_STL@@@1@@Z
??0?$basic_ostringstream@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@ABV?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@1@H@Z
??0?$basic_ostringstream@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@H@Z
??0?$basic_ostringstream@GV?$char_traits@G@_STL@@V?$allocator@G@2@@_STL@@QAE@ABV?$basic_string@GV?$char_traits@G@_STL@@V?$allocator@G@2@@1@H@Z
??0?$basic_ostringstream@GV?$char_traits@G@_STL@@V?$allocator@G@2@@_STL@@QAE@H@Z
??0?$basic_streambuf@DV?$char_traits@D@_STL@@@_STL@@IAE@PAU_iobuf@@0@Z
??0?$basic_streambuf@DV?$char_traits@D@_STL@@@_STL@@IAE@XZ
??0?$basic_streambuf@GV?$char_traits@G@_STL@@@_STL@@IAE@XZ
??0?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@ABV01@@Z
??0?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@ABV01@IIABV?$allocator@D@1@@Z
??0?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@ABV?$allocator@D@1@@Z
??0?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@IDABV?$allocator@D@1@@Z
??0?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@PAD0@Z
??0?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@PBD0@Z
??0?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@PBDABV?$allocator@D@1@@Z
??0?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@PBDIABV?$allocator@D@1@@Z
??0?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@U_String_reserve_t@1@IABV?$allocator@D@1@@Z
??0?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@XZ
??0?$basic_string@GV?$char_traits@G@_STL@@V?$allocator@G@2@@_STL@@QAE@ABV01@@Z
??0?$basic_string@GV?$char_traits@G@_STL@@V?$allocator@G@2@@_STL@@QAE@ABV01@IIABV?$allocator@G@1@@Z
??0?$basic_string@GV?$char_traits@G@_STL@@V?$allocator@G@2@@_STL@@QAE@ABV?$allocator@G@1@@Z
??0?$basic_string@GV?$char_traits@G@_STL@@V?$allocator@G@2@@_STL@@QAE@IGABV?$allocator@G@1@@Z
??0?$basic_string@GV?$char_traits@G@_STL@@V?$allocator@G@2@@_STL@@QAE@PAG0@Z
??0?$basic_string@GV?$char_traits@G@_STL@@V?$allocator@G@2@@_STL@@QAE@PBG0@Z
??0?$basic_string@GV?$char_traits@G@_STL@@V?$allocator@G@2@@_STL@@QAE@PBGABV?$allocator@G@1@@Z
??0?$basic_string@GV?$char_traits@G@_STL@@V?$allocator@G@2@@_STL@@QAE@PBGIABV?$allocator@G@1@@Z
??0?$basic_string@GV?$char_traits@G@_STL@@V?$allocator@G@2@@_STL@@QAE@U_String_reserve_t@1@IABV?$allocator@G@1@@Z
??0?$basic_string@GV?$char_traits@G@_STL@@V?$allocator@G@2@@_STL@@QAE@XZ
??0?$basic_stringbuf@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@ABV?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@1@H@Z
??0?$basic_stringbuf@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@H@Z
??0?$basic_stringbuf@GV?$char_traits@G@_STL@@V?$allocator@G@2@@_STL@@QAE@ABV?$basic_string@GV?$char_traits@G@_STL@@V?$allocator@G@2@@1@H@Z
??0?$basic_stringbuf@GV?$char_traits@G@_STL@@V?$allocator@G@2@@_STL@@QAE@H@Z
??0?$basic_stringstream@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@ABV?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@1@H@Z
??0?$basic_stringstream@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@H@Z
??0?$basic_stringstream@GV?$char_traits@G@_STL@@V?$allocator@G@2@@_STL@@QAE@ABV?$basic_string@GV?$char_traits@G@_STL@@V?$allocator@G@2@@1@H@Z
??0?$basic_stringstream@GV?$char_traits@G@_STL@@V?$allocator@G@2@@_STL@@QAE@H@Z
??0?$codecvt@DDH@_STL@@QAE@I@Z
??0?$codecvt@GDH@_STL@@QAE@I@Z
??0?$codecvt_byname@DDH@_STL@@QAE@PBDI@Z
??0?$collate@D@_STL@@QAE@I@Z
??0?$collate@G@_STL@@QAE@I@Z
??0?$collate_byname@D@_STL@@QAE@PBDI@Z
??0?$collate_byname@G@_STL@@QAE@PBDI@Z
??0?$complex@M@_STL@@QAE@ABU01@@Z
??0?$complex@M@_STL@@QAE@ABU?$complex@N@1@@Z
??0?$complex@M@_STL@@QAE@ABU?$complex@O@1@@Z
??0?$complex@M@_STL@@QAE@MM@Z
??0?$complex@N@_STL@@QAE@ABU01@@Z
??0?$complex@N@_STL@@QAE@ABU?$complex@M@1@@Z
??0?$complex@N@_STL@@QAE@ABU?$complex@O@1@@Z
??0?$complex@N@_STL@@QAE@NN@Z
??0?$complex@O@_STL@@QAE@ABU01@@Z
??0?$complex@O@_STL@@QAE@ABU?$complex@M@1@@Z
??0?$complex@O@_STL@@QAE@ABU?$complex@N@1@@Z
??0?$complex@O@_STL@@QAE@OO@Z
??0?$ctype@D@_STL@@QAE@PBW4mask@ctype_base@1@_NI@Z
??0?$ctype@G@_STL@@QAE@I@Z
??0?$ctype_byname@D@_STL@@QAE@PBDI@Z
??0?$ctype_byname@G@_STL@@QAE@PBDI@Z
??0?$istreambuf_iterator@DV?$char_traits@D@_STL@@@_STL@@QAE@AAV?$basic_istream@DV?$char_traits@D@_STL@@@1@@Z
??0?$istreambuf_iterator@DV?$char_traits@D@_STL@@@_STL@@QAE@PAV?$basic_streambuf@DV?$char_traits@D@_STL@@@1@@Z
??0?$messages@D@_STL@@IAE@IPAU_Locale_messages@@@Z
??0?$messages@D@_STL@@QAE@I@Z
??0?$messages@D@_STL@@QAE@PAV_Messages@1@@Z
??0?$messages@G@_STL@@IAE@IPAU_Locale_messages@@@Z
??0?$messages@G@_STL@@QAE@I@Z
??0?$messages@G@_STL@@QAE@PAV_Messages@1@@Z
??0?$messages_byname@D@_STL@@QAE@PBDI@Z
??0?$messages_byname@G@_STL@@QAE@PBDI@Z
??0?$money_get@DV?$istreambuf_iterator@DV?$char_traits@D@_STL@@@_STL@@@_STL@@QAE@I@Z
??0?$money_get@GV?$istreambuf_iterator@GV?$char_traits@G@_STL@@@_STL@@@_STL@@QAE@I@Z
??0?$money_put@DV?$ostreambuf_iterator@DV?$char_traits@D@_STL@@@_STL@@@_STL@@QAE@I@Z
??0?$money_put@GV?$ostreambuf_iterator@GV?$char_traits@G@_STL@@@_STL@@@_STL@@QAE@I@Z
??0?$moneypunct@D$00@_STL@@QAE@I@Z
??0?$moneypunct@D$0A@@_STL@@QAE@I@Z
??0?$moneypunct@G$00@_STL@@QAE@I@Z
??0?$moneypunct@G$0A@@_STL@@QAE@I@Z
??0?$moneypunct_byname@D$00@_STL@@QAE@PBDI@Z
??0?$moneypunct_byname@D$0A@@_STL@@QAE@PBDI@Z
??0?$moneypunct_byname@G$00@_STL@@QAE@PBDI@Z
??0?$moneypunct_byname@G$0A@@_STL@@QAE@PBDI@Z
??0?$num_get@DV?$istreambuf_iterator@DV?$char_traits@D@_STL@@@_STL@@@_STL@@QAE@I@Z
??0?$num_get@GV?$istreambuf_iterator@GV?$char_traits@G@_STL@@@_STL@@@_STL@@QAE@I@Z
??0?$num_put@DV?$ostreambuf_iterator@DV?$char_traits@D@_STL@@@_STL@@@_STL@@QAE@I@Z
??0?$num_put@GV?$ostreambuf_iterator@GV?$char_traits@G@_STL@@@_STL@@@_STL@@QAE@I@Z
??0?$numpunct@D@_STL@@QAE@I@Z
??0?$numpunct@G@_STL@@QAE@I@Z
??0?$numpunct_byname@D@_STL@@QAE@PBDI@Z
??0?$numpunct_byname@G@_STL@@QAE@PBDI@Z
??0?$ostreambuf_iterator@DV?$char_traits@D@_STL@@@_STL@@QAE@AAV?$basic_ostream@DV?$char_traits@D@_STL@@@1@@Z
??0?$ostreambuf_iterator@DV?$char_traits@D@_STL@@@_STL@@QAE@PAV?$basic_streambuf@DV?$char_traits@D@_STL@@@1@@Z
??0?$time_get@DV?$istreambuf_iterator@DV?$char_traits@D@_STL@@@_STL@@@_STL@@IAE@PAU_Locale_time@@I@Z
??0?$time_get@DV?$istreambuf_iterator@DV?$char_traits@D@_STL@@@_STL@@@_STL@@QAE@I@Z
??0?$time_get@GV?$istreambuf_iterator@GV?$char_traits@G@_STL@@@_STL@@@_STL@@IAE@PAU_Locale_time@@I@Z
??0?$time_get@GV?$istreambuf_iterator@GV?$char_traits@G@_STL@@@_STL@@@_STL@@QAE@I@Z
??0?$time_put@DV?$ostreambuf_iterator@DV?$char_traits@D@_STL@@@_STL@@@_STL@@IAE@PAU_Locale_time@@I@Z
??0?$time_put@DV?$ostreambuf_iterator@DV?$char_traits@D@_STL@@@_STL@@@_STL@@QAE@I@Z
??0?$time_put@GV?$ostreambuf_iterator@GV?$char_traits@G@_STL@@@_STL@@@_STL@@IAE@PAU_Locale_time@@I@Z
??0?$time_put@GV?$ostreambuf_iterator@GV?$char_traits@G@_STL@@@_STL@@@_STL@@QAE@I@Z
??0?$vector@PAXV?$allocator@PAX@_STL@@@_STL@@QAE@ABV01@@Z
??0?$vector@PAXV?$allocator@PAX@_STL@@@_STL@@QAE@ABV?$allocator@PAX@1@@Z
??0?$vector@PAXV?$allocator@PAX@_STL@@@_STL@@QAE@I@Z
??0?$vector@PAXV?$allocator@PAX@_STL@@@_STL@@QAE@IABQAXABV?$allocator@PAX@1@@Z
??0?$vector@PAXV?$allocator@PAX@_STL@@@_STL@@QAE@PAPAX0@Z
??0Init@ios_base@_STL@@QAE@XZ
??0_Filebuf_base@_STL@@QAE@XZ
??0_Loc_init@ios_base@_STL@@QAE@XZ
??0_Locale@_STL@@QAE@ABV01@@Z
??0_Locale@_STL@@QAE@ABV_Locale_impl@1@@Z
??0_Locale@_STL@@QAE@IPBD@Z
??0_Locale_impl@_STL@@QAE@ABV01@@Z
??0_Locale_impl@_STL@@QAE@PBD@Z
??0_Refcount_Base@_STL@@QAE@J@Z
??0_STLP_auto_lock@_STL@@QAE@AAU_STLP_mutex_base@1@@Z
??0_STLP_mutex@_STL@@QAE@XZ
??0_Time_Info@_STL@@QAE@ABV01@@Z
??0_Time_Info@_STL@@QAE@XZ
??0__Named_exception@_STL@@QAE@ABV01@@Z
??0__Named_exception@_STL@@QAE@ABV?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@1@@Z
??0domain_error@_STL@@QAE@ABV01@@Z
??0domain_error@_STL@@QAE@ABV?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@1@@Z
??0facet@locale@_STL@@AAE@ABV012@@Z
??0facet@locale@_STL@@IAE@I@Z
??0failure@ios_base@_STL@@QAE@ABV012@@Z
??0failure@ios_base@_STL@@QAE@ABV?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@2@@Z
??0invalid_argument@_STL@@QAE@ABV01@@Z
??0invalid_argument@_STL@@QAE@ABV?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@1@@Z
??0ios_base@_STL@@IAE@XZ
??0istrstream@_STL@@QAE@PAD@Z
??0istrstream@_STL@@QAE@PADH@Z
??0istrstream@_STL@@QAE@PBD@Z
??0istrstream@_STL@@QAE@PBDH@Z
??0length_error@_STL@@QAE@ABV01@@Z
??0length_error@_STL@@QAE@ABV?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@1@@Z
??0locale@_STL@@QAE@ABV01@0H@Z
??0locale@_STL@@QAE@ABV01@@Z
??0locale@_STL@@QAE@ABV01@PBDH@Z
??0locale@_STL@@QAE@PAV_Locale_impl@1@@Z
??0locale@_STL@@QAE@PAV_Locale_impl@1@_N@Z
??0locale@_STL@@QAE@PBD@Z
??0locale@_STL@@QAE@XZ
??0logic_error@_STL@@QAE@ABV01@@Z
??0logic_error@_STL@@QAE@ABV?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@1@@Z
??0ostrstream@_STL@@QAE@PADHH@Z
??0ostrstream@_STL@@QAE@XZ
??0out_of_range@_STL@@QAE@ABV01@@Z
??0out_of_range@_STL@@QAE@ABV?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@1@@Z
??0overflow_error@_STL@@QAE@ABV01@@Z
??0overflow_error@_STL@@QAE@ABV?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@1@@Z
??0range_error@_STL@@QAE@ABV01@@Z
??0range_error@_STL@@QAE@ABV?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@1@@Z
??0runtime_error@_STL@@QAE@ABV01@@Z
??0runtime_error@_STL@@QAE@ABV?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@1@@Z
??0strstream@_STL@@QAE@PADHH@Z
??0strstream@_STL@@QAE@XZ
??0strstreambuf@_STL@@QAE@H@Z
??0strstreambuf@_STL@@QAE@P6APAXI@ZP6AXPAX@Z@Z
??0strstreambuf@_STL@@QAE@PACH0@Z
??0strstreambuf@_STL@@QAE@PADH0@Z
??0strstreambuf@_STL@@QAE@PAEH0@Z
??0strstreambuf@_STL@@QAE@PBCH@Z
??0strstreambuf@_STL@@QAE@PBDH@Z
??0strstreambuf@_STL@@QAE@PBEH@Z
??0underflow_error@_STL@@QAE@ABV01@@Z
??0underflow_error@_STL@@QAE@ABV?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@1@@Z
??1?$_Isentry@DV?$char_traits@D@_STL@@@_STL@@QAE@XZ
??1?$_Isentry@GV?$char_traits@G@_STL@@@_STL@@QAE@XZ
??1?$_Osentry@DV?$char_traits@D@_STL@@@_STL@@QAE@XZ
??1?$_Osentry@GV?$char_traits@G@_STL@@@_STL@@QAE@XZ
??1?$_STLP_alloc_proxy@PADDV?$allocator@D@_STL@@@_STL@@QAE@XZ
??1?$_STLP_alloc_proxy@PAGGV?$allocator@G@_STL@@@_STL@@QAE@XZ
??1?$_STLP_alloc_proxy@PAPAXPAXV?$allocator@PAX@_STL@@@_STL@@QAE@XZ
??1?$_String_base@DV?$allocator@D@_STL@@@_STL@@QAE@XZ
??1?$_String_base@GV?$allocator@G@_STL@@@_STL@@QAE@XZ
??1?$_Vector_base@PAXV?$allocator@PAX@_STL@@@_STL@@QAE@XZ
??1?$__debug_alloc@V?$__malloc_alloc@$0A@@_STL@@@_STL@@QAE@XZ
??1?$__debug_alloc@V?$__node_alloc@$00$0A@@_STL@@@_STL@@QAE@XZ
??1?$__debug_alloc@V__new_alloc@_STL@@@_STL@@QAE@XZ
??1?$allocator@D@_STL@@QAE@XZ
??1?$allocator@G@_STL@@QAE@XZ
??1?$allocator@PAX@_STL@@QAE@XZ
??1?$basic_filebuf@DV?$char_traits@D@_STL@@@_STL@@UAE@XZ
??1?$basic_filebuf@GV?$char_traits@G@_STL@@@_STL@@UAE@XZ
??1?$basic_fstream@DV?$char_traits@D@_STL@@@_STL@@UAE@XZ
??1?$basic_fstream@GV?$char_traits@G@_STL@@@_STL@@UAE@XZ
??1?$basic_ifstream@DV?$char_traits@D@_STL@@@_STL@@UAE@XZ
??1?$basic_ifstream@GV?$char_traits@G@_STL@@@_STL@@UAE@XZ
??1?$basic_ios@DV?$char_traits@D@_STL@@@_STL@@UAE@XZ
??1?$basic_ios@GV?$char_traits@G@_STL@@@_STL@@UAE@XZ
??1?$basic_iostream@DV?$char_traits@D@_STL@@@_STL@@UAE@XZ
??1?$basic_iostream@GV?$char_traits@G@_STL@@@_STL@@UAE@XZ
??1?$basic_istream@DV?$char_traits@D@_STL@@@_STL@@UAE@XZ
??1?$basic_istream@GV?$char_traits@G@_STL@@@_STL@@UAE@XZ
??1?$basic_istringstream@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@UAE@XZ
??1?$basic_istringstream@GV?$char_traits@G@_STL@@V?$allocator@G@2@@_STL@@UAE@XZ
??1?$basic_ofstream@DV?$char_traits@D@_STL@@@_STL@@UAE@XZ
??1?$basic_ofstream@GV?$char_traits@G@_STL@@@_STL@@UAE@XZ
??1?$basic_ostream@DV?$char_traits@D@_STL@@@_STL@@UAE@XZ
??1?$basic_ostream@GV?$char_traits@G@_STL@@@_STL@@UAE@XZ
??1?$basic_ostringstream@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@UAE@XZ
??1?$basic_ostringstream@GV?$char_traits@G@_STL@@V?$allocator@G@2@@_STL@@UAE@XZ
??1?$basic_streambuf@DV?$char_traits@D@_STL@@@_STL@@UAE@XZ
??1?$basic_streambuf@GV?$char_traits@G@_STL@@@_STL@@UAE@XZ
??1?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@XZ
??1?$basic_string@GV?$char_traits@G@_STL@@V?$allocator@G@2@@_STL@@QAE@XZ
??1?$basic_stringbuf@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@UAE@XZ
??1?$basic_stringbuf@GV?$char_traits@G@_STL@@V?$allocator@G@2@@_STL@@UAE@XZ
??1?$basic_stringstream@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@UAE@XZ
??1?$basic_stringstream@GV?$char_traits@G@_STL@@V?$allocator@G@2@@_STL@@UAE@XZ
??1?$codecvt@DDH@_STL@@MAE@XZ
??1?$codecvt@GDH@_STL@@MAE@XZ
??1?$codecvt_byname@DDH@_STL@@UAE@XZ
??1?$collate@D@_STL@@MAE@XZ
??1?$collate@G@_STL@@MAE@XZ
??1?$collate_byname@D@_STL@@MAE@XZ
??1?$collate_byname@G@_STL@@MAE@XZ
??1?$ctype@D@_STL@@MAE@XZ
??1?$ctype@G@_STL@@MAE@XZ
??1?$ctype_byname@D@_STL@@UAE@XZ
??1?$ctype_byname@G@_STL@@MAE@XZ
??1?$messages@D@_STL@@MAE@XZ
??1?$messages@G@_STL@@MAE@XZ
??1?$messages_byname@D@_STL@@MAE@XZ
??1?$messages_byname@G@_STL@@MAE@XZ
??1?$money_get@DV?$istreambuf_iterator@DV?$char_traits@D@_STL@@@_STL@@@_STL@@MAE@XZ
??1?$money_get@GV?$istreambuf_iterator@GV?$char_traits@G@_STL@@@_STL@@@_STL@@MAE@XZ
??1?$money_put@DV?$ostreambuf_iterator@DV?$char_traits@D@_STL@@@_STL@@@_STL@@MAE@XZ
??1?$money_put@GV?$ostreambuf_iterator@GV?$char_traits@G@_STL@@@_STL@@@_STL@@MAE@XZ
??1?$moneypunct@D$00@_STL@@MAE@XZ
??1?$moneypunct@D$0A@@_STL@@MAE@XZ
??1?$moneypunct@G$00@_STL@@MAE@XZ
??1?$moneypunct@G$0A@@_STL@@MAE@XZ
??1?$moneypunct_byname@D$00@_STL@@MAE@XZ
??1?$moneypunct_byname@D$0A@@_STL@@MAE@XZ
??1?$moneypunct_byname@G$00@_STL@@MAE@XZ
??1?$moneypunct_byname@G$0A@@_STL@@MAE@XZ
??1?$num_get@DV?$istreambuf_iterator@DV?$char_traits@D@_STL@@@_STL@@@_STL@@MAE@XZ
??1?$num_get@GV?$istreambuf_iterator@GV?$char_traits@G@_STL@@@_STL@@@_STL@@MAE@XZ
??1?$num_put@DV?$ostreambuf_iterator@DV?$char_traits@D@_STL@@@_STL@@@_STL@@MAE@XZ
??1?$num_put@GV?$ostreambuf_iterator@GV?$char_traits@G@_STL@@@_STL@@@_STL@@MAE@XZ
??1?$numpunct@D@_STL@@UAE@XZ
??1?$numpunct@G@_STL@@MAE@XZ
??1?$numpunct_byname@D@_STL@@MAE@XZ
??1?$numpunct_byname@G@_STL@@MAE@XZ
??1?$time_get@DV?$istreambuf_iterator@DV?$char_traits@D@_STL@@@_STL@@@_STL@@MAE@XZ
??1?$time_get@GV?$istreambuf_iterator@GV?$char_traits@G@_STL@@@_STL@@@_STL@@MAE@XZ
??1?$time_put@DV?$ostreambuf_iterator@DV?$char_traits@D@_STL@@@_STL@@@_STL@@MAE@XZ
??1?$time_put@GV?$ostreambuf_iterator@GV?$char_traits@G@_STL@@@_STL@@@_STL@@MAE@XZ
??1?$vector@PAXV?$allocator@PAX@_STL@@@_STL@@QAE@XZ
??1Init@ios_base@_STL@@QAE@XZ
??1_Loc_init@ios_base@_STL@@QAE@XZ
??1_Locale@_STL@@UAE@XZ
??1_Locale_impl@_STL@@UAE@XZ
??1_STLP_auto_lock@_STL@@QAE@XZ
??1_STLP_mutex@_STL@@QAE@XZ
??1_Time_Info@_STL@@QAE@XZ
??1__Named_exception@_STL@@UAE@XZ
??1domain_error@_STL@@UAE@XZ
??1facet@locale@_STL@@MAE@XZ
??1failure@ios_base@_STL@@UAE@XZ
??1invalid_argument@_STL@@UAE@XZ
??1ios_base@_STL@@UAE@XZ
??1istrstream@_STL@@UAE@XZ
??1length_error@_STL@@UAE@XZ
??1locale@_STL@@QAE@XZ
??1logic_error@_STL@@UAE@XZ
??1ostrstream@_STL@@UAE@XZ
??1out_of_range@_STL@@UAE@XZ
??1overflow_error@_STL@@UAE@XZ
??1range_error@_STL@@UAE@XZ
??1runtime_error@_STL@@UAE@XZ
??1strstream@_STL@@UAE@XZ
??1strstreambuf@_STL@@UAE@XZ
??1underflow_error@_STL@@UAE@XZ
??4?$_Isentry@DV?$char_traits@D@_STL@@@_STL@@AAEXABV01@@Z
??4?$_Isentry@GV?$char_traits@G@_STL@@@_STL@@AAEXABV01@@Z
??4?$_LimG@_N@_STL@@QAEAAV01@ABV01@@Z
??4?$_List_global@_N@_STL@@QAEAAV01@ABV01@@Z
??4?$_Noconv_output@V?$char_traits@D@_STL@@@_STL@@QAEAAV01@ABV01@@Z
??4?$_Osentry@DV?$char_traits@D@_STL@@@_STL@@AAEXABV01@@Z
??4?$_Osentry@GV?$char_traits@G@_STL@@@_STL@@AAEXABV01@@Z
??4?$_Rb_global@_N@_STL@@QAEAAV01@ABV01@@Z
??4?$_STLP_alloc_proxy@PADDV?$allocator@D@_STL@@@_STL@@QAEAAV01@ABV01@@Z
??4?$_STLP_alloc_proxy@PAGGV?$allocator@G@_STL@@@_STL@@QAEAAV01@ABV01@@Z
??4?$_STLP_alloc_proxy@PAPAXPAXV?$allocator@PAX@_STL@@@_STL@@QAEAAV01@ABV01@@Z
??4?$_Sl_global@_N@_STL@@QAEAAV01@ABV01@@Z
??4?$_Stl_prime@_N@_STL@@QAEAAV01@ABV01@@Z
??4?$_String_base@DV?$allocator@D@_STL@@@_STL@@QAEAAV01@ABV01@@Z
??4?$_String_base@GV?$allocator@G@_STL@@@_STL@@QAEAAV01@ABV01@@Z
??4?$_Underflow@DV?$char_traits@D@_STL@@@_STL@@QAEAAV01@ABV01@@Z
??4?$_Underflow@GV?$char_traits@G@_STL@@@_STL@@QAEAAV01@ABV01@@Z
??4?$_Vector_base@PAXV?$allocator@PAX@_STL@@@_STL@@QAEAAV01@ABV01@@Z
??4?$__debug_alloc@V?$__malloc_alloc@$0A@@_STL@@@_STL@@QAEAAV01@ABV01@@Z
??4?$__debug_alloc@V?$__node_alloc@$00$0A@@_STL@@@_STL@@QAEAAV01@ABV01@@Z
??4?$__debug_alloc@V__new_alloc@_STL@@@_STL@@QAEAAV01@ABV01@@Z
??4?$__malloc_alloc@$0A@@_STL@@QAEAAV01@ABV01@@Z
??4?$__node_alloc@$00$0A@@_STL@@QAEAAV01@ABV01@@Z
??4?$__stl_debug_engine@_N@_STL@@QAEAAU01@ABU01@@Z
??4?$allocator@D@_STL@@QAEAAV01@ABV01@@Z
??4?$allocator@G@_STL@@QAEAAV01@ABV01@@Z
??4?$allocator@PAX@_STL@@QAEAAV01@ABV01@@Z
??4?$allocator@X@_STL@@QAEAAV01@ABV01@@Z
??4?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEAAV01@ABV01@@Z
??4?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEAAV01@D@Z
??4?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEAAV01@PBD@Z
??4?$basic_string@GV?$char_traits@G@_STL@@V?$allocator@G@2@@_STL@@QAEAAV01@ABV01@@Z
??4?$basic_string@GV?$char_traits@G@_STL@@V?$allocator@G@2@@_STL@@QAEAAV01@G@Z
??4?$basic_string@GV?$char_traits@G@_STL@@V?$allocator@G@2@@_STL@@QAEAAV01@PBG@Z
??4?$char_traits@D@_STL@@QAEAAV01@ABV01@@Z
??4?$char_traits@G@_STL@@QAEAAV01@ABV01@@Z
??4?$complex@M@_STL@@QAEAAU01@ABU01@@Z
??4?$complex@M@_STL@@QAEAAU01@M@Z
??4?$complex@N@_STL@@QAEAAU01@ABU01@@Z
??4?$complex@N@_STL@@QAEAAU01@N@Z
??4?$complex@O@_STL@@QAEAAU01@ABU01@@Z
??4?$complex@O@_STL@@QAEAAU01@O@Z
??4?$hash@V?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@@_STL@@QAEAAU01@ABU01@@Z
??4?$hash@V?$basic_string@GV?$char_traits@G@_STL@@V?$allocator@G@2@@_STL@@@_STL@@QAEAAU01@ABU01@@Z
??4?$istreambuf_iterator@DV?$char_traits@D@_STL@@@_STL@@QAEAAV01@ABV01@@Z
??4?$ostreambuf_iterator@DV?$char_traits@D@_STL@@@_STL@@QAEAAV01@ABV01@@Z
??4?$ostreambuf_iterator@DV?$char_traits@D@_STL@@@_STL@@QAEAAV01@D@Z
??4?$vector@PAXV?$allocator@PAX@_STL@@@_STL@@QAEAAV01@ABV01@@Z
??4Init@ios_base@_STL@@QAEAAV012@ABV012@@Z
??4_Filebuf_base@_STL@@QAEAAV01@ABV01@@Z
??4_Loc_init@ios_base@_STL@@QAEAAV012@ABV012@@Z
??4_Node_alloc_obj@_STL@@QAEAAV01@ABV01@@Z
??4_Refcount_Base@_STL@@QAEAAU01@ABU01@@Z
??4_STLP_mutex_base@_STL@@QAEAAU01@ABU01@@Z
??4_Time_Info@_STL@@QAEAAV01@ABV01@@Z
??4__Named_exception@_STL@@QAEAAV01@ABV01@@Z
??4__new_alloc@_STL@@QAEAAV01@ABV01@@Z
??4codecvt_base@_STL@@QAEAAV01@ABV01@@Z
??4ctype_base@_STL@@QAEAAV01@ABV01@@Z
??4domain_error@_STL@@QAEAAV01@ABV01@@Z
??4failure@ios_base@_STL@@QAEAAV012@ABV012@@Z
??4id@locale@_STL@@QAEAAV012@ABV012@@Z
??4invalid_argument@_STL@@QAEAAV01@ABV01@@Z
??4length_error@_STL@@QAEAAV01@ABV01@@Z
??4locale@_STL@@QAEABV01@ABV01@@Z
??4logic_error@_STL@@QAEAAV01@ABV01@@Z
??4out_of_range@_STL@@QAEAAV01@ABV01@@Z
??4overflow_error@_STL@@QAEAAV01@ABV01@@Z
??4range_error@_STL@@QAEAAV01@ABV01@@Z
??4runtime_error@_STL@@QAEAAV01@ABV01@@Z
??4time_base@_STL@@QAEAAV01@ABV01@@Z
??4underflow_error@_STL@@QAEAAV01@ABV01@@Z
??5?$basic_istream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV01@AAF@Z
??5?$basic_istream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV01@AAG@Z
??5?$basic_istream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV01@AAH@Z
??5?$basic_istream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV01@AAI@Z
??5?$basic_istream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV01@AAJ@Z
??5?$basic_istream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV01@AAK@Z
??5?$basic_istream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV01@AAM@Z
??5?$basic_istream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV01@AAN@Z
??5?$basic_istream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV01@AAO@Z
??5?$basic_istream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV01@AAPAX@Z
??5?$basic_istream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV01@AA_J@Z
??5?$basic_istream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV01@AA_K@Z
??5?$basic_istream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV01@AA_N@Z
??5?$basic_istream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??5?$basic_istream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV01@P6AAAV?$basic_ios@DV?$char_traits@D@_STL@@@1@AAV21@@Z@Z
??5?$basic_istream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??5?$basic_istream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV01@PAV?$basic_streambuf@DV?$char_traits@D@_STL@@@1@@Z
??5?$basic_istream@GV?$char_traits@G@_STL@@@_STL@@QAEAAV01@AAF@Z
??5?$basic_istream@GV?$char_traits@G@_STL@@@_STL@@QAEAAV01@AAG@Z
??5?$basic_istream@GV?$char_traits@G@_STL@@@_STL@@QAEAAV01@AAH@Z
??5?$basic_istream@GV?$char_traits@G@_STL@@@_STL@@QAEAAV01@AAI@Z
??5?$basic_istream@GV?$char_traits@G@_STL@@@_STL@@QAEAAV01@AAJ@Z
??5?$basic_istream@GV?$char_traits@G@_STL@@@_STL@@QAEAAV01@AAK@Z
??5?$basic_istream@GV?$char_traits@G@_STL@@@_STL@@QAEAAV01@AAM@Z
??5?$basic_istream@GV?$char_traits@G@_STL@@@_STL@@QAEAAV01@AAN@Z
??5?$basic_istream@GV?$char_traits@G@_STL@@@_STL@@QAEAAV01@AAO@Z
??5?$basic_istream@GV?$char_traits@G@_STL@@@_STL@@QAEAAV01@AAPAX@Z
??5?$basic_istream@GV?$char_traits@G@_STL@@@_STL@@QAEAAV01@AA_J@Z
??5?$basic_istream@GV?$char_traits@G@_STL@@@_STL@@QAEAAV01@AA_K@Z
??5?$basic_istream@GV?$char_traits@G@_STL@@@_STL@@QAEAAV01@AA_N@Z
??5?$basic_istream@GV?$char_traits@G@_STL@@@_STL@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??5?$basic_istream@GV?$char_traits@G@_STL@@@_STL@@QAEAAV01@P6AAAV?$basic_ios@GV?$char_traits@G@_STL@@@1@AAV21@@Z@Z
??5?$basic_istream@GV?$char_traits@G@_STL@@@_STL@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??5?$basic_istream@GV?$char_traits@G@_STL@@@_STL@@QAEAAV01@PAV?$basic_streambuf@GV?$char_traits@G@_STL@@@1@@Z
??5_STL@@YAAAV?$basic_istream@DV?$char_traits@D@_STL@@@0@AAV10@AAU?$complex@M@0@@Z
??5_STL@@YAAAV?$basic_istream@DV?$char_traits@D@_STL@@@0@AAV10@AAU?$complex@N@0@@Z
??5_STL@@YAAAV?$basic_istream@DV?$char_traits@D@_STL@@@0@AAV10@AAU?$complex@O@0@@Z
??6?$basic_ostream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV01@F@Z
??6?$basic_ostream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV01@G@Z
??6?$basic_ostream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV01@H@Z
??6?$basic_ostream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV01@I@Z
??6?$basic_ostream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV01@J@Z
??6?$basic_ostream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV01@K@Z
??6?$basic_ostream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV01@M@Z
??6?$basic_ostream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV01@N@Z
??6?$basic_ostream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV01@O@Z
??6?$basic_ostream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV01@P6AAAV?$basic_ios@DV?$char_traits@D@_STL@@@1@AAV21@@Z@Z
??6?$basic_ostream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV01@PAV?$basic_streambuf@DV?$char_traits@D@_STL@@@1@@Z
??6?$basic_ostream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV01@PBX@Z
??6?$basic_ostream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV01@_J@Z
??6?$basic_ostream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV01@_K@Z
??6?$basic_ostream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV01@_N@Z
??6?$basic_ostream@GV?$char_traits@G@_STL@@@_STL@@QAEAAV01@F@Z
??6?$basic_ostream@GV?$char_traits@G@_STL@@@_STL@@QAEAAV01@G@Z
??6?$basic_ostream@GV?$char_traits@G@_STL@@@_STL@@QAEAAV01@H@Z
??6?$basic_ostream@GV?$char_traits@G@_STL@@@_STL@@QAEAAV01@I@Z
??6?$basic_ostream@GV?$char_traits@G@_STL@@@_STL@@QAEAAV01@J@Z
??6?$basic_ostream@GV?$char_traits@G@_STL@@@_STL@@QAEAAV01@K@Z
??6?$basic_ostream@GV?$char_traits@G@_STL@@@_STL@@QAEAAV01@M@Z
??6?$basic_ostream@GV?$char_traits@G@_STL@@@_STL@@QAEAAV01@N@Z
??6?$basic_ostream@GV?$char_traits@G@_STL@@@_STL@@QAEAAV01@O@Z
??6?$basic_ostream@GV?$char_traits@G@_STL@@@_STL@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@GV?$char_traits@G@_STL@@@_STL@@QAEAAV01@P6AAAV?$basic_ios@GV?$char_traits@G@_STL@@@1@AAV21@@Z@Z
??6?$basic_ostream@GV?$char_traits@G@_STL@@@_STL@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@GV?$char_traits@G@_STL@@@_STL@@QAEAAV01@PAV?$basic_streambuf@GV?$char_traits@G@_STL@@@1@@Z
??6?$basic_ostream@GV?$char_traits@G@_STL@@@_STL@@QAEAAV01@PBX@Z
??6?$basic_ostream@GV?$char_traits@G@_STL@@@_STL@@QAEAAV01@_J@Z
??6?$basic_ostream@GV?$char_traits@G@_STL@@@_STL@@QAEAAV01@_K@Z
??6?$basic_ostream@GV?$char_traits@G@_STL@@@_STL@@QAEAAV01@_N@Z
??6_STL@@YAAAV?$basic_ostream@DV?$char_traits@D@_STL@@@0@AAV10@ABU?$complex@M@0@@Z
??6_STL@@YAAAV?$basic_ostream@DV?$char_traits@D@_STL@@@0@AAV10@ABU?$complex@N@0@@Z
??6_STL@@YAAAV?$basic_ostream@DV?$char_traits@D@_STL@@@0@AAV10@ABU?$complex@O@0@@Z
??7ios_base@_STL@@QBE_NXZ
??8locale@_STL@@QBE_NABV01@@Z
??9locale@_STL@@QBE_NABV01@@Z
??A?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEAADI@Z
??A?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBEABDI@Z
??A?$basic_string@GV?$char_traits@G@_STL@@V?$allocator@G@2@@_STL@@QAEAAGI@Z
??A?$basic_string@GV?$char_traits@G@_STL@@V?$allocator@G@2@@_STL@@QBEABGI@Z

Sections

.text
Size: 540KB - Virtual size: 537KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 220KB - Virtual size: 219KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

STLPORT_
Size: 4KB - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Program/streammedialib.dll
.dll regsvr32 windows:4 windows x86 arch:x86

bdd5c00e168e1c1eba29de152cf2e461

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
LoadLibraryA
lstrcpyA
lstrcatA
FreeLibrary
lstrlenW
GetModuleFileNameA
GetShortPathNameA
GetModuleHandleA
HeapDestroy
EnterCriticalSection
LeaveCriticalSection
DisableThreadLibraryCalls
DeleteCriticalSection
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
lstrlenA
MultiByteToWideChar
SetEvent
CloseHandle
WideCharToMultiByte
CreateEventA
OutputDebugStringA
QueryPerformanceCounter
QueryPerformanceFrequency
SetLastError
GetWindowsDirectoryA
GetLogicalDriveStringsA
GetDriveTypeA
GetDiskFreeSpaceExA
GetTempPathA
SetFileAttributesA
WaitForSingleObject
ResetEvent
VirtualAlloc
VirtualFree
GetSystemInfo
GetSystemDirectoryA
GetPrivateProfileStringA
GetVolumeInformationA
GetFileAttributesA
MoveFileA
FlushFileBuffers
GetFileSize
SetEndOfFile
SetFilePointer
ReadFile
WriteFile
CreateFileA
GetTickCount
CreateDirectoryA
GetDiskFreeSpaceA
DeleteFileA
RemoveDirectoryA
FindFirstFileA
FindNextFileA
FindClose
GetSystemDefaultLangID
GetLastError
GlobalMemoryStatus
GetVersionExA
WritePrivateProfileStringA
GetPrivateProfileSectionNamesA
GetPrivateProfileSectionA

user32

GetSystemMetrics
CharNextA

ole32

CoInitialize
CLSIDFromString
CoCreateInstance
CoUninitialize

oleaut32

RegisterTypeLi
LoadTypeLi
SysFreeString
SysAllocString

stlport_vc646

??0logic_error@_STL@@QAE@ABV01@@Z
??0__Named_exception@_STL@@QAE@ABV01@@Z
??0?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@PBDABV?$allocator@D@1@@Z
?_M_deallocate@?$__node_alloc@$00$0A@@_STL@@CAXPAXI@Z
?_M_allocate@?$__node_alloc@$00$0A@@_STL@@CAPAXI@Z
?_M_deallocate_block@?$_String_base@DV?$allocator@D@_STL@@@_STL@@QAEXXZ
??1?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@XZ
?append@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEAAV12@PBD0ABUforward_iterator_tag@2@@Z
??1?$allocator@D@_STL@@QAE@XZ
??1?$_String_base@DV?$allocator@D@_STL@@@_STL@@QAE@XZ
?deallocate@?$_STLP_alloc_proxy@PADDV?$allocator@D@_STL@@@_STL@@QAEXPADI@Z
?_M_range_initialize@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEXPBD0ABUforward_iterator_tag@2@@Z
??0?$_String_base@DV?$allocator@D@_STL@@@_STL@@QAE@ABV?$allocator@D@1@@Z
??_7logic_error@_STL@@6B@
??1?$_STLP_alloc_proxy@PADDV?$allocator@D@_STL@@@_STL@@QAE@XZ
?_M_append_dispatch@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEAAV12@PBD0ABU__false_type@2@@Z
?_M_range_initialize@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEXPBD0@Z
??0?$_STLP_alloc_proxy@PADDV?$allocator@D@_STL@@@_STL@@QAE@ABV?$allocator@D@1@PAD@Z
?erase@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEAAV12@II@Z
?assign@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEAAV12@PBD0@Z
?deallocate@?$__node_alloc@$00$0A@@_STL@@SAXPAXI@Z
?_M_increment@?$_Rb_global@_N@_STL@@SAPAU_Rb_tree_node_base@2@PAU32@@Z
?_Rebalance_for_erase@?$_Rb_global@_N@_STL@@SAPAU_Rb_tree_node_base@2@PAU32@AAPAU32@11@Z
?_M_decrement@?$_Rb_global@_N@_STL@@SAPAU_Rb_tree_node_base@2@PAU32@@Z
?_Rebalance@?$_Rb_global@_N@_STL@@SAXPAU_Rb_tree_node_base@2@AAPAU32@@Z
??0_Loc_init@ios_base@_STL@@QAE@XZ
??1_Loc_init@ios_base@_STL@@QAE@XZ
??0Init@ios_base@_STL@@QAE@XZ
??1Init@ios_base@_STL@@QAE@XZ
?_M_compare@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@SAHPBD000@Z
?get_allocator@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBE?AV?$allocator@D@2@XZ
?assign@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEAAV12@ABV12@II@Z
?append@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEAAV12@ABV12@II@Z
?find@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBEIDI@Z
?_M_list@?$_Stl_prime@_N@_STL@@2QBIB
?find@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBEIPBDII@Z
?rfind@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBEIDI@Z
?_M_insert_aux@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEPADPADD@Z
?push_back@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEXD@Z
?resize@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEXID@Z
??0?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@ABV01@IIABV?$allocator@D@1@@Z
??_D?$basic_stringstream@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEXXZ
?str@?$basic_stringstream@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBE?AV?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@2@XZ
?_M_put_char@?$basic_ostream@DV?$char_traits@D@_STL@@@_STL@@QAEXD@Z
??0?$basic_stringstream@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@H@Z
?replace@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEAAV12@IIPBD@Z
?find_first_of@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBEIPBDII@Z
?substr@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBE?AV12@II@Z
??1?$_Osentry@DV?$char_traits@D@_STL@@@_STL@@QAE@XZ
?clear@?$basic_ios@DV?$char_traits@D@_STL@@@_STL@@QAEXH@Z
?_M_handle_exception@?$basic_ios@DV?$char_traits@D@_STL@@@_STL@@QAEXH@Z
??1locale@_STL@@QAE@XZ
?_M_use_facet@locale@_STL@@QBEPAVfacet@12@ABVid@12@@Z
?id@?$num_put@DV?$ostreambuf_iterator@DV?$char_traits@D@_STL@@@_STL@@@_STL@@2V0locale@2@A
?getloc@ios_base@_STL@@QBE?AVlocale@2@XZ
?flush@?$basic_ostream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV12@XZ
??0runtime_error@_STL@@QAE@ABV01@@Z
?what@__Named_exception@_STL@@UBEPBDXZ
?append@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEAAV12@ID@Z
??1runtime_error@_STL@@UAE@XZ
??_D?$basic_ofstream@DV?$char_traits@D@_STL@@@_STL@@QAEXXZ
?close@?$basic_ofstream@DV?$char_traits@D@_STL@@@_STL@@QAEXXZ
?put@?$basic_ostream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV12@D@Z
?_M_put_nowiden@?$basic_ostream@DV?$char_traits@D@_STL@@@_STL@@QAEXPBD@Z
??0?$basic_ofstream@DV?$char_traits@D@_STL@@@_STL@@QAE@PBDH@Z
?find_last_of@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBEIPBDII@Z
??4?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEAAV01@ABV01@@Z
??0?$allocator@D@_STL@@QAE@XZ
?append@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEAAV12@PBD@Z
??_D?$basic_ifstream@DV?$char_traits@D@_STL@@@_STL@@QAEXXZ
?open@?$basic_ifstream@DV?$char_traits@D@_STL@@@_STL@@QAEXPBDH@Z
??0?$basic_ifstream@DV?$char_traits@D@_STL@@@_STL@@QAE@XZ
?open@?$basic_ofstream@DV?$char_traits@D@_STL@@@_STL@@QAEXPBDH@Z
??0?$basic_ofstream@DV?$char_traits@D@_STL@@@_STL@@QAE@XZ
?_M_append_dispatch@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEAAV12@PAD0ABU__false_type@2@@Z
?read@?$basic_istream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV12@PADH@Z
?write@?$basic_ostream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV12@PBDH@Z
??_7runtime_error@_STL@@6B@
??_D?$basic_ostringstream@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEXXZ
??1?$basic_ios@DV?$char_traits@D@_STL@@@_STL@@UAE@XZ
??1?$basic_ostringstream@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@UAE@XZ
?str@?$basic_ostringstream@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBE?AV?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@2@XZ
?width@ios_base@_STL@@QAEHH@Z
?setf@ios_base@_STL@@QAEHHH@Z
??0?$basic_ostringstream@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@H@Z
?sputc@?$basic_streambuf@DV?$char_traits@D@_STL@@@_STL@@QAEHD@Z
?find_first_not_of@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBEIPBDII@Z
?_M_throw_out_of_range@?$_String_base@DV?$allocator@D@_STL@@@_STL@@QBEXXZ
?find_last_not_of@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBEIPBDII@Z
??1?$basic_stringstream@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@UAE@XZ
?copy@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBEIPADII@Z
??0?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@ABV01@@Z
??0?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@XZ
?_M_assign_dispatch@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEAAV12@PAD0ABU__false_type@2@@Z
?append@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEAAV12@PAD0ABUforward_iterator_tag@2@@Z
?_M_allocate_block@?$_String_base@DV?$allocator@D@_STL@@@_STL@@QAEXI@Z
??0__Named_exception@_STL@@QAE@ABV?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@1@@Z
??1logic_error@_STL@@UAE@XZ

msvcp60

??0bad_alloc@std@@QAE@ABV01@@Z
??_7bad_alloc@std@@6B@
??1bad_alloc@std@@UAE@XZ

msvcrt

_assert
memmove
memcmp
sprintf
memset
atoi
_i64toa
_ultoa
_ui64toa
atol
_atoi64
??1exception@@UAE@XZ
??0exception@@QAE@ABQBD@Z
_snprintf
_errno
strtol
strtoul
strcmp
_strlwr
pow
log10
atof
rand
_ftol
time
srand
__RTDynamicCast
??2@YAPAXI@Z
fclose
fread
fseek
fopen
??0exception@@QAE@XZ
_stricmp
isdigit
isalpha
isspace
strrchr
strchr
strncmp
sscanf
?what@exception@@UBEPBDXZ
free
??1type_info@@UAE@XZ
_except_handler3
?terminate@@YAXXZ
__dllonexit
_onexit
_initterm
malloc
_adjust_fdiv
strlen
??0exception@@QAE@ABV0@@Z
_purecall
memcpy
_CxxThrowException
strstr
__CxxFrameHandler
_itoa

advapi32

RegCloseKey
RegOpenKeyA
RegSetValueExA
RegCreateKeyExA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
CloseServiceHandle
UnlockServiceDatabase
LockServiceDatabase
OpenSCManagerA
GetUserNameA
RegOpenKeyExA
RegQueryValueExA

shell32

SHGetSpecialFolderPathA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

ws2_32

gethostname
inet_ntoa
WSASocketA
ntohs
WSAIoctl
gethostbyname
WSAGetLastError
ntohl
inet_addr

iphlpapi

GetAdaptersInfo

asyn_dns

ord6
ord5
ord11
ord10
ord9

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 240KB - Virtual size: 237KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 112KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Program/upnp.exe
.exe windows:4 windows x86 arch:x86

db3aaec65b2cf92bd344076287539133

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

stlport_vc646

??0?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@PBDABV?$allocator@D@1@@Z
?_M_deallocate_block@?$_String_base@DV?$allocator@D@_STL@@@_STL@@QAEXXZ
?deallocate@?$__node_alloc@$00$0A@@_STL@@SAXPAXI@Z
?_M_deallocate@?$__node_alloc@$00$0A@@_STL@@CAXPAXI@Z
??1?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@XZ
?deallocate@?$_STLP_alloc_proxy@PADDV?$allocator@D@_STL@@@_STL@@QAEXPADI@Z
??0?$allocator@D@_STL@@QAE@XZ
??0?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@XZ
??0?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@ABV01@@Z
?_M_append_dispatch@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEAAV12@PBD0ABU__false_type@2@@Z
?_M_range_initialize@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEXPAD0ABUforward_iterator_tag@2@@Z
?_M_throw_out_of_range@?$_String_base@DV?$allocator@D@_STL@@@_STL@@QBEXXZ
??0?$_STLP_alloc_proxy@PADDV?$allocator@D@_STL@@@_STL@@QAE@ABV?$allocator@D@1@PAD@Z
?find_first_not_of@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBEIPBDII@Z
??4?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEAAV01@PBD@Z
?assign@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEAAV12@ABV12@II@Z
?assign@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEAAV12@PBD0@Z
?rfind@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBEIDI@Z
?_M_range_initialize@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEXPAD0@Z
??0?$_String_base@DV?$allocator@D@_STL@@@_STL@@QAE@ABV?$allocator@D@1@@Z
?find@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBEIDI@Z
?find@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBEIPBDII@Z
??4?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEAAV01@ABV01@@Z
?append@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEAAV12@PBD0ABUforward_iterator_tag@2@@Z
?append@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEAAV12@ID@Z
??1?$_String_base@DV?$allocator@D@_STL@@@_STL@@QAE@XZ
?_M_allocate@?$__node_alloc@$00$0A@@_STL@@CAPAXI@Z
??0_Loc_init@ios_base@_STL@@QAE@XZ
??1_Loc_init@ios_base@_STL@@QAE@XZ
??0Init@ios_base@_STL@@QAE@XZ
??1Init@ios_base@_STL@@QAE@XZ
?_M_list@?$_Stl_prime@_N@_STL@@2QBIB
?_M_append_dispatch@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEAAV12@PAD0ABU__false_type@2@@Z
?erase@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEPADPAD0@Z
?_M_assign_dispatch@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEAAV12@PAD0ABU__false_type@2@@Z
?deallocate@?$allocator@D@_STL@@QAEXPADI@Z
??1?$_STLP_alloc_proxy@PADDV?$allocator@D@_STL@@@_STL@@QAE@XZ
??1?$allocator@D@_STL@@QAE@XZ

ws2_32

send
recv
htons
inet_addr
connect
WSAStartup
socket

msvcrt

free
_exit
_XcptFilter
exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
??1type_info@@UAE@XZ
__dllonexit
_onexit
_controlfp
atol
??2@YAPAXI@Z
memmove
isdigit
_snprintf
__CxxFrameHandler

kernel32

DeleteCriticalSection
InitializeCriticalSection

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Program/wmz.dll
.dll windows:4 windows x86 arch:x86

d60d39c5274596f9b0ab58814abb2c45

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\Project\vc\孙鑫VC.._code\lesson 19\Lesson19Code\DllTest\Debug\tpatch.pdb

Imports

kernel32

lstrcmpA
Sleep
GetCurrentThreadId
CreateThread
GetLocaleInfoA
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
RaiseException
GetProcAddress
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
MultiByteToWideChar
LCMapStringW
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
HeapSize
WriteFile
LoadLibraryA
InitializeCriticalSection
RtlUnwind
GetStringTypeA
GetStringTypeW

user32

GetClassNameA
GetParent
CallNextHookEx
GetWindowTextA
GetWindowLongA
SetWindowsHookExA
IsWindow
UnhookWindowsHookEx
GetDlgItemTextA
SetDlgItemTextA

Exports

Exports

Unhook
wmz

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Program/xldc.dll
.dll regsvr32 windows:4 windows x86 arch:x86

c93797393d782153dadff23cad7c9e12

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenW
MultiByteToWideChar
lstrlenA
GetShortPathNameA
GetModuleHandleA
GetModuleFileNameA
HeapDestroy
GetProcAddress
LoadLibraryA
lstrcpyA
lstrcatA
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
DisableThreadLibraryCalls
EnterCriticalSection
LeaveCriticalSection
MoveFileA
CreateDirectoryA
FindFirstFileA
FindNextFileA
FindClose
DeleteCriticalSection
InitializeCriticalSection
FreeLibrary
DeleteFileA
GetFileSize
ReadFile
WriteFile
CreateFileA
WritePrivateProfileStringA
GetPrivateProfileSectionNamesA
GetPrivateProfileSectionA
GetWindowsDirectoryA
GetDiskFreeSpaceA
GetLastError
GetTempPathA
CloseHandle
CreateEventA

user32

CharNextA

shell32

SHGetSpecialFolderPathA

ole32

CoCreateInstance

oleaut32

RegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString

shlwapi

PathIsDirectoryA
PathFileExistsA

stlport_vc646

??0?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@ABV01@@Z
?assign@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEAAV12@PBD0@Z
??0?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@PBDABV?$allocator@D@1@@Z
?_M_deallocate_block@?$_String_base@DV?$allocator@D@_STL@@@_STL@@QAEXXZ
??1?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@XZ
??1?$allocator@D@_STL@@QAE@XZ
??1?$_STLP_alloc_proxy@PADDV?$allocator@D@_STL@@@_STL@@QAE@XZ
?erase@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEAAV12@II@Z
?_M_range_initialize@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEXPBD0ABUforward_iterator_tag@2@@Z
??0__Named_exception@_STL@@QAE@ABV01@@Z
?deallocate@?$__node_alloc@$00$0A@@_STL@@SAXPAXI@Z
??1logic_error@_STL@@UAE@XZ
?_M_append_dispatch@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEAAV12@PBD0ABU__false_type@2@@Z
?_M_throw_out_of_range@?$_String_base@DV?$allocator@D@_STL@@@_STL@@QBEXXZ
??_7logic_error@_STL@@6B@
??0__Named_exception@_STL@@QAE@ABV?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@1@@Z
?_M_assign_dispatch@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEAAV12@PAD0ABU__false_type@2@@Z
?append@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEAAV12@PBD0ABUforward_iterator_tag@2@@Z
?append@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEAAV12@PBD@Z
?_M_append_dispatch@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEAAV12@PAD0ABU__false_type@2@@Z
?_Rebalance_for_erase@?$_Rb_global@_N@_STL@@SAPAU_Rb_tree_node_base@2@PAU32@AAPAU32@11@Z
?_M_range_initialize@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEXPBD0@Z
??0?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@XZ
?deallocate@?$_STLP_alloc_proxy@PADDV?$allocator@D@_STL@@@_STL@@QAEXPADI@Z
??1?$_String_base@DV?$allocator@D@_STL@@@_STL@@QAE@XZ
?append@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@AAEAAV12@PAD0ABUforward_iterator_tag@2@@Z
?_M_allocate_block@?$_String_base@DV?$allocator@D@_STL@@@_STL@@QAEXI@Z
??0?$_STLP_alloc_proxy@PADDV?$allocator@D@_STL@@@_STL@@QAE@ABV?$allocator@D@1@PAD@Z
?_Rebalance@?$_Rb_global@_N@_STL@@SAXPAU_Rb_tree_node_base@2@AAPAU32@@Z
?get_allocator@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBE?AV?$allocator@D@2@XZ
?_M_deallocate@?$__node_alloc@$00$0A@@_STL@@CAXPAXI@Z
?_M_allocate@?$__node_alloc@$00$0A@@_STL@@CAPAXI@Z
?_M_increment@?$_Rb_global@_N@_STL@@SAPAU_Rb_tree_node_base@2@PAU32@@Z
?_M_compare@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@SAHPBD000@Z
?_M_decrement@?$_Rb_global@_N@_STL@@SAPAU_Rb_tree_node_base@2@PAU32@@Z
??0logic_error@_STL@@QAE@ABV01@@Z
?resize@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEXID@Z
??_D?$basic_stringstream@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEXXZ
?str@?$basic_stringstream@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBE?AV?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@2@XZ
??0?$basic_stringstream@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@H@Z
??1?$_Osentry@DV?$char_traits@D@_STL@@@_STL@@QAE@XZ
?clear@?$basic_ios@DV?$char_traits@D@_STL@@@_STL@@QAEXH@Z
?_M_handle_exception@?$basic_ios@DV?$char_traits@D@_STL@@@_STL@@QAEXH@Z
??1locale@_STL@@QAE@XZ
?_M_use_facet@locale@_STL@@QBEPAVfacet@12@ABVid@12@@Z
?id@?$num_put@DV?$ostreambuf_iterator@DV?$char_traits@D@_STL@@@_STL@@@_STL@@2V0locale@2@A
?getloc@ios_base@_STL@@QBE?AVlocale@2@XZ
?flush@?$basic_ostream@DV?$char_traits@D@_STL@@@_STL@@QAEAAV12@XZ
??0_Loc_init@ios_base@_STL@@QAE@XZ
??1_Loc_init@ios_base@_STL@@QAE@XZ
??0Init@ios_base@_STL@@QAE@XZ
??1Init@ios_base@_STL@@QAE@XZ
?assign@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEAAV12@ABV12@II@Z
?append@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEAAV12@ABV12@II@Z
?find@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBEIDI@Z
?substr@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QBE?AV12@II@Z
?_M_put_nowiden@?$basic_ostream@DV?$char_traits@D@_STL@@@_STL@@QAEXPBD@Z
??0?$basic_stringstream@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@ABV?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@1@H@Z
??1?$_Isentry@DV?$char_traits@D@_STL@@@_STL@@QAE@XZ
?sputbackc@?$basic_streambuf@DV?$char_traits@D@_STL@@@_STL@@QAEHD@Z
?setstate@?$basic_ios@DV?$char_traits@D@_STL@@@_STL@@QAEXH@Z
?push_back@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEXD@Z
?sbumpc@?$basic_streambuf@DV?$char_traits@D@_STL@@@_STL@@QAEHXZ
?reserve@?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAEXI@Z
??0?$_Isentry@DV?$char_traits@D@_STL@@@_STL@@QAE@AAV?$basic_istream@DV?$char_traits@D@_STL@@@1@_N@Z

msvcrt

_adjust_fdiv
malloc
_initterm
??1type_info@@UAE@XZ
_onexit
__dllonexit
free
fopen
fgets
fclose
sprintf
strlen
__CxxFrameHandler
strcpy
time
memcpy
_CxxThrowException
??2@YAPAXI@Z
memset
memcmp
??0exception@@QAE@ABV0@@Z
_purecall
atoi
?what@exception@@UBEPBDXZ
strrchr
_ultoa
atol
abs
??0exception@@QAE@ABQBD@Z
??1exception@@UAE@XZ
_itoa

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Thunder.exe
.exe windows:4 windows x86 arch:x86

1d014f8a0f92433d6eda4373c1b07b08

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord6283
ord4129
ord6282
ord858
ord4277
ord941
ord2725
ord924
ord540
ord6663
ord939
ord2818
ord5572
ord6928
ord1151
ord1193
ord1168
ord1576
ord6930
ord535
ord537
ord4202
ord2764
ord800
ord815
ord825
ord561
ord3738
ord4424
ord4622
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5714
ord5289
ord5307
ord4698
ord4079
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord4274
ord4673
ord2915

msvcrt

__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
_initterm
_mbsrchr
__setusermatherr
_adjust_fdiv
__p___argc
__p___argv
_mbsnbicmp
strlen
memset
memcpy
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_setmbcp
__CxxFrameHandler

kernel32

UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
GetCommandLineA
SetEvent
OpenEventA
ReleaseMutex
CreateMutexA
SetPriorityClass
GetCurrentProcess
GetModuleFileNameA
Sleep
GetProcAddress
GetSystemTime
GetModuleHandleA
GetStartupInfoA
TerminateProcess
OpenProcess
CloseHandle
CreateToolhelp32Snapshot
Process32First
Process32Next
GetLastError

user32

IsIconic
ShowWindow
GetLastActivePopup
GetForegroundWindow
GetWindowThreadProcessId
BringWindowToTop
SetForegroundWindow
SystemParametersInfoA
SetFocus
GetDesktopWindow
PostMessageA
IsWindow
IsWindowVisible
AttachThreadInput
RegisterWindowMessageA
SendMessageA

shell32

ShellExecuteA

msvcp60

?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
uninst.exe
.exe windows:4 windows x86 arch:x86

42134c4fb1b2d3cf6b447e018a5de700

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetFileSize
GetModuleFileNameA
GetTickCount
GetCurrentProcess
CopyFileA
SetFileTime
GetCommandLineA
GetWindowsDirectoryA
GetTempPathA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
CloseHandle
lstrcmpiA
lstrcmpA
GetEnvironmentVariableA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
SetErrorMode
GetModuleHandleA
LoadLibraryA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
SetFilePointer
FindClose
MulDiv
FindNextFileA
FindFirstFileA
DeleteFileA
ExitProcess

user32

ExitWindowsEx
CharNextA
DialogBoxParamA
GetClassInfoA
SystemParametersInfoA
RegisterClassA
EndDialog
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
CheckDlgButton
GetAsyncKeyState
IsDlgButtonChecked
GetMessagePos
LoadBitmapA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
CreateDialogParamA
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxA
CharPrevA
wvsprintfA
DispatchMessageA
PeekMessageA
SendMessageTimeoutA
FindWindowExA
IsWindow
GetDlgItem
LoadImageA
GetDC
EnableWindow
InvalidateRect
CreateWindowExA
GetWindowLongA
DrawFocusRect
DestroyWindow
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
ShowWindow
TrackPopupMenu
wsprintfA
SendMessageA
CallWindowProcA
MapWindowPoints
GetWindowRect
ScreenToClient
PtInRect
LoadCursorA
SetCursor
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
SetWindowLongA

gdi32

SetBkColor
GetDeviceCaps
GetCurrentObject
GetObjectA
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegEnumKeyA
RegEnumValueA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegQueryValueExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 290KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 304KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/InstallOptions.dll
.dll windows:4 windows x86 arch:x86

57354bdeea3dfae6e948101add87501a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetCurrentDirectoryA
GetCurrentDirectoryA
GetPrivateProfileIntA
GetModuleHandleA
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
MultiByteToWideChar
GlobalAlloc

user32

GetDlgCtrlID
GetClientRect
SetWindowRgn
MapWindowPoints
LoadImageA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
PtInRect
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
LoadIconA

gdi32

SetTextColor
GetObjectA
SelectObject
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
CreateCompatibleDC

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetDesktopFolder
SHGetMalloc
ShellExecuteA

comdlg32

GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError

Exports

Exports

dialog
initDialog
show

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 954B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:4 windows x86 arch:x86

4ec328f99bdd944fc98d8a5cf11f7a62

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
GlobalSize
lstrcpyA
lstrcpynA
FreeLibrary
lstrcatA
GetProcAddress
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
GetLastError
VirtualAlloc
VirtualProtect

user32

wsprintfA

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 494B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/ioSpecial.ini
$PLUGINSDIR/modern-header.bmp
$PLUGINSDIR/modern-wizard.bmp

Sharing

General

Malware Config

Signatures

Files

42134c4fb1b2d3cf6b447e018a5de700

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

Sections

.text Size: 25KB - Virtual size: 25KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 3KB - Virtual size: 290KB

.ndata Size: - Virtual size: 304KB

.rsrc Size: 27KB - Virtual size: 28KB

57354bdeea3dfae6e948101add87501a

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

comdlg32

Exports

Exports

Sections

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 1KB - Virtual size: 9KB

.rsrc Size: 512B - Virtual size: 152B

.reloc Size: 1024B - Virtual size: 954B

c428a646f4c250be02cf420ab15d34b4

Headers

File Characteristics

PDB Paths

Imports

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 172KB - Virtual size: 168KB

.rdata Size: 204KB - Virtual size: 201KB

.data Size: 8KB - Virtual size: 5KB

.rsrc Size: 4KB - Virtual size: 936B

.reloc Size: 12KB - Virtual size: 10KB

d610efff26feeb97f00e3f202df7a666

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

advapi32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 84KB - Virtual size: 80KB

.rdata Size: 24KB - Virtual size: 20KB

.data Size: 8KB - Virtual size: 9KB

.rsrc Size: 12KB - Virtual size: 8KB

.reloc Size: 12KB - Virtual size: 8KB

1cfbf88466592bdb45d5036616c3461c

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

.text
Size: 25KB - Virtual size: 25KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 3KB - Virtual size: 290KB

.ndata
Size: - Virtual size: 304KB

.rsrc
Size: 27KB - Virtual size: 28KB

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 1KB - Virtual size: 9KB

.rsrc
Size: 512B - Virtual size: 152B

.reloc
Size: 1024B - Virtual size: 954B

.text
Size: 172KB - Virtual size: 168KB

.rdata
Size: 204KB - Virtual size: 201KB

.data
Size: 8KB - Virtual size: 5KB

.rsrc
Size: 4KB - Virtual size: 936B

.reloc
Size: 12KB - Virtual size: 10KB

.text
Size: 84KB - Virtual size: 80KB

.rdata
Size: 24KB - Virtual size: 20KB

.data
Size: 8KB - Virtual size: 9KB

.rsrc
Size: 12KB - Virtual size: 8KB

.reloc
Size: 12KB - Virtual size: 8KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

3d:c3:09:c2:ed:0e:e4:35:09:fc:8b:d8:68:bc:4c:fd
Certificate

.text
Size: 244KB - Virtual size: 243KB

.rdata
Size: 56KB - Virtual size: 54KB

.data
Size: 12KB - Virtual size: 39KB

.rsrc
Size: 20KB - Virtual size: 19KB

.reloc
Size: 16KB - Virtual size: 14KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

3d:c3:09:c2:ed:0e:e4:35:09:fc:8b:d8:68:bc:4c:fd
Certificate

.text
Size: 244KB - Virtual size: 243KB

.rdata
Size: 56KB - Virtual size: 54KB

.data
Size: 12KB - Virtual size: 39KB

.rsrc
Size: 20KB - Virtual size: 19KB

.reloc
Size: 16KB - Virtual size: 14KB