8541bd67ea9537fa4c22f5805f347045_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

8541bd67ea9537fa4c22f5805f347045_JaffaCakes118
Size

8.3MB
MD5

8541bd67ea9537fa4c22f5805f347045
SHA1

76c31cc489f2fcf1d0c404d1868310821282e3f6
SHA256

9434f124a97bdaa8a58eae8d419580d741887387c87ff9c8f77ddf545cebadd2
SHA512

eaa04805afc6afe973d01a52ec8a158dd26e0f0a4766d6cbc5bac207e8848525add232a97a35c53d0ae7a196e7a038cdfe27f35e1c147cf738ddd8107f5a0f32
SSDEEP

196608:MAjFFW1SUYgmJSTyL+WA0zefZJopn6orLpWA0zefZJou2kD:MAjFFW1DYgmsTepzKZkBQzKZt2kD

Score

3^/10

Malware Config

Signatures

Unsigned PE 47 IoCs

Checks for missing Authenticode signature.

resource
unpack001/新建文件夹/Intel_inf_6.0.1.1008/Setup.exe
unpack001/新建文件夹/Sis_agp117e/AGP/AGPUtil/AGPutil.exe
unpack001/新建文件夹/Sis_agp117e/AGP/AGPUtil/WinIo.dll
unpack001/新建文件夹/Sis_agp117e/AGP/AGPUtil/WinIo.sys
unpack001/新建文件夹/Sis_agp117e/AGP/current/WIN2000/sisagpx.sys
unpack001/新建文件夹/Sis_agp117e/AGP/current/WIN98/SISAGP.PCI
unpack001/新建文件夹/Sis_agp117e/AGP/current/WINME/SISAGP.PCI
unpack001/新建文件夹/Sis_agp117e/AGP/current/WINXP/sisagpx.sys
unpack001/新建文件夹/Sis_agp117e/AGP/htpatch/HTinst.exe
unpack001/新建文件夹/Sis_agp117e/AGP/htpatch/HTpatch.exe
unpack001/新建文件夹/Sis_agp117e/AGP/htpatch/HTuninst.exe
unpack001/新建文件夹/Sis_agp117e/AGP/htpatch/WinIo.dll
unpack001/新建文件夹/Sis_agp117e/AGP/htpatch/WinIo.sys
unpack001/新建文件夹/Sis_agp117e/AGP/old/WIN2000/sisagpx.sys
unpack001/新建文件夹/Sis_agp117e/AGP/old/WIN98/SISAGP.pci
unpack001/新建文件夹/Sis_agp117e/AGP/old/WINME/SISAGP.pci
unpack001/新建文件夹/Sis_agp117e/AGP/old/WINXP/sisagpx.sys
unpack001/新建文件夹/Sis_agp117e/SISfiles/AGPFunc.dll
unpack001/新建文件夹/Sis_agp117e/SISfiles/SISAGP98.dll
unpack001/新建文件夹/Sis_agp117e/SISfiles/ata133ap.exe
unpack001/新建文件夹/Sis_agp117e/SISfiles/instdrv.exe
unpack001/新建文件夹/Sis_agp117e/SISfiles/regmod.exe
unpack001/新建文件夹/Sis_agp117e/SISfiles/waitwnd.exe
unpack001/新建文件夹/Sis_agp117e/USB/Win2K_XP/WinXPUSB/SISPORT.SYS
unpack001/新建文件夹/Sis_agp117e/USB/Win2K_XP/WinXPUSB/SIS_LIB.DLL
unpack001/新建文件夹/Sis_agp117e/USB/Win2K_XP/WinXPUSB/SiSUSBrg.exe
unpack001/新建文件夹/Sis_agp117e/USB/Win9x/SiSFiles/Mp_s3.exe
unpack001/新建文件夹/Sis_agp117e/USB/Win9x/SiSFiles/Openhci.sys
unpack001/新建文件夹/Sis_ide204a/IDE/IdeUtil/IDEproperty.dll
unpack001/新建文件夹/Sis_ide204a/IDE/IdeUtil/PropInstall.exe
unpack001/新建文件夹/Sis_ide204a/IDE/IdeUtil/SISIDE.exe
unpack001/新建文件夹/Sis_ide204a/IDE/win2k/SISIDE2K.DLL
unpack001/新建文件夹/Sis_ide204a/IDE/win2k/siside.sys
unpack001/新建文件夹/Sis_ide204a/IDE/win2k/sisidex.sys
unpack001/新建文件夹/Sis_ide204a/IDE/win2k/sisperf.sys
unpack001/新建文件夹/Sis_ide204a/IDE/winxp/SISIDEXP.dll
unpack001/新建文件夹/Sis_ide204a/IDE/winxp/siside.sys
unpack001/新建文件夹/Sis_ide204a/IDE/winxp/sisidex.sys
unpack001/新建文件夹/Sis_ide204a/IDE/winxp/sisperf.sys
unpack001/新建文件夹/Sis_ide204a/SISfiles/DMA98.exe
unpack001/新建文件夹/Sis_ide204a/SISfiles/HDinfo.exe
unpack001/新建文件夹/Sis_ide204a/SISfiles/INST2000.DLL
unpack001/新建文件夹/Sis_ide204a/SISfiles/SisFilter.exe
unpack001/新建文件夹/Sis_ide204a/SISfiles/ata133ap.exe
unpack001/新建文件夹/Sis_ide204a/SISfiles/infinstall.exe
unpack001/新建文件夹/Sis_ide204a/SISfiles/waitwnd.exe
unpack001/新建文件夹/via-VIA_Hyperion 4 IN 1_v451vPro/VIAHyperion4in1451vPro.exe

Files

8541bd67ea9537fa4c22f5805f347045_JaffaCakes118
.rar
新建文件夹/Intel_inf_6.0.1.1008/Setup.exe
.exe windows:4 windows x86 arch:x86

8dcee093c360128f859c7cd3e13a1ac4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerInstallFileA

kernel32

AddAtomA
HeapDestroy
GetModuleHandleA
GetStartupInfoA
HeapCreate
ExitProcess
lstrcpyA
GetCommandLineA
HeapAlloc
HeapFree
LockResource
LoadResource
FindResourceA
FindResourceExA
RemoveDirectoryA
LocalFree
FormatMessageA
InterlockedDecrement
SetEvent
OpenEventA
CopyFileA
GetTempFileNameA
GetTempPathA
WaitForSingleObject
SetFileAttributesA
GetLastError
GetShortPathNameA
GetWindowsDirectoryA
GetFileAttributesA
CreateDirectoryA
SetLastError
lstrlenA
CompareStringA
GetPrivateProfileStringA
GetVersionExA
GlobalLock
GlobalAlloc
GetUserDefaultLangID
GetModuleFileNameA
RtlUnwind
GetAtomNameA
DeleteFileA
Sleep
CloseHandle
lstrlenW
WideCharToMultiByte
GlobalUnlock
GlobalFree
MultiByteToWideChar
GetPrivateProfileIntA
CreateProcessA
CreateFileA
SetErrorMode
CompareStringW

user32

TranslateMessage
PeekMessageA
GetWindowLongA
EndDialog
GetDlgItem
SendMessageA
SetWindowLongA
DispatchMessageA
IsDialogMessageA
CreateDialogIndirectParamA
SetDlgItemTextA
GetDesktopWindow
GetClientRect
GetWindowRect
MoveWindow
CharNextA
CharUpperA
wsprintfA
ReleaseDC
LoadImageA
GetDC
EndPaint
CreateDialogParamA
BeginPaint
DialogBoxIndirectParamA
MessageBoxA
DestroyWindow
CharLowerA

gdi32

DeleteDC
SelectObject
RealizePalette
SelectPalette
UnrealizeObject
CreateCompatibleDC
GetObjectA
GetDeviceCaps
CreateHalftonePalette
CreatePalette
GetSystemPaletteEntries
GetDIBColorTable
BitBlt

advapi32

RegOpenKeyExA
RegCloseKey
RegOpenKeyA
RegCreateKeyA
RegSetValueExA
RegQueryValueExA

ole32

CoCreateInstance
CoFreeAllLibraries
CoInitialize
CoUninitialize

oleaut32

SysAllocStringLen
SysStringLen
SysFreeString
SafeArrayGetLBound
VariantClear
SafeArrayGetElement
SysAllocString
SafeArrayGetUBound

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
新建文件夹/Intel_inf_6.0.1.1008/Setup.ini
新建文件夹/Intel_inf_6.0.1.1008/data1.cab
新建文件夹/Intel_inf_6.0.1.1008/data1.hdr
新建文件夹/Intel_inf_6.0.1.1008/data2.cab
新建文件夹/Intel_inf_6.0.1.1008/devlist.ini
新建文件夹/Intel_inf_6.0.1.1008/ikernel.ex_
新建文件夹/Intel_inf_6.0.1.1008/infupd.bmp
新建文件夹/Intel_inf_6.0.1.1008/layout.bin
新建文件夹/Intel_inf_6.0.1.1008/readme.txt
新建文件夹/Intel_inf_6.0.1.1008/setup.inx
新建文件夹/Intel_inf_6.0.1.1008/setup.iss
新建文件夹/Intel_inf_6.0.1.1008/win2000/815.cat
新建文件夹/Intel_inf_6.0.1.1008/win2000/830.cat
新建文件夹/Intel_inf_6.0.1.1008/win2000/845.cat
新建文件夹/Intel_inf_6.0.1.1008/win2000/845g.cat
新建文件夹/Intel_inf_6.0.1.1008/win2000/850.cat
新建文件夹/Intel_inf_6.0.1.1008/win2000/850860.cat
新建文件夹/Intel_inf_6.0.1.1008/win2000/852.cat
新建文件夹/Intel_inf_6.0.1.1008/win2000/855.cat
新建文件夹/Intel_inf_6.0.1.1008/win2000/860.cat
新建文件夹/Intel_inf_6.0.1.1008/win2000/865.cat
新建文件夹/Intel_inf_6.0.1.1008/win2000/915.cat
新建文件夹/Intel_inf_6.0.1.1008/win2000/915M.cat
新建文件夹/Intel_inf_6.0.1.1008/win2000/E7500.cat
新建文件夹/Intel_inf_6.0.1.1008/win2000/E7520.cat
新建文件夹/Intel_inf_6.0.1.1008/win2000/e727505.cat
新建文件夹/Intel_inf_6.0.1.1008/win2000/ich2aud.cat
新建文件夹/Intel_inf_6.0.1.1008/win2000/ich2br.cat
新建文件夹/Intel_inf_6.0.1.1008/win2000/ich2brm.cat
新建文件夹/Intel_inf_6.0.1.1008/win2000/ich2core.cat
新建文件夹/Intel_inf_6.0.1.1008/win2000/ich2corm.cat
新建文件夹/Intel_inf_6.0.1.1008/win2000/ich2ide.cat
新建文件夹/Intel_inf_6.0.1.1008/win2000/ich2idem.cat
新建文件夹/Intel_inf_6.0.1.1008/win2000/ich2smb.cat
新建文件夹/Intel_inf_6.0.1.1008/win2000/ich2usb.cat
新建文件夹/Intel_inf_6.0.1.1008/win2000/ich3core.cat
新建文件夹/Intel_inf_6.0.1.1008/win2000/ich3corm.cat
新建文件夹/Intel_inf_6.0.1.1008/win2000/ich3ide.cat
新建文件夹/Intel_inf_6.0.1.1008/win2000/ich3idem.cat
新建文件夹/Intel_inf_6.0.1.1008/win2000/ich3smb.cat
新建文件夹/Intel_inf_6.0.1.1008/win2000/ich3usb.cat
新建文件夹/Intel_inf_6.0.1.1008/win2000/ich4core.cat
新建文件夹/Intel_inf_6.0.1.1008/win2000/ich4id2.cat
新建文件夹/Intel_inf_6.0.1.1008/win2000/ich4ide.cat
新建文件夹/Intel_inf_6.0.1.1008/win2000/ich4idem.cat
新建文件夹/Intel_inf_6.0.1.1008/win2000/ich4usb.cat
新建文件夹/Intel_inf_6.0.1.1008/win2000/ich5core.cat
新建文件夹/Intel_inf_6.0.1.1008/win2000/ich5id2.cat
新建文件夹/Intel_inf_6.0.1.1008/win2000/ich5ide.cat
新建文件夹/Intel_inf_6.0.1.1008/win2000/ich5usb.cat
新建文件夹/Intel_inf_6.0.1.1008/win2000/ich6core.cat
新建文件夹/Intel_inf_6.0.1.1008/win2000/ich6id2.cat
新建文件夹/Intel_inf_6.0.1.1008/win2000/ich6ide.cat
新建文件夹/Intel_inf_6.0.1.1008/win2000/ich6usb.cat
新建文件夹/Intel_inf_6.0.1.1008/win2000/p64h2.cat
新建文件夹/Intel_inf_6.0.1.1008/win2000/usb2ndrv.cat
新建文件夹/Intel_inf_6.0.1.1008/win2003/865.cat
新建文件夹/Intel_inf_6.0.1.1008/win2003/915.cat
新建文件夹/Intel_inf_6.0.1.1008/win2003/915M.cat
新建文件夹/Intel_inf_6.0.1.1008/win2003/E7520.cat
新建文件夹/Intel_inf_6.0.1.1008/win2003/ich5core.cat
新建文件夹/Intel_inf_6.0.1.1008/win2003/ich5id2.cat
新建文件夹/Intel_inf_6.0.1.1008/win2003/ich5ide.cat
新建文件夹/Intel_inf_6.0.1.1008/win2003/ich5usb.cat
新建文件夹/Intel_inf_6.0.1.1008/win2003/ich6core.cat
新建文件夹/Intel_inf_6.0.1.1008/win2003/ich6id2.cat
新建文件夹/Intel_inf_6.0.1.1008/win2003/ich6ide.cat
新建文件夹/Intel_inf_6.0.1.1008/win2003/ich6usb.cat
新建文件夹/Intel_inf_6.0.1.1008/win98se/810.cat
新建文件夹/Intel_inf_6.0.1.1008/win98se/815.cat
新建文件夹/Intel_inf_6.0.1.1008/win98se/820.cat
新建文件夹/Intel_inf_6.0.1.1008/win98se/830.cat
新建文件夹/Intel_inf_6.0.1.1008/win98se/840.CAT
新建文件夹/Intel_inf_6.0.1.1008/win98se/845.cat
新建文件夹/Intel_inf_6.0.1.1008/win98se/845G.cat
新建文件夹/Intel_inf_6.0.1.1008/win98se/850.cat
新建文件夹/Intel_inf_6.0.1.1008/win98se/850860.cat
新建文件夹/Intel_inf_6.0.1.1008/win98se/852.cat
新建文件夹/Intel_inf_6.0.1.1008/win98se/855.cat
新建文件夹/Intel_inf_6.0.1.1008/win98se/860.cat
新建文件夹/Intel_inf_6.0.1.1008/win98se/865.cat
新建文件夹/Intel_inf_6.0.1.1008/win98se/915.cat
新建文件夹/Intel_inf_6.0.1.1008/win98se/915M.cat
新建文件夹/Intel_inf_6.0.1.1008/win98se/IFWH.cat
新建文件夹/Intel_inf_6.0.1.1008/win98se/P64H.CAT
新建文件夹/Intel_inf_6.0.1.1008/win98se/P64HRES.CAT
新建文件夹/Intel_inf_6.0.1.1008/win98se/e727505.cat
新建文件夹/Intel_inf_6.0.1.1008/win98se/ich2core.cat
新建文件夹/Intel_inf_6.0.1.1008/win98se/ich2corm.cat
新建文件夹/Intel_inf_6.0.1.1008/win98se/ich2ide.cat
新建文件夹/Intel_inf_6.0.1.1008/win98se/ich2idem.cat
新建文件夹/Intel_inf_6.0.1.1008/win98se/ich2smb.cat
新建文件夹/Intel_inf_6.0.1.1008/win98se/ich2usb.cat
新建文件夹/Intel_inf_6.0.1.1008/win98se/ich3core.cat
新建文件夹/Intel_inf_6.0.1.1008/win98se/ich3corm.cat
新建文件夹/Intel_inf_6.0.1.1008/win98se/ich3ide.cat
新建文件夹/Intel_inf_6.0.1.1008/win98se/ich3idem.cat
新建文件夹/Intel_inf_6.0.1.1008/win98se/ich3smb.cat
新建文件夹/Intel_inf_6.0.1.1008/win98se/ich3usb.cat
新建文件夹/Intel_inf_6.0.1.1008/win98se/ich4core.cat
新建文件夹/Intel_inf_6.0.1.1008/win98se/ich4ide.cat
新建文件夹/Intel_inf_6.0.1.1008/win98se/ich4usb.cat
新建文件夹/Intel_inf_6.0.1.1008/win98se/ich5core.cat
新建文件夹/Intel_inf_6.0.1.1008/win98se/ich5ide.cat
新建文件夹/Intel_inf_6.0.1.1008/win98se/ich5usb.cat
新建文件夹/Intel_inf_6.0.1.1008/win98se/ich6core.cat
新建文件夹/Intel_inf_6.0.1.1008/win98se/ich6ide.cat
新建文件夹/Intel_inf_6.0.1.1008/win98se/ich6usb.cat
新建文件夹/Intel_inf_6.0.1.1008/win98se/ichxsmb.cat
新建文件夹/Intel_inf_6.0.1.1008/win98se/p64h2.cat
新建文件夹/Intel_inf_6.0.1.1008/win98se/usb2ndrv.cat
新建文件夹/Intel_inf_6.0.1.1008/winme/830.cat
新建文件夹/Intel_inf_6.0.1.1008/winme/845.cat
新建文件夹/Intel_inf_6.0.1.1008/winme/845g.cat
新建文件夹/Intel_inf_6.0.1.1008/winme/850.cat
新建文件夹/Intel_inf_6.0.1.1008/winme/850860.cat
新建文件夹/Intel_inf_6.0.1.1008/winme/852.cat
新建文件夹/Intel_inf_6.0.1.1008/winme/855.cat
新建文件夹/Intel_inf_6.0.1.1008/winme/860.cat
新建文件夹/Intel_inf_6.0.1.1008/winme/865.cat
新建文件夹/Intel_inf_6.0.1.1008/winme/915.cat
新建文件夹/Intel_inf_6.0.1.1008/winme/915M.cat
新建文件夹/Intel_inf_6.0.1.1008/winme/e727505.cat
新建文件夹/Intel_inf_6.0.1.1008/winme/ich2corm.cat
新建文件夹/Intel_inf_6.0.1.1008/winme/ich3core.cat
新建文件夹/Intel_inf_6.0.1.1008/winme/ich3corm.cat
新建文件夹/Intel_inf_6.0.1.1008/winme/ich3ide.cat
新建文件夹/Intel_inf_6.0.1.1008/winme/ich3idem.cat
新建文件夹/Intel_inf_6.0.1.1008/winme/ich3smb.cat
新建文件夹/Intel_inf_6.0.1.1008/winme/ich3usb.cat
新建文件夹/Intel_inf_6.0.1.1008/winme/ich4core.cat
新建文件夹/Intel_inf_6.0.1.1008/winme/ich4ide.cat
新建文件夹/Intel_inf_6.0.1.1008/winme/ich4usb.cat
新建文件夹/Intel_inf_6.0.1.1008/winme/ich5core.cat
新建文件夹/Intel_inf_6.0.1.1008/winme/ich5ide.cat
新建文件夹/Intel_inf_6.0.1.1008/winme/ich5usb.cat
新建文件夹/Intel_inf_6.0.1.1008/winme/ich6core.cat
新建文件夹/Intel_inf_6.0.1.1008/winme/ich6ide.cat
新建文件夹/Intel_inf_6.0.1.1008/winme/ich6usb.cat
新建文件夹/Intel_inf_6.0.1.1008/winme/p64h2.cat
新建文件夹/Intel_inf_6.0.1.1008/winme/usb2ndrv.cat
新建文件夹/Intel_inf_6.0.1.1008/xp/815.cat
新建文件夹/Intel_inf_6.0.1.1008/xp/830.cat
新建文件夹/Intel_inf_6.0.1.1008/xp/845.cat
新建文件夹/Intel_inf_6.0.1.1008/xp/845g.cat
新建文件夹/Intel_inf_6.0.1.1008/xp/850.cat
新建文件夹/Intel_inf_6.0.1.1008/xp/850860.cat
新建文件夹/Intel_inf_6.0.1.1008/xp/852.cat
新建文件夹/Intel_inf_6.0.1.1008/xp/855.cat
新建文件夹/Intel_inf_6.0.1.1008/xp/860.cat
新建文件夹/Intel_inf_6.0.1.1008/xp/865.cat
新建文件夹/Intel_inf_6.0.1.1008/xp/915.cat
新建文件夹/Intel_inf_6.0.1.1008/xp/915M.cat
新建文件夹/Intel_inf_6.0.1.1008/xp/E7500.cat
新建文件夹/Intel_inf_6.0.1.1008/xp/E7520.cat
新建文件夹/Intel_inf_6.0.1.1008/xp/e727505.cat
新建文件夹/Intel_inf_6.0.1.1008/xp/ich2aud.cat
新建文件夹/Intel_inf_6.0.1.1008/xp/ich2br.cat
新建文件夹/Intel_inf_6.0.1.1008/xp/ich2brm.cat
新建文件夹/Intel_inf_6.0.1.1008/xp/ich2core.cat
新建文件夹/Intel_inf_6.0.1.1008/xp/ich2corm.cat
新建文件夹/Intel_inf_6.0.1.1008/xp/ich2ide.cat
新建文件夹/Intel_inf_6.0.1.1008/xp/ich2idem.cat
新建文件夹/Intel_inf_6.0.1.1008/xp/ich2smb.cat
新建文件夹/Intel_inf_6.0.1.1008/xp/ich2usb.cat
新建文件夹/Intel_inf_6.0.1.1008/xp/ich3core.cat
新建文件夹/Intel_inf_6.0.1.1008/xp/ich3corm.cat
新建文件夹/Intel_inf_6.0.1.1008/xp/ich3ide.cat
新建文件夹/Intel_inf_6.0.1.1008/xp/ich3idem.cat
新建文件夹/Intel_inf_6.0.1.1008/xp/ich3smb.cat
新建文件夹/Intel_inf_6.0.1.1008/xp/ich3usb.cat
新建文件夹/Intel_inf_6.0.1.1008/xp/ich4core.cat
新建文件夹/Intel_inf_6.0.1.1008/xp/ich4id2.cat
新建文件夹/Intel_inf_6.0.1.1008/xp/ich4ide.cat
新建文件夹/Intel_inf_6.0.1.1008/xp/ich4usb.cat
新建文件夹/Intel_inf_6.0.1.1008/xp/ich5core.cat
新建文件夹/Intel_inf_6.0.1.1008/xp/ich5id2.cat
新建文件夹/Intel_inf_6.0.1.1008/xp/ich5ide.cat
新建文件夹/Intel_inf_6.0.1.1008/xp/ich5usb.cat
新建文件夹/Intel_inf_6.0.1.1008/xp/ich6core.cat
新建文件夹/Intel_inf_6.0.1.1008/xp/ich6id2.cat
新建文件夹/Intel_inf_6.0.1.1008/xp/ich6ide.cat
新建文件夹/Intel_inf_6.0.1.1008/xp/ich6usb.cat
新建文件夹/Intel_inf_6.0.1.1008/xp/p64h2.cat
新建文件夹/Intel_inf_6.0.1.1008/xp/usb2ndrv.cat
新建文件夹/Sis_agp117e/AGP/AGPUtil/AGPutil.exe
.exe windows:4 windows x86 arch:x86

bde1a4db58f13a06ec9b93ef2191b35c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winio

ShutdownWinIo
InitializeWinIo
GetPortVal
SetPortVal

kernel32

RtlUnwind
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
HeapFree
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
GetACP
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetStdHandle
GetLastError
GetCurrentProcess
GetCurrentThreadId
GetCurrentThread
lstrcmpiA
lstrcmpA
FlushFileBuffers
SetFilePointer
WriteFile
SetErrorMode
GetOEMCP
GetCPInfo
GetProcessVersion
WritePrivateProfileStringA
GlobalFlags
lstrcpynA
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
MulDiv
GlobalDeleteAtom
SetLastError
LoadLibraryA
FreeLibrary
GetVersion
GlobalAlloc
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
lstrcpyA
GetModuleHandleA
GetProcAddress
LocalFree
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
CloseHandle
GetModuleFileNameA
GlobalLock
GetFileType

user32

CopyRect
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
SendDlgItemMessageA
UpdateWindow
IsDialogMessageA
SetWindowTextA
ShowWindow
ClientToScreen
GetDC
ReleaseDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
LoadCursorA
GetClassNameA
PtInRect
GetSysColorBrush
LoadStringA
DestroyMenu
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
UnregisterClassA
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
EndDialog
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
MessageBoxA
SetCursor
PostQuitMessage
PostMessageA
EnableWindow
IsIconic
GetTopWindow
GetSystemMetrics
GetClientRect
DrawIcon
SendMessageA
wsprintfA
LoadIconA
GetMenuItemCount
GetCapture
ExitWindowsEx

gdi32

GetClipBox
SetTextColor
SetBkColor
GetObjectA
DeleteDC
SaveDC
RestoreDC
SelectObject
GetStockObject
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteObject
GetDeviceCaps
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
CreateBitmap

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegSetValueExA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA

comctl32

ord17

Sections

.text
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
新建文件夹/Sis_agp117e/AGP/AGPUtil/WINIO.VXD
新建文件夹/Sis_agp117e/AGP/AGPUtil/WinIo.dll
.dll windows:4 windows x86 arch:x86

7d1daddcd7f535584f116dcf28822871

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateFileA
GetModuleFileNameA
GetVersionExA
DeviceIoControl
GetModuleHandleA
GetLastError
GetCurrentThreadId
TlsSetValue
GetCommandLineA
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
TlsFree
SetLastError
TlsGetValue
TlsAlloc
HeapFree
HeapAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
WriteFile
LeaveCriticalSection
EnterCriticalSection
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
LoadLibraryA
HeapSize
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
RtlUnwind
LCMapStringA
LCMapStringW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualProtect
GetSystemInfo
VirtualQuery

advapi32

StartServiceA
CreateServiceA
DeleteService
ControlService
OpenSCManagerA
OpenServiceA
CloseServiceHandle

Exports

Exports

GetPhysLong
GetPortVal
InitializeWinIo
InstallWinIoDriver
MapPhysToLin
RemoveWinIoDriver
SetPhysLong
SetPortVal
ShutdownWinIo
UnmapPhysicalMemory

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
新建文件夹/Sis_agp117e/AGP/AGPUtil/WinIo.sys
.sys windows:5 windows x86 arch:x86

e75fb7f82c05f11d58ca00f789da4f63

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\work\WinIo\Source\Drv\NT\i386\WinIo.pdb

Imports

ntoskrnl.exe

RtlInitUnicodeString
ZwClose
ZwMapViewOfSection
ObReferenceObjectByHandle
ZwOpenSection
ZwUnmapViewOfSection
IofCompleteRequest
IoDeleteSymbolicLink
MmFreeNonCachedMemory
Ke386SetIoAccessMap
Ke386IoSetAccessProcess
IoGetCurrentProcess
IoCreateSymbolicLink
IoCreateDevice
MmAllocateNonCachedMemory
IoDeleteDevice

hal

HalTranslateBusAddress

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 175B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 640B - Virtual size: 536B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 128B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
新建文件夹/Sis_agp117e/AGP/current/WIN2000/sisagp.cat
新建文件夹/Sis_agp117e/AGP/current/WIN2000/sisagp.inf
新建文件夹/Sis_agp117e/AGP/current/WIN2000/sisagpx.sys
.sys windows:5 windows x86 arch:x86

9459d107d88ba764cb3168b1d82d3d31

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\winddk\3790\src\kernel\sisagp\win2k\uagp35\objfre_w2K_x86\i386\sisagpx.pdb

Imports

ntoskrnl.exe

MmFreeContiguousMemory
MmGetPhysicalAddress
MmAllocateContiguousMemorySpecifyCache
ExAllocatePoolWithTag
DbgBreakPoint
RtlQueryRegistryValues
RtlCreateRegistryKey
KeWaitForSingleObject
IofCallDriver
IoBuildDeviceIoControlRequest
KeInitializeEvent
IoDeleteDevice
IoDetachDevice
RtlWriteRegistryValue
IoCreateDevice
IoBuildSynchronousFsdRequest
IofCompleteRequest
InterlockedDecrement
KeSetEvent
ExFreePool
PoCallDriver
PoStartNextPowerIrp
InterlockedIncrement
MmFreePagesFromMdl
MmCreateMdl
MmAllocatePagesForMdl
KeInsertQueueDpc
KeClearEvent
KeSetTargetProcessorDpc
KeInitializeDpc
KeQueryActiveProcessors
IoAttachDeviceToDeviceStack
DbgPrint

hal

ExAcquireFastMutex
ExReleaseFastMutex
HalGetBusDataByOffset
HalSetBusDataByOffset
KeStallExecutionProcessor

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 322B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
新建文件夹/Sis_agp117e/AGP/current/WIN98/SISAGP.PCI
.dll windows:4 windows x86 arch:x86

3882f1ac966f9eac1a7a7c99564ba42a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ntoskrnl.exe

ExAllocatePoolWithTag

hal

KeStallExecutionProcessor

pci

PCIAllocatePages
PCIWriteConfig
PCIReadConfig
PCIGetHandleInfo
PCILinToPhys

Exports

Exports

DriverEntry
PCIMP_GARTExit
PCIMP_GARTFlush
PCIMP_GARTFree
PCIMP_GARTInit
PCIMP_GARTMap
PCIMP_GARTReserve
PCIMP_GARTReset
PCIMP_GARTRestore
PCIMP_GARTSave
PCIMP_GARTUnMap
PCIMP_GetChannelStatus
PCIMP_GetIRQ
PCIMP_GetTrigger
PCIMP_IDEExit
PCIMP_IDEInitialize
PCIMP_IRQExit
PCIMP_IRQInitialize
PCIMP_SetIRQ
PCIMP_SetTrigger
PCIMP_ValidateTable

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

_LTEXT
Size: 32B - Virtual size: 6B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 64B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 608B - Virtual size: 602B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 320B - Virtual size: 292B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 288B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
新建文件夹/Sis_agp117e/AGP/current/WIN98/sisagp.cat
新建文件夹/Sis_agp117e/AGP/current/WIN98/sisagp.inf
新建文件夹/Sis_agp117e/AGP/current/WINME/SISAGP.PCI
.dll windows:4 windows x86 arch:x86

3882f1ac966f9eac1a7a7c99564ba42a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ntoskrnl.exe

ExAllocatePoolWithTag

hal

KeStallExecutionProcessor

pci

PCIAllocatePages
PCIWriteConfig
PCIReadConfig
PCIGetHandleInfo
PCILinToPhys

Exports

Exports

DriverEntry
PCIMP_GARTExit
PCIMP_GARTFlush
PCIMP_GARTFree
PCIMP_GARTInit
PCIMP_GARTMap
PCIMP_GARTReserve
PCIMP_GARTReset
PCIMP_GARTRestore
PCIMP_GARTSave
PCIMP_GARTUnMap
PCIMP_GetChannelStatus
PCIMP_GetIRQ
PCIMP_GetTrigger
PCIMP_IDEExit
PCIMP_IDEInitialize
PCIMP_IRQExit
PCIMP_IRQInitialize
PCIMP_SetIRQ
PCIMP_SetTrigger
PCIMP_ValidateTable

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

_LTEXT
Size: 32B - Virtual size: 6B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 64B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 608B - Virtual size: 602B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 320B - Virtual size: 292B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 288B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
新建文件夹/Sis_agp117e/AGP/current/WINME/sisagp.cat
新建文件夹/Sis_agp117e/AGP/current/WINME/sisagp.inf
新建文件夹/Sis_agp117e/AGP/current/WINXP/sisagp.cat
新建文件夹/Sis_agp117e/AGP/current/WINXP/sisagp.inf
新建文件夹/Sis_agp117e/AGP/current/WINXP/sisagpx.sys
.sys windows:5 windows x86 arch:x86

b079da3437783c3908b125ed3494e4e9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\winddk\3790\src\kernel\sisagp\winxp\uagp35\objfre_wxp_x86\i386\sisagpx.pdb

Imports

ntoskrnl.exe

MmAllocateContiguousMemorySpecifyCache
MmGetPhysicalAddress
MmFreeContiguousMemory
ExAllocatePoolWithTag
ZwEnumerateValueKey
ExFreePoolWithTag
ZwQueryKey
KeWaitForSingleObject
IofCallDriver
IoBuildDeviceIoControlRequest
KeInitializeEvent
IoDetachDevice
IoAttachDeviceToDeviceStack
IoDeleteDevice
DbgBreakPoint
ZwClose
ZwOpenKey
RtlInitUnicodeString
RtlCopyUnicodeString
IoBuildSynchronousFsdRequest
IoWMIRegistrationControl
IofCompleteRequest
KeSetEvent
PoCallDriver
PoStartNextPowerIrp
IoFreeMdl
MmFreePagesFromMdl
IoAllocateMdl
MmAllocatePagesForMdl
KeInsertQueueDpc
KeClearEvent
KeSetTargetProcessorDpc
KeInitializeDpc
KeQueryActiveProcessors
RtlQueryRegistryValues
RtlCreateRegistryKey
RtlWriteRegistryValue
IoCreateDevice
DbgPrint

hal

KeGetCurrentIrql
ExAcquireFastMutex
ExReleaseFastMutex
HalSetBusDataByOffset
KeStallExecutionProcessor
HalGetBusDataByOffset

wmilib.sys

WmiSystemControl
WmiCompleteRequest

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 370B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
新建文件夹/Sis_agp117e/AGP/htpatch/HTinst.exe
.exe windows:4 windows x86 arch:x86

95be1dd858af75aa4f8a79d1d943d8b3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlUnwind
GetStartupInfoA
GetCommandLineA
TerminateProcess
ExitProcess
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
GetACP
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
HeapFree
SetHandleCount
GlobalHandle
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
CloseHandle
GetModuleFileNameA
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
WriteFile
GetCurrentProcess
SetErrorMode
GetOEMCP
GetCPInfo
GetProcessVersion
GetLastError
MultiByteToWideChar
WideCharToMultiByte
WritePrivateProfileStringA
GlobalFlags
lstrlenA
lstrcpynA
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
TlsFree
GetStdHandle
GlobalReAlloc
GetWindowsDirectoryA
GetCurrentThreadId
LeaveCriticalSection
GetFileType
DeleteCriticalSection
CopyFileA
TlsAlloc
InitializeCriticalSection
LocalFree
LocalAlloc
SetLastError
InterlockedDecrement
LoadLibraryA
FreeLibrary
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
lstrcpyA
GetModuleHandleA
GetProcAddress
GlobalUnlock
GlobalFree
HeapDestroy
HeapCreate
GetEnvironmentStringsW

user32

CopyRect
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
SetWindowTextA
ShowWindow
ClientToScreen
GetDC
ReleaseDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
LoadCursorA
GetClassNameA
PtInRect
GetSysColorBrush
LoadStringA
DestroyMenu
GetCapture
WinHelpA
GetClassInfoA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowPos
RegisterWindowMessageA
GetWindowPlacement
GetWindowRect
EndDialog
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
MessageBoxA
SetCursor
PostQuitMessage
PostMessageA
EnableWindow
GetTopWindow
RegisterClassA
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
SendMessageA
LoadIconA
wsprintfA
SystemParametersInfoA
SetWindowLongA
UnregisterClassA

gdi32

CreateBitmap
GetClipBox
SetTextColor
SetBkColor
GetObjectA
DeleteDC
SaveDC
RestoreDC
SelectObject
GetStockObject
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteObject
GetDeviceCaps
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegCreateKeyExA

comctl32

ord17

Sections

.text
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
新建文件夹/Sis_agp117e/AGP/htpatch/HTpatch.exe
.exe windows:4 windows x86 arch:x86

16455d6eb70b0abbbf11ce94d4c04a74

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
HeapAlloc
GetWindowsDirectoryA
GetACP
GetCPInfo
WriteFile
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
SetFileAttributesA
DeleteFileA
GetOEMCP
Sleep
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetStringTypeW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess

user32

DestroyWindow
TranslateMessage
TranslateAcceleratorA
GetMessageA
LoadAcceleratorsA
LoadStringA
wsprintfA
EndDialog
BeginPaint
GetClientRect
DrawTextA
EndPaint
PostQuitMessage
DefWindowProcA
RegisterClassExA
DialogBoxParamA
CreateWindowExA
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA
DispatchMessageA

advapi32

RegDeleteValueA
RegCloseKey
RegOpenKeyExA

winio

MapPhysToLin
ShutdownWinIo
GetPortVal
SetPortVal
UnmapPhysicalMemory
InitializeWinIo

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
新建文件夹/Sis_agp117e/AGP/htpatch/HTuninst.exe
.exe windows:4 windows x86 arch:x86

5c213cf6b8019d681f2f765d4497f5f2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlUnwind
GetStartupInfoA
GetCommandLineA
ExitProcess
HeapFree
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
GetACP
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
TerminateProcess
SetHandleCount
GetStdHandle
DeleteCriticalSection
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
CloseHandle
GetModuleFileNameA
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
GetWindowsDirectoryA
WriteFile
GetCurrentProcess
SetErrorMode
GetOEMCP
GetCPInfo
GetProcessVersion
GetLastError
MultiByteToWideChar
WideCharToMultiByte
WritePrivateProfileStringA
GlobalFlags
lstrlenA
lstrcpynA
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
GlobalHandle
TlsFree
SetFileAttributesA
GetFileType
TlsAlloc
InitializeCriticalSection
DeleteFileA
LocalFree
LocalAlloc
SetLastError
InterlockedDecrement
LoadLibraryA
FreeLibrary
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
lstrcpyA
GetModuleHandleA
GetProcAddress
GlobalUnlock
GlobalFree
HeapDestroy
HeapCreate
GetEnvironmentStrings
GetEnvironmentStringsW

user32

CopyRect
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
SetWindowTextA
ShowWindow
ClientToScreen
GetDC
ReleaseDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
LoadCursorA
GetClassNameA
PtInRect
GetSysColorBrush
LoadStringA
DestroyMenu
GetCapture
WinHelpA
GetClassInfoA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
EndDialog
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
MessageBoxA
SetCursor
PostQuitMessage
PostMessageA
GetTopWindow
RegisterClassA
EnableWindow
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
SendMessageA
LoadIconA
wsprintfA
SetWindowLongA
UnregisterClassA

gdi32

SetTextColor
SetBkColor
GetObjectA
DeleteDC
SaveDC
RestoreDC
SelectObject
GetStockObject
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteObject
GetDeviceCaps
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetClipBox
CreateBitmap

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegDeleteValueA
RegOpenKeyExA
RegCloseKey
RegSetValueExA
RegCreateKeyExA

comctl32

ord17

Sections

.text
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
新建文件夹/Sis_agp117e/AGP/htpatch/WinIo.dll
.dll windows:4 windows x86 arch:x86

7d1daddcd7f535584f116dcf28822871

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateFileA
GetModuleFileNameA
GetVersionExA
DeviceIoControl
GetModuleHandleA
GetLastError
GetCurrentThreadId
TlsSetValue
GetCommandLineA
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
TlsFree
SetLastError
TlsGetValue
TlsAlloc
HeapFree
HeapAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
WriteFile
LeaveCriticalSection
EnterCriticalSection
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
LoadLibraryA
HeapSize
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
RtlUnwind
LCMapStringA
LCMapStringW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualProtect
GetSystemInfo
VirtualQuery

advapi32

StartServiceA
CreateServiceA
DeleteService
ControlService
OpenSCManagerA
OpenServiceA
CloseServiceHandle

Exports

Exports

GetPhysLong
GetPortVal
InitializeWinIo
InstallWinIoDriver
MapPhysToLin
RemoveWinIoDriver
SetPhysLong
SetPortVal
ShutdownWinIo
UnmapPhysicalMemory

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
新建文件夹/Sis_agp117e/AGP/htpatch/WinIo.sys
.sys windows:5 windows x86 arch:x86

e75fb7f82c05f11d58ca00f789da4f63

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\work\WinIo\Source\Drv\NT\i386\WinIo.pdb

Imports

ntoskrnl.exe

RtlInitUnicodeString
ZwClose
ZwMapViewOfSection
ObReferenceObjectByHandle
ZwOpenSection
ZwUnmapViewOfSection
IofCompleteRequest
IoDeleteSymbolicLink
MmFreeNonCachedMemory
Ke386SetIoAccessMap
Ke386IoSetAccessProcess
IoGetCurrentProcess
IoCreateSymbolicLink
IoCreateDevice
MmAllocateNonCachedMemory
IoDeleteDevice

hal

HalTranslateBusAddress

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 175B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 640B - Virtual size: 536B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 128B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
新建文件夹/Sis_agp117e/AGP/old/WIN2000/sisagp.cat
新建文件夹/Sis_agp117e/AGP/old/WIN2000/sisagp.inf
新建文件夹/Sis_agp117e/AGP/old/WIN2000/sisagpx.sys
.sys windows:5 windows x86 arch:x86

db7cd18cb0f14c3e0119b63155010932

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

MmAllocateContiguousMemory
MmGetPhysicalAddress
MmMapIoSpace
ExAllocatePoolWithTag
IoDeleteDevice
IoDetachDevice
IoAttachDeviceToDeviceStack
KeInitializeEvent
IoCreateDevice
KeWaitForSingleObject
DbgPrint
IoBuildDeviceIoControlRequest
IoBuildSynchronousFsdRequest
IofCompleteRequest
PoStartNextPowerIrp
ExFreePool
PoCallDriver
InterlockedDecrement
InterlockedIncrement
KeSetEvent
MmFreePagesFromMdl
MmCreateMdl
MmAllocatePagesForMdl
KeInsertQueueDpc
KeClearEvent
KeSetTargetProcessorDpc
KeInitializeDpc
KeQueryActiveProcessors
IofCallDriver
DbgBreakPoint

hal

ExAcquireFastMutex
ExReleaseFastMutex
WRITE_PORT_UCHAR
WRITE_PORT_ULONG
READ_PORT_UCHAR
READ_PORT_ULONG
KeStallExecutionProcessor

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 288B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 1024B - Virtual size: 1018B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
新建文件夹/Sis_agp117e/AGP/old/WIN98/SISAGP.pci
.dll windows:4 windows x86 arch:x86

3882f1ac966f9eac1a7a7c99564ba42a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ntoskrnl.exe

ExAllocatePoolWithTag

hal

KeStallExecutionProcessor

pci

PCIAllocatePages
PCIWriteConfig
PCIReadConfig
PCIGetHandleInfo
PCILinToPhys

Exports

Exports

DriverEntry
PCIMP_GARTExit
PCIMP_GARTFlush
PCIMP_GARTFree
PCIMP_GARTInit
PCIMP_GARTMap
PCIMP_GARTReserve
PCIMP_GARTReset
PCIMP_GARTRestore
PCIMP_GARTSave
PCIMP_GARTUnMap
PCIMP_GetChannelStatus
PCIMP_GetIRQ
PCIMP_GetTrigger
PCIMP_IDEExit
PCIMP_IDEInitialize
PCIMP_IRQExit
PCIMP_IRQInitialize
PCIMP_SetIRQ
PCIMP_SetTrigger
PCIMP_ValidateTable

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

_LTEXT
Size: 32B - Virtual size: 6B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 64B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 608B - Virtual size: 602B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 320B - Virtual size: 292B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 256B - Virtual size: 230B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
新建文件夹/Sis_agp117e/AGP/old/WIN98/sisagp.cat
新建文件夹/Sis_agp117e/AGP/old/WIN98/sisagp.inf
新建文件夹/Sis_agp117e/AGP/old/WINME/SISAGP.pci
.dll windows:4 windows x86 arch:x86

3882f1ac966f9eac1a7a7c99564ba42a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ntoskrnl.exe

ExAllocatePoolWithTag

hal

KeStallExecutionProcessor

pci

PCIAllocatePages
PCIWriteConfig
PCIReadConfig
PCIGetHandleInfo
PCILinToPhys

Exports

Exports

DriverEntry
PCIMP_GARTExit
PCIMP_GARTFlush
PCIMP_GARTFree
PCIMP_GARTInit
PCIMP_GARTMap
PCIMP_GARTReserve
PCIMP_GARTReset
PCIMP_GARTRestore
PCIMP_GARTSave
PCIMP_GARTUnMap
PCIMP_GetChannelStatus
PCIMP_GetIRQ
PCIMP_GetTrigger
PCIMP_IDEExit
PCIMP_IDEInitialize
PCIMP_IRQExit
PCIMP_IRQInitialize
PCIMP_SetIRQ
PCIMP_SetTrigger
PCIMP_ValidateTable

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

_LTEXT
Size: 32B - Virtual size: 6B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 64B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 608B - Virtual size: 602B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 320B - Virtual size: 292B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 256B - Virtual size: 230B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
新建文件夹/Sis_agp117e/AGP/old/WINME/sisagp.cat
新建文件夹/Sis_agp117e/AGP/old/WINME/sisagp.inf
新建文件夹/Sis_agp117e/AGP/old/WINXP/sisagp.cat
新建文件夹/Sis_agp117e/AGP/old/WINXP/sisagp.inf
新建文件夹/Sis_agp117e/AGP/old/WINXP/sisagpx.sys
.sys windows:5 windows x86 arch:x86

bdaae44a73d7e93706495d03522c4f72

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\winddk\2600\src\kernel\sisagp\winxp\sisagp\objfre\i386\SISAGPX.pdb

Imports

ntoskrnl.exe

ExAllocatePoolWithTag
MmAllocateContiguousMemorySpecifyCache
MmGetPhysicalAddress
ZwEnumerateValueKey
ExFreePoolWithTag
ZwQueryKey
KeWaitForSingleObject
IofCallDriver
IoBuildDeviceIoControlRequest
KeInitializeEvent
IoDeleteDevice
DbgPrint
IoAttachDeviceToDeviceStack
IoCreateDevice
ZwClose
ZwOpenKey
RtlInitUnicodeString
IoBuildSynchronousFsdRequest
IofCompleteRequest
KeSetEvent
PoCallDriver
PoStartNextPowerIrp
MmFreePagesFromMdl
MmCreateMdl
MmAllocatePagesForMdl
KeInsertQueueDpc
KeClearEvent
KeSetTargetProcessorDpc
KeInitializeDpc
KeQueryActiveProcessors
IoDetachDevice
DbgBreakPoint

hal

ExAcquireFastMutex
ExReleaseFastMutex
KeStallExecutionProcessor
WRITE_PORT_UCHAR
WRITE_PORT_ULONG
READ_PORT_ULONG
READ_PORT_UCHAR

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 330B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
新建文件夹/Sis_agp117e/DATA.TAG
新建文件夹/Sis_agp117e/SETUP.EXE
新建文件夹/Sis_agp117e/SETUP.INI
新建文件夹/Sis_agp117e/SISfiles/AGPFunc.dll
.dll windows:5 windows x86 arch:x86

3c997af2caef448bcb4cd12fa29674a4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

setupapi

SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyA
SetupDiGetINFClassA
SetupDiCreateDeviceInfoList
SetupDiCreateDeviceInfoA
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA
SetupDiSetDeviceRegistryPropertyA
SetupDiCallClassInstaller

newdev

UpdateDriverForPlugAndPlayDevicesA

kernel32

GetVersionExA
FindFirstFileA
GetLastError
LocalFree
LocalAlloc
SetLastError
lstrlenA

user32

MessageBoxA

advapi32

RegOpenKeyExA
RegSetKeySecurity
RegCloseKey
RegDeleteValueA
ConvertStringSecurityDescriptorToSecurityDescriptorW

Exports

Exports

DelRegKeyVal
InstallDriverForVGA
IsExistedDevice
RemoveDeviceDriver

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
新建文件夹/Sis_agp117e/SISfiles/SISAGP98.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

AGP98current

Sections

.text
Size: 512B - Virtual size: 170B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
新建文件夹/Sis_agp117e/SISfiles/ata133ap.exe
.exe windows:4 windows x86 arch:x86

34bdc43108480d5a3a68910caa27ec37

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExA
RegQueryInfoKeyA
RegCloseKey
RegSetValueExA
RegOpenKeyExA
RegEnumKeyA

user32

wsprintfA

kernel32

GetModuleFileNameA
GetEnvironmentStrings
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetLastError
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
RtlUnwind
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetProcAddress
LoadLibraryA
WriteFile
GetCPInfo
GetACP
GetOEMCP
GetStringTypeW
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
新建文件夹/Sis_agp117e/SISfiles/instdrv.exe
.exe windows:4 windows x86 arch:x86

8e5153ece6fe163dff0507b952b348d9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

setupapi

SetupCopyOEMInfA

kernel32

TlsGetValue
GetLastError
GetStringTypeW
GetStringTypeA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
新建文件夹/Sis_agp117e/SISfiles/regmod.exe
.exe windows:4 windows x86 arch:x86

832025f1ce50f092ab1977c883f8d3ad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapSize
RtlUnwind
ExitProcess
TerminateProcess
GetStartupInfoA
GetCommandLineA
HeapFree
HeapAlloc
RaiseException
GetACP
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapReAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
GetCurrentThreadId
GetCurrentThread
lstrcmpiA
lstrcmpA
GlobalDeleteAtom
GlobalAlloc
GlobalLock
GetModuleFileNameA
CloseHandle
GetProfileStringA
SetEndOfFile
WriteFile
FlushFileBuffers
SetFilePointer
GetCurrentProcess
ReadFile
CreateFileA
GetOEMCP
SetErrorMode
GetProcessVersion
GetCPInfo
SizeofResource
WideCharToMultiByte
GetLastError
MultiByteToWideChar
WritePrivateProfileStringA
InterlockedIncrement
GlobalFlags
TlsGetValue
lstrlenA
lstrcpynA
HeapDestroy
EnterCriticalSection
LocalReAlloc
TlsSetValue
HeapCreate
TlsFree
GlobalReAlloc
LeaveCriticalSection
GlobalHandle
GetVersionExA
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalFree
LocalAlloc
MulDiv
SetLastError
InterlockedDecrement
LoadLibraryA
FreeLibrary
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
lstrcpyA
GetModuleHandleA
GetProcAddress
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
VirtualFree
VirtualAlloc

user32

AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
SendDlgItemMessageA
UpdateWindow
ScreenToClient
IsDialogMessageA
SetWindowTextA
ShowWindow
ClientToScreen
GetDC
ReleaseDC
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
LoadCursorA
GetClassNameA
PtInRect
GetSysColorBrush
LoadStringA
DestroyMenu
InvalidateRect
CopyRect
GetTopWindow
GetCapture
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
RemovePropA
GetMessageTime
SetForegroundWindow
GetWindow
SetWindowLongA
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
EndDialog
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
MessageBoxA
SetCursor
PostQuitMessage
PostMessageA
EnableWindow
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
SendMessageA
wsprintfA
LoadIconA
WinHelpA
GetClassInfoA
GetForegroundWindow
GetMessagePos
SetWindowPos
CallWindowProcA
ShowCaret
IsWindowUnicode
CharNextA
InflateRect
DefDlgProcA
DrawFocusRect
ExcludeUpdateRgn
HideCaret
UnregisterClassA

gdi32

GetClipBox
CreateBitmap
SetTextColor
SetBkColor
GetObjectA
DeleteDC
SaveDC
RestoreDC
SelectObject
GetStockObject
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
DeleteObject
GetDeviceCaps
CreateSolidBrush
PtVisible
RectVisible
ExtTextOutA
Escape
TextOutA
CreateDIBitmap
CreateCompatibleDC
GetTextExtentPointA
PatBlt
BitBlt

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegQueryValueExA
RegCreateKeyExA
RegOpenKeyExA
RegCloseKey
RegSetValueExA

comctl32

ord17

Sections

.text
Size: 80KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
新建文件夹/Sis_agp117e/SISfiles/waitwnd.exe
.exe windows:4 windows x86 arch:x86

04b4ddfc7d49be0a82edd16a14b86d9b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalReAlloc
CloseHandle
GlobalAlloc
GlobalLock
GlobalReAlloc
GlobalDeleteAtom
lstrcpyA
lstrcmpiA
GlobalGetAtomNameA
lstrcatA
FreeLibrary
GetProcessVersion
GlobalFindAtomA
lstrcmpA
GlobalFlags
GlobalFree
GlobalAddAtomA
GlobalHandle
GetCurrentProcess
SetFilePointer
FlushFileBuffers
GlobalUnlock
LocalAlloc
lstrcpynA
InterlockedDecrement
LocalFree
lstrlenA
GetProcAddress
LoadLibraryA
VirtualAlloc
IsBadWritePtr
HeapReAlloc
LCMapStringW
GetStringTypeW
GetStringTypeA
HeapAlloc
LCMapStringA
MultiByteToWideChar
HeapFree
WriteFile
RtlUnwind
HeapDestroy
VirtualFree
HeapCreate
TlsGetValue
GetLastError
TlsAlloc
SetLastError
GetFileType
TlsSetValue
GetCurrentThreadId
GetEnvironmentStringsW
GetStdHandle
SetHandleCount
FreeEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetModuleFileNameA
TerminateProcess
GetVersionExA
GetOEMCP
GetACP
GetCPInfo
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
Sleep
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
HeapSize
RaiseException
SetStdHandle

user32

LoadIconA
SetWindowTextA
LoadCursorA
GetSysColorBrush
ReleaseDC
GetDC
PtInRect
ClientToScreen
PostQuitMessage
DestroyMenu
TabbedTextOutA
DrawTextA
GrayStringA
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
DestroyWindow
GetClientRect
GetPropA
GetSysColor
MapWindowPoints
GetMessagePos
GetForegroundWindow
SetForegroundWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
DispatchMessageA
GetKeyState
CallNextHookEx
PeekMessageA
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
SendMessageA
MessageBoxA
EnableWindow
UnhookWindowsHookEx
LoadStringA
FindWindowExA
SetFocus
AdjustWindowRectEx
GetWindowLongA
GetDesktopWindow
GetWindow
GetClassNameA
PostMessageA
CallWindowProcA
RemovePropA
CopyRect
GetTopWindow
CreateWindowExA
GetClassLongA
GetMessageTime
SetPropA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

comctl32

ord17

gdi32

Escape
CreateBitmap
GetClipBox
SetTextColor
SetBkColor
GetObjectA
GetDeviceCaps
DeleteObject
DeleteDC
SaveDC
RestoreDC
SelectObject
GetStockObject
SetMapMode
SetViewportOrgEx
ScaleViewportExtEx
SetViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
RectVisible
TextOutA
PtVisible
OffsetViewportOrgEx
ExtTextOutA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 54KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
新建文件夹/Sis_agp117e/USB/Win2K_XP/WinXPUSB/SISPORT.SYS
.sys windows:5 windows x86 arch:x86

0c90b080851dbc2904b4aefece948e72

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

IoDeleteSymbolicLink
IoCreateDevice
IofCompleteRequest
RtlInitUnicodeString
KeInitializeSpinLock
IoCreateSymbolicLink
IoDeleteDevice

hal

KfReleaseSpinLock
KfAcquireSpinLock
WRITE_PORT_ULONG
WRITE_PORT_USHORT
READ_PORT_ULONG
READ_PORT_USHORT
READ_PORT_UCHAR
WRITE_PORT_UCHAR

Sections

.text
Size: 128B - Virtual size: 113B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 192B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 576B - Virtual size: 575B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 928B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 96B - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
新建文件夹/Sis_agp117e/USB/Win2K_XP/WinXPUSB/SIS_LIB.DLL
.dll windows:4 windows x86 arch:x86

37bdeb25f0422825ea22d8550129c32e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameW
GlobalFree
GlobalUnlock
HeapFree
DeviceIoControl
GlobalLock
GlobalAlloc
GetStringTypeA
LCMapStringW
GetTickCount
GetFileAttributesW
InitializeCriticalSection
CreateFileW
GetLastError
CloseHandle
DeleteCriticalSection
FormatMessageW
GlobalHandle
LocalFree
RtlUnwind
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
WriteFile
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
GetStringTypeW

user32

MessageBoxW

advapi32

QueryServiceStatus
ControlService
StartServiceW
DeleteService
CreateServiceW
OpenServiceW
CloseServiceHandle
OpenSCManagerW
EnumDependentServicesW

Exports

Exports

SiSReadPortUCHAR
SiSReadPortULONG
SiSReadPortUSHORT
SiSWritePortUCHAR
SiSWritePortULONG
SiSWritePortUSHORT

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
新建文件夹/Sis_agp117e/USB/Win2K_XP/WinXPUSB/SiSUSBrg.exe
.exe windows:4 windows x86 arch:x86

72f59db26f24f87b0f54ce671b8f5c2c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExA
GetCommandLineA
GetProcAddress
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
GetCPInfo
GetACP
GetOEMCP
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
HeapAlloc
VirtualAlloc
LoadLibraryA

advapi32

RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegDeleteValueA

sis_lib

SiSReadPortULONG
SiSWritePortULONG

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
新建文件夹/Sis_agp117e/USB/Win9x/SiSFiles/Mp_s3.exe
.exe windows:4 windows x86 arch:x86

587eae0f315e3a6f6a2281c204ffa147

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnhandledExceptionFilter
Sleep
FreeEnvironmentStringsA
GetModuleFileNameA
CloseHandle
FlushFileBuffers
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetStdHandle
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
SetFilePointer
GetLastError
WriteFile
RtlUnwind
HeapFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
OutputDebugStringA
HeapCreate
VirtualFree
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy

user32

SendMessageA
FindWindowA
EndDialog
BeginPaint
GetClientRect
DrawTextA
EndPaint
PostQuitMessage
DefWindowProcA
DestroyWindow
DialogBoxParamA
CreateWindowExA
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassExA
LoadStringA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
新建文件夹/Sis_agp117e/USB/Win9x/SiSFiles/Openhci.sys
.sys windows:4 windows x86 arch:x86

491c67fe6811f912d8e5ac2bd0e01c7f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

usbd.sys

USBD_CompleteRequest
USBD_AllocateDeviceName
USBD_RegisterHcDeviceCapabilities
USBD_GetPdoRegistryParameter
USBD_Dispatch
USBD_FreeDeviceName
USBD_CalculateUsbBandwidth
USBD_RegisterHostController

hal

KfRaiseIrql
KfLowerIrql
KeStallExecutionProcessor
KfAcquireSpinLock
KfReleaseSpinLock

ntoskrnl.exe

KeDelayExecutionThread
KeQueryTimeIncrement
MmMapLockedPages
KeQuerySystemTime
IoAcquireCancelSpinLock
WRITE_REGISTER_ULONG
READ_REGISTER_ULONG
InterlockedIncrement
ExfInterlockedPushEntryList
ExAllocatePoolWithTag
ExfInterlockedPopEntryList
ExFreePool
KeSynchronizeExecution
KeInitializeSpinLock
IofCallDriver
IoDeleteDevice
IoDetachDevice
IoCreateDevice
RtlFreeUnicodeString
IoAttachDeviceToDeviceStack
IoDisconnectInterrupt
KeCancelTimer
IoGetDmaAdapter
IoAllocateIrp
IoReleaseCancelSpinLock
InterlockedDecrement
KeSetEvent
IoFreeIrp
KeWaitForSingleObject
KeInitializeEvent
MmMapIoSpace
IoConnectInterrupt
KeSetTimerEx
KeInitializeTimer
KeInitializeDpc
KefReleaseSpinLockFromDpcLevel
KefAcquireSpinLockAtDpcLevel
KeQueryInterruptTime
InterlockedExchange
KeInsertQueueDpc

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 336B - Virtual size: 332B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 992B - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 800B - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
新建文件夹/Sis_agp117e/_INST32I.EX_
新建文件夹/Sis_agp117e/_ISDEL.EXE
新建文件夹/Sis_agp117e/_sys1.cab
新建文件夹/Sis_agp117e/_user1.cab
新建文件夹/Sis_agp117e/data1.cab
新建文件夹/Sis_agp117e/lang.dat
新建文件夹/Sis_agp117e/layout.bin
新建文件夹/Sis_agp117e/os.dat
新建文件夹/Sis_agp117e/setup-s.bat
新建文件夹/Sis_agp117e/setup.ins
新建文件夹/Sis_agp117e/setup.iss
新建文件夹/Sis_agp117e/setup.lid
新建文件夹/Sis_agp117e/setupdir/0003/_SETUP.DLL
新建文件夹/Sis_agp117e/setupdir/0005/_setup.dll
新建文件夹/Sis_agp117e/setupdir/0006/_setup.dll
新建文件夹/Sis_agp117e/setupdir/0007/_setup.dll
新建文件夹/Sis_agp117e/setupdir/0008/_SETUP.DLL
新建文件夹/Sis_agp117e/setupdir/0009/_SETUP.DLL
新建文件夹/Sis_agp117e/setupdir/000a/_setup.dll
新建文件夹/Sis_agp117e/setupdir/000b/_setup.dll
新建文件夹/Sis_agp117e/setupdir/000e/_setup.dll
新建文件夹/Sis_agp117e/setupdir/0010/_SETUP.DLL
新建文件夹/Sis_agp117e/setupdir/0011/_setup.dll
新建文件夹/Sis_agp117e/setupdir/0012/_setup.dll
新建文件夹/Sis_agp117e/setupdir/0013/_SETUP.DLL
新建文件夹/Sis_agp117e/setupdir/0014/_setup.dll
新建文件夹/Sis_agp117e/setupdir/0015/_setup.dll
新建文件夹/Sis_agp117e/setupdir/0019/_setup.dll
新建文件夹/Sis_agp117e/setupdir/001b/_SETUP.DLL
新建文件夹/Sis_agp117e/setupdir/001d/_setup.dll
新建文件夹/Sis_agp117e/setupdir/001e/_SETUP.DLL
新建文件夹/Sis_agp117e/setupdir/001f/_setup.dll
新建文件夹/Sis_agp117e/setupdir/0021/_setup.dll
新建文件夹/Sis_agp117e/setupdir/0024/_setup.dll
新建文件夹/Sis_agp117e/setupdir/002d/_SETUP.DLL
新建文件夹/Sis_agp117e/setupdir/0404/_SETUP.DLL
新建文件夹/Sis_agp117e/setupdir/040c/_setup.dll
新建文件夹/Sis_agp117e/setupdir/0416/_setup.dll
新建文件夹/Sis_agp117e/setupdir/0804/_setup.dll
新建文件夹/Sis_agp117e/setupdir/0816/_SETUP.DLL
新建文件夹/Sis_agp117e/setupdir/0c0c/_SETUP.DLL
新建文件夹/Sis_ide204a/DATA.TAG
新建文件夹/Sis_ide204a/IDE/IdeUtil/IDEproperty.dll
.dll windows:4 windows x86 arch:x86

7104025fbb1806630e7de5f7553cbbcd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapFree
HeapAlloc
RtlUnwind
GetCommandLineA
RaiseException
HeapSize
HeapReAlloc
GetACP
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
ExitProcess
TerminateProcess
GetFileType
SetErrorMode
GetEnvironmentStringsW
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
GlobalDeleteAtom
lstrcpyA
GetModuleHandleA
GetProcAddress
GlobalLock
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
GetWindowsDirectoryA
CreateFileA
SetFilePointer
FlushFileBuffers
GetCurrentProcess
WriteFile
WritePrivateProfileStringA
GetOEMCP
GetCPInfo
GetProcessVersion
lstrcpynA
GetLastError
GlobalFlags
GetStartupInfoA
LocalReAlloc
TlsGetValue
CloseHandle
DeviceIoControl
FreeEnvironmentStringsA
GlobalReAlloc
GetVersionExA
TlsSetValue
EnterCriticalSection
GlobalHandle
LeaveCriticalSection
TlsFree
InitializeCriticalSection
DeleteCriticalSection
TlsAlloc
MultiByteToWideChar
LocalFree
LocalAlloc
InterlockedIncrement
WideCharToMultiByte
lstrlenA
InterlockedDecrement
lstrcmpA
GlobalAlloc
MulDiv
GetCurrentThread
GetModuleFileNameA
FreeLibrary
SetLastError
LoadLibraryA
GetCurrentThreadId
GetVersion
lstrcatA
GlobalAddAtomA
GlobalGetAtomNameA
lstrcmpiA
FreeEnvironmentStringsW
GlobalFindAtomA
GetEnvironmentStrings
SetHandleCount
GetStdHandle

user32

UpdateWindow
PostMessageA
LoadIconA
SendDlgItemMessageA
MapWindowPoints
IsDialogMessageA
SetWindowTextA
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
GetMenuCheckMarkDimensions
ClientToScreen
GetDC
ReleaseDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
ShowWindow
PostQuitMessage
GetCursorPos
ValidateRect
TranslateMessage
GetMessageA
UnregisterClassA
GetClassNameA
LoadCursorA
GetSysColorBrush
DestroyMenu
LoadStringA
PeekMessageA
DispatchMessageA
GetFocus
SetFocus
AdjustWindowRectEx
GetClientRect
CopyRect
GetSysColor
GetTopWindow
MessageBoxA
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
GetClassLongA
SetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
GetParent
GetWindowLongA
GetDlgItem
IsWindowEnabled
PtInRect
FrameRect
SetCursor
IsWindowVisible
GetWindowDC
LoadCursorFromFileA
SetDlgItemTextA
LoadBitmapA
WindowFromDC
SendMessageA
EnableWindow
wsprintfA
GetPropA
UnhookWindowsHookEx
CallNextHookEx

gdi32

GetObjectA
GetStockObject
SelectObject
SetTextColor
SetBkColor
GetClipBox
DeleteDC
CreateBitmap
RestoreDC
SaveDC
SetBkMode
SetMapMode
SetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
OffsetViewportOrgEx
SetWindowExtEx
ScaleWindowExtEx
DeleteObject
GetDeviceCaps
PtVisible
RectVisible
ExtTextOutA
Escape
TextOutA
CreateSolidBrush
GetCurrentObject

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegEnumKeyA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
RegCreateKeyExA
RegQueryValueExA

comctl32

CreatePropertySheetPageA
DestroyPropertySheetPage
ord17

Exports

Exports

SISIdePropPageProvider

Sections

.text
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
新建文件夹/Sis_ide204a/IDE/IdeUtil/PropInstall.exe
.exe windows:4 windows x86 arch:x86

c070b6eec08c512c762f56118c5ea5ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
HeapAlloc
RtlUnwind
GetStartupInfoA
TerminateProcess
RaiseException
HeapReAlloc
HeapSize
GetACP
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
ExitProcess
GetCommandLineA
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
GetModuleFileNameA
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
GetWindowsDirectoryA
CopyFileA
GetLastError
WriteFile
SetErrorMode
GetCurrentProcess
GetOEMCP
GetCPInfo
WideCharToMultiByte
GetProcessVersion
MultiByteToWideChar
WritePrivateProfileStringA
GlobalFlags
TlsGetValue
lstrlenA
lstrcpynA
EnterCriticalSection
LocalReAlloc
TlsSetValue
TlsFree
GlobalReAlloc
LeaveCriticalSection
UnhandledExceptionFilter
TlsAlloc
GlobalHandle
SetFileAttributesA
DeleteCriticalSection
FreeEnvironmentStringsA
LocalAlloc
DeleteFileA
InitializeCriticalSection
LocalFree
InterlockedDecrement
SetLastError
GetVersion
LoadLibraryA
FreeLibrary
GlobalAddAtomA
lstrcatA
GlobalGetAtomNameA
GetModuleHandleA
GlobalFindAtomA
lstrcpyA
GlobalFree
GetProcAddress
GlobalUnlock
FreeEnvironmentStringsW
CloseHandle
GetEnvironmentStrings
VirtualAlloc

user32

CopyRect
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
SetWindowTextA
ShowWindow
ClientToScreen
GetDC
ReleaseDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
LoadCursorA
GetClassNameA
PtInRect
GetSysColorBrush
LoadStringA
DestroyMenu
GetCapture
WinHelpA
GetClassInfoA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
EndDialog
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
MessageBoxA
SetCursor
PostQuitMessage
GetTopWindow
RegisterClassA
PostMessageA
EnableWindow
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
SendMessageA
LoadIconA
wsprintfA
SetWindowLongA
UnregisterClassA

gdi32

SetBkColor
GetObjectA
SetTextColor
SaveDC
DeleteDC
SelectObject
GetStockObject
RestoreDC
SetMapMode
OffsetViewportOrgEx
SetViewportExtEx
SetViewportOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
SetWindowExtEx
DeleteObject
GetDeviceCaps
PtVisible
TextOutA
ExtTextOutA
RectVisible
Escape
GetClipBox
CreateBitmap

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegSetValueExA
RegOpenKeyExA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
RegQueryValueExA
RegEnumKeyA

comctl32

ord17

Sections

.text
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
新建文件夹/Sis_ide204a/IDE/IdeUtil/SISIDE.exe
.exe windows:4 windows x86 arch:x86

ed3214fae528129e9380c9547d513ebc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapReAlloc
HeapSize
GetACP
GetTimeZoneInformation
RaiseException
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
TerminateProcess
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetStartupInfoA
ExitProcess
HeapDestroy
UnhandledExceptionFilter
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
GetCommandLineA
GlobalHandle
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
RtlUnwind
HeapAlloc
HeapFree
GetTickCount
FileTimeToSystemTime
FileTimeToLocalFileTime
WritePrivateProfileStringA
SetErrorMode
GetFileAttributesA
GetFileTime
GetFileSize
TlsGetValue
GetOEMCP
GetCPInfo
EnterCriticalSection
LocalReAlloc
TlsSetValue
TlsFree
GlobalReAlloc
LeaveCriticalSection
GetEnvironmentStrings
GetEnvironmentStringsW
DeleteCriticalSection
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpyA
GetModuleHandleA
GetProcAddress
GlobalLock
GlobalUnlock
FindResourceA
LoadResource
LockResource
GlobalFree
GetVersionExA
CreateFileA
GetCurrentProcess
SetPriorityClass
DeviceIoControl
Sleep
CloseHandle
GetWindowsDirectoryA
FindFirstFileA
FindNextFileA
TlsAlloc
LocalAlloc
InitializeCriticalSection
GetProfileStringA
SizeofResource
GlobalFlags
GetProcessVersion
MulDiv
lstrcmpA
GlobalAlloc
LocalFree
GetCurrentThread
FormatMessageA
GetThreadLocale
GetModuleFileNameA
GetVolumeInformationA
GetFullPathNameA
SetEndOfFile
FlushFileBuffers
UnlockFile
LockFile
ReadFile
SetFilePointer
WriteFile
GetLastError
DuplicateHandle
lstrcpynA
WideCharToMultiByte
SetLastError
MultiByteToWideChar
InterlockedIncrement
lstrlenA
InterlockedDecrement
GetVersion
LoadLibraryA
FreeLibrary
lstrcatA
SetHandleCount
GetStdHandle
FindClose
GetFileType

user32

RegisterClipboardFormatA
PostThreadMessageA
MessageBeep
GetNextDlgGroupItem
SetRect
CopyAcceleratorTableA
CharNextA
InflateRect
DestroyMenu
GetDesktopWindow
PtInRect
GetClassNameA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GetSysColorBrush
LoadCursorA
LoadStringA
SetWindowContextHelpId
GetMessageA
TranslateMessage
ValidateRect
GetCursorPos
SetCursor
PostQuitMessage
GetDC
ReleaseDC
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
InvalidateRect
CheckMenuItem
EnableMenuItem
MoveWindow
SetWindowTextA
IsDialogMessageA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
DispatchMessageA
AdjustWindowRectEx
ScreenToClient
CopyRect
IsWindowVisible
GetTopWindow
MessageBoxA
IsChild
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
SetMenuItemBitmaps
ModifyMenuA
GetClientRect
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetNextDlgTabItem
EndDialog
IsWindow
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
MapDialogRect
SetWindowPos
ShowWindow
PostMessageA
GetCapture
GetActiveWindow
SetActiveWindow
GetAsyncKeyState
GetWindowLongA
GetFocus
SetFocus
GetDlgItem
IsWindowEnabled
GetParent
FindWindowA
GetWindowRect
LoadIconA
wsprintfA
EnableWindow
SendMessageA
PeekMessageA
GetSysColor
CharUpperA
DrawFocusRect
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode

gdi32

GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
TextOutA
ExtTextOutA
RectVisible
GetMapMode
Escape
DPtoLP
GetTextColor
LPtoDP
GetBkColor
CreateDIBitmap
BitBlt
GetTextExtentPointA
CreateCompatibleDC
IntersectClipRect
SetWindowExtEx
ScaleWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
SetViewportOrgEx
SetMapMode
OffsetViewportOrgEx
RestoreDC
SetBkMode
DeleteDC
SaveDC
GetDeviceCaps
GetStockObject
SelectObject
PatBlt
DeleteObject
GetObjectA
SetBkColor
CreateBitmap
GetClipBox
SetTextColor

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyA
RegCreateKeyExA
RegSetValueExA

comctl32

PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA
ord17

oledlg

ord8

ole32

CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
StgOpenStorageOnILockBytes
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoTaskMemAlloc

olepro32

ord253

oleaut32

SysFreeString
SysStringLen
SysAllocStringByteLen
VariantChangeType
SysAllocString
VariantCopy
VariantTimeToSystemTime
VariantClear
SysAllocStringLen

Sections

.text
Size: 148KB - Virtual size: 146KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 468KB - Virtual size: 465KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
新建文件夹/Sis_ide204a/IDE/IdeUtil/sisvsd.vxd
新建文件夹/Sis_ide204a/IDE/win2k/SISIDE.INF
新建文件夹/Sis_ide204a/IDE/win2k/SISIDE2K.DLL
.dll windows:5 windows x86 arch:x86

0dfcc35ec41df8ea40f9adb8c71a7fde

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ntdll

DbgPrint

setupapi

SetupDiClassGuidsFromNameA
SetupDiGetClassDevsA
SetupDiGetDeviceRegistryPropertyA
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo

kernel32

RemoveDirectoryA
GetVersionExA
OutputDebugStringA
CloseHandle
GetCurrentProcess
lstrlenA
LocalAlloc
SetLastError
GetLastError
GetWindowsDirectoryA
DeleteFileA
LocalFree

advapi32

RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegSetKeySecurity
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
ConvertStringSecurityDescriptorToSecurityDescriptorW

user32

ExitWindowsEx

newdev

UpdateDriverForPlugAndPlayDevicesA

Exports

Exports

UninstallIDE

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
新建文件夹/Sis_ide204a/IDE/win2k/siside.cat
新建文件夹/Sis_ide204a/IDE/win2k/siside.sys
.sys windows:5 windows x86 arch:x86

c7d6ec1ebbf8d9a327453e1440ddc460

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

DbgPrint

hal

HalSetBusDataByOffset
HalGetBusDataByOffset
READ_PORT_UCHAR
WRITE_PORT_UCHAR

pciidex.sys

PciIdeXGetBusData
PciIdeXInitialize

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 160B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 320B - Virtual size: 292B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 224B - Virtual size: 198B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
新建文件夹/Sis_ide204a/IDE/win2k/sisidex.sys
.sys windows:5 windows x86 arch:x86

5f78f1051fee64993b4f6475a745a152

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\TEMP\ifs\win2000\sfilter\sfilter\objfre_w2k\i386\sfilter.pdb

Imports

ntoskrnl.exe

IoGetTopLevelIrp
IofCompleteRequest
ExFreePool
DbgBreakPoint
DbgPrint
ObQueryNameString
ExAllocatePoolWithTag
ExReleaseResourceLite
IoDetachDevice
ExAcquireResourceSharedLite
IoDeleteDevice
RtlInitUnicodeString
IoGetAttachedDevice
IoCreateDevice
ExAcquireResourceExclusiveLite
IoSetTopLevelIrp
memmove
ObfDereferenceObject
IoGetDeviceObjectPointer
IoRegisterFsRegistrationChange
ExInitializeResourceLite
IoCreateSymbolicLink
_except_handler3
RtlCompareUnicodeString
IoAttachDeviceByPointer
IofCallDriver

hal

KeGetCurrentIrql
HalGetBusDataByOffset

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
新建文件夹/Sis_ide204a/IDE/win2k/sisperf.sys
.sys windows:5 windows x86 arch:x86

d7c91a4ec2057075f53052c2044b296a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\WINDDK\2600\src\storage\filters\sisperf\objfre_w2k\i386\sisperf.pdb

Imports

ntoskrnl.exe

KeInitializeEvent
IoWriteErrorLogEntry
IoAllocateErrorLogEntry
KeInitializeSpinLock
IoDeleteDevice
IoAttachDeviceToDeviceStack
IoCreateDevice
IoDetachDevice
KeWaitForSingleObject
ExAllocatePoolWithTag
RtlInitUnicodeString
swprintf
IoBuildDeviceIoControlRequest
InterlockedDecrement
InterlockedIncrement
RtlCopyUnicodeString
DbgPrint
PoStartNextPowerIrp
PoCallDriver
IofCallDriver
IofCompleteRequest
ExFreePool
KeSetEvent

hal

KfReleaseSpinLock
KeStallExecutionProcessor
WRITE_PORT_UCHAR
READ_PORT_UCHAR
READ_PORT_USHORT
KfAcquireSpinLock

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 267B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 1024B - Virtual size: 994B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 384B - Virtual size: 342B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
新建文件夹/Sis_ide204a/IDE/winxp/SISIDE.INF
新建文件夹/Sis_ide204a/IDE/winxp/SISIDEXP.dll
.dll windows:5 windows x86 arch:x86

1927500918effd98e92ad74bca66ff47

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ntdll

DbgPrint

setupapi

SetupDiClassGuidsFromNameA
SetupDiGetClassDevsA
SetupDiGetDeviceRegistryPropertyA
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo

kernel32

RemoveDirectoryA
CloseHandle
GetCurrentProcess
lstrlenA
LocalAlloc
LocalFree
OutputDebugStringA
GetWindowsDirectoryA
GetVersionExA
SetLastError
DeleteFileA
GetLastError

advapi32

RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegDeleteKeyA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegSetKeySecurity
RegCreateKeyA

user32

ExitWindowsEx

newdev

UpdateDriverForPlugAndPlayDevicesA

Exports

Exports

SiSCoInstaller
UninstallIDE

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 440B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
新建文件夹/Sis_ide204a/IDE/winxp/siside.cat
新建文件夹/Sis_ide204a/IDE/winxp/siside.sys
.sys windows:5 windows x86 arch:x86

20913fd86c29f6e47667cc2996079d5d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\WINDDK\2600\src\storage\miniide\winxp\objfre\i386\siside.pdb

Imports

ntoskrnl.exe

DbgPrint

hal

HalGetBusDataByOffset
HalSetBusDataByOffset

pciidex.sys

PciIdeXInitialize
PciIdeXGetBusData

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 256B - Virtual size: 246B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 128B - Virtual size: 58B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
新建文件夹/Sis_ide204a/IDE/winxp/sisidex.sys
.sys windows:5 windows x86 arch:x86

d91e9b283a09ae822f63e9b8bbada9d5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\TEMP\ifs\0.4\objfre\i386\sisidex.pdb

Imports

ntoskrnl.exe

KeGetCurrentThread
IoAllocateIrp
KeInitializeEvent
RtlInitUnicodeString
IoGetTopLevelIrp
IofCompleteRequest
IoDeleteDevice
IoCreateDevice
IoAttachDeviceToDeviceStackSafe
IoDetachDevice
DbgPrint
ExFreePoolWithTag
ExAllocatePoolWithTag
ExDeleteNPagedLookasideList
IoEnumerateDeviceObjectList
ObfDereferenceObject
KeDelayExecutionThread
IoUnregisterFsRegistrationChange
IoDeleteSymbolicLink
ExAllocatePoolWithQuotaTag
IoRegisterFsRegistrationChange
ExInitializeNPagedLookasideList
KeInitializeSpinLock
FsRtlRegisterFileSystemFilterCallbacks
IoCreateSymbolicLink
DbgBreakPoint
InterlockedPopEntrySList
InterlockedPushEntrySList
ZwClose
ZwQueryValueKey
ZwOpenKey
IofCallDriver
PsGetCurrentProcessId
KeQuerySystemTime
IoGetLowerDeviceObject
IoGetAttachedDeviceReference
IoAttachDeviceToDeviceStack
ObfReferenceObject
IoGetRelatedDeviceObject
ObReferenceObjectByHandle
IoFileObjectType
ZwCreateFile
RtlAppendUnicodeStringToString
RtlAppendUnicodeToString
wcscpy
ObQueryNameString
IoGetDeviceAttachmentBaseRef
_wcsnicmp
RtlEqualUnicodeString
wcslen
swprintf
IoGetDiskDeviceObject
ExInitializeResourceLite
KeLeaveCriticalRegion
ExReleaseResourceLite
FsRtlRemovePerStreamContext
ExAcquireResourceExclusiveLite
KeEnterCriticalRegion
FsRtlInsertPerStreamContext
FsRtlLookupPerStreamContextInternal
ExAcquireResourceSharedLite
ExDeleteResourceLite
_except_handler3
KeWaitForSingleObject
KeSetEvent
IoFreeIrp
RtlCompareUnicodeString
PsGetCurrentThreadId
RtlCopyUnicodeString
sprintf

hal

ExReleaseFastMutex
HalGetBusDataByOffset
KfAcquireSpinLock
KfReleaseSpinLock
KeGetCurrentIrql
ExAcquireFastMutex

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 896B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
新建文件夹/Sis_ide204a/IDE/winxp/sisperf.sys
.sys windows:5 windows x86 arch:x86

df94715eac709d5e4661e67ab7d658ac

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\WINDDK\2600\src\storage\filters\sisperf\objfre\i386\sisperf.pdb

Imports

ntoskrnl.exe

KeInitializeEvent
IoWriteErrorLogEntry
IoAllocateErrorLogEntry
KeInitializeSpinLock
IoDeleteDevice
IoAttachDeviceToDeviceStack
IoCreateDevice
KeWaitForSingleObject
ExFreePoolWithTag
ExAllocatePoolWithTag
RtlInitUnicodeString
swprintf
IoBuildDeviceIoControlRequest
RtlCopyUnicodeString
DbgPrint
PoStartNextPowerIrp
PoCallDriver
IofCallDriver
IofCompleteRequest
IoDetachDevice
KeSetEvent

hal

KfReleaseSpinLock
KeStallExecutionProcessor
WRITE_PORT_UCHAR
READ_PORT_UCHAR
READ_PORT_USHORT
KfAcquireSpinLock

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 263B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 384B - Virtual size: 334B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
新建文件夹/Sis_ide204a/SETUP.EXE
新建文件夹/Sis_ide204a/SETUP.INI
新建文件夹/Sis_ide204a/SISfiles/DMA98.exe
.exe windows:4 windows x86 arch:x86

0b35edc68ad0eda8722ed37681e216a0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlUnwind
ExitProcess
TerminateProcess
GetStartupInfoA
GetCommandLineA
HeapFree
HeapAlloc
RaiseException
GetACP
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapSize
HeapReAlloc
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
GetCurrentThread
lstrcmpiA
lstrcmpA
GlobalDeleteAtom
GlobalAlloc
GlobalLock
GetModuleFileNameA
CloseHandle
GetProfileStringA
WriteFile
GetCurrentProcess
GetCPInfo
SetErrorMode
GetOEMCP
GetLastError
SizeofResource
GetProcessVersion
MultiByteToWideChar
WideCharToMultiByte
WritePrivateProfileStringA
lstrlenA
GlobalFlags
LocalReAlloc
lstrcpynA
TlsGetValue
HeapDestroy
GlobalReAlloc
TlsSetValue
EnterCriticalSection
HeapCreate
GlobalHandle
LeaveCriticalSection
TlsFree
DeleteCriticalSection
GetCurrentThreadId
TlsAlloc
InitializeCriticalSection
LocalFree
LocalAlloc
MulDiv
SetLastError
InterlockedDecrement
LoadLibraryA
FreeLibrary
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
lstrcpyA
GetModuleHandleA
GetProcAddress
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
VirtualFree
VirtualAlloc
IsBadWritePtr

user32

AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
SendDlgItemMessageA
UpdateWindow
IsDialogMessageA
SetWindowTextA
ShowWindow
ClientToScreen
GetDC
ReleaseDC
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
LoadCursorA
GetClassNameA
PtInRect
GetSysColorBrush
LoadStringA
DestroyMenu
InvalidateRect
CopyRect
GetTopWindow
ScreenToClient
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetForegroundWindow
SetForegroundWindow
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
EndDialog
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
MessageBoxA
SetCursor
PostQuitMessage
PostMessageA
EnableWindow
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
SendMessageA
LoadIconA
GetCapture
WinHelpA
GetMessagePos
GetMessageTime
SetWindowLongA
GetWindow
UnhookWindowsHookEx
ShowCaret
IsWindowUnicode
CharNextA
InflateRect
DefDlgProcA
DrawFocusRect
ExcludeUpdateRgn
HideCaret
UnregisterClassA

gdi32

SetBkColor
SetTextColor
GetObjectA
DeleteDC
SaveDC
RestoreDC
SelectObject
GetStockObject
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
GetClipBox
DeleteObject
GetDeviceCaps
CreateSolidBrush
PtVisible
TextOutA
ExtTextOutA
RectVisible
Escape
CreateDIBitmap
BitBlt
GetTextExtentPointA
CreateCompatibleDC
CreateBitmap
PatBlt

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA

comctl32

ord17

Sections

.text
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
新建文件夹/Sis_ide204a/SISfiles/HDinfo.exe
.exe windows:4 windows x86 arch:x86

fc2d01cb3c6d65334eb8f19ed1bbf8fd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlUnwind
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
HeapFree
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
GetACP
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
lstrlenA
GetFileType
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
WriteFile
GetOEMCP
SetErrorMode
GetProcessVersion
GetCPInfo
SizeofResource
WritePrivateProfileStringA
GetLastError
GlobalFlags
LocalReAlloc
lstrcpynA
TlsGetValue
GlobalReAlloc
TlsSetValue
EnterCriticalSection
GlobalHandle
LeaveCriticalSection
TlsFree
InitializeCriticalSection
DeleteCriticalSection
TlsAlloc
MulDiv
LocalFree
LocalAlloc
WideCharToMultiByte
SetLastError
MultiByteToWideChar
GetEnvironmentStringsW
InterlockedDecrement
GlobalLock
LoadLibraryA
FreeLibrary
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
CreateFileA
lstrcpyA
GetModuleHandleA
GetProcAddress
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
GetModuleFileNameA
GetStdHandle
SetHandleCount
GlobalAlloc
GetCurrentProcess
Sleep
CloseHandle
DeviceIoControl
SetPriorityClass
GetProfileStringA
GetCurrentThreadId
GetCurrentThread
lstrcmpiA
lstrcmpA
GlobalDeleteAtom

user32

ScreenToClient
AdjustWindowRectEx
GetSysColor
MapWindowPoints
SetFocus
UpdateWindow
SendDlgItemMessageA
IsDialogMessageA
SetWindowTextA
ShowWindow
LoadStringA
DestroyMenu
ClientToScreen
GetDC
ReleaseDC
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
GrayStringA
LoadCursorA
DrawTextA
GetClassNameA
PtInRect
GetSysColorBrush
InvalidateRect
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
WinHelpA
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
CopyRect
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
GetMessageTime
GetMessagePos
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
EndDialog
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
MessageBoxA
SetCursor
PostQuitMessage
PostMessageA
EnableWindow
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
GetSystemMenu
AppendMenuA
SendMessageA
LoadIconA
wsprintfA
GetTopWindow
GetCapture
CreateWindowExA
GetClassLongA
GetWindowTextLengthA
GetForegroundWindow
RegisterWindowMessageA
RemovePropA
ShowCaret
IsWindowUnicode
CharNextA
InflateRect
DefDlgProcA
DrawFocusRect
ExcludeUpdateRgn
HideCaret
UnregisterClassA

gdi32

CreateBitmap
GetClipBox
SetTextColor
SetBkColor
GetObjectA
DeleteDC
SaveDC
RestoreDC
SelectObject
GetStockObject
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
DeleteObject
GetDeviceCaps
CreateSolidBrush
RectVisible
TextOutA
PtVisible
Escape
ExtTextOutA
CreateCompatibleDC
BitBlt
CreateDIBitmap
GetTextExtentPointA
PatBlt

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegEnumKeyA
RegCreateKeyExA
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegDeleteValueA

comctl32

ord17

Sections

.text
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
新建文件夹/Sis_ide204a/SISfiles/INST2000.DLL
.dll windows:5 windows x86 arch:x86

c66a35cb6ee8ffd63fb54cd84224d95c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ntdll

DbgPrint

setupapi

SetupDiGetClassDevsA
SetupDiGetDeviceRegistryPropertyA
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList

newdev

UpdateDriverForPlugAndPlayDevicesA

kernel32

GetWindowsDirectoryA
DeleteFileA
SetLastError
GetVersionExA
LocalFree
FormatMessageA
GetLastError
lstrlenA
LocalAlloc
FindFirstFileA
OutputDebugStringA

user32

MessageBoxA

advapi32

RegOpenKeyExA
RegSetKeySecurity
RegCloseKey
RegDeleteKeyA
ConvertStringSecurityDescriptorToSecurityDescriptorW

Exports

Exports

ForceInstall
UninstallIDE
fnInst2000

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
新建文件夹/Sis_ide204a/SISfiles/SISVSD.VXD
新建文件夹/Sis_ide204a/SISfiles/SisFilter.exe
.exe windows:4 windows x86 arch:x86

520ed89eacfb9345c80da53dda72889e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathFileExistsA
PathCombineA
PathFindFileNameA

kernel32

HeapAlloc
HeapFree
RtlUnwind
GetCommandLineA
ExitProcess
TerminateProcess
RaiseException
HeapReAlloc
HeapSize
GetACP
LCMapStringA
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
GetModuleFileNameA
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
DeleteFileA
GetWindowsDirectoryA
SetFileAttributesA
CopyFileA
WriteFile
GetCurrentProcess
SetErrorMode
GetOEMCP
GetCPInfo
GetProcessVersion
MultiByteToWideChar
WideCharToMultiByte
InterlockedIncrement
WritePrivateProfileStringA
GlobalFlags
lstrlenA
lstrcpynA
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
TlsFree
LeaveCriticalSection
GetLastError
TlsAlloc
GlobalHandle
DeleteCriticalSection
LocalAlloc
InitializeCriticalSection
LocalFree
InterlockedDecrement
SetLastError
GetVersion
LoadLibraryA
FreeLibrary
GlobalAddAtomA
lstrcatA
GlobalGetAtomNameA
GetModuleHandleA
GlobalFindAtomA
lstrcpyA
GlobalFree
GetProcAddress
GlobalUnlock
IsBadWritePtr
CloseHandle
UnhandledExceptionFilter
LCMapStringW

user32

SetFocus
GetSysColor
AdjustWindowRectEx
MapWindowPoints
SetWindowTextA
ShowWindow
GetDC
ReleaseDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
LoadCursorA
ClientToScreen
GetClassNameA
PtInRect
LoadStringA
DestroyMenu
GetTopWindow
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetSysColorBrush
CopyRect
GetMenuItemID
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
GetSubMenu
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
EndDialog
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
MessageBoxA
SetCursor
PostQuitMessage
PostMessageA
EnableWindow
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
SendMessageA
LoadIconA
wsprintfA
GetMenu
GetMenuItemCount
SetWindowLongA
UnregisterClassA

gdi32

SetBkColor
GetObjectA
SetTextColor
SaveDC
DeleteDC
SelectObject
GetStockObject
RestoreDC
SetMapMode
OffsetViewportOrgEx
SetViewportExtEx
SetViewportOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
SetWindowExtEx
DeleteObject
GetDeviceCaps
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
CreateBitmap
GetClipBox

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

CreateServiceA
RegSetValueExA
RegQueryValueExA
CloseServiceHandle
RegCreateKeyExA
OpenSCManagerA
OpenServiceA
RegOpenKeyExA
DeleteService
RegCloseKey

comctl32

ord17

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
新建文件夹/Sis_ide204a/SISfiles/ata133ap.exe
.exe windows:4 windows x86 arch:x86

34bdc43108480d5a3a68910caa27ec37

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExA
RegQueryInfoKeyA
RegCloseKey
RegSetValueExA
RegOpenKeyExA
RegEnumKeyA

user32

wsprintfA

kernel32

GetModuleFileNameA
GetEnvironmentStrings
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetLastError
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
RtlUnwind
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetProcAddress
LoadLibraryA
WriteFile
GetCPInfo
GetACP
GetOEMCP
GetStringTypeW
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
新建文件夹/Sis_ide204a/SISfiles/infinstall.exe
.exe windows:4 windows x86 arch:x86

44f380b8cd75dcc0b544dea74050a8b3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegOpenKeyExA
CloseServiceHandle
CreateServiceA
OpenSCManagerA
RegDeleteKeyA
RegCloseKey

user32

wsprintfA

kernel32

SetLastError
GetLastError
CopyFileA
GetWindowsDirectoryA
DeleteFileA
SetFileAttributesA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
LeaveCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
GetACP
TlsGetValue
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
GetCPInfo
LoadLibraryA
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
LCMapStringA
GetProcAddress
MultiByteToWideChar
GetStringTypeW
LCMapStringW
GetStringTypeA

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
新建文件夹/Sis_ide204a/SISfiles/waitwnd.exe
.exe windows:4 windows x86 arch:x86

04b4ddfc7d49be0a82edd16a14b86d9b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalReAlloc
CloseHandle
GlobalAlloc
GlobalLock
GlobalReAlloc
GlobalDeleteAtom
lstrcpyA
lstrcmpiA
GlobalGetAtomNameA
lstrcatA
FreeLibrary
GetProcessVersion
GlobalFindAtomA
lstrcmpA
GlobalFlags
GlobalFree
GlobalAddAtomA
GlobalHandle
GetCurrentProcess
SetFilePointer
FlushFileBuffers
GlobalUnlock
LocalAlloc
lstrcpynA
InterlockedDecrement
LocalFree
lstrlenA
GetProcAddress
LoadLibraryA
VirtualAlloc
IsBadWritePtr
HeapReAlloc
LCMapStringW
GetStringTypeW
GetStringTypeA
HeapAlloc
LCMapStringA
MultiByteToWideChar
HeapFree
WriteFile
RtlUnwind
HeapDestroy
VirtualFree
HeapCreate
TlsGetValue
GetLastError
TlsAlloc
SetLastError
GetFileType
TlsSetValue
GetCurrentThreadId
GetEnvironmentStringsW
GetStdHandle
SetHandleCount
FreeEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetModuleFileNameA
TerminateProcess
GetVersionExA
GetOEMCP
GetACP
GetCPInfo
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
Sleep
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
HeapSize
RaiseException
SetStdHandle

user32

LoadIconA
SetWindowTextA
LoadCursorA
GetSysColorBrush
ReleaseDC
GetDC
PtInRect
ClientToScreen
PostQuitMessage
DestroyMenu
TabbedTextOutA
DrawTextA
GrayStringA
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
DestroyWindow
GetClientRect
GetPropA
GetSysColor
MapWindowPoints
GetMessagePos
GetForegroundWindow
SetForegroundWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
DispatchMessageA
GetKeyState
CallNextHookEx
PeekMessageA
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
SendMessageA
MessageBoxA
EnableWindow
UnhookWindowsHookEx
LoadStringA
FindWindowExA
SetFocus
AdjustWindowRectEx
GetWindowLongA
GetDesktopWindow
GetWindow
GetClassNameA
PostMessageA
CallWindowProcA
RemovePropA
CopyRect
GetTopWindow
CreateWindowExA
GetClassLongA
GetMessageTime
SetPropA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

comctl32

ord17

gdi32

Escape
CreateBitmap
GetClipBox
SetTextColor
SetBkColor
GetObjectA
GetDeviceCaps
DeleteObject
DeleteDC
SaveDC
RestoreDC
SelectObject
GetStockObject
SetMapMode
SetViewportOrgEx
ScaleViewportExtEx
SetViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
RectVisible
TextOutA
PtVisible
OffsetViewportOrgEx
ExtTextOutA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

Sections

.text
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 54KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
新建文件夹/Sis_ide204a/_INST32I.EX_
新建文件夹/Sis_ide204a/_ISDEL.EXE
新建文件夹/Sis_ide204a/_sys1.cab
新建文件夹/Sis_ide204a/_user1.cab
新建文件夹/Sis_ide204a/data1.cab
新建文件夹/Sis_ide204a/lang.dat
新建文件夹/Sis_ide204a/layout.bin
新建文件夹/Sis_ide204a/os.dat
新建文件夹/Sis_ide204a/setup.ins
新建文件夹/Sis_ide204a/setup.iss
新建文件夹/Sis_ide204a/setup.lid
新建文件夹/Sis_ide204a/setupdir/0003/_SETUP.DLL
新建文件夹/Sis_ide204a/setupdir/0005/_setup.dll
新建文件夹/Sis_ide204a/setupdir/0006/_setup.dll
新建文件夹/Sis_ide204a/setupdir/0007/_setup.dll
新建文件夹/Sis_ide204a/setupdir/0008/_SETUP.DLL
新建文件夹/Sis_ide204a/setupdir/0009/_SETUP.DLL
新建文件夹/Sis_ide204a/setupdir/000a/_setup.dll
新建文件夹/Sis_ide204a/setupdir/000b/_setup.dll
新建文件夹/Sis_ide204a/setupdir/000e/_setup.dll
新建文件夹/Sis_ide204a/setupdir/0010/_SETUP.DLL
新建文件夹/Sis_ide204a/setupdir/0011/_setup.dll
新建文件夹/Sis_ide204a/setupdir/0012/_setup.dll
新建文件夹/Sis_ide204a/setupdir/0013/_SETUP.DLL
新建文件夹/Sis_ide204a/setupdir/0014/_setup.dll
新建文件夹/Sis_ide204a/setupdir/0015/_setup.dll
新建文件夹/Sis_ide204a/setupdir/0019/_setup.dll
新建文件夹/Sis_ide204a/setupdir/001b/_SETUP.DLL
新建文件夹/Sis_ide204a/setupdir/001d/_setup.dll
新建文件夹/Sis_ide204a/setupdir/001e/_SETUP.DLL
新建文件夹/Sis_ide204a/setupdir/001f/_setup.dll
新建文件夹/Sis_ide204a/setupdir/0021/_setup.dll
新建文件夹/Sis_ide204a/setupdir/0024/_setup.dll
新建文件夹/Sis_ide204a/setupdir/002d/_SETUP.DLL
新建文件夹/Sis_ide204a/setupdir/0404/_SETUP.DLL
新建文件夹/Sis_ide204a/setupdir/040c/_setup.dll
新建文件夹/Sis_ide204a/setupdir/0416/_setup.dll
新建文件夹/Sis_ide204a/setupdir/0804/_setup.dll
新建文件夹/Sis_ide204a/setupdir/0816/_SETUP.DLL
新建文件夹/Sis_ide204a/setupdir/0c0c/_SETUP.DLL
新建文件夹/via-VIA_Hyperion 4 IN 1_v451vPro/VIAHyperion4in1451vPro.exe
.exe windows:4 windows x86 arch:x86

f1c86bf7ba6c9508e02f21633db7d001

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
SetFilePointer
ReadFile
CreateDirectoryA
GetPrivateProfileStringA
SetFileAttributesA
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetProcAddress
DeleteFileA
FreeLibrary
GetTempFileNameA
LoadLibraryA
GetTempPathA
GetSystemDirectoryA
GetWindowsDirectoryA
lstrcmpA
IsDBCSLeadByte
LockResource
LoadResource
FormatMessageA
GetLastError
CreateProcessA
WaitForSingleObject
GetStartupInfoA
RemoveDirectoryA
FindNextFileA
ExitProcess
MulDiv
GetSystemDefaultLCID
GetModuleFileNameA
WritePrivateProfileSectionA
WritePrivateProfileStringA
GetPrivateProfileSectionA
GetShortPathNameA
MoveFileExA
lstrcatA
GetFileAttributesA
CreateFileA
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
Sleep
GetDiskFreeSpaceA
FindFirstFileA
FindClose
lstrcpyA
lstrlenA
FindResourceA
CompareStringA
lstrcpynA
FlushFileBuffers
LCMapStringW
LCMapStringA
RtlUnwind
GetFileType
SetStdHandle
CloseHandle
GetStdHandle
SetHandleCount
GetOEMCP
GetACP
GetCPInfo
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
MultiByteToWideChar
GetStringTypeW
GetStringTypeA
WideCharToMultiByte
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersion
GetCommandLineA
GetModuleHandleA
HeapFree
HeapAlloc

user32

SetWindowPos
SendMessageA
TranslateMessage
wsprintfA
GetWindowLongA
GetParent
SetWindowTextA
GetWindowTextA
GetWindow
SetDlgItemTextA
EndDialog
SendDlgItemMessageA
LoadStringA
CharNextA
DialogBoxParamA
IsCharAlphaA
CharNextExA
GetDesktopWindow
GetDlgItemTextA
KillTimer
EnableWindow
SetTimer
PostMessageA
SetFocus
CreateDialogParamA
DestroyWindow
GetDlgItem
GetDC
ReleaseDC
ScreenToClient
SetWindowLongA
CreateWindowExA
GetWindowRect
SystemParametersInfoA
MessageBeep
PeekMessageA
GetSysColor
GetClassNameA
MessageBoxA
DispatchMessageA
MapWindowPoints
GetClientRect

gdi32

CreateFontIndirectA
TextOutA
SetTextColor
SelectObject
SetBkMode
GetTextExtentPointA
GetDeviceCaps
GetObjectA
DeleteObject

comctl32

ord17
PropertySheetA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

shell32

ShellExecuteA
SHBrowseForFolderA
SHGetPathFromIDListA

lz32

LZOpenFileA
LZCopy
LZClose

Sections

.text
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8dcee093c360128f859c7cd3e13a1ac4

Headers

File Characteristics

Imports

comctl32

version

kernel32

user32

gdi32

advapi32

ole32

oleaut32

Sections

.text Size: 27KB - Virtual size: 26KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 2KB - Virtual size: 1KB

.rsrc Size: 18KB - Virtual size: 18KB

bde1a4db58f13a06ec9b93ef2191b35c

Headers

File Characteristics

Imports

winio

kernel32

user32

gdi32

winspool.drv

advapi32

comctl32

Sections

.text Size: 64KB - Virtual size: 60KB

.rdata Size: 20KB - Virtual size: 17KB

.data Size: 8KB - Virtual size: 19KB

.rsrc Size: 12KB - Virtual size: 10KB

7d1daddcd7f535584f116dcf28822871

Headers

File Characteristics

Imports

kernel32

advapi32

Exports

Exports

Sections

.text Size: 20KB - Virtual size: 19KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 4KB - Virtual size: 936B

.reloc Size: 4KB - Virtual size: 3KB

e75fb7f82c05f11d58ca00f789da4f63

Headers

File Characteristics

PDB Paths

Imports

ntoskrnl.exe

hal

Sections

.text Size: 1KB - Virtual size: 1KB

.rdata Size: 256B - Virtual size: 175B

.data Size: 128B - Virtual size: 4B

INIT Size: 640B - Virtual size: 536B

.reloc Size: 128B - Virtual size: 108B

9459d107d88ba764cb3168b1d82d3d31

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

ntoskrnl.exe

hal

Sections

.text Size: 8KB - Virtual size: 8KB

.rdata Size: 384B - Virtual size: 322B

.data Size: 128B - Virtual size: 32B

PAGE Size: 12KB - Virtual size: 12KB

INIT Size: 1KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 1000B

.text
Size: 27KB - Virtual size: 26KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 18KB - Virtual size: 18KB

.text
Size: 64KB - Virtual size: 60KB

.rdata
Size: 20KB - Virtual size: 17KB

.data
Size: 8KB - Virtual size: 19KB

.rsrc
Size: 12KB - Virtual size: 10KB

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 4KB - Virtual size: 936B

.reloc
Size: 4KB - Virtual size: 3KB

.text
Size: 1KB - Virtual size: 1KB

.rdata
Size: 256B - Virtual size: 175B

.data
Size: 128B - Virtual size: 4B

INIT
Size: 640B - Virtual size: 536B

.reloc
Size: 128B - Virtual size: 108B

.text
Size: 8KB - Virtual size: 8KB

.rdata
Size: 384B - Virtual size: 322B

.data
Size: 128B - Virtual size: 32B

PAGE
Size: 12KB - Virtual size: 12KB

INIT
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 1000B

.reloc
Size: 1KB - Virtual size: 1KB

.text
Size: 5KB - Virtual size: 5KB

_LTEXT
Size: 32B - Virtual size: 6B

.data
Size: 64B - Virtual size: 44B

.edata
Size: 608B - Virtual size: 602B

INIT
Size: 320B - Virtual size: 292B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 288B - Virtual size: 260B

.text
Size: 5KB - Virtual size: 5KB

_LTEXT
Size: 32B - Virtual size: 6B

.data
Size: 64B - Virtual size: 44B

.edata
Size: 608B - Virtual size: 602B

INIT
Size: 320B - Virtual size: 292B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 288B - Virtual size: 260B

.text
Size: 11KB - Virtual size: 11KB

.rdata
Size: 384B - Virtual size: 370B

.data
Size: 128B - Virtual size: 96B

PAGE
Size: 17KB - Virtual size: 17KB

INIT
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 1024B - Virtual size: 1024B

.reloc
Size: 1KB - Virtual size: 1KB

.text
Size: 52KB - Virtual size: 48KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 4KB - Virtual size: 13KB

.rsrc
Size: 12KB - Virtual size: 8KB