ad0edbaa03582b83f24eb2a2fdc82ee7_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ad0edbaa03582b83f24eb2a2fdc82ee7_JaffaCakes118
Size

4.4MB
MD5

ad0edbaa03582b83f24eb2a2fdc82ee7
SHA1

4895ec23840c98e7fd3a74c39709005c5a082841
SHA256

0968a219e3fa5ada791649e1c4c3900ee27fec2e7ba9b092f57ceffbfb1b52e5
SHA512

7aa0fc2a7c6450bc1a2d00b24371279c29d8ad0d5713d8ac5a4c3e798251649a4ba468bda3acdb1e6c5d23662e0b7c837b77a15c1fe3cb00533555684493fbac
SSDEEP

98304:bCv5ALKdKSCvn3dofHpgjF8Lzgir2O7KLkSXhEVVKEdg6GqaB:45aKan4JgOLsTmKLkSXhsdg6Fu

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 3 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx
static1/unpack001/Tara103b.exe	upx
static1/unpack001/Uninstreal.exe	upx

Unsigned PE 105 IoCs

Checks for missing Authenticode signature.

resource
ad0edbaa03582b83f24eb2a2fdc82ee7_JaffaCakes118
unpack001/$SYSDIR/RealMediaSplitter.ax
unpack001/$SYSDIR/RealMediaSplitter_xp.ax
unpack001/$SYSDIR/clrviddc.dll
unpack001/$SYSDIR/pncrt.dll
unpack001/$SYSDIR/pndx5032.dll
unpack001/$SYSDIR/rmoc3260.dll
unpack001/Codecs/14_43260.dll
unpack001/Codecs/28_83260.dll
unpack001/Codecs/amrn.dll
unpack001/Codecs/amrw.dll
unpack001/Codecs/atrc.dll
unpack001/Codecs/cook.dll
unpack001/Codecs/ddnt3260.dll
unpack001/Codecs/dnet3260.dll
unpack001/Codecs/drv1.dll
unpack001/Codecs/drv2.dll
unpack001/Codecs/drvc.dll
unpack001/Codecs/hxltcolor.dll
unpack001/Codecs/qclp.dll
unpack001/Codecs/ra32clv1.dll
unpack001/Codecs/raac.dll
unpack001/Codecs/ralf.dll
unpack001/Codecs/rv10.dll
unpack001/Codecs/rv20.dll
unpack001/Codecs/rv30.dll
unpack001/Codecs/rv40.dll
unpack001/Codecs/sipr.dll
unpack001/Common/objb3201.dll
unpack001/Common/pnen3260.dll
unpack001/Common/pngu3267.dll
unpack001/Common/pnrs3260.dll
unpack001/Plugins/3gppttrenderer.dll
unpack001/Plugins/ExtResources/coreres.xrs
unpack001/Plugins/aacff.dll
unpack001/Plugins/amrff.dll
unpack001/Plugins/audplin.dll
unpack001/Plugins/authmgr.dll
unpack001/Plugins/cdda3260.dll
unpack001/Plugins/clbascauth.dll
unpack001/Plugins/clntxres.dll
unpack001/Plugins/cont3260.dll
unpack001/Plugins/fpsechnd.dll
unpack001/Plugins/h261rend.dll
unpack001/Plugins/h263render.dll
unpack001/Plugins/httpfsys.dll
unpack001/Plugins/hxsdp.dll
unpack001/Plugins/hxxml.dll
unpack001/Plugins/imgrender.dll
unpack001/Plugins/memfsys.dll
unpack001/Plugins/mp3fformat.dll
unpack001/Plugins/mp3metaff.dll
unpack001/Plugins/mp3render.dll
unpack001/Plugins/mp4arender.dll
unpack001/Plugins/mp4fformat.dll
unpack001/Plugins/mp4wrtr.dll
unpack001/Plugins/mpgfformat.dll
unpack001/Plugins/mpgrender.dll
unpack001/Plugins/ntlmauth.dll
unpack001/Plugins/oggfformat.dll
unpack001/Plugins/pacplin.dll
unpack001/Plugins/pdgenxferfsys.dll
unpack001/Plugins/plusplin.dll
unpack001/Plugins/pxcb3210.dll
unpack001/Plugins/ramfformat.dll
unpack001/Plugins/ramrender.dll
unpack001/Plugins/rarender.dll
unpack001/Plugins/recf3260.dll
unpack001/Plugins/rmfformat.dll
unpack001/Plugins/rmwrtr.dll
unpack001/Plugins/rmxfpln.dll
unpack001/Plugins/rmxrend.dll
unpack001/Plugins/rn5auth.dll
unpack001/Plugins/rtfformat.dll
unpack001/Plugins/rtrender.dll
unpack001/Plugins/rvrender.dll
unpack001/Plugins/sdpplin.dll
unpack001/Plugins/security.dll
unpack001/Plugins/smlfformat.dll
unpack001/Plugins/smlrender.dll
unpack001/Plugins/smmrender.dll
unpack001/Plugins/smplfsys.dll
unpack001/Plugins/stubdrm.dll
unpack001/Plugins/swfformat.dll
unpack001/Plugins/swfrender.dll
unpack001/Plugins/tfilesys.dll
unpack001/Plugins/theorarend.dll
unpack001/Plugins/vidplin.dll
unpack001/Plugins/vidsite.dll
unpack001/Plugins/vorbisrend.dll
unpack001/Plugins/vsrcplin.dll
unpack001/Plugins/vsrlocal.dll
unpack001/Plugins/wm9fformat.dll
unpack001/Plugins/wm9writer.dll
unpack001/Plugins/wmsechnd.dll
unpack001/Plugins/zipf3260.dll
unpack001/Tara103b.exe
unpack002/out.upx
unpack001/Uninstreal.exe
unpack003/out.upx
unpack001/out.upx
unpack001/rpplugins/embd3260.dll
unpack001/rpplugins/rpcl3260.dll
unpack001/rpplugins/rpgu3260.dll
unpack001/rpplugins/rput3260.dll

Files

ad0edbaa03582b83f24eb2a2fdc82ee7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 200KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
$SYSDIR/RealMediaSplitter.ax
.dll regsvr32 windows:4 windows x86 arch:x86

ec921e5d0e065fbeed93d67efd2c4afa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\Progs\guliverkli\src\filters\parser\realmediasplitter\Release\RealMediaSplitter.pdb

Imports

kernel32

WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
lstrcpyA
GetFullPathNameA
LocalAlloc
GlobalReAlloc
GlobalHandle
TlsGetValue
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
lstrcatA
lstrcmpW
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GlobalFlags
GetCPInfo
GetOEMCP
ReadFile
ExitProcess
RtlUnwind
HeapAlloc
HeapFree
VirtualProtect
VirtualQuery
GetCommandLineA
HeapReAlloc
SetStdHandle
GetFileType
HeapSize
TerminateProcess
QueryPerformanceCounter
GetSystemTimeAsFileTime
HeapDestroy
HeapCreate
IsBadWritePtr
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
GetTimeZoneInformation
IsBadReadPtr
IsBadCodePtr
SetEnvironmentVariableA
GetFileTime
GetFileSize
GetFileAttributesA
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrcmpA
SetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
lstrcpynA
LocalFree
DeleteFileA
Sleep
CreateFileA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcessId
CreateThread
GetTickCount
SetThreadPriority
GetModuleHandleA
VirtualAlloc
CreateSemaphoreA
GetCurrentThreadId
GetCurrentProcess
DuplicateHandle
VirtualFree
GetSystemInfo
ReleaseSemaphore
WaitForSingleObject
ResetEvent
SetEvent
CreateEventA
CloseHandle
InterlockedDecrement
InterlockedIncrement
DisableThreadLibraryCalls
CompareStringW
CompareStringA
lstrlenA
lstrcmpiA
GetVersion
GetLastError
GetModuleFileNameA
LoadLibraryA
GetProcAddress
FreeLibrary
WideCharToMultiByte
LeaveCriticalSection
EnterCriticalSection
MultiByteToWideChar
FindResourceA
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange

user32

SetWindowTextA
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
WinHelpA
GetCapture
CreateWindowExA
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetFocus
GetForegroundWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
LoadIconA
MapWindowPoints
PostQuitMessage
SetForegroundWindow
GetClientRect
GetMenu
AdjustWindowRectEx
GetClassInfoA
RegisterClassA
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
PtInRect
GetWindow
SetWindowsHookExA
CallNextHookEx
GetKeyState
ValidateRect
GetWindowTextA
LoadCursorA
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
PostMessageA
GetSystemMetrics
SendMessageA
MessageBoxA
GetParent
GetWindowLongA
GetLastActivePopup
DestroyMenu
IsWindowEnabled
EnableWindow
SetMenuItemBitmaps
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
UnhookWindowsHookEx
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
SetRect
DispatchMessageA
RegisterWindowMessageA
PeekMessageA
wsprintfA
CharUpperA
UnregisterClassA
CopyRect
GetClassInfoExA

gdi32

ScaleWindowExtEx
DeleteDC
CreateBitmap
GetStockObject
SetWindowExtEx
TextOutA
RectVisible
PtVisible
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
SetBkColor
SetTextColor
GetClipBox
GetDeviceCaps
DeleteObject
SetMapMode
RestoreDC
SaveDC
ExtTextOutA

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegCloseKey
RegQueryValueExA
RegDeleteKeyA
RegEnumKeyExA
RegSetValueExA
RegSetValueA
RegOpenKeyExA
RegCreateKeyA
RegCreateKeyExA

comctl32

ord17

shlwapi

PathIsUNCA
PathFindFileNameA
PathRemoveFileSpecA
PathAddBackslashA
PathStripToRootA

ole32

CLSIDFromString
CoTaskMemAlloc
CoInitialize
CoCreateInstance
CoFreeUnusedLibraries
CoUninitialize
StringFromGUID2
CoTaskMemFree

oleaut32

SysAllocString
VariantChangeType
SysAllocStringLen
VariantClear
VariantInit
SysFreeString

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 216KB - Virtual size: 214KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

_TEXT64
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/RealMediaSplitter_xp.ax
.dll regsvr32 windows:4 windows x86 arch:x86

9a126c029018ddbb4b569b54eed56ea5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\Progs\guliverkli\src\filters\parser\realmediasplitter\Release Unicode\RealMediaSplitter.pdb

Imports

kernel32

GlobalReAlloc
GlobalHandle
TlsGetValue
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GetFileAttributesW
GetFileTime
lstrcatW
GetVersionExA
LoadLibraryA
GetModuleHandleA
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
GlobalFlags
ExitProcess
LocalAlloc
HeapAlloc
HeapFree
GetCommandLineA
HeapReAlloc
VirtualProtect
VirtualQuery
SetStdHandle
GetFileType
HeapSize
TerminateProcess
QueryPerformanceCounter
GetSystemTimeAsFileTime
HeapDestroy
HeapCreate
IsBadWritePtr
GetOEMCP
GetCPInfo
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetTimeZoneInformation
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
SetEnvironmentVariableA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFullPathNameW
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
SetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
DeleteFileW
Sleep
GetModuleFileNameW
GetVersion
CreateFileW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcessId
CreateThread
GetTickCount
SetThreadPriority
lstrcpyW
GetModuleHandleW
VirtualAlloc
CreateSemaphoreW
GetCurrentThreadId
GetCurrentProcess
DuplicateHandle
VirtualFree
GetSystemInfo
ReleaseSemaphore
WaitForSingleObject
ResetEvent
SetEvent
CreateEventW
CloseHandle
InterlockedDecrement
InterlockedIncrement
lstrcpynW
lstrcmpW
DisableThreadLibraryCalls
GetLastError
lstrlenA
lstrlenW
GetModuleFileNameA
LoadLibraryW
GetProcAddress
FreeLibrary
WideCharToMultiByte
LeaveCriticalSection
EnterCriticalSection
MultiByteToWideChar
FindResourceW
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
RtlUnwind

user32

SetWindowTextW
ValidateRect
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
WinHelpW
GetCapture
CreateWindowExW
SetWindowsHookExW
CallNextHookEx
GetClassInfoExW
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetFocus
GetForegroundWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessagePos
LoadIconW
MapWindowPoints
GetKeyState
SetForegroundWindow
GetClientRect
GetMenu
AdjustWindowRectEx
GetClassInfoW
RegisterClassW
DefWindowProcW
CallWindowProcW
SetWindowLongW
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
CopyRect
PtInRect
GetWindow
GetWindowTextW
SendMessageW
MessageBoxW
GetParent
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
LoadCursorW
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
EnableWindow
PostQuitMessage
DestroyMenu
SetMenuItemBitmaps
ModifyMenuW
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapW
GetMessageTime
PostMessageW
CharUpperW
GetSystemMetrics
UnhookWindowsHookEx
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
SetRect
DispatchMessageW
RegisterWindowMessageW
PeekMessageW
wsprintfW
UnregisterClassW
GetDlgCtrlID
TabbedTextOutW

gdi32

DeleteDC
CreateBitmap
GetStockObject
ScaleWindowExtEx
ExtTextOutW
TextOutW
RectVisible
PtVisible
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
SetBkColor
SetTextColor
GetClipBox
GetDeviceCaps
DeleteObject
SetMapMode
RestoreDC
SaveDC
Escape

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegCloseKey
RegQueryValueExW
RegDeleteKeyW
RegEnumKeyExW
RegSetValueExW
RegSetValueW
RegOpenKeyExW
RegCreateKeyW
RegCreateKeyExW

comctl32

ord17

shlwapi

PathIsUNCW
PathStripToRootW
PathFindFileNameW
PathRemoveFileSpecA
PathAddBackslashA

ole32

StringFromGUID2
CoUninitialize
CoFreeUnusedLibraries
CoCreateInstance
CoInitialize
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromString

oleaut32

SysFreeString
VariantChangeType
SysAllocStringLen
VariantClear
VariantInit
SysAllocString

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 216KB - Virtual size: 214KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

_TEXT64
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/clrviddc.dll
.dll windows:4 windows x86 arch:x86

419524d8dad68da67386c3959cf0842e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FreeEnvironmentStringsA
HeapFree
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
HeapAlloc
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
VirtualAlloc
TerminateProcess
GetCurrentProcess
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
RtlUnwind
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
WriteFile
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
SetFilePointer
LoadLibraryA
SetStdHandle
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
HeapReAlloc
HeapSize
FlushFileBuffers
CloseHandle
GetLocaleInfoA
GetLocaleInfoW
ReadFile

Exports

Exports

WinDllChangeSHIMColorspace
WinDllSHIMChunk
WinDllSHIMClose
WinDllSHIMOpen

Sections

.text
Size: 158KB - Virtual size: 158KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/pncrt.dll
.dll windows:4 windows x86 arch:x86

828907b7a8ec04c9c4031e40ef2f76ec

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetFilePointer
RtlUnwind
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
SetUnhandledExceptionFilter
GetModuleFileNameA
GetModuleFileNameW
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetCommandLineA
GetVersion
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
ResumeThread
CreateThread
TlsSetValue
ExitThread
CloseHandle
GetCurrentThreadId
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCurrentThread
FindNextFileA
FindFirstFileA
FindClose
FindNextFileW
FindFirstFileW
HeapFree
HeapAlloc
HeapReAlloc
HeapValidate
HeapSize
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
SetHandleCount
GetFileType
GetStartupInfoA
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
MultiByteToWideChar
GetCommandLineW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
UnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetConsoleCtrlHandler
SetEnvironmentVariableW
InterlockedDecrement
InterlockedIncrement
FlushFileBuffers
RaiseException
SetStdHandle
Sleep
CompareStringA
CompareStringW
GetLocaleInfoA
GetLocaleInfoW
IsValidLocale
IsValidCodePage
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
GetTimeZoneInformation
SetEnvironmentVariableA
Beep
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDiskFreeSpaceA
GetLogicalDrives
SetErrorMode
GetFileAttributesA
GetCurrentDirectoryA
SetCurrentDirectoryA
SetFileAttributesA
GetFullPathNameA
GetDriveTypeA
GetCurrentProcessId
CreateDirectoryA
RemoveDirectoryA
DeleteFileA
GetFileAttributesW
GetCurrentDirectoryW
SetCurrentDirectoryW
SetFileAttributesW
GetFullPathNameW
CreateDirectoryW
DeleteFileW
MoveFileW
RemoveDirectoryW
GetDriveTypeW
MoveFileA
GetExitCodeProcess
WaitForSingleObject
FreeLibrary
CreateProcessA
CreateProcessW
HeapCompact
HeapWalk
ReadConsoleA
SetConsoleMode
GetConsoleMode
SetEndOfFile
WriteConsoleA
DuplicateHandle
GetFileInformationByHandle
PeekNamedPipe
ReadConsoleInputA
PeekConsoleInputA
GetNumberOfConsoleInputEvents
LockFile
UnlockFile
CreateFileA
CreatePipe
ReadFile
CreateFileW
GetLocalTime
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetLocalTime
GetSystemTime
GetModuleHandleA

Exports

Exports

$I10_OUTPUT
??0__non_rtti_object@@QAE@ABV0@@Z
??0__non_rtti_object@@QAE@PBD@Z
??0bad_cast@@QAE@ABQBD@Z
??0bad_cast@@QAE@ABV0@@Z
??0bad_typeid@@QAE@ABV0@@Z
??0bad_typeid@@QAE@PBD@Z
??0exception@@QAE@ABQBD@Z
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@XZ
??1__non_rtti_object@@UAE@XZ
??1bad_cast@@UAE@XZ
??1bad_typeid@@UAE@XZ
??1exception@@UAE@XZ
??1type_info@@UAE@XZ
??2@YAPAXI@Z
??3@YAXPAX@Z
??4__non_rtti_object@@QAEAAV0@ABV0@@Z
??4bad_cast@@QAEAAV0@ABV0@@Z
??4bad_typeid@@QAEAAV0@ABV0@@Z
??4exception@@QAEAAV0@ABV0@@Z
??8type_info@@QBEHABV0@@Z
??9type_info@@QBEHABV0@@Z
??_7__non_rtti_object@@6B@
??_7bad_cast@@6B@
??_7bad_typeid@@6B@
??_7exception@@6B@
??_E__non_rtti_object@@UAEPAXI@Z
??_Ebad_cast@@UAEPAXI@Z
??_Ebad_typeid@@UAEPAXI@Z
??_Eexception@@UAEPAXI@Z
??_G__non_rtti_object@@UAEPAXI@Z
??_Gbad_cast@@UAEPAXI@Z
??_Gbad_typeid@@UAEPAXI@Z
??_Gexception@@UAEPAXI@Z
?_query_new_handler@@YAP6AHI@ZXZ
?_query_new_mode@@YAHXZ
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
?_set_new_mode@@YAHH@Z
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
?before@type_info@@QBEHABV1@@Z
?name@type_info@@QBEPBDXZ
?raw_name@type_info@@QBEPBDXZ
?set_new_handler@@YAP6AXXZP6AXXZ@Z
?set_terminate@@YAP6AXXZP6AXXZ@Z
?set_unexpected@@YAP6AXXZP6AXXZ@Z
?terminate@@YAXXZ
?unexpected@@YAXXZ
?what@exception@@UBEPBDXZ
SetUserHeapAlloc
SetUserHeapCalloc
SetUserHeapFree
SetUserHeapReAlloc
SetUserHeapSize
SetUserHeapValidate
_CIacos
_CIasin
_CIatan
_CIatan2
_CIcos
_CIcosh
_CIexp
_CIfmod
_CIlog
_CIlog10
_CIpow
_CIsin
_CIsinh
_CIsqrt
_CItan
_CItanh
_CrtHeapAlloc
_CrtHeapCalloc
_CrtHeapFree
_CrtHeapReAlloc
_CrtHeapSize
_CrtHeapValidate
_CxxThrowException
_EH_prolog
_Getdays
_Getmonths
_Gettnames
_HUGE
_Strftime
_XcptFilter
__CxxFrameHandler
__CxxLongjmpUnwind
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__STRINGTOLD
__argc
__argv
__badioinfo
__crtCompareStringA
__crtGetLocaleInfoW
__crtLCMapStringA
__dllonexit
__doserrno
__fpecode
__getmainargs
__initenv
__isascii
__iscsym
__iscsymf
__lc_codepage
__lc_handle
__lconv_init
__mb_cur_max
__p___argc
__p___argv
__p___initenv
__p___mb_cur_max
__p___wargv
__p___winitenv
__p__acmdln
__p__amblksiz
__p__commode
__p__daylight
__p__dstbias
__p__environ
__p__fileinfo
__p__fmode
__p__iob
__p__mbcasemap
__p__mbctype
__p__osver
__p__pctype
__p__pgmptr
__p__pwctype
__p__timezone
__p__tzname
__p__wcmdln
__p__wenviron
__p__winmajor
__p__winminor
__p__winver
__p__wpgmptr
__pioinfo
__pxcptinfoptrs
__set_app_type
__setlc_active
__setusermatherr
__threadhandle
__threadid
__toascii
__unDName
__unguarded_readlc_active
__wargv
__wgetmainargs
__winitenv
_abnormal_termination
_access
_acmdln
_adj_fdiv_m16i
_adj_fdiv_m32
_adj_fdiv_m32i
_adj_fdiv_m64
_adj_fdiv_r
_adj_fdivr_m16i
_adj_fdivr_m32
_adj_fdivr_m32i
_adj_fdivr_m64
_adj_fpatan
_adj_fprem
_adj_fprem1
_adj_fptan
_adjust_fdiv
_aexit_rtn
_amsg_exit
_assert
_atodbl
_atoi64
_atoldbl
_beep
_beginthread
_beginthreadex
_c_exit
_cabs
_callnewh
_cexit
_cgets
_chdir
_chdrive
_chgsign
_chmod
_chsize
_clearfp
_close
_commit
_commode
_control87
_controlfp
_copysign
_cprintf
_cputs
_creat
_cscanf
_ctype
_cwait
_daylight
_dstbias
_dup
_dup2
_ecvt
_endthread
_endthreadex
_environ
_eof
_errno
_except_handler2
_except_handler3
_execl
_execle
_execlp
_execlpe
_execv
_execve
_execvp
_execvpe
_exit
_expand
_fcloseall
_fcvt
_fdopen
_fgetchar
_fgetwchar
_filbuf
_fileinfo
_filelength
_filelengthi64
_fileno
_findclose
_findfirst
_findfirsti64
_findnext
_findnexti64
_finite
_flsbuf
_flushall
_fmode
_fpclass
_fpieee_flt
_fpreset
_fputchar
_fputwchar
_fsopen
_fstat
_fstati64
_ftime
_ftol
_fullpath
_futime
_gcvt
_get_osfhandle
_get_sbh_threshold
_getch
_getche
_getcwd
_getdcwd
_getdiskfree
_getdllprocaddr
_getdrive
_getdrives
_getmaxstdio
_getmbcp
_getpid
_getsystime
_getw
_getws
_global_unwind2
_heapadd
_heapchk
_heapmin
_heapset
_heapused
_heapwalk
_hypot
_i64toa
_i64tow
_initterm
_inp
_inpd
_inpw
_iob
_isatty
_isctype
_ismbbalnum
_ismbbalpha
_ismbbgraph
_ismbbkalnum
_ismbbkana
_ismbbkprint
_ismbbkpunct
_ismbblead
_ismbbprint
_ismbbpunct
_ismbbtrail
_ismbcalnum
_ismbcalpha
_ismbcdigit
_ismbcgraph
_ismbchira
_ismbckata
_ismbcl0
_ismbcl1
_ismbcl2
_ismbclegal
_ismbclower
_ismbcprint
_ismbcpunct
_ismbcspace
_ismbcsymbol
_ismbcupper
_ismbslead
_ismbstrail
_isnan
_itoa
_itow
_j0
_j1
_jn
_kbhit
_lfind
_loaddll
_local_unwind2
_lock
_locking
_logb
_longjmpex
_lrotl
_lrotr
_lsearch
_lseek
_lseeki64
_ltoa
_ltow
_makepath
_mbbtombc
_mbbtype
_mbcasemap
_mbccpy
_mbcjistojms
_mbcjmstojis
_mbclen
_mbctohira
_mbctokata
_mbctolower
_mbctombb
_mbctoupper
_mbctype
_mbsbtype
_mbscat
_mbschr
_mbscmp
_mbscoll
_mbscpy
_mbscspn
_mbsdec
_mbsdup
_mbsicmp
_mbsicoll
_mbsinc
_mbslen
_mbslwr
_mbsnbcat
_mbsnbcmp
_mbsnbcnt
_mbsnbcoll
_mbsnbcpy
_mbsnbicmp
_mbsnbicoll
_mbsnbset
_mbsncat
_mbsnccnt
_mbsncmp
_mbsncoll
_mbsncpy
_mbsnextc
_mbsnicmp
_mbsnicoll
_mbsninc
_mbsnset
_mbspbrk
_mbsrchr
_mbsrev
_mbsset
_mbsspn
_mbsspnp
_mbsstr
_mbstok
_mbstrlen
_mbsupr
_memccpy
_memicmp
_mkdir
_mktemp
_msize
_nextafter
_onexit
_open
_open_osfhandle
_osver
_outp
_outpd
_outpw
_pclose
_pctype
_pgmptr
_pipe
_popen
_purecall
_putch
_putenv
_putw
_putws
_pwctype
_read
_rmdir
_rmtmp
_rotl
_rotr
_safe_fdiv
_safe_fdivr
_safe_fprem
_safe_fprem1
_scalb
_searchenv
_seh_longjmp_unwind
_set_error_mode
_set_sbh_threshold
_seterrormode
_setjmp
_setjmp3
_setmaxstdio
_setmbcp
_setmode
_setsystime
_sleep
_snprintf
_snwprintf
_sopen
_spawnl
_spawnle
_spawnlp
_spawnlpe
_spawnv
_spawnve
_spawnvp
_spawnvpe
_splitpath
_stat
_stati64
_statusfp
_strcmpi
_strdate
_strdup
_strerror
_stricmp
_stricoll
_strlwr
_strncoll
_strnicmp
_strnicoll
_strnset
_strrev
_strset
_strtime
_strupr
_swab
_sys_errlist
_sys_nerr
_tell
_telli64
_tempnam
_timezone
_tolower
_toupper
_tzname
_tzset
_ui64toa
_ui64tow
_ultoa
_ultow
_umask
_ungetch
_unlink
_unloaddll
_unlock
_utime
_vsnprintf
_vsnwprintf
_waccess
_wasctime
_wchdir
_wchmod
_wcmdln
_wcreat
_wcsdup
_wcsicmp

Sections

.text
Size: 212KB - Virtual size: 211KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/pndx5016.dll
$SYSDIR/pndx5032.dll
.dll windows:4 windows x86 arch:x86

3dff24d172f5031d837d000fcf3a81f8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SMapLS_IP_EBP_8
SUnMapLS_IP_EBP_8
SMapLS_IP_EBP_12
SUnMapLS_IP_EBP_12
SMapLS_IP_EBP_16
SUnMapLS_IP_EBP_16
ThunkConnect32
GlobalFree
GetVersion
GlobalAlloc
SMapLS_IP_EBP_8
SUnMapLS_IP_EBP_8
SMapLS_IP_EBP_12
SUnMapLS_IP_EBP_12
SMapLS_IP_EBP_16
SUnMapLS_IP_EBP_16
ThunkConnect32
GlobalFree
GetVersion
GlobalAlloc

pncrt

free
_adjust_fdiv
malloc
_initterm

Exports

Exports

GetDevNodeStatus32Call
thk_ThunkData32

Sections

.text
Size: 1024B - Virtual size: 790B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 494B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 194B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/rmoc3260.dll
.dll regsvr32 windows:4 windows x86 arch:x86

856609e709a6cabc2acd456e10aed0e4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

_initterm
_adjust_fdiv
_ismbcspace
_open
_chsize
_fstat
_onexit
_read
_unlink
_putenv
_write
_sopen
_tell
_lseek
__dllonexit
malloc
_errno
_telli64
_lseeki64
memmove
_vsnprintf
strchr
isdigit
_stricmp
strncmp
printf
getenv
realloc
strstr
_snprintf
atol
atoi
sprintf
strncat
_purecall
??2@YAPAXI@Z
wcslen
wcsncpy
strncpy
strrchr
??3@YAXPAX@Z
free
_strnicmp
_strcmpi
_close
_creat

ole32

CoTaskMemAlloc
CreateBindCtx
CreateOleAdviseHolder
CoTaskMemFree
CoCreateInstance
CoGetMalloc

kernel32

CreateThread
InitializeCriticalSection
GetModuleFileNameA
GetTempPathA
GetTempFileNameA
CloseHandle
CreateFileA
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
GetVersionExA
GetSystemInfo
InterlockedIncrement
InterlockedDecrement
lstrcatA
GetEnvironmentVariableA
LeaveCriticalSection
EnterCriticalSection
WideCharToMultiByte
lstrlenW
lstrcpyA
lstrlenA
lstrcmpA
MultiByteToWideChar
DeleteFileA
WinExec
GetProcAddress
LoadLibraryA
FreeLibrary
SetErrorMode
DeleteCriticalSection
GetLocaleInfoA
GetVersion
GetLastError

user32

CreateDialogParamA
wsprintfA
CharNextA
CharPrevA
IsDialogMessageA
ReleaseDC
GetDC
PtInRect
SendMessageA
SetFocus
BeginPaint
EndPaint
SetParent
IsWindowVisible
GetParent
DefWindowProcA
UnregisterClassA
WinHelpA
GetWindowLongA
ShowWindow
EqualRect
OffsetRect
SetWindowRgn
SetWindowLongA
DestroyWindow
GetWindowRect
MapWindowPoints
SetWindowPos
GetSystemMetrics
GetActiveWindow
LoadStringA
GetDlgItemTextA
SetDlgItemTextA
GetSysColor
FillRect
IntersectRect
CopyRect
GetClientRect
EnumChildWindows
UpdateWindow
LoadCursorA
RegisterClassA
CreateWindowExA
GetKeyState
InvalidateRect
GetClipboardFormatNameA

advapi32

RegSetValueExA
RegDeleteValueA
RegCreateKeyExA
RegOpenKeyExA
RegOpenKeyA
RegDeleteKeyA
RegQueryValueExA
RegCreateKeyA
RegEnumKeyExA
RegQueryValueA
RegSetValueA
RegEnumKeyA
RegCloseKey

gdi32

LPtoDP
CreateSolidBrush
CreateRectRgnIndirect
DeleteDC
SetMapMode
SetWindowOrgEx
DeleteObject
SetViewportOrgEx
GetDeviceCaps
CreateDCA

oleaut32

VariantClear
VariantInit
SysAllocString
LoadTypeLi
LoadRegTypeLi
SysFreeString
OleCreatePropertyFrame
SetErrorInfo
SysAllocStringLen
RegisterTypeLi
VariantChangeType

urlmon

URLDownloadToCacheFileA
HlinkSimpleNavigateToString
CreateURLMoniker
RegisterBindStatusCallback

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Codecs/14_43260.dll
.dll windows:4 windows x86 arch:x86

10cc1c83f991b066cba98aa471df4e60

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

free
_iob
fprintf
_onexit
_adjust_fdiv
__dllonexit
strrchr
malloc
_CIpow
??3@YAXPAX@Z
_initterm
memmove
sprintf
strchr
atol
??2@YAPAXI@Z
_purecall
calloc

advapi32

RegQueryValueA
RegCreateKeyA
RegSetValueA
RegOpenKeyA
RegEnumKeyA
RegCloseKey

user32

LoadStringA

kernel32

GetModuleFileNameA
LoadLibraryA
FreeLibrary

Exports

Exports

RACloseCodec
RADecode
RAEncode
RAFreeDecoder
RAFreeEncoder
RAGetBackend
RAGetFlavorProperty
RAGetNumberOfFlavors
RAInitDecoder
RAInitEncoder
RAOpenCodec2
RASetFlavor

Sections

.text
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Codecs/28_83260.dll
.dll windows:4 windows x86 arch:x86

3fde72e769c2ba8f88c009f3828dd015

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

atol
_adjust_fdiv
malloc
memmove
_ftol
_purecall
strchr
_initterm
_onexit
__dllonexit
sprintf
free
??2@YAPAXI@Z
strrchr
??3@YAXPAX@Z

advapi32

RegCloseKey
RegEnumKeyA
RegSetValueA
RegCreateKeyA
RegQueryValueA
RegOpenKeyA

user32

LoadStringA

kernel32

GetModuleFileNameA
FreeLibrary
LoadLibraryA

Exports

Exports

RACloseCodec
RADecode
RAEncode
RAFreeDecoder
RAFreeEncoder
RAGetBackend
RAGetFlavorProperty
RAGetNumberOfFlavors
RAInitDecoder
RAInitEncoder
RAOpenCodec2
RASetFlavor

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Codecs/amrn.dll
.dll windows:4 windows x86 arch:x86

50e39fe3221cb763784a4da9ebd4893a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

free
fprintf
_iob
??3@YAXPAX@Z
??2@YAPAXI@Z
malloc
_initterm
_adjust_fdiv
_purecall
memmove

kernel32

DisableThreadLibraryCalls

Exports

Exports

RACreateDecoderInstance

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 120KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Codecs/amrw.dll
.dll windows:4 windows x86 arch:x86

c1299a12e1617b842747ef1f75f2d002

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

free
malloc
??3@YAXPAX@Z
_purecall
memmove
_adjust_fdiv
??2@YAPAXI@Z
_initterm

kernel32

DisableThreadLibraryCalls

Exports

Exports

RACreateDecoderInstance

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 602B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Codecs/atrc.dll
.dll windows:4 windows x86 arch:x86

5132cde9ac8899a69f40dfaacc320c4d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

_ftol
??3@YAXPAX@Z
memmove
calloc
free
malloc
_CIpow
floor
??2@YAPAXI@Z
_assert
_except_handler3
_purecall
_initterm
_adjust_fdiv
__dllonexit
_onexit

Exports

Exports

RACloseCodec
RACreateEncoderInstance
RADecode
RAEncode
RAFlush
RAFreeDecoder
RAFreeEncoder
RAGetBackend
RAGetDecoderBackendGUID
RAGetFlavorProperty
RAGetGUID
RAGetNumberOfFlavors
RAGetNumberOfFlavors2
RAInitDecoder
RAInitEncoder
RAOpenCodec
RAOpenCodec2
RASetComMode
RASetFlavor
_RASetPwd@8

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Codecs/cook.dll
.dll windows:4 windows x86 arch:x86

7186ef18b8145b9efacd73914d40cee0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

free
??3@YAXPAX@Z
memmove
_purecall
_CIpow
malloc
??2@YAPAXI@Z
_ftol
_initterm
_adjust_fdiv

Exports

Exports

RACloseCodec
RACreateEncoderInstance
RADecode
RAEncode
RAFlush
RAFreeDecoder
RAFreeEncoder
RAGetBackend
RAGetDecoderBackendGUID
RAGetFlavorProperty
RAGetGUID
RAGetNumberOfFlavors
RAGetNumberOfFlavors2
RAInitDecoder
RAInitEncoder
RAOpenCodec
RAOpenCodec2
RASetComMode
RASetFlavor
_RASetPwd@8

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Codecs/ddnt3260.dll
.dll windows:4 windows x86 arch:x86

8e95a27a8e4ba9b82ac29a5cadfb4a42

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

free
_initterm
??2@YAPAXI@Z
_ftol
??3@YAXPAX@Z
malloc
_adjust_fdiv

kernel32

DisableThreadLibraryCalls

Exports

Exports

CloseDecoder
GetGUID
OpenDecoder
dbDecode
dbFreeDecoder
dbInitDecoder

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Codecs/dnet3260.dll
.dll windows:4 windows x86 arch:x86

d5e3b5b89b61df3681f5fa4e5fd9e231

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

__dllonexit
_stricmp
_onexit
_initterm
free
strchr
atol
sprintf
??2@YAPAXI@Z
_purecall
malloc
??3@YAXPAX@Z
printf
realloc
_adjust_fdiv
_putenv

advapi32

RegQueryValueA
RegCloseKey
RegOpenKeyA
RegSetValueA
RegCreateKeyA
RegEnumKeyA

user32

LoadStringA
GetSystemMetrics
CharNextA

kernel32

GetProcAddress
FreeLibrary
SetErrorMode
LoadLibraryA

Exports

Exports

RACloseCodec
RADecode
RAEncode
RAFreeDecoder
RAFreeEncoder
RAGetBackend
RAGetDecoderBackendGUID
RAGetFlavorProperty
RAGetGUID
RAGetNumberOfFlavors
RAInitDecoder
RAInitEncoder
RAOpenCodec
RAOpenCodec2
RASetComMode
RASetFlavor
SetDLLAccessPath

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 782B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Codecs/drv1.dll
.dll windows:4 windows x86 arch:x86

232d11e71e9db2c13e39696149eba4f6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

printf
putchar
free
_ftol
_iob
calloc
malloc
_initterm
_adjust_fdiv
fprintf

kernel32

DisableThreadLibraryCalls

Exports

Exports

GetGUID
GetRV10DecParams
RV10toRGB3Alloc
RV10toRGB3Free
RV10toRGB3Init
RV10toRGB3Transform
RV10toYUVPostMove
RV10toYUVPostfilter
RV10toYUVTemporalInterp
RV10toYUVTemporalSetup
RV10toYUVTransform
SetRV10DecParams

Sections

.text
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 829B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Codecs/drv2.dll
.dll windows:4 windows x86 arch:x86

44586b56c5dcc55b19268bed59258786

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

_initterm
_ftol
free
__CxxFrameHandler
malloc
_purecall
??2@YAPAXI@Z
??3@YAXPAX@Z
_adjust_fdiv

kernel32

DisableThreadLibraryCalls
GetSystemInfo

advapi32

RegOpenKeyExA
RegCloseKey

Exports

Exports

GetGUID
RV20toYUV420CustomMessage
RV20toYUV420Free
RV20toYUV420HiveMessage
RV20toYUV420Init
RV20toYUV420Transform
RV20toYUV420_RN_FRU_Free
RV20toYUV420_RN_FRU_GetFrame
RV20toYUV420_RN_FRU_Init
RV20toYUV420_RN_FRU_Setup

Sections

.text
Size: 84KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

IACODE2
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

IACODE1
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

MMXCODE1
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

MMXDATA1
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Codecs/drvc.dll
.dll windows:4 windows x86 arch:x86

84e2a36831124a7e045d9aced4753ff3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

__CxxFrameHandler
_ftol
memmove
_purecall
malloc
free
??3@YAXPAX@Z
_initterm
_adjust_fdiv
_beginthreadex
??2@YAPAXI@Z

kernel32

WaitForMultipleObjects
ResetEvent
LeaveCriticalSection
EnterCriticalSection
GetPrivateProfileIntA
InitializeCriticalSection
DeleteCriticalSection
CloseHandle
WaitForSingleObject
GetSystemInfo
CreateEventA
QueryPerformanceFrequency
CreateThread
QueryPerformanceCounter
SetEvent

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

Exports

Exports

?GetGUID@@YGJPAE@Z
RV40toYUV420CustomMessage
RV40toYUV420Free
RV40toYUV420HiveMessage
RV40toYUV420Init
RV40toYUV420Transform

Sections

.text
Size: 240KB - Virtual size: 237KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Codecs/hxltcolor.dll
.dll windows:4 windows x86 arch:x86

155821e571b36aca7bf31baf9968f972

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

malloc
_initterm
_ftol
free
_adjust_fdiv

kernel32

DisableThreadLibraryCalls

Exports

Exports

Enhance
EnhanceUniform
GetColorAdjustments
GetColorConverter
GetColorConverter2
GetHXColorGUID
GetSharpnessAdjustments
I420andI420toI420
I420andYUVA
InitColorConverter
ScanAllCompatibleColorFormats
ScanCompatibleColorFormats
SetColorAdjustments
SetSharpnessAdjustments
_GetCompatibleColorFormats@12

Sections

.text
Size: 200KB - Virtual size: 197KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 195KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Codecs/qclp.dll
.dll windows:4 windows x86 arch:x86

229049d1f4828b4a6bc45739f6e81418

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

_ftol
free
memmove
floor
_purecall
??2@YAPAXI@Z
_assert
_initterm
malloc
_adjust_fdiv
??3@YAXPAX@Z
calloc

kernel32

DisableThreadLibraryCalls

Exports

Exports

CanUnload
CanUnload2
RACreateDecoderInstance

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Codecs/ra32clv1.dll
.dll windows:4 windows x86 arch:x86

57de0eddd18335303b3f121e01e339f6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadResource
FindResourceA
GetModuleHandleA
FreeLibrary
IsBadReadPtr
LocalAlloc
SizeofResource
LocalFree
IsBadWritePtr
GetProcAddress
LoadLibraryA
lstrcatA
GetSystemDirectoryA
GetPrivateProfileStringA
DisableThreadLibraryCalls
LockResource
GlobalAlloc
GlobalFree
GetVersion

pncrt

_initterm
??2@YAPAXI@Z
free
_ftol
malloc
__CxxFrameHandler
_adjust_fdiv
_purecall
??3@YAXPAX@Z
_stricmp

Exports

Exports

PNCodec_Close
PNCodec_GetMediaFormats
PNCodec_GetUIName
PNCodec_GetVersion
PNCodec_Open
PNCodec_PreferredMediaFormat
PNCodec_QueryMediaFormat
PNCodec_StreamOpen
PNStream_Close
PNStream_GetIPNUnknown
PNStream_GetInputBufferSize
PNStream_GetProperty
PNStream_GetStreamHeader
PNStream_GetStreamHeaderSize
PNStream_Input
PNStream_OpenSettingsBox
PNStream_SetDataCallback
PNStream_SetOutputPacketSize
PNStream_SetProperty

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 460B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 786B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Codecs/raac.dll
.dll windows:4 windows x86 arch:x86

2569b16af6a5e82c06ef6aed87f5e148

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

??2@YAPAXI@Z
memmove
_CxxThrowException
calloc
free
malloc
exp
fputs
printf
pow
??3@YAXPAX@Z
__CxxFrameHandler
strncpy
log10
atan
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
?terminate@@YAXXZ
_iob
log
_purecall
_except_handler3

kernel32

DisableThreadLibraryCalls
IsBadReadPtr

Exports

Exports

RACloseCodec
RACreateDecoderInstance
RACreateEncoderInstance
RADecode
RAFlush
RAFreeDecoder
RAGetBackend
RAGetFlavorProperty
RAGetGUID
RAInitDecoder
RAOpenCodec2
RASetComMode

Sections

.text
Size: 364KB - Virtual size: 363KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text1
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Codecs/ralf.dll
.dll windows:4 windows x86 arch:x86

ca3cf2dadfa161c51320288930144294

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

malloc
free
??3@YAXPAX@Z
??2@YAPAXI@Z
_ftol
_adjust_fdiv
_purecall
_initterm

kernel32

DisableThreadLibraryCalls

Exports

Exports

RACreateDecoderInstance
RACreateEncoderInstance

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Codecs/rv10.dll
.dll windows:4 windows x86 arch:x86

7d0bbca4dd169c4c1a33b2513aa5069d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

rand
tolower
isupper
fprintf
strncpy
_stricmp
strchr
fread
fopen
__dllonexit
_onexit
free
_initterm
malloc
_adjust_fdiv
srand
memmove
fclose
_purecall
_ftol
??2@YAPAXI@Z
??3@YAXPAX@Z
_putenv

kernel32

DisableThreadLibraryCalls
GetProcAddress
FreeLibrary
SetErrorMode
LoadLibraryA
QueryPerformanceFrequency
QueryPerformanceCounter
GetTickCount

Exports

Exports

PNCodec_Close
PNCodec_GetMediaFormats
PNCodec_GetUIName
PNCodec_GetVersion
PNCodec_Input
PNCodec_Open
PNCodec_PreferredMediaFormat
PNCodec_QueryMediaFormat
PNCodec_StreamOpen
PNStream_Close
PNStream_GetIPNUnknown
PNStream_GetInputBufferSize
PNStream_GetProperty
PNStream_GetStreamHeader
PNStream_GetStreamHeaderSize
PNStream_Input
PNStream_OpenSettingsBox
PNStream_PostProcess
PNStream_ReleaseFrame
PNStream_SetDataCallback
PNStream_SetOutputPacketSize
PNStream_SetProperty
SetDLLAccessPath
_PNCodec_GetIPNUnknown@4

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Codecs/rv20.dll
.dll windows:4 windows x86 arch:x86

de93a6d25a8e8a4317757a0f9e71593a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

_stricmp
strchr
memmove
_purecall
_ftol
tolower
isupper
_initterm
_adjust_fdiv
strncpy
malloc
free
_putenv
??2@YAPAXI@Z
??3@YAXPAX@Z
__dllonexit
_onexit

kernel32

GetProcAddress
FreeLibrary
SetErrorMode
LoadLibraryA
DisableThreadLibraryCalls
QueryPerformanceFrequency
QueryPerformanceCounter

Exports

Exports

PNCodec_Close
PNCodec_GetMediaFormats
PNCodec_GetUIName
PNCodec_GetVersion
PNCodec_Input
PNCodec_Open
PNCodec_PreferredMediaFormat
PNCodec_QueryMediaFormat
PNCodec_StreamOpen
PNStream_Close
PNStream_GetIPNUnknown
PNStream_GetInputBufferSize
PNStream_GetProperty
PNStream_GetStreamHeader
PNStream_GetStreamHeaderSize
PNStream_Input
PNStream_OpenSettingsBox
PNStream_PostProcess
PNStream_ReleaseFrame
PNStream_SetDataCallback
PNStream_SetOutputPacketSize
PNStream_SetProperty
SetDLLAccessPath
_PNCodec_GetIPNUnknown@4

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 684B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Codecs/rv30.dll
.dll windows:4 windows x86 arch:x86

a5049b84d47d09c19faafd0e69f94d06

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

tolower
isupper
strncpy
_stricmp
__dllonexit
_onexit
_initterm
_adjust_fdiv
_ftol
memmove
_purecall
malloc
??2@YAPAXI@Z
free
??3@YAXPAX@Z
strchr
_putenv

kernel32

DisableThreadLibraryCalls
GetProcAddress
FreeLibrary
SetErrorMode
LoadLibraryA
QueryPerformanceFrequency
QueryPerformanceCounter
GetSystemInfo

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Exports

Exports

PNCodec_Close
PNCodec_GetMediaFormats
PNCodec_GetUIName
PNCodec_GetVersion
PNCodec_Input
PNCodec_Open
PNCodec_PreferredMediaFormat
PNCodec_QueryMediaFormat
PNCodec_StreamOpen
PNStream_Close
PNStream_GetIPNUnknown
PNStream_GetInputBufferSize
PNStream_GetProperty
PNStream_GetStreamHeader
PNStream_GetStreamHeaderSize
PNStream_Input
PNStream_OpenSettingsBox
PNStream_PostProcess
PNStream_ReleaseFrame
PNStream_SetDataCallback
PNStream_SetOutputPacketSize
PNStream_SetProperty
SetDLLAccessPath
_PNCodec_GetIPNUnknown@4

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 930B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Codecs/rv40.dll
.dll windows:4 windows x86 arch:x86

a5049b84d47d09c19faafd0e69f94d06

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

tolower
isupper
strncpy
_stricmp
__dllonexit
_onexit
_initterm
_adjust_fdiv
_ftol
memmove
_purecall
malloc
??2@YAPAXI@Z
free
??3@YAXPAX@Z
strchr
_putenv

kernel32

DisableThreadLibraryCalls
GetProcAddress
FreeLibrary
SetErrorMode
LoadLibraryA
QueryPerformanceFrequency
QueryPerformanceCounter
GetSystemInfo

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Exports

Exports

PNCodec_Close
PNCodec_GetMediaFormats
PNCodec_GetUIName
PNCodec_GetVersion
PNCodec_Input
PNCodec_Open
PNCodec_PreferredMediaFormat
PNCodec_QueryMediaFormat
PNCodec_StreamOpen
PNStream_Close
PNStream_GetIPNUnknown
PNStream_GetInputBufferSize
PNStream_GetProperty
PNStream_GetStreamHeader
PNStream_GetStreamHeaderSize
PNStream_Input
PNStream_OpenSettingsBox
PNStream_PostProcess
PNStream_ReleaseFrame
PNStream_SetDataCallback
PNStream_SetOutputPacketSize
PNStream_SetProperty
SetDLLAccessPath
_PNCodec_GetIPNUnknown@4

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Codecs/sipr.dll
.dll windows:4 windows x86 arch:x86

ab44f666347fdcd438ddb88f10cba053

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

frexp
??3@YAXPAX@Z
strncpy
_purecall
_ftol
rand
_CIpow
ldexp
??2@YAPAXI@Z
_CIacos
free
_initterm
malloc
_adjust_fdiv
__dllonexit
_onexit

Exports

Exports

RACloseCodec
RACreateEncoderInstance
RADecode
RAEncode
RAFlush
RAFreeDecoder
RAFreeEncoder
RAGetBackend
RAGetDecoderBackendGUID
RAGetFlavorProperty
RAGetGUID
RAGetNumberOfFlavors
RAInitDecoder
RAInitEncoder
RAOpenCodec
RAOpenCodec2
RASetComMode
RASetFlavor
RASetPwd
_RAGetNumberOfFlavors2@4

Sections

.text
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Common/objb3201.dll
.dll windows:4 windows x86 arch:x86

d657692470e8a0a04c3d5339940a1f78

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

_adjust_fdiv
__dllonexit
_initterm
_onexit
_purecall
_findclose
_findnext
_findfirst
sscanf
sprintf
strncpy
strtok
strchr
printf
_beginthreadex
atoi
_endthreadex
_ftol
_ismbcspace
strstr
_ftime
_stat
_itoa
_putenv
_strcmpi
??3@YAXPAX@Z
??2@YAPAXI@Z
rand
memmove
strrchr
_vsnprintf
strncmp
realloc
_stricmp
free
malloc

kernel32

Sleep
SetEvent
DeleteCriticalSection
LeaveCriticalSection
GetVersion
GetSystemInfo
GetProcAddress
GetVersionExA
SetErrorMode
LoadLibraryA
FreeLibrary
InterlockedDecrement
ResetEvent
CreateEventA
GetLastError
GetCurrentThreadId
WaitForSingleObject
GetThreadPriority
CloseHandle
ResumeThread
SuspendThread
SetThreadPriority
DisableThreadLibraryCalls
InitializeCriticalSection
InterlockedIncrement
GetSystemDirectoryA
EnterCriticalSection
GetTickCount

user32

CharNextA
GetSystemMetrics
PeekMessageA
DispatchMessageA
GetMessageA
PostMessageA
PostThreadMessageA
KillTimer
SetTimer
CharLowerA

advapi32

RegOpenKeyExA
RegSetValueExA
RegEnumKeyExA
RegQueryValueExA
RegCloseKey
RegEnumKeyA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyA
RegSetValueA
RegOpenKeyA
RegQueryValueA

Exports

Exports

RNGetRootObjectContext
RNGetRootObjectFactory
RNSetupObjectBroker
RNShutdownObjectBroker
SetDLLAccessPath

Sections

.text
Size: 128KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Common/pnen3260.dll
.dll windows:4 windows x86 arch:x86

410ddc106bb9a7f75f0d6302cecc9aa1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

mktime
_adjust_fdiv
_initterm
_onexit
__dllonexit
sscanf
_access
_chmod
fgets
strtok
_strnicmp
fputs
rename
fopen
fread
fclose
memcpy
memset
time
srand
rand
_vsnprintf
_ftol
getenv
memmove
isspace
strcspn
strspn
isupper
tolower
localtime
_strcmpi
_putenv
_stat
fseek
fwrite
atof
strtod
qsort
isalpha
islower
isxdigit
_timezone
_tzset
_endthreadex
_beginthreadex
??3@YAXPAX@Z
_errno
_fstat
_chsize
strftime
strpbrk
_i64toa
_snprintf
fprintf
strtoul
_assert
calloc
_CIpow
ceil
iscntrl
toupper
_mbctype
strrchr
strtol
isdigit
atol
sprintf
free
realloc
malloc
strncmp
_purecall
strstr
strncpy
_stricmp
atoi
strchr
printf
??2@YAPAXI@Z
__CxxFrameHandler
_findfirst
vfprintf
_findclose
gmtime
strcmp
_write
_read
_unlink
_lseek
_sopen
_tell
_creat
_close
_open
_getcwd
_strlwr
_chdir
_itoa
_except_handler3
_ftime
_findnext

kernel32

GetDiskFreeSpaceA
DeleteFileA
GetLastError
ResetEvent
SetEvent
RemoveDirectoryA
CreateDirectoryA
SuspendThread
WaitForSingleObject
Sleep
ResumeThread
SetThreadPriority
GetThreadPriority
CloseHandle
GetFileSize
CreateFileA
FindClose
FindNextFileA
FindFirstFileA
GetFileAttributesA
GetTempPathA
GetWindowsDirectoryA
SetFileAttributesA
MoveFileA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
DeleteCriticalSection
InitializeCriticalSection
CancelIo
GetCurrentProcessId
EnterCriticalSection
QueryPerformanceCounter
QueryPerformanceFrequency
GetProcAddress
LoadLibraryA
FreeLibrary
GetSystemInfo
GetVersionExA
GetVersion
GetModuleFileNameA
GetTickCount
ExitProcess
lstrlenA
GetDriveTypeA
GetVolumeInformationA
GetLogicalDrives
GetLogicalDriveStringsA
GlobalMemoryStatus
GetModuleHandleA
GetSystemDirectoryA
GetSystemDefaultLCID
GetProfileStringA
WinExec
WaitForMultipleObjects
TerminateThread
CreateThread
LeaveCriticalSection
SetErrorMode
GetTempFileNameA
GetCurrentThreadId
CreateEventA

user32

DdeUninitialize
DdeFreeStringHandle
DdeDisconnect
DdeFreeDataHandle
DdeInitializeA
KillTimer
DdeConnect
DdeCreateStringHandleA
PostThreadMessageA
PostMessageA
GetMessageA
DispatchMessageA
SetTimer
DdeGetData
DdeClientTransaction
PeekMessageA
GetActiveWindow
SetFocus
IsChild
GetForegroundWindow
LoadCursorA
SystemParametersInfoA
GetClassNameA
GetWindowLongA
DefWindowProcA
SendMessageA
UnregisterClassA
RegisterWindowMessageA
GetSystemMetrics
wsprintfA
SendMessageTimeoutA
CharNextA
CharPrevA
TranslateMessage
IsDialogMessageA
PostQuitMessage
DestroyWindow
RegisterClassExA
GetClassInfoA
EnumWindows
SetWindowLongA
RegisterClassA
CreateWindowExA

advapi32

RegEnumKeyExA
RegDeleteKeyA
RegQueryValueA
RegQueryValueExA
RegCreateKeyA
RegOpenKeyExA
RegEnumKeyA
RegOpenKeyA
RegSetValueA
RegCloseKey

ole32

CoCreateGuid
CoCreateInstance
CoUninitialize
CoInitializeEx

oleaut32

SysFreeString
VariantClear
VarBstrCmp
VariantInit
SysAllocString
SysStringLen

winmm

waveOutGetDevCapsA
waveOutReset
waveOutUnprepareHeader
mixerGetNumDevs
mixerGetID
mixerClose
waveOutGetVolume
mixerGetControlDetailsA
waveOutSetVolume
mixerSetControlDetails
waveOutPause
waveOutOpen
waveOutClose
waveOutPrepareHeader
waveOutWrite
waveOutRestart
mixerGetLineInfoA
waveOutGetPosition
mixerGetLineControlsA
mixerOpen

Exports

Exports

?AsyncNotifyProc@CAsyncNetThread@@KGJPAUHWND__@@IIJ@Z
?AsyncNotifyProc@CAsyncSockN@@KGJPAUHWND__@@IIJ@Z
?DdeCallback@@YGPAUHDDEDATA__@@IIPAUHCONV__@@PAUHSZ__@@1PAU1@KK@Z
?WaveOutWndProc@CAudioOutWindows@@SGJPAUHWND__@@IIJ@Z
CloseEngine
CreateEngine
SetDLLAccessPath

Sections

.text
Size: 884KB - Virtual size: 883KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 284KB - Virtual size: 282KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_DATA
Size: 4KB - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Common/pngu3267.dll
.dll windows:4 windows x86 arch:x86

6ccc7492ef8eec7391b07abb2d6b8e27

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

printf
_beginthreadex
_endthreadex
_unlink
_write
_read
_tell
_lseek
_sopen
_open
_creat
_close
_putenv
_itoa
_ftime
??3@YAXPAX@Z
_purecall
memset
floor
_ftol
memcpy
??2@YAPAXI@Z
sqrt
strlen
strcpy
free
malloc
realloc
strncpy
mbstowcs
strcmp
ceil
abs
strncmp
isspace
strcspn
_vsnprintf
_ismbcspace
memmove
sprintf
strstr
_stricmp
atoi
strftime
localtime
time
strchr
strrchr
_mbctype
_getmbcp
_errno
_fstat
_chsize
_lseeki64
_telli64
__dllonexit
_onexit
_initterm
_adjust_fdiv

kernel32

GetTempPathA
GetSystemInfo
CreateFileMappingA
GetTempFileNameA
CreateFileA
GetFileSize
GetLastError
CloseHandle
SetErrorMode
GetModuleFileNameA
GetDiskFreeSpaceA
MapViewOfFile
lstrcpyA
InterlockedDecrement
InterlockedIncrement
Sleep
GetModuleHandleA
DisableThreadLibraryCalls
GetProcAddress
FreeLibrary
GetCurrentThreadId
GetVersionExA
LocalAlloc
LocalFree
UnmapViewOfFile
GetVersion
LoadLibraryA
GetTickCount
CreateEventA
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection
GetThreadPriority
SetThreadPriority
WaitForSingleObject
SuspendThread
ResumeThread
ResetEvent
SetEvent

user32

PeekMessageA
IsDialogMessageA
ValidateRect
InvalidateRect
UpdateWindow
ClientToScreen
GetMenu
AdjustWindowRect
GetClientRect
IsIconic
GetWindowPlacement
CreateWindowExA
IsWindow
DestroyWindow
GetParent
IsWindowVisible
EnableWindow
PostQuitMessage
SetScrollRange
GetScrollRange
UnhookWindowsHookEx
SetWindowsHookExA
GetDC
ReleaseDC
LoadBitmapA
GetSysColor
GetMenuItemRect
GetSystemMetrics
SetMenu
SendMessageA
SetWindowLongA
GetWindowLongA
LoadCursorA
UnregisterClassA
DefWindowProcA
LoadIconA
RegisterClassA
SetCursorPos
MessageBeep
OffsetRect
IntersectRect
DrawFrameControl
ChildWindowFromPointEx
DispatchMessageA
TranslateMessage
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
GetCursorPos
GetCursor
GetIconInfo
KillTimer
SetTimer
SetWindowsHookA
MessageBoxA
UnhookWindowsHook
EndPaint
BeginPaint
EndDialog
DialogBoxIndirectParamA
CreateDialogIndirectParamA
GetWindowDC
FillRect
DrawFocusRect
DrawTextA
DrawIconEx
DrawIcon
keybd_event
GetMenuItemInfoA
SetMenuItemInfoA
TrackPopupMenu
TrackPopupMenuEx
CreatePopupMenu
CreateMenu
RemoveMenu
GetMenuStringA
DrawMenuBar
InsertMenuA
SetWindowTextA
CheckMenuItem
GetMenuItemID
GetMenuItemCount
GetMenuState
EnableMenuItem
DestroyMenu
RemovePropA
GetPropA
SetPropA
GetScrollInfo
SetScrollInfo
SetScrollPos
GetScrollPos
IsWindowEnabled
GetActiveWindow
InsertMenuItemA
CharNextA
PtInRect
SetForegroundWindow
SetFocus
SetWindowPlacement
GetForegroundWindow
GetWindowThreadProcessId
AttachThreadInput
IsZoomed
SetParent
ScrollWindowEx
GetFocus
GetDlgItem
GetClassLongA
SetCursor
GetClassNameA
GetSubMenu
PostMessageA
CallWindowProcA
GetWindowTextLengthA
GetWindowTextA
SetWindowPos
CallNextHookEx
ShowWindow
GetWindow
SetActiveWindow
ScreenToClient
BringWindowToTop
MapWindowPoints
GetUpdateRect
ReleaseCapture
SetCapture
SystemParametersInfoA
RedrawWindow
GetWindowRect
CheckMenuRadioItem
ModifyMenuA
PostThreadMessageA
GetMessageA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegDeleteKeyA
RegOpenKeyA
RegEnumKeyExA
RegQueryValueA
RegSetValueA
RegCreateKeyA
RegDeleteValueA
RegEnumKeyA
RegSetValueExA

gdi32

Ellipse
GetBkMode
GetROP2
GetTextColor
GetClipRgn
GetCurrentObject
SetWindowExtEx
SetViewportExtEx
IntersectClipRect
CreateRectRgn
StretchBlt
CreateBitmap
GetTextMetricsA
SetMapMode
GetBkColor
ExtFloodFill
FillRgn
GetTextExtentPoint32A
ExtCreateRegion
SetViewportOrgEx
RoundRect
Rectangle
Polygon
SetPolyFillMode
LineTo
Polyline
MoveToEx
Pie
Arc
SelectClipRgn
SetTextColor
SetBkColor
SetROP2
SetBkMode
CreateRectRgnIndirect
CreatePen
ExtCreatePen
GetDeviceCaps
TextOutA
GetDCOrgEx
GetTextFaceA
CreateFontIndirectA
GetBitmapBits
StretchDIBits
GetRgnBox
CombineRgn
OffsetRgn
PtInRegion
CreatePolygonRgn
EqualRgn
DeleteObject
CreateHatchBrush
CreateSolidBrush
GetClipBox
GetRegionData
GetStockObject
DeleteDC
BitBlt
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCA
CreateDIBSection
GetObjectA
CreateDIBitmap
SetPixel
GetPixel
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
CreateFontA

comctl32

ord17
PropertySheetA
CreatePropertySheetPageA

comdlg32

GetSaveFileNameA
GetOpenFileNameA

shell32

SHGetPathFromIDListA
SHGetMalloc
SHBrowseForFolderA

oleaut32

SysAllocString

Exports

Exports

??0CPNAccessibility@@QAE@ABV0@@Z
??0CPNAccessibility@@QAE@XZ
??0CPNAnimButton@@QAE@ABV0@@Z
??0CPNAnimButton@@QAE@XZ
??0CPNAnimateCtl@@QAE@ABV0@@Z
??0CPNAnimateCtl@@QAE@XZ
??0CPNArrowButton@@QAE@ABV0@@Z
??0CPNArrowButton@@QAE@XZ
??0CPNBitmapDC@@QAE@AAVCPNBitmapImage@@@Z
??0CPNBitmapDC@@QAE@ABV0@@Z
??0CPNBitmapImage@@QAE@AAUtagPN_BITMAPINFO@@@Z
??0CPNBitmapImage@@QAE@ABV0@@Z
??0CPNBitmapImage@@QAE@XZ
??0CPNBrowseDialog@@QAE@ABV0@@Z
??0CPNBrowseDialog@@QAE@PAVCPNWindow@@@Z
??0CPNBrowseDialog@@QAE@XZ
??0CPNBrush@@QAE@AAVCPNColor@@J@Z
??0CPNBrush@@QAE@ABV0@@Z
??0CPNBrush@@QAE@XZ
??0CPNBtnObserver@@QAE@ABV0@@Z
??0CPNBtnObserver@@QAE@PAVXPNButton@@@Z
??0CPNButton@@QAE@ABV0@@Z
??0CPNButton@@QAE@XZ
??0CPNCheckButton@@QAE@ABV0@@Z
??0CPNCheckButton@@QAE@XZ
??0CPNCheckedListbox@@QAE@ABV0@@Z
??0CPNCheckedListbox@@QAE@XZ
??0CPNClientDC@@QAE@ABV0@@Z
??0CPNClientDC@@QAE@PAVCPNWindow@@@Z
??0CPNColor@@QAE@AAK@Z
??0CPNColor@@QAE@ABV0@@Z
??0CPNColor@@QAE@EEE@Z
??0CPNColor@@QAE@H@Z
??0CPNColor@@QAE@XZ
??0CPNColorMap@@QAE@ABV0@@Z
??0CPNColorMap@@QAE@HPBE00@Z
??0CPNColorMap@@QAE@XZ
??0CPNColorSelection@@QAE@ABV0@@Z
??0CPNColorSelection@@QAE@XZ
??0CPNConstraintLayoutMgr@@QAE@ABV0@@Z
??0CPNConstraintLayoutMgr@@QAE@PAUIUnknown@@@Z
??0CPNConstraintLayoutMgr@@QAE@PAUIUnknown@@ABU_PNxRect@@@Z
??0CPNControl@@QAE@ABV0@@Z
??0CPNControl@@QAE@XZ
??0CPNCursor@@QAE@ABV0@@Z
??0CPNCursor@@QAE@XZ
??0CPNCustomFrame@@QAE@ABV0@@Z
??0CPNCustomFrame@@QAE@PAVCPNWindow@@PAVCPNImage@@1@Z
??0CPNCustomMenu@@QAE@ABV0@@Z
??0CPNCustomMenu@@QAE@XZ
??0CPNCustomText@@QAE@ABV0@@Z
??0CPNCustomText@@QAE@XZ
??0CPNDC@@QAE@AAPAX@Z
??0CPNDC@@QAE@ABV0@@Z
??0CPNDC@@QAE@PAUHDC__@@@Z
??0CPNDC@@QAE@XZ
??0CPNDialog@@QAE@ABV0@@Z
??0CPNDialog@@QAE@KPAVCPNWindow@@@Z
??0CPNDialog@@QAE@XZ
??0CPNDrawHelper@@QAE@ABV0@@Z
??0CPNDrawHelper@@QAE@XZ
??0CPNEdit@@QAE@ABV0@@Z
??0CPNEdit@@QAE@XZ
??0CPNEvent@@QAE@ABV0@@Z
??0CPNEvent@@QAE@KKPAVCPNRouter@@KKKK@Z
??0CPNFont@@QAE@ABQAX@Z
??0CPNFont@@QAE@ABV0@@Z
??0CPNFont@@QAE@HHHHPBDH@Z
??0CPNFont@@QAE@XZ
??0CPNFrame@@QAE@ABV0@@Z
??0CPNFrame@@QAE@XZ
??0CPNGifImage@@QAE@ABV0@@Z
??0CPNGifImage@@QAE@XZ
??0CPNGraphicResource@@QAE@ABV0@@Z
??0CPNGraphicResource@@QAE@XZ
??0CPNGroupBox@@QAE@ABV0@@Z
??0CPNGroupBox@@QAE@XZ
??0CPNIcon@@QAE@ABV0@@Z
??0CPNIcon@@QAE@XZ
??0CPNImage@@QAE@ABV0@@Z
??0CPNImage@@QAE@XZ
??0CPNImageBorder@@QAE@ABV0@@Z
??0CPNImageBorder@@QAE@XZ
??0CPNImageButton@@QAE@ABV0@@Z
??0CPNImageButton@@QAE@XZ
??0CPNImageControl@@QAE@ABV0@@Z
??0CPNImageControl@@QAE@XZ
??0CPNImageSlider@@QAE@ABV0@@Z
??0CPNImageSlider@@QAE@XZ
??0CPNListBox@@QAE@ABV0@@Z
??0CPNListBox@@QAE@XZ
??0CPNMapPtrToPtr@@QAE@ABV0@@Z
??0CPNMemoryDC@@QAE@ABV0@@Z
??0CPNMemoryDC@@QAE@PAVCPNDC@@AAVCPNxRect@@@Z
??0CPNMenu@@QAE@ABV0@@Z
??0CPNMenu@@QAE@K@Z
??0CPNMenu@@QAE@XZ
??0CPNMenuButton@@QAE@ABV0@@Z
??0CPNMenuButton@@QAE@XZ
??0CPNMessageBox@@QAE@ABV0@@Z
??0CPNMessageBox@@QAE@XZ
??0CPNMultipleWindowUpdate@@QAE@ABV0@@Z
??0CPNMultipleWindowUpdate@@QAE@XZ
??0CPNObject@@QAE@ABV0@@Z
??0CPNObject@@QAE@XZ
??0CPNOpenFileDialog@@QAE@ABV0@@Z
??0CPNOpenFileDialog@@QAE@PAVCPNWindow@@@Z
??0CPNOpenFileDialog@@QAE@XZ
??0CPNPaintDC@@QAE@ABU_PNxWindow@@@Z
??0CPNPaintDC@@QAE@ABV0@@Z
??0CPNPaintDC@@QAE@PAVCPNWindow@@@Z
??0CPNPen@@QAE@AAVCPNColor@@JJ@Z
??0CPNPen@@QAE@ABV0@@Z
??0CPNPen@@QAE@XZ
??0CPNPopupList@@QAE@ABV0@@Z
??0CPNPopupList@@QAE@XZ
??0CPNProgress@@QAE@ABV0@@Z
??0CPNProgress@@QAE@XZ
??0CPNPropertyPage@@IAE@KPBD@Z
??0CPNPropertyPage@@IAE@XZ
??0CPNPropertyPage@@QAE@ABV0@@Z
??0CPNPropertySheet@@QAE@ABV0@@Z
??0CPNPropertySheet@@QAE@K@Z
??0CPNPropertySheet@@QAE@XZ
??0CPNRadioBtn@@QAE@ABV0@@Z
??0CPNRadioBtn@@QAE@XZ
??0CPNRadioGroup@@QAE@ABV0@@Z
??0CPNRadioGroup@@QAE@XZ
??0CPNRegion@@QAE@ABV0@@Z
??0CPNRegion@@QAE@XZ
??0CPNRouter@@QAE@ABV0@@Z
??0CPNRouter@@QAE@XZ
??0CPNScreenDC@@QAE@ABV0@@Z
??0CPNScreenDC@@QAE@XZ
??0CPNScrollBar@@QAE@ABV0@@Z
??0CPNScrollBar@@QAE@XZ
??0CPNScrollButton@@QAE@ABV0@@Z
??0CPNScrollButton@@QAE@XZ
??0CPNScrollHelper@@QAE@ABV0@@Z
??0CPNScrollHelper@@QAE@PAVXPNButton@@K@Z
??0CPNScrollingText@@QAE@ABV0@@Z
??0CPNScrollingText@@QAE@XZ
??0CPNSlider@@QAE@ABV0@@Z
??0CPNSlider@@QAE@XZ
??0CPNSystemInfo@@QAE@ABV0@@Z
??0CPNSystemInfo@@QAE@XZ
??0CPNText@@QAE@ABV0@@Z
??0CPNText@@QAE@XZ
??0CPNTextWithLink@@QAE@ABV0@@Z
??0CPNTextWithLink@@QAE@XZ
??0CPNTimer@@QAE@ABV0@@Z
??0CPNTimer@@QAE@KHPAPAV0@@Z
??0CPNTimer@@QAE@XZ
??0CPNTipManager@@QAE@ABV0@@Z
??0CPNTipManager@@QAE@PAVCPNWindow@@@Z
??0CPNToolTip@@QAE@ABV0@@Z
??0CPNToolTip@@QAE@XZ
??0CPNTreeControl@@QAE@ABV0@@Z
??0CPNTreeControl@@QAE@XZ
??0CPNWindow@@QAE@ABV0@@Z
??0CPNWindow@@QAE@XZ
??0CPNWindowDC@@QAE@ABV0@@Z
??0CPNWindowDC@@QAE@PAVCPNWindow@@@Z
??0CPNxPoint@@QAE@ABU_PNxPoint@@@Z
??0CPNxPoint@@QAE@ABVCPNxSize@@@Z
??0CPNxPoint@@QAE@JJ@Z
??0CPNxPoint@@QAE@XZ
??0CPNxRect@@QAE@ABU_PNxRect@@@Z
??0CPNxRect@@QAE@ABVCPNxPoint@@ABVCPNxSize@@@Z
??0CPNxRect@@QAE@JJJJ@Z
??0CPNxRect@@QAE@XZ
??0CPNxSize@@QAE@ABU_PNxSize@@@Z
??0CPNxSize@@QAE@ABVCPNxPoint@@@Z
??0CPNxSize@@QAE@JJ@Z
??0CPNxSize@@QAE@XZ
??0XPNAnimButton@@IAE@XZ
??0XPNAnimButton@@QAE@ABV0@@Z
??0XPNAnimateCtl@@IAE@XZ
??0XPNAnimateCtl@@QAE@ABV0@@Z
??0XPNArrowButton@@IAE@XZ
??0XPNArrowButton@@QAE@ABV0@@Z
??0XPNBitmapDC@@QAE@AAVCPNBitmapImage@@@Z
??0XPNBitmapDC@@QAE@ABV0@@Z
??0XPNBitmapImage@@IAE@AAUtagPN_BITMAPINFO@@@Z
??0XPNBitmapImage@@IAE@XZ
??0XPNBitmapImage@@QAE@ABV0@@Z
??0XPNBrowseDialog@@QAE@ABV0@@Z
??0XPNBrowseDialog@@QAE@PAVCPNWindow@@@Z
??0XPNBrowseDialog@@QAE@XZ
??0XPNBrush@@IAE@AAVCPNColor@@J@Z
??0XPNBrush@@IAE@XZ
??0XPNBrush@@QAE@ABV0@@Z
??0XPNButton@@QAE@ABV0@@Z
??0XPNButton@@QAE@XZ
??0XPNCheckButton@@QAE@ABV0@@Z
??0XPNCheckButton@@QAE@XZ
??0XPNClientDC@@QAE@ABV0@@Z
??0XPNClientDC@@QAE@XZ
??0XPNColorSelection@@QAE@ABV0@@Z
??0XPNColorSelection@@QAE@XZ
??0XPNControl@@QAE@ABV0@@Z
??0XPNControl@@QAE@XZ
??0XPNCursor@@QAE@ABV0@@Z
??0XPNCursor@@QAE@XZ
??0XPNCustomButton@@QAE@ABV0@@Z
??0XPNCustomButton@@QAE@XZ
??0XPNCustomText@@QAE@ABV0@@Z
??0XPNCustomText@@QAE@XZ
??0XPNDC@@AAE@AAPAX@Z
??0XPNDC@@QAE@ABV0@@Z
??0XPNDC@@QAE@XZ
??0XPNDialog@@QAE@ABV0@@Z
??0XPNDialog@@QAE@KPAVCPNWindow@@@Z
??0XPNDialog@@QAE@XZ
??0XPNEdit@@IAE@XZ
??0XPNEdit@@QAE@ABV0@@Z
??0XPNFont@@IAE@HHHHPBDH@Z
??0XPNFont@@IAE@XZ
??0XPNFont@@QAE@ABV0@@Z
??0XPNFrame@@QAE@ABV0@@Z
??0XPNFrame@@QAE@XZ
??0XPNGifImage@@IAE@XZ
??0XPNGifImage@@QAE@ABV0@@Z
??0XPNGroupBox@@QAE@ABV0@@Z
??0XPNGroupBox@@QAE@XZ
??0XPNIcon@@QAE@ABV0@@Z
??0XPNIcon@@QAE@XZ
??0XPNImage@@QAE@ABV0@@Z
??0XPNImage@@QAE@XZ
??0XPNImageButton@@IAE@XZ
??0XPNImageButton@@QAE@ABV0@@Z
??0XPNImageSlider@@QAE@ABV0@@Z
??0XPNImageSlider@@QAE@XZ
??0XPNListBox@@IAE@XZ
??0XPNListBox@@QAE@ABV0@@Z
??0XPNMemDC@@QAE@ABV0@@Z
??0XPNMemDC@@QAE@XZ
??0XPNMenu@@QAE@ABV0@@Z
??0XPNMenu@@QAE@K@Z
??0XPNMenu@@QAE@XZ
??0XPNMenuButton@@IAE@XZ
??0XPNMenuButton@@QAE@ABV0@@Z
??0XPNMessageBox@@IAE@XZ
??0XPNMessageBox@@QAE@ABV0@@Z
??0XPNMultipleWindowUpdate@@QAE@ABV0@@Z
??0XPNMultipleWindowUpdate@@QAE@XZ
??0XPNOpenFileDialog@@QAE@ABV0@@Z
??0XPNOpenFileDialog@@QAE@PAVCPNWindow@@@Z
??0XPNOpenFileDialog@@QAE@XZ
??0XPNPaintDC@@QAE@ABU_PNxWindow@@@Z
??0XPNPaintDC@@QAE@ABV0@@Z
??0XPNPaintDC@@QAE@PAVCPNWindow@@@Z
??0XPNPen@@QAE@AAVCPNColor@@JJ@Z
??0XPNPen@@QAE@ABV0@@Z
??0XPNPen@@QAE@XZ
??0XPNPopupList@@IAE@XZ
??0XPNPopupList@@QAE@ABV0@@Z
??0XPNProgress@@IAE@XZ
??0XPNProgress@@QAE@ABV0@@Z
??0XPNPropertyPage@@IAE@KPBD@Z
??0XPNPropertyPage@@IAE@XZ
??0XPNPropertyPage@@QAE@ABV0@@Z
??0XPNPropertySheet@@IAE@K@Z
??0XPNPropertySheet@@QAE@ABV0@@Z
??0XPNRegion@@QAE@ABV0@@Z
??0XPNRegion@@QAE@XZ
??0XPNScreenDC@@QAE@ABV0@@Z
??0XPNScreenDC@@QAE@XZ
??0XPNScrollBar@@QAE@ABV0@@Z
??0XPNScrollBar@@QAE@XZ
??0XPNScrollButton@@IAE@XZ
??0XPNScrollButton@@QAE@ABV0@@Z
??0XPNScrollingText@@IAE@XZ
??0XPNScrollingText@@QAE@ABV0@@Z
??0XPNSlider@@QAE@ABV0@@Z
??0XPNSlider@@QAE@XZ
??0XPNTabControl@@QAE@ABV0@@Z
??0XPNTabControl@@QAE@XZ
??0XPNText@@QAE@ABV0@@Z
??0XPNText@@QAE@XZ
??0XPNTextWithLink@@QAE@ABV0@@Z
??0XPNTextWithLink@@QAE@XZ
??0XPNTimer@@IAE@KHPAPAV0@@Z
??0XPNTimer@@IAE@XZ
??0XPNTimer@@QAE@ABV0@@Z
??0XPNTipManager@@IAE@PAVCPNWindow@@@Z
??0XPNTipManager@@QAE@ABV0@@Z
??0XPNToolTip@@IAE@XZ
??0XPNToolTip@@QAE@ABV0@@Z
??0XPNTreeControl@@IAE@XZ
??0XPNTreeControl@@QAE@ABV0@@Z
??0XPNWindow@@QAE@ABV0@@Z
??0XPNWindow@@QAE@XZ
??0XPNWindowDC@@QAE@ABV0@@Z
??0XPNWindowDC@@QAE@XZ
??0XPNWizardManager@@IAE@PAVCPNWindow@@KK@Z
??0XPNWizardManager@@IAE@PAVCPNWindow@@PBDK@Z
??0XPNWizardManager@@IAE@XZ
??0XPNWizardManager@@QAE@ABV0@@Z
??0XPNWizardPage@@IAE@KPBD@Z
??0XPNWizardPage@@IAE@XZ
??0XPNWizardPage@@QAE@ABV0@@Z
??0xPNRadioBtn@@QAE@ABV0@@Z
??0xPNRadioBtn@@QAE@XZ
??1CPNAccessibility@@UAE@XZ
??1CPNAnimButton@@UAE@XZ
??1CPNAnimateCtl@@UAE@XZ
??1CPNArrowButton@@UAE@XZ
??1CPNBitmapDC@@UAE@XZ
??1CPNBitmapImage@@UAE@XZ
??1CPNBrowseDialog@@UAE@XZ
??1CPNBrush@@UAE@XZ
??1CPNBtnObserver@@UAE@XZ
??1CPNButton@@UAE@XZ
??1CPNCheckButton@@UAE@XZ
??1CPNCheckedListbox@@UAE@XZ
??1CPNClientDC@@UAE@XZ
??1CPNColor@@UAE@XZ
??1CPNColorMap@@UAE@XZ
??1CPNColorSelection@@UAE@XZ
??1CPNConstraintLayoutMgr@@QAE@XZ
??1CPNControl@@UAE@XZ
??1CPNCursor@@UAE@XZ
??1CPNCustomFrame@@UAE@XZ
??1CPNCustomMenu@@UAE@XZ
??1CPNCustomText@@UAE@XZ
??1CPNDC@@UAE@XZ
??1CPNDialog@@UAE@XZ
??1CPNDrawHelper@@UAE@XZ
??1CPNEdit@@UAE@XZ
??1CPNEvent@@UAE@XZ
??1CPNFont@@UAE@XZ
??1CPNFrame@@UAE@XZ
??1CPNGifImage@@UAE@XZ
??1CPNGraphicResource@@UAE@XZ
??1CPNGroupBox@@UAE@XZ
??1CPNIcon@@UAE@XZ
??1CPNImage@@UAE@XZ
??1CPNImageBorder@@UAE@XZ
??1CPNImageButton@@UAE@XZ
??1CPNImageControl@@UAE@XZ
??1CPNImageSlider@@UAE@XZ
??1CPNListBox@@UAE@XZ
??1CPNMemoryDC@@UAE@XZ
??1CPNMenu@@UAE@XZ
??1CPNMenuButton@@UAE@XZ
??1CPNMessageBox@@UAE@XZ
??1CPNMultipleWindowUpdate@@UAE@XZ
??1CPNObject@@UAE@XZ
??1CPNOpenFileDialog@@UAE@XZ
??1CPNPaintDC@@UAE@XZ
??1CPNPen@@UAE@XZ
??1CPNPopupList@@UAE@XZ
??1CPNProgress@@UAE@XZ
??1CPNPropertyPage@@UAE@XZ
??1CPNPropertySheet@@UAE@XZ
??1CPNRadioBtn@@UAE@XZ
??1CPNRadioGroup@@UAE@XZ
??1CPNRegion@@UAE@XZ
??1CPNRouter@@UAE@XZ
??1CPNScreenDC@@UAE@XZ
??1CPNScrollBar@@UAE@XZ
??1CPNScrollButton@@UAE@XZ
??1CPNScrollHelper@@UAE@XZ
??1CPNScrollingText@@UAE@XZ
??1CPNSlider@@UAE@XZ
??1CPNSystemInfo@@UAE@XZ
??1CPNText@@UAE@XZ
??1CPNTextWithLink@@UAE@XZ
??1CPNTimer@@MAE@XZ
??1CPNTipManager@@UAE@XZ
??1CPNToolTip@@UAE@XZ
??1CPNTreeControl@@UAE@XZ
??1CPNWindow@@UAE@XZ
??1CPNWindowDC@@UAE@XZ
??1XPNAnimButton@@MAE@XZ
??1XPNAnimateCtl@@MAE@XZ
??1XPNArrowButton@@MAE@XZ
??1XPNBitmapDC@@UAE@XZ
??1XPNBitmapImage@@MAE@XZ
??1XPNBrowseDialog@@UAE@XZ
??1XPNBrush@@MAE@XZ
??1XPNButton@@UAE@XZ
??1XPNCheckButton@@UAE@XZ
??1XPNClientDC@@UAE@XZ
??1XPNColorSelection@@UAE@XZ
??1XPNControl@@UAE@XZ
??1XPNCursor@@UAE@XZ
??1XPNCustomButton@@UAE@XZ
??1XPNCustomText@@UAE@XZ
??1XPNDC@@UAE@XZ
??1XPNDialog@@UAE@XZ
??1XPNEdit@@MAE@XZ
??1XPNFont@@MAE@XZ
??1XPNFrame@@UAE@XZ
??1XPNGifImage@@MAE@XZ
??1XPNGroupBox@@UAE@XZ
??1XPNIcon@@UAE@XZ
??1XPNImage@@UAE@XZ
??1XPNImageButton@@MAE@XZ
??1XPNImageSlider@@UAE@XZ
??1XPNListBox@@MAE@XZ
??1XPNMemDC@@UAE@XZ
??1XPNMenu@@UAE@XZ
??1XPNMenuButton@@MAE@XZ
??1XPNMessageBox@@MAE@XZ
??1XPNMultipleWindowUpdate@@UAE@XZ
??1XPNOpenFileDialog@@UAE@XZ
??1XPNPaintDC@@UAE@XZ
??1XPNPen@@UAE@XZ
??1XPNPopupList@@MAE@XZ
??1XPNProgress@@MAE@XZ
??1XPNPropertyPage@@UAE@XZ
??1XPNPropertySheet@@UAE@XZ
??1XPNRegion@@UAE@XZ
??1XPNScreenDC@@UAE@XZ
??1XPNScrollBar@@UAE@XZ
??1XPNScrollButton@@MAE@XZ
??1XPNScrollingText@@MAE@XZ
??1XPNSlider@@UAE@XZ
??1XPNTabControl@@UAE@XZ
??1XPNText@@UAE@XZ
??1XPNTextWithLink@@UAE@XZ
??1XPNTimer@@MAE@XZ
??1XPNTipManager@@UAE@XZ
??1XPNToolTip@@MAE@XZ
??1XPNTreeControl@@MAE@XZ
??1XPNWindow@@UAE@XZ
??1XPNWindowDC@@UAE@XZ
??1XPNWizardManager@@MAE@XZ
??1XPNWizardPage@@MAE@XZ
??1xPNRadioBtn@@UAE@XZ
??4CPNAccessibility@@QAEAAV0@ABV0@@Z
??4CPNAnimButton@@QAEAAV0@ABV0@@Z
??4CPNAnimateCtl@@QAEAAV0@ABV0@@Z
??4CPNArrowButton@@QAEAAV0@ABV0@@Z
??4CPNBitmapImage@@QAEAAV0@ABV0@@Z
??4CPNBrowseDialog@@QAEAAV0@ABV0@@Z
??4CPNBrush@@QAEAAV0@ABV0@@Z
??4CPNBtnObserver@@QAEAAV0@ABV0@@Z
??4CPNButton@@QAEAAV0@ABV0@@Z
??4CPNCheckButton@@QAEAAV0@ABV0@@Z
??4CPNCheckedListbox@@QAEAAV0@ABV0@@Z
??4CPNClientDC@@QAEAAV0@AAV0@@Z
??4CPNColor@@QAEAAV0@ABV0@@Z
??4CPNColorMap@@QAEAAV0@ABV0@@Z
??4CPNColorSelection@@QAEAAV0@ABV0@@Z
??4CPNConstraintLayoutMgr@@QAEAAV0@ABV0@@Z
??4CPNControl@@QAEAAV0@ABV0@@Z
??4CPNCursor@@QAEAAV0@ABV0@@Z
??4CPNCustomFrame@@QAEAAV0@ABV0@@Z
??4CPNCustomMenu@@QAEAAV0@ABV0@@Z
??4CPNCustomText@@QAEAAV0@ABV0@@Z
??4CPNDC@@QAEAAV0@AAV0@@Z
??4CPNDialog@@QAEAAV0@ABV0@@Z
??4CPNDrawHelper@@QAEAAV0@ABV0@@Z
??4CPNEdit@@QAEAAV0@ABV0@@Z
??4CPNEvent@@QAEAAV0@ABV0@@Z
??4CPNFont@@UAEABV0@ABV0@@Z
??4CPNFrame@@QAEAAV0@ABV0@@Z
??4CPNGifImage@@QAEAAV0@ABV0@@Z
??4CPNGraphicResource@@QAEAAV0@ABV0@@Z
??4CPNGroupBox@@QAEAAV0@ABV0@@Z
??4CPNIcon@@QAEAAV0@ABV0@@Z
??4CPNImage@@QAEAAV0@ABV0@@Z
??4CPNImageBorder@@QAEAAV0@ABV0@@Z
??4CPNImageButton@@QAEAAV0@ABV0@@Z
??4CPNImageControl@@QAEAAV0@ABV0@@Z
??4CPNImageSlider@@QAEAAV0@AAV0@@Z
??4CPNListBox@@QAEAAV0@ABV0@@Z
??4CPNMapLongToObj@@QAEAAV0@ABV0@@Z
??4CPNMapPtrToPtr@@QAEAAV0@ABV0@@Z
??4CPNMemoryDC@@QAEAAV0@AAV0@@Z
??4CPNMenu@@QAEAAV0@ABV0@@Z
??4CPNMenuButton@@QAEAAV0@ABV0@@Z
??4CPNMessageBox@@QAEAAV0@ABV0@@Z
??4CPNMultipleWindowUpdate@@QAEAAV0@ABV0@@Z
??4CPNObject@@QAEAAV0@ABV0@@Z
??4CPNOpenFileDialog@@QAEAAV0@ABV0@@Z
??4CPNPaintDC@@QAEAAV0@AAV0@@Z
??4CPNPen@@QAEAAV0@ABV0@@Z
??4CPNPopupList@@QAEAAV0@ABV0@@Z
??4CPNProgress@@QAEAAV0@ABV0@@Z
??4CPNPropertyPage@@QAEAAV0@ABV0@@Z
??4CPNPropertySheet@@QAEAAV0@ABV0@@Z
??4CPNPtrArray@@QAEAAV0@ABV0@@Z
??4CPNRadioBtn@@QAEAAV0@ABV0@@Z
??4CPNRadioGroup@@QAEAAV0@ABV0@@Z
??4CPNRegion@@QAEAAV0@AAV0@@Z
??4CPNRouter@@QAEAAV0@ABV0@@Z
??4CPNScreenDC@@QAEAAV0@AAV0@@Z
??4CPNScrollBar@@QAEAAV0@ABV0@@Z
??4CPNScrollButton@@QAEAAV0@ABV0@@Z
??4CPNScrollHelper@@QAEAAV0@ABV0@@Z
??4CPNScrollingText@@QAEAAV0@ABV0@@Z
??4CPNSlider@@QAEAAV0@AAV0@@Z
??4CPNString@@QAEABV0@PBE@Z
??4CPNSystemInfo@@QAEAAV0@ABV0@@Z
??4CPNText@@QAEAAV0@ABV0@@Z
??4CPNTextWithLink@@QAEAAV0@ABV0@@Z

Sections

.text
Size: 220KB - Virtual size: 216KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Common/pnrs3260.dll
.dll windows:4 windows x86 arch:x86

b45d5310f48a5575469b996418824522

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

malloc
free
_initterm
_adjust_fdiv
__dllonexit
_onexit
??2@YAPAXI@Z
_purecall
??3@YAXPAX@Z

kernel32

FindResourceA
LockResource
DisableThreadLibraryCalls
InterlockedDecrement
InterlockedIncrement
LoadResource

user32

AppendMenuA
GetMenuStringA
LoadMenuIndirectA
GetMenuState
GetMenuItemID
GetMenuItemCount
CreatePopupMenu
LoadIconA
LoadBitmapA
LoadStringA
LoadImageA
LoadCursorA

Exports

Exports

PNCreateInstance

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 484B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/3gppttrenderer.dll
.dll windows:4 windows x86 arch:x86

744552968d0ea2503d8ec4c1d760857a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

_onexit
__dllonexit
??3@YAXPAX@Z
_adjust_fdiv
malloc
_stricmp
??2@YAPAXI@Z
sprintf
_initterm
free
strncmp
_purecall
_ftol

kernel32

MultiByteToWideChar
WideCharToMultiByte

user32

GetCursor
DrawTextA
SetCursor
LoadCursorA

gdi32

SetMapMode
CreateDIBSection
SetBkColor
SetBkMode
CreateCompatibleDC
CreateFontA
SetTextColor
DeleteObject
SelectObject
DeleteDC

Exports

Exports

CanUnload
RMACreateInstance

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 774B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/ExtResources/coreres.xrs
.dll windows:4 windows x86 arch:x86

f6f413da72842076a2a220c30a274ea6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

_adjust_fdiv
free
malloc
_initterm

kernel32

DisableThreadLibraryCalls

Sections

.text
Size: 4KB - Virtual size: 448B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 202B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/aacff.dll
.dll windows:4 windows x86 arch:x86

d074d66bafa103fd85ca2f952fdeefbf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

sprintf
tolower
isupper
strncpy
_stricmp
strchr
??2@YAPAXI@Z
??3@YAXPAX@Z
malloc
free
_purecall
_onexit
_initterm
_adjust_fdiv
__dllonexit
_putenv
_ftol
realloc

kernel32

DisableThreadLibraryCalls

Exports

Exports

CanUnload
RMACreateInstance
SetDLLAccessPath

Sections

.text
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/amrff.dll
.dll windows:4 windows x86 arch:x86

2b7b3050c185003c3d01a6fef981eb06

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

??2@YAPAXI@Z
free
sprintf
_purecall
_initterm
_adjust_fdiv
__dllonexit
_onexit
malloc
??3@YAXPAX@Z
_stricmp
realloc

kernel32

DisableThreadLibraryCalls

Exports

Exports

CanUnload
RMACreateInstance

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 632B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/audplin.dll
.dll windows:4 windows x86 arch:x86

e8ad36e034c5dce240f5ea71a79e13e9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

malloc
realloc
free
_stricmp
??2@YAPAXI@Z
_initterm
_adjust_fdiv
__dllonexit
_onexit
atol
??3@YAXPAX@Z
_ftol
_purecall

kernel32

DisableThreadLibraryCalls
LocalFree
LoadLibraryA
GetProcAddress
SetErrorMode
FreeLibrary
LocalAlloc

Exports

Exports

CanUnload
RMACreateInstance

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/authmgr.dll
.dll windows:4 windows x86 arch:x86

7cd345e4a7dda2d229e66f79f59fc02d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

??2@YAPAXI@Z
_stricmp
strrchr
strncpy
_purecall
??3@YAXPAX@Z
free
_initterm
_adjust_fdiv
__dllonexit
_onexit
malloc
realloc
_strcmpi

kernel32

DisableThreadLibraryCalls

Exports

Exports

RMACreateInstance

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 444B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/cdda3260.dll
.dll windows:4 windows x86 arch:x86

c6c5bed03188b143e49c75dc51c91b3a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

_initterm
??2@YAPAXI@Z
_adjust_fdiv
strncmp
strncpy
strtok
atoi
??3@YAXPAX@Z
_purecall
malloc
free
strchr
strrchr

advapi32

RegQueryInfoKeyA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA

kernel32

MulDiv
LoadLibraryA
GetProcAddress
FreeLibrary
VirtualAlloc
VirtualFree
InterlockedDecrement
InterlockedIncrement
DisableThreadLibraryCalls

Exports

Exports

CanUnload
RMACreateInstance
RMAShutdown

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/clbascauth.dll
.dll windows:4 windows x86 arch:x86

aefbe779c4f303313e156e6cd06cd711

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

strchr
_strnicmp
sprintf
strncpy
??2@YAPAXI@Z
_purecall
malloc
realloc
isspace
free
??3@YAXPAX@Z
_vsnprintf
_initterm
_adjust_fdiv
__dllonexit
_onexit
_strcmpi

kernel32

DisableThreadLibraryCalls

Exports

Exports

RMACreateInstance
RMAShutdown

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 644B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 970B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/clntxres.dll
.dll windows:4 windows x86 arch:x86

0dfb556075b08ef627a30335419c6b78

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

__CxxFrameHandler
_errno
free
_initterm
malloc
_adjust_fdiv
__dllonexit
??2@YAPAXI@Z
_stricmp
strncpy
strtoul
_purecall
strstr
??3@YAXPAX@Z
_fstat
_chsize
_onexit
_close
_creat
_open
_sopen
_lseek
_tell
_read
_write
_unlink
realloc

kernel32

DisableThreadLibraryCalls
GetTempPathA
CloseHandle
CreateFileA
GetTempFileNameA
CreateFileMappingA
MapViewOfFile
GetFileSize
UnmapViewOfFile
GetSystemInfo
GetLastError
WideCharToMultiByte

Exports

Exports

CanUnload2
RMACreateInstance

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/cont3260.dll
.dll windows:4 windows x86 arch:x86

aea237e4ef8e4f78be4542a22cbece04

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

__dllonexit
_adjust_fdiv
_initterm
_onexit
toupper
strncpy
strrchr
_purecall
isdigit
strchr
strstr
strncmp
atol
_stricmp
sprintf
malloc
realloc
free
_chsize
_telli64
_lseeki64
??3@YAXPAX@Z
_fstat
_errno
??2@YAPAXI@Z
_strnicmp
_unlink
_strcmpi
_read
_tell
_write
_sopen
_open
_close
_stat
_lseek
_creat

kernel32

DisableThreadLibraryCalls
InterlockedDecrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection
GetTempPathA
GetTempFileNameA
CloseHandle
CreateFileA
GetFileSize
CreateFileMappingA
MapViewOfFile
GetLastError
GetSystemInfo
InterlockedIncrement
UnmapViewOfFile

user32

CharNextA
GetSystemMetrics

Exports

Exports

CanUnload
RMACreateInstance
RMAShutdown

Sections

.text
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 628B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/fpsechnd.dll
.dll windows:4 windows x86 arch:x86

7a965794cac4b14e9f44289798784303

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

RegQueryValueExA
RegOpenKeyExA
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
RegCloseKey

msvcrt

??3@YAXPAX@Z
memmove
realloc
_purecall
strtol
strtoul
strncpy
strchr
malloc
_assert
_ftol
_strnicmp
free
time
rand
srand
memset
memcpy
_initterm
_adjust_fdiv
__dllonexit
_onexit
??2@YAPAXI@Z
_stricmp
_vsnprintf

kernel32

QueryPerformanceCounter
DisableThreadLibraryCalls
GetTickCount
QueryPerformanceFrequency
GetVolumeInformationA

Exports

Exports

RMACreateInstance
UpdateBlobInfo

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/h261rend.dll
.dll windows:4 windows x86 arch:x86

b9cafcb4c2d9fe8b38b31ccb22c4f977

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

_initterm
_adjust_fdiv
_onexit
sprintf
_ftol
??2@YAPAXI@Z
_purecall
__dllonexit
memcpy
memset
malloc
free
??3@YAXPAX@Z
realloc
_endthreadex
_beginthreadex
memmove
strrchr
atoi
_stricmp
strncpy
isupper
tolower
_putenv
_vsnprintf
strchr

kernel32

SetEvent
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetLastError
GetCurrentThreadId
WaitForSingleObject
CloseHandle
Sleep
GetThreadPriority
SetThreadPriority
ResumeThread
SuspendThread
QueryPerformanceFrequency
CreateEventA
DisableThreadLibraryCalls
ResetEvent
GetTickCount
QueryPerformanceCounter

wsock32

ntohl

user32

PostThreadMessageA
PostMessageA
GetMessageA
DispatchMessageA
PeekMessageA

Exports

Exports

CanUnload
RMACreateInstance
SetDLLAccessPath

Sections

.text
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 180KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/h263render.dll
.dll windows:4 windows x86 arch:x86

21c266d3de8baf7bbd68cb52d2286043

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

memcpy
_adjust_fdiv
_initterm
_onexit
strncpy
_purecall
_stricmp
??2@YAPAXI@Z
__dllonexit
memset
??3@YAXPAX@Z
strchr
realloc
_endthreadex
_beginthreadex
free
malloc
srand
memmove
atoi
rand
strrchr
_ftol
sprintf
isupper
tolower
_vsnprintf
_putenv

kernel32

ResetEvent
CreateEventA
SetEvent
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetLastError
DeleteCriticalSection
WaitForSingleObject
CloseHandle
GetCurrentThreadId
GetThreadPriority
SetThreadPriority
Sleep
SetErrorMode
ResumeThread
FreeLibrary
QueryPerformanceFrequency
LoadLibraryA
GetTickCount
QueryPerformanceCounter
ExitProcess
DisableThreadLibraryCalls
SuspendThread
GetProcAddress

user32

PostMessageA
PostThreadMessageA
PeekMessageA
GetMessageA
DispatchMessageA

Exports

Exports

CanUnload
RMACreateInstance
SetDLLAccessPath

Sections

.text
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/httpfsys.dll
.dll windows:4 windows x86 arch:x86

e2e7b8cf861a8d8efc839f9503ebf80b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

isalnum
islower
isdigit
isalpha
_onexit
_initterm
_adjust_fdiv
_mbctype
realloc
isxdigit
tolower
_vsnprintf
??3@YAXPAX@Z
isupper
_findclose
_chsize
_findnext
_findfirst
strtok
_fstat
_errno
iscntrl
getenv
__CxxFrameHandler
strspn
strchr
isspace
ctime
fflush
fread
malloc
fprintf
calloc
sscanf
remove
strncpy
strstr
strncmp
free
fopen
strtol
memmove
_stricmp
fwrite
fclose
strrchr
_strnicmp
atol
_purecall
atoi
time
__dllonexit
??2@YAPAXI@Z
_strcmpi
_tell
_read
_write
_lseek
_sopen
_open
_creat
_close
_stat
_getcwd
_chdir
_unlink

kernel32

FreeLibrary
LocalFileTimeToFileTime
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetTempPathA
CreateFileA
GetFileSize
GetTempFileNameA
MapViewOfFile
GetLastError
CreateFileMappingA
GetSystemInfo
MoveFileA
UnmapViewOfFile
SetFileAttributesA
FindNextFileA
GetFileAttributesA
GetDriveTypeA
FindFirstFileA
RemoveDirectoryA
GetWindowsDirectoryA
FindClose
CreateDirectoryA
CloseHandle
ReleaseMutex
DeleteFileA
WaitForSingleObject
LoadLibraryA
CreateMutexA
GetModuleHandleA
GetTickCount
GetDiskFreeSpaceA
DisableThreadLibraryCalls
GetModuleFileNameA
GetProcAddress

user32

CharNextA
GetSystemMetrics
CharPrevA

Exports

Exports

CanUnload
RMACreateInstance
RMAShutdown

Sections

.text
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/hxsdp.dll
.dll windows:4 windows x86 arch:x86

bbda789d4c1c0ffaebd434c21fc570d4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

_stricmp
strchr
strtol
_purecall
??2@YAPAXI@Z
strtoul
_errno
strtod
strtok
_ftol
strncpy
??3@YAXPAX@Z
_vsnprintf
free
_initterm
malloc
_adjust_fdiv
__dllonexit
_onexit

kernel32

DisableThreadLibraryCalls

Exports

Exports

CanUnload
CanUnload2
RMACreateInstance

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/hxxml.dll
.dll windows:4 windows x86 arch:x86

92b96abc402f9771dddb589b4aeebd77

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

??2@YAPAXI@Z
strncpy
isspace
malloc
free
realloc
_purecall
??3@YAXPAX@Z
calloc
_initterm
_adjust_fdiv
memmove
abort

kernel32

DisableThreadLibraryCalls

Exports

Exports

CanUnload
CanUnload2
RMACreateInstance

Sections

.text
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/imgrender.dll
.dll windows:4 windows x86 arch:x86

d89d1bb497f8c54f776e24b65306e71d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

_setjmp3
longjmp
exit
sscanf
fprintf
_iob
getenv
malloc
strspn
toupper
abort
fread
_CIpow
strtod
_initterm
_adjust_fdiv
__dllonexit
_onexit
strtoul
free
_ftol
strcspn
strncpy
isdigit
isspace
strftime
??2@YAPAXI@Z
_strnicmp
isalnum
atoi
strrchr
tolower
isupper
memmove
realloc
calloc
strncmp
strchr
strncat
strtok
atol
strstr
_stricmp
sprintf
??3@YAXPAX@Z
_purecall
_vsnprintf
strtol
gmtime
fclose
_strcmpi
rand
srand
memset
memcpy
fflush
fopen

kernel32

QueryPerformanceFrequency
ExitProcess
GetTickCount
QueryPerformanceCounter
LocalFileTimeToFileTime
GetModuleFileNameA

user32

SetCursor
CharNextA
GetSystemMetrics
GetSysColor
LoadCursorA
GetCursor

Exports

Exports

CanUnload
CanUnload2
RMACreateInstance

Sections

.text
Size: 428KB - Virtual size: 424KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/memfsys.dll
.dll windows:4 windows x86 arch:x86

c453d1d2cdb3dcaae0a2f73219534518

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

_vsnprintf
_adjust_fdiv
_initterm
malloc
free
realloc
tolower
isupper
__dllonexit
??3@YAXPAX@Z
_purecall
strncpy
strtol
strchr
isdigit
_stricmp
strncmp
atol
_chsize
_fstat
_errno
__CxxFrameHandler
strrchr
_onexit
??2@YAPAXI@Z
_write
_strcmpi
_strnicmp
_read
_tell
_lseek
_sopen
_close
_unlink
_open
_creat

kernel32

CreateFileA
CloseHandle
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetTempPathA
CreateFileMappingA
MapViewOfFile
GetFileSize
UnmapViewOfFile
GetSystemInfo
GetLastError
DisableThreadLibraryCalls
GetTempFileNameA
DeleteFileA

user32

CharNextA
GetSystemMetrics

Exports

Exports

CanUnload
RMACreateInstance
RMAShutdown

Sections

.text
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 748B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/mp3fformat.dll
.dll windows:4 windows x86 arch:x86

ea6ed34feb8549f2d5bd9838656c3d3d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

malloc
_ftol
strncmp
memchr
atoi
_mbctype
strncpy
??3@YAXPAX@Z
_purecall
realloc
free
??2@YAPAXI@Z
_vsnprintf
strtok
_initterm
_adjust_fdiv
__dllonexit
_onexit

user32

GetSystemMetrics

kernel32

DisableThreadLibraryCalls

Exports

Exports

CanUnload2
RMACreateInstance

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/mp3metaff.dll
.dll windows:4 windows x86 arch:x86

ba6bd3840f1773f998596455fce6c6ed

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

strrchr
strstr
_mbctype
tolower
isupper
malloc
sprintf
atol
isspace
memmove
__CxxFrameHandler
_errno
??3@YAXPAX@Z
_chsize
atoi
_initterm
_adjust_fdiv
__dllonexit
_onexit
_stricmp
rand
strncpy
_strnicmp
strchr
_purecall
??2@YAPAXI@Z
free
realloc
_fstat
_open
_creat
_unlink
_strlwr
_close
_write
_tell
_sopen
_lseek
_read

kernel32

DisableThreadLibraryCalls
GetTempPathA
GetTempFileNameA
CloseHandle
CreateFileA
GetFileSize
CreateFileMappingA
MapViewOfFile
GetLastError
UnmapViewOfFile
GetSystemInfo

user32

CharNextA
GetSystemMetrics

Exports

Exports

CanUnload
RMACreateInstance

Sections

.text
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/mp3render.dll
.dll windows:4 windows x86 arch:x86

ab5711636889b6075a11be4ab30a1106

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

free
_vsnprintf
_copysign
_assert
_CIpow
memmove
_initterm
malloc
rand
_adjust_fdiv
memcpy
??2@YAPAXI@Z
memchr
_stricmp
_ftol
??3@YAXPAX@Z
_purecall
memset
srand

kernel32

QueryPerformanceFrequency
DisableThreadLibraryCalls
QueryPerformanceCounter
ExitProcess
GetTickCount

Exports

Exports

CanUnload
RMACreateInstance

Sections

.text
Size: 96KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/mp4arender.dll
.dll windows:4 windows x86 arch:x86

bb72da97c1aefc861742f6041288a0d9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

_vsnprintf
_strcmpi
strchr
strrchr
strncmp
strtol
_purecall
_putenv
realloc
??3@YAXPAX@Z
??2@YAPAXI@Z
tolower
isupper
_adjust_fdiv
_initterm
_onexit
__dllonexit
memcpy
free
malloc
memset
memmove
srand
rand
_stricmp
_ftol
strncpy
strtod

kernel32

LoadLibraryA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
ExitProcess
DisableThreadLibraryCalls
QueryPerformanceFrequency
GetTickCount
SetErrorMode
FreeLibrary
QueryPerformanceCounter
GetProcAddress

Exports

Exports

CanUnload
RMACreateInstance
SetDLLAccessPath

Sections

.text
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/mp4fformat.dll
.dll windows:4 windows x86 arch:x86

7d41d5eb5593564e1287876a8fd66296

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

_ftol
_stricmp
_purecall
??3@YAXPAX@Z
??2@YAPAXI@Z
_vsnprintf
free
_initterm
malloc
_adjust_fdiv
__dllonexit
_onexit

kernel32

DisableThreadLibraryCalls

Exports

Exports

CanUnload
CanUnload2
RMACreateInstance

Sections

.text
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/mp4wrtr.dll
.dll windows:4 windows x86 arch:x86

2f9eff751ce6c1481a06f535f1279d5d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

vsprintf
strncpy
strrchr
_stricmp
sprintf
strtol
strchr
??2@YAPAXI@Z
_purecall
??3@YAXPAX@Z
realloc
free
_vsnprintf
_ftol
_initterm
_adjust_fdiv
__dllonexit
_onexit
malloc
_ftime
_strcmpi

ole32

CoCreateGuid

kernel32

DisableThreadLibraryCalls
GetTickCount

Exports

Exports

RMACreateInstance

Sections

.text
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/mpgfformat.dll
.dll windows:4 windows x86 arch:x86

6f079b845b95f44cab5f1e8b2f74fe92

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

malloc
_initterm
free
_adjust_fdiv
__dllonexit
_ftol
??2@YAPAXI@Z
_mbctype
atoi
memchr
memmove
sprintf
??3@YAXPAX@Z
_onexit
_purecall

user32

GetSystemMetrics

kernel32

DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection

Exports

Exports

CanUnload
RMACreateInstance

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/mpgrender.dll
.dll windows:4 windows x86 arch:x86

0db4c0ec7bdbbbf30df49ef4be42aab5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

free
_onexit
__dllonexit
memcpy
memmove
malloc
memset
rand
srand
_initterm
_adjust_fdiv
__CxxFrameHandler
_stricmp
_strcmpi
??3@YAXPAX@Z
??2@YAPAXI@Z
memchr
atoi
isupper
strrchr
sprintf
_ftol
_beginthreadex
_endthreadex
strncpy
_purecall
tolower
strchr
_putenv
_vsnprintf
realloc

ole32

CoInitializeEx
CoUninitialize

user32

PeekMessageA
PostThreadMessageA
PostMessageA
GetMessageA
DispatchMessageA

kernel32

GetTickCount
SuspendThread
DisableThreadLibraryCalls
InitializeCriticalSection
ExitProcess
GetCurrentThreadId
WaitForSingleObject
GetLastError
Sleep
GetThreadPriority
CloseHandle
ResumeThread
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CreateEventA
ResetEvent
SetThreadPriority
QueryPerformanceFrequency
SetEvent
QueryPerformanceCounter

Exports

Exports

CanUnload
RMACreateInstance
SetDLLAccessPath

Sections

.text
Size: 112KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_IHUFF_D
Size: 4KB - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_IDCT_DA
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/ntlmauth.dll
.dll windows:4 windows x86 arch:x86

a28ab463b24b72af2950a5ac75cd7f39

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

free
_initterm
_adjust_fdiv
??3@YAXPAX@Z
_onexit
realloc
malloc
strncpy
_strnicmp
_ftol
iscntrl
isspace
??2@YAPAXI@Z
strstr
_purecall
__dllonexit
_strcmpi

kernel32

DisableThreadLibraryCalls
GetSystemDirectoryA
LoadLibraryA
GetProcAddress
FreeLibrary

Exports

Exports

RMACreateInstance
RMAShutdown

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/oggfformat.dll
.dll windows:4 windows x86 arch:x86

bc7aa7423e025b5143fc86134fd8bac8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

printf
free
_purecall
_ftol
_CIpow
memmove
realloc
malloc
floor
memchr
??2@YAPAXI@Z
_initterm
_adjust_fdiv
__dllonexit
_onexit

kernel32

DisableThreadLibraryCalls

Exports

Exports

RMACreateInstance

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/pacplin.dll
.dll windows:4 windows x86 arch:x86

07be556cdf925ab775a96e24b794a6a3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

strncmp
strrchr
memmove
getenv
mktime
sscanf
_endthreadex
_beginthreadex
__CxxFrameHandler
_pctype
_isctype
__mb_cur_max
_iob
malloc
realloc
_errno
_CIfmod
floor
_HUGE
fprintf
fgets
_CIacos
_CIasin
ceil
_CIpow
strftime
__dllonexit
_onexit
_initterm
_adjust_fdiv
??3@YAXPAX@Z
strncpy
isupper
tolower
isspace
memchr
isdigit
isalpha
_assert
gmtime
localtime
isalnum
toupper
free
atoi
_stricmp
fseek
ftell
fread
strtok
strstr
fopen
fwrite
fclose
_i64toa
_vsnprintf
_atoi64
_strnicmp
strchr
sprintf
??2@YAPAXI@Z
_ftol
rand
time
_purecall
_control87
printf
_getcwd
_chdir
_strcmpi
_strlwr
_strdup
_itoa
_ftime
_putenv

ole32

CoInitializeEx
CoUninitialize

kernel32

MoveFileA
GetFileAttributesA
SetFileAttributesA
DeleteFileA
FindNextFileA
RemoveDirectoryA
GetDriveTypeA
FindFirstFileA
CreateDirectoryA
GetModuleFileNameA
GetWindowsDirectoryA
GetDiskFreeSpaceA
FindClose
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetLastError
GetCurrentThreadId
WaitForSingleObject
CloseHandle
Sleep
GetThreadPriority
SetThreadPriority
ResumeThread
SuspendThread
GetTickCount
LoadLibraryA
GetProcAddress
FreeLibrary
DisableThreadLibraryCalls

user32

CreateWindowExA
PostQuitMessage
PeekMessageA
UnregisterClassA
GetMessageA
DispatchMessageA
SetWindowLongA
PostMessageA
wsprintfA
PostThreadMessageA
DefWindowProcA
RegisterClassA
GetWindowLongA
DestroyWindow
CharNextA
GetSystemMetrics
CharPrevA

Exports

Exports

?AsyncNotifyProc@CAsyncNetThread@@KGJPAUHWND__@@IIJ@Z
?AsyncNotifyProc@CAsyncSockN@@KGJPAUHWND__@@IIJ@Z
CanUnload
JSLL_MaxInt
JSLL_MinInt
JSLL_Zero
JS_ArenaAllocate
JS_ArenaFinish
JS_ArenaGrow
JS_ArenaRelease
JS_CeilingLog2
JS_CompactArenaPool
JS_CompareValues
JS_FinishArenaPool
JS_FloorLog2
JS_FreeArenaPool
JS_GetContextPrivate
JS_HashString
JS_HashTableAdd
JS_HashTableDestroy
JS_HashTableDump
JS_HashTableEnumerateEntries
JS_HashTableLookup
JS_HashTableRawAdd
JS_HashTableRawLookup
JS_HashTableRawRemove
JS_HashTableRemove
JS_InitArenaPool
JS_NewHashTable
JS_SetContextPrivate
JS_smprintf
JS_smprintf_free
JS_snprintf
JS_sprintf_append
JS_sxprintf
JS_vsmprintf
JS_vsnprintf
JS_vsprintf_append
JS_vsxprintf
RMACreateInstance
js_FunctionClass
js_ObjectOps
js_SrcNoteArity
js_SrcNoteName
js_WithObjectOps
js_list_scope_ops

Sections

.text
Size: 272KB - Virtual size: 270KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/pdgenxferfsys.dll
.dll windows:4 windows x86 arch:x86

bd7df5243299d87abfe105a81c64571b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

??1type_info@@UAE@XZ
_adjust_fdiv
_initterm
_onexit
__dllonexit
__CxxFrameHandler
??0exception@@QAE@XZ
atol
_beginthreadex
??2@YAPAXI@Z
??3@YAXPAX@Z
??1exception@@UAE@XZ
_CxxThrowException
??0exception@@QAE@ABV0@@Z
_mbctype
toupper
strstr
strchr
sprintf
free
realloc
strrchr
malloc
_purecall
printf
_putenv
_stat
_stricmp

user32

PostThreadMessageA
PostMessageA
DispatchMessageA
GetClassInfoExA
CreateWindowExA
PeekMessageA
RegisterWindowMessageA
GetMessageA
TranslateMessage
MsgWaitForMultipleObjects
PostQuitMessage
DefWindowProcA
RegisterClassExA
DestroyWindow
UnregisterClassA
CharPrevA
CharNextA
GetSystemMetrics

kernel32

Sleep
InterlockedExchange
FindClose
GetLastError
LoadLibraryA
FreeLibrary
GetProcAddress
EnterCriticalSection
WaitForSingleObject
CreateEventA
LeaveCriticalSection
CreateMutexA
ReleaseMutex
SetEvent
DeleteFileA
GetCurrentThreadId
ResetEvent
CloseHandle
InterlockedDecrement
DeleteCriticalSection
SetErrorMode
FindNextFileA
FindFirstFileA
GetFileAttributesA
CreateDirectoryA
GetTickCount
GetTempPathA
DisableThreadLibraryCalls
InitializeCriticalSection
InterlockedIncrement
MultiByteToWideChar

Exports

Exports

RMACreateInstance

Sections

.text
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/plusplin.dll
.dll windows:4 windows x86 arch:x86

7f165e20cd1f0a4661518efbce63d0b1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

strrchr
strncpy
_stricmp
strncmp
atol
??3@YAXPAX@Z
_vsnprintf
__dllonexit
_onexit
free
_initterm
malloc
_adjust_fdiv
strchr
??2@YAPAXI@Z
_purecall
strtol
isdigit
realloc
_putenv
_strnicmp
_strcmpi

kernel32

DisableThreadLibraryCalls

user32

CharNextA
GetSystemMetrics

Exports

Exports

RMACreateInstance

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/pxcb3210.dll
.dll windows:4 windows x86 arch:x86

ce19a56a5987993865233b0a5fe7cfb9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

??3@YAXPAX@Z
malloc
free
_initterm
_adjust_fdiv
__dllonexit
??2@YAPAXI@Z
_purecall
_onexit

kernel32

InterlockedDecrement
InterlockedIncrement
DisableThreadLibraryCalls

Exports

Exports

CanUnload
RMACreateInstance

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/ramfformat.dll
.dll windows:4 windows x86 arch:x86

580c92cb5b380a18ed27d54ace09db9f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

_purecall
strspn
strtok
strncmp
strncpy
strncat
isalnum
??2@YAPAXI@Z
strchr
??3@YAXPAX@Z
gmtime
malloc
realloc
free
_initterm
_adjust_fdiv
strftime
_vsnprintf

kernel32

DisableThreadLibraryCalls
LocalFileTimeToFileTime

Exports

Exports

CanUnload
RMACreateInstance

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/ramrender.dll
.dll windows:4 windows x86 arch:x86

05601a84449ce8c085f5d7e0b185daca

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

_initterm
atoi
_stricmp
strstr
_strnicmp
_purecall
sprintf
malloc
_adjust_fdiv
__dllonexit
_onexit
free
strncpy
atol
??3@YAXPAX@Z
isdigit
strchr
strtol
strrchr
_mbctype
realloc
isspace
memmove
??2@YAPAXI@Z
_vsnprintf
strncmp
_strcmpi

kernel32

DisableThreadLibraryCalls

user32

CharNextA
GetSystemMetrics

Exports

Exports

RMACreateInstance

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/rarender.dll
.dll windows:4 windows x86 arch:x86

b56371e3df2ef62f4982c4c56a6f952d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

rand
srand
_findfirst
_findclose
isupper
_onexit
_initterm
_adjust_fdiv
memmove
malloc
free
realloc
memset
tolower
??3@YAXPAX@Z
strncpy
_vsnprintf
strrchr
strchr
sprintf
atoi
memcpy
__dllonexit
_stricmp
_ftol
strstr
_purecall
??2@YAPAXI@Z
_putenv

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

kernel32

GlobalHandle
GlobalUnlock
GlobalLock
GetProcAddress
FreeLibrary
GlobalFree
LoadLibraryA
SetErrorMode
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GlobalAlloc
ExitProcess
GetTickCount
DisableThreadLibraryCalls
QueryPerformanceFrequency
QueryPerformanceCounter

Exports

Exports

CanUnload
CanUnload2
RMACreateInstance
SetDLLAccessPath

Sections

.text
Size: 104KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/recf3260.dll
.dll windows:4 windows x86 arch:x86

5b3a3c9173dc739867a94fdb3fe8497a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

_initterm
_adjust_fdiv
_onexit
__dllonexit
_stricmp
printf
??2@YAPAXI@Z
strchr
_putenv
_purecall
sprintf
malloc
??3@YAXPAX@Z
realloc
free

user32

CharNextA
GetSystemMetrics
UnregisterClassA

advapi32

RegOpenKeyExA
RegCloseKey

kernel32

SetErrorMode
InterlockedIncrement
InterlockedDecrement
GetProcAddress
LoadLibraryA
FreeLibrary
GetSystemInfo
GetVersionExA
GetVersion

Exports

Exports

RMACreateInstance
SetDLLAccessPath

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/rmfformat.dll
.dll windows:4 windows x86 arch:x86

8309c32dbeab8a1759e538c5c51495ff

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

_ftol
strncpy
atoi
_purecall
_stricmp
strstr
sprintf
_strnicmp
isalnum
atol
atof
strchr
??3@YAXPAX@Z
strncmp
??2@YAPAXI@Z
strftime
gmtime
strrchr
malloc
realloc
free
_vsnprintf
_initterm
_adjust_fdiv
__dllonexit
_onexit
qsort
_strcmpi

kernel32

DisableThreadLibraryCalls
LocalFileTimeToFileTime

Exports

Exports

CanUnload
RMACreateInstance

Sections

.text
Size: 132KB - Virtual size: 130KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/rmwrtr.dll
.dll windows:4 windows x86 arch:x86

aa9ada853ab8b69248e96fb87b67d5f7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

strstr
sprintf
free
__CxxFrameHandler
_errno
_open
_close
_lseek
_read
_write
memmove
_fstat
_chsize
strchr
_strnicmp
isspace
strrchr
atof
strtol
??2@YAPAXI@Z
realloc
_timezone
localtime
_tzset
strtod
_initterm
_adjust_fdiv
__dllonexit
_onexit
qsort
time
_vsnprintf
malloc
_ftol
atoi
vsprintf
_stricmp
strncmp
_purecall
??3@YAXPAX@Z
strncpy
_creat
_tell
_sopen
_ftime
_strcmpi
_unlink

ole32

CoCreateGuid

kernel32

GetTempPathA
GetTempFileNameA
CloseHandle
CreateFileA
CreateFileMappingA
MapViewOfFile
GetLastError
UnmapViewOfFile
GetSystemInfo
GetFileSize
GlobalMemoryStatus
GetTickCount
DisableThreadLibraryCalls

Exports

Exports

RMACreateInstance

Sections

.text
Size: 232KB - Virtual size: 228KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/rmxfpln.dll
.dll windows:4 windows x86 arch:x86

4209a8748555c3206d7d11f94627be10

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

_initterm
_stat
free
??3@YAXPAX@Z
fflush
_fsopen
srand
rand
fseek
fclose
ftell
strncmp
fwrite
fread
strftime
time
gmtime
??2@YAPAXI@Z
_purecall
sprintf
malloc
_adjust_fdiv

kernel32

CreateMutexA
GetLastError
DisableThreadLibraryCalls
CloseHandle
GetTickCount
WaitForSingleObject
InterlockedDecrement
InterlockedIncrement
ReleaseMutex
GetProcAddress
LoadLibraryA
FreeLibrary

user32

wsprintfA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyA
RegSetValueExA

Exports

Exports

??0CDataSource@@QAE@XZ
??0CFileWrite@@QAE@XZ
??0CRMXHeader@@QAE@XZ
??0NameValuePropertyEx@@QAE@XZ
??0RMXHeader@@QAE@XZ
??0TableOfContentsEntry@@QAE@XZ
??1CDataSource@@QAE@XZ
??1CFileWrite@@QAE@XZ
??1CRMXHeader@@QAE@XZ
??1NameValuePropertyEx@@QAE@XZ
??1RMXHeader@@QAE@XZ
??1TableOfContentsEntry@@QAE@XZ
??4CDataSource@@QAEAAV0@ABV0@@Z
??4CFileRead@@QAEAAV0@ABV0@@Z
??4CFileWrite@@QAEAAV0@ABV0@@Z
??4CRMXHeader@@QAEAAV0@AAV0@@Z
??4NameValuePropertyEx@@QAEAAV0@AAV0@@Z
??4RMXHeader@@QAEAAV0@AAV0@@Z
??4TableOfContentsEntry@@QAEAAV0@AAV0@@Z
?AppendEmptyProp@CRMXHeader@@AAEPAVNameValuePropertyEx@@K@Z
?AppendTOCEntry@CRMXHeader@@AAEPAVTableOfContentsEntry@@XZ
?ClearHeader@CRMXHeader@@QAEXXZ
?CloseWrite@CFileWrite@@QAEJXZ
?CreateNewTOCEntry@CRMXHeader@@QAEJKGPAKKPAU_SDecryptionData@@@Z
?CreateSecurityInstance@@YGJW4PKI_BCYPHER_TYPE@@PAPAUIRMASecurity@@@Z
?CreateTimesPlayedIndex@CRMXHeader@@AAEJPAK0PAG@Z
?DeleteProp@CRMXHeader@@QAEJKPBD@Z
?DeleteTOCEntry@CRMXHeader@@QAEJK@Z
?EncryptTimeoutData@CRMXHeader@@AAEJGPAE0PAKPAPAU_SDecryptionData@@@Z
?ExportSessionKey@CFileWrite@@AAEJPAEKPAPAEPAK@Z
?FindProp@CRMXHeader@@AAEPAVNameValuePropertyEx@@KPBD@Z
?FixupTimesPlayed@CRMXHeader@@QAEXK@Z
?FreeDecryptionData@@YGXPAU_SDecryptionData@@@Z
?GetDecryptionData@CRMXHeader@@QAEJKPAKPAPAU_SDecryptionData@@_N2@Z
?GetFileVersion@CRMXHeader@@QAEKXZ
?GetHeaderSize@CRMXHeader@@QAEKXZ
?GetObjectVersion@CRMXHeader@@QAEGXZ
?GetSecurity@CFileWrite@@QAEPAUIRMASecurity@@XZ
?GetTOCDataSize@CRMXHeader@@QAEKK@Z
?GetTOCEntries@CRMXHeader@@QAEKXZ
?GetTOCFlags@CRMXHeader@@QAEGK@Z
?GetTOCOffset@CRMXHeader@@QAEKK@Z
?GetTOCPropBlob@CRMXHeader@@QAEJKPBDPAGPAPAE@Z
?GetTOCPropLong@CRMXHeader@@QAEJKPBDPAK@Z
?GetTOCPropString@CRMXHeader@@QAEJKPBDPAPAD@Z
?GetTimeoutData@CRMXHeader@@AAEJKPAGPAPAE@Z
?GetTimesPlayed@CRMXHeader@@QAEJKKGPAGH@Z
?GetTimesPlayedFile@CRMXHeader@@AAEJPADPAPAU_iobuf@@@Z
?HasTimeoutInfo@CRMXHeader@@QAE_NK@Z
?InitWrite@CFileWrite@@QAEJ_NPAKPAPAU_SDecryptionData@@0KPAE@Z
?IsTOCDataEncrypted@CRMXHeader@@QAE_NK@Z
?LoadHeaderFromBuffer@CRMXHeader@@QAEJPAEKPAK@Z
?LoadHeaderFromFile@CRMXHeader@@QAEJXZ
?LoadHeaderFromHeader@CRMXHeader@@QAEJPAV1@@Z
?LoadSecurityDll@@YGPAUHINSTANCE__@@XZ
?MakeValid@CRMXHeader@@AAEJPAD@Z
?OpenTimesPlayedFile@CRMXHeader@@AAEJPADPAPAU_iobuf@@@Z
?PackTimeoutData@CRMXHeader@@AAEJKPAU_SDecryptionData@@KKGGPBD1PAGPAPAE@Z
?Read@CDataSource@@QAEKPAEKK@Z
?Reset@CFileWrite@@AAEXXZ
?Reset@NameValuePropertyEx@@QAEXXZ
?Reset@RMXHeader@@QAEXXZ
?Reset@TableOfContentsEntry@@QAEXXZ
?Seek@CDataSource@@QAEHJH@Z
?Seek@CFileWrite@@QAEJKG@Z
?SetTOCFlags@CRMXHeader@@QAEJKG@Z
?SetTOCOffset@CRMXHeader@@QAEJKK@Z
?SetTOCPropBlob@CRMXHeader@@QAEJKPBDGPAE_N@Z
?SetTOCPropLong@CRMXHeader@@QAEJKPBDK_N@Z
?SetTOCPropString@CRMXHeader@@QAEJKPBD0_N@Z
?SetTimeoutProp@CRMXHeader@@QAEJKKKGPBD0@Z
?Tell@CDataSource@@QAEKXZ
?Tell@CFileWrite@@QAEKXZ
?UnpackTimeoutData@CRMXHeader@@QAEJKPAKPAPAU_SDecryptionData@@00PAG2PAPAD3@Z
?Use@CDataSource@@QAEXPAU_iobuf@@@Z
?Use@CRMXHeader@@QAEXPAU_iobuf@@@Z
?UseBuffer@CDataSource@@QAEXPAEK@Z
?ValidateTimeoutInfoVersion@CRMXHeader@@QAEJK@Z
?Write@CDataSource@@QAEJPAEK@Z
?Write@CFileWrite@@QAEJPAEK@Z
?WriteHeaderToFile@CRMXHeader@@QAEJXZ
?get_blob_property@NameValuePropertyEx@@QAEJPAGPAPAE@Z
?get_blob_property@TableOfContentsEntry@@QAEJPBDPAGPAPAE@Z
?get_long_property@NameValuePropertyEx@@QAEJPAK@Z
?get_long_property@TableOfContentsEntry@@QAEJPBDPAK@Z
?get_string_property@NameValuePropertyEx@@QAEJPAPAD@Z
?get_string_property@TableOfContentsEntry@@QAEJPBDPAPAD@Z
?pack@NameValuePropertyEx@@QAEPAEPAEAAK@Z
?pack@RMXHeader@@QAEPAEPAEAAK@Z
?pack@TableOfContentsEntry@@QAEPAEPAEAAK@Z
?persist_size@NameValuePropertyEx@@QAE?BKXZ
?persist_size@RMXHeader@@QAE?BKXZ
?persist_size@TableOfContentsEntry@@QAE?BKXZ
?set_blob_property@NameValuePropertyEx@@QAEJPBDGPAE@Z
?set_long_property@NameValuePropertyEx@@QAEJPBDK@Z
?set_string_property@NameValuePropertyEx@@QAEJPBD0@Z
?static_size@NameValuePropertyEx@@QAE?BKXZ
?static_size@RMXHeader@@QAE?BKXZ
?static_size@TableOfContentsEntry@@QAE?BKXZ
?unpack@NameValuePropertyEx@@QAEPAEPAEK@Z
?unpack@RMXHeader@@QAEPAEPAEK@Z
?unpack@TableOfContentsEntry@@QAEPAEPAEK@Z
RMACreateInstance

Sections

.text
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 886B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/rmxrend.dll
.dll windows:4 windows x86 arch:x86

bf92462ba9735f5bd88297e40e632ea4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

time
_stricmp
_ftol
_initterm
_adjust_fdiv
vsprintf
strchr
printf
memmove
_onexit
__dllonexit
_ismbcspace
??2@YAPAXI@Z
malloc
sprintf
??3@YAXPAX@Z
_purecall
_putenv
_errno
_open
_close
_lseek
_read
_write
_get_osfhandle
realloc
free

kernel32

GetFileSize
DisableThreadLibraryCalls
GetTickCount
SetErrorMode
LoadLibraryA
GetProcAddress
InterlockedDecrement
InterlockedIncrement
FreeLibrary

user32

MessageBoxA
GetSystemMetrics
CharNextA

advapi32

RegOpenKeyA
RegQueryValueExA
RegCloseKey

Exports

Exports

RMACreateInstance
SetDLLAccessPath

Sections

.text
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/rn5auth.dll
.dll windows:4 windows x86 arch:x86

39258a3adbb89bc212ea53f8baabb4a1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

??3@YAXPAX@Z
_strnicmp
_stricmp
sprintf
strncpy
isspace
strchr
malloc
realloc
??2@YAPAXI@Z
_purecall
_vsnprintf
_initterm
_adjust_fdiv
__dllonexit
_onexit
free
_strcmpi

kernel32

DisableThreadLibraryCalls

Exports

Exports

RMACreateInstance
RMAShutdown

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/rtfformat.dll
.dll windows:4 windows x86 arch:x86

de3cc482328afb0623c134eb6a059797

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

_ftol
isspace
atoi
toupper
memmove
strncmp
strncpy
atol
strstr
_stricmp
malloc
realloc
free
_vsnprintf
_initterm
_adjust_fdiv
__dllonexit
_onexit
sprintf
strchr
_strnicmp
??3@YAXPAX@Z
_purecall
??2@YAPAXI@Z
strftime
gmtime

kernel32

DisableThreadLibraryCalls
LocalFileTimeToFileTime

gdi32

DeleteObject
SelectObject
DeleteDC
CreateCompatibleDC

Exports

Exports

CanUnload
RMACreateInstance

Sections

.text
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/rtrender.dll
.dll windows:4 windows x86 arch:x86

2507b642612a0176f094432d787cb8c1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

_onexit
__dllonexit
_adjust_fdiv
_initterm
_ftol
strrchr
toupper
strtol
isdigit
memmove
atol
_strcmpi
??3@YAXPAX@Z
??2@YAPAXI@Z
_strnicmp
strstr
strchr
_purecall
strncmp
sprintf
atoi
_vsnprintf
_stricmp
strncpy
realloc
free
malloc

kernel32

LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
MulDiv
QueryPerformanceFrequency
GetTickCount
QueryPerformanceCounter

user32

GetSystemMetrics
CharNextA
GetDC
ReleaseDC
SetCursor
GetCursor
LoadCursorA
DrawTextA

gdi32

SetBkColor
DeleteDC
CreateCompatibleDC
GetDeviceCaps
CreateDIBSection
SetGraphicsMode
GetBkMode
TextOutA
SetBkMode
CreateFontA
GetObjectA
DeleteObject
SelectObject
SetTextColor
GetTextExtentPoint32A

Exports

Exports

CanUnload
RMACreateInstance

Sections

.text
Size: 88KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/rvrender.dll
.dll windows:4 windows x86 arch:x86

9d321c5997ab086da0c92709e7bc1d5f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

_adjust_fdiv
__dllonexit
_initterm
_onexit
_beginthreadex
_endthreadex
??3@YAXPAX@Z
free
realloc
malloc
strtol
_stricmp
tolower
isupper
_vsnprintf
strncpy
??2@YAPAXI@Z
_purecall
strstr
strrchr
strchr
atoi
_putenv
memmove
_strnicmp
sprintf
_ftol
memset
rand
srand
memcpy

ole32

CoInitializeEx
CoUninitialize

kernel32

InitializeCriticalSection
ExitProcess
DisableThreadLibraryCalls
GetVersionExA
GetVersion
ResetEvent
SetEvent
CreateEventA
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
DeleteCriticalSection
CloseHandle
Sleep
WaitForSingleObject
SetThreadPriority
ResumeThread
GetThreadPriority
GlobalHandle
SetErrorMode
QueryPerformanceCounter
QueryPerformanceFrequency
GetModuleHandleA
GetLastError
GetSystemInfo
GlobalAlloc
GlobalFree
GlobalUnlock
GlobalLock
FreeLibrary
SuspendThread
GetProcAddress
GetTickCount
LoadLibraryA

user32

LoadCursorA
PeekMessageA
DispatchMessageA
GetMessageA
PostMessageA
PostThreadMessageA
CharNextA
GetSystemMetrics
GetCursor
SetCursor

advapi32

RegEnumKeyExA
RegQueryValueA
RegOpenKeyA
RegCloseKey
RegCreateKeyA
RegSetValueA
RegOpenKeyExA
RegEnumKeyA
RegDeleteKeyA

gdi32

GetStockObject
CreatePen
DeleteObject

Exports

Exports

CanUnload
CanUnload2
RMACreateInstance
RMAShutdown
SetDLLAccessPath

Sections

.text
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/sdpplin.dll
.dll windows:4 windows x86 arch:x86

bba6e15451b79b6ab1416874841c3834

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

_initterm
free
__dllonexit
_onexit
strncpy
malloc
_adjust_fdiv
??2@YAPAXI@Z
??3@YAXPAX@Z
_mbctype
realloc
_purecall
_strcmpi
_vsnprintf

kernel32

DisableThreadLibraryCalls

user32

CharNextA
GetSystemMetrics

Exports

Exports

CanUnload
RMACreateInstance

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/security.dll
.dll windows:4 windows x86 arch:x86

8a032ff212e67a3ffe705b394044572e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

_initterm
_adjust_fdiv
malloc
??2@YAPAXI@Z
free
_assert
rand
??3@YAXPAX@Z
_purecall

kernel32

CreateFileA
WriteFile
CloseHandle
LoadResource
GetModuleHandleA
GetLastError
InterlockedDecrement
InterlockedIncrement
ReadFile
DisableThreadLibraryCalls
FindResourceA

advapi32

CryptDecrypt
CryptGenRandom
CryptGetKeyParam
CryptGetProvParam
RegOpenKeyA
RegQueryValueExA
RegCloseKey
CryptCreateHash
CryptHashData
CryptImportKey
CryptSetKeyParam
CryptExportKey
CryptAcquireContextA
CryptEncrypt
CryptReleaseContext
CryptGetHashParam
CryptGetUserKey
CryptGenKey
CryptDestroyKey

Exports

Exports

RMACreateInstance
RMACreateSecurityInstance
RMAShutdown

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/smlfformat.dll
.dll windows:4 windows x86 arch:x86

95bf99268667cd7dad6d4e78e892eabf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

??2@YAPAXI@Z
strncat
isalnum
strncpy
strchr
strncmp
isspace
_stricmp
time
atoi
strstr
strftime
gmtime
??3@YAXPAX@Z
sprintf
memmove
malloc
realloc
free
_vsnprintf
_initterm
_adjust_fdiv
__dllonexit
_onexit
_purecall

kernel32

DisableThreadLibraryCalls
LocalFileTimeToFileTime

Exports

Exports

CanUnload
RMACreateInstance

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/smlrender.dll
.dll windows:4 windows x86 arch:x86

1133992ac016243a1c496f2008d23285

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

isxdigit
isalnum
atof
difftime
_timezone
strspn
isalpha
strncpy
free
strtok
strtol
_adjust_fdiv
__dllonexit
_onexit
time
isdigit
mktime
localtime
malloc
strstr
??2@YAPAXI@Z
isspace
atoi
_initterm
atol
??3@YAXPAX@Z
_purecall
_strnicmp
_itoa
_vsnprintf
tolower
isupper
realloc
strrchr
memmove
iscntrl
sprintf
floor
_stricmp
_ftol
strtod
fopen
fprintf
fwrite
fclose
strncmp
strchr
_strcmpi

kernel32

GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
GetVersion
GetSystemInfo
GetVersionExA
GetTickCount

user32

GetSysColor
GetDC
CharNextA
ReleaseDC
GetSystemMetrics
LoadCursorA
GetCursor
SetCursor

gdi32

GetDeviceCaps

advapi32

RegOpenKeyExA
RegCloseKey

Exports

Exports

CanUnload
RMACreateInstance

Sections

.text
Size: 440KB - Virtual size: 439KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/smmrender.dll
.dll windows:4 windows x86 arch:x86

a86f65630984f784d4f2f4adbbdf319e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

strspn
??3@YAXPAX@Z
atol
strtok
strncmp
strncpy
isxdigit
strtoul
_vsnprintf
atoi
fclose
fflush
fprintf
fopen
strchr
memchr
_purecall
strstr
??2@YAPAXI@Z
malloc
realloc
free
_initterm
_adjust_fdiv
__dllonexit
_onexit
strpbrk
_strcmpi

kernel32

DisableThreadLibraryCalls

user32

CharNextA
GetSystemMetrics

Exports

Exports

CanUnload
RMACreateInstance

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/smplfsys.dll
.dll windows:4 windows x86 arch:x86

8c63d9231f6933c49eab7eafb5b82ae7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

memmove
malloc
realloc
free
isspace
isupper
_adjust_fdiv
_except_handler3
??3@YAXPAX@Z
__dllonexit
_onexit
tolower
_mbctype
isdigit
strncmp
atol
_stricmp
_findclose
_findnext
_findfirst
atoi
strchr
strtol
strncpy
_strnicmp
strtok
__CxxFrameHandler
rename
strrchr
sprintf
??2@YAPAXI@Z
printf
_purecall
_vsnprintf
_initterm
?terminate@@YAXXZ
_strlwr

kernel32

DisableThreadLibraryCalls
QueryPerformanceFrequency
QueryPerformanceCounter
GetTickCount
GetDriveTypeA
UnmapViewOfFile
MapViewOfFile
IsBadReadPtr
CreateFileMappingA
GetFileInformationByHandle
WriteFile
ReadFile
SetFilePointer
DeleteFileA
CreateFileA
GetLastError
CloseHandle
GetVersionExA
Sleep
CreateDirectoryA

user32

GetSystemMetrics
CharNextA

Exports

Exports

CanUnload
RMACreateInstance
RMAShutdown

Sections

.text
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/stubdrm.dll
.dll windows:4 windows x86 arch:x86

09964e07ab96d40ed2d73985471a31f3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

free
??2@YAPAXI@Z
_purecall
??3@YAXPAX@Z
_initterm
malloc
_adjust_fdiv

Exports

Exports

CanUnload
RMACreateInstance

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 822B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/swfformat.dll
.dll windows:4 windows x86 arch:x86

ec28322cf63f0a216c52592069e2680d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

memmove
strchr
iscntrl
strncpy
atol
isdigit
strtol
_stricmp
strncmp
strstr
strtok
isspace
gmtime
_strnicmp
_purecall
strrchr
malloc
realloc
free
_vsnprintf
_initterm
_adjust_fdiv
__dllonexit
_onexit
sprintf
??2@YAPAXI@Z
??3@YAXPAX@Z
strftime
_strcmpi

kernel32

LocalFileTimeToFileTime

user32

CharNextA
GetSystemMetrics

Exports

Exports

CanUnload
RMACreateInstance

Sections

.text
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/swfrender.dll
.dll windows:4 windows x86 arch:x86

909018c588a88690929ecf96435e3357

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

free
strncpy
_strnicmp
sprintf
strstr
strrchr
??3@YAXPAX@Z
atol
_vsnprintf
atoi
strchr
_purecall
_stricmp
_CIpow
strtol
rand
_beginthreadex
getenv
_endthreadex
tolower
isupper
realloc
isspace
_strcmpi
calloc
_putenv
_initterm
_adjust_fdiv
sscanf
_onexit
__dllonexit
time
iscntrl
srand
malloc
frexp
memmove
??2@YAPAXI@Z

ole32

CoInitializeEx
CoUninitialize

winmm

waveOutPrepareHeader
timeKillEvent
waveOutReset
waveOutClose
waveOutGetDevCapsA
waveOutOpen
timeSetEvent
waveOutUnprepareHeader
waveOutWrite
timeGetDevCaps
timeBeginPeriod
timeGetTime
timeEndPeriod

user32

PeekMessageA
DispatchMessageA
GetMessageA
PostMessageA
SetCursor
MapWindowPoints
GetClipboardData
OpenClipboard
SetClipboardData
CloseClipboard
GetDC
ReleaseDC
LoadCursorA
GetKeyState
PostThreadMessageA

kernel32

ResetEvent
CreateEventA
GetLastError
GetCurrentThreadId
DeleteCriticalSection
CloseHandle
GetThreadPriority
WaitForSingleObject
ResumeThread
SuspendThread
SetThreadPriority
GetTickCount
QueryPerformanceFrequency
GetCPInfo
Sleep
IsDBCSLeadByte
SetEvent
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
GlobalAlloc
GlobalLock
GetACP
GlobalUnlock
GlobalFree
QueryPerformanceCounter

gdi32

CreatePen
GetTextExtentPoint32A
CreateSolidBrush
CreatePalette
GetStockObject
SetBkColor
DeleteObject
SelectObject
StretchDIBits
SetDIBitsToDevice
GdiFlush
CreateCompatibleBitmap
DeleteDC
CreateDIBSection
GetDeviceCaps
CreateCompatibleDC
EnumFontFamiliesA
ExtTextOutA
LineTo
MoveToEx
GetBkColor
SetBkMode
GetBkMode
Rectangle
SetTextColor
GetTextMetricsA
CreateFontIndirectA
RestoreDC
SetTextAlign
IntersectClipRect
SaveDC
RealizePalette
SelectPalette
StretchBlt
GetSystemPaletteEntries

Exports

Exports

CanUnload2
RMACreateInstance

Sections

.text
Size: 288KB - Virtual size: 287KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 248KB - Virtual size: 249KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/tfilesys.dll
.dll windows:4 windows x86 arch:x86

f879079ea9b43be9b48bb86e2476bcb9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

_vsnprintf
_ismbcspace
memmove
atol
strncpy
strtok
_strnicmp
strchr
realloc
isdigit
_findfirst
_findnext
_findclose
??3@YAXPAX@Z
_initterm
_adjust_fdiv
__dllonexit
_onexit
free
malloc
sprintf
rename
_splitpath
strrchr
_purecall
fread
??2@YAPAXI@Z
fclose
strstr
ftell
_fsopen
fseek
strncmp
_stricmp
_strlwr
_strcmpi
_unlink
_fstat
_mkdir
_stat
_fileno

kernel32

DisableThreadLibraryCalls
lstrlenA
InterlockedDecrement
InterlockedIncrement
GetProcAddress
FreeLibrary
LoadLibraryA
lstrcpyA

user32

CharNextA
CharUpperA
GetSystemMetrics

advapi32

RegQueryValueExA
RegOpenKeyA
RegCloseKey

winmm

timeKillEvent
timeSetEvent

Exports

Exports

CanUnload
RMACreateInstance
RMAShutdown
TFileSys_GetLastError

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/theorarend.dll
.dll windows:4 windows x86 arch:x86

cbd51bd71043d7e672e6a17dc9c90728

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

DispatchMessageA
GetMessageA
PostMessageA
PostThreadMessageA
PeekMessageA

msvcrt

_stricmp
strncpy
isupper
tolower
__dllonexit
realloc
_adjust_fdiv
strrchr
??3@YAXPAX@Z
_purecall
calloc
strchr
_ftol
toupper
_putenv
_vsnprintf
atol
_endthreadex
_beginthreadex
memchr
malloc
memmove
free
_onexit
_initterm
??2@YAPAXI@Z

kernel32

DisableThreadLibraryCalls
ResetEvent
SetThreadPriority
ResumeThread
GetThreadPriority
QueryPerformanceFrequency
QueryPerformanceCounter
SuspendThread
CloseHandle
WaitForSingleObject
Sleep
GetLastError
InitializeCriticalSection
GetCurrentThreadId
CreateEventA
SetEvent
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetTickCount

ole32

CoInitializeEx
CoUninitialize

Exports

Exports

CanUnload
CanUnload2
RMACreateInstance
SetDLLAccessPath

Sections

.text
Size: 80KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/vidplin.dll
.dll windows:4 windows x86 arch:x86

06c415d1e31dfd5125546af61c77d5ba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

_adjust_fdiv
realloc
_onexit
??3@YAXPAX@Z
__dllonexit
__CxxFrameHandler
_strupr
_strcmpi
_putenv
_vsnprintf
_endthreadex
_beginthreadex
_strnicmp
strstr
isdigit
_initterm
strncmp
sprintf
_ftol
free
atol
malloc
isupper
tolower
strrchr
_purecall
??2@YAPAXI@Z
strncpy
strtol
strchr
atoi
_stricmp

ole32

CoTaskMemAlloc
CoUninitialize
CoFreeUnusedLibraries
CoInitializeEx
CoTaskMemFree
CoInitialize
CoCreateInstance

kernel32

Sleep
ResumeThread
SuspendThread
GetLastError
GetThreadPriority
SetThreadPriority
GetProcAddress
SetErrorMode
FreeLibrary
VirtualFree
VirtualAlloc
GetSystemInfo
ReleaseSemaphore
CreateSemaphoreA
QueryPerformanceFrequency
SetEvent
GetCurrentThreadId
ResetEvent
CreateEventA
CloseHandle
LoadLibraryA
WaitForSingleObject
DisableThreadLibraryCalls
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetTickCount
QueryPerformanceCounter

user32

PeekMessageA
DispatchMessageA
CharNextA
GetMessageA
PostMessageA
GetSystemMetrics
PostThreadMessageA

advapi32

RegQueryValueExA
RegOpenKeyExA

msvfw32

ICDecompress
ICInfo
ICOpen
ICClose
ICSendMessage
ICLocate

Exports

Exports

CanUnload
RMACreateInstance

Sections

.text
Size: 124KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/vidsite.dll
.dll windows:4 windows x86 arch:x86

917d76c46217dbc20207c1e508f8d05e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

_except_handler3
_initterm
_onexit
__dllonexit
memcpy
memset
memmove
_adjust_fdiv
srand
rand
_strlwr
_stat
fread
_assert
fscanf
fgets
strstr
??3@YAXPAX@Z
ftell
sscanf
fseek
fputs
rename
qsort
fopen
fprintf
calloc
fclose
sprintf
strtok
atof
realloc
malloc
_ftol
free
__CxxFrameHandler
atoi
getenv
?terminate@@YAXXZ
strncmp
_stricmp
strncpy
isupper
tolower
_purecall
??2@YAPAXI@Z
_beginthreadex
_endthreadex
_vsnprintf
strchr
_strcmpi
_putenv
_strnicmp

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

kernel32

ReleaseSemaphore
GlobalSize
ExitProcess
GlobalUnlock
GlobalLock
GlobalHandle
GetLastError
GetThreadPriority
Sleep
GetTickCount
GetCurrentThreadId
InitializeCriticalSection
DeleteCriticalSection
GetModuleHandleA
GetCurrentProcessId
LeaveCriticalSection
EnterCriticalSection
MulDiv
CreateMutexA
CreateEventA
WaitForSingleObject
SetEvent
CloseHandle
ReleaseMutex
ResetEvent
SetThreadPriority
CreateThread
CreateSemaphoreA
WaitForMultipleObjects
QueryPerformanceFrequency
PulseEvent
GetProcAddress
lstrcpyA
FreeLibrary
GetSystemInfo
GetVersionExA
GetTimeFormatA
GetDateFormatA
GetSystemTime
lstrcmpiA
DeleteFileA
LoadLibraryA
SetErrorMode
CreateFileMappingA
QueryPerformanceCounter
SuspendThread
GetSystemDirectoryA
GlobalFree
ResumeThread
GlobalAlloc
DisableThreadLibraryCalls

user32

SetForegroundWindow
SetActiveWindow
WindowFromPoint
GetCursorPos
DrawTextA
PeekMessageA
SystemParametersInfoA
SetParent
GetSystemMetrics
EnumChildWindows
SetFocus
GetDC
ReleaseDC
GetAsyncKeyState
BeginPaint
IsChild
SetWindowPos
GetForegroundWindow
CallWindowProcA
InvalidateRect
GetWindowRect
MapWindowPoints
UnhookWindowsHookEx
GetWindowThreadProcessId
SetWindowsHookExA
GetParent
RegisterClassA
DefWindowProcA
GetWindowLongA
SetWindowLongA
DestroyWindow
CreateWindowExA
IsWindowVisible
ShowWindow
CallNextHookEx
UpdateWindow
SetWindowRgn
MoveWindow
IntersectRect
GetCapture
GetClientRect
GetWindowPlacement
GetWindowRgn
ShowWindowAsync
OffsetRect
EnumDisplaySettingsA
EndPaint
IsIconic
SetScrollInfo
UnregisterClassA
FindWindowExA
DispatchMessageA
GetMessageA
PostMessageA
PostThreadMessageA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey

winmm

timeBeginPeriod
timeEndPeriod

gdi32

Rectangle
SetBkColor
GetDeviceCaps
SetTextColor
GetStockObject
GetTextExtentPointA
SelectObject
CreateFontA
SetMapMode
GetClipBox
DeleteObject
CombineRgn
CreateRectRgn
CreatePen
CreateSolidBrush
GetSystemPaletteEntries
GdiFlush
TextOutA
CreateBrushIndirect
GetRegionData
DeleteDC
BitBlt
SetBkMode
CreateCompatibleBitmap
CreateCompatibleDC
GetTextMetricsA
GetDCOrgEx
CreateDCA
GetDIBits
SetDIBColorTable
SetStretchBltMode
GetObjectA
CreateDIBSection
StretchBlt
SetPixel

ole32

CoUninitialize
CoInitializeEx

Exports

Exports

?CHXSiteStatusTextProc@@YGJPAUHWND__@@IIJ@Z
?CHXWinSiteWindowedProc@@YGJPAUHWND__@@IIJ@Z
?HXxHookSiteProc@@YGJPAUHWND__@@IIJ@Z
?HXxWinHookAllMessages@@YGJHIJ@Z
?HXxWinHookChar@@YGJHIJ@Z
?HXxWinHookSiteProc@@YGJPAUHWND__@@IIJ@Z
?WindowProc@CHXWinFullScreenWindow@@SGJPAUHWND__@@IIJ@Z
RMACreateInstance
SetDLLAccessPath

Sections

.text
Size: 252KB - Virtual size: 251KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/vorbisrend.dll
.dll windows:4 windows x86 arch:x86

27e2261688f71c6b75e816f92fac4f36

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

??2@YAPAXI@Z
_purecall
_stricmp
free
??3@YAXPAX@Z
_ftol
calloc
malloc
memmove
realloc
memchr
toupper
floor
ceil
qsort
ldexp
_CIpow
exit
frexp
_initterm
strncpy
_adjust_fdiv
__dllonexit
_onexit

kernel32

DisableThreadLibraryCalls

Exports

Exports

RMACreateInstance

Sections

.text
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/vsrcplin.dll
.dll windows:4 windows x86 arch:x86

b0e2f2eb06eed7bd144ca1aeea5ac626

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

mktime
_strnicmp
strchr
sprintf
strrchr
isspace
atoi
_stricmp
strncmp
strncpy
strstr
memmove
isalnum
atol
atof
strtol
_ftol
qsort
??2@YAPAXI@Z
_purecall
_mbctype
??3@YAXPAX@Z
strftime
gmtime
tolower
isupper
malloc
realloc
free
_vsnprintf
__dllonexit
_onexit
_initterm
_adjust_fdiv
_putenv
_strcmpi

user32

GetSystemMetrics
CharNextA

kernel32

LocalFileTimeToFileTime
DisableThreadLibraryCalls

Exports

Exports

CanUnload
RMACreateInstance
SetDLLAccessPath

Sections

.text
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/vsrlocal.dll
.dll windows:4 windows x86 arch:x86

8ae148093ec746c2d79cd18303ee9e7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

time
strncmp
strchr
strrchr
_strnicmp
strtok
asctime
gmtime
_stricmp
qsort
strtol
isspace
iscntrl
atol
isdigit
strstr
_mbctype
strncpy
srand
sprintf
??3@YAXPAX@Z
toupper
tolower
isupper
malloc
realloc
free
_vsnprintf
__dllonexit
_onexit
_initterm
_adjust_fdiv
??2@YAPAXI@Z
rand
_purecall
_putenv
_strcmpi

user32

GetSystemMetrics
CharNextA

kernel32

DisableThreadLibraryCalls

Exports

Exports

CanUnload
RMACreateInstance
SetDLLAccessPath

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/wm9fformat.dll
.dll windows:4 windows x86 arch:x86

07baaf201e780fb6bb38ff05ae39bc94

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

atol
strncmp
_beginthreadex
_purecall
_ftol
_adjust_fdiv
__dllonexit
_initterm
strtok
malloc
_onexit
srand
memcpy
memset
rand
time
_stricmp
_strnicmp
memmove
free
realloc
isdigit
strchr
_except_handler3
_CIpow
??2@YAPAXI@Z
??3@YAXPAX@Z
_putenv
strstr

ole32

CoTaskMemFree
CoUninitialize
CoInitialize
CoTaskMemAlloc

user32

GetSystemMetrics
CharNextA
MsgWaitForMultipleObjects
PostQuitMessage
DispatchMessageA
TranslateMessage
PeekMessageA

advapi32

RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

kernel32

ResetEvent
CreateMutexA
GetSystemDirectoryA
HeapSize
HeapFree
InterlockedCompareExchange
HeapAlloc
GetSystemTimeAsFileTime
GetProcessHeap
GetCurrentThreadId
InterlockedExchange
GetCurrentProcessId
GetModuleHandleA
DisableThreadLibraryCalls
Sleep
GetLastError
ExitProcess
GetTickCount
LoadLibraryA
InterlockedDecrement
GetProcAddress
InterlockedIncrement
GetVersion
GetSystemInfo
QueryPerformanceCounter
GetVersionExA
LeaveCriticalSection
DeleteCriticalSection
EnterCriticalSection
lstrlenA
ReleaseMutex
WaitForMultipleObjects
QueryPerformanceFrequency
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetLocalTime
GlobalMemoryStatus
GetDiskFreeSpaceA
GetEnvironmentStringsW
GetEnvironmentStrings
lstrlenW
CloseHandle
FreeEnvironmentStringsA
InitializeCriticalSection
DeviceIoControl
GetModuleHandleW
SetEvent
FreeEnvironmentStringsW
MultiByteToWideChar
CreateEventA
WaitForSingleObject

Exports

Exports

RMACreateInstance

Sections

.text
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 4KB - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/wm9writer.dll
.dll windows:4 windows x86 arch:x86

65e22758531c494e17bf8051c9d16029

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

fwrite
fseek
??2@YAPAXI@Z
fclose
fopen
free
_initterm
malloc
_adjust_fdiv
??3@YAXPAX@Z
__dllonexit
_onexit
_putenv
_purecall

kernel32

DisableThreadLibraryCalls
InterlockedDecrement
InterlockedIncrement

Exports

Exports

RMACreateInstance

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/wmsechnd.dll
.dll windows:4 windows x86 arch:x86

304fa4c2da75aedb9522e8873fb2e5ab

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

_ftol
_onexit
__dllonexit
_adjust_fdiv
_initterm
_strnicmp
strchr
strncpy
free
realloc
malloc
_except_handler3
wcslen
_purecall
??2@YAPAXI@Z
??3@YAXPAX@Z
_CIpow
_stricmp
strtoul
memmove
memcpy
memset
srand
rand

ole32

CoTaskMemAlloc
CoUninitialize
CoInitialize
CoTaskMemFree

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

kernel32

QueryPerformanceCounter
QueryPerformanceFrequency
DeviceIoControl
GetModuleHandleW
InterlockedCompareExchange
GetVersionExA
HeapFree
GetProcessHeap
HeapSize
GetSystemTimeAsFileTime
GetCurrentProcessId
HeapAlloc
InterlockedExchange
Sleep
GetCurrentThreadId
LoadLibraryA
GetProcAddress
GetModuleHandleA
GetLocalTime
TerminateProcess
GetLastError
DeleteCriticalSection
FreeEnvironmentStringsA
SetThreadPriority
CreateEventA
lstrlenW
GetEnvironmentStrings
GetEnvironmentStringsW
GetDiskFreeSpaceA
InitializeCriticalSection
GetTickCount
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
CloseHandle
GetSystemDirectoryA
MultiByteToWideChar
EnterCriticalSection
GlobalMemoryStatus
WaitForSingleObject
FreeEnvironmentStringsW
GetCurrentThread
LeaveCriticalSection
InterlockedIncrement
SetEvent
lstrcpyA
lstrlenA
InterlockedDecrement

user32

wsprintfA

advapi32

RegQueryInfoKeyA
RegSetValueExA
RegEnumValueA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA

Exports

Exports

CanUnload
RMACreateInstance

Sections

.text
Size: 120KB - Virtual size: 117KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 4KB - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plugins/zipf3260.dll
.dll windows:4 windows x86 arch:x86

ca455603df05bc63660b48ffbeedd86d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

_onexit
??2@YAPAXI@Z
__dllonexit
_adjust_fdiv
_initterm
_ismbcspace
_telli64
_lseeki64
_chsize
_fstat
memmove
_mbschr
_vsnprintf
_strnicmp
isdigit
_errno
rename
_chmod
fflush
fputs
putc
gmtime
exit
fopen
fgets
strrchr
free
_strcmpi
_tell
_sopen
_creat
_strlwr
_chdir
_getcwd
_mbsrchr
strncpy
localtime
fclose
_mbsinc
tolower
mblen
getenv
strncmp
sprintf
_setjmp3
_isctype
__mb_cur_max
_pctype
realloc
malloc
_rmdir
_read
strstr
atol
_stricmp
_iob
fprintf
strchr
??3@YAXPAX@Z
_purecall
_stat
_tzset
_mkdir
_lseek
_close
_isatty
_strupr
_setmode
_fileno
_open
_unlink
_write

kernel32

HeapFree
GetSystemInfo
FindClose
SetVolumeLabelA
GetTempPathA
GetTempFileNameA
DisableThreadLibraryCalls
CreateFileMappingA
MapViewOfFile
GetFileSize
UnmapViewOfFile
FindNextFileA
GetModuleFileNameA
GetWindowsDirectoryA
GetDiskFreeSpaceA
GetCurrentProcess
HeapAlloc
CreateMutexA
InterlockedExchange
WaitForSingleObject
ReleaseMutex
InitializeCriticalSection
lstrlenA
lstrcmpiA
lstrcpynA
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
InterlockedDecrement
GetVersion
CloseHandle
SetFileTime
GetLastError
SetFileAttributesA
CreateFileA
FileTimeToLocalFileTime
GetVolumeInformationA
GetFullPathNameA
FindFirstFileA
GetFileAttributesA
GetProcessHeap
GetVersionExA
GetDriveTypeA
GetLocaleInfoA
GetFileTime
FileTimeToDosDateTime
ReadFile
SetConsoleMode
GetConsoleMode
GetTimeZoneInformation

user32

CharPrevA
CharNextA
GetSystemMetrics
CharToOemA
OemToCharA

advapi32

RegQueryValueA
RegSetValueExA
RegEnumKeyExA
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyA
RegSetValueA
RegOpenKeyA
GetSecurityDescriptorLength
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
GetSecurityDescriptorControl
GetKernelObjectSecurity
SetKernelObjectSecurity
IsValidSecurityDescriptor
GetSecurityDescriptorDacl
IsValidAcl
GetSecurityDescriptorSacl
GetSecurityDescriptorOwner
IsValidSid
GetSecurityDescriptorGroup

Exports

Exports

RMACreateInstance

Sections

.text
Size: 112KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Tara103b.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 192KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Uninstreal.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 200KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
keys.dat
out.upx
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
rpplugins/embd3260.dll
.dll windows:4 windows x86 arch:x86

c90bb4c4ab4dd1ff737cbf58b8c1e93e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pngu3267

?OnEvent@CPNScrollingText@@UAEHAAVCPNEvent@@@Z
??1XPNScrollingText@@MAE@XZ
?Create@XPNScrollingText@@UAEHKPAVCPNWindow@@JJJJKK@Z
?SetScrollDirection@XPNScrollingText@@QAEXW4eScrollDirection@1@@Z
?SetFgColor@XPNScrollingText@@QAEXABVCPNColor@@@Z
?GetBtnTextColor@CPNDrawHelper@@SAAAVCPNColor@@XZ
?SetBgColor@XPNScrollingText@@QAEXABVCPNColor@@@Z
?Create@XPNControl@@IAEHKPAVCPNWindow@@JJJJKPBDK@Z
?PaintToScreen@XPNWindow@@IAEHPAVCPNDC@@0PAVCPNxRect@@PAVCPNColor@@@Z
?Attach@CPNBitmapImage@@UAEXPAUHBITMAP__@@@Z
?GetRowBytes@CPNBitmapImage@@UAEKXZ
?GetDataPtr@CPNBitmapImage@@UAEXPAPAX@Z
?LoadStandardBmp@CPNBitmapImage@@UAEHK@Z
?GetColorTableIndexAt@CPNBitmapImage@@UAEJJJ@Z
?GetColorAtColorTableIndex@CPNBitmapImage@@UAEHJAAVCPNColor@@@Z
?SetColorAtColorTableIndex@CPNBitmapImage@@UAEHJABVCPNColor@@@Z
?DeviceDependentImageCopy@CPNImage@@MAEHK@Z
?Free@CPNBitmapImage@@UAEXXZ
?Adopt@CPNBitmapImage@@UAEHK@Z
?Clone@CPNBitmapImage@@UAEPAVCPNImage@@XZ
?ColorizeWithMask@XPNBitmapImage@@UAEHABVCPNColor@@PAV2@K@Z
?Colorize@CPNBitmapImage@@UAEHABVCPNColor@@@Z
?ConvertToGrayscale@CPNBitmapImage@@UAEHXZ
?ReplaceColorAtPoint@CPNBitmapImage@@UAEHJJJJ@Z
?GetColorAt@CPNBitmapImage@@UAEHJJAAVCPNColor@@@Z
?ReplaceColorAt@CPNBitmapImage@@UAEHJJABVCPNColor@@@Z
?Detach@XPNImage@@UAEXXZ
?CreateBlankImage@CPNBitmapImage@@UAEHABVCPNDC@@ABVCPNxSize@@@Z
?SaveToFile@CPNBitmapImage@@UAEHPBD@Z
?LoadFromFile@CPNBitmapImage@@UAEHPBD@Z
?MakeDeviceIndependent@CPNBitmapImage@@UAEHXZ
?MakeDeviceDependent@CPNBitmapImage@@UAEHPAVCPNDC@@@Z
??1CPNBitmapImage@@UAE@XZ
?LoadFromResource@CPNBitmapImage@@UAEHK@Z
??0CPNColor@@QAE@XZ
??0CPNPaintDC@@QAE@ABU_PNxWindow@@@Z
??1CPNFrame@@UAE@XZ
??0CPNColor@@QAE@H@Z
?OnEvent@XPNCustomText@@UAEHAAVCPNEvent@@@Z
?BlitTo@CPNMemoryDC@@QAEXPAVCPNDC@@AAVCPNxRect@@1K@Z
?SetTextFgColor@XPNDC@@QAEPAVCPNColor@@PAV2@@Z
?SetTextBgColor@XPNDC@@QAEPAVCPNColor@@PAV2@@Z
?HasSubImageType@CPNImageButton@@MAEHW4eSubImageType@@@Z
?Create@CPNImageButton@@UAEHKPAVCPNWindow@@JJJJKKK@Z
?SetButtonImageFromHandle@CPNImageButton@@UAEHK@Z
?SetButtonImage@CPNImageButton@@UAEHK@Z
?SetButtonImage@CPNImageButton@@UAEHPAVCPNImage@@@Z
?AdjustButtonFaceRect@XPNImageButton@@MAEXAAVCPNxRect@@ABV2@HHJ@Z
?GetButtonFaceColor@XPNButton@@UAEXAAVCPNColor@@@Z
?SetButtonFaceColor@CPNImageButton@@UAEXABVCPNColor@@@Z
?MakeButtonDefault@XPNButton@@UAEXH@Z
?DrawButtonFace@CPNImageButton@@UAEXPAVCPNDC@@AAVCPNxRect@@HH@Z
?OnPaint@XPNButton@@UAEXPAVCPNDC@@HH@Z
?SetPushedState@XPNButton@@UAEXH@Z
?Create@CPNButton@@UAEHKPAVCPNWindow@@JJJJKKPBD@Z
?SetTitle@XPNImageButton@@UAEXPBD@Z
?OnEvent@CPNImageButton@@UAEHAAVCPNEvent@@@Z
?StopScrolling@CPNScrollingText@@UAEXXZ
?AddText@XPNScrollingText@@UAEXPBD@Z
?StartScrolling@CPNScrollingText@@UAEXXZ
?Create@CPNFrame@@UAEHPAVCPNWindow@@PAVCPNMenu@@JJJJKPBD@Z
?GetMenu@CPNFrame@@UBEPAVCPNMenu@@XZ
?SetMenu@CPNFrame@@UAEPAVCPNMenu@@PAV2@@Z
?IsMenuShown@CPNFrame@@UBEHXZ
?ShowMenu@CPNFrame@@UAEXH@Z
?GetMinWidthBeforeMenuWrap@CPNFrame@@UAEKXZ
?RemoveAllText@XPNScrollingText@@UAEXXZ
?OnPaint@XPNScrollingText@@UAEXAAVCPNDC@@@Z
??1CPNImageButton@@UAE@XZ
??0CPNImageButton@@QAE@XZ
?Get3dFaceColor@CPNDrawHelper@@SAAAVCPNColor@@XZ
??1XPNImageSlider@@UAE@XZ
??0XPNImageSlider@@QAE@XZ
?SetSliderRange@XPNSlider@@QAEXJJ@Z
?SetSliderPos@XPNSlider@@QAEXJ@Z
?SetTrackImageRepeater@XPNImageSlider@@QAEXKK@Z
?Create@XPNImageSlider@@QAEHKPAVCPNWindow@@JJJJKKKK@Z
?Enable@XPNSlider@@UAEXH@Z
?OnEvent@XPNSlider@@MAEHAAVCPNEvent@@@Z
?SetText@CPNControl@@UAEXPBD@Z
?DrawSliderTrack@CPNImageSlider@@MAEXPAVCPNDC@@ABVCPNxRect@@@Z
?DrawThumb@CPNImageSlider@@MAEXPAVCPNDC@@AAVCPNRegion@@H@Z
?DrawTickMarks@XPNImageSlider@@MAEXPAVCPNDC@@ABVCPNxRect@@1@Z
?DrawBackground@XPNSlider@@MAEXPAVCPNDC@@ABVCPNxRect@@@Z
?FillSliderTrack@XPNSlider@@MAEXPAVCPNDC@@ABVCPNColor@@ABVCPNxRect@@@Z
?DrawFocusRect@XPNSlider@@MAEXPAVCPNDC@@ABVCPNxRect@@@Z
?OnSize@XPNSlider@@MAEXFF@Z
?OnPaint@XPNSlider@@MAEXPAVCPNDC@@@Z
?SetBackgroundColor@CPNImageSlider@@UAEXABVCPNColor@@@Z
?UpdateTrackImage@CPNImageSlider@@MAEXXZ
?UpdateThumbImage@CPNImageSlider@@MAEXXZ
?OnSize@XPNScrollingText@@UAEXXZ
??0CPNScrollingText@@QAE@XZ
?InsertSubMenu@CPNMenu@@UAEXKAAV1@PBD@Z
?CheckItem@CPNMenu@@UAEXKH@Z
?RemoveItem@CPNMenu@@UAEXK@Z
?ModifyItemString@CPNMenu@@UAEXKPBD@Z
?DisplayPopupMenu@CPNMenu@@UAEHKABVCPNxPoint@@PAVCPNWindow@@PAVCPNxRect@@@Z
?RemoveSubMenu@CPNMenu@@UAEXK@Z
?Attach@CPNMenu@@UAEHPAUHMENU__@@@Z
?InsertSeparator@CPNMenu@@UAEXK@Z
?Detach@CPNMenu@@QAEPAUHMENU__@@XZ
??1CPNMenu@@UAE@XZ
??0CPNMenu@@QAE@XZ
?GetPNWindow@CPNWindow@@SAPAV1@PAX@Z
??0CPNFont@@QAE@ABQAX@Z
?Create@XPNCustomText@@QAEHKPAVCPNWindow@@JJJJKPBDK@Z
??1CPNFont@@UAE@XZ
??1XPNCustomText@@UAE@XZ
??0XPNCustomText@@QAE@XZ
?OnEvent@CPNCustomText@@UAEHAAVCPNEvent@@@Z
?GetText@CPNControl@@UBEXPADJ@Z
?SetText@XPNCustomText@@UAEXPBD@Z
?GetTextLength@CPNControl@@UBEJXZ
??0CPNRegion@@QAE@XZ
??0CPNScrollHelper@@QAE@PAVXPNButton@@K@Z
??0CPNPaintDC@@QAE@PAVCPNWindow@@@Z
??1CPNPaintDC@@UAE@XZ
?DrawBorder@CPNDrawHelper@@SAXAAVCPNDC@@AAVCPNxRect@@K@Z
?RemoveObserver@CPNRouter@@QAEXPAV1@@Z
?StopAnimationAtCell@XPNAnimateCtl@@QAEXK@Z
??0CPNBitmapImage@@QAE@XZ
??0CPNScreenDC@@QAE@XZ
?SetFont@XPNDC@@QAEPAVCPNFont@@PAV2@@Z
?GetTextExtent@CPNDC@@UAEXPBDAAVCPNxSize@@@Z
??1CPNScreenDC@@UAE@XZ
?RemoveObservers@CPNRouter@@QAEXXZ
??0CPNAnimateCtl@@QAE@XZ
?Create@XPNAnimateCtl@@QAEHKPAVCPNWindow@@JJJJK@Z
??4CPNColor@@QAEAAV0@ABV0@@Z
?UseBkgndColor@XPNAnimateCtl@@QAEXH@Z
?UnLockResource@CPNGraphicResource@@QAEHXZ
?GetControlsFontName@CPNDrawHelper@@SAPBDXZ
??0CPNFont@@QAE@HHHHPBDH@Z
?LockResource@CPNGraphicResource@@QAEHXZ
??1CPNColor@@UAE@XZ
?InsertText@XPNScrollingText@@UAEXHPBD@Z
?RemoveText@XPNScrollingText@@UAEXH@Z
??0CPNImageControl@@QAE@XZ
??1CPNImageControl@@UAE@XZ
??0CPNFrame@@QAE@XZ
?StartFlashing@XPNCustomText@@QAEXJJ@Z
?DoModeless@CPNDialog@@UAEKXZ
?DoModaless@CPNDialog@@UAEKXZ
?InitDialog@CPNDialog@@UAEHXZ
?EndDialog@CPNDialog@@UAEXK@Z
?PreDomodal@XPNDialog@@UAEXPAVCPNWindow@@@Z
?PostDomodal@XPNDialog@@UAEXPAVCPNWindow@@@Z
?GetSingleInstanceId@XPNDialog@@UAEKXZ
?GetTemplateId@XPNDialog@@UBEKXZ
?SetDefaultButtonId@CPNDialog@@UAEXK@Z
?GetDefaultButtonId@CPNDialog@@UBEKXZ
?SetSingleInstance@CPNDialog@@UAEXH@Z
?QueryInterface@XPNTimer@@UAGJABU_GUID@@PAPAX@Z
?AddRef@XPNTimer@@UAGKXZ
?Release@XPNTimer@@UAGKXZ
?Func@XPNTimer@@UAGJXZ
?IsValid@CPNObject@@UBEHXZ
PNGuiTerminate
?EnableToolTips@CPNTipManager@@SAXH@Z
?UseFakeModality@XPNDialog@@SAXH@Z
?UseCustomMessageBoxes@XPNMessageBox@@SAXH@Z
?RemoveProperty@CPNWindow@@QAEPAXPBD@Z
?SetProperty@CPNWindow@@QAEHPBDPAX@Z
PNGuiInitialize
??0CPNOpenFileDialog@@QAE@PAVCPNWindow@@@Z
?DoModal@CPNOpenFileDialog@@UAEKXZ
??1CPNOpenFileDialog@@UAE@XZ
?GetHWND@CPNWindow@@QBEPAUHWND__@@XZ
?OnWndMsg@CPNWindow@@UAEHKIJPAJ@Z
??1CPNWindow@@UAE@XZ
??0CPNWindow@@QAE@XZ
?NotifyObservers@CPNRouter@@UAEXAAVCPNEvent@@@Z
?HandleEvent@CPNWindow@@UAEXAAVCPNEvent@@@Z
?Destroy@CPNWindow@@UAEXXZ
?IsValid@CPNWindow@@UBEHXZ
?GetParent@CPNWindow@@UBEPAV1@XZ
?SetParent@CPNWindow@@UAEXPAV1@@Z
?SetZOrderPosition@CPNWindow@@UAEXK@Z
?SetTitle@CPNWindow@@UAEXPBD@Z
?GetTitle@CPNWindow@@UBEXPADJ@Z
?GetTitleLength@CPNWindow@@UBEJXZ
?SetFont@CPNWindow@@UAEXPAVCPNFont@@H@Z
?GetFont@CPNWindow@@UBEPAVCPNFont@@XZ
?SetSize@CPNWindow@@UAEXABVCPNxSize@@@Z
?GetSize@CPNWindow@@UBEXAAVCPNxSize@@@Z
?GetClientRect@CPNWindow@@UBEXAAVCPNxRect@@@Z
?GetScreenRect@CPNWindow@@UBEXAAVCPNxRect@@@Z
?Move@CPNWindow@@UAEXABVCPNxPoint@@@Z
?Center@CPNWindow@@UAEXXZ
?ScrollWindow@CPNWindow@@UAEXJJPAVCPNxRect@@K@Z
?GetPosition@CPNWindow@@UBEXAAVCPNxPoint@@@Z
?MoveAndSize@CPNWindow@@UAEXABU_PNxRect@@@Z
?MoveAndSize@CPNWindow@@UAEXABU_PNxPoint@@ABU_PNxSize@@@Z
?ClientToScreen@CPNWindow@@UBEXAAVCPNxRect@@@Z
?ClientToScreen@CPNWindow@@UBEXAAVCPNxPoint@@@Z
?ScreenToClient@CPNWindow@@UBEXAAVCPNxRect@@@Z
?ScreenToClient@CPNWindow@@UBEXAAVCPNxPoint@@@Z
?PauseUpdates@CPNWindow@@UAEXXZ
?HasPausedUpdates@CPNWindow@@UBEHXZ
?ResumeUpdates@CPNWindow@@UAEXXZ
?RepaintRect@CPNWindow@@UAEXPBVCPNxRect@@H@Z
?RedrawWindow@CPNWindow@@UAEXXZ
?ValidateRect@CPNWindow@@UAEXPBVCPNxRect@@@Z
?SetCapture@CPNWindow@@UAEXXZ
?ReleaseCapture@CPNWindow@@UAEXXZ
?HasCapture@CPNWindow@@UBEHXZ
?SetFocus@CPNWindow@@UAEHXZ
?UpdateBackgroundColor@CPNImageControl@@QAEXXZ
?ConvertRGBtoHSB@CPNColor@@QAEXXZ
?Brightness@CPNColor@@QAEMXZ
?SetBrightness@CPNColor@@QAEXM@Z
?ConvertHSBtoRGB@CPNColor@@QAEXXZ
?UpdateColors@XPNAnimateCtl@@QAEXXZ
?UpdateColors@CPNImageControl@@QAEXXZ
?SetImage@CPNImageControl@@QAEXPAVCPNImage@@@Z
?GetBorderedRect@CPNDrawHelper@@SAXAAVCPNxRect@@K@Z
??9CPNColor@@QBEHABV0@@Z
?Create@CPNControl@@IAEHKPAVCPNWindow@@JJJJKPBDK@Z
??1CPNMultipleWindowUpdate@@UAE@XZ
??1CPNControl@@UAE@XZ
??0CPNControl@@QAE@XZ
??0CPNColor@@QAE@ABV0@@Z
?GetControlsFontSize@CPNDrawHelper@@SAJXZ
??0CPNPen@@QAE@AAVCPNColor@@JJ@Z
??0CPNMultipleWindowUpdate@@QAE@XZ
?Create@CPNImageControl@@QAEHKPAVCPNWindow@@JJJJKKPAVCPNImage@@@Z
?StretchBlit@CPNDC@@UAEXPAVCPNImage@@JJJJJJJJJ@Z
??0CPNBrush@@QAE@XZ
??0CPNPen@@QAE@XZ
?SetStyle@CPNPen@@UAEXJ@Z
?SetColor@CPNBrush@@UAEXAAVCPNColor@@@Z
?SetBrush@XPNDC@@QAEPAVCPNBrush@@PAV2@@Z
?SetPen@XPNDC@@QAEPAVCPNPen@@PAV2@@Z
?SelectNewFgMixMode@CPNDC@@UAEXJ@Z
?GetCharHeight@CPNDC@@UAEJXZ
?DrawRectangle@CPNDC@@UAEXAAVCPNxRect@@@Z
?SelectNewBackgroundMode@CPNDC@@UAEXJ@Z
?SelectNewTextFgColor@CPNDC@@UAEXPAVCPNColor@@@Z
?DrawTextExA@CPNDC@@UAEXPBDAAVCPNxRect@@K@Z
??1CPNPen@@UAE@XZ
??1CPNCursor@@UAE@XZ
??0CPNCursor@@QAE@XZ
?Create@CPNImageControl@@UAEHKPAVCPNWindow@@JJJJKKK@Z
?OnPrimaryBtnDown@CPNImageControl@@MAEXABVCPNxPoint@@@Z
?OnPrimaryBtnUp@CPNImageControl@@MAEXABVCPNxPoint@@@Z
??0CPNWindowDC@@QAE@PAVCPNWindow@@@Z
??1CPNWindowDC@@UAE@XZ
??0CPNObject@@QAE@XZ
?SetPosition@CPNScrollHelper@@QAEXJ@Z
?GetMenuItemPos@CPNMenu@@UAEKK@Z
?LoadPopupMenu@CPNMenu@@UAEHK@Z
??1CPNAnimateCtl@@UAE@XZ
?HasFocus@CPNWindow@@UBEHXZ
?Show@CPNWindow@@UAEHH@Z
?IsShown@CPNWindow@@UBEHXZ
?SetShowState@CPNWindow@@UAEXJ@Z
?GetShowState@CPNWindow@@UBEJXZ
?SetForegroundWindow@CPNWindow@@UAEXHK@Z
?Enable@CPNWindow@@UAEXH@Z
?IsEnabled@CPNWindow@@UBEHXZ
?GetMenu@CPNWindow@@UAEHAAVCPNMenu@@@Z
?AttachWindowItem@CPNWindow@@UAEHKPAV1@@Z
?DetachWindowItem@CPNWindow@@UAEXXZ
?Attach@CPNWindow@@UAEXABU_PNxWindow@@@Z
?Attach@CPNWindow@@UAEXPAX@Z
?Detach@CPNWindow@@UAEXXZ
?SubclassWnd@CPNWindow@@UAEHPAU_PNxWindow@@@Z
?GetPNxWindowID@CPNWindow@@UBEPAXXZ
??BCPNWindow@@UBE?BU_PNxWindow@@XZ
?OnEvent@CPNWindow@@UAEHAAVCPNEvent@@@Z
?Create@CPNWindow@@UAEHPAV1@JJJJKPBD@Z
??0CPNEvent@@QAE@KKPAVCPNRouter@@KKKK@Z
??1CPNEvent@@UAE@XZ
?MapCoordinatesTo@CPNWindow@@UBEXPAV1@AAVCPNxRect@@@Z
?MapCoordinatesTo@CPNWindow@@UBEXPAV1@AAVCPNxPoint@@@Z
?UnsubclassWnd@CPNWindow@@QAEPAUHWND__@@XZ
?AddObserver@CPNRouter@@QAEXPAV1@KK@Z
??0CPNDC@@QAE@PAUHDC__@@@Z
??0CPNMemoryDC@@QAE@PAVCPNDC@@AAVCPNxRect@@@Z
??0CPNBrush@@QAE@AAVCPNColor@@J@Z
?FillRectangle@CPNDC@@UAEXABVCPNxRect@@AAVCPNBrush@@@Z
??1CPNBrush@@UAE@XZ
?GetBlackBrush@CPNDrawHelper@@SAAAVCPNBrush@@XZ
?BlitToScreen@CPNMemoryDC@@UAEXXZ
??1CPNMemoryDC@@UAE@XZ
??1CPNDC@@UAE@XZ
??1CPNRouter@@UAE@XZ
??0CPNRouter@@QAE@XZ
??0CPNColor@@QAE@EEE@Z
?SetPending@XPNTimer@@QAEXH@Z
??1CPNDialog@@UAE@XZ
?SetIcon@CPNWindow@@UAEXAAVCPNIcon@@H@Z
?IsPtInWindow@XPNWindow@@UBEHABVCPNxPoint@@@Z
?AddToolTip@CPNWindow@@UAEHPBD@Z
?AddToolTip@CPNWindow@@UAEHAAVCPNxRect@@PBD@Z
?RemoveAllToolTips@CPNWindow@@UAEXXZ
?EnableToolTips@CPNWindow@@UAEXH@Z
?UpdateShowStateIfMinimized@CPNWindow@@UAEXXZ
?ShouldDrawFocus@CPNWindow@@MAEHXZ
??4CPNRegion@@QAEAAV0@AAV0@@Z
?CreateRectRgn@CPNRegion@@UAEHAAVCPNxRect@@@Z
??1CPNRegion@@UAE@XZ
?GetWindowRect@XPNWindow@@QAEXAAVCPNxRect@@@Z
?GetMinimumSize@XPNImageButton@@QAEHAAVCPNxSize@@@Z
?GetId@CPNControl@@UBEKXZ
?GetWorkAreaForRect@CPNSystemInfo@@SAJABVCPNxRect@@AAV2@@Z
?SetId@CPNControl@@UAEXK@Z
??1CPNTimer@@MAE@XZ
??0CPNDialog@@QAE@KPAVCPNWindow@@@Z
??0CPNTimer@@QAE@KHPAPAV0@@Z
?Destroy@CPNDialog@@UAEXXZ
?Create@CPNDialog@@UAEHKPAVCPNWindow@@@Z
?DoModal@CPNDialog@@UAEKXZ
?CopyImage@CPNBitmapImage@@IAEHABV1@@Z
?ParentPaintBackground@XPNWindow@@MAEHPAVCPNDC@@PAVCPNxRect@@@Z
?IsLargeFontMode@CPNSystemInfo@@SAHXZ

pncrt

_chdir
fread
fclose
_rmdir
_mkdir
rename
_chmod
_ultoa
_unlink
_write
_read
_tell
_lseek
_sopen
_open
_creat
_close
_putenv
_strlwr
printf
_adjust_fdiv
_initterm
_onexit
__dllonexit
fflush
_assert
memcpy
memset
srand
rand
strpbrk
__CxxFrameHandler
wcslen
fprintf
_telli64
_lseeki64
_chsize
_fstat
_getcwd
isdigit
_errno
getenv
_mbctype
??3@YAXPAX@Z
_strcmpi
mktime
time
localtime
isxdigit
strtol
strncpy
_strnicmp
atol
memmove
_ismbcspace
_vsnprintf
realloc
free
malloc
strrchr
floor
isspace
strchr
strtok
_ftol
fopen
strncmp
sprintf
_snprintf
atoi
_stricmp
strstr
_purecall
??2@YAPAXI@Z

ole32

CoCreateInstance

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

kernel32

GetDiskFreeSpaceA
GetDriveTypeA
QueryPerformanceCounter
QueryPerformanceFrequency
GetWindowsDirectoryA
GetTempPathA
GetVolumeInformationA
lstrlenA
FindFirstFileA
FindNextFileA
FindClose
ExitProcess
WinExec
lstrcpynA
GetProfileStringA
GetSystemDirectoryA
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
GetTempFileNameA
CreateFileA
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
GetLocaleInfoA
lstrcpyA
DeleteCriticalSection
EnterCriticalSection
GetVersion
GetVersionExA
GetSystemInfo
GetProcAddress
FreeLibrary
SetErrorMode
LoadLibraryA
LeaveCriticalSection
GetTickCount
InterlockedIncrement
InitializeCriticalSection
GetLastError
GetPrivateProfileStringA
GetCurrentThreadId
ExpandEnvironmentStringsA
CloseHandle
GetCurrentProcessId
GetModuleFileNameA

user32

FindWindowA
DdeFreeDataHandle
DdeUninitialize
DdeGetData
DdeFreeStringHandle
DdeCreateStringHandleA
DdeInitializeA
DdeGetLastError
DdeDisconnect
DdeConnect
CharPrevA
CharNextA
GetSystemMetrics
wsprintfA
CharLowerA
GetUpdateRect
SetActiveWindow
GetClassNameA
InvalidateRect
UpdateWindow
DestroyWindow
GetCursorPos
PtInRect
GetFocus
CallNextHookEx
GetKeyState
GetDC
DrawFocusRect
ReleaseDC
UnhookWindowsHookEx
SetWindowsHookExA
BeginPaint
GetClientRect
EndPaint
ClientToScreen
SendMessageTimeoutA
GetWindowThreadProcessId
GetPropA
EnumWindows
PostMessageA
GetWindowRect
GetParent
GetAsyncKeyState
EnumChildWindows
SendMessageA
RegisterWindowMessageA
SystemParametersInfoA
DdeClientTransaction

advapi32

RegOpenKeyExA
RegQueryValueA
RegOpenKeyA
RegSetValueA
RegCreateKeyA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegQueryValueExA
RegEnumKeyA
RegSetValueExA
RegEnumKeyExA

shell32

ShellExecuteExA

oleaut32

SysFreeString

Exports

Exports

?DdeCallback@@YGPAUHDDEDATA__@@IIPAUHCONV__@@PAUHSZ__@@1PAU1@KK@Z
EMBEDGUICreateServiceInstance
EmbedGUICreateInstance
EmbedGUIShutdown
RMACreateInstance
RMAShutdown
SetDLLAccessPath

Sections

.text
Size: 300KB - Virtual size: 298KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_DATA
Size: 4KB - Virtual size: 338B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 152KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
rpplugins/rpcl3260.dll
.dll windows:4 windows x86 arch:x86

81b9baa98a0ed3eb4cdff1cfc0f21b10

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

_adjust_fdiv
_initterm
_onexit
__dllonexit
toupper
isdigit
calloc
_CIpow
_ftol
rand
srand
isspace
_strdup
time
atof
_vsnprintf
_lseeki64
_chsize
_fstat
strpbrk
_strlwr
_strnicmp
_ismbcspace
realloc
memmove
_mbctype
strchr
strncmp
strstr
_stricmp
_telli64
??3@YAXPAX@Z
fopen
fclose
fread
strtok
_errno
_chmod
_strcmpi
_write
_read
_tell
_lseek
_sopen
_open
_creat
_close
_stat
_chdir
_getcwd
_unlink
_rmdir
_mkdir
_putenv
_itoa
_purecall
free
??2@YAPAXI@Z
_beginthreadex
_endthreadex
malloc
atol
sprintf
atoi
strncpy
strrchr
getenv
printf
_splitpath
rename

kernel32

WinExec
GetVolumeInformationA
GetProcAddress
CreateThread
QueryPerformanceCounter
GetDiskFreeSpaceA
GetCurrentProcess
SetProcessWorkingSetSize
MultiByteToWideChar
lstrlenA
GetPrivateProfileStringA
GetTempFileNameA
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
lstrcpynA
GetProfileStringA
ResetEvent
GetTempPathA
GetLastError
FindNextFileA
GetDriveTypeA
FindFirstFileA
GetWindowsDirectoryA
SetErrorMode
DisableThreadLibraryCalls
GetCurrentThreadId
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GlobalLock
GlobalAlloc
WaitForSingleObject
CloseHandle
CreateEventA
GlobalFree
GlobalHandle
GlobalUnlock
SetEvent
FreeLibrary
TerminateThread
FindClose
QueryPerformanceFrequency
LoadLibraryA
WideCharToMultiByte
GetTickCount
GetModuleFileNameA
GetEnvironmentVariableA
GetModuleHandleA
GetFileSize
CreateFileA
GetSystemInfo
GetVersionExA
GetVersion
lstrcpyA

user32

CharLowerA
CharUpperA
wsprintfA
GetMenuState
CharPrevA
CharNextA
DispatchMessageA
GetWindowThreadProcessId
TranslateMessage
GetSubMenu
TrackPopupMenuEx
GetMenuItemInfoA
EnableMenuItem
CheckMenuRadioItem
ModifyMenuA
EnumWindows
MessageBoxA
CheckMenuItem
ScreenToClient
GetClientRect
PtInRect
SendMessageA
CallNextHookEx
GetClassNameA
RemoveMenu
CreatePopupMenu
InsertMenuA
DestroyMenu
GetMenuItemCount
GetMenuItemID
DefWindowProcA
GetClassInfoA
RegisterClassA
CreateWindowExA
IsChild
SetWindowsHookExA
SendMessageTimeoutA
IsWindow
FindWindowA
GetSystemMetrics
CreateDialogIndirectParamA
GetWindowLongA
SetWindowLongA
PostMessageA
SetWindowTextA
ShowWindow
DestroyWindow
GetDlgItem
PeekMessageA
GetMessageA
PostThreadMessageA
WindowFromPoint
UnhookWindowsHookEx
DdeClientTransaction
DdeGetData
SystemParametersInfoA
DdeUninitialize
DdeInitializeA
DdeFreeDataHandle
DdeCreateStringHandleA
DdeConnect
DdeFreeStringHandle
DdeDisconnect
DdeGetLastError

advapi32

RegDeleteValueA
RegQueryInfoKeyA
RegSetValueExA
RegEnumKeyExA
RegCreateKeyExA
RegEnumKeyA
RegCloseKey
RegDeleteKeyA
RegCreateKeyA
RegSetValueA
RegQueryValueA
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegEnumValueA

winmm

waveInStart
mixerGetControlDetailsA
mixerOpen
mixerGetDevCapsA
mixerGetLineControlsA
mixerGetLineInfoA
mixerSetControlDetails
waveInOpen
waveInAddBuffer
waveInPrepareHeader
waveInUnprepareHeader
waveInClose
waveInReset
mixerClose
mixerGetNumDevs

Exports

Exports

?DdeCallback@@YGPAUHDDEDATA__@@IIPAUHCONV__@@PAUHSZ__@@1PAU1@KK@Z
RMACreateInstance
RMAShutdown
RPCLSVCCreateInstance
RPCreateAggregatedClass
SetDLLAccessPath

Sections

.text
Size: 376KB - Virtual size: 374KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_DATA
Size: 4KB - Virtual size: 378B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
rpplugins/rpgu3260.dll
.dll windows:4 windows x86 arch:x86

e0279662e7c78178f7f74f4939700b46

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

_stricmp
malloc
free
realloc
_mbctype
strrchr
??2@YAPAXI@Z
??3@YAXPAX@Z
_vsnprintf
sprintf
_strlwr
strchr
atoi
strstr
strncpy
_adjust_fdiv
_initterm
_onexit
__dllonexit
rand
memmove
_purecall
printf
_putenv
_strcmpi
_itoa

shell32

SHChangeNotify

user32

IsWindowEnabled
GetParent
RemovePropA
SetPropA
GetPropA
GetWindowRect
ShowCursor
GetCursorPos
PtInRect
GetForegroundWindow
GetActiveWindow
GetWindowThreadProcessId
GetWindowLongA
GetWindow
SetWindowPos
SetTimer
MessageBoxA
CallWindowProcA
FindWindowExA
GetSystemMetrics
CharNextA
CharPrevA
CharLowerA
ClientToScreen
SendMessageA
FillRect
InvertRect
EndDialog
SendDlgItemMessageA
DialogBoxParamA
KillTimer
SetActiveWindow
SetWindowLongA

advapi32

RegOpenKeyA
RegCreateKeyA
RegSetValueA
RegSetValueExA
RegEnumKeyExA
RegQueryValueA
RegCloseKey
RegEnumKeyA
RegDeleteKeyA
RegDeleteValueA
RegOpenKeyExA
RegQueryValueExA

gdi32

TextOutA
GetObjectA
SelectObject
CreateFontA
GetCurrentObject
GetTextMetricsA

kernel32

GetSystemInfo
LoadLibraryA
GetProcAddress
GetCurrentProcessId
GetCurrentDirectoryA
SetCurrentDirectoryA
FindFirstFileA
FindNextFileA
InterlockedIncrement
WideCharToMultiByte
SetErrorMode
GetVersionExA
MultiByteToWideChar
GetVersion
GetModuleFileNameA
CreateDirectoryA
GetFileAttributesA
InterlockedDecrement
DisableThreadLibraryCalls
FreeLibrary

Exports

Exports

RMACreateInstance
RMAShutdown
SetDLLAccessPath

Sections

.text
Size: 100KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
rpplugins/rput3260.dll
.dll windows:4 windows x86 arch:x86

d5910cebaa93dcd7d37598789b61e474

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pngu3267

??0CPNControl@@QAE@XZ
?SetId@CPNControl@@UAEXK@Z
?Create@CPNListBox@@UAEHKPAVCPNWindow@@JJJJK@Z
?GetCount@CPNListBox@@UBEKXZ
?HandleEvent@CPNListBox@@UAEXAAVCPNEvent@@@Z
?IsSelected@CPNListBox@@UBEHK@Z
?GetCurrentSelection@CPNListBox@@UBEKXZ
?SetCurrentSelection@CPNListBox@@UAEHK@Z
?SetSelection@CPNListBox@@UAEHKH@Z
?AddString@CPNListBox@@UAEKK@Z
?AddString@CPNListBox@@UAEKPBD@Z
?InsertString@CPNListBox@@UAEKPBDK@Z
?RemoveString@CPNListBox@@UAEKK@Z
?RemoveAll@CPNListBox@@UAEXXZ
?GetSelectionCount@CPNListBox@@UBEKXZ
?GetSelectedItems@CPNListBox@@UBEKPAKI@Z
?GetString@CPNListBox@@UBEKPADKK@Z
?ItemFromPoint@CPNListBox@@UBEKVCPNxPoint@@@Z
?FindString@CPNListBox@@UAEJPBDKHH@Z
??0CPNImageControl@@QAE@XZ
??0CPNBitmapImage@@QAE@XZ
?Create@CPNImageControl@@QAEHKPAVCPNWindow@@JJJJKKPAVCPNImage@@@Z
?UpdateBackgroundColor@CPNImageControl@@QAEXXZ
??1CPNControl@@UAE@XZ
?Attach@CPNWindow@@QAEXPAUHWND__@@@Z
?SetImage@CPNImageControl@@QAEXPAVCPNImage@@@Z
??0CPNEdit@@QAE@XZ
??1CPNText@@UAE@XZ
??1CPNButton@@UAE@XZ
??0CPNCheckButton@@QAE@XZ
?EndDialog@CPNDialog@@UAEXK@Z
??0CPNText@@QAE@XZ
??0CPNButton@@QAE@XZ
??0CPNPopupList@@QAE@XZ
?AddObserver@CPNRouter@@QAEXPAV1@KK@Z
??1CPNDialog@@UAE@XZ
??0CPNDialog@@QAE@KPAVCPNWindow@@@Z
?OnEvent@XPNDialog@@UAEHAAVCPNEvent@@@Z
?DoModal@CPNDialog@@UAEKXZ
?DoModeless@CPNDialog@@UAEKXZ
?GetScreenMappingFactors@CPNSystemInfo@@SAXAAJ0@Z
?OFNHookProc@CPNOpenFileDialog@@KGIPAUHWND__@@IIJ@Z
?TranslateFlags@CPNOpenFileDialog@@IAEKXZ
?GetHWND@CPNWindow@@QBEPAUHWND__@@XZ
??1CPNOpenFileDialog@@UAE@XZ
?GetPNWindow@CPNWindow@@SAPAV1@PAX@Z
??0CPNWindow@@QAE@XZ
??0CPNOpenFileDialog@@QAE@XZ
?NotifyObservers@CPNRouter@@UAEXAAVCPNEvent@@@Z
?HandleEvent@CPNWindow@@UAEXAAVCPNEvent@@@Z
?Destroy@CPNDialog@@UAEXXZ
?IsValid@CPNWindow@@UBEHXZ
?GetParent@CPNWindow@@UBEPAV1@XZ
?SetParent@CPNWindow@@UAEXPAV1@@Z
?SetZOrderPosition@CPNWindow@@UAEXK@Z
?SetTitle@CPNWindow@@UAEXPBD@Z
?GetTitle@CPNWindow@@UBEXPADJ@Z
?GetTitleLength@CPNWindow@@UBEJXZ
?SetFont@CPNWindow@@UAEXPAVCPNFont@@H@Z
?GetFont@CPNWindow@@UBEPAVCPNFont@@XZ
?SetSize@CPNWindow@@UAEXABVCPNxSize@@@Z
?GetSize@CPNWindow@@UBEXAAVCPNxSize@@@Z
?GetClientRect@CPNWindow@@UBEXAAVCPNxRect@@@Z
?GetScreenRect@CPNWindow@@UBEXAAVCPNxRect@@@Z
?Move@CPNWindow@@UAEXABVCPNxPoint@@@Z
?Center@CPNWindow@@UAEXXZ
?ScrollWindow@CPNWindow@@UAEXJJPAVCPNxRect@@K@Z
?GetPosition@CPNWindow@@UBEXAAVCPNxPoint@@@Z
?MoveAndSize@CPNWindow@@UAEXABU_PNxRect@@@Z
?MoveAndSize@CPNWindow@@UAEXABU_PNxPoint@@ABU_PNxSize@@@Z
?ClientToScreen@CPNWindow@@UBEXAAVCPNxRect@@@Z
?ClientToScreen@CPNWindow@@UBEXAAVCPNxPoint@@@Z
?ScreenToClient@CPNWindow@@UBEXAAVCPNxRect@@@Z
?ScreenToClient@CPNWindow@@UBEXAAVCPNxPoint@@@Z
?PauseUpdates@CPNWindow@@UAEXXZ
?HasPausedUpdates@CPNWindow@@UBEHXZ
?ResumeUpdates@CPNWindow@@UAEXXZ
?RepaintRect@CPNWindow@@UAEXPBVCPNxRect@@H@Z
?RedrawWindow@CPNWindow@@UAEXXZ
?ValidateRect@CPNWindow@@UAEXPBVCPNxRect@@@Z
?SetCapture@CPNWindow@@UAEXXZ
?ReleaseCapture@CPNWindow@@UAEXXZ
?HasCapture@CPNWindow@@UBEHXZ
?SetFocus@CPNWindow@@UAEHXZ
?HasFocus@CPNWindow@@UBEHXZ
?Show@CPNWindow@@UAEHH@Z
?IsShown@CPNWindow@@UBEHXZ
?SetShowState@CPNWindow@@UAEXJ@Z
?GetShowState@CPNWindow@@UBEJXZ
?SetForegroundWindow@CPNWindow@@UAEXHK@Z
?Enable@CPNWindow@@UAEXH@Z
?IsEnabled@CPNWindow@@UBEHXZ
?GetTextLength@CPNControl@@UBEJXZ
?SetText@CPNControl@@UAEXPBD@Z
?DetachWindowItem@CPNWindow@@UAEXXZ
?Attach@CPNWindow@@UAEXABU_PNxWindow@@@Z
?Attach@CPNWindow@@UAEXPAX@Z
?Detach@CPNWindow@@UAEXXZ
?SubclassWnd@CPNWindow@@UAEHPAU_PNxWindow@@@Z
PNGuiInitialize
??BCPNWindow@@UBE?BU_PNxWindow@@XZ
?OnEvent@CPNWindow@@UAEHAAVCPNEvent@@@Z
?Destroy@CPNWindow@@UAEXXZ
??0CPNRouter@@QAE@XZ
??1CPNRouter@@UAE@XZ
?Create@CPNPropertyPage@@UAEHK@Z
?OnWizBack@XPNPropertyPage@@UAEJXZ
?OnWizNext@XPNPropertyPage@@UAEJXZ
?OnHelp@XPNPropertyPage@@UAEHXZ
?OnRestoreDefaults@XPNPropertyPage@@UAEHXZ
?OnEvent@CPNPropertyPage@@UAEHAAVCPNEvent@@@Z
??0CPNPropertySheet@@QAE@K@Z
??0CPNPropertyPage@@IAE@KPBD@Z
?GetPage@XPNPropertySheet@@QBEPAVCPNPropertyPage@@K@Z
??1CPNPropertyPage@@UAE@XZ
?Highlight@CPNText@@UAEXH@Z
?Create@CPNText@@UAEHKPAVCPNWindow@@JJJJKPBDK@Z
??0CPNTreeControl@@QAE@XZ
??0CPNBrush@@QAE@XZ
??1CPNBrush@@UAE@XZ
??0CPNPen@@QAE@XZ
??1CPNPen@@UAE@XZ
??1CPNColor@@UAE@XZ
?SetColor@CPNPen@@UAEXAAVCPNColor@@@Z
?Set@CPNColor@@QAEXEEE@Z
?LockResource@CPNGraphicResource@@QAEHXZ
?SetColor@CPNBrush@@UAEXAAVCPNColor@@@Z
??0CPNColor@@QAE@EEE@Z
?UnLockResource@CPNGraphicResource@@QAEHXZ
??1CPNPaintDC@@UAE@XZ
??0CPNPaintDC@@QAE@PAVCPNWindow@@@Z
??1CPNMemoryDC@@UAE@XZ
?BlitToScreen@CPNMemoryDC@@UAEXXZ
?BlitTo@CPNMemoryDC@@QAEXPAVCPNDC@@AAVCPNxRect@@1K@Z
?DrawLine@CPNDC@@UAEXJJJJ@Z
?SetPen@XPNDC@@QAEPAVCPNPen@@PAV2@@Z
?FillRectangle@CPNDC@@UAEXABVCPNxRect@@AAVCPNBrush@@@Z
??0CPNMemoryDC@@QAE@PAVCPNDC@@AAVCPNxRect@@@Z
??1CPNScreenDC@@UAE@XZ
??0CPNScreenDC@@QAE@XZ
??1CPNWindow@@UAE@XZ
?AddRadio@CPNRadioGroup@@QAEXPAVCPNRadioBtn@@@Z
??0CPNRadioGroup@@QAE@XZ
??0CPNRadioBtn@@QAE@XZ
?DoModal@CPNMessageBox@@UAEKPAVCPNWindow@@PBD1K@Z
??0CPNDialog@@QAE@XZ
?SetSliderPos@XPNSlider@@QAEXJ@Z
?Create@XPNSlider@@QAEHKPAVCPNWindow@@JJJJKK@Z
?PartitionSlider@XPNSlider@@QAEXK@Z
??4CPNColor@@QAEAAV0@ABV0@@Z
??0CPNColor@@QAE@H@Z
?SetSliderRange@XPNSlider@@QAEXJJ@Z
??0CPNSlider@@QAE@XZ
?AddAccessibility@CPNWindow@@QAEHPBDK@Z
??0CPNPropertySheet@@QAE@XZ
??1CPNPropertySheet@@UAE@XZ
??1CPNCursor@@UAE@XZ
?SetCursor@CPNSystemInfo@@SAPAVCPNCursor@@AAV2@@Z
?LoadStandardCursor@CPNCursor@@UAEHJ@Z
??0CPNCursor@@QAE@XZ
?SetText@XPNCustomText@@UAEXPBD@Z
?OnEvent@CPNCustomText@@UAEHAAVCPNEvent@@@Z
?DrawArrow@XPNScrollButton@@MAEXAAVCPNDC@@ABVCPNxRect@@KK@Z
?Create@XPNScrollButton@@UAEHKPAVCPNWindow@@JJJJKK@Z
?AdjustButtonFaceRect@XPNButton@@MAEXAAVCPNxRect@@ABV2@HHJ@Z
?GetButtonFaceColor@XPNButton@@UAEXAAVCPNColor@@@Z
?SetButtonFaceColor@CPNButton@@UAEXABVCPNColor@@@Z
?MakeButtonDefault@XPNButton@@UAEXH@Z
?DrawButtonFace@CPNButton@@UAEXPAVCPNDC@@AAVCPNxRect@@HH@Z
?OnPaint@XPNButton@@UAEXPAVCPNDC@@HH@Z
?SetPushedState@XPNButton@@UAEXH@Z
?Create@CPNButton@@UAEHKPAVCPNWindow@@JJJJKKPBD@Z
?OnEvent@XPNScrollButton@@UAEHAAVCPNEvent@@@Z
?GetControlsFont@CPNDrawHelper@@SAAAVCPNFont@@XZ
?Create@XPNCustomText@@QAEHKPAVCPNWindow@@JJJJKPBDK@Z
??0XPNCustomText@@QAE@XZ
??0XPNScrollButton@@IAE@XZ
??1XPNScrollButton@@MAE@XZ
??1XPNCustomText@@UAE@XZ
?GetFreeDiskSpace@CPNSystemInfo@@SAKABVCPNString@@@Z
?SetPosition@CPNScrollHelper@@QAEXJ@Z
?GetDiskSpace@CPNSystemInfo@@SAXABVCPNString@@AAK1@Z
?MapCoordinatesTo@CPNWindow@@UBEXPAV1@AAVCPNxRect@@@Z
?MapCoordinatesTo@CPNWindow@@UBEXPAV1@AAVCPNxPoint@@@Z
?SetIcon@CPNWindow@@UAEXAAVCPNIcon@@H@Z
?IsPtInWindow@XPNWindow@@UBEHABVCPNxPoint@@@Z
?AddToolTip@CPNWindow@@UAEHPBD@Z
?AddToolTip@CPNWindow@@UAEHAAVCPNxRect@@PBD@Z
?RemoveAllToolTips@CPNWindow@@UAEXXZ
?EnableToolTips@CPNWindow@@UAEXH@Z
?UpdateShowStateIfMinimized@CPNWindow@@UAEXXZ
?ShouldDrawFocus@CPNWindow@@MAEHXZ
?ParentPaintBackground@XPNWindow@@MAEHPAVCPNDC@@PAVCPNxRect@@@Z
?OnWndMsg@CPNWindow@@UAEHKIJPAJ@Z
?Create@CPNDialog@@UAEHKPAVCPNWindow@@@Z
?DoModeless@CPNOpenFileDialog@@UAEKXZ
?DoModaless@CPNDialog@@UAEKXZ
?InitDialog@CPNDialog@@UAEHXZ
?EndDialog@CPNOpenFileDialog@@UAEXK@Z
??1CPNEdit@@UAE@XZ
??1CPNCheckButton@@UAE@XZ
?Create@CPNEdit@@QAEHKPAVCPNWindow@@JJJJKKPBD@Z
?GetId@CPNControl@@UBEKXZ
?GetText@CPNControl@@UBEXPADJ@Z
?OnEvent@CPNOpenFileDialog@@UAEHAAVCPNEvent@@@Z
?Create@CPNWindow@@UAEHPAV1@JJJJKPBD@Z
?GetMenu@CPNWindow@@UAEHAAVCPNMenu@@@Z
?AttachWindowItem@CPNWindow@@UAEHKPAV1@@Z
?GetPNxWindowID@CPNWindow@@UBEPAXXZ
?PreDomodal@XPNDialog@@UAEXPAVCPNWindow@@@Z
?PostDomodal@XPNDialog@@UAEXPAVCPNWindow@@@Z
?GetSingleInstanceId@XPNDialog@@UAEKXZ
?GetTemplateId@XPNDialog@@UBEKXZ
?SetDefaultButtonId@CPNDialog@@UAEXK@Z
?GetDefaultButtonId@CPNDialog@@UBEKXZ
?SetSingleInstance@CPNDialog@@UAEXH@Z
??0CPNIcon@@QAE@XZ
?LoadSizedIcon@CPNIcon@@UAEHKJJ@Z
??1CPNIcon@@UAE@XZ
PNGuiTerminate

pncrt

_open
_sopen
_close
_tell
_read
_write
_unlink
_creat
_lseek
_ltoa
_purecall
??3@YAXPAX@Z
wcscat
wcscpy
wcslen
free
wcschr
malloc
??2@YAPAXI@Z
strncpy
_ftol
strchr
sprintf
strrchr
strtok
_splitpath
strstr
remove
strncmp
wcstok
_wcsdup
tolower
memmove
_snprintf
_putenv
_strcmpi
_mbctype
localtime
time
mktime
printf
_vsnprintf
_stricmp
isalpha
isdigit
isspace
strtoul
_errno
realloc
_ismbcspace
atol
_strnicmp
strpbrk
_fstat
_chsize
_lseeki64
_telli64
setlocale
_stat
vsprintf
rand
__dllonexit
_onexit
_initterm
_adjust_fdiv
_ftime
atoi

ole32

CoInitialize
CoCreateInstance
CoUninitialize

shell32

SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHBrowseForFolderA

comdlg32

GetOpenFileNameW
GetSaveFileNameW
GetSaveFileNameA
GetOpenFileNameA

user32

GetDlgItem
GetDlgItemTextA
CharNextW
SetDlgItemTextA
EnumChildWindows
MoveWindow
GetWindowRect
CharNextA
SetWindowLongA
GetParent
PostMessageA
OffsetRect
SetRect
FindWindowExA
SetWindowPos
GetSystemMetrics
GetClientRect
SetWindowTextA
wsprintfA
EndPaint
FillRect
GetSysColor
BeginPaint
ScreenToClient
InvalidateRect
GetWindowLongA
CreateWindowExA
DrawTextA
DestroyIcon
DrawStateA
PtInRect
ReleaseCapture
WindowFromPoint
ClientToScreen
SetCapture
CallWindowProcA
SendMessageA
DefWindowProcA
UpdateWindow
SetFocus
DestroyWindow
MapDialogRect
CreateDialogParamA
GetWindowThreadProcessId
PostThreadMessageA
SetTimer
SendDlgItemMessageA
CharPrevA
DialogBoxParamA
EnumWindows
SendMessageTimeoutA
GetKeyState
MessageBoxA
SetForegroundWindow
MapWindowPoints
SystemParametersInfoA
GetWindow
ReleaseDC
GetDC
GetWindowTextA
ShowWindow
EnableWindow
IsWindow
IsDlgButtonChecked
IntersectRect
GetLastActivePopup
EndDialog
GetCapture
GetActiveWindow
DdeClientTransaction
DdeGetData
FindWindowA
DdeConnect
DdeDisconnect
DdeFreeDataHandle
DdeUninitialize
DdeInitializeA
DdeFreeStringHandle
DdeCreateStringHandleA
DdeGetLastError

advapi32

RegCloseKey
RegDeleteValueA
RegQueryValueExA
RegCreateKeyA
RegSetValueExA
RegQueryValueA
RegSetValueA
RegEnumKeyA
RegOpenKeyExA
RegCreateKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyA

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

gdi32

DeleteObject
SelectObject
BitBlt
SetTextColor
GetStockObject
SetBkMode
CreateCompatibleBitmap
GetTextExtentPoint32A
GetDCOrgEx
GetClipBox
GetDeviceCaps
SetBkColor
ExtTextOutA
CreateSolidBrush

comctl32

ImageList_LoadImageA
ImageList_GetIcon

oleaut32

VariantClear
VariantInit

winmm

waveOutGetDevCapsA

kernel32

GetSystemInfo
lstrcpyA
GetLocaleInfoA
lstrlenA
FindFirstFileW
lstrcpynA
CreateDirectoryA
DeleteFileA
GetVersionExA
GlobalUnlock
GlobalMemoryStatus
GlobalLock
RemoveDirectoryA
FindNextFileA
FindClose
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
OpenFile
GetFileSize
ReadFile
CloseHandle
GetEnvironmentVariableA
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
FreeLibrary
LoadLibraryA
GetPrivateProfileStringA
GetLastError
GetLogicalDriveStringsA
GetDriveTypeA
WideCharToMultiByte
MultiByteToWideChar
InterlockedIncrement
InterlockedDecrement
DisableThreadLibraryCalls
GlobalFree
CreateFileA
GlobalAlloc
CreateFileMappingA
GetTempFileNameA
LCMapStringA
GetSystemDirectoryA
GetTickCount
GetTempPathA
GetVersion
SetErrorMode
GetProfileStringA
WinExec
UnmapViewOfFile
MapViewOfFile
FindFirstFileA
GetFileAttributesA
CreateProcessA

Exports

Exports

?DdeCallback@@YGPAUHDDEDATA__@@IIPAUHCONV__@@PAUHSZ__@@1PAU1@KK@Z
RMACreateInstance
RMAShutdown
RPCreateClass
SetDLLAccessPath

Sections

.text
Size: 280KB - Virtual size: 276KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_DATA
Size: 4KB - Virtual size: 378B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 180KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
rtsp.reg

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

UPX0 Size: - Virtual size: 200KB

UPX1 Size: 17KB - Virtual size: 20KB

.rsrc Size: 27KB - Virtual size: 28KB

ec921e5d0e065fbeed93d67efd2c4afa

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

shlwapi

ole32

oleaut32

Exports

Exports

Sections

.text Size: 216KB - Virtual size: 214KB

_TEXT64 Size: 4KB - Virtual size: 1KB

.rdata Size: 60KB - Virtual size: 56KB

.data Size: 24KB - Virtual size: 36KB

.rsrc Size: 4KB - Virtual size: 936B

.reloc Size: 36KB - Virtual size: 32KB

9a126c029018ddbb4b569b54eed56ea5

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

shlwapi

ole32

oleaut32

Exports

Exports

Sections

.text Size: 216KB - Virtual size: 214KB

_TEXT64 Size: 4KB - Virtual size: 1KB

.rdata Size: 60KB - Virtual size: 56KB

.data Size: 24KB - Virtual size: 37KB

.rsrc Size: 4KB - Virtual size: 936B

.reloc Size: 36KB - Virtual size: 32KB

419524d8dad68da67386c3959cf0842e

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 158KB - Virtual size: 158KB

.rdata Size: 15KB - Virtual size: 14KB

.data Size: 9KB - Virtual size: 14KB

.idata Size: 1KB - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 12KB - Virtual size: 11KB

828907b7a8ec04c9c4031e40ef2f76ec

Headers

File Characteristics

Imports

kernel32

Exports

Exports

UPX0
Size: - Virtual size: 200KB

UPX1
Size: 17KB - Virtual size: 20KB

.rsrc
Size: 27KB - Virtual size: 28KB

.text
Size: 216KB - Virtual size: 214KB

_TEXT64
Size: 4KB - Virtual size: 1KB

.rdata
Size: 60KB - Virtual size: 56KB

.data
Size: 24KB - Virtual size: 36KB

.rsrc
Size: 4KB - Virtual size: 936B

.reloc
Size: 36KB - Virtual size: 32KB

.text
Size: 216KB - Virtual size: 214KB

_TEXT64
Size: 4KB - Virtual size: 1KB

.rdata
Size: 60KB - Virtual size: 56KB

.data
Size: 24KB - Virtual size: 37KB

.rsrc
Size: 4KB - Virtual size: 936B

.reloc
Size: 36KB - Virtual size: 32KB

.text
Size: 158KB - Virtual size: 158KB

.rdata
Size: 15KB - Virtual size: 14KB

.data
Size: 9KB - Virtual size: 14KB

.idata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 12KB - Virtual size: 11KB

.text
Size: 212KB - Virtual size: 211KB

.rdata
Size: 27KB - Virtual size: 27KB

.data
Size: 19KB - Virtual size: 26KB

.rsrc
Size: 1024B - Virtual size: 896B

.reloc
Size: 11KB - Virtual size: 10KB

.text
Size: 1024B - Virtual size: 790B

.rdata
Size: 512B - Virtual size: 176B

.data
Size: 512B - Virtual size: 176B

.idata
Size: 512B - Virtual size: 494B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 194B

.text
Size: 104KB - Virtual size: 103KB

.rdata
Size: 16KB - Virtual size: 12KB

.data
Size: 8KB - Virtual size: 4KB

.rsrc
Size: 32KB - Virtual size: 28KB

.reloc
Size: 8KB - Virtual size: 7KB

.text
Size: 24KB - Virtual size: 22KB

.rdata
Size: 44KB - Virtual size: 40KB

.data
Size: 16KB - Virtual size: 16KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 1KB

.text
Size: 24KB - Virtual size: 21KB