Windows 2000 Professional[.]ISO

Sharing

Copy URL

Twitter E-mail

General

Target

Windows 2000 Professional.ISO
Size

369.5MB
MD5

369cd79f37e17e8c7e2b37fb75d59522
SHA1

d0b0ad044a5c7cb62553301f8c5ec19a9c636223
SHA256

08b11c3897eb38d1e6566a17cec5cdf2b3c620444e160e3db200a7e223aabbd8
SHA512

fd108daff3edb2c224470d3e35f558c8f858fc4fa6ba46ed8d5b2793339c58bd43ccc09f03c9ad9c89da9899bd5e9185d8028118b7c8c1b37acc12a00d5bd3e6
SSDEEP

6291456:NccrlgcTd2e/DwWqTTBqBdeBkYNtaXD14NhCUOwj47hxpqjPt:Nccr15JbwdfgQO1ShCIjOhK

Score

3^/10

Malware Config

Signatures

Unsigned PE 229 IoCs

Checks for missing Authenticode signature.

resource
unpack002/BOOTDISK/MAKEBT32.EXE
unpack002/I386/AUTOCHK.EXE
unpack002/I386/AUTOFMT.EXE
unpack002/I386/CABINET.DLL
unpack002/I386/DBGHELP.DLL
unpack002/I386/DSSBASE.DLL
unpack002/I386/EXPAND.EXE
unpack002/I386/HALBORG.DLL
unpack002/I386/HPMON.DLL
unpack002/I386/IMAGEHLP.DLL
unpack002/I386/KBDAL.DLL
unpack002/I386/KBDARME.DLL
unpack002/I386/KBDARMW.DLL
unpack002/I386/KBDAZE.DLL
unpack002/I386/KBDAZEL.DLL
unpack002/I386/KBDBE.DLL
unpack002/I386/KBDBLR.DLL
unpack002/I386/KBDBR.DLL
unpack002/I386/KBDBU.DLL
unpack002/I386/KBDCA.DLL
unpack002/I386/KBDCR.DLL
unpack002/I386/KBDCZ.DLL
unpack002/I386/KBDCZ1.DLL
unpack002/I386/KBDCZ2.DLL
unpack002/I386/KBDDA.DLL
unpack002/I386/KBDDV.DLL
unpack002/I386/KBDES.DLL
unpack002/I386/KBDEST.DLL
unpack002/I386/KBDFC.DLL
unpack002/I386/KBDFI.DLL
unpack002/I386/KBDFR.DLL
unpack002/I386/KBDGAE.DLL
unpack002/I386/KBDGEO.DLL
unpack002/I386/KBDGKL.DLL
unpack002/I386/KBDGR.DLL
unpack002/I386/KBDGR1.DLL
unpack002/I386/KBDHE.DLL
unpack002/I386/KBDHE220.DLL
unpack002/I386/KBDHE319.DLL
unpack002/I386/KBDHELA2.DLL
unpack002/I386/KBDHELA3.DLL
unpack002/I386/KBDHEPT.DLL
unpack002/I386/KBDHU.DLL
unpack002/I386/KBDHU1.DLL
unpack002/I386/KBDIC.DLL
unpack002/I386/KBDIR.DLL
unpack002/I386/KBDIT.DLL
unpack002/I386/KBDIT142.DLL
unpack002/I386/KBDKAZ.DLL
unpack002/I386/KBDLA.DLL
unpack002/I386/KBDLT.DLL
unpack002/I386/KBDLT1.DLL
unpack002/I386/KBDLV.DLL
unpack002/I386/KBDLV1.DLL
unpack002/I386/KBDNE.DLL
unpack002/I386/KBDNO.DLL
unpack002/I386/KBDPL.DLL
unpack002/I386/KBDPL1.DLL
unpack002/I386/KBDPO.DLL
unpack002/I386/KBDRO.DLL
unpack002/I386/KBDRU.DLL
unpack002/I386/KBDRU1.DLL
unpack002/I386/KBDSF.DLL
unpack002/I386/KBDSG.DLL
unpack002/I386/KBDSL.DLL
unpack002/I386/KBDSL1.DLL
unpack002/I386/KBDSP.DLL
unpack002/I386/KBDSW.DLL
unpack002/I386/KBDTAT.DLL
unpack002/I386/KBDTUF.DLL
unpack002/I386/KBDTUQ.DLL
unpack002/I386/KBDUK.DLL
unpack002/I386/KBDUR.DLL
unpack002/I386/KBDUS.DLL
unpack002/I386/KBDUSL.DLL
unpack002/I386/KBDUSR.DLL
unpack002/I386/KBDUSX.DLL
unpack002/I386/KBDUZB.DLL
unpack002/I386/KBDVNTC.DLL
unpack002/I386/KBDYCC.DLL
unpack002/I386/KBDYCL.DLL
unpack002/I386/MSVCP50.DLL
unpack002/I386/MSVCRT.DLL
unpack002/I386/NTDLL.DLL
unpack002/I386/NTFS40.SYS
unpack002/I386/NTSD.EXE
unpack002/I386/NTSDEXTS.DLL
unpack002/I386/PIDGEN.DLL
unpack002/I386/REGEDIT.EXE
unpack002/I386/RSABASE.DLL
unpack002/I386/SCHANNEL.DLL
unpack002/I386/SGLFB.DLL
unpack002/I386/SGLFB.SYS
unpack002/I386/SPCMDCON.SYS
unpack002/I386/SPDWNW2K.EXE
unpack002/I386/SYSTEM32/NTDLL.DLL
unpack002/I386/SYSTEM32/SMSS.EXE
unpack002/I386/TELNET.EXE
unpack002/I386/UNIPROC/NTDLL.DLL
unpack002/I386/USETUP.EXE
unpack002/I386/WIN9XMIG/ACROBAT/FILES/FILE1
unpack002/I386/WIN9XMIG/ACROBAT/FILES/FILE10
unpack002/I386/WIN9XMIG/ACROBAT/FILES/FILE11
unpack002/I386/WIN9XMIG/ACROBAT/FILES/FILE12
unpack002/I386/WIN9XMIG/ACROBAT/FILES/FILE13
unpack002/I386/WIN9XMIG/ACROBAT/FILES/FILE3
unpack002/I386/WIN9XMIG/ACROBAT/FILES/FILE5
unpack002/I386/WIN9XMIG/ACROBAT/FILES/FILE6
unpack002/I386/WIN9XMIG/ACROBAT/FILES/FILE7
unpack002/I386/WIN9XMIG/ACROBAT/FILES/FILE8
unpack002/I386/WIN9XMIG/ACROBAT/FILES/FILE9
unpack002/I386/WIN9XMIG/ACROBAT/MIGRATE.DLL
unpack002/I386/WIN9XMIG/CMMGR/MIGRATE.DLL
unpack002/I386/WIN9XMIG/EASTMAN/MIGRATE.DLL
unpack002/I386/WIN9XMIG/FAX/AWDVSTUB.EXE
unpack002/I386/WIN9XMIG/FAX/MIGRATE.DLL
unpack002/I386/WIN9XMIG/HPTOOLS/MIGRATE.DLL
unpack002/I386/WIN9XMIG/IBMAV/MIGRATE.DLL
unpack002/I386/WIN9XMIG/ICM/MIGRATE.DLL
unpack002/I386/WIN9XMIG/IEMIG/MIGRATE.DLL
unpack002/I386/WIN9XMIG/INOCULAN/INO_FLPY.SYS
unpack002/I386/WIN9XMIG/INOCULAN/INO_FLTR.SYS
unpack002/I386/WIN9XMIG/INOCULAN/MIGRATE.DLL
unpack002/I386/WIN9XMIG/INOCULAN/_INOC/ALERTVER.DLL
unpack002/I386/WIN9XMIG/INOCULAN/_INOC/INSTHLPR.EXE
unpack002/I386/WIN9XMIG/INOCULAN/_INOC/LICENSE.DLL
unpack002/I386/WIN9XMIG/INOCULAN/_INOC/MIRSETUP.EXE
unpack002/I386/WIN9XMIG/INOCULAN/_INOC/SETUP.EX_
unpack002/I386/WIN9XMIG/MAPI/DLL/MIGRATE.DLL
unpack002/I386/WIN9XMIG/MAPI/DLL/MKNTFRMCACHE.EXE
unpack002/I386/WIN9XMIG/MAPI/DLL/MSPATCHA.DLL
unpack002/I386/WIN9XMIG/MODEMS/MIGRATE.DLL
unpack002/I386/WIN9XMIG/MSGQUEUE/MIGRATE.DLL
unpack002/I386/WIN9XMIG/MSI/MIGRATE.DLL
unpack002/I386/WIN9XMIG/MSI/MSI9XMIG.DLL
unpack002/I386/WIN9XMIG/MSI/MSINTMIG.DLL
unpack002/I386/WIN9XMIG/MSP/MIGRATE.DLL
unpack002/I386/WIN9XMIG/NAV/MIGAPP.EXE
unpack002/I386/WIN9XMIG/NAV/MIGRATE.DLL
unpack002/I386/WIN9XMIG/NAV/NAVINST95.DLL
unpack002/I386/WIN9XMIG/NECKBD/MIGRATE.DLL
unpack002/I386/WIN9XMIG/NECPA/MIGRATE.DLL
unpack002/I386/WIN9XMIG/NECWPS/MIGRATE.DLL
unpack002/I386/WIN9XMIG/OCTOPUS/MIGRATE.DLL
unpack002/I386/WIN9XMIG/OEWAB/MIGRATE.DLL
unpack002/I386/WIN9XMIG/PCANYW/AWDDI.DLL
unpack002/I386/WIN9XMIG/PCANYW/AWGINA.DLL
unpack002/I386/WIN9XMIG/PCANYW/AWMON.DLL
unpack002/I386/WIN9XMIG/PCANYW/AWVID5.DLL
unpack002/I386/WIN9XMIG/PCANYW/DRIVERS/AW_HOST5.SYS
unpack002/I386/WIN9XMIG/PCANYW/DRIVERS/GERNUWA.SYS
unpack002/I386/WIN9XMIG/PCANYW/MIGRATE.DLL
unpack002/I386/WIN9XMIG/PCANYW/PCANYLOG.DLL
unpack002/I386/WIN9XMIG/PCANYW/V8/AWDDI.DLL
unpack002/I386/WIN9XMIG/PCANYW/V8/AWGINA.DLL
unpack002/I386/WIN9XMIG/PCANYW/V8/AWMON.DLL
unpack002/I386/WIN9XMIG/PCANYW/V8/AWVID5.DLL
unpack002/I386/WIN9XMIG/PCANYW/V8/DRIVERS/AW_HOST.SYS
unpack002/I386/WIN9XMIG/PCANYW/V8/DRIVERS/GERNUWA.SYS
unpack002/I386/WIN9XMIG/PCANYW/V8/PCANYLOG.DLL
unpack002/I386/WIN9XMIG/PRINT/MIGRATE.DLL
unpack002/I386/WIN9XMIG/PWS/MIGRATE.DLL
unpack002/I386/WIN9XMIG/RUMBA/MIGRATE.DLL
unpack002/I386/WIN9XMIG/SETUP/JPEGIM32.FLT
unpack002/I386/WIN9XMIG/SETUP/MIGRATE.DLL
unpack002/I386/WIN9XMIG/TRANSACT/MIGRATE.DLL
unpack002/I386/WIN9XUPG/CABINET.DLL
unpack002/I386/WIN9XUPG/CFGMGR32.DLL
unpack002/I386/WIN9XUPG/IMAGEHLP.DLL
unpack002/I386/WIN9XUPG/ISMIG.DLL
unpack002/I386/WIN9XUPG/MSDBI.DLL
unpack002/I386/WIN9XUPG/MSVCRT.DLL
unpack002/I386/WIN9XUPG/SETUPAPI.DLL
unpack002/I386/WIN9XUPG/W95UPG.DLL
unpack002/I386/WINNT32.EXE
unpack002/I386/WINNT32A.DLL
unpack002/I386/WINNT32U.DLL
unpack002/I386/WINNTUPG/APMUPGRD.DLL
unpack002/I386/WINNTUPG/BOSCOMP.DLL
unpack002/I386/WINNTUPG/CFGMGR32.DLL
unpack002/I386/WINNTUPG/CLUSCOMP.DLL
unpack002/I386/WINNTUPG/FSFILTER.DLL
unpack002/I386/WINNTUPG/INPUPGRD.DLL
unpack002/I386/WINNTUPG/MS/MODEMSHR/MDMSHRUP.DLL
unpack002/I386/WINNTUPG/MS/SNA/IBMMGUG.DLL
unpack002/I386/WINNTUPG/MS/SNA/NTSNAUPG.DLL
unpack002/I386/WINNTUPG/MS/SNA/SNADLCUG.DLL
unpack002/I386/WINNTUPG/MSMQCOMP.DLL
unpack002/I386/WINNTUPG/MSVCP50.DLL
unpack002/I386/WINNTUPG/MSVCRT.DLL
unpack002/I386/WINNTUPG/NETUPGRD.DLL
unpack002/I386/WINNTUPG/NTDSUPG.DLL
unpack002/I386/WINNTUPG/OEM/DIGI/ASYNC/DGUPGRD.DLL
unpack002/I386/WINNTUPG/OEM/DIGI/ISDN/BRI/DIGIUPG.DLL
unpack002/I386/WINNTUPG/OEM/DIGI/ISDN/PRI/DIGPRIUP.DLL
unpack002/I386/WINNTUPG/OEM/DIGI/REALPORT/DGRPUPG.DLL
unpack002/I386/WINNTUPG/OEM/EICON/DINT5UPG.DLL
unpack002/I386/WINNTUPG/OEM/EQN/EQNUPGRD.DLL
unpack002/I386/WINNTUPG/OEM/NOVELL/LOCWIN32.DLL
unpack002/I386/WINNTUPG/OEM/NOVELL/MIGRATE.DLL
unpack002/I386/WINNTUPG/OEM/NOVELL/NWMIGNT.DLL
unpack002/I386/WINNTUPG/OEM/SPX/MPS/SPXUPGRD.DLL
unpack002/I386/WINNTUPG/OEM/TIGERJET/TJUPG.DLL
unpack002/I386/WINNTUPG/SETUPAPI.DLL
unpack002/I386/WINNTUPG/VIDUPGRD.DLL
unpack002/SETUP.EXE
unpack002/SUPPORT/APCOMPAT.EXE
unpack002/VALUEADD/3RDPARTY/MGMT/CITRIX/ENG/ICA16/DISK1/CUDHLPW.DLL
unpack002/VALUEADD/3RDPARTY/MGMT/CITRIX/ENG/ICA32/DISK1/CUDHLPN.DLL
unpack002/VALUEADD/3RDPARTY/MGMT/INTELDMI/DMISP/DMISP.EXE
unpack002/VALUEADD/3RDPARTY/SECURITY/SDTI/SETUP.EXE
unpack002/VALUEADD/MSFT/MGMT/ADC/ADC.EXE
unpack002/VALUEADD/MSFT/MGMT/ADC/ADCADMIN.DLL
unpack002/VALUEADD/MSFT/MGMT/ADC/ADCPERF.DLL
unpack002/VALUEADD/MSFT/MGMT/ADC/ADDRESS.DLL
unpack002/VALUEADD/MSFT/MGMT/ADC/CCMPROXY.DLL
unpack002/VALUEADD/MSFT/MGMT/ADC/EDSSTUB.EXE
unpack002/VALUEADD/MSFT/MGMT/ADC/ESCPRINT.DLL
unpack002/VALUEADD/MSFT/MGMT/ADC/EXCHMEM.DLL
unpack002/VALUEADD/MSFT/MGMT/ADC/INPROXY.DLL
unpack002/VALUEADD/MSFT/MGMT/ADC/MAILDSMX.DLL
unpack002/VALUEADD/MSFT/MGMT/ADC/PCPROXY.DLL
unpack002/VALUEADD/MSFT/MGMT/ADC/RES/ADCLOG.DLL
unpack002/VALUEADD/MSFT/MGMT/ADC/SETUP.EXE
unpack002/VALUEADD/MSFT/MGMT/ADC/X400PROX.DLL
unpack002/VALUEADD/MSFT/MGMT/IAS/IASNT4.EXE
unpack002/VALUEADD/MSFT/MGMT/MS_SMS/SMSMAN.EXE
unpack002/VALUEADD/MSFT/MGMT/PBA/PBAINST.EXE
unpack002/VALUEADD/MSFT/MGMT/WBEMODBC/SETUP.EXE

Files

Windows 2000 Professional.ISO
.iso
out.iso
.iso
AUTORUN.INF
BOOTDISK/CDBOOT1.IMG
BOOTDISK/CDBOOT2.IMG
BOOTDISK/CDBOOT3.IMG
BOOTDISK/CDBOOT4.IMG
BOOTDISK/MAKEBOOT.EXE
BOOTDISK/MAKEBT32.EXE
.exe windows:5 windows x86 arch:x86

441a0f5055c10c4803e7338f795232ec

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

SetErrorMode
WriteFile
ReadFile
CreateFileW
LocalFree
FormatMessageW
GetLastError
CloseHandle
DeviceIoControl
GetFileAttributesW
SetThreadLocale
GetUserDefaultLCID
GetConsoleOutputCP
WriteConsoleW
lstrlenW
GetStdHandle
GetVersion
ExitProcess
HeapFree
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
PeekConsoleInputA
GetNumberOfConsoleInputEvents
TerminateProcess
GetCurrentProcess
InterlockedDecrement
InterlockedIncrement
HeapAlloc
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
GetCommandLineW
GetCommandLineA
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
GetDriveTypeW
SetLastError
TlsGetValue
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
GetModuleFileNameA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
CreateFileA
WriteConsoleA
GetProcAddress
GetModuleHandleA
LoadLibraryA
SetFilePointer
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
GetCPInfo
GetLocaleInfoA
CompareStringA
CompareStringW
GetLocaleInfoW
SetEnvironmentVariableW
SetStdHandle
FlushFileBuffers
HeapReAlloc

user32

wvsprintfW
LoadStringW

Sections

.text
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
CDROM_IP.5
CDROM_NT.5
DISCOVER/AUDIO/COMPATBL.ASF
DISCOVER/AUDIO/EASY2MAN.ASF
DISCOVER/AUDIO/EASY2USE.ASF
DISCOVER/AUDIO/POWERFUL.ASF
DISCOVER/AUDIO/WHATSNEW.ASF
DISCOVER/COMPATBL/ANIMAT/MULTMON/CONAMON1.JPG
.jpg
DISCOVER/COMPATBL/ANIMAT/MULTMON/CONAMON2.JPG
.jpg
DISCOVER/COMPATBL/ANIMAT/MULTMON/CONAMON3.JPG
.jpg
DISCOVER/COMPATBL/ANIMAT/MULTMON/MULTI.HTM
.html .js polyglot
DISCOVER/COMPATBL/ANIMAT/MULTMON/XL_SHEET.JPG
.jpg
DISCOVER/COMPATBL/AUDIO/DRVRSUPP.ASF
DISCOVER/COMPATBL/AUDIO/LGCYSUPP.ASF
DISCOVER/COMPATBL/AUDIO/MULTMED.ASF
DISCOVER/COMPATBL/AUDIO/MULTMON.ASF
DISCOVER/COMPATBL/AUDIO/NTWKSUPP.ASF
DISCOVER/COMPATBL/AUDIO/NWHRDWR.ASF
DISCOVER/COMPATBL/COMPMAIN.HTM
.html
DISCOVER/COMPATBL/DEFAULT.HTM
.html
DISCOVER/COMPATBL/DRVRSUPP/DIG_SIGN.HTM
.html
DISCOVER/COMPATBL/DRVRSUPP/DRVSUPMN.HTM
.html
DISCOVER/COMPATBL/DRVRSUPP/MORE_DRV.HTM
.html
DISCOVER/COMPATBL/IMAGES/COMPHDR.GIF
.gif
DISCOVER/COMPATBL/IMAGES/COMPHDRO.GIF
.gif
DISCOVER/COMPATBL/IMAGES/WATRCUBE.GIF
.gif
DISCOVER/COMPATBL/LGCYSUPP/HARDWARE.HTM
.html
DISCOVER/COMPATBL/LGCYSUPP/LGCYMAIN.HTM
.html
DISCOVER/COMPATBL/LGCYSUPP/SOFTWARE.HTM
.html
DISCOVER/COMPATBL/MULTSUPP/DVD.HTM
.html
DISCOVER/COMPATBL/MULTSUPP/DX6.HTM
.html
DISCOVER/COMPATBL/MULTSUPP/IEEE1394.HTM
.html
DISCOVER/COMPATBL/MULTSUPP/IMAGEMAN.HTM
.html
DISCOVER/COMPATBL/MULTSUPP/MULTMAIN.HTM
.html
DISCOVER/COMPATBL/MULTSUPP/MULTMON.HTM
.html
DISCOVER/COMPATBL/NEWHRDWR/ACPI.HTM
.html
DISCOVER/COMPATBL/NEWHRDWR/HISPEED.HTM
.html
DISCOVER/COMPATBL/NEWHRDWR/NWHDWRMN.HTM
.html
DISCOVER/COMPATBL/NEWHRDWR/USB.HTM
.html
DISCOVER/COMPATBL/NTWKSUPP/NETSUPMN.HTM
.html
DISCOVER/COMPATBL/NTWKSUPP/NOVELL.HTM
.html
DISCOVER/COMPATBL/NTWKSUPP/UNIX.HTM
.html
DISCOVER/COMPATBL/NTWKSUPP/WNPLTFRM.HTM
.html
DISCOVER/COMPATBL/NTWKSUPP/WORKGRPS.HTM
.html
DISCOVER/DEFAULT.HTM
.html
DISCOVER/EASY2MAN/ADMIN/ADDREMOV.HTM
.html
DISCOVER/EASY2MAN/ADMIN/ADMNMAIN.HTM
.html
DISCOVER/EASY2MAN/ADMIN/FORADMIN.HTM
.html
DISCOVER/EASY2MAN/ADMIN/IMAGES/ADDREMVE.JPG
.jpg
DISCOVER/EASY2MAN/ADMIN/INTMRROR.HTM
.html
DISCOVER/EASY2MAN/ADMIN/MNGCONS.HTM
.html
DISCOVER/EASY2MAN/ADMIN/RMTADMIN.HTM
.html
DISCOVER/EASY2MAN/ANIMAT/AUDIO/JOINDMN.ASF
DISCOVER/EASY2MAN/ANIMAT/AUDIO/JOINDMNC.ASF
DISCOVER/EASY2MAN/ANIMAT/AUDIO/MMC.ASF
DISCOVER/EASY2MAN/ANIMAT/AUDIO/MMCCHOP.ASF
DISCOVER/EASY2MAN/ANIMAT/JNDOMWIZ/CHGPSH.GIF
.gif
DISCOVER/EASY2MAN/ANIMAT/JNDOMWIZ/CONTRL.GIF
.gif
DISCOVER/EASY2MAN/ANIMAT/JNDOMWIZ/JOINDOMN.HTM
.html .js polyglot
DISCOVER/EASY2MAN/ANIMAT/JNDOMWIZ/NETIDENT.GIF
.gif
DISCOVER/EASY2MAN/ANIMAT/JNDOMWIZ/NETWORK2.GIF
.gif
DISCOVER/EASY2MAN/ANIMAT/JNDOMWIZ/NETWORK3.GIF
.gif
DISCOVER/EASY2MAN/ANIMAT/JNDOMWIZ/NETWORK4.GIF
.gif
DISCOVER/EASY2MAN/ANIMAT/JNDOMWIZ/NETWORK5.GIF
.gif
DISCOVER/EASY2MAN/ANIMAT/JNDOMWIZ/NETWORK6.GIF
.gif
DISCOVER/EASY2MAN/ANIMAT/JNDOMWIZ/NEXT.GIF
.gif
DISCOVER/EASY2MAN/ANIMAT/JNDOMWIZ/OKNRM.GIF
.gif
DISCOVER/EASY2MAN/ANIMAT/JNDOMWIZ/POINTER.GIF
.gif
DISCOVER/EASY2MAN/ANIMAT/JNDOMWIZ/SYSICON.GIF
.gif
DISCOVER/EASY2MAN/ANIMAT/JNDOMWIZ/SYSTPROP.GIF
.gif
DISCOVER/EASY2MAN/ANIMAT/MNGMTCON/COMPMAN1.GIF
.gif
DISCOVER/EASY2MAN/ANIMAT/MNGMTCON/CONSOLE.HTM
.html .js polyglot
DISCOVER/EASY2MAN/ANIMAT/MNGMTCON/DISKM.GIF
.gif
DISCOVER/EASY2MAN/ANIMAT/MNGMTCON/POINTER.GIF
.gif
DISCOVER/EASY2MAN/ANIMAT/MNGMTCON/RUNLIT.GIF
.gif
DISCOVER/EASY2MAN/ANIMAT/MNGMTCON/RUNMMC.GIF
.gif
DISCOVER/EASY2MAN/ANIMAT/MNGMTCON/SHDWNLIT.GIF
.gif
DISCOVER/EASY2MAN/ANIMAT/MNGMTCON/STOREXP.GIF
.gif
DISCOVER/EASY2MAN/ANIMAT/MNGMTCON/STRTMENU.GIF
.gif
DISCOVER/EASY2MAN/ANIMAT/MNGMTCON/STRTPSH.GIF
.gif
DISCOVER/EASY2MAN/ANIMAT/MNGMTCON/TITLE1.GIF
.gif
DISCOVER/EASY2MAN/AUDIO/2ADMIN.ASF
DISCOVER/EASY2MAN/AUDIO/2FRADMIN.ASF
DISCOVER/EASY2MAN/AUDIO/FORADMIN.ASF
DISCOVER/EASY2MAN/AUDIO/SETUP.ASF
DISCOVER/EASY2MAN/AUDIO/SETUPMAN.ASF
DISCOVER/EASY2MAN/AUDIO/SUPPORT.ASF
DISCOVER/EASY2MAN/DEFAULT.HTM
.html
DISCOVER/EASY2MAN/ETM_MAIN.HTM
.html
DISCOVER/EASY2MAN/IMAGES/ETMHDR.GIF
.gif
DISCOVER/EASY2MAN/IMAGES/ETMHDROV.GIF
.gif
DISCOVER/EASY2MAN/IMAGES/WATRFOLD.GIF
.gif
DISCOVER/EASY2MAN/SETUP/FORADMIN.HTM
.html
DISCOVER/EASY2MAN/SETUP/JNDOMWIZ.HTM
.html
DISCOVER/EASY2MAN/SETUP/SETMAIN.HTM
.html
DISCOVER/EASY2MAN/SETUP/SETMNWIZ.HTM
.html
DISCOVER/EASY2MAN/SETUP/SYSPREP.HTM
.html
DISCOVER/EASY2MAN/SETUP/WIN9XUPG.HTM
.html
DISCOVER/EASY2MAN/SUPPORT/PREWARN.HTM
.html
DISCOVER/EASY2MAN/SUPPORT/SAFEMODE.HTM
.html
DISCOVER/EASY2MAN/SUPPORT/SUPPMAIN.HTM
.html
DISCOVER/EASY2MAN/SUPPORT/WINUPDT.HTM
.html
DISCOVER/EASY2MAN/SUPPORT/Y2KEURO.HTM
.html
DISCOVER/EASY2USE/ANIMAT/ACTIVDIR/ACTDIR1.JPG
.jpg
DISCOVER/EASY2USE/ANIMAT/ACTIVDIR/ACTDIR2.JPG
.jpg
DISCOVER/EASY2USE/ANIMAT/ACTIVDIR/ACTDIR3.JPG
.jpg
DISCOVER/EASY2USE/ANIMAT/ACTIVDIR/ACTIVE.HTM
.html .js polyglot
DISCOVER/EASY2USE/ANIMAT/ASSOCIAT/ANYPROG.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/ASSOCIAT/ASAGENDA.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/ASSOCIAT/ASMENU.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/ASSOCIAT/ASOPEN.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/ASSOCIAT/ASPRINT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/ASSOCIAT/ASSOCIAT.HTM
.html .js polyglot
DISCOVER/EASY2USE/ANIMAT/ASSOCIAT/EXPLGRAY.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/ASSOCIAT/EXPLORER.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/ASSOCIAT/IBEAM.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/ASSOCIAT/MENU2.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/ASSOCIAT/MYDOCHOT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/ASSOCIAT/NOTEPAD.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/ASSOCIAT/OKLIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/ASSOCIAT/OKPSH.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/ASSOCIAT/OPENSTAT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/ASSOCIAT/OPENWITH.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/ASSOCIAT/OPENWPOP.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/ASSOCIAT/OPENWSTA.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/ASSOCIAT/POINTER.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/ASSOCIAT/PRINSTAT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/ASSOCIAT/QUIKVIEW.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/ASSOCIAT/STATUPD1.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/ASSOCIAT/VIEWSTAT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/ASSOCIAT/WORD97.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/ASSOCIAT/WORD97HT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/ASSOCIAT/WORD97LT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/ASSOCIAT/WORDPAD.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/AUDIO/ACTDIRSR.ASF
DISCOVER/EASY2USE/ANIMAT/AUDIO/ASSOCIAT.ASF
DISCOVER/EASY2USE/ANIMAT/AUDIO/CONSPOWR.ASF
DISCOVER/EASY2USE/ANIMAT/AUDIO/CUSTTOOL.ASF
DISCOVER/EASY2USE/ANIMAT/AUDIO/FILEOPEN.ASF
DISCOVER/EASY2USE/ANIMAT/AUDIO/HISTFOLD.ASF
DISCOVER/EASY2USE/ANIMAT/AUDIO/ICW.ASF
DISCOVER/EASY2USE/ANIMAT/AUDIO/IMAGE.ASF
DISCOVER/EASY2USE/ANIMAT/AUDIO/INETCONW.ASF
DISCOVER/EASY2USE/ANIMAT/AUDIO/INREDSUP.ASF
DISCOVER/EASY2USE/ANIMAT/AUDIO/INTESRCH.ASF
DISCOVER/EASY2USE/ANIMAT/AUDIO/MYNET.ASF
DISCOVER/EASY2USE/ANIMAT/AUDIO/NTWRKPLC.ASF
DISCOVER/EASY2USE/ANIMAT/AUDIO/STRTMENU.ASF
DISCOVER/EASY2USE/ANIMAT/AUDIO/SYNCMNGR.ASF
DISCOVER/EASY2USE/ANIMAT/AUTIRSUP/INFRARED.HTM
.html .js polyglot
DISCOVER/EASY2USE/ANIMAT/AUTIRSUP/INFRRED1.JPG
.jpg
DISCOVER/EASY2USE/ANIMAT/AUTIRSUP/INFRRED2.JPG
.jpg
DISCOVER/EASY2USE/ANIMAT/AUTIRSUP/INFRRED3.JPG
.jpg
DISCOVER/EASY2USE/ANIMAT/AUTIRSUP/INFRRED4.JPG
.jpg
DISCOVER/EASY2USE/ANIMAT/AUTIRSUP/INFRRED5.JPG
.jpg
DISCOVER/EASY2USE/ANIMAT/CONSPOWR/ALWAYLIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/CONSPOWR/APPLYNRM.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/CONSPOWR/CONSERV.HTM
.html .js polyglot
DISCOVER/EASY2USE/ANIMAT/CONSPOWR/CPANEL.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/CONSPOWR/CPNLGREY.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/CONSPOWR/CPSTOV1.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/CONSPOWR/HMDPNRM.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/CONSPOWR/HMNRM.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/CONSPOWR/MAXLIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/CONSPOWR/MINLIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/CONSPOWR/PMICOLIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/CONSPOWR/POINTER.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/CONSPOWR/PORTLIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/CONSPOWR/PRESLIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/CONSPOWR/PWRSCH1.GIF
DISCOVER/EASY2USE/ANIMAT/CONSPOWR/SCHMOV1.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/CONSPOWR/SCHMOV2.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/CONSPOWR/TIMOV1.GIF
DISCOVER/EASY2USE/ANIMAT/CUSTLBRS/ADMENITM.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/CUSTLBRS/AVLTLMP.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/CUSTLBRS/AVLTLMP2.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/CUSTLBRS/CLOSELIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/CUSTLBRS/CURTLMP.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/CUSTLBRS/CURTLMP2.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/CUSTLBRS/CUSTALIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/CUSTLBRS/CUSTCLDE.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/CUSTLBRS/CUSTMENU.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/CUSTLBRS/CUSTMITM.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/CUSTLBRS/CUSTOM1.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/CUSTLBRS/CUSTOM2.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/CUSTLBRS/CUSTOMIZ.HTM
.html .js polyglot
DISCOVER/EASY2USE/ANIMAT/CUSTLBRS/CUSTSP2D.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/CUSTLBRS/CUSTSPD.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/CUSTLBRS/CUSTSPD2.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/CUSTLBRS/CUSTSPN2.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/CUSTLBRS/CUSTSPNO.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/CUSTLBRS/EXPLGRAY.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/CUSTLBRS/EXPLLST.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/CUSTLBRS/EXPLORER.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/CUSTLBRS/HISTDE.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/CUSTLBRS/HISTLIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/CUSTLBRS/IBEAM.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/CUSTLBRS/LKMENITM.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/CUSTLBRS/MAP.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/CUSTLBRS/MAPDRDE.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/CUSTLBRS/MAPDRLIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/CUSTLBRS/MAPLIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/CUSTLBRS/MVUPLIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/CUSTLBRS/MVUPN.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/CUSTLBRS/MVUPNDE.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/CUSTLBRS/POINTER.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/CUSTLBRS/REARRUPD.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/CUSTLBRS/REMOVDE.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/CUSTLBRS/REMOVHI.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/CUSTLBRS/REMOVUP.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/CUSTLBRS/STNDMENU.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/FILEOPEN/CREATES.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/FILEOPEN/DESKLIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/FILEOPEN/DESKPSH.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/FILEOPEN/DOCLIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/FILEOPEN/DOCPSH.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/FILEOPEN/DOCUPD.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/FILEOPEN/DROPDOWN.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/FILEOPEN/DSKTPUPD.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/FILEOPEN/FAVLIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/FILEOPEN/FILE.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/FILEOPEN/FILELIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/FILEOPEN/FILEOPEN.HTM
.html .js polyglot
DISCOVER/EASY2USE/ANIMAT/FILEOPEN/FILEUND.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/FILEOPEN/GRYOUTST.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/FILEOPEN/IBEAM.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/FILEOPEN/NETLIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/FILEOPEN/NETPSH.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/FILEOPEN/NETUPD.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/FILEOPEN/NEWLIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/FILEOPEN/OPENLIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/FILEOPEN/OPENS.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/FILEOPEN/POINTER.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/FILEOPEN/RECLIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/FILEOPEN/RECPSH.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/FILEOPEN/RECUPD.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/FILEOPEN/SVAS.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/FILEOPEN/SVASLIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/FILEOPEN/SVHGHLT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/FILEOPEN/SVLIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/FILEOPEN/SVS.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/FILEOPEN/TXT1.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/FILEOPEN/TXT1T.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/FILEOPEN/TXT2.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/FILEOPEN/TXT2TI.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/FILEOPEN/TXT3.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/FILEOPEN/WDGRAY.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/FILEOPEN/WDPAD1.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/IMGMANIP/CLOSEDE.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/IMGMANIP/CLOSELIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/IMGMANIP/CLOSEWIN.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/IMGMANIP/CONTUPD1.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/IMGMANIP/CONTUPD2.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/IMGMANIP/CURSMAG1.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/IMGMANIP/CURSMAG2.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/IMGMANIP/DISKUPD1.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/IMGMANIP/DISKUPD2.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/IMGMANIP/DOCTBPSH.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/IMGMANIP/DOCTBUD1.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/IMGMANIP/DOCWIN.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/IMGMANIP/FOLDUPD1.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/IMGMANIP/FOLDUPD2.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/IMGMANIP/FV1.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/IMGMANIP/IMGMANIP.HTM
.html .js polyglot
DISCOVER/EASY2USE/ANIMAT/IMGMANIP/MOVELIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/IMGMANIP/PANLIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/IMGMANIP/PICOV1.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/IMGMANIP/POINTER.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/IMGMANIP/PRNTLIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/IMGMANIP/PRNTPSH.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/IMGMANIP/TBOV.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/IMGMANIP/TPNVUPD1.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/IMGMANIP/VWLIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/IMGMANIP/VWPSH.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/IMGMANIP/WINRUPD2.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/IMGMANIP/ZMINNRM.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/IMGMANIP/ZMOUTLIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/IMGMANIP/ZMOUTPSH.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/IMGMANIP/ZOPSHLIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/INETCWIZ/BGRND.GIF
DISCOVER/EASY2USE/ANIMAT/INETCWIZ/BULLSET.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/INETCWIZ/BULLSET2.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/INETCWIZ/CONT1.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/INETCWIZ/COWIZLIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/INETCWIZ/COWIZPUP.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/INETCWIZ/INETCWIZ.HTM
.html .js polyglot
DISCOVER/EASY2USE/ANIMAT/INETCWIZ/POINTER.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/INETCWIZ/TBLIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/INTGSRCH/DWNBNPSH.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/INTGSRCH/INTESRCH.HTM
.html .js polyglot
DISCOVER/EASY2USE/ANIMAT/INTGSRCH/LKINCON2.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/INTGSRCH/MYCOMPTB.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/INTGSRCH/MYDOC.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/INTGSRCH/MYDOCOVA.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/INTGSRCH/POINTER.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/INTGSRCH/SEARCH3.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/INTGSRCH/SEARCH5.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/INTGSRCH/SRCHLIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/INTGSRCH/SRCHPLIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/INTGSRCH/SRCHPSH.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/INTGSRCH/STATOV1.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/JAVA.HTM
.js
DISCOVER/EASY2USE/ANIMAT/NTWRKPL/CNMLIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/NTWRKPL/CURSOR.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/NTWRKPL/ENTLIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/NTWRKPL/FINACT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/NTWRKPL/IBEAM.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/NTWRKPL/ICOMYNET.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/NTWRKPL/ICOMYNT2.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/NTWRKPL/MNETBACT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/NTWRKPL/MNETBINA.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/NTWRKPL/MYNETSEL.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/NTWRKPL/NTWRKPLC.HTM
.html .js polyglot
DISCOVER/EASY2USE/ANIMAT/NTWRKPL/NXTACT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/NTWRKPL/NXTDPRSS.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/NTWRKPL/NXTNON.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/NTWRKPL/POINTER.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/NTWRKPL/USEFUL.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/NTWRKPL/WIZ1.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/NTWRKPL/WIZ2.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/NTWRKPL/WIZ4.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/ONESTOP/CLOSEPSH.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/ONESTOP/IDLE.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/ONESTOP/IDLEOV1.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/ONESTOP/IDLEOV2.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/ONESTOP/IDLEOV3.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/ONESTOP/IDLEOV4.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/ONESTOP/LOGON.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/ONESTOP/LOGONOV1.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/ONESTOP/LOGONOV2.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/ONESTOP/OKPSH.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/ONESTOP/ONESTOP.HTM
.html .js polyglot
DISCOVER/EASY2USE/ANIMAT/ONESTOP/POINTER.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/ONESTOP/SETUPACT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/ONESTOP/SETUPPSH.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/ONESTOP/SYNCBTNM.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/ONESTOP/SYNCOV1.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/ONESTOP/SYNCPNL.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/ONESTOP/TBLIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/PRSNLSTM/ACCLIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/PRSNLSTM/ACCPUP.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/PRSNLSTM/ARWMRLIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/PRSNLSTM/CLIPLIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/PRSNLSTM/DOCLIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/PRSNLSTM/EXPBG.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/PRSNLSTM/HELPLIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/PRSNLSTM/INTLIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/PRSNLSTM/NPADLIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/PRSNLSTM/NPADLIT2.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/PRSNLSTM/PAINTLIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/PRSNLSTM/PAINTLIT2.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/PRSNLSTM/POINTER.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/PRSNLSTM/PROGLIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/PRSNLSTM/PROGPUP.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/PRSNLSTM/PVCHRLIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/PRSNLSTM/PVCHRLIT2.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/PRSNLSTM/RUNLIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/PRSNLSTM/SETLIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/PRSNLSTM/SHDWNLIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/PRSNLSTM/SRCHLIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/PRSNLSTM/STRTMENU.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/PRSNLSTM/STRTMENU.HTM
.html .js polyglot
DISCOVER/EASY2USE/ANIMAT/PRSNLSTM/STRTPSH.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/PRSNLSTM/SYNCLIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/PRSNLSTM/SYNCMLIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/PRSNLSTM/WDPDLIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/PRSNLSTM/WDPDLIT2.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/RECNTFLD/CONTUPD.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/RECNTFLD/DOC.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/RECNTFLD/DOCOV1.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/RECNTFLD/DOCTB.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/RECNTFLD/FILEDROP.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/RECNTFLD/FILELIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/RECNTFLD/FILEPSH.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/RECNTFLD/FILEUPD.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/RECNTFLD/FOLDGRY.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/RECNTFLD/HISTLIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/RECNTFLD/HISTPSH.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/RECNTFLD/LOOKUPD.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/RECNTFLD/NEWLIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/RECNTFLD/OPEN.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/RECNTFLD/OPENLIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/RECNTFLD/OPENPSH.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/RECNTFLD/POINTER.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/RECNTFLD/RECENT.HTM
.html .js polyglot
DISCOVER/EASY2USE/ANIMAT/RECNTFLD/SCHEDLIT.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/RECNTFLD/STATOV.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/RECNTFLD/STATOV2.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/RECNTFLD/TBOV.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/RECNTFLD/TBOV2.GIF
.gif
DISCOVER/EASY2USE/ANIMAT/RECNTFLD/WORDUPD.GIF
.gif
DISCOVER/EASY2USE/AUDIO/FINDINFO.ASF
DISCOVER/EASY2USE/AUDIO/PERSONAL.ASF
DISCOVER/EASY2USE/AUDIO/TRACKDOC.ASF
DISCOVER/EASY2USE/AUDIO/WRKOFFLN.ASF
DISCOVER/EASY2USE/AUDIO/WRKONWEB.ASF
DISCOVER/EASY2USE/AUDIO/WRKREMOT.ASF
DISCOVER/EASY2USE/AUDIO/WRKWFILE.ASF
DISCOVER/EASY2USE/DEFAULT.HTM
.html
DISCOVER/EASY2USE/ETU_MAIN.HTM
.html
DISCOVER/EASY2USE/FINDINFO/ACTSRCH.HTM
.html
DISCOVER/EASY2USE/FINDINFO/ACTSRCHP.HTM
.html .js polyglot
DISCOVER/EASY2USE/FINDINFO/INDEXING.HTM
.html
DISCOVER/EASY2USE/FINDINFO/MAINFIND.HTM
.html
DISCOVER/EASY2USE/FINDINFO/SEARCH.HTM
.html
DISCOVER/EASY2USE/IMAGES/ETUHDR.GIF
.gif
DISCOVER/EASY2USE/IMAGES/ETUHDROV.GIF
.gif
DISCOVER/EASY2USE/IMAGES/WATRKEYS.GIF
.gif
DISCOVER/EASY2USE/PERSONAL/ACCESS.HTM
DISCOVER/EASY2USE/PERSONAL/ACTDSKTP.HTM
.html
DISCOVER/EASY2USE/PERSONAL/CUSTTLBR.HTM
.html
DISCOVER/EASY2USE/PERSONAL/MAINPRSN.HTM
.html
DISCOVER/EASY2USE/PERSONAL/MULTLANG.HTM
.html
DISCOVER/EASY2USE/PERSONAL/STRTMENU.HTM
.html
DISCOVER/EASY2USE/WORKREMO/CONSPOWR.HTM
.html
DISCOVER/EASY2USE/WORKREMO/EFS.HTM
.html
DISCOVER/EASY2USE/WORKREMO/IMAGES/OFFLNWB.JPG
.jpg
DISCOVER/EASY2USE/WORKREMO/INFRARED.HTM
.html
DISCOVER/EASY2USE/WORKREMO/MAINREMO.HTM
.html
DISCOVER/EASY2USE/WORKREMO/NETCONMN.HTM
.html
DISCOVER/EASY2USE/WORKREMO/OFFLNFLD.HTM
.html
DISCOVER/EASY2USE/WORKREMO/OFFLNWB.HTM
.html
DISCOVER/EASY2USE/WORKREMO/REMOTELY.HTM
.html
DISCOVER/EASY2USE/WORKREMO/SYNCMAN.HTM
.html
DISCOVER/EASY2USE/WRKONWEB/FAVUI.HTM
.html
DISCOVER/EASY2USE/WRKONWEB/IMAGES/FAVORITE.JPG
.jpg
DISCOVER/EASY2USE/WRKONWEB/INETCWIZ.HTM
.html
DISCOVER/EASY2USE/WRKONWEB/MAINWORK.HTM
.html
DISCOVER/EASY2USE/WRKWFILE/ASSOCIAT.HTM
.html
DISCOVER/EASY2USE/WRKWFILE/HISTORY.HTM
.html
DISCOVER/EASY2USE/WRKWFILE/IMAGEMAN.HTM
.html
DISCOVER/EASY2USE/WRKWFILE/IMAGES/SS_MYDOC.JPG
.jpg
DISCOVER/EASY2USE/WRKWFILE/MAINWORK.HTM
.html
DISCOVER/EASY2USE/WRKWFILE/MYDOCS.HTM
.html
DISCOVER/EASY2USE/WRKWFILE/MYNETWRK.HTM
.html
DISCOVER/EASY2USE/WRKWFILE/OPENSAVE.HTM
.html
DISCOVER/EASY2USE/WRKWFILE/RDYAVPRT.HTM
.html
DISCOVER/EASY2USE/WRKWFILE/TRAKDOCS.HTM
.html
DISCOVER/IMAGES/BKTOTPC.GIF
.gif
DISCOVER/IMAGES/BKTOTPC2.GIF
.gif
DISCOVER/IMAGES/BKTOTPC3.GIF
.gif
DISCOVER/IMAGES/BKTOTPC4.GIF
.gif
DISCOVER/IMAGES/BLANK.GIF
.gif
DISCOVER/IMAGES/BLANKNAV.GIF
.gif
DISCOVER/IMAGES/BLUETOC.GIF
.gif
DISCOVER/IMAGES/BRANDUL.GIF
.gif
DISCOVER/IMAGES/BRANDUR.GIF
.gif
DISCOVER/IMAGES/COLORBAR.GIF
.gif
DISCOVER/IMAGES/DEFLTSCRN.GIF
.gif
DISCOVER/IMAGES/EASMGSM.GIF
.gif
DISCOVER/IMAGES/EASUSSM.GIF
.gif
DISCOVER/IMAGES/GOLDTOC.GIF
.gif
DISCOVER/IMAGES/GREENTOC.GIF
.gif
DISCOVER/IMAGES/MARKETING.GIF
.gif
DISCOVER/IMAGES/MRCOMSM.GIF
.gif
DISCOVER/IMAGES/MRPWRSM.GIF
.gif
DISCOVER/IMAGES/PLAYANIM.GIF
.gif
DISCOVER/IMAGES/REDTOC.GIF
.gif
DISCOVER/IMAGES/REPLAY.GIF
.gif
DISCOVER/IMAGES/REPLAY2.GIF
.gif
DISCOVER/IMAGES/REPLAY3.GIF
.gif
DISCOVER/IMAGES/REPLAY4.GIF
.gif
DISCOVER/IMAGES/TOCDNARW.GIF
.gif
DISCOVER/IMAGES/TOCUPARW.GIF
.gif
DISCOVER/JAVA.HTM
.js
DISCOVER/JAVAX.HTM
.js
DISCOVER/MAIN.HTM
.html
DISCOVER/MISC/ROOTMAIN.HTM
.html .js polyglot
DISCOVER/MISC/VAR.HTM
.html .js polyglot
DISCOVER/MUSIC/CHORD000.CDM
DISCOVER/MUSIC/DM.HTM
.vbs
DISCOVER/MUSIC/STYLE000.STY
DISCOVER/MUSIC/STYLE010.STY
DISCOVER/MUSIC/STYLE020.STY
DISCOVER/MUSIC/STYLE030.STY
DISCOVER/MUSIC/STYLE099.STY
DISCOVER/MUSIC/TEMPL000.TPL
DISCOVER/MUSIC/TEMPL001.TPL
DISCOVER/MUSIC/TEMPL010.TPL
DISCOVER/MUSIC/TEMPL011.TPL
DISCOVER/MUSIC/TEMPL020.TPL
DISCOVER/MUSIC/TEMPL021.TPL
DISCOVER/MUSIC/TEMPL030.TPL
DISCOVER/MUSIC/TEMPL031.TPL
DISCOVER/MUSIC/TEMPL099.TPL
DISCOVER/MUSIC/W2P.DLS
DISCOVER/NAVSTYLE.CSS
DISCOVER/OPEN.HTM
.html .js polyglot
DISCOVER/OPEN/BRANDEL.GIF
.gif
DISCOVER/OPEN/DISCOVER.GIF
.gif
DISCOVER/OPEN/DISTXT.GIF
.gif
DISCOVER/POWERFUL/AUDIO/ALT.ASF
DISCOVER/POWERFUL/AUDIO/IMPOVPER.ASF
DISCOVER/POWERFUL/AUDIO/PERFORM.ASF
DISCOVER/POWERFUL/AUDIO/RELIABIL.ASF
DISCOVER/POWERFUL/AUDIO/SECURITY.ASF
DISCOVER/POWERFUL/DEFAULT.HTM
.html
DISCOVER/POWERFUL/IMAGES/PWRHDR.GIF
.gif
DISCOVER/POWERFUL/IMAGES/PWRHDROV.GIF
.gif
DISCOVER/POWERFUL/IMAGES/WTRCOLUM.GIF
.gif
DISCOVER/POWERFUL/PERFORM/BROWSING.HTM
.html
DISCOVER/POWERFUL/PERFORM/DISKSPAC.HTM
.html
DISCOVER/POWERFUL/PERFORM/OVERALL.HTM
.html
DISCOVER/POWERFUL/PERFORM/PRFRMAIN.HTM
.html
DISCOVER/POWERFUL/PERFORM/SCALABLE.HTM
.html
DISCOVER/POWERFUL/POWRMAIN.HTM
.html
DISCOVER/POWERFUL/RELIABTY/MEMPRTCT.HTM
.html
DISCOVER/POWERFUL/RELIABTY/RESTARTS.HTM
.html
DISCOVER/POWERFUL/RELIABTY/RLTYMAIN.HTM
.html
DISCOVER/POWERFUL/RELIABTY/SELFHEAL.HTM
.html
DISCOVER/POWERFUL/SECURITY/AUTHEN.HTM
.html
DISCOVER/POWERFUL/SECURITY/IMAGES/SECONFMN.JPG
.jpg
DISCOVER/POWERFUL/SECURITY/NTFS.HTM
.html
DISCOVER/POWERFUL/SECURITY/SCTYCNFG.HTM
.html
DISCOVER/POWERFUL/SECURITY/SCTYMAIN.HTM
.html
DISCOVER/POWERFUL/SECURITY/SHARING.HTM
.html
DISCOVER/STYLE.CSS
I386/0401.CS_
.cab
0401.csv
I386/0404.CS_
.cab
0404.csv
I386/0405.CS_
.cab
0405.csv
I386/0406.CS_
.cab
0406.csv
I386/0407.CS_
.cab
0407.csv
I386/0408.CS_
.cab
0408.csv
I386/040B.CS_
.cab
040B.csv
I386/040C.CS_
.cab
I386/040D.CS_
.cab
I386/040E.CS_
.cab
I386/0410.CS_
.cab
I386/0411.CS_
.cab
I386/0412.CS_
.cab
I386/0413.CS_
.cab
I386/0414.CS_
.cab
I386/0415.CS_
.cab
I386/0416.CS_
.cab
I386/0419.CS_
.cab
I386/041D.CS_
.cab
I386/041F.CS_
.cab
I386/0804.CS_
.cab
I386/0C0A.CS_
.cab
I386/12520437.CP_
.cab
I386/12520850.CP_
.cab
I386/1394.IN_
.cab
I386/1394BUS.SY_
.cab
I386/3DGARRO.CU_
.cab
I386/3DGMOVE.CU_
.cab
I386/3DGNESW.CU_
.cab
I386/3DGNO.CU_
.cab
I386/3DGNS.CU_
.cab
I386/3DGNWSE.CU_
.cab
I386/3DGWE.CU_
.cab
I386/3DSMOVE.CU_
.cab
I386/3DSNS.CU_
.cab
I386/3DSNWSE.CU_
.cab
I386/3DWARRO.CU_
.cab
I386/3DWMOVE.CU_
.cab
I386/3DWNESW.CU_
.cab
I386/3DWNO.CU_
.cab
I386/3DWNS.CU_
.cab
I386/3DWNWSE.CU_
.cab
I386/3DWWE.CU_
.cab
I386/8514FIX.FO_
.cab
I386/8514FIXE.FO_
.cab
I386/8514FIXG.FO_
.cab
I386/8514FIXR.FO_
.cab
I386/8514FIXT.FO_
.cab
I386/8514OEM.FO_
.cab
I386/8514OEME.FO_
.cab
I386/8514OEMG.FO_
.cab
I386/8514OEMR.FO_
.cab
I386/8514OEMT.FO_
.cab
I386/8514SYS.FO_
.cab
I386/8514SYSE.FO_
.cab
I386/8514SYSG.FO_
.cab
I386/8514SYSR.FO_
.cab
I386/8514SYST.FO_
.cab
I386/85775.FO_
.cab
I386/85855.FO_
.cab
I386/85F1257.FO_
.cab
I386/85S1257.FO_
.cab
I386/AAAAMON.DL_
.cab
I386/ABP480N5.SY_
.cab
I386/ACCESS.CH_
.cab
I386/ACCESS.CP_
.cab
I386/ACCESS.HL_
.cab
I386/ACCESSIB.CH_
.cab
I386/ACCESSOR.IN_
.cab
I386/ACCSERV.MI_
.cab
I386/ACCTRES.DL_
.cab
I386/ACCWIZ.EX_
.cab
I386/ACC_DIS.CH_
.cab
I386/ACELPDEC.AX_
.cab
I386/ACGENRAL.DL_
.cab
I386/ACHG.HT_
.cab
I386/ACLAYERS.DL_
.cab
I386/ACLEDIT.DL_
.cab
I386/ACLUI.CH_
.cab
I386/ACLUI.DL_
.cab
I386/ACLUI.HL_
.cab
I386/ACPI.IN_
.cab
I386/ACPI.SY_
.cab
I386/ACPIEC.SY_
.cab
I386/ACS.MI_
.cab
I386/ACSETUPC.DL_
.cab
I386/ACSMIB.DL_
.cab
I386/ACSPECFC.DL_
.cab
I386/ACTIVEDS.DL_
.cab
I386/ACTIVEDS.TL_
.cab
I386/ACTMOVIE.EX_
.cab
I386/ACTSAVER.SC_
.cab
I386/ACTXPRXY.DL_
.cab
I386/ADCADMIN.CH_
.cab
I386/ADCJAVAS.IN_
.cab
I386/ADCVBS.IN_
.cab
I386/ADDREMOV.CH_
.cab
I386/ADE.HL_
.cab
I386/ADMEXS.DL_
.cab
I386/ADMPARSE.DL_
.cab
I386/ADMWPROX.DL_
.cab
I386/ADMXPROX.DL_
.cab
I386/ADM_MULT.IN_
.cab
I386/ADM_PORT.IN_
.cab
I386/ADOAPT15.RE_
.cab
I386/ADOD6522.IC_
.cab
I386/ADOFRE15.RE_
.cab
I386/ADOJAVAS.IN_
.cab
I386/ADOVBS.IN_
.cab
I386/ADPROP.HL_
.cab
I386/ADPTIF.DL_
.cab
I386/ADPU160M.SY_
.cab
I386/ADROT.DL_
.cab
I386/ADSIIS.DL_
.cab
I386/ADSLDP.DL_
.cab
I386/ADSLDPC.DL_
.cab
I386/ADSMSEXT.DL_
.cab
I386/ADSNDS.DL_
.cab
I386/ADSNT.DL_
.cab
I386/ADSNW.DL_
.cab
I386/ADVAPI32.DL_
.cab
I386/ADVPACK.DL_
.cab
I386/AEXP.HT_
.cab
I386/AEXP2.HT_
.cab
I386/AEXP2B.HT_
.cab
I386/AEXP3.HT_
.cab
I386/AEXP4.HT_
.cab
I386/AEXP4B.HT_
.cab
I386/AFD.SY_
.cab
I386/AGENTANM.DL_
.cab
I386/AGENTCTL.DL_
.cab
I386/AGENTDP2.DL_
.cab
I386/AGENTDPV.DL_
.cab
I386/AGENTMPX.DL_
.cab
I386/AGENTPSH.DL_
.cab
I386/AGENTSR.DL_
.cab
I386/AGENTSVR.EX_
.cab
I386/AGT0401.DL_
.cab
I386/AGT0401.HL_
.cab
I386/AGT0404.DL_
.cab
I386/AGT0404.HL_
.cab
I386/AGT0405.DL_
.cab
I386/AGT0405.HL_
.cab
I386/AGT0406.DL_
.cab
I386/AGT0406.HL_
.cab
I386/AGT0407.DL_
.cab
I386/AGT0407.HL_
.cab
I386/AGT0408.DL_
.cab
I386/AGT0408.HL_
.cab
I386/AGT0409.DL_
.cab
I386/AGT0409.HL_
.cab
I386/AGT040B.DL_
.cab
I386/AGT040B.HL_
.cab
I386/AGT040C.DL_
.cab
I386/AGT040C.HL_
.cab
I386/AGT040D.DL_
.cab
I386/AGT040D.HL_
.cab
I386/AGT040E.DL_
.cab
I386/AGT040E.HL_
.cab
I386/AGT0410.DL_
.cab
I386/AGT0410.HL_
.cab
I386/AGT0411.DL_
.cab
I386/AGT0411.HL_
.cab
I386/AGT0412.DL_
.cab
I386/AGT0412.HL_
.cab
I386/AGT0413.DL_
.cab
I386/AGT0413.HL_
.cab
I386/AGT0414.DL_
.cab
I386/AGT0414.HL_
.cab
I386/AGT0415.DL_
.cab
I386/AGT0415.HL_
.cab
I386/AGT0416.DL_
.cab
I386/AGT0416.HL_
.cab
I386/AGT0419.DL_
.cab
I386/AGT0419.HL_
.cab
I386/AGT041D.DL_
.cab
I386/AGT041D.HL_
.cab
I386/AGT041F.DL_
.cab
I386/AGT041F.HL_
.cab
I386/AGT0804.DL_
.cab
I386/AGT0804.HL_
.cab
I386/AGT0816.DL_
.cab
I386/AGT0816.HL_
.cab
I386/AGT0C0A.DL_
.cab
I386/AGT0C0A.HL_
.cab
I386/AGTCTL15.TL_
.cab
I386/AGTINST.IN_
.cab
I386/AGTINTL.DL_
.cab
I386/AHA154X.SY_
.cab
I386/AIC116X.SY_
.cab
I386/AIC78U2.SY_
.cab
I386/AIC78XX.SY_
.cab
I386/ALEABANR.GI_
.cab
I386/ALRSVC.DL_
.cab
I386/AMAIZRUL.GI_
.cab
I386/AMIPRO.SA_
.cab
I386/AMOVIE.IN_
.cab
I386/AMSINT.SY_
.cab
I386/AMSTREAM.DL_
.cab
I386/ANABNR2.GI_
.cab
I386/ANOT.HT_
.cab
I386/ANOT3.HT_
.cab
I386/ANSI.SY_
.cab
I386/APCOMPAT.IN_
.cab
I386/APCUPS.DL_
.cab
I386/APP775.FO_
.cab
I386/APP850.FO_
.cab
I386/APP852.FO_
.cab
I386/APP855.FO_
.cab
I386/APP857.FO_
.cab
I386/APP866.FO_
.cab
I386/APPD6518.IC_
.cab
I386/APPEND.EX_
.cab
I386/APPMGMTS.DL_
.cab
I386/APPMGR.DL_
.cab
I386/APPS.CH_
.cab
I386/APPS.IN_
.cab
I386/APPSTAR2.AN_
.cab
I386/APPSTAR3.AN_
.cab
I386/APPSTART.AN_
.cab
I386/APPWIZ.CP_
.cab
I386/ARCLDR.EXE
I386/ARCSETUP.EXE
I386/ARIAL.TT_
.cab
I386/ARIALBD.TT_
.cab
I386/ARIALBI.TT_
.cab
I386/ARIALI.TT_
.cab
I386/ARIBLK.TT_
.cab
I386/ARP.EX_
.cab
I386/ARROW_I.CU_
.cab
I386/ARROW_IL.CU_
.cab
I386/ARROW_IM.CU_
.cab
I386/ARROW_L.CU_
.cab
I386/ARROW_M.CU_
.cab
I386/ARROW_R.CU_
.cab
I386/ARROW_RL.CU_
.cab
I386/ARROW_RM.CU_
.cab
I386/ASC.SY_
.cab
I386/ASC3350P.SY_
.cab
I386/ASC3550.SY_
.cab
I386/ASCTRLS.OC_
.cab
I386/ASFSIPC.DL_
.cab
I386/ASP.DL_
.cab
I386/ASPPERF.DL_
.cab
I386/ASPTXN.DL_
.cab
I386/ASR.CH_
.cab
I386/ASWRULE.GI_
.cab
I386/ASYCFILT.DL_
.cab
I386/ASYNCEQN.IN_
.cab
I386/ASYNCMAC.SY_
.cab
I386/AT.EX_
.cab
I386/ATABOOT.SY_
.cab
I386/ATAPI.SY_
.cab
I386/ATIVIDIN.IN_
.cab
I386/ATKCTRS.DL_
.cab
I386/ATL.DL_
.cab
I386/ATM.CH_
.cab
I386/ATMADM.EX_
.cab
I386/ATMARPC.SY_
.cab
I386/ATMFD.DL_
.cab
I386/ATMLANE.SY_
.cab
I386/ATMLIB.DL_
.cab
I386/ATMUNI.SY_
.cab
I386/ATT.HT_
.cab
I386/ATTRIB.EX_
.cab
I386/AU.INF
I386/AUDIOCDC.HL_
.cab
I386/AUTHFILT.DL_
.cab
I386/AUTHSERV.MI_
.cab
I386/AUTHZ.DL_
.cab
I386/AUTOCHK.EXE
.sys windows:5 windows x86 arch:x86

5ba531af89eeb97b88c8a5edfaacbd75

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntdll

RtlSizeHeap
wcslen
wcsstr
NtClose
NtQueryValueKey
NtOpenKey
RtlInitUnicodeString
NtQuerySymbolicLinkObject
NtOpenSymbolicLinkObject
RtlPrefixUnicodeString
RtlEqualUnicodeString
NtQueryDirectoryObject
NtOpenDirectoryObject
NtDelayExecution
isprint
swprintf
memmove
qsort
RtlDosPathNameToNtPathName_U
NtShutdownSystem
NtAdjustPrivilegesToken
NtOpenProcessToken
NtQuerySystemTime
NtQuerySystemInformation
RtlExpandEnvironmentStrings_U
_allmul
_alldiv
NtSetInformationFile
NtQueryInformationFile
NtOpenFile
NtWriteFile
RtlConvertLongToLargeInteger
NtCreateFile
NtFsControlFile
RtlLengthSid
RtlValidSid
RtlMultiByteToUnicodeN
RtlOemToUnicodeN
sprintf
atol
wcsspn
RtlUnicodeToOemN
RtlUnicodeToMultiByteN
_wcsupr
_wcslwr
wcscmp
NtDisplayString
NtWaitForSingleObject
NtReadFile
NtSetThreadExecutionState
NtCreateEvent
NtDeviceIoControlFile
RtlAllocateHeap
_aulldiv
RtlFreeHeap
_wcsicmp
_chkstk
RtlFreeUnicodeString
RtlFormatMessage
RtlAnsiStringToUnicodeString
RtlInitAnsiString
RtlFindMessage
wcscpy
wcsncmp
RtlSubAuthoritySid
RtlInitializeSid
RtlLengthRequiredSid
RtlAddAce
RtlCopySid
RtlQueryInformationAcl
RtlCreateAcl
RtlLengthSecurityDescriptor
RtlValidSecurityDescriptor
RtlNewSecurityObject
RtlSetDaclSecurityDescriptor
RtlSetGroupSecurityDescriptor
RtlCreateSecurityDescriptor
RtlAddAccessAllowedAce
NtQueryInformationThread
NtSetEvent
RtlCreateUserThread
NtTerminateThread
_allrem
RtlUpcaseUnicodeString
DbgPrint
_allshl
RtlRaiseStatus
RtlDecompressBuffer
RtlTimeToTimeFields
RtlSystemTimeToLocalTime
RtlSetBits
RtlInitializeBitMap
RtlInsertElementGenericTable
RtlInitializeGenericTable
RtlDeleteElementGenericTable
RtlFindSetBits
RtlClearBits
RtlLookupElementGenericTable
RtlNumberOfSetBits
RtlEnumerateGenericTableWithoutSplaying
RtlQueryRegistryValues
RtlWriteRegistryValue
RtlUnwind
NtTerminateProcess
DbgBreakPoint
RtlUnicodeStringToAnsiString
RtlNormalizeProcessParams

Sections

.text
Size: 323KB - Virtual size: 322KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 59KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 171KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/AUTOCONV.EX_
.cab
I386/AUTOEXEC.NT_
.cab
I386/AUTOFMT.EXE
.sys windows:5 windows x86 arch:x86

2a4582a6456ba830b9a014aff4e3c0aa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntdll

RtlLengthRequiredSid
RtlConvertLongToLargeInteger
_wcsicmp
_wcsupr
_stricmp
atoi
_allmul
_alldiv
RtlDosPathNameToNtPathName_U
NtClose
NtShutdownSystem
NtAdjustPrivilegesToken
NtOpenProcessToken
NtQuerySystemTime
NtQuerySystemInformation
NtQuerySymbolicLinkObject
NtOpenSymbolicLinkObject
RtlInitUnicodeString
RtlExpandEnvironmentStrings_U
wcslen
NtSetInformationFile
NtQueryInformationFile
NtOpenFile
NtWriteFile
NtCreateFile
NtFsControlFile
RtlLengthSid
RtlValidSid
NtSetThreadExecutionState
NtReadFile
NtDeviceIoControlFile
_chkstk
memmove
RtlMultiByteToUnicodeN
RtlOemToUnicodeN
sprintf
RtlUnicodeToOemN
RtlUnicodeToMultiByteN
_wcslwr
wcscmp
isprint
swprintf
NtDisplayString
NtWaitForSingleObject
NtCreateEvent
RtlAllocateHeap
_aulldiv
RtlFreeHeap
RtlSizeHeap
RtlSubAuthoritySid
RtlInitializeSid
NtDelayExecution
RtlAddAce
RtlCopySid
RtlQueryInformationAcl
RtlCreateAcl
RtlLengthSecurityDescriptor
RtlValidSecurityDescriptor
RtlNewSecurityObject
RtlSetDaclSecurityDescriptor
RtlSetGroupSecurityDescriptor
RtlCreateSecurityDescriptor
RtlAddAccessAllowedAce
wcscpy
RtlTimeToTimeFields
RtlSystemTimeToLocalTime
RtlPrefixUnicodeString
NtQueryValueKey
NtOpenKey
NtSetVolumeInformationFile
NtQueryVolumeInformationFile
RtlQueryRegistryValues
RtlWriteRegistryValue
RtlUpcaseUnicodeString
_allshl
RtlRaiseStatus
_allrem
RtlDecompressBuffer
RtlFreeUnicodeString
RtlFormatMessage
RtlAnsiStringToUnicodeString
RtlInitAnsiString
RtlFindMessage
wcsncmp
NtQueryInformationThread
NtSetEvent
RtlCreateUserThread
NtTerminateThread
DbgPrint
RtlSetBits
RtlInitializeBitMap
RtlInsertElementGenericTable
RtlInitializeGenericTable
RtlDeleteElementGenericTable
RtlFindSetBits
RtlClearBits
RtlLookupElementGenericTable
RtlNumberOfSetBits
RtlEnumerateGenericTableWithoutSplaying
RtlUnwind
NtTerminateProcess
DbgBreakPoint
RtlUnicodeStringToAnsiString
RtlNormalizeProcessParams

Sections

.text
Size: 315KB - Virtual size: 315KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 59KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 171KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/AUTOLFN.EX_
.cab
I386/AVICAP.DL_
.cab
I386/AVICAP32.DL_
.cab
I386/AVIFIL32.DL_
.cab
I386/AVIFILE.DL_
.cab
I386/AVMETER.DL_
.cab
I386/AVMISDN.IN_
.cab
I386/AVSHELL.DL_
.cab
I386/AVTAPI.DL_
.cab
I386/AVWAV.DL_
.cab
I386/AXANT5.IN_
.cab
I386/AXPERF.IN_
.cab
I386/BACHSB~1.RM_
.cab
I386/BANANA.AN_
.cab
I386/BANSHEE.IN_
.cab
I386/BARBER.AN_
.cab
I386/BASENOTE.CO_
.cab
I386/BASESRV.DL_
.cab
I386/BASICDC.IN_
.cab
I386/BASICSV.IN_
.cab
I386/BASICWK.IN_
.cab
I386/BATMETER.DL_
.cab
I386/BATT.DL_
.cab
I386/BATTERY.IN_
.cab
I386/BEAM_I.CU_
.cab
I386/BEAM_IL.CU_
.cab
I386/BEAM_IM.CU_
.cab
I386/BEAM_L.CU_
.cab
I386/BEAM_M.CU_
.cab
I386/BEAM_R.CU_
.cab
I386/BEAM_RL.CU_
.cab
I386/BEAM_RM.CU_
.cab
I386/BEEP.SY_
.cab
I386/BEETHO~2.RM_
.cab
I386/BIG5.NL_
.cab
I386/BIGFOOT.BM_
.cab
I386/BINLSVC.DL_
.cab
I386/BIOS1.RO_
.cab
I386/BIOS4.RO_
.cab
I386/BIOSINFO.INF
I386/BLANK.HT_
.cab
I386/BLANKBKG.GI_
.cab
I386/BLIP.WA_
.cab
I386/BLULAC16.BM_
.cab
I386/BLUMON16.BM_
.cab
I386/BNTS.DL_
.cab
I386/BOOTCONS.CH_
.cab
I386/BOOTFIX.BIN
I386/BOOTOK.EX_
.cab
I386/BOOTVID.DL_
.cab
I386/BOOTVRFY.EX_
.cab
I386/BOPOMOFO.NL_
.cab
I386/BOPOMOFO.UC_
.cab
I386/BR549.DL_
.cab
I386/BREP.CH_
.cab
I386/BREP.HL_
.cab
I386/BRIEF.CH_
.cab
I386/BROWSCAP.DL_
.cab
I386/BROWSCAP.IN_
.cab
I386/BROWSELC.DL_
.cab
I386/BROWSER.DL_
.cab
I386/BROWSEUI.DL_
.cab
I386/BTZHSEPA.GI_
.cab
I386/BUBBLES.BM_
.cab
I386/BUSLOGIC.SY_
.cab
I386/BUSMOUSE.SY_
.cab
I386/BUSY_I.CU_
.cab
I386/BUSY_IL.CU_
.cab
I386/BUSY_IM.CU_
.cab
I386/BUSY_L.CU_
.cab
I386/BUSY_M.CU_
.cab
I386/BUSY_R.CU_
.cab
I386/BUSY_RL.CU_
.cab
I386/BUSY_RM.CU_
.cab
I386/CABINET.DLL
.dll windows:5 windows x86 arch:x86

ea4cbf3c305bfb43c7e36a485e58acb4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

CreateDirectoryA
ReadFile
WriteFile
CloseHandle
SetFilePointer
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
lstrcatA
lstrcpyA
lstrlenA
CreateFileA
SetFileAttributesA
lstrcmpiA
GetLastError
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
DeleteFileA

ole32

CoTaskMemFree
CoTaskMemAlloc

Exports

Exports

DeleteExtractedFiles
DllGetVersion
Extract
FCIAddFile
FCICreate
FCIDestroy
FCIFlushCabinet
FCIFlushFolder
FDICopy
FDICreate
FDIDestroy
FDIIsCabinet
FDITruncateCabinet
GetDllVersion

Sections

.text
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/CABVIEW.DL_
.cab
I386/CACLS.EX_
.cab
I386/CALC.CH_
.cab
I386/CALC.EX_
.cab
I386/CALC.HL_
.cab
I386/CALLCONT.DL_
.cab
I386/CAMERA.CH_
.cab
I386/CANYON.MI_
.cab
I386/CAPESNPN.DL_
.cab
I386/CARDS.DL_
.cab
I386/CATSRV.DL_
.cab
I386/CATSRVPS.DL_
.cab
I386/CATSRVUT.DL_
.cab
I386/CB32.EX_
.cab
I386/CCDECODE.IN_
.cab
I386/CCFGNT.DL_
.cab
I386/CD20XRNT.SY_
.cab
I386/CDFS.SY_
.cab
I386/CDFVIEW.DL_
.cab
I386/CDM.DL_
.cab
I386/CDMODEM.DL_
.cab
I386/CDONTS.DL_
.cab
I386/CDOSYS.DL_
.cab
I386/CDPLAYER.EX_
.cab
I386/CDROM.IN_
.cab
I386/CDROM.SY_
.cab
I386/CERTCARC.AS_
.cab
I386/CERTCERT.GI_
.cab
I386/CERTCKPN.AS_
.cab
I386/CERTCLAS.IN_
.cab
I386/CERTCLI.DL_
.cab
I386/CERTDFLT.AS_
.cab
I386/CERTFNSH.AS_
.cab
I386/CERTMAP.OC_
.cab
I386/CERTMGR.DL_
.cab
I386/CERTMGR.HL_
.cab
I386/CERTMGR.MS_
.cab
I386/CERTMG_W.CH_
.cab
I386/CERTRQAD.AS_
.cab
I386/CERTRQBI.AS_
.cab
I386/CERTRQMA.AS_
.cab
I386/CERTRQTP.IN_
.cab
I386/CERTRQUS.AS_
.cab
I386/CERTRQXT.AS_
.cab
I386/CERTRSDN.AS_
.cab
I386/CERTRSER.AS_
.cab
I386/CERTRSIS.AS_
.cab
I386/CERTRSOB.AS_
.cab
I386/CERTRSPN.AS_
.cab
I386/CERTSCES.AS_
.cab
I386/CERTSGCL.IN_
.cab
I386/CERTSRCK.IN_
.cab
I386/CERTWIZ.OC_
.cab
I386/CFGMGR32.DL_
.cab
I386/CFMCANON.IN_
.cab
I386/CFMMUSTK.IN_
.cab
I386/CFMRICOH.IN_
.cab
I386/CFMTWAIN.DE_
.cab
I386/CGA40737.FO_
.cab
I386/CGA40850.FO_
.cab
I386/CGA40852.FO_
.cab
I386/CGA40857.FO_
.cab
I386/CGA40866.FO_
.cab
I386/CGA40869.FO_
.cab
I386/CGA40WOA.FO_
.cab
I386/CGA80737.FO_
.cab
I386/CGA80850.FO_
.cab
I386/CGA80852.FO_
.cab
I386/CGA80857.FO_
.cab
I386/CGA80866.FO_
.cab
I386/CGA80869.FO_
.cab
I386/CGA80WOA.FO_
.cab
I386/CHANNELS.SC_
.cab
I386/CHARMAP.CH_
.cab
I386/CHARMAP.EX_
.cab
I386/CHARMAP.HL_
.cab
I386/CHCP.CO_
.cab
I386/CHIMES.WA_
.cab
I386/CHIPS5.IN_
.cab
I386/CHKDSK.EX_
.cab
I386/CHKNTFS.EX_
.cab
I386/CHKUPGRD.BAT
I386/CHNSCSVR.HL_
.cab
I386/CHORD.WA_
.cab
I386/CIADMIN.DL_
.cab
I386/CIADMIN.HT_
.cab .js polyglot
I386/CIADV.MS_
.cab
I386/CIC.DL_
.cab
I386/CIDAEMON.EX_
.cab
I386/CIMW32EX.DL_
.cab
I386/CIMWIN32.DL_
.cab
I386/CIMWIN32.MF_
.cab
I386/CIMWIN32.MO_
.cab
I386/CIODM.DL_
.cab
I386/CIPHER.EX_
.cab
I386/CIQUERY.HT_
.cab
I386/CIS.HT_
.cab
I386/CIS.SC_
.cab
I386/CISVC.EX_
.cab
I386/CITBANNA.GI_
.cab
I386/CITRBKG.GI_
.cab
I386/CITRPUN.HT_
.cab
I386/CJIME.CA_
.cab
I386/CKCNV.EX_
.cab
I386/CLAIRE~1.RM_
.cab
I386/CLASS2.SY_
.cab
I386/CLASSPNP.SY_
.cab
I386/CLB.DL_
.cab
I386/CLBCATEX.DL_
.cab
I386/CLBCATQ.DL_
.cab
I386/CLEANMGR.EX_
.cab
I386/CLEANRI.EX_
.cab
I386/CLEARDAY.HT_
.cab
I386/CLICONF.HL_
.cab
I386/CLICONFG.DL_
.cab
I386/CLICONFG.EX_
.cab
I386/CLIPBRD.CH_
.cab
I386/CLIPBRD.EX_
.cab
I386/CLIPBRD.HL_
.cab
I386/CLIPSRV.EX_
.cab
I386/CLOCK.AV_
.cab
I386/CLRDAYBG.JP_
.cab
I386/CLUSAPI.DL_
.cab
I386/CLUSIIS4.DL_
.cab
I386/CLUSTER.EX_
.cab
I386/CMCFG32.DL_
.cab
I386/CMCON_W.CH_
.cab
I386/CMD.EX_
.cab
I386/CMDIAL32.DL_
.cab
I386/CMDL32.EX_
.cab
I386/CMMGR32.EX_
.cab
I386/CMMGR32.HL_
.cab
I386/CMMON32.EX_
.cab
I386/CMNQUERY.DL_
.cab
I386/CMOS.RA_
.cab
I386/CMPBK32.DL_
.cab
I386/CMPROPS.DL_
.cab
I386/CMSTP.EX_
.cab
I386/CMUTIL.DL_
.cab
I386/CNETCFG.DL_
.cab
I386/CNFGPRTS.OC_
.cab
I386/CNVFAT.DL_
.cab
I386/COADMIN.DL_
.cab
I386/COFFEEBN.BM_
.cab
I386/COIN.AN_
.cab
I386/COLBACT.DL_
.cab
I386/COLORMGT.CH_
.cab
I386/COMADDIN.DL_
.cab
I386/COMADMIN.DL_
.cab
I386/COMCAT.DL_
.cab
I386/COMCLUST.EX_
.cab
I386/COMCTL32.DL_
.cab
I386/COMDLG32.DL_
.cab
I386/COMEMPTY.DA_
.cab
I386/COMEXP.CH_
.cab
I386/COMEXP.HL_
.cab
I386/COMEXP.MS_
.cab
I386/COMIC.TT_
.cab
I386/COMICBD.TT_
.cab
I386/COMM.DR_
.cab
I386/COMMAND.CO_
.cab
I386/COMMDLG.DL_
.cab
I386/COMMON.CH_
.cab
I386/COMMUNIC.IN_
.cab
I386/COMNTWKS.IN_
.cab
I386/COMP.EX_
.cab
I386/COMPACT.EX_
.cab
I386/COMPATWS.IN_
.cab
I386/COMPDATA/3COM.HTM
.html
I386/COMPDATA/3COM.TXT
I386/COMPDATA/AACRAID.HTM
.html
I386/COMPDATA/AACRAID.TXT
I386/COMPDATA/ACCELPRO.HTM
.html
I386/COMPDATA/ACCELPRO.TXT
I386/COMPDATA/ADAPTEC.HTM
.html
I386/COMPDATA/ADAPTEC.TXT
I386/COMPDATA/AHA8940.HTM
.html
I386/COMPDATA/AHA8940.TXT
I386/COMPDATA/AICDRV.HTM
.html
I386/COMPDATA/AICDRV.TXT
I386/COMPDATA/ALPSPRT.HTM
.html
I386/COMPDATA/ALPSPRT.TXT
I386/COMPDATA/APMERROR.HTM
.html
I386/COMPDATA/APMERROR.TXT
I386/COMPDATA/ARKVA.HTM
.html
I386/COMPDATA/ARKVA.TXT
I386/COMPDATA/ASSETCI.HTM
.html
I386/COMPDATA/ASSETCI.TXT
I386/COMPDATA/ATGUARD.HTM
.html
I386/COMPDATA/ATGUARD.TXT
I386/COMPDATA/AVPGATEK.HTM
.html
I386/COMPDATA/AVPGATEK.TXT
I386/COMPDATA/AWARD.HTM
.html
I386/COMPDATA/AWARD.TXT
I386/COMPDATA/BAYMAN.HTM
.html
I386/COMPDATA/BAYMAN.TXT
I386/COMPDATA/BOSERROR.HTM
.html
I386/COMPDATA/BOSERROR.TXT
I386/COMPDATA/CALCOMP.HTM
.html
I386/COMPDATA/CALCOMP.TXT
I386/COMPDATA/CARDEXEC.HTM
.html
I386/COMPDATA/CARDEXEC.TXT
I386/COMPDATA/CDR4VSD.HTM
.html
I386/COMPDATA/CDR4VSD.TXT
I386/COMPDATA/CHEYENNE.HTM
.html
I386/COMPDATA/CHEYENNE.TXT
I386/COMPDATA/CIC.HTM
.html
I386/COMPDATA/CIC.TXT
I386/COMPDATA/CLDVD.HTM
.html
I386/COMPDATA/CLDVD.TXT
I386/COMPDATA/CLUSCOMP.HTM
.html
I386/COMPDATA/CLUSCOMP.TXT
I386/COMPDATA/CNBJ51.HTM
.html
I386/COMPDATA/CNBJ51.TXT
I386/COMPDATA/CNMULTI1.HTM
.html
I386/COMPDATA/CNMULTI1.TXT
I386/COMPDATA/CPQDIAGC.HTM
.html
I386/COMPDATA/CPQDIAGC.TXT
I386/COMPDATA/CPQIJ.HTM
.html
I386/COMPDATA/CPQIJ.TXT
I386/COMPDATA/CPQKBD.HTM
.html
I386/COMPDATA/CPQKBD.TXT
I386/COMPDATA/CPQMULTI.HTM
.html
I386/COMPDATA/CPQMULTI.TXT
I386/COMPDATA/CPQPNPMG.HTM
.html
I386/COMPDATA/CPQPNPMG.TXT
I386/COMPDATA/CRASHMON.HTM
.html
I386/COMPDATA/CRASHMON.TXT
I386/COMPDATA/CRUISE.HTM
.html
I386/COMPDATA/CRUISE.TXT
I386/COMPDATA/CRYSTAL.HTM
.html
I386/COMPDATA/CRYSTAL.TXT
I386/COMPDATA/CS4281.HTM
.html
I386/COMPDATA/CS4281.TXT
I386/COMPDATA/CSA64XX.HTM
.html
I386/COMPDATA/CSA64XX.TXT
I386/COMPDATA/CSMIGRAT.HTM
.html
I386/COMPDATA/CSMIGRAT.TXT
I386/COMPDATA/CSREM32.HTM
.html
I386/COMPDATA/CSREM32.TXT
I386/COMPDATA/DAYT.HTM
.html
I386/COMPDATA/DAYT.TXT
I386/COMPDATA/DECATAPI.HTM
.html
I386/COMPDATA/DECATAPI.TXT
I386/COMPDATA/DECML.HTM
.html
I386/COMPDATA/DECML.TXT
I386/COMPDATA/DELLPS.HTM
.html
I386/COMPDATA/DELLPS.TXT
I386/COMPDATA/DELLTH.HTM
.html
I386/COMPDATA/DELLTH.TXT
I386/COMPDATA/DELPERC2.HTM
.html
I386/COMPDATA/DELPERC2.TXT
I386/COMPDATA/DESKON.HTM
.html
I386/COMPDATA/DESKON.TXT
I386/COMPDATA/DESKWOL.HTM
.html
I386/COMPDATA/DESKWOL.TXT
I386/COMPDATA/DMIBIOS.HTM
.html
I386/COMPDATA/DMIBIOS.TXT
I386/COMPDATA/DOCK.HTM
.html
I386/COMPDATA/DOCK.TXT
I386/COMPDATA/DOCKSVC.HTM
.html
I386/COMPDATA/DOCKSVC.TXT
I386/COMPDATA/DRVNCDB.HTM
.html
I386/COMPDATA/DRVNCDB.TXT
I386/COMPDATA/DSMU.HTM
.html
I386/COMPDATA/DSMU.TXT
I386/COMPDATA/DWRITE.HTM
.html
I386/COMPDATA/DWRITE.TXT
I386/COMPDATA/EICONTA.HTM
.html
I386/COMPDATA/EICONTA.TXT
I386/COMPDATA/ELSAMX.HTM
.html
I386/COMPDATA/ELSAMX.TXT
I386/COMPDATA/ENSONIQV.HTM
.html
I386/COMPDATA/ENSONIQV.TXT
I386/COMPDATA/ENSQAUDM.HTM
.html
I386/COMPDATA/ENSQAUDM.TXT
I386/COMPDATA/EPSON1.HTM
.html
I386/COMPDATA/EPSON1.TXT
I386/COMPDATA/EPSON3.HTM
.html
I386/COMPDATA/EPSON3.TXT
I386/COMPDATA/EPSON4.HTM
.html
I386/COMPDATA/EPSON4.TXT
I386/COMPDATA/EXCHANGE.HTM
.html
I386/COMPDATA/EXCHANGE.TXT
I386/COMPDATA/FAZAM.HTM
.html
I386/COMPDATA/FAZAM.TXT
I386/COMPDATA/FLOWCH7.HTM
.html
I386/COMPDATA/FLOWCH7.TXT
I386/COMPDATA/GENERIC.HTM
.html
I386/COMPDATA/GENERIC.TXT
I386/COMPDATA/GENIUS.HTM
.html
I386/COMPDATA/GENIUS.TXT
I386/COMPDATA/GLINT.HTM
.html
I386/COMPDATA/GLINT.TXT
I386/COMPDATA/HALHOOK.HTM
.html
I386/COMPDATA/HALHOOK.TXT
I386/COMPDATA/HDMIB.HTM
.html
I386/COMPDATA/HDMIB.TXT
I386/COMPDATA/HDMON.HTM
.html
I386/COMPDATA/HDMON.TXT
I386/COMPDATA/HERCULES.HTM
.html
I386/COMPDATA/HERCULES.TXT
I386/COMPDATA/HP4050P6.HTM
.html
I386/COMPDATA/HP4050P6.TXT
I386/COMPDATA/HPAIO1.HTM
.html
I386/COMPDATA/HPAIO1.TXT
I386/COMPDATA/HPAIO2.HTM
.html
I386/COMPDATA/HPAIO2.TXT
I386/COMPDATA/HPCLJ450.HTM
.html
I386/COMPDATA/HPCLJ450.TXT
I386/COMPDATA/HPCLJ850.HTM
.html
I386/COMPDATA/HPCLJ850.TXT
I386/COMPDATA/HPDJ1000.HTM
.html
I386/COMPDATA/HPDJ1000.TXT
I386/COMPDATA/HPDJ610.HTM
.html
I386/COMPDATA/HPDJ610.TXT
I386/COMPDATA/HPDJ810.HTM
.html
I386/COMPDATA/HPDJ810.TXT
I386/COMPDATA/HPDJ815.HTM
.html
I386/COMPDATA/HPDJ815.TXT
I386/COMPDATA/HPDJ830.HTM
.html
I386/COMPDATA/HPDJ830.TXT
I386/COMPDATA/HPDJ880.HTM
.html
I386/COMPDATA/HPDJ880.TXT
I386/COMPDATA/HPDMI.HTM
.html
I386/COMPDATA/HPDMI.TXT
I386/COMPDATA/HPDSK1.HTM
.html
I386/COMPDATA/HPDSK1.TXT
I386/COMPDATA/HPDSK10.HTM
.html
I386/COMPDATA/HPDSK10.TXT
I386/COMPDATA/HPDSK11.HTM
.html
I386/COMPDATA/HPDSK11.TXT
I386/COMPDATA/HPDSK12.HTM
.html
I386/COMPDATA/HPDSK12.TXT
I386/COMPDATA/HPDSK13.HTM
.html
I386/COMPDATA/HPDSK13.TXT
I386/COMPDATA/HPDSK14.HTM
.html
I386/COMPDATA/HPDSK14.TXT
I386/COMPDATA/HPDSK2.HTM
.html
I386/COMPDATA/HPDSK2.TXT
I386/COMPDATA/HPDSK3.HTM
.html
I386/COMPDATA/HPDSK3.TXT
I386/COMPDATA/HPDSK4.HTM
.html
I386/COMPDATA/HPDSK4.TXT
I386/COMPDATA/HPDSK5.HTM
.html
I386/COMPDATA/HPDSK5.TXT
I386/COMPDATA/HPDSK6.HTM
.html
I386/COMPDATA/HPDSK6.TXT
I386/COMPDATA/HPDSK7.HTM
.html
I386/COMPDATA/HPDSK7.TXT
I386/COMPDATA/HPDSK8.HTM
.html
I386/COMPDATA/HPDSK8.TXT
I386/COMPDATA/HPDSK9.HTM
.html
I386/COMPDATA/HPDSK9.TXT
I386/COMPDATA/HPLJ1100.HTM
.html
I386/COMPDATA/HPLJ1100.TXT
I386/COMPDATA/HPLJ4050.HTM
.html
I386/COMPDATA/HPLJ4050.TXT
I386/COMPDATA/HPLJ5E.HTM
.html
I386/COMPDATA/HPLJ5E.TXT
I386/COMPDATA/HPLOCK.HTM
.html
I386/COMPDATA/HPLOCK.TXT
I386/COMPDATA/HPMMKB.HTM
.html
I386/COMPDATA/HPMMKB.TXT
I386/COMPDATA/HPNRD4M.HTM
.html
I386/COMPDATA/HPNRD4M.TXT
I386/COMPDATA/HPSMART.HTM
.html
I386/COMPDATA/HPSMART.TXT
I386/COMPDATA/HPSPARNT.HTM
.html
I386/COMPDATA/HPSPARNT.TXT
I386/COMPDATA/HPT366.HTM
.html
I386/COMPDATA/HPT366.TXT
I386/COMPDATA/HPTTIDM.HTM
.html
I386/COMPDATA/HPTTIDM.TXT
I386/COMPDATA/HP_PLD.HTM
.html
I386/COMPDATA/HP_PLD.TXT
I386/COMPDATA/IAVBOOT4.HTM
.html
I386/COMPDATA/IAVBOOT4.TXT
I386/COMPDATA/IBMIR.HTM
.html
I386/COMPDATA/IBMIR.TXT
I386/COMPDATA/IBMMPG.HTM
.html
I386/COMPDATA/IBMMPG.TXT
I386/COMPDATA/IBMSVA.HTM
.html
I386/COMPDATA/IBMSVA.TXT
I386/COMPDATA/IBMTP4.HTM
.html
I386/COMPDATA/IBMTP4.TXT
I386/COMPDATA/IBMVC.HTM
.html
I386/COMPDATA/IBMVC.TXT
I386/COMPDATA/ICPV.HTM
.html
I386/COMPDATA/ICPV.TXT
I386/COMPDATA/IMATION.HTM
.html
I386/COMPDATA/IMATION.TXT
I386/COMPDATA/INITIO.HTM
.html
I386/COMPDATA/INITIO.TXT
I386/COMPDATA/INTELATA.HTM
.html
I386/COMPDATA/INTELATA.TXT
I386/COMPDATA/INTELLIP.HTM
.html
I386/COMPDATA/INTELLIP.TXT
I386/COMPDATA/INTLSISL.HTM
.html
I386/COMPDATA/INTLSISL.TXT
I386/COMPDATA/IOCLICK.HTM
.html
I386/COMPDATA/IOCLICK.TXT
I386/COMPDATA/IOMEGA.HTM
.html
I386/COMPDATA/IOMEGA.TXT
I386/COMPDATA/ISHRNT.HTM
.html
I386/COMPDATA/ISHRNT.TXT
I386/COMPDATA/ISOTP4.HTM
.html
I386/COMPDATA/ISOTP4.TXT
I386/COMPDATA/IX526FC.HTM
.html
I386/COMPDATA/IX526FC.TXT
I386/COMPDATA/KMW.HTM
.html
I386/COMPDATA/KMW.TXT
I386/COMPDATA/LAPLINK.HTM
.html
I386/COMPDATA/LAPLINK.TXT
I386/COMPDATA/LAPLNK2K.HTM
.html
I386/COMPDATA/LAPLNK2K.TXT
I386/COMPDATA/LDCM.HTM
.html
I386/COMPDATA/LDCM.TXT
I386/COMPDATA/LEX3200.HTM
.html
I386/COMPDATA/LEX3200.TXT
I386/COMPDATA/LEXOPTRA.HTM
.html
I386/COMPDATA/LEXOPTRA.TXT
I386/COMPDATA/LM75.HTM
.html
I386/COMPDATA/LM75.TXT
I386/COMPDATA/LM78.HTM
.html
I386/COMPDATA/LM78.TXT
I386/COMPDATA/LMREPL.HTM
.html
I386/COMPDATA/LMREPL.TXT
I386/COMPDATA/LOGITECH.HTM
.html
I386/COMPDATA/LOGITECH.TXT
I386/COMPDATA/LOGKCMD.HTM
.html
I386/COMPDATA/LOGKCMD.TXT
I386/COMPDATA/LTMODEM.HTM
.html
I386/COMPDATA/LTMODEM.TXT
I386/COMPDATA/MACDRIVE.HTM
.html
I386/COMPDATA/MACDRIVE.TXT
I386/COMPDATA/MAXELL.HTM
.html
I386/COMPDATA/MAXELL.TXT
I386/COMPDATA/MBLCLEAN.INF
I386/COMPDATA/MCA.HTM
.html
I386/COMPDATA/MCA.TXT
I386/COMPDATA/MCFILTER.HTM
.html
I386/COMPDATA/MCFILTER.TXT
I386/COMPDATA/MCIS.HTM
.html
I386/COMPDATA/MCIS.TXT
I386/COMPDATA/MFPBR.HTM
.html
I386/COMPDATA/MFPBR.TXT
I386/COMPDATA/MFPHP.HTM
.html
I386/COMPDATA/MFPHP.TXT
I386/COMPDATA/MGACTRL.HTM
.html
I386/COMPDATA/MGACTRL.TXT
I386/COMPDATA/MNLT1.HTM
.html
I386/COMPDATA/MNLT1.TXT
I386/COMPDATA/MPATH.HTM
.html
I386/COMPDATA/MPATH.TXT
I386/COMPDATA/MSMQCOMP.HTM
.html
I386/COMPDATA/MSMQCOMP.TXT
I386/COMPDATA/MSP1.HTM
.html
I386/COMPDATA/MSP1.TXT
I386/COMPDATA/MSP2.HTM
.html
I386/COMPDATA/MSP2.TXT
I386/COMPDATA/MSSS3.HTM
.html
I386/COMPDATA/MSSS3.TXT
I386/COMPDATA/MSTOCK.HTM
.html
I386/COMPDATA/MSTOCK.TXT
I386/COMPDATA/MTRXG400.HTM
.html
I386/COMPDATA/MTRXG400.TXT
I386/COMPDATA/NAV5.HTM
.html
I386/COMPDATA/NAV5.TXT
I386/COMPDATA/NECPG1.HTM
.html
I386/COMPDATA/NECPG1.TXT
I386/COMPDATA/NETFMIGT.HTM
.html
I386/COMPDATA/NETFMIGT.TXT
I386/COMPDATA/NMSMS.HTM
.html
I386/COMPDATA/NMSMS.TXT
I386/COMPDATA/NTDSUPG.HTM
.html
I386/COMPDATA/NTDSUPG.TXT
I386/COMPDATA/NTDSUPGD.HTM
.html
I386/COMPDATA/NTDSUPGD.TXT
I386/COMPDATA/OCABLOCK.HTM
.html
I386/COMPDATA/OCABLOCK.TXT
I386/COMPDATA/OILCHG25.HTM
.html
I386/COMPDATA/OILCHG25.TXT
I386/COMPDATA/OKIPG1.HTM
.html
I386/COMPDATA/OKIPG1.TXT
I386/COMPDATA/OKIPG2.HTM
.html
I386/COMPDATA/OKIPG2.TXT
I386/COMPDATA/OMC.HTM
.html
I386/COMPDATA/OMC.TXT
I386/COMPDATA/ONSTREAM.HTM
.html
I386/COMPDATA/ONSTREAM.TXT
I386/COMPDATA/ORB.HTM
.html
I386/COMPDATA/ORB.TXT
I386/COMPDATA/PALM.HTM
.html
I386/COMPDATA/PALM.TXT
I386/COMPDATA/PANDA.HTM
.html
I386/COMPDATA/PANDA.TXT
I386/COMPDATA/PCANY.HTM
.html
I386/COMPDATA/PCANY.TXT
I386/COMPDATA/PCCILLIN.HTM
.html
I386/COMPDATA/PCCILLIN.TXT
I386/COMPDATA/PCDRINFO.HTM
.html
I386/COMPDATA/PCDRINFO.TXT
I386/COMPDATA/PCIINFO.HTM
.html
I386/COMPDATA/PCIINFO.TXT
I386/COMPDATA/PCPNP.HTM
.html
I386/COMPDATA/PCPNP.TXT
I386/COMPDATA/PFS.HTM
.html
I386/COMPDATA/PFS.TXT
I386/COMPDATA/PHNIXAD.HTM
.html
I386/COMPDATA/PHNIXAD.TXT
I386/COMPDATA/PHPIPE.HTM
.html
I386/COMPDATA/PHPIPE.TXT
I386/COMPDATA/POWER.HTM
.html
I386/COMPDATA/POWER.TXT
I386/COMPDATA/POWPATH.HTM
.html
I386/COMPDATA/POWPATH.TXT
I386/COMPDATA/PROLIGHT.HTM
.html
I386/COMPDATA/PROLIGHT.TXT
I386/COMPDATA/PSTRIP.HTM
.html
I386/COMPDATA/PSTRIP.TXT
I386/COMPDATA/PUMACSM.HTM
.html
I386/COMPDATA/PUMACSM.TXT
I386/COMPDATA/PWRICON.HTM
.html
I386/COMPDATA/PWRICON.TXT
I386/COMPDATA/QIC117.HTM
.html
I386/COMPDATA/QIC117.TXT
I386/COMPDATA/QUICK3.HTM
.html
I386/COMPDATA/QUICK3.TXT
I386/COMPDATA/RCENTRL.HTM
.html
I386/COMPDATA/RCENTRL.TXT
I386/COMPDATA/REACHOUT.HTM
.html
I386/COMPDATA/REACHOUT.TXT
I386/COMPDATA/RIPTIDE.HTM
.html
I386/COMPDATA/RIPTIDE.TXT
I386/COMPDATA/RUNONCE.HTM
.html
I386/COMPDATA/RUNONCE.TXT
I386/COMPDATA/SCANDRV.HTM
.html
I386/COMPDATA/SCANDRV.TXT
I386/COMPDATA/SHARSHTL.HTM
.html
I386/COMPDATA/SHARSHTL.TXT
I386/COMPDATA/SIGMA.HTM
.html
I386/COMPDATA/SIGMA.TXT
I386/COMPDATA/SIIG.HTM
.html
I386/COMPDATA/SIIG.TXT
I386/COMPDATA/SIIGC.HTM
.html
I386/COMPDATA/SIIGC.TXT
I386/COMPDATA/SISV.HTM
.html
I386/COMPDATA/SISV.TXT
I386/COMPDATA/SIWVID.HTM
.html
I386/COMPDATA/SIWVID.TXT
I386/COMPDATA/SMS.HTM
.html
I386/COMPDATA/SMS.TXT
I386/COMPDATA/SNA.HTM
.html
I386/COMPDATA/SNA.TXT
I386/COMPDATA/SNIDMI.HTM
.html
I386/COMPDATA/SNIDMI.TXT
I386/COMPDATA/SNIDPMS.HTM
.html
I386/COMPDATA/SNIDPMS.TXT
I386/COMPDATA/SNIPCI.HTM
.html
I386/COMPDATA/SNIPCI.TXT
I386/COMPDATA/SOFTOFF.HTM
.html
I386/COMPDATA/SOFTOFF.TXT
I386/COMPDATA/SONIC.HTM
.html
I386/COMPDATA/SONIC.TXT
I386/COMPDATA/SPXBLOCK.HTM
.html
I386/COMPDATA/SPXBLOCK.TXT
I386/COMPDATA/SQL.HTM
.html
I386/COMPDATA/SQL.TXT
I386/COMPDATA/SSCNTRL.HTM
.html
I386/COMPDATA/SSCNTRL.TXT
I386/COMPDATA/SSI365.HTM
.html
I386/COMPDATA/SSI365.TXT
I386/COMPDATA/SSPOWER.HTM
.html
I386/COMPDATA/SSPOWER.TXT
I386/COMPDATA/STB.HTM
.html
I386/COMPDATA/STB.TXT
I386/COMPDATA/SWOFF.HTM
.html
I386/COMPDATA/SWOFF.TXT
I386/COMPDATA/SYSMGMT.HTM
.html
I386/COMPDATA/SYSMGMT.TXT
I386/COMPDATA/SYSMON.HTM
.html
I386/COMPDATA/SYSMON.TXT
I386/COMPDATA/TIVOLI.HTM
.html
I386/COMPDATA/TIVOLI.TXT
I386/COMPDATA/TOPTOOLS.HTM
.html
I386/COMPDATA/TOPTOOLS.TXT
I386/COMPDATA/TOSDVD.HTM
.html
I386/COMPDATA/TOSDVD.TXT
I386/COMPDATA/TPCHRSRV.HTM
.html
I386/COMPDATA/TPCHRSRV.TXT
I386/COMPDATA/TPCONFIG.HTM
.html
I386/COMPDATA/TPCONFIG.TXT
I386/COMPDATA/TPFUEL.HTM
.html
I386/COMPDATA/TPFUEL.TXT
I386/COMPDATA/TPPMPORT.HTM
.html
I386/COMPDATA/TPPMPORT.TXT
I386/COMPDATA/TRIDWNW.HTM
.html
I386/COMPDATA/TRIDWNW.TXT
I386/COMPDATA/TSBAPM.HTM
.html
I386/COMPDATA/TSBAPM.TXT
I386/COMPDATA/TSBASD.HTM
.html
I386/COMPDATA/TSBASD.TXT
I386/COMPDATA/TSBHDDPW.HTM
.html
I386/COMPDATA/TSBHDDPW.TXT
I386/COMPDATA/TSBMC.HTM
.html
I386/COMPDATA/TSBMC.TXT
I386/COMPDATA/TSBVCAP.HTM
.html
I386/COMPDATA/TSBVCAP.TXT
I386/COMPDATA/TSSCIDRV.HTM
.html
I386/COMPDATA/TSSCIDRV.TXT
I386/COMPDATA/TT128.HTM
.html
I386/COMPDATA/TT128.TXT
I386/COMPDATA/UMAX.HTM
.html
I386/COMPDATA/UMAX.TXT
I386/COMPDATA/UTUPGR05.HTM
.html
I386/COMPDATA/UTUPGR05.TXT
I386/COMPDATA/UTUPGR06.HTM
.html
I386/COMPDATA/UTUPGR06.TXT
I386/COMPDATA/VIDAPPLT.HTM
.html
I386/COMPDATA/VIDAPPLT.TXT
I386/COMPDATA/WACOMDRV.HTM
.html
I386/COMPDATA/WACOMDRV.TXT
I386/COMPDATA/WCE21.HTM
.html
I386/COMPDATA/WCE21.TXT
I386/COMPDATA/WCMIGRAT.HTM
.html
I386/COMPDATA/WCMIGRAT.TXT
I386/COMPDATA/WEBSCANX.HTM
.html
I386/COMPDATA/WEBSCANX.TXT
I386/COMPDATA/WINSQL.HTM
.html
I386/COMPDATA/WINSQL.TXT
I386/COMPDATA/XEROX1.HTM
.html
I386/COMPDATA/XEROX1.TXT
I386/COMPDATA/XLINK.HTM
.html
I386/COMPDATA/XLINK.TXT
I386/COMPDATA/ZIPMAGIC.HTM
.html
I386/COMPDATA/ZIPMAGIC.TXT
I386/COMPFILT.DL_
.cab
I386/COMPLUS.FL_
.cab
I386/COMPMGMT.CH_
.cab
I386/COMPMGMT.MS_
.cab
I386/COMPOBJ.DL_
.cab
I386/COMPSTUI.DL_
.cab
I386/COMPSTUI.HL_
.cab
I386/COMREPL.DL_
.cab
I386/COMREPL.EX_
.cab
I386/COMREREG.EX_
.cab
I386/COMSETUP.DL_
.cab
I386/COMSNAP.DL_
.cab
I386/COMSVCS.DL_
.cab
I386/COMUID.DL_
.cab
I386/CONCEPTS.CH_
.cab
I386/CONF.AD_
.cab
I386/CONF.CH_
.cab
I386/CONF.CN_
.cab
I386/CONF.EX_
.cab
I386/CONF.HL_
.cab
I386/CONFDENT.CO_
.cab
I386/CONFIG.NT_
.cab
I386/CONFMRSL.DL_
.cab
I386/CONFMSP.DL_
.cab
I386/CONIME.EX_
.cab
I386/CONNECT.CN_
.cab
I386/CONNECT.HL_
.cab
I386/CONSOLE.DL_
.cab
I386/CONTROL.EX_
.cab
I386/CONTROT.DL_
.cab
I386/CONVERT.EX_
.cab
I386/CONVLOG.EX_
.cab
I386/CORELIST.IN_
.cab
I386/CORPOL.DL_
.cab
I386/COUE1257.FO_
.cab
I386/COUF1257.FO_
.cab
I386/COUNTER.AN_
.cab
I386/COUNTERS.DL_
.cab
I386/COUNTRY.SY_
.cab
I386/COUR.TT_
.cab
I386/COURBD.TT_
.cab
I386/COURBI.TT_
.cab
I386/COURE.FO_
.cab
I386/COUREE.FO_
.cab
I386/COUREG.FO_
.cab
I386/COURER.FO_
.cab
I386/COURET.FO_
.cab
I386/COURF.FO_
.cab
I386/COURFE.FO_
.cab
I386/COURFG.FO_
.cab
I386/COURFR.FO_
.cab
I386/COURFT.FO_
.cab
I386/COURI.TT_
.cab
I386/CPANEL.CH_
.cab
I386/CPANEL_W.CH_
.cab
I386/CPQARRAY.SY_
.cab
I386/CPQARRY2.SY_
.cab
I386/CPQFCALM.SY_
.cab
I386/CPQFWS2E.SY_
.cab
I386/CROSS.CU_
.cab
I386/CROSS_I.CU_
.cab
I386/CROSS_IL.CU_
.cab
I386/CROSS_IM.CU_
.cab
I386/CROSS_L.CU_
.cab
I386/CROSS_M.CU_
.cab
I386/CROSS_R.CU_
.cab
I386/CROSS_RL.CU_
.cab
I386/CROSS_RM.CU_
.cab
I386/CRTDLL.DL_
.cab
I386/CRYPT32.DL_
.cab
I386/CRYPTDLG.DL_
.cab
I386/CRYPTDLL.DL_
.cab
I386/CRYPTEXT.DL_
.cab
I386/CRYPTNET.DL_
.cab
I386/CRYPTSVC.DL_
.cab
I386/CRYPTUI.DL_
.cab
I386/CSAPI3T1.DL_
.cab
I386/CSCDLL.DL_
.cab
I386/CSCRIPT.EX_
.cab
I386/CSCUI.DL_
.cab
I386/CSCUI.HL_
.cab
I386/CSRSRV.DL_
.cab
I386/CSRSS.EX_
.cab
I386/CTL3D32.DL_
.cab
I386/CTL3DV2.DL_
.cab
I386/CTLEGACY.IN_
.cab
I386/CTMAPORT.IN_
.cab
I386/CTMVPORT.IN_
.cab
I386/CTYPE.NL_
.cab
I386/C_037.NL_
.cab
I386/C_10000.NL_
.cab
I386/C_10001.NL_
.cab
I386/C_10002.NL_
.cab
I386/C_10003.NL_
.cab
I386/C_10004.NL_
.cab
I386/C_10005.NL_
.cab
I386/C_10006.NL_
.cab
I386/C_10007.NL_
.cab
I386/C_10008.NL_
.cab
I386/C_10010.NL_
.cab
I386/C_10017.NL_
.cab
I386/C_10021.NL_
.cab
I386/C_10029.NL_
.cab
I386/C_10079.NL_
.cab
I386/C_10081.NL_
.cab
I386/C_10082.NL_
.cab
I386/C_1026.NL_
.cab
I386/C_1047.NL_
.cab
I386/C_1140.NL_
.cab
I386/C_1141.NL_
.cab
I386/C_1142.NL_
.cab
I386/C_1143.NL_
.cab
I386/C_1144.NL_
.cab
I386/C_1145.NL_
.cab
I386/C_1146.NL_
.cab
I386/C_1147.NL_
.cab
I386/C_1148.NL_
.cab
I386/C_1149.NL_
.cab
I386/C_1250.NL_
.cab
I386/C_1251.NL_
.cab
I386/C_1252.NL_
.cab
I386/C_1253.NL_
.cab
I386/C_1254.NL_
.cab
I386/C_1255.NL_
.cab
I386/C_1256.NL_
.cab
I386/C_1257.NL_
.cab
I386/C_1258.NL_
.cab
I386/C_1361.NL_
.cab
I386/C_20000.NL_
.cab
I386/C_20001.NL_
.cab
I386/C_20002.NL_
.cab
I386/C_20003.NL_
.cab
I386/C_20004.NL_
.cab
I386/C_20005.NL_
.cab
I386/C_20105.NL_
.cab
I386/C_20106.NL_
.cab
I386/C_20107.NL_
.cab
I386/C_20108.NL_
.cab
I386/C_20127.NL_
.cab
I386/C_20261.NL_
.cab
I386/C_20269.NL_
.cab
I386/C_20273.NL_
.cab
I386/C_20277.NL_
.cab
I386/C_20278.NL_
.cab
I386/C_20280.NL_
.cab
I386/C_20284.NL_
.cab
I386/C_20285.NL_
.cab
I386/C_20290.NL_
.cab
I386/C_20297.NL_
.cab
I386/C_20420.NL_
.cab
I386/C_20423.NL_
.cab
I386/C_20424.NL_
.cab
I386/C_20833.NL_
.cab
I386/C_20838.NL_
.cab
I386/C_20866.NL_
.cab
I386/C_20871.NL_
.cab
I386/C_20880.NL_
.cab
I386/C_20905.NL_
.cab
I386/C_20924.NL_
.cab
I386/C_20930.NL_
.cab
I386/C_20931.NL_
.cab
I386/C_20932.NL_
.cab
I386/C_20933.NL_
.cab
I386/C_20935.NL_
.cab
I386/C_20936.NL_
.cab
I386/C_20937.NL_
.cab
I386/C_20939.NL_
.cab
I386/C_20949.NL_
.cab
I386/C_20950.NL_
.cab
I386/C_21025.NL_
.cab
I386/C_21027.NL_
.cab
I386/C_21866.NL_
.cab
I386/C_28591.NL_
.cab
I386/C_28592.NL_
.cab
I386/C_28593.NL_
.cab
I386/C_28594.NL_
.cab
I386/C_28595.NL_
.cab
I386/C_28596.NL_
.cab
I386/C_28597.NL_
.cab
I386/C_28598.NL_
.cab
I386/C_28599.NL_
.cab
I386/C_28605.NL_
.cab
I386/C_437.NL_
.cab
I386/C_500.NL_
.cab
I386/C_708.NL_
.cab
I386/C_720.NL_
.cab
I386/C_737.NL_
.cab
I386/C_775.NL_
.cab
I386/C_850.NL_
.cab
I386/C_852.NL_
.cab
I386/C_855.NL_
.cab
I386/C_857.NL_
.cab
I386/C_858.NL_
.cab
I386/C_860.NL_
.cab
I386/C_861.NL_
.cab
I386/C_862.NL_
.cab
I386/C_863.NL_
.cab
I386/C_864.NL_
.cab
I386/C_865.NL_
.cab
I386/C_866.NL_
.cab
I386/C_869.NL_
.cab
I386/C_870.NL_
.cab
I386/C_874.NL_
.cab
I386/C_875.NL_
.cab
I386/C_932.NL_
.cab
I386/C_936.NL_
.cab
I386/C_949.NL_
.cab
I386/C_950.NL_
.cab
I386/C_IS2022.DL_
.cab
I386/C_ISCII.DL_
.cab
I386/D3DIM.DL_
.cab
I386/D3DIM700.DL_
.cab
I386/D3DPMESH.DL_
.cab
I386/D3DRAMP.DL_
.cab
I386/D3DREF.DL_
.cab
I386/D3DRM.DL_
.cab
I386/D3DXOF.DL_
.cab
I386/DAC960NT.SY_
.cab
I386/DANCEO~2.RM_
.cab
I386/DANIM.DL_
.cab
I386/DAO360.DL_
.cab
I386/DATACLEN.DL_
.cab
I386/DATETIME.CH_
.cab
I386/DATIME.DL_
.cab
I386/DAXCTLE.OC_
.cab
I386/DBGHELP.DLL
.dll windows:5 windows x86 arch:x86

29ba6cfb5bc74e73404bb0c1dc60e0db

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

msvcrt

_onexit
_adjust_fdiv
__dllonexit
_except_handler3
_strlwr
malloc
_initterm
strstr
_ftol
strncmp
_vsnprintf
_ltoa
_itoa
_makepath
tolower
strncat
wcsncpy
sprintf
qsort
free
wcslen
calloc
_splitpath
_mbsnbcpy
time
fflush
_iob
_purecall
_fullpath
_close
_read
_sopen
_memicmp
_open_osfhandle
_lseek
_errno
_write
_chsize
_mbsicmp
_mbsrchr
printf
_access
bsearch
memmove
_mbscmp
_stricmp
_strnicmp
strncpy
strchr

kernel32

WideCharToMultiByte
IsDBCSLeadByte
CopyFileA
GetVersion
FindClose
ReadProcessMemory
VirtualAlloc
OutputDebugStringA
VirtualFree
GetCurrentProcessId
VirtualProtect
lstrcpyA
DuplicateHandle
ExpandEnvironmentStringsA
LoadLibraryA
FreeLibrary
GetFileSize
MapViewOfFile
lstrlenA
CreateFileMappingA
GetProcAddress
GetModuleHandleA
MultiByteToWideChar
GetCurrentProcess
UnmapViewOfFile
GetEnvironmentVariableA
GetFileAttributesA
SetLastError
CloseHandle
CreateFileA
GetFullPathNameA
GetLastError
HeapCreate
HeapDestroy
FindNextFileA
FindFirstFileA
CreateDirectoryA
HeapAlloc
HeapFree
DisableThreadLibraryCalls
GetVersionExA
HeapReAlloc

Exports

Exports

EnumerateLoadedModules
EnumerateLoadedModules64
ExtensionApiVersion
FindDebugInfoFile
FindDebugInfoFileEx
FindExecutableImage
FindExecutableImageEx
FindFileInSearchPath
GetTimestampForLoadedLibrary
ImageDirectoryEntryToData
ImageDirectoryEntryToDataEx
ImageNtHeader
ImageRvaToSection
ImageRvaToVa
ImagehlpApiVersion
ImagehlpApiVersionEx
MakeSureDirectoryPathExists
MapDebugInformation
SearchTreeForFile
StackWalk
StackWalk64
SymCleanup
SymEnumerateModules
SymEnumerateModules64
SymEnumerateSymbols
SymEnumerateSymbols64
SymEnumerateSymbolsW
SymEnumerateSymbolsW64
SymFunctionTableAccess
SymFunctionTableAccess64
SymGetLineFromAddr
SymGetLineFromAddr64
SymGetLineFromName
SymGetLineFromName64
SymGetLineNext
SymGetLineNext64
SymGetLinePrev
SymGetLinePrev64
SymGetModuleBase
SymGetModuleBase64
SymGetModuleInfo
SymGetModuleInfo64
SymGetModuleInfoEx
SymGetModuleInfoEx64
SymGetModuleInfoW
SymGetModuleInfoW64
SymGetOptions
SymGetSearchPath
SymGetSymFromAddr
SymGetSymFromAddr64
SymGetSymFromName
SymGetSymFromName64
SymGetSymNext
SymGetSymNext64
SymGetSymPrev
SymGetSymPrev64
SymGetSymbolInfo
SymGetSymbolInfo64
SymInitialize
SymLoadModule
SymLoadModule64
SymMatchFileName
SymRegisterCallback
SymRegisterCallback64
SymRegisterFunctionEntryCallback
SymRegisterFunctionEntryCallback64
SymSetOptions
SymSetSearchPath
SymUnDName
SymUnDName64
SymUnloadModule
SymUnloadModule64
UnDecorateSymbolName
UnmapDebugInformation
WinDbgExtensionDllInit
sym

Sections

.text
Size: 149KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/DBMSADSN.DL_
.cab
I386/DBMSRPCN.DL_
.cab
I386/DBMSSOCN.DL_
.cab
I386/DBMSSPXN.DL_
.cab
I386/DBMSVINN.DL_
.cab
I386/DBNMPNTW.DL_
.cab
I386/DCAP32.DL_
.cab
I386/DCIMAN32.DL_
.cab
I386/DCOMCNFG.CH_
.cab
I386/DCOMCNFG.EX_
.cab
I386/DCOMCNFG.HL_
.cab
I386/DCOMEXT.DL_
.cab
I386/DCUP5.IN_
.cab
I386/DDAO36U.DL_
.cab
I386/DDEML.DL_
.cab
I386/DDESHARE.CH_
.cab
I386/DDESHARE.EX_
.cab
I386/DDESHARE.HL_
.cab
I386/DDMPRXY.EX_
.cab
I386/DDRAW.DL_
.cab
I386/DDRAWEX.DL_
.cab
I386/DEBUG.EX_
.cab
I386/DEFAULT.AS_
.cab
I386/DEFLTDC.IN_
.cab
I386/DEFLTSV.IN_
.cab
I386/DEFLTWK.IN_
.cab
I386/DEFRAG.CH_
.cab
I386/DEFRAG.HL_
.cab
I386/DELTTSUL.EX_
.cab
I386/DELUXCD.CH_
.cab
I386/DELUXCD.HL_
.cab
I386/DESK.CP_
.cab
I386/DESKADP.DL_
.cab
I386/DESKMON.DL_
.cab
I386/DESKPERF.DL_
.cab
I386/DESKTOP.IN_
.cab
I386/DEVENUM.DL_
.cab
I386/DEVMGMT.MS_
.cab
I386/DEVMGR.CH_
.cab
I386/DEVMGR.DL_
.cab
I386/DEVMGR.HL_
.cab
I386/DFRG.IN_
.cab
I386/DFRG.MS_
.cab
I386/DFRGFAT.EX_
.cab
I386/DFRGNTFS.EX_
.cab
I386/DFRGRES.DL_
.cab
I386/DFRGSNAP.DL_
.cab
I386/DFRGUI.DL_
.cab
I386/DFSSHLEX.DL_
.cab
I386/DG18D50.IC_
.cab
I386/DG18D65.IC_
.cab
I386/DG18D93.IC_
.cab
I386/DG22D50.IC_
.cab
I386/DG22D65.IC_
.cab
I386/DG22D93.IC_
.cab
I386/DGAPORT.IN_
.cab
I386/DGASYNC.IN_
.cab
I386/DGCLASS.DL_
.cab
I386/DGRPSETU.DL_
.cab
I386/DGSETUP.DL_
.cab
I386/DHCP.MI_
.cab
I386/DHCPCSVC.DL_
.cab
I386/DHCPMON.DL_
.cab
I386/DHCPSAPI.DL_
.cab
I386/DHTMLED.OC_
.cab
I386/DIAGBOOT.CH_
.cab
I386/DIALER.CH_
.cab
I386/DIALER.EX_
.cab
I386/DIALER.HL_
.cab
I386/DIANTZ.EX_
.cab
I386/DIDIVA.IN_
.cab
I386/DIGEST.DL_
.cab
I386/DIGIISDN.IN_
.cab
I386/DIGIRP.IN_
.cab
I386/DIGIRPRT.IN_
.cab
I386/DIJOY.HL_
.cab
I386/DING.WA_
.cab
I386/DINOSAU2.AN_
.cab
I386/DINOSAUR.AN_
.cab
I386/DINPUT.DL_
.cab
I386/DIRECTDB.DL_
.cab
I386/DISCOVER.EX_
.cab
I386/DISK.IN_
.cab
I386/DISK.SY_
.cab
I386/DISK1
I386/DISKCOMP.CO_
.cab
I386/DISKCOPY.CO_
.cab
I386/DISKCOPY.DL_
.cab
I386/DISKDUMP.SY_
.cab
I386/DISKMGMT.CH_
.cab .ps1 polyglot
I386/DISKMGMT.HL_
.cab
I386/DISKMGMT.MS_
.cab
I386/DISKPERF.EX_
.cab
I386/DISKPERF.SY_
.cab
I386/DISPDET.IN_
.cab
I386/DISPEX.DL_
.cab
I386/DISPLAY.CH_
.cab
I386/DISPLAY.HL_
.cab
I386/DISPLAY.IN_
.cab
I386/DLC.SY_
.cab
I386/DLCAPI.DL_
.cab
I386/DLLHOST.EX_
.cab
I386/DLLHST3G.EX_
.cab
I386/DMADMIN.EX_
.cab
I386/DMBAND.DL_
.cab
I386/DMBOOT.SY_
.cab
I386/DMCOMPOS.DL_
.cab
I386/DMCONFIG.DL_
.cab
I386/DMDLGS.DL_
.cab
I386/DMDSKMGR.DL_
.cab
I386/DMDSKRES.DL_
.cab
I386/DMIME.DL_
.cab
I386/DMINTF.DL_
.cab
I386/DMIO.SY_
.cab
I386/DMLOAD.SY_
.cab
I386/DMLOADER.DL_
.cab
I386/DMOCX.DL_
.cab
I386/DMREG.INF
I386/DMREMOTE.EX_
.cab
I386/DMSERVER.DL_
.cab
I386/DMSTYLE.DL_
.cab
I386/DMSYNTH.DL_
.cab
I386/DMUSIC.DL_
.cab
I386/DMUTIL.DL_
.cab
I386/DMVIEW.OC_
.cab
I386/DNARY.MD_
.cab
I386/DNLOAD.BI_
.cab
I386/DNSAPI.DL_
.cab
I386/DNSMGMT.MS_
.cab
I386/DNSRSLVR.DL_
.cab
I386/DOCPROP.DL_
.cab
I386/DOCPROP2.DL_
.cab
I386/DOS737.FO_
.cab
I386/DOS869.FO_
.cab
I386/DOSAPP.FO_
.cab
I386/DOSCALLS.DL_
.cab
I386/DOSHELP.HL_
.cab
I386/DOSKEY.EX_
.cab
I386/DOSNET.INF
I386/DOSX.EX_
.cab
I386/DOT4.IN_
.cab
I386/DOT4PRT.IN_
.cab
I386/DPLAY.DL_
.cab
I386/DPLAYSVR.EX_
.cab
I386/DPLAYX.DL_
.cab
I386/DPMODEMX.DL_
.cab
I386/DPSERIAL.DL_
.cab
I386/DPWSOCK.DL_
.cab
I386/DPWSOCKX.DL_
.cab
I386/DRIVER.CAB
.cab
I386/DRIVPROP.CH_
.cab
I386/DRMCLIEN.DL_
.cab
I386/DRMSTOR.DL_
.cab
I386/DRUM.AN_
.cab
I386/DRVINDEX.INF
I386/DRVVFP.CH_
.cab
I386/DRWATSON.EX_
.cab
I386/DRWTSN32.CH_
.cab
I386/DRWTSN32.EX_
.cab
I386/DRWTSN32.HL_
.cab
I386/DS16GT.DL_
.cab
I386/DS32GT.DL_
.cab
I386/DSAUTH.DL_
.cab
I386/DSCLIENT.HL_
.cab
I386/DSCTL.DL_
.cab
I386/DSEXTS.DL_
.cab
I386/DSFOLDER.DL_
.cab
I386/DSHOWEXT.IN_
.cab
I386/DSKOUI_W.CH_
.cab
I386/DSKQUOTA.DL_
.cab
I386/DSKQUOUI.DL_
.cab
I386/DSKQUOUI.HL_
.cab
I386/DSOUND.DL_
.cab
I386/DSOUND.VX_
.cab
I386/DSOUND3D.DL_
.cab
I386/DSPROP.DL_
.cab
I386/DSPROV.DL_
.cab
I386/DSPROV.MO_
.cab
I386/DSQUERY.DL_
.cab
I386/DSSBASE.DLL
.dll regsvr32 windows:5 windows x86 arch:x86

5fbf390fe381d31c7df93703fa7cd8a9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

RtlUnwind
HeapFree
GetComputerNameA
GetDiskFreeSpaceA
GlobalMemoryStatus
QueryPerformanceCounter
GetLocalTime
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetProcAddress
DeviceIoControl
GetModuleHandleW
Sleep
lstrcpyA
IsBadWritePtr
SetFileAttributesW
CreateDirectoryW
GetCurrentProcess
GetCurrentThread
LoadLibraryW
GetSystemDirectoryW
CreateFileW
FindFirstFileExW
WriteFile
DeleteFileW
MoveFileW
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
WideCharToMultiByte
FindNextFileW
LoadLibraryExA
LocalReAlloc
_lclose
SetFilePointer
OpenFile
RtlMoveMemory
GetSystemDirectoryA
lstrlenA
lstrcatA
CreateFileA
GetFileSize
CloseHandle
VirtualAlloc
ReadFile
VirtualFree
FindResourceA
LoadResource
SizeofResource
FreeLibrary
lstrcmpA
GetVersionExA
DisableThreadLibraryCalls
LoadLibraryA
lstrlenW
EnterCriticalSection
GetLastError
LeaveCriticalSection
RaiseException
FindClose
SetLastError
InitializeCriticalSection
DeleteCriticalSection
LocalFree
LocalAlloc
GetProcessHeap
HeapAlloc
MultiByteToWideChar

user32

wsprintfA
wsprintfW
LoadStringA
LoadStringW
MessageBoxA

ole32

CoTaskMemFree

advapi32

GetSecurityDescriptorSacl
GetAclInformation
GetAce
ImpersonateSelf
AdjustTokenPrivileges
RegQueryInfoKeyA
RegEnumKeyA
RegDeleteKeyW
RegOpenKeyExW
LookupPrivilegeValueA
PrivilegeCheck
IsValidSid
GetSidIdentifierAuthority
GetSidSubAuthorityCount
GetSidSubAuthority
OpenThreadToken
RevertToSelf
OpenProcessToken
SetThreadToken
GetTokenInformation
EqualSid
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
AllocateAndInitializeSid
GetLengthSid
InitializeAcl
AddAccessAllowedAce
FreeSid
GetSecurityDescriptorDacl
MakeSelfRelativeSD
RegGetKeySecurity
GetUserNameA
RegCloseKey
RegQueryValueExA
GetFileSecurityW
SetFileSecurityW
GetSecurityDescriptorControl
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
GetSecurityDescriptorLength

crypt32

CryptUnprotectData
CryptProtectData
CryptEncodeObjectEx

userenv

GetProfileType

Exports

Exports

CPAcquireContext
CPCreateHash
CPDecrypt
CPDeriveKey
CPDestroyHash
CPDestroyKey
CPDuplicateHash
CPDuplicateKey
CPEncrypt
CPExportKey
CPGenKey
CPGenRandom
CPGetHashParam
CPGetKeyParam
CPGetProvParam
CPGetUserKey
CPHashData
CPHashSessionKey
CPImportKey
CPReleaseContext
CPSetHashParam
CPSetKeyParam
CPSetProvParam
CPSignHash
CPVerifySignature
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 129KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/DSSEC.DA_
.cab
I386/DSSEC.DL_
.cab
I386/DSSENH.DL_
.cab
I386/DSUIEXT.DL_
.cab
I386/DSUP.IN_
.cab
I386/DSUPT.IN_
.cab
I386/DTCNTWKS.IN_
.cab
I386/DTCSETUP.CA_
.cab
I386/DTCSETUP.EXE
.exe windows:5 windows x86 arch:x86

13fcc049ca6234bb1902c1791b9298bb

Code Sign

4a:19:d2:38:8c:82:59:1c:a5:5d:73:5f:15:5d:dc:a3
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

12-05-1997 00:00

Not After

07-01-2004 23:59

Subject

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

08:7a:6d:5c:6f:62:93:4f:ba:c4:fd:43:e1:14:18:9d
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

28-02-2001 00:00

Not After

06-01-2004 23:59

Subject

CN=VeriSign Time Stamping Service,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)01,O=VeriSign\, Inc.

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10-01-1997 07:00

Not After

31-12-2020 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:de:aa:11:d4:d8:40:9a:a8:be:e6
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10-12-2000 08:00

Not After

12-11-2005 08:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:07:11:43:00:00:00:00:00:34
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25-05-2002 00:55

Not After

25-11-2003 01:05

Subject

CN=Microsoft Corporation,OU=Copyright (c) 2002 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
EqualSid
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
FreeSid
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegQueryInfoKeyA

kernel32

lstrcatA
GetFileAttributesA
GetShortPathNameA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetCurrentProcess
lstrlenA
lstrcmpiA
lstrcpyA
GetModuleFileNameA
FreeLibrary
LocalAlloc
GetLastError
GetSystemDirectoryA
LoadLibraryA
FindClose
FindNextFileA
DeleteFileA
SetFileAttributesA
lstrcmpA
FindFirstFileA
_lclose
_llseek
_lopen
GetWindowsDirectoryA
GetProcAddress
RemoveDirectoryA
GlobalUnlock
GlobalLock
GlobalAlloc
IsDBCSLeadByte
ExitProcess
GetModuleHandleA
CloseHandle
GetCommandLineA
LoadResource
FindResourceA
CreateMutexA
SetEvent
CreateEventA
SetCurrentDirectoryA
ResetEvent
TerminateThread
CreateThread
GetVersionExA
LocalFree
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetTempPathA
FreeResource
LockResource
SizeofResource
CreateFileA
ReadFile
WriteFile
SetFilePointer
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetTempFileNameA
GetSystemInfo
GetDriveTypeA
lstrcpynA
GetVolumeInformationA
GetCurrentDirectoryA
LoadLibraryExA
GetStartupInfoA
CreateDirectoryA
GlobalFree
FormatMessageA
GetDiskFreeSpaceA
MulDiv

gdi32

GetDeviceCaps

user32

wsprintfA
ExitWindowsEx
CharNextA
CharUpperA
GetDesktopWindow
LoadStringA
CharPrevA
GetWindowLongA
CallWindowProcA
SendDlgItemMessageA
GetDlgItem
SetForegroundWindow
SetWindowTextA
SetWindowLongA
GetDlgItemTextA
SendMessageA
SetDlgItemTextA
PeekMessageA
MsgWaitForMultipleObjects
MessageBoxA
SetWindowPos
ReleaseDC
GetDC
GetWindowRect
ShowWindow
DialogBoxIndirectParamA
MessageBeep
EndDialog
EnableWindow
DispatchMessageA

comctl32

ord17

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

Sections

.text
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
I386/DVD.IN_
.cab
I386/DVDPLAY.CH_
.cab
I386/DVDPLAY.HL_
.cab
I386/DWINTL.DL_
.cab
I386/DWUP.IN_
.cab
I386/DX7VB.DL_
.cab
I386/DXAPI.SY_
.cab
I386/DXDIAG.CH_
.cab
I386/DXDIAG.EX_
.cab
I386/DXMASF.DL_
.cab
I386/DXMRTP.DL_
.cab
I386/DXTMSFT.DL_
.cab
I386/DXTMSFT3.DL_
.cab
I386/DXTRANS.DL_
.cab
I386/E100BNT5.SY_
.cab
I386/ECLANDD.IN_
.cab
I386/ECWANDD.IN_
.cab
I386/EDB500.DL_
.cab
I386/EDIT.CO_
.cab
I386/EDIT.HL_
.cab
I386/EDLIN.EX_
.cab
I386/EFS.SY_
.cab
I386/EFSADU.DL_
.cab
I386/EGA.CP_
.cab
I386/EGA40737.FO_
.cab
I386/EGA40850.FO_
.cab
I386/EGA40852.FO_
.cab
I386/EGA40857.FO_
.cab
I386/EGA40866.FO_
.cab
I386/EGA40869.FO_
.cab
I386/EGA40WOA.FO_
.cab
I386/EGA80737.FO_
.cab
I386/EGA80850.FO_
.cab
I386/EGA80852.FO_
.cab
I386/EGA80857.FO_
.cab
I386/EGA80866.FO_
.cab
I386/EGA80869.FO_
.cab
I386/EGA80WOA.FO_
.cab
I386/EICCARD.IN_
.cab
I386/EICONA.CA_
.cab
I386/EICONP.CA_
.cab
I386/EICPCARD.IN_
.cab
I386/EICVIRTA.IN_
.cab
I386/ELS.CH_
.cab
I386/ELS.DL_
.cab
I386/ELS.HL_
.cab
I386/ENCINST.EX_
.cab
I386/ENCINST.IN_
.cab
I386/ENCRYPT.CH_
.cab
I386/EQNCLASS.DL_
.cab
I386/EQNPORT.IN_
.cab
I386/ERRORS.CH_
.cab
I386/ES.DL_
.cab
I386/ESENT.DL_
.cab
I386/ESENTPRF.DL_
.cab
I386/ESENTPRF.HX_
.cab
I386/ESENTPRF.IN_
.cab
I386/ESENTUTL.EX_
.cab
I386/EUDCEDIT.CH_
.cab
I386/EUDCEDIT.EX_
.cab
I386/EUDCEDIT.HL_
.cab
I386/EULA.TXT
I386/EVENTLOG.DL_
.cab
I386/EVENTVWR.EX_
.cab
I386/EVENTVWR.MS_
.cab
I386/EVNTAGNT.DL_
.cab
I386/EVNTCMD.EX_
.cab
I386/EVNTWIN.EX_
.cab
I386/EVNTWIN.HL_
.cab
I386/EXCEL.XL_
.cab
I386/EXCEL4.XL_
.cab
I386/EXE2BIN.EX_
.cab
I386/EXPAND.EXE
.exe windows:5 windows x86 arch:x86

cc7deb629b8ef60be772cd3f2c2c4b20

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

_initterm
__p___initenv
exit
_XcptFilter
_exit
toupper
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
printf
__getmainargs

kernel32

_lread
_llseek
_lopen
GlobalAlloc
GlobalFree
GetFileTime
CreateFileA
lstrcpynA
IsDBCSLeadByte
SetThreadLocale
GetSystemDefaultLangID
GetConsoleOutputCP
GetThreadLocale
lstrcpyA
lstrcmpiA
GetFullPathNameA
_lcreat
CloseHandle
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
lstrcatA
_lclose
LocalAlloc
LocalFree
GetFileAttributesA
GetFileSize
GetLastError
_lwrite
DeleteFileA
lstrcmpA
lstrlenA

user32

CharNextA
CharLowerA
LoadStringA
CharToOemA
CharPrevA
IsCharUpperA
IsCharLowerA

cabinet

ord23
ord20
ord21
ord22

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
I386/EXPLORER.EX_
.cab
I386/EXPLORER.SC_
.cab
I386/EXPSRV.DL_
.cab
I386/EXSTRACE.DL_
.cab
I386/EXTENUM.LD_
.cab
I386/EXTRAC32.EX_
.cab
I386/F3AHVOAS.DL_
.cab
I386/FASTFAT.SY_
.cab
I386/FASTOPEN.EX_
.cab
I386/FASTPROX.DL_
.cab
I386/FAX.CH_
.cab
I386/FAX.CP_
.cab
I386/FAX.HL_
.cab
I386/FAXADMIN.DL_
.cab
I386/FAXCOM.DL_
.cab
I386/FAXCOUNT.H_
.cab
I386/FAXCOVER.CH_
.cab
I386/FAXCOVER.EX_
.cab
I386/FAXEVENT.DL_
.cab
I386/FAXEXT.EC_
.cab
I386/FAXEXT32.DL_
.cab
I386/FAXMAPI.DL_
.cab
I386/FAXMGMT.CH_
.cab
I386/FAXOCM.DL_
.cab
I386/FAXPERF.DL_
.cab
I386/FAXPERF.IN_
.cab
I386/FAXQUEUE.CH_
.cab
I386/FAXQUEUE.EX_
.cab
I386/FAXROUTE.DL_
.cab
I386/FAXSEND.EX_
.cab
I386/FAXSERV.MS_
.cab
I386/FAXSETUP.IN_
.cab
I386/FAXSHELL.DL_
.cab
I386/FAXSVC.EX_
.cab
I386/FAXT30.DL_
.cab
I386/FAXTIFF.DL_
.cab
I386/FAXXP32.DL_
.cab
I386/FC.EX_
.cab
I386/FD16_700.SY_
.cab
I386/FDC.IN_
.cab
I386/FDC.SY_
.cab
I386/FDE.DL_
.cab
I386/FDE.HL_
.cab
I386/FDEPLOY.DL_
.cab
I386/FEATHER.BM_
.cab
I386/FECLIENT.DL_
.cab
I386/FIERULD.GI_
.cab
I386/FIESTA.HT_
.cab
I386/FIESTABG.JP_
.cab
I386/FILELIST.DA_
.cab
I386/FILEMGMT.DL_
.cab
I386/FILEMGMT.HL_
.cab
I386/FILE_SRV.CH_
.cab
I386/FILE_SRV.HL_
.cab
I386/FILLITUP.AN_
.cab
I386/FIND.CH_
.cab
I386/FIND.EX_
.cab
I386/FINDSTR.EX_
.cab
I386/FINGER.EX_
.cab
I386/FIPS.SY_
.cab
I386/FIREPORT.SY_
.cab
I386/FIXMAPI.EX_
.cab
I386/FJTSCAN.IN_
.cab
I386/FLASH.IN_
.cab
I386/FLASHPNT.SY_
.cab
I386/FLPYDISK.IN_
.cab
I386/FLPYDISK.SY_
.cab
I386/FMIFS.DL_
.cab
I386/FOLDEROP.CH_
.cab
I386/FONT.DA_
.cab
I386/FONT.IN_
.cab
I386/FONTEXT.DL_
.cab
I386/FONTS.CH_
.cab
I386/FONTS.HL_
.cab
I386/FONTSUB.DL_
.cab
I386/FONTVIEW.EX_
.cab
I386/FORCEDOS.EX_
.cab
I386/FORMAT.CO_
.cab
I386/FORTUTIL.EX_
.cab
I386/FP4.CA_
.cab
I386/FP40EXT.CAB
.cab
I386/FP40EXT.DL_
.cab
I386/FP40EXT.IN_
.cab
I386/FRAMEBUF.DL_
.cab
I386/FRAMEDYN.DL_
.cab
I386/FREECELL.CH_
.cab
I386/FREECELL.EX_
.cab
I386/FREECELL.HL_
.cab
I386/FS2.CF_
.cab
I386/FS2.DE_
.cab
I386/FS2.DL_
.cab
I386/FSCFG.DL_
.cab
I386/FSCONINS.DL_
.cab
I386/FSMGMT.MS_
.cab
I386/FSVGA.IN_
.cab
I386/FSVGAADD.IN_
.cab
I386/FSVGADEL.IN_
.cab
I386/FS_REC.SY_
.cab
I386/FTDISK.SY_
.cab
I386/FTP.EX_
.cab
I386/FTP.MI_
.cab
I386/FTPCTRS.IN_
.cab
I386/FTPCTRS2.DL_
.cab
I386/FTPMIB.DL_
.cab
I386/FTPNT5.HT_
.cab
I386/FTPQFE.EX_
.cab
I386/FTPSAPI2.DL_
.cab
I386/FTPSVC2.DL_
.cab
I386/FTSRCH.DL_
.cab
I386/FURELI~1.RM_
.cab
I386/FYI.CO_
.cab
I386/G711CODC.AX_
.cab
I386/G723CODC.AX_
.cab
I386/GAMEENUM.EX_
.cab
I386/GAMEPORT.IN_
.cab
I386/GAMES.IN_
.cab
I386/GB2312.UC_
.cab
I386/GCDEF.DL_
.cab
I386/GDI.EX_
.cab
I386/GDI32.DL_
.cab
I386/GEND9318.IC_
.cab
I386/GEND9322.IC_
.cab
I386/GENERAL.ID_
.cab
I386/GENERIC.CO_
.cab
I386/GENPRINT.IN_
.cab
I386/GEORGIA.TT_
.cab
I386/GEORGIAB.TT_
.cab
I386/GEORGIAI.TT_
.cab
I386/GEORGIAZ.TT_
.cab
I386/GETSTART.CH_
.cab
I386/GETSTART.GI_
.cab
I386/GETUNAME.DL_
.cab
I386/GLACIER.HT_
.cab
I386/GLACRBKG.JP_
.cab
I386/GLMF32.DL_
.cab
I386/GLOSSARY.CH_
.cab
I386/GLOSSARY.HL_
.cab
I386/GLU32.DL_
.cab
I386/GM.DL_
.cab
I386/GMREADME.TX_
.cab
I386/GONEFISH.BM_
.cab
I386/GPEDIT.DL_
.cab
I386/GPEDIT.HL_
.cab
I386/GPEDIT.MS_
.cab
I386/GPEDIT_W.CH_
.cab
I386/GPKCSP.DL_
.cab
I386/GPKRSRC.DL_
.cab
I386/GPRESULT.EX_
.cab
I386/GPTEXT.DL_
.cab
I386/GPTEXT.HL_
.cab
I386/GRAFTABL.CO_
.cab
I386/GRAPHICS.CO_
.cab
I386/GRAPHICS.PR_
.cab
I386/GRNSTONE.BM_
.cab
I386/GRPCONV.EX_
.cab
I386/GZIP.DL_
.cab
I386/H261_32.AX_
.cab
I386/H263_32.AX_
.cab
I386/H323.TS_
.cab
I386/H323CC.DL_
.cab
I386/H323MSP.DL_
.cab
I386/HAL.DL_
.cab
I386/HAL.IN_
.cab
I386/HALAACPI.DL_
.cab
I386/HALACPI.DL_
.cab
I386/HALAPIC.DL_
.cab
I386/HALBORG.DLL
.dll windows:5 windows x86 arch:x86

57c425bf414b96103ca0169daf88e59a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

ntoskrnl.exe

IoDeleteDevice
KeUpdateRunTime
Kei386EoiHelper
DbgPrint
DbgBreakPoint
KeBugCheck
KiIpiServiceRoutine
KiDeliverApc
KiDispatchInterrupt
KeProfileInterrupt
KeBugCheckEx
KeSetEventBoostPriority
KeWaitForSingleObject
KeFindConfigurationEntry
RtlDeleteRegistryValue
RtlWriteRegistryValue
RtlCreateRegistryKey
KeSetTimeIncrement
_aulldiv
KeRegisterBugCheckCallback
KeSetProfileIrql
HalDispatchTable
KeInitializeSpinLock
strncpy
strncmp
strstr
RtlZeroMemory
ExAllocatePoolWithTag
InbvAcquireDisplayOwnership
RtlMoveMemory
MmMapLockedPages
MmGetPhysicalAddress
MmAllocateContiguousMemorySpecifyCache
MmFreeContiguousMemory
ExFreePool
InterlockedDecrement
InterlockedIncrement
_allmul
RtlFindClearBitsAndSet
KeRemoveDeviceQueue
RtlClearBits
ObfDereferenceObject
IoAllocateAdapterChannel
MmUnlockPagableImageSection
MmLockPagableDataSection
MmMapIoSpace
RtlSetAllBits
RtlInitializeBitMap
KeInitializeDeviceQueue
ZwClose
ObInsertObject
ObReferenceObjectByPointer
ObCreateObject
IoAdapterObjectType
IoCreateDriver
RtlInitUnicodeString
IoReportDetectedDevice
_snwprintf
KeUpdateSystemTime
IoAttachDeviceToDeviceStack
IoCreateDevice
IofCallDriver
IofCompleteRequest
PoStartNextPowerIrp
ObfReferenceObject
RtlIntegerToUnicodeString
RtlCompareMemory
ZwEnumerateValueKey
ZwQueryKey
ZwEnumerateKey
ZwSetValueKey
ZwOpenKey
ZwCreateKey
IoBuildSynchronousFsdRequest
IoGetAttachedDeviceReference
KeInitializeEvent
ExAllocatePool
sprintf
ZwQueryValueKey
RtlAnsiStringToUnicodeString
RtlInitAnsiString
ExQueueWorkItem
KeInsertDeviceQueue
KeSetEvent
RtlSetBits
_allshr
IoAssignResources
KiAcquireSpinLock
KiReleaseSpinLock
IoReportHalResourceUsage
_allshl
InbvDisplayString
vsprintf
PsGetCurrentProcessId
RtlFreeUnicodeString
MmUnmapIoSpace
KeInsertQueueDpc
MmBuildMdlForNonPagedPool
MmCreateMdl
MmSizeOfMdl
_stricmp
RtlAnsiStringToUnicodeSize
RtlInitString
swprintf
_allrem
RtlFillMemory
WRITE_REGISTER_ULONG
READ_REGISTER_UCHAR
ZwPowerInformation
MmIsAddressValid
toupper
HalPrivateDispatchTable

Exports

Exports

ExAcquireFastMutex
ExReleaseFastMutex
ExTryToAcquireFastMutex
HalAcquireDisplayOwnership
HalAdjustResourceList
HalAllProcessorsStarted
HalAllocateAdapterChannel
HalAllocateCommonBuffer
HalAllocateCrashDumpRegisters
HalAssignSlotResources
HalBeginSystemInterrupt
HalCalibratePerformanceCounter
HalClearSoftwareInterrupt
HalDisableSystemInterrupt
HalDisplayString
HalEnableSystemInterrupt
HalEndSystemInterrupt
HalFlushCommonBuffer
HalFreeCommonBuffer
HalGetAdapter
HalGetBusData
HalGetBusDataByOffset
HalGetEnvironmentVariable
HalGetInterruptVector
HalHandleNMI
HalInitSystem
HalInitializeProcessor
HalMakeBeep
HalProcessorIdle
HalQueryDisplayParameters
HalQueryRealTimeClock
HalReadDmaCounter
HalReportResourceUsage
HalRequestIpi
HalRequestSoftwareInterrupt
HalReturnToFirmware
HalSetBusData
HalSetBusDataByOffset
HalSetDisplayParameters
HalSetEnvironmentVariable
HalSetProfileInterval
HalSetRealTimeClock
HalSetTimeIncrement
HalStartNextProcessor
HalStartProfileInterrupt
HalStopProfileInterrupt
HalSystemVectorDispatchEntry
HalTranslateBusAddress
HalxFlushMdl
HalxFlushPhysicalBuffer
HalxFlushVirtualBuffer
IoAssignDriveLetters
IoFlushAdapterBuffers
IoFreeAdapterChannel
IoFreeMapRegisters
IoMapTransfer
IoReadPartitionTable
IoSetPartitionInformation
IoWritePartitionTable
KdComPortInUse
KdPortGetByte
KdPortInitialize
KdPortPollByte
KdPortPutByte
KdPortRestore
KdPortSave
KeAcquireQueuedSpinLock
KeAcquireQueuedSpinLockRaiseToSynch
KeAcquireSpinLock
KeAcquireSpinLockRaiseToSynch
KeFlushWriteBuffer
KeGetCurrentIrql
KeLowerIrql
KeQueryPerformanceCounter
KeRaiseIrql
KeRaiseIrqlToDpcLevel
KeRaiseIrqlToSynchLevel
KeReleaseQueuedSpinLock
KeReleaseSpinLock
KeStallExecutionProcessor
KeTryToAcquireQueuedSpinLock
KeTryToAcquireQueuedSpinLockRaiseToSynch
KfAcquireSpinLock
KfLowerIrql
KfRaiseIrql
KfReleaseSpinLock
READ_PORT_BUFFER_UCHAR
READ_PORT_BUFFER_ULONG
READ_PORT_BUFFER_USHORT
READ_PORT_UCHAR
READ_PORT_ULONG
READ_PORT_USHORT
WRITE_PORT_BUFFER_UCHAR
WRITE_PORT_BUFFER_ULONG
WRITE_PORT_BUFFER_USHORT
WRITE_PORT_UCHAR
WRITE_PORT_ULONG
WRITE_PORT_USHORT

Sections

.text
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

_INIT16
Size: 96B - Virtual size: 69B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGELK
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGE
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/HALFTONE.HL_
.cab
I386/HALLOF~2.RM_
.cab
I386/HALMACPI.DL_
.cab
I386/HALMPS.DL_
.cab
I386/HALSP.DL_
.cab
I386/HAND.AN_
.cab
I386/HANDAPST.AN_
.cab
I386/HANDLER.RE_
.cab
I386/HANDLER.SR_
.cab
I386/HANDNESW.AN_
.cab
I386/HANDNO.AN_
.cab
I386/HANDNS.AN_
.cab
I386/HANDNWSE.AN_
.cab
I386/HANDSAFE.RE_
.cab
I386/HANDUNSF.RE_
.cab
I386/HANDWAIT.AN_
.cab
I386/HANDWE.AN_
.cab
I386/HARDWARE.CH_
.cab
I386/HARDWARE.HL_
.cab
I386/HARDWARE.IN_
.cab
I386/HARROW.CU_
.cab
I386/HCCOIN.DL_
.cab
I386/HCROSS.CU_
.cab
I386/HDWWIZ.CP_
.cab
I386/HELP.EX_
.cab
I386/HELP_I.CU_
.cab
I386/HELP_IL.CU_
.cab
I386/HELP_IM.CU_
.cab
I386/HELP_L.CU_
.cab
I386/HELP_M.CU_
.cab
I386/HELP_R.CU_
.cab
I386/HELP_RL.CU_
.cab
I386/HELP_RM.CU_
.cab
I386/HG18D50.IC_
.cab
I386/HG18D65.IC_
.cab
I386/HG18D93.IC_
.cab
I386/HG22D50.IC_
.cab
I386/HG22D65.IC_
.cab
I386/HG22D93.IC_
.cab
I386/HH.EX_
.cab
I386/HHCTRL.OC_
.cab
I386/HHCTRLUI.DL_
.cab
I386/HHSETUP.DL_
.cab
I386/HIBEAM.CU_
.cab
I386/HIDCLASS.SY_
.cab
I386/HIDPARSE.SY_
.cab
I386/HIDSERV.IN_
.cab
I386/HIDUSB.SY_
.cab
I386/HILGBBS.HT_
.cab
I386/HIMEM.SY_
.cab
I386/HINDERED.ID_
.cab
I386/HISECDC.IN_
.cab
I386/HISECWS.IN_
.cab
I386/HIVECLS.INF
I386/HIVEDEF.INF
I386/HIVESFT.INF
I386/HIVESYS.INF
I386/HIVEUSD.INF
I386/HLINK.DL_
.cab
I386/HMMAPI.DL_
.cab
I386/HMOVE.CU_
.cab
I386/HNESW.CU_
.cab
I386/HNODROP.CU_
.cab
I386/HNS.CU_
.cab
I386/HNWSE.CU_
.cab
I386/HOMEPAGE.IN_
.cab
I386/HORSE.AN_
.cab
I386/HOSTMIB.DL_
.cab
I386/HOSTMIB.MI_
.cab
I386/HOSTNAME.EX_
.cab
I386/HOSTS
I386/HOTPLUG.DL_
.cab
I386/HOURGLA2.AN_
.cab
I386/HOURGLA3.AN_
.cab
I386/HOURGLAS.AN_
.cab
I386/HOWTO.CH_
.cab
I386/HP1600MP.IC_
.cab
I386/HPCRDP.CA_
.cab
I386/HPMON.DLL
.dll windows:5 windows x86 arch:x86

0fa97ed3942c7c626bd69f5a12f79902

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

msvcrt

strcspn
wcscpy
_snwprintf
_wcsicmp
wcslen
strncmp

dlcapi

AcsLan

kernel32

Sleep
InitializeCriticalSection
lstrcatW
lstrlenW
HeapCreate
GetTickCount
ResetEvent
WaitForSingleObject
WritePrivateProfileStringW
GetPrivateProfileIntW
CreateEventW
lstrcpyW
HeapDestroy
OutputDebugStringW
ExitThread
WaitForMultipleObjects
MultiByteToWideChar
FreeLibrary
GetProcAddress
LoadLibraryW
lstrcpynA
CloseHandle
DeleteCriticalSection
SetEvent
CreateThread
GetLastError
lstrcpynW
lstrcmpW
HeapAlloc
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
SetLastError
lstrcmpiW
HeapFree

user32

wsprintfA
GetClientRect
PtInRect
SetCapture
GetFocus
CharUpperBuffW
IsCharAlphaW
IsCharAlphaNumericW
GetWindowPlacement
DefWindowProcW
GetWindowTextLengthW
GetSysColor
BeginPaint
RegisterClassW
LoadCursorW
CharNextW
KillTimer
SetTimer
IsDlgButtonChecked
GetDlgItemInt
DestroyWindow
SetFocus
EndDialog
SendDlgItemMessageW
CreateWindowExW
WinHelpW
UnregisterClassW
GetDlgItem
SetWindowTextW
GetParent
GetWindowTextW
ReleaseCapture
UpdateWindow
InvalidateRect
EndPaint
EnableWindow
PostMessageW
MessageBeep
LoadStringW
DialogBoxParamW
MessageBoxW
wsprintfW
GetWindowLongW
SetDlgItemInt
SendMessageW
SetWindowLongW

spoolss

SetJobW
ClosePrinter
RevertToPrinterSelf
ImpersonatePrinterClient
OpenPrinterW
GetJobW

advapi32

RegOpenKeyExW
RegDeleteValueW
RegEnumValueW
RegCreateKeyW
RegSetValueExW
DeregisterEventSource
RegQueryValueExW
RegisterEventSourceW
RegCloseKey
ReportEventW

gdi32

CreateSolidBrush
GetStockObject
CreatePen
DeleteObject
Polygon
SetPixel
LineTo
MoveToEx
Rectangle
SelectObject

Exports

Exports

AddPortW
ClosePort
ConfigurePortW
DeletePortW
EndDocPort
EnumPortsW
InitializeMonitor
LibMain
OpenPort
ReadPort
StartDocPort
WritePort

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/HPMON.HL_
.cab
I386/HPOJSCAN.IN_
.cab
I386/HPSCAN.IN_
.cab
I386/HPTXNT5.SY_
.cab
I386/HTICONS.DL_
.cab
I386/HTML32.CN_
.cab
I386/HTRN_JIS.DL_
.cab
I386/HTTP.MI_
.cab
I386/HTTPEXT.DL_
.cab
I386/HTTPMIB.DL_
.cab
I386/HTTPODBC.DL_
.cab
I386/HTUI.DL_
.cab
I386/HWCOMP.DAT
I386/HWE.CU_
.cab
I386/HYPERTRM.CH_
.cab
I386/HYPERTRM.DL_
.cab
I386/HYPERTRM.EX_
.cab
I386/HYPERTRM.HL_
.cab
I386/I740NT5.IN_
.cab
I386/I8042PRT.SY_
.cab
I386/I81XNT5.IN_
.cab
I386/IAC25_32.AX_
.cab
I386/IAS.MD_
.cab
I386/IAS.MS_
.cab
I386/IASACCT.DL_
.cab
I386/IASADS.DL_
.cab
I386/IASHLPR.DL_
.cab
I386/IASNAP.DL_
.cab
I386/IASNT4.CA_
.cab
I386/IASPERF.DL_
.cab
I386/IASPERF.H_
.cab
I386/IASPERF.IN_
.cab
I386/IASPIPE.DL_
.cab
I386/IASPOLCY.DL_
.cab
I386/IASRAD.DL_
.cab
I386/IASRECST.DL_
.cab
I386/IASSAM.DL_
.cab
I386/IASSDO.DL_
.cab
I386/IASSVCS.DL_
.cab
I386/IASUSERR.DL_
.cab
I386/IBMFENT5.SY_
.cab
I386/IBMSYNC.IN_
.cab
I386/IBMVCAP.IN_
.cab
I386/ICCVID.DL_
.cab
I386/ICFGNT5.DL_
.cab
I386/ICM32.DL_
.cab
I386/ICMINST.IN_
.cab
I386/ICMP.DL_
.cab
I386/ICMUI.DL_
.cab
I386/ICWCONN.DL_
.cab
I386/ICWCONN1.EX_
.cab
I386/ICWCONN2.EX_
.cab
I386/ICWDIAL.CH_
.cab
I386/ICWDIAL.DL_
.cab
I386/ICWDL.DL_
.cab
I386/ICWHELP.DL_
.cab
I386/ICWIP.DU_
.cab
I386/ICWNT5.IN_
.cab
I386/ICWPHBK.DL_
.cab
I386/ICWRES.DL_
.cab
I386/ICWRMIND.EX_
.cab
I386/ICWTUTOR.EX_
.cab
I386/ICWUTIL.DL_
.cab
I386/ICWX25A.DU_
.cab
I386/ICWX25B.DU_
.cab
I386/ICWX25C.DU_
.cab
I386/IDENT.HL_
.cab
I386/IDEOGRAF.UC_
.cab
I386/IDQ.DL_
.cab
I386/IE.IN_
.cab
I386/IE4UINIT.EX_
.cab
I386/IEACCESS.IN_
.cab
I386/IEAKENG.DL_
.cab
I386/IEAKMMC.CH_
.cab
I386/IEAKSIE.DL_
.cab
I386/IEAKUI.DL_
.cab
I386/IEDKCS32.DL_
.cab
I386/IEFILES5.IN_
.cab
I386/IEINFO5.MO_
.cab
I386/IEINFO5.OC_
.cab
I386/IEPEERS.DL_
.cab
I386/IERESET.IN_
.cab
I386/IERNONCE.DL_
.cab
I386/IESETUP.DL_
.cab
I386/IESHWIZ.EX_
.cab
I386/IESUPP.CH_
.cab
I386/IEUINIT.IN_
.cab
I386/IEWEBHLP.CH_
.cab
I386/IEXPLORE.CH_
.cab
I386/IEXPLORE.EX_
.cab
I386/IEXPLORE.HL_
.cab
I386/IEXPRESS.EX_
.cab
I386/IFMON.DL_
.cab
I386/IFSUTIL.DL_
.cab
I386/IGMPAGNT.DL_
.cab
I386/IIS.DL_
.cab
I386/IIS.IN_
.cab
I386/IIS.MS_
.cab
I386/IIS5_01.CAB
.cab
I386/IIS5_02.CAB
.cab
I386/IIS5_03.CAB
.cab
I386/IISADMIN.DL_
.cab
I386/IISCHEMA.DL_
.cab
I386/IISCLEX4.DL_
.cab
I386/IISCRMAP.DL_
.cab
I386/IISDBG.CAB
.cab
I386/IISDBG.DL_
.cab
I386/IISDBG.IN_
.cab
I386/IISEXT.DL_
.cab
I386/IISFECNV.DL_
.cab
I386/IISLOG.DL_
.cab
I386/IISMAP.DL_
.cab
I386/IISNTW.CH_
.cab
I386/IISPERF.PM_
.cab
I386/IISPERF.TX_
.cab
I386/IISPMMC.CH_
.cab
I386/IISRESET.EX_
.cab
I386/IISRSTAP.DL_
.cab
I386/IISRSTAS.EX_
.cab
I386/IISRTL.DL_
.cab
I386/IISSUBA.DL_
.cab
I386/IISSYNC.EX_
.cab
I386/IISUI.DL_
.cab
I386/ILS.DL_
.cab
I386/IMAADP32.AC_
.cab
I386/IMAGE.IN_
.cab
I386/IMAGEHLP.DLL
.dll windows:5 windows x86 arch:x86

06f7390f61d8d66a488d08b35a7c7caa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

msvcrt

_onexit
__dllonexit
_adjust_fdiv
malloc
_initterm
strncmp
strrchr
_makepath
_splitpath
_ultoa
memmove
atoi
_stricmp
_except_handler3
strchr
_mbsnbcpy
sprintf
time
fflush
_iob
_purecall
_fullpath
_close
_read
_sopen
_memicmp
_open_osfhandle
_lseek
_errno
_write
_chsize
qsort
_mbsicmp
_mbsrchr
printf
_access
_strnicmp
bsearch
_mbscmp
strncpy
free

kernel32

lstrcatA
GetModuleFileNameA
VirtualFree
GetVersion
VirtualAlloc
lstrlenA
CloseHandle
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary
CopyFileA
SetFileAttributesA
WriteFile
DeleteFileA
SetFilePointer
SetEndOfFile
SearchPathA
HeapDestroy
HeapCreate
DisableThreadLibraryCalls
GetVersionExA
HeapAlloc
HeapFree
SetLastError
WideCharToMultiByte
IsDBCSLeadByte
GetProcAddress
GetModuleHandleA
LoadLibraryA
MapViewOfFileEx
UnmapViewOfFile
FlushViewOfFile
CreateFileMappingA
GetFileSize
SetFileTime
SystemTimeToFileTime
GetSystemTime
GetLastError
MapViewOfFile
CreateFileA
lstrcmpiA
lstrcpyA

Exports

Exports

BindImage
BindImageEx
CheckSumMappedFile
EnumerateLoadedModules
EnumerateLoadedModules64
FindDebugInfoFile
FindDebugInfoFileEx
FindExecutableImage
FindExecutableImageEx
FindFileInSearchPath
GetImageConfigInformation
GetImageUnusedHeaderBytes
GetTimestampForLoadedLibrary
ImageAddCertificate
ImageDirectoryEntryToData
ImageDirectoryEntryToDataEx
ImageEnumerateCertificates
ImageGetCertificateData
ImageGetCertificateHeader
ImageGetDigestStream
ImageLoad
ImageNtHeader
ImageRemoveCertificate
ImageRvaToSection
ImageRvaToVa
ImageUnload
ImagehlpApiVersion
ImagehlpApiVersionEx
MakeSureDirectoryPathExists
MapAndLoad
MapDebugInformation
MapFileAndCheckSumA
MapFileAndCheckSumW
ReBaseImage
ReBaseImage64
RemovePrivateCvSymbolic
RemovePrivateCvSymbolicEx
RemoveRelocations
SearchTreeForFile
SetImageConfigInformation
SplitSymbols
StackWalk
StackWalk64
SymCleanup
SymEnumerateModules
SymEnumerateModules64
SymEnumerateSymbols
SymEnumerateSymbols64
SymEnumerateSymbolsW
SymEnumerateSymbolsW64
SymFunctionTableAccess
SymFunctionTableAccess64
SymGetLineFromAddr
SymGetLineFromAddr64
SymGetLineFromName
SymGetLineFromName64
SymGetLineNext
SymGetLineNext64
SymGetLinePrev
SymGetLinePrev64
SymGetModuleBase
SymGetModuleBase64
SymGetModuleInfo
SymGetModuleInfo64
SymGetModuleInfoEx
SymGetModuleInfoEx64
SymGetModuleInfoW
SymGetModuleInfoW64
SymGetOptions
SymGetSearchPath
SymGetSymFromAddr
SymGetSymFromAddr64
SymGetSymFromName
SymGetSymFromName64
SymGetSymNext
SymGetSymNext64
SymGetSymPrev
SymGetSymPrev64
SymGetSymbolInfo
SymGetSymbolInfo64
SymInitialize
SymLoadModule
SymLoadModule64
SymMatchFileName
SymRegisterCallback
SymRegisterCallback64
SymRegisterFunctionEntryCallback
SymRegisterFunctionEntryCallback64
SymSetOptions
SymSetSearchPath
SymUnDName
SymUnDName64
SymUnloadModule
SymUnloadModule64
TouchFileTimes
UnDecorateSymbolName
UnMapAndLoad
UnmapDebugInformation
UpdateDebugInfoFile
UpdateDebugInfoFileEx

Sections

.text
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/IMAGEVUE.IN_
.cab
I386/IMESHARE.DL_
.cab
I386/IMGADMIN.OC_
.cab
I386/IMGCMN.DL_
.cab
I386/IMGEDIT.OC_
.cab
I386/IMGHELP.HL_
.cab
I386/IMGMGT.CH_
.cab
I386/IMGMGT.HL_
.cab
I386/IMGSCAN.OC_
.cab
I386/IMGSHL.DL_
.cab
I386/IMGTASKS.CH_
.cab
I386/IMGTHUMB.OC_
.cab
I386/IMGUTIL.DL_
.cab
I386/IMGVIEW.CH_
.cab
I386/IMM32.DL_
.cab
I386/IMPACT.TT_
.cab
I386/IMS.CAB
.cab
I386/IMS.CAT
I386/IMS.IN_
.cab
I386/IMSINSNT.DL_
.cab
I386/INDICDLL.DL_
.cab
I386/INETCFG.DL_
.cab
I386/INETCOMM.DL_
.cab
I386/INETCORP.AD_
.cab
I386/INETCPL.CP_
.cab
I386/INETCPLC.DL_
.cab
I386/INETINFO.EX_
.cab
I386/INETMGR.DL_
.cab
I386/INETMGR.EX_
.cab
I386/INETMIB1.DL_
.cab
I386/INETPP.DL_
.cab
I386/INETRES.AD_
.cab
I386/INETRES.DL_
.cab
I386/INETSET.AD_
.cab
I386/INETSLOC.DL_
.cab
I386/INETSRV.MI_
.cab
I386/INETWIZ.EX_
.cab
I386/INFOADMN.DL_
.cab
I386/INFOCOMM.DL_
.cab
I386/INFOCTRS.DL_
.cab
I386/INFOCTRS.IN_
.cab
I386/INFOSOFT.DL_
.cab
I386/INFOSPBZ.BM_
.cab
I386/INFOSPCE.BM_
.cab
I386/INFRARED.HL_
.cab
I386/INFRAR_W.CH_
.cab
I386/INI910U.SY_
.cab
I386/INITPKI.DL_
.cab
I386/INPUT.IN_
.cab
I386/INSENG.DL_
.cab
I386/INSTALL.IN_
.cab
I386/INSTCAT.SQ_
.cab
I386/INSTCM.IN_
.cab
I386/INSTDSS5.DL_
.cab
I386/INSTIPS5.DL_
.cab
I386/INSTLSA5.DL_
.cab
I386/INSTNDI5.DL_
.cab
I386/INSTRSA5.DL_
.cab
I386/INSTSCH5.DL_
.cab
I386/INTELIDE.SY_
.cab
I386/INTELLI_.CH_
.cab
I386/INTERNAT.EX_
.cab
I386/INTL.CP_
.cab
I386/INTL.INF
I386/IOLOGMSG.DL_
.cab
I386/IPCONF.TS_
.cab
I386/IPCONFIG.EX_
.cab
I386/IPFLTDRV.SY_
.cab
I386/IPFORWD.MI_
.cab
I386/IPHLPAPI.DL_
.cab
I386/IPINFO.INF
.vbs
I386/IPINIP.SY_
.cab
I386/IPMONTR.DL_
.cab
I386/IPNAT.SY_
.cab
I386/IPNATHLP.DL_
.cab
I386/IPPROMON.DL_
.cab
I386/IPP_0000.IN_
.cab
I386/IPP_0001.AS_
.cab
I386/IPP_0002.AS_
.cab
I386/IPP_0002.GI_
.cab
I386/IPP_0003.AS_
.cab
I386/IPP_0003.GI_
.cab
I386/IPP_0004.AS_
.cab
I386/IPP_0004.GI_
.cab
I386/IPP_0005.AS_
.cab
I386/IPP_0005.GI_
.cab
I386/IPP_0006.AS_
.cab
I386/IPP_0007.AS_
.cab
I386/IPP_0008.AS_
.cab
I386/IPP_0009.AS_
.cab
I386/IPP_0010.AS_
.cab
I386/IPP_0011.AS_
.cab
I386/IPP_0012.AS_
.cab
I386/IPP_0012.GI_
.cab
I386/IPP_0013.AS_
.cab
I386/IPP_0014.AS_
.cab
I386/IPP_0015.AS_
.cab
I386/IPP_0015.GI_
.cab
I386/IPP_0016.AS_
.cab
I386/IPP_ADSI.IN_
.cab
I386/IPP_RES.IN_
.cab
I386/IPP_UTIL.IN_
.cab
I386/IPRIP.DL_
.cab
I386/IPROP.DL_
.cab
I386/IPRTPRIO.DL_
.cab
I386/IPRTRMGR.DL_
.cab
I386/IPSCON_W.CH_
.cab
I386/IPSEC.SY_
.cab
I386/IPSECMON.EX_
.cab
I386/IPSECSNP.DL_
.cab
I386/IPSECSNP.HL_
.cab
I386/IPSRAIDN.SY_
.cab
I386/IPSSNP_W.CH_
.cab
I386/IPXMONTR.DL_
.cab
I386/IPXPROMN.DL_
.cab
I386/IPXRIP.DL_
.cab
I386/IPXROUTE.EX_
.cab
I386/IPXRTMGR.DL_
.cab
I386/IPXSAP.DL_
.cab
I386/IPXWAN.DL_
.cab
I386/IR32_32.DL_
.cab
I386/IR41_32.AX_
.cab
I386/IR41_QC.DL_
.cab
I386/IR41_QCX.DL_
.cab
I386/IR50_32.DL_
.cab
I386/IR50_QC.DL_
.cab
I386/IR50_QCX.DL_
.cab
I386/IRCLASS.DL_
.cab
I386/IRDA.SY_
.cab
I386/IRDAALIF.IN_
.cab
I386/IRDASMC.IN_
.cab
I386/IRENUM.SY_
.cab
I386/IRFTP.EX_
.cab
I386/IRMON.DL_
.cab
I386/IRNSC.IN_
.cab
I386/IRPROPS.CP_
.cab
I386/IRSIR.SY_
.cab
I386/IRTOS4MO.IN_
.cab
I386/IRTOS4MU.IN_
.cab
I386/IR_BEGIN.WA_
.cab
I386/IR_END.WA_
.cab
I386/IR_INTER.WA_
.cab
I386/IS11.DL_
.cab
I386/IS11M2.DL_
.cab
I386/IS50.CF_
.cab
I386/IS50.DE_
.cab
I386/IS50.DL_
.cab
I386/IS60.CF_
.cab
I386/IS60.DE_
.cab
I386/IS60.DL_
.cab
I386/ISAPNP.SY_
.cab
I386/ISATQ.DL_
.cab
I386/ISCOMLOG.DL_
.cab
I386/ISCON_W.CH_
.cab
I386/ISIGN32.DL_
.cab
I386/ISIGNUP.EX_
.cab
I386/ISM.DL_
.cab
I386/IS_W.CH_
.cab
I386/ITIRCL.DL_
.cab
I386/ITSS.DL_
.cab
I386/IUCTL.DL_
.cab
I386/IUENGINE.DL_
.cab
I386/IVFSRC.AX_
.cab
I386/IVY.GI_
.cab
I386/IVY.HT_
.cab
I386/IWRPS.DL_
.cab
I386/IXHELP.HL_
.cab
I386/IXQLANG.HT_
.cab
I386/IXSSO.DL_
.cab
I386/JET500.DL_
.cab
I386/JOBEXEC.DL_
.cab
I386/JOY.CH_
.cab
I386/JOY.CP_
.cab
I386/JPEG1X32.DL_
.cab
I386/JPEG2X32.DL_
.cab
I386/JSCRIPT.DL_
.cab
I386/JSPROXY.DL_
.cab
I386/KANJI_1.UC_
.cab
I386/KANJI_2.UC_
.cab
I386/KB16.CO_
.cab
I386/KBD101.DL_
.cab
I386/KBD101A.DL_
.cab
I386/KBD106N.DL_
.cab
I386/KBDAL.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 218B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDARME.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDARMW.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDAX2.DL_
.cab
I386/KBDAZE.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDAZEL.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDBE.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDBENE.DL_
.cab
I386/KBDBLR.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDBR.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDBU.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 188B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDCA.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 182B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDCAN.DL_
.cab
I386/KBDCLASS.SY_
.cab
I386/KBDCR.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 214B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDCZ.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 228B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDCZ1.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 218B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDCZ2.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 218B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDDA.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 182B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDDV.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 166B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDES.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDEST.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 210B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDFC.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 186B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDFI.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 182B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDFO.DL_
.cab
I386/KBDFR.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDGAE.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 178B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDGEO.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 166B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDGKL.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 210B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDGR.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 178B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDGR1.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDHE.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDHE220.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDHE319.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 206B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDHELA2.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDHELA3.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 206B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDHEPT.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDHID.SY_
.cab
I386/KBDHU.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 218B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDHU1.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 190B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDIBM02.DL_
.cab
I386/KBDIC.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 182B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDIR.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 178B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDIT.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 170B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDIT142.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDKAZ.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDLA.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDLK41A.DL_
.cab
I386/KBDLK41J.DL_
.cab
I386/KBDLT.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 194B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDLT1.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDLV.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDLV1.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDMAC.DL_
.cab
I386/KBDNE.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDNEC.DL_
.cab
I386/KBDNEC95.DL_
.cab
I386/KBDNECAT.DL_
.cab
I386/KBDNECNT.DL_
.cab
I386/KBDNO.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 182B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDPL.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 218B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDPL1.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 202B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDPO.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 182B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDRO.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 190B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDRU.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDRU1.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDSF.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 182B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDSG.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 182B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDSL.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDSL1.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 218B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDSP.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDSW.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDTAT.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDTUF.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDTUQ.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDUK.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 170B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDUR.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 194B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDUS.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDUSA.DL_
.cab
I386/KBDUSL.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDUSR.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDUSX.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDUZB.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDVNTC.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDYCC.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KBDYCL.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

KbdLayerDescriptor

Sections

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/KDK2X0.IN_
.cab
I386/KERBEROS.DL_
.cab
I386/KERNEL32.DL_
.cab
I386/KEY01.SY_
.cab
I386/KEYB.CH_
.cab
I386/KEYBOARD.DR_
.cab
I386/KEYBOARD.IN_
.cab
I386/KEYBOARD.SY_
.cab
I386/KMDDSP.TS_
.cab
I386/KODAK.IN_
.cab
I386/KODAKIMG.EX_
.cab
I386/KODAKPRV.EX_
.cab
I386/KOREAN.UC_
.cab
I386/KRNL386.EX_
.cab
I386/KS.IN_
.cab
I386/KSC.NL_
.cab
I386/KSCAPTUR.IN_
.cab
I386/KSECDD.SY_
.cab
I386/KSFILTER.IN_
.cab
I386/KSOLAY.AX_
.cab
I386/KSQMF.AX_
.cab
I386/L3CODECX.AX_
.cab
I386/LABEL.EX_
.cab
I386/LADMIN2X.DL_
.cab
I386/LADMINPX.DL_
.cab
I386/LADMINX.DL_
.cab
I386/LANG.CH_
.cab
I386/LANG/ARA/85F1256.FO_
.cab
I386/LANG/ARA/85S1256.FO_
.cab
I386/LANG/ARA/ANDLSO.TT_
.cab
I386/LANG/ARA/ARTRBDO.TT_
.cab
I386/LANG/ARA/ARTRO.TT_
.cab
I386/LANG/ARA/COUE1256.FO_
.cab
I386/LANG/ARA/COUF1256.FO_
.cab
I386/LANG/ARA/KBDA1.DL_
.cab
I386/LANG/ARA/KBDA2.DL_
.cab
I386/LANG/ARA/KBDA3.DL_
.cab
I386/LANG/ARA/KBDFA.DL_
.cab
I386/LANG/ARA/SERE1256.FO_
.cab
I386/LANG/ARA/SERF1256.FO_
.cab
I386/LANG/ARA/SIMPBDO.TT_
.cab
I386/LANG/ARA/SIMPFXO.TT_
.cab
I386/LANG/ARA/SIMPO.TT_
.cab
I386/LANG/ARA/SMAE1256.FO_
.cab
I386/LANG/ARA/SMAF1256.FO_
.cab
I386/LANG/ARA/SSEE1256.FO_
.cab
I386/LANG/ARA/SSEF1256.FO_
.cab
I386/LANG/ARA/TRADBDO.TT_
.cab
I386/LANG/ARA/TRADO.TT_
.cab
I386/LANG/ARA/VGAF1256.FO_
.cab
I386/LANG/ARA/VGAS1256.FO_
.cab
I386/LANG/CHS/APP936.FO_
.cab
I386/LANG/CHS/CHNUCONV.CH_
.cab
I386/LANG/CHS/CHNUCONV.EX_
.cab
I386/LANG/CHS/CHSBRKR.DL_
.cab
I386/LANG/CHS/NOISE.CH_
.cab
I386/LANG/CHS/PYIME.EX_
.cab
I386/LANG/CHS/S8514FIX.FO_
.cab
I386/LANG/CHS/S8514OEM.FO_
.cab
I386/LANG/CHS/S8514SYS.FO_
.cab
I386/LANG/CHS/SIMHEI.TT_
.cab
I386/LANG/CHS/SIMSUN.TT_
.cab
I386/LANG/CHS/SVGAFIX.FO_
.cab
I386/LANG/CHS/SVGASYS.FO_
.cab
I386/LANG/CHS/VGA936.FO_
.cab
I386/LANG/CHS/WINGB.CH_
.cab
I386/LANG/CHS/WINGB.IM_
.cab
I386/LANG/CHS/WINIME.CH_
.cab
I386/LANG/CHS/WINPY.CH_
.cab
I386/LANG/CHS/WINPY.IM_
.cab
I386/LANG/CHS/WINPY.MB_
.cab
I386/LANG/CHS/WINSP.CH_
.cab
I386/LANG/CHS/WINSP.IM_
.cab
I386/LANG/CHS/WINSP.MB_
.cab
I386/LANG/CHS/WINZM.CH_
.cab
I386/LANG/CHS/WINZM.IM_
.cab
I386/LANG/CHS/WINZM.MB_
.cab
I386/LANG/CHT/A15.TB_
.cab
I386/LANG/CHT/A234.TB_
.cab
I386/LANG/CHT/ACODE.TB_
.cab
I386/LANG/CHT/APP950.FO_
.cab
I386/LANG/CHT/ARPHR.TB_
.cab .ps1 polyglot
I386/LANG/CHT/ARPTR.TB_
.cab
I386/LANG/CHT/ARRAY30.TA_
.cab
I386/LANG/CHT/ARRAYHW.TA_
.cab
I386/LANG/CHT/C8514FIX.FO_
.cab
I386/LANG/CHT/C8514OEM.FO_
.cab
I386/LANG/CHT/C8514SYS.FO_
.cab
I386/LANG/CHT/CHAJEI.IM_
.cab
I386/LANG/CHT/CHNUCONV.CH_
.cab
I386/LANG/CHT/CHNUCONV.EX_
.cab
I386/LANG/CHT/CHTBRKR.DL_
.cab
I386/LANG/CHT/CJIME.EX_
.cab
I386/LANG/CHT/CVGAFIX.FO_
.cab
I386/LANG/CHT/CVGASYS.FO_
.cab
I386/LANG/CHT/DAYI.IM_
.cab
I386/LANG/CHT/DAYIPHR.TB_
.cab
I386/LANG/CHT/DAYIPTR.TB_
.cab
I386/LANG/CHT/LCPHRASE.TB_
.cab
I386/LANG/CHT/LCPTR.TB_
.cab
I386/LANG/CHT/MINGLIU.TT_
.cab
I386/LANG/CHT/MINIIME.TP_
.cab
I386/LANG/CHT/MSDAYI.TB_
.cab
I386/LANG/CHT/NOISE.CH_
.cab
I386/LANG/CHT/PHIME.EX_
.cab
I386/LANG/CHT/PHON.IM_
.cab
I386/LANG/CHT/PHON.TB_
.cab
I386/LANG/CHT/PHONCODE.TB_
.cab
I386/LANG/CHT/PHONPTR.TB_
.cab
I386/LANG/CHT/QUICK.IM_
.cab
I386/LANG/CHT/ROMANIME.IM_
.cab
I386/LANG/CHT/UNICDIME.IM_
.cab
I386/LANG/CHT/UNIIME.DL_
.cab
I386/LANG/CHT/VGA950.FO_
.cab
I386/LANG/CHT/WINAR30.IM_
.cab
I386/LANG/CHT/WINIME.IM_
.cab
I386/LANG/HEB/85F1255.FO_
.cab
I386/LANG/HEB/85S1255.FO_
.cab
I386/LANG/HEB/AHRONBD.TT_
.cab
I386/LANG/HEB/COUE1255.FO_
.cab
I386/LANG/HEB/COUF1255.FO_
.cab
I386/LANG/HEB/DAVID.TT_
.cab
I386/LANG/HEB/DAVIDBD.TT_
.cab
I386/LANG/HEB/DAVIDTR.TT_
.cab
I386/LANG/HEB/FRANK.TT_
.cab
I386/LANG/HEB/KBDHEB.DL_
.cab
I386/LANG/HEB/KBDHEBX.DL_
.cab
I386/LANG/HEB/LVNM.TT_
.cab
I386/LANG/HEB/LVNMBD.TT_
.cab
I386/LANG/HEB/MRIAM.TT_
.cab
I386/LANG/HEB/MRIAMC.TT_
.cab
I386/LANG/HEB/MRIAMFX.TT_
.cab
I386/LANG/HEB/MRIAMTR.TT_
.cab
I386/LANG/HEB/NRKIS.TT_
.cab
I386/LANG/HEB/ROD.TT_
.cab
I386/LANG/HEB/RODTR.TT_
.cab
I386/LANG/HEB/SERE1255.FO_
.cab
I386/LANG/HEB/SERF1255.FO_
.cab
I386/LANG/HEB/SMAE1255.FO_
.cab
I386/LANG/HEB/SMAF1255.FO_
.cab
I386/LANG/HEB/SSEE1255.FO_
.cab
I386/LANG/HEB/SSEF1255.FO_
.cab
I386/LANG/HEB/VGAF1255.FO_
.cab
I386/LANG/HEB/VGAS1255.FO_
.cab
I386/LANG/IND/KBDINASA.DL_
.cab
I386/LANG/IND/KBDINBEN.DL_
.cab
I386/LANG/IND/KBDINDEV.DL_
.cab
I386/LANG/IND/KBDINGUJ.DL_
.cab
I386/LANG/IND/KBDINHIN.DL_
.cab
I386/LANG/IND/KBDINKAN.DL_
.cab
I386/LANG/IND/KBDINMAL.DL_
.cab
I386/LANG/IND/KBDINMAR.DL_
.cab
I386/LANG/IND/KBDINORI.DL_
.cab
I386/LANG/IND/KBDINPUN.DL_
.cab
I386/LANG/IND/KBDINTAM.DL_
.cab
I386/LANG/IND/KBDINTEL.DL_
.cab
I386/LANG/IND/LATHA.TT_
.cab
I386/LANG/IND/MANGAL.TT_
.cab
I386/LANG/JPN/APP932.FO_
.cab
I386/LANG/JPN/CPLEXE.EX_
.cab
I386/LANG/JPN/FTLX0411.DL_
.cab
I386/LANG/JPN/HWXJPN.DL_
.cab
I386/LANG/JPN/IMEJP.CH_
.cab
I386/LANG/JPN/IMEJP.HL_
.cab
I386/LANG/JPN/IMEJP.IM_
.cab
I386/LANG/JPN/IMEJPCH.CM_
.cab
I386/LANG/JPN/IMEJPCH.DI_
.cab
I386/LANG/JPN/IMEJPCUS.DL_
.cab
I386/LANG/JPN/IMEJPDCT.DL_
.cab
I386/LANG/JPN/IMEJPEN.CH_
.cab
I386/LANG/JPN/IMEJPEN.HL_
.cab
I386/LANG/JPN/IMEJPGN.CM_
.cab
I386/LANG/JPN/IMEJPGN.GR_
.cab
I386/LANG/JPN/IMEJPKNL.DL_
.cab
I386/LANG/JPN/IMEJPLN.CM_
.cab
I386/LANG/JPN/IMEJPLN.DI_
.cab
I386/LANG/JPN/IMEJPMGR.EX_
.cab
I386/LANG/JPN/IMEJPNM.CM_
.cab
I386/LANG/JPN/IMEJPNM.DI_
.cab
I386/LANG/JPN/IMEJPST.CM_
.cab
I386/LANG/JPN/IMEJPST.DI_
.cab
I386/LANG/JPN/IMEJPTK.CM_
.cab
I386/LANG/JPN/IMEJPTK.DI_
.cab
I386/LANG/JPN/IMEJPUEX.EX_
.cab
I386/LANG/JPN/IMEJPUTY.DL_
.cab
I386/LANG/JPN/IMEJPZP.CM_
.cab
I386/LANG/JPN/IMEJPZP.DI_
.cab
I386/LANG/JPN/IMEPAD.DL_
.cab
I386/LANG/JPN/IMESKDIC.DI_
.cab
I386/LANG/JPN/IMESKDIC.DL_
.cab
I386/LANG/JPN/IMESKF.DL_
.cab
I386/LANG/JPN/J8514FIX.FO_
.cab
I386/LANG/JPN/J8514OEM.FO_
.cab
I386/LANG/JPN/J8514SYS.FO_
.cab
I386/LANG/JPN/JSMALLE.FO_
.cab
I386/LANG/JPN/JSMALLF.FO_
.cab
I386/LANG/JPN/JVGAFIX.FO_
.cab
I386/LANG/JPN/JVGASYS.FO_
.cab
I386/LANG/JPN/MSCREATE.DI_
.cab
I386/LANG/JPN/MSGOTHIC.TT_
.cab
I386/LANG/JPN/MSIR2JP.DL_
.cab
I386/LANG/JPN/MSIR2JP.LE_
.cab
I386/LANG/JPN/MSMINCHO.TT_
.cab
I386/LANG/JPN/MULTIBOX.DL_
.cab
I386/LANG/JPN/NOISE.JP_
.cab
I386/LANG/JPN/SOFTKEY.DL_
.cab
I386/LANG/JPN/VGA932.FO_
.cab
I386/LANG/KOR/APP949.FO_
.cab
I386/LANG/KOR/BATANG.TT_
.cab
I386/LANG/KOR/GULIM.TT_
.cab
I386/LANG/KOR/H8514FIX.FO_
.cab
I386/LANG/KOR/H8514OEM.FO_
.cab
I386/LANG/KOR/H8514SYS.FO_
.cab
I386/LANG/KOR/HVGAFIX.FO_
.cab
I386/LANG/KOR/HVGASYS.FO_
.cab
I386/LANG/KOR/IMEKR.HL_
.cab
I386/LANG/KOR/IMEKR98U.IM_
.cab
I386/LANG/KOR/IMEKR98U.LE_
.cab
I386/LANG/KOR/IMEKREN.HL_
.cab
I386/LANG/KOR/KORWBRKR.DL_
.cab
I386/LANG/KOR/KORWBRKR.LE_
.cab
I386/LANG/KOR/NOISE.KO_
.cab
I386/LANG/KOR/VGA949.FO_
.cab
I386/LANG/THA/85F874.FO_
.cab
I386/LANG/THA/85S874.FO_
.cab
I386/LANG/THA/ANGSA.TT_
.cab
I386/LANG/THA/ANGSAB.TT_
.cab
I386/LANG/THA/ANGSAI.TT_
.cab
I386/LANG/THA/ANGSAU.TT_
.cab
I386/LANG/THA/ANGSAUB.TT_
.cab
I386/LANG/THA/ANGSAUI.TT_
.cab
I386/LANG/THA/ANGSAUZ.TT_
.cab
I386/LANG/THA/ANGSAZ.TT_
.cab
I386/LANG/THA/BROWA.TT_
.cab
I386/LANG/THA/BROWAB.TT_
.cab
I386/LANG/THA/BROWAI.TT_
.cab
I386/LANG/THA/BROWAU.TT_
.cab
I386/LANG/THA/BROWAUB.TT_
.cab
I386/LANG/THA/BROWAUI.TT_
.cab
I386/LANG/THA/BROWAUZ.TT_
.cab
I386/LANG/THA/BROWAZ.TT_
.cab
I386/LANG/THA/CORDIA.TT_
.cab
I386/LANG/THA/CORDIAB.TT_
.cab
I386/LANG/THA/CORDIAI.TT_
.cab
I386/LANG/THA/CORDIAU.TT_
.cab
I386/LANG/THA/CORDIAUB.TT_
.cab
I386/LANG/THA/CORDIAUI.TT_
.cab
I386/LANG/THA/CORDIAUZ.TT_
.cab
I386/LANG/THA/CORDIAZ.TT_
.cab
I386/LANG/THA/FTLX041E.DL_
.cab
I386/LANG/THA/KBDTH0.DL_
.cab
I386/LANG/THA/KBDTH1.DL_
.cab
I386/LANG/THA/KBDTH2.DL_
.cab
I386/LANG/THA/KBDTH3.DL_
.cab
I386/LANG/THA/MSDLG874.FO_
.cab
I386/LANG/THA/NOISE.TH_
.cab
I386/LANG/THA/SSEE874.FO_
.cab
I386/LANG/THA/SSEF874.FO_
.cab
I386/LANG/THA/THAWBRKR.DL_
.cab
I386/LANG/THA/UPCDB.TT_
.cab
I386/LANG/THA/UPCDBI.TT_
.cab
I386/LANG/THA/UPCDI.TT_
.cab
I386/LANG/THA/UPCDL.TT_
.cab
I386/LANG/THA/UPCEB.TT_
.cab
I386/LANG/THA/UPCEBI.TT_
.cab
I386/LANG/THA/UPCEI.TT_
.cab
I386/LANG/THA/UPCEL.TT_
.cab
I386/LANG/THA/UPCFB.TT_
.cab
I386/LANG/THA/UPCFBI.TT_
.cab
I386/LANG/THA/UPCFI.TT_
.cab
I386/LANG/THA/UPCFL.TT_
.cab
I386/LANG/THA/UPCIB.TT_
.cab
I386/LANG/THA/UPCIBI.TT_
.cab
I386/LANG/THA/UPCII.TT_
.cab
I386/LANG/THA/UPCIL.TT_
.cab
I386/LANG/THA/UPCJB.TT_
.cab
I386/LANG/THA/UPCJBI.TT_
.cab
I386/LANG/THA/UPCJI.TT_
.cab
I386/LANG/THA/UPCJL.TT_
.cab
I386/LANG/THA/UPCKB.TT_
.cab
I386/LANG/THA/UPCKBI.TT_
.cab
I386/LANG/THA/UPCKI.TT_
.cab
I386/LANG/THA/UPCKL.TT_
.cab
I386/LANG/THA/UPCLB.TT_
.cab
I386/LANG/THA/UPCLBI.TT_
.cab
I386/LANG/THA/UPCLI.TT_
.cab
I386/LANG/THA/UPCLL.TT_
.cab
I386/LANG/THA/VGAF874.FO_
.cab
I386/LANG/THA/VGAS874.FO_
.cab
I386/LANMAN.DR_
.cab
I386/LAPPSTRT.CU_
.cab
I386/LAPRXY.DL_
.cab
I386/LARROW.CU_
.cab
I386/LAYOUT.INF
I386/LBRTFDC.SY_
.cab
I386/LCROSS.CU_
.cab
I386/LEAVES.HT_
.cab
I386/LEAVESBG.JP_
.cab
I386/LEGACY.IN_
.cab
I386/LEGCYDRV.IN_
.cab
I386/LGMNTR.EX_
.cab
I386/LGSTITCH.DL_
.cab
I386/LHACM.AC_
.cab
I386/LIBEAM.CU_
.cab
I386/LICENSE.CH_
.cab
I386/LICMGR10.DL_
.cab
I386/LIGHTS.EX_
.cab
I386/LINKINFO.DL_
.cab
I386/LMHOSTS.SA_
.cab
I386/LMHSVC.DL_
.cab
I386/LMMIB2.DL_
.cab
I386/LMMIB2.MI_
.cab
I386/LMOVE.CU_
.cab
I386/LMRT.DL_
.cab
I386/LNESW.CU_
.cab
I386/LNKSTUB.EX_
.cab
I386/LNODROP.CU_
.cab
I386/LNS.CU_
.cab
I386/LNWSE.CU_
.cab
I386/LOADFIX.CO_
.cab
I386/LOADPERF.DL_
.cab
I386/LOCALE.NL_
.cab
I386/LOCALMON.DL_
.cab
I386/LOCALSEC.CH_
.cab
I386/LOCALSEC.DL_
.cab
I386/LOCALSEC.HL_
.cab
I386/LOCALSPL.DL_
.cab
I386/LOCALUI.DL_
.cab
I386/LOCATOR.EX_
.cab
I386/LOCWIN32.DL_
.cab
I386/LODCTR.EX_
.cab
I386/LOGAGENT.EX_
.cab
I386/LOGDRIVE.DL_
.cab
I386/LOGHOURS.DL_
.cab
I386/LOGIN.CM_
.cab
I386/LOGISCAN.IN_
.cab
I386/LOGOFF.WA_
.cab
I386/LOGON.SC_
.cab
I386/LOGON.WA_
.cab
I386/LOGSCRPT.DL_
.cab
I386/LOGTEMP.SQ_
.cab
I386/LOGUI.OC_
.cab
I386/LONSINT.DL_
.cab
I386/LOTUS.WK_
.cab
I386/LP6NDS35.SY_
.cab
I386/LPDSVC.DL_
.cab
I386/LPK.DL_
.cab
I386/LPQ.EX_
.cab
I386/LPR.EX_
.cab
I386/LPRHELP.DL_
.cab
I386/LPRMON.DL_
.cab
I386/LPRMONUI.DL_
.cab
I386/LSASRV.DL_
.cab
I386/LSASS.EX_
.cab
I386/LUCON.TT_
.cab
I386/LUSRMGR.MS_
.cab
I386/LVCAM.IN_
.cab
I386/LVCOMP.IN_
.cab
I386/LVSOUND.IN_
.cab
I386/LWAIT.CU_
.cab
I386/LWE.CU_
.cab
I386/LWNGMADI.IN_
.cab
I386/LWUSBHID.IN_
.cab
I386/LZ32.DL_
.cab
I386/LZEXPAND.DL_
.cab
I386/L_10646.TT_
.cab
I386/L_EXCEPT.NL_
.cab
I386/L_INTL.NL_
.cab
I386/MAC8021X.LD_
.cab
I386/MACHINE.IN_
.cab
I386/MAGNIFY.CH_
.cab
I386/MAGNIFY.EX_
.cab
I386/MAGNIFY.HL_
.cab
I386/MAG_HOOK.DL_
.cab
I386/MAIL.CH_
.cab
I386/MAIN.CP_
.cab
I386/MAIZE.HT_
.cab
I386/MAIZEBKG.JP_
.cab
I386/MAKAPT15.BA_
.cab
I386/MAKECAB.EX_
.cab
I386/MAKFRE15.BA_
.cab
I386/MANAGER.CAB
.cab
I386/MAPIMIG.CA_
.cab
I386/MAPISTUB.DL_
.cab
I386/MARLETT.TT_
.cab
I386/MBSLGN32.DL_
.cab
I386/MCAST.DL_
.cab
I386/MCASTMIB.DL_
.cab
I386/MCASTMIB.MI_
.cab
I386/MCD32.DL_
.cab
I386/MCDSRV32.DL_
.cab
I386/MCHGR.IN_
.cab
I386/MCI.HT_
.cab
I386/MCIAVI.DR_
.cab
I386/MCIAVI32.DL_
.cab
I386/MCICDA.DL_
.cab
I386/MCIOLE16.DL_
.cab
I386/MCIOLE32.DL_
.cab
I386/MCIQTZ32.DL_
.cab
I386/MCISEQ.DL_
.cab
I386/MCISEQ.DR_
.cab
I386/MCIWAVE.DL_
.cab
I386/MCIWAVE.DR_
.cab
I386/MD5FILT.DL_
.cab
I386/MDAC.IN_
.cab
I386/MDACRDME.HT_
.cab
I386/MDHCP.DL_
.cab
I386/MDM3CISA.IN_
.cab
I386/MDM3COM.IN_
.cab
I386/MDM3CPCM.IN_
.cab
I386/MDM3CUSB.IN_
.cab
I386/MDM3X.IN_
.cab
I386/MDM656N5.IN_
.cab
I386/MDMACEEX.IN_
.cab
I386/MDMADC.IN_
.cab
I386/MDMAIRTE.IN_
.cab
I386/MDMAR1.IN_
.cab
I386/MDMARCH.IN_
.cab
I386/MDMARCHT.IN_
.cab
I386/MDMARN.IN_
.cab
I386/MDMATI.IN_
.cab
I386/MDMATT.IN_
.cab
I386/MDMAUS.IN_
.cab
I386/MDMBLATZ.IN_
.cab
I386/MDMBOCA.IN_
.cab
I386/MDMBSB.IN_
.cab
I386/MDMBSCH.IN_
.cab
I386/MDMCM28.IN_
.cab
I386/MDMCMCM.IN_
.cab
I386/MDMCODEX.IN_
.cab
I386/MDMCOM1.IN_
.cab
I386/MDMCOMMU.IN_
.cab
I386/MDMCPI.IN_
.cab
I386/MDMCPQ.IN_
.cab
I386/MDMCPQ2.IN_
.cab
I386/MDMCPV.IN_
.cab
I386/MDMCRTIX.IN_
.cab
I386/MDMCTM1.IN_
.cab
I386/MDMDEFD.IN_
.cab
I386/MDMDGITN.IN_
.cab
I386/MDMDIGI.IN_
.cab
I386/MDMDISCO.IN_
.cab
I386/MDMDSI.IN_
.cab
I386/MDMDYNA.IN_
.cab
I386/MDMEIGER.IN_
.cab
I386/MDMELINK.IN_
.cab
I386/MDMELSA.IN_
.cab
I386/MDMERIC.IN_
.cab
I386/MDMERIC2.IN_
.cab
I386/MDMESS.IN_
.cab
I386/MDMETECH.IN_
.cab
I386/MDMEXP.IN_
.cab
I386/MDMEYP.IN_
.cab
I386/MDMGATEW.IN_
.cab
I386/MDMGCS.IN_
.cab
I386/MDMGEN.IN_
.cab
I386/MDMGL001.IN_
.cab
I386/MDMGL002.IN_
.cab
I386/MDMGL003.IN_
.cab
I386/MDMGL004.IN_
.cab
I386/MDMGL005.IN_
.cab
I386/MDMGL006.IN_
.cab
I386/MDMGL007.IN_
.cab
I386/MDMGL008.IN_
.cab
I386/MDMGL009.IN_
.cab
I386/MDMGL010.IN_
.cab
I386/MDMGSM.IN_
.cab
I386/MDMGV.IN_
.cab
I386/MDMGVC.IN_
.cab
I386/MDMHAEU.IN_
.cab
I386/MDMHAEUS.IN_
.cab
I386/MDMHANDY.IN_
.cab
I386/MDMHAY2.IN_
.cab
I386/MDMHAYES.IN_
.cab
I386/MDMINFOT.IN_
.cab
I386/MDMINST.DL_
.cab
I386/MDMINSYS.IN_
.cab
I386/MDMINTEL.IN_
.cab
I386/MDMINTPC.IN_
.cab
I386/MDMIRMDM.IN_
.cab
I386/MDMISDN.IN_
.cab
I386/MDMITEX.IN_
.cab
I386/MDMKE.IN_
.cab
I386/MDMKORTX.IN_
.cab
I386/MDMLASAT.IN_
.cab
I386/MDMLASNO.IN_
.cab
I386/MDMLCE.IN_
.cab
I386/MDMLNGSH.IN_
.cab
I386/MDMLT3.IN_
.cab
I386/MDMLTLEO.IN_
.cab
I386/MDMMART.IN_
.cab
I386/MDMMCOM.IN_
.cab
I386/MDMMETRI.IN_
.cab
I386/MDMMHRTZ.IN_
.cab
I386/MDMMHZA.IN_
.cab
I386/MDMMHZEL.IN_
.cab
I386/MDMMHZK1.IN_
.cab
I386/MDMMIX.IN_
.cab
I386/MDMMOD.IN_
.cab
I386/MDMMOTO.IN_
.cab
I386/MDMMOTO1.IN_
.cab
I386/MDMMOTOU.IN_
.cab
I386/MDMMTD.IN_
.cab
I386/MDMMTS.IN_
.cab
I386/MDMMULOG.IN_
.cab
I386/MDMNEUHS.IN_
.cab
I386/MDMNOKIA.IN_
.cab
I386/MDMNOKNO.IN_
.cab
I386/MDMNOVA.IN_
.cab
I386/MDMNOVFX.IN_
.cab
I386/MDMOLIC.IN_
.cab
I386/MDMOPTN.IN_
.cab
I386/MDMOSI.IN_
.cab
I386/MDMPACE.IN_
.cab
I386/MDMPBIT.IN_
.cab
I386/MDMPENR.IN_
.cab
I386/MDMPHILS.IN_
.cab
I386/MDMPN1.IN_
.cab
I386/MDMPNB.IN_
.cab
I386/MDMPP.IN_
.cab
I386/MDMPRODM.IN_
.cab
I386/MDMPSION.IN_
.cab
I386/MDMRACAL.IN_
.cab
I386/MDMRISA.IN_
.cab
I386/MDMROCK.IN_
.cab
I386/MDMROCK2.IN_
.cab
I386/MDMROCK3.IN_
.cab
I386/MDMROCK4.IN_
.cab
I386/MDMROCK5.IN_
.cab
I386/MDMRPCI.IN_
.cab
I386/MDMRPCIW.IN_
.cab
I386/MDMSECDY.IN_
.cab
I386/MDMSETUP.IN_
.cab
I386/MDMSIER.IN_
.cab
I386/MDMSIMPL.IN_
.cab
I386/MDMSMART.IN_
.cab
I386/MDMSNIT1.IN_
.cab
I386/MDMSNITN.IN_
.cab
I386/MDMSONIX.IN_
.cab
I386/MDMSPQ28.IN_
.cab
I386/MDMSRT.IN_
.cab
I386/MDMSUPR3.IN_
.cab
I386/MDMSUPRA.IN_
.cab
I386/MDMSUPRV.IN_
.cab
I386/MDMTAICM.IN_
.cab
I386/MDMTDK.IN_
.cab
I386/MDMTELBT.IN_
.cab
I386/MDMTELIN.IN_
.cab
I386/MDMTELNK.IN_
.cab
I386/MDMTEXAS.IN_
.cab
I386/MDMTGER.IN_
.cab
I386/MDMTI.IN_
.cab
I386/MDMTOSH.IN_
.cab
I386/MDMTRIPL.IN_
.cab
I386/MDMTRON.IN_
.cab
I386/MDMUCOM.IN_
.cab
I386/MDMUSRCR.IN_
.cab
I386/MDMUSRF.IN_
.cab
I386/MDMUSRG.IN_
.cab
I386/MDMUSRK1.IN_
.cab
I386/MDMUSRSP.IN_
.cab
I386/MDMUSRWP.IN_
.cab
I386/MDMVDOT.IN_
.cab
I386/MDMVICT.IN_
.cab
I386/MDMVV.IN_
.cab
I386/MDMWELL.IN_
.cab
I386/MDMWHQL0.IN_
.cab
I386/MDMWOER.IN_
.cab
I386/MDMX5560.IN_
.cab
I386/MDMYORIK.IN_
.cab
I386/MDMZOOM.IN_
.cab
I386/MDMZYP.IN_
.cab
I386/MDMZYXEL.IN_
.cab
I386/MDMZYXLD.IN_
.cab
I386/MDMZYXLG.IN_
.cab
I386/MDSYNC.DL_
.cab
I386/MDUTIL.EX_
.cab
I386/MEM.EX_
.cab
I386/MEMCARD.IN_
.cab
I386/MERLIN.AC_
.cab
I386/METADATA.DL_
.cab
I386/METRONOM.AN_
.cab
I386/MF.IN_
.cab
I386/MF3.DE_
.cab
I386/MF3216.DL_
.cab
I386/MF3C562.IN_
.cab
I386/MFC21.IN_
.cab
I386/MFC40.DL_
.cab
I386/MFC40U.DL_
.cab
I386/MFC42.DL_
.cab
I386/MFC42U.DL_
.cab
I386/MFC550.IN_
.cab
I386/MFCEM28.IN_
.cab
I386/MFCEM33.IN_
.cab
I386/MFCEM56.IN_
.cab
I386/MFCSUBS.DL_
.cab
I386/MFCUIX.HL_
.cab
I386/MFF56N5.IN_
.cab
I386/MFGENB.IN_
.cab
I386/MFLE56.IN_
.cab
I386/MFM16B.IN_
.cab
I386/MFMHZN5.IN_
.cab
I386/MFOCE2M.IN_
.cab
I386/MFOCT35.IN_
.cab
I386/MFS12CZ.DE_
.cab
I386/MFS12CZ.DL_
.cab
I386/MFSOCKET.IN_
.cab
I386/MFSUPRA.IN_
.cab
I386/MFX56NF.IN_
.cab
I386/MGA64.IN_
.cab
I386/MGMTAPI.DL_
.cab
I386/MGSYNC.IN_
.cab
I386/MGWAN5.IN_
.cab
I386/MIB.BI_
.cab
I386/MIB_II.MI_
.cab
I386/MICROSS.TT_
.cab
I386/MIDIMAP.CF_
.cab
I386/MIDIMAP.DL_
.cab
I386/MIGISOL.EX_
.cab
I386/MIGPWD.EX_
.cab
I386/MIGREGDB.EX_
.cab
I386/MIMEFILT.DL_
.cab
I386/MINIOC.IN_
.cab
I386/MIPX.MI_
.cab
I386/MLANG.DA_
.cab
I386/MLANG.DL_
.cab
I386/MLL_HP.DL_
.cab
I386/MLL_MTF.DL_
.cab
I386/MLL_QIC.DL_
.cab
I386/MLS_TRB.CH_
.cab
I386/MMC.EX_
.cab
I386/MMC.HL_
.cab
I386/MMCNDMGR.DL_
.cab
I386/MMCSHEXT.DL_
.cab
I386/MMC_W.CH_
.cab
I386/MMDET.DL_
.cab
I386/MMDRIVER.IN_
.cab
I386/MMDRV.DL_
.cab
I386/MMDRV.HL_
.cab
I386/MMEFXE.OC_
.cab
I386/MMFUTIL.DL_
.cab
I386/MMOPT.IN_
.cab
I386/MMSYS.CP_
.cab
I386/MMSYSTEM.DL_
.cab
I386/MMTASK.TS_
.cab
I386/MMUTILSE.DL_
.cab
I386/MNB22G15.IC_
.cab
I386/MNB22G18.IC_
.cab
I386/MNB22G21.IC_
.cab
I386/MNEBUG15.IC_
.cab
I386/MNEBUG18.IC_
.cab
I386/MNEBUG21.IC_
.cab
I386/MNMDD.DL_
.cab
I386/MNMDD.SY_
.cab
I386/MNMSRVC.EX_
.cab
I386/MNP22G15.IC_
.cab
I386/MNP22G18.IC_
.cab
I386/MNP22G21.IC_
.cab
I386/MOBSYNC.CH_
.cab
I386/MOBSYNC.DL_
.cab
I386/MOBSYNC.EX_
.cab
I386/MOBSYNC.HL_
.cab
I386/MODE.CO_
.cab
I386/MODEM.CAB
.cab
I386/MODEM.HL_
.cab
I386/MODEM.SY_
.cab
I386/MODEMCSA.IN_
.cab
I386/MODEMUI.DL_
.cab
I386/MODERN.FO_
.cab
I386/MODEX.DL_
.cab
I386/MODE_W.CH_
.cab
I386/MOFCOMP.EX_
.cab
I386/MOFD.DL_
.cab
I386/MONITOR.IN_
.cab
I386/MONITOR2.IN_
.cab
I386/MONITOR3.IN_
.cab
I386/MONITOR4.IN_
.cab
I386/MONITOR5.IN_
.cab
I386/MONITOR6.IN_
.cab
I386/MONITOR7.IN_
.cab
I386/MONITOR8.IN_
.cab
I386/MONITOR9.IN_
.cab
I386/MORE.CO_
.cab
I386/MORICONS.DL_
.cab
I386/MOUNTMGR.SY_
.cab
I386/MOUNTVOL.EX_
.cab
I386/MOUSE.CH_
.cab
I386/MOUSE.DR_
.cab
I386/MOUSE.HL_
.cab
I386/MOVE_I.CU_
.cab
I386/MOVE_IL.CU_
.cab
I386/MOVE_IM.CU_
.cab
I386/MOVE_L.CU_
.cab
I386/MOVE_M.CU_
.cab
I386/MOVE_R.CU_
.cab
I386/MOVE_RL.CU_
.cab
I386/MOVE_RM.CU_
.cab
I386/MOZART~2.RM_
.cab
I386/MPCODECS.IN_
.cab
I386/MPG2SPLT.AX_
.cab
I386/MPG4DS32.AX_
.cab
I386/MPLAY32.EX_
.cab
I386/MPLAYER.CH_
.cab
I386/MPLAYER.HL_
.cab
I386/MPLAYER2.CN_
.cab
I386/MPLAYER2.EX_
.cab
I386/MPLAYER2.HL_
.cab
I386/MPLAYER2.IN_
.cab
I386/MPNETWRK.HL_
.cab
I386/MPNOTIFY.EX_
.cab
I386/MPR.DL_
.cab
I386/MPRAPI.DL_
.cab
I386/MPRDDM.DL_
.cab
I386/MPRDIM.DL_
.cab
I386/MPRMSG.DL_
.cab
I386/MPRUI.DL_
.cab
I386/MPSSTLN.IN_
.cab
I386/MP_W.CH_
.cab
I386/MQ1REPL.DL_
.cab
I386/MQ1SYNC.EX_
.cab
I386/MQAC.SY_
.cab
I386/MQADS.DL_
.cab
I386/MQBKUP.EX_
.cab
I386/MQCERTUI.DL_
.cab
I386/MQDBODBC.DL_
.cab
I386/MQDSCLI.DL_
.cab
I386/MQDSSRV.DL_
.cab
I386/MQEXCHNG.CA_
.cab
I386/MQEXCHNG.EX_
.cab
I386/MQLOGMGR.DL_
.cab
I386/MQMAILOA.DL_
.cab
I386/MQMAILVB.DL_
.cab
I386/MQMIG.EX_
.cab
I386/MQMIGRAT.DL_
.cab
I386/MQOA.DL_
.cab
I386/MQOA10.TL_
.cab
I386/MQPERF.DL_
.cab
I386/MQPERF.IN_
.cab
I386/MQPRFSYM.H_
.cab
I386/MQQM.DL_
.cab
I386/MQRT.DL_
.cab
I386/MQSEC.DL_
.cab
I386/MQSNAP.DL_
.cab
I386/MQSNAP.HL_
.cab
I386/MQSVC.EX_
.cab
I386/MQSYSOC.IN_
.cab
I386/MQUPGRD.DL_
.cab
I386/MQUTIL.DL_
.cab
I386/MQXP32.DL_
.cab
I386/MRAID35X.SY_
.cab
I386/MRINFO.EX_
.cab
I386/MRIPSAP.MI_
.cab
I386/MRXSMB.SY_
.cab
I386/MSACM.DL_
.cab
I386/MSACM32.DL_
.cab
I386/MSACM32.DR_
.cab
I386/MSADCE.DL_
.cab
I386/MSADCER.DL_
.cab
I386/MSADCF.DL_
.cab
I386/MSADCFR.DL_
.cab
I386/MSADCO.DL_
.cab
I386/MSADCOR.DL_
.cab
I386/MSADCS.DL_
.cab
I386/MSADDS.DL_
.cab
I386/MSADDS32.AX_
.cab
I386/MSADDSR.DL_
.cab
I386/MSADER15.DL_
.cab
I386/MSADLIB.ID_
.cab
I386/MSADO15.DL_
.cab
I386/MSADO20.TL_
.cab
I386/MSADO21.TL_
.cab
I386/MSADOMD.DL_
.cab
I386/MSADOR15.DL_
.cab
I386/MSADOX.DL_
.cab
I386/MSADP32.AC_
.cab
I386/MSADRH15.DL_
.cab
I386/MSAFD.DL_
.cab
I386/MSAPSSPC.DL_
.cab
I386/MSASN1.DL_
.cab
I386/MSAUDITE.DL_
.cab
I386/MSBBS.HT_
.cab
I386/MSCAT32.DL_
.cab
I386/MSCDEXNT.EX_
.cab
I386/MSCLUS.DL_
.cab
I386/MSCMS.DL_
.cab
I386/MSCONF.DL_
.cab
I386/MSCONV97.DL_
.cab
I386/MSCPXL32.DL_
.cab
I386/MSDADC.DL_
.cab
I386/MSDAENUM.DL_
.cab
I386/MSDAER.DL_
.cab
I386/MSDAORA.DL_
.cab
I386/MSDAOSP.DL_
.cab
I386/MSDAPRSR.DL_
.cab
I386/MSDAPRST.DL_
.cab
I386/MSDAPS.DL_
.cab
I386/MSDAREM.DL_
.cab
I386/MSDAREMR.DL_
.cab
I386/MSDART32.DL_
.cab
I386/MSDASC.CH_
.cab
I386/MSDASC.DL_
.cab
I386/MSDASQL.DL_
.cab
I386/MSDASQLR.DL_
.cab
I386/MSDATL2.DL_
.cab
I386/MSDATSRC.TL_
.cab
I386/MSDATT.DL_
.cab
I386/MSDAURL.DL_
.cab
I386/MSDFMAP.DL_
.cab
I386/MSDFMAP.IN_
.cab
I386/MSDTC.EX_
.cab
I386/MSDTCLOG.DL_
.cab
I386/MSDTCPRF.H_
.cab
I386/MSDTCPRF.IN_
.cab
I386/MSDTCPRX.DL_
.cab
I386/MSDTCTM.DL_
.cab
I386/MSDTCUI.DL_
.cab
I386/MSDV.IN_
.cab
I386/MSDXM.OC_
.cab
I386/MSDXMLC.DL_
.cab
I386/MSENCODE.DL_
.cab
I386/MSEXCH40.DL_
.cab
I386/MSEXCL40.DL_
.cab
I386/MSF12CZ.DE_
.cab
I386/MSF12CZ.DL_
.cab
I386/MSFAXMON.DL_
.cab
I386/MSFS.SY_
.cab
I386/MSFT.MI_
.cab
I386/MSG711.AC_
.cab
I386/MSG723.AC_
.cab
I386/MSGINA.DL_
.cab
I386/MSGPC.SY_
.cab
I386/MSGSM32.AC_
.cab
I386/MSGSVC.DL_
.cab
I386/MSH261.DR_
.cab
I386/MSHDC.IN_
.cab
I386/MSHTA.EX_
.cab
I386/MSHTML.DL_
.cab
I386/MSHTML.TL_
.cab
I386/MSHTMLED.DL_
.cab
I386/MSHTMLER.DL_
.cab
I386/MSI.DL_
.cab
I386/MSI.MF_
.cab
I386/MSI.MO_
.cab
I386/MSICW.IS_
.cab
I386/MSIDENT.DL_
.cab
I386/MSIDLE.DL_
.cab
I386/MSIDLPM.DL_
.cab
I386/MSIDNTLD.DL_
.cab
I386/MSIDPE.DL_
.cab
I386/MSIEFTP.DL_
.cab
I386/MSIEXEC.EX_
.cab
I386/MSIHND.DL_
.cab
I386/MSIMAIN.SD_
.cab
I386/MSIMG32.DL_
.cab
I386/MSIMN.EX_
.cab
I386/MSIMSG.DL_
.cab
I386/MSINFO32.CH_
.cab
I386/MSINFO32.DL_
.cab
I386/MSINFO32.EX_
.cab
I386/MSINFO32.HL_
.cab
I386/MSINFO32.IN_
.cab
I386/MSINFO32.MS_
.cab
I386/MSIPBTP.MI_
.cab
I386/MSIPRIP2.MI_
.cab
I386/MSIPROV.DL_
.cab
I386/MSIRCOMM.SY_
.cab
I386/MSIREGMV.EX_
.cab
I386/MSISIP.DL_
.cab
I386/MSJET40.DL_
.cab
I386/MSJETOL1.DL_
.cab
I386/MSJINT40.DL_
.cab
I386/MSJRO.DL_
.cab
I386/MSJTER40.DL_
.cab
I386/MSJTES40.DL_
.cab
I386/MSLS31.DL_
.cab
I386/MSLTUS40.DL_
.cab
I386/MSLWVTTS.DL_
.cab
I386/MSMAIL.IN_
.cab
I386/MSMOUSE.IN_
.cab
I386/MSMQ.CP_
.cab
I386/MSMQCO_W.CH_
.cab
I386/MSMQCPL.CH_
.cab
I386/MSMQCPL.HL_
.cab
I386/MSMQOCM.DL_
.cab
I386/MSMQOCM.IN_
.cab
I386/MSMQPROP.EX_
.cab
I386/MSMQ_W.CH_
.cab
I386/MSMSCSI.IN_
.cab
I386/MSMUSB.IN_
.cab
I386/MSN.IS_
.cab
I386/MSNAUTH.CN_
.cab
I386/MSNAUTH.HL_
.cab
I386/MSNETMTG.IN_
.cab
I386/MSNSSPC.DL_
.cab
I386/MSOBJS.DL_
.cab
I386/MSOE.CH_
.cab
I386/MSOE.DL_
.cab
I386/MSOE.HL_
.cab
I386/MSOE.TX_
.cab
I386/MSOE50.IN_
.cab
I386/MSOEACCT.DL_
.cab
I386/MSOEACCT.HL_
.cab
I386/MSOERES.DL_
.cab
I386/MSOERT2.DL_
.cab
I386/MSORCL32.CH_
.cab
I386/MSORCL32.DL_
.cab
I386/MSPAINT.CH_
.cab
I386/MSPAINT.EX_
.cab
I386/MSPAINT.HL_
.cab
I386/MSPATCHA.DL_
.cab
I386/MSPBDE40.DL_
.cab
I386/MSPORTS.DL_
.cab
I386/MSPORTS.IN_
.cab
I386/MSPRIVS.DL_
.cab
I386/MSR2C.DL_
.cab
I386/MSR2CENU.DL_
.cab
I386/MSRATING.DL_
.cab
I386/MSRCLR40.DL_
.cab
I386/MSRD2X40.DL_
.cab
I386/MSRD3X40.DL_
.cab
I386/MSRECR40.DL_
.cab
I386/MSREPL40.DL_
.cab
I386/MSRLE32.DL_
.cab
I386/MSSCRIPT.OC_
.cab
I386/MSSIGN32.DL_
.cab
I386/MSSIP32.DL_
.cab
I386/MSSOUND.WA_
.cab
I386/MSSWCH.DL_
.cab
I386/MSSWCHX.EX_
.cab
I386/MST120.DL_
.cab
I386/MST123.DL_
.cab
I386/MSTASK.DL_
.cab
I386/MSTASK.EX_
.cab
I386/MSTASK.HL_
.cab
I386/MSTASK.INF
I386/MSTASK.INI
I386/MSTASK_W.CH_
.cab
I386/MSTEXT40.DL_
.cab
I386/MSTINIT.EX_
.cab
I386/MSTTS.IN_
.cab
I386/MSTTSSYN.DL_
.cab
I386/MSV1_0.DL_
.cab
I386/MSVBVM50.DL_
.cab
I386/MSVBVM60.DL_
.cab
I386/MSVCIRT.DL_
.cab
I386/MSVCP50.DLL
.dll windows:4 windows x86 arch:x86

a187c729f52583f8ca9573c6f109607e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

__CxxFrameHandler
_Gettnames
_Getdays
_Getmonths
__p___mb_cur_max
sprintf
strcspn
strtoul
_errno
strtol
isdigit
_Strftime
ldexp
_CIpow
fclose
fwrite
fputc
fgetc
ungetc
fgetpos
fseek
fsetpos
setvbuf
fflush
fputwc
ungetwc
fgetwc
free
localeconv
setlocale
malloc
realloc
__crtCompareStringA
wcstol
_unlock
__crtGetLocaleInfoW
_lock
__setlc_active
__unguarded_readlc_active
__lc_handle
__lc_codepage
__crtLCMapStringA
towlower
towupper
_isctype
__p__pctype
strtod
_ftol
??1type_info@@UAE@XZ
_except_handler3
?terminate@@YAXXZ
__dllonexit
_onexit
_initterm
_adjust_fdiv
??2@YAPAXI@Z
memmove
memchr
wcslen
??4exception@@QAEAAV0@ABV0@@Z
_CxxThrowException
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
??0exception@@QAE@ABQBD@Z
?what@exception@@UBEPBDXZ
fopen
__p__iob

kernel32

DisableThreadLibraryCalls
MultiByteToWideChar
LeaveCriticalSection
DeleteCriticalSection
InterlockedExchange
InitializeCriticalSection
Sleep
EnterCriticalSection
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement

Exports

Exports

??0?$_Complex_base@M@std@@QAE@ABM0@Z
??0?$_Complex_base@N@std@@QAE@ABN0@Z
??0?$_Complex_base@O@std@@QAE@ABO0@Z
??0?$_Mpunct@D@std@@QAE@ABV_Locinfo@1@I_N@Z
??0?$_Mpunct@D@std@@QAE@I_N@Z
??0?$_Mpunct@G@std@@QAE@ABV_Locinfo@1@I_N@Z
??0?$_Mpunct@G@std@@QAE@I_N@Z
??0?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_filebuf@GU?$char_traits@G@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_filebuf@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_fstream@DU?$char_traits@D@std@@@std@@QAE@PBDH@Z
??0?$basic_fstream@DU?$char_traits@D@std@@@std@@QAE@XZ
??0?$basic_fstream@GU?$char_traits@G@std@@@std@@QAE@PBDH@Z
??0?$basic_fstream@GU?$char_traits@G@std@@@std@@QAE@XZ
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PBDH@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@XZ
??0?$basic_ifstream@GU?$char_traits@G@std@@@std@@QAE@PBDH@Z
??0?$basic_ifstream@GU?$char_traits@G@std@@@std@@QAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@QAE@ABV01@@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IAE@XZ
??0?$basic_ios@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
??0?$basic_ios@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@ABV01@@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@ABV01@@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_istringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@1@H@Z
??0?$basic_istringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@PBDH@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@XZ
??0?$basic_ofstream@GU?$char_traits@G@std@@@std@@QAE@PBDH@Z
??0?$basic_ofstream@GU?$char_traits@G@std@@@std@@QAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@ABV01@@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N1@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N1@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@1@H@Z
??0?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@W4_Uninitialized@1@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@W4_Uninitialized@1@@Z
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@IIABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@IDABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD0ABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDIABV?$allocator@D@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@IIABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@IGABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG0ABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGIABV?$allocator@G@1@@Z
??0?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??0?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@1@H@Z
??0?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@1@H@Z
??0?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??0?$codecvt@DDH@std@@QAE@ABV_Locinfo@1@I@Z
??0?$codecvt@DDH@std@@QAE@I@Z
??0?$codecvt@GDH@std@@QAE@ABV_Locinfo@1@I@Z
??0?$codecvt@GDH@std@@QAE@I@Z
??0?$collate@D@std@@QAE@ABV_Locinfo@1@I@Z
??0?$collate@D@std@@QAE@I@Z
??0?$collate@G@std@@QAE@ABV_Locinfo@1@I@Z
??0?$collate@G@std@@QAE@I@Z
??0?$complex@M@std@@QAE@ABM0@Z
??0?$complex@M@std@@QAE@ABV?$complex@N@1@@Z
??0?$complex@M@std@@QAE@ABV?$complex@O@1@@Z
??0?$complex@N@std@@QAE@ABN0@Z
??0?$complex@N@std@@QAE@ABV?$complex@M@1@@Z
??0?$complex@N@std@@QAE@ABV?$complex@O@1@@Z
??0?$complex@O@std@@QAE@ABO0@Z
??0?$complex@O@std@@QAE@ABV?$complex@M@1@@Z
??0?$complex@O@std@@QAE@ABV?$complex@N@1@@Z
??0?$ctype@D@std@@QAE@ABV_Locinfo@1@I@Z
??0?$ctype@D@std@@QAE@PBF_NI@Z
??0?$ctype@G@std@@QAE@ABV_Locinfo@1@I@Z
??0?$ctype@G@std@@QAE@I@Z
??0?$messages@D@std@@QAE@ABV_Locinfo@1@I@Z
??0?$messages@D@std@@QAE@I@Z
??0?$messages@G@std@@QAE@ABV_Locinfo@1@I@Z
??0?$messages@G@std@@QAE@I@Z
??0?$money_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$money_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$money_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$money_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$money_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$money_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$moneypunct@D$00@std@@QAE@ABV_Locinfo@1@I@Z
??0?$moneypunct@D$00@std@@QAE@I@Z
??0?$moneypunct@D$0A@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$moneypunct@D$0A@@std@@QAE@I@Z
??0?$moneypunct@G$00@std@@QAE@ABV_Locinfo@1@I@Z
??0?$moneypunct@G$00@std@@QAE@I@Z
??0?$moneypunct@G$0A@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$moneypunct@G$0A@@std@@QAE@I@Z
??0?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$numpunct@D@std@@QAE@ABV_Locinfo@1@I@Z
??0?$numpunct@D@std@@QAE@I@Z
??0?$numpunct@G@std@@QAE@ABV_Locinfo@1@I@Z
??0?$numpunct@G@std@@QAE@I@Z
??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0Init@ios_base@std@@QAE@XZ
??0_Locinfo@std@@QAE@ABV01@@Z
??0_Locinfo@std@@QAE@HPBD@Z
??0_Locinfo@std@@QAE@PBD@Z
??0_Lockit@std@@QAE@XZ
??0_Timevec@std@@QAE@ABV01@@Z
??0_Timevec@std@@QAE@PAX@Z
??0_Winit@std@@QAE@XZ
??0bad_alloc@std@@QAE@ABV01@@Z
??0bad_alloc@std@@QAE@PBD@Z
??0bad_cast@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@PBD@Z
??0bad_exception@std@@QAE@ABV01@@Z
??0bad_exception@std@@QAE@PBD@Z
??0codecvt_base@std@@QAE@I@Z
??0ctype_base@std@@QAE@I@Z
??0domain_error@std@@QAE@ABV01@@Z
??0domain_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0facet@locale@std@@IAE@I@Z
??0ios_base@std@@IAE@XZ
??0ios_base@std@@QAE@ABV01@@Z
??0length_error@std@@QAE@ABV01@@Z
??0length_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0locale@std@@AAE@PAV_Locimp@01@@Z
??0locale@std@@QAE@ABV01@0H@Z
??0locale@std@@QAE@ABV01@@Z
??0locale@std@@QAE@ABV01@PBDH@Z
??0locale@std@@QAE@PBDH@Z
??0locale@std@@QAE@W4_Uninitialized@1@@Z
??0locale@std@@QAE@XZ
??0logic_error@std@@QAE@ABV01@@Z
??0logic_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0messages_base@std@@QAE@I@Z
??0money_base@std@@QAE@I@Z
??0ostrstream@std@@QAE@PADHH@Z
??0out_of_range@std@@QAE@ABV01@@Z
??0out_of_range@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0overflow_error@std@@QAE@ABV01@@Z
??0overflow_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0range_error@std@@QAE@ABV01@@Z
??0range_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0runtime_error@std@@QAE@ABV01@@Z
??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0strstream@std@@QAE@PADHH@Z
??0time_base@std@@QAE@I@Z
??0underflow_error@std@@QAE@ABV01@@Z
??0underflow_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??1?$_Mpunct@D@std@@UAE@XZ
??1?$_Mpunct@G@std@@UAE@XZ
??1?$basic_filebuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_filebuf@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_fstream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_fstream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_ifstream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ifstream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_istream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??1?$basic_istringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@UAE@XZ
??1?$basic_ofstream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ofstream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??1?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@UAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??1?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??1?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@UAE@XZ
??1?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??1?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@UAE@XZ
??1?$codecvt@DDH@std@@UAE@XZ
??1?$codecvt@GDH@std@@UAE@XZ
??1?$collate@D@std@@UAE@XZ
??1?$collate@G@std@@UAE@XZ
??1?$ctype@D@std@@UAE@XZ
??1?$ctype@G@std@@UAE@XZ
??1?$messages@D@std@@UAE@XZ
??1?$messages@G@std@@UAE@XZ
??1?$money_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@UAE@XZ
??1?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@UAE@XZ
??1?$money_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@UAE@XZ
??1?$money_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@UAE@XZ
??1?$moneypunct@D$00@std@@UAE@XZ
??1?$moneypunct@D$0A@@std@@UAE@XZ
??1?$moneypunct@G$00@std@@UAE@XZ
??1?$moneypunct@G$0A@@std@@UAE@XZ
??1?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@UAE@XZ
??1?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@UAE@XZ
??1?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@UAE@XZ
??1?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@UAE@XZ
??1?$numpunct@D@std@@UAE@XZ
??1?$numpunct@G@std@@UAE@XZ
??1?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@UAE@XZ
??1?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@UAE@XZ
??1?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@UAE@XZ
??1?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@UAE@XZ
??1Init@ios_base@std@@QAE@XZ
??1_Locinfo@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
??1_Timevec@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1bad_alloc@std@@UAE@XZ
??1bad_cast@std@@UAE@XZ
??1bad_exception@std@@UAE@XZ
??1codecvt_base@std@@UAE@XZ
??1ctype_base@std@@UAE@XZ
??1domain_error@std@@UAE@XZ
??1facet@locale@std@@UAE@XZ
??1ios_base@std@@UAE@XZ
??1istrstream@std@@UAE@XZ
??1length_error@std@@UAE@XZ
??1locale@std@@QAE@XZ
??1logic_error@std@@UAE@XZ
??1messages_base@std@@UAE@XZ
??1money_base@std@@UAE@XZ
??1ostrstream@std@@UAE@XZ
??1out_of_range@std@@UAE@XZ
??1overflow_error@std@@UAE@XZ
??1range_error@std@@UAE@XZ
??1runtime_error@std@@UAE@XZ
??1strstream@std@@UAE@XZ
??1strstreambuf@std@@UAE@XZ
??1time_base@std@@UAE@XZ
??1underflow_error@std@@UAE@XZ
??4?$_Complex_base@M@std@@QAEAAV01@ABV01@@Z
??4?$_Complex_base@N@std@@QAEAAV01@ABV01@@Z
??4?$_Complex_base@O@std@@QAEAAV01@ABV01@@Z
??4?$_Ctr@M@std@@QAEAAV01@ABV01@@Z
??4?$_Ctr@N@std@@QAEAAV01@ABV01@@Z
??4?$_Ctr@O@std@@QAEAAV01@ABV01@@Z
??4?$allocator@X@std@@QAEAAV01@ABV01@@Z
??4?$basic_ios@DU?$char_traits@D@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_ios@GU?$char_traits@G@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_iostream@DU?$char_traits@D@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_iostream@GU?$char_traits@G@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@G@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??4?$char_traits@D@std@@QAEAAU01@ABU01@@Z
??4?$char_traits@G@std@@QAEAAU01@ABU01@@Z
??4?$complex@M@std@@QAEAAV01@ABM@Z
??4?$complex@M@std@@QAEAAV01@ABV01@@Z
??4?$complex@N@std@@QAEAAV01@ABN@Z
??4?$complex@N@std@@QAEAAV01@ABV01@@Z
??4?$complex@O@std@@QAEAAV01@ABO@Z
??4?$complex@O@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@C@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@D@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@E@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@F@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@G@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@H@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@I@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@J@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@K@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@M@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@N@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@O@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@_N@std@@QAEAAV01@ABV01@@Z
??4Init@ios_base@std@@QAEAAV012@ABV012@@Z
??4_Locinfo@std@@QAEAAV01@ABV01@@Z
??4_Lockit@std@@QAEAAV01@ABV01@@Z
??4_Num_base@std@@QAEAAU01@ABU01@@Z
??4_Num_float_base@std@@QAEAAU01@ABU01@@Z
??4_Num_int_base@std@@QAEAAU01@ABU01@@Z
??4_Timevec@std@@QAEAAV01@ABV01@@Z
??4_Winit@std@@QAEAAV01@ABV01@@Z
??4bad_alloc@std@@QAEAAV01@ABV01@@Z
??4bad_cast@std@@QAEAAV01@ABV01@@Z
??4bad_exception@std@@QAEAAV01@ABV01@@Z
??4domain_error@std@@QAEAAV01@ABV01@@Z
??4id@locale@std@@QAEAAV012@ABV012@@Z
??4ios_base@std@@QAEAAV01@ABV01@@Z
??4length_error@std@@QAEAAV01@ABV01@@Z
??4locale@std@@QAEAAV01@ABV01@@Z
??4logic_error@std@@QAEAAV01@ABV01@@Z
??4out_of_range@std@@QAEAAV01@ABV01@@Z
??4overflow_error@std@@QAEAAV01@ABV01@@Z
??4range_error@std@@QAEAAV01@ABV01@@Z
??4runtime_error@std@@QAEAAV01@ABV01@@Z
??4underflow_error@std@@QAEAAV01@ABV01@@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAF@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAG@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAJ@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAK@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAM@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAO@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAPAX@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_N@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@DU?$char_traits@D@std@@@1@AAV21@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAF@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAG@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAI@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAJ@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAK@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAM@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAN@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAO@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAPAX@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AA_N@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@GU?$char_traits@G@std@@@1@AAV21@@Z@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAC@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAD@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAE@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$complex@M@0@@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$complex@N@0@@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$complex@O@0@@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@PAC@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@PAD@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@PAE@Z
??5std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAG@Z
??5std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??5std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAV?$complex@M@0@@Z
??5std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAV?$complex@N@0@@Z
??5std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAV?$complex@O@0@@Z
??5std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@PAF@Z
??5std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@PAG@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@F@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@O@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@DU?$char_traits@D@std@@@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@F@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@O@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@GU?$char_traits@G@std@@@1@AAV21@@Z@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@PBX@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@_N@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$complex@M@0@@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$complex@N@0@@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$complex@O@0@@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@C@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@D@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@E@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBC@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBE@Z
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@ABV?$complex@M@0@@Z
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@ABV?$complex@N@0@@Z
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@ABV?$complex@O@0@@Z
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@G@Z
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@PBF@Z
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@PBG@Z
??7ios_base@std@@QBE_NXZ
??8locale@std@@QBE_NABV01@@Z
??8std@@YA_NABMABV?$complex@M@0@@Z
??8std@@YA_NABNABV?$complex@N@0@@Z
??8std@@YA_NABOABV?$complex@O@0@@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
??8std@@YA_NABV?$complex@M@0@0@Z
??8std@@YA_NABV?$complex@M@0@ABM@Z
??8std@@YA_NABV?$complex@N@0@0@Z
??8std@@YA_NABV?$complex@N@0@ABN@Z
??8std@@YA_NABV?$complex@O@0@0@Z
??8std@@YA_NABV?$complex@O@0@ABO@Z
??8std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??8std@@YA_NPBGABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??9locale@std@@QBE_NABV01@@Z
??9std@@YA_NABMABV?$complex@M@0@@Z
??9std@@YA_NABNABV?$complex@N@0@@Z
??9std@@YA_NABOABV?$complex@O@0@@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??9std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??9std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
??9std@@YA_NABV?$complex@M@0@0@Z
??9std@@YA_NABV?$complex@M@0@ABM@Z
??9std@@YA_NABV?$complex@N@0@0@Z
??9std@@YA_NABV?$complex@N@0@ABN@Z
??9std@@YA_NABV?$complex@O@0@0@Z
??9std@@YA_NABV?$complex@O@0@ABO@Z
??9std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??9std@@YA_NPBGABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
??A?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAGI@Z
??A?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEABGI@Z
??Bid@locale@std@@QAEIXZ
??Bios_base@std@@QBEPAXXZ
??Dstd@@YA?AV?$complex@M@0@ABMABV10@@Z
??Dstd@@YA?AV?$complex@M@0@ABV10@0@Z
??Dstd@@YA?AV?$complex@M@0@ABV10@ABM@Z
??Dstd@@YA?AV?$complex@N@0@ABNABV10@@Z
??Dstd@@YA?AV?$complex@N@0@ABV10@0@Z
??Dstd@@YA?AV?$complex@N@0@ABV10@ABN@Z
??Dstd@@YA?AV?$complex@O@0@ABOABV10@@Z
??Dstd@@YA?AV?$complex@O@0@ABV10@0@Z
??Dstd@@YA?AV?$complex@O@0@ABV10@ABO@Z
??Gstd@@YA?AV?$complex@M@0@ABMABV10@@Z
??Gstd@@YA?AV?$complex@M@0@ABV10@0@Z
??Gstd@@YA?AV?$complex@M@0@ABV10@@Z
??Gstd@@YA?AV?$complex@M@0@ABV10@ABM@Z
??Gstd@@YA?AV?$complex@N@0@ABNABV10@@Z
??Gstd@@YA?AV?$complex@N@0@ABV10@0@Z
??Gstd@@YA?AV?$complex@N@0@ABV10@@Z
??Gstd@@YA?AV?$complex@N@0@ABV10@ABN@Z
??Gstd@@YA?AV?$complex@O@0@ABOABV10@@Z
??Gstd@@YA?AV?$complex@O@0@ABV10@0@Z
??Gstd@@YA?AV?$complex@O@0@ABV10@@Z
??Gstd@@YA?AV?$complex@O@0@ABV10@ABO@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@D@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@DABV10@@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@0@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@G@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@PBG@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@GABV10@@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBGABV10@@Z
??Hstd@@YA?AV?$complex@M@0@ABMABV10@@Z

Sections

.text
Size: 335KB - Virtual size: 334KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 186KB - Virtual size: 185KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/MSVCRT.DLL
.dll windows:4 windows x86 arch:x86

b0d3278f6dd8a1a715873c57aae39d31

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

EnumSystemLocalesA
RtlUnwind
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
SetUnhandledExceptionFilter
GetModuleFileNameA
GetModuleFileNameW
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetCommandLineA
GetVersionExA
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetLastError
ResumeThread
CreateThread
ExitThread
CloseHandle
TlsSetValue
TlsGetValue
GetCurrentThreadId
TlsFree
SetLastError
GetCurrentThread
TlsAlloc
FindNextFileA
FindFirstFileA
FindClose
FindNextFileW
FindFirstFileW
HeapFree
HeapAlloc
GetModuleHandleA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
SetHandleCount
GetFileType
GetStartupInfoA
GetACP
GetOEMCP
GetCPInfo
GetProcAddress
LoadLibraryA
MultiByteToWideChar
GetCommandLineW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
UnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetConsoleCtrlHandler
SetEnvironmentVariableW
IsValidLocale
IsValidCodePage
GetLocaleInfoA
RaiseException
GetUserDefaultLCID
GetLocaleInfoW
GetTimeZoneInformation
FlushFileBuffers
SetFilePointer
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
Sleep
Beep
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDiskFreeSpaceA
GetLogicalDrives
SetErrorMode
GetFileAttributesA
GetCurrentDirectoryA
SetCurrentDirectoryA
SetFileAttributesA
GetFullPathNameA
GetDriveTypeA
GetCurrentProcessId
CreateDirectoryA
RemoveDirectoryA
DeleteFileA
GetFileAttributesW
GetCurrentDirectoryW
SetCurrentDirectoryW
SetFileAttributesW
GetFullPathNameW
CreateDirectoryW
DeleteFileW
MoveFileW
RemoveDirectoryW
GetDriveTypeW
MoveFileA
GetExitCodeProcess
WaitForSingleObject
FreeLibrary
CreateProcessA
CreateProcessW
HeapValidate
HeapCompact
HeapWalk
HeapSize
ReadConsoleA
SetConsoleMode
GetConsoleMode
SetEndOfFile
WriteConsoleA
DuplicateHandle
GetFileInformationByHandle
PeekNamedPipe
ReadConsoleInputA
PeekConsoleInputA
GetNumberOfConsoleInputEvents
LockFile
UnlockFile
CreateFileA
CreatePipe
ReadFile
CreateFileW
GetSystemTimeAsFileTime
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
GetLocalTime
SetLocalTime

Exports

Exports

$I10_OUTPUT
??0__non_rtti_object@@QAE@ABV0@@Z
??0__non_rtti_object@@QAE@PBD@Z
??0bad_cast@@QAE@ABQBD@Z
??0bad_cast@@QAE@ABV0@@Z
??0bad_typeid@@QAE@ABV0@@Z
??0bad_typeid@@QAE@PBD@Z
??0exception@@QAE@ABQBD@Z
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@XZ
??1__non_rtti_object@@UAE@XZ
??1bad_cast@@UAE@XZ
??1bad_typeid@@UAE@XZ
??1exception@@UAE@XZ
??1type_info@@UAE@XZ
??2@YAPAXI@Z
??3@YAXPAX@Z
??4__non_rtti_object@@QAEAAV0@ABV0@@Z
??4bad_cast@@QAEAAV0@ABV0@@Z
??4bad_typeid@@QAEAAV0@ABV0@@Z
??4exception@@QAEAAV0@ABV0@@Z
??8type_info@@QBEHABV0@@Z
??9type_info@@QBEHABV0@@Z
??_7__non_rtti_object@@6B@
??_7bad_cast@@6B@
??_7bad_typeid@@6B@
??_7exception@@6B@
??_E__non_rtti_object@@UAEPAXI@Z
??_Ebad_cast@@UAEPAXI@Z
??_Ebad_typeid@@UAEPAXI@Z
??_Eexception@@UAEPAXI@Z
??_G__non_rtti_object@@UAEPAXI@Z
??_Gbad_cast@@UAEPAXI@Z
??_Gbad_typeid@@UAEPAXI@Z
??_Gexception@@UAEPAXI@Z
??_U@YAPAXI@Z
??_V@YAXPAX@Z
?_query_new_handler@@YAP6AHI@ZXZ
?_query_new_mode@@YAHXZ
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
?_set_new_mode@@YAHH@Z
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
?before@type_info@@QBEHABV1@@Z
?name@type_info@@QBEPBDXZ
?raw_name@type_info@@QBEPBDXZ
?set_new_handler@@YAP6AXXZP6AXXZ@Z
?set_terminate@@YAP6AXXZP6AXXZ@Z
?set_unexpected@@YAP6AXXZP6AXXZ@Z
?terminate@@YAXXZ
?unexpected@@YAXXZ
?what@exception@@UBEPBDXZ
_CIacos
_CIasin
_CIatan
_CIatan2
_CIcos
_CIcosh
_CIexp
_CIfmod
_CIlog
_CIlog10
_CIpow
_CIsin
_CIsinh
_CIsqrt
_CItan
_CItanh
_CxxThrowException
_EH_prolog
_Getdays
_Getmonths
_Gettnames
_HUGE
_Strftime
_XcptFilter
__CxxFrameHandler
__CxxLongjmpUnwind
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__STRINGTOLD
__argc
__argv
__badioinfo
__crtCompareStringA
__crtGetLocaleInfoW
__crtLCMapStringA
__dllonexit
__doserrno
__fpecode
__getmainargs
__initenv
__isascii
__iscsym
__iscsymf
__lc_codepage
__lc_collate_cp
__lc_handle
__lconv_init
__mb_cur_max
__p___argc
__p___argv
__p___initenv
__p___mb_cur_max
__p___wargv
__p___winitenv
__p__acmdln
__p__amblksiz
__p__commode
__p__daylight
__p__dstbias
__p__environ
__p__fileinfo
__p__fmode
__p__iob
__p__mbcasemap
__p__mbctype
__p__osver
__p__pctype
__p__pgmptr
__p__pwctype
__p__timezone
__p__tzname
__p__wcmdln
__p__wenviron
__p__winmajor
__p__winminor
__p__winver
__p__wpgmptr
__pioinfo
__pxcptinfoptrs
__set_app_type
__setlc_active
__setusermatherr
__threadhandle
__threadid
__toascii
__unDName
__unDNameEx
__unguarded_readlc_active
__wargv
__wgetmainargs
__winitenv
_abnormal_termination
_access
_acmdln
_adj_fdiv_m16i
_adj_fdiv_m32
_adj_fdiv_m32i
_adj_fdiv_m64
_adj_fdiv_r
_adj_fdivr_m16i
_adj_fdivr_m32
_adj_fdivr_m32i
_adj_fdivr_m64
_adj_fpatan
_adj_fprem
_adj_fprem1
_adj_fptan
_adjust_fdiv
_aexit_rtn
_amsg_exit
_assert
_atodbl
_atoi64
_atoldbl
_beep
_beginthread
_beginthreadex
_c_exit
_cabs
_callnewh
_cexit
_cgets
_chdir
_chdrive
_chgsign
_chkesp
_chmod
_chsize
_clearfp
_close
_commit
_commode
_control87
_controlfp
_copysign
_cprintf
_cputs
_creat
_cscanf
_ctime64
_ctype
_cwait
_daylight
_dstbias
_dup
_dup2
_ecvt
_endthread
_endthreadex
_environ
_eof
_errno
_except_handler2
_except_handler3
_execl
_execle
_execlp
_execlpe
_execv
_execve
_execvp
_execvpe
_exit
_expand
_fcloseall
_fcvt
_fdopen
_fgetchar
_fgetwchar
_filbuf
_fileinfo
_filelength
_filelengthi64
_fileno
_findclose
_findfirst
_findfirst64
_findfirsti64
_findnext
_findnext64
_findnexti64
_finite
_flsbuf
_flushall
_fmode
_fpclass
_fpieee_flt
_fpreset
_fputchar
_fputwchar
_fsopen
_fstat
_fstat64
_fstati64
_ftime
_ftime64
_ftol
_fullpath
_futime
_futime64
_gcvt
_get_heap_handle
_get_osfhandle
_get_sbh_threshold
_getch
_getche
_getcwd
_getdcwd
_getdiskfree
_getdllprocaddr
_getdrive
_getdrives
_getmaxstdio
_getmbcp
_getpid
_getsystime
_getw
_getws
_global_unwind2
_gmtime64
_heapadd
_heapchk
_heapmin
_heapset
_heapused
_heapwalk
_hypot
_i64toa
_i64tow
_initterm
_inp
_inpd
_inpw
_iob
_isatty
_isctype
_ismbbalnum
_ismbbalpha
_ismbbgraph
_ismbbkalnum
_ismbbkana
_ismbbkprint
_ismbbkpunct
_ismbblead
_ismbbprint
_ismbbpunct
_ismbbtrail
_ismbcalnum
_ismbcalpha
_ismbcdigit
_ismbcgraph
_ismbchira
_ismbckata
_ismbcl0
_ismbcl1
_ismbcl2
_ismbclegal
_ismbclower
_ismbcprint
_ismbcpunct
_ismbcspace
_ismbcsymbol
_ismbcupper
_ismbslead
_ismbstrail
_isnan
_itoa
_itow
_j0
_j1
_jn
_kbhit
_lfind
_loaddll
_local_unwind2
_localtime64
_lock
_locking
_logb
_longjmpex
_lrotl
_lrotr
_lsearch
_lseek
_lseeki64
_ltoa
_ltow
_makepath
_mbbtombc
_mbbtype
_mbcasemap
_mbccpy
_mbcjistojms
_mbcjmstojis
_mbclen
_mbctohira
_mbctokata
_mbctolower
_mbctombb
_mbctoupper
_mbctype
_mbsbtype
_mbscat
_mbschr
_mbscmp
_mbscoll
_mbscpy
_mbscspn
_mbsdec
_mbsdup
_mbsicmp
_mbsicoll
_mbsinc
_mbslen
_mbslwr
_mbsnbcat
_mbsnbcmp
_mbsnbcnt
_mbsnbcoll
_mbsnbcpy
_mbsnbicmp
_mbsnbicoll
_mbsnbset
_mbsncat
_mbsnccnt
_mbsncmp
_mbsncoll
_mbsncpy
_mbsnextc
_mbsnicmp
_mbsnicoll
_mbsninc
_mbsnset
_mbspbrk
_mbsrchr
_mbsrev
_mbsset
_mbsspn
_mbsspnp
_mbsstr
_mbstok
_mbstrlen
_mbsupr
_memccpy
_memicmp
_mkdir
_mktemp
_mktime64
_msize
_nextafter
_onexit
_open
_open_osfhandle
_osplatform
_osver
_outp
_outpd
_outpw
_pclose
_pctype
_pgmptr
_pipe
_popen
_purecall
_putch
_putenv
_putw
_putws
_pwctype
_read
_rmdir
_rmtmp
_rotl
_rotr
_safe_fdiv
_safe_fdivr
_safe_fprem
_safe_fprem1
_scalb
_searchenv
_seh_longjmp_unwind
_set_error_mode
_set_sbh_threshold
_seterrormode
_setjmp
_setjmp3
_setmaxstdio
_setmbcp
_setmode
_setsystime
_sleep
_snprintf
_snwprintf
_sopen
_spawnl
_spawnle
_spawnlp
_spawnlpe
_spawnv
_spawnve
_spawnvp
_spawnvpe
_splitpath
_stat
_stat64
_stati64
_statusfp
_strcmpi
_strdate
_strdup
_strerror
_stricmp
_stricoll
_strlwr
_strncoll
_strnicmp
_strnicoll
_strnset
_strrev
_strset
_strtime
_strupr
_swab
_sys_errlist
_sys_nerr
_tell
_telli64
_tempnam
_time64
_timezone
_tolower
_toupper
_tzname
_tzset
_ui64toa
_ui64tow
_ultoa
_ultow
_umask
_ungetch
_unlink
_unloaddll
_unlock
_utime
_utime64
_vsnprintf
_vsnwprintf
_waccess

Sections

.text
Size: 196KB - Virtual size: 193KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/MSVCRT20.DL_
.cab
I386/MSVCRT40.DL_
.cab
I386/MSVFW32.DL_
.cab
I386/MSVIDC32.DL_
.cab
I386/MSVIDEO.DL_
.cab
I386/MSW3PRT.DL_
.cab
I386/MSWDAT10.DL_
.cab
I386/MSWRD632.WP_
.cab
I386/MSWRD832.CN_
.cab
I386/MSWSOCK.DL_
.cab
I386/MSWSTR10.DL_
.cab
I386/MSXACTPS.DL_
.cab
I386/MSXBDE40.DL_
.cab
I386/MSXML.DL_
.cab
I386/MSXMLR.DL_
.cab
I386/MTSADMIN.TL_
.cab
I386/MTSTOCOM.EX_
.cab
I386/MTXCLU.DL_
.cab
I386/MTXDM.DL_
.cab
I386/MTXEX.DL_
.cab
I386/MTXLEGIH.DL_
.cab
I386/MTXOCI.DL_
.cab
I386/MULTILNG.OS_
.cab
I386/MULTIMED.IN_
.cab
I386/MULTIPRT.IN_
.cab
I386/MUP.SY_
.cab
I386/MUSTEK.BM_
.cab
I386/MW770.CA_
.cab
I386/MWAVMDM1.IN_
.cab
I386/MWCI.DL_
.cab
I386/MWCI32.DL_
.cab
I386/MWMBATAM.IN_
.cab
I386/MWREMOVE.IN_
.cab
I386/MWSETUPK.SY_
.cab
I386/MWTPDSP.IN_
.cab
I386/MYCOMPUT.DL_
.cab
I386/MYDOCS.DL_
.cab
I386/MYINFO.DL_
.cab
I386/N2K.BM_
.cab
I386/N3BRIDGE.IN_
.cab
I386/NAC.DL_
.cab
I386/NARRATOR.EX_
.cab
I386/NARRHOOK.DL_
.cab
I386/NATURE.HT_
.cab
I386/NATUREBG.JP_
.cab
I386/NBF.SY_
.cab
I386/NBTSTAT.EX_
.cab
I386/NCPA.CP_
.cab
I386/NCRC710.SY_
.cab
I386/NDDEAPI.DL_
.cab
I386/NDDEAPIR.EX_
.cab
I386/NDDENB32.DL_
.cab
I386/NDIS.SY_
.cab
I386/NDISNPP.DL_
.cab
I386/NDISTAPI.SY_
.cab
I386/NDISUIO.IN_
.cab
I386/NDISUIO.SY_
.cab
I386/NDISWAN.SY_
.cab
I386/NDPROXY.SY_
.cab
I386/NDPTSP.TS_
.cab
I386/NEO20XX.IN_
.cab
I386/NET.EX_
.cab
I386/NET.HL_
.cab
I386/NET08A.IN_
.cab
I386/NET1.EX_
.cab
I386/NET21X4.IN_
.cab
I386/NET3C562.IN_
.cab
I386/NET3C589.IN_
.cab
I386/NET5515N.IN_
.cab
I386/NET557.IN_
.cab
I386/NET575NT.IN_
.cab
I386/NET656N5.IN_
.cab
I386/NET713.IN_
.cab
I386/NETACC.IN_
.cab
I386/NETALT.IN_
.cab
I386/NETAMBCB.IN_
.cab
I386/NETAMBI.IN_
.cab
I386/NETAMD.IN_
.cab
I386/NETAMDHL.IN_
.cab
I386/NETANA.IN_
.cab
I386/NETAPI.DL_
.cab
I386/NETAPI.OS_
.cab
I386/NETAPI32.DL_
.cab
I386/NETASP2K.IN_
.cab
I386/NETATLK.IN_
.cab
I386/NETAUNI.IN_
.cab
I386/NETBIOS.SY_
.cab
I386/NETBLITZ.HT_
.cab
I386/NETBLZBG.GI_
.cab
I386/NETBRZW.IN_
.cab
I386/NETBT.SY_
.cab
I386/NETC20.IN_
.cab
I386/NETC21.IN_
.cab
I386/NETC550.IN_
.cab
I386/NETCB325.IN_
.cab
I386/NETCBE.IN_
.cab
I386/NETCE2.IN_
.cab
I386/NETCE3.IN_
.cab
I386/NETCEM28.IN_
.cab
I386/NETCEM33.IN_
.cab
I386/NETCEM56.IN_
.cab
I386/NETCFG.HL_
.cab
I386/NETCFGX.DL_
.cab
I386/NETCFG_W.CH_
.cab
I386/NETCIS.IN_
.cab
I386/NETCPQG.IN_
.cab
I386/NETCPQI.IN_
.cab
I386/NETCPQMT.IN_
.cab
I386/NETCTMRK.IN_
.cab
I386/NETCTMVA.IN_
.cab
I386/NETDDE.EX_
.cab
I386/NETDEFXA.IN_
.cab
I386/NETDET.DL_
.cab
I386/NETDGDXB.IN_
.cab
I386/NETDGISA.IN_
.cab
I386/NETDGSXB.IN_
.cab
I386/NETDLC.IN_
.cab
I386/NETDLH5X.IN_
.cab
I386/NETDSTAR.IN_
.cab
I386/NETDTECT.DL_
.cab
I386/NETDTECT.SY_
.cab
I386/NETE100.IN_
.cab
I386/NETE1000.IN_
.cab
I386/NETE100I.IN_
.cab
I386/NETE100S.IN_
.cab
I386/NETEJET.IN_
.cab
I386/NETEJXMP.IN_
.cab
I386/NETEL515.IN_
.cab
I386/NETEL574.IN_
.cab
I386/NETEL59X.IN_
.cab
I386/NETEL5X9.IN_
.cab
I386/NETEL90X.IN_
.cab
I386/NETEL980.IN_
.cab
I386/NETENET.IN_
.cab
I386/NETENI25.IN_
.cab
I386/NETEPC.IN_
.cab
I386/NETEPICN.IN_
.cab
I386/NETEPRO.IN_
.cab
I386/NETET32.IN_
.cab
I386/NETEVENT.DL_
.cab
I386/NETEX10.IN_
.cab
I386/NETF56N5.IN_
.cab
I386/NETFJVI.IN_
.cab
I386/NETFJVJ.IN_
.cab
I386/NETFLEX.IN_
.cab
I386/NETFORE.IN_
.cab
I386/NETFOREH.IN_
.cab
I386/NETGENA.IN_
.cab
I386/NETGENB.IN_
.cab
I386/NETGPC.IN_
.cab
I386/NETH.DL_
.cab
I386/NETHPPCI.IN_
.cab
I386/NETIAS.IN_
.cab
I386/NETIBM.IN_
.cab
I386/NETIBM2.IN_
.cab
I386/NETIBMGE.IN_
.cab
I386/NETIBMN5.IN_
.cab
I386/NETID.DL_
.cab
I386/NETIPRIP.IN_
.cab
I386/NETIRDA.IN_
.cab
I386/NETIRSIR.IN_
.cab
I386/NETJAT5.IN_
.cab
I386/NETLANEM.IN_
.cab
I386/NETLANEP.IN_
.cab
I386/NETLE56.IN_
.cab
I386/NETLOGON.DL_
.cab
I386/NETLOOP.IN_
.cab
I386/NETLPD.IN_
.cab
I386/NETM16A.IN_
.cab
I386/NETM16B.IN_
.cab
I386/NETM32A.IN_
.cab
I386/NETMADGE.IN_
.cab
I386/NETMAN.DL_
.cab
I386/NETMEET.HT_
.cab
I386/NETMHZN5.IN_
.cab
I386/NETMSCLI.IN_
.cab
I386/NETMSG.DL_
.cab
I386/NETNB.IN_
.cab
I386/NETNBF.IN_
.cab
I386/NETNF3.IN_
.cab
I386/NETNGR.IN_
.cab
I386/NETNM.IN_
.cab
I386/NETNOVEL.IN_
.cab
I386/NETNWCLI.IN_
.cab
I386/NETNWLNK.IN_
.cab
I386/NETOC.DL_
.cab
I386/NETOC.IN_
.cab
I386/NETOCA1P.IN_
.cab
I386/NETOCA2P.IN_
.cab
I386/NETOCE2M.IN_
.cab
I386/NETOCE3M.IN_
.cab
I386/NETOCE4M.IN_
.cab
I386/NETOCE55.IN_
.cab
I386/NETOCT35.IN_
.cab
I386/NETOCT4P.IN_
.cab
I386/NETOEMDH.IN_
.cab
I386/NETOSI5.IN_
.cab
I386/NETPC100.IN_
.cab
I386/NETPLWIZ.DL_
.cab
I386/NETPNIC.IN_
.cab
I386/NETPSA.IN_
.cab
I386/NETPSCHD.IN_
.cab
I386/NETPWR2.IN_
.cab
I386/NETRAP.DL_
.cab
I386/NETRASA.IN_
.cab
I386/NETRASS.IN_
.cab
I386/NETRAST.IN_
.cab
I386/NETRLW2K.IN_
.cab
I386/NETRNSE.IN_
.cab
I386/NETRSVP.IN_
.cab
I386/NETRTPNT.IN_
.cab
I386/NETRTSNT.IN_
.cab
I386/NETRWAN.IN_
.cab
I386/NETSAP.IN_
.cab
I386/NETSERV.IN_
.cab
I386/NETSH.EX_
.cab
I386/NETSHELL.DL_
.cab
I386/NETSK98.IN_
.cab
I386/NETSK_FP.IN_
.cab
I386/NETSLANT.IN_
.cab
I386/NETSMC.IN_
.cab
I386/NETSNIP.IN_
.cab
I386/NETSNMP.IN_
.cab
I386/NETSTAT.EX_
.cab
I386/NETSTRM.IN_
.cab
I386/NETSYM.IN_
.cab
I386/NETTB155.IN_
.cab
I386/NETTCPIP.IN_
.cab
I386/NETTIGER.IN_
.cab
I386/NETTPRO.IN_
.cab
I386/NETTPSMP.IN_
.cab
I386/NETTSBNT.IN_
.cab
I386/NETUI0.DL_
.cab
I386/NETUI1.DL_
.cab
I386/NETUI2.DL_
.cab
I386/NETUPGRD.IN_
.cab
I386/NETVT86.IN_
.cab
I386/NETW840.IN_
.cab
I386/NETW926.IN_
.cab
I386/NETW940.IN_
.cab
I386/NETWARE.DR_
.cab
I386/NETWLAN2.IN_
.cab
I386/NETWORKS._
.cab
I386/NETWV48.IN_
.cab
I386/NETWZC.IN_
.cab
I386/NETX500.IN_
.cab
I386/NETX56N5.IN_
.cab
I386/NETXCPQ.IN_
.cab
I386/NEWDEV.DL_
.cab
I386/NEWFEAT1.CH_
.cab
I386/NEWFEAT1.HL_
.cab
I386/NEWFEAT2.CH_
.cab
I386/NEWFEAT2.HL_
.cab
I386/NEWFEAT3.CH_
.cab
I386/NEWFEAT3.HL_
.cab
I386/NEWFEAT4.CH_
.cab
I386/NEWFEAT4.HL_
.cab
I386/NEWFEAT5.CH_
.cab
I386/NEWFEAT5.HL_
.cab
I386/NEXTLINK.DL_
.cab
I386/NG18D50.IC_
.cab
I386/NG18D65.IC_
.cab
I386/NG18D93.IC_
.cab
I386/NG22D50.IC_
.cab
I386/NG22D65.IC_
.cab
I386/NG22D93.IC_
.cab
I386/NIPX.MI_
.cab
I386/NLHTML.DL_
.cab
I386/NLSFUNC.EX_
.cab
I386/NMAS.DL_
.cab
I386/NMASNT.DL_
.cab
I386/NMCHAT.CH_
.cab
I386/NMCHAT.DL_
.cab
I386/NMCOM.DL_
.cab
I386/NMEVTMSG.DL_
.cab
I386/NMFT.DL_
.cab
I386/NMMKCERT.DL_
.cab
I386/NMNT.SY_
.cab
I386/NMOLDWB.DL_
.cab
I386/NMPGMGRP.EX_
.cab
I386/NMWB.DL_
.cab
I386/NMWHITEB.CH_
.cab
I386/NOCONTNT.CN_
.cab
I386/NOFTS.CH_
.cab
I386/NOISE.DA_
.cab
I386/NOISE.DE_
.cab
I386/NOISE.ENG
I386/NOISE.ENU
I386/NOISE.ES_
.cab
I386/NOISE.FR_
.cab
I386/NOISE.IT_
.cab
I386/NOISE.NL_
.cab
I386/NOISE.SV_
.cab
I386/NOTEPAD.CH_
.cab
I386/NOTEPAD.EX_
.cab
I386/NOTEPAD.HL_
.cab
I386/NOTIFY.WA_
.cab
I386/NO_I.CU_
.cab
I386/NO_IL.CU_
.cab
I386/NO_IM.CU_
.cab
I386/NO_L.CU_
.cab
I386/NO_M.CU_
.cab
I386/NO_R.CU_
.cab
I386/NO_RL.CU_
.cab
I386/NO_RM.CU_
.cab
I386/NPDS.ZI_
.cab
I386/NPDSPLAY.DL_
.cab
I386/NPFS.SY_
.cab
I386/NPPAGENT.EX_
.cab
I386/NPPTOOLS.DL_
.cab
I386/NPWMSDRM.DL_
.cab
I386/NSEPM.DL_
.cab
I386/NSLOOKUP.EX_
.cab
I386/NT.FN_
.cab
I386/NT2.FN_
.cab
I386/NT5.CA_
.cab
I386/NT5IIS.CA_
.cab
I386/NT5INF.CA_
.cab
I386/NT5PRTX.CA_
.cab
I386/NTAPM.IN_
.cab
I386/NTART_W.CH_
.cab
I386/NTBACKUP.CH_
.cab
I386/NTBACKUP.EX_
.cab
I386/NTBACKUP.HL_
.cab
I386/NTCHOWTO.CH_
.cab
I386/NTCMDS.CH_
.cab
I386/NTDEF_W.CH_
.cab
I386/NTDETECT.COM
I386/NTDLL.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

CsrAllocateCaptureBuffer
CsrAllocateMessagePointer
CsrCaptureMessageBuffer
CsrCaptureMessageString
CsrCaptureTimeout
CsrClientCallServer
CsrClientConnectToServer
CsrFreeCaptureBuffer
CsrIdentifyAlertableThread
CsrNewThread
CsrProbeForRead
CsrProbeForWrite
CsrSetPriorityClass
DbgBreakPoint
DbgPrint
DbgPrintReturnControlC
DbgPrompt
DbgSsHandleKmApiMsg
DbgSsInitialize
DbgUiConnectToDbg
DbgUiContinue
DbgUiWaitStateChange
DbgUserBreakPoint
KiRaiseUserExceptionDispatcher
KiUserApcDispatcher
KiUserCallbackDispatcher
KiUserExceptionDispatcher
LdrAccessResource
LdrAlternateResourcesEnabled
LdrDisableThreadCalloutsForDll
LdrEnumResources
LdrFindEntryForAddress
LdrFindResourceDirectory_U
LdrFindResource_U
LdrFlushAlternateResourceModules
LdrGetDllHandle
LdrGetProcedureAddress
LdrInitializeThunk
LdrLoadAlternateResourceModule
LdrLoadDll
LdrProcessRelocationBlock
LdrQueryImageFileExecutionOptions
LdrQueryProcessModuleInformation
LdrShutdownProcess
LdrShutdownThread
LdrUnloadAlternateResourceModule
LdrUnloadDll
LdrVerifyImageMatchesChecksum
NPXEMULATORTABLE
NlsAnsiCodePage
NlsMbCodePageTag
NlsMbOemCodePageTag
NtAcceptConnectPort
NtAccessCheck
NtAccessCheckAndAuditAlarm
NtAccessCheckByType
NtAccessCheckByTypeAndAuditAlarm
NtAccessCheckByTypeResultList
NtAccessCheckByTypeResultListAndAuditAlarm
NtAccessCheckByTypeResultListAndAuditAlarmByHandle
NtAddAtom
NtAdjustGroupsToken
NtAdjustPrivilegesToken
NtAlertResumeThread
NtAlertThread
NtAllocateLocallyUniqueId
NtAllocateUserPhysicalPages
NtAllocateUuids
NtAllocateVirtualMemory
NtAreMappedFilesTheSame
NtAssignProcessToJobObject
NtCallbackReturn
NtCancelDeviceWakeupRequest
NtCancelIoFile
NtCancelTimer
NtClearEvent
NtClose
NtCloseObjectAuditAlarm
NtCompleteConnectPort
NtConnectPort
NtContinue
NtCreateChannel
NtCreateDirectoryObject
NtCreateEvent
NtCreateEventPair
NtCreateFile
NtCreateIoCompletion
NtCreateJobObject
NtCreateKey
NtCreateMailslotFile
NtCreateMutant
NtCreateNamedPipeFile
NtCreatePagingFile
NtCreatePort
NtCreateProcess
NtCreateProfile
NtCreateSection
NtCreateSemaphore
NtCreateSymbolicLinkObject
NtCreateThread
NtCreateTimer
NtCreateToken
NtCreateWaitablePort
NtCurrentTeb
NtDelayExecution
NtDeleteAtom
NtDeleteFile
NtDeleteKey
NtDeleteObjectAuditAlarm
NtDeleteValueKey
NtDeviceIoControlFile
NtDisplayString
NtDuplicateObject
NtDuplicateToken
NtEnumerateKey
NtEnumerateValueKey
NtExtendSection
NtFilterToken
NtFindAtom
NtFlushBuffersFile
NtFlushInstructionCache
NtFlushKey
NtFlushVirtualMemory
NtFlushWriteBuffer
NtFreeUserPhysicalPages
NtFreeVirtualMemory
NtFsControlFile
NtGetContextThread
NtGetDevicePowerState
NtGetPlugPlayEvent
NtGetTickCount
NtGetWriteWatch
NtImpersonateAnonymousToken
NtImpersonateClientOfPort
NtImpersonateThread
NtInitializeRegistry
NtInitiatePowerAction
NtIsSystemResumeAutomatic
NtListenChannel
NtListenPort
NtLoadDriver
NtLoadKey
NtLoadKey2
NtLockFile
NtLockVirtualMemory
NtMakeTemporaryObject
NtMapUserPhysicalPages
NtMapUserPhysicalPagesScatter
NtMapViewOfSection
NtNotifyChangeDirectoryFile
NtNotifyChangeKey
NtNotifyChangeMultipleKeys
NtOpenChannel
NtOpenDirectoryObject
NtOpenEvent
NtOpenEventPair
NtOpenFile
NtOpenIoCompletion
NtOpenJobObject
NtOpenKey
NtOpenMutant
NtOpenObjectAuditAlarm
NtOpenProcess
NtOpenProcessToken
NtOpenSection
NtOpenSemaphore
NtOpenSymbolicLinkObject
NtOpenThread
NtOpenThreadToken
NtOpenTimer
NtPlugPlayControl
NtPowerInformation
NtPrivilegeCheck
NtPrivilegeObjectAuditAlarm
NtPrivilegedServiceAuditAlarm
NtProtectVirtualMemory
NtPulseEvent
NtQueryAttributesFile
NtQueryDefaultLocale
NtQueryDefaultUILanguage
NtQueryDirectoryFile
NtQueryDirectoryObject
NtQueryEaFile
NtQueryEvent
NtQueryFullAttributesFile
NtQueryInformationAtom
NtQueryInformationFile
NtQueryInformationJobObject
NtQueryInformationPort
NtQueryInformationProcess
NtQueryInformationThread
NtQueryInformationToken
NtQueryInstallUILanguage
NtQueryIntervalProfile
NtQueryIoCompletion
NtQueryKey
NtQueryMultipleValueKey
NtQueryMutant
NtQueryObject
NtQueryOpenSubKeys
NtQueryPerformanceCounter
NtQueryQuotaInformationFile
NtQuerySection
NtQuerySecurityObject
NtQuerySemaphore
NtQuerySymbolicLinkObject
NtQuerySystemEnvironmentValue
NtQuerySystemInformation
NtQuerySystemTime
NtQueryTimer
NtQueryTimerResolution
NtQueryValueKey
NtQueryVirtualMemory
NtQueryVolumeInformationFile
NtQueueApcThread
NtRaiseException
NtRaiseHardError
NtReadFile
NtReadFileScatter
NtReadRequestData
NtReadVirtualMemory
NtRegisterThreadTerminatePort
NtReleaseMutant
NtReleaseSemaphore
NtRemoveIoCompletion
NtReplaceKey
NtReplyPort
NtReplyWaitReceivePort
NtReplyWaitReceivePortEx
NtReplyWaitReplyPort
NtReplyWaitSendChannel
NtRequestDeviceWakeup
NtRequestPort
NtRequestWaitReplyPort
NtRequestWakeupLatency
NtResetEvent
NtResetWriteWatch
NtRestoreKey
NtResumeThread
NtSaveKey
NtSaveMergedKeys
NtSecureConnectPort
NtSendWaitReplyChannel
NtSetContextChannel
NtSetContextThread
NtSetDefaultHardErrorPort
NtSetDefaultLocale
NtSetDefaultUILanguage
NtSetEaFile
NtSetEvent
NtSetHighEventPair
NtSetHighWaitLowEventPair
NtSetInformationFile
NtSetInformationJobObject
NtSetInformationKey
NtSetInformationObject
NtSetInformationProcess
NtSetInformationThread
NtSetInformationToken
NtSetIntervalProfile
NtSetIoCompletion
NtSetLdtEntries
NtSetLowEventPair
NtSetLowWaitHighEventPair
NtSetQuotaInformationFile
NtSetSecurityObject
NtSetSystemEnvironmentValue
NtSetSystemInformation
NtSetSystemPowerState
NtSetSystemTime
NtSetThreadExecutionState
NtSetTimer
NtSetTimerResolution
NtSetUuidSeed
NtSetValueKey
NtSetVolumeInformationFile
NtShutdownSystem
NtSignalAndWaitForSingleObject
NtStartProfile
NtStopProfile
NtSuspendThread
NtSystemDebugControl
NtTerminateJobObject
NtTerminateProcess
NtTerminateThread
NtTestAlert
NtUnloadDriver
NtUnloadKey
NtUnlockFile
NtUnlockVirtualMemory
NtUnmapViewOfSection
NtVdmControl
NtWaitForMultipleObjects
NtWaitForSingleObject
NtWaitHighEventPair
NtWaitLowEventPair
NtWriteFile
NtWriteFileGather
NtWriteRequestData
NtWriteVirtualMemory
NtYieldExecution
PfxFindPrefix
PfxInitialize
PfxInsertPrefix
PfxRemovePrefix
PropertyLengthAsVariant
RestoreEm87Context
RtlAbortRXact
RtlAbsoluteToSelfRelativeSD
RtlAcquirePebLock
RtlAcquireResourceExclusive
RtlAcquireResourceShared
RtlAddAccessAllowedAce
RtlAddAccessAllowedAceEx
RtlAddAccessAllowedObjectAce
RtlAddAccessDeniedAce
RtlAddAccessDeniedAceEx
RtlAddAccessDeniedObjectAce
RtlAddAce
RtlAddActionToRXact
RtlAddAtomToAtomTable
RtlAddAttributeActionToRXact
RtlAddAuditAccessAce
RtlAddAuditAccessAceEx
RtlAddAuditAccessObjectAce
RtlAddCompoundAce
RtlAddRange
RtlAdjustPrivilege
RtlAllocateAndInitializeSid
RtlAllocateHandle
RtlAllocateHeap
RtlAnsiCharToUnicodeChar
RtlAnsiStringToUnicodeSize
RtlAnsiStringToUnicodeString
RtlAppendAsciizToString
RtlAppendStringToString
RtlAppendUnicodeStringToString
RtlAppendUnicodeToString
RtlApplyRXact
RtlApplyRXactNoFlush
RtlAreAllAccessesGranted
RtlAreAnyAccessesGranted
RtlAreBitsClear
RtlAreBitsSet
RtlAssert
RtlCallbackLpcClient
RtlCancelTimer
RtlCaptureStackBackTrace
RtlCharToInteger
RtlCheckForOrphanedCriticalSections
RtlCheckRegistryKey
RtlClearAllBits
RtlClearBits
RtlCompactHeap
RtlCompareMemory
RtlCompareMemoryUlong
RtlCompareString
RtlCompareUnicodeString
RtlCompressBuffer
RtlConsoleMultiByteToUnicodeN
RtlConvertExclusiveToShared
RtlConvertLongToLargeInteger
RtlConvertPropertyToVariant
RtlConvertSharedToExclusive
RtlConvertSidToUnicodeString
RtlConvertToAutoInheritSecurityObject
RtlConvertUiListToApiList
RtlConvertUlongToLargeInteger
RtlConvertVariantToProperty
RtlCopyLuid
RtlCopyLuidAndAttributesArray
RtlCopyRangeList
RtlCopySecurityDescriptor
RtlCopySid
RtlCopySidAndAttributesArray
RtlCopyString
RtlCopyUnicodeString
RtlCreateAcl
RtlCreateAndSetSD
RtlCreateAtomTable
RtlCreateEnvironment
RtlCreateHeap
RtlCreateLpcServer
RtlCreateProcessParameters
RtlCreateQueryDebugBuffer
RtlCreateRegistryKey
RtlCreateSecurityDescriptor
RtlCreateTagHeap
RtlCreateTimer
RtlCreateTimerQueue
RtlCreateUnicodeString
RtlCreateUnicodeStringFromAsciiz
RtlCreateUserProcess
RtlCreateUserSecurityObject
RtlCreateUserThread
RtlCustomCPToUnicodeN
RtlCutoverTimeToSystemTime
RtlDeNormalizeProcessParams
RtlDebugPrintTimes
RtlDecompressBuffer
RtlDecompressFragment
RtlDefaultNpAcl
RtlDelete
RtlDeleteAce
RtlDeleteAtomFromAtomTable
RtlDeleteCriticalSection
RtlDeleteElementGenericTable
RtlDeleteNoSplay
RtlDeleteOwnersRanges
RtlDeleteRange
RtlDeleteRegistryValue
RtlDeleteResource
RtlDeleteSecurityObject
RtlDeleteTimer
RtlDeleteTimerQueue
RtlDeleteTimerQueueEx
RtlDeregisterWait
RtlDeregisterWaitEx
RtlDestroyAtomTable
RtlDestroyEnvironment
RtlDestroyHandleTable
RtlDestroyHeap
RtlDestroyProcessParameters
RtlDestroyQueryDebugBuffer
RtlDetermineDosPathNameType_U
RtlDnsHostNameToComputerName
RtlDoesFileExists_U
RtlDosPathNameToNtPathName_U
RtlDosSearchPath_U
RtlDowncaseUnicodeString
RtlDumpResource
RtlEmptyAtomTable
RtlEnableEarlyCriticalSectionEventCreation
RtlEnlargedIntegerMultiply
RtlEnlargedUnsignedDivide
RtlEnlargedUnsignedMultiply
RtlEnterCriticalSection
RtlEnumProcessHeaps
RtlEnumerateGenericTable
RtlEnumerateGenericTableWithoutSplaying
RtlEqualComputerName
RtlEqualDomainName
RtlEqualLuid
RtlEqualPrefixSid
RtlEqualSid
RtlEqualString
RtlEqualUnicodeString
RtlEraseUnicodeString
RtlExpandEnvironmentStrings_U
RtlExtendHeap
RtlExtendedIntegerMultiply
RtlExtendedLargeIntegerDivide
RtlExtendedMagicDivide
RtlFillMemory
RtlFillMemoryUlong
RtlFindClearBits
RtlFindClearBitsAndSet
RtlFindLastBackwardRunClear
RtlFindLeastSignificantBit
RtlFindLongestRunClear
RtlFindMessage
RtlFindMostSignificantBit
RtlFindNextForwardRunClear
RtlFindRange
RtlFindSetBits
RtlFindSetBitsAndClear
RtlFirstFreeAce
RtlFormatCurrentUserKeyPath
RtlFormatMessage
RtlFreeAnsiString
RtlFreeHandle
RtlFreeHeap
RtlFreeOemString
RtlFreeRangeList
RtlFreeSid
RtlFreeUnicodeString
RtlFreeUserThreadStack
RtlGUIDFromString
RtlGenerate8dot3Name
RtlGetAce
RtlGetCallersAddress
RtlGetCompressionWorkSpaceSize
RtlGetControlSecurityDescriptor
RtlGetCurrentDirectory_U
RtlGetDaclSecurityDescriptor
RtlGetElementGenericTable
RtlGetFirstRange
RtlGetFullPathName_U
RtlGetGroupSecurityDescriptor
RtlGetLongestNtPathLength
RtlGetNextRange
RtlGetNtGlobalFlags
RtlGetNtProductType
RtlGetOwnerSecurityDescriptor
RtlGetProcessHeaps
RtlGetSaclSecurityDescriptor
RtlGetSecurityDescriptorRMControl
RtlGetUserInfoHeap
RtlGetVersion
RtlIdentifierAuthoritySid

Sections

.text
Size: 274KB - Virtual size: 274KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

ECODE
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGE
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 155KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/NTDOS.SY_
.cab
I386/NTDOS404.SY_
.cab
I386/NTDOS411.SY_
.cab
I386/NTDOS412.SY_
.cab
I386/NTDOS804.SY_
.cab
I386/NTDSA.DL_
.cab
I386/NTDSAPI.DL_
.cab
I386/NTDSATQ.DL_
.cab
I386/NTDSBCLI.DL_
.cab
I386/NTDSBSRV.DL_
.cab
I386/NTDSETUP.DL_
.cab
I386/NTDSKCC.DL_
.cab
I386/NTDSUTIL.EX_
.cab
I386/NTDSXDS.DL_
.cab
I386/NTEVT.DL_
.cab
I386/NTEVT.MF_
.cab
I386/NTEVT.MO_
.cab
I386/NTFS.SY_
.cab
I386/NTFS40.SYS
.sys windows:4 windows x86 arch:x86

0a49a73ea9e48276b0fef41908334d21

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntoskrnl.exe

RtlInitializeBitMap
RtlInitUnicodeString
ExIsResourceAcquiredExclusiveLite
FsRtlOplockIsFastIoPossible
CcUnpinData
CcSetDirtyPinnedData
memmove
ExAllocatePoolWithTag
KeBugCheckEx
MmSetAddressRangeModified
CcCopyWrite
RtlCompareMemory
MmCanFileBeTruncated
ExRaiseStatus
ExReleaseFastMutexUnsafe
ExAcquireFastMutexUnsafe
IoGetTopLevelIrp
ExFreeToPagedLookasideList
ExAllocateFromPagedLookasideList
KeQuerySystemTime
FsRtlAreNamesEqual
RtlUpcaseUnicodeString
RtlGenerate8dot3Name
FsRtlInitializeLargeMcb
FsRtlAddLargeMcbEntry
RtlFindLongestRunClear
RtlNumberOfClearBits
FsRtlUninitializeLargeMcb
FsRtlTruncateLargeMcb
CcFlushCache
RtlAreBitsClear
RtlSetBits
RtlAreBitsSet
RtlClearBits
RtlFindClearBits
FsRtlGetNextLargeMcbEntry
FsRtlLookupLargeMcbEntry
FsRtlRemoveLargeMcbEntry
IoGetStackLimits
ObfDereferenceObject
CcUninitializeCacheMap
CcSetLogHandleForFile
CcInitializeCacheMap
IoCreateStreamFileObject
CcMapData
CcPinMappedData
CcPinRead
CcPreparePinWrite
CcMdlWriteComplete
CcMdlReadComplete
CcZeroData
KeLeaveCriticalRegion
IoSetTopLevelIrp
IoIsOperationSynchronous
KeEnterCriticalRegion
IofCompleteRequest
IoRemoveShareAccess
FsRtlIsNtstatusExpected
FsRtlNotifyFullReportChange
FsRtlDeleteKeyFromTunnelCache
FsRtlNotifyCleanup
FsRtlAddToTunnelCache
FsRtlFastUnlockAll
IoGetRequestorProcess
FsRtlCheckOplock
FsRtlNotifyFullChangeDirectory
ExConvertExclusiveToSharedLite
ExQueueWorkItem
FsRtlIsNameInExpression
FsRtlDoesNameContainWildCards
FsRtlDissectName
FsRtlFindInTunnelCache
SeSinglePrivilegeCheck
CcPurgeCacheSection
MmFlushImageSection
IoCheckShareAccess
IoCheckEaBufferValidity
FsRtlOplockFsctrl
IoSetShareAccess
IoUpdateShareAccess
FsRtlCurrentBatchOplock
IoSetInformation
IofCallDriver
IoFreeMdl
MmProbeAndLockPages
IoAllocateMdl
MmMapLockedPages
IoFreeIrp
IoBuildPartialMdl
IoMakeAssociatedIrp
RtlDescribeChunk
RtlCompressBuffer
RtlGetCompressionWorkSpaceSize
RtlDecompressBuffer
RtlDecompressFragment
MmUnlockPages
KeInitializeEvent
MmBuildMdlForNonPagedPool
ExGetExclusiveWaiterCount
KeDelayExecutionThread
IoBuildAsynchronousFsdRequest
KeClearEvent
KeWaitForSingleObject
ExInterlockedPushEntrySList
ExReleaseResourceForThreadLite
KeSetEvent
FsRtlIsTotalDeviceFailure
RtlLookupElementGenericTable
SeCaptureSubjectContext
RtlUpperString
RtlCompareString
RtlInitString
FsRtlLegalAnsiCharacterArray
NlsOemLeadByteInfo
NlsMbOemCodePageTag
ExAllocatePool
ExAcquireResourceExclusiveLite
ExReleaseResourceLite
FsRtlNormalizeNtstatus
FsRtlBalanceReads
ObQueryNameString
CcCopyRead
CcSetAdditionalCacheAttributes
IoCreateDevice
IoBuildDeviceIoControlRequest
CcCanIWrite
KeNumberProcessors
ProbeForWrite
ExRaiseAccessViolation
MmUserProbeAddress
ObReferenceObjectByHandle
IoFileObjectType
ExfInterlockedAddUlong
CcFastCopyRead
IoGetRelatedDeviceObject
CcFastCopyWrite
CcMdlRead
CcFastMdlReadWait
CcPrepareMdlWrite
FsRtlPrivateLock
FsRtlFastUnlockSingle
FsRtlFastUnlockAllByKey
FsRtlProcessFileLock
KeSetTimer
KeSetPriorityThread
CcGetDirtyPages
ExInitializeResourceLite
KeInitializeSpinLock
ExDeleteResourceLite
FsRtlLookupLastLargeMcbEntry
FsRtlNumberOfRunsInLargeMcb
FsRtlSplitLargeMcb
RtlFreeOemString
RtlUnicodeStringToCountedOemString
FsRtlIsFatDbcsLegal
FsRtlFastCheckLockForWrite
FsRtlFastCheckLockForRead
IoRaiseInformationalHardError
IoIsSystemThread
KeInitializeDpc
KeInitializeTimer
IoRegisterFileSystem
KeBugCheck
MmQuerySystemSize
FsRtlMdlWriteCompleteDev
FsRtlMdlReadCompleteDev
MmIsThisAnNtAsSystem
SeReleaseSubjectContext
RtlLengthSecurityDescriptor
SeAssignSecurity
IoGetFileObjectGenericMapping
RtlSetDaclSecurityDescriptor
RtlCreateSecurityDescriptor
RtlAddAccessAllowedAce
RtlCreateAcl
RtlInitializeSid
RtlLengthRequiredSid
RtlSubAuthoritySid
ExInitializePagedLookasideList
ExInitializeNPagedLookasideList
ZwClose
ZwQueryValueKey
ZwOpenKey
RtlDelete
RtlSplay
FsRtlPostStackOverflow
FsRtlPostPagingFileStackOverflow
ExInterlockedPopEntrySList
CcSetReadAheadGranularity
FsRtlCheckLockForReadAccess
ExIsResourceAcquiredSharedLite
ExAcquireSharedWaitForExclusive
IoReleaseVpbSpinLock
IoAcquireVpbSpinLock
SeDeassignSecurity
SeSetSecurityDescriptorInfo
SeQuerySecurityDescriptorInfo
SeUnlockSubjectContext
SeOpenObjectAuditAlarm
SeOpenObjectForDeleteAuditAlarm
RtlAppendUnicodeStringToString
RtlCopyUnicodeString
SeAuditingFileEvents
SeFreePrivileges
SeAppendPrivileges
SeAccessCheck
SeLockSubjectContext
SeValidSecurityDescriptor
IoBuildSynchronousFsdRequest
FsRtlInitializeTunnelCache
FsRtlNotifyInitializeSync
RtlInitializeGenericTable
IoDeleteDevice
FsRtlDeleteTunnelCache
FsRtlNotifyUninitializeSync
RtlInsertElementGenericTable
RtlEnumerateGenericTableWithoutSplaying
FsRtlUninitializeOplock
FsRtlInitializeOplock
FsRtlUninitializeFileLock
FsRtlInitializeFileLock
ExReinitializeResourceLite
IoWriteErrorLogEntry
IoAllocateErrorLogEntry
FsRtlCheckLockForWriteAccess
ExAcquireSharedStarveExclusive
CcDeferWrite
RtlUnwind
ExFreePool
CcSetFileSizes
ExAcquireResourceSharedLite
ObQueryObjectAuditingByHandle
SeDeleteObjectAuditAlarm
RtlDeleteElementGenericTable
CcUnpinDataForThread
RtlFillMemoryUlong

hal

ExTryToAcquireFastMutex
KfAcquireSpinLock
KfReleaseSpinLock
ExAcquireFastMutex
ExReleaseFastMutex

Sections

.text
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 255KB - Virtual size: 255KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 928B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/NTHELP.CH_
.cab
I386/NTIMAGE.GI_
.cab
I386/NTIO.SY_
.cab
I386/NTIO404.SY_
.cab
I386/NTIO411.SY_
.cab
I386/NTIO412.SY_
.cab
I386/NTIO804.SY_
.cab
I386/NTKRNLMP.EX_
.cab
I386/NTLANMAN.DL_
.cab
I386/NTLANUI.DL_
.cab
I386/NTLANUI2.DL_
.cab
I386/NTLDR
I386/NTLSAPI.DL_
.cab
I386/NTMARTA.DL_
.cab
I386/NTMSAPI.DL_
.cab
I386/NTMSDBA.DL_
.cab
I386/NTMSEVT.DL_
.cab
I386/NTMSMGR.DL_
.cab
I386/NTMSMGR.MS_
.cab
I386/NTMSOPRQ.MS_
.cab
I386/NTMSSVC.DL_
.cab
I386/NTOC.DL_
.cab
I386/NTOSKRNL.EX_
.cab
I386/NTPRINT.DL_
.cab
I386/NTPRINT.INF
I386/NTSCIC22.IC_
.cab
I386/NTSD.EXE
.exe windows:5 windows x86 arch:x86

e7ddd779128124f4fb3f579a351b18e0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleFileNameA
WideCharToMultiByte
DebugActiveProcess
SuspendThread
WriteFile
GetDriveTypeA
GlobalFree
GlobalAlloc
ExitProcess
DebugBreak
GetEnvironmentVariableA
GetThreadContext
SetThreadContext
SearchPathA
GetTickCount
WriteProcessMemory
SetPriorityClass
ReadFile
ResetEvent
CreateEventA
SetLastError
CreateNamedPipeA
CreateThread
GetPriorityClass
DuplicateHandle
SetStdHandle
GetStdHandle
SetFilePointer
GetFileAttributesA
GetThreadSelectorEntry
FormatMessageA
ReadProcessMemory
WaitForDebugEvent
OpenProcess
ContinueDebugEvent
GetCurrentThreadId
WaitForSingleObject
LoadLibraryA
GetSystemInfo
ResumeThread
SetEvent
GetCurrentProcess
GetVersionExA
GetCommandLineA
FreeLibrary
CreateProcessA
GetStartupInfoA
GetExitCodeProcess
CloseProfileUserMapping
GetOverlappedResult
WaitForMultipleObjects
AllocConsole
CreateRemoteThread
CloseHandle
GetProcAddress
GetModuleHandleA
GetCurrentProcessId
GetLastError
CreateFileA
SetConsoleCtrlHandler

psapi

EnumProcessModules
GetModuleFileNameExA

msvcrt

ctime
fclose
sscanf
fgets
fgetc
_memicmp
_strcmpi
strrchr
isalpha
_makepath
strncpy
strtok
strncmp
strtol
isdigit
memmove
strcpy
_setjmp3
isxdigit
_itoa
_exit
_XcptFilter
exit
__p___initenv
malloc
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_strupr
fopen
_iob
toupper
putchar
_strdup
__getmainargs
strchr
_close
_open
_write
calloc
free
tolower
_stricmp
sprintf
_except_handler3
_strlwr
strstr
strtoul
_strnicmp
isspace
_vsnprintf
_longjmpex
_splitpath
printf
getenv

advapi32

OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

dbghelp

SymGetLineFromName64
StackWalk64
SymFunctionTableAccess64
SymUnloadModule64
SymRegisterCallback64
SymSetOptions
SymGetOptions
SymMatchFileName
SymInitialize
SymGetModuleInfo64
SymLoadModule64
SymCleanup
GetTimestampForLoadedLibrary
SymSetSearchPath
ImagehlpApiVersionEx
SymGetSymFromAddr64
SymEnumerateSymbols64
SymGetLineFromAddr64
SymGetSymFromName64
SymGetModuleInfoEx64
SymGetSymNext64
SymGetSymbolInfo64

ntdll

DbgPrint
NtQueryInformationThread
NtCreateSymbolicLinkObject
RtlFreeUnicodeString
NtSystemDebugControl
NtOpenDirectoryObject
RtlSetDaclSecurityDescriptor
RtlCreateSecurityDescriptor
RtlAnsiStringToUnicodeString
RtlInitAnsiString
NtQueryInformationProcess
DbgPrompt

Sections

.text
Size: 138KB - Virtual size: 138KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 442KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
I386/NTSDEXTS.DLL
.dll windows:5 windows x86 arch:x86

c719b4ced0eb02a9a3cfd24362d8f6d6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

msvcrt

strstr
isspace
strpbrk
_stricmp
sscanf
_wcsicmp
_wtoi
mbstowcs
_except_handler3
isprint
strchr
wcscmp
strtoul
wcscpy
strncpy
ctime
_wcsnicmp
wcslen
swprintf
sprintf

ntdll

NtQueryInformationToken
NtOpenThreadToken
RtlNtStatusToDosError
NtOpenProcessToken
RtlTimeToElapsedTimeFields
RtlConvertSidToUnicodeString
NtQueryIoCompletion
NtQueryKey
NtQuerySection
NtQueryMutant
NtQuerySemaphore
NtQueryEvent
RtlCreateUnicodeStringFromAsciiz
RtlFreeUnicodeString
NtDuplicateObject
NtQueryObject
NtClose
RtlFreeHeap
RtlAllocateHeap
RtlInitUnicodeString
NtQueryInformationAtom
RtlCompareMemoryUlong
RtlCompareMemory
NtQuerySystemInformation
NtQueryInformationProcess
NtQueryInformationThread
NtQueryTimer

kernel32

FormatMessageA
lstrcmpA
ExpandEnvironmentStringsA
LoadLibraryA
GetModuleHandleA
ReadProcessMemory
GetVersionExA
LocalFree
GetLastError
HeapFree
WriteProcessMemory
LocalAlloc
lstrcmpiA
GetProcessHeap
FileTimeToSystemTime
FileTimeToLocalFileTime
GetProcAddress
DuplicateHandle
GetSystemTimeAsFileTime
GetCurrentProcess
lstrlenA
HeapAlloc
VirtualQueryEx

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA
LookupAccountSidW
RegEnumKeyExA
RegEnumValueA
RegQueryInfoKeyA

Exports

Exports

NtsdExtensionDllInit
atom
critsec
dh
dlls
dp
dreg
dt
error
gatom
gflag
gle
handle
heap
help
hleak
igrep
kuser
locks
peb
runaway
teb
threadtoken
version
vprot

Sections

.text
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/NTSHARED.CH_
.cab
I386/NTSHRUI.CH_
.cab
I386/NTSHRUI.DL_
.cab
I386/NTSHRUI.HL_
.cab
I386/NTVDM.EX_
.cab
I386/NTVDMD.DL_
.cab
I386/NULL.SY_
.cab
I386/NV3.IN_
.cab
I386/NV4.IN_
.cab
I386/NW16.EX_
.cab
I386/NWAPI16.DL_
.cab
I386/NWAPI32.DL_
.cab
I386/NWC.CP_
.cab
I386/NWCFG.DL_
.cab
I386/NWDOC.CH_
.cab
I386/NWDOC.HL_
.cab
I386/NWEVENT.DL_
.cab
I386/NWLNKFLT.SY_
.cab
I386/NWLNKFWD.SY_
.cab
I386/NWLNKIPX.SY_
.cab
I386/NWLNKNB.SY_
.cab
I386/NWLNKSPX.SY_
.cab
I386/NWPROVAU.DL_
.cab
I386/NWRDR.SY_
.cab
I386/NWSCRIPT.EX_
.cab
I386/NWSETUP.DL_
.cab
I386/NWWKS.DL_
.cab
I386/OAKLEY.DL_
.cab
I386/OBJSEL.DL_
.cab
I386/OBJSEL.HL_
.cab
I386/OCCACHE.DL_
.cab
I386/OCFILESS.IN_
.cab
I386/OCFILESW.IN_
.cab
I386/OCGEN.DL_
.cab
I386/OCKODAK.DL_
.cab
I386/OCMANAGE.DL_
.cab
I386/ODBC16GT.DL_
.cab
I386/ODBC32.DL_
.cab
I386/ODBC32GT.DL_
.cab
I386/ODBCAD32.EX_
.cab
I386/ODBCBCP.DL_
.cab
I386/ODBCCONF.DL_
.cab
I386/ODBCCONF.EX_
.cab
I386/ODBCCONF.RS_
.cab
I386/ODBCCP32.CP_
.cab
I386/ODBCCP32.DL_
.cab
I386/ODBCCR32.DL_
.cab
I386/ODBCCU32.DL_
.cab
I386/ODBCINST.CH_
.cab
I386/ODBCINT.DL_
.cab
I386/ODBCJET.CH_
.cab
I386/ODBCJI32.DL_
.cab
I386/ODBCJT32.DL_
.cab
I386/ODBCTRAC.DL_
.cab
I386/ODDBSE32.DL_
.cab
I386/ODEXL32.DL_
.cab
I386/ODFOX32.DL_
.cab
I386/ODPDX32.DL_
.cab
I386/ODTEXT32.DL_
.cab
I386/OEACCESS.IN_
.cab
I386/OEIMPORT.DL_
.cab
I386/OEMIG50.EX_
.cab
I386/OEMIGLIB.DL_
.cab
I386/OE_MSGR.CH_
.cab
I386/OFFFILT.DL_
.cab
I386/OFFLINE_.CH_
.cab
I386/OHCI1394.SY_
.cab
I386/OIENG400.DL_
.cab
I386/OIPRT400.DL_
.cab
I386/OISLB400.DL_
.cab
I386/OISSQ400.DL_
.cab
I386/OITWA400.DL_
.cab
I386/OIUI400.DL_
.cab
I386/OLE2.DL_
.cab
I386/OLE2DISP.DL_
.cab
I386/OLE2NLS.DL_
.cab
I386/OLE32.DL_
.cab
I386/OLEACC.DL_
.cab
I386/OLEACCRC.DL_
.cab
I386/OLEAUT32.DL_
.cab
I386/OLECLI.DL_
.cab
I386/OLECLI32.DL_
.cab
I386/OLECNV32.DL_
.cab
I386/OLEDB32.DL_
.cab
I386/OLEDB32R.DL_
.cab
I386/OLEDB32X.DL_
.cab
I386/OLEDBJVS.IN_
.cab
I386/OLEDBVBS.IN_
.cab
I386/OLEDLG.DL_
.cab
I386/OLEPRN.DL_
.cab
I386/OLEPRO32.DL_
.cab
I386/OLESVR.DL_
.cab
I386/OLESVR32.DL_
.cab
I386/OLETHK32.DL_
.cab
I386/OMC.CH_
.cab
I386/OPENGL32.DL_
.cab
I386/OPENHCI.SY_
.cab .ps1 polyglot
I386/OPTIONAL.IN_
.cab
I386/OS2.EX_
.cab
I386/OS2SRV.EX_
.cab
I386/OS2SS.EX_
.cab
I386/OSC.CAB
.cab
I386/OSCCAB.CA_
.cab
I386/OSCHOICE.EX_
.cab
I386/OSK.CH_
.cab
I386/OSK.EX_
.cab
I386/OSK.HL_
.cab
I386/OSLOADER.EX_
.cab
I386/OSO001.007
I386/OSO001.009
.vbs
I386/OSO001.010
I386/OSO001.012
I386/OSO001.016
I386/OSO001.029
.vbs
I386/OTHER.IN_
.cab
I386/P6DISP.GP_
.cab
I386/P6FONT.GP_
.cab
I386/PACKAGER.CH_
.cab
I386/PACKAGER.EX_
.cab
I386/PAD.IN_
.cab
I386/PAGE1.AS_
.cab
I386/PAGECNT.DL_
.cab
I386/PALA.TT_
.cab
I386/PALAB.TT_
.cab
I386/PALABI.TT_
.cab
I386/PALAI.TT_
.cab
I386/PANMAP.DL_
.cab
I386/PARTMGR.SY_
.cab
I386/PARVDM.SY_
.cab
I386/PASSPORT.MI_
.cab
I386/PATHPING.EX_
.cab
I386/PAUTOENR.DL_
.cab
I386/PAX.EX_
.cab
I386/PCI.SY_
.cab
I386/PCIIDE.SY_
.cab
I386/PCIIDEX.SY_
.cab
I386/PCL.SE_
.cab
I386/PCLXL.DL_
.cab
I386/PCLXL.GP_
.cab
I386/PCMCIA.IN_
.cab
I386/PCMCIA.SY_
.cab
I386/PCNFGMIN.H_
.cab
I386/PCNFGMIN.IN_
.cab
I386/PDH.DL_
.cab
I386/PENTNT.EX_
.cab
I386/PEN_I.CU_
.cab
I386/PEN_IL.CU_
.cab
I386/PEN_IM.CU_
.cab
I386/PEN_L.CU_
.cab
I386/PEN_M.CU_
.cab
I386/PEN_R.CU_
.cab
I386/PEN_RL.CU_
.cab
I386/PEN_RM.CU_
.cab
I386/PERFC009.DA_
.cab
I386/PERFCI.H_
.cab
I386/PERFCI.IN_
.cab
I386/PERFCTRS.DL_
.cab
I386/PERFCTRS.MF_
.cab
I386/PERFCTRS.MO_
.cab
I386/PERFD009.DA_
.cab
I386/PERFDISK.DL_
.cab
I386/PERFDISK.MF_
.cab
I386/PERFDISK.MO_
.cab
I386/PERFFILT.H_
.cab
I386/PERFFILT.IN_
.cab
I386/PERFH009.DA_
.cab
I386/PERFI009.DA_
.cab
I386/PERFMON.EX_
.cab
I386/PERFMON.MS_
.cab
I386/PERFNET.DL_
.cab
I386/PERFNET.MF_
.cab
I386/PERFNET.MO_
.cab
I386/PERFNW.DL_
.cab
I386/PERFOS.DL_
.cab
I386/PERFOS.MF_
.cab
I386/PERFOS.MO_
.cab
I386/PERFPROC.DL_
.cab
I386/PERFPROC.MF_
.cab
I386/PERFPROC.MO_
.cab
I386/PERFTS.DL_
.cab
I386/PERFVD.EX_
.cab
I386/PERFWCI.H_
.cab
I386/PERFWCI.IN_
.cab
I386/PERM2.IN_
.cab
I386/PERMCHK.DL_
.cab
I386/PHIL1VID.IN_
.cab
I386/PHIME.CA_
.cab
I386/PHONE.IC_
.cab
I386/PHONE.VE_
.cab
I386/PIANO.AN_
.cab
I386/PIDGEN.DLL
.dll windows:5 windows x86 arch:x86

6f94919bc61cf460f96b1057bfb92f03

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_DLL

Imports

kernel32

FreeResource
LockResource
LoadResource
FindResourceA
SetLastError
MultiByteToWideChar
GetTickCount
WideCharToMultiByte
GetVolumeInformationA
CloseHandle
DeviceIoControl
CreateFileA
lstrcmpA
QueryDosDeviceA
HeapAlloc
GetProcessHeap
HeapFree
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
GetLastError
SizeofResource
GetLocalTime
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
lstrlenA
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualAlloc
GetProcAddress
LoadLibraryA
FlushFileBuffers
SetStdHandle
SetFilePointer
SystemTimeToFileTime
lstrcpyA
QueryPerformanceCounter
GlobalMemoryStatus
SetHandleCount
GetStdHandle
VirtualFree
GetLocaleInfoA
GetLocaleInfoW
RtlUnwind

user32

wsprintfA
CharNextA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Exports

Exports

PIDGenA
PIDGenSimpA
PIDGenSimpW
PIDGenW
SetupPIDGenA
SetupPIDGenW

Sections

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/PIECHTBG.JP_
.cab
I386/PIECHTS.HT_
.cab
I386/PIFMGR.DL_
.cab
I386/PINBALL.CH_
.cab
I386/PINBALL.DA_
.cab
I386/PINBALL.EX_
.cab
I386/PINBALL.HL_
.cab
I386/PINBALL.IN_
.cab
I386/PINBALL.MI_
.cab
I386/PINBALL2.MI_
.cab
I386/PING.EX_
.cab
I386/PJL.GP_
.cab
I386/PLUGIN.OC_
.cab
I386/PLUSTAB.DL_
.cab
I386/PMSPL.DL_
.cab
I386/PNGFILT.DL_
.cab
I386/POLAGENT.DL_
.cab
I386/POLSTORE.DL_
.cab
I386/POSIX.EX_
.cab
I386/POWERCFG.CP_
.cab
I386/POWERPNT.PP_
.cab
I386/POWRPROF.DL_
.cab
I386/PPA.IN_
.cab
I386/PPA3.IN_
.cab
I386/PPPMENU.SC_
.cab
I386/PRAIRIE.BM_
.cab
I386/PRC.NL_
.cab
I386/PRCP.NL_
.cab
I386/PRESENTA.SH_
.cab
I386/PRFLBMSG.DL_
.cab
I386/PRINT.EX_
.cab
I386/PRINTFND.CH_
.cab
I386/PRINTING.CH_
.cab
I386/PRINTMON.IN_
.cab
I386/PRINTUI.DL_
.cab
I386/PRINTUPG.IN_
.cab
I386/PRLOAD.BI_
.cab
I386/PROCTEXE.OC_
.cab
I386/PRODSPEC.INI
I386/PROFMAP.DL_
.cab
I386/PROGMAN.CN_
.cab
I386/PROGMAN.EX_
.cab
I386/PROGMAN.HL_
.cab
I386/PROQUOTA.EX_
.cab
I386/PROTOCOL._
.cab
I386/PROVTHRD.DL_
.cab
I386/PRTWEBVW.CS_
.cab
I386/PSAPI.DL_
.cab
I386/PSBASE.DL_
.cab
I386/PSCHDCNT.H_
.cab
I386/PSCHDPRF.DL_
.cab
I386/PSCHDPRF.IN_
.cab
I386/PSCHED.SY_
.cab
I386/PSCRIPT.SE_
.cab
I386/PSCRPTFE.NT_
.cab
I386/PSNPPAGN.DL_
.cab
I386/PSTOREC.DL_
.cab
I386/PSXDLL.DL_
.cab
I386/PSXSS.EX_
.cab
I386/PTILINK.SY_
.cab
I386/PUBPLACE.HT_
.cab
I386/PUBPRN.VB_
.cab
I386/PWRMN.CH_
.cab
I386/PWRMN.HL_
.cab
I386/PWS.EX_
.cab
I386/PWSDATA.DL_
.cab
I386/PWSTRAY.EX_
.cab
I386/PYIME.CA_
.cab
I386/QCAP.DL_
.cab
I386/QCUT.DL_
.cab
I386/QDV.DL_
.cab
I386/QDVD.DL_
.cab
I386/QL1080.SY_
.cab
I386/QL10WNT.SY_
.cab
I386/QL1240.SY_
.cab
I386/QL2100.SY_
.cab
I386/QMGR.DL_
.cab
I386/QMGRPRXY.DL_
.cab
I386/QOSNAME.DL_
.cab
I386/QUARTZ.DL_
.cab
I386/QUATTRO.WB_
.cab
I386/QUERY.AS_
.cab
I386/QUERY.DL_
.cab
I386/QUOTES._
.cab
I386/RADD5018.IC_
.cab
I386/RAINBOW.AN_
.cab
I386/RAINDROP.AN_
.cab
I386/RAPILIB.DL_
.cab
I386/RASACD.SY_
.cab
I386/RASADHLP.DL_
.cab
I386/RASADMIN.CN_
.cab
I386/RASADMIN.EX_
.cab
I386/RASADMIN.HL_
.cab
I386/RASAPI32.DL_
.cab
I386/RASAUTH.DL_
.cab
I386/RASAUTO.DL_
.cab
I386/RASAUTOU.EX_
.cab
I386/RASCHAP.DL_
.cab
I386/RASCTRNM.H_
.cab
I386/RASCTRS.DL_
.cab
I386/RASCTRS.IN_
.cab
I386/RASDIAL.EX_
.cab
I386/RASDLG.DL_
.cab
I386/RASGPRXY.DL_
.cab
I386/RASGTWY.DL_
.cab
I386/RASIRDA.SY_
.cab
I386/RASL2TP.SY_
.cab
I386/RASMAN.DL_
.cab
I386/RASMANS.DL_
.cab
I386/RASMONTR.DL_
.cab
I386/RASMXS.DL_
.cab
I386/RASPHONE.EX_
.cab
I386/RASPPP.DL_
.cab
I386/RASPPTP.SY_
.cab
I386/RASPTI.SY_
.cab
I386/RASRAD.DL_
.cab
I386/RASSAPI.DL_
.cab
I386/RASSAUTH.DL_
.cab
I386/RASSCRPT.DL_
.cab
I386/RASSER.DL_
.cab
I386/RASTAPI.DL_
.cab
I386/RASTLS.DL_
.cab
I386/RATINGS.CH_
.cab
I386/RATINGS.CN_
.cab
I386/RATINGS.HL_
.cab
I386/RAWWAN.SY_
.cab
I386/RCA.IN_
.cab
I386/RCAMSP.DL_
.cab
I386/RCP.EX_
.cab
I386/RDBSS.SY_
.cab
I386/READER.CH_
.cab
I386/READER.HL_
.cab
I386/RECOVER.EX_
.cab
I386/RECYCLE.CH_
.cab
I386/RECYCLE.WA_
.cab
I386/REDIR.EX_
.cab
I386/REGAPI.DL_
.cab
I386/REGEDIT.CH_
.cab
I386/REGEDIT.EXE
.exe windows:5 windows x86 arch:x86

a279d88ead565236da4474c02d09343b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

OutputDebugStringW
GetProcAddress
GlobalUnlock
lstrcpynW
MulDiv
LoadLibraryW
FreeLibrary
WriteFile
MultiByteToWideChar
WideCharToMultiByte
SearchPathW
CreateFileW
GetFileSize
ReadFile
SetFilePointer
GetLastError
LoadLibraryA
CloseHandle
lstrcmpW
GetComputerNameW
LocalAlloc
FormatMessageW
GetCommandLineW
GetThreadLocale
GetModuleHandleW
ExitProcess
lstrcatW
GetProcessHeap
lstrcmpiW
lstrlenW
lstrcpyW
LocalFree
GlobalAlloc
GlobalLock

gdi32

GetDeviceCaps
ExtTextOutW
CreateFontIndirectW
SelectObject
SetTextColor
SelectClipRgn
ExcludeClipRect
PatBlt
SetBkColor
GetTextMetricsW
CreatePatternBrush
AbortDoc
EndDoc
EndPage
SetViewportOrgEx
StartPage
StartDocW
SetAbortProc
CreateBitmap
DeleteObject
DeleteDC

user32

EnableMenuItem
GetSubMenu
LoadMenuW
IsClipboardFormatAvailable
GetDlgCtrlID
CheckRadioButton
SendMessageW
GetWindowTextW
GetParent
GetClipboardData
IsDlgButtonChecked
GetDlgItemInt
SetClipboardData
RegisterClassExW
LoadImageW
LoadIconW
ShowWindow
SetWindowPlacement
CreateWindowExW
UpdateWindow
DeleteMenu
GetMenu
PostQuitMessage
GetWindowPlacement
SetWindowTextW
EnableWindow
DialogBoxParamW
DrawMenuBar
InsertMenuItemW
SetMenuItemInfoW
GetDesktopWindow
PostMessageW
SetMenuDefaultItem
InsertMenuW
GetMenuItemID
CheckMenuItem
GetMenuItemInfoW
ScreenToClient
SetCursorPos
DispatchMessageW
GetMessageW
IsIconic
ShowCursor
SetCursor
ClientToScreen
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
DestroyIcon
GetSysColor
DestroyWindow
CreateDialogParamW
CharNextW
CheckDlgButton
DrawAnimatedRects
DestroyMenu
TrackPopupMenuEx
ModifyMenuW
GetMessagePos
TranslateMessage
TranslateAcceleratorW
LoadAcceleratorsW
SetForegroundWindow
GetLastActivePopup
BringWindowToTop
FindWindowW
LoadStringW
GetWindow
IsDialogMessageW
PeekMessageW
MessageBoxW
CharUpperBuffW
CharUpperW
IsCharAlphaNumericW
CloseClipboard
HideCaret
SetCaretPos
MessageBeep
CharLowerW
InvalidateRect
GetKeyState
KillTimer
ReleaseCapture
SetFocus
SetCapture
SetTimer
DestroyCaret
CreateCaret
ShowCaret
wsprintfW
BeginPaint
EndPaint
ScrollWindowEx
SetScrollInfo
GetDC
ReleaseDC
DefWindowProcW
RegisterClipboardFormatW
LoadCursorW
RegisterClassW
SetWindowLongW
SetDlgItemTextW
SendDlgItemMessageW
GetDlgItem
GetWindowRect
GetSystemMetrics
MoveWindow
MapWindowPoints
SetWindowPos
GetWindowLongW
EndDialog
WinHelpW
OpenClipboard
EmptyClipboard
IntersectRect
GetClientRect
GetDlgItemTextW
CallWindowProcW

advapi32

RegCloseKey
RegQueryValueExW
RegOpenKeyW
RegEnumKeyW
RegSetValueExW
RegCreateKeyW
RegEnumValueW
RegDeleteValueW
RegOpenKeyExW
RegQueryInfoKeyW
RegDeleteKeyW
RegConnectRegistryW
RegFlushKey
RegSetValueW
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA

comctl32

ord2
ord4
ImageList_ReplaceIcon
ImageList_Destroy
ImageList_Create
ImageList_SetBkColor
CreateStatusWindowW
ord358
ord359
ord363
ord337
ord338
ord334
ord236
ord329
ord365
ord340

comdlg32

PrintDlgExW
GetOpenFileNameW
GetSaveFileNameW

shell32

ord195
SHBrowseForFolderW
DragQueryFileW
DragFinish
ShellAboutW

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 290KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
I386/REGEDIT.HL_
.cab
I386/REGEDT32.CH_
.cab
I386/REGEDT32.EX_
.cab
I386/REGEDT32.HL_
.cab
I386/REGEVENT.MO_
.cab
I386/REGISTRY.IN_
.cab
I386/REGOPT.CH_
.cab
I386/REGSVC.EX_
.cab
I386/REGSVR32.EX_
.cab
I386/REGWIZ.EX_
.cab
I386/REGWIZC.DL_
.cab
I386/RELATED.HT_
.cab
I386/REMINST.IN_
.cab
I386/REMOTESP.TS_
.cab
I386/REND.DL_
.cab
I386/REPLACE.EX_
.cab
I386/RESUTILS.DL_
.cab
I386/REXEC.EX_
.cab
I386/RHODY.BM_
.cab
I386/RICHED20.DL_
.cab
I386/RICHED32.DL_
.cab
I386/RINGIN.WA_
.cab
I386/RINGOUT.WA_
.cab
I386/RINORPRT.SI_
.cab
I386/RISTNDRD.SI_
.cab
I386/RMVV1.IN_
.cab
I386/RMVV2.IN_
.cab
I386/RNR20.DL_
.cab
I386/ROMAN.FO_
.cab
I386/ROOTMDM.SY_
.cab
I386/ROUTE.EX_
.cab
I386/ROUTEEXT.DL_
.cab
I386/ROUTEMON.EX_
.cab
I386/ROUTETAB.DL_
.cab
I386/RPCNS4.DL_
.cab
I386/RPCPROXY.DL_
.cab
I386/RPCREF.DL_
.cab
I386/RPCRT4.DL_
.cab
I386/RPCSS.DL_
.cab
I386/RRCM.DL_
.cab
I386/RS322.CF_
.cab
I386/RSABASE.DLL
.dll regsvr32 windows:5 windows x86 arch:x86

c3fdd31b947cc525203daf13ac541293

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

ntdll

_chkstk
_strlwr
wcslen
wcscmp
wcscpy
wcscat
RtlMoveMemory
RtlUnwind

kernel32

MultiByteToWideChar
Sleep
SetLastError
GetModuleHandleW
DeviceIoControl
GetCurrentProcess
LoadLibraryW
GetSystemDirectoryW
CreateFileW
FindFirstFileExW
WriteFile
GetFileSize
GetCurrentThread
MoveFileW
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
WideCharToMultiByte
FindNextFileW
LoadLibraryExA
LocalReAlloc
SizeofResource
LoadResource
FindResourceA
ReadFile
_lclose
SetFilePointer
OpenFile
GetCurrentProcessId
GetProcessHeap
HeapAlloc
GetCurrentThreadId
GetTickCount
GetLocalTime
QueryPerformanceCounter
GlobalMemoryStatus
GetDiskFreeSpaceA
GetComputerNameA
HeapFree
CloseHandle
lstrcpyW
DisableThreadLibraryCalls
DeleteCriticalSection
GetVersionExA
IsBadWritePtr
InitializeCriticalSection
lstrcmpA
LoadLibraryA
GetProcAddress
lstrlenA
lstrcpyA
FreeLibrary
lstrlenW
RaiseException
FindClose
EnterCriticalSection
LeaveCriticalSection
GetLastError
LocalAlloc
LocalFree
SetFileAttributesW
CreateDirectoryW
DeleteFileW

ole32

CoTaskMemFree

advapi32

GetSecurityDescriptorControl
GetSecurityDescriptorLength
SetFileSecurityW
RegDeleteValueA
MakeSelfRelativeSD
GetSecurityDescriptorDacl
GetSecurityDescriptorSacl
GetAclInformation
GetAce
ImpersonateSelf
AdjustTokenPrivileges
RegEnumKeyA
RegDeleteKeyW
RegOpenKeyExW
LookupPrivilegeValueA
PrivilegeCheck
IsValidSid
GetSidIdentifierAuthority
GetSidSubAuthorityCount
GetSidSubAuthority
OpenThreadToken
RevertToSelf
OpenProcessToken
SetThreadToken
GetTokenInformation
FreeSid
AddAccessAllowedAce
GetFileSecurityW
RegQueryValueExA
RegCloseKey
RegGetKeySecurity
RegEnumKeyExA
RegQueryInfoKeyA
GetUserNameA
RegSetValueExA
RegCreateKeyExA
EqualSid
RegOpenKeyExA
InitializeSecurityDescriptor
GetLengthSid
AllocateAndInitializeSid
SetSecurityDescriptorDacl
InitializeAcl

user32

wsprintfW
wsprintfA
LoadStringW

userenv

GetProfileType

crypt32

CertVerifySubjectCertificateContext
CertOpenSystemStoreA
CertFreeCertificateContext
CertGetCertificateChain
CertCompareCertificateName
CertCloseStore
CryptProtectData
CertFindCertificateInStore
CryptUnprotectData
CertFindExtension
CryptDecodeObject
CertFreeCertificateChain
CertCreateCertificateContext

Exports

Exports

CPAcquireContext
CPCreateHash
CPDecrypt
CPDeriveKey
CPDestroyHash
CPDestroyKey
CPDuplicateHash
CPDuplicateKey
CPEncrypt
CPExportKey
CPGenKey
CPGenRandom
CPGetHashParam
CPGetKeyParam
CPGetProvParam
CPGetUserKey
CPHashData
CPHashSessionKey
CPImportKey
CPReleaseContext
CPSetHashParam
CPSetKeyParam
CPSetProvParam
CPSignHash
CPVerifySignature
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/RSACI.RA_
.cab
I386/RSAENH.DL_
.cab
I386/RSFSAPS.DL_
.cab
I386/RSH.EX_
.cab
I386/RSHX32.DL_
.cab
I386/RSM.EX_
.cab
I386/RSM.HL_
.cab
I386/RSM.IN_
.cab
I386/RSMCON_W.CH_
.cab
I386/RSM_W.CH_
.cab
I386/RSNOTIFY.EX_
.cab
I386/RSTORAGE.IN_
.cab
I386/RSVP.EX_
.cab
I386/RSVP.IN_
.cab
I386/RSVPCNTS.H_
.cab
I386/RSVPMSG.DL_
.cab
I386/RSVPPERF.DL_
.cab
I386/RSVPSP.DL_
.cab
I386/RTIPXMIB.DL_
.cab
I386/RTM.DL_
.cab
I386/RTUMEXT.DL_
.cab
I386/RTUTILS.DL_
.cab
I386/RUNAS.EX_
.cab
I386/RUNDLL32.EX_
.cab
I386/RUNONCE.EX_
.cab
I386/RVRSUMID.BM_
.cab
I386/S3SAV3D.IN_
.cab
I386/S3SAV4.IN_
.cab
I386/S3TRIO3D.IN_
.cab
I386/SAM.CF_
.cab
I386/SAM.VC_
.cab
I386/SAMLIB.DL_
.cab
I386/SAMSRV.DL_
.cab
I386/SANTAFE.BM_
.cab
I386/SAVEDUMP.EX_
.cab
I386/SBP2.IN_
.cab
I386/SBP2PORT.SY_
.cab
I386/SCARDDLG.DL_
.cab
I386/SCARDDLG.HL_
.cab
I386/SCARDSSP.DL_
.cab
I386/SCARDSVR.EX_
.cab
I386/SCECLI.DL_
.cab
I386/SCECON_W.CH_
.cab
I386/SCEREGVL.IN_
.cab
I386/SCESRV.DL_
.cab
I386/SCE_W.CH_
.cab
I386/SCHANNEL.DLL
.dll windows:5 windows x86 arch:x86

66f7e23adee0ec9e31a5004bded7df48

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

secur32

ApplyControlToken

msvcrt

wcschr
wcslen
wcscpy
memmove
_ltow
_except_handler3
_ltoa
time
printf
wcscmp

ntdll

RtlInitAnsiString
NtFreeVirtualMemory
RtlAcquireResourceShared
NtAllocateVirtualMemory
RtlAcquireResourceExclusive
NtClose
RtlEqualUnicodeString
RtlGetNtProductType
RtlAnsiStringToUnicodeString
RtlCreateUnicodeStringFromAsciiz
RtlInitUnicodeString
RtlReleaseResource
RtlInitializeResource
RtlDeleteResource

msasn1

ASN1BEREncSX
ASN1BEREncOctetString
ASN1BEREncBitString
ASN1BERDecSXVal
ASN1intx_free
ASN1BEREncS32
ASN1BERDecBitString2
ASN1BEREncEndOfContents
ASN1BERDecS32Val
ASN1BEREncExplicitTag
ASN1BERDecEndOfContents
ASN1BERDecExplicitTag
ASN1BERDecPeekTag
ASN1_CreateModule
ASN1CEREncFlushBlkElement
ASN1_CloseModule
ASN1CEREncEndBlk
ASN1CEREncBeginBlk
ASN1BEREncOpenType
ASN1CEREncNewBlkElement
ASN1BERDecOpenType
ASN1BEREncObjectIdentifier2
ASN1BERDecOctetString
ASN1BERDecObjectIdentifier2
ASN1DecRealloc
ASN1BERDecNotEndOfContents
ASN1open_free
ASN1octetstring_free
ASN1Free
ASN1_Decode
ASN1_Encode
ASN1_FreeEncoded
ASN1_SetEncoderOption
ASN1_FreeDecoded

crypt32

I_CryptInstallAsn1Module
CertEnumCTLsInStore
CertAddStoreToCollection
CertEnumCertificatesInStore
CertAddEncodedCertificateToStore
CryptDecodeObject
CryptSignAndEncodeCertificate
CertFindChainInStore
CryptEncodeObject
I_CryptGetAsn1Decoder
I_CryptGetAsn1Encoder
I_CryptUninstallAsn1Module
CertControlStore
CryptInstallOIDFunctionAddress
CertGetEnhancedKeyUsage
CertVerifyCertificateChainPolicy
CertAddCertificateContextToStore
CertGetCertificateChain
CertCompareCertificateName
CertFreeCertificateChain
CertNameToStrA
CryptDecodeObjectEx
CertDuplicateCertificateContext
CertDuplicateStore
CertOpenSystemStoreA
CertOpenStore
CertSaveStore
CertGetCertificateContextProperty
CertSerializeCertificateStoreElement
CertSetCertificateContextProperty
CertGetNameStringW
CertAddSerializedElementToStore
CertCreateCertificateContext
CertCloseStore
CertNameToStrW
CertFreeCertificateContext

userenv

RegisterGPNotification
UnregisterGPNotification

wsock32

htons
ntohl
ntohs
htonl

advapi32

ReportEventW
CryptVerifySignatureA
CryptHashSessionKey
CryptDuplicateHash
CryptDeriveKey
CryptContextAddRef
CryptDecrypt
CryptEncrypt
CryptExportKey
CryptGenKey
CryptSetKeyParam
CryptGetUserKey
CryptGetKeyParam
CryptSignHashA
CryptGenRandom
CryptImportKey
RevertToSelf
RegCreateKeyExA
DeregisterEventSource
RegQueryValueExW
RegCreateKeyExW
RegFlushKey
RegisterEventSourceW
CryptSetProvParam
CryptGetProvParam
CryptHashData
CryptSignHashW
CryptDestroyKey
CryptCreateHash
CryptSetHashParam
CryptGetHashParam
CryptDestroyHash
CryptAcquireContextA
CryptAcquireContextW
CryptReleaseContext
AllocateLocallyUniqueId
RegConnectRegistryA
RegOpenKeyExW
RegCloseKey
RegSetValueExW

kernel32

GetModuleHandleW
SetEvent
ResetEvent
GetComputerNameW
GetCurrentThread
GetComputerNameExW
GetSystemDefaultLCID
LeaveCriticalSection
GetLocaleInfoA
LoadLibraryW
FreeLibrary
EnterCriticalSection
InterlockedIncrement
InterlockedDecrement
lstrlenW
lstrcpyW
GetProcAddress
lstrcatW
InitializeCriticalSection
DeleteCriticalSection
DisableThreadLibraryCalls
GetCurrentProcessId
LocalAlloc
GetLastError
TryEnterCriticalSection
CloseHandle
VirtualAlloc
OpenProcess
SetLastError
GetCurrentProcess
WaitForSingleObjectEx
LocalFree
CreateEventA
lstrcmpW
LocalReAlloc
lstrcmpiA
UnregisterWaitEx
lstrlenA
GetTickCount
RegisterWaitForSingleObject

dnsapi

DnsNameCompare_W

Exports

Exports

AcceptSecurityContext
AcquireCredentialsHandleA
AcquireCredentialsHandleW
ApplyControlToken
CompleteAuthToken
DeleteSecurityContext
EnableCertMapping
EnumerateSecurityPackagesA
EnumerateSecurityPackagesW
FreeContextBuffer
FreeCredentialsHandle
ImpersonateSecurityContext
InitSecurityInterfaceA
InitSecurityInterfaceW
InitializeSecurityContextA
InitializeSecurityContextW
MakeSignature
QueryContextAttributesA
QueryContextAttributesW
QuerySecurityPackageInfoA
QuerySecurityPackageInfoW
RevertSecurityContext
SealMessage
SpLsaModeInitialize
SpUserModeInitialize
SslCrackCertificate
SslFreeCertificate
SslGenerateKeyPair
SslGenerateRandomBits
SslGetMaximumKeySize
SslLoadCertificate
UnsealMessage
VerifySignature

Sections

.text
Size: 131KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/SCLGNTFY.DL_
.cab
I386/SCMCON_W.CH_
.cab
I386/SCM_W.CH_
.cab
I386/SCRCONS.EX_
.cab
I386/SCRCONS.MO_
.cab
I386/SCRDBCAT.CA_
.cab
I386/SCRDX86.DL_
.cab
I386/SCRIPT.FO_
.cab
I386/SCRIPTO.DL_
.cab
I386/SCRNSAVE.SC_
.cab
I386/SCROBJ.DL_
.cab
I386/SCRRUN.DL_
.cab
I386/SCSCON_W.CH_
.cab
I386/SCSI.IN_
.cab
I386/SCSIDEV.IN_
.cab
I386/SCSIPORT.SY_
.cab
I386/SC_W.CH_
.cab
I386/SDBAPIU.DL_
.cab
I386/SDPBLB.DL_
.cab
I386/SEARCH.AS_
.cab
I386/SECAUTH.HL_
.cab
I386/SECEDIT.CH_
.cab
I386/SECEDIT.EX_
.cab
I386/SECLOGON.DL_
.cab
I386/SECPOL.MS_
.cab
I386/SECRCW32.DL_
.cab
I386/SECRCW32.MF_
.cab
I386/SECRCW32.MO_
.cab
I386/SECSET_W.CH_
.cab
I386/SECUR32.DL_
.cab
I386/SECUREDC.IN_
.cab
I386/SECUREWS.IN_
.cab
I386/SECURITY.DL_
.cab
I386/SEFILSHR.DL_
.cab
I386/SENDCMSG.CH_
.cab
I386/SENDCMSG.DL_
.cab
I386/SENDMAIL.DL_
.cab
I386/SENS.DL_
.cab
I386/SENSAPI.DL_
.cab
I386/SENSCFG.DL_
.cab
I386/SERE1257.FO_
.cab
I386/SERENUM.SY_
.cab
I386/SERF1257.FO_
.cab
I386/SERIAL.SY_
.cab
I386/SERIALUI.DL_
.cab
I386/SERIFE.FO_
.cab
I386/SERIFEE.FO_
.cab
I386/SERIFEG.FO_
.cab
I386/SERIFER.FO_
.cab
I386/SERIFET.FO_
.cab
I386/SERIFF.FO_
.cab
I386/SERIFFE.FO_
.cab
I386/SERIFFG.FO_
.cab
I386/SERIFFR.FO_
.cab
I386/SERIFFT.FO_
.cab
I386/SERVDEPS.DL_
.cab
I386/SERVICES.EX_
.cab
I386/SERVICES.MS_
.cab
I386/SERVICES._
.cab
I386/SERWVDRV.DL_
.cab
I386/SETHC.EX_
.cab
I386/SETPATHS.CM_
.cab
I386/SETREG.EX_
.cab
I386/SETUP.EX_
.cab
I386/SETUP16.IN_
.cab
I386/SETUP50.EX_
.cab
I386/SETUPACC.TXT
I386/SETUPAPI.DL_
.cab
I386/SETUPDD.SY_
.cab
I386/SETUPDLL.DL_
.cab
I386/SETUPLDR.BIN
I386/SETUPLDR.EX_
.cab
I386/SETUPP.INI
I386/SETUPQRY.DL_
.cab
I386/SETUPQRY.IN_
.cab
I386/SETUPREG.HIV
I386/SETUP_W.BM_
.cab
I386/SETVER.EX_
.cab
I386/SFC.DL_
.cab
I386/SFC.EX_
.cab
I386/SFCFILES.DL_
.cab
I386/SFLOPPY.SY_
.cab
I386/SFMAPI.DL_
.cab
I386/SFMATALK.SY_
.cab
I386/SFMATMSG.DL_
.cab
I386/SFMMGR.HL_
.cab
I386/SFMMON.DL_
.cab
I386/SFMPSPRT.DL_
.cab
I386/SFMWSHAT.DL_
.cab
I386/SGIBVID.DL_
.cab
I386/SGIU.IN_
.cab
I386/SGLFB.DLL
.dll windows:5 windows x86 arch:x86

6e692e7659c8419423cbd7e4fa3c4e07

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

win32k.sys

EngDeviceIoControl
EngAllocMem
EngDeleteSurface
EngAssociateSurface
EngCreateBitmap
EngFreeMem
EngDeletePalette
EngCreatePalette
PALOBJ_cGetColors

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 544B - Virtual size: 540B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 704B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 288B - Virtual size: 262B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 160B - Virtual size: 142B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/SGLFB.SYS
.sys windows:5 windows x86 arch:x86

6b78cc52ed9c99e6a5bb6ae1646e66a2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

videoprt.sys

VideoPortZeroMemory
VideoPortSetRegistryParameters
VideoPortUnmapMemory
VideoPortMapMemory
VideoPortStallExecution
VideoPortInitialize

ntoskrnl.exe

MmUnmapIoSpace
MmMapIoSpace
ExFreePool
IoAssignResources
ExAllocatePoolWithTag
RtlQueryRegistryValues
RtlInitUnicodeString

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 192B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 256B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 448B - Virtual size: 440B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 896B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 128B - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/SHARE.EX_
.cab
I386/SHCMN.DL_
.cab
I386/SHDOCLC.DL_
.cab
I386/SHDOCVW.DL_
.cab
I386/SHELL.DL_
.cab
I386/SHELL.HL_
.cab
I386/SHELL.IN_
.cab
I386/SHELL32.DL_
.cab
I386/SHFOLDER.DL_
.cab
I386/SHIFTJIS.UC_
.cab
I386/SHIM.DL_
.cab
I386/SHIMGVW.DL_
.cab
I386/SHLWAPI.DL_
.cab
I386/SHMGRATE.EX_
.cab
I386/SHRPUBW.EX_
.cab
I386/SHSCRAP.DL_
.cab
I386/SIGNIN.HL_
.cab
I386/SIGTAB.DL_
.cab
I386/SIGVERIF.EX_
.cab
I386/SIGVERIF.HL_
.cab
I386/SIMPTCP.DL_
.cab
I386/SIS300.IN_
.cab
I386/SIS6306.IN_
.cab
I386/SISBKUP.DL_
.cab
I386/SISV6326.IN_
.cab
I386/SIZE1_I.CU_
.cab
I386/SIZE1_IL.CU_
.cab
I386/SIZE1_IM.CU_
.cab
I386/SIZE1_L.CU_
.cab
I386/SIZE1_M.CU_
.cab
I386/SIZE1_R.CU_
.cab
I386/SIZE1_RL.CU_
.cab
I386/SIZE1_RM.CU_
.cab
I386/SIZE2_I.CU_
.cab
I386/SIZE2_IL.CU_
.cab
I386/SIZE2_IM.CU_
.cab
I386/SIZE2_L.CU_
.cab
I386/SIZE2_M.CU_
.cab
I386/SIZE2_R.CU_
.cab
I386/SIZE2_RL.CU_
.cab
I386/SIZE2_RM.CU_
.cab
I386/SIZE3_I.CU_
.cab
I386/SIZE3_IL.CU_
.cab
I386/SIZE3_IM.CU_
.cab
I386/SIZE3_L.CU_
.cab
I386/SIZE3_M.CU_
.cab
I386/SIZE3_R.CU_
.cab
I386/SIZE3_RL.CU_
.cab
I386/SIZE3_RM.CU_
.cab
I386/SIZE4_I.CU_
.cab
I386/SIZE4_IL.CU_
.cab
I386/SIZE4_IM.CU_
.cab
I386/SIZE4_L.CU_
.cab
I386/SIZE4_M.CU_
.cab
I386/SIZE4_R.CU_
.cab
I386/SIZE4_RL.CU_
.cab
I386/SIZE4_RM.CU_
.cab
I386/SIZENESW.AN_
.cab
I386/SIZENS.AN_
.cab
I386/SIZENWSE.AN_
.cab
I386/SIZEWE.AN_
.cab
I386/SKDLL.DL_
.cab
I386/SKEYS.EX_
.cab
I386/SLAYERUI.DL_
.cab
I386/SLBCSP.DL_
.cab
I386/SLBKYGEN.DL_
.cab
I386/SLBRSRC.DL_
.cab
I386/SLIP.SC_
.cab
I386/SLIPMENU.SC_
.cab
I386/SM9232.DL_
.cab
I386/SM9332.DL_
.cab
I386/SMAE1257.FO_
.cab
I386/SMAF1257.FO_
.cab
I386/SMALLE.FO_
.cab
I386/SMALLEE.FO_
.cab
I386/SMALLEG.FO_
.cab
I386/SMALLER.FO_
.cab
I386/SMALLET.FO_
.cab
I386/SMALLF.FO_
.cab
I386/SMALLFE.FO_
.cab
I386/SMALLFG.FO_
.cab
I386/SMALLFR.FO_
.cab
I386/SMALLFT.FO_
.cab
I386/SMARTCRD.IN_
.cab
I386/SMCLIB.SY_
.cab
I386/SMI.MI_
.cab
I386/SMLOGCFG.DL_
.cab
I386/SMLOGSVC.EX_
.cab
I386/SMLOG_W.CH_
.cab
I386/SMSS.EX_
.cab
I386/SMTPCONS.DL_
.cab
I386/SMTPCONS.MO_
.cab
I386/SMTPCTRS.DL_
.cab
I386/SNDBLST.DL_
.cab
I386/SNDBLST.SY_
.cab
I386/SNDREC.WA_
.cab
I386/SNDREC32.EX_
.cab
I386/SNDVOL32.CH_
.cab
I386/SNDVOL32.EX_
.cab
I386/SNDVOL32.HL_
.cab
I386/SNMP.EX_
.cab
I386/SNMPAPI.DL_
.cab
I386/SNMPMIB.DL_
.cab
I386/SNMPSNAP.DL_
.cab
I386/SNMPSNAP.HL_
.cab
I386/SNMPTRAP.EX_
.cab
I386/SNMP_.CH_
.cab
I386/SOFTPUB.DL_
.cab
I386/SOL.CH_
.cab
I386/SOL.EX_
.cab
I386/SOL.HL_
.cab
I386/SORT.EX_
.cab
I386/SORTKEY.NL_
.cab
I386/SORTTBLS.NL_
.cab
I386/SOUND.DR_
.cab
I386/SOUND1.WA_
.cab
I386/SOUND104.WA_
.cab
I386/SOUND105.WA_
.cab
I386/SOUND108.WA_
.cab
I386/SOUND111.WA_
.cab
I386/SOUND112.WA_
.cab
I386/SOUND12.WA_
.cab
I386/SOUND13.WA_
.cab
I386/SOUND131.WA_
.cab
I386/SOUND136.WA_
.cab
I386/SOUND14.WA_
.cab
I386/SOUND16.WA_
.cab
I386/SOUND17.WA_
.cab
I386/SOUND18.WA_
.cab
I386/SOUND181.WA_
.cab
I386/SOUND19.WA_
.cab
I386/SOUND20.WA_
.cab
I386/SOUND21.WA_
.cab
I386/SOUND22.WA_
.cab
I386/SOUND24.WA_
.cab
I386/SOUND240.WA_
.cab
I386/SOUND243.WA_
.cab
I386/SOUND25.WA_
.cab
I386/SOUND26.WA_
.cab
I386/SOUND27.WA_
.cab
I386/SOUND28.WA_
.cab
I386/SOUND29.WA_
.cab
I386/SOUND3.WA_
.cab
I386/SOUND30.WA_
.cab
I386/SOUND34.WA_
.cab
I386/SOUND35.WA_
.cab
I386/SOUND36.WA_
.cab
I386/SOUND38.WA_
.cab
I386/SOUND39.WA_
.cab
I386/SOUND4.WA_
.cab
I386/SOUND42.WA_
.cab
I386/SOUND43.WA_
.cab
I386/SOUND45.WA_
.cab
I386/SOUND49.WA_
.cab
I386/SOUND49D.WA_
.cab
I386/SOUND5.WA_
.cab
I386/SOUND50.WA_
.cab
I386/SOUND528.WA_
.cab
I386/SOUND53.WA_
.cab
I386/SOUND54.WA_
.cab
I386/SOUND55.WA_
.cab
I386/SOUND560.WA_
.cab
I386/SOUND563.WA_
.cab
I386/SOUND57.WA_
.cab
I386/SOUND58.WA_
.cab
I386/SOUND6.WA_
.cab
I386/SOUND65.WA_
.cab
I386/SOUND68.WA_
.cab
I386/SOUND7.WA_
.cab
I386/SOUND713.WA_
.cab
I386/SOUND735.WA_
.cab
I386/SOUND8.WA_
.cab
I386/SOUND827.WA_
.cab
I386/SOUND9.WA_
.cab
I386/SOUND999.WA_
.cab
I386/SOUNDREC.CH_
.cab
I386/SOUNDREC.HL_
.cab
I386/SOUNDS.CH_
.cab
I386/SP2RES.DL_
.cab
I386/SP3RES.DL_
.cab
I386/SP4.CAB
.cab
I386/SP4.CAT
I386/SP4IIS.EX_
.cab
I386/SPARROW.SY_
.cab
I386/SPCHAPI.IN_
.cab
I386/SPCHTEL.DL_
.cab
I386/SPCMDCON.SYS
.sys windows:5 windows x86 arch:x86

35c36820433cc6178a5cb00eb14daebc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntoskrnl.exe

ZwQueryKey
_wcsnicmp
_alldiv
ZwCreateFile
RtlMultiByteToUnicodeN
ZwFsControlFile
ZwEnumerateKey
wcsstr
_strnicmp
ZwQuerySymbolicLinkObject
NtClose
RtlSecondsSince1970ToTime
ExSystemTimeToLocalTime
RtlTimeToTimeFields
ZwOpenKey
ZwQueryValueKey
ZwReadFile
wcsncat
RtlUnicodeStringToInteger
KeAttachProcess
KeDetachProcess
ZwSetValueKey
_allrem
ZwQueryDirectoryFile
wcsncpy
_allmul
swprintf
ZwOpenSymbolicLinkObject
wcscat
ZwQueryVolumeInformationFile
ZwWriteFile
RtlUnicodeToOemN
NlsMbOemCodePageTag
NlsOemLeadByteInfo
ZwQueryInformationFile
DbgPrint
wcscmp
_wcsicmp
wcschr
ZwSetInformationFile
wcslen
wcscpy
ZwOpenFile
wcsrchr
_except_handler3
ZwDeviceIoControlFile
ZwClose
RtlInitUnicodeString
memmove
RtlCompareMemory
ExFreePool
ExAllocatePool
RtlCopyUnicodeString
RtlUnicodeStringToAnsiString
RtlInitAnsiString

hal

HalGetEnvironmentVariable

setupdd.sys

SpMemFree
SpUnmapFile
SpMemAlloc
SpkbdIsKeyWaiting
SpStringToUpper
SpRtlFormatMessage
SpArcNameFromRegion
CommandConsoleInterface
SpdInitialize
SpdTerminate
SpLoadUnloadKey
SpPromptForDisk
SpFileExists
SpRegionFromNtName
SpPtDoDelete
SpPtDoCreate
SpPtPrepareDisks
SpPtSectorCountToMB
SpRegionFromDosName
SpPtGetOrdinal
SpFormatMessage
SpPtDetermineRegionSpace
SpSetAutochkCallback
SpExecuteImage
SpExpandFile
SpGetFullPathName
SpCopyFileUsingNames
SpvidDisplayString
SpvidDisplayOemString
SpkbdGetKeypress
SpvidScrollUp
SpvidClearScreenRegion
SpRenameFile
SpConcatenatePaths
SpRetreiveMessageText
SpNtNameFromRegion
SpDupStringW
NtfsMirrorBootSector
SpPtGetSectorLayoutInformation
FmtFillFormatBuffer
pSpBootCodeIoC
SpDetermineOsTypeFromBootSectorC
WriteNtfsBootSector
SpEnumerateDiskRegions
SpOpenAndMapFile

spddlang.sys

SplangGetCursorChar

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/SPCON_W.CH_
.cab
I386/SPDDLANG.SY_
.cab
I386/SPDWNW2K.EXE
.exe windows:5 windows x86 arch:x86

6cc1f41a20c7053098e4dacdc0a12681

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

LsaClose
LsaFreeMemory
LsaRemoveAccountRights
LsaEnumerateAccountsWithUserRight
LsaOpenPolicy
RegQueryValueExW
RegOpenKeyExW
LookupAccountSidW
ConvertStringSidToSidW
LookupAccountNameW
LsaAddPrivilegesToAccount
LsaCreateAccount
LsaOpenAccount

ntdll

wcslen
RtlConvertLongToLargeInteger
RtlInitUnicodeString
wcscpy
_wcsicmp
wcscat
wcsrchr

scecli

SceCloseProfile
SceAddToNameList
SceOpenProfile
SceUpdateSecurityProfile
SceBrowseDatabaseTable

ole32

CoUninitialize
CoCreateInstance
CoInitialize

msvcrt

fclose
__p___winitenv
wprintf
vswprintf
__set_app_type
__p__fmode
__p__commode
_controlfp
_wfopen
printf
fwprintf
__setusermatherr
_adjust_fdiv
_except_handler3
_exit
_XcptFilter
exit
__wgetmainargs
_initterm

kernel32

GetComputerNameW
LocalAlloc
Sleep
LocalFree
GetModuleFileNameW
GetLastError

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
I386/SPEECH.CN_
.cab
I386/SPEECH.DL_
.cab
I386/SPEECH.HL_
.cab
I386/SPIISUPD.EX_
.cab
I386/SPLASH.CH_
.cab
I386/SPOOLSS.DL_
.cab
I386/SPOOLSV.EX_
.cab
I386/SPRESTRT.EX_
.cab
I386/SPSECUPD.IN_
.cab
I386/SPTSUPD.EX_
.cab
I386/SPUD.SY_
.cab
I386/SPX.IN_
.cab
I386/SPXCOINS.DL_
.cab
I386/SPXPORTS.IN_
.cab
I386/SQLOLEDB.DL_
.cab
I386/SQLSODBC.HL_
.cab
I386/SQLSOLDB.HL_
.cab
I386/SQLSRV32.DL_
.cab
I386/SQLSTR.DL_
.cab
I386/SQLWID.DL_
.cab
I386/SQLWOA.DL_
.cab
I386/SRV.SY_
.cab
I386/SRVSVC.DL_
.cab
I386/SS3DFO.SC_
.cab
I386/SSBEZIER.SC_
.cab
I386/SSEE1257.FO_
.cab
I386/SSEF1257.FO_
.cab
I386/SSERIFE.FO_
.cab
I386/SSERIFEE.FO_
.cab
I386/SSERIFEG.FO_
.cab
I386/SSERIFER.FO_
.cab
I386/SSERIFET.FO_
.cab
I386/SSERIFF.FO_
.cab
I386/SSERIFFE.FO_
.cab
I386/SSERIFFG.FO_
.cab
I386/SSERIFFR.FO_
.cab
I386/SSERIFFT.FO_
.cab
I386/SSFLWBOX.SC_
.cab
I386/SSINC.DL_
.cab
I386/SSMARQUE.SC_
.cab
I386/SSMAZE.SC_
.cab
I386/SSMYST.SC_
.cab
I386/SSPIFILT.DL_
.cab
I386/SSPIPES.SC_
.cab
I386/SSSTARS.SC_
.cab
I386/SSTEXT3D.SC_
.cab
I386/STALPORT.IN_
.cab
I386/START.WA_
.cab
I386/STARTROM.CO_
.cab
I386/STARTROM.N1_
.cab
I386/STATE.IC_
.cab
I386/STATUS.DL_
.cab
I386/STAXMEM.DL_
.cab
I386/STCLIENT.DL_
.cab
I386/STDOLE.TL_
.cab
I386/STDOLE2.TL_
.cab
I386/STDOLE32.TL_
.cab
I386/STDPROV.DL_
.cab
I386/STI.DL_
.cab
I386/STI.IN_
.cab
I386/STICPL.CP_
.cab
I386/STILLCAM.IN_
.cab
I386/STIMON.EX_
.cab
I386/STISVC.EX_
.cab
I386/STI_CI.DL_
.cab
I386/STOBJECT.DL_
.cab
I386/STOPWTCH.AN_
.cab
I386/STORAGE.DL_
.cab
I386/STREAMCI.DL_
.cab
I386/STREAMS.SY_
.cab
I386/STRMDLL.DL_
.cab
I386/SUBRANGE.UC_
.cab
I386/SUBROUTN.IN_
.cab
I386/SUBST.EX_
.cab
I386/SUNBANNA.GI_
.cab
I386/SUNFBKG.JP_
.cab
I386/SUNFLOWR.HT_
.cab
I386/SUPPORT.IC_
.cab
I386/SUPP_ED.CH_
.cab
I386/SVCEXT.DL_
.cab
I386/SVCHOST.EX_
.cab
I386/SVCPACK.DL_
.cab
I386/SVCPACK.IN_
.cab
I386/SWEETS.HT_
.cab
I386/SWEETSBG.GI_
.cab
I386/SWITCH.IN_
.cab
I386/SWNT.IN_
.cab
I386/SWTCHBRD.BM_
.cab
I386/SYLFAEN.TT_
.cab
I386/SYMBOL.TT_
.cab
I386/SYMBOLE.FO_
.cab
I386/SYMBOLF.FO_
.cab
I386/SYMC810.SY_
.cab
I386/SYMC8XX.SY_
.cab
I386/SYM_HI.SY_
.cab
I386/SYNCAPP.EX_
.cab
I386/SYNCENG.DL_
.cab
I386/SYNCUI.DL_
.cab
I386/SYNTH.DL_
.cab
I386/SYNTH.PA_
.cab
I386/SYNTH.SY_
.cab
I386/SYSCOMP.IN_
.cab
I386/SYSDM.CH_
.cab
I386/SYSDM.CP_
.cab
I386/SYSDM.HL_
.cab
I386/SYSEDIT.EX_
.cab
I386/SYSINV.DL_
.cab
I386/SYSKEY.EX_
.cab
I386/SYSMAIN.SD_
.cab
I386/SYSMON.HL_
.cab
I386/SYSMON.OC_
.cab
I386/SYSMON_W.CH_
.cab
I386/SYSOC.IN_
.cab
I386/SYSOCMGR.EX_
.cab
I386/SYSPRINT.SE_
.cab
I386/SYSPROP.CH_
.cab
I386/SYSPRTJ.SE_
.cab
I386/SYSSETUP.DL_
.cab
I386/SYSSETUP.IN_
.cab
I386/SYSTEM.AD_
.cab
I386/SYSTEM.DR_
.cab
I386/SYSTEM.IN_
.cab
I386/SYSTEM.MD_
.cab
I386/SYSTEM32/NTDLL.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

CsrAllocateCaptureBuffer
CsrAllocateMessagePointer
CsrCaptureMessageBuffer
CsrCaptureMessageString
CsrCaptureTimeout
CsrClientCallServer
CsrClientConnectToServer
CsrFreeCaptureBuffer
CsrIdentifyAlertableThread
CsrNewThread
CsrProbeForRead
CsrProbeForWrite
CsrSetPriorityClass
DbgBreakPoint
DbgPrint
DbgPrintReturnControlC
DbgPrompt
DbgSsHandleKmApiMsg
DbgSsInitialize
DbgUiConnectToDbg
DbgUiContinue
DbgUiWaitStateChange
DbgUserBreakPoint
KiRaiseUserExceptionDispatcher
KiUserApcDispatcher
KiUserCallbackDispatcher
KiUserExceptionDispatcher
LdrAccessResource
LdrAlternateResourcesEnabled
LdrDisableThreadCalloutsForDll
LdrEnumResources
LdrFindEntryForAddress
LdrFindResourceDirectory_U
LdrFindResource_U
LdrFlushAlternateResourceModules
LdrGetDllHandle
LdrGetProcedureAddress
LdrInitializeThunk
LdrLoadAlternateResourceModule
LdrLoadDll
LdrProcessRelocationBlock
LdrQueryImageFileExecutionOptions
LdrQueryProcessModuleInformation
LdrShutdownProcess
LdrShutdownThread
LdrUnloadAlternateResourceModule
LdrUnloadDll
LdrVerifyImageMatchesChecksum
NPXEMULATORTABLE
NlsAnsiCodePage
NlsMbCodePageTag
NlsMbOemCodePageTag
NtAcceptConnectPort
NtAccessCheck
NtAccessCheckAndAuditAlarm
NtAccessCheckByType
NtAccessCheckByTypeAndAuditAlarm
NtAccessCheckByTypeResultList
NtAccessCheckByTypeResultListAndAuditAlarm
NtAccessCheckByTypeResultListAndAuditAlarmByHandle
NtAddAtom
NtAdjustGroupsToken
NtAdjustPrivilegesToken
NtAlertResumeThread
NtAlertThread
NtAllocateLocallyUniqueId
NtAllocateUserPhysicalPages
NtAllocateUuids
NtAllocateVirtualMemory
NtAreMappedFilesTheSame
NtAssignProcessToJobObject
NtCallbackReturn
NtCancelDeviceWakeupRequest
NtCancelIoFile
NtCancelTimer
NtClearEvent
NtClose
NtCloseObjectAuditAlarm
NtCompleteConnectPort
NtConnectPort
NtContinue
NtCreateChannel
NtCreateDirectoryObject
NtCreateEvent
NtCreateEventPair
NtCreateFile
NtCreateIoCompletion
NtCreateJobObject
NtCreateKey
NtCreateMailslotFile
NtCreateMutant
NtCreateNamedPipeFile
NtCreatePagingFile
NtCreatePort
NtCreateProcess
NtCreateProfile
NtCreateSection
NtCreateSemaphore
NtCreateSymbolicLinkObject
NtCreateThread
NtCreateTimer
NtCreateToken
NtCreateWaitablePort
NtCurrentTeb
NtDelayExecution
NtDeleteAtom
NtDeleteFile
NtDeleteKey
NtDeleteObjectAuditAlarm
NtDeleteValueKey
NtDeviceIoControlFile
NtDisplayString
NtDuplicateObject
NtDuplicateToken
NtEnumerateKey
NtEnumerateValueKey
NtExtendSection
NtFilterToken
NtFindAtom
NtFlushBuffersFile
NtFlushInstructionCache
NtFlushKey
NtFlushVirtualMemory
NtFlushWriteBuffer
NtFreeUserPhysicalPages
NtFreeVirtualMemory
NtFsControlFile
NtGetContextThread
NtGetDevicePowerState
NtGetPlugPlayEvent
NtGetTickCount
NtGetWriteWatch
NtImpersonateAnonymousToken
NtImpersonateClientOfPort
NtImpersonateThread
NtInitializeRegistry
NtInitiatePowerAction
NtIsSystemResumeAutomatic
NtListenChannel
NtListenPort
NtLoadDriver
NtLoadKey
NtLoadKey2
NtLockFile
NtLockVirtualMemory
NtMakeTemporaryObject
NtMapUserPhysicalPages
NtMapUserPhysicalPagesScatter
NtMapViewOfSection
NtNotifyChangeDirectoryFile
NtNotifyChangeKey
NtNotifyChangeMultipleKeys
NtOpenChannel
NtOpenDirectoryObject
NtOpenEvent
NtOpenEventPair
NtOpenFile
NtOpenIoCompletion
NtOpenJobObject
NtOpenKey
NtOpenMutant
NtOpenObjectAuditAlarm
NtOpenProcess
NtOpenProcessToken
NtOpenSection
NtOpenSemaphore
NtOpenSymbolicLinkObject
NtOpenThread
NtOpenThreadToken
NtOpenTimer
NtPlugPlayControl
NtPowerInformation
NtPrivilegeCheck
NtPrivilegeObjectAuditAlarm
NtPrivilegedServiceAuditAlarm
NtProtectVirtualMemory
NtPulseEvent
NtQueryAttributesFile
NtQueryDefaultLocale
NtQueryDefaultUILanguage
NtQueryDirectoryFile
NtQueryDirectoryObject
NtQueryEaFile
NtQueryEvent
NtQueryFullAttributesFile
NtQueryInformationAtom
NtQueryInformationFile
NtQueryInformationJobObject
NtQueryInformationPort
NtQueryInformationProcess
NtQueryInformationThread
NtQueryInformationToken
NtQueryInstallUILanguage
NtQueryIntervalProfile
NtQueryIoCompletion
NtQueryKey
NtQueryMultipleValueKey
NtQueryMutant
NtQueryObject
NtQueryOpenSubKeys
NtQueryPerformanceCounter
NtQueryQuotaInformationFile
NtQuerySection
NtQuerySecurityObject
NtQuerySemaphore
NtQuerySymbolicLinkObject
NtQuerySystemEnvironmentValue
NtQuerySystemInformation
NtQuerySystemTime
NtQueryTimer
NtQueryTimerResolution
NtQueryValueKey
NtQueryVirtualMemory
NtQueryVolumeInformationFile
NtQueueApcThread
NtRaiseException
NtRaiseHardError
NtReadFile
NtReadFileScatter
NtReadRequestData
NtReadVirtualMemory
NtRegisterThreadTerminatePort
NtReleaseMutant
NtReleaseSemaphore
NtRemoveIoCompletion
NtReplaceKey
NtReplyPort
NtReplyWaitReceivePort
NtReplyWaitReceivePortEx
NtReplyWaitReplyPort
NtReplyWaitSendChannel
NtRequestDeviceWakeup
NtRequestPort
NtRequestWaitReplyPort
NtRequestWakeupLatency
NtResetEvent
NtResetWriteWatch
NtRestoreKey
NtResumeThread
NtSaveKey
NtSaveMergedKeys
NtSecureConnectPort
NtSendWaitReplyChannel
NtSetContextChannel
NtSetContextThread
NtSetDefaultHardErrorPort
NtSetDefaultLocale
NtSetDefaultUILanguage
NtSetEaFile
NtSetEvent
NtSetHighEventPair
NtSetHighWaitLowEventPair
NtSetInformationFile
NtSetInformationJobObject
NtSetInformationKey
NtSetInformationObject
NtSetInformationProcess
NtSetInformationThread
NtSetInformationToken
NtSetIntervalProfile
NtSetIoCompletion
NtSetLdtEntries
NtSetLowEventPair
NtSetLowWaitHighEventPair
NtSetQuotaInformationFile
NtSetSecurityObject
NtSetSystemEnvironmentValue
NtSetSystemInformation
NtSetSystemPowerState
NtSetSystemTime
NtSetThreadExecutionState
NtSetTimer
NtSetTimerResolution
NtSetUuidSeed
NtSetValueKey
NtSetVolumeInformationFile
NtShutdownSystem
NtSignalAndWaitForSingleObject
NtStartProfile
NtStopProfile
NtSuspendThread
NtSystemDebugControl
NtTerminateJobObject
NtTerminateProcess
NtTerminateThread
NtTestAlert
NtUnloadDriver
NtUnloadKey
NtUnlockFile
NtUnlockVirtualMemory
NtUnmapViewOfSection
NtVdmControl
NtWaitForMultipleObjects
NtWaitForSingleObject
NtWaitHighEventPair
NtWaitLowEventPair
NtWriteFile
NtWriteFileGather
NtWriteRequestData
NtWriteVirtualMemory
NtYieldExecution
PfxFindPrefix
PfxInitialize
PfxInsertPrefix
PfxRemovePrefix
PropertyLengthAsVariant
RestoreEm87Context
RtlAbortRXact
RtlAbsoluteToSelfRelativeSD
RtlAcquirePebLock
RtlAcquireResourceExclusive
RtlAcquireResourceShared
RtlAddAccessAllowedAce
RtlAddAccessAllowedAceEx
RtlAddAccessAllowedObjectAce
RtlAddAccessDeniedAce
RtlAddAccessDeniedAceEx
RtlAddAccessDeniedObjectAce
RtlAddAce
RtlAddActionToRXact
RtlAddAtomToAtomTable
RtlAddAttributeActionToRXact
RtlAddAuditAccessAce
RtlAddAuditAccessAceEx
RtlAddAuditAccessObjectAce
RtlAddCompoundAce
RtlAddRange
RtlAdjustPrivilege
RtlAllocateAndInitializeSid
RtlAllocateHandle
RtlAllocateHeap
RtlAnsiCharToUnicodeChar
RtlAnsiStringToUnicodeSize
RtlAnsiStringToUnicodeString
RtlAppendAsciizToString
RtlAppendStringToString
RtlAppendUnicodeStringToString
RtlAppendUnicodeToString
RtlApplyRXact
RtlApplyRXactNoFlush
RtlAreAllAccessesGranted
RtlAreAnyAccessesGranted
RtlAreBitsClear
RtlAreBitsSet
RtlAssert
RtlCallbackLpcClient
RtlCancelTimer
RtlCaptureStackBackTrace
RtlCharToInteger
RtlCheckForOrphanedCriticalSections
RtlCheckRegistryKey
RtlClearAllBits
RtlClearBits
RtlCompactHeap
RtlCompareMemory
RtlCompareMemoryUlong
RtlCompareString
RtlCompareUnicodeString
RtlCompressBuffer
RtlConsoleMultiByteToUnicodeN
RtlConvertExclusiveToShared
RtlConvertLongToLargeInteger
RtlConvertPropertyToVariant
RtlConvertSharedToExclusive
RtlConvertSidToUnicodeString
RtlConvertToAutoInheritSecurityObject
RtlConvertUiListToApiList
RtlConvertUlongToLargeInteger
RtlConvertVariantToProperty
RtlCopyLuid
RtlCopyLuidAndAttributesArray
RtlCopyRangeList
RtlCopySecurityDescriptor
RtlCopySid
RtlCopySidAndAttributesArray
RtlCopyString
RtlCopyUnicodeString
RtlCreateAcl
RtlCreateAndSetSD
RtlCreateAtomTable
RtlCreateEnvironment
RtlCreateHeap
RtlCreateLpcServer
RtlCreateProcessParameters
RtlCreateQueryDebugBuffer
RtlCreateRegistryKey
RtlCreateSecurityDescriptor
RtlCreateTagHeap
RtlCreateTimer
RtlCreateTimerQueue
RtlCreateUnicodeString
RtlCreateUnicodeStringFromAsciiz
RtlCreateUserProcess
RtlCreateUserSecurityObject
RtlCreateUserThread
RtlCustomCPToUnicodeN
RtlCutoverTimeToSystemTime
RtlDeNormalizeProcessParams
RtlDebugPrintTimes
RtlDecompressBuffer
RtlDecompressFragment
RtlDefaultNpAcl
RtlDelete
RtlDeleteAce
RtlDeleteAtomFromAtomTable
RtlDeleteCriticalSection
RtlDeleteElementGenericTable
RtlDeleteNoSplay
RtlDeleteOwnersRanges
RtlDeleteRange
RtlDeleteRegistryValue
RtlDeleteResource
RtlDeleteSecurityObject
RtlDeleteTimer
RtlDeleteTimerQueue
RtlDeleteTimerQueueEx
RtlDeregisterWait
RtlDeregisterWaitEx
RtlDestroyAtomTable
RtlDestroyEnvironment
RtlDestroyHandleTable
RtlDestroyHeap
RtlDestroyProcessParameters
RtlDestroyQueryDebugBuffer
RtlDetermineDosPathNameType_U
RtlDnsHostNameToComputerName
RtlDoesFileExists_U
RtlDosPathNameToNtPathName_U
RtlDosSearchPath_U
RtlDowncaseUnicodeString
RtlDumpResource
RtlEmptyAtomTable
RtlEnableEarlyCriticalSectionEventCreation
RtlEnlargedIntegerMultiply
RtlEnlargedUnsignedDivide
RtlEnlargedUnsignedMultiply
RtlEnterCriticalSection
RtlEnumProcessHeaps
RtlEnumerateGenericTable
RtlEnumerateGenericTableWithoutSplaying
RtlEqualComputerName
RtlEqualDomainName
RtlEqualLuid
RtlEqualPrefixSid
RtlEqualSid
RtlEqualString
RtlEqualUnicodeString
RtlEraseUnicodeString
RtlExpandEnvironmentStrings_U
RtlExtendHeap
RtlExtendedIntegerMultiply
RtlExtendedLargeIntegerDivide
RtlExtendedMagicDivide
RtlFillMemory
RtlFillMemoryUlong
RtlFindClearBits
RtlFindClearBitsAndSet
RtlFindLastBackwardRunClear
RtlFindLeastSignificantBit
RtlFindLongestRunClear
RtlFindMessage
RtlFindMostSignificantBit
RtlFindNextForwardRunClear
RtlFindRange
RtlFindSetBits
RtlFindSetBitsAndClear
RtlFirstFreeAce
RtlFormatCurrentUserKeyPath
RtlFormatMessage
RtlFreeAnsiString
RtlFreeHandle
RtlFreeHeap
RtlFreeOemString
RtlFreeRangeList
RtlFreeSid
RtlFreeUnicodeString
RtlFreeUserThreadStack
RtlGUIDFromString
RtlGenerate8dot3Name
RtlGetAce
RtlGetCallersAddress
RtlGetCompressionWorkSpaceSize
RtlGetControlSecurityDescriptor
RtlGetCurrentDirectory_U
RtlGetDaclSecurityDescriptor
RtlGetElementGenericTable
RtlGetFirstRange
RtlGetFullPathName_U
RtlGetGroupSecurityDescriptor
RtlGetLongestNtPathLength
RtlGetNextRange
RtlGetNtGlobalFlags
RtlGetNtProductType
RtlGetOwnerSecurityDescriptor
RtlGetProcessHeaps
RtlGetSaclSecurityDescriptor
RtlGetSecurityDescriptorRMControl
RtlGetUserInfoHeap
RtlGetVersion
RtlIdentifierAuthoritySid

Sections

.text
Size: 274KB - Virtual size: 274KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

ECODE
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGE
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 155KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/SYSTEM32/SMSS.EXE
.sys windows:5 windows x86 arch:x86

c2e20b524370d74b18394371d2ce323f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP

Imports

ntdll

NtOpenKey
RtlSetDaclSecurityDescriptor
RtlCreateSecurityDescriptor
RtlAddAccessAllowedAce
RtlCreateAcl
RtlFreeSid
RtlAllocateAndInitializeSid
NtClose
NtSetSecurityObject
NtOpenFile
RtlInitUnicodeString
LdrUnloadDll
LdrGetProcedureAddress
LdrLoadDll
NtQueryInformationProcess
NtResumeThread
NtWaitForSingleObject
NtTerminateProcess
RtlDestroyProcessParameters
RtlCreateUserProcess
RtlCreateProcessParameters
NtDeleteKey
RtlSetOwnerSecurityDescriptor
NtQueryDirectoryObject
NtFlushVirtualMemory
NtShutdownSystem
NtFsControlFile
NtCreatePagingFile
RtlGetFullPathName_U
wcslen
NtSetEvent
NtDeviceIoControlFile
RtlPcToFileHeader
RtlCreateUserThread
NtCreateFile
NtCreateEvent
NtQuerySystemInformation
NtInitializeRegistry
RtlAdjustPrivilege
DbgBreakPoint
RtlAllocateHeap
RtlUnicodeStringToAnsiString
RtlNormalizeProcessParams

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 142KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 714B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/SYSTRAY.EX_
.cab
I386/SYS_SRV.CH_
.cab
I386/SYS_SRV.HL_
.cab
I386/T2EMBED.DL_
.cab
I386/TABLE.BM_
.cab
I386/TADA.WA_
.cab
I386/TAHOMA.TT_
.cab
I386/TAHOMABD.TT_
.cab
I386/TAPE.IN_
.cab
I386/TAPE.SY_
.cab
I386/TAPI.CH_
.cab
I386/TAPI.DL_
.cab
I386/TAPI.HL_
.cab
I386/TAPI3.DL_
.cab
I386/TAPI32.DL_
.cab
I386/TAPIPERF.DL_
.cab
I386/TAPISRV.DL_
.cab
I386/TAPIUI.DL_
.cab
I386/TASKMAN.EX_
.cab
I386/TASKMGR.CH_
.cab
I386/TASKMGR.EX_
.cab
I386/TASKMGR.HL_
.cab
I386/TCARC.SY_
.cab
I386/TCMSETUP.EX_
.cab
I386/TCPIP.CH_
.cab
I386/TCPIP.SY_
.cab
I386/TCPMIB.DL_
.cab
I386/TCPMON.DL_
.cab
I386/TCPMON.HL_
.cab
I386/TCPMON.IN_
.cab
I386/TCPMONUI.DL_
.cab
I386/TCPSVCS.EX_
.cab
I386/TDC.OC_
.cab
I386/TDI.SY_
.cab
I386/TECH.GI_
.cab
I386/TECH.HT_
.cab
I386/TELEPHON.CP_
.cab
I386/TELNET.EXE
.exe windows:5 windows x86 arch:x86

7d538ce82bea95b81acf5a435958c98d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

wsprintfW
wsprintfA
PostMessageW
VkKeyScanW
GetWindowLongW
GetAsyncKeyState
MessageBeep
DefWindowProcW
PostQuitMessage
KillTimer
SetWindowLongW
DestroyWindow
LoadStringW
IsCharAlphaW
RegisterClassW
CreateWindowExW
GetMessageW
TranslateMessage
DispatchMessageW
MapVirtualKeyW
CharUpperW

wsock32

htons
socket
send
WSAStartup
ioctlsocket
WSAAsyncGetHostByName
getservbyname
recv
WSAGetLastError
bind
setsockopt
connect
closesocket
WSAAsyncSelect

security

AcquireCredentialsHandleW
QuerySecurityPackageInfoW
InitializeSecurityContextW

ole32

CoCreateInstanceEx
CoInitializeEx

advapi32

RegCloseKey
RegOpenKeyExW
RegSetValueExW
LookupAccountSidW
RegCreateKeyExW
RegQueryValueExW
OpenProcessToken
GetTokenInformation

kernel32

FreeLibrary
GetConsoleMode
WriteConsoleOutputAttribute
ReadConsoleOutputAttribute
LoadLibraryA
GetProcAddress
LCMapStringW
LCMapStringA
VirtualAlloc
GetStringTypeW
GetStringTypeA
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetModuleFileNameA
WriteFile
RtlUnwind
GetLocaleInfoW
FlushFileBuffers
SetStdHandle
GetLocaleInfoA
GetVersionExW
ScrollConsoleScreenBufferW
WriteConsoleOutputCharacterA
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
GetCPInfo
SetFilePointer
HeapDestroy
TlsGetValue
TlsAlloc
TlsSetValue
GetCurrentThreadId
DeleteCriticalSection
GetStartupInfoA
WaitForSingleObject
WriteConsoleInputA
ResetEvent
WriteConsoleW
SetConsoleTitleW
FillConsoleOutputAttribute
FillConsoleOutputCharacterW
SetEvent
SetConsoleCursorPosition
SetConsoleActiveScreenBuffer
SetConsoleWindowInfo
SetConsoleScreenBufferSize
GetConsoleScreenBufferInfo
ReadConsoleW
Sleep
WaitForMultipleObjects
CloseHandle
OpenProcess
GetCurrentProcessId
VirtualFree
GetFileType
WriteConsoleOutputW
FreeEnvironmentStringsW
GetEnvironmentStrings
SetHandleCount
FormatMessageW
LoadLibraryExW
SetConsoleMode
HeapCreate
SetLastError
WideCharToMultiByte
MultiByteToWideChar
GetConsoleCP
ReadConsoleInputA
ReadConsoleInputW
PulseEvent
ExitProcess
LocalFree
SetConsoleCtrlHandler
CreateThread
CreateEventW
GetStdHandle
CreateConsoleScreenBuffer
GetLastError
InterlockedIncrement
GetModuleHandleW
LocalAlloc
WriteConsoleInputW
GetThreadLocale
GetVersion
InterlockedDecrement
HeapAlloc
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameW
FreeEnvironmentStringsA

Sections

.text
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
I386/TELNET.HL_
.cab
I386/TELNET_W.CH_
.cab
I386/TERMCAP._
.cab
I386/TERMMGR.DL_
.cab
I386/TESTSND.WA_
.cab
I386/TEXT.HT_
.cab
I386/TE_PROT.P_
.cab
I386/TE_PROT.SY_
.cab
I386/TFFSPORT.SY_
.cab
I386/TFTP.EX_
.cab
I386/TFTPD.EX_
.cab
I386/TG18D50.IC_
.cab
I386/TG18D65.IC_
.cab
I386/TG18D93.IC_
.cab
I386/TG22D50.IC_
.cab
I386/TG22D65.IC_
.cab
I386/TG22D93.IC_
.cab
I386/TGIU.IN_
.cab
I386/THEMES.EX_
.cab
I386/THUMBVW.DL_
.cab
I386/TIFFLT.DL_
.cab
I386/TIMEDATE.CP_
.cab
I386/TIMER.DR_
.cab
I386/TIMES.TT_
.cab
I386/TIMESBD.TT_
.cab
I386/TIMESBI.TT_
.cab
I386/TIMESI.TT_
.cab
I386/TIP.HT_
.cab
I386/TIPS.GI_
.cab
I386/TLNTADMN.EX_
.cab
I386/TLNTSESS.EX_
.cab
I386/TLNTSVR.EX_
.cab
I386/TLNTSVRP.DL_
.cab
I386/TOOLHELP.DL_
.cab
I386/TOOLS.DL_
.cab
I386/TRACE.DL_
.cab
I386/TRACERT.EX_
.cab
I386/TRAFFIC.DL_
.cab
I386/TREBUC.TT_
.cab
I386/TREBUCBD.TT_
.cab
I386/TREBUCBI.TT_
.cab
I386/TREBUCIT.TT_
.cab
I386/TREE.CO_
.cab
I386/TRIALOC.DL_
.cab
I386/TRID3D.IN_
.cab
I386/TRIDENT.SY_
.cab
I386/TRIDKB.IN_
.cab
I386/TRIEDIT.DL_
.cab
I386/TRKWKS.DL_
.cab
I386/TROUBL_W.CH_
.cab
I386/TSBVCAP.IN_
.cab
I386/TSD32.DL_
.cab
I386/TSHOOT.CH_
.cab
I386/TSHOOT.HL_
.cab
I386/TSHOOT.IN_
.cab
I386/TSHOOT.OC_
.cab
I386/TSHOOT_W.CH_
.cab
I386/TSLABELS.H_
.cab
I386/TSLABELS.IN_
.cab
I386/TSSOFT32.AC_
.cab
I386/TUNES.BM_
.cab
I386/TWAIN.DL_
.cab
I386/TWAIN_32.DL_
.cab
I386/TWUNK_16.EX_
.cab
I386/TWUNK_32.EX_
.cab
I386/TXFAUX.DL_
.cab
I386/TXFLOG.DL_
.cab
I386/TXTSETUP.SIF
I386/TYPELIB.DL_
.cab
I386/UDFS.SY_
.cab
I386/UFAT.DL_
.cab
I386/UGENUSD.DL_
.cab
I386/UHCD.SY_
.cab
I386/ULIB.DL_
.cab
I386/ULTRA66.SY_
.cab
I386/UMANDLG.DL_
.cab
I386/UMAX.IN_
.cab
I386/UMDMXFRM.DL_
.cab
I386/UMPNPMGR.DL_
.cab
I386/UNATTEND.TXT
I386/UNICODE.NL_
.cab
I386/UNIMDM.TS_
.cab
I386/UNIMDMAT.DL_
.cab
I386/UNIPLAT.DL_
.cab
I386/UNIPROC/KERNEL32.DL_
.cab
I386/UNIPROC/MP2UP.CAT
I386/UNIPROC/MP2UP.INF
I386/UNIPROC/NTDLL.DLL
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

CsrAllocateCaptureBuffer
CsrAllocateMessagePointer
CsrCaptureMessageBuffer
CsrCaptureMessageString
CsrCaptureTimeout
CsrClientCallServer
CsrClientConnectToServer
CsrFreeCaptureBuffer
CsrIdentifyAlertableThread
CsrNewThread
CsrProbeForRead
CsrProbeForWrite
CsrSetPriorityClass
DbgBreakPoint
DbgPrint
DbgPrintReturnControlC
DbgPrompt
DbgSsHandleKmApiMsg
DbgSsInitialize
DbgUiConnectToDbg
DbgUiContinue
DbgUiWaitStateChange
DbgUserBreakPoint
KiRaiseUserExceptionDispatcher
KiUserApcDispatcher
KiUserCallbackDispatcher
KiUserExceptionDispatcher
LdrAccessResource
LdrAlternateResourcesEnabled
LdrDisableThreadCalloutsForDll
LdrEnumResources
LdrFindEntryForAddress
LdrFindResourceDirectory_U
LdrFindResource_U
LdrFlushAlternateResourceModules
LdrGetDllHandle
LdrGetProcedureAddress
LdrInitializeThunk
LdrLoadAlternateResourceModule
LdrLoadDll
LdrProcessRelocationBlock
LdrQueryImageFileExecutionOptions
LdrQueryProcessModuleInformation
LdrShutdownProcess
LdrShutdownThread
LdrUnloadAlternateResourceModule
LdrUnloadDll
LdrVerifyImageMatchesChecksum
NPXEMULATORTABLE
NlsAnsiCodePage
NlsMbCodePageTag
NlsMbOemCodePageTag
NtAcceptConnectPort
NtAccessCheck
NtAccessCheckAndAuditAlarm
NtAccessCheckByType
NtAccessCheckByTypeAndAuditAlarm
NtAccessCheckByTypeResultList
NtAccessCheckByTypeResultListAndAuditAlarm
NtAccessCheckByTypeResultListAndAuditAlarmByHandle
NtAddAtom
NtAdjustGroupsToken
NtAdjustPrivilegesToken
NtAlertResumeThread
NtAlertThread
NtAllocateLocallyUniqueId
NtAllocateUserPhysicalPages
NtAllocateUuids
NtAllocateVirtualMemory
NtAreMappedFilesTheSame
NtAssignProcessToJobObject
NtCallbackReturn
NtCancelDeviceWakeupRequest
NtCancelIoFile
NtCancelTimer
NtClearEvent
NtClose
NtCloseObjectAuditAlarm
NtCompleteConnectPort
NtConnectPort
NtContinue
NtCreateChannel
NtCreateDirectoryObject
NtCreateEvent
NtCreateEventPair
NtCreateFile
NtCreateIoCompletion
NtCreateJobObject
NtCreateKey
NtCreateMailslotFile
NtCreateMutant
NtCreateNamedPipeFile
NtCreatePagingFile
NtCreatePort
NtCreateProcess
NtCreateProfile
NtCreateSection
NtCreateSemaphore
NtCreateSymbolicLinkObject
NtCreateThread
NtCreateTimer
NtCreateToken
NtCreateWaitablePort
NtCurrentTeb
NtDelayExecution
NtDeleteAtom
NtDeleteFile
NtDeleteKey
NtDeleteObjectAuditAlarm
NtDeleteValueKey
NtDeviceIoControlFile
NtDisplayString
NtDuplicateObject
NtDuplicateToken
NtEnumerateKey
NtEnumerateValueKey
NtExtendSection
NtFilterToken
NtFindAtom
NtFlushBuffersFile
NtFlushInstructionCache
NtFlushKey
NtFlushVirtualMemory
NtFlushWriteBuffer
NtFreeUserPhysicalPages
NtFreeVirtualMemory
NtFsControlFile
NtGetContextThread
NtGetDevicePowerState
NtGetPlugPlayEvent
NtGetTickCount
NtGetWriteWatch
NtImpersonateAnonymousToken
NtImpersonateClientOfPort
NtImpersonateThread
NtInitializeRegistry
NtInitiatePowerAction
NtIsSystemResumeAutomatic
NtListenChannel
NtListenPort
NtLoadDriver
NtLoadKey
NtLoadKey2
NtLockFile
NtLockVirtualMemory
NtMakeTemporaryObject
NtMapUserPhysicalPages
NtMapUserPhysicalPagesScatter
NtMapViewOfSection
NtNotifyChangeDirectoryFile
NtNotifyChangeKey
NtNotifyChangeMultipleKeys
NtOpenChannel
NtOpenDirectoryObject
NtOpenEvent
NtOpenEventPair
NtOpenFile
NtOpenIoCompletion
NtOpenJobObject
NtOpenKey
NtOpenMutant
NtOpenObjectAuditAlarm
NtOpenProcess
NtOpenProcessToken
NtOpenSection
NtOpenSemaphore
NtOpenSymbolicLinkObject
NtOpenThread
NtOpenThreadToken
NtOpenTimer
NtPlugPlayControl
NtPowerInformation
NtPrivilegeCheck
NtPrivilegeObjectAuditAlarm
NtPrivilegedServiceAuditAlarm
NtProtectVirtualMemory
NtPulseEvent
NtQueryAttributesFile
NtQueryDefaultLocale
NtQueryDefaultUILanguage
NtQueryDirectoryFile
NtQueryDirectoryObject
NtQueryEaFile
NtQueryEvent
NtQueryFullAttributesFile
NtQueryInformationAtom
NtQueryInformationFile
NtQueryInformationJobObject
NtQueryInformationPort
NtQueryInformationProcess
NtQueryInformationThread
NtQueryInformationToken
NtQueryInstallUILanguage
NtQueryIntervalProfile
NtQueryIoCompletion
NtQueryKey
NtQueryMultipleValueKey
NtQueryMutant
NtQueryObject
NtQueryOpenSubKeys
NtQueryPerformanceCounter
NtQueryQuotaInformationFile
NtQuerySection
NtQuerySecurityObject
NtQuerySemaphore
NtQuerySymbolicLinkObject
NtQuerySystemEnvironmentValue
NtQuerySystemInformation
NtQuerySystemTime
NtQueryTimer
NtQueryTimerResolution
NtQueryValueKey
NtQueryVirtualMemory
NtQueryVolumeInformationFile
NtQueueApcThread
NtRaiseException
NtRaiseHardError
NtReadFile
NtReadFileScatter
NtReadRequestData
NtReadVirtualMemory
NtRegisterThreadTerminatePort
NtReleaseMutant
NtReleaseSemaphore
NtRemoveIoCompletion
NtReplaceKey
NtReplyPort
NtReplyWaitReceivePort
NtReplyWaitReceivePortEx
NtReplyWaitReplyPort
NtReplyWaitSendChannel
NtRequestDeviceWakeup
NtRequestPort
NtRequestWaitReplyPort
NtRequestWakeupLatency
NtResetEvent
NtResetWriteWatch
NtRestoreKey
NtResumeThread
NtSaveKey
NtSaveMergedKeys
NtSecureConnectPort
NtSendWaitReplyChannel
NtSetContextChannel
NtSetContextThread
NtSetDefaultHardErrorPort
NtSetDefaultLocale
NtSetDefaultUILanguage
NtSetEaFile
NtSetEvent
NtSetHighEventPair
NtSetHighWaitLowEventPair
NtSetInformationFile
NtSetInformationJobObject
NtSetInformationKey
NtSetInformationObject
NtSetInformationProcess
NtSetInformationThread
NtSetInformationToken
NtSetIntervalProfile
NtSetIoCompletion
NtSetLdtEntries
NtSetLowEventPair
NtSetLowWaitHighEventPair
NtSetQuotaInformationFile
NtSetSecurityObject
NtSetSystemEnvironmentValue
NtSetSystemInformation
NtSetSystemPowerState
NtSetSystemTime
NtSetThreadExecutionState
NtSetTimer
NtSetTimerResolution
NtSetUuidSeed
NtSetValueKey
NtSetVolumeInformationFile
NtShutdownSystem
NtSignalAndWaitForSingleObject
NtStartProfile
NtStopProfile
NtSuspendThread
NtSystemDebugControl
NtTerminateJobObject
NtTerminateProcess
NtTerminateThread
NtTestAlert
NtUnloadDriver
NtUnloadKey
NtUnlockFile
NtUnlockVirtualMemory
NtUnmapViewOfSection
NtVdmControl
NtWaitForMultipleObjects
NtWaitForSingleObject
NtWaitHighEventPair
NtWaitLowEventPair
NtWriteFile
NtWriteFileGather
NtWriteRequestData
NtWriteVirtualMemory
NtYieldExecution
PfxFindPrefix
PfxInitialize
PfxInsertPrefix
PfxRemovePrefix
PropertyLengthAsVariant
RestoreEm87Context
RtlAbortRXact
RtlAbsoluteToSelfRelativeSD
RtlAcquirePebLock
RtlAcquireResourceExclusive
RtlAcquireResourceShared
RtlAddAccessAllowedAce
RtlAddAccessAllowedAceEx
RtlAddAccessAllowedObjectAce
RtlAddAccessDeniedAce
RtlAddAccessDeniedAceEx
RtlAddAccessDeniedObjectAce
RtlAddAce
RtlAddActionToRXact
RtlAddAtomToAtomTable
RtlAddAttributeActionToRXact
RtlAddAuditAccessAce
RtlAddAuditAccessAceEx
RtlAddAuditAccessObjectAce
RtlAddCompoundAce
RtlAddRange
RtlAdjustPrivilege
RtlAllocateAndInitializeSid
RtlAllocateHandle
RtlAllocateHeap
RtlAnsiCharToUnicodeChar
RtlAnsiStringToUnicodeSize
RtlAnsiStringToUnicodeString
RtlAppendAsciizToString
RtlAppendStringToString
RtlAppendUnicodeStringToString
RtlAppendUnicodeToString
RtlApplyRXact
RtlApplyRXactNoFlush
RtlAreAllAccessesGranted
RtlAreAnyAccessesGranted
RtlAreBitsClear
RtlAreBitsSet
RtlAssert
RtlCallbackLpcClient
RtlCancelTimer
RtlCaptureStackBackTrace
RtlCharToInteger
RtlCheckForOrphanedCriticalSections
RtlCheckRegistryKey
RtlClearAllBits
RtlClearBits
RtlCompactHeap
RtlCompareMemory
RtlCompareMemoryUlong
RtlCompareString
RtlCompareUnicodeString
RtlCompressBuffer
RtlConsoleMultiByteToUnicodeN
RtlConvertExclusiveToShared
RtlConvertLongToLargeInteger
RtlConvertPropertyToVariant
RtlConvertSharedToExclusive
RtlConvertSidToUnicodeString
RtlConvertToAutoInheritSecurityObject
RtlConvertUiListToApiList
RtlConvertUlongToLargeInteger
RtlConvertVariantToProperty
RtlCopyLuid
RtlCopyLuidAndAttributesArray
RtlCopyRangeList
RtlCopySecurityDescriptor
RtlCopySid
RtlCopySidAndAttributesArray
RtlCopyString
RtlCopyUnicodeString
RtlCreateAcl
RtlCreateAndSetSD
RtlCreateAtomTable
RtlCreateEnvironment
RtlCreateHeap
RtlCreateLpcServer
RtlCreateProcessParameters
RtlCreateQueryDebugBuffer
RtlCreateRegistryKey
RtlCreateSecurityDescriptor
RtlCreateTagHeap
RtlCreateTimer
RtlCreateTimerQueue
RtlCreateUnicodeString
RtlCreateUnicodeStringFromAsciiz
RtlCreateUserProcess
RtlCreateUserSecurityObject
RtlCreateUserThread
RtlCustomCPToUnicodeN
RtlCutoverTimeToSystemTime
RtlDeNormalizeProcessParams
RtlDebugPrintTimes
RtlDecompressBuffer
RtlDecompressFragment
RtlDefaultNpAcl
RtlDelete
RtlDeleteAce
RtlDeleteAtomFromAtomTable
RtlDeleteCriticalSection
RtlDeleteElementGenericTable
RtlDeleteNoSplay
RtlDeleteOwnersRanges
RtlDeleteRange
RtlDeleteRegistryValue
RtlDeleteResource
RtlDeleteSecurityObject
RtlDeleteTimer
RtlDeleteTimerQueue
RtlDeleteTimerQueueEx
RtlDeregisterWait
RtlDeregisterWaitEx
RtlDestroyAtomTable
RtlDestroyEnvironment
RtlDestroyHandleTable
RtlDestroyHeap
RtlDestroyProcessParameters
RtlDestroyQueryDebugBuffer
RtlDetermineDosPathNameType_U
RtlDnsHostNameToComputerName
RtlDoesFileExists_U
RtlDosPathNameToNtPathName_U
RtlDosSearchPath_U
RtlDowncaseUnicodeString
RtlDumpResource
RtlEmptyAtomTable
RtlEnableEarlyCriticalSectionEventCreation
RtlEnlargedIntegerMultiply
RtlEnlargedUnsignedDivide
RtlEnlargedUnsignedMultiply
RtlEnterCriticalSection
RtlEnumProcessHeaps
RtlEnumerateGenericTable
RtlEnumerateGenericTableWithoutSplaying
RtlEqualComputerName
RtlEqualDomainName
RtlEqualLuid
RtlEqualPrefixSid
RtlEqualSid
RtlEqualString
RtlEqualUnicodeString
RtlEraseUnicodeString
RtlExpandEnvironmentStrings_U
RtlExtendHeap
RtlExtendedIntegerMultiply
RtlExtendedLargeIntegerDivide
RtlExtendedMagicDivide
RtlFillMemory
RtlFillMemoryUlong
RtlFindClearBits
RtlFindClearBitsAndSet
RtlFindLastBackwardRunClear
RtlFindLeastSignificantBit
RtlFindLongestRunClear
RtlFindMessage
RtlFindMostSignificantBit
RtlFindNextForwardRunClear
RtlFindRange
RtlFindSetBits
RtlFindSetBitsAndClear
RtlFirstFreeAce
RtlFormatCurrentUserKeyPath
RtlFormatMessage
RtlFreeAnsiString
RtlFreeHandle
RtlFreeHeap
RtlFreeOemString
RtlFreeRangeList
RtlFreeSid
RtlFreeUnicodeString
RtlFreeUserThreadStack
RtlGUIDFromString
RtlGenerate8dot3Name
RtlGetAce
RtlGetCallersAddress
RtlGetCompressionWorkSpaceSize
RtlGetControlSecurityDescriptor
RtlGetCurrentDirectory_U
RtlGetDaclSecurityDescriptor
RtlGetElementGenericTable
RtlGetFirstRange
RtlGetFullPathName_U
RtlGetGroupSecurityDescriptor
RtlGetLongestNtPathLength
RtlGetNextRange
RtlGetNtGlobalFlags
RtlGetNtProductType
RtlGetOwnerSecurityDescriptor
RtlGetProcessHeaps
RtlGetSaclSecurityDescriptor
RtlGetSecurityDescriptorRMControl
RtlGetUserInfoHeap
RtlGetVersion
RtlIdentifierAuthoritySid

Sections

.text
Size: 274KB - Virtual size: 274KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

ECODE
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGE
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 155KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/UNIPROC/WIN32K.SY_
.cab
I386/UNIPROC/WINSRV.DL_
.cab
I386/UNKNOWN.IN_
.cab
I386/UNLODCTR.EX_
.cab
I386/UNREGMP2.EX_
.cab
I386/UNSECAPP.EX_
.cab
I386/UNTFS.DL_
.cab
I386/UPDATE.CN_
.cab
I386/UPDATE.SY_
.cab
I386/UPDTBLK.INF
I386/UPS.EX_
.cab
I386/UPWIZUN.CH_
.cab
I386/UPWIZUN.EX_
.cab
I386/UP_I.CU_
.cab
I386/UP_IL.CU_
.cab
I386/UP_IM.CU_
.cab
I386/UP_L.CU_
.cab
I386/UP_M.CU_
.cab
I386/UP_R.CU_
.cab
I386/UP_RL.CU_
.cab
I386/UP_RM.CU_
.cab
I386/UREG.DL_
.cab
I386/URGENT.CO_
.cab
I386/URL.DL_
.cab
I386/URLMON.DL_
.cab
I386/USB.IN_
.cab
I386/USBD.SY_
.cab
I386/USBEHCI.SY_
.cab
I386/USBHUB.SY_
.cab
I386/USBHUB20.SY_
.cab
I386/USBMON.DL_
.cab
I386/USBPORT.SY_
.cab
I386/USBPRINT.IN_
.cab
I386/USBSTOR.IN_
.cab
I386/USBSTOR.SY_
.cab
I386/USER.EX_
.cab
I386/USER32.DL_
.cab
I386/USERCPL.CH_
.cab
I386/USERENV.DL_
.cab
I386/USERINIT.EX_
.cab
I386/USERMIG.IN_
.cab
I386/USERS.HL_
.cab
I386/USETUP.EXE
.sys windows:5 windows x86 arch:x86

c2e20b524370d74b18394371d2ce323f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP

Imports

ntdll

NtOpenKey
RtlSetDaclSecurityDescriptor
RtlCreateSecurityDescriptor
RtlAddAccessAllowedAce
RtlCreateAcl
RtlFreeSid
RtlAllocateAndInitializeSid
NtClose
NtSetSecurityObject
NtOpenFile
RtlInitUnicodeString
LdrUnloadDll
LdrGetProcedureAddress
LdrLoadDll
NtQueryInformationProcess
NtResumeThread
NtWaitForSingleObject
NtTerminateProcess
RtlDestroyProcessParameters
RtlCreateUserProcess
RtlCreateProcessParameters
NtDeleteKey
RtlSetOwnerSecurityDescriptor
NtQueryDirectoryObject
NtFlushVirtualMemory
NtShutdownSystem
NtFsControlFile
NtCreatePagingFile
RtlGetFullPathName_U
wcslen
NtSetEvent
NtDeviceIoControlFile
RtlPcToFileHeader
RtlCreateUserThread
NtCreateFile
NtCreateEvent
NtQuerySystemInformation
NtInitializeRegistry
RtlAdjustPrivilege
DbgBreakPoint
RtlAllocateHeap
RtlUnicodeStringToAnsiString
RtlNormalizeProcessParams

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 142KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 714B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/USP10.DL_
.cab
I386/UTILDLL.DL_
.cab
I386/UTILMAN.EX_
.cab
I386/UTILMGR.CH_
.cab
I386/UTILMGR.HL_
.cab
I386/UTOPIAAS.WA_
.cab
I386/UTOPIACL.WA_
.cab
I386/UTOPIACR.WA_
.cab
I386/UTOPIADE.WA_
.cab
I386/UTOPIAER.WA_
.cab
I386/UTOPIAEX.WA_
.cab
I386/UTOPIAMA.WA_
.cab
I386/UTOPIAME.WA_
.cab
I386/UTOPIAMI.WA_
.cab
I386/UTOPIAOP.WA_
.cab
I386/UTOPIAQU.WA_
.cab
I386/UTOPIARE.WA_
.cab
I386/UTOPIAWI.WA_
.cab
I386/UTOPIA~1.WA_
.cab
I386/UTOPIA~2.WA_
.cab
I386/UTOPIA~3.WA_
.cab
I386/UTOPIA~4.WA_
.cab
I386/V7VGA.RO_
.cab
I386/VANISHER.AN_
.cab
I386/VBAJET32.DL_
.cab
I386/VBISURF.AX_
.cab
I386/VBSCRIPT.DL_
.cab
I386/VCAUTO.TL_
.cab
I386/VCDEX.DL_
.cab
I386/VCMD.EX_
.cab
I386/VCMSHL.DL_
.cab
I386/VDICT.DL_
.cab
I386/VDMDBG.DL_
.cab
I386/VDMREDIR.DL_
.cab
I386/VER.DL_
.cab
I386/VERDANA.TT_
.cab
I386/VERDANAB.TT_
.cab
I386/VERDANAI.TT_
.cab
I386/VERDANAZ.TT_
.cab
I386/VERIFIER.EX_
.cab
I386/VERISIGN.BM_
.cab
I386/VERSION.DL_
.cab
I386/VFPODBC.DL_
.cab
I386/VGA.DL_
.cab
I386/VGA.DR_
.cab
I386/VGA.SY_
.cab
I386/VGA256.DL_
.cab
I386/VGA64K.DL_
.cab
I386/VGA737.FO_
.cab
I386/VGA775.FO_
.cab
I386/VGA850.FO_
.cab
I386/VGA852.FO_
.cab
I386/VGA855.FO_
.cab
I386/VGA857.FO_
.cab
I386/VGA860.FO_
.cab
I386/VGA861.FO_
.cab
I386/VGA863.FO_
.cab
I386/VGA865.FO_
.cab
I386/VGA866.FO_
.cab
I386/VGA869.FO_
.cab
I386/VGAF1257.FO_
.cab
I386/VGAFIX.FO_
.cab
I386/VGAFIXE.FO_
.cab
I386/VGAFIXG.FO_
.cab
I386/VGAFIXR.FO_
.cab
I386/VGAFIXT.FO_
.cab
I386/VGAOEM.FO_
.cab
I386/VGAS1257.FO_
.cab
I386/VGASYS.FO_
.cab
I386/VGASYSE.FO_
.cab
I386/VGASYSG.FO_
.cab
I386/VGASYSR.FO_
.cab
I386/VGASYST.FO_
.cab
I386/VGX.DL_
.cab
I386/VIDEOPRT.SY_
.cab
I386/VIEWPROV.DL_
.cab
I386/VJOY.DL_
.cab
I386/VMMREG32.DL_
.cab
I386/VOLUME.IN_
.cab
I386/VOODOO3.IN_
.cab
I386/VSSETUP.CN_
.cab
I386/VTEXT.DL_
.cab
I386/VTXTAUTO.TL_
.cab
I386/VWIPXSPX.DL_
.cab
I386/VWIPXSPX.EX_
.cab
I386/W32TIME.DL_
.cab
I386/W32TM.EX_
.cab
I386/W32TOPL.DL_
.cab
I386/W3CTRS.DL_
.cab
I386/W3CTRS.IN_
.cab
I386/W3EXT.DL_
.cab
I386/W3SCFG.DL_
.cab
I386/W3SVAPI.DL_
.cab
I386/W3SVC.DL_
.cab
I386/W95UPGNT.DL_
.cab
I386/WAB.CH_
.cab
I386/WAB.EX_
.cab
I386/WAB.HL_
.cab
I386/WAB32.DL_
.cab
I386/WAB32RES.DL_
.cab
I386/WAB50.IN_
.cab
I386/WABFIND.DL_
.cab
I386/WABIMP.DL_
.cab
I386/WABMIG.EX_
.cab
I386/WAGTAIL.AN_
.cab
I386/WAIT_I.CU_
.cab
I386/WAIT_IL.CU_
.cab
I386/WAIT_IM.CU_
.cab
I386/WAIT_L.CU_
.cab
I386/WAIT_M.CU_
.cab
I386/WAIT_R.CU_
.cab
I386/WAIT_RL.CU_
.cab
I386/WAIT_RM.CU_
.cab
I386/WAM.DL_
.cab
I386/WAMPS.DL_
.cab
I386/WAMREG.DL_
.cab
I386/WAMREGPS.DL_
.cab
I386/WANARP.SY_
.cab
I386/WANGIMG.EX_
.cab
I386/WANMGFR.IN_
.cab
I386/WANMGS.IN_
.cab
I386/WAVE.IN_
.cab
I386/WAVEMIX.INF
I386/WAVEMSP.DL_
.cab
I386/WB32.EX_
.cab
I386/WBCACHE.DE_
.cab
I386/WBCACHE.EN_
.cab
I386/WBCACHE.ES_
.cab
I386/WBCACHE.FR_
.cab
I386/WBCACHE.IT_
.cab
I386/WBCACHE.NL_
.cab
I386/WBCACHE.SV_
.cab
I386/WBDBASE.DE_
.cab
I386/WBDBASE.EN_
.cab
I386/WBDBASE.ES_
.cab
I386/WBDBASE.FR_
.cab
I386/WBDBASE.IT_
.cab
I386/WBDBASE.NL_
.cab
I386/WBDBASE.SV_
.cab
I386/WBEMADS.DL_
.cab
I386/WBEMADS.TL_
.cab
I386/WBEMCNTL.DL_
.cab
I386/WBEMCOMN.DL_
.cab
I386/WBEMCORE.DL_
.cab
I386/WBEMDISP.DL_
.cab
I386/WBEMDISP.TL_
.cab
I386/WBEMESS.DL_
.cab
I386/WBEMNT5.IN_
.cab
I386/WBEMPERF.DL_
.cab
I386/WBEMPERF.MO_
.cab
I386/WBEMPERM.EX_
.cab
I386/WBEMPROX.DL_
.cab
I386/WBEMSNMP.EX_
.cab
I386/WBEMSVC.DL_
.cab
I386/WBEMTEST.EX_
.cab
I386/WBEMUPGD.DL_
.cab
I386/WBFIRDMA.IN_
.cab
I386/WDL.TR_
.cab
I386/WDMA10K1.IN_
.cab
I386/WDMAUDIO.IN_
.cab
I386/WDMA_ADI.IN_
.cab
I386/WDMA_AUR.IN_
.cab
I386/WDMA_AVA.IN_
.cab
I386/WDMA_AZT.IN_
.cab
I386/WDMA_CSC.IN_
.cab
I386/WDMA_CSF.IN_
.cab
I386/WDMA_CTL.IN_
.cab
I386/WDMA_ENS.IN_
.cab
I386/WDMA_ES2.IN_
.cab
I386/WDMA_ESS.IN_
.cab
I386/WDMA_INT.IN_
.cab
I386/WDMA_NE2.IN_
.cab
I386/WDMA_NEO.IN_
.cab
I386/WDMA_USB.IN_
.cab
I386/WDMA_WSS.IN_
.cab
I386/WDMA_YM2.IN_
.cab
I386/WDMA_YMH.IN_
.cab
I386/WDMJOY.IN_
.cab
I386/WEBCHECK.DL_
.cab
I386/WEBDINGS.TT_
.cab
I386/WEBFLDRS.MS_
.cab
I386/WEBFOLDR.CH_
.cab
I386/WEBHELP.CH_
.cab
I386/WEBHITS.DL_
.cab
I386/WEBVW.DL_
.cab
I386/WELCOME.EX_
.cab
I386/WELCOME.IN_
.cab
I386/WELCOME.OS_
.cab
I386/WEXTRACT.EX_
.cab
I386/WFOSPF.MI_
.cab
I386/WFWNET.DR_
.cab
I386/WHATSNEW.CH_
.cab
I386/WHERE_98.CH_
.cab
I386/WHERE_NW.CH_
.cab
I386/WHOWHERE.BM_
.cab
I386/WIFEMAN.DL_
.cab
I386/WIN.CAB
.cab
I386/WIN.CO_
.cab
I386/WIN.IN_
.cab
I386/WIN32SPL.DL_
.cab
I386/WIN87EM.DL_
.cab
I386/WIN9XMIG/ACROBAT/FILES/FILE1
.dll regsvr32 windows:4 windows x86 arch:x86

be621d3ac8bb2904e8fb884e62394c1c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

??3@YAXPAX@Z
free
memmove
malloc
__CxxFrameHandler
strncmp
sprintf
_ftol
??2@YAPAXI@Z
fopen
tmpfile
fclose
strchr
_purecall
_access
_unlink
atoi
_adjust_fdiv
_initterm
??1type_info@@UAE@XZ
_onexit
__dllonexit
_EH_prolog
time
ctime
__p___mb_cur_max
_isctype
__p__pctype
strstr
fgetc
strncpy
_mktemp
atof
strncat
_mbscmp
isdigit
_stricmp
realloc
fprintf
strrchr
wcstombs
fseek
fread
fwrite
wcsncpy
wcslen

urlmon

CreateURLMoniker
HlinkNavigateString
IsAsyncMoniker
CreateAsyncBindCtx

wininet

HttpSendRequestA
HttpQueryInfoA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetOpenA
InternetSetFilePointer
HttpOpenRequestA
InternetConnectA
InternetSetStatusCallback
InternetTimeFromSystemTime
InternetQueryDataAvailable

mfc42

ord2983
ord1979
ord1614
ord6370
ord4441
ord4356
ord1132
ord3002
ord1892
ord4252
ord6364
ord3326
ord6365
ord4472
ord5498
ord2982
ord3147
ord3259
ord4465
ord3136
ord3278
ord2985
ord3081
ord2976
ord3353
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3681
ord743
ord446
ord1212
ord1168
ord1226
ord4570
ord4672
ord4843
ord5011
ord5265
ord4376
ord4853
ord4998
ord4713
ord2514
ord6052
ord4078
ord1775
ord4407
ord5241
ord2385
ord5163
ord6371
ord4353
ord5286
ord3798
ord4837
ord4438
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord3279
ord4625
ord4425
ord746
ord800
ord860
ord540
ord449
ord2278
ord2370
ord2288
ord1877
ord4249
ord4006
ord2486
ord2687
ord599
ord1177
ord1243
ord1210
ord2439
ord1693
ord5618
ord994
ord4687
ord4639
ord5674
ord2156
ord4856
ord4920
ord6002
ord2137
ord1963
ord5213
ord2953
ord3868
ord5150
ord4705
ord4707
ord2876
ord2998
ord5649
ord4113
ord4661
ord4660
ord4768
ord4650
ord4903
ord4548
ord4521
ord4594
ord4988
ord4925
ord4930
ord4935
ord4659
ord4909
ord4908
ord4668
ord4667
ord4666
ord4689
ord5023
ord4654
ord4643
ord4354
ord4780
ord4649
ord4637
ord4636
ord5060
ord4584
ord4371
ord4361
ord861
ord4739
ord4741
ord4738
ord4409
ord4603
ord5008
ord4415
ord4992
ord2488
ord3404
ord4539
ord2954
ord6055
ord1776
ord2384
ord2724
ord537
ord3148
ord3260
ord4466
ord2986
ord3080
ord4081
ord4624
ord5825
ord5651
ord3130
ord3676
ord3946
ord350
ord1601
ord3663
ord3571
ord3626
ord2754
ord640
ord5785
ord1640
ord1641
ord1146
ord323
ord5199
ord2864
ord858
ord665
ord3346
ord3318
ord5186
ord354
ord2541
ord4949
ord3556
ord3230
ord4342
ord6030
ord4025
ord3126
ord3613
ord4502
ord5033
ord6197
ord4459
ord2379
ord703
ord403
ord268
ord2915
ord1567
ord815
ord5798
ord2859
ord3057
ord6354
ord5290
ord2414
ord1105
ord1131
ord3952
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord4534
ord2396
ord3269
ord5300
ord5302
ord4079
ord4698
ord5307
ord5289
ord5714
ord3262
ord3401
ord3670
ord2956
ord561
ord600
ord1216
ord1227
ord535
ord3530
ord3133
ord4648
ord1255
ord1578
ord3376
ord3669
ord723
ord423
ord1197
ord1570
ord269
ord826
ord6412
ord1116
ord1182
ord1575
ord1253
ord1577
ord1176
ord342

kernel32

GlobalFree
UnmapViewOfFile
OpenFileMappingA
MapViewOfFile
CloseHandle
WinExec
GlobalAlloc
lstrlenA
GetVersion
Sleep
LocalAlloc
LocalFree
lstrcmpA
FindResourceA
lstrcpyA
GetPrivateProfileStringA
MulDiv
InitializeCriticalSection
ResetEvent
SetEvent
GetWindowsDirectoryA
OpenFile
GetExitCodeThread
WaitForSingleObject
TerminateThread
CreateEventA
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameA
lstrcatA
GetTempPathA
GetTempFileNameA
MultiByteToWideChar
SetLastError
lstrcmpiA

user32

GetWindow
GetDC
CharUpperA
WindowFromDC
DialogBoxParamA
GetWindowLongA
SetWindowPos
GetWindowRect
GetDesktopWindow
SetWindowTextA
GetWindowTextA
GetDlgItem
GetAsyncKeyState
LoadIconA
SendMessageA
ReleaseDC
DestroyIcon
EndDialog
ShowWindow
LoadStringA
CharToOemA
DefWindowProcA
CreateWindowExA
RegisterClassA
PeekMessageA
LoadBitmapA
TranslateMessage
FindWindowA
UnregisterClassA
DestroyWindow
SetPropA
GetPropA
IsWindowVisible
PostMessageA
MessageBoxA
OemToCharA
EnableWindow
wsprintfA
DispatchMessageA

gdi32

Escape
CreateFontA
LPtoDP
DeleteObject
GetEnhMetaFileA
PlayEnhMetaFile
DeleteEnhMetaFile
GetSystemPaletteEntries
GetDeviceCaps
CreateCompatibleDC
GetObjectA
BitBlt

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCreateKeyA
RegCloseKey

ole32

CoCreateInstance
CoTaskMemAlloc

oleaut32

VariantInit
LoadRegTypeLi

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/ACROBAT/FILES/FILE10
.dll windows:4 windows x86 arch:x86

ac3dae0bbbb8ec777329a90d7fb06823

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LockResource
LoadResource
FindResourceA
LoadLibraryA
GetProcAddress
GlobalLock
GlobalAlloc
GlobalFree
GlobalUnlock
GlobalHandle
OpenFile
FreeResource
FindNextFileA
FindFirstFileA
FindClose
GetPrivateProfileStringA
GetDiskFreeSpaceA
FreeLibrary
_lclose
_llseek
_lread
GetProfileIntA
GetACP
GetCPInfo
LCMapStringW
_lwrite
GetLocalTime
RtlUnwind
GetLastError
GetCommandLineA
GetModuleHandleA
HeapAlloc
HeapFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
GetVersion
CloseHandle
WriteFile
GetTimeZoneInformation
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
HeapCreate
HeapDestroy
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
GetModuleFileNameA
LCMapStringA
GetStringTypeA
GetOEMCP
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
SetFilePointer
SetStdHandle
FlushFileBuffers
CreateFileA
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
HeapReAlloc
GetStringTypeW
SetEndOfFile
ReadFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
HeapSize
DeleteFileA

user32

GetKeyState
GetAsyncKeyState

advapi32

RegCreateKeyA
RegSetValueA
RegOpenKeyA
RegDeleteKeyA
RegQueryValueA
RegCloseKey

Exports

Exports

AdamClose
AdamConfigure
AdamInfo
AdamList
AdamOpen
AdamScan

Sections

.text
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/ACROBAT/FILES/FILE11
.exe windows:4 windows x86 arch:x86

e312aa5b326894f86f8511ebfa03dc06

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempPathA
GetTempFileNameA
SetCurrentDirectoryA
GetCurrentDirectoryA
GetModuleFileNameA
GetCurrentThread
GetProfileIntA
MultiByteToWideChar
GlobalLock
GlobalAlloc
GlobalFree
GlobalUnlock
GlobalHandle
WideCharToMultiByte
GetModuleHandleA
GetVersion
GetProfileStringA
GetStartupInfoA

user32

ShowWindow
EnableWindow
CharLowerA
PostMessageA
MessageBoxA
ReleaseDC
SetDlgItemTextA
GetWindowLongA
SetFocus
GetDlgItem
SendMessageA
EndDialog
GetParent
GetSystemMetrics
GetKeyState
GetAsyncKeyState
UpdateWindow
SetWindowTextA
CreateDialogParamA
DialogBoxParamA
SetWindowPos
PostQuitMessage
SetMessageQueue
GetMessageA
TranslateMessage
DispatchMessageA
LoadStringA
DestroyWindow
InvalidateRect
SetRect
InflateRect
FillRect
RegisterWindowMessageA
IsDlgButtonChecked
IsWindowEnabled
CheckDlgButton
GetDlgItemTextA
BringWindowToTop
SetForegroundWindow
SetActiveWindow
GetDC
GetWindowRect

gdi32

GetTextExtentPointA
GetStockObject

comdlg32

CommDlgExtendedError
GetOpenFileNameA

advapi32

RegCreateKeyA
RegCloseKey
RegSetValueA
RegOpenKeyA
RegDeleteKeyA
RegQueryValueA

ole32

CoRevokeClassObject
OleBuildVersion
CoCreateInstance
CoRegisterClassObject
OleInitialize
OleUninitialize
CLSIDFromProgID

oleaut32

VariantClear
SysAllocStringLen
VariantChangeType
CreateStdDispatch
SysAllocString
VariantInit
LoadRegTypeLi

adam32

AdamClose
AdamScan
AdamOpen
AdamInfo
AdamConfigure
AdamList

msvcrt40

srand
__p__commode
_adjust_fdiv
__setusermatherr
__getmainargs
_initterm
__p__acmdln
exit
_XcptFilter
_exit
atol
strncat
strtok
atoi
__CxxFrameHandler
strchr
memmove
time
__p__fmode
rand
fopen
_strdate
_strtime
strrchr
fwrite
_stricmp
fclose
??2@YAPAXI@Z
??3@YAXPAX@Z
sprintf
_ltoa
__set_app_type
_except_handler3
_controlfp

Exports

Exports

HookProc
NextDlgProc
ScanDlgProc
SelectDlgProc
StatusDlgProc

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/ACROBAT/FILES/FILE12
.dll windows:4 windows x86 arch:x86

f899e60cea84b0116726db1d9d78785c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FindNextFileA
FindFirstFileA
FindClose
LCMapStringW
LCMapStringA
GetCurrentDirectoryA
GetFullPathNameA
GetDriveTypeA
FileTimeToLocalFileTime
FileTimeToSystemTime
OpenFile
CompareStringW
CompareStringA
HeapSize
HeapReAlloc
ReadFile
SetEndOfFile
LoadLibraryA
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetFileTime
GetFileAttributesA
_lclose
FileTimeToDosDateTime
GetWindowsDirectoryA
SetEnvironmentVariableA
CreateFileA
SetStdHandle
SetErrorMode
FlushFileBuffers
GetVersion
HeapCreate
GetStringTypeW
GetStringTypeA
SetFilePointer
GetEnvironmentStringsW
FreeEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
FreeEnvironmentStringsA
GetProfileIntA
GetEnvironmentStrings
HeapFree
HeapAlloc
GetLocalTime
RtlUnwind
ExitProcess
GetLastError
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetFileType
SetHandleCount
HeapDestroy
CloseHandle
WriteFile
GetTimeZoneInformation
GetACP
GetOEMCP
GetStdHandle
GetStartupInfoA
GetModuleFileNameA
GetCPInfo

user32

DialogBoxParamA
GetParent
SetWindowPos
GetSystemMetrics
GetDC
ReleaseDC
OffsetRect
SetRect
GetWindowRect
ScreenToClient
MoveWindow
SendMessageA
SetDlgItemTextA
EnableWindow
GetDlgItem
SetFocus
GetWindowLongA
SetWindowLongA
LoadIconA
EndDialog
GetAsyncKeyState
MessageBoxA

gdi32

GetTextExtentPointA
DeleteObject

advapi32

RegQueryValueA
RegDeleteKeyA
RegOpenKeyA
RegCreateKeyA
RegSetValueA
RegCloseKey

pixlocn

ord27

pixdfltn

ord72
ord70
ord115
ord29
ord88
ord89
ord90
ord74
ord73
ord28
ord30

Exports

Exports

ConfigureDlgProc
ENTRYPOINT
ReleaseProcessor

Sections

.text
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 670B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/ACROBAT/FILES/FILE13
.dll windows:4 windows x86 arch:x86

4f5610ebc40f8cb70c87cc634b746ad9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
LoadLibraryA
SetErrorMode
GlobalUnlock
GetWindowsDirectoryA
GetProfileIntA
FreeLibrary
GlobalUnfix
GlobalFree
GlobalAlloc
lstrlenA
OpenFile
GlobalLock
HeapAlloc
ExitProcess
LCMapStringA
LCMapStringW
ReadFile
SetEndOfFile
FlushFileBuffers
SetStdHandle
CreateFileA
GetStringTypeA
SetFilePointer
GetStringTypeW
GetEnvironmentStringsW
FreeEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
FreeEnvironmentStringsA
GlobalFix
GetEnvironmentStrings
GetLocalTime
GetCommandLineA
GetModuleHandleA
GetVersion
HeapFree
GetLastError
CloseHandle
WriteFile
GetStdHandle
GetFileType
HeapCreate
HeapDestroy
SetHandleCount
GetACP
GetOEMCP
GetStartupInfoA
GetModuleFileNameA
GetCPInfo

user32

SetWindowPos
GetWindowRect
DefWindowProcA
GetSystemMetrics
GetParent
CallNextHookEx
SetActiveWindow
DispatchMessageA
GetMessageA
TranslateMessage
GetClassNameA
UnhookWindowsHookEx
LoadStringA
RegisterClassA
DestroyWindow
UnregisterClassA
SetForegroundWindow
CreateWindowExA
BringWindowToTop

advapi32

RegQueryValueA
RegCloseKey
RegSetValueA
RegCreateKeyA
RegOpenKeyA
RegDeleteKeyA

Exports

Exports

DummyWndProc
ENTRYPOINT
TwainMessageHook

Sections

.text
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 251B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/ACROBAT/FILES/FILE2
I386/WIN9XMIG/ACROBAT/FILES/FILE3
.dll windows:4 windows x86 arch:x86

3c16e408d1c8ad25cc9ce591a25da78b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

win32k.sys

FLOATOBJ_Mul
EngCreateSemaphore
EngReleaseSemaphore
EngGetPrinterDataFileName
EngAcquireSemaphore
EngLoadModule
EngGetDriverName
EngAssociateSurface
EngCreateDeviceSurface
EngDeleteSurface
EngDeletePalette
EngFreeMem
EngFreeModule
EngCreatePalette
EngWritePrinter
XLATEOBJ_iXlate
BRUSHOBJ_pvAllocRbrush
EngStretchBlt
EngEraseSurface
EngBitBlt
BRUSHOBJ_pvGetRbrush
FLOATOBJ_EqualLong
FLOATOBJ_SubFloat
FLOATOBJ_SetFloat
FLOATOBJ_LessThanLong
XFORMOBJ_iGetXform
FLOATOBJ_GetLong
FLOATOBJ_MulFloat
FLOATOBJ_GetFloat
FLOATOBJ_SetLong
FLOATOBJ_Div
FLOATOBJ_MulLong
FLOATOBJ_Sub
EngSetLastError
FLOATOBJ_DivFloat
FLOATOBJ_Add
FLOATOBJ_DivLong
FLOATOBJ_AddLong
STROBJ_bEnum
STROBJ_vEnumStart
EngDeletePath
PATHOBJ_vGetBounds
CLIPOBJ_ppoGetPath
FONTOBJ_cGetGlyphs
EngUnicodeToMultiByteN
EngAllocMem
STROBJ_dwGetCodePage
FONTOBJ_pifi
EngFindResource
EngComputeGlyphSet
XFORMOBJ_bApplyXform
EngMulDiv
FONTOBJ_pxoGetXform
PATHOBJ_bEnum
PATHOBJ_vEnumStart
FONTOBJ_cGetAllGlyphHandles
EngQueryLocalTime
EngGetType1FontList
EngUnmapFontFile
EngMapFontFile
EngGetPrinterData
EngMultiByteToUnicodeN
EngEnumForms
EngGetLastError
EngMapModule
RtlUnwind

Sections

.text
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/ACROBAT/FILES/FILE4
I386/WIN9XMIG/ACROBAT/FILES/FILE5
.dll windows:4 windows x86 arch:x86

071a7761dedf0256554e5d2fe0d98c4d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

ntdll

wcslen
_ltoa
_wcsnicmp
atol
_wcsicmp
wcscat
RtlUnicodeToMultiByteN
wcscpy
wcscmp
strncmp
_ftol
RtlMultiByteToUnicodeN

user32

GetDesktopWindow
DialogBoxParamW
GetDlgItem
wsprintfW
ShowWindow
EndDialog
SetDlgItemTextW
ReleaseDC
GetDC
LoadStringW

kernel32

InitializeCriticalSection
LoadLibraryW
DeleteCriticalSection
GetModuleFileNameW
lstrcpynW
WriteFile
SetLastError
HeapDestroy
CreateFileW
FreeLibrary
GetFileTime
EnterCriticalSection
GlobalFree
CreateFileMappingW
GetFileSize
LeaveCriticalSection
GetProcAddress
GetACP
lstrlenW
MapViewOfFile
GetLastError
HeapAlloc
HeapCreate
UnmapViewOfFile
GlobalAlloc
CloseHandle
LoadLibraryA
GetLocaleInfoW
CompareFileTime

winspool.drv

SetPrinterDataW
DeleteFormW
GetPrinterDataW
EnumFormsW
GetPrinterDriverW
GetPrinterW
AddFormW
ClosePrinter
GetPrinterDriverDirectoryW
GetFormW
OpenPrinterW

gdi32

EnumFontFamiliesW

Exports

Exports

DevQueryPrintEx
DllInitialize
DrvAdvancedDocumentProperties
DrvConvertDevMode
DrvDeviceCapabilities
DrvDevicePropertySheets
DrvDocumentProperties
DrvDocumentPropertySheets
DrvPrinterEvent
DrvUpgradePrinter
PrinterProperties

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 387B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 123KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/ACROBAT/FILES/FILE6
.exe windows:4 windows x86 arch:x86

069e8b6b30b23f4d995dbfd8efffd946

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeResource
CloseHandle
WaitForSingleObject
Sleep
CreateThread
WideCharToMultiByte
FreeLibrary
LockResource
LoadResource
FindResourceExA
GetModuleHandleA
LoadLibraryA
GetSystemDirectoryA
lstrlenA
GetVersion
MultiByteToWideChar
lstrcpyA
lstrcmpA
lstrcmpiA
lstrcatA
GetLastError
GetStartupInfoA
GetStdHandle
GetProcAddress
SetFilePointer
FlushFileBuffers
WriteFile
RtlUnwind
SetStdHandle
GetOEMCP
GetACP
GetCPInfo
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
HeapReAlloc
HeapAlloc
LCMapStringA
GetStringTypeW
LCMapStringW
SetHandleCount
GetStringTypeA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetFileType
HeapFree
VirtualAlloc
HeapCreate
GetCommandLineA
ExitProcess
HeapDestroy
VirtualFree

user32

GetFocus
GetClassNameA
SendMessageA
FindWindowA
GetWindow
ShowWindow
PostMessageA
LoadStringA

winspool.drv

AddPortA
EnumPortsA
AddPrinterA
AddPrinterDriverA
EnumPrinterDriversA
EnumPrintersA
OpenPrinterA
ClosePrinter
DeletePrinterDriverA
GetPrinterDriverDirectoryA
DeletePrinter

advapi32

RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
RegCreateKeyExA
RegDeleteValueA

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
I386/WIN9XMIG/ACROBAT/FILES/FILE7
.dll windows:4 windows x86 arch:x86

3779c48e5d7eb1e3423c4f37f655cd56

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

ntdll

strncmp
RtlUnwind
wcscpy
strncpy
floor
_ftol
_splitpath
_stricmp
sprintf
strchr
strstr
wcslen

kernel32

_lcreat
CompareStringA
HeapSize
SetEndOfFile
GetCPInfo
LCMapStringW
LCMapStringA
IsBadCodePtr
SetLastError
HeapDestroy
HeapAlloc
HeapCreate
FreeLibrary
GlobalFree
GlobalAlloc
WideCharToMultiByte
IsDBCSLeadByteEx
MultiByteToWideChar
OpenFile
GetTempFileNameA
GetTempPathA
_lclose
_lwrite
_llseek
SetEnvironmentVariableA
CompareStringW
GetLastError
GlobalUnlock
GlobalLock
GlobalSize
GlobalReAlloc
_lopen
MulDiv
GetVersionExW
IsDBCSLeadByte
DebugBreak
GlobalHandle
GetProfileIntA
RaiseException
GetProcAddress
LoadLibraryA
GetModuleHandleA
LocalFree
IsBadReadPtr
GetPrivateProfileStringA
WritePrivateProfileStringA
LoadLibraryW
GetModuleFileNameW
_lread
LocalAlloc
GetSystemTime
IsBadWritePtr
GetLocalTime
ExitProcess
FlushFileBuffers
SetStdHandle
SetUnhandledExceptionFilter
CreateFileA
SetFilePointer
GetFileType
GetStringTypeW
VirtualAlloc
ReadProcessMemory
GetCurrentProcess
GetThreadSelectorEntry
GetCurrentThread
GetVersionExA
HeapReAlloc
GetTimeZoneInformation
WriteFile
VirtualFree
GetStringTypeA
TerminateProcess
GetStdHandle
GetModuleFileNameA
ReadFile
HeapFree
CloseHandle

user32

MessageBoxA
SetRectEmpty
wsprintfA
GetDesktopWindow
LoadStringA
SetRect
wsprintfW
GetDC
ReleaseDC
IntersectRect
SendMessageW
wvsprintfA
PostMessageW
EqualRect
RegisterWindowMessageW
GetActiveWindow

gdi32

GetDeviceCaps

Exports

Exports

DrvDisableDriver
DrvEnableDriver

Sections

.text
Size: 373KB - Virtual size: 372KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 103B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/ACROBAT/FILES/FILE8
.dll windows:4 windows x86 arch:x86

0a612cb03774035a693e203bd6b37c1f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

ntdll

DbgBreakPoint
DbgPrint
RtlUnwind
strchr
wcscmp
wcscat
strstr
_splitpath
_itoa
atoi
_strcmpi
strncpy
sprintf
_ftol
wcslen
_wcsicmp
wcscpy

kernel32

LocalFree
_lopen
GetSystemDirectoryA
GetVersionExW
MultiByteToWideChar
FormatMessageA
GetLastError
RaiseException
GetLocaleInfoA
lstrcpyA
_lclose
LocalAlloc
GetPrivateProfileStringA
WritePrivateProfileStringA
GetTimeFormatA
GetDateFormatA
OpenFile
FreeLibrary
LoadLibraryW
FreeResource
LockResource
GetThreadLocale
lstrcatA
FindResourceW
ExitThread
ReleaseSemaphore
CloseHandle
WaitForSingleObject
CreateThread
CreateSemaphoreW
GetModuleFileNameA
lstrcmpiA
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
lstrlenW
lstrcpynW
HeapDestroy
SetLastError
GetModuleFileNameW
GetProcAddress
HeapAlloc
HeapCreate
HeapReAlloc
HeapSize
GetVersion
lstrcmpW
lstrlenA
MulDiv
WideCharToMultiByte
GlobalReAlloc
GlobalLock
GlobalUnlock
GlobalFree
GlobalAlloc
GetStdHandle
GetCPInfo
CompareStringA
CompareStringW
SetEnvironmentVariableA
SizeofResource
LoadResource
HeapFree
GetLocalTime
GetStringTypeW
GetStringTypeA
GetSystemTime
GetTimeZoneInformation
GetVersionExA
LoadLibraryA
GetModuleHandleA
GetCurrentThread
GetThreadSelectorEntry
GetCurrentProcess
ReadProcessMemory
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
VirtualFree
WriteFile
TerminateProcess
LCMapStringA
LCMapStringW
ExitProcess
VirtualAlloc

advapi32

GetUserNameA

user32

GetCapture
SetCapture
PtInRect
IsWindowEnabled
GetCursor
GetWindowLongW
DestroyCursor
DrawFocusRect
GetSysColor
LoadBitmapW
FillRect
RemovePropA
SetPropA
EnableWindow
GetForegroundWindow
GetWindowTextA
DefWindowProcW
DispatchMessageW
TranslateMessage
GetMessageW
CreateWindowExW
RegisterClassW
IsWindow
wsprintfW
ReleaseCapture
LoadCursorW
ClientToScreen
WindowFromPoint
CallWindowProcW
IsDlgButtonChecked
GetClassWord
GetDlgItemTextW
SetFocus
WinHelpA
DialogBoxIndirectParamW
LoadStringA
SendDlgItemMessageA
wsprintfA
GetClientRect
ScreenToClient
SetRect
SendDlgItemMessageW
GetDlgItemTextA
MessageBoxA
BeginPaint
OffsetRect
LoadIconA
DrawIcon
DestroyIcon
EndPaint
GetDlgItem
GetWindowRect
InflateRect
MapWindowPoints
InvalidateRect
SetWindowLongW
DialogBoxParamW
LoadStringW
GetPropA
ReleaseDC
SetCursor
GetDesktopWindow
GetSystemMetrics
MoveWindow
SetDlgItemTextW
GetKeyState
ShowWindow
GetParent
CheckRadioButton
SetWindowTextA
SetDlgItemTextA
EndDialog
DialogBoxParamA
DialogBoxIndirectParamA
GetDlgItemInt
SetDlgItemInt
SendMessageW
GetFocus
GetActiveWindow
GetDC

winspool.drv

GetPrinterDriverW
ClosePrinter
SetPrinterDataW
GetPrinterA
OpenPrinterW

gdi32

DeleteObject
Rectangle
SelectObject
GetStockObject
SetBkMode
CreateFontA
LineTo
MoveToEx
CreatePen
TextOutA
GetTextExtentPoint32A
SetTextColor
GetTextColor
GetDeviceCaps
GetTextExtentPointA
BitBlt
CreateBrushIndirect
DeleteDC
CreateCompatibleDC
GetOutlineTextMetricsW
CreateFontIndirectA
EnumFontFamiliesA
GetTextMetricsW
CreateDCW
ExtEscape
GetCharacterPlacementA

shell32

ShellExecuteExA
ShellExecuteA

comdlg32

CommDlgExtendedError
GetSaveFileNameA

Exports

Exports

BRUSHOBJ_pvAllocRbrush
BRUSHOBJ_pvGetRbrush
CLIPOBJ_ppoGetPath
DevQueryPrintEx
DllInitialize
DrvAdvancedDocumentProperties
DrvConvertDevMode
DrvDeviceCapabilities
DrvDevicePropertySheets
DrvDocumentEvent
DrvDocumentProperties
DrvDocumentPropertySheets
DrvPrinterEvent
DrvSplAbort
DrvSplClose
DrvSplEndDoc
DrvSplEndPage
DrvSplStartDoc
DrvSplStartPage
DrvSplWritePrinter
DrvUpgradePrinter
EngAssociateSurface
EngCreateDeviceSurface
EngCreatePalette
EngDeletePalette
EngDeletePath
EngDeleteSurface
FONTOBJ_cGetAllGlyphHandles
FONTOBJ_cGetGlyphs
FONTOBJ_pifi
FONTOBJ_pvTrueTypeFontFile
FONTOBJ_pxoGetXform
FreeUserMem
GetPrinterDriverA
PATHOBJ_bEnum
PATHOBJ_vEnumStart
PrinterProperties
STROBJ_bEnum
STROBJ_vEnumStart
XFORMOBJ_iGetXform
XLATEOBJ_iXlate
XLATEOBJ_piVector

Sections

.text
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/ACROBAT/FILES/FILE9
.dll windows:4 windows x86 arch:x86

3ad076d8495e8b564a6e2830161fe152

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

win32k.sys

STROBJ_vEnumStart
EngSetLastError
EngProbeForRead
EngAllocMem
EngFreeMem
EngAllocUserMem
EngFreeUserMem
EngWritePrinter
BRUSHOBJ_pvGetRbrush
PATHOBJ_bEnum
PATHOBJ_vEnumStart
XFORMOBJ_iGetXform
FONTOBJ_pifi
FONTOBJ_pxoGetXform
STROBJ_bEnum
BRUSHOBJ_pvAllocRbrush
EngAssociateSurface
EngCreateDeviceSurface
EngDeletePath
EngDeleteSurface
CLIPOBJ_ppoGetPath
FONTOBJ_cGetGlyphs
FONTOBJ_pvTrueTypeFontFile
XLATEOBJ_iXlate
XLATEOBJ_piVector
EngGetLastError
EngCreatePalette
RtlUnwind

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 448B - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 736B - Virtual size: 716B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 896B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 608B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/ACROBAT/MIGRATE.DLL
.dll windows:4 windows x86 arch:x86

c187716a0e4682688581c1ecb779de84

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
WideCharToMultiByte
SetLastError
HeapFree
CloseHandle
GetSystemDirectoryA
lstrcmpA
MoveFileExA
CreateFileA
lstrcatA
lstrlenA
lstrcmpiA
GetPrivateProfileStringA
lstrcpyA
DisableThreadLibraryCalls
HeapAlloc
GetOEMCP
SetUnhandledExceptionFilter
GetEnvironmentStrings
GetEnvironmentStringsW
GetVersion
LoadLibraryA
RtlUnwind
GetCommandLineA
HeapReAlloc
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
GetCPInfo
GetACP
WritePrivateProfileStringA
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetLocaleInfoW
HeapDestroy
HeapCreate
VirtualFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
LCMapStringA
LCMapStringW
GetProcAddress
FlushFileBuffers
SetFilePointer
GetLocaleInfoA
SetStdHandle

user32

wsprintfA

advapi32

RegCreateKeyExA
RegQueryInfoKeyA
RegQueryValueExA
RegSetValueExA
RegOpenKeyExA
RegCloseKey

setupapi

SetupCloseLog
SetupOpenLog

winspool.drv

DeletePrinter
OpenPrinterA
EnumPrintersA
DeletePrinterDriverA
ClosePrinter
AddPrinterA
GetPrinterDriverDirectoryA
EnumPrinterDriversA
AddPrinterDriverA

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Exports

Exports

Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/CMMGR/MIGRATE.DLL
.dll windows:5 windows x86 arch:x86

c5f2d46153deea5fe93ddcd3a0b956a1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

msvcrt

??2@YAPAXI@Z
??3@YAXPAX@Z

kernel32

WritePrivateProfileStringA
FormatMessageA
TlsAlloc
lstrcpyA
GetSystemDirectoryA
WideCharToMultiByte
lstrlenA
CopyFileA
GetWindowsDirectoryA
DeleteFileA
TlsFree
DisableThreadLibraryCalls
HeapFree
GetProcessHeap
CloseHandle
GetProcAddress
lstrcpynA
GetLastError
HeapAlloc
InterlockedIncrement
GetTickCount
LoadLibraryExA
GetPrivateProfileIntA
FreeLibrary
GetPrivateProfileStringA
CreateFileA

user32

wsprintfA
CharNextA
CharPrevA

advapi32

RegQueryInfoKeyA
RegQueryValueExA
RegCloseKey
RegEnumValueA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

Exports

Exports

Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 818B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/EASTMAN/MIGRATE.DLL
.dll windows:4 windows x86 arch:x86

24d239c7d409794600bae6853984217e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
FreeLibrary
SetCurrentDirectoryA
GetEnvironmentStringsW
HeapCreate
VirtualFree
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
DisableThreadLibraryCalls
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
RtlUnwind
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement

user32

LoadStringA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

setupapi

SetupOpenLog
SetupLogErrorA
SetupCloseLog

Exports

Exports

Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/FAX/AWDVSTUB.EXE
.exe windows:5 windows x86 arch:x86

34b42cbbbb904138941550ed6982acb9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

FormatMessageW
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
RtlUnwind
TerminateProcess
GetCurrentProcess
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
GetModuleHandleA
GetCurrentThreadId
HeapDestroy
HeapCreate
VirtualFree
WriteFile
HeapFree
HeapAlloc
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
WaitForSingleObject
GetProcAddress
LoadLibraryA
SetFilePointer
SetStdHandle
FlushFileBuffers
CloseHandle
GetLocalTime
UnhandledExceptionFilter
GetModuleFileNameW
SetHandleCount
OutputDebugStringW
GetCommandLineW
GetTempPathW
GetTempFileNameW
DeleteFileW
CreateProcessW
GetLastError
GetFileType
GetStdHandle
VirtualAlloc
GlobalHandle
GlobalLock
GlobalAlloc
GlobalFree
GlobalUnlock

user32

MessageBoxW
LoadStringW

shell32

CommandLineToArgvW
FindExecutableW

ole32

StgOpenStorage

faxtiff

TiffClose
TiffCreate
TiffEndPage
TiffStartPage
TiffWriteRaw
FaxTiffInitialize

gdi32

GdiSetBatchLimit
SelectObject
CreateDIBSection
DeleteDC
CreateCompatibleDC
CreateICA
DeleteObject
BitBlt
CreateCompatibleBitmap
CreatePatternBrush
SetBitmapBits
PatBlt
CreateBitmap

Sections

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/FAX/MIGRATE.DLL
.dll windows:5 windows x86 arch:x86

a60b598ae5bef03b221505b77d2956a4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

msvcrt

_strnicmp
_splitpath
_vsnprintf
isspace
wcscpy
_except_handler3
strncpy
wcslen
swprintf
sprintf

kernel32

OutputDebugStringA
GetPrivateProfileStringA
ExpandEnvironmentStringsA
WideCharToMultiByte
CopyFileW
GetWindowsDirectoryW
FormatMessageA
WritePrivateProfileStringA
GetLastError
GetWindowsDirectoryA
GetCurrentThreadId
GetLocalTime
GetModuleFileNameA

advapi32

RegOpenKeyExW
RegEnumKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExA
RegSetValueExA

user32

LoadStringA

setupapi

SetupLogErrorA

Exports

Exports

Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 622B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/HPTOOLS/MIGRATE.DLL
.dll windows:4 windows x86 arch:x86

5c81c998bfb4337d91881a38cd5cc1bf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetUserDefaultLangID
DeleteFileA
RemoveDirectoryA
GetLastError
SetLastError
HeapFree
HeapAlloc
WideCharToMultiByte
lstrlenA
LoadResource
FindResourceExA
FindClose
FindFirstFileA
FindNextFileA
SetFileAttributesA
GetFileAttributesA
GlobalAlloc
GlobalLock
lstrcpyA
GetWindowsDirectoryA
lstrcatA
DisableThreadLibraryCalls
GetSystemDirectoryA
GetProcessHeap
SizeofResource
HeapDestroy
TerminateProcess
LCMapStringA
CloseHandle
LCMapStringW
FlushFileBuffers
GetLocaleInfoW
GetLocaleInfoA
ReadFile
RtlUnwind
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
WritePrivateProfileStringA
HeapCreate
VirtualFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
VirtualAlloc
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
MultiByteToWideChar
GetEnvironmentStringsW
WriteFile
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetStringTypeW
GetStringTypeA
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
SetStdHandle
SetFilePointer
LoadLibraryA

user32

LoadStringA

advapi32

RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegSetValueExA
RegDeleteValueA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegEnumValueA

shell32

SHGetPathFromIDListA
SHGetSpecialFolderLocation

setupapi

SetupOpenLog
SetupCloseLog

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Exports

Exports

Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion

Sections

.text
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/IBMAV/MIGRATE.DLL
.dll windows:4 windows x86 arch:x86

960611142c11fab2e6d01a10836fe6b4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObject
CloseHandle
GetLastError
CreateProcessA
GetUserDefaultLangID
DeleteFileA
lstrlenA
ExpandEnvironmentStringsA
HeapFree
HeapAlloc
GetProcessHeap
SizeofResource
LoadResource
FindResourceExA
FindFirstFileA
lstrcatA
FindClose
GetSystemDirectoryA
GetPrivateProfileStringA
lstrcpyA
DisableThreadLibraryCalls
WideCharToMultiByte
SetLastError
TlsSetValue
GetEnvironmentStringsW
HeapDestroy
LCMapStringA
LCMapStringW
RtlUnwind
GetCommandLineA
GetVersion
GetCurrentThreadId
WritePrivateProfileStringA
TlsAlloc
TlsFree
TlsGetValue
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
SetUnhandledExceptionFilter
IsBadWritePtr
HeapCreate
VirtualFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
IsBadReadPtr
IsBadCodePtr
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP

advapi32

RegSetValueExA
RegQueryValueExA
RegCloseKey
RegQueryInfoKeyA
RegOpenKeyExA

user32

wsprintfA

setupapi

SetupOpenLog
SetupCloseLog

Exports

Exports

Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/IBMAV/PIC15736.PCX
I386/WIN9XMIG/ICM/MIGRATE.DLL
.dll windows:5 windows x86 arch:x86

4de38f1b555491dbd57616d88c86074b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

msvcrt

sprintf
malloc
free

kernel32

LoadLibraryA
FreeLibrary
WritePrivateProfileStringA
lstrcpyA
FindClose
FindNextFileA
GetProcAddress
lstrcatA
MoveFileExA
GetPrivateProfileStringA
FormatMessageA
GetLastError
lstrlenA
GetWindowsDirectoryA
FindFirstFileA

advapi32

RegQueryInfoKeyA
RegEnumValueA
RegDeleteValueA
RegCreateKeyExA
RegCloseKey
RegDeleteKeyA
RegOpenKeyExA
RegEnumKeyA

setupapi

SetupOpenLog
SetupLogErrorA

Exports

Exports

Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/ICM/SYMBOLS/RETAIL/DLL/MIGRATE.DBG
I386/WIN9XMIG/ICM/SYMBOLS/RETAIL/DLL/MIGRATE.PDB
I386/WIN9XMIG/IEMIG/MIGRATE.DLL
.dll windows:5 windows x86 arch:x86

e084922d374689979c144b453f4f3f62

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

user32

CharPrevA
CharNextA
wsprintfA

advapi32

RegCloseKey
RegEnumValueA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyA

kernel32

WideCharToMultiByte
LocalFree
lstrcpyA
WritePrivateProfileStringA
GetLastError
LocalAlloc
lstrlenA
lstrcatA
lstrcmpiA
GetPrivateProfileStringA
GetFileAttributesA

setupapi

SetupOpenLog
SetupFindNextLine
SetupLogErrorA
SetupCloseInfFile
SetupOpenInfFileA
SetupGetLineTextA
SetupFindFirstLineA
SetupCloseLog

Exports

Exports

DllMain
Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/IEMIG/SYMBOLS/RETAIL/DLL/MIGRATE.DBG
I386/WIN9XMIG/IEMIG/SYMBOLS/RETAIL/DLL/MIGRATE.PDB
I386/WIN9XMIG/INOCULAN/FILELIST.TXT
I386/WIN9XMIG/INOCULAN/INO_FLPY.SYS
.sys windows:4 windows x86 arch:x86

a3a36917121f5906d8a92db66da11188

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntoskrnl.exe

IoRegisterFsRegistrationChange
IoCreateSymbolicLink
RtlInitUnicodeString
IoCreateDevice
KeInitializeEvent
IofCompleteRequest
IofCallDriver
memmove
MmIsAddressValid
IoIsOperationSynchronous
KeGetCurrentThread
ExFreePool
ObQueryNameString
KeSetEvent
ExReleaseResourceLite
ExInitializeResourceLite
ExAllocatePoolWithTag
IoGetAttachedDevice
ExAcquireResourceExclusiveLite
RtlCompareMemory
IoGetCurrentProcess
KeClearEvent
KeWaitForSingleObject
IoSetTopLevelIrp
IoInitializeIrp
IoAllocateIrp
IoFreeIrp
FsRtlMdlReadCompleteDev
FsRtlMdlWriteCompleteDev
IoDetachDevice
PsGetCurrentProcessId
IoDeleteDevice
KeInitializeSpinLock
ExAcquireResourceSharedLite
IoAttachDeviceByPointer

hal

KeGetCurrentIrql
KfAcquireSpinLock
KfReleaseSpinLock

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/INOCULAN/INO_FLTR.SYS
.sys windows:4 windows x86 arch:x86

6202bf910c8cd6aae880dfa8217e91e4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntoskrnl.exe

ObfDereferenceObject
IoGetAttachedDevice
IoCreateDevice
ExAcquireResourceExclusiveLite
IoGetRelatedDeviceObject
ObReferenceObjectByHandle
ZwCreateFile
RtlInitUnicodeString
IoGetDeviceObjectPointer
ExInitializeResourceLite
IoDeleteDevice
ExAllocatePoolWithTag
IoInitializeTimer
IoCreateSymbolicLink
KeInitializeSpinLock
IoDetachDevice
ExAcquireResourceSharedLite
IoDeleteSymbolicLink
ExFreePool
KeSetEvent
RtlUnicodeToMultiByteN
RtlQueryRegistryValues
IofCompleteRequest
RtlCompareMemory
IofCallDriver
MmIsAddressValid
memmove
PsGetCurrentProcessId
IoIsOperationSynchronous
SeCreateClientSecurity
KeGetCurrentThread
SeTokenType
IoStartTimer
ExReleaseResourceLite
IoAttachDeviceToDeviceStack
KeClearEvent
KeWaitForSingleObject
PsRevertToSelf
FsRtlCopyRead
FsRtlCopyWrite
IoSetTopLevelIrp
KeQuerySystemTime
KeCancelTimer
KeSetTimer
KeInitializeTimer
IoBuildDeviceIoControlRequest
IoFreeIrp
KeSetPriorityThread
FsRtlMdlReadCompleteDev
FsRtlMdlWriteCompleteDev
IoAllocateIrp
ZwQueryInformationToken
ZwOpenProcessToken
ZwOpenThreadToken
ObQueryNameString
RtlCompareUnicodeString
ZwQuerySymbolicLinkObject
ZwOpenSymbolicLinkObject
wcsncpy
KeLeaveCriticalRegion
KeEnterCriticalRegion
IoReleaseVpbSpinLock
IoAcquireVpbSpinLock
KeWaitForMultipleObjects
IoGetBaseFileSystemDeviceObject
RtlUnwind
ZwClose
IoGetCurrentProcess
KeInitializeEvent
PsCreateSystemThread
IoStopTimer
SeImpersonateClient

hal

KfRaiseIrql
KfLowerIrql
KeGetCurrentIrql
KfAcquireSpinLock
KfReleaseSpinLock

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/INOCULAN/MIGRATE.DLL
.dll windows:4 windows x86 arch:x86

51498851398ba68a2ae5c7deaf5ab2fe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

RemoveDirectoryA
GetCurrentDirectoryA
FindFirstFileA
DeleteFileA
CreateDirectoryA
SetCurrentDirectoryA
GetFileAttributesA
FindNextFileA
MoveFileExA
GetPrivateProfileStringA
GetSystemDirectoryA
GetShortPathNameA
FindClose
MultiByteToWideChar
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetStringTypeW
GetStringTypeA
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
FlushFileBuffers
RtlUnwind
WideCharToMultiByte
GetLastError
ExpandEnvironmentStringsA
SetFileAttributesA
WritePrivateProfileStringA
CopyFileA
GetWindowsDirectoryA
CreateFileA
CreateEventA
MoveFileA
CloseHandle
SetEvent
DeviceIoControl
VirtualFree
VirtualAlloc
lstrcpyA
TerminateProcess
ExitProcess
lstrcatA
HeapReAlloc
GetTimeZoneInformation
WriteFile
ReadFile
GetFileType
InterlockedDecrement
InterlockedIncrement
FileTimeToSystemTime
FileTimeToLocalFileTime
GetCommandLineA
GetVersion
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
SetStdHandle
SetHandleCount
GetStdHandle
GetStartupInfoA
DeleteCriticalSection
SetFilePointer
SetEndOfFile
TlsGetValue
GetCurrentProcess
HeapFree
HeapAlloc
LCMapStringA
LCMapStringW
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
GetEnvironmentStringsW
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
HeapDestroy
HeapCreate
GetCPInfo

user32

DdeClientTransaction
DdeCreateDataHandle
MessageBoxA
DdeInitializeA
DdeCreateStringHandleA
DdeConnect
DdeFreeStringHandle
DdeDisconnect
DdeUninitialize

advapi32

RegOpenKeyA
RegEnumValueA
RegEnumKeyExA
RegConnectRegistryA
RegEnumKeyA
RegDeleteValueA
RegQueryValueA
OpenSCManagerA
CreateServiceA
CloseServiceHandle
RegDeleteKeyA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

shell32

SHGetDesktopFolder
SHGetPathFromIDListW
SHGetMalloc

Exports

Exports

Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion

Sections

.text
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/INOCULAN/_INOC/ALERT.CFG
I386/WIN9XMIG/INOCULAN/_INOC/ALERTVER.DLL
.dll windows:4 windows x86 arch:x86

db5b3b3c442b8c0d29ecce8087aceb8f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapCreate
GetLastError
LockResource
LoadResource
SizeofResource
FindResourceExA
MultiByteToWideChar
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
FreeResource
HeapDestroy
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
WriteFile
HeapFree
HeapAlloc
LoadLibraryA
FlushFileBuffers
CloseHandle
SetStdHandle
SetFilePointer

Exports

Exports

AlGetBuildNumberA
AlGetBuildNumberW
AlGetVersionA
AlGetVersionW

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 477B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/INOCULAN/_INOC/EMISSARY.MVA
I386/WIN9XMIG/INOCULAN/_INOC/GROUP4.MVA
I386/WIN9XMIG/INOCULAN/_INOC/GROUP5.MVA
I386/WIN9XMIG/INOCULAN/_INOC/GROUP6.MVA
I386/WIN9XMIG/INOCULAN/_INOC/GROUP7.MVA
I386/WIN9XMIG/INOCULAN/_INOC/GROUP8.MVA
I386/WIN9XMIG/INOCULAN/_INOC/ICLASS32.MVA
I386/WIN9XMIG/INOCULAN/_INOC/INOCULAN.CFG
I386/WIN9XMIG/INOCULAN/_INOC/INOCULAN.ICF
I386/WIN9XMIG/INOCULAN/_INOC/INOCULAN.WRI
I386/WIN9XMIG/INOCULAN/_INOC/INSTHLPR.EXE
.exe windows:4 windows x86 arch:x86

ad3c1bfa9e252d616ef24f7ab77b614b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyA
lstrlenA
lstrcatA
CloseHandle
ReadFile
GetModuleFileNameA
FreeEnvironmentStringsA
GetTimeZoneInformation
GetSystemTime
GetLocalTime
ExitProcess
TerminateProcess
GetCurrentProcess
GetCommandLineA
GetVersion
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
GetLastError
SetFilePointer
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
WriteFile
RtlUnwind
UnhandledExceptionFilter
GetProcAddress
LoadLibraryA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
HeapCreate
HeapAlloc
SetStdHandle
FlushFileBuffers
CreateFileA
GetStringTypeW
CompareStringA
SetEndOfFile
GetStringTypeA
GetLocaleInfoA
CompareStringW
SetEnvironmentVariableA
LCMapStringA
GetLocaleInfoW
HeapReAlloc
LCMapStringW

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/INOCULAN/_INOC/LICENSE.DLL
.dll windows:4 windows x86 arch:x86

c0d093addf37e4f8f606282929f1a127

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

MultiByteToWideChar
GetLastError
SetFilePointer
CloseHandle
HeapAlloc
HeapFree
WriteFile
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
GetVersion
GetCPInfo
GetACP
GetOEMCP
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
SetStdHandle
GetFileType
SetHandleCount
GetStdHandle
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
lstrlenA
WideCharToMultiByte
LCMapStringA
LCMapStringW
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetProcAddress
LoadLibraryA
FlushFileBuffers
GetLocaleInfoW

Exports

Exports

CSLicenseDecryptKey
CSLicenseEncryptKey

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/INOCULAN/_INOC/MAIN.MVA
I386/WIN9XMIG/INOCULAN/_INOC/MIRSETUP.EXE
.exe windows:4 windows x86 arch:x86

a4d2e5a0c016a0241cdd8e553325d0a8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
FindNextFileA
FindClose
GetFileAttributesA
FindFirstFileA
GetCurrentDirectoryA
SetFileAttributesA
MultiByteToWideChar
GetEnvironmentVariableA
FormatMessageA
RemoveDirectoryA
CreateProcessA
GetPrivateProfileStringA
LocalFree
CloseHandle
CopyFileA
GetShortPathNameA
SetCurrentDirectoryA
Sleep
CreateMutexA
WaitForSingleObject
GetCurrentThread
GetCPInfo
GetACP
GetLastError
GetCurrentProcess
GetOEMCP
SetHandleCount
LCMapStringA
HeapReAlloc
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetStringTypeW
GetStringTypeA
LCMapStringW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
RtlUnwind
FlushFileBuffers
WriteFile
SetFilePointer
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
SetStdHandle
HeapFree
HeapAlloc
LoadLibraryA
GetProcAddress
GetExitCodeProcess

user32

MessageBoxA
SendMessageA
ShowWindow
IsIconic
IsWindow
GetWindowTextA
EnumWindows

advapi32

RegQueryValueExA
RegOpenKeyExA
OpenProcessToken
InitializeSecurityDescriptor
InitializeAcl
OpenThreadToken
AddAccessAllowedAce
SetSecurityDescriptorDacl
AllocateAndInitializeSid
ImpersonateSelf
MapGenericMask
CreatePrivateObjectSecurity
FreeSid
RevertToSelf
AccessCheck
RegCloseKey
DestroyPrivateObjectSecurity
QueryServiceStatus
CloseServiceHandle
OpenServiceA
OpenSCManagerA
RegDeleteValueA
StartServiceA

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
I386/WIN9XMIG/INOCULAN/_INOC/QUEUEID.IDS
I386/WIN9XMIG/INOCULAN/_INOC/REALTIME.MVA
I386/WIN9XMIG/INOCULAN/_INOC/SBS.MVA
I386/WIN9XMIG/INOCULAN/_INOC/SETUP.EX_
.exe windows:4 windows x86 arch:x86

3c598ef0b25e881f6b497f8d98fa4d71

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

license

ord101

oleaut32

SysAllocString
VariantInit
VariantClear

ole32

CoUninitialize
CLSIDFromProgID
CoCreateInstance
CoInitialize

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

netapi32

NetMessageBufferSend
NetUserModalsGet
NetServerGetInfo
NetApiBufferFree

winmm

PlaySoundA

mpr

WNetCloseEnum
WNetAddConnection2A
WNetCancelConnection2A
WNetOpenEnumA
WNetEnumResourceA

kernel32

GetFileType
HeapReAlloc
RaiseException
GetModuleHandleA
HeapFree
RtlUnwind
HeapAlloc
SetEnvironmentVariableA
RemoveDirectoryA
SetStdHandle
GetCPInfo
GetACP
GetOEMCP
HeapSize
GetCommandLineA
SetHandleCount
GetStdHandle
GetTimeZoneInformation
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
GetExitCodeProcess
CreateProcessA
GetVersion
GetProcessVersion
CompareStringW
GetProcAddress
FreeLibrary
SystemTimeToFileTime
GetCurrentProcess
GetPrivateProfileStringA
CreateDirectoryA
lstrcpyA
lstrcatA
GetPrivateProfileIntA
GetLastError
CopyFileA
GetModuleFileNameA
SetFileAttributesA
GetShortPathNameA
Sleep
DeleteFileA
MoveFileExA
GetLocalTime
GetWindowsDirectoryA
lstrlenA
CreateFileA
SetFilePointer
LockFile
WriteFile
UnlockFile
CloseHandle
WinExec
GetVersionExA
IsDBCSLeadByte
GetCurrentDirectoryA
lstrcpynA
MultiByteToWideChar
WideCharToMultiByte
MoveFileA
WritePrivateProfileStringA
GlobalAlloc
GlobalFree
SetLastError
LocalReAlloc
TlsSetValue
TlsGetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
GlobalGetAtomNameA
GlobalAddAtomA
GlobalDeleteAtom
GetFileAttributesA
SetFileTime
LocalFileTimeToFileTime
GetFileTime
GetFileSize
GetFullPathNameA
GetVolumeInformationA
SetEndOfFile
FlushFileBuffers
ReadFile
DuplicateHandle
InterlockedDecrement
InterlockedIncrement
GetCurrentThreadId
GlobalLock
GlobalUnlock
LockResource
FindResourceA
LoadResource
GetDriveTypeA
MulDiv
GetTempPathA
GetSystemDirectoryA
OpenFile
GetCurrentProcessId
OpenProcess
GetDiskFreeSpaceA
GetCurrentThread
lstrcmpA
GetComputerNameA
SetCurrentDirectoryA
FormatMessageA
LocalFree
ResetEvent
SetEvent
ExitProcess
CreateEventA
SetErrorMode
WaitForSingleObject
GetTickCount
lstrcmpiA
FindFirstFileA
FindNextFileA
FindClose
LoadLibraryA
CompareStringA
GetStartupInfoA
HeapCreate

user32

BeginPaint
MessageBoxA
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
LoadStringA
SetMessageQueue
GetCursorPos
ValidateRect
GetMessageA
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
ReleaseCapture
GetDesktopWindow
DestroyMenu
LoadMenuA
SetMenu
ReuseDDElParam
UnpackDDElParam
GetClassNameA
CharUpperA
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
MoveWindow
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
CheckRadioButton
SendDlgItemMessageA
SystemParametersInfoA
MapWindowPoints
GetFocus
SetFocus
EqualRect
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
ShowOwnedPopups
SetCursor
GetScrollInfo
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetMenu
CharLowerA
GetDlgItem
GetWindowTextLengthA
GetDlgCtrlID
GetKeyState
DefWindowProcA
CreateWindowExA
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
SetPropA
GetForegroundWindow
SetForegroundWindow
GetPropA
RemovePropA
CallWindowProcA
GetMessageTime
GetMessagePos
GetWindowLongA
SetWindowLongA
SetWindowPos
EndDialog
IsWindowEnabled
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
TranslateMessage
DispatchMessageA
PeekMessageA
PostQuitMessage
GetParent
DdeClientTransaction
DdeDisconnect
DdeConnect
DdeCreateStringHandleA
IsWindowVisible
LoadBitmapA
DdeUninitialize
DdeInitializeA
PostMessageA
FillRect
BringWindowToTop
CopyRect
GetClientRect
GetSystemMetrics
GetDC
ReleaseDC
LoadCursorA
LoadIconA
GetSysColor
PostThreadMessageA
FlashWindow
ScreenToClient
SetRect
AdjustWindowRectEx
ClientToScreen
GetTopWindow
PtInRect
GetWindowRect
GetWindow
GetWindowTextA
IsWindow
EnumWindows
IsIconic
ShowWindow
SendMessageTimeoutA
MessageBeep
InvalidateRect
UpdateWindow
wvsprintfA
wsprintfA
EnableWindow
SendMessageA
GetNextDlgTabItem
RegisterWindowMessageA
GetLastActivePopup
UnregisterClassA

gdi32

CreatePen
DeleteDC
GetDeviceCaps
CreatePalette
GetTextColor
CreateCompatibleDC
Rectangle
GetTextExtentPointA
RealizePalette
DeleteObject
CreateSolidBrush
GetStockObject
GetObjectA
ExtTextOutA
SetBkColor
SetTextColor
SetTextAlign
GetTextExtentPoint32A
CreateBitmap
SaveDC
RestoreDC
SelectObject
SelectPalette
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
MoveToEx
LineTo
BitBlt
CreateFontA
PtVisible
RectVisible
TextOutA
Escape
GetPaletteEntries

comdlg32

GetOpenFileNameA
GetFileTitleA
GetSaveFileNameA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

AdjustTokenPrivileges
RegEnumKeyExA
LookupPrivilegeValueA
RegCloseKey
RegQueryValueExA
OpenThreadToken
InitializeSecurityDescriptor
RegEnumValueA
OpenProcessToken
GetTokenInformation
LookupAccountSidA
ChangeServiceConfigA
ControlService
AllocateAndInitializeSid
AddAccessAllowedAce
SetSecurityDescriptorDacl
CreatePrivateObjectSecurity
ImpersonateSelf
InitiateSystemShutdownA
GetUserNameA
MapGenericMask
AccessCheck
FreeSid
RevertToSelf
DestroyPrivateObjectSecurity
OpenServiceA
RegConnectRegistryA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
InitializeAcl
RegCreateKeyA
RegOpenKeyExA
RegSetValueExA
OpenSCManagerA
CreateServiceA
CloseServiceHandle
DeleteService

shell32

DragFinish
DragQueryFileA

comctl32

ord17
ImageList_Destroy
ImageList_LoadImageA

Sections

.text
Size: 325KB - Virtual size: 324KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 790KB - Virtual size: 789KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/INOCULAN/_INOC/SETUP.INI
I386/WIN9XMIG/INOCULAN/_INOC/SIG.MVA
I386/WIN9XMIG/INOCULAN/_INOC/START.JOB
I386/WIN9XMIG/INOCULAN/_INOC/TNG.MVA
I386/WIN9XMIG/INOCULAN/_INOC/TNGICONS.MVA
I386/WIN9XMIG/INOCULAN/_INOC/VIRUSHDR.TXT
I386/WIN9XMIG/MAPI/80/80.CAB
.cab
I386/WIN9XMIG/MAPI/802/802.CAB
.cab
I386/WIN9XMIG/MAPI/803/803.CAB
.cab
I386/WIN9XMIG/MAPI/98MAPI/98MAP.CAB
.cab
I386/WIN9XMIG/MAPI/98OMI/98OMI.CAB
.cab
I386/WIN9XMIG/MAPI/DLL/MIGRATE.DLL
.dll windows:4 windows x86 arch:x86

ed2e2820f34330566cf3aa422ced0258

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

setupapi

SetupCloseInfFile
SetupGetLineTextA
SetupIterateCabinetA
SetupFindNextLine
SetupCloseLog
SetupFindFirstLineA
SetupOpenInfFileA
SetupLogErrorA
SetupOpenLog
SetupGetStringFieldA

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

kernel32

InterlockedIncrement
InitializeCriticalSection
DeleteCriticalSection
WritePrivateProfileStringA
HeapAlloc
HeapFree
GetProcessHeap
DisableThreadLibraryCalls
CreateDirectoryA
GetLastError
CloseHandle
CreateFileA
GetWindowsDirectoryA
WideCharToMultiByte
DeleteFileA
CopyFileA
GetCurrentDirectoryA
FreeLibrary
GetProcAddress
LoadLibraryA
FindClose
FindNextFileA
MoveFileA
GetFileAttributesA
FindFirstFileA
GetEnvironmentVariableA
ExpandEnvironmentStringsA
GetStringTypeW
FlushFileBuffers
GetLocaleInfoW
GetStringTypeA
GetLocaleInfoA
SetFilePointer
GetEnvironmentStringsW
GetEnvironmentStrings
WriteFile
SetStdHandle
InterlockedDecrement
HeapDestroy
HeapReAlloc
GetCommandLineA
GetModuleHandleA
GetVersion
EnterCriticalSection
LeaveCriticalSection
ExitProcess
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
TlsAlloc
TlsFree
FreeEnvironmentStringsA
GetModuleFileNameA
HeapCreate
VirtualFree
VirtualAlloc
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
FreeEnvironmentStringsW
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA

user32

wsprintfA
LoadStringA

advapi32

RegOpenKeyA
RegEnumValueA
RegDeleteKeyA
RegEnumKeyA
RegCloseKey
RegQueryValueExA
RegCreateKeyA
RegSetValueExA
RegOpenKeyExA

shell32

ShellExecuteA

Exports

Exports

Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion

Sections

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/MAPI/DLL/MKNTFRMCACHE.EXE
.exe windows:4 windows x86 arch:x86

b910f56018bc852704efe5a5859858c7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WideCharToMultiByte
DeleteFileA
ExitProcess
TerminateProcess
GetCurrentProcess
GetCommandLineA
GetVersion
HeapFree
GetLastError
CloseHandle
HeapAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetFilePointer
WriteFile
ReadFile
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
MoveFileA
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
CreateFileA
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetEndOfFile
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/MAPI/DLL/MSPATCHA.DLL
.dll windows:4 windows x86 arch:x86

951ba716dcb6848e4ec46f38fd4f071b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

DeleteFileA
SetLastError
GetLastError
CloseHandle
CreateFileA
MultiByteToWideChar
CreateFileW
UnmapViewOfFile
GetFileSize
GetFileTime
RtlUnwind
DeleteFileW
MapViewOfFile
CreateFileMappingA
SetFileTime
SetEndOfFile
SetFilePointer
FlushViewOfFile
VirtualAlloc
VirtualFree

Exports

Exports

ApplyPatchToFileA
ApplyPatchToFileByHandles
ApplyPatchToFileByHandlesEx
ApplyPatchToFileExA
ApplyPatchToFileExW
ApplyPatchToFileW
GetFilePatchSignatureA
GetFilePatchSignatureByHandle
GetFilePatchSignatureW
TestApplyPatchToFileA
TestApplyPatchToFileByHandles
TestApplyPatchToFileW

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 892B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 468B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/MAPI/EX40A/40A.CAB
.cab
I386/WIN9XMIG/MAPI/EX50SP2/50SP2.CAB
.cab
I386/WIN9XMIG/MODEMS/MIGRATE.DLL
.dll windows:5 windows x86 arch:x86

7d4af58acd8b48a1c1f498c80a574a60

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

msvcrt

malloc
_mbslen
_initterm
setlocale
free
_mbslwr
_iob
_vsnprintf
_snprintf
fprintf
_mbsnextc
_pctype
_ismbcspace
_mbsinc
strchr
_mbscmp
_except_handler3
printf
_adjust_fdiv
wcscpy
_mbscpy

kernel32

lstrcmpiA
WriteFile
lstrcatA
CloseHandle
CreateFileA
lstrcpyA
WritePrivateProfileStringA
CopyFileA
FindClose
FindFirstFileA
GetWindowsDirectoryA
ReadFile
GetModuleHandleA
GetFileSize
UnmapViewOfFile
MapViewOfFileEx
CreateFileMappingW
lstrlenA
CreateFileW
lstrcatW
lstrcmpA
MultiByteToWideChar
SetFilePointer
CreateDirectoryA
CopyFileW
CreateDirectoryW
GetWindowsDirectoryW
GetLastError
FormatMessageA
DisableThreadLibraryCalls
lstrcpyW
lstrlenW
LocalFree
IsDBCSLeadByte
HeapReAlloc
ExitProcess
TerminateProcess
HeapAlloc
WaitForSingleObject
CreateEventA
SetEvent
SetFileAttributesA
DeleteFileA
GetVersionExA
OutputDebugStringA
lstrcpynA
GetProcessHeap
GetCurrentThreadId
SetLastError
HeapFree

user32

GetKeyboardType
MessageBoxA
wsprintfA
wvsprintfA

advapi32

RegCreateKeyExA
RegQueryInfoKeyA
RegDeleteValueA
RegSetValueExA
RegSetValueExW
RegOpenKeyExA
RegEnumKeyA
RegCloseKey
RegQueryValueExA

cfgmgr32

CM_Get_DevNode_Status

setupapi

SetupDiGetDeviceRegistryPropertyW
SetupDiCreateDeviceInfoW
SetupDiSetDeviceRegistryPropertyA
SetupDiGetDeviceInstallParamsW
SetupDiSetDeviceInstallParamsW
SetupDiBuildDriverInfoList
SetupDiEnumDriverInfoW
SetupDiGetDriverInstallParamsW
SetupDiSetSelectedDriverW
SetupDiSetClassInstallParamsW
SetupDiCallClassInstaller
SetupDiDeleteDeviceInfo
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
SetupDiOpenDevRegKey
SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList
SetupCloseInfFile
StringTableDestroy
StringTableLookUpStringEx
StringTableAddStringEx
StringTableInitializeEx
SetupOpenLog
SetupCloseLog
SetupLogErrorA

Exports

Exports

Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/MSGQUEUE/MIGRATE.DLL
.dll windows:4 windows x86 arch:x86

24c2a7bf7c1779fa1be05b001dd4fd2e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CompareStringA
GetWindowsDirectoryA
GetLocalTime
GetLastError
CreateFileA
lstrcatA
DeleteFileA
WriteFile
lstrlenA
GetStdHandle
GetEnvironmentStringsW
WideCharToMultiByte
GetCommandLineA
GetVersion
GetCPInfo
GetACP
GetOEMCP
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
FatalAppExitA
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCurrentThread
SetHandleCount
lstrcpyA
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetProcAddress
VirtualAlloc
HeapDestroy
HeapCreate
VirtualFree
SetFilePointer
InterlockedDecrement
InterlockedIncrement
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
HeapFree
HeapAlloc
UnhandledExceptionFilter
SetEnvironmentVariableA
HeapReAlloc
LoadLibraryA
SetStdHandle
Sleep
FlushFileBuffers
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
GetTimeZoneInformation
GetLocaleInfoW
CompareStringW

user32

CharNextA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA
RegEnumValueA

Exports

Exports

Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion

Sections

.text
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/MSI/MIGRATE.DLL
.dll windows:5 windows x86 arch:x86

052f587a93a5765265ea931b56e92d47

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_adjust_fdiv
malloc
_initterm
free
??2@YAPAXI@Z
??3@YAXPAX@Z

advapi32

RegQueryInfoKeyW
RegOpenKeyExA
RegCloseKey
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyA

kernel32

FreeLibrary
GetProcAddress
LoadLibraryA
lstrcpyW
DisableThreadLibraryCalls
lstrcmpA
lstrcpyA

Exports

Exports

Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 246B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/MSI/MSI9XMIG.DLL
.dll windows:5 windows x86 arch:x86

5f13ff4d0fcbee3c805d98f6b9b2c08f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_adjust_fdiv
malloc
_initterm
free
??2@YAPAXI@Z
??3@YAXPAX@Z

user32

CharPrevExA
wsprintfA
CharNextExA

advapi32

RegSetKeySecurity
RegDeleteKeyA
InitializeAcl
AddAccessAllowedAce
GetAce
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetSecurityDescriptorOwner
GetSecurityDescriptorLength
MakeSelfRelativeSD
LookupPrivilegeValueA
AdjustTokenPrivileges
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegEnumKeyExA
RegCreateKeyExA
RegEnumValueA
RegQueryInfoKeyA
RegDeleteValueA
AllocateAndInitializeSid
EqualSid
GetSecurityDescriptorOwner
RegGetKeySecurity
OpenProcessToken
OpenThreadToken
CopySid
GetLengthSid
IsValidSid
GetTokenInformation
FreeSid

kernel32

lstrlenA
lstrcmpiA
DisableThreadLibraryCalls
CompareStringA
ReadFile
WriteFile
GetTickCount
GetCurrentThread
GetCurrentProcess
GetVersionExA
FindNextFileA
WritePrivateProfileStringA
lstrcpyA
FindFirstFileA
GetWindowsDirectoryA
lstrcatA
CreateFileA
lstrcpynA
CloseHandle
GetLastError
lstrcmpA

shfolder

SHGetFolderPathA

msi

ord117
ord148
ord160
ord116
ord77
ord119
ord20
ord91
ord8
ord163
ord121
ord124
ord17
ord159
ord31

Exports

Exports

MigrateSystem9x
MigrateUser9x

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/MSI/MSINTMIG.DLL
.dll windows:5 windows x86 arch:x86

f5636dd8d09a529221b512df168a3447

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_adjust_fdiv
malloc
_initterm
free
rand
??2@YAPAXI@Z
wcsncmp
wcsncpy
??3@YAXPAX@Z

user32

CharPrevW
wsprintfW
CharNextW

advapi32

RegLoadKeyW
RegUnLoadKeyW
ConvertSidToStringSidW
RegSetKeySecurity
RegDeleteKeyW
InitializeAcl
AddAccessAllowedAce
GetAce
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetSecurityDescriptorOwner
GetSecurityDescriptorLength
MakeSelfRelativeSD
RegQueryInfoKeyW
RegEnumValueW
RegEnumKeyExW
RegCloseKey
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
LookupAccountNameW
AllocateAndInitializeSid
EqualSid
GetSecurityDescriptorOwner
RegGetKeySecurity
OpenProcessToken
OpenThreadToken
CopySid
GetLengthSid
IsValidSid
GetTokenInformation
FreeSid
AdjustTokenPrivileges
LookupPrivilegeValueW
RegDeleteValueW
RegCreateKeyExW

kernel32

CloseHandle
GetTickCount
CreateFileW
DisableThreadLibraryCalls
CopyFileExW
GetComputerNameW
LocalFree
DeleteFileW
RemoveDirectoryW
lstrcpynW
lstrcmpW
lstrcmpiW
CompareStringW
ReadFile
lstrcpyW
lstrlenW
lstrcatW
GetWindowsDirectoryW
MoveFileExW
GetLastError
GetSystemDirectoryW
GetCurrentProcess
GetCurrentThread
WriteFile

shlwapi

SHCopyKeyW
SHDeleteKeyW

userenv

GetDefaultUserProfileDirectoryW

netapi32

NetWkstaGetInfo
NetApiBufferFree

msi

ord116
ord125
ord92
ord119
ord20
ord121
ord17
ord158
ord163
ord8
ord118
ord160
ord159
ord32

Exports

Exports

InitializeNT
LogonNotify
MigrateSystemNT
MigrateUserNT
StartupNotify

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/MSP/MIGRATE.DLL
.dll windows:5 windows x86 arch:x86

5b2679a8af50b1521c7687a2f4de4367

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

MoveFileW
GetPrivateProfileStringA
DeleteFileA
FreeLibrary
GetProcAddress
LoadLibraryA
GetWindowsDirectoryW
lstrcpynA
GetSystemDirectoryA
GetCommandLineA
GetVersion
HeapAlloc
GetFileAttributesW
HeapFree
GetFileAttributesA
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
GetLastError
WritePrivateProfileStringA
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
WriteFile
CloseHandle
VirtualAlloc
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
FlushFileBuffers
SetFilePointer
LocalFree
GetWindowsDirectoryA
HeapCreate
FormatMessageA
VirtualFree

advapi32

RegCreateKeyA
RegSetValueExA
RegQueryValueExA
RegCloseKey
RegOpenKeyA

Exports

Exports

Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/NAV/MIGAPP.EXE
.exe windows:4 windows x86 arch:x86

0fbfe4be2c1ddd596a5793244d0968aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord6375
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord825
ord815
ord641
ord795
ord2514
ord2621
ord1134
ord5265
ord4376
ord4853
ord4274
ord4486
ord6052
ord4078
ord1775
ord4407
ord5241
ord2385
ord5163
ord6374
ord4353
ord5280
ord3798
ord4837
ord4441
ord2648
ord4673
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord4627
ord4425
ord3597
ord324
ord4234
ord6055
ord1776
ord5290
ord3402
ord3721
ord1146
ord1168
ord567
ord2302
ord6199
ord800
ord4160
ord540
ord2863
ord2379
ord755
ord470
ord4998
ord4710
ord2055
ord1576

msvcrt

_XcptFilter
exit
_exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_onexit
_EH_prolog
__CxxFrameHandler
__dllonexit
_setmbcp

kernel32

GetStartupInfoA
GetModuleHandleA

user32

AppendMenuA
GetSystemMenu
DrawIcon
SendMessageA
LoadIconA
GetSystemMetrics
IsIconic
EnableWindow
GetClientRect

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/NAV/MIGRATE.DLL
.dll windows:4 windows x86 arch:x86

7cf06052a114078a39dfa469a53765c9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
CreateDirectoryA
DeleteFileA
RemoveDirectoryA
MoveFileA
FindClose
FindFirstFileA
ExpandEnvironmentStringsA
OpenFile
MultiByteToWideChar
GetFileAttributesA
OutputDebugStringA
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
VirtualAlloc
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
CloseHandle
GetCPInfo
GetACP
GetOEMCP
FreeLibrary
LoadLibraryA
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetFileType
lstrlenA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetStdHandle
FlushFileBuffers
InterlockedDecrement
InterlockedIncrement
CreateFileA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetFilePointer
SetEndOfFile
ReadFile
GetLocaleInfoA
GetLocaleInfoW
GetSystemDirectoryA
WideCharToMultiByte
GetProcessHeap
CopyFileA
WritePrivateProfileStringA
GetLastError
lstrcpyA
lstrcatA
GetVersionExA
GetCurrentThreadId
TlsSetValue
GetStartupInfoA

user32

wvsprintfA
LoadStringA
CharNextA
CharPrevA

advapi32

RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyA

Exports

Exports

?DirExists@@YGHPBD@Z
?MyShellLinkBuildPath@@YGHPBDH00PAD@Z
?MyShellLinkCreate@@YGHPBD0000HH0PAD@Z
Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion

Sections

.text
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/NAV/NAVINST95.DLL
.dll windows:4 windows x86 arch:x86

3b738d07ef80743a874d41bc74642a86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetFilePointer
ReadFile
GetFileSize
CreateFileA
FindNextFileA
FindFirstFileA
WriteFile
DeleteFileA
SetFileAttributesA
CopyFileA
GetLastError
_lclose
_lread
_llseek
CloseHandle
SetEndOfFile
lstrlenA
GetEnvironmentVariableA
GetVersion
FindClose
GetCommandLineA
lstrcmpiA
RemoveDirectoryA
WaitForSingleObject
CreateProcessA
GetShortPathNameA
WritePrivateProfileStringA
MoveFileExA
GetVersionExA
OutputDebugStringA
FlushFileBuffers
GetWindowsDirectoryA
lstrcpyA
GetLocalTime
FreeLibrary
LoadLibraryA
GetProcAddress
_lopen
IsDBCSLeadByte
lstrcatA
LCMapStringA
MultiByteToWideChar
GetLocaleInfoW
GetLocaleInfoA
GetSystemDirectoryA
WideCharToMultiByte
SetStdHandle
GetEnvironmentStringsW
GetStringTypeA
CreateDirectoryA
GetTempFileNameA
GetPrivateProfileStringA
GetPrivateProfileSectionA
GetPrivateProfileSectionNamesA
GetFileAttributesA
HeapFree
GetModuleHandleA
HeapAlloc
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
GetStringTypeW
GetStdHandle
GetFileType
LCMapStringW
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetEnvironmentStrings
FreeEnvironmentStringsW
GetStartupInfoA
TerminateProcess
GetCurrentProcess
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA

user32

wsprintfA
CharToOemA
FindWindowA
PostMessageA
RegisterWindowMessageA
CharNextA
GetKeyboardType
wvsprintfA
LoadStringA
CharPrevA

advapi32

RegEnumValueA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegSetValueExA
RegDeleteValueA
RegCreateKeyExA
RegEnumKeyExA
RegQueryInfoKeyA
RegDeleteKeyA

Exports

Exports

BackupRegistry
CopyVirusDefinitionFiles
FixUpNECConfigSys
FridayScan
GetBootDir
GetDefsDirectory
GetNavStartInfo
GetUsageCount
IsFileLoaded
IsOEMPersonalityDLL
IsScheduleRunning
MachineIsNEC
MyCharToOem
RemoveAPUI
RemoveLine
RemoveSched
RemoveScheduledScans
SetNavStartInfo
StringContainsDBCSChars
UninstInitialize
UninstUnInitialize
UninstallVirusDefinitions

Sections

.text
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 94KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/NECKBD/MIGRATE.DLL
.dll windows:4 windows x86 arch:x86

7c000861fe8f7d8f249df48a558553d6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcessHeap
HeapAlloc
SetLastError
FindResourceExA
HeapFree
WideCharToMultiByte
GetLastError
GetUserDefaultLangID
lstrcatA
lstrcpyA
DisableThreadLibraryCalls
LoadResource
SizeofResource
GetCurrentProcess
GetEnvironmentStrings
FreeEnvironmentStringsW
SetFilePointer
RtlUnwind
GetCommandLineA
GetVersion
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
ExitProcess
TerminateProcess
WritePrivateProfileStringA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
MultiByteToWideChar
SetStdHandle
LeaveCriticalSection
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
WriteFile
SetUnhandledExceptionFilter
IsBadCodePtr
InitializeCriticalSection
EnterCriticalSection
LCMapStringA
VirtualAlloc
GetStringTypeA
GetStringTypeW
LCMapStringW
GetProcAddress
LoadLibraryA
FlushFileBuffers
CloseHandle

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

setupapi

SetupOpenLog
SetupCloseLog

Exports

Exports

Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/NECPA/MIGRATE.DLL
.dll windows:4 windows x86 arch:x86

1ec60f585fce6cfe1c7d485b236b2d27

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FindFirstFileA
GetUserDefaultLangID
GetLastError
WideCharToMultiByte
FindNextFileA
FindClose
GetSystemDirectoryA
HeapAlloc
GetProcessHeap
SizeofResource
LoadResource
FindResourceExA
RemoveDirectoryA
GetWindowsDirectoryA
lstrcmpA
DisableThreadLibraryCalls
lstrcpyA
GetPrivateProfileStringA
lstrcatA
DeleteFileA
SetLastError
HeapFree
TlsAlloc
HeapDestroy
HeapCreate
LCMapStringA
RtlUnwind
GetCommandLineA
GetVersion
GetCurrentThreadId
TlsSetValue
WritePrivateProfileStringA
TlsFree
TlsGetValue
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
LCMapStringW
VirtualFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA

advapi32

RegEnumValueA
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
RegQueryInfoKeyA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

setupapi

SetupCloseLog
SetupOpenLog

Exports

Exports

Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 120KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/NECWPS/MIGRATE.DLL
.dll windows:4 windows x86 arch:x86

b0f9397c2d7c2b3afc084fcfe98481c4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcessHeap
FindResourceExA
DisableThreadLibraryCalls
FindClose
FindFirstFileA
lstrcmpA
lstrcatA
GetSystemDirectoryA
lstrcpyA
GetWindowsDirectoryA
SizeofResource
LoadResource
MoveFileA
SetFilePointer
ReadFile
WriteFile
CloseHandle
CreateFileA
FindNextFileA
SetFileAttributesA
GetPrivateProfileIntA
HeapAlloc
HeapFree
SetLastError
WideCharToMultiByte
GetLastError
GetUserDefaultLangID
GetPrivateProfileStringA
RemoveDirectoryA
DeleteFileA
TlsGetValue
GetEnvironmentStringsW
GetEnvironmentStrings
RtlUnwind
GetCommandLineA
GetVersion
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
WritePrivateProfileStringA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetCPInfo
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA

user32

wsprintfA

advapi32

RegDeleteKeyA
RegDeleteValueA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
RegEnumKeyExA

setupapi

SetupOpenLog
SetupCloseLog

Exports

Exports

Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/OCTOPUS/MIGRATE.DLL
.dll windows:4 windows x86 arch:x86

5de6978018ec787c0291b6fdfa12477a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCommandLineA
HeapAlloc
HeapFree
RaiseException
HeapSize
HeapReAlloc
ExitProcess
TerminateProcess
GetACP
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
RtlUnwind
GetEnvironmentStrings
GetProcessVersion
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
TlsAlloc
InitializeCriticalSection
LocalFree
LocalAlloc
GetModuleFileNameA
lstrcpynA
GetLastError
SetLastError
GetWindowsDirectoryA
WritePrivateProfileStringA
WriteFile
GetCurrentProcess
GetOEMCP
GetCPInfo
GlobalFlags
lstrcmpA
GetEnvironmentStringsW
FreeLibrary
LoadLibraryA
DeleteFileA
lstrcpyA
HeapDestroy
RemoveDirectoryA
GlobalAddAtomA
GlobalGetAtomNameA
lstrcmpiA
GetModuleHandleA
GlobalFindAtomA
GlobalDeleteAtom
GetProcAddress
GetCurrentThreadId
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
GetVersion
lstrlenA
TlsSetValue
TlsGetValue
LocalReAlloc
GlobalReAlloc
EnterCriticalSection
GlobalAlloc
TlsFree
GlobalLock
LeaveCriticalSection
GlobalFree
GlobalHandle
GlobalUnlock
HeapCreate
DeleteCriticalSection
VirtualFree
FreeEnvironmentStringsW
lstrcatA

user32

GetClientRect
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
PostMessageA
LoadIconA
SetWindowTextA
LoadCursorA
GetSysColorBrush
ReleaseDC
GetDC
GetClassNameA
PtInRect
ClientToScreen
PostQuitMessage
DestroyMenu
TabbedTextOutA
DrawTextA
GrayStringA
GetCapture
WinHelpA
CopyRect
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
DestroyWindow
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
RegisterWindowMessageA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
DispatchMessageA
GetKeyState
CallNextHookEx
PeekMessageA
SetWindowsHookExA
LoadStringA
GetTopWindow
GetClassInfoA
UnhookWindowsHookEx
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
SendMessageA
EnableWindow
MessageBoxA
SystemParametersInfoA
SetWindowPos

gdi32

CreateBitmap
SetTextColor
SetBkColor
GetClipBox
GetDeviceCaps
DeleteObject
GetObjectA
SaveDC
DeleteDC
SelectObject
GetStockObject
RestoreDC
SetMapMode
OffsetViewportOrgEx
SetViewportExtEx
SetViewportOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
SetWindowExtEx
PtVisible
RectVisible
ExtTextOutA
Escape
TextOutA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

comctl32

ord17

Exports

Exports

Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion

Sections

.text
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/OEWAB/MIGRATE.DLL
.dll windows:5 windows x86 arch:x86

b4766426180cb99bb9c9b0088c3d54b4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

DeleteFileA
GetFileAttributesA
GetWindowsDirectoryA
lstrcpyA
GetSystemDirectoryA
DisableThreadLibraryCalls
lstrlenA
WritePrivateProfileStructA
WritePrivateProfileStringA
GetLastError
WideCharToMultiByte
GetPrivateProfileStructA
GetPrivateProfileStringA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GlobalAlloc
SetFileAttributesA
HeapCreate
VirtualFree
GetModuleFileNameA
lstrcpynA
GetACP
GetOEMCP
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
HeapAlloc
HeapFree
VirtualAlloc
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetProcAddress
LoadLibraryA
lstrcmpA
GlobalFree
ExpandEnvironmentStringsA
GetStartupInfoA
HeapDestroy
GetCPInfo

user32

CharPrevA
LoadStringA
wsprintfA

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegSetValueExA
RegCreateKeyExA

Exports

Exports

Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/PCANYW/AWDDI.DLL
.dll windows:5 windows x86 arch:x86

4868f9cd7a21ae2e99273b928adc5311

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

win32k.sys

EngAllocMem
EngLoadImage

Sections

.text
Size: 224B - Virtual size: 224B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 32B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 96B - Virtual size: 94B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 992B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 32B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/PCANYW/AWGINA.DLL
.dll windows:4 windows x86 arch:x86

1bf1d53fc286e53c164e9234262c49e3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpyW
GetVersionExW
GetCurrentProcessId
lstrcmpiW
CreateFileW
ResetEvent
GetSystemDirectoryW
GetModuleFileNameW
lstrcatW
Sleep
DeviceIoControl
MoveFileExW
CloseHandle
WaitForMultipleObjects
DisableThreadLibraryCalls
FreeLibrary
TerminateThread
SetEvent
WaitForSingleObject
GetProcAddress
LoadLibraryW
GetLastError
CreateThread
CreateEventW
OpenEventW
CopyFileW
lstrlenW

user32

MessageBeep
CloseDesktop
GetUserObjectInformationW
OpenInputDesktop
MessageBoxW
LoadStringW

advapi32

OpenSCManagerW
OpenServiceW
DeregisterEventSource
CloseServiceHandle
RegCreateKeyExW
QueryServiceConfigW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegCloseKey
RegisterEventSourceW
RegDeleteValueW
CreateProcessAsUserW
RegFlushKey
ReportEventW

msvcrt

wcsstr
wcscpy
_adjust_fdiv
free
malloc
_wcslwr
_initterm
_except_handler3
wcscat
wcslen

Exports

Exports

WlxActivateUserShell
WlxDisplayLockedNotice
WlxDisplayNotice
WlxDisplaySASNotice
WlxDisplayStatusMessage
WlxGetStatusMessage
WlxInitialize
WlxIsLockOk
WlxIsLogoffOk
WlxLoggedOnSAS
WlxLoggedOutSAS
WlxLogoff
WlxNegotiate
WlxNetworkProviderLoad
WlxRemoveStatusMessage
WlxScreenSaverNotify
WlxShutdown
WlxStartApplication
WlxWkstaLockedSAS

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/PCANYW/AWMON.DLL
.dll windows:4 windows x86 arch:x86

39e2d9963b8610553d5d3384e70d50c1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

ntdll

wcscpy
RtlUnwind
wcslen

kernel32

GlobalFree
LoadLibraryW
EnterCriticalSection
SetLastError
InitializeCriticalSection
FreeLibrary
LeaveCriticalSection
DisableThreadLibraryCalls
GetLastError
DeviceIoControl
CreateFileW
ResetEvent
CloseHandle
CreateEventA
CreateEventW
OutputDebugStringW
GlobalAlloc
WaitForMultipleObjects

advapi32

RegCloseKey
RegCreateKeyExW
RegQueryValueExW
RegSetValueExW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor

user32

LoadStringW
GetDesktopWindow
MessageBoxW
wsprintfW

spoolss

SetJobW
ClosePrinter
OpenPrinterW

Exports

Exports

AddPortW
ClosePort
ConfigurePortW
DeletePortW
DllMain
EndDocPort
EnumPortsW
InitializeMonitor
InitializePrintMonitor
OpenPort
ReadPort
StartDocPort
WritePort

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 316B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 338B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 402B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/PCANYW/AWVID5.DLL
.dll windows:5 windows x86 arch:x86

304b3b09b4e3b7321b843927693c48d4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

win32k.sys

EngPaint
EngFreeMem
EngFindImageProcAddress
EngLoadImage
EngUnloadImage
EngDeviceIoControl
EngAssociateSurface
PATHOBJ_vGetBounds
EngStrokePath
EngFillPath
EngStrokeAndFillPath
EngAllocMem
EngBitBlt
EngCopyBits
EngStretchBlt
EngTextOut
EngGradientFill
EngAlphaBlend
EngTransparentBlt
CLIPOBJ_bEnum
CLIPOBJ_cEnumStart

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 512B - Virtual size: 508B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 576B - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/PCANYW/DRIVERS/AW_HOST5.SYS
.sys windows:5 windows x86 arch:x86

900c2600d1c1580b407b38413d17bce4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntoskrnl.exe

RtlInitUnicodeString
_except_handler3
IoDeleteSymbolicLink
IofCompleteRequest
IoCreateDevice
IoReleaseCancelSpinLock
InterlockedExchange
ExfInterlockedRemoveHeadList
IoAcquireCancelSpinLock
IofCallDriver
PoStartNextPowerIrp
PoCallDriver
ObfDereferenceObject
IoAttachDeviceToDeviceStack
IoGetDeviceObjectPointer
IoDetachDevice
RtlGUIDFromString
IoGetDeviceProperty
KeInitializeSpinLock
wcslen
wcscpy
ExFreePool
ExfInterlockedInsertTailList
IoDeleteDevice
IoCreateSymbolicLink
ZwDeleteKey
RtlCompareUnicodeString
IoBuildDeviceIoControlRequest
IoGetAttachedDeviceReference
ZwCreateFile
KeQueryTimeIncrement
RtlExtendedLargeIntegerDivide
RtlExtendedIntegerMultiply
KeTickCount
ZwCreateKey
ZwOpenKey
ZwSetValueKey
ZwQueryValueKey
ZwFlushKey
ZwMapViewOfSection
ObReferenceObjectByHandle
ZwOpenSection
MmGetPhysicalAddress
ZwUnmapViewOfSection
ExAllocatePoolWithTag
ZwClose
wcscat

hal

KfAcquireSpinLock
KfReleaseSpinLock

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 928B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/PCANYW/DRIVERS/GERNUWA.SYS
.sys windows:4 windows x86 arch:x86

5a5f5803ade52b1427bcdb3cdbf6e37d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntoskrnl.exe

ZwOpenKey
wcslen
wcscpy
ExFreePool
ZwClose
ZwDeleteKey
wcscat
RtlCompareUnicodeString
ZwCreateKey
RtlInitUnicodeString
ZwSetValueKey
ExAllocatePoolWithTag
ZwQueryValueKey
ZwDeleteValueKey
_wcsicmp
ZwFlushKey
RtlUnwind

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 32B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 416B - Virtual size: 386B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 896B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 544B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/PCANYW/HOST.HUF
I386/WIN9XMIG/PCANYW/MIGRATE.DLL
.dll windows:4 windows x86 arch:x86

99d60a5fc807a7fb73d1215483ce998e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord823
ord354
ord665
ord825

msvcrt

malloc
_adjust_fdiv
__CxxFrameHandler
_initterm
_mbschr
_except_handler3
calloc
_stricmp
free
toupper
atoi
wcslen

kernel32

CopyFileA
GetLastError
WideCharToMultiByte
lstrcpyA
lstrcatA
lstrlenA
WritePrivateProfileStringA
HeapAlloc
GetProcessHeap
GetSystemDirectoryA
CloseHandle
GetFileSize
CreateFileA

user32

wsprintfA
LoadStringA

winspool.drv

AddMonitorA

advapi32

RegQueryValueExA
RegCreateKeyExA
RegEnumKeyExA
RegOpenKeyExA
CloseServiceHandle
RegSetValueExA
RegCloseKey
ControlService
DeleteService
QueryServiceStatus
OpenServiceA
QueryServiceConfigA
OpenSCManagerA
CreateServiceA

Exports

Exports

Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/PCANYW/PCANYLOG.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 4KB - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/PCANYW/V8/AWDDI.DLL
.dll windows:5 windows x86 arch:x86

4868f9cd7a21ae2e99273b928adc5311

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

win32k.sys

EngAllocMem
EngLoadImage

Sections

.text
Size: 224B - Virtual size: 224B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 32B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 96B - Virtual size: 94B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 32B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/PCANYW/V8/AWGINA.DLL
.dll windows:4 windows x86 arch:x86

d4f252585c89ae1686d3feaa24d72697

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcmpiW
lstrcpyW
GetVersionExW
RtlUnwind
HeapFree
HeapAlloc
GetCommandLineA
GetModuleHandleA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
VirtualAlloc
MultiByteToWideChar
LCMapStringA
WideCharToMultiByte
LCMapStringW
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
CreateFileW
GetCurrentProcessId
SetHandleCount
GetFileType
GetStdHandle
DisableThreadLibraryCalls
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WriteFile
LoadLibraryA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetLocaleInfoW
FlushFileBuffers
SetStdHandle
SetFilePointer
ResetEvent
Sleep
WaitForMultipleObjects
SetEvent
DeviceIoControl
FreeLibrary
CloseHandle
WaitForSingleObject
TerminateThread
GetProcAddress
LoadLibraryW
GetLastError
CreateThread
OpenEventW
CreateEventW
TlsGetValue
GetStartupInfoA

user32

LoadStringW
MessageBoxW
OpenInputDesktop
GetUserObjectInformationW
CloseDesktop
MessageBeep

advapi32

OpenServiceW
QueryServiceConfigW
OpenSCManagerW
RegCreateKeyExW
RegSetValueExW
CloseServiceHandle
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
SetSecurityDescriptorDacl
CreateProcessAsUserW
InitializeSecurityDescriptor
ReportEventW
RegisterEventSourceW
DeregisterEventSource
RegFlushKey
RegDeleteValueW

Exports

Exports

WlxActivateUserShell
WlxDisplayLockedNotice
WlxDisplayNotice
WlxDisplaySASNotice
WlxDisplayStatusMessage
WlxGetStatusMessage
WlxInitialize
WlxIsLockOk
WlxIsLogoffOk
WlxLoggedOnSAS
WlxLoggedOutSAS
WlxLogoff
WlxNegotiate
WlxNetworkProviderLoad
WlxRemoveStatusMessage
WlxScreenSaverNotify
WlxShutdown
WlxStartApplication
WlxWkstaLockedSAS

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/PCANYW/V8/AWMON.DLL
.dll windows:3 windows x86 arch:x86

7ab1ef464832106d9de55ee04a22983e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

crtdll

_global_unwind2
wcscpy
_local_unwind2
wcslen

kernel32

GlobalAlloc
LeaveCriticalSection
LoadLibraryW
EnterCriticalSection
GetLastError
DeviceIoControl
FreeLibrary
ResetEvent
CreateFileW
CreateEventA
CreateEventW
GlobalFree
SetLastError
InitializeCriticalSection
DisableThreadLibraryCalls
OutputDebugStringW
CloseHandle
WaitForMultipleObjects

advapi32

RegCreateKeyExW
RegQueryValueExW
InitializeSecurityDescriptor
RegSetValueExW
RegCloseKey
SetSecurityDescriptorDacl

user32

GetDesktopWindow
wsprintfW
MessageBoxW
LoadStringW

spoolss

SetJobW
ClosePrinter
OpenPrinterW

Exports

Exports

AddPortW
ClosePort
ConfigurePortW
DeletePortW
DllMain
EndDocPort
EnumPortsW
InitializeMonitor
InitializePrintMonitor
OpenPort
ReadPort
StartDocPort
WritePort

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 338B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 426B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/PCANYW/V8/AWVID5.DLL
.dll windows:5 windows x86 arch:x86

304b3b09b4e3b7321b843927693c48d4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

win32k.sys

EngPaint
EngFreeMem
EngFindImageProcAddress
EngLoadImage
EngUnloadImage
EngDeviceIoControl
EngAssociateSurface
PATHOBJ_vGetBounds
EngStrokePath
EngFillPath
EngStrokeAndFillPath
EngAllocMem
EngBitBlt
EngCopyBits
EngStretchBlt
EngTextOut
EngGradientFill
EngAlphaBlend
EngTransparentBlt
CLIPOBJ_bEnum
CLIPOBJ_cEnumStart

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 512B - Virtual size: 508B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 576B - Virtual size: 550B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/PCANYW/V8/DRIVERS/AW_HOST.SYS
.sys windows:4 windows x86 arch:x86

38c50226cdd1a16433410d35d7515a77

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntoskrnl.exe

RtlInitUnicodeString
IoDeleteSymbolicLink
IoCreateDevice
IofCompleteRequest
IoReleaseCancelSpinLock
InterlockedExchange
ExfInterlockedRemoveHeadList
IoAcquireCancelSpinLock
IoAttachDevice
IoDetachDevice
IofCallDriver
KeInitializeSpinLock
wcslen
wcscpy
ExFreePool
ExfInterlockedInsertTailList
ZwClose
wcscat
IoDeleteDevice
IoCreateSymbolicLink
IoBuildDeviceIoControlRequest
KeQueryTimeIncrement
RtlExtendedLargeIntegerDivide
RtlExtendedIntegerMultiply
KeTickCount
ZwCreateKey
ZwOpenKey
ZwSetValueKey
ZwQueryValueKey
ZwFlushKey
ZwMapViewOfSection
ObReferenceObjectByHandle
ZwOpenSection
MmGetPhysicalAddress
ZwUnmapViewOfSection
RtlUnwind
ExAllocatePoolWithTag
ZwDeleteKey
RtlCompareUnicodeString

hal

KfAcquireSpinLock
KfReleaseSpinLock

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 32B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/PCANYW/V8/DRIVERS/GERNUWA.SYS
.sys windows:4 windows x86 arch:x86

2e9ac2ea6fae0bd6c2bc1ecd365ca601

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntoskrnl.exe

ZwCreateKey
wcslen
wcscpy
ExFreePool
ZwClose
ZwDeleteKey
wcscat
RtlInitUnicodeString
ZwOpenKey
ZwSetValueKey
ZwQueryValueKey
ExAllocatePoolWithTag
RtlUnwind

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 320B - Virtual size: 298B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 960B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 192B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/PCANYW/V8/PCANYLOG.DLL
.dll windows:4 windows x86 arch:x86

e35528d99e07e868a68d7932cf2c3a81

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_initterm
_adjust_fdiv
malloc
free

kernel32

DisableThreadLibraryCalls
GlobalAlloc
GlobalFree
GetVersion

Sections

.text
Size: 1024B - Virtual size: 611B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 282B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 162B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/PRINT/MIGRATE.DLL
.dll windows:5 windows x86 arch:x86

6e92ca4febb812c39a2eb56b6a47d458

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

msvcrt

vsprintf
_strcmpi
wcscmp
sprintf
isdigit
strncmp
wcslen
wcscpy
atoi

advapi32

RegDeleteValueA
RegEnumKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA

kernel32

GetTempPathA
Sleep
DebugBreak
SetEvent
WritePrivateProfileStringA
WriteFile
WideCharToMultiByte
MultiByteToWideChar
LocalFree
ReadFile
SetFilePointer
FreeLibrary
GetProcAddress
LoadLibraryA
DeleteFileA
CloseHandle
CreateFileA
GetLastError
WaitForSingleObject
FormatMessageA
OpenEventA
CreateThread
CreateEventA
OutputDebugStringA
LocalAlloc
GetSystemDirectoryA
CopyFileA
SetLastError

setupapi

SetupTermDefaultQueueCallback
SetupCloseFileQueue
SetupDefaultQueueCallbackW
SetupDiSetDeviceInstallParamsW
SetupOpenFileQueue
SetupInitDefaultQueueCallbackEx
SetupDiGetDeviceInstallParamsW
SetupCommitFileQueueW
SetupCloseInfFile
SetupGetStringFieldA
SetupGetLineByIndexA
SetupGetLineCountA
SetupOpenInfFileA
SetupDiCallClassInstaller
SetupCloseLog
SetupOpenLog
SetupLogErrorA
SetupDiDestroyDeviceInfoList
SetupDiBuildDriverInfoList
SetupDiSetDeviceInstallParamsA
SetupDiGetDeviceInstallParamsA
SetupOpenAppendInfFileA
SetupDiCreateDeviceInfoList
SetupDiGetDriverInfoDetailA
SetupDiEnumDriverInfoA
SetupFindFirstLineA

user32

LoadStringA
wsprintfA
wvsprintfA

winspool.drv

AddPrinterDriverW
ClosePrinter
AddPrinterA
AddMonitorW
EnumPrintersA
EnumPrinterDriversA
ord202
AddPrinterConnectionA
OpenPrinterA
SetPrinterA
GetPrinterA
EnumMonitorsA

Exports

Exports

Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
ProcessWin9xNetworkPrinters
QueryVersion

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/PRINT/PRTUPG9X.INF
I386/WIN9XMIG/PWS/MIGRATE.DLL
.dll windows:5 windows x86 arch:x86

96eea5110e593697c41aa45d55a74967

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

msvcrt

_onexit
_mbsicmp
printf
_adjust_fdiv
malloc
_initterm
free
_splitpath
strtok
__dllonexit
_mbsrchr
_except_handler3
_mbschr
_mbsinc
_pctype
_ismbcprint
_mbsnextc
_mbscpy
_mbsnicmp
_mbslen
sprintf
vsprintf
_mbsupr
_mbslwr

setupapi

SetupLogErrorA
SetupCloseInfFile
SetupFindNextLine
SetupFindFirstLineA
SetupGetLineTextA
SetupOpenLog
SetupCloseLog
SetupOpenInfFileA

kernel32

GetModuleFileNameA
WideCharToMultiByte
EnterCriticalSection
SetLastError
InitializeCriticalSection
LoadLibraryA
GetLocalTime
WritePrivateProfileStringA
HeapAlloc
HeapFree
GetProcessHeap
DisableThreadLibraryCalls
FormatMessageA
GetLastError
SetEvent
GetPrivateProfileStringA
GetSystemDirectoryA
GetFileAttributesA
CloseHandle
CreateFileA
MultiByteToWideChar
WriteFile
ExpandEnvironmentStringsA
SetFileAttributesA
DeleteFileA
CreateEventA
FreeLibrary
GetProcAddress
LoadLibraryExA
CopyFileA
Sleep
GetWindowsDirectoryA
DeleteCriticalSection
LeaveCriticalSection
MoveFileA

advapi32

RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegEnumValueA
RegQueryInfoKeyA
RegEnumKeyExA
RegOpenKeyA
RegQueryValueExA

user32

LoadStringA
wsprintfA

ole32

CoUninitialize
CoTaskMemAlloc
CoInitialize
CoGetClassObject

Exports

Exports

Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/PWS/SYMBOLS/RETAIL/DLL/MIGRATE.DBG
I386/WIN9XMIG/PWS/SYMBOLS/RETAIL/DLL/MIGRATE.PDB
I386/WIN9XMIG/PWS/SYMBOLS/RETAIL/DLL/MIGRATE.SYM
I386/WIN9XMIG/RUMBA/MIGRATE.DLL
.dll windows:4 windows x86 arch:x86

b9b67b3a96152f7b577670cca9b7b620

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

setupapi

SetupLogErrorA

mfc42

ord2725
ord800
ord4160
ord540
ord6467
ord3953
ord924
ord939
ord922
ord858
ord926
ord537
ord2818
ord561
ord2915
ord860
ord815
ord825
ord3738
ord532
ord823
ord268
ord535
ord5710
ord536
ord1089
ord3922
ord5731
ord2512
ord826
ord2554
ord4486
ord6375
ord4274
ord1116
ord1168
ord4424
ord1176
ord4622
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5714
ord5289
ord5307
ord4698
ord4079
ord5302
ord5300
ord3346
ord2396
ord5199
ord941
ord1567
ord5572
ord600
ord269
ord1578
ord1255
ord1253
ord1570
ord1197
ord1243
ord342
ord1577
ord1575
ord1182

msvcrt

_findfirst
strchr
strstr
_onexit
__dllonexit
_EH_prolog
_mbscmp
sprintf
atol
wcslen
strncpy
__CxxFrameHandler
??1type_info@@UAE@XZ
free
_initterm
malloc
_adjust_fdiv
_chdir
strrchr
_findclose
_stricmp
_strcmpi

kernel32

GetModuleFileNameA
DeleteFileA
FindFirstFileA
FindNextFileA
FindClose
GetFullPathNameA
FindResourceA
LoadResource
LockResource
CreateFileA
SizeofResource
WriteFile
CloseHandle
WideCharToMultiByte
CopyFileA
GetSystemDefaultLCID
GetSystemDirectoryA
GetWindowsDirectoryA
OpenFile
WritePrivateProfileStringA
GetPrivateProfileStringA
GetLastError
RemoveDirectoryA
MultiByteToWideChar
CreateDirectoryA
LocalAlloc
LocalFree
GetEnvironmentVariableA

user32

GetFocus
wsprintfA

advapi32

RegOpenKeyExA
RegCloseKey
RegDeleteKeyA
RegDeleteValueA
RegQueryValueExA
RegEnumKeyExA
RegSetValueExA
RegEnumValueA

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListA

ole32

CoInitialize
CoUninitialize
CoCreateInstance

Exports

Exports

Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion
TESTUP

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/SETUP/JPEGIM32.FLT
.dll windows:4 windows x86 arch:x86

67d02d0f3c9e0ca71261aa492596f3ab

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
FreeLibrary
FindClose
FindFirstFileA
lstrcpyA
LoadLibraryA
UnmapViewOfFile
GlobalSize
lstrcmpA
GetCommandLineA
RtlUnwind
RaiseException
GetModuleHandleA
lstrlenA
DeleteCriticalSection
lstrcatA
InitializeCriticalSection
ExitProcess
WideCharToMultiByte
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
EnterCriticalSection
TlsGetValue
GetFileAttributesA
LeaveCriticalSection
WriteFile
MapViewOfFile
GetStdHandle
GetStartupInfoA
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
HeapFree
GetEnvironmentStrings
GetEnvironmentStringsW
SetUnhandledExceptionFilter
HeapSize
InterlockedDecrement
InterlockedIncrement
SetFilePointer
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetStdHandle
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
GetLocaleInfoA
GetLocaleInfoW
GetProcessHeap
CreateFileMappingA
GetTempPathA
FlushFileBuffers
GetTempFileNameA
GetVersionExA
GetDiskFreeSpaceA
GlobalMemoryStatus
ReadFile
HeapReAlloc
GetFileSize
GlobalHandle
GetTickCount
MulDiv
_llseek
MultiByteToWideChar
GetLastError
_lread
CloseHandle
_lwrite
GlobalUnlock
CreateFileA
HeapAlloc
DeleteFileA
GlobalLock
SetHandleCount
GetVersion
GlobalFree
GlobalAlloc
GetFileType
GetCurrentProcessId
SetLastError
FreeEnvironmentStringsW

user32

CreateDialogParamA
GetClientRect
ClientToScreen
SystemParametersInfoA
GetSystemMetrics
SetWindowPos
LoadStringA
GetWindowRect
IsDialogMessageA
TranslateMessage
DispatchMessageA
SendMessageA
DestroyWindow
GetParent
GetDlgItem
wsprintfA
SetDlgItemTextA
ShowWindow
UpdateWindow
PeekMessageA
GetDC
ReleaseDC
GetActiveWindow
LoadCursorA
SetCursor
ShowCursor

gdi32

GetEnhMetaFileA
SetMapMode
SetWindowOrgEx
SetWindowExtEx
SetStretchBltMode
SetTextColor
DeleteDC
GetDeviceCaps
CreateCompatibleDC
CloseMetaFile
DeleteMetaFile
StretchDIBits
DeleteEnhMetaFile
CloseEnhMetaFile
GetMetaFileA
CreateEnhMetaFileA
SetViewportExtEx
DeleteObject
GetObjectA
EnumEnhMetaFile
SelectObject
GetMetaFileBitsEx
GetEnhMetaFileHeader
PlayEnhMetaFileRecord
CreateDIBSection
PlayMetaFileRecord
GetTextExtentPoint32A
EnumMetaFile
GetWindowExtEx
Escape
GetViewportExtEx
GdiComment
SetBkColor
CreateMetaFileA

advapi32

RegCloseKey
RegOpenKeyExA
RegEnumKeyExA
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA

comctl32

ord17

Exports

Exports

ExportGr
GetFilterInfo
GetFilterPref
ImportGr
MSFFClose
MSFFControl
MSFFGetLine
MSFFOpen
MSFFPutLine
MSFFSeek
RegisterPercentCallback
SetFilterPref

Sections

.text
Size: 212KB - Virtual size: 209KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/SETUP/MIGRATE.DLL
.dll windows:5 windows x86 arch:x86

74ede3d38febc49c78fb745e605d7741

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_DLL

Imports

msvcrt

_atoi64
wcscspn
strtoul
sprintf
sscanf
isalpha
_ismbcalpha
atoi
strrchr
strncpy
_mbsncat
toupper
_wtoi
wcsncmp
swprintf
_ismbclower
_ismbcpunct
_mbspbrk
_adjust_fdiv
malloc
_initterm
free
_mbsnextc
_itoa
_mbscpy
_local_unwind2
_mbslwr
_ultoa
wcscmp
_mbscmp
_mbsnbcpy
setlocale
_mbsstr
_vsnwprintf
_vsnprintf
_except_handler3
_mbsicmp
fwprintf
_iob
fprintf
_snwprintf
_snprintf
_pctype
wcsrchr
wcsncpy
_mbsncpy
printf
_wcslwr
_mbsrchr
_mbsinc
_mbsnicmp
memmove
iswctype
tolower
towlower
_mbctolower
_mbsdec
wcschr
wcslen
_wcsicmp
_ismbblead
strchr
wcscpy
_mbctoupper
_mbslen
_ismbcspace
isspace
_mbschr

kernel32

CreateFileW
FindFirstFileW
GetFileAttributesW
CreateDirectoryA
ReadFile
GetFileSize
GetFullPathNameA
SearchPathA
GetShortPathNameA
GetShortPathNameW
GetFullPathNameW
SearchPathW
FindNextFileA
MapViewOfFile
CreateFileMappingA
SetErrorMode
GetFileAttributesA
UnmapViewOfFile
SetCurrentDirectoryA
GetCurrentDirectoryA
DeleteFileW
FlushFileBuffers
SetEndOfFile
FreeLibrary
LoadLibraryA
GetThreadLocale
GetACP
WideCharToMultiByte
CreateThread
MoveFileA
GetDriveTypeA
GetLogicalDriveStringsA
GetTempPathA
GetTickCount
SetEnvironmentVariableA
lstrlenW
CompareFileTime
lstrcpyA
GlobalFree
GetSystemDefaultLCID
FreeEnvironmentStringsA
GetEnvironmentStrings
ExpandEnvironmentStringsA
GetDiskFreeSpaceA
GetVolumeInformationA
Sleep
CreateMailslotA
InterlockedIncrement
lstrlenA
IsBadHugeWritePtr
IsBadStringPtrA
IsBadHugeReadPtr
_lclose
_lcreat
_lopen
LocalAlloc
LocalReAlloc
_lread
_lwrite
_llseek
GetTempFileNameA
GetPrivateProfileSectionNamesA
FindFirstFileA
FindClose
GetModuleHandleA
HeapReAlloc
ExitProcess
WaitForSingleObject
TerminateProcess
SetEvent
SetFileAttributesA
CreateEventA
GetVersionExA
OutputDebugStringA
DeleteFileA
OutputDebugStringW
SetFilePointer
GetCurrentThreadId
LocalFree
FormatMessageW
FormatMessageA
GetEnvironmentVariableA
SetLastError
HeapAlloc
GetPrivateProfileIntA
IsDBCSLeadByte
WriteFile
GetComputerNameA
CreateFileA
MultiByteToWideChar
GetLastError
QueryPerformanceCounter
DeviceIoControl
BeginUpdateResourceA
EnumResourceNamesA
EndUpdateResourceA
UpdateResourceA
UpdateResourceW
FindResourceW
LoadResource
LockResource
GetMailslotInfo
OpenFileMappingA
WaitForMultipleObjects
OpenEventA
GetSystemInfo
GetCurrentProcess
GetPriorityClass
SetPriorityClass
QueryPerformanceFrequency
RemoveDirectoryA
MulDiv
GetCurrentProcessId
GlobalMemoryStatus
CreateProcessA
GetProfileStringA
WriteProfileStringA
lstrcmpiA
GetModuleFileNameA
GetProcessHeap
DisableThreadLibraryCalls
lstrcpynA
WritePrivateProfileStringA
GetWindowsDirectoryA
CopyFileA
CopyFileW
GetPrivateProfileStringA
CloseHandle
GetProcAddress
LoadLibraryExA
HeapFree

user32

InvalidateRect
GetDlgItemTextA
CheckDlgButton
IsDlgButtonChecked
SendMessageA
GetParent
GetDesktopWindow
EndDialog
GetDC
ShowWindow
EnumWindows
CharNextA
wsprintfA
MessageBoxA
OemToCharBuffA
SetWindowTextA
GetWindowTextA
GetKeyboardType
SetWindowPos
GetSystemMetrics
GetWindowRect
SetCursor
LoadCursorA
OemToCharA
LoadStringA
GetWindowThreadProcessId
PostMessageA
GetDlgItem
ReleaseDC
GetDialogBaseUnits
GetClientRect
DialogBoxParamA
SetFocus
ScreenToClient
CharLowerA
EnableWindow
UpdateWindow
SetDlgItemTextA
IsWindowVisible
GetFocus
GetKeyboardLayoutNameA
CharUpperA
RegisterClassA
GetWindowLongA
SetWindowLongA
DefWindowProcA
GetSysColor
BeginPaint
EndPaint
ScrollWindow
SetScrollInfo
GetScrollInfo
DrawTextA
ClientToScreen

gdi32

CreateDCA
SelectObject
SetBkMode
GetTextExtentPoint32A
StartPage
EndPage
SetMapMode
GetDeviceCaps
GetTextMetricsA
DPtoLP
AbortDoc
EndDoc
DeleteObject
GetObjectA
GetStockObject
CreateFontIndirectA
DeleteDC
GetTextFaceA
StartDocA
MoveToEx
TextOutA
LineTo
SetTextColor
SetBkColor
Rectangle
CreateSolidBrush
CreatePen

advapi32

RegLoadKeyW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegUnLoadKeyA
RegCloseKey
GetUserNameA
RegFlushKey
RegUnLoadKeyW
RegOpenKeyW
RegEnumKeyExA
RegEnumKeyExW
RegQueryInfoKeyW
RegQueryValueA
RegLoadKeyA
RegQueryValueW
RegOpenKeyA
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExW
RegOpenKeyExA
RegQueryInfoKeyA
RegCreateKeyA
RegEnumValueW
RegEnumValueA
RegEnumKeyW
RegEnumKeyA
RegSetValueExA

imagehlp

UnMapAndLoad
ImageRvaToVa
MapAndLoad
ImageDirectoryEntryToData

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
ShellExecuteA

comdlg32

GetSaveFileNameA
PrintDlgA

comctl32

ord17

winmm

waveOutGetNumDevs
mixerGetControlDetailsA
mixerGetDevCapsA
mixerClose
mixerOpen
waveOutGetDevCapsA
mixerGetLineControlsA
mixerGetNumDevs
mixerGetLineInfoA
waveInGetDevCapsA
waveInGetNumDevs

setupapi

SetupGetFieldCount
SetupCloseLog
SetupLogErrorA
SetupOpenLog
SetupGetLineByIndexA
SetupFindNextLine
SetupDecompressOrCopyFileA
StringTableGetExtraData
StringTableSetExtraData
SetupGetInfInformationA
SetupGetLineCountA
RegistryDelnode
SetupGetIntField
SetupGetMultiSzFieldA
SetupGetStringFieldA
SetupGetLineTextA
SetupOpenAppendInfFileA
SetupCloseInfFile
SetupOpenInfFileA
StringTableLookUpStringEx
StringTableInitializeEx
StringTableDestroy
SetupLogErrorW
StringTableAddStringEx
SetupFindFirstLineA
StringTableInitialize
StringTableAddString
StringTableLookUpString

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

ole32

CoUninitialize
CoCreateInstance
CoInitialize

Exports

Exports

Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion

Sections

.text
Size: 328KB - Virtual size: 328KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XMIG/TRANSACT/MIGRATE.DLL
.dll windows:5 windows x86 arch:x86

d1f7a20c964b353fdf669eebe0287c81

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

user32

wsprintfA
CharPrevExA
CharNextExA
LoadStringA

kernel32

WritePrivateProfileStringA
RemoveDirectoryA
ExpandEnvironmentStringsA
GetSystemDirectoryA
SetFileAttributesA
CloseHandle
TerminateThread
GetLastError
SetEvent
DeleteFileA
MoveFileExA
CreateThread
lstrcpyA
lstrlenA
GetExitCodeProcess
WaitForSingleObject
Sleep
FindClose
FindNextFileA
lstrcmpA
FindFirstFileA
FormatMessageA
OpenEventA
lstrcmpiA
CreateProcessA

ole32

CoUninitialize
CoInitialize
CoCreateInstance

oleaut32

SysAllocString
VariantClear
VariantInit
SysFreeString

advapi32

RegDeleteValueA
RegQueryValueExA
RegEnumKeyA
RegCloseKey
RegOpenKeyA
RegOpenKeyExA

mfc42

ord823
ord825

msvcrt

sprintf
_adjust_fdiv
_wcsicmp
free
_initterm
malloc
strrchr
__CxxFrameHandler
_itoa
_access

setupapi

SetupOpenLog
SetupGetLineTextA
SetupCloseLog
SetupLogErrorA

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListA

Exports

Exports

Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XUPG/CABINET.DLL
.dll windows:5 windows x86 arch:x86

ea4cbf3c305bfb43c7e36a485e58acb4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

CreateDirectoryA
ReadFile
WriteFile
CloseHandle
SetFilePointer
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
lstrcatA
lstrcpyA
lstrlenA
CreateFileA
SetFileAttributesA
lstrcmpiA
GetLastError
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
DeleteFileA

ole32

CoTaskMemFree
CoTaskMemAlloc

Exports

Exports

DeleteExtractedFiles
DllGetVersion
Extract
FCIAddFile
FCICreate
FCIDestroy
FCIFlushCabinet
FCIFlushFolder
FDICopy
FDICreate
FDIDestroy
FDIIsCabinet
GetDllVersion

Sections

.text
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XUPG/CFGMGR32.DLL
.dll windows:4 windows x86 arch:x86

efc69d5a302db924083b83be9353c1c3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcessHeap
lstrcatA
lstrcpyA
HeapFree
HeapAlloc
WideCharToMultiByte
RtlUnwind
GlobalAlloc
GetExitCodeThread
DeviceIoControl
CreateThread
CreateFileA
CloseHandle
GlobalFree
lstrlenA
RtlMoveMemory
MultiByteToWideChar

user32

CharUpperA
MsgWaitForMultipleObjects
PeekMessageA

advapi32

RegQueryInfoKeyA
RegDeleteKeyA
RegSetValueExA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
RegEnumKeyA
RegCreateKeyExA

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

CM_Add_Empty_Log_Conf
CM_Add_Empty_Log_Conf_Ex
CM_Add_IDA
CM_Add_IDW
CM_Add_ID_ExA
CM_Add_ID_ExW
CM_Add_Range
CM_Add_Res_Des
CM_Add_Res_Des_Ex
CM_Connect_MachineA
CM_Connect_MachineW
CM_Create_DevNodeA
CM_Create_DevNodeW
CM_Create_DevNode_ExA
CM_Create_DevNode_ExW
CM_Create_Range_List
CM_Delete_Class_Key
CM_Delete_Class_Key_Ex
CM_Delete_DevNode_Key
CM_Delete_DevNode_Key_Ex
CM_Delete_Range
CM_Detect_Resource_Conflict
CM_Detect_Resource_Conflict_Ex
CM_Disable_DevNode
CM_Disable_DevNode_Ex
CM_Disconnect_Machine
CM_Dup_Range_List
CM_Enable_DevNode
CM_Enable_DevNode_Ex
CM_Enumerate_Classes
CM_Enumerate_Classes_Ex
CM_Enumerate_EnumeratorsA
CM_Enumerate_EnumeratorsW
CM_Enumerate_Enumerators_ExA
CM_Enumerate_Enumerators_ExW
CM_Find_Range
CM_First_Range
CM_Free_Log_Conf
CM_Free_Log_Conf_Ex
CM_Free_Log_Conf_Handle
CM_Free_Range_List
CM_Free_Res_Des
CM_Free_Res_Des_Ex
CM_Free_Res_Des_Handle
CM_Get_Child
CM_Get_Child_Ex
CM_Get_Class_Key_NameA
CM_Get_Class_Key_NameW
CM_Get_Class_Key_Name_ExA
CM_Get_Class_Key_Name_ExW
CM_Get_Class_NameA
CM_Get_Class_NameW
CM_Get_Class_Name_ExA
CM_Get_Class_Name_ExW
CM_Get_Depth
CM_Get_Depth_Ex
CM_Get_DevNode_Registry_PropertyA
CM_Get_DevNode_Registry_PropertyW
CM_Get_DevNode_Registry_Property_ExA
CM_Get_DevNode_Registry_Property_ExW
CM_Get_DevNode_Status
CM_Get_DevNode_Status_Ex
CM_Get_Device_IDA
CM_Get_Device_IDW
CM_Get_Device_ID_ExA
CM_Get_Device_ID_ExW
CM_Get_Device_ID_ListA
CM_Get_Device_ID_ListW
CM_Get_Device_ID_List_ExA
CM_Get_Device_ID_List_ExW
CM_Get_Device_ID_List_SizeA
CM_Get_Device_ID_List_SizeW
CM_Get_Device_ID_List_Size_ExA
CM_Get_Device_ID_List_Size_ExW
CM_Get_Device_ID_Size
CM_Get_Device_ID_Size_Ex
CM_Get_First_Log_Conf
CM_Get_First_Log_Conf_Ex
CM_Get_Global_State
CM_Get_Global_State_Ex
CM_Get_HW_Prof_FlagsA
CM_Get_HW_Prof_FlagsW
CM_Get_HW_Prof_Flags_ExA
CM_Get_HW_Prof_Flags_ExW
CM_Get_Hardware_Profile_InfoA
CM_Get_Hardware_Profile_InfoW
CM_Get_Hardware_Profile_Info_ExA
CM_Get_Hardware_Profile_Info_ExW
CM_Get_Interface_Device_AliasA
CM_Get_Interface_Device_AliasW
CM_Get_Interface_Device_Alias_ExA
CM_Get_Interface_Device_Alias_ExW
CM_Get_Interface_Device_ListA
CM_Get_Interface_Device_ListW
CM_Get_Interface_Device_List_ExA
CM_Get_Interface_Device_List_ExW
CM_Get_Interface_Device_List_SizeA
CM_Get_Interface_Device_List_SizeW
CM_Get_Interface_Device_List_Size_ExA
CM_Get_Interface_Device_List_Size_ExW
CM_Get_Next_Log_Conf
CM_Get_Next_Log_Conf_Ex
CM_Get_Next_Res_Des
CM_Get_Next_Res_Des_Ex
CM_Get_Parent
CM_Get_Parent_Ex
CM_Get_Res_Des_Data
CM_Get_Res_Des_Data_Ex
CM_Get_Res_Des_Data_Size
CM_Get_Res_Des_Data_Size_Ex
CM_Get_Sibling
CM_Get_Sibling_Ex
CM_Get_Version
CM_Get_Version_Ex
CM_Intersect_Range_List
CM_Invert_Range_List
CM_Locate_DevNodeA
CM_Locate_DevNodeW
CM_Locate_DevNode_ExA
CM_Locate_DevNode_ExW
CM_Merge_Range_List
CM_Modify_Res_Des
CM_Modify_Res_Des_Ex
CM_Move_DevNode
CM_Move_DevNode_Ex
CM_Next_Range
CM_Open_Class_KeyA
CM_Open_Class_KeyW
CM_Open_Class_Key_ExA
CM_Open_Class_Key_ExW
CM_Open_DevNode_Key
CM_Open_DevNode_Key_Ex
CM_Query_Arbitrator_Free_Data
CM_Query_Arbitrator_Free_Data_Ex
CM_Query_Arbitrator_Free_Size
CM_Query_Arbitrator_Free_Size_Ex
CM_Query_Remove_SubTree
CM_Query_Remove_SubTree_Ex
CM_Reenumerate_DevNode
CM_Reenumerate_DevNode_Ex
CM_Register_Device_Driver
CM_Register_Device_Driver_Ex
CM_Register_Interface_DeviceA
CM_Register_Interface_DeviceW
CM_Register_Interface_Device_ExA
CM_Register_Interface_Device_ExW
CM_Remove_SubTree
CM_Remove_SubTree_Ex
CM_Remove_Unmarked_Children
CM_Remove_Unmarked_Children_Ex
CM_Reset_Children_Marks
CM_Reset_Children_Marks_Ex
CM_Run_Detection
CM_Run_Detection_Ex
CM_Set_DevNode_Registry_PropertyA
CM_Set_DevNode_Registry_PropertyW
CM_Set_DevNode_Registry_Property_ExA
CM_Set_DevNode_Registry_Property_ExW
CM_Set_HW_Prof
CM_Set_HW_Prof_Ex
CM_Set_HW_Prof_FlagsA
CM_Set_HW_Prof_FlagsW
CM_Set_HW_Prof_Flags_ExA
CM_Set_HW_Prof_Flags_ExW
CM_Setup_DevNode
CM_Setup_DevNode_Ex
CM_Test_Range_Available
CM_Uninstall_DevNode
CM_Uninstall_DevNode_Ex
CM_Unregister_Interface_DeviceA
CM_Unregister_Interface_DeviceW
CM_Unregister_Interface_Device_ExA
CM_Unregister_Interface_Device_ExW

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 964B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XUPG/E95ONLY.DAT
I386/WIN9XUPG/IMAGEHLP.DLL
.dll windows:4 windows x86 arch:x86

6e8082c68a95a864a8b1c0dcec090a34

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

GetFileAttributesA
MapViewOfFileEx
UnmapViewOfFile
FlushViewOfFile
CreateFileMappingA
GetFileSize
SetFileTime
SystemTimeToFileTime
GetSystemTime
GetLastError
WideCharToMultiByte
MapViewOfFile
CreateFileA
SetLastError
DeleteFileA
SetEndOfFile
SetFilePointer
WriteFile
SetFileAttributesA
CopyFileA
ReadFile
GetEnvironmentVariableA
GetFullPathNameA
FindClose
FindNextFileA
FindFirstFileA
CreateDirectoryA
CloseHandle
HeapDestroy
HeapCreate
DisableThreadLibraryCalls
HeapAlloc
HeapFree
SearchPathA
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetCurrentProcessId
VirtualFree
VirtualProtect
VirtualAlloc
lstrlenA
ReadProcessMemory
RtlUnwind
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Exports

Exports

BindImage
BindImageEx
CheckSumMappedFile
EnumerateLoadedModules
FindDebugInfoFile
FindExecutableImage
GetImageConfigInformation
GetImageUnusedHeaderBytes
GetTimestampForLoadedLibrary
ImageAddCertificate
ImageDirectoryEntryToData
ImageEnumerateCertificates
ImageGetCertificateData
ImageGetCertificateHeader
ImageGetDigestStream
ImageLoad
ImageNtHeader
ImageRemoveCertificate
ImageRvaToSection
ImageRvaToVa
ImageUnload
ImagehlpApiVersion
ImagehlpApiVersionEx
MakeSureDirectoryPathExists
MapAndLoad
MapDebugInformation
MapFileAndCheckSumA
MapFileAndCheckSumW
MarkImageAsRunFromSwap
ReBaseImage
RemovePrivateCvSymbolic
RemoveRelocations
SearchTreeForFile
SetImageConfigInformation
SplitSymbols
StackWalk
SymCleanup
SymEnumerateModules
SymEnumerateSymbols
SymFunctionTableAccess
SymGetModuleBase
SymGetModuleInfo
SymGetOptions
SymGetSearchPath
SymGetSymFromAddr
SymGetSymFromName
SymGetSymNext
SymGetSymPrev
SymInitialize
SymLoadModule
SymRegisterCallback
SymSetOptions
SymSetSearchPath
SymUnDName
SymUnloadModule
TouchFileTimes
UnDecorateSymbolName
UnMapAndLoad
UnmapDebugInformation
UpdateDebugInfoFile
UpdateDebugInfoFileEx

Sections

.text
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XUPG/ISMIG.DLL
.dll windows:4 windows x86 arch:x86

f1db0b06c6c82bb65a803abfb2c43e18

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

MultiByteToWideChar
ReadFile
CreateFileA
GetLastError
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetFileSize
DeleteFileA
MoveFileA
WriteFile
SetFilePointer
FlushFileBuffers
GlobalUnlock
lstrlenA
lstrcpyA
GlobalFree
GlobalLock
GlobalAlloc
GetTempFileNameA
EnterCriticalSection
Sleep
InitializeCriticalSection
InterlockedExchange
DeleteCriticalSection
LeaveCriticalSection
RtlUnwind
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
GetVersion
HeapFree
RaiseException
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
HeapAlloc
ExitProcess
WideCharToMultiByte
CloseHandle
LCMapStringA
LCMapStringW
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetStringTypeA
GetStringTypeW
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA

Exports

Exports

ISUGetAllStrings
ISUMigrate

Sections

.text
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XUPG/MIGDB.INF
I386/WIN9XUPG/MSDBI.DLL
.dll windows:4 windows x86 arch:x86

ea0d72b2422bec7ab9c21eb20a5d76c4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

msvcrt

bsearch
_memicmp
strchr
strncpy
_strnicmp
_mbsnbcpy
_mbstok
time
memmove
_close
_read
_access
sprintf
__p__osver
_lseek
_errno
_write
_chsize
__dllonexit
_onexit
free
_initterm
malloc
_adjust_fdiv
_mbsrchr
_fullpath
_mbsicmp
qsort
_splitpath
_makepath
_purecall
printf
__p__iob
fflush
_sopen
_open_osfhandle

kernel32

DisableThreadLibraryCalls
CreateFileA
CreateFileMappingA
CloseHandle
CopyFileA
VirtualAlloc
VirtualFree
HeapDestroy
HeapCreate
HeapFree
HeapAlloc

Exports

Exports

??0SymTiIter@@QAE@PAUSYMTYPE@@@Z
?ExportValidateInterface@PDB@@SAHK@Z
?Open@PDB@@SAHPAD0KPAJQADPAPAU1@@Z
?OpenEx@PDB@@SAHPAD0KJPAJQADPAPAU1@@Z
?OpenValidate2@PDB@@SAHPAD00KKJPAJQADPAPAU1@@Z
?OpenValidate@PDB@@SAHPAD00KKPAJQADPAPAU1@@Z
?OpenValidateEx2@PDB@@SAHPAD000KKJPAJQADPAPAU1@@Z
?OpenValidateEx@PDB@@SAHPAD000KKPAJQADPAPAU1@@Z
?fCreate@WidenTi@@SAHAAPAU1@IH@Z
?fGetSymName@@YAHPAUSYMTYPE@@PAPAD@Z
?fGetSymRecTypName@@YAHPAUSYMTYPE@@PAPAD@Z
?open@NameMap@@SAHPAUPDB@@HPAPAU1@@Z
DBIAddPublic
DBIAddSec
DBIAddThunkMap
DBIClose
DBIDeleteMod
DBIDumpMods
DBIDumpSecContribs
DBIDumpSecMap
DBIFindTypeServers
DBIGetEnumContrib
DBIOpenDbg
DBIOpenGlobals
DBIOpenMod
DBIOpenPublics
DBIQueryDbgTypes
DBIQueryFileInfo
DBIQueryImplementationVersion
DBIQueryInterfaceVersion
DBIQueryItsmForTi
DBIQueryLazyTypes
DBIQueryModFromAddr
DBIQueryNextItsm
DBIQueryNextMod
DBIQuerySecMap
DBIQueryTypeServer
DbgAppend
DbgClear
DbgClose
DbgFind
DbgQueryNext
DbgQuerySize
DbgReplaceNext
DbgReset
DbgSkip
EnumContribGet
EnumContribNext
EnumContribRelease
EnumContribReset
GSIClose
GSIHashSym
GSINearestSym
GSINextSym
MSFClose
MSFGetCbPage
MSFGetCbStream
MSFOpen
MSFOpenEx
MSFReadStream
ModAddLines
ModAddPublic
ModAddSecContrib
ModAddSymbols
ModAddTypes
ModClose
ModGetPvClient
ModQueryCBFile
ModQueryCBName
ModQueryDBI
ModQueryFile
ModQueryImod
ModQueryImplementationVersion
ModQueryInterfaceVersion
ModQueryLines
ModQueryName
ModQuerySecContrib
ModQuerySymbols
ModQueryTpi
ModSetPvClient
PDBClose
PDBCommit
PDBCopyTo
PDBCreateDBI
PDBExportValidateInterface
PDBOpen
PDBOpenDBI
PDBOpenDBIEx
PDBOpenEx
PDBOpenStream
PDBOpenTpi
PDBOpenValidate
PDBOpenValidate2
PDBOpenValidateEx
PDBOpenValidateEx2
PDBQueryAge
PDBQueryImplementationVersion
PDBQueryInterfaceVersion
PDBQueryLastError
PDBQueryPDBName
PDBQuerySignature
SigForPbCb
StreamAppend
StreamDelete
StreamQueryCb
StreamRead
StreamRelease
StreamReplace
StreamTruncate
StreamWrite
TruncStFromSz
TypesAreTypesEqual
TypesClose
TypesCommit
TypesIsTypeServed
TypesQueryCVRecordForTiEx
TypesQueryCb
TypesQueryImplementationVersion
TypesQueryInterfaceVersion
TypesQueryPbCVRecordForTiEx
TypesQueryTiForCVRecordEx
TypesQueryTiForUDTEx
TypesQueryTiMacEx
TypesQueryTiMinEx
TypesSupportQueryTiForUDT
TypesfIs16bitTypePool

Sections

.text
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XUPG/MSVCRT.DLL
.dll windows:4 windows x86 arch:x86

c739cf6d773d58ef72c55106bb92dcd2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

RaiseException
SetLocalTime
SystemTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
GetLocalTime
CreateFileW
ReadFile
CreatePipe
CreateFileA
UnlockFile
LockFile
GetNumberOfConsoleInputEvents
PeekConsoleInputA
ReadConsoleInputA
PeekNamedPipe
GetFileInformationByHandle
DuplicateHandle
WriteConsoleA
SetEndOfFile
GetConsoleMode
SetConsoleMode
ReadConsoleA
HeapWalk
HeapCompact
HeapValidate
CreateProcessW
CreateProcessA
FreeLibrary
WaitForSingleObject
GetExitCodeProcess
MoveFileA
GetDriveTypeW
RemoveDirectoryW
MoveFileW
DeleteFileW
CreateDirectoryW
GetFullPathNameW
SetFileAttributesW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetFileAttributesW
DeleteFileA
RemoveDirectoryA
CreateDirectoryA
GetCurrentProcessId
GetDriveTypeA
GetFullPathNameA
SetFileAttributesA
SetCurrentDirectoryA
GetCurrentDirectoryA
GetFileAttributesA
SetErrorMode
GetLogicalDrives
GetDiskFreeSpaceA
FileTimeToLocalFileTime
FileTimeToSystemTime
Beep
SetEnvironmentVariableA
GetTimeZoneInformation
GetUserDefaultLCID
IsValidCodePage
IsValidLocale
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetLocaleInfoW
GetLocaleInfoA
CompareStringW
GetSystemTime
Sleep
SetStdHandle
SetFilePointer
FlushFileBuffers
HeapSize
HeapReAlloc
InterlockedIncrement
InterlockedDecrement
SetEnvironmentVariableW
SetConsoleCtrlHandler
UnhandledExceptionFilter
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetCommandLineW
MultiByteToWideChar
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
GetStartupInfoA
GetFileType
SetHandleCount
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
HeapAlloc
HeapFree
FindFirstFileW
FindNextFileW
FindFirstFileA
FindNextFileA
FindClose
GetCurrentThread
TlsGetValue
SetLastError
TlsFree
TlsAlloc
GetCurrentThreadId
CloseHandle
ExitThread
TlsSetValue
CreateThread
GetLastError
ResumeThread
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetVersion
GetModuleHandleA
GetProcAddress
GetCommandLineA
GetStdHandle
WriteFile
GetCurrentProcess
TerminateProcess
ExitProcess
GetModuleFileNameW
GetModuleFileNameA
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
SetUnhandledExceptionFilter
RtlUnwind
CompareStringA

Exports

Exports

$I10_OUTPUT
??0__non_rtti_object@@QAE@ABV0@@Z
??0__non_rtti_object@@QAE@PBD@Z
??0bad_cast@@QAE@ABQBD@Z
??0bad_cast@@QAE@ABV0@@Z
??0bad_typeid@@QAE@ABV0@@Z
??0bad_typeid@@QAE@PBD@Z
??0exception@@QAE@ABQBD@Z
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@XZ
??1__non_rtti_object@@UAE@XZ
??1bad_cast@@UAE@XZ
??1bad_typeid@@UAE@XZ
??1exception@@UAE@XZ
??1type_info@@UAE@XZ
??2@YAPAXI@Z
??3@YAXPAX@Z
??4__non_rtti_object@@QAEAAV0@ABV0@@Z
??4bad_cast@@QAEAAV0@ABV0@@Z
??4bad_typeid@@QAEAAV0@ABV0@@Z
??4exception@@QAEAAV0@ABV0@@Z
??8type_info@@QBEHABV0@@Z
??9type_info@@QBEHABV0@@Z
??_7__non_rtti_object@@6B@
??_7bad_cast@@6B@
??_7bad_typeid@@6B@
??_7exception@@6B@
??_E__non_rtti_object@@UAEPAXI@Z
??_Ebad_cast@@UAEPAXI@Z
??_Ebad_typeid@@UAEPAXI@Z
??_Eexception@@UAEPAXI@Z
??_G__non_rtti_object@@UAEPAXI@Z
??_Gbad_cast@@UAEPAXI@Z
??_Gbad_typeid@@UAEPAXI@Z
??_Gexception@@UAEPAXI@Z
?_query_new_handler@@YAP6AHI@ZXZ
?_query_new_mode@@YAHXZ
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
?_set_new_mode@@YAHH@Z
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
?before@type_info@@QBEHABV1@@Z
?name@type_info@@QBEPBDXZ
?raw_name@type_info@@QBEPBDXZ
?set_new_handler@@YAP6AXXZP6AXXZ@Z
?set_terminate@@YAP6AXXZP6AXXZ@Z
?set_unexpected@@YAP6AXXZP6AXXZ@Z
?terminate@@YAXXZ
?unexpected@@YAXXZ
?what@exception@@UBEPBDXZ
_CIacos
_CIasin
_CIatan
_CIatan2
_CIcos
_CIcosh
_CIexp
_CIfmod
_CIlog
_CIlog10
_CIpow
_CIsin
_CIsinh
_CIsqrt
_CItan
_CItanh
_CxxThrowException
_EH_prolog
_Getdays
_Getmonths
_Gettnames
_HUGE
_Strftime
_XcptFilter
__CxxFrameHandler
__CxxLongjmpUnwind
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__STRINGTOLD
__argc
__argv
__badioinfo
__crtCompareStringA
__crtGetLocaleInfoW
__crtLCMapStringA
__dllonexit
__doserrno
__fpecode
__getmainargs
__initenv
__isascii
__iscsym
__iscsymf
__lc_codepage
__lc_handle
__lconv_init
__mb_cur_max
__p___argc
__p___argv
__p___initenv
__p___mb_cur_max
__p___wargv
__p___winitenv
__p__acmdln
__p__amblksiz
__p__commode
__p__daylight
__p__dstbias
__p__environ
__p__fileinfo
__p__fmode
__p__iob
__p__mbctype
__p__osver
__p__pctype
__p__pgmptr
__p__pwctype
__p__timezone
__p__tzname
__p__wcmdln
__p__wenviron
__p__winmajor
__p__winminor
__p__winver
__p__wpgmptr
__pioinfo
__pxcptinfoptrs
__set_app_type
__setlc_active
__setusermatherr
__threadhandle
__threadid
__toascii
__unDName
__unguarded_readlc_active
__wargv
__wgetmainargs
__winitenv
_abnormal_termination
_access
_acmdln
_adj_fdiv_m16i
_adj_fdiv_m32
_adj_fdiv_m32i
_adj_fdiv_m64
_adj_fdiv_r
_adj_fdivr_m16i
_adj_fdivr_m32
_adj_fdivr_m32i
_adj_fdivr_m64
_adj_fpatan
_adj_fprem
_adj_fprem1
_adj_fptan
_adjust_fdiv
_aexit_rtn
_amsg_exit
_assert
_atodbl
_atoi64
_atoldbl
_beep
_beginthread
_beginthreadex
_c_exit
_cabs
_callnewh
_cexit
_cgets
_chdir
_chdrive
_chgsign
_chmod
_chsize
_clearfp
_close
_commit
_commode
_control87
_controlfp
_copysign
_cprintf
_cputs
_creat
_cscanf
_ctype
_cwait
_daylight
_dstbias
_dup
_dup2
_ecvt
_endthread
_endthreadex
_environ
_eof
_errno
_except_handler2
_except_handler3
_execl
_execle
_execlp
_execlpe
_execv
_execve
_execvp
_execvpe
_exit
_expand
_fcloseall
_fcvt
_fdopen
_fgetchar
_fgetwchar
_filbuf
_fileinfo
_filelength
_filelengthi64
_fileno
_findclose
_findfirst
_findfirsti64
_findnext
_findnexti64
_finite
_flsbuf
_flushall
_fmode
_fpclass
_fpieee_flt
_fpreset
_fputchar
_fputwchar
_fsopen
_fstat
_fstati64
_ftime
_ftol
_fullpath
_futime
_gcvt
_get_osfhandle
_get_sbh_threshold
_getch
_getche
_getcwd
_getdcwd
_getdiskfree
_getdllprocaddr
_getdrive
_getdrives
_getmaxstdio
_getmbcp
_getpid
_getsystime
_getw
_getws
_global_unwind2
_heapadd
_heapchk
_heapmin
_heapset
_heapused
_heapwalk
_hypot
_i64toa
_i64tow
_initterm
_inp
_inpd
_inpw
_iob
_isatty
_isctype
_ismbbalnum
_ismbbalpha
_ismbbgraph
_ismbbkalnum
_ismbbkana
_ismbbkprint
_ismbbkpunct
_ismbblead
_ismbbprint
_ismbbpunct
_ismbbtrail
_ismbcalnum
_ismbcalpha
_ismbcdigit
_ismbcgraph
_ismbchira
_ismbckata
_ismbcl0
_ismbcl1
_ismbcl2
_ismbclegal
_ismbclower
_ismbcprint
_ismbcpunct
_ismbcspace
_ismbcsymbol
_ismbcupper
_ismbslead
_ismbstrail
_isnan
_itoa
_itow
_j0
_j1
_jn
_kbhit
_lfind
_loaddll
_local_unwind2
_lock
_locking
_logb
_longjmpex
_lrotl
_lrotr
_lsearch
_lseek
_lseeki64
_ltoa
_ltow
_makepath
_mbbtombc
_mbbtype
_mbccpy
_mbcjistojms
_mbcjmstojis
_mbclen
_mbctohira
_mbctokata
_mbctolower
_mbctombb
_mbctoupper
_mbctype
_mbsbtype
_mbscat
_mbschr
_mbscmp
_mbscoll
_mbscpy
_mbscspn
_mbsdec
_mbsdup
_mbsicmp
_mbsicoll
_mbsinc
_mbslen
_mbslwr
_mbsnbcat
_mbsnbcmp
_mbsnbcnt
_mbsnbcoll
_mbsnbcpy
_mbsnbicmp
_mbsnbicoll
_mbsnbset
_mbsncat
_mbsnccnt
_mbsncmp
_mbsncoll
_mbsncpy
_mbsnextc
_mbsnicmp
_mbsnicoll
_mbsninc
_mbsnset
_mbspbrk
_mbsrchr
_mbsrev
_mbsset
_mbsspn
_mbsspnp
_mbsstr
_mbstok
_mbstrlen
_mbsupr
_memccpy
_memicmp
_mkdir
_mktemp
_msize
_nextafter
_onexit
_open
_open_osfhandle
_osver
_outp
_outpd
_outpw
_pclose
_pctype
_pgmptr
_pipe
_popen
_purecall
_putch
_putenv
_putw
_putws
_pwctype
_read
_rmdir
_rmtmp
_rotl
_rotr
_safe_fdiv
_safe_fdivr
_safe_fprem
_safe_fprem1
_scalb
_searchenv
_seh_longjmp_unwind
_set_error_mode
_set_sbh_threshold
_seterrormode
_setjmp
_setjmp3
_setmaxstdio
_setmbcp
_setmode
_setsystime
_sleep
_snprintf
_snwprintf
_sopen
_spawnl
_spawnle
_spawnlp
_spawnlpe
_spawnv
_spawnve
_spawnvp
_spawnvpe
_splitpath
_stat
_stati64
_statusfp
_strcmpi
_strdate
_strdup
_strerror
_stricmp
_stricoll
_strlwr
_strncoll
_strnicmp
_strnicoll
_strnset
_strrev
_strset
_strtime
_strupr
_swab
_sys_errlist
_sys_nerr
_tell
_telli64
_tempnam
_timezone
_tolower
_toupper
_tzname
_tzset
_ui64toa
_ui64tow
_ultoa
_ultow
_umask
_ungetch
_unlink
_unloaddll
_unlock
_utime
_vsnprintf
_vsnwprintf
_waccess
_wasctime
_wchdir
_wchmod
_wcmdln
_wcreat
_wcsdup
_wcsicmp
_wcsicoll
_wcslwr
_wcsncoll
_wcsnicmp
_wcsnicoll
_wcsnset
_wcsrev
_wcsset
_wcsupr
_wctime
_wenviron
_wexecl
_wexecle
_wexeclp

Sections

.text
Size: 207KB - Virtual size: 207KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XUPG/SETUPAPI.DLL
.dll windows:5 windows x86 arch:x86

87462823a805970bcc19b780f2f73a7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_DLL

Imports

kernel32

HeapAlloc
HeapFree
GetProcessHeap
GetModuleHandleA
CreateMutexA
GetDriveTypeA
SetThreadLocale
RaiseException
GetWindowsDirectoryW
DeviceIoControl
GetWindowsDirectoryA
RtlUnwind
ResumeThread
CreateThread
ExitThread
GetCPInfo
GetACP
GetOEMCP
ExitProcess
TerminateProcess
SetHandleCount
GetVersion
GetStdHandle
FreeEnvironmentStringsA
CreateProcessA
GetEnvironmentVariableA
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
InterlockedDecrement
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
UnhandledExceptionFilter
VirtualAlloc
IsValidLocale
IsValidCodePage
EnumSystemLocalesA
GetUserDefaultLCID
GetLocaleInfoW
SetStdHandle
GetFileType
CreateMutexW
FlushFileBuffers
WritePrivateProfileSectionA
MoveFileExA
WideCharToMultiByte
GetCurrentProcess
GetCurrentThread
DuplicateHandle
GetLocaleInfoA
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetPrivateProfileStringA
WritePrivateProfileStringA
DebugBreak
GetSystemDirectoryA
GetShortPathNameA
MultiByteToWideChar
RemoveDirectoryA
GetDiskFreeSpaceA
TlsAlloc
TlsFree
TlsSetValue
_llseek
_lclose
lstrcpyA
_lwrite
_lread
_lopen
TlsGetValue
DosDateTimeToFileTime
LocalFileTimeToFileTime
_lcreat
lstrcmpA
ResetEvent
CompareFileTime
LoadLibraryA
FindFirstFileA
FindNextFileA
FindClose
FileTimeToSystemTime
SetEvent
WaitForSingleObject
CreateEventA
GetProcAddress
lstrlenW
SystemTimeToFileTime
GetThreadLocale
GetStringTypeExA
InterlockedExchange
WaitForSingleObjectEx
GetCurrentDirectoryA
SetCurrentDirectoryA
GetExitCodeThread
GetStartupInfoA
GetPrivateProfileSectionA
FreeLibrary
SetFileTime
GetFileTime
LocalAlloc
WriteFile
ExpandEnvironmentStringsA
GetDateFormatA
CreateDirectoryA
MoveFileA
GetCommandLineA
GetModuleFileNameA
FormatMessageA
LocalFree
WaitForMultipleObjects
GetFileAttributesA
lstrcatA
InterlockedIncrement
GetLocalTime
GetCurrentProcessId
SetFilePointer
CreateFileA
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
CloseHandle
SetEndOfFile
Sleep
OutputDebugStringA
lstrcmpiA
ReleaseMutex
SetErrorMode
GetTempFileNameA
lstrcpynA
SetFileAttributesA
CopyFileA
DeleteFileA
GetFullPathNameA
GetLastError
lstrlenA
GetVersionExA
GetTempPathA
FreeEnvironmentStringsW
GetEnvironmentStrings
SetLastError

advapi32

RegQueryInfoKeyA
QueryServiceStatus
ControlService
DeleteService
CreateServiceA
QueryServiceConfigA
RegCreateKeyExA
IsTextUnicode
GetFileSecurityA
LockServiceDatabase
SetSecurityDescriptorOwner
InitializeSecurityDescriptor
SetFileSecurityA
OpenProcessToken
RegDeleteKeyA
GetTokenInformation
EqualSid
AllocateAndInitializeSid
FreeSid
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenServiceA
ChangeServiceConfigA
OpenSCManagerA
CloseServiceHandle
RegSetValueExA
UnlockServiceDatabase
RegEnumKeyExA
RegOpenKeyExA
RegDeleteValueA
RegCloseKey
RegQueryValueExA

comctl32

ImageList_Create
ImageList_SetOverlayImage
ImageList_ReplaceIcon
ImageList_Add
ImageList_SetBkColor
ImageList_Destroy
DestroyPropertySheetPage
CreatePropertySheetPageA
ord17

comdlg32

GetOpenFileNameA

gdi32

GetTextExtentExPointA
CreateCompatibleBitmap
DeleteDC
CreateCompatibleDC
GetObjectA
CreateBitmap
DeleteObject
SetBkColor
SetTextColor
SelectObject
StretchBlt
PatBlt
BitBlt

lz32

LZOpenFileA
LZCopy
LZClose

mpr

WNetCancelConnection2A
WNetGetResourceInformationA
WNetAddConnection3A

ole32

OleInitialize
OleUninitialize

rpcrt4

UuidFromStringA

shell32

ExtractIconExA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHChangeNotify
ord59

user32

SetTimer
KillTimer
CheckRadioButton
RegisterWindowMessageA
SetWindowPos
UpdateWindow
GetClientRect
CharLowerA
SetForegroundWindow
MessageBeep
PostThreadMessageA
PeekMessageA
DispatchMessageA
TranslateMessage
GetMessageA
GetWindowTextA
SetPropA
GetPropA
DestroyWindow
MoveWindow
SystemParametersInfoA
ClientToScreen
MsgWaitForMultipleObjects
ExitWindowsEx
WaitMessage
GetKeyboardType
RemovePropA
GetWindowTextLengthA
DrawAnimatedRects
SetWindowTextA
MapWindowPoints
GetWindowRect
DialogBoxParamA
ShowWindow
SendDlgItemMessageA
MessageBoxA
SendMessageA
GetWindow
SetFocus
PostMessageA
IsDlgButtonChecked
CheckDlgButton
GetParent
WinHelpA
LoadCursorA
SetCursor
CharUpperA
IsWindow
GetSystemMetrics
GetSysColorBrush
GetIconInfo
GetDC
ReleaseDC
LoadBitmapA
LoadIconA
LoadImageA
DestroyIcon
GetSysColor
LoadStringA
wvsprintfA
wsprintfA
CharPrevA
CharNextA
IsWindowVisible
GetDlgItemTextA
EndDialog
EnableWindow
SetDlgItemTextA
GetWindowLongA
SetWindowLongA
GetDlgItem

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

winspool.drv

GetPrinterDriverDirectoryA
GetPrintProcessorDirectoryA

cabinet

ord21
ord20
ord22
ord23

cfgmgr32

CM_Disable_DevNode_Ex
CM_Get_DevNode_Registry_PropertyA
CM_Set_DevNode_Registry_PropertyA
CM_Enable_DevNode_Ex
CM_Reenumerate_DevNode_Ex
CM_Get_Device_IDA
CM_Delete_DevNode_Key
CM_Get_Next_Log_Conf_Ex
CM_Free_Log_Conf_Ex
CM_Add_Empty_Log_Conf_Ex
CM_Set_HW_Prof_Flags_ExA
CM_Uninstall_DevNode_Ex
CM_Setup_DevNode_Ex
CM_Get_DevNode_Status_Ex
CM_Free_Log_Conf
CM_Get_Device_ID_Size_Ex
CM_Get_Hardware_Profile_Info_ExA
CM_Delete_Class_Key_Ex
CM_Get_Res_Des_Data_Size_Ex
CM_Get_First_Log_Conf_Ex
CM_Get_Next_Res_Des_Ex
CM_Get_Parent_Ex
CM_Get_Res_Des_Data_Ex
CM_Get_Device_ID_ExA
CM_Get_Device_ID_List_ExA
CM_Free_Res_Des_Handle
CM_Free_Log_Conf_Handle
CM_Locate_DevNode_ExA
CM_Get_Device_ID_List_Size_ExA
CM_Get_HW_Prof_Flags_ExA
CM_Get_DevNode_Registry_Property_ExA
CM_Create_DevNode_ExA
CM_Uninstall_DevNode
CM_Enumerate_Classes_Ex
CM_Set_DevNode_Registry_Property_ExA
CM_Open_Class_Key_ExA
CM_Disconnect_Machine
CM_Connect_MachineA
CM_Get_Class_Name_ExA
CM_Open_DevNode_Key_Ex
CM_Get_Class_Key_Name_ExA
CM_Add_Res_Des_Ex

Exports

Exports

AcquireSCMLock
AddMiniIconToList
AddTagToGroupOrderListEntry
AppendStringToMultiSz
AssertFail
CaptureAndConvertAnsiArg
CaptureStringArg
CenterWindowRelativeToParent
ConcatenatePaths
DelayedMove
DelimStringToMultiSz
DestroyTextFileReadBuffer
DoInstallActionWithParams
DoesUserHavePrivilege
DuplicateString
EnablePrivilege
ExtensionPropSheetPageProc
FileExists
FreeStringArray
GetCurrentDriverSigningPolicy
GetSetFileTimestamp
GetVersionInfoFromImage
HandleFailedVerification
InfIsFromOemLocation
InstallCatalog
InstallHinfSection
InstallHinfSectionA
InstallHinfSectionW
InstallStop
InstallStopEx
IsUserAdmin
LookUpStringInTable
MemoryInitialize
MultiByteToUnicode
MultiSzFromSearchControl
MyFree
MyGetFileTitle
MyMalloc
MyRealloc
OpenAndMapFileForRead
OutOfMemory
QueryMultiSzValueToArray
QueryRegistryValue
ReadAsciiOrUnicodeTextFile
RegistryDelnode
RetreiveFileSecurity
RetrieveServiceConfig
SearchForInfFile
SetArrayToMultiSzValue
SetupAddInstallSectionToDiskSpaceListA
SetupAddInstallSectionToDiskSpaceListW
SetupAddSectionToDiskSpaceListA
SetupAddSectionToDiskSpaceListW
SetupAddToDiskSpaceListA
SetupAddToDiskSpaceListW
SetupAddToSourceListA
SetupAddToSourceListW
SetupAdjustDiskSpaceListA
SetupAdjustDiskSpaceListW
SetupBackupErrorA
SetupBackupErrorW
SetupCancelTemporarySourceList
SetupCloseFileQueue
SetupCloseInfFile
SetupCloseLog
SetupCommitFileQueue
SetupCommitFileQueueA
SetupCommitFileQueueW
SetupCopyErrorA
SetupCopyErrorW
SetupCopyOEMInfA
SetupCopyOEMInfW
SetupCreateDiskSpaceListA
SetupCreateDiskSpaceListW
SetupDecompressOrCopyFileA
SetupDecompressOrCopyFileW
SetupDefaultQueueCallback
SetupDefaultQueueCallbackA
SetupDefaultQueueCallbackW
SetupDeleteErrorA
SetupDeleteErrorW
SetupDestroyDiskSpaceList
SetupDiAskForOEMDisk
SetupDiBuildClassInfoList
SetupDiBuildClassInfoListExA
SetupDiBuildClassInfoListExW
SetupDiBuildDriverInfoList
SetupDiCallClassInstaller
SetupDiCancelDriverInfoSearch
SetupDiChangeState
SetupDiClassGuidsFromNameA
SetupDiClassGuidsFromNameExA
SetupDiClassGuidsFromNameExW
SetupDiClassGuidsFromNameW
SetupDiClassNameFromGuidA
SetupDiClassNameFromGuidExA
SetupDiClassNameFromGuidExW
SetupDiClassNameFromGuidW
SetupDiCreateDevRegKeyA
SetupDiCreateDevRegKeyW
SetupDiCreateDeviceInfoA
SetupDiCreateDeviceInfoList
SetupDiCreateDeviceInfoListExA
SetupDiCreateDeviceInfoListExW
SetupDiCreateDeviceInfoW
SetupDiCreateDeviceInterfaceA
SetupDiCreateDeviceInterfaceRegKeyA
SetupDiCreateDeviceInterfaceRegKeyW
SetupDiCreateDeviceInterfaceW
SetupDiDeleteDevRegKey
SetupDiDeleteDeviceInfo
SetupDiDeleteDeviceInterfaceData
SetupDiDeleteDeviceInterfaceRegKey
SetupDiDestroyClassImageList
SetupDiDestroyDeviceInfoList
SetupDiDestroyDriverInfoList
SetupDiDrawMiniIcon
SetupDiEnumDeviceInfo
SetupDiEnumDeviceInterfaces
SetupDiEnumDriverInfoA
SetupDiEnumDriverInfoW
SetupDiGetActualSectionToInstallA
SetupDiGetActualSectionToInstallW
SetupDiGetClassBitmapIndex
SetupDiGetClassDescriptionA
SetupDiGetClassDescriptionExA
SetupDiGetClassDescriptionExW
SetupDiGetClassDescriptionW
SetupDiGetClassDevPropertySheetsA
SetupDiGetClassDevPropertySheetsW
SetupDiGetClassDevsA
SetupDiGetClassDevsExA
SetupDiGetClassDevsExW
SetupDiGetClassDevsW
SetupDiGetClassImageIndex
SetupDiGetClassImageList
SetupDiGetClassImageListExA
SetupDiGetClassImageListExW
SetupDiGetClassInstallParamsA
SetupDiGetClassInstallParamsW
SetupDiGetDeviceInfoListClass
SetupDiGetDeviceInfoListDetailA
SetupDiGetDeviceInfoListDetailW
SetupDiGetDeviceInstallParamsA
SetupDiGetDeviceInstallParamsW
SetupDiGetDeviceInstanceIdA
SetupDiGetDeviceInstanceIdW
SetupDiGetDeviceInterfaceAlias
SetupDiGetDeviceInterfaceDetailA
SetupDiGetDeviceInterfaceDetailW
SetupDiGetDeviceRegistryPropertyA
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDriverInfoDetailA
SetupDiGetDriverInfoDetailW
SetupDiGetDriverInstallParamsA
SetupDiGetDriverInstallParamsW
SetupDiGetHwProfileFriendlyNameA
SetupDiGetHwProfileFriendlyNameExA
SetupDiGetHwProfileFriendlyNameExW
SetupDiGetHwProfileFriendlyNameW
SetupDiGetHwProfileList
SetupDiGetHwProfileListExA
SetupDiGetHwProfileListExW
SetupDiGetINFClassA
SetupDiGetINFClassW
SetupDiGetSelectedDevice
SetupDiGetSelectedDriverA
SetupDiGetSelectedDriverW
SetupDiGetWizardPage
SetupDiInstallClassA
SetupDiInstallClassExA
SetupDiInstallClassExW
SetupDiInstallClassW
SetupDiInstallDevice
SetupDiInstallDeviceInterfaces
SetupDiInstallDriverFiles
SetupDiLoadClassIcon
SetupDiMoveDuplicateDevice
SetupDiOpenClassRegKey
SetupDiOpenClassRegKeyExA
SetupDiOpenClassRegKeyExW
SetupDiOpenDevRegKey
SetupDiOpenDeviceInfoA
SetupDiOpenDeviceInfoW
SetupDiOpenDeviceInterfaceA
SetupDiOpenDeviceInterfaceRegKey
SetupDiOpenDeviceInterfaceW
SetupDiRegisterCoDeviceInstallers
SetupDiRegisterDeviceInfo
SetupDiRemoveDevice
SetupDiRemoveDeviceInterface
SetupDiSelectBestCompatDrv
SetupDiSelectDevice
SetupDiSelectOEMDrv
SetupDiSetClassInstallParamsA
SetupDiSetClassInstallParamsW
SetupDiSetDeviceInstallParamsA
SetupDiSetDeviceInstallParamsW
SetupDiSetDeviceRegistryPropertyA
SetupDiSetDeviceRegistryPropertyW
SetupDiSetDriverInstallParamsA
SetupDiSetDriverInstallParamsW
SetupDiSetSelectedDevice
SetupDiSetSelectedDriverA
SetupDiSetSelectedDriverW
SetupDiUnremoveDevice
SetupDuplicateDiskSpaceListA
SetupDuplicateDiskSpaceListW
SetupFindFirstLineA
SetupFindFirstLineW
SetupFindNextLine
SetupFindNextMatchLineA
SetupFindNextMatchLineW
SetupFreeSourceListA
SetupFreeSourceListW
SetupGetBackupInformationA
SetupGetBackupInformationW
SetupGetBinaryField
SetupGetFieldCount
SetupGetFileCompressionInfoA
SetupGetFileCompressionInfoW
SetupGetInfFileListA
SetupGetInfFileListW
SetupGetInfInformationA
SetupGetInfInformationW
SetupGetInfSections
SetupGetIntField
SetupGetLineByIndexA
SetupGetLineByIndexW
SetupGetLineCountA
SetupGetLineCountW
SetupGetLineTextA
SetupGetLineTextW
SetupGetMultiSzFieldA
SetupGetMultiSzFieldW
SetupGetSourceFileLocationA
SetupGetSourceFileLocationW
SetupGetSourceFileSizeA
SetupGetSourceFileSizeW
SetupGetSourceInfoA
SetupGetSourceInfoW
SetupGetStringFieldA
SetupGetStringFieldW
SetupGetTargetPathA
SetupGetTargetPathW
SetupInitDefaultQueueCallback
SetupInitDefaultQueueCallbackEx
SetupInitializeFileLogA
SetupInitializeFileLogW
SetupInstallFileA
SetupInstallFileExA
SetupInstallFileExW
SetupInstallFileW
SetupInstallFilesFromInfSectionA
SetupInstallFilesFromInfSectionW
SetupInstallFromInfSectionA
SetupInstallFromInfSectionW
SetupInstallServicesFromInfSectionA
SetupInstallServicesFromInfSectionExA
SetupInstallServicesFromInfSectionExW
SetupInstallServicesFromInfSectionW
SetupIterateCabinetA
SetupIterateCabinetW
SetupLogErrorA
SetupLogErrorW
SetupLogFileA
SetupLogFileW
SetupOpenAppendInfFileA
SetupOpenAppendInfFileW
SetupOpenFileQueue
SetupOpenInfFileA
SetupOpenInfFileW
SetupOpenLog
SetupOpenMasterInf
SetupPromptForDiskA
SetupPromptForDiskW
SetupPromptReboot
SetupQueryDrivesInDiskSpaceListA
SetupQueryDrivesInDiskSpaceListW
SetupQueryFileLogA
SetupQueryFileLogW
SetupQueryInfFileInformationA
SetupQueryInfFileInformationW
SetupQueryInfOriginalFileInformationA
SetupQueryInfOriginalFileInformationW
SetupQueryInfVersionInformationA
SetupQueryInfVersionInformationW
SetupQuerySourceListA
SetupQuerySourceListW
SetupQuerySpaceRequiredOnDriveA
SetupQuerySpaceRequiredOnDriveW
SetupQueueCopyA
SetupQueueCopyIndirectA
SetupQueueCopyIndirectW
SetupQueueCopySectionA
SetupQueueCopySectionW
SetupQueueCopyW
SetupQueueDefaultCopyA
SetupQueueDefaultCopyW
SetupQueueDeleteA
SetupQueueDeleteSectionA
SetupQueueDeleteSectionW
SetupQueueDeleteW
SetupQueueRenameA
SetupQueueRenameSectionA
SetupQueueRenameSectionW
SetupQueueRenameW
SetupRemoveFileLogEntryA
SetupRemoveFileLogEntryW
SetupRemoveFromDiskSpaceListA
SetupRemoveFromDiskSpaceListW
SetupRemoveFromSourceListA
SetupRemoveFromSourceListW
SetupRemoveInstallSectionFromDiskSpaceListA
SetupRemoveInstallSectionFromDiskSpaceListW
SetupRemoveSectionFromDiskSpaceListA
SetupRemoveSectionFromDiskSpaceListW
SetupRenameErrorA
SetupRenameErrorW
SetupScanFileQueue
SetupScanFileQueueA
SetupScanFileQueueW
SetupSetDirectoryIdA
SetupSetDirectoryIdExA
SetupSetDirectoryIdExW
SetupSetDirectoryIdW
SetupSetFileQueueAlternatePlatformA
SetupSetFileQueueAlternatePlatformW
SetupSetPlatformPathOverrideA
SetupSetPlatformPathOverrideW
SetupSetSourceListA
SetupSetSourceListW
SetupTermDefaultQueueCallback
SetupTerminateFileLog
ShouldDeviceBeExcluded
StampFileSecurity
StringTableAddString
StringTableAddStringEx
StringTableDestroy
StringTableDuplicate
StringTableEnum
StringTableGetExtraData
StringTableInitialize
StringTableInitializeEx
StringTableLookUpString
StringTableLookUpStringEx
StringTableSetExtraData
StringTableStringFromId
StringTableStringFromIdEx
StringTableTrim
TakeOwnershipOfFile
UnicodeToMultiByte
UnmapAndCloseFile
VerifyCatalogFile
VerifyFile
pSetupDiGetDeviceInfoContext
pSetupDiSetDeviceInfoContext
pSetupDirectoryIdToPath
pSetupGetField
pSetupGetGlobalFlags
pSetupGetOsLoaderDriveAndPath
pSetupGetVersionDatum
pSetupGuidFromString
pSetupIsGuidNull
pSetupMakeSurePathExists
pSetupSetGlobalFlags
pSetupSetSystemSourcePath
pSetupStringFromGuid
pSetupVerifyQueuedCatalogs

Sections

.text
Size: 369KB - Virtual size: 369KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 146KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XUPG/TWID.EXE
I386/WIN9XUPG/VSCANDB.INF
I386/WIN9XUPG/W95UPG.DLL
.dll windows:5 windows x86 arch:x86

1e6334bf8e8652b9eb0a7d92621796be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_DLL

Imports

msvcrt

_ismbcalpha
atoi
_atoi64
sscanf
_mbscpy
_itoa
toupper
strncpy
_mbsncat
swprintf
_ismbclower
_ismbcpunct
_mbspbrk
rand
srand
_mbsncmp
_mbsicmp
_adjust_fdiv
malloc
strtoul
_except_handler3
wcscspn
_ultoa
_wcslwr
wcscmp
_mbscmp
_mbsnbcpy
_mbsstr
free
_mbsrchr
_vsnprintf
_iob
fprintf
_snprintf
_pctype
setlocale
wcsrchr
wcsncpy
_mbsncpy
_initterm
sprintf
isalpha
_mbslwr
iswctype
isspace
_mbctolower
tolower
_splitpath
towlower
_mbsdec
_mbsnextc
wcscpy
_wcsicmp
wcslen
wcschr
_ismbblead
strchr
memmove
_mbctoupper
_local_unwind2
_ismbcspace
_mbschr
printf
_mbslen
_mbsnicmp
_mbsinc

kernel32

GetCurrentDirectoryA
ReadFile
GetFileSize
GetFullPathNameA
SearchPathA
GetShortPathNameA
GetShortPathNameW
GetFullPathNameW
SearchPathW
FindNextFileA
MapViewOfFile
CreateFileMappingA
CreateFileW
UnmapViewOfFile
CreateDirectoryA
DeleteFileW
FlushFileBuffers
SetEndOfFile
FreeLibrary
LoadLibraryA
GetThreadLocale
GetACP
WideCharToMultiByte
MultiByteToWideChar
SetCurrentDirectoryA
SetErrorMode
GetDriveTypeA
GetLogicalDriveStringsA
GetTempPathA
GetTickCount
SetEnvironmentVariableA
WritePrivateProfileStringA
lstrlenW
CompareFileTime
lstrcpyA
GlobalFree
GetSystemDefaultLCID
FreeEnvironmentStringsA
GetEnvironmentStrings
ExpandEnvironmentStringsA
GetDiskFreeSpaceA
GetVolumeInformationA
Sleep
CreateMailslotA
InterlockedIncrement
lstrlenA
IsBadHugeWritePtr
IsBadStringPtrA
IsBadHugeReadPtr
_lclose
_lcreat
_lopen
LocalAlloc
LocalReAlloc
_lread
_lwrite
_llseek
GetTempFileNameA
EnumSystemLocalesA
GetPrivateProfileSectionNamesA
FindFirstFileW
GetFileAttributesA
DeleteFileA
GetPrivateProfileIntA
SetFileAttributesA
SetFilePointer
OutputDebugStringA
HeapReAlloc
GetCurrentThreadId
CreateThread
SetEvent
ExitProcess
GetModuleHandleA
GetVersionExA
WaitForSingleObject
CreateEventA
FormatMessageA
HeapAlloc
LocalFree
SetLastError
IsDBCSLeadByte
GetEnvironmentVariableA
WriteFile
GetComputerNameA
CreateFileA
MoveFileA
CopyFileA
GetProcessHeap
GetSystemDirectoryA
MulDiv
CloseHandle
DeviceIoControl
BeginUpdateResourceA
EnumResourceNamesA
EndUpdateResourceA
UpdateResourceA
UpdateResourceW
FindResourceW
LoadResource
LockResource
GetMailslotInfo
OpenFileMappingA
WaitForMultipleObjects
OpenEventA
GetSystemInfo
GetCurrentProcess
GetPriorityClass
SetPriorityClass
QueryPerformanceFrequency
QueryPerformanceCounter
HeapFree
GetCurrentProcessId
GlobalMemoryStatus
CreateProcessA
GetProfileStringA
WriteProfileStringA
lstrcmpiA
GetLastError
TerminateProcess
OpenProcess
Process32Next
FindClose
FindFirstFileA
Process32First
CreateToolhelp32Snapshot
GetModuleFileNameA
DisableThreadLibraryCalls
RemoveDirectoryA
HeapCreate
GetProcAddress
LoadLibraryExA
GetPrivateProfileSectionA
lstrcpynA
GetPrivateProfileStringA
GetWindowsDirectoryA

user32

InvalidateRect
GetDlgItemTextA
CheckDlgButton
IsDlgButtonChecked
SendMessageA
GetParent
GetDesktopWindow
EndDialog
GetDC
ShowWindow
EnumWindows
CharNextA
wsprintfA
MessageBoxA
SetWindowTextA
GetWindowTextA
GetKeyboardType
SetWindowPos
GetSystemMetrics
GetWindowRect
SetCursor
LoadCursorA
OemToCharBuffA
OemToCharA
LoadStringA
GetWindowThreadProcessId
PostMessageA
GetDlgItem
ReleaseDC
GetDialogBaseUnits
GetClientRect
DialogBoxParamA
SetFocus
ScreenToClient
CharLowerA
EnableWindow
UpdateWindow
SetDlgItemTextA
IsWindowVisible
GetFocus
GetKeyboardLayoutNameA
CharUpperA
RegisterClassA
GetWindowLongA
SetWindowLongA
DefWindowProcA
GetSysColor
BeginPaint
EndPaint
ScrollWindow
SetScrollInfo
GetScrollInfo
DrawTextA
ClientToScreen

gdi32

TextOutA
SelectObject
SetBkMode
GetTextExtentPoint32A
StartPage
EndPage
SetMapMode
GetDeviceCaps
GetTextMetricsA
DPtoLP
AbortDoc
EndDoc
DeleteObject
GetObjectA
GetStockObject
CreateFontIndirectA
DeleteDC
GetTextFaceA
StartDocA
LineTo
MoveToEx
CreateDCA
SetTextColor
SetBkColor
Rectangle
CreateSolidBrush
CreatePen

advapi32

RegQueryValueW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegUnLoadKeyA
RegLoadKeyW
GetUserNameA
RegFlushKey
RegUnLoadKeyW
RegOpenKeyW
RegEnumKeyExA
RegEnumKeyExW
RegQueryInfoKeyW
RegQueryValueA
RegLoadKeyA
RegSetValueExA
RegEnumKeyW
RegEnumKeyA
RegOpenKeyA
RegCloseKey
RegOpenKeyExW
RegOpenKeyExA
RegCreateKeyExA
RegQueryInfoKeyA
RegQueryValueExW
RegQueryValueExA
RegEnumValueW
RegEnumValueA

imagehlp

UnMapAndLoad
ImageRvaToVa
MapAndLoad
ImageDirectoryEntryToData

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
ShellExecuteA

comdlg32

GetSaveFileNameA
PrintDlgA

comctl32

ord17

winmm

waveOutGetNumDevs
mixerGetControlDetailsA
mixerGetDevCapsA
mixerClose
mixerOpen
waveOutGetDevCapsA
mixerGetLineControlsA
mixerGetNumDevs
mixerGetLineInfoA
waveInGetDevCapsA
waveInGetNumDevs

setupapi

RegistryDelnode
SetupGetLineByIndexA
StringTableSetExtraData
SetupGetInfInformationA
SetupGetLineCountA
SetupGetMultiSzFieldA
SetupOpenInfFileA
SetupGetLineTextA
SetupOpenAppendInfFileA
SetupCloseInfFile
SetupCloseLog
SetupOpenLog
SetupLogErrorA
SetupGetFieldCount
SetupFindNextLine
SetupFindFirstLineA
SetupGetStringFieldA
StringTableLookUpStringEx
StringTableInitializeEx
StringTableDestroy
SetupDecompressOrCopyFileA
StringTableAddStringEx
StringTableGetExtraData
SetupGetIntField
StringTableInitialize
StringTableAddString
StringTableLookUpString

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

ole32

CoUninitialize
CoCreateInstance
CoInitialize

Exports

Exports

DllMain
Winnt32Cleanup
Winnt32GetOptionalDirectories
Winnt32PluginGetPages
Winnt32PluginInit
Winnt32SetAutoBoot
Winnt32VirusScannerCheck
Winnt32WriteParams

Sections

.text
Size: 329KB - Virtual size: 329KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 145KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WIN9XUPG/WIN95UPG.INF
I386/WINCHAT.CH_
.cab
I386/WINCHAT.EX_
.cab
I386/WINCHAT.HL_
.cab
I386/WINDOWS.CN_
.cab
I386/WINDOWS.HL_
.cab
I386/WINDOW_W.CH_
.cab
I386/WIND_W.CH_
.cab
I386/WINFAX.DL_
.cab
I386/WINGDING.TT_
.cab
I386/WINHELP.EX_
.cab
I386/WINHELP.HL_
.cab
I386/WINHLP32.CN_
.cab
I386/WINHLP32.EX_
.cab
I386/WINHLP32.HL_
.cab
I386/WINHSTB.EX_
.cab
I386/WINHTTP.DL_
.cab
I386/WININET.DL_
.cab
I386/WININSTL.CH_
.cab
I386/WINLOGON.EX_
.cab
I386/WINMGMT.EX_
.cab
I386/WINMGMTR.DL_
.cab
I386/WINMINE.CH_
.cab
I386/WINMINE.EX_
.cab
I386/WINMINE.HL_
.cab
I386/WINMM.DL_
.cab
I386/WINMSD.EX_
.cab
I386/WINNLS.DL_
.cab
I386/WINNT.BM_
.cab
I386/WINNT.EXE
I386/WINNT256.BM_
.cab
I386/WINNT32.EXE
.exe windows:5 windows x86 arch:x86

9f1eb84107343ea6bc23bef196f86610

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Imports

kernel32

GetCommandLineA
HeapAlloc
GetProcessHeap
lstrlenA
CopyFileA
FindNextFileA
FindFirstFileA
CreateDirectoryA
GetFileAttributesA
DeleteFileA
RemoveDirectoryA
SetFileAttributesA
lstrcatA
LocalFree
lstrcmpiA
HeapFree
GetModuleFileNameA
lstrcpyA
Sleep
GetTickCount
GetWindowsDirectoryA
GetDriveTypeA
GetModuleHandleA
ExitProcess
GetTempPathA
FreeLibrary
GetProcAddress
LoadLibraryA
CloseHandle
WaitForSingleObject
LocalAlloc
GetLastError
CreateEventA
GetVersion
CreateProcessA
WritePrivateProfileStringA
GetFullPathNameA

gdi32

GetObjectA
DeleteObject

user32

AdjustWindowRect
CharUpperA
MoveWindow
GetSystemMetrics
SystemParametersInfoA
GetClientRect
GetWindowRect
ClientToScreen
GetDesktopWindow
ScreenToClient
GetDlgItem
SendDlgItemMessageA
CharNextA
GetWindowLongA
SetWindowPos
LoadBitmapA
ShowCursor
SetCursor
LoadCursorA
wsprintfA
DestroyWindow
CreateDialogParamA
MessageBoxA
LoadStringA

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 12B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
I386/WINNT32.HLP
I386/WINNT32.MSI
I386/WINNT32A.DLL
.dll windows:5 windows x86 arch:x86

ec8734672a9462b61ed5c48209905057

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_DLL

Imports

kernel32

FormatMessageA
InterlockedDecrement
SetEvent
FindNextFileA
LeaveCriticalSection
ResetEvent
EnterCriticalSection
DeleteCriticalSection
CreateEventA
InitializeCriticalSection
TlsSetValue
TlsGetValue
ReleaseMutex
RemoveDirectoryA
TlsFree
TlsAlloc
GetPrivateProfileStringA
GetACP
GetOEMCP
GlobalMemoryStatus
GetWindowsDirectoryA
GetSystemDefaultLCID
GetFullPathNameA
WritePrivateProfileSectionA
GetVersion
GetPrivateProfileSectionA
GetTempFileNameA
GetSystemDirectoryA
WritePrivateProfileStringA
LockResource
LoadResource
FindResourceA
GetCurrentProcess
SetErrorMode
UnmapViewOfFile
QueryDosDeviceW
GetModuleHandleA
CreateMutexA
GetVersionExA
WaitForSingleObject
GetExitCodeThread
HeapFree
HeapAlloc
HeapReAlloc
RtlUnwind
InterlockedIncrement
ExitProcess
TerminateProcess
GetCurrentThreadId
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetCPInfo
FreeEnvironmentStringsA
WaitForMultipleObjects
CreateThread
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
GetCurrentDirectoryA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
FlushFileBuffers
GetLocaleInfoW
lstrcmpiA
QueryDosDeviceA
MultiByteToWideChar
lstrlenW
WideCharToMultiByte
SetFilePointer
SetLastError
GetTickCount
GetModuleFileNameA
LoadLibraryExA
GetProcAddress
CreateFileW
DeviceIoControl
lstrcatA
CreateDirectoryA
FindFirstFileA
FindClose
MoveFileA
Sleep
lstrcpyA
WriteFile
CreateFileA
GetFileSize
GetLastError
CloseHandle
ReadFile
GetFileAttributesA
SetFileAttributesA
CopyFileA
lstrlenA
DeleteFileA
GetDiskFreeSpaceA
GetVolumeInformationA
lstrcpynA
ExpandEnvironmentStringsA
LocalFree
CreateFileMappingA
MapViewOfFile
FlushViewOfFile
GetCommandLineA
LocalAlloc
GetLogicalDrives
GetDriveTypeA
GetSystemInfo
VirtualProtect
VirtualQuery
LoadLibraryA
FreeLibrary
lstrcmpA
FreeEnvironmentStringsW
GetEnvironmentStrings
EnumResourceLanguagesA
GetPrivateProfileStructA
OutputDebugStringA

user32

GetSystemMenu
EnableMenuItem
GetDesktopWindow
ClientToScreen
MapWindowPoints
GetWindowRect
MoveWindow
GetKeyboardType
ExitWindowsEx
SetTimer
KillTimer
ReleaseDC
DestroyWindow
IsWindow
IsWindowEnabled
PeekMessageA
CheckRadioButton
LoadCursorA
SetCursor
BeginPaint
EndPaint
WinHelpA
CharLowerA
GetDC
DefWindowProcA
ScreenToClient
GetDlgItemTextA
RegisterClassExA
UpdateWindow
SetWindowTextA
IsDlgButtonChecked
CreateWindowExA
GetDlgCtrlID
SetForegroundWindow
EnableWindow
ShowWindow
SetDlgItemTextA
MessageBoxA
DialogBoxParamA
SetFocus
GetClientRect
GetSystemMetrics
LoadIconA
InvalidateRect
GetSysColor
GetSysColorBrush
EndDialog
GetDlgItem
GetWindowLongA
SetWindowLongA
CallWindowProcA
CharUpperA
SendMessageA
GetParent
PostMessageA
CharToOemA
wsprintfA
LoadStringA
SendDlgItemMessageA
OemToCharBuffA
CheckDlgButton

gdi32

SetBkColor
DeleteObject
GetDeviceCaps
CreateFontIndirectA
GetObjectA
ExcludeClipRect
SetDIBitsToDevice
DeleteDC
StretchDIBits
SetStretchBltMode
SelectObject
CreateCompatibleDC
CreateDIBSection
GetStockObject
SetBkMode
Rectangle
CreateSolidBrush
CreatePalette

ole32

CoCreateInstance
CoInitialize

oleaut32

SysFreeString
SysAllocStringLen

advapi32

IsTextUnicode
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
RegEnumKeyExA
RegQueryInfoKeyA
RegDeleteValueA
RegSetValueExA
RegEnumValueA
FreeSid
IsValidSecurityDescriptor
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
AllocateAndInitializeSid
RegEnumKeyA
RegSetKeySecurity
RegOpenKeyA
RegDeleteKeyA
RegCreateKeyExA
EqualSid
GetTokenInformation
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
InitiateSystemShutdownA
RegUnLoadKeyA
RegLoadKeyA

comctl32

ImageList_ReplaceIcon
ImageList_Create
ord17
PropertySheetA

comdlg32

GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError

mpr

WNetGetConnectionA

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

pidgen

ord5

Exports

Exports

UnsupportedArchitectureCheck
winnt32

Sections

.text
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 547KB - Virtual size: 546KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNT32U.DLL
.dll windows:5 windows x86 arch:x86

56061fcc7e4441571febadebf942fa7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_DLL

Imports

kernel32

EnterCriticalSection
ResetEvent
LeaveCriticalSection
SetEvent
DeleteCriticalSection
TlsGetValue
ReleaseMutex
CreateEventW
InitializeCriticalSection
TlsAlloc
GetPrivateProfileStringW
TlsSetValue
RemoveDirectoryW
GlobalMemoryStatus
GetWindowsDirectoryW
GetSystemDefaultLCID
GetFullPathNameW
WritePrivateProfileSectionW
GetVersion
TlsFree
GetLocaleInfoW
GetSystemDirectoryW
WritePrivateProfileStringW
LockResource
LoadResource
FindResourceW
MultiByteToWideChar
GetPrivateProfileSectionW
MapViewOfFile
CreateFileMappingW
UnmapViewOfFile
GetModuleHandleW
FormatMessageA
CreateMutexW
GetVersionExW
WaitForSingleObject
FlushViewOfFile
EnumResourceLanguagesW
GetCommandLineA
HeapFree
HeapAlloc
InterlockedIncrement
GetTempFileNameW
GetCurrentProcess
ExitProcess
TerminateProcess
GetCurrentThreadId
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
FreeEnvironmentStringsW
SetErrorMode
FindNextFileW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
GetCurrentDirectoryW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
LoadLibraryA
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
LoadLibraryW
SetStdHandle
FlushFileBuffers
FreeLibrary
lstrcmpW
QueryDosDeviceW
lstrcmpiW
lstrcpynW
lstrlenW
SetFilePointer
CreateFileA
SetLastError
GetTickCount
GetModuleFileNameW
LoadLibraryExW
GetProcAddress
DeviceIoControl
lstrcatW
CreateDirectoryW
FindFirstFileW
FindClose
MoveFileW
Sleep
lstrcpyW
WriteFile
CreateFileW
GetFileSize
GetLastError
CloseHandle
ReadFile
GetFileAttributesW
SetFileAttributesW
CopyFileW
lstrlenA
DeleteFileW
GetDiskFreeSpaceW
GetVolumeInformationW
InterlockedDecrement
FormatMessageW
GetExitCodeThread
CreateThread
WaitForMultipleObjects
LocalFree
WideCharToMultiByte
ExpandEnvironmentStringsW
GetLogicalDrives
GetCommandLineW
LocalAlloc
VirtualProtect
GetDriveTypeW
GetSystemInfo
GetEnvironmentStrings
VirtualQuery
GetEnvironmentStringsW
HeapReAlloc
RtlUnwind
GetDriveTypeA
GetPrivateProfileStructA
OutputDebugStringW

user32

EnableMenuItem
GetDesktopWindow
ClientToScreen
KillTimer
GetWindowRect
MoveWindow
GetKeyboardType
ExitWindowsEx
WinHelpW
BeginPaint
SetTimer
RegisterClassExW
IsWindow
IsWindowEnabled
PeekMessageW
CheckRadioButton
LoadCursorW
SetCursor
GetDlgItemTextW
SendDlgItemMessageW
UpdateWindow
DefWindowProcW
ScreenToClient
GetDC
ReleaseDC
DestroyWindow
GetSystemMenu
SetWindowTextW
IsDlgButtonChecked
EndPaint
GetDlgCtrlID
SetForegroundWindow
EnableWindow
ShowWindow
SetDlgItemTextW
MessageBoxW
DialogBoxParamW
SetFocus
GetClientRect
GetSystemMetrics
LoadIconW
InvalidateRect
GetSysColor
GetSysColorBrush
EndDialog
GetDlgItem
GetWindowLongW
SetWindowLongW
SendMessageA
CallWindowProcW
CharLowerW
CharUpperBuffW
CharUpperW
LoadStringW
SendMessageW
GetParent
PostMessageW
wsprintfW
wsprintfA
LoadStringA
CreateWindowExW
CheckDlgButton
MapWindowPoints
CharToOemA

gdi32

CreatePalette
GetDeviceCaps
CreateFontIndirectW
ExcludeClipRect
SetDIBitsToDevice
GetObjectW
StretchDIBits
SetStretchBltMode
DeleteDC
CreateCompatibleDC
CreateDIBSection
SelectObject
SetBkMode
Rectangle
GetStockObject
SetBkColor
DeleteObject
CreateSolidBrush

ole32

CoCreateInstance
CoInitialize

oleaut32

SysFreeString
SysAllocStringLen

advapi32

RegDeleteKeyW
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegDeleteValueW
RegSetValueExW
IsTextUnicode
RegEnumValueW
FreeSid
IsValidSecurityDescriptor
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
AllocateAndInitializeSid
RegEnumKeyW
RegSetKeySecurity
RegUnLoadKeyW
RegCreateKeyExW
EqualSid
GetTokenInformation
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
InitiateSystemShutdownW
RegLoadKeyW
RegOpenKeyW
RegQueryValueExA

comctl32

ImageList_ReplaceIcon
ImageList_Create
ord17
PropertySheetW

comdlg32

GetSaveFileNameW
GetOpenFileNameW
CommDlgExtendedError

mpr

WNetGetConnectionW

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

pidgen

ord6

ntdll

NtQuerySymbolicLinkObject
NtClose
NtOpenDirectoryObject
NtOpenSymbolicLinkObject
RtlInitUnicodeString
RtlNtStatusToDosError
NtQueryDirectoryObject
NtQuerySystemEnvironmentValue
NtSetSystemEnvironmentValue

Exports

Exports

UnsupportedArchitectureCheck
winnt32

Sections

.text
Size: 171KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 565KB - Virtual size: 565KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNTUPG/APMUPGRD.DLL
.dll windows:5 windows x86 arch:x86

221af9db726153721770a34070848592

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

msvcrt

??2@YAPAXI@Z
wcscat
??3@YAXPAX@Z
wcsstr

advapi32

RegQueryInfoKeyW
RegEnumKeyW
RegDeleteValueW
RegCloseKey
RegOpenKeyExW
RegDeleteKeyW
RegSetValueExW
RegQueryValueExW

kernel32

lstrlenW
CreateProcessW
CloseHandle
DisableThreadLibraryCalls
LocalAlloc
LocalFree
WaitForSingleObject

user32

MessageBoxW
LoadStringW

Exports

Exports

ApmUpgradeCompatibilityCheck
ApmUpgradeHandleHaveDisk

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 354B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNTUPG/BOSCOMP.DLL
.dll windows:5 windows x86 arch:x86

c09d495f5a5d52cad19648b84c797e1c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

msvcrt

??3@YAXPAX@Z
??2@YAPAXI@Z
wcsstr
wcslen
_wcsicmp

advapi32

RegQueryValueExW
RegCloseKey
RegOpenKeyW

kernel32

DisableThreadLibraryCalls

user32

LoadStringW

Exports

Exports

BosHardBlockCheck
BosSoftBlockCheck

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 228B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 146B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNTUPG/CFGMGR32.DLL
.dll windows:4 windows x86 arch:x86

4b67c96c7ff344e1264b20acd406a36a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

msvcrt

free
malloc
_except_handler3
_wcsicmp
wcslen
wcscpy
wcscat

kernel32

lstrlenW
SetLastError
DeleteCriticalSection
GetLastError
OutputDebugStringW
LeaveCriticalSection
EnterCriticalSection
WideCharToMultiByte
GetComputerNameW
InitializeCriticalSection
lstrcmpiW
CloseHandle
CreateFileW
LocalAlloc
Sleep
WaitForSingleObject
CreateProcessW
CreateEventW
lstrcatW
lstrcpyW
WaitForMultipleObjects
lstrlenA
ReleaseMutex
WaitNamedPipeW
CreateMutexW
SetEvent
LocalFree

advapi32

RegEnumKeyExW
RegQueryInfoKeyW
RegDeleteKeyW
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW
RegConnectRegistryW
RegCloseKey

user32

CharUpperW
wsprintfW
CharUpperBuffW

rpcrt4

UuidFromStringW
UuidToStringW
UuidCreateNil
RpcBindingFree
RpcBindingFromStringBindingW
RpcStringFreeW
RpcStringBindingComposeW
NdrClientCall

setupapi

StringTableStringFromId
StringTableDestroy
StringTableAddString
StringTableInitialize
CaptureAndConvertAnsiArg
IsUserAdmin
MyFree

Exports

Exports

CMP_Init_Detection
CMP_Report_LogOn
CM_Add_Empty_Log_Conf
CM_Add_Empty_Log_Conf_Ex
CM_Add_IDA
CM_Add_IDW
CM_Add_ID_ExA
CM_Add_ID_ExW
CM_Add_Range
CM_Add_Res_Des
CM_Add_Res_Des_Ex
CM_Connect_MachineA
CM_Connect_MachineW
CM_Create_DevNodeA
CM_Create_DevNodeW
CM_Create_DevNode_ExA
CM_Create_DevNode_ExW
CM_Create_Range_List
CM_Delete_Class_Key
CM_Delete_Class_Key_Ex
CM_Delete_DevNode_Key
CM_Delete_DevNode_Key_Ex
CM_Delete_Range
CM_Detect_Resource_Conflict
CM_Detect_Resource_Conflict_Ex
CM_Disable_DevNode
CM_Disable_DevNode_Ex
CM_Disconnect_Machine
CM_Dup_Range_List
CM_Enable_DevNode
CM_Enable_DevNode_Ex
CM_Enumerate_Classes
CM_Enumerate_Classes_Ex
CM_Enumerate_EnumeratorsA
CM_Enumerate_EnumeratorsW
CM_Enumerate_Enumerators_ExA
CM_Enumerate_Enumerators_ExW
CM_Find_Range
CM_First_Range
CM_Free_Log_Conf
CM_Free_Log_Conf_Ex
CM_Free_Log_Conf_Handle
CM_Free_Range_List
CM_Free_Res_Des
CM_Free_Res_Des_Ex
CM_Free_Res_Des_Handle
CM_Get_Child
CM_Get_Child_Ex
CM_Get_Class_Key_NameA
CM_Get_Class_Key_NameW
CM_Get_Class_Key_Name_ExA
CM_Get_Class_Key_Name_ExW
CM_Get_Class_NameA
CM_Get_Class_NameW
CM_Get_Class_Name_ExA
CM_Get_Class_Name_ExW
CM_Get_Depth
CM_Get_Depth_Ex
CM_Get_DevNode_Registry_PropertyA
CM_Get_DevNode_Registry_PropertyW
CM_Get_DevNode_Registry_Property_ExA
CM_Get_DevNode_Registry_Property_ExW
CM_Get_DevNode_Status
CM_Get_DevNode_Status_Ex
CM_Get_Device_IDA
CM_Get_Device_IDW
CM_Get_Device_ID_ExA
CM_Get_Device_ID_ExW
CM_Get_Device_ID_ListA
CM_Get_Device_ID_ListW
CM_Get_Device_ID_List_ExA
CM_Get_Device_ID_List_ExW
CM_Get_Device_ID_List_SizeA
CM_Get_Device_ID_List_SizeW
CM_Get_Device_ID_List_Size_ExA
CM_Get_Device_ID_List_Size_ExW
CM_Get_Device_ID_Size
CM_Get_Device_ID_Size_Ex
CM_Get_First_Log_Conf
CM_Get_First_Log_Conf_Ex
CM_Get_Global_State
CM_Get_Global_State_Ex
CM_Get_HW_Prof_FlagsA
CM_Get_HW_Prof_FlagsW
CM_Get_HW_Prof_Flags_ExA
CM_Get_HW_Prof_Flags_ExW
CM_Get_Hardware_Profile_InfoA
CM_Get_Hardware_Profile_InfoW
CM_Get_Hardware_Profile_Info_ExA
CM_Get_Hardware_Profile_Info_ExW
CM_Get_Next_Log_Conf
CM_Get_Next_Log_Conf_Ex
CM_Get_Next_Res_Des
CM_Get_Next_Res_Des_Ex
CM_Get_Parent
CM_Get_Parent_Ex
CM_Get_Res_Des_Data
CM_Get_Res_Des_Data_Ex
CM_Get_Res_Des_Data_Size
CM_Get_Res_Des_Data_Size_Ex
CM_Get_Sibling
CM_Get_Sibling_Ex
CM_Get_Version
CM_Get_Version_Ex
CM_Intersect_Range_List
CM_Invert_Range_List
CM_Locate_DevNodeA
CM_Locate_DevNodeW
CM_Locate_DevNode_ExA
CM_Locate_DevNode_ExW
CM_Merge_Range_List
CM_Modify_Res_Des
CM_Modify_Res_Des_Ex
CM_Move_DevNode
CM_Move_DevNode_Ex
CM_Next_Range
CM_Open_Class_KeyA
CM_Open_Class_KeyW
CM_Open_Class_Key_ExA
CM_Open_Class_Key_ExW
CM_Open_DevNode_Key
CM_Open_DevNode_Key_Ex
CM_Query_Arbitrator_Free_Data
CM_Query_Arbitrator_Free_Data_Ex
CM_Query_Arbitrator_Free_Size
CM_Query_Arbitrator_Free_Size_Ex
CM_Query_Remove_SubTree
CM_Query_Remove_SubTree_Ex
CM_Reenumerate_DevNode
CM_Reenumerate_DevNode_Ex
CM_Remove_SubTree
CM_Remove_SubTree_Ex
CM_Run_Detection
CM_Run_Detection_Ex
CM_Set_DevNode_Registry_PropertyA
CM_Set_DevNode_Registry_PropertyW
CM_Set_DevNode_Registry_Property_ExA
CM_Set_DevNode_Registry_Property_ExW
CM_Set_HW_Prof
CM_Set_HW_Prof_Ex
CM_Set_HW_Prof_FlagsA
CM_Set_HW_Prof_FlagsW
CM_Set_HW_Prof_Flags_ExA
CM_Set_HW_Prof_Flags_ExW
CM_Setup_DevNode
CM_Setup_DevNode_Ex
CM_Test_Range_Available
CM_Uninstall_DevNode
CM_Uninstall_DevNode_Ex

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 644B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNTUPG/CLUSCOMP.DLL
.dll windows:5 windows x86 arch:x86

4d0137b222a9f81feb4a1578dd0c31f2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

msvcrt

_wcsicmp
wcscpy

clusapi

GetClusterInformation
CloseCluster
OpenCluster

kernel32

LocalAlloc
GetVersionExW
LocalFree

advapi32

OpenSCManagerW
CloseServiceHandle
OpenServiceW

user32

LoadStringW

Exports

Exports

ClusterUpgradeCompatibilityCheck

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 86B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNTUPG/FSFILTER.DLL
.dll windows:5 windows x86 arch:x86

2e00ab9688e82f2b9af12403cad15da5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

msvcrt

wcsrchr
wcscpy
wcslen
_wcsicmp
wcscat
_strnicmp

imagehlp

ImageUnload
ImageRvaToVa
ImageRvaToSection
ImageDirectoryEntryToData
ImageNtHeader
ImageLoad

advapi32

RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW

kernel32

GetModuleFileNameW
GetPrivateProfileSectionW
LocalFree
LocalAlloc
ExpandEnvironmentStringsW
DisableThreadLibraryCalls
GetLastError
WideCharToMultiByte

Exports

Exports

CheckForFsFilters

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 236B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNTUPG/FSFILTER.HTM
.html
I386/WINNTUPG/FSFILTER.INF
I386/WINNTUPG/FSFILTER.TXT
I386/WINNTUPG/INPUPGRD.DLL
.dll windows:5 windows x86 arch:x86

c8b36f451d918fa6ce86828c26754c4d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

msvcrt

wcsrchr
wcschr

advapi32

OpenSCManagerW
CloseServiceHandle
QueryServiceConfigW
OpenServiceW
RegEnumValueW
RegCloseKey
RegOpenKeyExW

kernel32

lstrcpyW
LocalAlloc
LocalFree
lstrcmpiW
lstrcpynW
lstrlenW
lstrcatW

Exports

Exports

DllMain
InputUpgradeCheck

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 186B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNTUPG/MS/MODEMSHR/MDMSHRUP.DLL
.dll windows:5 windows x86 arch:x86

dd04a376d0f94555df3974039e321f6d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

msvcrt

wcscpy
_wcsicmp
swprintf
wcscat

user32

MessageBoxW

kernel32

DeleteFileW
CloseHandle
GetCurrentProcess
GetLastError
GetCurrentThread
LocalFree
FormatMessageW

advapi32

AdjustTokenPrivileges
OpenThreadToken
OpenProcessToken
LookupPrivilegeValueW
RegSaveKeyW
RegRestoreKeyW

Exports

Exports

DoPostUpgradeProcessing
DoPreUpgradeProcessing
PostUpgradeInitialize
PreUpgradeInitialize

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 186B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNTUPG/MS/MODEMSHR/NETMAP.INF
I386/WINNTUPG/MS/MODEMSHR/NETMSHR.INF
I386/WINNTUPG/MS/MODEMSHR/NETSRDR.INF
I386/WINNTUPG/MS/SNA/IBMMGUG.DLL
.dll windows:5 windows x86 arch:x86

ede2fb3c06551ff884a03a5fe28bef9a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

user32

wsprintfW
wsprintfA

kernel32

GetProcAddress
GetModuleHandleW
GetCommandLineA
WideCharToMultiByte
lstrlenW
GetVersion
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
ExitProcess
VirtualFree
HeapCreate
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
DisableThreadLibraryCalls
WriteFile
HeapAlloc
HeapFree
VirtualAlloc
LoadLibraryA
GetModuleFileNameA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Exports

Exports

DoPostUpgradeProcessing
DoPreUpgradeProcessing
PostUpgradeInitialize
PreUpgradeInitialize

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 183B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNTUPG/MS/SNA/IBMSYNC.INF
I386/WINNTUPG/MS/SNA/NETMAP.INF
I386/WINNTUPG/MS/SNA/NTSNAUPG.DLL
.dll windows:5 windows x86 arch:x86

b4855f501b6c03d362f8bbfe6cd3699b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

user32

wsprintfW
wsprintfA
MessageBoxW
CharUpperA
LoadStringW
GetActiveWindow

kernel32

MultiByteToWideChar
HeapAlloc
lstrlenA
GetCommandLineA
GetModuleHandleW
WideCharToMultiByte
lstrcmpA
lstrcpyA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetProcessHeap
lstrlenW
HeapCreate
VirtualFree
GetModuleFileNameA
GetCPInfo
GetStartupInfoA
GetOEMCP
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
DisableThreadLibraryCalls
WriteFile
HeapFree
VirtualAlloc
GetProcAddress
LoadLibraryA
lstrcatA
CopyFileA
DeleteFileA
GetSystemDirectoryA
GetWindowsDirectoryA
GetPrivateProfileStringA
HeapDestroy
GetACP

advapi32

RegQueryValueExA
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyExA
RegCloseKey

netapi32

NetShareDel
NetShareAdd

Exports

Exports

DoPostUpgradeProcessing
DoPreUpgradeProcessing
PostUpgradeInitialize
PreUpgradeInitialize

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 183B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNTUPG/MS/SNA/SNADLCUG.DLL
.dll windows:5 windows x86 arch:x86

7cf38b26f5a4c2fdec38cbd3360c61a9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

user32

CharUpperA
wsprintfA

kernel32

lstrlenA
lstrcpyA
MultiByteToWideChar
lstrlenW
WideCharToMultiByte
WritePrivateProfileStringA
GetPrivateProfileStringA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetProcAddress
LoadLibraryW
HeapDestroy
HeapCreate
GetFileType
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
DisableThreadLibraryCalls
WriteFile
HeapAlloc
HeapFree
VirtualAlloc
LoadLibraryA
GetStartupInfoA
VirtualFree

advapi32

RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegCloseKey

rpcrt4

UuidToStringA
RpcStringFreeA

Exports

Exports

DoPostUpgradeProcessing
DoPreUpgradeProcessing
PostUpgradeInitialize
PreUpgradeInitialize

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 183B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNTUPG/MS/SNA/SNAUPG30.INI
I386/WINNTUPG/MS/SNA/SNAUPG40.INI
I386/WINNTUPG/MSMQCOMP.DLL
.dll windows:4 windows x86 arch:x86

bbb9096cce44226a9ee3219fd267028d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

lstrcpyW
CompareStringW

user32

LoadStringW
CharNextW

advapi32

RegQueryValueExW
RegCloseKey
RegEnumValueW
RegOpenKeyExW

msvcrt

memset
_initterm
free
wcsrchr
swprintf
__dllonexit
_onexit
malloc
_adjust_fdiv

Exports

Exports

MsmqComp

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 460B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNTUPG/MSVCP50.DLL
.dll windows:4 windows x86 arch:x86

a187c729f52583f8ca9573c6f109607e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

__CxxFrameHandler
_Gettnames
_Getdays
_Getmonths
__p___mb_cur_max
sprintf
strcspn
strtoul
_errno
strtol
isdigit
_Strftime
ldexp
_CIpow
fclose
fwrite
fputc
fgetc
ungetc
fgetpos
fseek
fsetpos
setvbuf
fflush
fputwc
ungetwc
fgetwc
free
localeconv
setlocale
malloc
realloc
__crtCompareStringA
wcstol
_unlock
__crtGetLocaleInfoW
_lock
__setlc_active
__unguarded_readlc_active
__lc_handle
__lc_codepage
__crtLCMapStringA
towlower
towupper
_isctype
__p__pctype
strtod
_ftol
??1type_info@@UAE@XZ
_except_handler3
?terminate@@YAXXZ
__dllonexit
_onexit
_initterm
_adjust_fdiv
??2@YAPAXI@Z
memmove
memchr
wcslen
??4exception@@QAEAAV0@ABV0@@Z
_CxxThrowException
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
??0exception@@QAE@ABQBD@Z
?what@exception@@UBEPBDXZ
fopen
__p__iob

kernel32

DisableThreadLibraryCalls
MultiByteToWideChar
LeaveCriticalSection
DeleteCriticalSection
InterlockedExchange
InitializeCriticalSection
Sleep
EnterCriticalSection
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement

Exports

Exports

??0?$_Complex_base@M@std@@QAE@ABM0@Z
??0?$_Complex_base@N@std@@QAE@ABN0@Z
??0?$_Complex_base@O@std@@QAE@ABO0@Z
??0?$_Mpunct@D@std@@QAE@ABV_Locinfo@1@I_N@Z
??0?$_Mpunct@D@std@@QAE@I_N@Z
??0?$_Mpunct@G@std@@QAE@ABV_Locinfo@1@I_N@Z
??0?$_Mpunct@G@std@@QAE@I_N@Z
??0?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_filebuf@GU?$char_traits@G@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_filebuf@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_fstream@DU?$char_traits@D@std@@@std@@QAE@PBDH@Z
??0?$basic_fstream@DU?$char_traits@D@std@@@std@@QAE@XZ
??0?$basic_fstream@GU?$char_traits@G@std@@@std@@QAE@PBDH@Z
??0?$basic_fstream@GU?$char_traits@G@std@@@std@@QAE@XZ
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PBDH@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@XZ
??0?$basic_ifstream@GU?$char_traits@G@std@@@std@@QAE@PBDH@Z
??0?$basic_ifstream@GU?$char_traits@G@std@@@std@@QAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@QAE@ABV01@@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IAE@XZ
??0?$basic_ios@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
??0?$basic_ios@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@ABV01@@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@ABV01@@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_istringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@1@H@Z
??0?$basic_istringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@PBDH@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@XZ
??0?$basic_ofstream@GU?$char_traits@G@std@@@std@@QAE@PBDH@Z
??0?$basic_ofstream@GU?$char_traits@G@std@@@std@@QAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@ABV01@@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N1@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N1@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@1@H@Z
??0?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@W4_Uninitialized@1@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@W4_Uninitialized@1@@Z
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@IIABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@IDABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD0ABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDIABV?$allocator@D@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@IIABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@IGABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG0ABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGIABV?$allocator@G@1@@Z
??0?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??0?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@1@H@Z
??0?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@1@H@Z
??0?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??0?$codecvt@DDH@std@@QAE@ABV_Locinfo@1@I@Z
??0?$codecvt@DDH@std@@QAE@I@Z
??0?$codecvt@GDH@std@@QAE@ABV_Locinfo@1@I@Z
??0?$codecvt@GDH@std@@QAE@I@Z
??0?$collate@D@std@@QAE@ABV_Locinfo@1@I@Z
??0?$collate@D@std@@QAE@I@Z
??0?$collate@G@std@@QAE@ABV_Locinfo@1@I@Z
??0?$collate@G@std@@QAE@I@Z
??0?$complex@M@std@@QAE@ABM0@Z
??0?$complex@M@std@@QAE@ABV?$complex@N@1@@Z
??0?$complex@M@std@@QAE@ABV?$complex@O@1@@Z
??0?$complex@N@std@@QAE@ABN0@Z
??0?$complex@N@std@@QAE@ABV?$complex@M@1@@Z
??0?$complex@N@std@@QAE@ABV?$complex@O@1@@Z
??0?$complex@O@std@@QAE@ABO0@Z
??0?$complex@O@std@@QAE@ABV?$complex@M@1@@Z
??0?$complex@O@std@@QAE@ABV?$complex@N@1@@Z
??0?$ctype@D@std@@QAE@ABV_Locinfo@1@I@Z
??0?$ctype@D@std@@QAE@PBF_NI@Z
??0?$ctype@G@std@@QAE@ABV_Locinfo@1@I@Z
??0?$ctype@G@std@@QAE@I@Z
??0?$messages@D@std@@QAE@ABV_Locinfo@1@I@Z
??0?$messages@D@std@@QAE@I@Z
??0?$messages@G@std@@QAE@ABV_Locinfo@1@I@Z
??0?$messages@G@std@@QAE@I@Z
??0?$money_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$money_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$money_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$money_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$money_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$money_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$moneypunct@D$00@std@@QAE@ABV_Locinfo@1@I@Z
??0?$moneypunct@D$00@std@@QAE@I@Z
??0?$moneypunct@D$0A@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$moneypunct@D$0A@@std@@QAE@I@Z
??0?$moneypunct@G$00@std@@QAE@ABV_Locinfo@1@I@Z
??0?$moneypunct@G$00@std@@QAE@I@Z
??0?$moneypunct@G$0A@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$moneypunct@G$0A@@std@@QAE@I@Z
??0?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$numpunct@D@std@@QAE@ABV_Locinfo@1@I@Z
??0?$numpunct@D@std@@QAE@I@Z
??0?$numpunct@G@std@@QAE@ABV_Locinfo@1@I@Z
??0?$numpunct@G@std@@QAE@I@Z
??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0Init@ios_base@std@@QAE@XZ
??0_Locinfo@std@@QAE@ABV01@@Z
??0_Locinfo@std@@QAE@HPBD@Z
??0_Locinfo@std@@QAE@PBD@Z
??0_Lockit@std@@QAE@XZ
??0_Timevec@std@@QAE@ABV01@@Z
??0_Timevec@std@@QAE@PAX@Z
??0_Winit@std@@QAE@XZ
??0bad_alloc@std@@QAE@ABV01@@Z
??0bad_alloc@std@@QAE@PBD@Z
??0bad_cast@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@PBD@Z
??0bad_exception@std@@QAE@ABV01@@Z
??0bad_exception@std@@QAE@PBD@Z
??0codecvt_base@std@@QAE@I@Z
??0ctype_base@std@@QAE@I@Z
??0domain_error@std@@QAE@ABV01@@Z
??0domain_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0facet@locale@std@@IAE@I@Z
??0ios_base@std@@IAE@XZ
??0ios_base@std@@QAE@ABV01@@Z
??0length_error@std@@QAE@ABV01@@Z
??0length_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0locale@std@@AAE@PAV_Locimp@01@@Z
??0locale@std@@QAE@ABV01@0H@Z
??0locale@std@@QAE@ABV01@@Z
??0locale@std@@QAE@ABV01@PBDH@Z
??0locale@std@@QAE@PBDH@Z
??0locale@std@@QAE@W4_Uninitialized@1@@Z
??0locale@std@@QAE@XZ
??0logic_error@std@@QAE@ABV01@@Z
??0logic_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0messages_base@std@@QAE@I@Z
??0money_base@std@@QAE@I@Z
??0ostrstream@std@@QAE@PADHH@Z
??0out_of_range@std@@QAE@ABV01@@Z
??0out_of_range@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0overflow_error@std@@QAE@ABV01@@Z
??0overflow_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0range_error@std@@QAE@ABV01@@Z
??0range_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0runtime_error@std@@QAE@ABV01@@Z
??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0strstream@std@@QAE@PADHH@Z
??0time_base@std@@QAE@I@Z
??0underflow_error@std@@QAE@ABV01@@Z
??0underflow_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??1?$_Mpunct@D@std@@UAE@XZ
??1?$_Mpunct@G@std@@UAE@XZ
??1?$basic_filebuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_filebuf@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_fstream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_fstream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_ifstream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ifstream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_istream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??1?$basic_istringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@UAE@XZ
??1?$basic_ofstream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ofstream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??1?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@UAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??1?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??1?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@UAE@XZ
??1?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??1?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@UAE@XZ
??1?$codecvt@DDH@std@@UAE@XZ
??1?$codecvt@GDH@std@@UAE@XZ
??1?$collate@D@std@@UAE@XZ
??1?$collate@G@std@@UAE@XZ
??1?$ctype@D@std@@UAE@XZ
??1?$ctype@G@std@@UAE@XZ
??1?$messages@D@std@@UAE@XZ
??1?$messages@G@std@@UAE@XZ
??1?$money_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@UAE@XZ
??1?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@UAE@XZ
??1?$money_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@UAE@XZ
??1?$money_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@UAE@XZ
??1?$moneypunct@D$00@std@@UAE@XZ
??1?$moneypunct@D$0A@@std@@UAE@XZ
??1?$moneypunct@G$00@std@@UAE@XZ
??1?$moneypunct@G$0A@@std@@UAE@XZ
??1?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@UAE@XZ
??1?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@UAE@XZ
??1?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@UAE@XZ
??1?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@UAE@XZ
??1?$numpunct@D@std@@UAE@XZ
??1?$numpunct@G@std@@UAE@XZ
??1?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@UAE@XZ
??1?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@UAE@XZ
??1?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@UAE@XZ
??1?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@UAE@XZ
??1Init@ios_base@std@@QAE@XZ
??1_Locinfo@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
??1_Timevec@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1bad_alloc@std@@UAE@XZ
??1bad_cast@std@@UAE@XZ
??1bad_exception@std@@UAE@XZ
??1codecvt_base@std@@UAE@XZ
??1ctype_base@std@@UAE@XZ
??1domain_error@std@@UAE@XZ
??1facet@locale@std@@UAE@XZ
??1ios_base@std@@UAE@XZ
??1istrstream@std@@UAE@XZ
??1length_error@std@@UAE@XZ
??1locale@std@@QAE@XZ
??1logic_error@std@@UAE@XZ
??1messages_base@std@@UAE@XZ
??1money_base@std@@UAE@XZ
??1ostrstream@std@@UAE@XZ
??1out_of_range@std@@UAE@XZ
??1overflow_error@std@@UAE@XZ
??1range_error@std@@UAE@XZ
??1runtime_error@std@@UAE@XZ
??1strstream@std@@UAE@XZ
??1strstreambuf@std@@UAE@XZ
??1time_base@std@@UAE@XZ
??1underflow_error@std@@UAE@XZ
??4?$_Complex_base@M@std@@QAEAAV01@ABV01@@Z
??4?$_Complex_base@N@std@@QAEAAV01@ABV01@@Z
??4?$_Complex_base@O@std@@QAEAAV01@ABV01@@Z
??4?$_Ctr@M@std@@QAEAAV01@ABV01@@Z
??4?$_Ctr@N@std@@QAEAAV01@ABV01@@Z
??4?$_Ctr@O@std@@QAEAAV01@ABV01@@Z
??4?$allocator@X@std@@QAEAAV01@ABV01@@Z
??4?$basic_ios@DU?$char_traits@D@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_ios@GU?$char_traits@G@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_iostream@DU?$char_traits@D@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_iostream@GU?$char_traits@G@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@G@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??4?$char_traits@D@std@@QAEAAU01@ABU01@@Z
??4?$char_traits@G@std@@QAEAAU01@ABU01@@Z
??4?$complex@M@std@@QAEAAV01@ABM@Z
??4?$complex@M@std@@QAEAAV01@ABV01@@Z
??4?$complex@N@std@@QAEAAV01@ABN@Z
??4?$complex@N@std@@QAEAAV01@ABV01@@Z
??4?$complex@O@std@@QAEAAV01@ABO@Z
??4?$complex@O@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@C@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@D@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@E@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@F@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@G@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@H@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@I@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@J@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@K@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@M@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@N@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@O@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@_N@std@@QAEAAV01@ABV01@@Z
??4Init@ios_base@std@@QAEAAV012@ABV012@@Z
??4_Locinfo@std@@QAEAAV01@ABV01@@Z
??4_Lockit@std@@QAEAAV01@ABV01@@Z
??4_Num_base@std@@QAEAAU01@ABU01@@Z
??4_Num_float_base@std@@QAEAAU01@ABU01@@Z
??4_Num_int_base@std@@QAEAAU01@ABU01@@Z
??4_Timevec@std@@QAEAAV01@ABV01@@Z
??4_Winit@std@@QAEAAV01@ABV01@@Z
??4bad_alloc@std@@QAEAAV01@ABV01@@Z
??4bad_cast@std@@QAEAAV01@ABV01@@Z
??4bad_exception@std@@QAEAAV01@ABV01@@Z
??4domain_error@std@@QAEAAV01@ABV01@@Z
??4id@locale@std@@QAEAAV012@ABV012@@Z
??4ios_base@std@@QAEAAV01@ABV01@@Z
??4length_error@std@@QAEAAV01@ABV01@@Z
??4locale@std@@QAEAAV01@ABV01@@Z
??4logic_error@std@@QAEAAV01@ABV01@@Z
??4out_of_range@std@@QAEAAV01@ABV01@@Z
??4overflow_error@std@@QAEAAV01@ABV01@@Z
??4range_error@std@@QAEAAV01@ABV01@@Z
??4runtime_error@std@@QAEAAV01@ABV01@@Z
??4underflow_error@std@@QAEAAV01@ABV01@@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAF@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAG@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAJ@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAK@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAM@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAO@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAPAX@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_N@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@DU?$char_traits@D@std@@@1@AAV21@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAF@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAG@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAI@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAJ@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAK@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAM@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAN@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAO@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAPAX@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AA_N@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@GU?$char_traits@G@std@@@1@AAV21@@Z@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAC@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAD@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAE@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$complex@M@0@@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$complex@N@0@@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$complex@O@0@@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@PAC@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@PAD@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@PAE@Z
??5std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAG@Z
??5std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??5std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAV?$complex@M@0@@Z
??5std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAV?$complex@N@0@@Z
??5std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAV?$complex@O@0@@Z
??5std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@PAF@Z
??5std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@PAG@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@F@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@O@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@DU?$char_traits@D@std@@@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@F@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@O@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@GU?$char_traits@G@std@@@1@AAV21@@Z@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@PBX@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@_N@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$complex@M@0@@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$complex@N@0@@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$complex@O@0@@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@C@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@D@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@E@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBC@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBE@Z
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@ABV?$complex@M@0@@Z
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@ABV?$complex@N@0@@Z
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@ABV?$complex@O@0@@Z
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@G@Z
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@PBF@Z
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@PBG@Z
??7ios_base@std@@QBE_NXZ
??8locale@std@@QBE_NABV01@@Z
??8std@@YA_NABMABV?$complex@M@0@@Z
??8std@@YA_NABNABV?$complex@N@0@@Z
??8std@@YA_NABOABV?$complex@O@0@@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
??8std@@YA_NABV?$complex@M@0@0@Z
??8std@@YA_NABV?$complex@M@0@ABM@Z
??8std@@YA_NABV?$complex@N@0@0@Z
??8std@@YA_NABV?$complex@N@0@ABN@Z
??8std@@YA_NABV?$complex@O@0@0@Z
??8std@@YA_NABV?$complex@O@0@ABO@Z
??8std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??8std@@YA_NPBGABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??9locale@std@@QBE_NABV01@@Z
??9std@@YA_NABMABV?$complex@M@0@@Z
??9std@@YA_NABNABV?$complex@N@0@@Z
??9std@@YA_NABOABV?$complex@O@0@@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??9std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??9std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
??9std@@YA_NABV?$complex@M@0@0@Z
??9std@@YA_NABV?$complex@M@0@ABM@Z
??9std@@YA_NABV?$complex@N@0@0@Z
??9std@@YA_NABV?$complex@N@0@ABN@Z
??9std@@YA_NABV?$complex@O@0@0@Z
??9std@@YA_NABV?$complex@O@0@ABO@Z
??9std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??9std@@YA_NPBGABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
??A?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAGI@Z
??A?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEABGI@Z
??Bid@locale@std@@QAEIXZ
??Bios_base@std@@QBEPAXXZ
??Dstd@@YA?AV?$complex@M@0@ABMABV10@@Z
??Dstd@@YA?AV?$complex@M@0@ABV10@0@Z
??Dstd@@YA?AV?$complex@M@0@ABV10@ABM@Z
??Dstd@@YA?AV?$complex@N@0@ABNABV10@@Z
??Dstd@@YA?AV?$complex@N@0@ABV10@0@Z
??Dstd@@YA?AV?$complex@N@0@ABV10@ABN@Z
??Dstd@@YA?AV?$complex@O@0@ABOABV10@@Z
??Dstd@@YA?AV?$complex@O@0@ABV10@0@Z
??Dstd@@YA?AV?$complex@O@0@ABV10@ABO@Z
??Gstd@@YA?AV?$complex@M@0@ABMABV10@@Z
??Gstd@@YA?AV?$complex@M@0@ABV10@0@Z
??Gstd@@YA?AV?$complex@M@0@ABV10@@Z
??Gstd@@YA?AV?$complex@M@0@ABV10@ABM@Z
??Gstd@@YA?AV?$complex@N@0@ABNABV10@@Z
??Gstd@@YA?AV?$complex@N@0@ABV10@0@Z
??Gstd@@YA?AV?$complex@N@0@ABV10@@Z
??Gstd@@YA?AV?$complex@N@0@ABV10@ABN@Z
??Gstd@@YA?AV?$complex@O@0@ABOABV10@@Z
??Gstd@@YA?AV?$complex@O@0@ABV10@0@Z
??Gstd@@YA?AV?$complex@O@0@ABV10@@Z
??Gstd@@YA?AV?$complex@O@0@ABV10@ABO@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@D@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@DABV10@@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@0@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@G@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@PBG@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@GABV10@@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBGABV10@@Z
??Hstd@@YA?AV?$complex@M@0@ABMABV10@@Z

Sections

.text
Size: 335KB - Virtual size: 334KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 186KB - Virtual size: 185KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNTUPG/MSVCRT.DLL
.dll windows:4 windows x86 arch:x86

b0d3278f6dd8a1a715873c57aae39d31

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

EnumSystemLocalesA
RtlUnwind
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
SetUnhandledExceptionFilter
GetModuleFileNameA
GetModuleFileNameW
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetCommandLineA
GetVersionExA
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetLastError
ResumeThread
CreateThread
ExitThread
CloseHandle
TlsSetValue
TlsGetValue
GetCurrentThreadId
TlsFree
SetLastError
GetCurrentThread
TlsAlloc
FindNextFileA
FindFirstFileA
FindClose
FindNextFileW
FindFirstFileW
HeapFree
HeapAlloc
GetModuleHandleA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
SetHandleCount
GetFileType
GetStartupInfoA
GetACP
GetOEMCP
GetCPInfo
GetProcAddress
LoadLibraryA
MultiByteToWideChar
GetCommandLineW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
UnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetConsoleCtrlHandler
SetEnvironmentVariableW
IsValidLocale
IsValidCodePage
GetLocaleInfoA
RaiseException
GetUserDefaultLCID
GetLocaleInfoW
GetTimeZoneInformation
FlushFileBuffers
SetFilePointer
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
Sleep
Beep
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDiskFreeSpaceA
GetLogicalDrives
SetErrorMode
GetFileAttributesA
GetCurrentDirectoryA
SetCurrentDirectoryA
SetFileAttributesA
GetFullPathNameA
GetDriveTypeA
GetCurrentProcessId
CreateDirectoryA
RemoveDirectoryA
DeleteFileA
GetFileAttributesW
GetCurrentDirectoryW
SetCurrentDirectoryW
SetFileAttributesW
GetFullPathNameW
CreateDirectoryW
DeleteFileW
MoveFileW
RemoveDirectoryW
GetDriveTypeW
MoveFileA
GetExitCodeProcess
WaitForSingleObject
FreeLibrary
CreateProcessA
CreateProcessW
HeapValidate
HeapCompact
HeapWalk
HeapSize
ReadConsoleA
SetConsoleMode
GetConsoleMode
SetEndOfFile
WriteConsoleA
DuplicateHandle
GetFileInformationByHandle
PeekNamedPipe
ReadConsoleInputA
PeekConsoleInputA
GetNumberOfConsoleInputEvents
LockFile
UnlockFile
CreateFileA
CreatePipe
ReadFile
CreateFileW
GetSystemTimeAsFileTime
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
GetLocalTime
SetLocalTime

Exports

Exports

$I10_OUTPUT
??0__non_rtti_object@@QAE@ABV0@@Z
??0__non_rtti_object@@QAE@PBD@Z
??0bad_cast@@QAE@ABQBD@Z
??0bad_cast@@QAE@ABV0@@Z
??0bad_typeid@@QAE@ABV0@@Z
??0bad_typeid@@QAE@PBD@Z
??0exception@@QAE@ABQBD@Z
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@XZ
??1__non_rtti_object@@UAE@XZ
??1bad_cast@@UAE@XZ
??1bad_typeid@@UAE@XZ
??1exception@@UAE@XZ
??1type_info@@UAE@XZ
??2@YAPAXI@Z
??3@YAXPAX@Z
??4__non_rtti_object@@QAEAAV0@ABV0@@Z
??4bad_cast@@QAEAAV0@ABV0@@Z
??4bad_typeid@@QAEAAV0@ABV0@@Z
??4exception@@QAEAAV0@ABV0@@Z
??8type_info@@QBEHABV0@@Z
??9type_info@@QBEHABV0@@Z
??_7__non_rtti_object@@6B@
??_7bad_cast@@6B@
??_7bad_typeid@@6B@
??_7exception@@6B@
??_E__non_rtti_object@@UAEPAXI@Z
??_Ebad_cast@@UAEPAXI@Z
??_Ebad_typeid@@UAEPAXI@Z
??_Eexception@@UAEPAXI@Z
??_G__non_rtti_object@@UAEPAXI@Z
??_Gbad_cast@@UAEPAXI@Z
??_Gbad_typeid@@UAEPAXI@Z
??_Gexception@@UAEPAXI@Z
??_U@YAPAXI@Z
??_V@YAXPAX@Z
?_query_new_handler@@YAP6AHI@ZXZ
?_query_new_mode@@YAHXZ
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
?_set_new_mode@@YAHH@Z
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
?before@type_info@@QBEHABV1@@Z
?name@type_info@@QBEPBDXZ
?raw_name@type_info@@QBEPBDXZ
?set_new_handler@@YAP6AXXZP6AXXZ@Z
?set_terminate@@YAP6AXXZP6AXXZ@Z
?set_unexpected@@YAP6AXXZP6AXXZ@Z
?terminate@@YAXXZ
?unexpected@@YAXXZ
?what@exception@@UBEPBDXZ
_CIacos
_CIasin
_CIatan
_CIatan2
_CIcos
_CIcosh
_CIexp
_CIfmod
_CIlog
_CIlog10
_CIpow
_CIsin
_CIsinh
_CIsqrt
_CItan
_CItanh
_CxxThrowException
_EH_prolog
_Getdays
_Getmonths
_Gettnames
_HUGE
_Strftime
_XcptFilter
__CxxFrameHandler
__CxxLongjmpUnwind
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__STRINGTOLD
__argc
__argv
__badioinfo
__crtCompareStringA
__crtGetLocaleInfoW
__crtLCMapStringA
__dllonexit
__doserrno
__fpecode
__getmainargs
__initenv
__isascii
__iscsym
__iscsymf
__lc_codepage
__lc_collate_cp
__lc_handle
__lconv_init
__mb_cur_max
__p___argc
__p___argv
__p___initenv
__p___mb_cur_max
__p___wargv
__p___winitenv
__p__acmdln
__p__amblksiz
__p__commode
__p__daylight
__p__dstbias
__p__environ
__p__fileinfo
__p__fmode
__p__iob
__p__mbcasemap
__p__mbctype
__p__osver
__p__pctype
__p__pgmptr
__p__pwctype
__p__timezone
__p__tzname
__p__wcmdln
__p__wenviron
__p__winmajor
__p__winminor
__p__winver
__p__wpgmptr
__pioinfo
__pxcptinfoptrs
__set_app_type
__setlc_active
__setusermatherr
__threadhandle
__threadid
__toascii
__unDName
__unDNameEx
__unguarded_readlc_active
__wargv
__wgetmainargs
__winitenv
_abnormal_termination
_access
_acmdln
_adj_fdiv_m16i
_adj_fdiv_m32
_adj_fdiv_m32i
_adj_fdiv_m64
_adj_fdiv_r
_adj_fdivr_m16i
_adj_fdivr_m32
_adj_fdivr_m32i
_adj_fdivr_m64
_adj_fpatan
_adj_fprem
_adj_fprem1
_adj_fptan
_adjust_fdiv
_aexit_rtn
_amsg_exit
_assert
_atodbl
_atoi64
_atoldbl
_beep
_beginthread
_beginthreadex
_c_exit
_cabs
_callnewh
_cexit
_cgets
_chdir
_chdrive
_chgsign
_chkesp
_chmod
_chsize
_clearfp
_close
_commit
_commode
_control87
_controlfp
_copysign
_cprintf
_cputs
_creat
_cscanf
_ctime64
_ctype
_cwait
_daylight
_dstbias
_dup
_dup2
_ecvt
_endthread
_endthreadex
_environ
_eof
_errno
_except_handler2
_except_handler3
_execl
_execle
_execlp
_execlpe
_execv
_execve
_execvp
_execvpe
_exit
_expand
_fcloseall
_fcvt
_fdopen
_fgetchar
_fgetwchar
_filbuf
_fileinfo
_filelength
_filelengthi64
_fileno
_findclose
_findfirst
_findfirst64
_findfirsti64
_findnext
_findnext64
_findnexti64
_finite
_flsbuf
_flushall
_fmode
_fpclass
_fpieee_flt
_fpreset
_fputchar
_fputwchar
_fsopen
_fstat
_fstat64
_fstati64
_ftime
_ftime64
_ftol
_fullpath
_futime
_futime64
_gcvt
_get_heap_handle
_get_osfhandle
_get_sbh_threshold
_getch
_getche
_getcwd
_getdcwd
_getdiskfree
_getdllprocaddr
_getdrive
_getdrives
_getmaxstdio
_getmbcp
_getpid
_getsystime
_getw
_getws
_global_unwind2
_gmtime64
_heapadd
_heapchk
_heapmin
_heapset
_heapused
_heapwalk
_hypot
_i64toa
_i64tow
_initterm
_inp
_inpd
_inpw
_iob
_isatty
_isctype
_ismbbalnum
_ismbbalpha
_ismbbgraph
_ismbbkalnum
_ismbbkana
_ismbbkprint
_ismbbkpunct
_ismbblead
_ismbbprint
_ismbbpunct
_ismbbtrail
_ismbcalnum
_ismbcalpha
_ismbcdigit
_ismbcgraph
_ismbchira
_ismbckata
_ismbcl0
_ismbcl1
_ismbcl2
_ismbclegal
_ismbclower
_ismbcprint
_ismbcpunct
_ismbcspace
_ismbcsymbol
_ismbcupper
_ismbslead
_ismbstrail
_isnan
_itoa
_itow
_j0
_j1
_jn
_kbhit
_lfind
_loaddll
_local_unwind2
_localtime64
_lock
_locking
_logb
_longjmpex
_lrotl
_lrotr
_lsearch
_lseek
_lseeki64
_ltoa
_ltow
_makepath
_mbbtombc
_mbbtype
_mbcasemap
_mbccpy
_mbcjistojms
_mbcjmstojis
_mbclen
_mbctohira
_mbctokata
_mbctolower
_mbctombb
_mbctoupper
_mbctype
_mbsbtype
_mbscat
_mbschr
_mbscmp
_mbscoll
_mbscpy
_mbscspn
_mbsdec
_mbsdup
_mbsicmp
_mbsicoll
_mbsinc
_mbslen
_mbslwr
_mbsnbcat
_mbsnbcmp
_mbsnbcnt
_mbsnbcoll
_mbsnbcpy
_mbsnbicmp
_mbsnbicoll
_mbsnbset
_mbsncat
_mbsnccnt
_mbsncmp
_mbsncoll
_mbsncpy
_mbsnextc
_mbsnicmp
_mbsnicoll
_mbsninc
_mbsnset
_mbspbrk
_mbsrchr
_mbsrev
_mbsset
_mbsspn
_mbsspnp
_mbsstr
_mbstok
_mbstrlen
_mbsupr
_memccpy
_memicmp
_mkdir
_mktemp
_mktime64
_msize
_nextafter
_onexit
_open
_open_osfhandle
_osplatform
_osver
_outp
_outpd
_outpw
_pclose
_pctype
_pgmptr
_pipe
_popen
_purecall
_putch
_putenv
_putw
_putws
_pwctype
_read
_rmdir
_rmtmp
_rotl
_rotr
_safe_fdiv
_safe_fdivr
_safe_fprem
_safe_fprem1
_scalb
_searchenv
_seh_longjmp_unwind
_set_error_mode
_set_sbh_threshold
_seterrormode
_setjmp
_setjmp3
_setmaxstdio
_setmbcp
_setmode
_setsystime
_sleep
_snprintf
_snwprintf
_sopen
_spawnl
_spawnle
_spawnlp
_spawnlpe
_spawnv
_spawnve
_spawnvp
_spawnvpe
_splitpath
_stat
_stat64
_stati64
_statusfp
_strcmpi
_strdate
_strdup
_strerror
_stricmp
_stricoll
_strlwr
_strncoll
_strnicmp
_strnicoll
_strnset
_strrev
_strset
_strtime
_strupr
_swab
_sys_errlist
_sys_nerr
_tell
_telli64
_tempnam
_time64
_timezone
_tolower
_toupper
_tzname
_tzset
_ui64toa
_ui64tow
_ultoa
_ultow
_umask
_ungetch
_unlink
_unloaddll
_unlock
_utime
_utime64
_vsnprintf
_vsnwprintf
_waccess

Sections

.text
Size: 196KB - Virtual size: 193KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNTUPG/NETMAP.INF
I386/WINNTUPG/NETUPG.INF
I386/WINNTUPG/NETUPGRD.DLL
.dll windows:5 windows x86 arch:x86

c583ee00489e2b40fb579cb5a9da04d0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

msvcrt

wcscat
wcscpy
wcsstr
_wcsnicmp
_wcsicmp
swprintf
wcslen
swscanf
wcscspn
_except_handler3
_wsplitpath
wcstoul
wcschr
free
_initterm
malloc
_adjust_fdiv
_wfopen
fgetws
_vsnwprintf
fclose
iswspace
fwprintf
_purecall
vswprintf

ntdll

RtlInitUnicodeString
RtlNtStatusToDosError
NtOpenFile

advapi32

RegConnectRegistryW
RegCloseKey
LsaClose
LsaQueryInformationPolicy
LsaOpenPolicy
RegSaveKeyW
AdjustTokenPrivileges
GetTokenInformation
OpenProcessToken
RegQueryInfoKeyW
RegQueryValueExW
RegEnumKeyExW
RegEnumValueW
RegOpenKeyExW
RegSetValueExW

comdlg32

CommDlgExtendedError
GetOpenFileNameW

kernel32

RaiseException
DisableThreadLibraryCalls
SetLastError
QueryDosDeviceW
GetWindowsDirectoryW
GetVersionExW
FindResourceW
LoadResource
LockResource
lstrcatW
FormatMessageW
LoadLibraryW
GetProcAddress
DeviceIoControl
lstrcpyW
HeapFree
GetProcessHeap
HeapAlloc
LocalFree
GetEnvironmentVariableW
DefineDosDeviceW
RemoveDirectoryW
lstrcmpiW
FreeLibrary
DeleteFileW
CloseHandle
GetLastError
GetCurrentProcess
IsBadReadPtr
CopyFileW
GetModuleFileNameW
GetModuleHandleW
FindClose
FindNextFileW
CreateDirectoryW
FindFirstFileW
GetFileInformationByHandle
CreateFileW
lstrlenW

setupapi

SetupGetIntField
SetupCloseInfFile
SetupGetLineTextW
SetupOpenInfFileW
SetupFindFirstLineW
SetupFindNextLine
SetupGetMultiSzFieldW
SetupGetStringFieldW

user32

CharUpperW
MessageBoxW
wsprintfW

Exports

Exports

NetUpgradeAddLineToSection
NetUpgradeAddSection
NetUpgradeCompatibilityCheck
NetUpgradeHandleCompatibilityHaveDisk
Winnt32Cleanup
Winnt32PluginGetPages
Winnt32PluginInit
Winnt32WriteParams
WriteNetworkInfoToAnswerFile

Sections

.text
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNTUPG/NTDSUPG.DLL
.dll windows:5 windows x86 arch:x86

faa23c79a6c894263573db81cedf8d90

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

ntdll

RtlUnwind
RtlGetNtProductType

kernel32

LocalFree
FindClose
GetDiskFreeSpaceExA
FreeLibrary
FormatMessageW
GetVersionExW
LoadLibraryW
FindFirstFileA

user32

MessageBoxW

netapi32

NetGetDCName
NetApiBufferFree
NetServerGetInfo

advapi32

RegQueryValueExW
RegOpenKeyA
RegCloseKey
RegQueryValueExA
RegOpenKeyExW

Exports

Exports

DsUpgradeCompatibilityCheck

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNTUPG/OEM/DIGI/ASYNC/DGUPGRD.DLL
.dll windows:5 windows x86 arch:x86

df8a3a31a12d317b84812ea056321afe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

msvcrt

swprintf
_wcsicmp
wcscpy
wcslen

kernel32

GetCurrentProcess
GetProcAddress
DisableThreadLibraryCalls
GetModuleHandleW
DeleteFileW

advapi32

RegSaveKeyW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges

Exports

Exports

DoPreUpgradeProcessing
PreUpgradeInitialize

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 242B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNTUPG/OEM/DIGI/ASYNC/NETMAP.INF
I386/WINNTUPG/OEM/DIGI/ISDN/BRI/DIGIUPG.DLL
.dll windows:4 windows x86 arch:x86

a935b4a1f06a11eb5b8cfd0d3f2ab08c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
GetProcessHeap
HeapFree
GetModuleHandleW
HeapAlloc
GetModuleFileNameA
MultiByteToWideChar
FreeEnvironmentStringsW
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
GetVersion
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
FatalAppExitA
Sleep
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCurrentThread
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetProcAddress
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
GetVersionExA
GetUserDefaultLCID
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
HeapDestroy
HeapCreate
VirtualFree
WriteFile
LCMapStringA
LCMapStringW
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
SetEnvironmentVariableA
HeapReAlloc
UnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
VirtualAlloc
LoadLibraryA
FlushFileBuffers
GetTimeZoneInformation
GetLocaleInfoW
CloseHandle
SetStdHandle
SetFilePointer
CompareStringA
CompareStringW

user32

wsprintfW

advapi32

RegQueryValueExW
RegQueryInfoKeyW

Exports

Exports

DoPreUpgradeProcessing
PreUpgradeInitialize

Sections

.text
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNTUPG/OEM/DIGI/ISDN/BRI/NETMAP.INF
I386/WINNTUPG/OEM/DIGI/ISDN/PRI/DIGPRIUP.DLL
.dll windows:4 windows x86 arch:x86

9f6f26515027532ecc4a01956eef8574

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

OutputDebugStringW
GetModuleHandleW
FreeEnvironmentStringsA
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
GetProcAddress
FreeEnvironmentStringsW
WideCharToMultiByte
GetStringTypeW
RtlUnwind
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
HeapAlloc
UnhandledExceptionFilter
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
IsBadWritePtr
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA

user32

wsprintfW

advapi32

RegCloseKey
RegQueryValueExW
RegOpenKeyExW

Exports

Exports

DoPreUpgradeProcessing
PreUpgradeInitialize
TestUpgradeProcessing

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNTUPG/OEM/DIGI/ISDN/PRI/NETMAP.INF
I386/WINNTUPG/OEM/DIGI/REALPORT/DGRPUPG.DLL
.dll windows:5 windows x86 arch:x86

5c632511de635200ae505a2044309e24

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

msvcrt

swprintf
wcslen
_wcsicmp
wcscpy

kernel32

OutputDebugStringW
DeleteFileW
GetModuleHandleW
DisableThreadLibraryCalls
GetCurrentProcess
GetProcAddress

user32

wsprintfW

advapi32

LookupPrivilegeValueW
RegEnumKeyExW
RegOpenKeyW
RegSaveKeyW
OpenProcessToken
AdjustTokenPrivileges
RegCloseKey

Exports

Exports

DoPreUpgradeProcessing
PreUpgradeInitialize

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 328B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNTUPG/OEM/DIGI/REALPORT/NETMAP.INF
I386/WINNTUPG/OEM/EICON/DINT5UPG.DLL
.dll windows:5 windows x86 arch:x86

664c425ee158e59dda7e08db662acbbd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

msvcrt

wcscpy
iswctype
wcsncmp
fwprintf
wcslen
_wcsicmp
_ultow
vswprintf
wcsspn
vfprintf
fclose
fopen
fprintf
wcsncpy
wcsstr
sprintf
_wtol
wcsrchr
_ltow
wcscmp
wcscat
wcschr
swprintf

kernel32

DeleteFileW
RemoveDirectoryW
FindNextFileW
LoadLibraryW
GetProcAddress
GetModuleHandleW
GetLastError
Sleep
FindFirstFileW
SetFileAttributesW
GetLocalTime

user32

MessageBoxW

advapi32

OpenSCManagerW
OpenServiceW
RegCloseKey
RegQueryInfoKeyW
RegDeleteKeyW
RegEnumKeyExW
RegOpenKeyExW
StartServiceW
RegQueryValueExW
CloseServiceHandle
RegSetValueExW

cfgmgr32

CM_Get_DevNode_Registry_PropertyW
CM_Locate_DevNodeW
CM_Get_DevNode_Status
CM_Get_Parent
CM_Get_Sibling
CM_Get_Device_IDW
CM_Get_Child

setupapi

SetupInstallFromInfSectionW

Exports

Exports

DoPostUpgradeProcessing
DoPreUpgradeProcessing
PostUpgradeInitialize
PreUpgradeInitialize

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 179KB - Virtual size: 390KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 183B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNTUPG/OEM/EICON/NETMAP.INF
I386/WINNTUPG/OEM/EQN/EQNUPGRD.DLL
.dll windows:4 windows x86 arch:x86

e9017c978428b53404b5ec5674e5e166

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
OutputDebugStringW
CloseHandle
DeviceIoControl
Sleep
CreateFileW
GlobalFree
GlobalUnlock
GetModuleHandleW
GetLocalTime
GetModuleFileNameW
DeleteFileW
CopyFileW
SetFileAttributesW
GetTempFileNameW
GetTempPathW
GetFileAttributesW
GetLastError
GlobalAlloc
GlobalLock
VirtualAlloc
GetStartupInfoA
GetModuleFileNameA
SetEnvironmentVariableA
CompareStringW
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
HeapAlloc
GetCommandLineA
GetVersion
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
FatalAppExitA
HeapFree
HeapDestroy
HeapCreate
VirtualFree
GetPrivateProfileIntW
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCurrentThread
SetHandleCount
GetStdHandle
GetFileType
GetLocaleInfoA
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
WriteFile
LCMapStringA
LCMapStringW
IsValidLocale
IsValidCodePage
GetStringTypeA
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
SetFilePointer
SetStdHandle
FlushFileBuffers
UnhandledExceptionFilter
GetStringTypeW
LoadLibraryA
SetEndOfFile
ReadFile
GetTimeZoneInformation
GetLocaleInfoW
CompareStringA

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

Exports

Exports

DoPreUpgradeProcessing
PreUpgradeInitialize

Sections

.text
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNTUPG/OEM/EQN/NETMAP.INF
I386/WINNTUPG/OEM/NOVELL/IWCLIENT.INF
I386/WINNTUPG/OEM/NOVELL/LIBS32/AUDWIN32.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/LIBS32/CALWIN32.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/LIBS32/CLNWIN32.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/LIBS32/CLXWIN32.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/LIBS32/CW3215MT.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/LIBS32/LGNWNT32.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/LIBS32/LOGINW32.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/LIBS32/NCPWIN32.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/LIBS32/NETWIN32.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/LIBS32/NRDWIN32.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/LIBS32/PRTWIN32.DL_
I386/WINNTUPG/OEM/NOVELL/LOCWIN32.DLL
.dll windows:4 windows x86 arch:x86

53a3c9e180ca29e5c8d42ca09c747d4c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FreeEnvironmentStringsA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
FreeLibrary
GetProcAddress
LoadLibraryA
GetACP
GetConsoleCP
GetLocaleInfoW
GetThreadLocale
GetCommandLineA
GetModuleHandleA
GetVersion
HeapFree
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
HeapCreate
HeapDestroy
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
GetModuleFileNameA
GetCPInfo
GetOEMCP
InitializeCriticalSection
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
WriteFile
FlushFileBuffers
CloseHandle
SetStdHandle
SetFilePointer
IsValidCodePage
CompareStringW
LCMapStringW
lstrcmpA
LCMapStringA
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
CompareStringA
SetEnvironmentVariableA
HeapReAlloc
RaiseException

user32

CharUpperA
CharLowerA
CharToOemA
OemToCharA

Exports

Exports

NWCharLwr
NWCharType
NWCharUpr
NWCharVal
NWFreeUnicodeTables
NWGetCollationHandle
NWGetLocalToUnicodeHandle
NWGetMonocaseHandle
NWGetNWLOCALEVersion
NWGetUnicodeToLocalHandle
NWIncrement
NWInitUnicodeTables
NWLAnsiToOem
NWLInsertChar
NWLIsAnsi
NWLOemToAnsi
NWLSetPrimaryUnicodeSearchPath
NWLTruncateString
NWLlocaleconv
NWLmblen
NWLmbslen
NWLoadRuleTable
NWLocalToUnicode
NWLsetlocale
NWLstrbcpy
NWLstrchr
NWLstrcoll
NWLstrcspn
NWLstrftime
NWLstricmp
NWLstrlwr
NWLstrpbrk
NWLstrrchr
NWLstrrev
NWLstrspn
NWLstrstr
NWLstrtok
NWLstrupr
NWLstrxfrm
NWNextChar
NWPrevChar
NWUSByteToUnicode
NWUSByteToUnicodePath
NWUSGetCodePage
NWUSLenByteToUnicode
NWUSLenByteToUnicodePath
NWUSStandardUnicodeInit
NWUSStandardUnicodeOverride
NWUSStandardUnicodeRelease
NWUSUnicodeToByte
NWUSUnicodeToBytePath
NWUSUnicodeToLowerCase
NWUSUnicodeToUntermByte
NWUSUnicodeToUntermBytePath
NWUSUnicodeToUpperCase
NWUXByteToUnicode
NWUXByteToUnicodePath
NWUXGetByteFunctions
NWUXGetCharSize
NWUXGetNoMapAction
NWUXGetScanAction
NWUXGetSubByte
NWUXGetSubUni
NWUXGetUniFunctions
NWUXLenByteToUnicode
NWUXLenByteToUnicodePath
NWUXLoadByteUnicodeConverter
NWUXLoadCaseConverter
NWUXLoadCollationConverter
NWUXLoadNormalizeConverter
NWUXResetConverter
NWUXSetByteFunctions
NWUXSetNoMapAction
NWUXSetScanAction
NWUXSetSubByte
NWUXSetSubUni
NWUXSetUniFunctions
NWUXUnicodeToByte
NWUXUnicodeToBytePath
NWUXUnicodeToCase
NWUXUnicodeToCollation
NWUXUnicodeToNormalized
NWUXUnicodeToUntermByte
NWUXUnicodeToUntermBytePath
NWUXUnloadConverter
NWUnicodeCompare
NWUnicodeToCollation
NWUnicodeToLocal
NWUnicodeToMonocase
NWUnloadRuleTable
NWatoi
NWisalnum
NWisalpha
NWisdigit
NWisxdigit
NWitoa
NWltoa
NWprintf
NWstrImoney
NWstrlen
NWstrmoney
NWstrncoll
NWstrncpy
NWstrnum
NWultoa
NWutoa
NWvprintf
NWvsprintf
_NWsprintf
_NWwsprintf
nwusuniicmp
nwusuninicmp
unicat
unichr
unicmp
unicpy
unicspn
uniicmp
unilen
unincat
unincmp
unincpy
uninicmp
uninset
unipbrk
unipcpy
unirchr
unirev
uniset
unisize
unispn
unistr
unitok

Sections

.text
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNTUPG/OEM/NOVELL/MIGRATE.DLL
.dll windows:4 windows x86 arch:x86

8cf40509c8f36f174eb96cd4c6bb9d3c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

setupapi

SetupCloseLog
SetupOpenLog

locwin32

ord45
ord36
ord48
ord9
ord23
ord115
ord28
ord40
ord113
ord125

kernel32

DeleteFileA
SetFileAttributesA
GetModuleFileNameA
CopyFileA
CloseHandle
GetLastError
GetModuleHandleA
ReadFile
GetProcAddress
FreeLibrary
WriteFile
FindClose
FindFirstFileA
GetWindowsDirectoryA
CreateDirectoryA
GetDriveTypeA
lstrcmpiA
GetTempFileNameA
GetTempPathA
GetFileSize
lstrcatA
GetVersionExA
GetUserDefaultLangID
WideCharToMultiByte
SetLastError
HeapFree
HeapAlloc
GetProcessHeap
SizeofResource
LoadResource
FindResourceExA
lstrcpyA
DisableThreadLibraryCalls
lstrlenA
GetPrivateProfileStringA
WritePrivateProfileStringA
LoadLibraryA
CreateFileA
SetFilePointer
GetEnvironmentVariableA

user32

GetParent
wvsprintfA
LoadStringA
SendMessageA
ShowWindow
EnableWindow
GetDlgItem
SendDlgItemMessageA
SetWindowTextA
SetDlgItemTextA
wsprintfA
GetWindowLongA
SetWindowLongA
SetFocus
AppendMenuA
CreatePopupMenu
PtInRect
GetWindowRect
DestroyMenu
TrackPopupMenu
PostMessageA
IsDlgButtonChecked
WinHelpA
SetTimer
KillTimer
CopyRect
DrawFocusRect
GetSysColor
FillRect
DrawTextA
LoadBitmapA
ReleaseDC
GetWindowTextA
CheckDlgButton
IsClipboardFormatAvailable
IsWindowEnabled
GetDC
CheckRadioButton
MessageBeep
CallWindowProcA
GetDlgItemTextA
MessageBoxA
GetCaretPos

gdi32

SetTextColor
SetBkColor
CreateSolidBrush
CreateCompatibleDC
SelectObject
BitBlt
DeleteDC
GetTextExtentPoint32A
DeleteObject
GetTextExtentPointA

advapi32

RegSetValueExA
RegQueryValueExA
RegCloseKey
RegCreateKeyA
RegDeleteKeyA
RegEnumValueA
RegDeleteValueA
RegOpenKeyExA
RegOpenKeyA

msvcrt

_onexit
_adjust_fdiv
malloc
_initterm
free
__dllonexit
wcslen
_mbsicmp
isspace
sprintf
_ultoa
strstr
strtok
strtoul
strchr
atoi
strncmp
_strupr
strrchr
_purecall
__CxxFrameHandler
??2@YAPAXI@Z
_strcmpi
_strnicmp
??3@YAXPAX@Z

Exports

Exports

Initialize9x
InitializeNT
MigrateSystem9x
MigrateSystemNT
MigrateUser9x
MigrateUserNT
QueryVersion

Sections

.text
Size: 123KB - Virtual size: 123KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNTUPG/OEM/NOVELL/NETMAP.INF
I386/WINNTUPG/OEM/NOVELL/NLS/1250_UNI.00_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/1251_UNI.00_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/1252_UNI.00_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/1253_UNI.00_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/1254_UNI.00_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/1255_UNI.00_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/1256_UNI.00_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/1257_UNI.00_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/874_UNI.00_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/932_UNI.00_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/936_UNI.00_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/949_UNI.00_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/950_UNI.00_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/CHINESES/AGREE.TX_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/CHINESES/AXBNDRY.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/CHINESES/AXCRED.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/CHINESES/AXCREDNT.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/CHINESES/AXDIALUP.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/CHINESES/AXNDS.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/CHINESES/AXPRF.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/CHINESES/AXSCRIPT.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/CHINESES/CONNSVCR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/CHINESES/INFSTRNG.TXT
I386/WINNTUPG/OEM/NOVELL/NLS/CHINESES/LGNCNR32.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/CHINESES/LOGIN.DA_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/CHINESES/LOGIN.MS_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/CHINESES/LOGINSVR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/CHINESES/LOGINW32.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/CHINESES/MAPBASER.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/CHINESES/NOVELL.TX_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/CHINESES/NOVNPNTR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/CHINESES/NWELCOME.BM_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/CHINESES/NWEVENTS.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/CHINESES/NWGINAR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/CHINESES/NWSETUPR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/CHINESES/NWSHLXNR.DL_
.cab .ps1 polyglot
I386/WINNTUPG/OEM/NOVELL/NLS/CHINESES/NWSPOOLR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/CHINESES/WMSCHEDR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/CHINESET/AGREE.TX_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/CHINESET/AXBNDRY.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/CHINESET/AXCRED.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/CHINESET/AXCREDNT.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/CHINESET/AXDIALUP.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/CHINESET/AXNDS.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/CHINESET/AXPRF.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/CHINESET/AXSCRIPT.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/CHINESET/CONNSVCR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/CHINESET/INFSTRNG.TXT
I386/WINNTUPG/OEM/NOVELL/NLS/CHINESET/LGNCNR32.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/CHINESET/LOGIN.DA_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/CHINESET/LOGIN.MS_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/CHINESET/LOGINSVR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/CHINESET/LOGINW32.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/CHINESET/MAPBASER.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/CHINESET/NOVELL.TX_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/CHINESET/NOVNPNTR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/CHINESET/NWELCOME.BM_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/CHINESET/NWEVENTS.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/CHINESET/NWGINAR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/CHINESET/NWSETUPR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/CHINESET/NWSHLXNR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/CHINESET/NWSPOOLR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/CHINESET/WMSCHEDR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/DEUTSCH/AGREE.TX_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/DEUTSCH/AXBNDRY.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/DEUTSCH/AXCRED.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/DEUTSCH/AXCREDNT.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/DEUTSCH/AXDIALUP.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/DEUTSCH/AXNDS.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/DEUTSCH/AXPRF.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/DEUTSCH/AXSCRIPT.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/DEUTSCH/CONNSVCR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/DEUTSCH/INFSTRNG.TXT
I386/WINNTUPG/OEM/NOVELL/NLS/DEUTSCH/LGNCNR32.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/DEUTSCH/LOGIN.DA_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/DEUTSCH/LOGIN.MS_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/DEUTSCH/LOGINSVR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/DEUTSCH/LOGINW32.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/DEUTSCH/MAPBASER.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/DEUTSCH/NOVELL.TX_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/DEUTSCH/NOVNPNTR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/DEUTSCH/NWELCOME.BM_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/DEUTSCH/NWEVENTS.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/DEUTSCH/NWGINAR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/DEUTSCH/NWSETUPR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/DEUTSCH/NWSHLXNR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/DEUTSCH/NWSPOOLR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/DEUTSCH/WMSCHEDR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ENGLISH/AGREE.TX_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ENGLISH/AXBNDRY.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ENGLISH/AXCRED.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ENGLISH/AXCREDNT.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ENGLISH/AXDIALUP.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ENGLISH/AXNDS.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ENGLISH/AXPRF.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ENGLISH/AXSCRIPT.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ENGLISH/CONNSVCR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ENGLISH/INFSTRNG.TXT
I386/WINNTUPG/OEM/NOVELL/NLS/ENGLISH/LGNCNR32.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ENGLISH/LOGIN.DA_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ENGLISH/LOGIN.MS_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ENGLISH/LOGINSVR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ENGLISH/LOGINW32.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ENGLISH/MAPBASER.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ENGLISH/NOVELL.TX_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ENGLISH/NOVNPNTR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ENGLISH/NWELCOME.BM_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ENGLISH/NWEVENTS.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ENGLISH/NWGINAR.DL_
I386/WINNTUPG/OEM/NOVELL/NLS/ENGLISH/NWSETUPR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ENGLISH/NWSHLXNR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ENGLISH/NWSPOOLR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ENGLISH/WMSCHEDR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ESPANOL/AGREE.TX_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ESPANOL/AXBNDRY.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ESPANOL/AXCRED.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ESPANOL/AXCREDNT.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ESPANOL/AXDIALUP.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ESPANOL/AXNDS.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ESPANOL/AXPRF.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ESPANOL/AXSCRIPT.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ESPANOL/CONNSVCR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ESPANOL/INFSTRNG.TXT
I386/WINNTUPG/OEM/NOVELL/NLS/ESPANOL/LGNCNR32.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ESPANOL/LOGIN.DA_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ESPANOL/LOGIN.MS_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ESPANOL/LOGINSVR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ESPANOL/LOGINW32.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ESPANOL/MAPBASER.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ESPANOL/NOVELL.TX_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ESPANOL/NOVNPNTR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ESPANOL/NWELCOME.BM_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ESPANOL/NWEVENTS.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ESPANOL/NWGINAR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ESPANOL/NWSETUPR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ESPANOL/NWSHLXNR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ESPANOL/NWSPOOLR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ESPANOL/WMSCHEDR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/FRANCAIS/AGREE.TX_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/FRANCAIS/AXBNDRY.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/FRANCAIS/AXCRED.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/FRANCAIS/AXCREDNT.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/FRANCAIS/AXDIALUP.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/FRANCAIS/AXNDS.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/FRANCAIS/AXPRF.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/FRANCAIS/AXSCRIPT.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/FRANCAIS/CONNSVCR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/FRANCAIS/INFSTRNG.TXT
I386/WINNTUPG/OEM/NOVELL/NLS/FRANCAIS/LGNCNR32.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/FRANCAIS/LOGIN.DA_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/FRANCAIS/LOGIN.MS_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/FRANCAIS/LOGINSVR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/FRANCAIS/LOGINW32.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/FRANCAIS/MAPBASER.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/FRANCAIS/NOVELL.TX_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/FRANCAIS/NOVNPNTR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/FRANCAIS/NWELCOME.BM_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/FRANCAIS/NWEVENTS.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/FRANCAIS/NWGINAR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/FRANCAIS/NWSETUPR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/FRANCAIS/NWSHLXNR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/FRANCAIS/NWSPOOLR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/FRANCAIS/WMSCHEDR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ITALIANO/AGREE.TX_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ITALIANO/AXBNDRY.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ITALIANO/AXCRED.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ITALIANO/AXCREDNT.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ITALIANO/AXDIALUP.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ITALIANO/AXNDS.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ITALIANO/AXPRF.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ITALIANO/AXSCRIPT.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ITALIANO/CONNSVCR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ITALIANO/INFSTRNG.TXT
I386/WINNTUPG/OEM/NOVELL/NLS/ITALIANO/LGNCNR32.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ITALIANO/LOGIN.DA_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ITALIANO/LOGIN.MS_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ITALIANO/LOGINSVR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ITALIANO/LOGINW32.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ITALIANO/MAPBASER.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ITALIANO/NOVELL.TX_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ITALIANO/NOVNPNTR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ITALIANO/NWELCOME.BM_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ITALIANO/NWEVENTS.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ITALIANO/NWGINAR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ITALIANO/NWSETUPR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ITALIANO/NWSHLXNR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ITALIANO/NWSPOOLR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/ITALIANO/WMSCHEDR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/KOREAN/AGREE.TX_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/KOREAN/AXBNDRY.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/KOREAN/AXCRED.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/KOREAN/AXCREDNT.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/KOREAN/AXDIALUP.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/KOREAN/AXNDS.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/KOREAN/AXPRF.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/KOREAN/AXSCRIPT.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/KOREAN/CONNSVCR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/KOREAN/INFSTRNG.TXT
I386/WINNTUPG/OEM/NOVELL/NLS/KOREAN/LGNCNR32.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/KOREAN/LOGIN.DA_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/KOREAN/LOGIN.MS_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/KOREAN/LOGINSVR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/KOREAN/LOGINW32.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/KOREAN/MAPBASER.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/KOREAN/NOVELL.TX_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/KOREAN/NOVNPNTR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/KOREAN/NWELCOME.BM_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/KOREAN/NWEVENTS.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/KOREAN/NWGINAR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/KOREAN/NWSETUPR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/KOREAN/NWSHLXNR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/KOREAN/NWSPOOLR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/KOREAN/WMSCHEDR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/NIHONGO/AGREE.TX_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/NIHONGO/AXBNDRY.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/NIHONGO/AXCRED.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/NIHONGO/AXCREDNT.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/NIHONGO/AXDIALUP.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/NIHONGO/AXNDS.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/NIHONGO/AXPRF.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/NIHONGO/AXSCRIPT.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/NIHONGO/CONNSVCR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/NIHONGO/INFSTRNG.TXT
I386/WINNTUPG/OEM/NOVELL/NLS/NIHONGO/LGNCNR32.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/NIHONGO/LOGIN.DA_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/NIHONGO/LOGIN.MS_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/NIHONGO/LOGINSVR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/NIHONGO/LOGINW32.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/NIHONGO/MAPBASER.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/NIHONGO/NOVELL.TX_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/NIHONGO/NOVNPNTR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/NIHONGO/NWELCOME.BM_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/NIHONGO/NWEVENTS.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/NIHONGO/NWGINAR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/NIHONGO/NWSETUPR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/NIHONGO/NWSHLXNR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/NIHONGO/NWSPOOLR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/NIHONGO/WMSCHEDR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/PORTUGUE/AGREE.TX_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/PORTUGUE/AXBNDRY.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/PORTUGUE/AXCRED.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/PORTUGUE/AXCREDNT.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/PORTUGUE/AXDIALUP.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/PORTUGUE/AXNDS.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/PORTUGUE/AXPRF.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/PORTUGUE/AXSCRIPT.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/PORTUGUE/CONNSVCR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/PORTUGUE/INFSTRNG.TXT
I386/WINNTUPG/OEM/NOVELL/NLS/PORTUGUE/LGNCNR32.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/PORTUGUE/LOGIN.DA_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/PORTUGUE/LOGIN.MS_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/PORTUGUE/LOGINSVR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/PORTUGUE/LOGINW32.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/PORTUGUE/MAPBASER.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/PORTUGUE/NOVELL.TX_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/PORTUGUE/NOVNPNTR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/PORTUGUE/NWELCOME.BM_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/PORTUGUE/NWEVENTS.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/PORTUGUE/NWGINAR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/PORTUGUE/NWSETUPR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/PORTUGUE/NWSHLXNR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/PORTUGUE/NWSPOOLR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/PORTUGUE/WMSCHEDR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/RUSSKI/AGREE.TX_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/RUSSKI/AXBNDRY.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/RUSSKI/AXCRED.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/RUSSKI/AXCREDNT.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/RUSSKI/AXDIALUP.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/RUSSKI/AXNDS.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/RUSSKI/AXPRF.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/RUSSKI/AXSCRIPT.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/RUSSKI/CONNSVCR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/RUSSKI/INFSTRNG.TXT
I386/WINNTUPG/OEM/NOVELL/NLS/RUSSKI/LGNCNR32.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/RUSSKI/LOGIN.DA_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/RUSSKI/LOGIN.MS_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/RUSSKI/LOGINSVR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/RUSSKI/LOGINW32.RL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/RUSSKI/MAPBASER.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/RUSSKI/NOVELL.TX_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/RUSSKI/NOVNPNTR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/RUSSKI/NWELCOME.BM_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/RUSSKI/NWEVENTS.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/RUSSKI/NWGINAR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/RUSSKI/NWSETUPR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/RUSSKI/NWSHLXNR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/RUSSKI/NWSPOOLR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/RUSSKI/WMSCHEDR.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/UNI_1250.00_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/UNI_1250.W3_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/UNI_1251.00_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/UNI_1251.W3_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/UNI_1252.00_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/UNI_1252.W3_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/UNI_1253.00_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/UNI_1253.W3_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/UNI_1254.00_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/UNI_1254.W3_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/UNI_1255.00_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/UNI_1255.W3_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/UNI_1256.00_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/UNI_1256.W3_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/UNI_1257.00_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/UNI_1257.W3_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/UNI_1258.W3_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/UNI_437.W3_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/UNI_737.W3_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/UNI_775.W3_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/UNI_850.W3_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/UNI_852.W3_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/UNI_855.W3_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/UNI_857.W3_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/UNI_860.W3_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/UNI_861.W3_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/UNI_862.W3_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/UNI_863.W3_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/UNI_864.W3_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/UNI_865.W3_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/UNI_866.W3_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/UNI_874.00_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/UNI_874.W3_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/UNI_932.00_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/UNI_932.W3_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/UNI_936.00_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/UNI_936.W3_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/UNI_949.00_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/UNI_949.W3_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/UNI_950.00_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/UNI_950.W3_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/UNI_COL.00_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/UNI_MON.00_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/UNI_MON.W3_
.cab
I386/WINNTUPG/OEM/NOVELL/NLS/UNI_UPR.W3_
.cab
I386/WINNTUPG/OEM/NOVELL/NWMIGNT.DLL
.dll windows:4 windows x86 arch:x86

0c45875bd5f5b06a7e5c8bb2561470ee

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ole32

CLSIDFromString
CoCreateInstance

locwin32

ord40
ord28
ord115
ord45
ord125
ord113
ord36
ord48
ord23
ord9

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

msvcrt

_mbsicmp
sprintf
_ultoa
_memicmp
_adjust_fdiv
malloc
_initterm
free
_onexit
__dllonexit
strncat
_strcmpi
_strnicmp
_purecall
??2@YAPAXI@Z
??3@YAXPAX@Z
__CxxFrameHandler
wcscat
wcscpy
wcsrchr
atoi
wcslen
wcscmp
strrchr
_strupr
strncmp
sscanf
strchr
strtoul
strtok
strstr
_ltoa

kernel32

GetFileSize
GlobalLock
ReadFile
GlobalAlloc
GlobalUnlock
GlobalFree
lstrcmpA
MultiByteToWideChar
GetVersionExA
LoadLibraryA
GetDriveTypeA
GetTempPathA
GetTempFileNameA
lstrcatA
lstrcmpiA
lstrcpyA
SetLastError
SetFilePointer
CreateFileA
GetModuleFileNameA
WriteFile
CloseHandle
GetModuleHandleA
lstrlenA
FreeLibrary
GetProcAddress
GetModuleHandleW
LoadLibraryW
FindClose
FindFirstFileW
GetWindowsDirectoryW
CopyFileW
SetFileAttributesW
CreateDirectoryW
GetLastError
WideCharToMultiByte
DeleteFileW
GetPrivateProfileStringW
GetEnvironmentVariableW
WritePrivateProfileStringA
GetPrivateProfileStringA
CopyFileA
DeleteFileA
SetFileAttributesA

user32

GetWindowTextA
CheckDlgButton
GetCaretPos
LoadBitmapA
DrawTextA
IsWindowEnabled
IsClipboardFormatAvailable
DrawFocusRect
CopyRect
CharNextA
KillTimer
SetTimer
GetDC
CheckRadioButton
MessageBeep
MessageBoxA
CallWindowProcA
wvsprintfA
SendMessageA
WinHelpA
GetParent
PostMessageA
TrackPopupMenu
DestroyMenu
GetWindowRect
PtInRect
CreatePopupMenu
AppendMenuA
SetFocus
SetWindowLongA
GetWindowLongA
wsprintfA
SetDlgItemTextA
SetWindowTextA
SendDlgItemMessageA
GetDlgItem
EnableWindow
ShowWindow
FillRect
GetSysColor
ReleaseDC
IsDlgButtonChecked
GetDlgItemTextA
LoadStringA

gdi32

GetTextExtentPointA
SetTextColor
SetBkColor
CreateSolidBrush
CreateCompatibleDC
SelectObject
BitBlt
DeleteDC
DeleteObject
GetTextExtentPoint32A

advapi32

ControlService
RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegEnumKeyExA
RegQueryInfoKeyA
RegEnumKeyA
RegEnumValueA
RegOpenKeyA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyA
RegCreateKeyW
RegQueryValueExA
OpenSCManagerW
OpenServiceW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
CloseServiceHandle
StartServiceW

comctl32

PropertySheetA

Exports

Exports

DoPostUpgradeProcessing
DoPreUpgradeProcessing
PostUpgradeInitialize
PreUpgradeInitialize

Sections

.text
Size: 127KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNTUPG/OEM/NOVELL/NWSETUP.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/REDIR/AXBNDRY.OC_
.cab
I386/WINNTUPG/OEM/NOVELL/REDIR/AXCRED.OC_
.cab
I386/WINNTUPG/OEM/NOVELL/REDIR/AXCREDNT.OC_
.cab
I386/WINNTUPG/OEM/NOVELL/REDIR/AXDIALUP.OC_
.cab
I386/WINNTUPG/OEM/NOVELL/REDIR/AXNDS.OC_
.cab
I386/WINNTUPG/OEM/NOVELL/REDIR/AXPRF.OC_
.cab
I386/WINNTUPG/OEM/NOVELL/REDIR/AXSCRIPT.OC_
.cab
I386/WINNTUPG/OEM/NOVELL/REDIR/CONNSVC.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/REDIR/LGNCON32.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/REDIR/LOGINSVC.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/REDIR/LOGINW32.EX_
.cab
I386/WINNTUPG/OEM/NOVELL/REDIR/MAPBASE.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/REDIR/NDSZIP.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/REDIR/NICM.SY_
.cab
I386/WINNTUPG/OEM/NOVELL/REDIR/NOVELL.AN_
.cab
I386/WINNTUPG/OEM/NOVELL/REDIR/NOVNPNT.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/REDIR/NWAPP32.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/REDIR/NWDHCP.SY_
.cab
I386/WINNTUPG/OEM/NOVELL/REDIR/NWDNS.SY_
.cab
I386/WINNTUPG/OEM/NOVELL/REDIR/NWFS.SY_
I386/WINNTUPG/OEM/NOVELL/REDIR/NWGINA.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/REDIR/NWHOST.SY_
.cab
I386/WINNTUPG/OEM/NOVELL/REDIR/NWLGHELP.EX_
.cab
I386/WINNTUPG/OEM/NOVELL/REDIR/NWLSCRPT.EX_
.cab
I386/WINNTUPG/OEM/NOVELL/REDIR/NWPFCTRS.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/REDIR/NWSAP.SY_
.cab
I386/WINNTUPG/OEM/NOVELL/REDIR/NWSHLXNT.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/REDIR/NWSIPX32.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/REDIR/NWSIPX32.SY_
.cab
I386/WINNTUPG/OEM/NOVELL/REDIR/NWSLP.SY_
.cab
I386/WINNTUPG/OEM/NOVELL/REDIR/NWSNDMSG.EX_
.cab
I386/WINNTUPG/OEM/NOVELL/REDIR/NWSNS.SY_
.cab
I386/WINNTUPG/OEM/NOVELL/REDIR/NWSPOOL.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/REDIR/NWSRVLOC.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/REDIR/NWTRAY.EX_
.cab
I386/WINNTUPG/OEM/NOVELL/REDIR/NWV1_0.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/REDIR/NWWS2NDS.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/REDIR/NWWS2SAP.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/REDIR/NWWS2SLP.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/REDIR/RESMGR.SY_
.cab
I386/WINNTUPG/OEM/NOVELL/REDIR/SLPINFO.EX_
.cab
I386/WINNTUPG/OEM/NOVELL/REDIR/SRVLOC.SY_
.cab
I386/WINNTUPG/OEM/NOVELL/REDIR/TLI_WIN.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/REDIR/WM.EX_
.cab
I386/WINNTUPG/OEM/NOVELL/REDIR/WMDTPOL.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/REDIR/WMNTAPI.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/REDIR/WMPM.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/REDIR/WMPRTNT.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/REDIR/WMREG.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/REDIR/WMRUNDLL.EX_
.cab
I386/WINNTUPG/OEM/NOVELL/REDIR/WMSCHAPI.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/REDIR/WMSCHED.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/REDIR/WMSCHED.EX_
.cab
I386/WINNTUPG/OEM/NOVELL/REDIR/WMUSPOL.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/REDIR/WMUTIL.DL_
.cab
I386/WINNTUPG/OEM/NOVELL/REDIR/WSREG.DL_
.cab
I386/WINNTUPG/OEM/SPX/MPS/NETMAP.INF
I386/WINNTUPG/OEM/SPX/MPS/SPXUPGRD.DLL
.dll windows:4 windows x86 arch:x86

a143eeb4301c3c69a80729dfdb28bfbe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

MultiByteToWideChar
GetModuleHandleA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
GetProcAddress
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
HeapDestroy
HeapCreate
VirtualFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
HeapFree
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualAlloc
LoadLibraryA
FlushFileBuffers
CloseHandle
SetStdHandle
SetFilePointer

Exports

Exports

DoPreUpgradeProcessing
PreUpgradeInitialize

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNTUPG/OEM/TIGERJET/NETMAP.INF
I386/WINNTUPG/OEM/TIGERJET/TJUPG.DLL
.dll windows:4 windows x86 arch:x86

63482c1730b6fc935ab559423aff8955

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleW
GetProcAddress
GetFileType
MultiByteToWideChar
GetCommandLineA
GetModuleHandleA
GetVersion
GetStringTypeA
WideCharToMultiByte
GetStringTypeW
ExitProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
HeapCreate
HeapDestroy
SetHandleCount
OutputDebugStringW
GetStdHandle
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WriteFile
SetFilePointer
HeapFree
HeapAlloc
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
LoadLibraryA
SetStdHandle
FlushFileBuffers
CloseHandle

advapi32

RegQueryValueExW
RegOpenKeyExW

Exports

Exports

DoPostUpgradeProcessing
DoPreUpgradeProcessing
PostUpgradeInitialize
PreUpgradeInitialize

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 532B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 884B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNTUPG/SETUPAPI.DLL
.dll windows:4 windows x86 arch:x86

4631555542af39014093a9061769b077

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

msvcrt

_abnormal_termination
wcslen
malloc
realloc
free
wcscpy
_except_handler3
_wcsicmp
_adjust_fdiv
_initterm
div
_endthread
_beginthread
wcsncmp
_mbsrchr
_strdup
wcstol
wcsspn
_snwprintf
wcsrchr
_wcsnicmp
wcstoul
wcschr
memmove
wcscmp

kernel32

lstrcmpW
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
FormatMessageW
GetModuleFileNameW
GetDriveTypeW
GetCurrentThreadId
LocalFree
GetTempFileNameW
GetCurrentThread
WaitForSingleObject
FreeLibrary
GetProcAddress
LoadLibraryW
GlobalFree
GlobalAlloc
GetVersion
_lclose
_lwrite
_lread
_lopen
TlsGetValue
_lcreat
DosDateTimeToFileTime
WinExec
WritePrivateProfileStringW
WritePrivateProfileSectionW
GetPrivateProfileStringW
GetPrivateProfileSectionW
lstrcpynA
SetFileAttributesW
CreateDirectoryW
lstrcpyA
GetFullPathNameW
WriteFile
DeleteFileW
CompareFileTime
GetStringTypeExW
RaiseException
WaitForMultipleObjects
ReleaseMutex
GetThreadLocale
CompareStringW
SetEvent
CreateEventW
CreateMutexW
lstrcmpiW
lstrcpynW
lstrlenA
WideCharToMultiByte
MoveFileExW
ExpandEnvironmentStringsW
lstrcpyW
lstrlenW
GetCurrentProcess
SetFileTime
GetFileTime
FindFirstFileW
FindClose
SetErrorMode
SetLastError
MultiByteToWideChar
UnmapViewOfFile
GetFileSize
CreateFileMappingW
MapViewOfFile
CreateFileW
GetLastError
CloseHandle
GetDiskFreeSpaceW
MoveFileW
CopyFileW
TlsSetValue
TlsAlloc
TlsFree
GetEnvironmentVariableW
_llseek
FindNextFileW
GetLocaleInfoW
DuplicateHandle
GetWindowsDirectoryW
GetVersionExW
GetSystemDirectoryW
lstrcatW

user32

DrawAnimatedRects
LoadCursorW
CharNextA
SetCursor
CheckRadioButton
MapWindowPoints
KillTimer
IsDlgButtonChecked
IsWindowVisible
InvalidateRect
GetMessageW
SetTimer
GetDC
ReleaseDC
LoadBitmapW
DestroyIcon
GetSysColor
ClientToScreen
GetWindowRect
SystemParametersInfoW
GetSystemMetrics
MoveWindow
DestroyWindow
SetWindowPos
CheckDlgButton
GetWindow
TranslateMessage
DispatchMessageW
GetIconInfo
IsWindowEnabled
IsWindow
GetWindowTextLengthW
GetWindowTextW
MessageBoxIndirectW
SetFocus
SetForegroundWindow
GetPropW
EndDialog
SetPropW
SetWindowTextW
ShowWindow
LoadIconW
SendDlgItemMessageW
GetDlgItemTextW
UpdateWindow
SetDlgItemTextW
GetParent
GetWindowLongW
SendMessageW
GetDlgItem
EnableWindow
PostMessageW
SetWindowLongW
MessageBeep
ExitWindowsEx
wsprintfW
CharUpperW
LoadStringW
MessageBoxW
WaitMessage
PeekMessageW
CharNextW
CharLowerW
GetClientRect
RemovePropW
DialogBoxParamW
PostThreadMessageW

gdi32

SetTextColor
StretchBlt
DeleteObject
BitBlt
GetObjectW
CreateCompatibleDC
CreateBitmap
CreateCompatibleBitmap
DeleteDC
SetBkColor
SelectObject

advapi32

FreeSid
QueryServiceConfigW
CreateServiceW
DeleteService
OpenSCManagerW
OpenServiceW
LockServiceDatabase
ChangeServiceConfigW
UnlockServiceDatabase
CloseServiceHandle
AdjustTokenPrivileges
LookupPrivilegeValueW
AllocateAndInitializeSid
EqualSid
RegCloseKey
RegEnumKeyExW
RegDeleteKeyW
RegCreateKeyExW
RegSetValueExW
RegDeleteValueW
RegQueryValueExW
OpenProcessToken
GetTokenInformation
InitializeSecurityDescriptor
SetSecurityDescriptorOwner
SetFileSecurityW
GetFileSecurityW
IsTextUnicode
RegOpenKeyExW

shell32

SHChangeNotify
ExtractIconExW
ord59

lz32

LZClose
LZOpenFileW
LZCopy

comdlg32

GetOpenFileNameW
GetFileTitleW

comctl32

ImageList_Destroy
DestroyPropertySheetPage
CreatePropertySheetPageW
ImageList_Add
ImageList_Create
ImageList_SetBkColor
ord17
ImageList_ReplaceIcon
ImageList_SetOverlayImage

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

winspool.drv

GetPrinterDriverDirectoryW

cfgmgr32

CM_Disable_DevNode
CM_Get_Class_NameW
CM_Get_DevNode_Status
CM_Enumerate_Classes
CM_Query_Remove_SubTree
CM_Remove_SubTree
CM_Setup_DevNode
CM_Get_Hardware_Profile_InfoW
CM_Delete_Class_Key
CM_Set_HW_Prof_FlagsW
CM_Reenumerate_DevNode
CM_Open_Class_KeyW
CM_Set_DevNode_Registry_PropertyA
CM_Get_DevNode_Registry_PropertyA
CM_Detect_Resource_Conflict
CM_Get_Next_Log_Conf
CM_Free_Res_Des_Handle
CM_Add_Res_Des
CM_Free_Log_Conf_Handle
CM_Free_Log_Conf
CM_Add_Empty_Log_Conf
CM_Set_DevNode_Registry_PropertyW
CM_Enable_DevNode
CM_Move_DevNode
CM_Get_DevNode_Registry_PropertyW
CM_Uninstall_DevNode
CM_Get_Parent
CM_Get_Device_IDW
CM_Delete_DevNode_Key
CM_Create_DevNodeW
CM_Locate_DevNodeW
CM_Get_HW_Prof_FlagsW
CM_Get_Device_ID_List_SizeW
CM_Get_Device_ID_ListW
CM_Get_Next_Res_Des
CM_Get_Res_Des_Data
CM_Get_Res_Des_Data_Size
CM_Open_DevNode_Key
CM_Get_First_Log_Conf
CM_Get_Device_ID_Size
CM_Get_Class_Key_NameW

mpr

WNetGetResourceInformationW
WNetAddConnection3W
WNetCancelConnection2W

rpcrt4

UuidFromStringW

Exports

Exports

AddMiniIconToList
AddTagToGroupOrderListEntry
AppendStringToMultiSz
AssertFail
CaptureAndConvertAnsiArg
CaptureStringArg
CenterWindowRelativeToParent
ConcatenatePaths
DelayedMove
DelimStringToMultiSz
DestroyTextFileReadBuffer
DoesUserHavePrivilege
DuplicateString
EnablePrivilege
ExtensionPropSheetPageProc
FileExists
FreeStringArray
GetNewInfName
GetSetFileTimestamp
GetVersionInfoFromImage
InfIsFromOemLocation
InstallHinfSection
InstallHinfSectionA
InstallHinfSectionW
InstallStop
IsUserAdmin
LookUpStringInTable
MemoryInitialize
MultiByteToUnicode
MultiSzFromSearchControl
MyFree
MyGetFileTitle
MyMalloc
MyRealloc
OpenAndMapFileForRead
OutOfMemory
QueryMultiSzValueToArray
QueryRegistryValue
ReadAsciiOrUnicodeTextFile
RegistryDelnode
RetreiveFileSecurity
RetrieveServiceConfig
SearchForInfFile
SetArrayToMultiSzValue
SetupAddInstallSectionToDiskSpaceListA
SetupAddInstallSectionToDiskSpaceListW
SetupAddSectionToDiskSpaceListA
SetupAddSectionToDiskSpaceListW
SetupAddToDiskSpaceListA
SetupAddToDiskSpaceListW
SetupAddToSourceListA
SetupAddToSourceListW
SetupAdjustDiskSpaceListA
SetupAdjustDiskSpaceListW
SetupCancelTemporarySourceList
SetupCloseFileQueue
SetupCloseInfFile
SetupCommitFileQueue
SetupCommitFileQueueA
SetupCommitFileQueueW
SetupCopyErrorA
SetupCopyErrorW
SetupCreateDiskSpaceListA
SetupCreateDiskSpaceListW
SetupDecompressOrCopyFileA
SetupDecompressOrCopyFileW
SetupDefaultQueueCallback
SetupDefaultQueueCallbackA
SetupDefaultQueueCallbackW
SetupDeleteErrorA
SetupDeleteErrorW
SetupDestroyDiskSpaceList
SetupDiAskForOEMDisk
SetupDiBuildClassInfoList
SetupDiBuildDriverInfoList
SetupDiCallClassInstaller
SetupDiCancelDriverInfoSearch
SetupDiChangeState
SetupDiClassGuidsFromNameA
SetupDiClassGuidsFromNameW
SetupDiClassNameFromGuidA
SetupDiClassNameFromGuidW
SetupDiCreateDevRegKeyA
SetupDiCreateDevRegKeyW
SetupDiCreateDeviceInfoA
SetupDiCreateDeviceInfoList
SetupDiCreateDeviceInfoW
SetupDiDeleteDevRegKey
SetupDiDeleteDeviceInfo
SetupDiDestroyClassImageList
SetupDiDestroyDeviceInfoList
SetupDiDestroyDriverInfoList
SetupDiDrawMiniIcon
SetupDiEnumDeviceInfo
SetupDiEnumDriverInfoA
SetupDiEnumDriverInfoW
SetupDiGetActualSectionToInstallA
SetupDiGetActualSectionToInstallW
SetupDiGetClassBitmapIndex
SetupDiGetClassDescriptionA
SetupDiGetClassDescriptionW
SetupDiGetClassDevPropertySheetsA
SetupDiGetClassDevPropertySheetsW
SetupDiGetClassDevsA
SetupDiGetClassDevsW
SetupDiGetClassImageIndex
SetupDiGetClassImageList
SetupDiGetClassInstallParamsA
SetupDiGetClassInstallParamsW
SetupDiGetDeviceInfoListClass
SetupDiGetDeviceInstallParamsA
SetupDiGetDeviceInstallParamsW
SetupDiGetDeviceInstanceIdA
SetupDiGetDeviceInstanceIdW
SetupDiGetDeviceRegistryPropertyA
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDriverInfoDetailA
SetupDiGetDriverInfoDetailW
SetupDiGetDriverInstallParamsA
SetupDiGetDriverInstallParamsW
SetupDiGetHwProfileFriendlyNameA
SetupDiGetHwProfileFriendlyNameW
SetupDiGetHwProfileList
SetupDiGetINFClassA
SetupDiGetINFClassW
SetupDiGetSelectedDevice
SetupDiGetSelectedDriverA
SetupDiGetSelectedDriverW
SetupDiGetWizardPage
SetupDiInstallClassA
SetupDiInstallClassW
SetupDiInstallDevice
SetupDiInstallDriverFiles
SetupDiLoadClassIcon
SetupDiMoveDuplicateDevice
SetupDiOpenClassRegKey
SetupDiOpenDevRegKey
SetupDiOpenDeviceInfoA
SetupDiOpenDeviceInfoW
SetupDiRegisterDeviceInfo
SetupDiRemoveDevice
SetupDiSelectDevice
SetupDiSelectOEMDrv
SetupDiSetClassInstallParamsA
SetupDiSetClassInstallParamsW
SetupDiSetDeviceInstallParamsA
SetupDiSetDeviceInstallParamsW
SetupDiSetDeviceRegistryPropertyA
SetupDiSetDeviceRegistryPropertyW
SetupDiSetDriverInstallParamsA
SetupDiSetDriverInstallParamsW
SetupDiSetSelectedDevice
SetupDiSetSelectedDriverA
SetupDiSetSelectedDriverW
SetupDuplicateDiskSpaceListA
SetupDuplicateDiskSpaceListW
SetupFindFirstLineA
SetupFindFirstLineW
SetupFindNextLine
SetupFindNextMatchLineA
SetupFindNextMatchLineW
SetupFreeSourceListA
SetupFreeSourceListW
SetupGetBinaryField
SetupGetFieldCount
SetupGetFileCompressionInfoA
SetupGetFileCompressionInfoW
SetupGetInfFileListA
SetupGetInfFileListW
SetupGetInfInformationA
SetupGetInfInformationW
SetupGetIntField
SetupGetLineByIndexA
SetupGetLineByIndexW
SetupGetLineCountA
SetupGetLineCountW
SetupGetLineTextA
SetupGetLineTextW
SetupGetMultiSzFieldA
SetupGetMultiSzFieldW
SetupGetSourceFileLocationA
SetupGetSourceFileLocationW
SetupGetSourceFileSizeA
SetupGetSourceFileSizeW
SetupGetSourceInfoA
SetupGetSourceInfoW
SetupGetStringFieldA
SetupGetStringFieldW
SetupGetTargetPathA
SetupGetTargetPathW
SetupInitDefaultQueueCallback
SetupInitDefaultQueueCallbackEx
SetupInitializeFileLogA
SetupInitializeFileLogW
SetupInstallFileA
SetupInstallFileExA
SetupInstallFileExW
SetupInstallFileW
SetupInstallFilesFromInfSectionA
SetupInstallFilesFromInfSectionW
SetupInstallFromInfSectionA
SetupInstallFromInfSectionW
SetupInstallServicesFromInfSectionA
SetupInstallServicesFromInfSectionW
SetupIterateCabinetA
SetupIterateCabinetW
SetupLogFileA
SetupLogFileW
SetupOpenAppendInfFileA
SetupOpenAppendInfFileW
SetupOpenFileQueue
SetupOpenInfFileA
SetupOpenInfFileW
SetupOpenMasterInf
SetupPromptForDiskA
SetupPromptForDiskW
SetupPromptReboot
SetupQueryDrivesInDiskSpaceListA
SetupQueryDrivesInDiskSpaceListW
SetupQueryFileLogA
SetupQueryFileLogW
SetupQueryInfFileInformationA
SetupQueryInfFileInformationW
SetupQueryInfVersionInformationA
SetupQueryInfVersionInformationW
SetupQuerySourceListA
SetupQuerySourceListW
SetupQuerySpaceRequiredOnDriveA
SetupQuerySpaceRequiredOnDriveW
SetupQueueCopyA
SetupQueueCopySectionA
SetupQueueCopySectionW
SetupQueueCopyW
SetupQueueDefaultCopyA
SetupQueueDefaultCopyW
SetupQueueDeleteA
SetupQueueDeleteSectionA
SetupQueueDeleteSectionW
SetupQueueDeleteW
SetupQueueRenameA
SetupQueueRenameSectionA
SetupQueueRenameSectionW
SetupQueueRenameW
SetupRemoveFileLogEntryA
SetupRemoveFileLogEntryW
SetupRemoveFromDiskSpaceListA
SetupRemoveFromDiskSpaceListW
SetupRemoveFromSourceListA
SetupRemoveFromSourceListW
SetupRemoveInstallSectionFromDiskSpaceListA
SetupRemoveInstallSectionFromDiskSpaceListW
SetupRemoveSectionFromDiskSpaceListA
SetupRemoveSectionFromDiskSpaceListW
SetupRenameErrorA
SetupRenameErrorW
SetupScanFileQueue
SetupScanFileQueueA
SetupScanFileQueueW
SetupSetDirectoryIdA
SetupSetDirectoryIdExA
SetupSetDirectoryIdExW
SetupSetDirectoryIdW
SetupSetPlatformPathOverrideA
SetupSetPlatformPathOverrideW
SetupSetSourceListA
SetupSetSourceListW
SetupTermDefaultQueueCallback
SetupTerminateFileLog
ShouldDeviceBeExcluded
StampFileSecurity
StringTableAddString
StringTableAddStringEx
StringTableDestroy
StringTableDuplicate
StringTableEnum
StringTableGetExtraData
StringTableInitialize
StringTableInitializeEx
StringTableLookUpString
StringTableLookUpStringEx
StringTableSetExtraData
StringTableStringFromId
StringTableTrim
TakeOwnershipOfFile
UnicodeToMultiByte
UnmapAndCloseFile
pSetupDirectoryIdToPath
pSetupGetField
pSetupGetOsLoaderDriveAndPath
pSetupGetVersionDatum
pSetupGuidFromString
pSetupIsGuidNull
pSetupMakeSurePathExists
pSetupStringFromGuid

Sections

.text
Size: 197KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINNTUPG/UNSUPMSG.HTM
.html
I386/WINNTUPG/UNSUPMSG.TXT
I386/WINNTUPG/VIDUPGRD.DLL
.dll windows:5 windows x86 arch:x86

84e7040c3c0f4dd160fb0ff3924ef312

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

msvcrt

_wcsicmp
_wcsnicmp

advapi32

RegCreateKeyExW
RegEnumValueW
RegSetValueExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW

user32

wsprintfW
GetSystemMetrics
CharUpperW

kernel32

lstrlenW
GetVersionExW

gdi32

GetDeviceCaps
DeleteDC
CreateDCW

Exports

Exports

DllMain
VideoUpgradeCheck

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 158B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
I386/WINOLDAP.MO_
.cab
I386/WINREP.EX_
.cab
I386/WINRNR.DL_
.cab
I386/WINS.MI_
.cab
I386/WINSCARD.DL_
.cab
I386/WINSMON.DL_
.cab
I386/WINSOCK.DL_
.cab
I386/WINSPOOL.DR_
.cab
I386/WINSPOOL.EX_
.cab
I386/WINSTA.DL_
.cab
I386/WINSTRM.DL_
.cab
I386/WINSYS.CAB
.cab
I386/WINSYS32.CAB
.cab
I386/WINTRUST.DL_
.cab
I386/WINVER.EX_
.cab
I386/WINWORD.DO_
.cab
I386/WINWORD2.DO_
.cab
I386/WIN_DOS.CH_
.cab
I386/WKSSVC.DL_
.cab
I386/WKSTAMIG.IN_
.cab
I386/WLDAP32.DL_
.cab
I386/WLNOTIFY.DL_
.cab
I386/WMI.DL_
.cab
I386/WMI.MO_
.cab
I386/WMICORE.DL_
.cab
I386/WMILIB.SY_
.cab
I386/WMIMGMT.MS_
.cab
I386/WMIPROV.DL_
.cab
I386/WMP.AD_
.cab
I386/WMPOCM.EX_
.cab
I386/WMPOCM.IN_
.cab
I386/WORDPAD.CH_
.cab
I386/WORDPAD.EX_
.cab
I386/WORDPAD.HL_
.cab
I386/WORDPAD.IN_
.cab
I386/WORDPFCT.WPD
I386/WORDPFCT.WPG
I386/WOW32.DL_
.cab
I386/WOWDEB.EX_
.cab
I386/WOWEXEC.EX_
.cab
I386/WPNPINST.EX_
.cab
I386/WRAPSAPI.DL_
.cab
I386/WRITE.EX_
.cab
I386/WRITE32.WP_
.cab
I386/WS2HELP.DL_
.cab
I386/WS2IFSL.SY_
.cab
I386/WS2_32.DL_
.cab
I386/WSCRIPT.CH_
.cab
I386/WSCRIPT.EX_
.cab
I386/WSCRIPT.HL_
.cab
I386/WSECEDIT.DL_
.cab
I386/WSECEDIT.HL_
.cab
I386/WSH.INF
I386/WSHATM.DL_
.cab
I386/WSHEXT.DL_
.cab
I386/WSHIRDA.DL_
.cab
I386/WSHISN.DL_
.cab
I386/WSHNETBS.DL_
.cab
I386/WSHOM.OC_
.cab
I386/WSHTCPIP.DL_
.cab
I386/WSNMP32.DL_
.cab
I386/WSOCK32.DL_
.cab
I386/WTSAPI32.DL_
.cab
I386/WTTSS22.DL_
.cab
I386/WUAU.AD_
.cab
I386/WUAUCLT.EX_
.cab
I386/WUAUCPL.CP_
.cab
I386/WUAUENG.DL_
.cab
I386/WUAUHELP.CH_
.cab
I386/WUAUSERV.DL_
.cab
I386/WUICON1.GI_
.cab
I386/WUICON2.GI_
.cab
I386/WUICON3.GI_
.cab
I386/WULOGO.GI_
.cab
I386/WUM.HT_
.cab
I386/WUPDINFO.DL_
.cab
I386/WUPDMGR.EX_
.cab
I386/WZCDLG.DL_
.cab
I386/WZCSAPI.DL_
.cab
I386/WZCSETUP.EX_
.cab
I386/WZCSVC.DL_
.cab
I386/XACTSRV.DL_
.cab
I386/XCOMMAND.DL_
.cab
I386/XCOPY.EX_
.cab
I386/XENROLL.DL_
.cab
I386/XENRX86.DL_
.cab
I386/XIFFR3_0.DL_
.cab
I386/XJIS.NL_
.cab
I386/XLISTEN.DL_
.cab
I386/XOLEHLP.DL_
.cab
I386/XRDT1354.PP_
.cab
I386/XR_DC230.PP_
.cab
I386/XTEL.DL_
.cab
I386/XVOICE.DL_
.cab
I386/YAHOO.BM_
.cab
I386/ZAPOTEC.BM_
.cab
I386/_DEFAULT.PI_
.cab
READ1ST.TXT
README.DOC
.doc windows office2003
SETUP.EXE
.exe windows:5 windows x86 arch:x86

41f01052adbb97dff61c2365ab5dcdf1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
TerminateProcess
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
GetOEMCP
SetHandleCount
GetStdHandle
GetCommandLineA
ExitProcess
CloseHandle
VirtualFree
RtlUnwind
WriteFile
HeapFree
HeapAlloc
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualAlloc
LoadLibraryA
GetVersion
GetProcAddress
GetStartupInfoA
GetACP
GetLastError
OpenMutexA
CreateMutexA
GetFileType
GetModuleFileNameA
GetModuleHandleA
lstrlenA
GetCPInfo
CreateProcessA
GetSystemInfo
GetVersionExA
lstrcpyA
SetErrorMode
GetFileAttributesA
HeapDestroy
HeapCreate
IsDBCSLeadByte

gdi32

CreateCompatibleDC
GetObjectA
UpdateColors
UnrealizeObject
RealizePalette
SetMapMode
SelectPalette
BitBlt
SetTextColor
SetBkMode
TranslateCharsetInfo
CreateFontIndirectA
SelectObject
CreatePatternBrush
CreateSolidBrush
GetStockObject
CreateHalftonePalette
DeleteObject
GetDeviceCaps
DeleteDC

user32

GetDC
GetKeyboardType
LoadStringA
PostQuitMessage
DestroyWindow
MessageBeep
MessageBoxA
WaitForInputIdle
DispatchMessageA
TranslateMessage
IsDialogMessageA
SendMessageA
GetDlgCtrlID
GetFocus
GetMessageA
MsgWaitForMultipleObjects
PeekMessageA
SetForegroundWindow
FindWindowA
RegisterClassA
LoadCursorA
LoadIconA
SystemParametersInfoA
ReleaseDC
CharNextA
GetDesktopWindow
LoadImageA
GetSysColor
AdjustWindowRect
SetWindowPos
GetDlgItem
DrawTextA
UpdateWindow
InvalidateRect
ShowWindow
CreateWindowExA
DefWindowProcA
SetWindowLongA
GetWindowLongA
SetFocus
EndPaint
BeginPaint
FillRect
SetCursor
DrawFocusRect
CallWindowProcA
GetParent

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
SETUPTXT/PRO1.TXT
SETUPTXT/PRO2.TXT
SPNOTES.HTM
.html
SUPPORT/APCOMPAT.EXE
.exe windows:5 windows x86 arch:x86

91ca86035b6e072daac0e12c996f0d01

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

__p__commode
exit
_XcptFilter
_initterm
_acmdln
__getmainargs
__setusermatherr
free
_adjust_fdiv
_exit
__p__fmode
_except_handler3
_controlfp
__set_app_type
malloc

advapi32

RegEnumValueW
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyW
RegQueryValueExW
RegCloseKey
RegDeleteValueW
RegOpenKeyExW
RegDeleteKeyW
RegCreateKeyExW
RegSetValueExW

kernel32

GetModuleFileNameW
LocalAlloc
GetModuleHandleA
FormatMessageW
LoadLibraryA
CloseHandle
LocalFree
lstrcmpiW
GetStartupInfoA
GetCommandLineW
lstrcpyW
Sleep
SetEnvironmentVariableW
GetLastError
lstrcatW
lstrlenW
GetProcAddress
GetEnvironmentVariableW
WaitForSingleObject

user32

CharLowerW
IsWindow
PostQuitMessage
SetFocus
EndDialog
CheckRadioButton
GetDesktopWindow
TranslateMessage
DialogBoxParamW
GetWindowTextLengthW
GetWindowTextW
SendMessageW
GetDlgItem
DispatchMessageW
MessageBoxW
GetMessageW
SetWindowTextW
GetDlgItemTextW
wsprintfW

comdlg32

GetOpenFileNameW
GetFileTitleW

shell32

ShellExecuteExW

version

GetFileVersionInfoW
GetFileVersionInfoSizeW

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
SUPPORT/HCL.TXT
SUPPORT/TOOLS/2000RKST.MSI
.msi
SUPPORT/TOOLS/DEPLOY.CAB
.cab
SUPPORT/TOOLS/SETUP.EXE
SUPPORT/TOOLS/SREADME.DOC
.doc windows office2003
SUPPORT/TOOLS/SUPPORT.CAB
.cab
VALUEADD/3RDPARTY/CA_ANTIV/AVBOOT
VALUEADD/3RDPARTY/CA_ANTIV/FD144.EXE
VALUEADD/3RDPARTY/CA_ANTIV/MAKEDISK.BAT
VALUEADD/3RDPARTY/CA_ANTIV/README.TXT
VALUEADD/3RDPARTY/LEVEL8/MQC.QUE/AUTORUN.HTM
.html
VALUEADD/3RDPARTY/LEVEL8/MQC.QUE/CENTRALIMAGE.JPG
.jpg
VALUEADD/3RDPARTY/LEVEL8/MQC.QUE/DATA.TAG
VALUEADD/3RDPARTY/LEVEL8/MQC.QUE/DATA1.CAB
VALUEADD/3RDPARTY/LEVEL8/MQC.QUE/LANG.DAT
VALUEADD/3RDPARTY/LEVEL8/MQC.QUE/LAYOUT.BIN
VALUEADD/3RDPARTY/LEVEL8/MQC.QUE/MH_SUBPAGE.GIF
.gif
VALUEADD/3RDPARTY/LEVEL8/MQC.QUE/MH_SUBPAGELOGO.GIF
.gif
VALUEADD/3RDPARTY/LEVEL8/MQC.QUE/NEW.GIF
.gif
VALUEADD/3RDPARTY/LEVEL8/MQC.QUE/NEW_TOP.GIF
.gif
VALUEADD/3RDPARTY/LEVEL8/MQC.QUE/OS.DAT
VALUEADD/3RDPARTY/LEVEL8/MQC.QUE/PROBLEM.HTM
.html
VALUEADD/3RDPARTY/LEVEL8/MQC.QUE/README.HTM
.html
VALUEADD/3RDPARTY/LEVEL8/MQC.QUE/RELEASE.HTM
.html
VALUEADD/3RDPARTY/LEVEL8/MQC.QUE/SETUP.BMP
VALUEADD/3RDPARTY/LEVEL8/MQC.QUE/SETUP.EXE
VALUEADD/3RDPARTY/LEVEL8/MQC.QUE/SETUP.INI
VALUEADD/3RDPARTY/LEVEL8/MQC.QUE/SETUP.INS
VALUEADD/3RDPARTY/LEVEL8/MQC.QUE/SETUP.LID
VALUEADD/3RDPARTY/LEVEL8/MQC.QUE/SUPPORT.HTM
.html
VALUEADD/3RDPARTY/LEVEL8/MQC.QUE/SUPPORT.TXT
VALUEADD/3RDPARTY/LEVEL8/MQC.QUE/_INST32I.EX_
VALUEADD/3RDPARTY/LEVEL8/MQC.QUE/_ISDEL.EXE
VALUEADD/3RDPARTY/LEVEL8/MQC.QUE/_SETUP.DLL
VALUEADD/3RDPARTY/LEVEL8/MQC.QUE/_SYS1.CAB
VALUEADD/3RDPARTY/LEVEL8/MQC.QUE/_USER1.CAB
VALUEADD/3RDPARTY/MGMT/AGENTS/BANNER.GIF
.gif
VALUEADD/3RDPARTY/MGMT/AGENTS/README.HTM
.html
VALUEADD/3RDPARTY/MGMT/CITRIX/ENG/DEFAULT.HTM
.html
VALUEADD/3RDPARTY/MGMT/CITRIX/ENG/ICA16/DISK1/CLIENTW.ICO
VALUEADD/3RDPARTY/MGMT/CITRIX/ENG/ICA16/DISK1/CUDHLP.INS
VALUEADD/3RDPARTY/MGMT/CITRIX/ENG/ICA16/DISK1/CUDHLPW.DLL
.dll windows:4 windows x86 arch:x86

830741ae3aa276942f4fb054b15e0301

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetStartupInfoA
GetPrivateProfileIntW
CreateProcessW
FindFirstChangeNotificationW
CloseHandle
WriteFile
CreateFileW
CreateDirectoryW
RemoveDirectoryW
DeleteFileW
WideCharToMultiByte
GetACP
GetShortPathNameW
WaitForSingleObject
CreateSemaphoreW
FreeEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
MultiByteToWideChar
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
ReleaseSemaphore
HeapDestroy
HeapCreate
VirtualFree
GetModuleFileNameA
GetCPInfo
GetOEMCP
FreeEnvironmentStringsA
HeapAlloc
SetEnvironmentVariableW
GetEnvironmentStringsW
DisableThreadLibraryCalls
GetLastError
SetFilePointer
CompareStringA
CompareStringW
GetLocaleInfoA
GetLocaleInfoW
GetStringTypeA
GetStringTypeW
HeapFree
VirtualAlloc
LoadLibraryA
SetStdHandle
HeapReAlloc
FlushFileBuffers
LCMapStringA
LCMapStringW

user32

WaitForInputIdle

Exports

Exports

CmHelpInitialize

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VALUEADD/3RDPARTY/MGMT/CITRIX/ENG/ICA16/DISK1/DATA.TAG
VALUEADD/3RDPARTY/MGMT/CITRIX/ENG/ICA16/DISK1/DATA1.CAB
VALUEADD/3RDPARTY/MGMT/CITRIX/ENG/ICA16/DISK1/LANG.DAT
VALUEADD/3RDPARTY/MGMT/CITRIX/ENG/ICA16/DISK1/LAYOUT.BIN
VALUEADD/3RDPARTY/MGMT/CITRIX/ENG/ICA16/DISK1/OS.DAT
VALUEADD/3RDPARTY/MGMT/CITRIX/ENG/ICA16/DISK1/SETUP.EXE
VALUEADD/3RDPARTY/MGMT/CITRIX/ENG/ICA16/DISK1/SETUP.INI
VALUEADD/3RDPARTY/MGMT/CITRIX/ENG/ICA16/DISK1/SETUP.INS
VALUEADD/3RDPARTY/MGMT/CITRIX/ENG/ICA16/DISK1/SETUP.LID
VALUEADD/3RDPARTY/MGMT/CITRIX/ENG/ICA16/DISK1/UPDATE.INI
VALUEADD/3RDPARTY/MGMT/CITRIX/ENG/ICA16/DISK1/VERSION.DAT
VALUEADD/3RDPARTY/MGMT/CITRIX/ENG/ICA16/DISK1/WFCSETUP.INI
VALUEADD/3RDPARTY/MGMT/CITRIX/ENG/ICA16/DISK1/_INST16.EX_
VALUEADD/3RDPARTY/MGMT/CITRIX/ENG/ICA16/DISK1/_ISDEL.EXE
VALUEADD/3RDPARTY/MGMT/CITRIX/ENG/ICA16/DISK1/_SETUP.DLL
VALUEADD/3RDPARTY/MGMT/CITRIX/ENG/ICA16/DISK1/_SYS1.CAB
VALUEADD/3RDPARTY/MGMT/CITRIX/ENG/ICA16/DISK1/_USER1.CAB
VALUEADD/3RDPARTY/MGMT/CITRIX/ENG/ICA16/DISK2/APPSRV.SRC
VALUEADD/3RDPARTY/MGMT/CITRIX/ENG/ICA16/DISK2/DATA2.CAB
VALUEADD/3RDPARTY/MGMT/CITRIX/ENG/ICA16/DISK2/MODULE.SRC
VALUEADD/3RDPARTY/MGMT/CITRIX/ENG/ICA16/DISK2/WFCLIENT.SRC
VALUEADD/3RDPARTY/MGMT/CITRIX/ENG/ICA16/WIN16RDM.HTM
.html
VALUEADD/3RDPARTY/MGMT/CITRIX/ENG/ICA32/DISK1/CLIENTN.ICO
VALUEADD/3RDPARTY/MGMT/CITRIX/ENG/ICA32/DISK1/CUDHLP.INS
VALUEADD/3RDPARTY/MGMT/CITRIX/ENG/ICA32/DISK1/CUDHLPN.DLL
.dll windows:4 windows x86 arch:x86

830741ae3aa276942f4fb054b15e0301

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetStartupInfoA
GetPrivateProfileIntW
CreateProcessW
FindFirstChangeNotificationW
CloseHandle
WriteFile
CreateFileW
CreateDirectoryW
RemoveDirectoryW
DeleteFileW
WideCharToMultiByte
GetACP
GetShortPathNameW
WaitForSingleObject
CreateSemaphoreW
FreeEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
MultiByteToWideChar
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
ReleaseSemaphore
HeapDestroy
HeapCreate
VirtualFree
GetModuleFileNameA
GetCPInfo
GetOEMCP
FreeEnvironmentStringsA
HeapAlloc
SetEnvironmentVariableW
GetEnvironmentStringsW
DisableThreadLibraryCalls
GetLastError
SetFilePointer
CompareStringA
CompareStringW
GetLocaleInfoA
GetLocaleInfoW
GetStringTypeA
GetStringTypeW
HeapFree
VirtualAlloc
LoadLibraryA
SetStdHandle
HeapReAlloc
FlushFileBuffers
LCMapStringA
LCMapStringW

user32

WaitForInputIdle

Exports

Exports

CmHelpInitialize

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VALUEADD/3RDPARTY/MGMT/CITRIX/ENG/ICA32/DISK1/DATA.TAG
VALUEADD/3RDPARTY/MGMT/CITRIX/ENG/ICA32/DISK1/DATA1.CAB
VALUEADD/3RDPARTY/MGMT/CITRIX/ENG/ICA32/DISK1/LANG.DAT
VALUEADD/3RDPARTY/MGMT/CITRIX/ENG/ICA32/DISK1/LAYOUT.BIN
VALUEADD/3RDPARTY/MGMT/CITRIX/ENG/ICA32/DISK1/OS.DAT
VALUEADD/3RDPARTY/MGMT/CITRIX/ENG/ICA32/DISK1/SETUP.EXE
VALUEADD/3RDPARTY/MGMT/CITRIX/ENG/ICA32/DISK1/SETUP.INI
VALUEADD/3RDPARTY/MGMT/CITRIX/ENG/ICA32/DISK1/SETUP.INS
VALUEADD/3RDPARTY/MGMT/CITRIX/ENG/ICA32/DISK1/SETUP.LID
VALUEADD/3RDPARTY/MGMT/CITRIX/ENG/ICA32/DISK1/UPDATE.INI
VALUEADD/3RDPARTY/MGMT/CITRIX/ENG/ICA32/DISK1/VERSION.DAT
VALUEADD/3RDPARTY/MGMT/CITRIX/ENG/ICA32/DISK1/WFCSETUP.INI
VALUEADD/3RDPARTY/MGMT/CITRIX/ENG/ICA32/DISK1/_INST32I.EX_
VALUEADD/3RDPARTY/MGMT/CITRIX/ENG/ICA32/DISK1/_ISDEL.EXE
VALUEADD/3RDPARTY/MGMT/CITRIX/ENG/ICA32/DISK1/_SETUP.DLL
VALUEADD/3RDPARTY/MGMT/CITRIX/ENG/ICA32/DISK1/_SYS1.CAB
VALUEADD/3RDPARTY/MGMT/CITRIX/ENG/ICA32/DISK1/_USER1.CAB
VALUEADD/3RDPARTY/MGMT/CITRIX/ENG/ICA32/DISK2/APPSRV.SRC
VALUEADD/3RDPARTY/MGMT/CITRIX/ENG/ICA32/DISK2/DATA2.CAB
VALUEADD/3RDPARTY/MGMT/CITRIX/ENG/ICA32/DISK2/MODULE.SRC
VALUEADD/3RDPARTY/MGMT/CITRIX/ENG/ICA32/DISK2/PN.SRC
VALUEADD/3RDPARTY/MGMT/CITRIX/ENG/ICA32/DISK2/WFCLIENT.SRC
VALUEADD/3RDPARTY/MGMT/CITRIX/ENG/ICA32/WIN32RDM.HTM
.html
VALUEADD/3RDPARTY/MGMT/CITRIX/ENG/ICAHPC/ICAWINCE.ZIP
.zip
VALUEADD/3RDPARTY/MGMT/CITRIX/ENG/ICAHPC/WINCERDM.HTM
.html
VALUEADD/3RDPARTY/MGMT/INTELDMI/CIMOMPRO/CPRSETUP.EXE
VALUEADD/3RDPARTY/MGMT/INTELDMI/CIMOMPRO/README.HTM
.html
VALUEADD/3RDPARTY/MGMT/INTELDMI/DMISP/DMISP.EXE
.exe windows:4 windows x86 arch:x86

6680a2db590f462cf8098992bf2d2e74

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpiA
LocalFileTimeToFileTime
DosDateTimeToFileTime
CreateFileA
FreeResource
lstrcmpA
SetFileTime
LoadResource
FindResourceA
GetDiskFreeSpaceA
GetDriveTypeA
GetWindowsDirectoryA
CloseHandle
CreateProcessA
WaitForSingleObject
lstrcpynA
GetLastError
IsDBCSLeadByte
GetTickCount
lstrcatA
lstrcpyA
GlobalUnlock
LockResource
GetModuleFileNameA
SetEnvironmentVariableA
GetFileType
HeapReAlloc
LoadLibraryA
GetProcAddress
CompareStringW
CompareStringA
GetStringTypeW
GetStringTypeA
FlushFileBuffers
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetOEMCP
GetACP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
lstrlenA
RtlUnwind
GetCurrentDirectoryA
GetStdHandle
SetHandleCount
SetFilePointer
ReadFile
WriteFile
SetStdHandle
LCMapStringW
WideCharToMultiByte
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
DeleteFileA
CreateDirectoryA
RemoveDirectoryA
SetEndOfFile
GetCommandLineA
SetCurrentDirectoryA
GetModuleHandleA
GetStartupInfoA
MultiByteToWideChar
GetVersion
HeapFree
LCMapStringA

user32

MessageBoxA
GetSysColor
SetWindowTextA
UpdateWindow
InvalidateRect
TranslateMessage
PeekMessageA
DispatchMessageA
ShowWindow
DestroyWindow
LoadStringA
GetDlgItem
DialogBoxParamA
SendDlgItemMessageA
EndDialog
FindWindowA
CharNextA
CharPrevA
GetWindowRect
GetSystemMetrics
MoveWindow
PostQuitMessage
SetCursor
DefWindowProcA
GetClientRect
CopyRect
GetWindowTextA
FillRect
LoadIconA
LoadCursorA
RegisterClassA
CreateDialogParamA

gdi32

DeleteObject
CreateSolidBrush
MoveToEx
CreatePen
LineTo
ExtTextOutA
SelectObject
SetBkColor
GetTextExtentPoint32A
SetTextColor
SaveDC
RestoreDC

Sections

.text
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 951B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VALUEADD/3RDPARTY/MGMT/INTELDMI/DMISP/README.HTM
.html
VALUEADD/3RDPARTY/MGMT/INTELDMI/WBEMDMIP/DMPSETUP.EXE
VALUEADD/3RDPARTY/MGMT/INTELDMI/WBEMDMIP/README.HTM
.html
VALUEADD/3RDPARTY/MGMT/WINSTLE/README.TXT
VALUEADD/3RDPARTY/MGMT/WINSTLE/RELNOTES.DOC
.doc windows office2003
VALUEADD/3RDPARTY/MGMT/WINSTLE/SWIADMLE.MSI
.msi
VALUEADD/3RDPARTY/SECURITY/SDTI/ACECLNT.CAB
.cab
VALUEADD/3RDPARTY/SECURITY/SDTI/ARROW.GIF
.gif
VALUEADD/3RDPARTY/SECURITY/SDTI/INTRO2.JPG
.jpg
VALUEADD/3RDPARTY/SECURITY/SDTI/LINE.GIF
.gif
VALUEADD/3RDPARTY/SECURITY/SDTI/README.HTM
.html
VALUEADD/3RDPARTY/SECURITY/SDTI/SECDYN.GIF
.gif
VALUEADD/3RDPARTY/SECURITY/SDTI/SETUP.EXE
.exe windows:4 windows x86 arch:x86

05c69acb3f3ef732747fa99fe1366a93

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetTempPathA
GetModuleFileNameA
lstrcmpiA
lstrcpyA
lstrlenA
CreateProcessA
FindClose
FindFirstFileA
CloseHandle
WaitForSingleObject
DeleteFileA
GetStartupInfoA
GetModuleHandleA
lstrcatA

user32

MessageBoxA
GetDesktopWindow

setupapi

SetupIterateCabinetA
SetupPromptForDiskA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

msvcrt

_initterm
_adjust_fdiv
__setusermatherr
_controlfp
strrchr
_exit
_XcptFilter
exit
_acmdln
__getmainargs
__dllonexit
_onexit
__p__commode
__p__fmode
__set_app_type
_except_handler3

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VALUEADD/BANNER.GIF
.gif
VALUEADD/MSFT/FONTS/ARIALALS.TTF
VALUEADD/MSFT/FONTS/ARIALALT.TTF
VALUEADD/MSFT/MGMT/ADC/ADC.CAT
VALUEADD/MSFT/MGMT/ADC/ADC.EXE
.exe windows:4 windows x86 arch:x86

60fca950796bdc528a93273073fba761

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcp50

??0logic_error@std@@QAE@ABV01@@Z
?_Xlen@std@@YAXXZ
?_Xran@std@@YAXXZ
??0bad_alloc@std@@QAE@PBD@Z
??1bad_alloc@std@@UAE@XZ
??1out_of_range@std@@UAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
??0logic_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
?assign@?$char_traits@G@std@@SAXAAGABG@Z
??0out_of_range@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??1_Lockit@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??_7out_of_range@std@@6B@
??0out_of_range@std@@QAE@ABV01@@Z
??0bad_alloc@std@@QAE@ABV01@@Z

rpcrt4

RpcStringFreeW
RpcServerInqBindings
RpcServerUnregisterIf
RpcEpUnregister
RpcRevertToSelf
RpcImpersonateClient
RpcBindingInqAuthClientW
I_RpcGetBuffer
RpcRaiseException
NdrConformantStringUnmarshall
NdrConvert
NdrServerInitializeNew
NdrFreeBuffer
NdrSendReceive
NdrGetBuffer
RpcNetworkInqProtseqsW
NdrClientInitializeNew
NdrConformantStringMarshall
NdrConformantStringBufferSize
NdrSimpleStructUnmarshall
NdrSimpleStructMarshall
NdrSimpleStructBufferSize
RpcStringBindingComposeW
UuidToStringW
RpcNetworkIsProtseqValidW
RpcBindingFree
RpcEpResolveBinding
RpcBindingFromStringBindingW
RpcBindingSetAuthInfoW
RpcServerRegisterIf
RpcProtseqVectorFreeW
RpcServerUseProtseqEpW
RpcEpRegisterW
RpcBindingVectorFree
RpcServerRegisterAuthInfoW
RpcServerListen
RpcBindingToStringBindingW
RpcStringBindingParseW
RpcServerUseProtseqW
RpcBindingSetAuthInfoA
RpcBindingFromStringBindingA
RpcNetworkIsProtseqValidA
RpcStringBindingComposeA
RpcStringFreeA

netapi32

NetApiBufferFree
NetUserAdd
NetUserGetInfo
NetGetDCName
NetUserDel
NetGetAnyDCName

wldap32

ord159
ord152
ord40
ord108
ord10
ord206
ord62
ord138
ord134
ord191
ord179
ord21
ord190
ord14
ord216
ord36
ord27
ord26
ord41
ord142
ord79
ord133
ord167
ord127
ord29
ord147
ord118
ord73
ord219
ord145
ord53
ord194
ord13
ord12
ord122
ord224

kernel32

FindFirstFileW
GetModuleFileNameW
UnmapViewOfFile
GetSystemTimeAsFileTime
SystemTimeToFileTime
FormatMessageW
FileTimeToSystemTime
GetComputerNameW
OpenEventW
GetCurrentDirectoryW
TerminateThread
CreateThread
ReleaseMutex
CreateMutexW
DeleteCriticalSection
GetExitCodeThread
LoadLibraryW
GetProcAddress
InitializeCriticalSection
WaitForSingleObject
FreeLibrary
GetVersion
InterlockedDecrement
TlsAlloc
InterlockedExchangeAdd
TlsFree
InterlockedIncrement
InterlockedCompareExchange
GetCurrentThread
TlsGetValue
TlsSetValue
Sleep
GetLastError
OutputDebugStringW
CreateFileMappingW
GetCurrentThreadId
CreateEventW
InterlockedExchange
SetEvent
LeaveCriticalSection
MapViewOfFile
CloseHandle
EnterCriticalSection
MultiByteToWideChar
WideCharToMultiByte
LocalFree
OpenFileMappingW
CreateFileW
GlobalAlloc
GlobalFree
IsDBCSLeadByte
SetLastError
FindNextFileW
FindClose
CreateDirectoryW
GetSystemTime

user32

wsprintfW
LoadStringW

advapi32

GetSecurityDescriptorOwner
GetSecurityDescriptorGroup
CloseServiceHandle
OpenServiceW
OpenSCManagerW
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegEnumValueA
RegEnumValueW
LookupAccountSidW
AddAccessAllowedAce
GetSidSubAuthorityCount
InitializeAcl
IsValidAcl
GetAce
LsaStorePrivateData
LsaOpenPolicy
LsaRetrievePrivateData
LsaFreeMemory
LsaNtStatusToWinError
LsaClose
LookupAccountNameW
IsValidSid
MakeSelfRelativeSD
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorSacl
GetSecurityDescriptorLength
IsValidSecurityDescriptor
RegCreateKeyW
RegQueryValueExW
GetSecurityDescriptorDacl
GetSecurityDescriptorSacl
EqualSid
CopySid
GetSidLengthRequired
InitializeSid
GetSidSubAuthority
RegOpenKeyW
RegNotifyChangeKeyValue
MapGenericMask
AccessCheck
RegOpenKeyExW
SetServiceStatus
RegisterEventSourceW
DeregisterEventSource
OpenThreadToken
GetTokenInformation
GetLengthSid
ReportEventW
RegisterServiceCtrlHandlerW
StartServiceCtrlDispatcherW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
DeleteService
CreateServiceW

msvcrt

_exit
_XcptFilter
exit
_wcsupr
_wsplitpath
__p___winitenv
__wgetmainargs
_initterm
__p__commode
__p__fmode
__set_app_type
??1type_info@@UAE@XZ
__dllonexit
_onexit
?terminate@@YAXXZ
_controlfp
qsort
wcsstr
strchr
isdigit
_stricmp
free
__setusermatherr
_adjust_fdiv
malloc
wcscat
vswprintf
_wtol
iswupper
_wrename
iswspace
memmove
iswlower
_i64tow
??0exception@@QAE@ABQBD@Z
_ultow
swprintf
printf
sprintf
fgetws
fputws
fputs
fflush
_wfopen
fclose
strncmp
iswctype
wcstol
iswalnum
_wremove
wcsncmp
_ltow
wcscmp
iswxdigit
gmtime
swscanf
_timezone
mktime
_wcsnicmp
_wtoi64
wprintf
_tzset
??1exception@@UAE@XZ
_wctime
_purecall
time
wcschr
_wcslwr
_ftol
wcstoul
_except_handler3
_wtoi
_itow
signal
_CxxThrowException
__CxxFrameHandler
wcscpy
wcsncpy
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
fseek
wcslen
??0exception@@QAE@ABV0@@Z
_wcsicmp

exchmem

ExchMHeapAlloc
ExchMHeapCreate
ExchMHeapFree

Exports

Exports

_ADCStartLoggingEx@12
_Abandon@0
_GetLoggingLevel@4
_LoadLoggingLevelsFromRegistry@0
_LogMessage@44
_SetLoggingLevel@8
_ShutdownADC@0
_StartLogging@0
_StopLogging@0
_Synchronise@0

Sections

.text
Size: 864KB - Virtual size: 864KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 46KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VALUEADD/MSFT/MGMT/ADC/ADC.INS
VALUEADD/MSFT/MGMT/ADC/ADC.UNS
VALUEADD/MSFT/MGMT/ADC/ADCADMIN.DLL
.dll regsvr32 windows:4 windows x86 arch:x86

a097f8b1f87890cf783f7ef0081eb1cd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

InterlockedDecrement
DeleteCriticalSection
GetLastError
DisableThreadLibraryCalls
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
lstrlenW
IsBadReadPtr
GetCurrentThreadId
DebugBreak
lstrlenA
SetLastError
LocalReAlloc
GetWindowsDirectoryW
GlobalHandle
lstrcpynW
LocalAlloc
OutputDebugStringW
IsBadCodePtr
LocalFree
GetExitCodeProcess
CreateProcessW
GetTempPathW
CompareFileTime
GlobalFree
GetUserDefaultLangID
GlobalAlloc
GetSystemDefaultLangID
GetComputerNameW
TerminateThread
SystemTimeToFileTime
LocalFileTimeToFileTime
FileTimeToLocalFileTime
GetTimeZoneInformation
LoadLibraryExW
FileTimeToSystemTime
lstrcmpW
GetNumberFormatW
GetDateFormatW
GetLocaleInfoW
InitializeCriticalSection
DuplicateHandle
GetSystemDirectoryW
FormatMessageW
GetProcAddress
GetVersionExW
GetLocalTime
GetSystemTime
GetTickCount
GlobalSize
LoadResource
LockResource
FindResourceExW
Sleep
SizeofResource
SetEvent
GetCommandLineW
LoadLibraryW
FreeLibrary
FatalExit
lstrcatW
HeapDestroy
GetUserDefaultLCID
WaitForSingleObject
CloseHandle
lstrcpyW
GetCurrentThread
GetUserDefaultUILanguage
GlobalUnlock
GlobalLock
MultiByteToWideChar
WideCharToMultiByte
GetCurrentProcess
GlobalReAlloc
GetModuleFileNameW
GetModuleHandleW
lstrcmpiW

ole32

CoTaskMemFree
CreateStreamOnHGlobal
CoInitialize
CoCreateInstance
CoTaskMemAlloc
CoUninitialize
ReleaseStgMedium

user32

GetParent
OffsetRect
BeginPaint
DrawFocusRect
LoadIconW
FillRect
CopyRect
LoadImageW
SetDlgItemInt
GetMessageTime
GetClassInfoW
RegisterClassW
CallMsgFilterW
GetCapture
FrameRect
MessageBoxW
SendMessageW
InvalidateRect
GetDlgCtrlID
GetDlgItem
GetDlgItemTextW
SetDlgItemTextW
SetFocus
GetFocus
EnableWindow
SendDlgItemMessageW
wsprintfW
CheckRadioButton
SetWindowTextW
RegisterClipboardFormatW
GetDlgItemInt
LoadStringW
TranslateMessage
PeekMessageW
DispatchMessageW
CharNextW
EndDialog
SetWindowPos
GetSystemMetrics
ClientToScreen
GetDesktopWindow
GetClientRect
GetWindowRect
GetScrollInfo
CreateDialogIndirectParamW
BringWindowToTop
DialogBoxIndirectParamW
WinHelpW
GetSysColor
GetWindowLongW
DestroyWindow
SetWindowLongW
GetWindow
GetClassNameW
DefFrameProcW
PostQuitMessage
SetScrollPos
GetWindowPlacement
CreateWindowExW
ShowWindow
LoadCursorW
UnregisterClassW
ScreenToClient
UpdateWindow
RegisterWindowMessageW
SetScrollInfo
PostMessageW
ReleaseDC
GetWindowDC
GetDC
SetCursor
GetTopWindow
GetActiveWindow
CharPrevW
CallWindowProcW
DefWindowProcW
EndPaint
GetKeyState
SetScrollRange
ScrollWindowEx
InflateRect
SetCapture
PtInRect
ReleaseCapture
SetRect
DialogBoxParamW
GetDialogBaseUnits
LoadBitmapW
CharUpperBuffW
CharLowerBuffW
IsCharAlphaW
IsCharAlphaNumericW
MessageBeep
CheckDlgButton
CloseClipboard
GetClipboardData
OpenClipboard
InvalidateRgn
IsDlgButtonChecked
SystemParametersInfoW
DrawEdge
MapWindowPoints
GetDoubleClickTime
KillTimer
SetTimer
RedrawWindow

wldap32

ord126
ord73
ord216
ord41
ord27
ord170
ord13
ord79
ord142
ord127
ord26
ord208
ord166
ord141
ord167
ord207

imm32

ImmAssociateContext

msvcrt

_CxxThrowException
_purecall
__CxxFrameHandler
??2@YAPAXI@Z
free
?name@type_info@@QBEPBDXZ
__RTDynamicCast
wcsstr
__RTtypeid
swscanf
malloc
qsort
memmove
_ftol
wcschr
wcslen
iswctype
_vsnwprintf
wcsspn
_except_handler3
toupper
_wcsnicmp
wcscmp
wcsncmp
wcstoul
wcsncpy
wcstol
mktime
wcscpy
difftime
isdigit
_stricmp
_strdup
wcscat
_wcsicmp
towlower
fclose
fflush
strchr
_adjust_fdiv
??1type_info@@UAE@XZ
_initterm
?terminate@@YAXXZ
__dllonexit
_onexit

address

EcFreeLpwstr
EcFloraToLpwstrW
EcReplaceAlloc
EcAllocFlora
EcLpwstrToFloraW
EcFreeFlora

escprint

ord5
ord4

activeds

ord13
ord3
ord7

advapi32

RegEnumValueW
RegConnectRegistryW
RegCloseKey
RegQueryValueExA
RegisterEventSourceW
RegFlushKey
ChangeServiceConfigW
OpenSCManagerW
EnumDependentServicesW
ControlService
StartServiceW
OpenServiceW
QueryServiceStatus
CloseServiceHandle
EqualSid
GetSecurityDescriptorDacl
InitializeAcl
GetAce
IsValidSecurityDescriptor
GetLengthSid
CopySid
SetSecurityDescriptorDacl
RegEnumKeyExW
RegOpenKeyExW
RegCreateKeyExW
GetSecurityDescriptorLength
CreateServiceW
DeleteService
RegQueryValueExW
RegOpenKeyExA
RegEnumValueA
GetSidIdentifierAuthority
GetSidSubAuthorityCount
GetSidSubAuthority
BuildTrusteeWithSidW
GetEffectiveRightsFromAclW
SetSecurityDescriptorControl
GetSecurityDescriptorControl
MapGenericMask
DeregisterEventSource
RegSetValueExW
QueryServiceConfigW
AddAccessAllowedObjectAce
LookupAccountSidW
MakeSelfRelativeSD
MakeAbsoluteSD
AddAccessAllowedAceEx
AddAccessDeniedAceEx
AddAccessDeniedObjectAce
IsValidSid
RegQueryInfoKeyW

comctl32

ImageList_Destroy
ImageList_Create
CreatePropertySheetPageW
PropertySheetW
InitCommonControlsEx
ord8
ImageList_ReplaceIcon

dsuiext

ord10

gdi32

SetDIBitsToDevice
CreatePalette
StretchBlt
CreateCompatibleBitmap
SetBkColor
SetTextColor
Rectangle
GetStockObject
SelectObject
SetTextAlign
ExtTextOutW
SetBkMode
DeleteObject
RealizePalette
UnrealizeObject
SelectPalette
SetPaletteEntries
GetSystemPaletteEntries
GetDeviceCaps
GetTextExtentExPointW
GetBkColor
PatBlt
GetClipBox
LineTo
MoveToEx
CreateSolidBrush
CreatePen
GetTextExtentPointW
GetTextExtentPoint32W
CreateRectRgnIndirect
GetObjectW
CreateFontIndirectW
GetTextMetricsW
CreateBitmap
DeleteDC
BitBlt
CreateCompatibleDC
SelectClipRgn

msvcp50

??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ

netapi32

NetApiBufferFree
NetGetAnyDCName
NetGetDCName
DsGetDcNameW
DsGetSiteNameW

oleaut32

RegisterTypeLi
SafeArrayGetUBound
SafeArrayGetLBound
SystemTimeToVariantTime
SafeArrayCreate
SafeArrayPutElement
SafeArrayGetElement
VariantTimeToSystemTime
SysReAllocString
VariantChangeType
VariantClear
VariantInit
SysAllocString
LoadTypeLi
SysStringLen
SysFreeString
SysAllocStringLen

rpcrt4

NdrPointerUnmarshall
NdrConformantStringBufferSize
NdrConformantStringMarshall
RpcRaiseException
RpcNetworkIsProtseqValidA
NdrSimpleStructUnmarshall
RpcBindingFromStringBindingA
RpcBindingSetAuthInfoA
NdrSimpleStructBufferSize
NdrSimpleStructMarshall
RpcStringBindingComposeA
RpcStringFreeA
NdrClientInitializeNew
RpcStringBindingComposeW
RpcBindingSetAuthInfoW
RpcBindingFree
NdrGetBuffer
NdrSendReceive
NdrConvert
NdrFreeBuffer
RpcBindingFromStringBindingW
RpcEpResolveBinding
RpcMgmtSetComTimeout
RpcStringFreeW
UuidToStringW
RpcNetworkIsProtseqValidW

version

GetFileVersionInfoSizeW
GetFileVersionInfoW

exchmem

ExchFree
ExchSize
ExchAlloc

aclui

ord1

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 529KB - Virtual size: 528KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 157KB - Virtual size: 211KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VALUEADD/MSFT/MGMT/ADC/ADCADMIN.HLP
VALUEADD/MSFT/MGMT/ADC/ADCADMIN.INS
VALUEADD/MSFT/MGMT/ADC/ADCADMIN.MSC
VALUEADD/MSFT/MGMT/ADC/ADCADMIN.UNS
VALUEADD/MSFT/MGMT/ADC/ADCPERF.DLL
.dll windows:4 windows x86 arch:x86

8805de51f6a6256b6e83830e26d0540e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
OpenFileMappingW
MapViewOfFile
GetLastError
UnmapViewOfFile

advapi32

RegQueryValueExW
RegCloseKey
RegOpenKeyExW

Exports

Exports

CloseADCPerformanceData
CollectADCPerformanceData
OpenADCPerformanceData

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VALUEADD/MSFT/MGMT/ADC/ADCPM.H
VALUEADD/MSFT/MGMT/ADC/ADCPM.INI
VALUEADD/MSFT/MGMT/ADC/ADCRIGHTS.LDF
VALUEADD/MSFT/MGMT/ADC/ADCSCHEMA0.LDF
VALUEADD/MSFT/MGMT/ADC/ADCSCHEMA1.LDF
VALUEADD/MSFT/MGMT/ADC/ADCSCHEMA2.LDF
VALUEADD/MSFT/MGMT/ADC/ADCSCHEMA3.LDF
VALUEADD/MSFT/MGMT/ADC/ADCSCHEMA4.LDF
VALUEADD/MSFT/MGMT/ADC/ADCSCHEMA5.LDF
VALUEADD/MSFT/MGMT/ADC/ADCSCHEMA6.LDF
VALUEADD/MSFT/MGMT/ADC/ADCSCHEMA7.LDF
VALUEADD/MSFT/MGMT/ADC/ADCSCHEMA8.LDF
VALUEADD/MSFT/MGMT/ADC/ADCSCHEMA9.LDF
VALUEADD/MSFT/MGMT/ADC/ADCSETUP.INF
VALUEADD/MSFT/MGMT/ADC/ADDRESS.DLL
.dll windows:4 windows x86 arch:x86

de906d63d60e296e543c9a91658873ec

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

escprint

ord3
ord2

kernel32

MultiByteToWideChar
WideCharToMultiByte
GlobalFree
GlobalReAlloc
GlobalAlloc
lstrlenA
IsValidCodePage
lstrcmpiW
lstrlenW

user32

IsCharAlphaNumericW
IsCharAlphaW
IsCharAlphaNumericA
IsCharAlphaA
CharLowerW

msvcrt

_memicmp
_stricmp
sprintf
atoi
_wcsicmp

Exports

Exports

EcAllocDna
EcAllocFlora
EcAsciiDnaToDN
EcCodePageConversion
EcDNToAsciiDna
EcDnaToLpwstrA
EcDnaToLpwstrW
EcFloraToLpstr
EcFloraToLpwstrA
EcFloraToLpwstrW
EcFreeAddressObject
EcFreeDna
EcFreeFlora
EcFreeLpwstr
EcIsOneOffA
EcIsOneOffW
EcLpwstrToDnaA
EcLpwstrToDnaW
EcLpwstrToFloraA
EcLpwstrToFloraW
EcORNameToPrintableFlora
EcPrintableFloraToORName
EcReplaceAlloc
EcValidateFloraA
EcValidateLpwstr
FAddressMain

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VALUEADD/MSFT/MGMT/ADC/CCMPROXY.DLL
.dll windows:4 windows x86 arch:x86

b67d26a6d9562f6eae1ee64899148a61

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

exchmem

ExchAlloc
ExchFree

advapi32

RegisterEventSourceW
ReportEventW
DeregisterEventSource

user32

wsprintfW

kernel32

GetOEMCP
GetEnvironmentStringsW
GetSystemTime
lstrcpynW
lstrlenW
lstrcpyW
MultiByteToWideChar
WideCharToMultiByte
GetCommandLineA
GetVersion
InterlockedDecrement
InterlockedIncrement
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
GetCPInfo
GetACP
GetStringTypeW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetProcAddress
HeapDestroy
HeapCreate
VirtualFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
HeapFree
LCMapStringA
LCMapStringW
GetStringTypeA
FlushFileBuffers
VirtualAlloc
LoadLibraryA
GetLocaleInfoA
SetFilePointer
GetLocaleInfoW
CloseHandle
SetStdHandle

Exports

Exports

CloseProxies
FreeProxy
RcGenerateProxy
RcInitProxies
RcUpdateProxy
RcValidateProxy
RcValidateSiteProxy

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VALUEADD/MSFT/MGMT/ADC/EDSSTUB.EXE
.exe windows:4 windows x86 arch:x86

94d7d5bf9098d1a66ae8eceb86a80a07

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

exchmem

ExchAlloc
ExchFree

comctl32

InitCommonControlsEx

version

GetFileVersionInfoSizeW
GetFileVersionInfoW

kernel32

MultiByteToWideChar
lstrcmpW
lstrcmpiW
GetCurrentDirectoryW
GetDriveTypeW
GetVolumeInformationW
DeleteCriticalSection
lstrcatW
GetCurrentThreadId
InitializeCriticalSection
FormatMessageW
GetProcAddress
GetLocaleInfoW
EnterCriticalSection
GetSystemDirectoryW
GetModuleHandleW
TerminateThread
DebugBreak
GetUserDefaultLangID
LoadLibraryExW
lstrlenW
FatalExit
LoadLibraryW
FreeLibrary
GetLastError
GetUserDefaultUILanguage
GetUserDefaultLCID
InterlockedDecrement
InterlockedIncrement
CreateProcessW
GetModuleHandleA
GetStartupInfoA
lstrcpyW
FindResourceExW
LoadResource
LockResource
SizeofResource
WaitForSingleObject
Sleep
SetCurrentDirectoryW
CloseHandle
SetEvent
GetModuleFileNameW
GetCommandLineW
GetLocalTime
GetTickCount
LeaveCriticalSection

user32

DispatchMessageW
PostQuitMessage
TranslateMessage
DefFrameProcW
MessageBoxW
SetWindowLongW
DestroyWindow
GetWindowLongW
GetSysColor
InvalidateRect
WinHelpW
DialogBoxIndirectParamW
GetFocus
SetRect
BeginPaint
PeekMessageW
CreateDialogIndirectParamW
GetDlgItem
EnableWindow
SendMessageW
SendDlgItemMessageW
GetParent
GetWindowRect
GetClientRect
GetDesktopWindow
ClientToScreen
GetSystemMetrics
SetWindowPos
EndDialog
SetDlgItemTextW
CharNextW
GetWindowPlacement
CreateWindowExW
RegisterClassW
LoadCursorW
SetFocus
EndPaint
DefWindowProcW
DialogBoxParamW
GetTopWindow
GetDC
RegisterWindowMessageW
GetActiveWindow
UpdateWindow
GetDialogBaseUnits
SetCursor
ShowWindow
SetWindowTextW
CharUpperBuffW
CharLowerBuffW
CharPrevW
ReleaseDC
BringWindowToTop
GetDlgItemTextW
UnregisterClassW

gdi32

ExtTextOutW
SetTextAlign
SetTextColor
SetBkMode
DeleteObject
UnrealizeObject
SelectPalette
SetPaletteEntries
GetSystemPaletteEntries
GetDeviceCaps
CreatePalette
SetDIBitsToDevice
CreateSolidBrush
CreatePen
CreateFontIndirectW
GetTextExtentPoint32W
GetBkColor
SetBkColor
RealizePalette

comdlg32

GetSaveFileNameW

advapi32

RegSetValueExW
RegCloseKey
RegQueryValueExW
DeregisterEventSource
RegOpenKeyExW
RegCreateKeyExW
RegisterEventSourceW

msvcrt

_exit
__p__commode
__p__fmode
__set_app_type
exit
__dllonexit
_onexit
_controlfp
_XcptFilter
_ftol
wcschr
wcstoul
wcsncpy
toupper
_except_handler3
_vsnwprintf
iswctype
wcsstr
_purecall
??2@YAPAXI@Z
??3@YAXPAX@Z
__CxxFrameHandler
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 370KB - Virtual size: 372KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VALUEADD/MSFT/MGMT/ADC/ESCPRINT.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

LibMain
RcCvtEscPrintToUni
RcCvtEscPrintWildToUni
RcCvtUniToEscPrint
RcCvtUniToEscPrintWild

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VALUEADD/MSFT/MGMT/ADC/EXCHMEM.DLL
.dll windows:4 windows x86 arch:x86

156f5ddbb55d568a50aa67392f91f536

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

dbghelp

SymLoadModule
SymSetOptions
SymGetOptions
SymCleanup
SymFunctionTableAccess
SymGetModuleBase
StackWalk
SymInitialize
EnumerateLoadedModules
SymUnDName
SymGetSymFromAddr
SymGetModuleInfo

kernel32

TlsFree
TlsAlloc
DisableThreadLibraryCalls
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapCompact
HeapLock
HeapUnlock
HeapWalk
HeapSize
HeapValidate
InterlockedIncrement
InterlockedDecrement
VirtualAlloc
VirtualFree
GetCurrentProcess
GetPrivateProfileStringA
lstrcpyA
GetPrivateProfileIntA
GetProcessHeap
TlsSetValue
GetThreadContext
GetCurrentThread
GetLastError
lstrcpynA
InitializeCriticalSection
GetSystemInfo
SetLastError
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
InterlockedExchange
TlsGetValue
InterlockedCompareExchange

user32

wsprintfA

msvcrt

_except_handler3

Exports

Exports

DllMain
ExchAlloc
ExchFree
ExchHeapAlloc
ExchHeapCompact
ExchHeapCreate
ExchHeapDestroy
ExchHeapFree
ExchHeapLock
ExchHeapReAlloc
ExchHeapSize
ExchHeapUnlock
ExchHeapValidate
ExchHeapWalk
ExchMHeapAlloc
ExchMHeapAllocDebug
ExchMHeapCreate
ExchMHeapDestroy
ExchMHeapFree
ExchMHeapReAlloc
ExchMHeapReAllocDebug
ExchMHeapSize
ExchReAlloc
ExchSize
ExchmemFormatSymbol
ExchmemGetCallStack
ExchmemReloadSymbols
MpHeapAlloc
MpHeapCompact
MpHeapCreate
MpHeapDestroy
MpHeapFree
MpHeapGetStatistics
MpHeapReAlloc
MpHeapValidate
UnInitExchMem
_strdup
calloc
free
malloc
realloc

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 740B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 578B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VALUEADD/MSFT/MGMT/ADC/EXSCHEMA.LDF
VALUEADD/MSFT/MGMT/ADC/INPROXY.DLL
.dll windows:4 windows x86 arch:x86

f89d0d43e920dbeb329170c5426a3d62

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

lstrcmpiW
GetUserDefaultLCID
MultiByteToWideChar
GetSystemTime
WideCharToMultiByte
lstrlenW
lstrcatW
lstrcpynW
GetStdHandle
GetOEMCP
GetACP
GetCommandLineA
GetVersion
HeapFree
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
lstrcpyW
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
GetCPInfo
SetStdHandle
SetFilePointer
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
GetProcAddress
LoadLibraryA
FlushFileBuffers
CloseHandle

user32

wsprintfW

advapi32

ReportEventW
DeregisterEventSource
RegisterEventSourceW

Exports

Exports

CloseProxies
FreeProxy
RcGenerateProxy
RcInitProxies
RcUpdateProxy
RcValidateProxy
RcValidateSiteProxy

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VALUEADD/MSFT/MGMT/ADC/LCONFIG.MAP
VALUEADD/MSFT/MGMT/ADC/LOCAL.MAP
VALUEADD/MSFT/MGMT/ADC/MAILDSMX.DLL
.dll regsvr32 windows:4 windows x86 arch:x86

3e529acc6ffdfaa74705a4edb5112ec8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
InterlockedDecrement
GetLastError
DisableThreadLibraryCalls
EnterCriticalSection
InterlockedIncrement
LocalFree
lstrlenW
CloseHandle
GetUserDefaultLCID
FormatMessageW
DuplicateHandle
GetSystemDirectoryW
GetVersionExW
GetProcAddress
GetSystemTime
GetLocalTime
GetTickCount
GlobalSize
FindResourceExW
LoadResource
LockResource
SizeofResource
Sleep
SetEvent
GetCommandLineW
FatalExit
LoadLibraryW
FreeLibrary
GetUserDefaultUILanguage
IsBadReadPtr
HeapDestroy
lstrcpyW
WaitForSingleObject
InitializeCriticalSection
GetCurrentThread
GetCurrentProcess
lstrcmpiW
GetModuleFileNameW
GetModuleHandleW
GetCurrentThreadId
DebugBreak
LeaveCriticalSection
lstrlenA
WideCharToMultiByte
MultiByteToWideChar
SetLastError
GetDateFormatW
GetLocaleInfoW
lstrcmpW
TerminateThread
FileTimeToSystemTime
FileTimeToLocalFileTime
LoadLibraryExW
LocalFileTimeToFileTime
GlobalUnlock
SystemTimeToFileTime
GetComputerNameW
lstrcpynW
GlobalReAlloc
LocalReAlloc
LocalAlloc
GlobalAlloc
GlobalHandle
lstrcatW
GetSystemDefaultLangID
IsBadCodePtr
OutputDebugStringW
GlobalFree
CompareFileTime
GetUserDefaultLangID
GlobalLock

ole32

CoTaskMemAlloc
StringFromGUID2
ReleaseStgMedium
CoTaskMemRealloc
CoCreateInstance
StringFromCLSID
CoTaskMemFree

oleaut32

LoadTypeLi
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SysAllocString
VariantTimeToSystemTime
SafeArrayGetElement
SafeArrayPutElement
SafeArrayCreate
SystemTimeToVariantTime
SafeArrayDestroy
RegisterTypeLi
SysStringLen
SysAllocStringLen
VariantChangeType
VariantClear
SafeArrayCreateVector
SafeArrayUnaccessData
SysReAllocString
SysFreeString
VariantInit

user32

GetDlgItemTextW
SendMessageW
SetDlgItemTextW
CheckDlgButton
CharUpperBuffW
ShowWindow
SendDlgItemMessageW
CheckRadioButton
IsDlgButtonChecked
IsWindowVisible
IsWindowEnabled
GetDlgItem
GetWindowTextLengthW
EnableWindow
LoadIconW
GetSystemMetrics
GetWindowRect
UnregisterClassW
MessageBoxW
InsertMenuItemW
RegisterClipboardFormatW
GetScrollPos
LoadImageW
GetMessageTime
GetClassInfoW
CallMsgFilterW
GetCapture
FrameRect
GetScrollInfo
SetScrollInfo
SetScrollRange
ScrollWindowEx
SetScrollPos
SystemParametersInfoW
GetDoubleClickTime
RedrawWindow
KillTimer
SetTimer
SetDlgItemInt
MapWindowPoints
DrawEdge
GetDlgItemInt
LoadStringW
TranslateMessage
PeekMessageW
DispatchMessageW
CharNextW
EndDialog
SetWindowPos
ClientToScreen
GetDesktopWindow
GetClientRect
GetParent
CreateDialogIndirectParamW
SetFocus
BringWindowToTop
GetFocus
DialogBoxIndirectParamW
WinHelpW
InvalidateRect
GetSysColor
GetWindowLongW
DestroyWindow
SetWindowLongW
GetWindow
OpenClipboard
DialogBoxParamW
DefFrameProcW
PostQuitMessage
GetWindowPlacement
CreateWindowExW
RegisterClassW
LoadCursorW
BeginPaint
ScreenToClient
DrawFocusRect
FillRect
CopyRect
GetDlgCtrlID
PostMessageW
ReleaseDC
GetWindowDC
GetDC
SetCursor
GetTopWindow
GetActiveWindow
CharPrevW
wsprintfW
CallWindowProcW
DefWindowProcW
EndPaint
GetDialogBaseUnits
OffsetRect
InflateRect
SetCapture
PtInRect
ReleaseCapture
SetRect
SetWindowTextW
UpdateWindow
RegisterWindowMessageW
CharLowerBuffW
MessageBeep
GetKeyState
CloseClipboard
GetClipboardData

ntdsapi

DsUnBindW
DsFreeNameResultW
DsCrackNamesW
DsBindW

wldap32

ord26
ord170
ord207
ord126
ord141
ord166
ord13
ord73
ord41
ord79
ord27

imm32

ImmAssociateContext

msvcrt

_CxxThrowException
__CxxFrameHandler
??2@YAPAXI@Z
_purecall
free
malloc
wcsstr
strchr
wcslen
memmove
wcschr
isdigit
_ftol
iswctype
rand
srand
time
wcsspn
_vsnwprintf
_except_handler3
toupper
swscanf
wcsncat
wcscmp
wcsncmp
_wcsnicmp
wcsncpy
wcstol
wcstoul
wcscpy
_stricmp
_strdup
_ltow
_wcsicmp
qsort
towlower
wcscat
swprintf
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
?terminate@@YAXXZ
__dllonexit
_onexit

address

EcReplaceAlloc
EcLpwstrToFloraW
EcFreeFlora
EcAllocFlora
EcFreeLpwstr
EcFloraToLpwstrW

escprint

ord4
ord5

exchmem

ExchFree
ExchAlloc
ExchSize

activeds

ord13
ord3
ord7

advapi32

SetSecurityDescriptorOwner
GetLengthSid
SetSecurityDescriptorGroup
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegDeleteKeyW
GetSidSubAuthority
BuildTrusteeWithSidW
CloseServiceHandle
GetTokenInformation
LookupAccountNameW
IsValidSecurityDescriptor
GetAce
InitializeAcl
GetSecurityDescriptorDacl
EqualSid
RegConnectRegistryW
RegEnumValueW
DeregisterEventSource
OpenSCManagerW
GetSecurityDescriptorLength
RegQueryValueExA
RegOpenKeyExA
RegEnumValueA
GetSidIdentifierAuthority
GetSidSubAuthorityCount
QueryServiceStatus
OpenServiceW
GetEffectiveRightsFromAclW
SetSecurityDescriptorControl
GetSecurityDescriptorControl
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
MapGenericMask
LookupAccountSidW
OpenProcessToken
RegisterEventSourceW
RegSetValueExW
RegEnumKeyExW
CopySid
AddAccessAllowedObjectAce
AddAccessDeniedAceEx
MakeSelfRelativeSD
MakeAbsoluteSD
AddAccessAllowedAceEx
RegQueryInfoKeyW
GetUserNameW
AddAccessDeniedObjectAce
IsValidSid
RegFlushKey

comctl32

PropertySheetW
CreatePropertySheetPageW
InitCommonControlsEx
ord8
ImageList_Destroy
ImageList_Create
ImageList_ReplaceIcon

gdi32

SetTextColor
GetStockObject
SelectObject
SetTextAlign
ExtTextOutW
SetBkMode
DeleteObject
RealizePalette
UnrealizeObject
SelectPalette
SetPaletteEntries
GetSystemPaletteEntries
GetDeviceCaps
SetBkColor
Rectangle
CreateSolidBrush
CreatePen
GetTextExtentPointW
GetTextExtentPoint32W
GetBkColor
GetTextExtentExPointW
CreateFontIndirectW
GetTextMetricsW
GetObjectW
GetClipBox
CreatePalette
PatBlt
SetDIBitsToDevice
DeleteDC
CreateCompatibleBitmap
CreateCompatibleDC
CreateBitmap
BitBlt
StretchBlt

msvcp50

??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ

netapi32

NetGetDCName
NetGetAnyDCName
NetServerGetInfo
DsGetDcNameW
DsGetSiteNameW
NetApiBufferFree

rpcrt4

NdrPointerUnmarshall
NdrGetBuffer
NdrClientInitializeNew
NdrConformantStringMarshall
NdrConformantStringBufferSize
NdrSimpleStructUnmarshall
NdrSimpleStructMarshall
NdrSimpleStructBufferSize
NdrSendReceive
RpcRaiseException
RpcStringFreeA
RpcStringBindingComposeA
RpcNetworkIsProtseqValidA
RpcBindingFromStringBindingA
RpcBindingSetAuthInfoA
RpcBindingFree
RpcNetworkIsProtseqValidW
UuidToStringW
RpcStringBindingComposeW
RpcStringFreeW
RpcMgmtSetComTimeout
RpcEpResolveBinding
RpcBindingFromStringBindingW
NdrConvert
NdrFreeBuffer
RpcBindingSetAuthInfoW

version

GetFileVersionInfoSizeW
GetFileVersionInfoW

aclui

ord1
ord2

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterInDS
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 573KB - Virtual size: 572KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 147KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VALUEADD/MSFT/MGMT/ADC/MAILDSMX.HLP
VALUEADD/MSFT/MGMT/ADC/PCPROXY.DLL
.dll windows:4 windows x86 arch:x86

c8fbc49b7aedb382bbf32b6bb848e717

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

MultiByteToWideChar
lstrcmpiW
lstrlenW
WideCharToMultiByte
GetUserDefaultLCID
GetFileType
GetOEMCP
GetACP
GetCommandLineA
GetVersion
HeapAlloc
HeapFree
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetSystemTime
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
GetCPInfo
SetStdHandle
SetFilePointer
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetProcAddress
LoadLibraryA
FlushFileBuffers
CloseHandle

user32

wsprintfW

advapi32

ReportEventW
DeregisterEventSource
RegisterEventSourceW

Exports

Exports

CloseProxies
FreeProxy
RcGenerateProxy
RcInitProxies
RcUpdateProxy
RcValidateProxy
RcValidateSiteProxy

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VALUEADD/MSFT/MGMT/ADC/RCONFIG.MAP
VALUEADD/MSFT/MGMT/ADC/README.HTM
.html
VALUEADD/MSFT/MGMT/ADC/REMOTE.MAP
VALUEADD/MSFT/MGMT/ADC/RES/ADCLOG.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Sections

.text
Size: 512B - Virtual size: 163B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 189KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VALUEADD/MSFT/MGMT/ADC/SDMAP.TXT
VALUEADD/MSFT/MGMT/ADC/SETUP.EXE
.exe windows:4 windows x86 arch:x86

f7dd7bb5393b655cc2192061ebf5851b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

exchmem

ExchSize
ExchFree
ExchAlloc
malloc
_strdup
free

wldap32

ord207
ord126
ord79
ord170
ord13
ord73
ord41
ord27
ord141
ord166
ord26

comctl32

ord8
InitCommonControlsEx
CreatePropertySheetPageW
PropertySheetW

netapi32

NetShareDel
NetApiBufferFree
NetShareAdd
NetGetDCName
NetGetAnyDCName
NetGroupAddUser
NetGroupAdd
NetServerGetInfo
NetWkstaUserGetInfo
DsGetDcNameW
DsGetSiteNameW

rpcrt4

NdrConvert
NdrGetBuffer
NdrSendReceive
NdrFreeBuffer
RpcBindingSetAuthInfoW
NdrSimpleStructUnmarshall
NdrSimpleStructMarshall
NdrSimpleStructBufferSize
RpcRaiseException
RpcBindingFromStringBindingW
RpcEpResolveBinding
RpcBindingFree
RpcNetworkIsProtseqValidW
UuidToStringW
RpcStringBindingComposeW
RpcStringFreeW
RpcMgmtSetComTimeout
RpcStringFreeA
RpcStringBindingComposeA
RpcNetworkIsProtseqValidA
RpcBindingFromStringBindingA
RpcBindingSetAuthInfoA
NdrClientInitializeNew

version

GetFileVersionInfoSizeW
GetFileVersionInfoW

ole32

CoUninitialize
CoInitialize
CoCreateInstance

oleaut32

VariantChangeType
SafeArrayPutElement
SafeArrayGetElement
VariantTimeToSystemTime
SysReAllocString
SysStringLen
SysAllocString
VariantInit
VariantClear
SafeArrayCreate
SafeArrayGetLBound
SysAllocStringLen
SafeArrayGetUBound
SystemTimeToVariantTime
SysFreeString

shell32

SHGetFolderLocation
SHChangeNotify
SHGetSpecialFolderPathW
SHGetPathFromIDListW

activeds

ord13
ord7
ord3

clusapi

CreateClusterResourceType
CloseCluster
OpenCluster
DeleteClusterResourceType

security

AcceptSecurityContext
InitializeSecurityContextW
EnumerateSecurityPackagesW
FreeContextBuffer
AcquireCredentialsHandleW
ImpersonateSecurityContext
RevertSecurityContext
DeleteSecurityContext
FreeCredentialsHandle

setupapi

SetupDefaultQueueCallbackW
SetupDestroyDiskSpaceList
SetupCloseInfFile
SetupCloseFileQueue
SetupQueueCopyW
SetupOpenInfFileW
SetupTermDefaultQueueCallback
SetupOpenFileQueue
SetupCreateDiskSpaceListW
SetupRemoveSectionFromDiskSpaceListW
SetupAddSectionToDiskSpaceListW
SetupQueueDeleteSectionW
SetupQueueDeleteW
SetupCommitFileQueueW
SetupQueueCopySectionW
SetupInitDefaultQueueCallbackEx
SetupQuerySpaceRequiredOnDriveW
SetupSetDirectoryIdW

msvcp50

??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ

kernel32

GetStartupInfoA
GetModuleHandleA
MultiByteToWideChar
DeleteFileW
FormatMessageW
GetCurrentProcess
GetTempFileNameW
CreateThread
lstrlenW
lstrcpyW
GetTempPathW
Sleep
GetLastError
GetModuleFileNameW
GetComputerNameW
CloseHandle
CreateEventW
ReadFile
GetFileInformationByHandle
CreateFileW
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
FileTimeToSystemTime
LocalFileTimeToFileTime
SystemTimeToFileTime
InterlockedDecrement
InterlockedIncrement
CompareFileTime
FreeLibrary
GetProcAddress
LoadLibraryW
lstrcmpW
GetUserDefaultUILanguage
GetDateFormatW
GetUserDefaultLCID
GetLocaleInfoW
SizeofResource
LockResource
LoadResource
FindResourceExW
lstrcatW
lstrcmpiW
lstrlenA
WideCharToMultiByte
CreateDirectoryW
GetCurrentThreadId
WaitForSingleObject
DuplicateHandle
GetCurrentThread
MoveFileExW
FatalExit
GetCommandLineW
SetEvent
SetCurrentDirectoryW
GetUserDefaultLangID
GetTickCount
GetFileSize
GetLocalTime
GetDiskFreeSpaceW
GetVersionExW
GetSystemDirectoryW
GetCurrentDirectoryW
GetDriveTypeW
GetVolumeInformationW
DebugBreak
GetModuleHandleW
LoadLibraryExW
FileTimeToLocalFileTime
TerminateThread
LocalReAlloc
GlobalUnlock
GlobalLock
SetLastError
CopyFileW
GlobalFree
GlobalAlloc
lstrcpynW
GlobalHandle
LocalFree
LocalAlloc
GlobalReAlloc
GetFileTime
CreateProcessW
GetExitCodeProcess
WaitForSingleObjectEx
CreateProcessA
SetFileTime

user32

UpdateWindow
SetWindowTextW
GetActiveWindow
GetTopWindow
SetCursor
GetDialogBaseUnits
ShowWindow
GetDlgCtrlID
DefWindowProcW
SystemParametersInfoW
GetDoubleClickTime
RegisterWindowMessageW
DialogBoxParamW
GetKeyState
MessageBeep
DdeGetLastError
DdeCreateStringHandleW
DdeConnect
WaitForInputIdle
DdeFreeStringHandle
DdeQueryConvInfo
SetForegroundWindow
DdeClientTransaction
DdeInitializeW
GetMessageTime
GetClassInfoW
DrawFocusRect
UnregisterClassW
LoadCursorW
RegisterClassW
EndPaint
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
PostQuitMessage
DefFrameProcW
DestroyWindow
GetSysColor
InvalidateRect
WinHelpW
GetFocus
BringWindowToTop
CreateDialogIndirectParamW
GetClientRect
GetDesktopWindow
GetSystemMetrics
MapWindowPoints
CallMsgFilterW
GetCapture
FrameRect
GetScrollInfo
SetScrollInfo
SetScrollRange
ScrollWindowEx
SetScrollPos
KillTimer
SetWindowPos
EndDialog
MessageBoxW
IsCharAlphaW
CharPrevW
CharUpperBuffW
CharNextW
CharLowerBuffW
GetDlgItemTextW
SetFocus
wsprintfW
SetDlgItemTextW
GetDC
GetWindowRect
ReleaseDC
SendDlgItemMessageW
IsDlgButtonChecked
CheckDlgButton
SendMessageW
GetWindowLongW
SetWindowLongW
PostMessageW
GetParent
GetDlgItem
EnableWindow
BeginPaint
SetTimer
RedrawWindow
SetRect
ReleaseCapture
PtInRect
SetCapture
CreateWindowExW
GetWindowPlacement
FillRect
ClientToScreen

gdi32

CreateCompatibleDC
CreateCompatibleBitmap
PatBlt
GetClipBox
GetObjectW
GetBkColor
GetTextExtentPointW
CreatePen
CreateSolidBrush
SetDIBitsToDevice
CreatePalette
GetDeviceCaps
BitBlt
StretchBlt
DeleteObject
SetBkMode
CreateBitmap
DeleteDC
GetTextMetricsW
GetSystemPaletteEntries
SetPaletteEntries
SelectPalette
UnrealizeObject
RealizePalette
CreateFontIndirectW
SetBkColor
SetTextColor
ExtTextOutW
SetTextAlign
GetStockObject
DPtoLP
GetTextExtentPoint32W
SelectObject

comdlg32

GetSaveFileNameW

advapi32

RegOpenKeyExA
RegEnumValueA
RegQueryValueExA
GetAce
EnumDependentServicesW
AddAccessDeniedObjectAce
RegEnumValueW
IsValidSid
AddAccessDeniedAceEx
RegSetValueExW
GetSecurityDescriptorLength
QueryServiceConfigW
DeleteService
CreateServiceW
RegQueryInfoKeyW
RegGetKeySecurity
RegSetKeySecurity
RegEnumKeyW
RegOpenKeyExW
RegQueryValueExW
RegConnectRegistryW
RegFlushKey
AllocateAndInitializeSid
FreeSid
LsaEnumeratePrivilegesOfAccount
LookupPrivilegeNameW
LsaAddPrivilegesToAccount
LsaFreeMemory
LsaClose
LsaGetSystemAccessAccount
LsaSetSystemAccessAccount
LsaOpenPolicy
LsaOpenAccount
LsaCreateAccount
LookupAccountSidW
MakeSelfRelativeSD
MakeAbsoluteSD
AddAccessAllowedAceEx
InitializeAcl
AddAccessAllowedObjectAce
RegEnumKeyExW
ChangeServiceConfigW
OpenSCManagerW
GetUserNameW
ControlService
StartServiceW
OpenServiceW
QueryServiceStatus
CloseServiceHandle
LookupPrivilegeValueW
EqualSid
DeleteAce
GetAclInformation
AddAce
GetSecurityDescriptorDacl
AddAccessAllowedAce
RegDeleteKeyW
SetSecurityDescriptorGroup
OpenProcessToken
RegCreateKeyExW
RegCloseKey
IsValidSecurityDescriptor
LookupAccountNameW
GetTokenInformation
DeregisterEventSource
RegDeleteValueW
SetSecurityDescriptorOwner
GetLengthSid
CopySid
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegOpenKeyW
RegisterEventSourceW

msvcrt

isdigit
__setusermatherr
memmove
wcstoul
wcsncpy
wcsncmp
swscanf
toupper
_vsnwprintf
_except_handler3
wcstol
wcscpy
wcscat
towlower
iswctype
qsort
_stricmp
wcschr
_wcsnicmp
_wcsicmp
wcscmp
wcslen
wcsstr
exit
??2@YAPAXI@Z
_purecall
ceil
_wremove
_wrmdir
_ftol
__CxxFrameHandler
_controlfp
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_onexit
__dllonexit
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
fputws
_wfopen
fclose
fflush
_wsplitpath
fgetws
_CxxThrowException
strchr
_initterm
__getmainargs
_acmdln
_XcptFilter
_exit

Sections

.text
Size: 318KB - Virtual size: 318KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 133KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VALUEADD/MSFT/MGMT/ADC/TRIAL.LDF
VALUEADD/MSFT/MGMT/ADC/X400PROX.DLL
.dll windows:4 windows x86 arch:x86

eb646482ef29c9b25dd1e29e7a643f1e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

address

EcFreeLpwstr
EcFreeFlora
EcFloraToLpwstrW
EcLpwstrToFloraW
EcValidateLpwstr

kernel32

DeleteCriticalSection
GetCPInfo
lstrcpyW
lstrcatW
lstrlenW
GetSystemTime
MultiByteToWideChar
WideCharToMultiByte
GetUserDefaultLCID
GetEnvironmentStrings
GetOEMCP
GetCommandLineA
GetVersion
HeapAlloc
HeapFree
InterlockedDecrement
InterlockedIncrement
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetFilePointer
GetModuleFileNameA
SetStdHandle
GetACP
CloseHandle
FreeEnvironmentStringsA
FreeEnvironmentStringsW
LCMapStringA
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
LCMapStringW
GetStringTypeA
GetStringTypeW
GetProcAddress
LoadLibraryA
GetLocaleInfoA
FlushFileBuffers
GetLocaleInfoW

user32

wsprintfW

advapi32

RegisterEventSourceW
ReportEventW
DeregisterEventSource

Exports

Exports

CloseProxies
FreeProxy
RcGenerateProxy
RcInitProxies
RcUpdateProxy
RcValidateProxy
RcValidateSiteProxy

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VALUEADD/MSFT/MGMT/IAS/IASNT4.EXE
.exe windows:5 windows x86 arch:x86

c56a25fa4336eeb10723b3537ba4876d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
EqualSid
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
FreeSid
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegQueryInfoKeyA

kernel32

lstrcatA
GetFileAttributesA
GetShortPathNameA
LocalAlloc
GetLastError
GetCurrentProcess
GetPrivateProfileIntA
lstrcmpiA
lstrcpyA
GetModuleFileNameA
FreeLibrary
GetPrivateProfileStringA
lstrlenA
GetSystemDirectoryA
RemoveDirectoryA
GetProcAddress
FindNextFileA
DeleteFileA
SetFileAttributesA
lstrcmpA
FindFirstFileA
_lclose
_llseek
_lopen
WritePrivateProfileStringA
GetWindowsDirectoryA
LoadLibraryA
FindClose
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
IsDBCSLeadByte
ExitProcess
CloseHandle
GetStartupInfoA
GetCommandLineA
LoadResource
FindResourceA
CreateMutexA
SetEvent
CreateEventA
SetCurrentDirectoryA
CreateThread
ResetEvent
TerminateThread
LocalFree
FormatMessageA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetTempPathA
FreeResource
LockResource
SizeofResource
CreateFileA
ReadFile
WriteFile
SetFilePointer
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetTempFileNameA
GetSystemInfo
GetDriveTypeA
lstrcpynA
GetVolumeInformationA
GetCurrentDirectoryA
LoadLibraryExA
GetModuleHandleA
CreateDirectoryA
ExpandEnvironmentStringsA
GetVersionExA
GetDiskFreeSpaceA
MulDiv

gdi32

GetDeviceCaps

user32

wsprintfA
ExitWindowsEx
CharNextA
CharUpperA
EndDialog
GetDesktopWindow
CharPrevA
GetWindowLongA
CallWindowProcA
GetDlgItem
SetForegroundWindow
SetWindowTextA
SendDlgItemMessageA
SetWindowLongA
EnableWindow
SendMessageA
LoadStringA
MsgWaitForMultipleObjects
PeekMessageA
MessageBoxA
SetWindowPos
ReleaseDC
GetDC
GetWindowRect
ShowWindow
DialogBoxIndirectParamA
SetDlgItemTextA
MessageBeep
GetDlgItemTextA
DispatchMessageA

comctl32

ord17

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

Sections

.text
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 457KB - Virtual size: 460KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VALUEADD/MSFT/MGMT/IAS/README.HTM
.html
VALUEADD/MSFT/MGMT/MSTSC_HPC/HPCRDP.EXE
.exe windows:5 windows x86 arch:x86

b83464d8132ecd9f810820e192566e15

Code Sign

03:c7:8f:37:db:92:28:df:3c:bb:1a:ad:82:fa:67:10
Certificate

Issuer

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

Not Before

09-04-1996 00:00

Not After

07-01-2004 23:59

Subject

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

13:89:b4:d1:8a:e8:a7:c4:bd:35:c7:9b:8d:88:ca:1f:ca:53:56:91
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

12-05-1997 07:00

Not After

31-12-1999 07:00

Subject

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

bd:11:9a:da:43:ed:21:fb:46:58:84:89:ca:46:88:90:25:ee:14:60
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

12-05-1997 07:00

Not After

31-12-1999 07:00

Subject

OU=VeriSign Time Stamping Service+OU=VeriSign Trust Network+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign\, Inc.,L=Internet

55:0d:88:f5:3f:64:16:d7:0c:73:00:d8:45:92:16:34
Certificate

Issuer

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

Not Before

19-03-1999 00:00

Not After

16-04-2000 23:59

Subject

CN=Microsoft Corporation,OU=VeriSign Commercial Software Publishers CA+OU=www.verisign.com/repository/RPA Incorp. by Ref.\,LIAB.LTD(c)98+OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Microsoft Corporation,O=VeriSign\, Inc.,L=Internet+L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageKeyEncipherment

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
EqualSid
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
FreeSid
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegQueryInfoKeyA

kernel32

lstrcatA
GetFileAttributesA
GetShortPathNameA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetCurrentProcess
lstrlenA
lstrcmpiA
lstrcpyA
GetModuleFileNameA
FreeLibrary
LocalAlloc
GetLastError
GetSystemDirectoryA
LoadLibraryA
FindClose
FindNextFileA
DeleteFileA
SetFileAttributesA
lstrcmpA
FindFirstFileA
_lclose
_llseek
_lopen
GetWindowsDirectoryA
GetProcAddress
RemoveDirectoryA
GlobalUnlock
GlobalLock
GlobalAlloc
ExitProcess
GetModuleHandleA
GetStartupInfoA
CloseHandle
LoadResource
FindResourceA
CreateMutexA
SetEvent
CreateEventA
SetCurrentDirectoryA
CreateThread
ResetEvent
TerminateThread
GetVersionExA
LocalFree
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetTempPathA
FreeResource
LockResource
SizeofResource
CreateFileA
ReadFile
WriteFile
SetFilePointer
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetTempFileNameA
GetSystemInfo
GetDiskFreeSpaceA
GetDriveTypeA
lstrcpynA
GetVolumeInformationA
GetCurrentDirectoryA
LoadLibraryExA
GetCommandLineA
CreateDirectoryA
GlobalFree
FormatMessageA
IsDBCSLeadByte

gdi32

GetDeviceCaps

user32

EndDialog
wsprintfA
ExitWindowsEx
CharNextA
CharUpperA
GetDesktopWindow
SetWindowLongA
GetWindowLongA
CallWindowProcA
GetDlgItem
SetForegroundWindow
SetWindowTextA
SendDlgItemMessageA
EnableWindow
GetDlgItemTextA
SendMessageA
DispatchMessageA
LoadStringA
PeekMessageA
MessageBoxA
CharPrevA
SetWindowPos
ReleaseDC
GetDC
GetWindowRect
ShowWindow
DialogBoxIndirectParamA
SetDlgItemTextA
MessageBeep
MsgWaitForMultipleObjects

comctl32

ord17

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 993KB - Virtual size: 996KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VALUEADD/MSFT/MGMT/MSTSC_HPC/README.TXT
VALUEADD/MSFT/MGMT/MS_SMS/README.HTM
.html
VALUEADD/MSFT/MGMT/MS_SMS/SMSMAN.EXE
.exe windows:4 windows x86 arch:x86

0cad8d98dfa07c3e677522d16881fddd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_NET_RUN_FROM_SWAP

Imports

ole32

StringFromCLSID
CoCreateInstance
CoTaskMemFree
CoInitialize
CoUninitialize

kernel32

IsBadWritePtr
IsBadCodePtr
LCMapStringW
GetStringTypeW
GetStringTypeA
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetStdHandle
SetUnhandledExceptionFilter
GetLocaleInfoA
TlsAlloc
InitializeCriticalSection
LocalAlloc
lstrcpynA
MulDiv
FormatMessageA
LocalFree
lstrcpyA
GlobalUnlock
GetVersion
lstrcatA
FindResourceA
LoadResource
LockResource
GlobalFree
lstrlenA
InterlockedDecrement
InterlockedIncrement
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
VirtualAlloc
LCMapStringA
GetCurrentThreadId
GetModuleHandleA
IsBadReadPtr
CreateDirectoryA
IsDBCSLeadByte
SleepEx
GetProfileStringA
ReleaseMutex
CreateMutexA
OpenMutexA
CopyFileA
MoveFileA
DeleteFileA
MoveFileExA
MultiByteToWideChar
WideCharToMultiByte
GetDriveTypeA
GetComputerNameA
CreateFileA
GetModuleFileNameA
SetLastError
FreeLibrary
CreateProcessA
LoadLibraryA
GetProcAddress
GetFileAttributesA
Sleep
WaitForSingleObject
GetCurrentDirectoryA
SetCurrentDirectoryA
GetLastError
OpenEventA
SetEvent
CloseHandle
GetVersionExA
WaitForMultipleObjects
GetCommandLineA
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStrings
GetEnvironmentStringsW
CreateEventA
UnhandledExceptionFilter
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetOEMCP
HeapSize
HeapReAlloc
RaiseException
GetACP
GetCPInfo
HeapAlloc
ExitThread
GetLocalTime
HeapFree
TerminateProcess
RtlUnwind
GetSystemTime
GetTimeZoneInformation
ExitProcess
GetStartupInfoA
FileTimeToSystemTime
FileTimeToLocalFileTime
SetFileAttributesA
GlobalGetAtomNameA
GlobalAddAtomA
SetErrorMode
GetFileTime
GetFileSize
SizeofResource
GetVolumeInformationA
GetFullPathNameA
SetEndOfFile
FindFirstFileA
FindClose
FlushFileBuffers
UnlockFile
LockFile
ReadFile
SetFilePointer
WriteFile
GetProcessVersion
GetCurrentProcess
DuplicateHandle
WritePrivateProfileStringA
LocalReAlloc
GlobalFlags
TlsGetValue
GlobalReAlloc
TlsSetValue
EnterCriticalSection
GlobalHandle
LeaveCriticalSection
lstrcmpiA
DeleteCriticalSection
GetCurrentThread
GetLocaleInfoW

mpr

WNetGetConnectionA

advapi32

SetKernelObjectSecurity
InitializeAcl
InitializeSecurityDescriptor
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegDeleteValueA
RegQueryValueExA
RegOpenKeyA
RegCloseKey
SetSecurityDescriptorDacl
AddAccessAllowedAce
RegCreateKeyA
AllocateAndInitializeSid
RegEnumValueA
RegQueryInfoKeyA
RegConnectRegistryA
RegGetKeySecurity
FreeSid
RegEnumKeyExA
SetSecurityDescriptorOwner
LookupAccountNameA
RegEnumKeyA
RegSetKeySecurity

user32

GetDesktopWindow
ClientToScreen
PtInRect
GetClassNameA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
InflateRect
IntersectRect
SetWindowTextA
GetSysColorBrush
GetDC
ReleaseDC
EndDialog
GetSystemMetrics
CreateDialogIndirectParamA
LoadIconA
UpdateWindow
SendDlgItemMessageA
SystemParametersInfoA
MapWindowPoints
GetSysColor
IsDialogMessageA
ScrollWindow
DeferWindowPos
GetClientRect
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
CharUpperA
SetScrollInfo
ShowScrollBar
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
WinHelpA
GetClassInfoA
GetSubMenu
GetMenuItemID
GetMenu
LoadMenuA
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
DestroyWindow
CreateWindowExA
SetPropA
UnhookWindowsHookEx
GetForegroundWindow
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetWindow
SetWindowLongA
RegisterWindowMessageA
GetWindowRect
ScreenToClient
MapDialogRect
DestroyMenu
InvalidateRect
OffsetRect
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
ReleaseCapture
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
SetMenu
AdjustWindowRectEx
IsWindow
SetWindowPos
GetCapture
SetActiveWindow
GetAsyncKeyState
GetDlgItem
GetWindowLongA
IsWindowEnabled
SetFocus
LoadStringA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
ShowOwnedPopups
PostQuitMessage
LoadCursorA
SetCursor
PostMessageA
wsprintfA
SendMessageA
GetParent
EnableWindow
FindWindowA
IsIconic
ShowWindow
GetLastActivePopup
SetForegroundWindow
MessageBoxA
RegisterClassA
GetMenuItemCount
EqualRect
CharNextA
ShowCaret
DefDlgProcA
ExcludeUpdateRgn
WindowFromPoint
UnregisterClassA
IsWindowUnicode
HideCaret
DrawFocusRect

shell32

DragQueryFileA
DragFinish

gdi32

SetTextColor
PatBlt
GetObjectA
DeleteObject
GetDeviceCaps
ExtTextOutA
CreateFontIndirectA
DeleteDC
DPtoLP
RestoreDC
SelectObject
SaveDC
SetMapMode
SetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
OffsetViewportOrgEx
SetWindowExtEx
GetClipBox
ScaleWindowExtEx
IntersectClipRect
CreateCompatibleDC
CreateSolidBrush
PtVisible
CreateDIBitmap
RectVisible
TextOutA
Escape
GetTextExtentPointA
BitBlt
GetStockObject
SetBkMode
CreateBitmap
SetBkColor

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

comctl32

ImageList_Destroy
ord17
PropertySheetA
CreatePropertySheetPageA
DestroyPropertySheetPage

oleaut32

SysReAllocStringLen
VariantInit
VariantClear
SysFreeString
VariantCopy

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

Exports

Exports

_GetSitesSubtreeLockHandle@4
_ReleaseSitesSubtreeLockHandle@12
_SignalSiteRegChangeEvent@0

Sections

.text
Size: 300KB - Virtual size: 299KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VALUEADD/MSFT/MGMT/PBA/PBAINST.EXE
.exe windows:5 windows x86 arch:x86

d287b46f6436ae965f0f1af9da8d89c9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
AllocateAndInitializeSid
EqualSid
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
FreeSid
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegQueryInfoKeyA

kernel32

LocalAlloc
GetLastError
GetCurrentProcess
LoadLibraryA
CloseHandle
LocalFree
GetFileAttributesA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrlenA
lstrcmpiA
lstrcatA
GetShortPathNameA
GetSystemDirectoryA
RemoveDirectoryA
lstrcpyA
FindNextFileA
DeleteFileA
SetFileAttributesA
lstrcmpA
FindFirstFileA
_lclose
_llseek
_lopen
WritePrivateProfileStringA
GetWindowsDirectoryA
GetModuleFileNameA
FindClose
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
IsDBCSLeadByte
ExitProcess
GetProcAddress
GetStartupInfoA
GetCommandLineA
LoadResource
FindResourceA
CreateMutexA
SetEvent
CreateEventA
SetCurrentDirectoryA
CreateThread
ResetEvent
TerminateThread
FreeLibrary
FormatMessageA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetTempPathA
FreeResource
LockResource
SizeofResource
CreateFileA
ReadFile
WriteFile
SetFilePointer
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetTempFileNameA
GetSystemInfo
GetDriveTypeA
lstrcpynA
GetVolumeInformationA
GetCurrentDirectoryA
LoadLibraryExA
GetModuleHandleA
CreateDirectoryA
ExpandEnvironmentStringsA
GetVersionExA
GetDiskFreeSpaceA
MulDiv

gdi32

GetDeviceCaps

user32

wsprintfA
ExitWindowsEx
CharNextA
CharUpperA
EndDialog
GetDesktopWindow
CharPrevA
GetWindowLongA
CallWindowProcA
GetDlgItem
SetForegroundWindow
SetWindowTextA
SendDlgItemMessageA
SetWindowLongA
EnableWindow
SendMessageA
LoadStringA
MsgWaitForMultipleObjects
PeekMessageA
MessageBoxA
SetWindowPos
ReleaseDC
GetDC
GetWindowRect
ShowWindow
DialogBoxIndirectParamA
SetDlgItemTextA
MessageBeep
GetDlgItemTextA
DispatchMessageA

comctl32

ord17

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 622KB - Virtual size: 624KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VALUEADD/MSFT/MGMT/PBA/README.HTM
.html
VALUEADD/MSFT/MGMT/WBEMODBC/README.HTM
.html
VALUEADD/MSFT/MGMT/WBEMODBC/SETUP.EXE
.exe windows:4 windows x86 arch:x86

ef9b8e6863d1f74a617655ec935c6c32

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetErrorMode
lstrcatA
GetDriveTypeA
SetEnvironmentVariableA
lstrcpyA
GetModuleFileNameA
GetTempPathA
GetTempFileNameA
GlobalHandle
_lwrite
_lcreat
_lopen
_lclose
WinExec
GetEnvironmentVariableA
RemoveDirectoryA
CreateDirectoryA
GetWindowsDirectoryA
GetProcessHeap
ExitProcess
TerminateProcess
SetStdHandle
SetFilePointer
FlushFileBuffers
GetStringTypeA
WriteFile
GetStringTypeW
GetFileType
GetStdHandle
RtlUnwind
GetEnvironmentStringsW
GetEnvironmentStrings
SetHandleCount
GlobalLock
GetCurrentProcess
FreeEnvironmentStringsA
UnhandledExceptionFilter
FreeEnvironmentStringsW
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetVersionExA
HeapAlloc
GetCurrentThread
CloseHandle
HeapFree
LoadLibraryA
GetProcAddress
GetCurrentThreadId
FreeLibrary
_lread
_llseek
GlobalUnlock
GlobalFree
GlobalAlloc
HeapDestroy
HeapCreate
GetOEMCP
GetLastError
DeleteFileA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
GetACP
WideCharToMultiByte
VirtualFree
VirtualAlloc
HeapReAlloc
GetCPInfo

user32

ReleaseDC
ExitWindowsEx
MessageBoxA
LoadIconA
RegisterClassA
LoadCursorA
SetWindowPos
UpdateWindow
ShowWindow
wsprintfA
LoadStringA
InvalidateRect
BeginPaint
EndPaint
DefWindowProcA
PostQuitMessage
SendMessageA
GetDC
GetClientRect
CreateWindowExA

gdi32

GetDeviceCaps
GetStockObject
PatBlt
DeleteObject
SelectObject
RealizePalette
CreateSolidBrush
CreatePalette
SelectPalette

advapi32

SetSecurityDescriptorDacl
AllocateAndInitializeSid
GetLengthSid
InitializeAcl
AddAccessAllowedAce
InitializeSecurityDescriptor
RevertToSelf
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
ImpersonateSelf
OpenThreadToken
MapGenericMask
AccessCheck

Exports

Exports

_MainWndProc@16
_StubFileWrite@12

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
VALUEADD/MSFT/XTRADOCS/SCRIPT/JSCRIPT5.CHM
.chm
VALUEADD/MSFT/XTRADOCS/SCRIPT/SCPLT.CHM
.chm
VALUEADD/MSFT/XTRADOCS/SCRIPT/VBSCRIP5.CHM
.chm
VALUEADD/MSFT/XTRADOCS/SCRIPT/WSH.CHM
.chm
VALUEADD/MSFT/XTRADOCS/SERK/001.GIF
.gif
VALUEADD/MSFT/XTRADOCS/SERK/1PTRANS.GIF
.gif
VALUEADD/MSFT/XTRADOCS/SERK/ADADV.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/ADADV_1.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/ADADV_10.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/ADADV_11.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/ADADV_2.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/ADADV_3.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/ADADV_4.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/ADADV_5.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/ADADV_6.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/ADADV_7.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/ADADV_8.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/ADADV_9.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/ADFPRE.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/ADFPRE01.GIF
.gif
VALUEADD/MSFT/XTRADOCS/SERK/ADFPRE02.GIF
.gif
VALUEADD/MSFT/XTRADOCS/SERK/ADFPRE_1.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/ADFPRE_2.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/ADFPRE_3.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/ADFPRE_4.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/ADFPRE_5.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/ADFPRE_6.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/ADFPRE_7.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/ADFPSR.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/ADFPSR_1.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/ADFPSR_2.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/ADFPSR_3.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/ADHTM.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/ADHTM_1.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/ADHTM_2.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/ADMART.GIF
.gif
VALUEADD/MSFT/XTRADOCS/SERK/ADMMC.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/ADMMC_1.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/ADMMC_2.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/ADMMC_3.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/ADMMC_4.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/ADMMC_5.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/ADMMC_6.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/ADOVIEW.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/APNDX00.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/APNDX01.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/APNDX02.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/APNDX03.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/APNDX04.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/APNDX05.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/APNDXTOC.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/AXRPC.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/BACK.GIF
.gif
VALUEADD/MSFT/XTRADOCS/SERK/BULLET.GIF
VALUEADD/MSFT/XTRADOCS/SERK/CNRART.GIF
.gif
VALUEADD/MSFT/XTRADOCS/SERK/CPYRIGHT.HTM
VALUEADD/MSFT/XTRADOCS/SERK/DEFAULT.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/DISCLAIMER.HTM
VALUEADD/MSFT/XTRADOCS/SERK/FPLOGO.GIF
VALUEADD/MSFT/XTRADOCS/SERK/HOME.GIF
VALUEADD/MSFT/XTRADOCS/SERK/IEGET.GIF
.gif
VALUEADD/MSFT/XTRADOCS/SERK/INCOMPAT.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/ININTRO.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/INUNIX.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/INWINDOW.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/MSFT.GIF
VALUEADD/MSFT/XTRADOCS/SERK/NEXT.GIF
.gif
VALUEADD/MSFT/XTRADOCS/SERK/NOTERULE.GIF
.gif
VALUEADD/MSFT/XTRADOCS/SERK/OVARCHIT.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/OVART.GIF
.gif
VALUEADD/MSFT/XTRADOCS/SERK/OVFEAT01.GIF
.gif
VALUEADD/MSFT/XTRADOCS/SERK/OVFEAT02.GIF
.gif
VALUEADD/MSFT/XTRADOCS/SERK/OVFEAT03.GIF
.gif
VALUEADD/MSFT/XTRADOCS/SERK/OVFEATUR.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/OVPUBLIS.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/OVSCENAR.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/OVWHATAR.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/OVWHATIS.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/PREVIOUS.GIF
.gif
VALUEADD/MSFT/XTRADOCS/SERK/README.HTM
.html
VALUEADD/MSFT/XTRADOCS/SERK/SCINTRO.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/SCUNI.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/SCUNIX01.GIF
.gif
VALUEADD/MSFT/XTRADOCS/SERK/SCUNI_1.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/SCUNI_10.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/SCUNI_11.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/SCUNI_12.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/SCUNI_2.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/SCUNI_3.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/SCUNI_4.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/SCUNI_5.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/SCUNI_6.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/SCUNI_7.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/SCUNI_8.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/SCUNI_9.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/SCWIN.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/SCWIN_1.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/SCWIN_2.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/SCWIN_3.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/SCWIN_4.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/SCWIN_5.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/SCWIN_6.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/SCWIN_7.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/SCWIN_8.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/SCWIN_9.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/SECART.GIF
.gif
VALUEADD/MSFT/XTRADOCS/SERK/SERK.CSS
VALUEADD/MSFT/XTRADOCS/SERK/SERKINDX.HTM
.html .js polyglot
VALUEADD/MSFT/XTRADOCS/SERK/SERKNS.CSS
VALUEADD/MSFT/XTRADOCS/SERK/SETART.GIF
.gif
VALUEADD/MSFT/XTRADOCS/SERK/SPLASH.GIF
.gif
VALUEADD/MSFT/XTRADOCS/SERK/TERMOFUS.GIF
.gif
VALUEADD/MSFT/XTRADOCS/SERK/TOP.GIF
.gif
VALUEADD/MSFT/XTRADOCS/SERK/WEBLINK.GIF
VALUEADD/VALUEADD.HTM
.html
[BOOT]/Boot-NoEmul.img

Sharing

General

Malware Config

Signatures

Files

441a0f5055c10c4803e7338f795232ec

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 49KB - Virtual size: 49KB

.data Size: 15KB - Virtual size: 20KB

.rsrc Size: 3KB - Virtual size: 2KB

5ba531af89eeb97b88c8a5edfaacbd75

Headers

File Characteristics

Imports

ntdll

Sections

.text Size: 323KB - Virtual size: 322KB

.data Size: 59KB - Virtual size: 70KB

.rsrc Size: 171KB - Virtual size: 170KB

.reloc Size: 8KB - Virtual size: 7KB

2a4582a6456ba830b9a014aff4e3c0aa

Headers

File Characteristics

Imports

ntdll

Sections

.text Size: 315KB - Virtual size: 315KB

.data Size: 59KB - Virtual size: 70KB

.rsrc Size: 171KB - Virtual size: 170KB

.reloc Size: 8KB - Virtual size: 7KB

ea4cbf3c305bfb43c7e36a485e58acb4

Headers

File Characteristics

Imports

kernel32

ole32

Exports

Exports

Sections

.text Size: 50KB - Virtual size: 49KB

.data Size: 1024B - Virtual size: 10KB

.rsrc Size: 1024B - Virtual size: 968B

.reloc Size: 1024B - Virtual size: 1016B

29ba6cfb5bc74e73404bb0c1dc60e0db

Headers

File Characteristics

Imports

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 149KB - Virtual size: 148KB

.data Size: 1KB - Virtual size: 8KB

.rsrc Size: 1024B - Virtual size: 984B

.reloc Size: 6KB - Virtual size: 5KB

5fbf390fe381d31c7df93703fa7cd8a9

Headers

File Characteristics

Imports

kernel32

user32

ole32

advapi32

crypt32

userenv

Exports

Exports

Sections

.text Size: 129KB - Virtual size: 128KB

.data Size: 6KB - Virtual size: 8KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 3KB

13fcc049ca6234bb1902c1791b9298bb

.text
Size: 49KB - Virtual size: 49KB

.data
Size: 15KB - Virtual size: 20KB

.rsrc
Size: 3KB - Virtual size: 2KB

.text
Size: 323KB - Virtual size: 322KB

.data
Size: 59KB - Virtual size: 70KB

.rsrc
Size: 171KB - Virtual size: 170KB

.reloc
Size: 8KB - Virtual size: 7KB

.text
Size: 315KB - Virtual size: 315KB

.data
Size: 59KB - Virtual size: 70KB

.rsrc
Size: 171KB - Virtual size: 170KB

.reloc
Size: 8KB - Virtual size: 7KB

.text
Size: 50KB - Virtual size: 49KB

.data
Size: 1024B - Virtual size: 10KB

.rsrc
Size: 1024B - Virtual size: 968B

.reloc
Size: 1024B - Virtual size: 1016B

.text
Size: 149KB - Virtual size: 148KB

.data
Size: 1KB - Virtual size: 8KB

.rsrc
Size: 1024B - Virtual size: 984B

.reloc
Size: 6KB - Virtual size: 5KB

.text
Size: 129KB - Virtual size: 128KB

.data
Size: 6KB - Virtual size: 8KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 3KB

4a:19:d2:38:8c:82:59:1c:a5:5d:73:5f:15:5d:dc:a3
Certificate

08:7a:6d:5c:6f:62:93:4f:ba:c4:fd:43:e1:14:18:9d
Certificate

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

6a:0b:99:4f:c0:00:de:aa:11:d4:d8:40:9a:a8:be:e6
Certificate

61:07:11:43:00:00:00:00:00:34
Certificate

.text
Size: 45KB - Virtual size: 44KB

.data
Size: 1024B - Virtual size: 7KB

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

.text
Size: 8KB - Virtual size: 8KB

.data
Size: 512B - Virtual size: 2KB

.rsrc
Size: 4KB - Virtual size: 4KB

.text
Size: 63KB - Virtual size: 63KB

_INIT16
Size: 96B - Virtual size: 69B

.data
Size: 35KB - Virtual size: 35KB

PAGELK
Size: 3KB - Virtual size: 3KB

PAGE
Size: 15KB - Virtual size: 15KB

.edata
Size: 3KB - Virtual size: 3KB

INIT
Size: 16KB - Virtual size: 16KB

.rsrc
Size: 960B - Virtual size: 960B

.reloc
Size: 5KB - Virtual size: 5KB