4ae6aa15892207c7e6323c9101c9a900_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

4ae6aa15892207c7e6323c9101c9a900_JaffaCakes118
Size

8.9MB
MD5

4ae6aa15892207c7e6323c9101c9a900
SHA1

513419ca2ba6531930e117d31833d39702121c27
SHA256

43dd818938f2a189ae43dcaffa558ad39d518aa60ac096f0cdc0f1c35677a249
SHA512

fbe7b4c1ae48d22f3b8a942127276a4cd1013d56880d8cea0acf6c584e5bb49054e9c948774d6debd29e8e03eedd753e84a0cb994534330a0aa03da38cc37ab4
SSDEEP

196608:dOxdnAHBH4QeK+UKoWSJplr0G9qj4YVemKLttARTzXcJ:d8V3QgloWSjlrZkcYVzKzsTzsJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 26 IoCs

Checks for missing Authenticode signature.

resource
unpack001/$PLUGINSDIR/Download_Energy.exe
unpack001/$PLUGINSDIR/InstallOptions.dll
unpack001/Icons/proto_AIM.dll
unpack001/Icons/proto_ICQ.dll
unpack001/Icons/proto_IRC.dll
unpack001/Icons/proto_MSN.dll
unpack001/Icons/proto_YAHOO.dll
unpack001/One Instant Messenger.exe
unpack001/dbtool.exe
unpack001/plugins/GG.dll
unpack001/plugins/IRC.dll
unpack001/plugins/Yahoo.dll
unpack001/plugins/advaimg.dll
unpack001/plugins/aim.dll
unpack001/plugins/avs.dll
unpack001/plugins/chat.dll
unpack001/plugins/clist_classic.dll
unpack001/plugins/dbx_3x.dll
unpack001/plugins/dbx_mmap.dll
unpack001/plugins/icq.dll
unpack001/plugins/import.dll
unpack001/plugins/jabber.dll
unpack001/plugins/msn.dll
unpack001/plugins/proto_JABBER.dll
unpack001/plugins/srmm.dll
unpack001/zlib.dll

NSIS installer 2 IoCs

installer

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

Files

4ae6aa15892207c7e6323c9101c9a900_JaffaCakes118
.exe windows:4 windows x86 arch:x86

099c0646ea7282d232219f8807883be0

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15-06-2007 00:00

Not After

14-06-2012 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-11-2006 00:00

Not After

16-07-2036 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

35:eb:63:3d:d2:ae:f0:f1:05:41:2c:09:d2:c3:b1:4e
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

30-03-2011 00:00

Not After

29-03-2012 23:59

Subject

CN=Prospera Software\, Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Prospera Software\, Inc.,L=Suwanee,ST=Georgia,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

75:06:6a:fb:d8:c1:c8:b2:9c:a4:41:ce:12:e2:9a:4f:f3:eb:ed:24
Signer

Actual PE Digest

75:06:6a:fb:d8:c1:c8:b2:9c:a4:41:ce:12:e2:9a:4f:f3:eb:ed:24

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
CreateFileA
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
SetFileTime
GetTempPathA
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetWindowsDirectoryA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/Download_Energy.exe
.exe windows:4 windows x86 arch:x86

81638d02019c0bfcaaf23a9c69f2f12c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
WaitForSingleObject
CreateProcessA
GetCommandLineA
CloseHandle
UnmapViewOfFile
WriteFile
MapViewOfFile
DeleteFileA
GetTempFileNameA
GetTempPathA
CreateFileA
GetShortPathNameA
GetModuleFileNameA

user32

wsprintfA

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 533B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5.0MB - Virtual size: 5.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/InstallOptions.dll
.dll windows:4 windows x86 arch:x86

b1cd0d78f652ce5fc63f0879371af012

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetCurrentDirectoryA
GetCurrentDirectoryA
MultiByteToWideChar
GetPrivateProfileIntA
GlobalLock
GetModuleHandleA
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
GlobalUnlock
GlobalAlloc

user32

MapWindowPoints
GetDlgCtrlID
CloseClipboard
GetClipboardData
OpenClipboard
PtInRect
SetWindowRgn
LoadIconA
LoadImageA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableMenuItem
GetSystemMenu
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
GetClientRect

gdi32

SetTextColor
CreateCompatibleDC
GetObjectA
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
SelectObject

shell32

SHBrowseForFolderA
SHGetDesktopFolder
SHGetPathFromIDListA
ShellExecuteA

comdlg32

GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError

ole32

CoTaskMemFree

Exports

Exports

dialog
initDialog
show

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/ioSpecial.ini
$PLUGINSDIR/modern-header.bmp
$PLUGINSDIR/modern-wizard.bmp
$PLUGINSDIR/p2p-toolbar-screenshot.bmp
$PLUGINSDIR/setup.ini
$PLUGINSDIR/vcredist_x86.exe
.exe windows:5 windows x86 arch:x86

c63ba316533609531fac22f3877f847b

Code Sign

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10-01-1997 07:00

Not After

31-12-2020 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10-01-1997 07:00

Not After

31-12-2020 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

61:47:52:ba:00:00:00:00:00:04
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16-09-2006 01:53

Not After

16-09-2011 02:03

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:49:7c:ed:00:00:00:00:00:05
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16-09-2006 01:55

Not After

16-09-2011 02:05

Subject

CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:10D8-5847-CBF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16-09-2006 01:04

Not After

15-09-2019 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

04-04-2006 17:44

Not After

26-04-2012 07:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:46:9e:cb:00:04:00:00:00:65
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-04-2006 19:43

Not After

04-10-2007 19:53

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

bc:02:7c:76:1b:ab:4d:a5:a9:3e:ef:53:79:b8:ae:b4:89:fe:1d:3d
Signer

Actual PE Digest

bc:02:7c:76:1b:ab:4d:a5:a9:3e:ef:53:79:b8:ae:b4:89:fe:1d:3d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

FreeSid
AllocateAndInitializeSid
EqualSid
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
RegCloseKey
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegQueryInfoKeyA

kernel32

LocalFree
LocalAlloc
GetLastError
GetCurrentProcess
GetModuleFileNameA
lstrlenA
GetSystemDirectoryA
RemoveDirectoryA
FindClose
FindNextFileA
DeleteFileA
SetFileAttributesA
lstrcmpA
FindFirstFileA
lstrcatA
lstrcpyA
_lclose
_llseek
_lopen
WritePrivateProfileStringA
GetWindowsDirectoryA
CreateDirectoryA
GetFileAttributesA
ExpandEnvironmentStringsA
IsDBCSLeadByte
GetShortPathNameA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcmpiA
GlobalFree
GlobalUnlock
GlobalLock
GetProcAddress
FreeResource
LockResource
LoadResource
SizeofResource
FindResourceA
CloseHandle
WriteFile
SetFilePointer
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
SetCurrentDirectoryA
GetTempFileNameA
ExitProcess
CreateFileA
LoadLibraryExA
lstrcpynA
GetVolumeInformationA
FormatMessageA
GetCurrentDirectoryA
GetVersionExA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetTempPathA
GetSystemInfo
CreateMutexA
SetEvent
CreateEventA
CreateThread
ResetEvent
TerminateThread
GetDriveTypeA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
SetUnhandledExceptionFilter
ReadFile
LoadLibraryA
GetDiskFreeSpaceA
MulDiv
EnumResourceLanguagesA
FreeLibrary
GlobalAlloc

gdi32

GetDeviceCaps

user32

ExitWindowsEx
wsprintfA
CharNextA
CharUpperA
CharPrevA
SetWindowLongA
GetWindowLongA
CallWindowProcA
DispatchMessageA
MsgWaitForMultipleObjects
PeekMessageA
SendMessageA
SetWindowPos
ReleaseDC
GetDC
GetWindowRect
SendDlgItemMessageA
GetDlgItem
SetForegroundWindow
SetWindowTextA
MessageBoxA
DialogBoxIndirectParamA
ShowWindow
EnableWindow
GetDlgItemTextA
EndDialog
GetDesktopWindow
MessageBeep
SetDlgItemTextA
LoadStringA
GetSystemMetrics

comctl32

ord17

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Icons/proto_AIM.dll
.dll windows:5 windows x86 arch:x86

e7967d1240522f4789dba9fde77d3d82

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc90u

ord2251
ord4747
ord6803
ord4173
ord2206
ord4423
ord4448
ord6035
ord4179
ord1048
ord5548
ord6741
ord5830
ord4213
ord801
ord2087
ord3217
ord5674
ord5676
ord2447
ord4347
ord4996
ord5680
ord5663
ord6018
ord2771
ord2983
ord3112
ord4728
ord2966
ord3115
ord2774
ord2893
ord2764
ord4080
ord4081
ord4071
ord2891
ord4348
ord4905
ord4681
ord3670
ord4211
ord794
ord589
ord4043
ord6801
ord605
ord1274
ord321
ord1241
ord1239
ord1264
ord1180
ord1233
ord2084
ord391
ord1152
ord1273
ord1271
ord1145
ord1076
ord1137
ord322
ord802
ord1088

msvcr90

_decode_pointer
??2@YAPAXI@Z
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_crt_debugger_hook
?terminate@@YAXXZ
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
__CxxFrameHandler3

kernel32

SetUnhandledExceptionFilter
LocalAlloc
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
LocalFree
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Icons/proto_ICQ.dll
.dll windows:5 windows x86 arch:x86

e7967d1240522f4789dba9fde77d3d82

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc90u

ord2251
ord4747
ord6803
ord4173
ord2206
ord4423
ord4448
ord6035
ord4179
ord1048
ord5548
ord6741
ord5830
ord4213
ord801
ord2087
ord3217
ord5674
ord5676
ord2447
ord4347
ord4996
ord5680
ord5663
ord6018
ord2771
ord2983
ord3112
ord4728
ord2966
ord3115
ord2774
ord2893
ord2764
ord4080
ord4081
ord4071
ord2891
ord4348
ord4905
ord4681
ord3670
ord4211
ord794
ord589
ord4043
ord6801
ord605
ord1274
ord321
ord1241
ord1239
ord1264
ord1180
ord1233
ord2084
ord391
ord1152
ord1273
ord1271
ord1145
ord1076
ord1137
ord322
ord802
ord1088

msvcr90

_decode_pointer
??2@YAPAXI@Z
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_crt_debugger_hook
?terminate@@YAXXZ
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
__CxxFrameHandler3

kernel32

SetUnhandledExceptionFilter
LocalAlloc
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
LocalFree
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Icons/proto_IRC.dll
.dll windows:5 windows x86 arch:x86

e7967d1240522f4789dba9fde77d3d82

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc90u

ord2251
ord4747
ord6803
ord4173
ord2206
ord4423
ord4448
ord6035
ord4179
ord1048
ord5548
ord6741
ord5830
ord4213
ord801
ord2087
ord3217
ord5674
ord5676
ord2447
ord4347
ord4996
ord5680
ord5663
ord6018
ord2771
ord2983
ord3112
ord4728
ord2966
ord3115
ord2774
ord2893
ord2764
ord4080
ord4081
ord4071
ord2891
ord4348
ord4905
ord4681
ord3670
ord4211
ord794
ord589
ord4043
ord6801
ord605
ord1274
ord321
ord1241
ord1239
ord1264
ord1180
ord1233
ord2084
ord391
ord1152
ord1273
ord1271
ord1145
ord1076
ord1137
ord322
ord802
ord1088

msvcr90

_decode_pointer
??2@YAPAXI@Z
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_crt_debugger_hook
?terminate@@YAXXZ
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
__CxxFrameHandler3

kernel32

SetUnhandledExceptionFilter
LocalAlloc
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
LocalFree
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Icons/proto_MSN.dll
.dll windows:5 windows x86 arch:x86

e7967d1240522f4789dba9fde77d3d82

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc90u

ord2251
ord4747
ord6803
ord4173
ord2206
ord4423
ord4448
ord6035
ord4179
ord1048
ord5548
ord6741
ord5830
ord4213
ord801
ord2087
ord3217
ord5674
ord5676
ord2447
ord4347
ord4996
ord5680
ord5663
ord6018
ord2771
ord2983
ord3112
ord4728
ord2966
ord3115
ord2774
ord2893
ord2764
ord4080
ord4081
ord4071
ord2891
ord4348
ord4905
ord4681
ord3670
ord4211
ord794
ord589
ord4043
ord6801
ord605
ord1274
ord321
ord1241
ord1239
ord1264
ord1180
ord1233
ord2084
ord391
ord1152
ord1273
ord1271
ord1145
ord1076
ord1137
ord322
ord802
ord1088

msvcr90

_decode_pointer
??2@YAPAXI@Z
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_crt_debugger_hook
?terminate@@YAXXZ
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
__CxxFrameHandler3

kernel32

SetUnhandledExceptionFilter
LocalAlloc
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
LocalFree
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Icons/proto_YAHOO.dll
.dll windows:5 windows x86 arch:x86

e7967d1240522f4789dba9fde77d3d82

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc90u

ord2251
ord4747
ord6803
ord4173
ord2206
ord4423
ord4448
ord6035
ord4179
ord1048
ord5548
ord6741
ord5830
ord4213
ord801
ord2087
ord3217
ord5674
ord5676
ord2447
ord4347
ord4996
ord5680
ord5663
ord6018
ord2771
ord2983
ord3112
ord4728
ord2966
ord3115
ord2774
ord2893
ord2764
ord4080
ord4081
ord4071
ord2891
ord4348
ord4905
ord4681
ord3670
ord4211
ord794
ord589
ord4043
ord6801
ord605
ord1274
ord321
ord1241
ord1239
ord1264
ord1180
ord1233
ord2084
ord391
ord1152
ord1273
ord1271
ord1145
ord1076
ord1137
ord322
ord802
ord1088

msvcr90

_decode_pointer
??2@YAPAXI@Z
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_crt_debugger_hook
?terminate@@YAXXZ
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
__CxxFrameHandler3

kernel32

SetUnhandledExceptionFilter
LocalAlloc
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
LocalFree
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
One Instant Messenger.exe
.exe windows:5 windows x86 arch:x86

f5520a4e348c45774413a20194c00bf9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\MIHAELA\PROIECTE\BestWebSharing\one-im\miranda\bin9\Release Unicode\One Instant Messenger.pdb

Imports

wsock32

bind
accept
htons
ntohl
socket
WSAGetLastError
htonl
WSAStartup
WSACleanup
closesocket
inet_addr
getsockopt
sendto
setsockopt
recv
send
shutdown
__WSAFDIsSet
inet_ntoa
select
ioctlsocket
connect
gethostbyname
gethostname
ntohs
getsockname
listen

comctl32

ImageList_BeginDrag
ImageList_EndDrag
ImageList_DragMove
ImageList_DragEnter
ImageList_DragLeave
ImageList_DrawEx
ImageList_Add
ImageList_Draw
_TrackMouseEvent
InitCommonControlsEx
ImageList_Destroy
ImageList_Remove
ImageList_GetIcon
ImageList_ReplaceIcon
ImageList_Create
ord17

winmm

PlaySoundA

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

zlib

inflateEnd
inflate
inflateInit2_

kernel32

GetCurrentProcess
DuplicateHandle
SetLastError
ResetEvent
SleepEx
GetProcessHeaps
HeapCompact
GetTickCount
WaitForMultipleObjectsEx
GetCommandLineA
OpenProcess
GetModuleHandleA
LoadLibraryA
GetVersion
GetCurrentProcessId
FreeLibrary
GetModuleFileNameW
CreateMutexW
InitializeCriticalSection
EnterCriticalSection
DeleteCriticalSection
LeaveCriticalSection
lstrlenW
GetPrivateProfileStringW
FindFirstFileW
FindNextFileW
FindClose
GetCommandLineW
lstrcpynW
GetProcAddress
GlobalAddAtomW
GlobalDeleteAtom
lstrcmpiW
lstrlenA
lstrcmpA
lstrcpyA
lstrcatA
DeleteFileW
MoveFileW
lstrcpynA
lstrcpyW
lstrcatW
FindNextChangeNotification
FindFirstChangeNotificationW
FindCloseChangeNotification
SystemTimeToFileTime
FileTimeToSystemTime
CompareFileTime
GetTimeZoneInformation
GetTimeFormatA
GetDateFormatA
GetTimeFormatW
GetDateFormatW
LockResource
LoadResource
FindResourceA
lstrcmpiA
FindResourceW
GetLocaleInfoA
InterlockedIncrement
InterlockedDecrement
HeapAlloc
GetProcessHeap
GetVersionExW
Sleep
GetLastError
ExpandEnvironmentStringsW
CreateProcessW
QueryPerformanceCounter
QueryPerformanceFrequency
LCMapStringW
SizeofResource
FindFirstFileA
FindNextFileA
GetPrivateProfileIntW
HeapCreate
HeapDestroy
MoveFileA
GlobalAddAtomA
GetFileAttributesW
GetLocalTime
GetFileAttributesA
GetCurrentDirectoryA
CreateProcessA
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GlobalSize
GetSystemTimeAsFileTime
MulDiv
CreateFileA
CreateFileMappingW
MapViewOfFile
GetFileSize
UnmapViewOfFile
GetFullPathNameA
CreateDirectoryA
GetFullPathNameW
CreateDirectoryW
GetEnvironmentVariableA
GetEnvironmentVariableW
GlobalGetAtomNameA
WriteFile
CreateFileW
IsBadReadPtr
ReadFile
QueueUserAPC
WaitForMultipleObjects
ReleaseMutex
TerminateThread
GetModuleFileNameA
CloseHandle
WaitForSingleObject
CreateEventW
GetCurrentThread
SetThreadPriority
GetCurrentThreadId
SetEvent
WideCharToMultiByte
MultiByteToWideChar
OutputDebugStringA
InterlockedExchange
InterlockedCompareExchange
GetStartupInfoA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
lstrcmpW
IsDebuggerPresent

user32

RemoveMenu
CheckMenuItem
ShowScrollBar
InvalidateRgn
GetDoubleClickTime
WindowFromPoint
GetDesktopWindow
ChildWindowFromPointEx
FindWindowA
ScrollWindowEx
DrawMenuBar
GetMenuStringW
DeleteMenu
IsIconic
GetActiveWindow
InsertMenuItemW
SetMenuDefaultItem
SetParent
GetMenu
SetMenu
FrameRect
ReplyMessage
IsZoomed
GetMenuItemID
MenuItemFromPoint
MoveWindow
CreateMenu
LookupIconIdFromDirectoryEx
CreateIconFromResourceEx
GetIconInfo
GetScrollPos
AppendMenuA
CharUpperA
GetKeyState
GetMessagePos
UnhookWindowsHookEx
SetWindowsHookExW
GetKeyboardLayout
GetKeyNameTextW
MapVirtualKeyW
UnregisterHotKey
SetWindowPlacement
CallNextHookEx
SetActiveWindow
AppendMenuW
DeferWindowPos
DrawIconEx
GetWindowTextA
SetWindowTextA
CharLowerA
MessageBoxA
UpdateWindow
MessageBeep
RemovePropA
GetPropA
SetPropA
CreateDialogIndirectParamA
IsRectEmpty
IntersectRect
FindWindowExW
MapWindowPoints
DrawTextW
DrawIcon
SetRect
SetDlgItemInt
wsprintfA
GetWindow
EnumChildWindows
SetMenuItemInfoW
GetMenuItemInfoW
GetMenuItemCount
CharNextExA
GetDlgItemInt
GetFocus
SystemParametersInfoW
CharUpperBuffW
LoadIconW
DestroyMenu
TrackPopupMenu
GetSubMenu
LoadMenuW
SetForegroundWindow
IsWindow
GetWindowPlacement
MapDialogRect
RegisterClassW
LoadImageA
SetCursor
PackDDElParam
UnpackDDElParam
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
SetScrollPos
ScrollWindow
SetScrollInfo
RegisterHotKey
EndDeferWindowPos
ChildWindowFromPoint
SendDlgItemMessageA
SendMessageA
SetWindowPos
CreateDialogIndirectParamW
OffsetRect
LoadImageW
IsWindowVisible
CreatePopupMenu
BeginDeferWindowPos
SetFocus
ShowWindow
CallWindowProcW
CopyIcon
SetDlgItemTextA
EnumWindows
RegisterWindowMessageW
SendMessageTimeoutW
GetClassNameW
MessageBoxW
GetAsyncKeyState
ReleaseCapture
ScreenToClient
ClientToScreen
SetCapture
KillTimer
PtInRect
GetCursorPos
GetWindowRect
EndPaint
BeginPaint
GetDlgCtrlID
InvalidateRect
GetSysColor
GetWindowTextW
CopyRect
GetWindowTextLengthW
DestroyIcon
DrawStateW
GetSystemMetrics
DrawFocusRect
InflateRect
DrawFrameControl
DrawEdge
FillRect
ReleaseDC
GetDC
GetSysColorBrush
IsWindowEnabled
GetClientRect
RegisterClassExW
LoadCursorW
CreateDialogParamW
GetParent
GetDlgItemTextA
GetDlgItemTextW
IsDlgButtonChecked
SetDlgItemTextW
GetDlgItem
EnableWindow
CheckDlgButton
SetWindowTextW
PostMessageW
SendMessageW
SetClassLongW
CreateWindowExW
DestroyWindow
PostQuitMessage
GetClassLongW
GetWindowThreadProcessId
GetForegroundWindow
DialogBoxParamW
GetWindowLongW
EndDialog
SendDlgItemMessageW
SetWindowLongW
MsgWaitForMultipleObjects
DefWindowProcW
SetTimer
DispatchMessageW
TranslateMessage
IsDialogMessageW
PeekMessageW
RedrawWindow

gdi32

MoveToEx
CreatePen
SetBkColor
GetStockObject
DeleteDC
BitBlt
GetTextExtentPoint32W
SetTextColor
SetBkMode
GetObjectW
DeleteObject
LineTo
SelectObject
StretchBlt
GdiFlush
GetTextMetricsW
GetDeviceCaps
CreateDIBitmap
CreateSolidBrush
CreateHatchBrush
CreateBitmap
CreateRectRgn
OffsetRgn
CreateCompatibleBitmap
ExtTextOutA
CreateFontIndirectW
CreateDIBSection
SelectClipRgn
CombineRgn
GetCurrentObject
CreateRectRgnIndirect
GetDIBits
CreateBrushIndirect
TextOutW
GetTextExtentPoint32A
CreateCompatibleDC

comdlg32

GetSaveFileNameW
GetOpenFileNameA
GetSaveFileNameA
ChooseColorW
ChooseFontW
GetOpenFileNameW

advapi32

GetUserNameW
GetUserNameA
RegQueryValueExW
RegCloseKey
RegQueryValueExA
RegOpenKeyExA

shell32

Shell_NotifyIconA
Shell_NotifyIconW
DragQueryFileA
DragQueryFileW
SHGetFileInfoW
SHBrowseForFolderA
SHGetPathFromIDListA
ExtractIconA
SHGetFileInfoA
SHGetDesktopFolder
ShellExecuteA
ExtractIconExW
ShellExecuteW
SHFileOperationW
SHAppBarMessage

ole32

OleUninitialize
RevokeDragDrop
RegisterDragDrop
CoTaskMemFree
OleInitialize
CoCreateInstance
CoTaskMemAlloc

oleaut32

OleLoadPicturePath

msvcr90

isalnum
bsearch
qsort
fseek
atoi
ftell
wcsstr
_wctime32
_wstat32
??2@YAPAXI@Z
strtoul
strtol
fgets
feof
strncmp
strchr
_wchdir
wcsrchr
wcsncpy
wcscspn
wcschr
_waccess
_wcsicmp
fclose
_wfopen
memcpy
_ltow
strcat
wcscat
tolower
_itoa
_ltoa
strncpy
strcmp
memmove
setlocale
atol
strstr
_beginthreadex
_beginthread
_vsnwprintf
_vsnprintf
wcscpy
wcslen
strcpy
strlen
free
realloc
memset
malloc
wcsncmp
srand
rand
_wcsnicmp
_snprintf
wcsncat
_itow
_wtoi
strspn
strrchr
_wfullpath
_wsplitpath
fprintf
_stricmp
_time32
wcscmp
??3@YAXPAX@Z
abs
memcmp
_stat32
_strtime
sprintf
_access
strcspn
strncat
_strlwr
isalpha
_wcslwr
exit
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_amsg_exit
__getmainargs
_cexit
_exit
_XcptFilter
_ismbblead
_acmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_crt_debugger_hook
_except_handler4_common
?terminate@@YAXXZ
_invoke_watson
_controlfp_s
_strnicmp

Sections

.text
Size: 378KB - Virtual size: 377KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 209KB - Virtual size: 209KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
dbtool.exe
.exe windows:5 windows x86 arch:x86

1970e3acf3c5e603ea9fe1346b63655d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Work\FREO\miranda\bin9\Release Unicode\dbtool.pdb

Imports

comctl32

ImageList_ReplaceIcon
ImageList_Create
ord17

kernel32

UnmapViewOfFile
MoveFileW
DeleteFileW
GetFileSize
CreateFileW
CreateFileMappingW
MapViewOfFile
GetFileAttributesW
FormatMessageW
CreateEventW
ResetEvent
SetEvent
lstrlenW
FindNextFileW
lstrcmpW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
GetLastError
SetFilePointer
WriteFile
ReadFile
lstrlenA
lstrcpyW
lstrcmpA
GetLocaleInfoA
MultiByteToWideChar
lstrcatA
lstrcmpiW
GetModuleFileNameW
GetModuleHandleW
lstrcatW
FindFirstFileW
FindClose
FindResourceA
LoadResource
LockResource
SizeofResource
CloseHandle
WaitForSingleObject

user32

LoadIconW
DestroyWindow
EnableWindow
GetDlgItem
SetDlgItemTextW
CreateDialogParamW
ShowWindow
EndDialog
MessageBoxW
wsprintfW
CheckDlgButton
IsDlgButtonChecked
GetParent
InvalidateRect
GetDC
ReleaseDC
GetClientRect
IsWindowEnabled
GetSystemMetrics
GetDlgItemTextW
GetWindowTextLengthW
GetWindowTextA
SendDlgItemMessageW
SetWindowPos
SetWindowLongW
SendMessageW
GetClassNameA
DialogBoxParamW
EnumChildWindows
GetWindowLongW
GetClassNameW
GetDlgCtrlID
SetWindowTextW
GetWindowTextW
CharNextA
SystemParametersInfoW

gdi32

GetDeviceCaps
ExtTextOutW
GetTextExtentPoint32W
SelectObject
DeleteEnhMetaFile
DeleteObject
GetStockObject
SetBkMode
SetBkColor
SetTextColor
SetEnhMetaFileBits
CreateFontIndirectW
GetObjectW

comdlg32

GetOpenFileNameW

advapi32

RegOpenKeyExW
RegQueryValueExA
RegCloseKey
RegQueryValueExW
RegOpenKeyExA

shell32

ShellExecuteW

msvcr90

_wcsicmp
memcpy
_controlfp_s
_invoke_watson
_except_handler4_common
_decode_pointer
_onexit
_lock
__dllonexit
_unlock
?terminate@@YAXXZ
_crt_debugger_hook
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
exit
_ismbblead
memmove
_wfopen
fgets
fclose
feof
ftell
strchr
_snprintf
strtol
atoi
fseek
free
realloc
_strdup
malloc
qsort
bsearch
wcsrchr
_time64
_waccess
_vsnwprintf
_beginthread
memset
_wcsdup
_swprintf
_amsg_exit
__getmainargs
_cexit
_exit
_XcptFilter

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
plugins/GG.dll
.dll windows:5 windows x86 arch:x86

f8dcde15696ff59245a4c766977ed131

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Work\FREO\miranda\bin9\Release Unicode\Plugins\GG.pdb

Imports

wsock32

shutdown
getsockname
ntohs
send
getsockopt
listen
accept
inet_ntoa
connect
htons
recv
bind
socket
closesocket
WSAStartup
WSACleanup
__WSAFDIsSet
select
inet_addr
htonl
gethostbyname
ioctlsocket

kernel32

IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
InterlockedCompareExchange
EnterCriticalSection
LeaveCriticalSection
WaitForSingleObjectEx
CreateEventA
CloseHandle
lstrcpyA
GetExitCodeThread
SetEvent
SleepEx
GetTickCount
InitializeCriticalSection
DeleteCriticalSection
lstrcmpiA
lstrcmpA
GetModuleFileNameA
ResetEvent
lstrcpynA
WaitForSingleObject
GetCurrentThreadId
LoadLibraryA
GetProcAddress
FreeLibrary
Sleep
InterlockedExchange
SetUnhandledExceptionFilter

user32

CopyIcon
DestroyMenu
TrackPopupMenu
GetCursorPos
CreatePopupMenu
SetTimer
GetForegroundWindow
GetActiveWindow
KillTimer
FlashWindow
EndDialog
InvalidateRect
LockWindowUpdate
SetWindowPos
ReleaseDC
SystemParametersInfoA
GetDC
GetClientRect
EndPaint
GetSysColorBrush
FillRect
ScreenToClient
GetWindowRect
BeginPaint
PostMessageA
IsWindow
CreateDialogParamA
DestroyWindow
GetSysColor
GetParent
SendMessageA
DialogBoxParamA
GetWindowLongA
GetFocus
SendDlgItemMessageA
IsDlgButtonChecked
CheckDlgButton
SetWindowLongA
ShowWindow
GetDlgItemTextA
SetDlgItemTextA
GetDlgItem
EnableWindow
GetSystemMetrics
LoadImageA
MessageBoxA
SetWindowTextA

gdi32

BitBlt
StretchBlt
SetStretchBltMode
SelectObject
CreateCompatibleDC
SetBkMode
GetStockObject
SetBkColor
DeleteObject
CreateFontIndirectA
GetObjectA
DeleteDC

comdlg32

GetSaveFileNameA
GetOpenFileNameA

msvcr90

_decode_pointer
_encoded_null
_malloc_crt
_encode_pointer
_crt_debugger_hook
strtol
sscanf
_strnicmp
toupper
_initterm
vfprintf
_vsnprintf
_snprintf
__iob_func
_beginthreadex
_stat32
fread
ftell
fseek
fclose
fwrite
fopen
strstr
_strlwr
_snwprintf
_lseek
_open
strrchr
_close
rand
_adjust_fdiv
srand
_stricmp
strchr
memmove
realloc
calloc
malloc
_itoa
_localtime32
_time32
strncat
strerror
_errno
atoi
_initterm_e
_amsg_exit
__CppXcptFilter
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
strncmp
_except_handler4_common
_write
_read
memcpy
memset
_strdup
free
isdigit
strncpy

Exports

Exports

Load
MirandaPluginInfoEx
MirandaPluginInterfaces
Unload

Sections

.text
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
plugins/IRC.dll
.dll windows:5 windows x86 arch:x86

9235e802fccbb12ef4d11903e96d8db4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Work\FREO\miranda\bin9\Release Unicode\Plugins\IRC.pdb

Imports

shlwapi

StrToIntA
StrToIntW

wsock32

htonl
ntohl
ioctlsocket
inet_addr
gethostbyname
ntohs
getsockname

kernel32

TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
lstrcmpiA
lstrcmpiW
lstrlenA
EnterCriticalSection
LeaveCriticalSection
lstrcpynW
InterlockedExchange
SetEvent
WaitForSingleObject
lstrlenW
lstrcatW
lstrcpynA
GetLocalTime
lstrcmpW
Sleep
GetComputerNameW
CreateEventW
CloseHandle
InitializeCriticalSection
DeleteCriticalSection
lstrcmpA
GetModuleFileNameA
InterlockedIncrement
InterlockedDecrement
lstrcpyA
EnumSystemCodePagesA
LockResource
LoadResource
FindResourceW
lstrcpyW
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
GetCurrentProcess

user32

SetDlgItemInt
GetDlgItemTextA
wsprintfW
SetWindowPos
SystemParametersInfoW
InvalidateRect
IsIconic
SetDlgItemTextA
GetDlgItemTextW
GetFocus
GetWindowTextA
IsWindowEnabled
SendMessageA
EndDialog
PostMessageW
CreateDialogParamW
DestroyWindow
KillTimer
SetTimer
GetAsyncKeyState
GetWindowLongW
GetWindowTextW
SetWindowLongW
ChildWindowFromPoint
GetParent
GetWindowTextLengthW
SetFocus
CheckDlgButton
ShowWindow
SetWindowTextA
LoadImageW
MessageBoxW
SetWindowTextW
IsDlgButtonChecked
SendDlgItemMessageW
SetDlgItemTextW
EnableWindow
SendMessageW
GetDlgItem
SetActiveWindow
IsWindowVisible
CharLowerW
GetDlgCtrlID
CallWindowProcW

gdi32

SetBkColor
GetStockObject
SetTextColor
DeleteObject
CreateFontIndirectW
GetObjectW

msvcr90

_except_handler4_common
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
_mbschr
wcscspn
wcsspn
towlower
sprintf
_mbslwr_s
_mbsstr
_snwprintf
fgets
wcsncpy
atoi
_vsnwprintf
_vscwprintf
realloc
malloc
strrchr
_mbscmp
fopen
rewind
ftell
_strdup
rand
remove
_strnicmp
__clean_type_info_names_internal
_crt_debugger_hook
__CppXcptFilter
memset
_except_handler3
memcpy
_wcsupr
sscanf
calloc
??2@YAPAXI@Z
wcschr
memcpy_s
memmove_s
_time32
??3@YAXPAX@Z
strchr
swscanf
_wctime32
_wtoi
iswdigit
_wcsdup
free
_wtol
wcstol
wcsftime
_localtime32
wcsstr
wcsrchr
_wcslwr
_mbsupr_s
memmove
_wfopen
fseek
fread
fclose
fwrite
strstr

Exports

Exports

Load
MirandaPluginInfoEx
MirandaPluginInterfaces
Unload

Sections

.text
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
plugins/Yahoo.dll
.dll windows:5 windows x86 arch:x86

3d99fbc57e42993c781749e6208823f8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Work\FREO\miranda\bin9\Release Unicode\Plugins\Yahoo.pdb

Imports

wsock32

inet_addr
gethostbyname

kernel32

lstrlenA
InterlockedCompareExchange
QueryPerformanceCounter
CreateFileA
ReadFile
CloseHandle
DeleteFileA
WriteFile
lstrcpyA
lstrcmpiA
lstrcatA
GetFileSize
SetEndOfFile
CreateEventW
lstrcmpA
GetTickCount
ResetEvent
WaitForSingleObject
lstrcpynA
InterlockedExchange
SetEvent
GetModuleFileNameW
SleepEx
lstrcmpW
Sleep
GetCurrentThreadId
GetCurrentProcessId
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime

user32

DefWindowProcW
ShowWindow
SetFocus
SetForegroundWindow
DestroyWindow
SendDlgItemMessageW
SendDlgItemMessageA
CreateDialogParamW
GetSystemMetrics
LoadImageW
SendMessageA
GetDlgItem
EnableWindow
CheckDlgButton
GetDlgItemInt
SetDlgItemInt
MessageBoxA
GetDlgItemTextA
GetFocus
GetParent
IsDlgButtonChecked
SetDlgItemTextA
SetWindowLongW
GetWindowLongW
SendMessageW
MessageBoxW
wsprintfA

msvcr90

_strlwr
_itoa
memcpy
malloc
_strdup
_crt_debugger_hook
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
strncpy
free
_stat32
memset
_access
_time32
_snprintf
calloc
strrchr
_strnicmp
strchr
_vsnprintf
strerror
strstr
_errno
strncmp
realloc
sprintf
atoi
strtol
isprint
isdigit
atol
sscanf
isalnum
_encode_pointer
_malloc_crt

Exports

Exports

Load
MirandaPluginInfoEx
MirandaPluginInterfaces
Unload

Sections

.text
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
plugins/advaimg.dll
.dll windows:5 windows x86 arch:x86

f74180a60ac3a0783a0a1a3702afa567

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Work\FREO\miranda\bin9\Release Unicode\Plugins\advaimg.pdb

Imports

zlib

deflateInit2_
deflateReset
deflate
deflateEnd
inflateInit_
inflateReset
inflateEnd
compress
compress2
inflate
inflateInit2_
uncompress
crc32
zError

kernel32

GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetCurrentThreadId
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
FreeLibrary
SetCurrentDirectoryA
GetProcAddress
LoadLibraryA
GetModuleFileNameA
GetCurrentDirectoryA
GlobalAlloc
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentProcessId

user32

GetDC
ReleaseDC

gdi32

GetBitmapBits
GetDIBits
CreateDIBSection
SetBitmapBits
GetObjectA

msvcp90

?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@D@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?uncaught_exception@std@@YA_NXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z

msvcr90

_CIlog
_CIpow
floor
_CIsin
memcpy
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
memset
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
free
malloc
_invalid_parameter_noinfo
??3@YAXPAX@Z
_aligned_free
_aligned_malloc
??2@YAPAXI@Z
_CIfmod
strtol
tolower
isupper
sprintf
_itoa
fread
fwrite
ftell
realloc
fseek
_wfopen
fopen
fclose
strncat
_findnext64i32
_findclose
strtok
wcsrchr
_findfirst64i32
strrchr
??_V@YAXPAX@Z
memmove_s
strncmp
remove
rename
memmove
fflush
ferror
__iob_func
fprintf
exit
sscanf
getenv
isdigit
_snprintf
longjmp
abort
strtod
ceil
div
_purecall
?terminate@@YAXXZ
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
__CxxFrameHandler3
_CxxThrowException
_CIsqrt
_CIexp
_setjmp3
_CIlog10
_CIatan2
_CIcos
_CItan
__CxxLongjmpUnwind
??0exception@std@@QAE@XZ
isspace

Exports

Exports

FreeImage_OutputMessageProc
Load
MirandaPluginInfo
MirandaPluginInfoEx
MirandaPluginInterfaces
Unload
_FreeImage_AcquireMemory@12
_FreeImage_AdjustBrightness@12
_FreeImage_AdjustColors@32
_FreeImage_AdjustContrast@12
_FreeImage_AdjustCurve@12
_FreeImage_AdjustGamma@12
_FreeImage_Allocate@24
_FreeImage_AllocateT@28
_FreeImage_AppendPage@8
_FreeImage_ApplyColorMapping@24
_FreeImage_ApplyPaletteIndexMapping@20
_FreeImage_Clone@4
_FreeImage_CloneTag@4
_FreeImage_CloseMemory@4
_FreeImage_CloseMultiBitmap@8
_FreeImage_ColorQuantize@8
_FreeImage_ColorQuantizeEx@20
_FreeImage_Composite@16
_FreeImage_ConvertFromRawBits@36
_FreeImage_ConvertLine16To24_555@12
_FreeImage_ConvertLine16To24_565@12
_FreeImage_ConvertLine16To32_555@12
_FreeImage_ConvertLine16To32_565@12
_FreeImage_ConvertLine16To4_555@12
_FreeImage_ConvertLine16To4_565@12
_FreeImage_ConvertLine16To8_555@12
_FreeImage_ConvertLine16To8_565@12
_FreeImage_ConvertLine16_555_To16_565@12
_FreeImage_ConvertLine16_565_To16_555@12
_FreeImage_ConvertLine1To16_555@16
_FreeImage_ConvertLine1To16_565@16
_FreeImage_ConvertLine1To24@16
_FreeImage_ConvertLine1To32@16
_FreeImage_ConvertLine1To4@12
_FreeImage_ConvertLine1To8@12
_FreeImage_ConvertLine24To16_555@12
_FreeImage_ConvertLine24To16_565@12
_FreeImage_ConvertLine24To32@12
_FreeImage_ConvertLine24To4@12
_FreeImage_ConvertLine24To8@12
_FreeImage_ConvertLine32To16_555@12
_FreeImage_ConvertLine32To16_565@12
_FreeImage_ConvertLine32To24@12
_FreeImage_ConvertLine32To4@12
_FreeImage_ConvertLine32To8@12
_FreeImage_ConvertLine4To16_555@16
_FreeImage_ConvertLine4To16_565@16
_FreeImage_ConvertLine4To24@16
_FreeImage_ConvertLine4To32@16
_FreeImage_ConvertLine4To8@12
_FreeImage_ConvertLine8To16_555@16
_FreeImage_ConvertLine8To16_565@16
_FreeImage_ConvertLine8To24@16
_FreeImage_ConvertLine8To32@16
_FreeImage_ConvertLine8To4@16
_FreeImage_ConvertTo16Bits555@4
_FreeImage_ConvertTo16Bits565@4
_FreeImage_ConvertTo24Bits@4
_FreeImage_ConvertTo32Bits@4
_FreeImage_ConvertTo4Bits@4
_FreeImage_ConvertTo8Bits@4
_FreeImage_ConvertToGreyscale@4
_FreeImage_ConvertToRGBF@4
_FreeImage_ConvertToRawBits@32
_FreeImage_ConvertToStandardType@8
_FreeImage_ConvertToType@12
_FreeImage_Copy@20
_FreeImage_CreateICCProfile@12
_FreeImage_CreateTag@0
_FreeImage_DeInitialise@0
_FreeImage_DeletePage@8
_FreeImage_DeleteTag@4
_FreeImage_DestroyICCProfile@4
_FreeImage_Dither@8
_FreeImage_FIFSupportsExportBPP@8
_FreeImage_FIFSupportsExportType@8
_FreeImage_FIFSupportsICCProfiles@4
_FreeImage_FIFSupportsReading@4
_FreeImage_FIFSupportsWriting@4
_FreeImage_FindCloseMetadata@4
_FreeImage_FindFirstMetadata@12
_FreeImage_FindNextMetadata@8
_FreeImage_FlipHorizontal@4
_FreeImage_FlipVertical@4
_FreeImage_GetAdjustColorsLookupTable@32
_FreeImage_GetBPP@4
_FreeImage_GetBackgroundColor@8
_FreeImage_GetBits@4
_FreeImage_GetBlueMask@4
_FreeImage_GetChannel@8
_FreeImage_GetColorType@4
_FreeImage_GetColorsUsed@4
_FreeImage_GetComplexChannel@8
_FreeImage_GetCopyrightMessage@0
_FreeImage_GetDIBSize@4
_FreeImage_GetDotsPerMeterX@4
_FreeImage_GetDotsPerMeterY@4
_FreeImage_GetFIFCount@0
_FreeImage_GetFIFDescription@4
_FreeImage_GetFIFExtensionList@4
_FreeImage_GetFIFFromFilename@4
_FreeImage_GetFIFFromFilenameU@4
_FreeImage_GetFIFFromFormat@4
_FreeImage_GetFIFFromMime@4
_FreeImage_GetFIFMimeType@4
_FreeImage_GetFIFRegExpr@4
_FreeImage_GetFileType@8
_FreeImage_GetFileTypeFromHandle@12
_FreeImage_GetFileTypeFromMemory@8
_FreeImage_GetFileTypeU@8
_FreeImage_GetFormatFromFIF@4
_FreeImage_GetGreenMask@4
_FreeImage_GetHeight@4
_FreeImage_GetHistogram@12
_FreeImage_GetICCProfile@4
_FreeImage_GetImageType@4
_FreeImage_GetInfo@4
_FreeImage_GetInfoHeader@4
_FreeImage_GetLine@4
_FreeImage_GetLockedPageNumbers@12
_FreeImage_GetMetadata@16
_FreeImage_GetMetadataCount@8
_FreeImage_GetPageCount@4
_FreeImage_GetPalette@4
_FreeImage_GetPitch@4
_FreeImage_GetPixelColor@16
_FreeImage_GetPixelIndex@16
_FreeImage_GetRedMask@4
_FreeImage_GetScanLine@8
_FreeImage_GetTagCount@4
_FreeImage_GetTagDescription@4
_FreeImage_GetTagID@4
_FreeImage_GetTagKey@4
_FreeImage_GetTagLength@4
_FreeImage_GetTagType@4
_FreeImage_GetTagValue@4
_FreeImage_GetTransparencyCount@4
_FreeImage_GetTransparencyTable@4
_FreeImage_GetTransparentIndex@4
_FreeImage_GetVersion@0
_FreeImage_GetWidth@4
_FreeImage_HasBackgroundColor@4
_FreeImage_Initialise@4
_FreeImage_InsertPage@12
_FreeImage_Invert@4
_FreeImage_IsLittleEndian@0
_FreeImage_IsPluginEnabled@4
_FreeImage_IsTransparent@4
_FreeImage_JPEGCrop@24
_FreeImage_JPEGTransform@16
_FreeImage_Load@12
_FreeImage_LoadFromHandle@16
_FreeImage_LoadFromMemory@12
_FreeImage_LoadMultiBitmapFromMemory@12
_FreeImage_LoadU@12
_FreeImage_LockPage@8
_FreeImage_LookupSVGColor@16
_FreeImage_LookupX11Color@16
_FreeImage_MakeThumbnail@12
_FreeImage_MovePage@12
_FreeImage_MultigridPoissonSolver@8
_FreeImage_OpenMemory@8
_FreeImage_OpenMultiBitmap@24
_FreeImage_Paste@20
_FreeImage_PreMultiplyWithAlpha@4
_FreeImage_ReadMemory@16
_FreeImage_RegisterExternalPlugin@20
_FreeImage_RegisterLocalPlugin@20
_FreeImage_Rescale@16
_FreeImage_RotateClassic@12
_FreeImage_RotateEx@48
_FreeImage_Save@16
_FreeImage_SaveToHandle@20
_FreeImage_SaveToMemory@16
_FreeImage_SaveU@16
_FreeImage_SeekMemory@12
_FreeImage_SetBackgroundColor@8
_FreeImage_SetChannel@12
_FreeImage_SetComplexChannel@12
_FreeImage_SetDotsPerMeterX@8
_FreeImage_SetDotsPerMeterY@8
_FreeImage_SetMetadata@16
_FreeImage_SetOutputMessage@4
_FreeImage_SetOutputMessageStdCall@4
_FreeImage_SetPixelColor@16
_FreeImage_SetPixelIndex@16
_FreeImage_SetPluginEnabled@8
_FreeImage_SetTagCount@8
_FreeImage_SetTagDescription@8
_FreeImage_SetTagID@8
_FreeImage_SetTagKey@8
_FreeImage_SetTagLength@8
_FreeImage_SetTagType@8
_FreeImage_SetTagValue@8
_FreeImage_SetTransparencyTable@12
_FreeImage_SetTransparent@8
_FreeImage_SetTransparentIndex@8
_FreeImage_SwapColors@16
_FreeImage_SwapPaletteIndices@12
_FreeImage_TagToString@12
_FreeImage_TellMemory@4
_FreeImage_Threshold@8
_FreeImage_TmoDrago03@20
_FreeImage_TmoFattal02@20
_FreeImage_TmoReinhard05@20
_FreeImage_ToneMapping@24
_FreeImage_Unload@4
_FreeImage_UnlockPage@12
_FreeImage_WriteMemory@16
_FreeImage_ZLibCRC32@12
_FreeImage_ZLibCompress@16
_FreeImage_ZLibGUnzip@16
_FreeImage_ZLibGZip@16
_FreeImage_ZLibUncompress@16
dib2mempng
getver
mempng2dib

Sections

.text
Size: 279KB - Virtual size: 278KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
plugins/aim.dll
.dll windows:5 windows x86 arch:x86

92e9a1bb7514b08aede43c14ce5fcd39

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Work\FREO\miranda\bin9\Release Unicode\Plugins\aim.pdb

Imports

wsock32

WSAGetLastError

kernel32

lstrlenA
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
SetEvent
GetLocalTime
GetModuleFileNameW
GetVersion
GetModuleHandleA
GetProcAddress
GetModuleHandleW
WaitForSingleObjectEx
CloseHandle
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
InterlockedExchange
ResetEvent
CreateEventW
WaitForSingleObject
Sleep
lstrcmpA
GetTimeFormatA
GetDateFormatA

user32

GetDlgItemTextW
CreateDialogParamW
CheckRadioButton
GetDlgItemInt
GetParent
GetFocus
IsDlgButtonChecked
SetDlgItemInt
ShowWindow
GetDlgItemTextA
SetDlgItemTextA
CheckDlgButton
SetFocus
EnableWindow
DrawIconEx
SetDlgItemTextW
SetWindowLongW
InvalidateRect
SetWindowPos
EndDialog
ReleaseDC
GetDlgItem
GetDC
GetWindowLongW
DrawFrameControl
FillRect
GetSysColor
InflateRect
FrameRect
IsWindow
CopyIcon
MessageBoxW
DefWindowProcW
SendMessageW
SendDlgItemMessageA
SendDlgItemMessageW
DialogBoxParamW

gdi32

DeleteObject
EnumFontFamiliesExW
CreatePen
SelectObject
Rectangle
Polygon
CreateSolidBrush

comdlg32

ChooseColorW

shell32

ShellExecuteA

msvcr90

_initterm
_encoded_null
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
isspace
atol
toupper
_strlwr
_strnicmp
clock
_lseek
strncmp
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_except_handler4_common
__clean_type_info_names_internal
memcpy
memset
_crt_debugger_hook
_stat32
_strerror
free
calloc
strncpy
??3@YAXPAX@Z
remove
?_open@@YAHPBDHH@Z
_write
_close
strrchr
_access
_findfirst32
_findnext32
_findclose
_filelength
_read
_time32
_stricmp
??2@YAPAXI@Z
strchr
atoi
strstr
memmove
_itoa
strtol

Exports

Exports

Load
MirandaPluginInfoEx
MirandaPluginInterfaces
Unload

Sections

.text
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
plugins/avs.dll
.dll windows:5 windows x86 arch:x86

f146eccf30fedf2c0dfb55368ab96941

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Work\FREO\miranda\bin9\Release Unicode\Plugins\avs.pdb

Imports

comctl32

ImageList_ReplaceIcon
ImageList_Create

kernel32

CloseHandle
GetVersion
GetTempPathA
DeleteFileA
GetTickCount
IsDebuggerPresent
SetUnhandledExceptionFilter
GetCurrentThreadId
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
DeleteCriticalSection
GetModuleHandleA
CreateEventW
LoadLibraryA
ResetEvent
GetTempFileNameA
EnterCriticalSection
lstrcpynA
CopyFileA
lstrcmpA
GetProcAddress
InterlockedExchange
CreateDirectoryA
SetThreadPriority
MultiByteToWideChar
ReadFile
LeaveCriticalSection
InitializeCriticalSection
IsBadReadPtr
SetEvent
WaitForSingleObject
GetFileSize
CreateFileA
lstrlenW
lstrlenA
UnhandledExceptionFilter
lstrcpynW

user32

MessageBoxA
MoveWindow
SendMessageA
GetSysColor
GetSysColorBrush
DestroyWindow
SetWindowTextA
SetDlgItemTextA
IsWindowVisible
GetFocus
SendDlgItemMessageW
SetForegroundWindow
SetFocus
GetDlgItem
CheckDlgButton
ShowWindow
IsDlgButtonChecked
CreateDialogParamW
FindWindowExW
MessageBoxW
EnableWindow
SetWindowTextW
RegisterClassExW
LoadCursorW
DefWindowProcW
KillTimer
EndPaint
SetTimer
FrameRect
FillRect
BeginPaint
SetWindowLongW
DrawTextW
SendMessageW
GetDlgCtrlID
InvalidateRect
GetWindowRect
GetParent
GetWindowLongW
ScreenToClient
GetClientRect
OffsetRect

gdi32

DeleteObject
GetStockObject
SetBkMode
SetStretchBltMode
CreateSolidBrush
GetObjectW
SetBitmapBits
CreateDIBSection
CreateCompatibleDC
BitBlt
GetBitmapBits
ExtSelectClipRgn
CreateRectRgn
CreateRoundRectRgn
SelectClipRgn
StretchBlt
DeleteDC
FrameRgn
GetClipRgn
SelectObject

comdlg32

GetOpenFileNameA

msvcr90

strncmp
memset
_time32
strncat
memmove
_strlwr
strstr
isalnum
strncpy
strrchr
iswalnum
realloc
??2@YAPAXI@Z
??3@YAXPAX@Z
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_stricmp
_malloc_crt
_initterm
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_except_handler4_common
__clean_type_info_names_internal
_crt_debugger_hook
_encoded_null
_initterm_e
free
malloc

Exports

Exports

Load
MirandaPluginInfoEx
MirandaPluginInterfaces
Unload

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
plugins/chat.dll
.dll windows:5 windows x86 arch:x86

b8d5ab2460e8d00f2125435688d39350

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Work\FREO\miranda\bin9\Release Unicode\Plugins\chat.pdb

Imports

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

shlwapi

PathIsDirectoryA

kernel32

EnterCriticalSection
DeleteCriticalSection
lstrcmpA
GlobalLock
GlobalAlloc
Sleep
GlobalUnlock
InterlockedCompareExchange
InterlockedExchange
LeaveCriticalSection
InitializeCriticalSection
lstrcpyW
CreateDirectoryA
lstrcatA
lstrcpynA
lstrcpyA
WideCharToMultiByte
GetVersion
GetModuleHandleA
GetModuleFileNameA
LoadLibraryA
MultiByteToWideChar
FreeLibrary
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
lstrcmpW
lstrlenA
GetCurrentThreadId
lstrcmpiW
lstrcmpiA
lstrlenW
lstrcpynW
QueryPerformanceCounter
GetTickCount
SetUnhandledExceptionFilter
IsDebuggerPresent

user32

GetKeyState
DrawTextW
SetCapture
SetActiveWindow
CloseClipboard
SetCursor
SetWindowPlacement
ClientToScreen
EmptyClipboard
GetMenuState
GetCursorPos
GetActiveWindow
CreateWindowExW
OpenClipboard
SetClipboardData
SetScrollInfo
CheckMenuItem
SetTimer
TrackPopupMenu
KillTimer
GetSubMenu
CreateMenu
GetMenuItemInfoW
ModifyMenuW
LoadCursorW
SendMessageA
GetCapture
GetWindowPlacement
CharLowerW
GetForegroundWindow
AppendMenuW
EnableMenuItem
RemoveMenu
FlashWindow
DefWindowProcW
SetForegroundWindow
CopyIcon
ShowWindow
CreateDialogParamW
GetWindowRect
IsWindowEnabled
DragDetect
GetWindowTextLengthW
ScreenToClient
GetFocus
SetWindowLongW
SendDlgItemMessageW
CheckDlgButton
SetWindowTextA
GetDlgItemTextW
EnableWindow
GetDlgItemTextA
SetWindowTextW
SetDlgItemTextA
GetMessagePos
RedrawWindow
DestroyIcon
LoadImageW
wsprintfA
MessageBoxA
LoadMenuW
GetSystemMetrics
DestroyMenu
DrawIconEx
GetScrollInfo
InvalidateRect
CharLowerA
EndPaint
DestroyWindow
FillRect
GetParent
GetClientRect
SetFocus
DrawEdge
BeginPaint
GetDC
DrawFocusRect
GetWindowLongW
ReleaseDC
GetDlgItem
GetSysColor
SetWindowPos
GetSysColorBrush
IsDlgButtonChecked
AdjustWindowRectEx
SetDlgItemTextW
IsIconic
PostMessageW
IsWindowVisible
SendMessageW
CallWindowProcW
SystemParametersInfoW
ReleaseCapture

gdi32

GetStockObject
SetBkMode
TextOutW
CreateFontIndirectW
DeleteDC
GetDeviceCaps
GetDIBits
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
SetTextColor
SetBkColor
DeleteObject
CreateSolidBrush

shell32

SHGetPathFromIDListA
ShellExecuteA
SHBrowseForFolderA

ole32

OleInitialize
OleUninitialize
StgCreateDocfile
CoGetMalloc

comctl32

ImageList_Destroy
ImageList_EndDrag
ImageList_DragMove
ImageList_BeginDrag
ImageList_DragLeave
ImageList_DragEnter
ImageList_GetIcon
ImageList_Create
ImageList_ReplaceIcon
ImageList_SetOverlayImage

msvcr90

isdigit
atoi
strchr
strstr
memmove
sscanf
_vsnwprintf
wcsftime
wcsstr
_localtime32
_wtoi
sprintf
_vswprintf
_snprintf
wcsncpy
_itoa
wcschr
_time32
strncpy
free
rewind
fputs
tolower
fopen
fwrite
ftell
fseek
fclose
_encode_pointer
_malloc_crt
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
__clean_type_info_names_internal
_unlock
__dllonexit
memcpy
_lock
_onexit
_except_handler4_common
_crt_debugger_hook
memset
fread

Exports

Exports

Load
MirandaPluginInfoEx
MirandaPluginInterfaces
Unload

Sections

.text
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
plugins/clist_classic.dll
.dll windows:5 windows x86 arch:x86

ece0c0162d7dfe1ff3a4b0986f588330

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Work\FREO\miranda\bin9\Release Unicode\Plugins\clist_classic.pdb

Imports

comctl32

ImageList_DrawEx
ImageList_Destroy

kernel32

DisableThreadLibraryCalls
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetVersion
MulDiv
GetProcAddress
GetModuleHandleA
lstrcmpA
lstrlenW
lstrlenA
lstrcmpiA
GetSystemTimeAsFileTime
LoadLibraryA

user32

SetMenu
SetParent
IsWindow
RedrawWindow
SetWindowPlacement
GetWindowPlacement
SetWindowTextW
IsIconic
CreateWindowExW
MessageBoxA
GetSysColor
SendMessageW
GetDC
ReleaseDC
SetWindowLongW
GetWindowLongW
GetDlgItem
CheckDlgButton
SendDlgItemMessageW
EnableWindow
IsDlgButtonChecked
GetParent
GetFocus
GetMessagePos
ScreenToClient
SetDlgItemTextA
GetDlgItemTextA
GetClientRect
FindWindowA
GetDlgItemTextW
GetDlgItemInt
wsprintfA
SetDlgItemTextW
SetWindowPos
ShowWindow
IsWindowVisible
DestroyWindow
DrawTextW
DrawEdge
DrawFrameControl
FillRect
IsRectEmpty

gdi32

SetDIBitsToDevice
GetDIBits
BitBlt
FillRgn
CreatePolygonRgn
ExtTextOutW
TextOutA
TextOutW
GetTextExtentPoint32A
DeleteDC
StretchBlt
GetObjectW
SetStretchBltMode
SetBkMode
GetNearestColor
CreateSolidBrush
GetTextMetricsW
CreateBitmap
CreateCompatibleDC
GetTextColor
SetTextColor
DeleteObject
GetTextExtentPoint32W
SelectObject
CreateFontIndirectW
GetDeviceCaps

comdlg32

GetOpenFileNameA

msvcr90

memset
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
_malloc_crt
_encode_pointer
free
malloc
sprintf
wcsncpy
strncpy
_except_handler4_common

Exports

Exports

CListInitialise
Load
MirandaPluginInfoEx
MirandaPluginInterfaces
Unload

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
plugins/dbx_3x.dll
.dll windows:5 windows x86 arch:x86

46b0db9630cbbe65536bfa12d983e222

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Work\FREO\miranda\bin9\Release Unicode\Plugins\dbx_3x.pdb

Imports

kernel32

CloseHandle
DeleteCriticalSection
InitializeCriticalSection
CreateFileA
ReadFile
TerminateProcess
GetCurrentProcess
EnterCriticalSection
LeaveCriticalSection
Sleep
SetFilePointer
WriteFile
FlushFileBuffers
HeapAlloc
HeapFree
HeapReAlloc
WideCharToMultiByte
MultiByteToWideChar
HeapCreate
HeapDestroy
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
InterlockedCompareExchange
InterlockedExchange

user32

KillTimer
MessageBoxA
SetTimer

msvcr90

memcmp
strlen
strcpy
_encode_pointer
_malloc_crt
free
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_crt_debugger_hook
strcmp
memcpy
strncpy
strrchr
memset
_beginthread

Exports

Exports

DatabasePluginInfo
Load
MirandaPluginInfoEx
MirandaPluginInterfaces
Unload

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
plugins/dbx_mmap.dll
.dll windows:5 windows x86 arch:x86

d64a7d4843f447c0eee8edeb55b566d5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Work\FREO\miranda\bin9\Release Unicode\Plugins\dbx_mmap.pdb

Imports

kernel32

SetFilePointer
WriteFile
CloseHandle
DeleteCriticalSection
InitializeCriticalSection
CreateFileA
ReadFile
TerminateProcess
GetCurrentProcess
EnterCriticalSection
GetLastError
LeaveCriticalSection
Sleep
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
FlushViewOfFile
GetSystemInfo
GetFileSize
HeapAlloc
HeapFree
FlushFileBuffers
HeapCreate
HeapDestroy
HeapReAlloc
WideCharToMultiByte
MultiByteToWideChar
GetCurrentProcessId
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
InterlockedExchange
GetSystemTimeAsFileTime

user32

KillTimer
MessageBoxW
SetTimer

msvcr90

_encode_pointer
_malloc_crt
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_crt_debugger_hook
calloc
memmove
_beginthread
strncpy
strrchr
memset
free
memcpy

Exports

Exports

DatabasePluginInfo
Load
MirandaPluginInfoEx
MirandaPluginInterfaces
Unload

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
plugins/icq.dll
.dll windows:5 windows x86 arch:x86

8ca130dc4fd8d379f4bf79536c0e650c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Work\FREO\miranda\bin9\Release Unicode\Plugins\icq.pdb

Imports

wsock32

shutdown
inet_addr
htonl

comctl32

ImageList_ReplaceIcon

kernel32

SetEvent
EnterCriticalSection
LeaveCriticalSection
GetLocalTime
GetCurrentThreadId
GetTickCount
SleepEx
InitializeCriticalSection
GetModuleFileNameW
Sleep
DeleteCriticalSection
LoadLibraryW
FreeLibrary
MultiByteToWideChar
GetACP
CopyFileA
FormatMessageW
EnumSystemCodePagesA
CloseHandle
GetModuleHandleA
GetProcAddress
GetCPInfo
WideCharToMultiByte
CreateFileA
CreateFileMappingW
GetFileSize
MapViewOfFile
UnmapViewOfFile
SetLastError
ResetEvent
WaitForSingleObjectEx
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
InterlockedCompareExchange
InterlockedExchange
CreateEventW
GetLastError
SetUnhandledExceptionFilter
IsDebuggerPresent
GetVersion
UnhandledExceptionFilter

user32

MessageBoxW
SetWindowTextW
EnableWindow
MoveWindow
MapDialogRect
GetWindowTextW
GetWindowTextLengthW
SetWindowTextA
CreateWindowExA
GetWindowRect
GetCapture
ShowWindow
SystemParametersInfoW
SetWindowPos
CreateWindowExW
UpdateWindow
OffsetRect
ClientToScreen
IsIconic
DrawEdge
GetSysColorBrush
FillRect
GetClientRect
DrawFrameControl
InflateRect
DrawTextW
SetFocus
SetForegroundWindow
GetClassNameA
GetFocus
SetDlgItemTextA
DialogBoxParamW
SetDlgItemTextW
EndDialog
KillTimer
DestroyWindow
SetTimer
CallWindowProcW
GetDlgCtrlID
PostMessageW
LoadStringA
IsWindow
CreateDialogParamW
GetKeyState
CopyIcon
GetSysColor
GetSystemMetrics
LoadImageW
GetDlgItemInt
SetDlgItemInt
CheckDlgButton
SetWindowLongW
GetWindowLongW
IsDlgButtonChecked
GetDlgItemTextA
SendDlgItemMessageW
GetParent
GetDlgItem
SendMessageW
GetWindowTextA

gdi32

SetTextColor
GetTextExtentPoint32W
SelectObject
GetObjectW
CreateFontIndirectW
DeleteObject

oleaut32

SystemTimeToVariantTime
VariantTimeToSystemTime

msvcr90

_unlock
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
_malloc_crt
_encode_pointer
?_wopen@@YAHPB_WHH@Z
_errno
_wmkdir
_wstat32i64
realloc
malloc
asctime
_localtime32
strncpy
_strdup
_vsnwprintf
_vsnprintf
strstr
_stricmp
_gmtime32
strftime
strncat
_ltoa
__iob_func
fprintf
??3@YAXPAX@Z
strtoul
_tzset
free
calloc
_access
sprintf
memmove
wcsrchr
memcpy
_itoa
toupper
_strlwr
_lseeki64
_stat32i64
strrchr
__dllonexit
_lock
_onexit
_except_handler4_common
_crt_debugger_hook
memset
__clean_type_info_names_internal
_write
_mkdir
_lseek
??2@YAPAXI@Z
_time32
rand
atoi
strncmp
wcsncpy
strtol
_strnicmp
srand
_close
_chdir
_stat32
?_open@@YAHPBDHH@Z
_read

Exports

Exports

Load
MirandaPluginInfoEx
MirandaPluginInterfaces
Unload

Sections

.text
Size: 199KB - Virtual size: 199KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
plugins/import.dll
.dll windows:5 windows x86 arch:x86

711f0c47535d4c39684a9d6746ad3dce

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Work\FREO\miranda\bin9\Release Unicode\Plugins\import.pdb

Imports

comctl32

InitCommonControlsEx

kernel32

lstrcmpiW
lstrcatW
FindNextFileW
FindClose
OpenMutexA
CloseHandle
GetTimeZoneInformation
CreateFileW
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
SetFilePointer
ReadFile
GetFileSize
GetModuleFileNameA
lstrcmpW
FindFirstFileW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
lstrcpyW
lstrlenW
lstrcmpA

user32

DestroyWindow
SetWindowPos
CharLowerA
DispatchMessageW
TranslateMessage
PeekMessageW
IsDlgButtonChecked
CheckDlgButton
EnableWindow
SetDlgItemTextW
MessageBoxW
GetDlgItemTextW
GetDlgItem
ShowWindow
SetTimer
SendDlgItemMessageW
wsprintfW
SetForegroundWindow
SetFocus
LoadIconW
CreateDialogParamW
IsWindow
PostMessageW
GetParent
SendMessageW

comdlg32

GetOpenFileNameW

advapi32

RegQueryValueExW
RegOpenKeyExW

msvcr90

_lock
__dllonexit
_unlock
__clean_type_info_names_internal
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_except_handler4_common
_crt_debugger_hook
_itoa
memcpy
_onexit
free
realloc
_ltoa
_wcsdup
wcsrchr
_waccess
_strdup
calloc
strchr
_time32
_wcsicmp
_localtime32
_mktime32
strrchr
_encode_pointer
_malloc_crt
_encoded_null
_decode_pointer
_initterm
_initterm_e
memset

Exports

Exports

Load
MirandaPluginInfoEx
MirandaPluginInterfaces
Unload

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
plugins/jabber.dll
.dll windows:5 windows x86 arch:x86

5ac732815c5533ca8b21d56488385f65

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Work\FREO\miranda\bin9\Release Unicode\Plugins\jabber.pdb

Imports

wsock32

getsockname
htonl
inet_addr
WSAGetLastError
ntohs

comctl32

CreateStatusWindowW
ImageList_SetOverlayImage
ImageList_Destroy
ImageList_Create
ImageList_ReplaceIcon

zlib

deflateEnd
inflateEnd
deflate
inflate
deflateInit_
inflateInit_

kernel32

Sleep
GetTickCount
InitializeCriticalSection
DeleteCriticalSection
lstrcpynW
lstrcmpiA
lstrcmpA
lstrcpyW
lstrlenW
lstrlenA
TerminateThread
FindFirstFileW
WideCharToMultiByte
FindClose
QueueUserAPC
GlobalLock
GlobalUnlock
CreateEventW
lstrcpynA
GetModuleHandleW
GetModuleFileNameW
GetVersionExW
GetSystemInfo
lstrcatW
GetTimeZoneInformation
GetTempPathA
GetTempFileNameA
CreateFileA
WriteFile
DeleteFileA
GetFileAttributesA
GetComputerNameW
SleepEx
lstrcatA
LoadLibraryW
FreeLibrary
GetLastError
CreateMutexW
ReleaseMutex
IsBadReadPtr
ReadFile
CopyFileA
GlobalAlloc
InterlockedIncrement
InterlockedDecrement
SetEvent
lstrcmpiW
lstrcpyA
GetVersion
CloseHandle
DuplicateHandle
GetCurrentThreadId
GetModuleHandleA
LoadLibraryA
EnterCriticalSection
GetProcAddress
lstrcmpW
LeaveCriticalSection
GetCurrentThread
WaitForSingleObject
GetCurrentProcess
InterlockedExchange
InterlockedCompareExchange
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentProcessId
GetModuleFileNameA
GetSystemTimeAsFileTime

user32

GetWindowDC
InflateRect
IsWindowEnabled
PtInRect
RegisterClassExW
LoadCursorW
GetWindowTextA
IsWindowUnicode
OffsetRect
ChildWindowFromPoint
wsprintfA
SetClipboardData
EmptyClipboard
CharUpperBuffW
CharLowerW
UpdateWindow
GetPropA
SetPropA
SendDlgItemMessageA
DefWindowProcW
EndPaint
BeginPaint
CopyIcon
IsWindowVisible
DrawFocusRect
GetDlgItemTextA
SendMessageA
MessageBeep
CheckMenuItem
GetForegroundWindow
IsWindow
ScreenToClient
GetMessagePos
LoadImageW
GetSystemMetrics
DestroyIcon
DrawIconEx
GetSysColorBrush
FillRect
CloseClipboard
GetClipboardData
OpenClipboard
CreateWindowExA
MapWindowPoints
DrawTextExW
SetRect
MoveWindow
CallWindowProcW
GetKeyState
GetNextDlgTabItem
wsprintfW
ClientToScreen
SetTimer
KillTimer
SetFocus
GetMenuItemCount
SetDlgItemTextA
PostThreadMessageW
DispatchMessageW
TranslateMessage
GetMessageW
MessageBoxW
InvalidateRect
GetScrollInfo
CheckDlgButton
GetWindowTextW
GetWindowTextLengthW
PostMessageW
GetAsyncKeyState
DialogBoxParamW
GetFocus
SendDlgItemMessageW
GetDlgItemTextW
GetDlgCtrlID
SetActiveWindow
EndDialog
SetWindowTextA
CreateDialogParamW
DestroyMenu
TrackPopupMenu
GetCursorPos
SetForegroundWindow
AppendMenuW
CreatePopupMenu
RedrawWindow
ScrollWindow
SystemParametersInfoW
SetWindowPos
SetWindowLongW
GetWindowLongW
GetParent
CreateWindowExW
ReleaseDC
DrawTextW
GetDC
SetWindowTextW
SetScrollPos
EnumChildWindows
SetDlgItemTextW
IsDlgButtonChecked
SetScrollRange
GetWindowRect
GetClientRect
ShowWindow
GetDlgItem
EnableWindow
DestroyWindow
MessageBoxA
GetSysColor
SendMessageW
mouse_event

gdi32

FillRgn
CreatePolygonRgn
SetBitmapBits
GetBitmapBits
DeleteDC
StretchBlt
CreateSolidBrush
GetStockObject
GetObjectW
CreateFontIndirectW
SelectObject
GetTextMetricsW
DeleteObject
SetBkMode
SetTextColor
GetTextExtentPoint32W
GetCurrentObject
CreateCompatibleDC
SetMapMode
GetMapMode
DPtoLP
SetStretchBltMode
TextOutW

comdlg32

GetSaveFileNameA
GetOpenFileNameA
GetSaveFileNameW

advapi32

GetUserNameW

shell32

ExtractIconExW
ExtractIconExA
ShellExecuteA

msvcr90

_access
strcat
realloc
memcpy_s
_i64toa
_wfopen
_purecall
_ltoa
_itoa
fwrite
toupper
swscanf
sprintf
_vsnwprintf
fread
fclose
_fileno
_filelength
fopen
__tzname
_wctime32
abs
_gmtime32
_tzset
_snprintf
atoi
wcsncmp
_wtol
wcstoul
rand
_itow
malloc
_chsize
?_wopen@@YAHPB_WHH@Z
_close
_read
?_open@@YAHPBDHH@Z
strncmp
_write
strtoul
strchr
strrchr
sscanf
_stat32
wcscat
_wcsdup
memcpy
_wcsicmp
isspace
iswspace
wcsstr
strstr
_strlwr
_wcsnicmp
wcstok
strncpy
_wtoi
strcmp
_unlock
strlen
strcpy
memmove
wcscpy
wcschr
??2@YAPAXI@Z
wcsncat
wcsncpy
_snwprintf
wcscmp
wcstol
wcslen
??3@YAXPAX@Z
srand
memset
calloc
free
_time32
_vsnprintf
qsort
isxdigit
isdigit
_mktime32
__timezone
memcmp
strtok
_vscwprintf
_encode_pointer
_malloc_crt
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
__dllonexit
_lock
_onexit
_except_handler4_common
_strdup

Exports

Exports

Load
MirandaPluginInfoEx
MirandaPluginInterfaces
Unload

Sections

.text
Size: 323KB - Virtual size: 322KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 204KB - Virtual size: 203KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
plugins/msn.dll
.dll windows:5 windows x86 arch:x86

da7624c8abecdf847b9ac11a08a80e64

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Work\FREO\miranda\bin9\Release Unicode\Plugins\msn.pdb

Imports

wsock32

sendto
ntohs
inet_addr
select
WSAGetLastError
gethostname
htonl
ioctlsocket
closesocket
getsockname
send
connect
socket
htons
gethostbyname
recv

comctl32

ImageList_ReplaceIcon
ImageList_Create
ImageList_Destroy

rpcrt4

UuidCreate
UuidToStringA
RpcStringFreeA
UuidFromStringA

kernel32

InterlockedCompareExchange
GetSystemTimeAsFileTime
IsDebuggerPresent
GetCurrentProcessId
QueryPerformanceCounter
GetTickCount
TerminateProcess
GetCurrentProcess
InterlockedExchange
UnhandledExceptionFilter
CreateSemaphoreW
GetCurrentThreadId
SetUnhandledExceptionFilter
CreateEventW
GetCurrentDirectoryA
DisableThreadLibraryCalls
InterlockedIncrement
ReleaseSemaphore
Sleep
lstrcmpA
SetEvent
WaitForSingleObject
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
WideCharToMultiByte
GetVersion
GetLocaleInfoA
MultiByteToWideChar
CreateMutexW
CloseHandle
FindFirstFileW
FindClose
GetLastError
FormatMessageA
GetModuleFileNameA
GetModuleFileNameW
ReleaseMutex
SleepEx
GetVersionExW

user32

DialogBoxParamW
CopyIcon
EndDialog
GetDlgItemInt
SetWindowTextA
SetDlgItemInt
GetDlgItemTextA
SendMessageA
IsDlgButtonChecked
GetFocus
CheckDlgButton
SetWindowTextW
SetDlgItemTextA
LoadImageW
DefWindowProcW
SetTimer
GetWindowTextA
ShowWindow
SetFocus
SetForegroundWindow
CreateDialogParamW
GetDlgItemTextW
SetDlgItemTextW
AppendMenuA
GetParent
GetWindowLongW
EnableWindow
GetDlgItem
SendDlgItemMessageW
GetSystemMetrics
SetWindowLongW
GetSysColor
SendMessageW
MessageBoxW
MessageBoxA
DestroyWindow
DestroyMenu
TrackPopupMenu
GetCursorPos
CreateWindowExW
AppendMenuW
CreatePopupMenu
KillTimer

comdlg32

GetOpenFileNameA

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA

shell32

ShellExecuteA

ole32

CoUninitialize
CoCreateInstance
CoInitialize

oleaut32

SysFreeString
SysAllocString

msvcr90

_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_encoded_null
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
atoi
_splitpath
_findclose
_findfirst32
_gmtime32
toupper
_strlwr
_lseeki64
clock
rename
remove
tolower
_strupr
_errno
_filelength
_stat32
?_open@@YAHPBDHH@Z
?_wopen@@YAHPB_WHH@Z
_snwprintf
_close
wcsncpy
_ui64toa
_access
_ultoa
_ltoa
iswdigit
wcschr
isxdigit
_itoa
isalnum
_write
_read
strrchr
sscanf
strtoul
_except_handler4_common
__clean_type_info_names_internal
_crt_debugger_hook
memset
memcpy
_initterm
isdigit
_strnicmp
??3@YAXPAX@Z
??2@YAPAXI@Z
_wtoi
_stricmp
_time32
_ltow
atol
sprintf
memmove
strncmp
free
isspace
malloc
strstr
strchr
_snprintf
strtol
strncpy
isalpha
_vsnprintf
_strdup
strspn
strcspn
realloc
calloc

Exports

Exports

Load
MirandaPluginInfoEx
MirandaPluginInterfaces
Unload

Sections

.text
Size: 139KB - Virtual size: 139KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
plugins/proto_JABBER.dll
.dll windows:5 windows x86 arch:x86

e7967d1240522f4789dba9fde77d3d82

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Work\FREO\miranda\bin9\Release\Icons\proto_JABBER.pdb

Imports

mfc90u

ord2251
ord4747
ord6803
ord4173
ord2206
ord4423
ord4448
ord6035
ord4179
ord1048
ord5548
ord6741
ord5830
ord4213
ord801
ord2087
ord3217
ord5674
ord5676
ord2447
ord4347
ord4996
ord5680
ord5663
ord6018
ord2771
ord2983
ord3112
ord4728
ord2966
ord3115
ord2774
ord2893
ord2764
ord4080
ord4081
ord4071
ord2891
ord4348
ord4905
ord4681
ord3670
ord4211
ord794
ord589
ord4043
ord6801
ord605
ord1274
ord321
ord1241
ord1239
ord1264
ord1180
ord1233
ord2084
ord391
ord1152
ord1273
ord1271
ord1145
ord1076
ord1137
ord322
ord802
ord1088

msvcr90

_decode_pointer
??2@YAPAXI@Z
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_crt_debugger_hook
?terminate@@YAXXZ
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
__CxxFrameHandler3

kernel32

SetUnhandledExceptionFilter
LocalAlloc
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
LocalFree
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
plugins/srmm.dll
.dll windows:5 windows x86 arch:x86

d2c8e0abbf1dc1adc53e339337b198d5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Work\FREO\miranda\bin9\Release Unicode\Plugins\srmm.pdb

Imports

comctl32

ImageList_ReplaceIcon
ImageList_Create
ImageList_DrawEx
ImageList_Remove
ImageList_GetIcon
ImageList_Destroy

kernel32

lstrcpyA
MultiByteToWideChar
lstrcmpA
FreeLibrary
LoadLibraryA
GetModuleHandleA
InitializeCriticalSection
LeaveCriticalSection
GetProcAddress
EnterCriticalSection
DeleteCriticalSection
CreateFileA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
lstrcpyW
FindFirstFileW
lstrlenA
GlobalLock
GetTickCount
GlobalAlloc
WideCharToMultiByte
lstrcpynW
GetFileAttributesW
lstrcmpW
lstrlenW
GlobalUnlock
FindClose
InterlockedExchange
lstrcatW
FindNextFileW
GetStringTypeW
GetShortPathNameW
CloseHandle
GetVersion

user32

SetTimer
CloseClipboard
GetWindowTextLengthW
SetCursor
SetWindowPlacement
DestroyWindow
ClientToScreen
DestroyIcon
GetSysColorBrush
wsprintfA
LoadImageW
FillRect
IsDlgButtonChecked
CheckDlgButton
SetDlgItemInt
GetFocus
GetDlgItemInt
DestroyCursor
MessageBoxA
SendMessageA
SetForegroundWindow
CopyRect
ScreenToClient
GetWindowDC
SendDlgItemMessageA
TrackPopupMenu
SetKeyboardState
SetCapture
PostMessageW
KillTimer
GetKeyState
GetSubMenu
DrawIconEx
GetParent
LoadCursorW
IsWindowEnabled
GetClientRect
SetFocus
GetWindowTextLengthA
GetDC
GetCapture
TranslateMessage
GetKeyboardState
GetForegroundWindow
IsWindow
GetWindowRect
SendMessageW
DispatchMessageW
GetMessagePos
CallWindowProcW
GetWindowPlacement
OffsetRect
GetScrollInfo
InvalidateRect
LoadMenuW
GetWindowLongW
GetWindowTextW
PeekMessageW
ReleaseDC
EnableMenuItem
EmptyClipboard
GetDlgItem
SetWindowLongW
RedrawWindow
SendDlgItemMessageW
GetSysColor
SetWindowPos
GetCursorPos
ShowWindow
CreateDialogParamW
GetActiveWindow
FlashWindow
CreateWindowExW
GetCursor
OpenClipboard
ReleaseCapture
GetSystemMetrics
IsWindowVisible
GetDlgItemTextW
SetDlgItemTextW
EnableWindow
SetClipboardData
DestroyMenu
GetDlgCtrlID
GetDlgItemTextA
SetWindowTextW
SetDlgItemTextA
SetScrollInfo
IsIconic

gdi32

CreatePen
SetStretchBltMode
GetObjectW
Rectangle
CreateCompatibleDC
SelectObject
DeleteObject
SetBkColor
StretchBlt
CreateFontIndirectW
DeleteDC
SetTextColor
GetTextExtentPoint32W
CreateCompatibleBitmap
GetDIBits
GetDeviceCaps
ExcludeClipRect
SetBkMode
CreateSolidBrush

shell32

DragQueryFileW

ole32

OleUninitialize
OleInitialize
StgCreateDocfile

msvcr90

sprintf
realloc
_strdup
strchr
calloc
memmove
_time32
_wcsdup
malloc
free
wcsncpy
strncpy
_encode_pointer
_malloc_crt
_encoded_null
_decode_pointer
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_crt_debugger_hook
memcpy
memset
_initterm

Exports

Exports

Load
MirandaPluginInfoEx
MirandaPluginInterfaces
Unload

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
uninstall.exe.nsis
zlib.dll
.dll windows:5 windows x86 arch:x86

4359fa3c9371fe0542ca9982f8d3b966

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Work\FREO\miranda\bin9\Release Unicode\zlib.pdb

Imports

msvcr90

fclose
clearerr
_fdopen
_encode_pointer
_malloc_crt
_encoded_null
_decode_pointer
_initterm
_initterm_e
fseek
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
ftell
fwrite
ferror
_vsnprintf
fprintf
fread
fopen
_errno
fflush
strerror
malloc
free
sprintf
_amsg_exit
fputc
memcpy
memset

kernel32

GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime

Exports

Exports

adler32
compress
compress2
compressBound
crc32
deflate
deflateBound
deflateCopy
deflateEnd
deflateInit2_
deflateInit_
deflateParams
deflatePrime
deflateReset
deflateSetDictionary
get_crc_table
gzclearerr
gzclose
gzdopen
gzeof
gzerror
gzflush
gzgetc
gzgets
gzopen
gzprintf
gzputc
gzputs
gzread
gzrewind
gzseek
gzsetparams
gztell
gzungetc
gzwrite
inflate
inflateBack
inflateBackEnd
inflateBackInit_
inflateCopy
inflateEnd
inflateInit2_
inflateInit_
inflateReset
inflateSetDictionary
inflateSync
inflateSyncPoint
uncompress
zError
zlibCompileFlags
zlibVersion

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

099c0646ea7282d232219f8807883be0

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4aCertificate

Key Usages

35:eb:63:3d:d2:ae:f0:f1:05:41:2c:09:d2:c3:b1:4eCertificate

Extended Key Usages

Key Usages

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7Certificate

Extended Key Usages

Key Usages

75:06:6a:fb:d8:c1:c8:b2:9c:a4:41:ce:12:e2:9a:4f:f3:eb:ed:24Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

Sections

.text Size: 23KB - Virtual size: 22KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 1024B - Virtual size: 107KB

.ndata Size: - Virtual size: 40KB

.rsrc Size: 28KB - Virtual size: 27KB

81638d02019c0bfcaaf23a9c69f2f12c

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 512B - Virtual size: 510B

.rdata Size: 1024B - Virtual size: 533B

.data Size: 512B - Virtual size: 20B

.rsrc Size: 5.0MB - Virtual size: 5.0MB

b1cd0d78f652ce5fc63f0879371af012

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

comdlg32

ole32

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 6KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 2KB - Virtual size: 10KB

.rsrc Size: 512B - Virtual size: 152B

.reloc Size: 1KB - Virtual size: 1KB

c63ba316533609531fac22f3877f847b

Code Sign

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate

61:47:52:ba:00:00:00:00:00:04Certificate

Extended Key Usages

Key Usages

61:49:7c:ed:00:00:00:00:00:05Certificate

Extended Key Usages

Key Usages

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

18:da:d1:9e:26:7d:e8:bb:4a:21:58:cd:cc:6b:3b:4a
Certificate

35:eb:63:3d:d2:ae:f0:f1:05:41:2c:09:d2:c3:b1:4e
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

75:06:6a:fb:d8:c1:c8:b2:9c:a4:41:ce:12:e2:9a:4f:f3:eb:ed:24
Signer

.text
Size: 23KB - Virtual size: 22KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 107KB

.ndata
Size: - Virtual size: 40KB

.rsrc
Size: 28KB - Virtual size: 27KB

.text
Size: 512B - Virtual size: 510B

.rdata
Size: 1024B - Virtual size: 533B

.data
Size: 512B - Virtual size: 20B

.rsrc
Size: 5.0MB - Virtual size: 5.0MB

.text
Size: 7KB - Virtual size: 6KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 10KB

.rsrc
Size: 512B - Virtual size: 152B

.reloc
Size: 1KB - Virtual size: 1KB

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

61:47:52:ba:00:00:00:00:00:04
Certificate

61:49:7c:ed:00:00:00:00:00:05
Certificate

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Certificate

61:46:9e:cb:00:04:00:00:00:65
Certificate

bc:02:7c:76:1b:ab:4d:a5:a9:3e:ef:53:79:b8:ae:b4:89:fe:1d:3d
Signer

.text
Size: 36KB - Virtual size: 35KB

.data
Size: 1024B - Virtual size: 6KB

.rsrc
Size: 2.6MB - Virtual size: 2.6MB

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 6KB - Virtual size: 5KB

.reloc
Size: 1KB - Virtual size: 1KB

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 11KB - Virtual size: 10KB

.reloc
Size: 1KB - Virtual size: 1KB

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 5KB - Virtual size: 4KB

.reloc
Size: 1KB - Virtual size: 1KB