NERO[.]iso | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NERO.iso
Size

449.6MB
MD5

0bd2ddc19b3c4d137990b00691a3852a
SHA1

a7b6fe6359f20d7cff9901f942bea7f92f193028
SHA256

149eed0b8ccc007261bac962e9a863290280370e31c9b995f34fb78a3f648956
SHA512

0aab49524d128d82ec29aaa692e69051db4e7a9eb6f708b5d7377032fef17732873050d33fee68c79dd8f6f7cc84357b66fb1c6377b17a4b763f9941118bc0be
SSDEEP

12582912:1r1RCxLguN5+B/cDiQp4phxg4rq5NFGf1:ZCxLg9/cpp4pXg4rEs1

Score

3^/10

Malware Config

Signatures

Unsigned PE 19 IoCs

Checks for missing Authenticode signature.

resource
unpack003/Aac.dll
unpack004/Aiff.dll
unpack005/DefConvertor.dll
unpack007/Vqf.dll
unpack008/VqfDecLib.dll
unpack009/VqfEncLib.dll
unpack002/InCD 4/Redist/mfc42.dll
unpack002/InCD 4/Redist/msvcrt.dll
unpack002/InCD 4/Setup.exe
unpack002/InCD 4/sharedNT/InCD.exe
unpack002/InCD 4/w9x/InCD.exe
unpack002/Nero/Nero/nero.exe
unpack002/Nero/Redist/MSVCP60.DLL
unpack002/Nero/Redist/mfc42.DLL
unpack002/Nero/Redist/msvcrt.dll
unpack002/Nero/Setup.exe
unpack002/Nero/setup/shortcut.dll
unpack002/setup.exe
unpack002/setupx.exe

Files

NERO.iso
.iso
out.iso
.iso
Acrobat/chs/acrobat.exe
.exe windows:4 windows x86 arch:x86

4204e1fe9e2e0a7f6bec612446ce171b

Code Sign

4a:19:d2:38:8c:82:59:1c:a5:5d:73:5f:15:5d:dc:a3
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

12/05/1997, 00:00

Not After

07/01/2004, 23:59

Subject

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

08:7a:6d:5c:6f:62:93:4f:ba:c4:fd:43:e1:14:18:9d
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

28/02/2001, 00:00

Not After

06/01/2004, 23:59

Subject

CN=VeriSign Time Stamping Service,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)01,O=VeriSign\, Inc.

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

4b:c7:c2:d2:c6:7c:bb:62:09:ef:c7:ac:70:62:ae:08
Certificate

Issuer

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

Not Before

23/10/2000, 00:00

Not After

23/10/2001, 23:59

Subject

CN=Adobe Systems\, Incorporated,OU=VeriSign Commercial Software Publishers CA+OU=www.verisign.com/repository/CPS Incorp. by Ref.\,LIAB.LTD(c)96+OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Acrobat Engineering,O=VeriSign\, Inc.,L=Internet+L=San Jose,ST=CA,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageKeyEncipherment

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFilePointer
CreateDirectoryA
GetPrivateProfileStringA
SetFileAttributesA
SetFileTime
LocalFileTimeToFileTime
WriteFile
DosDateTimeToFileTime
GetProcAddress
DeleteFileA
FreeLibrary
GetTempFileNameA
LoadLibraryA
GetTempPathA
GetSystemDirectoryA
FormatMessageA
lstrcmpA
lstrcpynA
GetLastError
ReadFile
FindResourceA
CompareStringA
CreateProcessA
WaitForSingleObject
GetStartupInfoA
RemoveDirectoryA
FindNextFileA
ExitProcess
MulDiv
GetSystemDefaultLCID
GetModuleFileNameA
lstrcatA
GetFileAttributesA
CreateFileA
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
Sleep
GetDiskFreeSpaceA
FindFirstFileA
FindClose
lstrcpyA
lstrlenA
LockResource
LoadResource
GetWindowsDirectoryA
CloseHandle
SetStdHandle
LCMapStringW
LCMapStringA
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
FlushFileBuffers
GetOEMCP
GetACP
GetCPInfo
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
MultiByteToWideChar
GetStringTypeW
GetStringTypeA
WideCharToMultiByte
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersion
GetCommandLineA
GetModuleHandleA
HeapFree
HeapAlloc

user32

SendMessageA
TranslateMessage
MessageBoxA
wsprintfA
GetWindowLongA
GetParent
SetWindowTextA
GetWindowTextA
GetWindow
SetDlgItemTextA
EndDialog
SendDlgItemMessageA
CharNextA
DialogBoxParamA
GetClassNameA
IsCharAlphaA
GetDesktopWindow
GetDlgItemTextA
KillTimer
EnableWindow
SetTimer
PostMessageA
SetFocus
CreateDialogParamA
DestroyWindow
GetDlgItem
GetDC
ReleaseDC
ScreenToClient
SetWindowLongA
CreateWindowExA
SystemParametersInfoA
GetClientRect
MapWindowPoints
SetWindowPos
LoadStringA
MessageBeep
GetSysColor
DispatchMessageA
PeekMessageA
GetWindowRect

gdi32

CreateFontIndirectA
TextOutA
SetTextColor
SelectObject
SetBkMode
GetTextExtentPointA
GetDeviceCaps
GetObjectA
DeleteObject

comctl32

ord17
PropertySheetA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

shell32

ShellExecuteA
SHBrowseForFolderA
SHGetPathFromIDListA

lz32

LZOpenFileA
LZCopy
LZClose

Sections

.text
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Acrobat/cht/acrobat.exe
.exe windows:4 windows x86 arch:x86

4204e1fe9e2e0a7f6bec612446ce171b

Code Sign

4a:19:d2:38:8c:82:59:1c:a5:5d:73:5f:15:5d:dc:a3
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

12/05/1997, 00:00

Not After

07/01/2004, 23:59

Subject

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

08:7a:6d:5c:6f:62:93:4f:ba:c4:fd:43:e1:14:18:9d
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

28/02/2001, 00:00

Not After

06/01/2004, 23:59

Subject

CN=VeriSign Time Stamping Service,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)01,O=VeriSign\, Inc.

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

4b:c7:c2:d2:c6:7c:bb:62:09:ef:c7:ac:70:62:ae:08
Certificate

Issuer

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

Not Before

23/10/2000, 00:00

Not After

23/10/2001, 23:59

Subject

CN=Adobe Systems\, Incorporated,OU=VeriSign Commercial Software Publishers CA+OU=www.verisign.com/repository/CPS Incorp. by Ref.\,LIAB.LTD(c)96+OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Acrobat Engineering,O=VeriSign\, Inc.,L=Internet+L=San Jose,ST=CA,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageKeyEncipherment

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFilePointer
CreateDirectoryA
GetPrivateProfileStringA
SetFileAttributesA
SetFileTime
LocalFileTimeToFileTime
WriteFile
DosDateTimeToFileTime
GetProcAddress
DeleteFileA
FreeLibrary
GetTempFileNameA
LoadLibraryA
GetTempPathA
GetSystemDirectoryA
FormatMessageA
lstrcmpA
lstrcpynA
GetLastError
ReadFile
FindResourceA
CompareStringA
CreateProcessA
WaitForSingleObject
GetStartupInfoA
RemoveDirectoryA
FindNextFileA
ExitProcess
MulDiv
GetSystemDefaultLCID
GetModuleFileNameA
lstrcatA
GetFileAttributesA
CreateFileA
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
Sleep
GetDiskFreeSpaceA
FindFirstFileA
FindClose
lstrcpyA
lstrlenA
LockResource
LoadResource
GetWindowsDirectoryA
CloseHandle
SetStdHandle
LCMapStringW
LCMapStringA
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
FlushFileBuffers
GetOEMCP
GetACP
GetCPInfo
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
MultiByteToWideChar
GetStringTypeW
GetStringTypeA
WideCharToMultiByte
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersion
GetCommandLineA
GetModuleHandleA
HeapFree
HeapAlloc

user32

SendMessageA
TranslateMessage
MessageBoxA
wsprintfA
GetWindowLongA
GetParent
SetWindowTextA
GetWindowTextA
GetWindow
SetDlgItemTextA
EndDialog
SendDlgItemMessageA
CharNextA
DialogBoxParamA
GetClassNameA
IsCharAlphaA
GetDesktopWindow
GetDlgItemTextA
KillTimer
EnableWindow
SetTimer
PostMessageA
SetFocus
CreateDialogParamA
DestroyWindow
GetDlgItem
GetDC
ReleaseDC
ScreenToClient
SetWindowLongA
CreateWindowExA
SystemParametersInfoA
GetClientRect
MapWindowPoints
SetWindowPos
LoadStringA
MessageBeep
GetSysColor
DispatchMessageA
PeekMessageA
GetWindowRect

gdi32

CreateFontIndirectA
TextOutA
SetTextColor
SelectObject
SetBkMode
GetTextExtentPointA
GetDeviceCaps
GetObjectA
DeleteObject

comctl32

ord17
PropertySheetA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

shell32

ShellExecuteA
SHBrowseForFolderA
SHGetPathFromIDListA

lz32

LZOpenFileA
LZCopy
LZClose

Sections

.text
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Acrobat/deu/acrobat.exe
.exe windows:4 windows x86 arch:x86

4204e1fe9e2e0a7f6bec612446ce171b

Code Sign

4a:19:d2:38:8c:82:59:1c:a5:5d:73:5f:15:5d:dc:a3
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

12/05/1997, 00:00

Not After

07/01/2004, 23:59

Subject

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

08:7a:6d:5c:6f:62:93:4f:ba:c4:fd:43:e1:14:18:9d
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

28/02/2001, 00:00

Not After

06/01/2004, 23:59

Subject

CN=VeriSign Time Stamping Service,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)01,O=VeriSign\, Inc.

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

4b:c7:c2:d2:c6:7c:bb:62:09:ef:c7:ac:70:62:ae:08
Certificate

Issuer

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

Not Before

23/10/2000, 00:00

Not After

23/10/2001, 23:59

Subject

CN=Adobe Systems\, Incorporated,OU=VeriSign Commercial Software Publishers CA+OU=www.verisign.com/repository/CPS Incorp. by Ref.\,LIAB.LTD(c)96+OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Acrobat Engineering,O=VeriSign\, Inc.,L=Internet+L=San Jose,ST=CA,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageKeyEncipherment

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFilePointer
CreateDirectoryA
GetPrivateProfileStringA
SetFileAttributesA
SetFileTime
LocalFileTimeToFileTime
WriteFile
DosDateTimeToFileTime
GetProcAddress
DeleteFileA
FreeLibrary
GetTempFileNameA
LoadLibraryA
GetTempPathA
GetSystemDirectoryA
FormatMessageA
lstrcmpA
lstrcpynA
GetLastError
ReadFile
FindResourceA
CompareStringA
CreateProcessA
WaitForSingleObject
GetStartupInfoA
RemoveDirectoryA
FindNextFileA
ExitProcess
MulDiv
GetSystemDefaultLCID
GetModuleFileNameA
lstrcatA
GetFileAttributesA
CreateFileA
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
Sleep
GetDiskFreeSpaceA
FindFirstFileA
FindClose
lstrcpyA
lstrlenA
LockResource
LoadResource
GetWindowsDirectoryA
CloseHandle
SetStdHandle
LCMapStringW
LCMapStringA
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
FlushFileBuffers
GetOEMCP
GetACP
GetCPInfo
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
MultiByteToWideChar
GetStringTypeW
GetStringTypeA
WideCharToMultiByte
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersion
GetCommandLineA
GetModuleHandleA
HeapFree
HeapAlloc

user32

SendMessageA
TranslateMessage
MessageBoxA
wsprintfA
GetWindowLongA
GetParent
SetWindowTextA
GetWindowTextA
GetWindow
SetDlgItemTextA
EndDialog
SendDlgItemMessageA
CharNextA
DialogBoxParamA
GetClassNameA
IsCharAlphaA
GetDesktopWindow
GetDlgItemTextA
KillTimer
EnableWindow
SetTimer
PostMessageA
SetFocus
CreateDialogParamA
DestroyWindow
GetDlgItem
GetDC
ReleaseDC
ScreenToClient
SetWindowLongA
CreateWindowExA
SystemParametersInfoA
GetClientRect
MapWindowPoints
SetWindowPos
LoadStringA
MessageBeep
GetSysColor
DispatchMessageA
PeekMessageA
GetWindowRect

gdi32

CreateFontIndirectA
TextOutA
SetTextColor
SelectObject
SetBkMode
GetTextExtentPointA
GetDeviceCaps
GetObjectA
DeleteObject

comctl32

ord17
PropertySheetA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

shell32

ShellExecuteA
SHBrowseForFolderA
SHGetPathFromIDListA

lz32

LZOpenFileA
LZCopy
LZClose

Sections

.text
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Acrobat/eng/acrobat.exe
.exe windows:4 windows x86 arch:x86

4204e1fe9e2e0a7f6bec612446ce171b

Code Sign

4a:19:d2:38:8c:82:59:1c:a5:5d:73:5f:15:5d:dc:a3
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

12/05/1997, 00:00

Not After

07/01/2004, 23:59

Subject

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

08:7a:6d:5c:6f:62:93:4f:ba:c4:fd:43:e1:14:18:9d
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

28/02/2001, 00:00

Not After

06/01/2004, 23:59

Subject

CN=VeriSign Time Stamping Service,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)01,O=VeriSign\, Inc.

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

4b:c7:c2:d2:c6:7c:bb:62:09:ef:c7:ac:70:62:ae:08
Certificate

Issuer

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

Not Before

23/10/2000, 00:00

Not After

23/10/2001, 23:59

Subject

CN=Adobe Systems\, Incorporated,OU=VeriSign Commercial Software Publishers CA+OU=www.verisign.com/repository/CPS Incorp. by Ref.\,LIAB.LTD(c)96+OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Acrobat Engineering,O=VeriSign\, Inc.,L=Internet+L=San Jose,ST=CA,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageKeyEncipherment

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFilePointer
CreateDirectoryA
GetPrivateProfileStringA
SetFileAttributesA
SetFileTime
LocalFileTimeToFileTime
WriteFile
DosDateTimeToFileTime
GetProcAddress
DeleteFileA
FreeLibrary
GetTempFileNameA
LoadLibraryA
GetTempPathA
GetSystemDirectoryA
FormatMessageA
lstrcmpA
lstrcpynA
GetLastError
ReadFile
FindResourceA
CompareStringA
CreateProcessA
WaitForSingleObject
GetStartupInfoA
RemoveDirectoryA
FindNextFileA
ExitProcess
MulDiv
GetSystemDefaultLCID
GetModuleFileNameA
lstrcatA
GetFileAttributesA
CreateFileA
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
Sleep
GetDiskFreeSpaceA
FindFirstFileA
FindClose
lstrcpyA
lstrlenA
LockResource
LoadResource
GetWindowsDirectoryA
CloseHandle
SetStdHandle
LCMapStringW
LCMapStringA
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
FlushFileBuffers
GetOEMCP
GetACP
GetCPInfo
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
MultiByteToWideChar
GetStringTypeW
GetStringTypeA
WideCharToMultiByte
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersion
GetCommandLineA
GetModuleHandleA
HeapFree
HeapAlloc

user32

SendMessageA
TranslateMessage
MessageBoxA
wsprintfA
GetWindowLongA
GetParent
SetWindowTextA
GetWindowTextA
GetWindow
SetDlgItemTextA
EndDialog
SendDlgItemMessageA
CharNextA
DialogBoxParamA
GetClassNameA
IsCharAlphaA
GetDesktopWindow
GetDlgItemTextA
KillTimer
EnableWindow
SetTimer
PostMessageA
SetFocus
CreateDialogParamA
DestroyWindow
GetDlgItem
GetDC
ReleaseDC
ScreenToClient
SetWindowLongA
CreateWindowExA
SystemParametersInfoA
GetClientRect
MapWindowPoints
SetWindowPos
LoadStringA
MessageBeep
GetSysColor
DispatchMessageA
PeekMessageA
GetWindowRect

gdi32

CreateFontIndirectA
TextOutA
SetTextColor
SelectObject
SetBkMode
GetTextExtentPointA
GetDeviceCaps
GetObjectA
DeleteObject

comctl32

ord17
PropertySheetA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

shell32

ShellExecuteA
SHBrowseForFolderA
SHGetPathFromIDListA

lz32

LZOpenFileA
LZCopy
LZClose

Sections

.text
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Acrobat/esp/acrobat.exe
.exe windows:4 windows x86 arch:x86

4204e1fe9e2e0a7f6bec612446ce171b

Code Sign

4a:19:d2:38:8c:82:59:1c:a5:5d:73:5f:15:5d:dc:a3
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

12/05/1997, 00:00

Not After

07/01/2004, 23:59

Subject

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

08:7a:6d:5c:6f:62:93:4f:ba:c4:fd:43:e1:14:18:9d
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

28/02/2001, 00:00

Not After

06/01/2004, 23:59

Subject

CN=VeriSign Time Stamping Service,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)01,O=VeriSign\, Inc.

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

4b:c7:c2:d2:c6:7c:bb:62:09:ef:c7:ac:70:62:ae:08
Certificate

Issuer

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

Not Before

23/10/2000, 00:00

Not After

23/10/2001, 23:59

Subject

CN=Adobe Systems\, Incorporated,OU=VeriSign Commercial Software Publishers CA+OU=www.verisign.com/repository/CPS Incorp. by Ref.\,LIAB.LTD(c)96+OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Acrobat Engineering,O=VeriSign\, Inc.,L=Internet+L=San Jose,ST=CA,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageKeyEncipherment

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFilePointer
CreateDirectoryA
GetPrivateProfileStringA
SetFileAttributesA
SetFileTime
LocalFileTimeToFileTime
WriteFile
DosDateTimeToFileTime
GetProcAddress
DeleteFileA
FreeLibrary
GetTempFileNameA
LoadLibraryA
GetTempPathA
GetSystemDirectoryA
FormatMessageA
lstrcmpA
lstrcpynA
GetLastError
ReadFile
FindResourceA
CompareStringA
CreateProcessA
WaitForSingleObject
GetStartupInfoA
RemoveDirectoryA
FindNextFileA
ExitProcess
MulDiv
GetSystemDefaultLCID
GetModuleFileNameA
lstrcatA
GetFileAttributesA
CreateFileA
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
Sleep
GetDiskFreeSpaceA
FindFirstFileA
FindClose
lstrcpyA
lstrlenA
LockResource
LoadResource
GetWindowsDirectoryA
CloseHandle
SetStdHandle
LCMapStringW
LCMapStringA
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
FlushFileBuffers
GetOEMCP
GetACP
GetCPInfo
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
MultiByteToWideChar
GetStringTypeW
GetStringTypeA
WideCharToMultiByte
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersion
GetCommandLineA
GetModuleHandleA
HeapFree
HeapAlloc

user32

SendMessageA
TranslateMessage
MessageBoxA
wsprintfA
GetWindowLongA
GetParent
SetWindowTextA
GetWindowTextA
GetWindow
SetDlgItemTextA
EndDialog
SendDlgItemMessageA
CharNextA
DialogBoxParamA
GetClassNameA
IsCharAlphaA
GetDesktopWindow
GetDlgItemTextA
KillTimer
EnableWindow
SetTimer
PostMessageA
SetFocus
CreateDialogParamA
DestroyWindow
GetDlgItem
GetDC
ReleaseDC
ScreenToClient
SetWindowLongA
CreateWindowExA
SystemParametersInfoA
GetClientRect
MapWindowPoints
SetWindowPos
LoadStringA
MessageBeep
GetSysColor
DispatchMessageA
PeekMessageA
GetWindowRect

gdi32

CreateFontIndirectA
TextOutA
SetTextColor
SelectObject
SetBkMode
GetTextExtentPointA
GetDeviceCaps
GetObjectA
DeleteObject

comctl32

ord17
PropertySheetA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

shell32

ShellExecuteA
SHBrowseForFolderA
SHGetPathFromIDListA

lz32

LZOpenFileA
LZCopy
LZClose

Sections

.text
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Acrobat/fra/acrobat.exe
.exe windows:4 windows x86 arch:x86

4204e1fe9e2e0a7f6bec612446ce171b

Code Sign

4a:19:d2:38:8c:82:59:1c:a5:5d:73:5f:15:5d:dc:a3
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

12/05/1997, 00:00

Not After

07/01/2004, 23:59

Subject

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

08:7a:6d:5c:6f:62:93:4f:ba:c4:fd:43:e1:14:18:9d
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

28/02/2001, 00:00

Not After

06/01/2004, 23:59

Subject

CN=VeriSign Time Stamping Service,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)01,O=VeriSign\, Inc.

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

4b:c7:c2:d2:c6:7c:bb:62:09:ef:c7:ac:70:62:ae:08
Certificate

Issuer

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

Not Before

23/10/2000, 00:00

Not After

23/10/2001, 23:59

Subject

CN=Adobe Systems\, Incorporated,OU=VeriSign Commercial Software Publishers CA+OU=www.verisign.com/repository/CPS Incorp. by Ref.\,LIAB.LTD(c)96+OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Acrobat Engineering,O=VeriSign\, Inc.,L=Internet+L=San Jose,ST=CA,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageKeyEncipherment

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFilePointer
CreateDirectoryA
GetPrivateProfileStringA
SetFileAttributesA
SetFileTime
LocalFileTimeToFileTime
WriteFile
DosDateTimeToFileTime
GetProcAddress
DeleteFileA
FreeLibrary
GetTempFileNameA
LoadLibraryA
GetTempPathA
GetSystemDirectoryA
FormatMessageA
lstrcmpA
lstrcpynA
GetLastError
ReadFile
FindResourceA
CompareStringA
CreateProcessA
WaitForSingleObject
GetStartupInfoA
RemoveDirectoryA
FindNextFileA
ExitProcess
MulDiv
GetSystemDefaultLCID
GetModuleFileNameA
lstrcatA
GetFileAttributesA
CreateFileA
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
Sleep
GetDiskFreeSpaceA
FindFirstFileA
FindClose
lstrcpyA
lstrlenA
LockResource
LoadResource
GetWindowsDirectoryA
CloseHandle
SetStdHandle
LCMapStringW
LCMapStringA
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
FlushFileBuffers
GetOEMCP
GetACP
GetCPInfo
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
MultiByteToWideChar
GetStringTypeW
GetStringTypeA
WideCharToMultiByte
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersion
GetCommandLineA
GetModuleHandleA
HeapFree
HeapAlloc

user32

SendMessageA
TranslateMessage
MessageBoxA
wsprintfA
GetWindowLongA
GetParent
SetWindowTextA
GetWindowTextA
GetWindow
SetDlgItemTextA
EndDialog
SendDlgItemMessageA
CharNextA
DialogBoxParamA
GetClassNameA
IsCharAlphaA
GetDesktopWindow
GetDlgItemTextA
KillTimer
EnableWindow
SetTimer
PostMessageA
SetFocus
CreateDialogParamA
DestroyWindow
GetDlgItem
GetDC
ReleaseDC
ScreenToClient
SetWindowLongA
CreateWindowExA
SystemParametersInfoA
GetClientRect
MapWindowPoints
SetWindowPos
LoadStringA
MessageBeep
GetSysColor
DispatchMessageA
PeekMessageA
GetWindowRect

gdi32

CreateFontIndirectA
TextOutA
SetTextColor
SelectObject
SetBkMode
GetTextExtentPointA
GetDeviceCaps
GetObjectA
DeleteObject

comctl32

ord17
PropertySheetA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

shell32

ShellExecuteA
SHBrowseForFolderA
SHGetPathFromIDListA

lz32

LZOpenFileA
LZCopy
LZClose

Sections

.text
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Acrobat/jpn/acrobat.exe
.exe windows:4 windows x86 arch:x86

4204e1fe9e2e0a7f6bec612446ce171b

Code Sign

4a:19:d2:38:8c:82:59:1c:a5:5d:73:5f:15:5d:dc:a3
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

12/05/1997, 00:00

Not After

07/01/2004, 23:59

Subject

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

08:7a:6d:5c:6f:62:93:4f:ba:c4:fd:43:e1:14:18:9d
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

28/02/2001, 00:00

Not After

06/01/2004, 23:59

Subject

CN=VeriSign Time Stamping Service,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)01,O=VeriSign\, Inc.

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

4b:c7:c2:d2:c6:7c:bb:62:09:ef:c7:ac:70:62:ae:08
Certificate

Issuer

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

Not Before

23/10/2000, 00:00

Not After

23/10/2001, 23:59

Subject

CN=Adobe Systems\, Incorporated,OU=VeriSign Commercial Software Publishers CA+OU=www.verisign.com/repository/CPS Incorp. by Ref.\,LIAB.LTD(c)96+OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Acrobat Engineering,O=VeriSign\, Inc.,L=Internet+L=San Jose,ST=CA,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageKeyEncipherment

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFilePointer
CreateDirectoryA
GetPrivateProfileStringA
SetFileAttributesA
SetFileTime
LocalFileTimeToFileTime
WriteFile
DosDateTimeToFileTime
GetProcAddress
DeleteFileA
FreeLibrary
GetTempFileNameA
LoadLibraryA
GetTempPathA
GetSystemDirectoryA
FormatMessageA
lstrcmpA
lstrcpynA
GetLastError
ReadFile
FindResourceA
CompareStringA
CreateProcessA
WaitForSingleObject
GetStartupInfoA
RemoveDirectoryA
FindNextFileA
ExitProcess
MulDiv
GetSystemDefaultLCID
GetModuleFileNameA
lstrcatA
GetFileAttributesA
CreateFileA
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
Sleep
GetDiskFreeSpaceA
FindFirstFileA
FindClose
lstrcpyA
lstrlenA
LockResource
LoadResource
GetWindowsDirectoryA
CloseHandle
SetStdHandle
LCMapStringW
LCMapStringA
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
FlushFileBuffers
GetOEMCP
GetACP
GetCPInfo
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
MultiByteToWideChar
GetStringTypeW
GetStringTypeA
WideCharToMultiByte
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersion
GetCommandLineA
GetModuleHandleA
HeapFree
HeapAlloc

user32

SendMessageA
TranslateMessage
MessageBoxA
wsprintfA
GetWindowLongA
GetParent
SetWindowTextA
GetWindowTextA
GetWindow
SetDlgItemTextA
EndDialog
SendDlgItemMessageA
CharNextA
DialogBoxParamA
GetClassNameA
IsCharAlphaA
GetDesktopWindow
GetDlgItemTextA
KillTimer
EnableWindow
SetTimer
PostMessageA
SetFocus
CreateDialogParamA
DestroyWindow
GetDlgItem
GetDC
ReleaseDC
ScreenToClient
SetWindowLongA
CreateWindowExA
SystemParametersInfoA
GetClientRect
MapWindowPoints
SetWindowPos
LoadStringA
MessageBeep
GetSysColor
DispatchMessageA
PeekMessageA
GetWindowRect

gdi32

CreateFontIndirectA
TextOutA
SetTextColor
SelectObject
SetBkMode
GetTextExtentPointA
GetDeviceCaps
GetObjectA
DeleteObject

comctl32

ord17
PropertySheetA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

shell32

ShellExecuteA
SHBrowseForFolderA
SHGetPathFromIDListA

lz32

LZOpenFileA
LZCopy
LZClose

Sections

.text
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Acrobat/kor/acrobat.exe
.exe windows:4 windows x86 arch:x86

4204e1fe9e2e0a7f6bec612446ce171b

Code Sign

4a:19:d2:38:8c:82:59:1c:a5:5d:73:5f:15:5d:dc:a3
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

12/05/1997, 00:00

Not After

07/01/2004, 23:59

Subject

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

08:7a:6d:5c:6f:62:93:4f:ba:c4:fd:43:e1:14:18:9d
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

28/02/2001, 00:00

Not After

06/01/2004, 23:59

Subject

CN=VeriSign Time Stamping Service,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)01,O=VeriSign\, Inc.

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

4b:c7:c2:d2:c6:7c:bb:62:09:ef:c7:ac:70:62:ae:08
Certificate

Issuer

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

Not Before

23/10/2000, 00:00

Not After

23/10/2001, 23:59

Subject

CN=Adobe Systems\, Incorporated,OU=VeriSign Commercial Software Publishers CA+OU=www.verisign.com/repository/CPS Incorp. by Ref.\,LIAB.LTD(c)96+OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Acrobat Engineering,O=VeriSign\, Inc.,L=Internet+L=San Jose,ST=CA,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageKeyEncipherment

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFilePointer
CreateDirectoryA
GetPrivateProfileStringA
SetFileAttributesA
SetFileTime
LocalFileTimeToFileTime
WriteFile
DosDateTimeToFileTime
GetProcAddress
DeleteFileA
FreeLibrary
GetTempFileNameA
LoadLibraryA
GetTempPathA
GetSystemDirectoryA
FormatMessageA
lstrcmpA
lstrcpynA
GetLastError
ReadFile
FindResourceA
CompareStringA
CreateProcessA
WaitForSingleObject
GetStartupInfoA
RemoveDirectoryA
FindNextFileA
ExitProcess
MulDiv
GetSystemDefaultLCID
GetModuleFileNameA
lstrcatA
GetFileAttributesA
CreateFileA
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
Sleep
GetDiskFreeSpaceA
FindFirstFileA
FindClose
lstrcpyA
lstrlenA
LockResource
LoadResource
GetWindowsDirectoryA
CloseHandle
SetStdHandle
LCMapStringW
LCMapStringA
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
FlushFileBuffers
GetOEMCP
GetACP
GetCPInfo
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
MultiByteToWideChar
GetStringTypeW
GetStringTypeA
WideCharToMultiByte
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersion
GetCommandLineA
GetModuleHandleA
HeapFree
HeapAlloc

user32

SendMessageA
TranslateMessage
MessageBoxA
wsprintfA
GetWindowLongA
GetParent
SetWindowTextA
GetWindowTextA
GetWindow
SetDlgItemTextA
EndDialog
SendDlgItemMessageA
CharNextA
DialogBoxParamA
GetClassNameA
IsCharAlphaA
GetDesktopWindow
GetDlgItemTextA
KillTimer
EnableWindow
SetTimer
PostMessageA
SetFocus
CreateDialogParamA
DestroyWindow
GetDlgItem
GetDC
ReleaseDC
ScreenToClient
SetWindowLongA
CreateWindowExA
SystemParametersInfoA
GetClientRect
MapWindowPoints
SetWindowPos
LoadStringA
MessageBeep
GetSysColor
DispatchMessageA
PeekMessageA
GetWindowRect

gdi32

CreateFontIndirectA
TextOutA
SetTextColor
SelectObject
SetBkMode
GetTextExtentPointA
GetDeviceCaps
GetObjectA
DeleteObject

comctl32

ord17
PropertySheetA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

shell32

ShellExecuteA
SHBrowseForFolderA
SHGetPathFromIDListA

lz32

LZOpenFileA
LZCopy
LZClose

Sections

.text
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Acrobat/nld/acrobat.exe
.exe windows:4 windows x86 arch:x86

4204e1fe9e2e0a7f6bec612446ce171b

Code Sign

4a:19:d2:38:8c:82:59:1c:a5:5d:73:5f:15:5d:dc:a3
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

12/05/1997, 00:00

Not After

07/01/2004, 23:59

Subject

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

08:7a:6d:5c:6f:62:93:4f:ba:c4:fd:43:e1:14:18:9d
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

28/02/2001, 00:00

Not After

06/01/2004, 23:59

Subject

CN=VeriSign Time Stamping Service,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)01,O=VeriSign\, Inc.

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

4b:c7:c2:d2:c6:7c:bb:62:09:ef:c7:ac:70:62:ae:08
Certificate

Issuer

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

Not Before

23/10/2000, 00:00

Not After

23/10/2001, 23:59

Subject

CN=Adobe Systems\, Incorporated,OU=VeriSign Commercial Software Publishers CA+OU=www.verisign.com/repository/CPS Incorp. by Ref.\,LIAB.LTD(c)96+OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Acrobat Engineering,O=VeriSign\, Inc.,L=Internet+L=San Jose,ST=CA,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageKeyEncipherment

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFilePointer
CreateDirectoryA
GetPrivateProfileStringA
SetFileAttributesA
SetFileTime
LocalFileTimeToFileTime
WriteFile
DosDateTimeToFileTime
GetProcAddress
DeleteFileA
FreeLibrary
GetTempFileNameA
LoadLibraryA
GetTempPathA
GetSystemDirectoryA
FormatMessageA
lstrcmpA
lstrcpynA
GetLastError
ReadFile
FindResourceA
CompareStringA
CreateProcessA
WaitForSingleObject
GetStartupInfoA
RemoveDirectoryA
FindNextFileA
ExitProcess
MulDiv
GetSystemDefaultLCID
GetModuleFileNameA
lstrcatA
GetFileAttributesA
CreateFileA
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
Sleep
GetDiskFreeSpaceA
FindFirstFileA
FindClose
lstrcpyA
lstrlenA
LockResource
LoadResource
GetWindowsDirectoryA
CloseHandle
SetStdHandle
LCMapStringW
LCMapStringA
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
FlushFileBuffers
GetOEMCP
GetACP
GetCPInfo
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
MultiByteToWideChar
GetStringTypeW
GetStringTypeA
WideCharToMultiByte
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersion
GetCommandLineA
GetModuleHandleA
HeapFree
HeapAlloc

user32

SendMessageA
TranslateMessage
MessageBoxA
wsprintfA
GetWindowLongA
GetParent
SetWindowTextA
GetWindowTextA
GetWindow
SetDlgItemTextA
EndDialog
SendDlgItemMessageA
CharNextA
DialogBoxParamA
GetClassNameA
IsCharAlphaA
GetDesktopWindow
GetDlgItemTextA
KillTimer
EnableWindow
SetTimer
PostMessageA
SetFocus
CreateDialogParamA
DestroyWindow
GetDlgItem
GetDC
ReleaseDC
ScreenToClient
SetWindowLongA
CreateWindowExA
SystemParametersInfoA
GetClientRect
MapWindowPoints
SetWindowPos
LoadStringA
MessageBeep
GetSysColor
DispatchMessageA
PeekMessageA
GetWindowRect

gdi32

CreateFontIndirectA
TextOutA
SetTextColor
SelectObject
SetBkMode
GetTextExtentPointA
GetDeviceCaps
GetObjectA
DeleteObject

comctl32

ord17
PropertySheetA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

shell32

ShellExecuteA
SHBrowseForFolderA
SHGetPathFromIDListA

lz32

LZOpenFileA
LZCopy
LZClose

Sections

.text
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Acrobat/por/acrobat.exe
.exe windows:4 windows x86 arch:x86

4204e1fe9e2e0a7f6bec612446ce171b

Code Sign

4a:19:d2:38:8c:82:59:1c:a5:5d:73:5f:15:5d:dc:a3
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

12/05/1997, 00:00

Not After

07/01/2004, 23:59

Subject

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

08:7a:6d:5c:6f:62:93:4f:ba:c4:fd:43:e1:14:18:9d
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

28/02/2001, 00:00

Not After

06/01/2004, 23:59

Subject

CN=VeriSign Time Stamping Service,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)01,O=VeriSign\, Inc.

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

4b:c7:c2:d2:c6:7c:bb:62:09:ef:c7:ac:70:62:ae:08
Certificate

Issuer

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

Not Before

23/10/2000, 00:00

Not After

23/10/2001, 23:59

Subject

CN=Adobe Systems\, Incorporated,OU=VeriSign Commercial Software Publishers CA+OU=www.verisign.com/repository/CPS Incorp. by Ref.\,LIAB.LTD(c)96+OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Acrobat Engineering,O=VeriSign\, Inc.,L=Internet+L=San Jose,ST=CA,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageKeyEncipherment

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFilePointer
CreateDirectoryA
GetPrivateProfileStringA
SetFileAttributesA
SetFileTime
LocalFileTimeToFileTime
WriteFile
DosDateTimeToFileTime
GetProcAddress
DeleteFileA
FreeLibrary
GetTempFileNameA
LoadLibraryA
GetTempPathA
GetSystemDirectoryA
FormatMessageA
lstrcmpA
lstrcpynA
GetLastError
ReadFile
FindResourceA
CompareStringA
CreateProcessA
WaitForSingleObject
GetStartupInfoA
RemoveDirectoryA
FindNextFileA
ExitProcess
MulDiv
GetSystemDefaultLCID
GetModuleFileNameA
lstrcatA
GetFileAttributesA
CreateFileA
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
Sleep
GetDiskFreeSpaceA
FindFirstFileA
FindClose
lstrcpyA
lstrlenA
LockResource
LoadResource
GetWindowsDirectoryA
CloseHandle
SetStdHandle
LCMapStringW
LCMapStringA
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
FlushFileBuffers
GetOEMCP
GetACP
GetCPInfo
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
MultiByteToWideChar
GetStringTypeW
GetStringTypeA
WideCharToMultiByte
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersion
GetCommandLineA
GetModuleHandleA
HeapFree
HeapAlloc

user32

SendMessageA
TranslateMessage
MessageBoxA
wsprintfA
GetWindowLongA
GetParent
SetWindowTextA
GetWindowTextA
GetWindow
SetDlgItemTextA
EndDialog
SendDlgItemMessageA
CharNextA
DialogBoxParamA
GetClassNameA
IsCharAlphaA
GetDesktopWindow
GetDlgItemTextA
KillTimer
EnableWindow
SetTimer
PostMessageA
SetFocus
CreateDialogParamA
DestroyWindow
GetDlgItem
GetDC
ReleaseDC
ScreenToClient
SetWindowLongA
CreateWindowExA
SystemParametersInfoA
GetClientRect
MapWindowPoints
SetWindowPos
LoadStringA
MessageBeep
GetSysColor
DispatchMessageA
PeekMessageA
GetWindowRect

gdi32

CreateFontIndirectA
TextOutA
SetTextColor
SelectObject
SetBkMode
GetTextExtentPointA
GetDeviceCaps
GetObjectA
DeleteObject

comctl32

ord17
PropertySheetA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

shell32

ShellExecuteA
SHBrowseForFolderA
SHGetPathFromIDListA

lz32

LZOpenFileA
LZCopy
LZClose

Sections

.text
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Autorun.inf
Common Files/AudioPlugins/Aac.dll.cab
.cab
Aac.dll
.dll windows:4 windows x86 arch:x86

b5bf5c8f06397026c5ce8badf003416d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

aacenc32

aacStreamOpen32
aacStreamEncodeFrame32
aacStreamDestroy32
aacStreamClose32
ResetSbrHeaders

kernel32

TlsFree
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
SetErrorMode
GlobalFlags
GetProcessVersion
GetCPInfo
GetOEMCP
FindClose
FindFirstFileA
GetCurrentProcess
WriteFile
FlushFileBuffers
SetEndOfFile
MoveFileA
GetFullPathNameA
FindResourceExA
HeapFree
HeapAlloc
RtlUnwind
RaiseException
HeapReAlloc
GetFileType
GlobalHandle
GetSystemTime
GetLocalTime
GetCommandLineA
GetACP
GetSystemTimeAsFileTime
ExitProcess
TerminateProcess
HeapSize
SetStdHandle
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
SetHandleCount
GetStdHandle
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStringTypeA
GetStringTypeW
GetDriveTypeA
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
TlsAlloc
MulDiv
SetLastError
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
lstrcpynA
EnterCriticalSection
FileTimeToLocalFileTime
FileTimeToSystemTime
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalUnlock
GlobalFree
WritePrivateProfileStringA
GetPrivateProfileStringA
WaitForSingleObject
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
GetTempFileNameA
lstrcatA
lstrlenA
WinExec
lstrcpyA
GetWindowsDirectoryA
PeekNamedPipe
WideCharToMultiByte
MultiByteToWideChar
GetLocaleInfoA
GetSystemDefaultLangID
FormatMessageA
Sleep
GetCurrentDirectoryA
SetCurrentDirectoryA
IsBadWritePtr
LoadLibraryA
GetProcAddress
FreeLibrary
GetVersionExA
GetVersion
LocalAlloc
LocalFree
SetFilePointer
ReadFile
DeleteFileA
GetLastError
GetFileSize
GetFileTime
CreateFileA
CloseHandle
FindResourceA
SizeofResource
LoadResource
LockResource
InterlockedDecrement
InterlockedIncrement
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
SetEnvironmentVariableA
InterlockedExchange
GetFileInformationByHandle
GetTimeZoneInformation

user32

UnhookWindowsHookEx
SetPropA
GetClassLongA
CreateWindowExA
DefWindowProcA
GetDlgCtrlID
GetWindowTextLengthA
RegisterClassA
GetClassInfoA
GetCapture
GetTopWindow
CopyRect
AdjustWindowRectEx
SetFocus
MapWindowPoints
SendDlgItemMessageA
UpdateWindow
LoadIconA
CheckDlgButton
IsDlgButtonChecked
IsDialogMessageA
ShowWindow
ClientToScreen
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
GetAsyncKeyState
MapDialogRect
DestroyMenu
WindowFromPoint
UnregisterClassA
RegisterWindowMessageA
IsIconic
GetWindowPlacement
EndDialog
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
RemovePropA
GetPropA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
PostQuitMessage
WinHelpA
GetKeyState
PostMessageA
ScreenToClient
GetFocus
IsChild
GetDesktopWindow
CopyIcon
GetParent
InflateRect
SetWindowLongA
PtInRect
RedrawWindow
MessageBeep
DestroyCursor
ReleaseCapture
GetSysColor
GetDC
SystemParametersInfoA
SetRect
ReleaseDC
GetSystemMetrics
OffsetRect
InvalidateRect
SetCapture
GetSysColorBrush
LoadCursorA
LoadStringA
GetMenu
IsMenu
GetClientRect
GetWindowRect
AdjustWindowRect
GetActiveWindow
MessageBoxA
IsWindow
GetMenuItemCount
ModifyMenuA
GetMenuStringA
GetMenuItemID
GetSubMenu
GetWindowTextA
SetWindowTextA
GetClassNameA
SendMessageA
GetWindowLongA
GetWindow
EnableWindow
GetMessageTime
GetMessagePos
wsprintfA
GetLastActivePopup
CallWindowProcA
GetForegroundWindow
SetForegroundWindow
IsWindowEnabled
SetWindowPos
SetCursor

gdi32

CreateFontA
GetTextFaceA
GetStockObject
GetObjectA
CreateBitmap
GetClipBox
SetTextColor
SetBkColor
DeleteDC
SaveDC
RestoreDC
SelectObject
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetTextExtentPoint32A
DeleteObject
GetDeviceCaps
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
EnumFontFamiliesExA
CreateFontIndirectA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

shell32

ShellExecuteA

comctl32

ord17
PropertySheetA

ole32

CoUninitialize
CoInitialize
CoCreateInstance

wininet

InternetCrackUrlA
InternetCanonicalizeUrlA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

Exports

Exports

NERO_PLUGIN_GetPrimaryAudioObject
NERO_PLUGIN_ReadyToFinish

Sections

.text
Size: 584KB - Virtual size: 580KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 180KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 244KB - Virtual size: 242KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Common Files/AudioPlugins/Aiff.dll.cab
.cab
Aiff.dll
.dll windows:4 windows x86 arch:x86

909ff9eefa55a7967e221c635104ab4f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord825
ord815
ord540
ord537
ord800
ord823
ord858
ord860
ord535
ord940
ord3803
ord3317
ord2864
ord909
ord4185
ord696
ord801
ord6883
ord2614
ord2818
ord1168
ord394
ord541
ord3435
ord1228
ord547
ord641
ord616
ord2514
ord6467
ord772
ord656
ord609
ord2645
ord5265
ord4376
ord4853
ord4998
ord6052
ord1775
ord5280
ord4425
ord3597
ord4407
ord3610
ord2575
ord6055
ord4078
ord1776
ord5731
ord5241
ord3259
ord5163
ord6374
ord4353
ord5290
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord3402
ord4627
ord3574
ord567
ord500
ord324
ord2370
ord2302
ord4234
ord665
ord6334
ord6197
ord5860
ord6215
ord2860
ord2078
ord6880
ord2820
ord3180
ord354
ord6779
ord4710
ord6453
ord2411
ord2023
ord4218
ord2578
ord4398
ord3582
ord2299
ord2298
ord1116
ord1176
ord1575
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord1255
ord1578
ord600
ord826
ord269
ord2512
ord2554
ord4486
ord6375
ord3147
ord2982
ord3953
ord5714
ord5289
ord5307
ord4698
ord4079
ord2725
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord2385
ord3922
ord4396
ord4274

msvcrt

_adjust_fdiv
_purecall
__CxxFrameHandler
_mbscmp
atoi
isdigit
_mbsicmp
_CxxThrowException
ldexp
floor
frexp
_ftol
__dllonexit
_onexit
??1type_info@@UAE@XZ
free
_initterm
_strcmpi
malloc

kernel32

LocalFree
GetLastError
ReadFile
WriteFile
SetFilePointer
GetFileSize
GetFileTime
CreateFileA
CloseHandle
FindResourceA
SizeofResource
LoadResource
LockResource
InterlockedDecrement
InterlockedIncrement
LocalAlloc

user32

GetWindow
GetWindowLongA
EnableWindow
GetClientRect
GetWindowRect
AdjustWindowRect
IsWindow
GetWindowTextA
SetWindowTextA
GetClassNameA
SendMessageA

Exports

Exports

NERO_PLUGIN_GetPrimaryAudioObject
NERO_PLUGIN_ReadyToFinish

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Common Files/AudioPlugins/DefConvertor.dll.cab
.cab
DefConvertor.dll
.dll windows:4 windows x86 arch:x86

8fd6f71924fadad3807495e6809880bb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord3953
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord825
ord815
ord823
ord641
ord616
ord793
ord656
ord2514
ord6467
ord3719
ord5265
ord4376
ord4998
ord6052
ord1775
ord5280
ord4425
ord3597
ord4407
ord3610
ord2411
ord2023
ord4218
ord2578
ord6055
ord4078
ord1776
ord4398
ord5241
ord2385
ord5163
ord6374
ord4353
ord5290
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5731
ord1727
ord5714
ord2446
ord2124
ord5277
ord3402
ord4627
ord3582
ord567
ord324
ord2298
ord2362
ord2358
ord2302
ord4234
ord6334
ord4710
ord4853
ord1200
ord2642
ord6453
ord858
ord860
ord800
ord535
ord940
ord540
ord4160
ord3803
ord3317
ord2864
ord909
ord4185
ord696
ord801
ord6883
ord2614
ord2818
ord1168
ord394
ord541
ord537
ord3435
ord1116
ord1176
ord1575
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord1255
ord1578
ord600
ord826
ord269
ord2512
ord2554
ord4486
ord6375
ord5289
ord5307
ord4698
ord4079
ord2725
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord5261
ord3922
ord5065
ord4274

msvcrt

_initterm
_purecall
malloc
_ftol
free
realloc
__CxxFrameHandler
_mbscmp
atoi
isdigit
_mbsicmp
_CxxThrowException
_except_handler3
memmove
__dllonexit
_adjust_fdiv
_strcmpi
??1type_info@@UAE@XZ
_onexit

kernel32

LocalFree
FindResourceA
SizeofResource
LoadResource
LockResource
InterlockedDecrement
InterlockedIncrement
LocalAlloc

user32

SendMessageA
RedrawWindow
IsWindow
GetWindowTextA
SetWindowTextA
GetClassNameA
GetWindowLongA
GetWindow
EnableWindow

advapi32

RegCloseKey
RegCreateKeyA
RegOpenKeyA
RegQueryValueExA
RegSetValueExA

Exports

Exports

NERO_PLUGIN_GetPrimaryAudioObject
NERO_PLUGIN_ReadyToFinish

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Common Files/AudioPlugins/TWINVQ2.CDB.cab
.cab
TWINVQ2.CDB
Common Files/AudioPlugins/Vqf.dll.cab
.cab
Vqf.dll
.dll windows:4 windows x86 arch:x86

d06cded34f50b4043f7627df634b02f4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

vqfdeclib

EndDecoding
ReadDecoded
StartDecoding

vqfenclib

EncodeFrame
EncodeLastFrame
vqf_GetLastError
StartEncoding

mfc42

ord6883
ord2614
ord2818
ord1168
ord394
ord541
ord3435
ord1228
ord547
ord2764
ord4202
ord941
ord641
ord616
ord2514
ord6467
ord772
ord656
ord609
ord2645
ord3610
ord2575
ord6055
ord1776
ord4396
ord5290
ord4441
ord3402
ord4424
ord3574
ord5265
ord4376
ord4853
ord4998
ord6052
ord4078
ord1775
ord4407
ord5241
ord2385
ord5163
ord6374
ord4353
ord5280
ord3798
ord4837
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord801
ord3825
ord3079
ord4080
ord4627
ord4425
ord3597
ord567
ord500
ord324
ord2370
ord2302
ord4234
ord665
ord6334
ord6197
ord5860
ord6215
ord2860
ord2078
ord6880
ord2820
ord3180
ord354
ord6779
ord4710
ord696
ord6453
ord2411
ord2023
ord4218
ord2578
ord4398
ord3582
ord2298
ord1200
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord3953
ord4622
ord3738
ord561
ord815
ord4185
ord909
ord2864
ord3317
ord269
ord826
ord600
ord1578
ord1255
ord1253
ord1570
ord3803
ord4160
ord940
ord535
ord860
ord858
ord823
ord800
ord825
ord537
ord540
ord1197
ord1243
ord342
ord1182
ord1577
ord1575
ord1176
ord1116
ord3831
ord2642

msvcrt

_adjust_fdiv
_initterm
_onexit
__dllonexit
??1type_info@@UAE@XZ
memmove
_ftol
fopen
fclose
ftell
fseek
fread
malloc
realloc
free
_splitpath
_CxxThrowException
_mbsicmp
isdigit
atoi
_mbscmp
__CxxFrameHandler
_purecall
_strcmpi

kernel32

InterlockedIncrement
CreateFileA
GetFileTime
GetFileSize
SetFilePointer
InterlockedDecrement
GetModuleFileNameA
GetLastError
GetProcAddress
LoadLibraryA
LocalFree
LocalAlloc
LockResource
LoadResource
SizeofResource
FindResourceA
CloseHandle

user32

GetWindowRect
GetClientRect
EnableWindow
AdjustWindowRect
IsWindow
GetWindowTextA
SetWindowTextA
GetClassNameA
SendMessageA
GetWindowLongA
GetWindow

advapi32

RegCloseKey
RegCreateKeyA
RegOpenKeyA
RegQueryValueExA
RegSetValueExA

Exports

Exports

NERO_PLUGIN_GetPrimaryAudioObject
NERO_PLUGIN_ReadyToFinish

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Common Files/AudioPlugins/VqfDecLib.dll.cab
.cab
VqfDecLib.dll
.dll windows:4 windows x86 arch:x86

919a5f68f88e1cc2bc10abb969723d33

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
GetFileSize
GetModuleFileNameA
SetFilePointer
RaiseException
GetCommandLineA
GetVersion
RtlUnwind
HeapFree
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
GetCPInfo
GetACP
GetOEMCP
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetUnhandledExceptionFilter
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
GetProcAddress
HeapReAlloc
HeapSize
VirtualAlloc
IsBadWritePtr
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
LoadLibraryA
InterlockedDecrement
InterlockedIncrement
SetStdHandle
FlushFileBuffers
Sleep
CloseHandle
InterlockedExchange
DebugBreak
OutputDebugStringA

user32

MessageBoxA
GetForegroundWindow

Exports

Exports

EndDecoding
ReadDecoded
StartDecoding

Sections

.text
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 468KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Common Files/AudioPlugins/VqfEncLib.dll.cab
.cab
VqfEncLib.dll
.dll windows:4 windows x86 arch:x86

8e31f2b49743a57f500e95ce20903609

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
WriteFile
GetModuleFileNameA
GetSystemInfo
WaitForSingleObject
SetEvent
CreateEventA
CloseHandle
Sleep
GetExitCodeThread
GetCommandLineA
GetVersion
RtlUnwind
RaiseException
HeapAlloc
HeapFree
ExitProcess
TerminateProcess
GetCurrentProcess
EnterCriticalSection
LeaveCriticalSection
ResumeThread
CreateThread
TlsSetValue
ExitThread
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetCPInfo
GetACP
GetOEMCP
GetCurrentThreadId
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
GetProcAddress
HeapReAlloc
HeapSize
ReadFile
InitializeCriticalSection
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
LoadLibraryA
InterlockedDecrement
InterlockedIncrement
IsBadReadPtr
IsBadCodePtr
SetStdHandle
SetFilePointer
FlushFileBuffers
CreateFileA
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
InterlockedExchange

user32

GetForegroundWindow
MessageBoxA

Exports

Exports

EncodeFrame
EncodeLastFrame
StartEncoding
vqf_GetLastError

Sections

.text
Size: 212KB - Virtual size: 209KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 552KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Common Files/AudioPlugins/VqfEncLib1.dll.cab
.cab
Common Files/AudioPlugins/aacenc32.dll.cab
.cab
Common Files/AudioPlugins/lame_enc.dll.cab
.cab
Common Files/AudioPlugins/mp3PP.dll.cab
.cab
Common Files/AudioPlugins/mp3PRO.dll.cab
.cab
Common Files/AudioPlugins/mp3PRO_dmo.dll.cab
.cab
Common Files/AudioPlugins/mp3PRO_hlp.dll.cab
.cab
Common Files/AudioPlugins/msa.dll.cab
.cab
Common Files/AudioPlugins/msa7/msa.dll.cab
.cab
Common Files/AudioPlugins/ogg.dll.cab
.cab
Common Files/AudioPlugins/wav.dll.cab
.cab
Common Files/DSFilters/NDParser.ax.cab
.cab
Common Files/DSFilters/NeAMR.dll.cab
.cab
Common Files/DSFilters/NeAudio.ax.cab
.cab
Common Files/DSFilters/NeFileSrc.ax.cab
.cab
Common Files/DSFilters/NeQTDec.ax.cab
.cab
Common Files/DSFilters/NeRender.ax.cab
.cab
Common Files/DSFilters/NeVideo.ax.cab
.cab
Common Files/DSFilters/aacplus.dll.cab
.cab
Common Files/DSFilters/mp4file.dll.cab
.cab
Common Files/Lib/AdvrCntr.dll.cab
.cab
Common Files/Lib/DriveLocker.dll.cab
.cab
Common Files/Lib/NeroCBUI.dll.cab
.cab
Common Files/Lib/NeroIPP.dll.cab
.cab
Common Files/Lib/apreg.dll.cab
.cab
DriveManual/DriveManual_chs.pdf
.pdf
DriveManual/DriveManual_cht.pdf
.pdf
DriveManual/DriveManual_csy.pdf
.pdf
DriveManual/DriveManual_deu.pdf
.pdf
DriveManual/DriveManual_ell.pdf
.pdf
DriveManual/DriveManual_eng.pdf
.pdf
DriveManual/DriveManual_esp.pdf
.pdf
DriveManual/DriveManual_fra.pdf
.pdf
DriveManual/DriveManual_hun.pdf
.pdf
DriveManual/DriveManual_ita.pdf
.pdf
DriveManual/DriveManual_jpn.pdf
.pdf
DriveManual/DriveManual_plk.pdf
.pdf
DriveManual/DriveManual_ptg.pdf
.pdf
DriveManual/DriveManual_rus.pdf
.pdf
InCD 4/InCD/Error.log.cab
.cab
InCD 4/InCD/InCD 4 - FAQ.html.cab
.cab
InCD 4/InCD/InCDL.exe.cab
.cab
InCD 4/InCD/InCD_chs.chm
.chm
InCD 4/InCD/InCD_chs.pdf
.pdf
InCD 4/InCD/InCD_cht.chm
.chm
InCD 4/InCD/InCD_cht.pdf
.pdf
InCD 4/InCD/InCD_deu.chm
.chm
InCD 4/InCD/InCD_deu.pdf
.pdf
InCD 4/InCD/InCD_eng.chm
.chm
InCD 4/InCD/InCD_eng.pdf
.pdf
InCD 4/InCD/InCD_esp.chm
.chm
InCD 4/InCD/InCD_esp.pdf
.pdf
InCD 4/InCD/InCD_fra.chm
.chm
InCD 4/InCD/InCD_fra.pdf
.pdf
InCD 4/InCD/InCD_ita.chm
.chm
InCD 4/InCD/InCD_ita.pdf
.pdf
InCD 4/InCD/InCD_jpn.chm
.chm
InCD 4/InCD/InCD_jpn.pdf
.pdf
InCD 4/InCD/InCD_kor.chm
.chm
InCD 4/InCD/InCD_kor.pdf
.pdf
InCD 4/InCD/InCD_nld.chm
.chm
InCD 4/InCD/InCD_nld.pdf
.pdf
InCD 4/InCD/InCD_ptg.chm
.chm
InCD 4/InCD/InCD_ptg.pdf
.pdf
InCD 4/InCD/InCD_sve.chm
.chm
InCD 4/InCD/InCD_sve.pdf
.pdf
InCD 4/InCD/dma.bin.cab
.cab
InCD 4/InCD/gaa.bin.cab
.cab
InCD 4/InCD/incd1252.txt.cab
.cab
InCD 4/InCD/incdshx.dll.cab
.cab
InCD 4/InCD/lgc.bin.cab
.cab
InCD 4/InCD/shared.txt.cab
.cab
InCD 4/Redist/mfc42.dll
.dll regsvr32 windows:4 windows x86 arch:x86

1557eebc6134cee9eb9d0583a2b40341

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_initterm
?terminate@@YAXXZ
_except_handler3
_adjust_fdiv
_onexit
__dllonexit
??1type_info@@UAE@XZ
_mbsnbicmp
wcsncpy
wcscpy
_ltoa
_ultoa
swprintf
_itoa
modf
ceil
fabs
floor
labs
_ftol
_splitpath
_fullpath
atol
__p___argc
_EH_prolog
__p___argv
_beginthreadex
_endthreadex
_strdup
_mbsdec
_expand
strtod
strtol
strtoul
abs
calloc
_msize
_purecall
strftime
_mbctype
localtime
gmtime
time
_ismbcspace
atoi
_ismbcdigit
_mbsnbcmp
sprintf
strlen
_mbclen
vsprintf
_mbsrchr
_mbscspn
_mbsspn
_mbsstr
_mbsrev
_mbslwr
_mbsupr
_mbspbrk
_mbschr
wcslen
_mbscmp
realloc
fclose
fflush
fseek
ftell
fgets
fputs
fwrite
fread
clearerr
_open_osfhandle
_fdopen
__doserrno
_get_osfhandle
memset
_mbsinc
abort
free
malloc
memcmp
memmove
memcpy
_CxxThrowException
mktime
__CxxFrameHandler

kernel32

FindClose
FindFirstFileA
lstrcpyA
MultiByteToWideChar
GetFullPathNameA
GetStringTypeExA
GetThreadLocale
lstrcmpiA
GetShortPathNameA
GetModuleFileNameA
GlobalSize
GlobalLock
GlobalAlloc
GlobalReAlloc
GlobalUnlock
GlobalFree
GetFileAttributesA
GetFileSize
GetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetFileTime
SetFileAttributesA
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
LocalFree
FormatMessageA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetCPInfo
GetOEMCP
LocalAlloc
InitializeCriticalSection
TlsAlloc
DeleteCriticalSection
GlobalHandle
TlsFree
LeaveCriticalSection
EnterCriticalSection
TlsSetValue
LocalReAlloc
TlsGetValue
WaitForSingleObject
CreateSemaphoreA
DeleteFileA
LoadLibraryA
ReleaseMutex
InterlockedExchange
WaitForMultipleObjects
GetModuleHandleA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetCurrentThreadId
lstrcatA
GetVersion
LockResource
LoadResource
FindResourceA
FreeLibrary
MulDiv
GetProfileIntA
VirtualProtect
FindResourceExA
SizeofResource
GetProcessVersion
GlobalFlags
GetTempFileNameA
GetDiskFreeSpaceA
LocalUnlock
LocalLock
GetTempPathA
SearchPathA
SetEvent
ResumeThread
SetThreadPriority
SuspendThread
GetCurrentThread
SetErrorMode
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetCurrentDirectoryA
FindNextFileA
GetTickCount
lstrlenW
CopyFileA
lstrcpyW
GetUserDefaultLCID
IsDBCSLeadByte
GetSystemDirectoryA
GetProcAddress
UnlockFile
MoveFileA
SetEndOfFile
FlushFileBuffers
LockFile
CloseHandle
ReadFile
SetFilePointer
WriteFile
DuplicateHandle
CreateFileA
GetCurrentProcess
lstrlenA
lstrcmpA
OutputDebugStringA
IsBadStringPtrA
IsBadReadPtr
IsBadWritePtr
GetLastError
IsBadStringPtrW
lstrcpynA
ReleaseSemaphore
SetLastError
CreateMutexA
GetVolumeInformationA
CreateEventA
RaiseException

gdi32

TextOutA
GetPolyFillMode
EnumFontFamiliesA
GetPixel
CreatePalette
GetPaletteEntries
RealizePalette
OffsetRgn
SetBrushOrgEx
CreateMetaFileA
CopyMetaFileA
LPtoDP
SetAbortProc
StartPage
EndPage
EndDoc
AbortDoc
DPtoLP
CombineRgn
SetRectRgn
GetMapMode
CreateDIBPatternBrushPt
CreateHatchBrush
ExtCreatePen
PlayMetaFile
EnumMetaFile
GetObjectType
PlayMetaFileRecord
ExtSelectClipRgn
SelectClipPath
CreateRectRgn
GetClipRgn
PolyBezierTo
SetColorAdjustment
PolylineTo
PolyDraw
SetArcDirection
ArcTo
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
LineTo
OffsetClipRgn
ExcludeClipRect
SelectClipRgn
OffsetWindowOrgEx
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
SelectPalette
StartDocA
EnumFontFamiliesExA
CreateDCA
CreateRectRgnIndirect
Rectangle
UnrealizeObject
PatBlt
CreateBitmap
CreatePatternBrush
CreatePen
CloseMetaFile
DeleteMetaFile
RectVisible
PtVisible
IntersectClipRect
GetViewportOrgEx
GetWindowOrgEx
SetWindowOrgEx
GetDeviceCaps
Escape
GetCurrentPositionEx
MoveToEx
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
GetTextFaceA
GetWindowExtEx
GetViewportExtEx
GetROP2
GetBkMode
GetTextAlign
GetNearestColor
GetBkColor
GetTextColor
SaveDC
GetStockObject
RestoreDC
GetCharWidthA
DeleteObject
CreateFontA
StretchDIBits
DeleteDC
CreateCompatibleBitmap
GetTextExtentPoint32A
ExtTextOutA
CreateSolidBrush
BitBlt
CreateFontIndirectA
CreateCompatibleDC
GetTextMetricsA
GetObjectA
SelectObject
SetTextColor
GetClipBox
SetBkColor
GetStretchBltMode

user32

SetCapture
CharToOemA
OemToCharA
UnhookWindowsHookEx
MsgWaitForMultipleObjects
GetWindowRect
GetWindowPlacement
IsIconic
SystemParametersInfoA
IntersectRect
OffsetRect
RegisterWindowMessageA
SetWindowPos
SetWindowLongA
GetWindowLongA
GetWindow
SendMessageA
SetForegroundWindow
GetForegroundWindow
GetLastActivePopup
GetMessagePos
GetMessageTime
RemovePropA
CallWindowProcA
GetPropA
SetPropA
GetClassLongA
CallNextHookEx
SetWindowsHookExA
CreateWindowExA
DestroyWindow
DefWindowProcA
GetKeyState
GetDlgCtrlID
GetWindowTextA
GetWindowTextLengthA
GetDlgItem
SetWindowPlacement
TrackPopupMenu
GetMenuItemID
GetSubMenu
GetMenuItemCount
GetMenu
RegisterClassA
GetClassInfoA
WinHelpA
GetCapture
GetParent
IsChild
MessageBoxA
GetTopWindow
SetScrollPos
GetScrollPos
SetScrollRange
GetScrollRange
ShowScrollBar
SetScrollInfo
GetScrollInfo
ScrollWindow
IsWindowVisible
EnableWindow
EndDeferWindowPos
CopyRect
BeginDeferWindowPos
GetClientRect
DeferWindowPos
EqualRect
ScreenToClient
AdjustWindowRectEx
SetFocus
IsWindow
SetActiveWindow
GetFocus
DispatchMessageA
PeekMessageA
GetSysColor
MapWindowPoints
SendDlgItemMessageA
UpdateWindow
PostMessageA
LoadIconA
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
ReleaseCapture
SetCursor
IsWindowEnabled
GetDesktopWindow
ShowWindow
GetActiveWindow
DestroyMenu
LoadMenuA
SetMenu
ReuseDDElParam
UnpackDDElParam
InvalidateRect
BringWindowToTop
LoadCursorA
GetSystemMetrics
WaitMessage
GetCursorPos
GetWindowThreadProcessId
WindowFromPoint
ClientToScreen
TranslateMessage
GetMessageA
DefFrameProcA
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcA
RedrawWindow
LoadBitmapA
InflateRect
PtInRect
ReleaseDC
InvertRect
GetWindowDC
FillRect
SetTimer
KillTimer
SetRect
GetDC
IsZoomed
SetParent
IsRectEmpty
AppendMenuA
DeleteMenu
GetSystemMenu
GetDCEx
LockWindowUpdate
GetTabbedTextExtentA
DrawTextA
GrayStringA
UnionRect
DrawFocusRect
CreateDialogIndirectParamA
EndDialog
GetNextDlgTabItem
wvsprintfA
GetAsyncKeyState
MapDialogRect
GetDialogBaseUnits
BeginPaint
EndPaint
TabbedTextOutA
GetSysColorBrush
GetClassNameA
SetWindowTextA
CheckDlgButton
CheckRadioButton
GetDlgItemInt
GetDlgItemTextA
SetDlgItemInt
SetDlgItemTextA
IsDlgButtonChecked
ScrollWindowEx
IsDialogMessageA
MoveWindow
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
GetMenuCheckMarkDimensions
DestroyIcon
SetCursorPos
DestroyCursor
FindWindowA
IsClipboardFormatAvailable
MessageBeep
RemoveMenu
ValidateRect
PostQuitMessage
UnregisterClassA
ShowOwnedPopups
InsertMenuA
GetMenuStringA
RegisterClipboardFormatA
CopyAcceleratorTableA
InSendMessage
PostThreadMessageA
CreateMenu
WindowFromDC
CountClipboardFormats
SetWindowContextHelpId
CharNextA
GetNextDlgGroupItem
ClipCursor
DrawEdge
EnumChildWindows
InvalidateRgn
FrameRect
LoadStringA
CharUpperA
wsprintfA

Exports

Exports

?classCCachedDataPathProperty@CCachedDataPathProperty@@2UCRuntimeClass@@B
?classCDataPathProperty@CDataPathProperty@@2UCRuntimeClass@@B
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 616KB - Virtual size: 613KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 212KB - Virtual size: 209KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
InCD 4/Redist/msvcrt.dll
.dll windows:4 windows x86 arch:x86

799e28bcbf4e94ca50e4b0a2c283ab7d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

EnumSystemLocalesA
RtlUnwind
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
SetUnhandledExceptionFilter
GetModuleFileNameA
GetModuleFileNameW
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetCommandLineA
GetVersionExA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
ResumeThread
CreateThread
TlsSetValue
ExitThread
CloseHandle
GetCurrentThreadId
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCurrentThread
FindNextFileA
FindFirstFileA
FindClose
FindNextFileW
FindFirstFileW
HeapFree
HeapAlloc
GetModuleHandleA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
SetHandleCount
GetFileType
GetStartupInfoA
GetACP
GetOEMCP
GetCPInfo
GetProcAddress
LoadLibraryA
MultiByteToWideChar
GetCommandLineW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
UnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetConsoleCtrlHandler
SetEnvironmentVariableW
IsValidLocale
IsValidCodePage
GetLocaleInfoA
RaiseException
GetUserDefaultLCID
GetLocaleInfoW
GetTimeZoneInformation
FlushFileBuffers
SetFilePointer
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
Sleep
Beep
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDiskFreeSpaceA
GetLogicalDrives
SetErrorMode
GetFileAttributesA
GetCurrentDirectoryA
SetCurrentDirectoryA
SetFileAttributesA
GetFullPathNameA
GetDriveTypeA
GetCurrentProcessId
CreateDirectoryA
RemoveDirectoryA
DeleteFileA
GetFileAttributesW
GetCurrentDirectoryW
SetCurrentDirectoryW
SetFileAttributesW
GetFullPathNameW
CreateDirectoryW
DeleteFileW
MoveFileW
RemoveDirectoryW
GetDriveTypeW
MoveFileA
GetExitCodeProcess
WaitForSingleObject
FreeLibrary
CreateProcessA
CreateProcessW
HeapValidate
HeapCompact
HeapWalk
HeapSize
ReadConsoleA
SetConsoleMode
GetConsoleMode
SetEndOfFile
WriteConsoleA
DuplicateHandle
GetFileInformationByHandle
PeekNamedPipe
ReadConsoleInputA
PeekConsoleInputA
GetNumberOfConsoleInputEvents
LockFile
UnlockFile
CreateFileA
CreatePipe
ReadFile
CreateFileW
GetSystemTimeAsFileTime
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
GetLocalTime
SetLocalTime

Exports

Exports

$I10_OUTPUT
??0__non_rtti_object@@QAE@ABV0@@Z
??0__non_rtti_object@@QAE@PBD@Z
??0bad_cast@@QAE@ABQBD@Z
??0bad_cast@@QAE@ABV0@@Z
??0bad_typeid@@QAE@ABV0@@Z
??0bad_typeid@@QAE@PBD@Z
??0exception@@QAE@ABQBD@Z
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@XZ
??1__non_rtti_object@@UAE@XZ
??1bad_cast@@UAE@XZ
??1bad_typeid@@UAE@XZ
??1exception@@UAE@XZ
??1type_info@@UAE@XZ
??2@YAPAXI@Z
??3@YAXPAX@Z
??4__non_rtti_object@@QAEAAV0@ABV0@@Z
??4bad_cast@@QAEAAV0@ABV0@@Z
??4bad_typeid@@QAEAAV0@ABV0@@Z
??4exception@@QAEAAV0@ABV0@@Z
??8type_info@@QBEHABV0@@Z
??9type_info@@QBEHABV0@@Z
??_7__non_rtti_object@@6B@
??_7bad_cast@@6B@
??_7bad_typeid@@6B@
??_7exception@@6B@
??_E__non_rtti_object@@UAEPAXI@Z
??_Ebad_cast@@UAEPAXI@Z
??_Ebad_typeid@@UAEPAXI@Z
??_Eexception@@UAEPAXI@Z
??_G__non_rtti_object@@UAEPAXI@Z
??_Gbad_cast@@UAEPAXI@Z
??_Gbad_typeid@@UAEPAXI@Z
??_Gexception@@UAEPAXI@Z
??_U@YAPAXI@Z
??_V@YAXPAX@Z
?_query_new_handler@@YAP6AHI@ZXZ
?_query_new_mode@@YAHXZ
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
?_set_new_mode@@YAHH@Z
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
?before@type_info@@QBEHABV1@@Z
?name@type_info@@QBEPBDXZ
?raw_name@type_info@@QBEPBDXZ
?set_new_handler@@YAP6AXXZP6AXXZ@Z
?set_terminate@@YAP6AXXZP6AXXZ@Z
?set_unexpected@@YAP6AXXZP6AXXZ@Z
?terminate@@YAXXZ
?unexpected@@YAXXZ
?what@exception@@UBEPBDXZ
_CIacos
_CIasin
_CIatan
_CIatan2
_CIcos
_CIcosh
_CIexp
_CIfmod
_CIlog
_CIlog10
_CIpow
_CIsin
_CIsinh
_CIsqrt
_CItan
_CItanh
_CxxThrowException
_EH_prolog
_Getdays
_Getmonths
_Gettnames
_HUGE
_Strftime
_XcptFilter
__CxxFrameHandler
__CxxLongjmpUnwind
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__STRINGTOLD
__argc
__argv
__badioinfo
__crtCompareStringA
__crtGetLocaleInfoW
__crtLCMapStringA
__dllonexit
__doserrno
__fpecode
__getmainargs
__initenv
__isascii
__iscsym
__iscsymf
__lc_codepage
__lc_collate_cp
__lc_handle
__lconv_init
__mb_cur_max
__p___argc
__p___argv
__p___initenv
__p___mb_cur_max
__p___wargv
__p___winitenv
__p__acmdln
__p__amblksiz
__p__commode
__p__daylight
__p__dstbias
__p__environ
__p__fileinfo
__p__fmode
__p__iob
__p__mbcasemap
__p__mbctype
__p__osver
__p__pctype
__p__pgmptr
__p__pwctype
__p__timezone
__p__tzname
__p__wcmdln
__p__wenviron
__p__winmajor
__p__winminor
__p__winver
__p__wpgmptr
__pioinfo
__pxcptinfoptrs
__set_app_type
__setlc_active
__setusermatherr
__threadhandle
__threadid
__toascii
__unDName
__unDNameEx
__unguarded_readlc_active
__wargv
__wgetmainargs
__winitenv
_abnormal_termination
_access
_acmdln
_adj_fdiv_m16i
_adj_fdiv_m32
_adj_fdiv_m32i
_adj_fdiv_m64
_adj_fdiv_r
_adj_fdivr_m16i
_adj_fdivr_m32
_adj_fdivr_m32i
_adj_fdivr_m64
_adj_fpatan
_adj_fprem
_adj_fprem1
_adj_fptan
_adjust_fdiv
_aexit_rtn
_amsg_exit
_assert
_atodbl
_atoi64
_atoldbl
_beep
_beginthread
_beginthreadex
_c_exit
_cabs
_callnewh
_cexit
_cgets
_chdir
_chdrive
_chgsign
_chkesp
_chmod
_chsize
_clearfp
_close
_commit
_commode
_control87
_controlfp
_copysign
_cprintf
_cputs
_creat
_cscanf
_ctime64
_ctype
_cwait
_daylight
_dstbias
_dup
_dup2
_ecvt
_endthread
_endthreadex
_environ
_eof
_errno
_except_handler2
_except_handler3
_execl
_execle
_execlp
_execlpe
_execv
_execve
_execvp
_execvpe
_exit
_expand
_fcloseall
_fcvt
_fdopen
_fgetchar
_fgetwchar
_filbuf
_fileinfo
_filelength
_filelengthi64
_fileno
_findclose
_findfirst
_findfirst64
_findfirsti64
_findnext
_findnext64
_findnexti64
_finite
_flsbuf
_flushall
_fmode
_fpclass
_fpieee_flt
_fpreset
_fputchar
_fputwchar
_fsopen
_fstat
_fstat64
_fstati64
_ftime
_ftime64
_ftol
_fullpath
_futime
_futime64
_gcvt
_get_osfhandle
_get_sbh_threshold
_getch
_getche
_getcwd
_getdcwd
_getdiskfree
_getdllprocaddr
_getdrive
_getdrives
_getmaxstdio
_getmbcp
_getpid
_getsystime
_getw
_getws
_global_unwind2
_gmtime64
_heapadd
_heapchk
_heapmin
_heapset
_heapused
_heapwalk
_hypot
_i64toa
_i64tow
_initterm
_inp
_inpd
_inpw
_iob
_isatty
_isctype
_ismbbalnum
_ismbbalpha
_ismbbgraph
_ismbbkalnum
_ismbbkana
_ismbbkprint
_ismbbkpunct
_ismbblead
_ismbbprint
_ismbbpunct
_ismbbtrail
_ismbcalnum
_ismbcalpha
_ismbcdigit
_ismbcgraph
_ismbchira
_ismbckata
_ismbcl0
_ismbcl1
_ismbcl2
_ismbclegal
_ismbclower
_ismbcprint
_ismbcpunct
_ismbcspace
_ismbcsymbol
_ismbcupper
_ismbslead
_ismbstrail
_isnan
_itoa
_itow
_j0
_j1
_jn
_kbhit
_lfind
_loaddll
_local_unwind2
_localtime64
_lock
_locking
_logb
_longjmpex
_lrotl
_lrotr
_lsearch
_lseek
_lseeki64
_ltoa
_ltow
_makepath
_mbbtombc
_mbbtype
_mbcasemap
_mbccpy
_mbcjistojms
_mbcjmstojis
_mbclen
_mbctohira
_mbctokata
_mbctolower
_mbctombb
_mbctoupper
_mbctype
_mbsbtype
_mbscat
_mbschr
_mbscmp
_mbscoll
_mbscpy
_mbscspn
_mbsdec
_mbsdup
_mbsicmp
_mbsicoll
_mbsinc
_mbslen
_mbslwr
_mbsnbcat
_mbsnbcmp
_mbsnbcnt
_mbsnbcoll
_mbsnbcpy
_mbsnbicmp
_mbsnbicoll
_mbsnbset
_mbsncat
_mbsnccnt
_mbsncmp
_mbsncoll
_mbsncpy
_mbsnextc
_mbsnicmp
_mbsnicoll
_mbsninc
_mbsnset
_mbspbrk
_mbsrchr
_mbsrev
_mbsset
_mbsspn
_mbsspnp
_mbsstr
_mbstok
_mbstrlen
_mbsupr
_memccpy
_memicmp
_mkdir
_mktemp
_mktime64
_msize
_nextafter
_onexit
_open
_open_osfhandle
_osplatform
_osver
_outp
_outpd
_outpw
_pclose
_pctype
_pgmptr
_pipe
_popen
_purecall
_putch
_putenv
_putw
_putws
_pwctype
_read
_rmdir
_rmtmp
_rotl
_rotr
_safe_fdiv
_safe_fdivr
_safe_fprem
_safe_fprem1
_scalb
_searchenv
_seh_longjmp_unwind
_set_error_mode
_set_sbh_threshold
_seterrormode
_setjmp
_setjmp3
_setmaxstdio
_setmbcp
_setmode
_setsystime
_sleep
_snprintf
_snwprintf
_sopen
_spawnl
_spawnle
_spawnlp
_spawnlpe
_spawnv
_spawnve
_spawnvp
_spawnvpe
_splitpath
_stat
_stat64
_stati64
_statusfp
_strcmpi
_strdate
_strdup
_strerror
_stricmp
_stricoll
_strlwr
_strncoll
_strnicmp
_strnicoll
_strnset
_strrev
_strset
_strtime
_strupr
_swab
_sys_errlist
_sys_nerr
_tell
_telli64
_tempnam
_time64
_timezone
_tolower
_toupper
_tzname
_tzset
_ui64toa
_ui64tow
_ultoa
_ultow
_umask
_ungetch
_unlink
_unloaddll
_unlock
_utime
_utime64
_vsnprintf
_vsnwprintf
_waccess
_wasctime

Sections

.text
Size: 200KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
InCD 4/Setup.exe
.exe windows:4 windows x86 arch:x86

43cf920d318518864af866f5135f7b11

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

kernel32

lstrlenW
LockResource
WideCharToMultiByte
LocalFileTimeToFileTime
CreateFileA
GetLocaleInfoA
GetFileSize
IsBadWritePtr
FileTimeToLocalFileTime
FileTimeToSystemTime
InterlockedIncrement
VirtualAlloc
VirtualFree
GetDriveTypeA
GetVersionExA
GetVersion
SetEnvironmentVariableA
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
CreateMutexA
CreateThread
GetExitCodeThread
LocalAlloc
GetShortPathNameA
FormatMessageA
LocalFree
GetCurrentProcess
ExpandEnvironmentStringsA
OpenProcess
WaitForSingleObject
LoadLibraryExA
GetFileTime
CompareFileTime
GetCurrentDirectoryA
ExitProcess
GlobalAddAtomA
MultiByteToWideChar
lstrcmpiA
GetModuleHandleA
GetDiskFreeSpaceA
GetProcAddress
CreateProcessA
GetExitCodeProcess
OpenMutexA
ResumeThread
GetDateFormatA
SetCurrentDirectoryA
MoveFileExA
lstrcmpA
CreateDirectoryA
RemoveDirectoryA
GetModuleFileNameA
GetFileAttributesA
lstrcpynA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetUserDefaultLangID
GetSystemDefaultLangID
lstrcatA
lstrlenA
SetFileTime
CloseHandle
SetFileAttributesA
GetTempPathA
WinExec
lstrcpyA
LoadLibraryA
FindFirstFileA
FindNextFileA
FindClose
GetSystemDirectoryA
GetWindowsDirectoryA
ReadFile
SetFilePointer
SetLastError
MoveFileA
Sleep
GetProfileStringA
GetEnvironmentVariableA
DeleteFileA
CopyFileA
GetLastError
DosDateTimeToFileTime
FindResourceA
SizeofResource
LoadResource
GlobalAlloc
GlobalLock
GlobalUnlock
FreeLibrary
TlsAlloc
CreateEventA
GetStringTypeA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetLocaleInfoW
CompareStringW
CompareStringA
GetUserDefaultLCID
SuspendThread
SetThreadPriority
FreeEnvironmentStringsA
EnumSystemLocalesA
IsValidCodePage
IsValidLocale
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetPrivateProfileStringA
WritePrivateProfileStringA
LCMapStringW
LCMapStringA
SetEnvironmentVariableW
GetStdHandle
SetHandleCount
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
ExitThread
SetStdHandle
HeapSize
InterlockedExchange
RaiseException
InterlockedDecrement
GlobalDeleteAtom
GlobalFindAtomA
GlobalGetAtomNameA
GetCurrentThreadId
DuplicateHandle
WriteFile
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetVolumeInformationA
GetFullPathNameA
MulDiv
GlobalFree
GetCPInfo
GetOEMCP
SetEvent
UnhandledExceptionFilter
SetErrorMode
GetCurrentThread
GetACP
HeapReAlloc
GlobalHandle
TlsFree
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
GlobalFlags
GetProcessVersion
RtlUnwind
HeapAlloc
GetLocalTime
GetCommandLineA
GetStartupInfoA
FindResourceExA
GetSystemTime
HeapFree
GetFileType
TerminateProcess
GetTimeZoneInformation

user32

GetDlgCtrlID
DefWindowProcA
GetMenuItemID
GetSubMenu
GetMenuItemCount
GetMenu
RegisterClassA
GetClassInfoA
wsprintfA
GetCapture
SetWindowsHookExA
EndDeferWindowPos
BeginDeferWindowPos
DeferWindowPos
EqualRect
AdjustWindowRectEx
SetActiveWindow
DispatchMessageA
PeekMessageA
MapWindowPoints
SendDlgItemMessageA
IsDlgButtonChecked
GetClassLongA
CallNextHookEx
DestroyWindow
GetNextDlgTabItem
UnhookWindowsHookEx
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
CharUpperA
ClientToScreen
GetWindowDC
BeginPaint
EndPaint
CreateDialogIndirectParamA
GetActiveWindow
DrawFocusRect
WindowFromPoint
ValidateRect
TranslateMessage
GetMessageA
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
DestroyMenu
LoadMenuA
SetMenu
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
PostQuitMessage
ShowOwnedPopups
GetAsyncKeyState
IsDialogMessageA
MoveWindow
IsWindowUnicode
IsWindowEnabled
ExcludeUpdateRgn
ShowCaret
HideCaret
GetCursorPos
WinHelpA
GetKeyState
GetFocus
IsChild
RedrawWindow
DestroyCursor
LoadStringA
ReleaseCapture
SystemParametersInfoA
SetRect
AdjustWindowRect
GetSystemMetrics
OffsetRect
SetCapture
GetSysColorBrush
GetTopWindow
ExitWindowsEx
GetWindowTextLengthA
EnumChildWindows
CopyRect
GrayStringA
DrawTextA
TabbedTextOutA
SetWindowPos
SetWindowTextA
ShowWindow
CreateWindowExA
GetDlgItem
GetWindowTextA
EndDialog
SetFocus
SetForegroundWindow
UpdateWindow
GetWindowThreadProcessId
GetForegroundWindow
PostMessageA
MessageBoxA
GetDesktopWindow
GetWindow
GetClassNameA
GetWindowLongA
FindWindowA
DrawIcon
LoadCursorA
CopyIcon
GetParent
InflateRect
IsWindow
SetCursor
GetMessagePos
ScreenToClient
PtInRect
InvalidateRect
SetTimer
MessageBeep
SetWindowLongA
KillTimer
BroadcastSystemMessage
GetWindowRect
LoadIconA
SendMessageA
EnableWindow
MessageBoxExA
GetDC
ReleaseDC
GetSysColor
FillRect
GetClientRect
RegisterWindowMessageA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetLastActivePopup
IntersectRect
IsIconic
CharNextA
GetWindowPlacement
MapDialogRect
IsWindowVisible
SetPropA
DefDlgProcA
EnableMenuItem
UnregisterClassA

gdi32

EnumFontFamiliesExA
SetTextJustification
GetTextFaceA
CreateFontA
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetDeviceCaps
GetCurrentObject
GetStockObject
GetObjectA
CreateFontIndirectA
GetTextExtentPoint32A
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
GetClipBox
SetTextColor
SetBkColor
CreateBitmap
SaveDC
RestoreDC
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
MoveToEx
LineTo
DeleteObject
CreatePen
CreateSolidBrush
GetTextMetricsA
PatBlt
GetTextExtentPointA
DeleteDC
CreateDIBitmap
DPtoLP
SelectObject

shell32

SHGetMalloc
SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteA
SHChangeNotify
DragFinish
DragQueryFileA

ole32

CreateStreamOnHGlobal
CoUninitialize
CoCreateInstance
CoInitialize
CoInitializeEx

oleaut32

SysAllocStringLen
VarBstrFromDate
SysFreeString
OleLoadPicture
VariantClear

setupapi

SetupDiGetDeviceRegistryPropertyA
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA
SetupDiDestroyDeviceInfoList

comctl32

ord17
PropertySheetA

wsock32

ioctlsocket
htons
socket
WSAStartup
closesocket
connect
WSACleanup

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

comdlg32

GetFileTitleA

Sections

.text
Size: 984KB - Virtual size: 980KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 116KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 160KB - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 832KB - Virtual size: 830KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
InCD 4/Setup/Eula_chs.txt
InCD 4/Setup/Eula_cht.txt
InCD 4/Setup/Eula_deu.txt
InCD 4/Setup/Eula_eng.txt
InCD 4/Setup/Eula_enu.txt
InCD 4/Setup/Eula_esp.txt
InCD 4/Setup/Eula_fra.txt
InCD 4/Setup/Eula_ita.txt
InCD 4/Setup/Eula_jpn.txt
InCD 4/Setup/Eula_kor.txt
InCD 4/Setup/Eula_nld.txt
InCD 4/Setup/Eula_ptg.txt
InCD 4/Setup/Eula_sve.txt
InCD 4/nt4/InCDfs.sys.cab
.cab
InCD 4/nt4/InCDpass.sys.cab
.cab
InCD 4/nt4/InCDrec.sys.cab
.cab
InCD 4/setup.cfg
InCD 4/sharedNT/InCD.exe
.exe windows:4 windows x86 arch:x86

db61bee099863bef1181ef76bf569c87

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

incdapi

?EFormat@CFpcdApi@@QAEHDPBDP6GXPAUzProgress@@PAH@ZKIHHHHIPAEI4I4I4W4zEnumUdfVersion@@@Z
?EGetDevInfoFmDriveLetter@CFpcdApi@@QAEHDPAUzDevInfo@@@Z
?EEstimateTimeToFormat@CFpcdApi@@QAEHDIPAI000H0H@Z
?EPrintfLogLine@CFpcdApi@@QAAHW4zEnumErrLevel@@PADZZ
?EIsDoorOpen@CFpcdApi@@QAEHDPAH@Z
?EEraseDisc@CFpcdApi@@QAEHDHP6GXPAUzProgress@@PAH@ZK@Z
?TGetErrorString@CFpcdApi@@QAEHHIPAD@Z
?EFpcdGetEngineVersion@CFpcdApi@@QAEHPAK0@Z
?ERequestNotifyShutdown@CFpcdApi@@QAEHXZ
?EChangeDvdRamWriteProtection@CFpcdApi@@QAEHDPAW4zEnumSwitchPwpResult@@@Z
?ELoad@CFpcdApi@@QAEHD@Z
?EDismountAndDisable@CFpcdApi@@QAEHDH@Z
?EEject@CFpcdApi@@QAEHD@Z
?EEnableMount@CFpcdApi@@QAEHDH@Z
?EIsSuspendMode@CFpcdApi@@QAEHPAH@Z
?EIsBgFormatRunning@CFpcdApi@@QAEHDPAH@Z
?EHasFirmwareDefect@CFpcdApi@@QAEHDW4FirmwareDefect@@PAH@Z
?EFinalizeDrive@CFpcdApi@@QAEHD@Z
?EDismountVolume@CFpcdApi@@QAEHD@Z
?TIsDriveLocked@CFpcdApi@@QAEHD@Z
?ERemoveDevice@CFpcdApi@@QAEHD@Z
?EAddDevice@CFpcdApi@@QAEHD@Z
?EDisableMount@CFpcdApi@@QAEHDH@Z
?EWaitForNotify@CFpcdApi@@QAEHPAUzEventNotify@@@Z
?TIsMediaEraseable@CFpcdApi@@QAEHD@Z
??0CFpcdApi@@QAE@XZ
??1CFpcdApi@@QAE@XZ

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

kernel32

GetPrivateProfileIntA
WritePrivateProfileStringA
lstrcpynA
FindClose
FindFirstFileA
FindNextFileA
IsBadStringPtrW
IsBadStringPtrA
IsBadReadPtr
VirtualProtect
GlobalFlags
TlsAlloc
GlobalHandle
TlsFree
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
GetProcessVersion
GetCPInfo
GetOEMCP
FileTimeToSystemTime
FileTimeToLocalFileTime
FindResourceExA
SetErrorMode
SetFilePointer
LockFile
UnlockFile
SetEndOfFile
MoveFileA
GetVolumeInformationA
GetFullPathNameA
GetStringTypeExA
GetThreadLocale
GetShortPathNameA
GetFileAttributesA
GetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetFileTime
SetFileAttributesA
RtlUnwind
GlobalAlloc
GetPrivateProfileStringA
RaiseException
GetStartupInfoA
GetCommandLineA
ExitProcess
GetTimeZoneInformation
GetSystemTime
GetLocalTime
ExitThread
HeapReAlloc
TerminateProcess
HeapSize
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
FatalAppExitA
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStringTypeA
GetStringTypeW
SetConsoleCtrlHandler
GetDriveTypeA
IsBadCodePtr
IsValidLocale
IsValidCodePage
EnumSystemLocalesA
GetUserDefaultLCID
SetStdHandle
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
HeapFree
HeapAlloc
MulDiv
CloseHandle
ReadFile
InterlockedExchange
GetOverlappedResult
WaitForSingleObject
ResetEvent
WriteFile
CreateEventA
GetLastError
SetEvent
CreateFileA
WaitForMultipleObjects
FormatMessageA
CreateNamedPipeA
lstrlenW
SetLastError
lstrcmpA
Sleep
CreateThread
ConnectNamedPipe
DisconnectNamedPipe
FlushFileBuffers
GetVersionExA
TerminateThread
SetNamedPipeHandleState
WaitNamedPipeA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ResumeThread
GetModuleFileNameA
FreeLibrary
GetProcAddress
LoadLibraryA
GetCurrentProcess
WaitForMultipleObjectsEx
WaitForSingleObjectEx
UnmapViewOfFile
MultiByteToWideChar
MapViewOfFile
DuplicateHandle
OpenProcess
SetSystemPowerState
CreateProcessA
DeviceIoControl
QueryDosDeviceA
GetLogicalDrives
DeleteFileA
lstrlenA
GetFileSize
GetSystemDefaultLangID
GetUserDefaultLangID
GetLocaleInfoA
WideCharToMultiByte
LockResource
LoadResource
FindResourceA
SizeofResource
ReleaseSemaphore
GetExitCodeThread
GetWindowsDirectoryA
lstrcpyA
WinExec
lstrcatA
LocalFree
LocalAlloc
GetTickCount
GetVersion
IsBadWritePtr
SetCurrentDirectoryA
GetCurrentDirectoryA
GlobalMemoryStatus
GetACP
GetCurrentProcessId
GetPriorityClass
SetPriorityClass
GetCurrentThread
GetCurrentThreadId
SuspendThread
GetThreadPriority
SetThreadPriority
GlobalLock
CreateMutexA
ReleaseMutex
PulseEvent
OpenEventA
GetProcessWorkingSetSize
SetProcessWorkingSetSize
VirtualLock
VirtualUnlock
GlobalFree
GlobalUnlock
GlobalAddAtomA
GetProfileStringA
GetModuleHandleA
GlobalDeleteAtom
GlobalFindAtomA
lstrcmpiA
GlobalGetAtomNameA
InterlockedDecrement
InterlockedIncrement
CreateSemaphoreA

user32

GetDlgItemTextA
GetMenuState
GetMenuCheckMarkDimensions
CheckDlgButton
CheckRadioButton
CheckMenuItem
SetMenuItemBitmaps
SetDlgItemInt
SendDlgItemMessageA
EnableMenuItem
ScrollWindowEx
IsDialogMessageA
GetDlgItemInt
IsDlgButtonChecked
wvsprintfA
CharToOemA
OemToCharA
MsgWaitForMultipleObjects
ClientToScreen
BeginPaint
SetDlgItemTextA
MoveWindow
DrawTextA
GrayStringA
ValidateRect
TranslateMessage
GetMessageA
PostQuitMessage
ShowOwnedPopups
ShowWindow
SetRectEmpty
MapWindowPoints
DestroyMenu
SetMenu
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
GetAsyncKeyState
MapDialogRect
WindowFromPoint
GetDialogBaseUnits
InsertMenuA
CharUpperA
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
GetClassInfoA
RegisterClassA
SetWindowPlacement
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
PeekMessageA
TranslateAcceleratorA
GetPropA
LoadAcceleratorsA
SetPropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetWindowPos
IntersectRect
GetWindowPlacement
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
IsWindowEnabled
GetClassNameA
WinHelpA
ScreenToClient
GetFocus
IsChild
GetCapture
GetDesktopWindow
CopyIcon
InflateRect
SetWindowLongA
SetCursor
PtInRect
MessageBeep
DestroyCursor
ReleaseCapture
SetRect
AdjustWindowRect
OffsetRect
SetCapture
LoadCursorA
LoadStringA
LoadMenuA
GetMenuStringA
GetMenuItemID
ModifyMenuA
LoadIconA
GetParent
GetKeyState
LoadBitmapA
EqualRect
GetDC
GetWindow
GetMenu
IsMenu
GetSubMenu
GetMenuItemCount
DeleteMenu
SetForegroundWindow
GetWindowRect
RegisterWindowMessageA
SystemParametersInfoA
GetWindowLongA
GetWindowDC
GetIconInfo
ReleaseDC
KillTimer
IsWindow
SetTimer
PostThreadMessageA
ExitWindowsEx
UnhookWindowsHookEx
AdjustWindowRectEx
SetWindowTextA
wsprintfA
FindWindowA
MessageBoxA
DispatchMessageA
SetFocus
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
CallWindowProcA
IsWindowVisible
RemovePropA
InvalidateRect
RedrawWindow
PostMessageA
GetSystemMetrics
UpdateWindow
IsIconic
FillRect
DrawIcon
GetSysColor
EnableWindow
GetSysColorBrush
GetClientRect
EndPaint
SendMessageA
TabbedTextOutA
GetWindowTextLengthA
TrackPopupMenu
GetCursorPos
CopyRect
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
CharNextA
IsWindowUnicode

gdi32

GetObjectType
PolylineTo
SetColorAdjustment
GetObjectA
GetStockObject
DeleteObject
GetCurrentObject
GetTextExtentPoint32A
StretchBlt
CreateCompatibleBitmap
SelectObject
CreateDIBitmap
GetTextExtentPointA
PolyDraw
CreateCompatibleDC
ExtTextOutA
DeleteDC
SetTextColor
CreateSolidBrush
GetBkColor
SetBkColor
CreateFontA
GetTextFaceA
SetPixelV
GetPixel
SetDIBitsToDevice
CreateDIBSection
EnumFontFamiliesExA
GetTextMetricsA
DPtoLP
CombineRgn
SetRectRgn
GetMapMode
CreateRectRgnIndirect
PatBlt
Escape
TextOutA
RectVisible
PtVisible
CreateDIBPatternBrushPt
CreatePatternBrush
CreateHatchBrush
ExtCreatePen
CreatePen
GetWindowExtEx
GetViewportExtEx
GetDeviceCaps
PlayMetaFile
EnumMetaFile
CreateFontIndirectA
PlayMetaFileRecord
ExtSelectClipRgn
SelectClipPath
CreateRectRgn
GetClipRgn
PolyBezierTo
BitBlt
GetClipBox
GetDCOrgEx
SetArcDirection
ArcTo
GetCurrentPositionEx
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
LineTo
MoveToEx
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
SelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
SelectPalette
RestoreDC
SaveDC
StartDocA
CreateBitmap

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

shell32

DragQueryFileA
ShellExecuteA
Shell_NotifyIconA
DragAcceptFiles
SHGetPathFromIDListA
SHGetFileInfoA
SHGetSpecialFolderLocation
SHGetMalloc
SHChangeNotify
DragFinish

comctl32

DestroyPropertySheetPage
PropertySheetA
CreatePropertySheetPageA
ord13
ord17
ImageList_Remove
ImageList_GetImageCount
ImageList_AddMasked
ImageList_Draw
ImageList_Write
ord14
ImageList_Destroy
ImageList_Create
ImageList_LoadImageA
ImageList_Merge
ImageList_Read

ole32

CoCreateInstance
CoInitialize
CoInitializeEx
CoUninitialize

oleaut32

SysAllocStringLen
SysFreeString

shlwapi

SHDeleteKeyA

Sections

.text
Size: 608KB - Virtual size: 607KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 112KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 580KB - Virtual size: 576KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
InCD 4/sharedNT/InCDsrv.exe.cab
.cab
InCD 4/sharedNT/SrvError.Log.cab
.cab
InCD 4/sharedNT/incdapi.dll.cab
.cab
InCD 4/w2k/InCDfs.sys.cab
.cab
InCD 4/w2k/InCDpass.sys.cab
.cab
InCD 4/w2k/InCDrec.sys.cab
.cab
InCD 4/w9x/InCD.exe
.exe windows:4 windows x86 arch:x86

438f3341eb2838d5022d65167ba17f12

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

incdapi

?EFormat@CFpcdApi@@QAEHDPBDP6GXPAUzProgress@@PAH@ZKIHHHHIPAEI4I4I4W4zEnumUdfVersion@@@Z
?EGetDevInfoFmDriveLetter@CFpcdApi@@QAEHDPAUzDevInfo@@@Z
?EEstimateTimeToFormat@CFpcdApi@@QAEHDIPAI000H0H@Z
?EPrintfLogLine@CFpcdApi@@QAAHW4zEnumErrLevel@@PADZZ
?EIsDoorOpen@CFpcdApi@@QAEHDPAH@Z
?EEraseDisc@CFpcdApi@@QAEHDHP6GXPAUzProgress@@PAH@ZK@Z
?TGetErrorString@CFpcdApi@@QAEHHIPAD@Z
?EFpcdGetEngineVersion@CFpcdApi@@QAEHPAK0@Z
?ERequestNotifyShutdown@CFpcdApi@@QAEHXZ
?EChangeDvdRamWriteProtection@CFpcdApi@@QAEHDPAW4zEnumSwitchPwpResult@@@Z
?ELoad@CFpcdApi@@QAEHD@Z
?EDismountAndDisable@CFpcdApi@@QAEHDH@Z
?EEject@CFpcdApi@@QAEHD@Z
?EEnableMount@CFpcdApi@@QAEHDH@Z
?EIsSuspendMode@CFpcdApi@@QAEHPAH@Z
?EIsBgFormatRunning@CFpcdApi@@QAEHDPAH@Z
?EHasFirmwareDefect@CFpcdApi@@QAEHDW4FirmwareDefect@@PAH@Z
?EFinalizeDrive@CFpcdApi@@QAEHD@Z
?EDismountVolume@CFpcdApi@@QAEHD@Z
?TIsDriveLocked@CFpcdApi@@QAEHD@Z
?ERemoveDevice@CFpcdApi@@QAEHD@Z
?EAddDevice@CFpcdApi@@QAEHD@Z
?EDisableMount@CFpcdApi@@QAEHDH@Z
?EWaitForNotify@CFpcdApi@@QAEHPAUzEventNotify@@@Z
??1CFpcdApi@@QAE@XZ
?TIsMediaEraseable@CFpcdApi@@QAEHD@Z
??0CFpcdApi@@QAE@XZ

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

kernel32

IsBadReadPtr
VirtualProtect
GlobalFlags
IsBadStringPtrA
TlsAlloc
GlobalHandle
TlsFree
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
GetProcessVersion
GetCPInfo
GetOEMCP
FileTimeToSystemTime
FileTimeToLocalFileTime
FindResourceExA
SetErrorMode
SetFilePointer
LockFile
UnlockFile
SetEndOfFile
MoveFileA
GetVolumeInformationA
GetFullPathNameA
GetStringTypeExA
GetThreadLocale
GetShortPathNameA
GetFileAttributesA
GetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetFileTime
SetFileAttributesA
RtlUnwind
HeapFree
HeapAlloc
RaiseException
GetStartupInfoA
FindNextFileA
IsBadStringPtrW
GetTimeZoneInformation
GetSystemTime
GetLocalTime
ExitThread
TerminateProcess
HeapReAlloc
HeapSize
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
FatalAppExitA
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStringTypeA
GetStringTypeW
SetConsoleCtrlHandler
GetDriveTypeA
IsBadCodePtr
IsValidLocale
IsValidCodePage
EnumSystemLocalesA
GetUserDefaultLCID
SetStdHandle
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
ExitProcess
GetCommandLineA
FindFirstFileA
InterlockedExchange
CloseHandle
ReadFile
ResetEvent
GetOverlappedResult
WaitForSingleObject
GetLastError
WriteFile
CreateEventA
WaitForMultipleObjects
SetEvent
CreateFileA
lstrcatA
CreateNamedPipeA
LocalFree
FindClose
lstrcpynA
Sleep
CreateThread
ConnectNamedPipe
DisconnectNamedPipe
FlushFileBuffers
GetVersionExA
TerminateThread
SetNamedPipeHandleState
WaitNamedPipeA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ResumeThread
GetModuleFileNameA
FreeLibrary
GetProcAddress
LoadLibraryA
GetCurrentProcess
UnmapViewOfFile
MultiByteToWideChar
MapViewOfFile
DuplicateHandle
OpenProcess
SetSystemPowerState
CreateProcessA
DeleteFileA
lstrlenA
GetFileSize
GetSystemDefaultLangID
GetUserDefaultLangID
GetLocaleInfoA
WideCharToMultiByte
LockResource
LoadResource
FindResourceA
SizeofResource
FormatMessageA
lstrlenW
GetWindowsDirectoryA
lstrcpyA
WinExec
WritePrivateProfileStringA
VirtualLock
LocalAlloc
GetTickCount
GetVersion
IsBadWritePtr
SetCurrentDirectoryA
GetCurrentDirectoryA
GlobalMemoryStatus
GetACP
GetCurrentProcessId
GetPriorityClass
SetPriorityClass
GetCurrentThread
GetCurrentThreadId
SuspendThread
GetThreadPriority
SetThreadPriority
GetExitCodeThread
CreateMutexA
ReleaseMutex
PulseEvent
OpenEventA
InterlockedDecrement
VirtualUnlock
GlobalFree
GlobalUnlock
GlobalLock
GetModuleHandleA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
lstrcmpiA
GlobalGetAtomNameA
lstrcmpA
InterlockedIncrement
CreateSemaphoreA
ReleaseSemaphore
GetProfileStringA
SetLastError
MulDiv
GlobalAlloc
GetPrivateProfileIntA
GetPrivateProfileStringA

user32

SetDlgItemInt
SetDlgItemTextA
IsDlgButtonChecked
ScrollWindowEx
GetDlgItemTextA
MoveWindow
GetDlgItemInt
ShowWindow
CheckRadioButton
CheckMenuItem
SetMenuItemBitmaps
GetMenuState
GetMenuCheckMarkDimensions
IsDialogMessageA
EnableMenuItem
OemToCharA
MsgWaitForMultipleObjects
ClientToScreen
BeginPaint
EndPaint
wvsprintfA
RedrawWindow
GrayStringA
ValidateRect
TranslateMessage
GetMessageA
PostQuitMessage
ShowOwnedPopups
SetRectEmpty
LoadAcceleratorsA
CharToOemA
TranslateAcceleratorA
SetMenu
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
GetAsyncKeyState
MapDialogRect
WindowFromPoint
GetDialogBaseUnits
InsertMenuA
CharUpperA
IsWindowVisible
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetClassInfoA
RegisterClassA
SetWindowPlacement
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
DestroyMenu
UnhookWindowsHookEx
MapWindowPoints
CheckDlgButton
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetWindowPos
IntersectRect
GetWindowPlacement
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
IsWindowEnabled
GetClassNameA
WinHelpA
ScreenToClient
GetFocus
IsChild
GetCapture
GetDesktopWindow
CopyIcon
InflateRect
SetWindowLongA
SetCursor
PtInRect
MessageBeep
DestroyCursor
ReleaseCapture
SetRect
AdjustWindowRect
OffsetRect
SetCapture
LoadCursorA
LoadStringA
LoadIconA
GetMenuStringA
GetMenuItemID
ModifyMenuA
CopyRect
GetParent
GetKeyState
LoadBitmapA
EqualRect
GetDC
GetWindow
GetMenu
SetForegroundWindow
GetWindowRect
GetMenuItemCount
DeleteMenu
GetCursorPos
TrackPopupMenu
RegisterWindowMessageA
SystemParametersInfoA
GetWindowLongA
GetWindowDC
GetIconInfo
ReleaseDC
KillTimer
IsWindow
SetTimer
ExitWindowsEx
GetPropA
SendDlgItemMessageA
SetWindowTextA
wsprintfA
FindWindowA
MessageBoxA
SetFocus
PeekMessageA
DispatchMessageA
BeginDeferWindowPos
AdjustWindowRectEx
DeferWindowPos
CallWindowProcA
EndDeferWindowPos
RemovePropA
PostMessageA
InvalidateRect
UpdateWindow
IsIconic
GetSystemMetrics
DrawIcon
GetSysColor
FillRect
GetSysColorBrush
GetClientRect
EnableWindow
SendMessageA
TabbedTextOutA
DrawTextA
GetTopWindow
GetSubMenu
IsMenu
LoadMenuA
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
CharNextA
IsWindowUnicode

gdi32

GetObjectType
PolylineTo
SetColorAdjustment
GetObjectA
GetStockObject
DeleteObject
GetCurrentObject
GetTextExtentPoint32A
StretchBlt
CreateCompatibleBitmap
SelectObject
CreateDIBitmap
GetTextExtentPointA
PolyDraw
CreateCompatibleDC
ExtTextOutA
DeleteDC
SetTextColor
CreateSolidBrush
GetBkColor
SetBkColor
CreateFontA
GetTextFaceA
SetPixelV
GetPixel
SetDIBitsToDevice
CreateDIBSection
EnumFontFamiliesExA
GetTextMetricsA
DPtoLP
CombineRgn
SetRectRgn
GetMapMode
CreateRectRgnIndirect
PatBlt
Escape
TextOutA
RectVisible
PtVisible
CreateDIBPatternBrushPt
CreatePatternBrush
CreateHatchBrush
ExtCreatePen
CreatePen
GetWindowExtEx
GetViewportExtEx
GetDeviceCaps
PlayMetaFile
EnumMetaFile
CreateFontIndirectA
PlayMetaFileRecord
ExtSelectClipRgn
SelectClipPath
CreateRectRgn
GetClipRgn
PolyBezierTo
BitBlt
GetClipBox
GetDCOrgEx
SetArcDirection
ArcTo
GetCurrentPositionEx
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
LineTo
MoveToEx
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
SelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
SelectPalette
RestoreDC
SaveDC
StartDocA
CreateBitmap

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

shell32

DragAcceptFiles
ShellExecuteA
DragFinish
SHGetSpecialFolderLocation
SHGetPathFromIDListA
Shell_NotifyIconA
SHGetMalloc
SHChangeNotify
SHGetFileInfoA
DragQueryFileA

comctl32

DestroyPropertySheetPage
PropertySheetA
CreatePropertySheetPageA
ord13
ord17
ImageList_Remove
ImageList_GetImageCount
ImageList_AddMasked
ImageList_Draw
ImageList_Write
ord14
ImageList_Destroy
ImageList_Create
ImageList_LoadImageA
ImageList_Merge
ImageList_Read

ole32

CoCreateInstance
CoInitialize
CoInitializeEx
CoUninitialize

oleaut32

SysAllocStringLen
SysFreeString

shlwapi

SHDeleteKeyA

Sections

.text
Size: 600KB - Virtual size: 598KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 112KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 580KB - Virtual size: 576KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
InCD 4/w9x/bsudf.vxd.cab
.cab
InCD 4/w9x/incdapi.dll.cab
.cab
InCD 4/w9x/incdfs.vxd.cab
.cab
InCD 4/w9x/incdpass.vxd.cab
.cab
Nero.ico
Nero/CoverDesigner/CoverDes.exe.cab
.cab
Nero/CoverDesigner/CoverEdCtrl.ocx.cab
.cab
Nero/CoverDesigner/NeroCoverDesigner_chs.chm
.chm
Nero/CoverDesigner/NeroCoverDesigner_chs.pdf
.pdf
Nero/CoverDesigner/NeroCoverDesigner_cht.chm
.chm
Nero/CoverDesigner/NeroCoverDesigner_cht.pdf
.pdf
Nero/CoverDesigner/NeroCoverDesigner_deu.chm
.chm
Nero/CoverDesigner/NeroCoverDesigner_deu.pdf
.pdf
Nero/CoverDesigner/NeroCoverDesigner_eng.chm
.chm
Nero/CoverDesigner/NeroCoverDesigner_eng.pdf
.pdf
Nero/CoverDesigner/NeroCoverDesigner_esp.chm
.chm
Nero/CoverDesigner/NeroCoverDesigner_esp.pdf
.pdf
Nero/CoverDesigner/NeroCoverDesigner_fra.chm
.chm
Nero/CoverDesigner/NeroCoverDesigner_fra.pdf
.pdf
Nero/CoverDesigner/NeroCoverDesigner_ita.chm
.chm
Nero/CoverDesigner/NeroCoverDesigner_ita.pdf
.pdf
Nero/CoverDesigner/NeroCoverDesigner_jpn.chm
.chm
Nero/CoverDesigner/NeroCoverDesigner_jpn.pdf
.pdf
Nero/CoverDesigner/NeroCoverDesigner_kor.chm
.chm
Nero/CoverDesigner/NeroCoverDesigner_kor.pdf
.pdf
Nero/CoverDesigner/NeroCoverDesigner_nld.chm
.chm
Nero/CoverDesigner/NeroCoverDesigner_nld.pdf
.pdf
Nero/CoverDesigner/NeroCoverDesigner_ptg.chm
.chm
Nero/CoverDesigner/NeroCoverDesigner_ptg.pdf
.pdf
Nero/CoverDesigner/NeroCoverDesigner_sve.chm
.chm
Nero/CoverDesigner/NeroCoverDesigner_sve.pdf
.pdf
Nero/CoverDesigner/Templates/AudioData.nct
Nero/CoverDesigner/Templates/AudioData_B&W.nct
Nero/CoverDesigner/Templates/AudioData_Classic.nct
Nero/CoverDesigner/Templates/Audio_Classic.nct
Nero/CoverDesigner/Templates/DanceHiphop.nct
Nero/CoverDesigner/Templates/DanceHiphop_B&W.nct
Nero/CoverDesigner/Templates/Data.nct
Nero/CoverDesigner/Templates/Data_B&W.nct
Nero/CoverDesigner/Templates/Data_Classic.nct
Nero/CoverDesigner/Templates/Jazz_Classical.nct
Nero/CoverDesigner/Templates/Rock.nct
Nero/CoverDesigner/Templates/Vocal.nct
Nero/CoverDesigner/Templates/disco.nct
Nero/CoverDesigner/Templates/jazz.nct
Nero/CoverDesigner/covered-chs.nls.cab
.cab
Nero/CoverDesigner/covered-cht.nls.cab
.cab
Nero/CoverDesigner/covered-csy.nls.cab
.cab
Nero/CoverDesigner/covered-dan.nls.cab
.cab
Nero/CoverDesigner/covered-deu.nls.cab
.cab
Nero/CoverDesigner/covered-ell.nls.cab
.cab
Nero/CoverDesigner/covered-esl.nls.cab
.cab
Nero/CoverDesigner/covered-esp.nls.cab
.cab
Nero/CoverDesigner/covered-fin.nls.cab
.cab
Nero/CoverDesigner/covered-fra.nls.cab
.cab
Nero/CoverDesigner/covered-hun.nls.cab
.cab
Nero/CoverDesigner/covered-ita.nls.cab
.cab
Nero/CoverDesigner/covered-jpn.nls.cab
.cab
Nero/CoverDesigner/covered-kor.nls.cab
.cab
Nero/CoverDesigner/covered-nld.nls.cab
.cab
Nero/CoverDesigner/covered-nor.nls.cab
.cab
Nero/CoverDesigner/covered-plk.nls.cab
.cab
Nero/CoverDesigner/covered-ptb.nls.cab
.cab
Nero/CoverDesigner/covered-ptg.nls.cab
.cab
Nero/CoverDesigner/covered-rus.nls.cab
.cab
Nero/CoverDesigner/covered-sky.nls.cab
.cab
Nero/CoverDesigner/covered-slv.nls.cab
.cab
Nero/CoverDesigner/covered-sve.nls.cab
.cab
Nero/CoverDesigner/covered-tha.nls.cab
.cab
Nero/CoverDesigner/covered-trk.nls.cab
.cab
Nero/CoverDesigner/def.dat.cab
.cab
Nero/CoverDesigner/stocks.dat.cab
.cab
Nero/Nero StartSmart/HLDS_ALL_GM.oem
Nero/Nero StartSmart/NeroStartSmart.exe.cab
.cab
Nero/Nero StartSmart/NeroStartSmart_chs.chm
.chm
Nero/Nero StartSmart/NeroStartSmart_cht.chm
.chm
Nero/Nero StartSmart/NeroStartSmart_deu.chm
.chm
Nero/Nero StartSmart/NeroStartSmart_eng.chm
.chm
Nero/Nero StartSmart/NeroStartSmart_esl.chm
.chm
Nero/Nero StartSmart/NeroStartSmart_esp.chm
.chm
Nero/Nero StartSmart/NeroStartSmart_fra.chm
.chm
Nero/Nero StartSmart/NeroStartSmart_ita.chm
.chm
Nero/Nero StartSmart/NeroStartSmart_jpn.chm
.chm
Nero/Nero StartSmart/NeroStartSmart_kor.chm
.chm
Nero/Nero StartSmart/NeroStartSmart_nld.chm
.chm
Nero/Nero StartSmart/NeroStartSmart_ptg.chm
.chm
Nero/Nero StartSmart/NeroStartSmart_sve.chm
.chm
Nero/Nero Toolkit/CDSpeed.exe.cab
.cab
Nero/Nero Toolkit/CDSpeed_eng.chm
.chm
Nero/Nero Toolkit/DMAManager.exe.cab
.cab
Nero/Nero Toolkit/DriveSpeed.exe.cab
.cab
Nero/Nero Wave Editor/AudioControls2.ocx.cab
.cab
Nero/Nero Wave Editor/Axis.ocx.cab
.cab
Nero/Nero Wave Editor/DXBridge.wpl.cab
.cab
Nero/Nero Wave Editor/DXEnum.exe.cab
.cab
Nero/Nero Wave Editor/LEDMeter.ocx.cab
.cab
Nero/Nero Wave Editor/NeroWaveEditor_chs.chm
.chm
Nero/Nero Wave Editor/NeroWaveEditor_chs.pdf
.pdf
Nero/Nero Wave Editor/NeroWaveEditor_cht.chm
.chm
Nero/Nero Wave Editor/NeroWaveEditor_cht.pdf
.pdf
Nero/Nero Wave Editor/NeroWaveEditor_deu.chm
.chm
Nero/Nero Wave Editor/NeroWaveEditor_deu.pdf
.pdf
Nero/Nero Wave Editor/NeroWaveEditor_eng.chm
.chm
Nero/Nero Wave Editor/NeroWaveEditor_eng.pdf
.pdf
Nero/Nero Wave Editor/NeroWaveEditor_esp.chm
.chm
Nero/Nero Wave Editor/NeroWaveEditor_esp.pdf
.pdf
Nero/Nero Wave Editor/NeroWaveEditor_fra.chm
.chm
Nero/Nero Wave Editor/NeroWaveEditor_fra.pdf
.pdf
Nero/Nero Wave Editor/NeroWaveEditor_ita.chm
.chm
Nero/Nero Wave Editor/NeroWaveEditor_ita.pdf
.pdf
Nero/Nero Wave Editor/NeroWaveEditor_jpn.chm
.chm
Nero/Nero Wave Editor/NeroWaveEditor_jpn.pdf
.pdf
Nero/Nero Wave Editor/NeroWaveEditor_kor.chm
.chm
Nero/Nero Wave Editor/NeroWaveEditor_kor.pdf
.pdf
Nero/Nero Wave Editor/NeroWaveEditor_nld.chm
.chm
Nero/Nero Wave Editor/NeroWaveEditor_nld.pdf
.pdf
Nero/Nero Wave Editor/NeroWaveEditor_ptg.chm
.chm
Nero/Nero Wave Editor/NeroWaveEditor_ptg.pdf
.pdf
Nero/Nero Wave Editor/NeroWaveEditor_sve.chm
.chm
Nero/Nero Wave Editor/NeroWaveEditor_sve.pdf
.pdf
Nero/Nero Wave Editor/Presets/1e61b927-8c5044d4-ae889c51-dd586cd3.pre.cab
.cab
Nero/Nero Wave Editor/Presets/2c7682e2-d38b40b0-afd3ab3f-1119f089.pre.cab
.cab
Nero/Nero Wave Editor/Presets/36b69eab-4da7410e-a9233458-ff920a91.pre.cab
.cab
Nero/Nero Wave Editor/Presets/3e837f70-d5764187-951f9de3-34cf0129.pre.cab
.cab
Nero/Nero Wave Editor/Presets/53e09fcc-6dc04140-9f962ece-93584bc.pre.cab
.cab
Nero/Nero Wave Editor/Presets/541c03d3-cbfb40c0-b0385740-afec9f4.pre.cab
.cab
Nero/Nero Wave Editor/Presets/5d1f0052-f8114a9f-9deea25e-39d99e88.pre.cab
.cab
Nero/Nero Wave Editor/Presets/6073de43-6e416f-90412ea3-2b56d0af.pre.cab
.cab
Nero/Nero Wave Editor/Presets/73a712b4-d614426e-bd00e28a-2680e483.pre.cab
.cab
Nero/Nero Wave Editor/Presets/73abe042-a4514a93-853113e3-8a42a686.pre.cab
.cab
Nero/Nero Wave Editor/Presets/7c25acb5-fb1c458e-87732cad-5b483c26.pre.cab
.cab
Nero/Nero Wave Editor/Presets/8c3d0948-7044dc-8325bbcd-3a3a56ce.pre.cab
.cab
Nero/Nero Wave Editor/Presets/9568266b-fc044b76-aad47a1d-2a20fe2c.pre.cab
.cab
Nero/Nero Wave Editor/Presets/9ccd71-dd314df9-b871a1b2-adb7d13c.pre.cab
.cab
Nero/Nero Wave Editor/Presets/9d61817f-45664ed8-9445daa0-a46641de.pre.cab
.cab
Nero/Nero Wave Editor/Presets/a1d2638d-b23f429f-b0afdee5-a3350131.pre.cab
.cab
Nero/Nero Wave Editor/Presets/ac92b519-53b641d6-89c2ba98-44554b2c.pre.cab
.cab
Nero/Nero Wave Editor/Presets/b12dd394-8ac74eb1-95c9d1ec-2bf2ee19.pre.cab
.cab
Nero/Nero Wave Editor/Presets/b18df606-87964fc1-8b5c6414-bbe887a3.pre.cab
.cab
Nero/Nero Wave Editor/Presets/c62798c7-f50a4226-a88470d-37015a98.pre.cab
.cab
Nero/Nero Wave Editor/Presets/d8684a6c-a1a14e4a-93c59908-d63ba37e.pre.cab
.cab
Nero/Nero Wave Editor/Presets/d9608ef8-5d0d4927-a0091465-535f57ed.pre.cab
.cab
Nero/Nero Wave Editor/Presets/e450dd9d-ff584493-9bfcd356-9d10547c.pre.cab
.cab
Nero/Nero Wave Editor/Presets/fed38076-c8f547a7-9f8e0da5-8e44486.pre.cab
.cab
Nero/Nero Wave Editor/Recording.ocx.cab
.cab
Nero/Nero Wave Editor/VSTBridge.wpl.cab
.cab
Nero/Nero Wave Editor/WaveEdit.exe.cab
.cab
Nero/Nero Wave Editor/vPlugIns.wpl.cab
.cab
Nero/Nero Wave Editor/vfft.dll.cab
.cab
Nero/Nero Wave Editor/vplugins-chs.nls.cab
.cab
Nero/Nero Wave Editor/vplugins-cht.nls.cab
.cab
Nero/Nero Wave Editor/vplugins-csy.nls.cab
.cab
Nero/Nero Wave Editor/vplugins-dan.nls.cab
.cab
Nero/Nero Wave Editor/vplugins-deu.nls.cab
.cab
Nero/Nero Wave Editor/vplugins-ell.nls.cab
.cab
Nero/Nero Wave Editor/vplugins-esl.nls.cab
.cab
Nero/Nero Wave Editor/vplugins-esp.nls.cab
.cab
Nero/Nero Wave Editor/vplugins-fin.nls.cab
.cab
Nero/Nero Wave Editor/vplugins-fra.nls.cab
.cab
Nero/Nero Wave Editor/vplugins-hun.nls.cab
.cab
Nero/Nero Wave Editor/vplugins-ita.nls.cab
.cab
Nero/Nero Wave Editor/vplugins-jpn.nls.cab
.cab
Nero/Nero Wave Editor/vplugins-kor.nls.cab
.cab
Nero/Nero Wave Editor/vplugins-nld.nls.cab
.cab
Nero/Nero Wave Editor/vplugins-nor.nls.cab
.cab
Nero/Nero Wave Editor/vplugins-plk.nls.cab
.cab
Nero/Nero Wave Editor/vplugins-ptb.nls.cab
.cab
Nero/Nero Wave Editor/vplugins-ptg.nls.cab
.cab
Nero/Nero Wave Editor/vplugins-rus.nls.cab
.cab
Nero/Nero Wave Editor/vplugins-sky.nls.cab
.cab
Nero/Nero Wave Editor/vplugins-slv.nls.cab
.cab
Nero/Nero Wave Editor/vplugins-sve.nls.cab
.cab
Nero/Nero Wave Editor/vplugins-tha.nls.cab
.cab
Nero/Nero Wave Editor/vplugins-trk.nls.cab
.cab
Nero/Nero Wave Editor/waveedit-chs.nls.cab
.cab
Nero/Nero Wave Editor/waveedit-cht.nls.cab
.cab
Nero/Nero Wave Editor/waveedit-csy.nls.cab
.cab
Nero/Nero Wave Editor/waveedit-dan.nls.cab
.cab
Nero/Nero Wave Editor/waveedit-deu.nls.cab
.cab
Nero/Nero Wave Editor/waveedit-ell.nls.cab
.cab
Nero/Nero Wave Editor/waveedit-esl.nls.cab
.cab
Nero/Nero Wave Editor/waveedit-esp.nls.cab
.cab
Nero/Nero Wave Editor/waveedit-fin.nls.cab
.cab
Nero/Nero Wave Editor/waveedit-fra.nls.cab
.cab
Nero/Nero Wave Editor/waveedit-hun.nls.cab
.cab
Nero/Nero Wave Editor/waveedit-ita.nls.cab
.cab
Nero/Nero Wave Editor/waveedit-jpn.nls.cab
.cab
Nero/Nero Wave Editor/waveedit-kor.nls.cab
.cab
Nero/Nero Wave Editor/waveedit-nld.nls.cab
.cab
Nero/Nero Wave Editor/waveedit-nor.nls.cab
.cab
Nero/Nero Wave Editor/waveedit-plk.nls.cab
.cab
Nero/Nero Wave Editor/waveedit-ptb.nls.cab
.cab
Nero/Nero Wave Editor/waveedit-ptg.nls.cab
.cab
Nero/Nero Wave Editor/waveedit-rus.nls.cab
.cab
Nero/Nero Wave Editor/waveedit-sky.nls.cab
.cab
Nero/Nero Wave Editor/waveedit-slv.nls.cab
.cab
Nero/Nero Wave Editor/waveedit-sve.nls.cab
.cab
Nero/Nero Wave Editor/waveedit-tha.nls.cab
.cab
Nero/Nero Wave Editor/waveedit-trk.nls.cab
.cab
Nero/Nero Wave Editor/waveedit.dll.cab
.cab
Nero/Nero/AudioPluginMgr.dll.cab
.cab
Nero/Nero/Boo.wav.cab
.cab
Nero/Nero/CDCopy.dll.cab
.cab
Nero/Nero/CDI/CDI_IMAG.RTF.cab
.cab
Nero/Nero/CDI/CDI_TEXT.FNT.cab
.cab
Nero/Nero/CDI/CDI_VCD.APP.cab
.cab
Nero/Nero/CDI/CDI_VCD.CFG
Nero/Nero/CDROM.CFG.cab
.cab
Nero/Nero/CDROM.dll.cab
.cab
Nero/Nero/DRWEBASE.VDB.cab
.cab
Nero/Nero/DVDREALLOC.dll.cab
.cab
Nero/Nero/DingDong.wav.cab
.cab
Nero/Nero/DosBootimage.IMA.cab
.cab
Nero/Nero/Drweb32.dll.cab
.cab
Nero/Nero/Dws114x.dll.cab
.cab
Nero/Nero/EQUA_ENG.PRF.cab
.cab
Nero/Nero/Equalize.dll.cab
.cab
Nero/Nero/FATImporter.dll.cab
.cab
Nero/Nero/GENCUSH.dll.cab
.cab
Nero/Nero/GenFAT.dll.cab
.cab
Nero/Nero/GenPCHy.dll.cab
.cab
Nero/Nero/GenUDF.dll.cab
.cab
Nero/Nero/Generatr.dll.cab
.cab
Nero/Nero/ISOFS.dll.cab
.cab
Nero/Nero/ImageGen.dll.cab
.cab
Nero/Nero/KARAOKE.dll.cab
.cab
Nero/Nero/MMC.dll.cab
.cab
Nero/Nero/MPGEnc.dll.cab
.cab
Nero/Nero/NRESTORE.EXE.cab
.cab
Nero/Nero/NeHDBlkAccess.dll.cab
.cab
Nero/Nero/NeMP3Dmo.dll.cab
.cab
Nero/Nero/NeMP3Hlp.dll.cab
.cab
Nero/Nero/NeVCDEngine.dll.cab
.cab
Nero/Nero/Nero.txt.cab
.cab
Nero/Nero/NeroCmd.exe.cab
.cab
Nero/Nero/NeroCom.dll.cab
.cab
Nero/Nero/NeroExpress_chs.chm
.chm
Nero/Nero/NeroExpress_chs.pdf
.pdf
Nero/Nero/NeroExpress_cht.chm
.chm
Nero/Nero/NeroExpress_cht.pdf
.pdf
Nero/Nero/NeroExpress_deu.chm
.chm
Nero/Nero/NeroExpress_deu.pdf
.pdf
Nero/Nero/NeroExpress_eng.chm
.chm
Nero/Nero/NeroExpress_eng.pdf
.pdf
Nero/Nero/NeroExpress_esp.chm
.chm
Nero/Nero/NeroExpress_esp.pdf
.pdf
Nero/Nero/NeroExpress_fra.chm
.chm
Nero/Nero/NeroExpress_fra.pdf
.pdf
Nero/Nero/NeroExpress_ita.chm
.chm
Nero/Nero/NeroExpress_ita.pdf
.pdf
Nero/Nero/NeroExpress_jpn.chm
.chm
Nero/Nero/NeroExpress_jpn.pdf
.pdf
Nero/Nero/NeroExpress_kor.chm
.chm
Nero/Nero/NeroExpress_kor.pdf
.pdf
Nero/Nero/NeroExpress_nld.chm
.chm
Nero/Nero/NeroExpress_nld.pdf
.pdf
Nero/Nero/NeroExpress_ptg.chm
.chm
Nero/Nero/NeroExpress_ptg.pdf
.pdf
Nero/Nero/NeroExpress_sve.chm
.chm
Nero/Nero/NeroExpress_sve.pdf
.pdf
Nero/Nero/NeroMediaCon.dll.cab
.cab
Nero/Nero/NeroNet.dll.cab
.cab
Nero/Nero/Nerochs.nls.cab
.cab
Nero/Nero/Nerochs.txt.cab
.cab
Nero/Nero/Nerocht.nls.cab
.cab
Nero/Nero/Nerocht.txt.cab
.cab
Nero/Nero/Nerocsy.nls.cab
.cab
Nero/Nero/Nerocsy.txt.cab
.cab
Nero/Nero/Nerodan.nls.cab
.cab
Nero/Nero/Nerodan.txt.cab
.cab
Nero/Nero/Nerodeu.nls.cab
.cab
Nero/Nero/Nerodeu.txt.cab
.cab
Nero/Nero/Neroell.nls.cab
.cab
Nero/Nero/Neroell.txt.cab
.cab
Nero/Nero/Neroesl.nls.cab
.cab
Nero/Nero/Neroesl.txt.cab
.cab
Nero/Nero/Neroesp.nls.cab
.cab
Nero/Nero/Neroesp.txt.cab
.cab
Nero/Nero/Nerofin.nls.cab
.cab
Nero/Nero/Nerofin.txt.cab
.cab
Nero/Nero/Nerofra.nls.cab
.cab
Nero/Nero/Nerofra.txt.cab
.cab
Nero/Nero/Nerohun.nls.cab
.cab
Nero/Nero/Nerohun.txt.cab
.cab
Nero/Nero/Neroita.nls.cab
.cab
Nero/Nero/Neroita.txt.cab
.cab
Nero/Nero/Nerojpn.nls.cab
.cab
Nero/Nero/Nerojpn.txt.cab
.cab
Nero/Nero/Nerokor.nls.cab
.cab
Nero/Nero/Nerokor.txt.cab
.cab
Nero/Nero/Neronld.nls.cab
.cab
Nero/Nero/Neronld.txt.cab
.cab
Nero/Nero/Neronor.nls.cab
.cab
Nero/Nero/Neronor.txt.cab
.cab
Nero/Nero/Neroplk.nls.cab
.cab
Nero/Nero/Neroplk.txt.cab
.cab
Nero/Nero/Neroptb.nls.cab
.cab
Nero/Nero/Neroptb.txt.cab
.cab
Nero/Nero/Neroptg.nls.cab
.cab
Nero/Nero/Neroptg.txt.cab
.cab
Nero/Nero/Nerorus.nls.cab
.cab
Nero/Nero/Nerorus.txt.cab
.cab
Nero/Nero/Nerosky.nls.cab
.cab
Nero/Nero/Nerosky.txt.cab
.cab
Nero/Nero/Neroslv.nls.cab
.cab
Nero/Nero/Neroslv.txt.cab
.cab
Nero/Nero/Nerosve.nls.cab
.cab
Nero/Nero/Nerosve.txt.cab
.cab
Nero/Nero/Nerotha.nls.cab
.cab
Nero/Nero/Nerotha.txt.cab
.cab
Nero/Nero/Nerotrk.nls.cab
.cab
Nero/Nero/Nerotrk.txt.cab
.cab
Nero/Nero/NetRecorder.dll.cab
.cab
Nero/Nero/READHD16.dll.cab
.cab
Nero/Nero/ReadHD32.dll.cab
.cab
Nero/Nero/Trumpet1.wav.cab
.cab
Nero/Nero/UDFImporter.dll.cab
.cab
Nero/Nero/VCDMenu.dll.cab
.cab
Nero/Nero/VMPEGEnc.dll.cab
.cab
Nero/Nero/VMPEGEncNDX.dll.cab
.cab
Nero/Nero/WNASPI32.DLL.cab
.cab
Nero/Nero/cdr100.dll.cab
.cab
Nero/Nero/cdr50s.dll.cab
.cab
Nero/Nero/cdu920.dll.cab
.cab
Nero/Nero/cr2200cs.dll.cab
.cab
Nero/Nero/geniso.dll.cab
.cab
Nero/Nero/image.dll.cab
.cab
Nero/Nero/ims.dll.cab
.cab
Nero/Nero/neRSDB.dll.cab
.cab
Nero/Nero/nero.exe
.exe windows:4 windows x86 arch:x86

ddfb8688c3e45a676a70ba580c9a06b4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shfolder

SHGetFolderPathA

shell32

DragAcceptFiles
DoEnvironmentSubstA
ShellExecuteExA
SHGetDesktopFolder
ExtractIconA
ShellExecuteA
ord179
SHFileOperationA
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc
SHGetSpecialFolderLocation
SHGetFileInfoA
DragQueryPoint
DragFinish
DragQueryFileA

winmm

mixerGetLineControlsA
waveOutPrepareHeader
waveOutGetPosition
mmioClose
mmioAscend
mmioRead
mmioDescend
mmioOpenA
mciGetErrorStringA
mciSendStringA
mixerOpen
mixerGetID
mixerGetDevCapsA
mciSendCommandA
PlaySoundA
mixerGetControlDetailsA
waveOutClose
waveOutReset
waveOutPause
mixerSetControlDetails
mixerGetLineInfoA
timeGetTime
waveOutOpen
mixerClose
mixerGetNumDevs
waveOutWrite

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

quartz

AMGetErrorTextA

image

?GetOrdinalNumber@CNeroError@@UBE?AVCOrdinalNumber@@XZ

isofs

?Convert2kToMode2Form1With2332@@YAHQBEQAEPBE@Z
?GenECCAndEDC_Mode1@@YAHQBEPBUSectHeaderMSF@@QAEW4SECT_TYPE@@@Z
?Convert2kToMode2Form1With2336@@YAHQBEQAEPBE@Z
?WordSwap2352@@YAXPAE@Z
?ByteSwap2352@@YAXPAE@Z
?ScrambleSector@@YAXQAE@Z
?GenECCAndEDC_Mode2Form1@@YAHQBEPBUSectHeaderMSF@@0QAEW4SECT_TYPE@@@Z
?ConvertMode2_2336_to_2352@@YAHQAEPBUSectHeaderMSF@@0@Z
?GenRawEmptySector@@YAHQAEW4TRACKMODE@@KH@Z
?GenEmptyAudio96Sector@@YAXPAEHEKH@Z
?ConvertPackedToRawSubChannel@@YAXPAE00H@Z
?GetCD_CRCTable@@YAPBKXZ
?CalcSubChannelCRC@@YAGPBEK@Z

neroerr

?GetNeroPortab@@YAAAVCNeroPortab@@XZ
?ERRAdd@@YAABVINeroError@@ABV1@@Z
?Rollback@CNeroErrorList@@QAEXABVErrorListPos@@@Z
?GetLast@CNeroErrorList@@QBE?AVErrorListPos@@XZ
?ERRMyList@@YAAAVCNeroErrorList@@XZ
?GetThreadName@CNeroError@@UBEPBDXZ
?IsMessageTranslationEnabled@CNeroError@@UBEHXZ
?EnableMessageTranslation@CNeroError@@UAEXH@Z
?GetLine@CNeroError@@UBEHXZ
?GetErrorFile@CNeroError@@UBEPBDXZ
?GetError@CNeroError@@UBEHXZ
?GetTime@CNeroError@@UBEJXZ
?GetTime@CErrorClone@@UBEJXZ
?GetTypeName@CErrorClone@@UBEPBDXZ
?GetErrorFile@CErrorClone@@UBEPBDXZ
?GetLine@CErrorClone@@UBEHXZ
?EnableMessageTranslation@CErrorClone@@UAEXH@Z
?SetNeroPortab@@YAXPAVCNeroPortab@@@Z
?GetSpecialFolder@@YAHHPAD@Z
?FindSubKey@FReg@@QAEPAUHKEY__@@PBDH@Z
?GetDWORD@FReg@@QAEKPBDK@Z
?SetMsgFileName@@YAXPBD@Z
?IsWindowsXPOrHigher@@YAHXZ
?GetString@FReg@@QAE?AVBinChar@@PBDV2@@Z
?GetErrorIcon@CErrorClone@@UBE?AW4NeroErrorID@@XZ
??0WorkerThread@@QAE@PAX@Z
?StartThread@WorkerThread@@QAEHXZ
?WaitForThreadEnd@WorkerThread@@QAEKKPAUHWND__@@@Z
??1WorkerThread@@UAE@XZ
?Lower@BinChar@@QBE?AV1@XZ
?MyNeroThread@@YAAAVCAbstractThread@@XZ
?Fatal@CErrorClone@@UBEHXZ
?GetProcessPriority@@YA?AW4ePriorityClass@@XZ
?SetProcessPriority@@YAHW4ePriorityClass@@@Z
?GetPrevious@CNeroErrorList@@QBE?AVErrorListPos@@ABV2@@Z
?ERRClearErrors@@YAXXZ
?Rollback@ErrorListPos@@QBEXXZ
?CreateNeroThread@@YAPAVCAbstractThread@@XZ
??0CNeroErrorList@@QAE@XZ
?CopyErrorsTo@CNeroErrorList@@QBEXAAV1@PAVErrorListPos@@1@Z
?GetFirst@CNeroErrorList@@QBE?AVErrorListPos@@XZ
?GetNext@CNeroErrorList@@QBE?AVErrorListPos@@ABV2@@Z
??1CNeroErrorList@@UAE@XZ
?GetError@CErrorClone@@UBEHXZ
?GetLast@CNeroError@@SA?AVErrorListPos@@XZ
??0BinChar@@QAE@HH@Z
?FindKeys@FReg@@QAE_NPBDAAVBinChar@@AAH@Z
??BFReg@@QAEPAUHKEY__@@XZ
?SetDWORD@FReg@@QAE_NVBinChar@@K@Z
??0FReg@@QAE@PAUHKEY__@@VBinChar@@_N@Z
?SetString@FReg@@QAE_NABVBinChar@@0@Z
??1FReg@@QAE@XZ
?IsWindowsNTOrHigher@@YAHXZ
??0BinChar@@QAE@ABV0@@Z
?FileName@BinChar@@QBE?AV1@XZ
?FullFileName@BinChar@@QBE?AV1@AAH@Z
?Directory@BinChar@@QBE?AV1@H@Z
?GetWord@BinChar@@QBE?AV1@HD@Z
?MaskenFit@BinChar@@QBE_NPBD@Z
?iStr@BinChar@@QBEHABV1@H@Z
??HBinChar@@QBE?AV0@PBD@Z
?Translate@BinChar@@QAEHABV1@0@Z
?IsWinME@@YAHXZ
?Right@BinChar@@QBE?AV1@H@Z
??HBinChar@@QBE?AV0@ABV0@@Z
?Fatal@CNeroError@@UBEHXZ
?GetErrorIcon@CNeroError@@UBE?AW4NeroErrorID@@XZ
?IsWindows2kOrHigher@@YAHXZ
??RBinChar@@QBE?AV0@HH@Z
?Upper@BinChar@@QBE?AV1@XZ
?Left@BinChar@@QBE?AV1@H@Z
?IsInt@BinChar@@QBE_NXZ
?ToInt@BinChar@@QBEHXZ
??0BinChar@@QAE@PBD@Z
??BBinChar@@QBEPBDXZ
??0BinChar@@QAE@XZ
??0BinChar@@QAE@PBXH@Z
??4BinChar@@QAEAAV0@ABV0@@Z
??1BinChar@@QAE@XZ
??0CErrorClone@@QAE@XZ
?GetError@CNeroErrorList@@QBEHAAVCErrorClone@@ABVErrorListPos@@@Z
?GetDescriptionLine@CErrorClone@@UBEHHHPADH@Z
??1CErrorClone@@UAE@XZ
?ClearErrors@CNeroErrorList@@QAEXXZ
?GetDescriptionLine@CNeroError@@UBEHHPADH@Z
??1CNeroError@@UAE@XZ
??0CNeroError@@IAE@PBDHH@Z
?SetFatal@CNeroError@@UAEHH@Z
?GetDescriptionLine@CNeroError@@UBEHHHPADH@Z
?GetDescriptionLine@CNeroError@@UBEHHHPADH_N@Z

neroscsi

neroscsi_Exit
neroscsi_Init
SCSIWaitCmd
SCSIExecCmd
SCSIGetDevType
SCSIReleaseCmd
SCSIInquirySync
SCSIInit
SCSIExit
SCSIGetCmdStatus
SCSIGetSenseKey
SCSIGetHaCount
SCSIGetTaStatus
SCSIGetHaStatus
SCSISetCapabilities
SCSIGetCapabilities
SCSIGetHaInfo
SCSIPrepare
SCSIPrepareCmd
SCSIExec
SCSIGetSenseCode
SCSIGetSenseQual
SystemTimeString
SCSILogError
SCSIPending
SCSIAbortCmd

newtrf

?ExecuteActions@@YAXAAVCTaskActionArray@@@Z
?OpenTransfer@@YAPAVCAbstractTransfer@@AAVCTransferSettings@@K@Z
?GenEDC@@YAHPAEKPAV?$LittleEndian@K@@@Z
?NormalizeRawSector@@YAHPAEK@Z
?IdentifyTrack@@YA?AW4TrackModeType@@QBE@Z
?CheckECCAndEDC_Mode1@@YAHQAEH@Z
?CheckECCAndEDC_Mode2Form2@@YAHQAEH@Z
?CheckECCAndEDC_Mode2Form1@@YAHQAEH@Z

cdcopy

FindTrackEnd

nersdb

?GetDB@@YAPAUIRecorderDatabase@@XZ

kernel32

HeapSize
SetStdHandle
TerminateProcess
ExitProcess
GetCommandLineA
GetStringTypeW
CompareStringW
FreeEnvironmentStringsA
FatalAppExitA
GetEnvironmentStrings
GetEnvironmentStringsW
IsBadCodePtr
SetConsoleCtrlHandler
GetACP
GetFileType
GetLocaleInfoW
SetUnhandledExceptionFilter
GetEnvironmentVariableA
HeapDestroy
HeapCreate
LCMapStringA
LCMapStringW
IsValidLocale
IsValidCodePage
EnumSystemLocalesA
GetUserDefaultLCID
UnhandledExceptionFilter
SetHandleCount
GetStdHandle
FreeEnvironmentStringsW
RemoveDirectoryA
GetStringTypeA
FreeLibrary
GetProcAddress
LoadLibraryA
DeleteFileA
GlobalFree
GlobalAlloc
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetVolumeInformationA
InterlockedExchange
Sleep
WaitForSingleObject
FindClose
FindFirstFileA
GetTempFileNameA
GetDriveTypeA
MultiByteToWideChar
lstrlenA
GetLastError
CloseHandle
CreateFileA
GetTickCount
SetCurrentDirectoryA
GetCurrentDirectoryA
GlobalUnlock
GlobalLock
WriteFile
GetVersionExA
DeviceIoControl
FormatMessageA
lstrcpyA
lstrcpynA
GetFileAttributesA
SetLastError
QueryDosDeviceA
ResumeThread
SetEnvironmentVariableA
SetEvent
GetTempPathA
GlobalSize
InterlockedDecrement
InterlockedIncrement
WideCharToMultiByte
GetSystemDirectoryA
SetPriorityClass
GetPriorityClass
GetCurrentProcess
GetVersion
IsBadWritePtr
CopyFileA
lstrcatA
GetLogicalDrives
GetDiskFreeSpaceA
ReadFile
SetFilePointer
GetModuleHandleA
GetLogicalDriveStringsA
FindNextFileA
CompareStringA
CreateDirectoryA
MulDiv
GetCurrentThreadId
LockResource
LoadResource
FindResourceA
WinExec
ResetEvent
GetExitCodeThread
HeapFree
HeapAlloc
GetProcessHeap
lstrcmpiA
FileTimeToLocalFileTime
GetThreadLocale
CreateThread
CreateEventA
WaitForMultipleObjects
GetThreadPriority
SetThreadPriority
SuspendThread
TerminateThread
OutputDebugStringA
GlobalMemoryStatus
WritePrivateProfileStringA
LocalFree
IsBadReadPtr
OpenFile
GetModuleFileNameA
Beep
GetWindowsDirectoryA
GetLocaleInfoA
GetFileSize
MoveFileA
SetEndOfFile
FileTimeToDosDateTime
GetFileTime
SetFileTime
DosDateTimeToFileTime
SetFileAttributesA
SystemTimeToFileTime
FileTimeToSystemTime
LocalFileTimeToFileTime
GetSystemTime
CompareFileTime
FindCloseChangeNotification
FindNextChangeNotification
FindFirstChangeNotificationA
ReleaseMutex
CreateMutexA
SizeofResource
lstrlenW
GetSystemDefaultLangID
GetTimeFormatA
GetDateFormatA
GetNumberFormatA
GetCurrentThread
CreateProcessA
GetStartupInfoA
GetExitCodeProcess
GetPrivateProfileStringA
TlsFree
TlsAlloc
lstrcmpA
GetCurrentProcessId
VirtualFree
VirtualAlloc
GetTimeZoneInformation
GetSystemInfo
GlobalReAlloc
GetUserDefaultLangID
GetFullPathNameA
GetShortPathNameA
SetErrorMode
GetDiskFreeSpaceExA
CreateSemaphoreA
ReleaseSemaphore
SetCommState
SetCommTimeouts
GetCommState
FlushFileBuffers
LocalAlloc
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
VirtualProtect
DuplicateHandle
LockFile
UnlockFile
GetStringTypeExA
GetProfileIntA
GetPrivateProfileIntA
GlobalHandle
TlsSetValue
LocalReAlloc
TlsGetValue
GlobalFlags
GetProcessVersion
GetCPInfo
GetOEMCP
FindResourceExA
LocalUnlock
LocalLock
RtlUnwind
RaiseException
GetLocalTime
HeapReAlloc
ExitThread
GetSystemTimeAsFileTime

user32

TrackPopupMenuEx
ModifyMenuA
ExitWindowsEx
DrawMenuBar
RegisterWindowMessageA
RegisterClassA
GetClassInfoA
SetRectEmpty
FrameRect
DeleteMenu
GetMessageA
LoadImageA
EnableScrollBar
SetScrollPos
SetScrollRange
GetNextDlgGroupItem
WinHelpA
IsChild
AdjustWindowRect
GetTabbedTextExtentA
DestroyCursor
CopyIcon
GetDialogBaseUnits
GetTopWindow
IsZoomed
GetLastActivePopup
SetMenu
GetIconInfo
UnregisterClassA
OpenClipboard
EmptyClipboard
CloseClipboard
SetClipboardData
GetClipboardData
InsertMenuA
GetWindowThreadProcessId
SendMessageTimeoutA
EnumWindows
GetWindowTextLengthA
OpenIcon
TabbedTextOutA
ShowScrollBar
BroadcastSystemMessage
DrawTextA
MsgWaitForMultipleObjects
CreateDialogIndirectParamA
GetMessageTime
RemovePropA
GetPropA
SetPropA
SetWindowPlacement
TrackPopupMenu
GetCapture
GetScrollPos
GetScrollRange
SetScrollInfo
GetScrollInfo
ScrollWindow
AdjustWindowRectEx
MapWindowPoints
SendDlgItemMessageA
CheckDlgButton
CheckRadioButton
GetDlgItemInt
GetDlgItemTextA
SetDlgItemInt
SetDlgItemTextA
IsDlgButtonChecked
ScrollWindowEx
IsDialogMessageA
SetMenuItemBitmaps
GetMenuState
GetMenuCheckMarkDimensions
wvsprintfA
CharToOemA
OemToCharA
GetWindowDC
GrayStringA
ValidateRect
DefFrameProcA
TranslateMDISysAccel
DefMDIChildProcA
DestroyMenu
ReuseDDElParam
UnpackDDElParam
CharUpperA
InvertRect
CharNextA
SetWindowContextHelpId
WaitMessage
ShowOwnedPopups
CopyAcceleratorTableA
PostThreadMessageA
GetMenuItemID
GetMenuItemInfoA
DrawIconEx
DrawEdge
GetKeyboardLayout
MapVirtualKeyExA
IsCharLowerA
MapVirtualKeyA
GetKeyNameTextA
GetClassNameA
UnionRect
SetFocus
GetMenuStringA
DrawStateA
GetDC
GetNextDlgTabItem
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
CreatePopupMenu
GetMenuItemCount
SetActiveWindow
IsIconic
DestroyIcon
DeferWindowPos
CheckMenuItem
CheckMenuRadioItem
PeekMessageA
BringWindowToTop
LoadAcceleratorsA
EqualRect
SetCursorPos
FindWindowA
TranslateAcceleratorA
GetSystemMenu
RemoveMenu
GetDesktopWindow
TranslateMessage
DispatchMessageA
LockWindowUpdate
EnableMenuItem
SetMenuDefaultItem
GetDlgCtrlID
GetMessagePos
CallWindowProcA
EndDialog
SetWindowTextA
SetWindowPos
LoadStringA
IsWindowEnabled
SetWindowLongA
GetWindowTextA
GetForegroundWindow
DrawFocusRect
SendNotifyMessageA
SetForegroundWindow
PostQuitMessage
DefWindowProcA
RegisterClassExA
CreateWindowExA
LoadMenuA
GetSubMenu
GetUpdateRect
BeginPaint
EndPaint
GetMenu
DestroyWindow
MessageBoxA
GetDCEx
GetClassLongA
ReleaseDC
GetWindowLongA
ClientToScreen
BeginDeferWindowPos
EndDeferWindowPos
IsRectEmpty
GetSysColorBrush
LoadCursorA
SystemParametersInfoA
MessageBeep
LoadIconA
MapDialogRect
GetWindow
GetWindowPlacement
OffsetRect
DrawFrameControl
CopyRect
GetActiveWindow
GetCursorPos
WindowFromPoint
SetCursor
InflateRect
ReleaseCapture
SetCapture
IntersectRect
PtInRect
LoadBitmapA
GetSysColor
SetRect
ScreenToClient
GetAsyncKeyState
GetKeyState
GetFocus
wsprintfA
RegisterClipboardFormatA
IsClipboardFormatAvailable
IsWindow
FillRect
GetDlgItem
GetWindowRect
ShowWindow
MoveWindow
GetParent
IsWindowVisible
GetSystemMetrics
PostMessageA
RedrawWindow
InvalidateRect
UpdateWindow
CopyImage
AppendMenuA
SendMessageA
EnableWindow
GetClientRect
KillTimer
SetTimer
SetParent

gdi32

ExtFloodFill
CreateRectRgnIndirect
SetPixel
MaskBlt
ExtTextOutA
SetTextAlign
RealizePalette
SelectPalette
CreatePalette
GetTextFaceA
GetCurrentObject
GetBitmapBits
LPtoDP
GetTextAlign
EndDoc
EndPage
StartPage
StartDocA
SetDIBits
CreateDCA
SetStretchBltMode
CreateFontA
Rectangle
SetBkColor
SetTextColor
CreateBrushIndirect
GetStockObject
DeleteObject
CreateDIBitmap
DeleteDC
CreateRectRgn
InvertRgn
Polyline
PatBlt
SelectObject
CreateHalftonePalette
GetDIBColorTable
TextOutA
SetTextJustification
GetDCOrgEx
GetClipBox
SaveDC
RestoreDC
CreatePen
SetPolyFillMode
SetROP2
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
MoveToEx
LineTo
SetTextCharacterExtra
SetMapperFlags
GetCurrentPositionEx
ArcTo
SetArcDirection
PolyDraw
PolylineTo
SetColorAdjustment
PolyBezierTo
GetClipRgn
SelectClipPath
ExtSelectClipRgn
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
GetViewportExtEx
GetWindowExtEx
ExtCreatePen
CreateHatchBrush
CreatePatternBrush
CreateDIBPatternBrushPt
PtVisible
RectVisible
Escape
GetViewportOrgEx
AbortDoc
SetAbortProc
GetMapMode
SetRectRgn
CombineRgn
StretchDIBits
GetCharWidthA
EnumFontFamiliesExA
GetNearestColor
GetStretchBltMode
GetPolyFillMode
GetBkMode
GetROP2
GetWindowOrgEx
CopyMetaFileA
GetPixel
DPtoLP
GetDeviceCaps
GetTextColor
GetBkColor
CreateSolidBrush
GetTextExtentPoint32A
GetTextMetricsA
CreateFontIndirectA
CreateCompatibleBitmap
BitBlt
CreateCompatibleDC
GetObjectA
CreateBitmap
SetBkMode
StretchBlt

comdlg32

CommDlgExtendedError
GetOpenFileNameA
GetFileTitleA
PageSetupDlgA
PrintDlgA
ChooseColorA
ChooseFontA
FindTextA
ReplaceTextA
GetSaveFileNameA

winspool.drv

DocumentPropertiesA
SetPrinterDataA
GetPrinterDataA
EndPagePrinter
WritePrinter
StartPagePrinter
OpenPrinterA
StartDocPrinterA
ClosePrinter
EndDocPrinter
GetJobA
EnumPrintersA

comctl32

CreatePropertySheetPageA
DestroyPropertySheetPage
PropertySheetA
ImageList_DrawIndirect
ImageList_Duplicate
ImageList_LoadImageA
ImageList_Write
ImageList_Read
ImageList_ReplaceIcon
ImageList_GetIconSize
ImageList_DrawEx
ImageList_Draw
ImageList_AddMasked
ImageList_Merge
ImageList_Create
ImageList_Destroy
ord14
ImageList_SetBkColor
ord13
ord17
ImageList_Replace
ImageList_Add
ord8
ImageList_Remove
ImageList_GetImageCount
ImageList_GetIcon
_TrackMouseEvent
ImageList_GetImageInfo

olepro32

ord253

ole32

OleFlushClipboard
CLSIDFromString
CLSIDFromProgID
OleGetClipboard
CoTaskMemFree
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
CoInitializeEx
OleSetClipboard
CoInitialize
CoUninitialize
ReleaseStgMedium
CoCreateInstance
OleIsCurrentClipboard
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoDisconnectObject
CreateStreamOnHGlobal
OleDuplicateData
CoTaskMemAlloc
CreateBindCtx
SetConvertStg
WriteFmtUserTypeStg
WriteClassStg
OleRegGetUserType
ReadFmtUserTypeStg
ReadClassStg
StringFromCLSID
CoTreatAsClass
OleRun
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoRegisterMessageFilter
CoRegisterClassObject
CoRevokeClassObject
DoDragDrop
CreateILockBytesOnHGlobal

oleaut32

SafeArrayPutElement
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
VariantInit
VariantClear
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
SysAllocStringLen
SysFreeString
SetErrorInfo
GetErrorInfo
SafeArrayGetDim
SafeArrayCreate
LoadTypeLi
SafeArrayRedim
VariantCopy
SysAllocString
SysAllocStringByteLen
VariantChangeType
SysStringByteLen
VarCyFromStr
VarBstrFromCy
VarDateFromStr
VarBstrFromDate
SafeArrayCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayGetElement
SafeArrayPtrOfIndex
CreateErrorInfo
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
VariantTimeToSystemTime
SysReAllocStringLen
SysStringLen

wsock32

send
connect
htons
WSAAsyncGetHostByName
WSACancelAsyncRequest
socket
WSAAsyncSelect
closesocket
WSAGetLastError
gethostname
gethostbyaddr
WSAStartup
gethostbyname
inet_addr
WSACleanup
ioctlsocket
inet_ntoa
getprotobyname
getsockname
bind
htonl
accept
select
WSACancelBlockingCall
WSASetLastError
ntohs
getpeername
recvfrom
sendto
listen
recv

oledlg

ord8

shlwapi

SHDeleteKeyA

Sections

.text
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 932KB - Virtual size: 931KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 200KB - Virtual size: 15.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8.9MB - Virtual size: 8.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Nero/Nero/neroAPI.dll.cab
.cab
Nero/Nero/neroDB.dll.cab
.cab
Nero/Nero/neroErr.dll.cab
.cab
Nero/Nero/nerocd95.vxd.cab
.cab
Nero/Nero/nerocdNT.sys.cab
.cab
Nero/Nero/neroscsi.dll.cab
.cab
Nero/Nero/neroshx.dll.cab
.cab
Nero/Nero/newtrf.dll.cab
.cab
Nero/Nero/nres_dan.msg.cab
.cab
Nero/Nero/nres_deu.msg.cab
.cab
Nero/Nero/nres_eng.msg.cab
.cab
Nero/Nero/nres_esp.msg.cab
.cab
Nero/Nero/nres_fin.msg.cab
.cab
Nero/Nero/nres_fra.msg.cab
.cab
Nero/Nero/nres_hun.msg.cab
.cab
Nero/Nero/nres_ita.msg.cab
.cab
Nero/Nero/nres_jpn.msg.cab
.cab
Nero/Nero/nres_nld.msg.cab
.cab
Nero/Nero/nres_nor.msg.cab
.cab
Nero/Nero/nres_ptg.msg.cab
.cab
Nero/Nero/nres_rus.msg.cab
.cab
Nero/Nero/nres_sve.msg.cab
.cab
Nero/Nero/nres_trk.msg.cab
.cab
Nero/Nero/nrestore.cfg.cab
.cab
Nero/Nero/ro1420c.dll.cab
.cab
Nero/Redist/50comupd.exe
.exe windows:5 windows x86 arch:x86

c56a25fa4336eeb10723b3537ba4876d

Code Sign

03:c7:8f:37:db:92:28:df:3c:bb:1a:ad:82:fa:67:10
Certificate

Issuer

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

Not Before

09/04/1996, 00:00

Not After

07/01/2004, 23:59

Subject

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

13:89:b4:d1:8a:e8:a7:c4:bd:35:c7:9b:8d:88:ca:1f:ca:53:56:91
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

12/05/1997, 07:00

Not After

31/12/1999, 07:00

Subject

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

bd:11:9a:da:43:ed:21:fb:46:58:84:89:ca:46:88:90:25:ee:14:60
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

12/05/1997, 07:00

Not After

31/12/1999, 07:00

Subject

OU=VeriSign Time Stamping Service+OU=VeriSign Trust Network+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign\, Inc.,L=Internet

55:0d:88:f5:3f:64:16:d7:0c:73:00:d8:45:92:16:34
Certificate

Issuer

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

Not Before

19/03/1999, 00:00

Not After

16/04/2000, 23:59

Subject

CN=Microsoft Corporation,OU=VeriSign Commercial Software Publishers CA+OU=www.verisign.com/repository/RPA Incorp. by Ref.\,LIAB.LTD(c)98+OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Microsoft Corporation,O=VeriSign\, Inc.,L=Internet+L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageKeyEncipherment

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
EqualSid
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
FreeSid
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegQueryInfoKeyA

kernel32

lstrcatA
GetFileAttributesA
GetShortPathNameA
LocalAlloc
GetLastError
GetCurrentProcess
GetPrivateProfileIntA
lstrcmpiA
lstrcpyA
GetModuleFileNameA
FreeLibrary
GetPrivateProfileStringA
lstrlenA
GetSystemDirectoryA
RemoveDirectoryA
GetProcAddress
FindNextFileA
DeleteFileA
SetFileAttributesA
lstrcmpA
FindFirstFileA
_lclose
_llseek
_lopen
WritePrivateProfileStringA
GetWindowsDirectoryA
LoadLibraryA
FindClose
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
IsDBCSLeadByte
ExitProcess
CloseHandle
GetStartupInfoA
GetCommandLineA
LoadResource
FindResourceA
CreateMutexA
SetEvent
CreateEventA
SetCurrentDirectoryA
CreateThread
ResetEvent
TerminateThread
LocalFree
FormatMessageA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetTempPathA
FreeResource
LockResource
SizeofResource
CreateFileA
ReadFile
WriteFile
SetFilePointer
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetTempFileNameA
GetSystemInfo
GetDriveTypeA
lstrcpynA
GetVolumeInformationA
GetCurrentDirectoryA
LoadLibraryExA
GetModuleHandleA
CreateDirectoryA
ExpandEnvironmentStringsA
GetVersionExA
GetDiskFreeSpaceA
MulDiv

gdi32

GetDeviceCaps

user32

wsprintfA
ExitWindowsEx
CharNextA
CharUpperA
EndDialog
GetDesktopWindow
CharPrevA
GetWindowLongA
CallWindowProcA
GetDlgItem
SetForegroundWindow
SetWindowTextA
SendDlgItemMessageA
SetWindowLongA
EnableWindow
SendMessageA
LoadStringA
MsgWaitForMultipleObjects
PeekMessageA
MessageBoxA
SetWindowPos
ReleaseDC
GetDC
GetWindowRect
ShowWindow
DialogBoxIndirectParamA
SetDlgItemTextA
MessageBeep
GetDlgItemTextA
DispatchMessageA

comctl32

ord17

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

Sections

.text
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 457KB - Virtual size: 460KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Nero/Redist/MSVCP60.DLL
.dll windows:4 windows x86 arch:x86

1b1839992700df52b049b87961a724e3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

memmove
__CxxFrameHandler
free
localeconv
_Gettnames
_Getdays
_Getmonths
__mb_cur_max
atan2
cos
exp
ldexp
log
pow
sin
sqrt
??2@YAPAXI@Z
strtoul
_errno
strtol
sprintf
strcspn
fclose
fwrite
fputc
ungetc
fgetc
fgetpos
fseek
fsetpos
setvbuf
memchr
memset
ungetwc
fgetwc
_Strftime
fopen
_iob
setlocale
malloc
realloc
__crtCompareStringA
__lc_collate_cp
_unlock
__lc_handle
_lock
__setlc_active
__unguarded_readlc_active
__crtLCMapStringA
__lc_codepage
towlower
towupper
strcmp
_pctype
_isctype
_ftol
strtod
??1type_info@@UAE@XZ
_except_handler3
?terminate@@YAXXZ
__dllonexit
_onexit
_initterm
_adjust_fdiv
memcmp
memcpy
strlen
_CxxThrowException
wcslen
??4exception@@QAEAAV0@ABV0@@Z
??0exception@@QAE@ABQBD@Z
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
fflush
?what@exception@@UBEPBDXZ
fputwc

kernel32

DisableThreadLibraryCalls
MultiByteToWideChar
DeleteCriticalSection
InterlockedExchange
LeaveCriticalSection
Sleep
EnterCriticalSection
InitializeCriticalSection
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte

Exports

Exports

??0?$_Complex_base@M@std@@QAE@ABM0@Z
??0?$_Complex_base@N@std@@QAE@ABN0@Z
??0?$_Complex_base@O@std@@QAE@ABO0@Z
??0?$_Mpunct@D@std@@QAE@ABV_Locinfo@1@I_N@Z
??0?$_Mpunct@D@std@@QAE@I_N@Z
??0?$_Mpunct@G@std@@QAE@ABV_Locinfo@1@I_N@Z
??0?$_Mpunct@G@std@@QAE@I_N@Z
??0?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAE@ABV01@@Z
??0?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_filebuf@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
??0?$basic_filebuf@GU?$char_traits@G@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_filebuf@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_fstream@DU?$char_traits@D@std@@@std@@QAE@ABV01@@Z
??0?$basic_fstream@DU?$char_traits@D@std@@@std@@QAE@PBDH@Z
??0?$basic_fstream@DU?$char_traits@D@std@@@std@@QAE@XZ
??0?$basic_fstream@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
??0?$basic_fstream@GU?$char_traits@G@std@@@std@@QAE@PBDH@Z
??0?$basic_fstream@GU?$char_traits@G@std@@@std@@QAE@XZ
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@ABV01@@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PBDH@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@XZ
??0?$basic_ifstream@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
??0?$basic_ifstream@GU?$char_traits@G@std@@@std@@QAE@PBDH@Z
??0?$basic_ifstream@GU?$char_traits@G@std@@@std@@QAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@QAE@ABV01@@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IAE@XZ
??0?$basic_ios@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
??0?$basic_ios@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@ABV01@@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@ABV01@@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_istringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??0?$basic_istringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@1@H@Z
??0?$basic_istringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@ABV01@@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@PBDH@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@XZ
??0?$basic_ofstream@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
??0?$basic_ofstream@GU?$char_traits@G@std@@@std@@QAE@PBDH@Z
??0?$basic_ofstream@GU?$char_traits@G@std@@@std@@QAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@ABV01@@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N1@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N1@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??0?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@1@H@Z
??0?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@W4_Uninitialized@1@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE@ABV01@@Z
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@W4_Uninitialized@1@@Z
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@XZ
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@IIABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@IDABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD0ABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDIABV?$allocator@D@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@IIABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@IGABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG0ABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGIABV?$allocator@G@1@@Z
??0?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??0?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??0?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@1@H@Z
??0?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??0?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@1@H@Z
??0?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??0?$codecvt@DDH@std@@QAE@ABV_Locinfo@1@I@Z
??0?$codecvt@DDH@std@@QAE@I@Z
??0?$codecvt@GDH@std@@QAE@ABV_Locinfo@1@I@Z
??0?$codecvt@GDH@std@@QAE@I@Z
??0?$collate@D@std@@QAE@ABV_Locinfo@1@I@Z
??0?$collate@D@std@@QAE@I@Z
??0?$collate@G@std@@QAE@ABV_Locinfo@1@I@Z
??0?$collate@G@std@@QAE@I@Z
??0?$complex@M@std@@QAE@ABM0@Z
??0?$complex@M@std@@QAE@ABV?$complex@N@1@@Z
??0?$complex@M@std@@QAE@ABV?$complex@O@1@@Z
??0?$complex@N@std@@QAE@ABN0@Z
??0?$complex@N@std@@QAE@ABV?$complex@M@1@@Z
??0?$complex@N@std@@QAE@ABV?$complex@O@1@@Z
??0?$complex@O@std@@QAE@ABO0@Z
??0?$complex@O@std@@QAE@ABV?$complex@M@1@@Z
??0?$complex@O@std@@QAE@ABV?$complex@N@1@@Z
??0?$ctype@D@std@@QAE@ABV_Locinfo@1@I@Z
??0?$ctype@D@std@@QAE@PBF_NI@Z
??0?$ctype@G@std@@QAE@ABV_Locinfo@1@I@Z
??0?$ctype@G@std@@QAE@I@Z
??0?$messages@D@std@@QAE@ABV_Locinfo@1@I@Z
??0?$messages@D@std@@QAE@I@Z
??0?$messages@G@std@@QAE@ABV_Locinfo@1@I@Z
??0?$messages@G@std@@QAE@I@Z
??0?$money_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$money_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$money_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$money_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$money_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$money_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$moneypunct@D$00@std@@QAE@ABV_Locinfo@1@I@Z
??0?$moneypunct@D$00@std@@QAE@I@Z
??0?$moneypunct@D$0A@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$moneypunct@D$0A@@std@@QAE@I@Z
??0?$moneypunct@G$00@std@@QAE@ABV_Locinfo@1@I@Z
??0?$moneypunct@G$00@std@@QAE@I@Z
??0?$moneypunct@G$0A@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$moneypunct@G$0A@@std@@QAE@I@Z
??0?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$numpunct@D@std@@QAE@ABV_Locinfo@1@I@Z
??0?$numpunct@D@std@@QAE@I@Z
??0?$numpunct@G@std@@QAE@ABV_Locinfo@1@I@Z
??0?$numpunct@G@std@@QAE@I@Z
??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0Init@ios_base@std@@QAE@XZ
??0_Locinfo@std@@QAE@ABV01@@Z
??0_Locinfo@std@@QAE@HPBD@Z
??0_Locinfo@std@@QAE@PBD@Z
??0_Lockit@std@@QAE@XZ
??0_Timevec@std@@QAE@ABV01@@Z
??0_Timevec@std@@QAE@PAX@Z
??0_Winit@std@@QAE@XZ
??0__non_rtti_object@std@@QAE@ABV01@@Z
??0__non_rtti_object@std@@QAE@PBD@Z
??0bad_alloc@std@@QAE@ABV01@@Z
??0bad_alloc@std@@QAE@PBD@Z
??0bad_cast@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@PBD@Z
??0bad_exception@std@@QAE@ABV01@@Z
??0bad_exception@std@@QAE@PBD@Z
??0bad_typeid@std@@QAE@ABV01@@Z
??0bad_typeid@std@@QAE@PBD@Z
??0codecvt_base@std@@QAE@I@Z
??0ctype_base@std@@QAE@I@Z
??0domain_error@std@@QAE@ABV01@@Z
??0domain_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0facet@locale@std@@IAE@I@Z
??0ios_base@std@@IAE@XZ
??0ios_base@std@@QAE@ABV01@@Z
??0length_error@std@@QAE@ABV01@@Z
??0length_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0locale@std@@AAE@PAV_Locimp@01@@Z
??0locale@std@@QAE@ABV01@0H@Z
??0locale@std@@QAE@ABV01@@Z
??0locale@std@@QAE@ABV01@PBDH@Z
??0locale@std@@QAE@PBDH@Z
??0locale@std@@QAE@W4_Uninitialized@1@@Z
??0locale@std@@QAE@XZ
??0logic_error@std@@QAE@ABV01@@Z
??0logic_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0messages_base@std@@QAE@I@Z
??0money_base@std@@QAE@I@Z
??0ostrstream@std@@QAE@PADHH@Z
??0out_of_range@std@@QAE@ABV01@@Z
??0out_of_range@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0overflow_error@std@@QAE@ABV01@@Z
??0overflow_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0range_error@std@@QAE@ABV01@@Z
??0range_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0runtime_error@std@@QAE@ABV01@@Z
??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0strstream@std@@QAE@PADHH@Z
??0time_base@std@@QAE@I@Z
??0underflow_error@std@@QAE@ABV01@@Z
??0underflow_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??1?$_Mpunct@D@std@@UAE@XZ
??1?$_Mpunct@G@std@@UAE@XZ
??1?$basic_filebuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_filebuf@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_fstream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_fstream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_ifstream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ifstream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_istream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??1?$basic_istringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@UAE@XZ
??1?$basic_ofstream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ofstream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??1?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@UAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??1?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??1?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@UAE@XZ
??1?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??1?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@UAE@XZ
??1?$codecvt@DDH@std@@UAE@XZ
??1?$codecvt@GDH@std@@UAE@XZ
??1?$collate@D@std@@UAE@XZ
??1?$collate@G@std@@UAE@XZ
??1?$ctype@D@std@@UAE@XZ
??1?$ctype@G@std@@UAE@XZ
??1?$messages@D@std@@UAE@XZ
??1?$messages@G@std@@UAE@XZ
??1?$money_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@UAE@XZ
??1?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@UAE@XZ
??1?$money_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@UAE@XZ
??1?$money_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@UAE@XZ
??1?$moneypunct@D$00@std@@UAE@XZ
??1?$moneypunct@D$0A@@std@@UAE@XZ
??1?$moneypunct@G$00@std@@UAE@XZ
??1?$moneypunct@G$0A@@std@@UAE@XZ
??1?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@UAE@XZ
??1?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@UAE@XZ
??1?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@UAE@XZ
??1?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@UAE@XZ
??1?$numpunct@D@std@@UAE@XZ
??1?$numpunct@G@std@@UAE@XZ
??1?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@UAE@XZ
??1?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@UAE@XZ
??1?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@UAE@XZ
??1?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@UAE@XZ
??1Init@ios_base@std@@QAE@XZ
??1_Locinfo@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
??1_Timevec@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1__non_rtti_object@std@@UAE@XZ
??1bad_alloc@std@@UAE@XZ
??1bad_cast@std@@UAE@XZ
??1bad_exception@std@@UAE@XZ
??1bad_typeid@std@@UAE@XZ
??1codecvt_base@std@@UAE@XZ
??1ctype_base@std@@UAE@XZ
??1domain_error@std@@UAE@XZ
??1facet@locale@std@@UAE@XZ
??1ios_base@std@@UAE@XZ
??1istrstream@std@@UAE@XZ
??1length_error@std@@UAE@XZ
??1locale@std@@QAE@XZ
??1logic_error@std@@UAE@XZ
??1messages_base@std@@UAE@XZ
??1money_base@std@@UAE@XZ
??1ostrstream@std@@UAE@XZ
??1out_of_range@std@@UAE@XZ
??1overflow_error@std@@UAE@XZ
??1range_error@std@@UAE@XZ
??1runtime_error@std@@UAE@XZ
??1strstream@std@@UAE@XZ
??1strstreambuf@std@@UAE@XZ
??1time_base@std@@UAE@XZ
??1underflow_error@std@@UAE@XZ
??4?$_Complex_base@M@std@@QAEAAV01@ABV01@@Z
??4?$_Complex_base@N@std@@QAEAAV01@ABV01@@Z
??4?$_Complex_base@O@std@@QAEAAV01@ABV01@@Z
??4?$_Ctr@M@std@@QAEAAV01@ABV01@@Z
??4?$_Ctr@N@std@@QAEAAV01@ABV01@@Z
??4?$_Ctr@O@std@@QAEAAV01@ABV01@@Z
??4?$allocator@X@std@@QAEAAV01@ABV01@@Z
??4?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_filebuf@GU?$char_traits@G@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_fstream@DU?$char_traits@D@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_fstream@GU?$char_traits@G@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_ifstream@GU?$char_traits@G@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_ios@DU?$char_traits@D@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_ios@GU?$char_traits@G@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_iostream@DU?$char_traits@D@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_iostream@GU?$char_traits@G@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_istringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_ofstream@GU?$char_traits@G@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@G@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??4?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??4?$char_traits@D@std@@QAEAAU01@ABU01@@Z
??4?$char_traits@G@std@@QAEAAU01@ABU01@@Z
??4?$complex@M@std@@QAEAAV01@ABM@Z
??4?$complex@M@std@@QAEAAV01@ABV01@@Z
??4?$complex@N@std@@QAEAAV01@ABN@Z
??4?$complex@N@std@@QAEAAV01@ABV01@@Z
??4?$complex@O@std@@QAEAAV01@ABO@Z
??4?$complex@O@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@C@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@D@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@E@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@F@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@G@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@H@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@I@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@J@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@K@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@M@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@N@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@O@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@_N@std@@QAEAAV01@ABV01@@Z
??4Init@ios_base@std@@QAEAAV012@ABV012@@Z
??4_Locinfo@std@@QAEAAV01@ABV01@@Z
??4_Lockit@std@@QAEAAV01@ABV01@@Z
??4_Num_base@std@@QAEAAU01@ABU01@@Z
??4_Num_float_base@std@@QAEAAU01@ABU01@@Z
??4_Num_int_base@std@@QAEAAU01@ABU01@@Z
??4_Timevec@std@@QAEAAV01@ABV01@@Z
??4_Winit@std@@QAEAAV01@ABV01@@Z
??4__non_rtti_object@std@@QAEAAV01@ABV01@@Z
??4bad_alloc@std@@QAEAAV01@ABV01@@Z
??4bad_cast@std@@QAEAAV01@ABV01@@Z
??4bad_exception@std@@QAEAAV01@ABV01@@Z
??4bad_typeid@std@@QAEAAV01@ABV01@@Z
??4domain_error@std@@QAEAAV01@ABV01@@Z
??4id@locale@std@@QAEAAV012@ABV012@@Z
??4ios_base@std@@QAEAAV01@ABV01@@Z
??4length_error@std@@QAEAAV01@ABV01@@Z
??4locale@std@@QAEAAV01@ABV01@@Z
??4logic_error@std@@QAEAAV01@ABV01@@Z
??4out_of_range@std@@QAEAAV01@ABV01@@Z
??4overflow_error@std@@QAEAAV01@ABV01@@Z
??4range_error@std@@QAEAAV01@ABV01@@Z
??4runtime_error@std@@QAEAAV01@ABV01@@Z
??4underflow_error@std@@QAEAAV01@ABV01@@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAF@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAG@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAJ@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAK@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAM@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAO@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAPAX@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_N@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@DU?$char_traits@D@std@@@1@AAV21@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAF@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAG@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAI@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAJ@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAK@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAM@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAN@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAO@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAPAX@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AA_N@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@GU?$char_traits@G@std@@@1@AAV21@@Z@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAC@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAD@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAE@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$complex@M@0@@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$complex@N@0@@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$complex@O@0@@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@PAC@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@PAD@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@PAE@Z
??5std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAG@Z
??5std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??5std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAV?$complex@M@0@@Z
??5std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAV?$complex@N@0@@Z
??5std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAV?$complex@O@0@@Z
??5std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@PAF@Z
??5std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@PAG@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@F@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@O@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@DU?$char_traits@D@std@@@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@F@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@O@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@GU?$char_traits@G@std@@@1@AAV21@@Z@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@PBX@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@_N@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$complex@M@0@@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$complex@N@0@@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$complex@O@0@@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@C@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@D@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@E@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBC@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBE@Z
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@ABV?$complex@M@0@@Z
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@ABV?$complex@N@0@@Z
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@ABV?$complex@O@0@@Z
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@G@Z
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@PBF@Z
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@PBG@Z
??7ios_base@std@@QBE_NXZ
??8locale@std@@QBE_NABV01@@Z
??8std@@YA_NABMABV?$complex@M@0@@Z
??8std@@YA_NABNABV?$complex@N@0@@Z
??8std@@YA_NABOABV?$complex@O@0@@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
??8std@@YA_NABV?$complex@M@0@0@Z
??8std@@YA_NABV?$complex@M@0@ABM@Z
??8std@@YA_NABV?$complex@N@0@0@Z
??8std@@YA_NABV?$complex@N@0@ABN@Z
??8std@@YA_NABV?$complex@O@0@0@Z
??8std@@YA_NABV?$complex@O@0@ABO@Z
??8std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??8std@@YA_NPBGABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??9locale@std@@QBE_NABV01@@Z
??9std@@YA_NABMABV?$complex@M@0@@Z
??9std@@YA_NABNABV?$complex@N@0@@Z
??9std@@YA_NABOABV?$complex@O@0@@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??9std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??9std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
??9std@@YA_NABV?$complex@M@0@0@Z
??9std@@YA_NABV?$complex@M@0@ABM@Z

Sections

.text
Size: 168KB - Virtual size: 166KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 192KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Nero/Redist/WMFADist.exe
.exe windows:5 windows x86 arch:x86

d287b46f6436ae965f0f1af9da8d89c9

Code Sign

03:c7:8f:37:db:92:28:df:3c:bb:1a:ad:82:fa:67:10
Certificate

Issuer

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

Not Before

09/04/1996, 00:00

Not After

07/01/2004, 23:59

Subject

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

fc:a4:a5:9f:2c:0f:c0:b9:03:98:33:1b:7b:54:54:1d
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

16/11/1999, 00:00

Not After

06/01/2004, 23:59

Subject

CN=VeriSign Time Stamping Service CA SW1,OU=VeriSign Trust Network+OU=www.verisign.com/repository/RPA Incorp. by Ref.\,LIAB.LTD(c)98,O=VeriSign\, Inc.

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

75:f2:8e:f8:a8:fb:ea:6d:11:52:97:14:95:4b:65:5c
Certificate

Issuer

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

Not Before

04/04/2000, 00:00

Not After

17/04/2001, 23:59

Subject

CN=Microsoft Corporation,OU=VeriSign Commercial Software Publishers CA+OU=www.verisign.com/repository/RPA Incorp. by Ref.\,LIAB.LTD(c)98+OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Microsoft Corporation,O=VeriSign\, Inc.,L=Internet+L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageKeyEncipherment

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
AllocateAndInitializeSid
EqualSid
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
FreeSid
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegQueryInfoKeyA

kernel32

LocalAlloc
GetLastError
GetCurrentProcess
LoadLibraryA
CloseHandle
LocalFree
GetFileAttributesA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrlenA
lstrcmpiA
lstrcatA
GetShortPathNameA
GetSystemDirectoryA
RemoveDirectoryA
lstrcpyA
FindNextFileA
DeleteFileA
SetFileAttributesA
lstrcmpA
FindFirstFileA
_lclose
_llseek
_lopen
WritePrivateProfileStringA
GetWindowsDirectoryA
GetModuleFileNameA
FindClose
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
IsDBCSLeadByte
ExitProcess
GetProcAddress
GetStartupInfoA
GetCommandLineA
LoadResource
FindResourceA
CreateMutexA
SetEvent
CreateEventA
SetCurrentDirectoryA
CreateThread
ResetEvent
TerminateThread
FreeLibrary
FormatMessageA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetTempPathA
FreeResource
LockResource
SizeofResource
CreateFileA
ReadFile
WriteFile
SetFilePointer
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetTempFileNameA
GetSystemInfo
GetDriveTypeA
lstrcpynA
GetVolumeInformationA
GetCurrentDirectoryA
LoadLibraryExA
GetModuleHandleA
CreateDirectoryA
ExpandEnvironmentStringsA
GetVersionExA
GetDiskFreeSpaceA
MulDiv

gdi32

GetDeviceCaps

user32

wsprintfA
ExitWindowsEx
CharNextA
CharUpperA
EndDialog
GetDesktopWindow
CharPrevA
GetWindowLongA
CallWindowProcA
GetDlgItem
SetForegroundWindow
SetWindowTextA
SendDlgItemMessageA
SetWindowLongA
EnableWindow
SendMessageA
LoadStringA
MsgWaitForMultipleObjects
PeekMessageA
MessageBoxA
SetWindowPos
ReleaseDC
GetDC
GetWindowRect
ShowWindow
DialogBoxIndirectParamA
SetDlgItemTextA
MessageBeep
GetDlgItemTextA
DispatchMessageA

comctl32

ord17

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Nero/Redist/gdiplus.DLL
.dll windows:5 windows x86 arch:x86

2a1ab6b72adad6b03d0746b0a5fa55d6

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04/12/2003, 00:00

Not After

03/12/2008, 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:9d:aa:11:d3:30:a8:95:60:ac:fa
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

01/07/1999, 07:00

Not After

15/10/2005, 07:00

Subject

CN=Microsoft Windows Verification Intermediate PCA,OU=Copyright (c) 1999 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=WA,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:06:51:3f:00:00:00:00:00:35
Certificate

Issuer

CN=Microsoft Windows Verification Intermediate PCA,OU=Copyright (c) 1999 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=WA,C=US

Not Before

30/06/2003, 23:22

Not After

30/08/2004, 23:32

Subject

CN=Microsoft Windows XP Publisher,OU=Copyright (c) 2003 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

4f:11:fb:cd:c0:44:ea:be:51:45:c5:b8:65:ea:1c:b3:ee:fd:20:31
Signer

Actual PE Digest

4f:11:fb:cd:c0:44:ea:be:51:45:c5:b8:65:ea:1c:b3:ee:fd:20:31

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SearchPathA
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
InterlockedExchange
GetCurrentThreadId
InitializeCriticalSection
DeleteCriticalSection
DisableThreadLibraryCalls
RaiseException
Sleep
CloseHandle
WriteFile
CreateFileA
WaitForSingleObject
SetEvent
lstrcmpiA
CreateThread
CreateEventA
WideCharToMultiByte
MultiByteToWideChar
GetTickCount
GetSystemDefaultLCID
GetProcAddress
GetModuleHandleW
GetACP
GetVersionExA
LoadLibraryA
VirtualQuery
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
ExitProcess
GetCommandLineA
GetSystemInfo
HeapReAlloc
HeapFree
VirtualAlloc
IsValidLocale
ConvertDefaultLocale
GetLocaleInfoW
GetModuleFileNameW
GetModuleFileNameA
FindResourceA
LoadResource
LockResource
GetProfileIntA
GetProfileStringA
lstrcmpiW
IsDBCSLeadByteEx
LocalReAlloc
MulDiv
SetLastError
LocalAlloc
LocalFree
GetFileTime
SearchPathW
InterlockedIncrement
GetOEMCP
CreateSemaphoreA
lstrcpyW
lstrcatW
LoadLibraryW
lstrcpyA
lstrcatA
GetSystemDirectoryA
CreateFileMappingW
ReleaseSemaphore
GetProfileSectionA
CreateFileW
SetEndOfFile
SetFilePointer
ReadFile
UnlockFile
GetFileInformationByHandle
LockFile
FlushFileBuffers
GetLastError
VirtualFree
GlobalAlloc
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
GlobalLock
GlobalSize
GlobalUnlock
GlobalFree
HeapCreate
GetModuleHandleA
GetSystemDirectoryW
GetWindowsDirectoryA
FreeLibrary
HeapDestroy

user32

ReleaseDC
GetDC
LoadBitmapW
LoadBitmapA
wsprintfW
SystemParametersInfoA
wsprintfA
GetSysColor
UnregisterClassA
DestroyWindow
GetSystemMetrics
DefWindowProcA
CreateWindowExA
RegisterWindowMessageA
RegisterClassA
DispatchMessageA
TranslateMessage
MsgWaitForMultipleObjects
PeekMessageA
GetClientRect
GetDesktopWindow
GetWindowRect
WindowFromDC
CreateIconIndirect
GetIconInfo
ClientToScreen
wvsprintfA
GetDCEx
GetWindowLongA
GetClassLongA

gdi32

GetNearestPaletteIndex
GetDIBColorTable
FillRgn
SetMiterLimit
CreateSolidBrush
StrokePath
GetGraphicsMode
SetPolyFillMode
FillPath
StrokeAndFillPath
GetWindowExtEx
ExtTextOutA
GetTextCharsetInfo
TranslateCharsetInfo
PolylineTo
Polyline
LineTo
GetCurrentPositionEx
ArcTo
SetArcDirection
SelectClipPath
GetPath
CloseFigure
AbortPath
FlattenPath
WidenPath
BeginPath
Ellipse
AngleArc
PolyBezierTo
PolyBezier
RoundRect
PolyDraw
Pie
Chord
Arc
EndPath
OffsetClipRgn
GetRgnBox
CombineRgn
SetPaletteEntries
ResizePalette
ExcludeClipRect
MoveToEx
PlayEnhMetaFile
GetWinMetaFileBits
PlgBlt
BitBlt
OffsetViewportOrgEx
StretchBlt
ScaleViewportExtEx
ScaleWindowExtEx
CombineTransform
SetMapperFlags
CreatePen
CreateDIBitmap
CreatePatternBrush
ExtSelectClipRgn
GetBkMode
GetTextAlign
ModifyWorldTransform
ExtCreateRegion
CreateCompatibleBitmap
GetNearestColor
SetStretchBltMode
StretchDIBits
SetTextAlign
SetTextJustification
PolyPolygon
PlayMetaFileRecord
ExtCreatePen
GetWorldTransform
GetROP2
SetROP2
Rectangle
Polygon
IntersectClipRect
SetBrushOrgEx
GetClipRgn
SelectClipRgn
GetBkColor
GetTextColor
CreatePenIndirect
GetObjectW
DPtoLP
CreateDIBPatternBrushPt
ExtTextOutW
SetBitmapBits
CreateEnhMetaFileW
GdiComment
GetMetaFileW
GetMetaFileA
SaveDC
SetWindowOrgEx
SetViewportOrgEx
SetGraphicsMode
SetWorldTransform
GetEnhMetaFileW
GetEnhMetaFileA
GetEnhMetaFileBits
CopyEnhMetaFileA
CopyMetaFileA
DeleteMetaFile
GetEnhMetaFileHeader
SetMetaFileBitsEx
SetEnhMetaFileBits
CreateEnhMetaFileA
SetMapMode
SetViewportExtEx
SetWindowExtEx
PlayMetaFile
CloseEnhMetaFile
DeleteEnhMetaFile
SetMetaRgn
GetMetaFileBitsEx
EnumMetaFile
EnumEnhMetaFile
PlayEnhMetaFileRecord
RestoreDC
GetStockObject
CreateBitmap
SetTextColor
SetBkColor
SetBkMode
SetDIBits
CreateBrushIndirect
CreatePalette
GetSystemPaletteEntries
GetSystemPaletteUse
GetDeviceCaps
ExtEscape
GetObjectType
GetPixel
SetDIBColorTable
DeleteObject
SelectPalette
GetTextFaceA
GetTextMetricsA
GetTextFaceW
GetTextMetricsW
EnumFontFamiliesExA
EnumFontFamiliesExW
SelectObject
CreateFontIndirectW
CreateFontIndirectA
GetRegionData
DeleteDC
CreateDCA
CreateICA
CreateRectRgn
GetRandomRgn
LPtoDP
PolyPolyline
GetViewportExtEx
GetWindowOrgEx
GetViewportOrgEx
GetMapMode
SetICMMode
Escape
GetDCOrgEx
GetObjectA
GetCurrentObject
GetDIBits
CreateCompatibleDC
CreateDIBSection
RealizePalette
GetPaletteEntries
GdiFlush
PatBlt

ole32

CoTaskMemAlloc
CoTaskMemFree
CreateStreamOnHGlobal

advapi32

RegSetValueExA
RegCloseKey
RegEnumValueW
RegQueryInfoKeyA
RegOpenKeyExA
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExA
RegEnumKeyExA
RegEnumKeyExW
RegCreateKeyExA
RegQueryValueExW
RegSetValueExW
RegEnumValueA
RegDeleteKeyW
RegDeleteKeyA
RegCreateKeyExW

Exports

Exports

GdipAddPathArc
GdipAddPathArcI
GdipAddPathBezier
GdipAddPathBezierI
GdipAddPathBeziers
GdipAddPathBeziersI
GdipAddPathClosedCurve
GdipAddPathClosedCurve2
GdipAddPathClosedCurve2I
GdipAddPathClosedCurveI
GdipAddPathCurve
GdipAddPathCurve2
GdipAddPathCurve2I
GdipAddPathCurve3
GdipAddPathCurve3I
GdipAddPathCurveI
GdipAddPathEllipse
GdipAddPathEllipseI
GdipAddPathLine
GdipAddPathLine2
GdipAddPathLine2I
GdipAddPathLineI
GdipAddPathPath
GdipAddPathPie
GdipAddPathPieI
GdipAddPathPolygon
GdipAddPathPolygonI
GdipAddPathRectangle
GdipAddPathRectangleI
GdipAddPathRectangles
GdipAddPathRectanglesI
GdipAddPathString
GdipAddPathStringI
GdipAlloc
GdipBeginContainer
GdipBeginContainer2
GdipBeginContainerI
GdipBitmapGetPixel
GdipBitmapLockBits
GdipBitmapSetPixel
GdipBitmapSetResolution
GdipBitmapUnlockBits
GdipClearPathMarkers
GdipCloneBitmapArea
GdipCloneBitmapAreaI
GdipCloneBrush
GdipCloneCustomLineCap
GdipCloneFont
GdipCloneFontFamily
GdipCloneImage
GdipCloneImageAttributes
GdipCloneMatrix
GdipClonePath
GdipClonePen
GdipCloneRegion
GdipCloneStringFormat
GdipClosePathFigure
GdipClosePathFigures
GdipCombineRegionPath
GdipCombineRegionRect
GdipCombineRegionRectI
GdipCombineRegionRegion
GdipComment
GdipCreateAdjustableArrowCap
GdipCreateBitmapFromDirectDrawSurface
GdipCreateBitmapFromFile
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromGdiDib
GdipCreateBitmapFromGraphics
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromHICON
GdipCreateBitmapFromResource
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipCreateCachedBitmap
GdipCreateCustomLineCap
GdipCreateFont
GdipCreateFontFamilyFromName
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipCreateFontFromLogfontW
GdipCreateFromHDC
GdipCreateFromHDC2
GdipCreateFromHWND
GdipCreateFromHWNDICM
GdipCreateHBITMAPFromBitmap
GdipCreateHICONFromBitmap
GdipCreateHalftonePalette
GdipCreateHatchBrush
GdipCreateImageAttributes
GdipCreateLineBrush
GdipCreateLineBrushFromRect
GdipCreateLineBrushFromRectI
GdipCreateLineBrushFromRectWithAngle
GdipCreateLineBrushFromRectWithAngleI
GdipCreateLineBrushI
GdipCreateMatrix
GdipCreateMatrix2
GdipCreateMatrix3
GdipCreateMatrix3I
GdipCreateMetafileFromEmf
GdipCreateMetafileFromFile
GdipCreateMetafileFromStream
GdipCreateMetafileFromWmf
GdipCreateMetafileFromWmfFile
GdipCreatePath
GdipCreatePath2
GdipCreatePath2I
GdipCreatePathGradient
GdipCreatePathGradientFromPath
GdipCreatePathGradientI
GdipCreatePathIter
GdipCreatePen1
GdipCreatePen2
GdipCreateRegion
GdipCreateRegionHrgn
GdipCreateRegionPath
GdipCreateRegionRect
GdipCreateRegionRectI
GdipCreateRegionRgnData
GdipCreateSolidFill
GdipCreateStreamOnFile
GdipCreateStringFormat
GdipCreateTexture
GdipCreateTexture2
GdipCreateTexture2I
GdipCreateTextureIA
GdipCreateTextureIAI
GdipDeleteBrush
GdipDeleteCachedBitmap
GdipDeleteCustomLineCap
GdipDeleteFont
GdipDeleteFontFamily
GdipDeleteGraphics
GdipDeleteMatrix
GdipDeletePath
GdipDeletePathIter
GdipDeletePen
GdipDeletePrivateFontCollection
GdipDeleteRegion
GdipDeleteStringFormat
GdipDisposeImage
GdipDisposeImageAttributes
GdipDrawArc
GdipDrawArcI
GdipDrawBezier
GdipDrawBezierI
GdipDrawBeziers
GdipDrawBeziersI
GdipDrawCachedBitmap
GdipDrawClosedCurve
GdipDrawClosedCurve2
GdipDrawClosedCurve2I
GdipDrawClosedCurveI
GdipDrawCurve
GdipDrawCurve2
GdipDrawCurve2I
GdipDrawCurve3
GdipDrawCurve3I
GdipDrawCurveI
GdipDrawDriverString
GdipDrawEllipse
GdipDrawEllipseI
GdipDrawImage
GdipDrawImageI
GdipDrawImagePointRect
GdipDrawImagePointRectI
GdipDrawImagePoints
GdipDrawImagePointsI
GdipDrawImagePointsRect
GdipDrawImagePointsRectI
GdipDrawImageRect
GdipDrawImageRectI
GdipDrawImageRectRect
GdipDrawImageRectRectI
GdipDrawLine
GdipDrawLineI
GdipDrawLines
GdipDrawLinesI
GdipDrawPath
GdipDrawPie
GdipDrawPieI
GdipDrawPolygon
GdipDrawPolygonI
GdipDrawRectangle
GdipDrawRectangleI
GdipDrawRectangles
GdipDrawRectanglesI
GdipDrawString
GdipEmfToWmfBits
GdipEndContainer
GdipEnumerateMetafileDestPoint
GdipEnumerateMetafileDestPointI
GdipEnumerateMetafileDestPoints
GdipEnumerateMetafileDestPointsI
GdipEnumerateMetafileDestRect
GdipEnumerateMetafileDestRectI
GdipEnumerateMetafileSrcRectDestPoint
GdipEnumerateMetafileSrcRectDestPointI
GdipEnumerateMetafileSrcRectDestPoints
GdipEnumerateMetafileSrcRectDestPointsI
GdipEnumerateMetafileSrcRectDestRect
GdipEnumerateMetafileSrcRectDestRectI
GdipFillClosedCurve
GdipFillClosedCurve2
GdipFillClosedCurve2I
GdipFillClosedCurveI
GdipFillEllipse
GdipFillEllipseI
GdipFillPath
GdipFillPie
GdipFillPieI
GdipFillPolygon
GdipFillPolygon2
GdipFillPolygon2I
GdipFillPolygonI
GdipFillRectangle
GdipFillRectangleI
GdipFillRectangles
GdipFillRectanglesI
GdipFillRegion
GdipFlattenPath
GdipFlush
GdipFree
GdipGetAdjustableArrowCapFillState
GdipGetAdjustableArrowCapHeight
GdipGetAdjustableArrowCapMiddleInset
GdipGetAdjustableArrowCapWidth
GdipGetAllPropertyItems
GdipGetBrushType
GdipGetCellAscent
GdipGetCellDescent
GdipGetClip
GdipGetClipBounds
GdipGetClipBoundsI
GdipGetCompositingMode
GdipGetCompositingQuality
GdipGetCustomLineCapBaseCap
GdipGetCustomLineCapBaseInset
GdipGetCustomLineCapStrokeCaps
GdipGetCustomLineCapStrokeJoin
GdipGetCustomLineCapType
GdipGetCustomLineCapWidthScale
GdipGetDC
GdipGetDpiX
GdipGetDpiY
GdipGetEmHeight
GdipGetEncoderParameterList
GdipGetEncoderParameterListSize
GdipGetFamily
GdipGetFamilyName
GdipGetFontCollectionFamilyCount
GdipGetFontCollectionFamilyList
GdipGetFontHeight
GdipGetFontHeightGivenDPI
GdipGetFontSize
GdipGetFontStyle
GdipGetFontUnit
GdipGetGenericFontFamilyMonospace
GdipGetGenericFontFamilySansSerif
GdipGetGenericFontFamilySerif
GdipGetHatchBackgroundColor
GdipGetHatchForegroundColor
GdipGetHatchStyle
GdipGetHemfFromMetafile
GdipGetImageAttributesAdjustedPalette
GdipGetImageBounds
GdipGetImageDecoders
GdipGetImageDecodersSize
GdipGetImageDimension
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipGetImageFlags
GdipGetImageGraphicsContext
GdipGetImageHeight
GdipGetImageHorizontalResolution
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageRawFormat
GdipGetImageThumbnail
GdipGetImageType
GdipGetImageVerticalResolution
GdipGetImageWidth
GdipGetInterpolationMode
GdipGetLineBlend
GdipGetLineBlendCount
GdipGetLineColors
GdipGetLineGammaCorrection
GdipGetLinePresetBlend
GdipGetLinePresetBlendCount
GdipGetLineRect
GdipGetLineRectI
GdipGetLineSpacing
GdipGetLineTransform
GdipGetLineWrapMode
GdipGetLogFontA
GdipGetLogFontW
GdipGetMatrixElements
GdipGetMetafileDownLevelRasterizationLimit
GdipGetMetafileHeaderFromEmf
GdipGetMetafileHeaderFromFile
GdipGetMetafileHeaderFromMetafile
GdipGetMetafileHeaderFromStream
GdipGetMetafileHeaderFromWmf
GdipGetNearestColor
GdipGetPageScale
GdipGetPageUnit
GdipGetPathData
GdipGetPathFillMode
GdipGetPathGradientBlend
GdipGetPathGradientBlendCount
GdipGetPathGradientCenterColor
GdipGetPathGradientCenterPoint
GdipGetPathGradientCenterPointI
GdipGetPathGradientFocusScales
GdipGetPathGradientGammaCorrection
GdipGetPathGradientPath
GdipGetPathGradientPointCount
GdipGetPathGradientPresetBlend
GdipGetPathGradientPresetBlendCount
GdipGetPathGradientRect
GdipGetPathGradientRectI
GdipGetPathGradientSurroundColorCount
GdipGetPathGradientSurroundColorsWithCount
GdipGetPathGradientTransform
GdipGetPathGradientWrapMode
GdipGetPathLastPoint
GdipGetPathPoints
GdipGetPathPointsI
GdipGetPathTypes
GdipGetPathWorldBounds
GdipGetPathWorldBoundsI
GdipGetPenBrushFill
GdipGetPenColor
GdipGetPenCompoundArray
GdipGetPenCompoundCount
GdipGetPenCustomEndCap
GdipGetPenCustomStartCap
GdipGetPenDashArray
GdipGetPenDashCap197819
GdipGetPenDashCount
GdipGetPenDashOffset
GdipGetPenDashStyle
GdipGetPenEndCap
GdipGetPenFillType
GdipGetPenLineJoin
GdipGetPenMiterLimit
GdipGetPenMode
GdipGetPenStartCap
GdipGetPenTransform
GdipGetPenUnit
GdipGetPenWidth
GdipGetPixelOffsetMode
GdipGetPointCount
GdipGetPropertyCount
GdipGetPropertyIdList
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipGetPropertySize
GdipGetRegionBounds
GdipGetRegionBoundsI
GdipGetRegionData
GdipGetRegionDataSize
GdipGetRegionHRgn
GdipGetRegionScans
GdipGetRegionScansCount
GdipGetRegionScansI
GdipGetRenderingOrigin
GdipGetSmoothingMode
GdipGetSolidFillColor
GdipGetStringFormatAlign
GdipGetStringFormatDigitSubstitution
GdipGetStringFormatFlags
GdipGetStringFormatHotkeyPrefix
GdipGetStringFormatLineAlign
GdipGetStringFormatMeasurableCharacterRangeCount
GdipGetStringFormatTabStopCount
GdipGetStringFormatTabStops
GdipGetStringFormatTrimming
GdipGetTextContrast
GdipGetTextRenderingHint
GdipGetTextureImage
GdipGetTextureTransform
GdipGetTextureWrapMode
GdipGetVisibleClipBounds
GdipGetVisibleClipBoundsI
GdipGetWorldTransform
GdipGraphicsClear
GdipImageForceValidation
GdipImageGetFrameCount
GdipImageGetFrameDimensionsCount
GdipImageGetFrameDimensionsList
GdipImageRotateFlip
GdipImageSelectActiveFrame
GdipInvertMatrix
GdipIsClipEmpty
GdipIsEmptyRegion
GdipIsEqualRegion
GdipIsInfiniteRegion
GdipIsMatrixEqual
GdipIsMatrixIdentity
GdipIsMatrixInvertible
GdipIsOutlineVisiblePathPoint
GdipIsOutlineVisiblePathPointI
GdipIsStyleAvailable
GdipIsVisibleClipEmpty
GdipIsVisiblePathPoint
GdipIsVisiblePathPointI
GdipIsVisiblePoint
GdipIsVisiblePointI
GdipIsVisibleRect
GdipIsVisibleRectI
GdipIsVisibleRegionPoint
GdipIsVisibleRegionPointI
GdipIsVisibleRegionRect
GdipIsVisibleRegionRectI
GdipLoadImageFromFile
GdipLoadImageFromFileICM
GdipLoadImageFromStream
GdipLoadImageFromStreamICM
GdipMeasureCharacterRanges
GdipMeasureDriverString
GdipMeasureString
GdipMultiplyLineTransform
GdipMultiplyMatrix
GdipMultiplyPathGradientTransform
GdipMultiplyPenTransform
GdipMultiplyTextureTransform
GdipMultiplyWorldTransform
GdipNewInstalledFontCollection
GdipNewPrivateFontCollection
GdipPathIterCopyData
GdipPathIterEnumerate
GdipPathIterGetCount
GdipPathIterGetSubpathCount
GdipPathIterHasCurve
GdipPathIterIsValid
GdipPathIterNextMarker
GdipPathIterNextMarkerPath
GdipPathIterNextPathType
GdipPathIterNextSubpath
GdipPathIterNextSubpathPath
GdipPathIterRewind
GdipPlayMetafileRecord
GdipPrivateAddFontFile
GdipPrivateAddMemoryFont
GdipRecordMetafile
GdipRecordMetafileFileName
GdipRecordMetafileFileNameI
GdipRecordMetafileI
GdipRecordMetafileStream
GdipRecordMetafileStreamI
GdipReleaseDC
GdipRemovePropertyItem
GdipResetClip
GdipResetImageAttributes
GdipResetLineTransform
GdipResetPageTransform
GdipResetPath
GdipResetPathGradientTransform
GdipResetPenTransform
GdipResetTextureTransform
GdipResetWorldTransform
GdipRestoreGraphics
GdipReversePath
GdipRotateLineTransform
GdipRotateMatrix
GdipRotatePathGradientTransform
GdipRotatePenTransform
GdipRotateTextureTransform
GdipRotateWorldTransform
GdipSaveAdd
GdipSaveAddImage
GdipSaveGraphics
GdipSaveImageToFile
GdipSaveImageToStream
GdipScaleLineTransform
GdipScaleMatrix
GdipScalePathGradientTransform
GdipScalePenTransform
GdipScaleTextureTransform
GdipScaleWorldTransform
GdipSetAdjustableArrowCapFillState
GdipSetAdjustableArrowCapHeight
GdipSetAdjustableArrowCapMiddleInset
GdipSetAdjustableArrowCapWidth
GdipSetClipGraphics
GdipSetClipHrgn
GdipSetClipPath
GdipSetClipRect
GdipSetClipRectI
GdipSetClipRegion
GdipSetCompositingMode
GdipSetCompositingQuality
GdipSetCustomLineCapBaseCap
GdipSetCustomLineCapBaseInset
GdipSetCustomLineCapStrokeCaps
GdipSetCustomLineCapStrokeJoin

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Shared
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Nero/Redist/mfc42.DLL
.dll regsvr32 windows:4 windows x86 arch:x86

1557eebc6134cee9eb9d0583a2b40341

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_initterm
?terminate@@YAXXZ
_except_handler3
_adjust_fdiv
_onexit
__dllonexit
??1type_info@@UAE@XZ
_mbsnbicmp
wcsncpy
wcscpy
_ltoa
_ultoa
swprintf
_itoa
modf
ceil
fabs
floor
labs
_ftol
_splitpath
_fullpath
atol
__p___argc
_EH_prolog
__p___argv
_beginthreadex
_endthreadex
_strdup
_mbsdec
_expand
strtod
strtol
strtoul
abs
calloc
_msize
_purecall
strftime
_mbctype
localtime
gmtime
time
_ismbcspace
atoi
_ismbcdigit
_mbsnbcmp
sprintf
strlen
_mbclen
vsprintf
_mbsrchr
_mbscspn
_mbsspn
_mbsstr
_mbsrev
_mbslwr
_mbsupr
_mbspbrk
_mbschr
wcslen
_mbscmp
realloc
fclose
fflush
fseek
ftell
fgets
fputs
fwrite
fread
clearerr
_open_osfhandle
_fdopen
__doserrno
_get_osfhandle
memset
_mbsinc
abort
free
malloc
memcmp
memmove
memcpy
_CxxThrowException
mktime
__CxxFrameHandler

kernel32

FindClose
FindFirstFileA
lstrcpyA
MultiByteToWideChar
GetFullPathNameA
GetStringTypeExA
GetThreadLocale
lstrcmpiA
GetShortPathNameA
GetModuleFileNameA
GlobalSize
GlobalLock
GlobalAlloc
GlobalReAlloc
GlobalUnlock
GlobalFree
GetFileAttributesA
GetFileSize
GetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetFileTime
SetFileAttributesA
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
LocalFree
FormatMessageA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetCPInfo
GetOEMCP
LocalAlloc
InitializeCriticalSection
TlsAlloc
DeleteCriticalSection
GlobalHandle
TlsFree
LeaveCriticalSection
EnterCriticalSection
TlsSetValue
LocalReAlloc
TlsGetValue
WaitForSingleObject
CreateSemaphoreA
DeleteFileA
LoadLibraryA
ReleaseMutex
InterlockedExchange
WaitForMultipleObjects
GetModuleHandleA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetCurrentThreadId
lstrcatA
GetVersion
LockResource
LoadResource
FindResourceA
FreeLibrary
MulDiv
GetProfileIntA
VirtualProtect
FindResourceExA
SizeofResource
GetProcessVersion
GlobalFlags
GetTempFileNameA
GetDiskFreeSpaceA
LocalUnlock
LocalLock
GetTempPathA
SearchPathA
SetEvent
ResumeThread
SetThreadPriority
SuspendThread
GetCurrentThread
SetErrorMode
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetCurrentDirectoryA
FindNextFileA
GetTickCount
lstrlenW
CopyFileA
lstrcpyW
GetUserDefaultLCID
IsDBCSLeadByte
GetSystemDirectoryA
GetProcAddress
UnlockFile
MoveFileA
SetEndOfFile
FlushFileBuffers
LockFile
CloseHandle
ReadFile
SetFilePointer
WriteFile
DuplicateHandle
CreateFileA
GetCurrentProcess
lstrlenA
lstrcmpA
OutputDebugStringA
IsBadStringPtrA
IsBadReadPtr
IsBadWritePtr
GetLastError
IsBadStringPtrW
lstrcpynA
ReleaseSemaphore
SetLastError
CreateMutexA
GetVolumeInformationA
CreateEventA
RaiseException

gdi32

TextOutA
GetPolyFillMode
EnumFontFamiliesA
GetPixel
CreatePalette
GetPaletteEntries
RealizePalette
OffsetRgn
SetBrushOrgEx
CreateMetaFileA
CopyMetaFileA
LPtoDP
SetAbortProc
StartPage
EndPage
EndDoc
AbortDoc
DPtoLP
CombineRgn
SetRectRgn
GetMapMode
CreateDIBPatternBrushPt
CreateHatchBrush
ExtCreatePen
PlayMetaFile
EnumMetaFile
GetObjectType
PlayMetaFileRecord
ExtSelectClipRgn
SelectClipPath
CreateRectRgn
GetClipRgn
PolyBezierTo
SetColorAdjustment
PolylineTo
PolyDraw
SetArcDirection
ArcTo
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
LineTo
OffsetClipRgn
ExcludeClipRect
SelectClipRgn
OffsetWindowOrgEx
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
SelectPalette
StartDocA
EnumFontFamiliesExA
CreateDCA
CreateRectRgnIndirect
Rectangle
UnrealizeObject
PatBlt
CreateBitmap
CreatePatternBrush
CreatePen
CloseMetaFile
DeleteMetaFile
RectVisible
PtVisible
IntersectClipRect
GetViewportOrgEx
GetWindowOrgEx
SetWindowOrgEx
GetDeviceCaps
Escape
GetCurrentPositionEx
MoveToEx
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
GetTextFaceA
GetWindowExtEx
GetViewportExtEx
GetROP2
GetBkMode
GetTextAlign
GetNearestColor
GetBkColor
GetTextColor
SaveDC
GetStockObject
RestoreDC
GetCharWidthA
DeleteObject
CreateFontA
StretchDIBits
DeleteDC
CreateCompatibleBitmap
GetTextExtentPoint32A
ExtTextOutA
CreateSolidBrush
BitBlt
CreateFontIndirectA
CreateCompatibleDC
GetTextMetricsA
GetObjectA
SelectObject
SetTextColor
GetClipBox
SetBkColor
GetStretchBltMode

user32

SetCapture
CharToOemA
OemToCharA
UnhookWindowsHookEx
MsgWaitForMultipleObjects
GetWindowRect
GetWindowPlacement
IsIconic
SystemParametersInfoA
IntersectRect
OffsetRect
RegisterWindowMessageA
SetWindowPos
SetWindowLongA
GetWindowLongA
GetWindow
SendMessageA
SetForegroundWindow
GetForegroundWindow
GetLastActivePopup
GetMessagePos
GetMessageTime
RemovePropA
CallWindowProcA
GetPropA
SetPropA
GetClassLongA
CallNextHookEx
SetWindowsHookExA
CreateWindowExA
DestroyWindow
DefWindowProcA
GetKeyState
GetDlgCtrlID
GetWindowTextA
GetWindowTextLengthA
GetDlgItem
SetWindowPlacement
TrackPopupMenu
GetMenuItemID
GetSubMenu
GetMenuItemCount
GetMenu
RegisterClassA
GetClassInfoA
WinHelpA
GetCapture
GetParent
IsChild
MessageBoxA
GetTopWindow
SetScrollPos
GetScrollPos
SetScrollRange
GetScrollRange
ShowScrollBar
SetScrollInfo
GetScrollInfo
ScrollWindow
IsWindowVisible
EnableWindow
EndDeferWindowPos
CopyRect
BeginDeferWindowPos
GetClientRect
DeferWindowPos
EqualRect
ScreenToClient
AdjustWindowRectEx
SetFocus
IsWindow
SetActiveWindow
GetFocus
DispatchMessageA
PeekMessageA
GetSysColor
MapWindowPoints
SendDlgItemMessageA
UpdateWindow
PostMessageA
LoadIconA
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
ReleaseCapture
SetCursor
IsWindowEnabled
GetDesktopWindow
ShowWindow
GetActiveWindow
DestroyMenu
LoadMenuA
SetMenu
ReuseDDElParam
UnpackDDElParam
InvalidateRect
BringWindowToTop
LoadCursorA
GetSystemMetrics
WaitMessage
GetCursorPos
GetWindowThreadProcessId
WindowFromPoint
ClientToScreen
TranslateMessage
GetMessageA
DefFrameProcA
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcA
RedrawWindow
LoadBitmapA
InflateRect
PtInRect
ReleaseDC
InvertRect
GetWindowDC
FillRect
SetTimer
KillTimer
SetRect
GetDC
IsZoomed
SetParent
IsRectEmpty
AppendMenuA
DeleteMenu
GetSystemMenu
GetDCEx
LockWindowUpdate
GetTabbedTextExtentA
DrawTextA
GrayStringA
UnionRect
DrawFocusRect
CreateDialogIndirectParamA
EndDialog
GetNextDlgTabItem
wvsprintfA
GetAsyncKeyState
MapDialogRect
GetDialogBaseUnits
BeginPaint
EndPaint
TabbedTextOutA
GetSysColorBrush
GetClassNameA
SetWindowTextA
CheckDlgButton
CheckRadioButton
GetDlgItemInt
GetDlgItemTextA
SetDlgItemInt
SetDlgItemTextA
IsDlgButtonChecked
ScrollWindowEx
IsDialogMessageA
MoveWindow
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
GetMenuCheckMarkDimensions
DestroyIcon
SetCursorPos
DestroyCursor
FindWindowA
IsClipboardFormatAvailable
MessageBeep
RemoveMenu
ValidateRect
PostQuitMessage
UnregisterClassA
ShowOwnedPopups
InsertMenuA
GetMenuStringA
RegisterClipboardFormatA
CopyAcceleratorTableA
InSendMessage
PostThreadMessageA
CreateMenu
WindowFromDC
CountClipboardFormats
SetWindowContextHelpId
CharNextA
GetNextDlgGroupItem
ClipCursor
DrawEdge
EnumChildWindows
InvalidateRgn
FrameRect
LoadStringA
CharUpperA
wsprintfA

Exports

Exports

?classCCachedDataPathProperty@CCachedDataPathProperty@@2UCRuntimeClass@@B
?classCDataPathProperty@CDataPathProperty@@2UCRuntimeClass@@B
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 616KB - Virtual size: 613KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 212KB - Virtual size: 209KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Nero/Redist/msvcrt.dll
.dll windows:4 windows x86 arch:x86

799e28bcbf4e94ca50e4b0a2c283ab7d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

EnumSystemLocalesA
RtlUnwind
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
SetUnhandledExceptionFilter
GetModuleFileNameA
GetModuleFileNameW
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetCommandLineA
GetVersionExA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
ResumeThread
CreateThread
TlsSetValue
ExitThread
CloseHandle
GetCurrentThreadId
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCurrentThread
FindNextFileA
FindFirstFileA
FindClose
FindNextFileW
FindFirstFileW
HeapFree
HeapAlloc
GetModuleHandleA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
SetHandleCount
GetFileType
GetStartupInfoA
GetACP
GetOEMCP
GetCPInfo
GetProcAddress
LoadLibraryA
MultiByteToWideChar
GetCommandLineW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
UnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetConsoleCtrlHandler
SetEnvironmentVariableW
IsValidLocale
IsValidCodePage
GetLocaleInfoA
RaiseException
GetUserDefaultLCID
GetLocaleInfoW
GetTimeZoneInformation
FlushFileBuffers
SetFilePointer
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
Sleep
Beep
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDiskFreeSpaceA
GetLogicalDrives
SetErrorMode
GetFileAttributesA
GetCurrentDirectoryA
SetCurrentDirectoryA
SetFileAttributesA
GetFullPathNameA
GetDriveTypeA
GetCurrentProcessId
CreateDirectoryA
RemoveDirectoryA
DeleteFileA
GetFileAttributesW
GetCurrentDirectoryW
SetCurrentDirectoryW
SetFileAttributesW
GetFullPathNameW
CreateDirectoryW
DeleteFileW
MoveFileW
RemoveDirectoryW
GetDriveTypeW
MoveFileA
GetExitCodeProcess
WaitForSingleObject
FreeLibrary
CreateProcessA
CreateProcessW
HeapValidate
HeapCompact
HeapWalk
HeapSize
ReadConsoleA
SetConsoleMode
GetConsoleMode
SetEndOfFile
WriteConsoleA
DuplicateHandle
GetFileInformationByHandle
PeekNamedPipe
ReadConsoleInputA
PeekConsoleInputA
GetNumberOfConsoleInputEvents
LockFile
UnlockFile
CreateFileA
CreatePipe
ReadFile
CreateFileW
GetSystemTimeAsFileTime
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
GetLocalTime
SetLocalTime

Exports

Exports

$I10_OUTPUT
??0__non_rtti_object@@QAE@ABV0@@Z
??0__non_rtti_object@@QAE@PBD@Z
??0bad_cast@@QAE@ABQBD@Z
??0bad_cast@@QAE@ABV0@@Z
??0bad_typeid@@QAE@ABV0@@Z
??0bad_typeid@@QAE@PBD@Z
??0exception@@QAE@ABQBD@Z
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@XZ
??1__non_rtti_object@@UAE@XZ
??1bad_cast@@UAE@XZ
??1bad_typeid@@UAE@XZ
??1exception@@UAE@XZ
??1type_info@@UAE@XZ
??2@YAPAXI@Z
??3@YAXPAX@Z
??4__non_rtti_object@@QAEAAV0@ABV0@@Z
??4bad_cast@@QAEAAV0@ABV0@@Z
??4bad_typeid@@QAEAAV0@ABV0@@Z
??4exception@@QAEAAV0@ABV0@@Z
??8type_info@@QBEHABV0@@Z
??9type_info@@QBEHABV0@@Z
??_7__non_rtti_object@@6B@
??_7bad_cast@@6B@
??_7bad_typeid@@6B@
??_7exception@@6B@
??_E__non_rtti_object@@UAEPAXI@Z
??_Ebad_cast@@UAEPAXI@Z
??_Ebad_typeid@@UAEPAXI@Z
??_Eexception@@UAEPAXI@Z
??_G__non_rtti_object@@UAEPAXI@Z
??_Gbad_cast@@UAEPAXI@Z
??_Gbad_typeid@@UAEPAXI@Z
??_Gexception@@UAEPAXI@Z
??_U@YAPAXI@Z
??_V@YAXPAX@Z
?_query_new_handler@@YAP6AHI@ZXZ
?_query_new_mode@@YAHXZ
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
?_set_new_mode@@YAHH@Z
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
?before@type_info@@QBEHABV1@@Z
?name@type_info@@QBEPBDXZ
?raw_name@type_info@@QBEPBDXZ
?set_new_handler@@YAP6AXXZP6AXXZ@Z
?set_terminate@@YAP6AXXZP6AXXZ@Z
?set_unexpected@@YAP6AXXZP6AXXZ@Z
?terminate@@YAXXZ
?unexpected@@YAXXZ
?what@exception@@UBEPBDXZ
_CIacos
_CIasin
_CIatan
_CIatan2
_CIcos
_CIcosh
_CIexp
_CIfmod
_CIlog
_CIlog10
_CIpow
_CIsin
_CIsinh
_CIsqrt
_CItan
_CItanh
_CxxThrowException
_EH_prolog
_Getdays
_Getmonths
_Gettnames
_HUGE
_Strftime
_XcptFilter
__CxxFrameHandler
__CxxLongjmpUnwind
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__STRINGTOLD
__argc
__argv
__badioinfo
__crtCompareStringA
__crtGetLocaleInfoW
__crtLCMapStringA
__dllonexit
__doserrno
__fpecode
__getmainargs
__initenv
__isascii
__iscsym
__iscsymf
__lc_codepage
__lc_collate_cp
__lc_handle
__lconv_init
__mb_cur_max
__p___argc
__p___argv
__p___initenv
__p___mb_cur_max
__p___wargv
__p___winitenv
__p__acmdln
__p__amblksiz
__p__commode
__p__daylight
__p__dstbias
__p__environ
__p__fileinfo
__p__fmode
__p__iob
__p__mbcasemap
__p__mbctype
__p__osver
__p__pctype
__p__pgmptr
__p__pwctype
__p__timezone
__p__tzname
__p__wcmdln
__p__wenviron
__p__winmajor
__p__winminor
__p__winver
__p__wpgmptr
__pioinfo
__pxcptinfoptrs
__set_app_type
__setlc_active
__setusermatherr
__threadhandle
__threadid
__toascii
__unDName
__unDNameEx
__unguarded_readlc_active
__wargv
__wgetmainargs
__winitenv
_abnormal_termination
_access
_acmdln
_adj_fdiv_m16i
_adj_fdiv_m32
_adj_fdiv_m32i
_adj_fdiv_m64
_adj_fdiv_r
_adj_fdivr_m16i
_adj_fdivr_m32
_adj_fdivr_m32i
_adj_fdivr_m64
_adj_fpatan
_adj_fprem
_adj_fprem1
_adj_fptan
_adjust_fdiv
_aexit_rtn
_amsg_exit
_assert
_atodbl
_atoi64
_atoldbl
_beep
_beginthread
_beginthreadex
_c_exit
_cabs
_callnewh
_cexit
_cgets
_chdir
_chdrive
_chgsign
_chkesp
_chmod
_chsize
_clearfp
_close
_commit
_commode
_control87
_controlfp
_copysign
_cprintf
_cputs
_creat
_cscanf
_ctime64
_ctype
_cwait
_daylight
_dstbias
_dup
_dup2
_ecvt
_endthread
_endthreadex
_environ
_eof
_errno
_except_handler2
_except_handler3
_execl
_execle
_execlp
_execlpe
_execv
_execve
_execvp
_execvpe
_exit
_expand
_fcloseall
_fcvt
_fdopen
_fgetchar
_fgetwchar
_filbuf
_fileinfo
_filelength
_filelengthi64
_fileno
_findclose
_findfirst
_findfirst64
_findfirsti64
_findnext
_findnext64
_findnexti64
_finite
_flsbuf
_flushall
_fmode
_fpclass
_fpieee_flt
_fpreset
_fputchar
_fputwchar
_fsopen
_fstat
_fstat64
_fstati64
_ftime
_ftime64
_ftol
_fullpath
_futime
_futime64
_gcvt
_get_osfhandle
_get_sbh_threshold
_getch
_getche
_getcwd
_getdcwd
_getdiskfree
_getdllprocaddr
_getdrive
_getdrives
_getmaxstdio
_getmbcp
_getpid
_getsystime
_getw
_getws
_global_unwind2
_gmtime64
_heapadd
_heapchk
_heapmin
_heapset
_heapused
_heapwalk
_hypot
_i64toa
_i64tow
_initterm
_inp
_inpd
_inpw
_iob
_isatty
_isctype
_ismbbalnum
_ismbbalpha
_ismbbgraph
_ismbbkalnum
_ismbbkana
_ismbbkprint
_ismbbkpunct
_ismbblead
_ismbbprint
_ismbbpunct
_ismbbtrail
_ismbcalnum
_ismbcalpha
_ismbcdigit
_ismbcgraph
_ismbchira
_ismbckata
_ismbcl0
_ismbcl1
_ismbcl2
_ismbclegal
_ismbclower
_ismbcprint
_ismbcpunct
_ismbcspace
_ismbcsymbol
_ismbcupper
_ismbslead
_ismbstrail
_isnan
_itoa
_itow
_j0
_j1
_jn
_kbhit
_lfind
_loaddll
_local_unwind2
_localtime64
_lock
_locking
_logb
_longjmpex
_lrotl
_lrotr
_lsearch
_lseek
_lseeki64
_ltoa
_ltow
_makepath
_mbbtombc
_mbbtype
_mbcasemap
_mbccpy
_mbcjistojms
_mbcjmstojis
_mbclen
_mbctohira
_mbctokata
_mbctolower
_mbctombb
_mbctoupper
_mbctype
_mbsbtype
_mbscat
_mbschr
_mbscmp
_mbscoll
_mbscpy
_mbscspn
_mbsdec
_mbsdup
_mbsicmp
_mbsicoll
_mbsinc
_mbslen
_mbslwr
_mbsnbcat
_mbsnbcmp
_mbsnbcnt
_mbsnbcoll
_mbsnbcpy
_mbsnbicmp
_mbsnbicoll
_mbsnbset
_mbsncat
_mbsnccnt
_mbsncmp
_mbsncoll
_mbsncpy
_mbsnextc
_mbsnicmp
_mbsnicoll
_mbsninc
_mbsnset
_mbspbrk
_mbsrchr
_mbsrev
_mbsset
_mbsspn
_mbsspnp
_mbsstr
_mbstok
_mbstrlen
_mbsupr
_memccpy
_memicmp
_mkdir
_mktemp
_mktime64
_msize
_nextafter
_onexit
_open
_open_osfhandle
_osplatform
_osver
_outp
_outpd
_outpw
_pclose
_pctype
_pgmptr
_pipe
_popen
_purecall
_putch
_putenv
_putw
_putws
_pwctype
_read
_rmdir
_rmtmp
_rotl
_rotr
_safe_fdiv
_safe_fdivr
_safe_fprem
_safe_fprem1
_scalb
_searchenv
_seh_longjmp_unwind
_set_error_mode
_set_sbh_threshold
_seterrormode
_setjmp
_setjmp3
_setmaxstdio
_setmbcp
_setmode
_setsystime
_sleep
_snprintf
_snwprintf
_sopen
_spawnl
_spawnle
_spawnlp
_spawnlpe
_spawnv
_spawnve
_spawnvp
_spawnvpe
_splitpath
_stat
_stat64
_stati64
_statusfp
_strcmpi
_strdate
_strdup
_strerror
_stricmp
_stricoll
_strlwr
_strncoll
_strnicmp
_strnicoll
_strnset
_strrev
_strset
_strtime
_strupr
_swab
_sys_errlist
_sys_nerr
_tell
_telli64
_tempnam
_time64
_timezone
_tolower
_toupper
_tzname
_tzset
_ui64toa
_ui64tow
_ultoa
_ultow
_umask
_ungetch
_unlink
_unloaddll
_unlock
_utime
_utime64
_vsnprintf
_vsnwprintf
_waccess
_wasctime

Sections

.text
Size: 200KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Nero/Redist/shfolder.exe
.exe windows:5 windows x86 arch:x86

c56a25fa4336eeb10723b3537ba4876d

Code Sign

03:c7:8f:37:db:92:28:df:3c:bb:1a:ad:82:fa:67:10
Certificate

Issuer

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

Not Before

09/04/1996, 00:00

Not After

07/01/2004, 23:59

Subject

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

13:89:b4:d1:8a:e8:a7:c4:bd:35:c7:9b:8d:88:ca:1f:ca:53:56:91
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

12/05/1997, 07:00

Not After

31/12/1999, 07:00

Subject

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

bd:11:9a:da:43:ed:21:fb:46:58:84:89:ca:46:88:90:25:ee:14:60
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

12/05/1997, 07:00

Not After

31/12/1999, 07:00

Subject

OU=VeriSign Time Stamping Service+OU=VeriSign Trust Network+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign\, Inc.,L=Internet

55:0d:88:f5:3f:64:16:d7:0c:73:00:d8:45:92:16:34
Certificate

Issuer

OU=VeriSign Commercial Software Publishers CA,O=VeriSign\, Inc.,L=Internet

Not Before

19/03/1999, 00:00

Not After

16/04/2000, 23:59

Subject

CN=Microsoft Corporation,OU=VeriSign Commercial Software Publishers CA+OU=www.verisign.com/repository/RPA Incorp. by Ref.\,LIAB.LTD(c)98+OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Microsoft Corporation,O=VeriSign\, Inc.,L=Internet+L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageKeyEncipherment

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
EqualSid
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
FreeSid
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegQueryInfoKeyA

kernel32

lstrcatA
GetFileAttributesA
GetShortPathNameA
LocalAlloc
GetLastError
GetCurrentProcess
GetPrivateProfileIntA
lstrcmpiA
lstrcpyA
GetModuleFileNameA
FreeLibrary
GetPrivateProfileStringA
lstrlenA
GetSystemDirectoryA
RemoveDirectoryA
GetProcAddress
FindNextFileA
DeleteFileA
SetFileAttributesA
lstrcmpA
FindFirstFileA
_lclose
_llseek
_lopen
WritePrivateProfileStringA
GetWindowsDirectoryA
LoadLibraryA
FindClose
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
IsDBCSLeadByte
ExitProcess
CloseHandle
GetStartupInfoA
GetCommandLineA
LoadResource
FindResourceA
CreateMutexA
SetEvent
CreateEventA
SetCurrentDirectoryA
CreateThread
ResetEvent
TerminateThread
LocalFree
FormatMessageA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetTempPathA
FreeResource
LockResource
SizeofResource
CreateFileA
ReadFile
WriteFile
SetFilePointer
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetTempFileNameA
GetSystemInfo
GetDriveTypeA
lstrcpynA
GetVolumeInformationA
GetCurrentDirectoryA
LoadLibraryExA
GetModuleHandleA
CreateDirectoryA
ExpandEnvironmentStringsA
GetVersionExA
GetDiskFreeSpaceA
MulDiv

gdi32

GetDeviceCaps

user32

wsprintfA
ExitWindowsEx
CharNextA
CharUpperA
EndDialog
GetDesktopWindow
CharPrevA
GetWindowLongA
CallWindowProcA
GetDlgItem
SetForegroundWindow
SetWindowTextA
SendDlgItemMessageA
SetWindowLongA
EnableWindow
SendMessageA
LoadStringA
MsgWaitForMultipleObjects
PeekMessageA
MessageBoxA
SetWindowPos
ReleaseDC
GetDC
GetWindowRect
ShowWindow
DialogBoxIndirectParamA
SetDlgItemTextA
MessageBeep
GetDlgItemTextA
DispatchMessageA

comctl32

ord17

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

Sections

.text
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 73KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Nero/Redist/wmfdist.exe
.exe windows:5 windows x86 arch:x86

1494de9b53e05fc1f40cb92afbdd6ce4

Code Sign

4a:19:d2:38:8c:82:59:1c:a5:5d:73:5f:15:5d:dc:a3
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

12/05/1997, 00:00

Not After

07/01/2004, 23:59

Subject

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

08:7a:6d:5c:6f:62:93:4f:ba:c4:fd:43:e1:14:18:9d
Certificate

Issuer

OU=VeriSign\, Inc.+OU=VeriSign Time Stamping Service Root+OU=NO LIABILITY ACCEPTED\, (c)97 VeriSign\, Inc.,O=VeriSign Trust Network

Not Before

28/02/2001, 00:00

Not After

06/01/2004, 23:59

Subject

CN=VeriSign Time Stamping Service,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)01,O=VeriSign\, Inc.

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:de:aa:11:d4:d8:40:9a:a8:be:e6
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/12/2000, 08:00

Not After

12/11/2005, 08:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:07:11:43:00:00:00:00:00:34
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/05/2002, 00:55

Not After

25/11/2003, 01:05

Subject

CN=Microsoft Corporation,OU=Copyright (c) 2002 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

FreeSid
AllocateAndInitializeSid
EqualSid
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
RegCloseKey
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegCreateKeyExA
RegQueryInfoKeyA

kernel32

LocalFree
LocalAlloc
GetLastError
GetCurrentProcess
GetModuleFileNameA
lstrlenA
GetSystemDirectoryA
RemoveDirectoryA
FindClose
FindNextFileA
DeleteFileA
SetFileAttributesA
lstrcmpA
FindFirstFileA
lstrcatA
lstrcpyA
_lclose
_llseek
_lopen
WritePrivateProfileStringA
GetWindowsDirectoryA
CreateDirectoryA
GetFileAttributesA
ExpandEnvironmentStringsA
IsDBCSLeadByte
GetShortPathNameA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcmpiA
GetProcAddress
GlobalUnlock
GlobalLock
GlobalAlloc
FreeResource
CloseHandle
LoadResource
SizeofResource
FindResourceA
ReadFile
WriteFile
SetFilePointer
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
SetCurrentDirectoryA
GetTempFileNameA
ExitProcess
CreateFileA
LoadLibraryExA
lstrcpynA
GetVolumeInformationA
FormatMessageA
GetCurrentDirectoryA
GetVersionExA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetTempPathA
GetSystemInfo
CreateMutexA
SetEvent
CreateEventA
CreateThread
ResetEvent
TerminateThread
GetDriveTypeA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
LockResource
LoadLibraryA
GetDiskFreeSpaceA
MulDiv
EnumResourceLanguagesA
FreeLibrary
GlobalFree

gdi32

GetDeviceCaps

user32

ExitWindowsEx
wsprintfA
CharNextA
CharUpperA
CharPrevA
SetWindowLongA
GetWindowLongA
CallWindowProcA
DispatchMessageA
MsgWaitForMultipleObjects
PeekMessageA
SendMessageA
SetWindowPos
ReleaseDC
GetDC
GetWindowRect
SendDlgItemMessageA
GetDlgItem
SetForegroundWindow
SetWindowTextA
MessageBoxA
DialogBoxIndirectParamA
ShowWindow
EnableWindow
GetDlgItemTextA
EndDialog
GetDesktopWindow
MessageBeep
SetDlgItemTextA
LoadStringA
GetSystemMetrics

comctl32

ord17

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.9MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Nero/Setup.exe
.exe windows:4 windows x86 arch:x86

03e649e2062dd356a0e6cf4d6825fc53

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

kernel32

lstrlenW
DosDateTimeToFileTime
LockResource
GetLastError
WideCharToMultiByte
GetLocaleInfoA
GetFileSize
IsBadWritePtr
GetTickCount
FileTimeToLocalFileTime
FileTimeToSystemTime
InterlockedIncrement
VirtualAlloc
VirtualFree
GetDriveTypeA
GetVersionExA
GetVersion
SetEnvironmentVariableA
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
CreateMutexA
CreateThread
GetExitCodeThread
LocalAlloc
GetShortPathNameA
FormatMessageA
LocalFree
GetCurrentProcess
ExpandEnvironmentStringsA
OpenProcess
WaitForSingleObject
LoadLibraryExA
GetFileTime
CompareFileTime
GetCurrentDirectoryA
ExitProcess
GlobalAddAtomA
MultiByteToWideChar
lstrcmpiA
GetModuleHandleA
GetDiskFreeSpaceA
GetProcAddress
CreateProcessA
GetExitCodeProcess
OpenMutexA
ResumeThread
GetDateFormatA
SetCurrentDirectoryA
MoveFileExA
lstrcmpA
CreateDirectoryA
RemoveDirectoryA
GetModuleFileNameA
GetFileAttributesA
lstrcpynA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetUserDefaultLangID
GetSystemDefaultLangID
WinExec
lstrcatA
LocalFileTimeToFileTime
SetFileTime
lstrlenA
InterlockedDecrement
lstrcpyA
LoadLibraryA
FindClose
FindFirstFileA
FindNextFileA
ReadFile
GetSystemDirectoryA
GetWindowsDirectoryA
SetFilePointer
SetLastError
GetProfileStringA
MoveFileA
Sleep
CopyFileA
GetEnvironmentVariableA
DeleteFileA
CreateFileA
CloseHandle
SetFileAttributesA
GetTempPathA
FindResourceA
SizeofResource
LoadResource
GlobalAlloc
GlobalLock
GlobalUnlock
FreeLibrary
GetLocalTime
GetThreadLocale
MulDiv
SetEnvironmentVariableW
LCMapStringW
LCMapStringA
SetUnhandledExceptionFilter
GetStdHandle
SetHandleCount
GetLocaleInfoW
CompareStringW
CompareStringA
GetUserDefaultLCID
HeapDestroy
HeapSize
EnumSystemLocalesA
IsValidCodePage
IsValidLocale
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
GetEnvironmentStringsW
SetEvent
SetThreadPriority
GetEnvironmentStrings
FreeEnvironmentStringsW
SuspendThread
GetCurrentThread
HeapReAlloc
GetACP
SetStdHandle
GetSystemTime
GetTimeZoneInformation
GetStartupInfoA
FreeEnvironmentStringsA
UnhandledExceptionFilter
InterlockedExchange
RaiseException
GlobalDeleteAtom
GlobalFindAtomA
GlobalGetAtomNameA
GetCurrentThreadId
DuplicateHandle
WriteFile
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetVolumeInformationA
GetFullPathNameA
HeapCreate
GlobalReAlloc
GlobalFree
ExitThread
LocalReAlloc
CreateEventA
GlobalFlags
TlsGetValue
TerminateProcess
GetCommandLineA
GetPrivateProfileStringA
WritePrivateProfileStringA
TlsAlloc
GlobalHandle
TlsFree
SetErrorMode
TlsSetValue
GetFileType
GetProcessVersion
GetCPInfo
GetOEMCP
HeapAlloc
RtlUnwind
FindResourceExA
HeapFree

user32

GetMenu
RegisterClassA
GetMenuItemCount
GetClassInfoA
wsprintfA
GetCapture
SetScrollPos
GetScrollPos
SetScrollRange
GetScrollRange
ShowScrollBar
SetScrollInfo
GetScrollInfo
ScrollWindow
EndDeferWindowPos
BeginDeferWindowPos
DeferWindowPos
DestroyWindow
AdjustWindowRectEx
SetActiveWindow
DispatchMessageA
PeekMessageA
MapWindowPoints
SendDlgItemMessageA
IsDlgButtonChecked
IsDialogMessageA
MoveWindow
IsWindowEnabled
GetNextDlgTabItem
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
CharUpperA
ClientToScreen
GetWindowDC
BeginPaint
EndPaint
CreateDialogIndirectParamA
GetActiveWindow
SetWindowsHookExA
DrawFocusRect
WindowFromPoint
ValidateRect
TranslateMessage
GetMessageA
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
DestroyMenu
LoadMenuA
SetMenu
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
PostQuitMessage
ShowOwnedPopups
GetAsyncKeyState
CharNextA
GetMenuItemID
CopyAcceleratorTableA
GetNextDlgGroupItem
RegisterClipboardFormatA
PostThreadMessageA
IsWindowUnicode
DefDlgProcA
GetSubMenu
HideCaret
MapDialogRect
GetWindowPlacement
GetCursorPos
WinHelpA
GetKeyState
GetFocus
IsChild
RedrawWindow
DestroyCursor
LoadStringA
ReleaseCapture
SystemParametersInfoA
SetRect
AdjustWindowRect
GetSystemMetrics
OffsetRect
SetCapture
GetSysColorBrush
GetTopWindow
ExitWindowsEx
GetWindowTextLengthA
EnumChildWindows
CopyRect
GrayStringA
DrawTextA
TabbedTextOutA
SetWindowPos
SetWindowTextA
ShowWindow
CreateWindowExA
GetDlgItem
GetWindowTextA
EndDialog
SetFocus
SetForegroundWindow
CloseWindow
UpdateWindow
GetWindowThreadProcessId
GetForegroundWindow
PostMessageA
MessageBoxA
GetDesktopWindow
GetWindow
GetClassNameA
GetWindowLongA
FindWindowA
DrawIcon
LoadCursorA
CopyIcon
GetParent
InflateRect
IsWindow
SetCursor
GetMessagePos
ScreenToClient
PtInRect
InvalidateRect
SetTimer
MessageBeep
SetWindowLongA
KillTimer
BroadcastSystemMessage
GetWindowRect
LoadIconA
SendMessageA
EnableWindow
MessageBoxExA
GetDC
ReleaseDC
GetSysColor
FillRect
GetClientRect
RegisterWindowMessageA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetLastActivePopup
IntersectRect
IsIconic
IsWindowVisible
GetDlgCtrlID
DefWindowProcA
ExcludeUpdateRgn
ShowCaret
SetWindowContextHelpId
EqualRect
UnregisterClassA

gdi32

CreateDIBitmap
GetTextExtentPointA
GetTextColor
EnumFontFamiliesExA
GetTextFaceA
CreateFontA
SetTextJustification
ExtTextOutA
TextOutA
Escape
PtVisible
GetDeviceCaps
RectVisible
GetStockObject
GetObjectA
GetCurrentObject
GetTextExtentPoint32A
BitBlt
CreateFontIndirectA
CreateCompatibleBitmap
DeleteDC
CreateCompatibleDC
GetClipBox
SetTextColor
SetBkColor
CreateBitmap
SaveDC
RestoreDC
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
MoveToEx
LineTo
DeleteObject
GetViewportExtEx
GetWindowExtEx
CreatePen
CreateSolidBrush
GetTextMetricsA
LPtoDP
DPtoLP
GetMapMode
PatBlt
GetBkColor
SelectObject

shell32

SHGetMalloc
SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteA
SHChangeNotify
DragFinish
DragQueryFileA

ole32

CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
CLSIDFromString
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
OleIsCurrentClipboard
CLSIDFromProgID
CoGetClassObject
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
CoInitializeEx
CoUninitialize
CoCreateInstance
CoInitialize
CreateStreamOnHGlobal

oleaut32

VariantTimeToSystemTime
SysAllocStringLen
SysStringLen
SysAllocStringByteLen
SysAllocString
SysFreeString
OleLoadPicture
VariantClear
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
VarBstrFromDate
VariantChangeType
VariantCopy
SafeArrayUnaccessData
SafeArrayGetElemsize
SafeArrayGetDim

setupapi

SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA
SetupDiGetDeviceRegistryPropertyA

comctl32

ord17
PropertySheetA

oledlg

ord8

olepro32

ord253

wsock32

htons
closesocket
WSACleanup
socket
ioctlsocket
connect
WSAStartup

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

comdlg32

GetFileTitleA

Sections

.text
Size: 1.1MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 136KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 168KB - Virtual size: 222KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 836KB - Virtual size: 832KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Nero/System/ImagX7.dll.cab
.cab
Nero/System/ImagXR7.dll.cab
.cab
Nero/System/ImagXRA7.dll.cab
.cab
Nero/System/ImagXpr7.dll.cab
.cab
Nero/System/NeroCheck.exe.cab
.cab
Nero/System/TwnLib20.dll.cab
.cab
Nero/System/TwnLib4.dll.cab
.cab
Nero/System/atl.dll.cab
.cab
Nero/System/picn20.dll.cab
.cab
Nero/WMPBurn/NeroBurnPlugin.dll.cab
.cab
Nero/WMPBurn/WMPBurn.exe.cab
.cab
Nero/nero soundtrax/EffectCtrl.ocx.cab
.cab
Nero/nero soundtrax/NeroSoundTrax_chs.chm
.chm
Nero/nero soundtrax/NeroSoundTrax_chs.pdf
.pdf
Nero/nero soundtrax/NeroSoundTrax_cht.chm
.chm
Nero/nero soundtrax/NeroSoundTrax_cht.pdf
.pdf
Nero/nero soundtrax/NeroSoundTrax_deu.chm
.chm
Nero/nero soundtrax/NeroSoundTrax_deu.pdf
.pdf
Nero/nero soundtrax/NeroSoundTrax_eng.chm
.chm
Nero/nero soundtrax/NeroSoundTrax_eng.pdf
.pdf
Nero/nero soundtrax/NeroSoundTrax_esp.chm
.chm
Nero/nero soundtrax/NeroSoundTrax_esp.pdf
.pdf
Nero/nero soundtrax/NeroSoundTrax_fra.chm
.chm
Nero/nero soundtrax/NeroSoundTrax_fra.pdf
.pdf
Nero/nero soundtrax/NeroSoundTrax_ita.chm
.chm
Nero/nero soundtrax/NeroSoundTrax_ita.pdf
.pdf
Nero/nero soundtrax/NeroSoundTrax_jpn.chm
.chm
Nero/nero soundtrax/NeroSoundTrax_jpn.pdf
.pdf
Nero/nero soundtrax/NeroSoundTrax_kor.chm
.chm
Nero/nero soundtrax/NeroSoundTrax_kor.pdf
.pdf
Nero/nero soundtrax/NeroSoundTrax_nld.chm
.chm
Nero/nero soundtrax/NeroSoundTrax_nld.pdf
.pdf
Nero/nero soundtrax/NeroSoundTrax_ptg.chm
.chm
Nero/nero soundtrax/NeroSoundTrax_ptg.pdf
.pdf
Nero/nero soundtrax/SoundTrax-Chs.nls.cab
.cab
Nero/nero soundtrax/SoundTrax-Cht.nls.cab
.cab
Nero/nero soundtrax/SoundTrax-Csy.nls.cab
.cab
Nero/nero soundtrax/SoundTrax-Dan.nls.cab
.cab
Nero/nero soundtrax/SoundTrax-Deu.nls.cab
.cab
Nero/nero soundtrax/SoundTrax-Ell.nls.cab
.cab
Nero/nero soundtrax/SoundTrax-Esl.nls.cab
.cab
Nero/nero soundtrax/SoundTrax-Esp.nls.cab
.cab
Nero/nero soundtrax/SoundTrax-Fin.nls.cab
.cab
Nero/nero soundtrax/SoundTrax-Fra.nls.cab
.cab
Nero/nero soundtrax/SoundTrax-Hun.nls.cab
.cab
Nero/nero soundtrax/SoundTrax-Ita.nls.cab
.cab
Nero/nero soundtrax/SoundTrax-Jpn.nls.cab
.cab
Nero/nero soundtrax/SoundTrax-Kor.nls.cab
.cab
Nero/nero soundtrax/SoundTrax-Nld.nls.cab
.cab
Nero/nero soundtrax/SoundTrax-Nor.nls.cab
.cab
Nero/nero soundtrax/SoundTrax-Plk.nls.cab
.cab
Nero/nero soundtrax/SoundTrax-Ptb.nls.cab
.cab
Nero/nero soundtrax/SoundTrax-Ptg.nls.cab
.cab
Nero/nero soundtrax/SoundTrax-Rus.nls.cab
.cab
Nero/nero soundtrax/SoundTrax-Sky.nls.cab
.cab
Nero/nero soundtrax/SoundTrax-Slv.nls.cab
.cab
Nero/nero soundtrax/SoundTrax-Sve.nls.cab
.cab
Nero/nero soundtrax/SoundTrax-Tha.nls.cab
.cab
Nero/nero soundtrax/SoundTrax-Trk.nls.cab
.cab
Nero/nero soundtrax/SoundTrax.exe.cab
.cab
Nero/setup.cfg
Nero/setup/Eula_chs.txt
Nero/setup/Eula_cht.txt
Nero/setup/Eula_deu.txt
Nero/setup/Eula_eng.txt
Nero/setup/Eula_enu.txt
Nero/setup/Eula_esp.txt
Nero/setup/Eula_fra.txt
Nero/setup/Eula_ita.txt
Nero/setup/Eula_jpn.txt
Nero/setup/Eula_kor.txt
Nero/setup/Eula_nld.txt
Nero/setup/Eula_ptg.txt
Nero/setup/Eula_sve.txt
Nero/setup/shortcut.dll
.dll windows:4 windows x86 arch:x86

c935963cde4b8bd064f550fdbb3cf4ad

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shfolder

SHGetFolderPathA

kernel32

MultiByteToWideChar
lstrlenA
GetFileAttributesA
CreateDirectoryA
SetFileAttributesA
GetLastError
OutputDebugStringA
lstrcatA
DeleteFileA
IsBadWritePtr
GetSystemDefaultLangID
RemoveDirectoryA
FindClose
FindNextFileA
FindFirstFileA
SetEnvironmentVariableA
GetLocaleInfoW
SetEndOfFile
SetConsoleCtrlHandler
LoadLibraryA
GetProcAddress
FreeLibrary
GetVersionExA
GetVersion
GetDriveTypeA
GetFileSize
DeleteCriticalSection
SetStdHandle
UnhandledExceptionFilter
IsBadCodePtr
IsBadReadPtr
GetUserDefaultLCID
EnumSystemLocalesA
IsValidCodePage
IsValidLocale
FlushFileBuffers
SetFilePointer
GetUserDefaultLangID
GetLocaleInfoA
GetModuleFileNameA
WideCharToMultiByte
LockResource
LoadResource
FindResourceA
GlobalMemoryStatus
Sleep
LocalFree
FormatMessageA
LocalAlloc
CloseHandle
ReadFile
CreateFileA
SetCurrentDirectoryA
GetCurrentDirectoryA
GetTickCount
GetModuleHandleA
EnterCriticalSection
InitializeCriticalSection
InterlockedExchange
GetFullPathNameA
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
RtlUnwind
RaiseException
GetCommandLineA
FileTimeToSystemTime
FileTimeToLocalFileTime
HeapFree
HeapAlloc
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetCPInfo
GetACP
GetOEMCP
HeapReAlloc
ExitProcess
FatalAppExitA
LCMapStringA
LCMapStringW
CompareStringA
CompareStringW
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCurrentThread
TerminateProcess
GetCurrentProcess
HeapSize
SetUnhandledExceptionFilter
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
GetStringTypeA
GetStringTypeW

user32

MessageBoxA
LoadStringA

oleaut32

SysAllocString

advapi32

RegDeleteKeyA
RegCreateKeyA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA

ole32

CoUninitialize
CoInitializeEx
CoInitialize
CoCreateInstance

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

shlwapi

SHDeleteKeyA

Exports

Exports

CreateShortCuts
CreateShortCutsDebug
CreateShortCutsExt1
CreateShortCutsExt1Debug
CreateShortCutsExt2
CreateShortCutsExt3
GetApplicationDatabase
GetDocumentDatabase
GetInstallableProgramName
GetPreInstallApplicationInfo
GetSerialNumberSummary
GetSerialNumberSummaryEx
GetShortCutInterfaceVersion
KillShortCuts
KillShortCutsExt1
KillShortCutsExt2
KillShortCutsExt3
SetProgramUILanguage
SetShortCutsLanguage
SetShortCutsLanguageAndRecreateShortCuts

Sections

.text
Size: 268KB - Virtual size: 265KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 200KB - Virtual size: 196KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Readme/Readme.txt
Redist/Images/Bckg/backgrnd.bmp
Redist/Images/Bckg/unbackgrnd.bmp
Redist/Images/Info/Cool_Main.png
.png
Redist/Images/Info/Main.png
.png
Redist/Images/Info/Prog.png
.png
Redist/Images/Logo/Default/1.png
.png
Redist/Images/Logo/Nero/1.png
.png
Redist/Images/Logo/Nero/2.png
.png
Redist/Images/Logo/Nero/4.png
.png
Redist/Images/Logo/Nero/5.png
.png
Redist/Images/Logo/Nero/6.png
.png
Redist/Images/Logo/Nero/9.png
.png
Redist/Images/Logo/Nero/99.png
.png
Redist/trch._ex
setup.exe
.exe windows:4 windows x86 arch:x86

6c08f96e2ebe8540c1be9c2d660cb3b5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord2554
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord825
ord815
ord535
ord926
ord4129
ord4278
ord860
ord858
ord4277
ord6877
ord941
ord800
ord537
ord536
ord2915
ord6283
ord6282
ord1576
ord4486
ord6375
ord4274
ord3831
ord4673
ord1168

msvcrt

_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__dllonexit
_mbsnbcpy
_splitpath
_mbsnbcat
__CxxFrameHandler
_setmbcp
_mbscmp
_onexit

kernel32

CreateProcessA
GetModuleHandleA
GetStartupInfoA
GetModuleFileNameA

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 316B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
setupx.exe
.exe windows:4 windows x86 arch:x86

27ab7d5e6a4d015b62c428a7dd6ebe82

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsSetValue
LocalReAlloc
TlsGetValue
GetCPInfo
GetOEMCP
DuplicateHandle
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetVolumeInformationA
GetFullPathNameA
SetErrorMode
RtlUnwind
RaiseException
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetStartupInfoA
GetCommandLineA
HeapFree
HeapAlloc
HeapReAlloc
GetACP
GetDriveTypeA
SetStdHandle
GetFileType
GlobalReAlloc
HeapSize
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
IsValidLocale
IsValidCodePage
EnumSystemLocalesA
GetUserDefaultLCID
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetLocaleInfoW
GetProfileStringA
InterlockedExchange
TlsFree
GlobalHandle
TlsAlloc
GlobalFlags
GetProcessVersion
GetCurrentThread
lstrlenW
GetFileTime
WritePrivateProfileStringA
GetPrivateProfileStringA
MulDiv
lstrcpynA
lstrcmpA
GetThreadLocale
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
GetCurrentThreadId
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GlobalFree
GetLocaleInfoA
GetUserDefaultLangID
DeviceIoControl
CreateEventA
GetSystemDefaultLangID
SetCurrentDirectoryA
CreateFileA
ReadFile
IsBadWritePtr
GetTickCount
FileTimeToLocalFileTime
FileTimeToSystemTime
LocalAlloc
GlobalAlloc
GlobalLock
GlobalUnlock
LoadResource
LockResource
MoveFileExA
GetShortPathNameA
WaitForSingleObject
SizeofResource
FindResourceA
ExitProcess
CreateMutexA
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
CreateProcessA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LocalFree
GetModuleHandleA
GetProcAddress
OpenProcess
CloseHandle
GetExitCodeProcess
lstrlenA
WinExec
GetWindowsDirectoryA
LoadLibraryA
FreeLibrary
GetCurrentDirectoryA
lstrcatA
lstrcpyA
GetVersionExA
GetModuleFileNameA
FindNextFileA
CreateDirectoryA
SetFileAttributesA
CopyFileA
SetLastError
FormatMessageA
GetVersion
GetCurrentProcess
FindClose
GetLastError
GetFileAttributesA
GetSystemDirectoryA
GetFileSize
FindFirstFileA
GlobalGetAtomNameA
DeleteFileA
Sleep
TerminateProcess

user32

GetMessageA
WindowFromPoint
PostQuitMessage
SetWindowContextHelpId
MapDialogRect
GetSysColorBrush
GetDesktopWindow
DestroyMenu
LoadStringA
CopyAcceleratorTableA
SetRect
CharUpperA
GetNextDlgGroupItem
RegisterClipboardFormatA
PostThreadMessageA
GetTopWindow
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetDlgCtrlID
GetKeyState
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
IntersectRect
SystemParametersInfoA
GetWindowPlacement
EndDialog
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
GetDlgItem
TranslateMessage
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
MessageBoxA
GetWindowDC
OffsetRect
GetCapture
ReleaseCapture
SetCapture
ClientToScreen
GetCursorPos
DrawIconEx
DestroyIcon
UpdateWindow
TranslateAcceleratorA
LoadAcceleratorsA
SetParent
RegisterWindowMessageA
EnumWindows
IsWindowVisible
GetWindowThreadProcessId
LoadIconA
DrawIcon
CopyIcon
InflateRect
GetSysColor
GetMessagePos
ScreenToClient
PtInRect
SetTimer
MessageBeep
SetWindowLongA
DrawTextA
ExitWindowsEx
BroadcastSystemMessage
FrameRect
GetDC
ReleaseDC
EqualRect
FillRect
PostMessageA
SetWindowPos
KillTimer
IsWindow
InvalidateRect
IsIconic
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
SendMessageA
GetSystemMetrics
SetWindowRgn
GetWindowRect
GetParent
GetFocus
LoadCursorA
SetCursor
GetClassNameA
GetWindowTextA
EnableWindow
EnumChildWindows
GetClientRect
TabbedTextOutA
ValidateRect
EndPaint
BeginPaint
CharNextA
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
SetFocus
AdjustWindowRectEx
CopyRect
DestroyCursor
GrayStringA
IsWindowEnabled
IsChild

gdi32

CreateRectRgn
CreateSolidBrush
CreateCompatibleBitmap
SetBkMode
CreateFontIndirectA
GetStockObject
GetTextExtentPoint32A
PtInRegion
CreateRectRgnIndirect
CombineRgn
CreateDIBitmap
SetDIBitsToDevice
ExtSelectClipRgn
GetClipBox
SetBkColor
CreateBitmap
RectVisible
SetTextColor
GetTextColor
GetBkColor
GetDeviceCaps
PatBlt
SaveDC
RestoreDC
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
Arc
SelectClipRgn
IntersectClipRect
MoveToEx
LineTo
GetViewportExtEx
GetWindowExtEx
PtVisible
TextOutA
ExtTextOutA
Escape
GetMapMode
DPtoLP
LPtoDP
CreatePen
CreateCompatibleDC
SelectObject
SetStretchBltMode
StretchBlt
DeleteDC
DeleteObject
BitBlt
GetObjectA
ScaleWindowExtEx
GetTextExtentPointA
CreateDIBSection

comdlg32

GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

comctl32

ImageList_Create
ImageList_Destroy
ord17
ImageList_ReplaceIcon

oledlg

ord8

ole32

CoTaskMemAlloc
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoUninitialize
CoInitializeEx
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoCreateInstance
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoTaskMemFree

olepro32

ord253

oleaut32

VariantClear
VariantCopy
SysAllocString
SysAllocStringByteLen
VariantChangeType
VarBstrFromDate
SysFreeString
SysAllocStringLen
VariantTimeToSystemTime
SysStringLen

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

Sections

.text
Size: 772KB - Virtual size: 768KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 124KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 204KB - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4204e1fe9e2e0a7f6bec612446ce171b

Code Sign

4a:19:d2:38:8c:82:59:1c:a5:5d:73:5f:15:5d:dc:a3Certificate

08:7a:6d:5c:6f:62:93:4f:ba:c4:fd:43:e1:14:18:9dCertificate

Extended Key Usages

Key Usages

4b:c7:c2:d2:c6:7c:bb:62:09:ef:c7:ac:70:62:ae:08Certificate

Key Usages

Signer

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comctl32

advapi32

shell32

lz32

Sections

.text Size: 67KB - Virtual size: 67KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 12KB - Virtual size: 27KB

.idata Size: 4KB - Virtual size: 3KB

.rsrc Size: 41KB - Virtual size: 40KB

4204e1fe9e2e0a7f6bec612446ce171b

Code Sign

4a:19:d2:38:8c:82:59:1c:a5:5d:73:5f:15:5d:dc:a3Certificate

08:7a:6d:5c:6f:62:93:4f:ba:c4:fd:43:e1:14:18:9dCertificate

Extended Key Usages

Key Usages

4b:c7:c2:d2:c6:7c:bb:62:09:ef:c7:ac:70:62:ae:08Certificate

Key Usages

Signer

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comctl32

advapi32

shell32

lz32

Sections

.text Size: 67KB - Virtual size: 67KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 12KB - Virtual size: 27KB

.idata Size: 4KB - Virtual size: 3KB

.rsrc Size: 41KB - Virtual size: 40KB

4204e1fe9e2e0a7f6bec612446ce171b

Code Sign

4a:19:d2:38:8c:82:59:1c:a5:5d:73:5f:15:5d:dc:a3Certificate

08:7a:6d:5c:6f:62:93:4f:ba:c4:fd:43:e1:14:18:9dCertificate

Extended Key Usages

Key Usages

4b:c7:c2:d2:c6:7c:bb:62:09:ef:c7:ac:70:62:ae:08Certificate

Key Usages

Signer

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comctl32

advapi32

shell32

lz32

Sections

.text Size: 67KB - Virtual size: 67KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 12KB - Virtual size: 27KB

.idata Size: 4KB - Virtual size: 3KB

.rsrc Size: 41KB - Virtual size: 40KB

4a:19:d2:38:8c:82:59:1c:a5:5d:73:5f:15:5d:dc:a3
Certificate

08:7a:6d:5c:6f:62:93:4f:ba:c4:fd:43:e1:14:18:9d
Certificate

4b:c7:c2:d2:c6:7c:bb:62:09:ef:c7:ac:70:62:ae:08
Certificate

.text
Size: 67KB - Virtual size: 67KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 12KB - Virtual size: 27KB

.idata
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 41KB - Virtual size: 40KB

4a:19:d2:38:8c:82:59:1c:a5:5d:73:5f:15:5d:dc:a3
Certificate

08:7a:6d:5c:6f:62:93:4f:ba:c4:fd:43:e1:14:18:9d
Certificate

4b:c7:c2:d2:c6:7c:bb:62:09:ef:c7:ac:70:62:ae:08
Certificate

.text
Size: 67KB - Virtual size: 67KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 12KB - Virtual size: 27KB

.idata
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 41KB - Virtual size: 40KB

4a:19:d2:38:8c:82:59:1c:a5:5d:73:5f:15:5d:dc:a3
Certificate

08:7a:6d:5c:6f:62:93:4f:ba:c4:fd:43:e1:14:18:9d
Certificate

4b:c7:c2:d2:c6:7c:bb:62:09:ef:c7:ac:70:62:ae:08
Certificate

.text
Size: 67KB - Virtual size: 67KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 12KB - Virtual size: 27KB

.idata
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 41KB - Virtual size: 40KB

4a:19:d2:38:8c:82:59:1c:a5:5d:73:5f:15:5d:dc:a3
Certificate

08:7a:6d:5c:6f:62:93:4f:ba:c4:fd:43:e1:14:18:9d
Certificate

4b:c7:c2:d2:c6:7c:bb:62:09:ef:c7:ac:70:62:ae:08
Certificate

.text
Size: 67KB - Virtual size: 67KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 12KB - Virtual size: 27KB

.idata
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 41KB - Virtual size: 40KB

4a:19:d2:38:8c:82:59:1c:a5:5d:73:5f:15:5d:dc:a3
Certificate

08:7a:6d:5c:6f:62:93:4f:ba:c4:fd:43:e1:14:18:9d
Certificate

4b:c7:c2:d2:c6:7c:bb:62:09:ef:c7:ac:70:62:ae:08
Certificate

.text
Size: 67KB - Virtual size: 67KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 12KB - Virtual size: 27KB

.idata
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 41KB - Virtual size: 40KB

4a:19:d2:38:8c:82:59:1c:a5:5d:73:5f:15:5d:dc:a3
Certificate

08:7a:6d:5c:6f:62:93:4f:ba:c4:fd:43:e1:14:18:9d
Certificate

4b:c7:c2:d2:c6:7c:bb:62:09:ef:c7:ac:70:62:ae:08
Certificate