d9e7d2960ee5f117510c22d08dbd21fe_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

d9e7d2960ee5f117510c22d08dbd21fe_JaffaCakes118
Size

18.4MB
MD5

d9e7d2960ee5f117510c22d08dbd21fe
SHA1

d1907cfa60dee0eabee2427964d42ba78678d59b
SHA256

fc448c8135aa58a928e18c7fb9108060cec382a092d403108245df545a734624
SHA512

999584ab7116ec90a83e5cf168445225aeb9133a801ce4f8e25faf20231a918186390bb241ba059bbb5710a3459cd3e37cde7646907a70be9cde8b595b876ce2
SSDEEP

393216:wqZHuH51BmVfExMdFvGl2/bsCOYhrTZJApQI4eMEuaYd9eE7a+:wqty1cCMo8oCOY+QI4nNIQa+

Score

3^/10

Malware Config

Signatures

Unsigned PE 237 IoCs

Checks for missing Authenticode signature.

resource
unpack001/setup_3500.exe
unpack002/$PLUGINSDIR/InstallOptions.dll
unpack002/$PLUGINSDIR/System.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Codecs/14_43260.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Codecs/28_83260.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Codecs/atrc.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Codecs/cook.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Codecs/ddnt3260.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Codecs/dnet3260.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Codecs/drv1.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Codecs/drv2.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Codecs/drvc.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Codecs/hxltcolor.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Codecs/raac.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Codecs/ralf.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Codecs/rv10.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Codecs/rv20.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Codecs/rv30.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Codecs/rv40.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Codecs/sipr.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Common/objb3201.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Common/pnen3260.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Common/pngu3267.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Common/pnrs3260.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Common/rppr3260.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Plugins/ExtResources/coreres.xrs
unpack002/$PROGRAM_FILES_COMMON/Real/Plugins/audplin.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Plugins/authmgr.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Plugins/clbascauth.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Plugins/clntxres.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Plugins/fpsechnd.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Plugins/httpfsys.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Plugins/hxsdp.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Plugins/hxxml.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Plugins/imgrender.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Plugins/memfsys.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Plugins/mp3fformat.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Plugins/mp3render.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Plugins/mp4arender.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Plugins/ntlmauth.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Plugins/oggfformat.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Plugins/pacplin.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Plugins/plusplin.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Plugins/pxcb3210.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Plugins/ramfformat.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Plugins/ramrender.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Plugins/rarender.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Plugins/rmfformat.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Plugins/rmxfpln.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Plugins/rmxrend.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Plugins/rn5auth.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Plugins/rtfformat.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Plugins/rtrender.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Plugins/rvrender.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Plugins/sdpplin.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Plugins/security.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Plugins/smlfformat.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Plugins/smlrender.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Plugins/smmrender.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Plugins/smplfsys.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Plugins/stubdrm.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Plugins/tfilesys.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Plugins/vidplin.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Plugins/vidsite.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Plugins/vorbisrend.dll
unpack002/$PROGRAM_FILES_COMMON/Real/Plugins/vsrlocal.dll
unpack002/$PROGRAM_FILES_COMMON/Real/rpplugins/cn/embed_cn.dll
unpack002/$PROGRAM_FILES_COMMON/Real/rpplugins/cn/rpclsvc_cn.dll
unpack002/$PROGRAM_FILES_COMMON/Real/rpplugins/embd3260.dll
unpack002/$PROGRAM_FILES_COMMON/Real/rpplugins/rpcl3260.dll
unpack002/$PROGRAM_FILES_COMMON/Real/rpplugins/rput3260.dll
unpack002/$R2/NSIS.Library.RegTool.v2.$_6_.exe
unpack002/$SYSDIR/pncrt.dll
unpack002/$SYSDIR/pndx5032.dll
unpack002/$WINDIR/herosoft/InstallCall.exe
unpack002/$WINDIR/herosoft/OnSetup.dll
unpack002/$WINDIR/herosoft/unInstallCall.exe
unpack002/ADOPLUS/AdoPlus.dll
unpack002/AMPEQU.DLL
unpack002/AVCDROM.dll
unpack002/AmpDll/APEAUDIO.dll
unpack002/AmpDll/FlacAUDO.dll
unpack002/AmpDll/MP4Audio.dll
unpack002/AmpDll/OGGAUDIO.dll
unpack002/AviSys.dll
unpack002/AviVideo.dll
unpack002/BTCNNET.dll
unpack002/BTFILE.dll
unpack002/BTLOAD.dll
unpack002/CapVideo.dll
unpack002/ChgRGB.dll
unpack002/ChgYUV.dll
unpack002/Codecs/$R2/NSIS.Library.RegTool.v2.$_6_.exe
unpack002/Codecs/Lang/$R2/NSIS.Library.RegTool.v2.$_6_.exe
unpack002/CommSkin.dll
unpack002/CoolMenu.dll
unpack002/DAB936.DLL
unpack002/DABC.dll
unpack002/DABPROXY.dll
unpack002/DACDEC.DLL
unpack002/DACENC.DLL
unpack002/DDrawX.dll
unpack002/DECDAC.dll
unpack002/DEDAC.DLL
unpack002/DIBTODIB.dll
unpack002/DOWNMIX.DLL
unpack002/DSoundX.dll
unpack002/DVD936.dll
unpack002/DVD936_original.dll
unpack002/DVDINFO.DLL
unpack002/DVSINFO.dll
unpack002/DecCap.dll
unpack002/DecDVS.dll
unpack002/DecVideo.dll
unpack002/DllFile/AC3Audio.DLL
unpack002/DllFile/AIFFAUDIO.DLL
unpack002/DllFile/APEAUDIO.dll
unpack002/DllFile/CDAudio.dll
unpack002/DllFile/DABAudio.dll
unpack002/DllFile/DACAudio.dll
unpack002/DllFile/DSOut.dll
unpack002/DllFile/FlacAUDO.dll
unpack002/DllFile/MCICDAudio.dll
unpack002/DllFile/MCIMidiAudio.dll
unpack002/DllFile/MIDIAudio.dll
unpack002/DllFile/MPAudio.dll
unpack002/DllFile/MPOut.dll
unpack002/DllFile/MPPAudio.dll
unpack002/DllFile/Mp4Audio.dll
unpack002/DllFile/OGGAUDIO.dll
unpack002/DllFile/RAAUDIO.dll
unpack002/DllFile/VQFAudio.dll
unpack002/DllFile/WMAUDIO.DLL
unpack002/DllFile/WavOut.dll
unpack002/DllFile/WaveAudio.dll
unpack002/DllFile/WordAudio.DLL
unpack002/DrawYUV.dll
unpack002/DvdFile.dll
unpack002/ENCDAC.DLL
unpack002/ENCMPA.dll
unpack002/Equ.dll
unpack002/FACEHELP.DLL
unpack002/FDCT.dll
unpack002/FFT.dll
unpack002/FILEIO.dll
unpack002/FTPREQ.DLL
unpack002/FileHook.dll
unpack002/GENBT.dll
unpack002/GETKID.DLL
unpack002/HeroLIB.dll
unpack002/HookDDX.dll
unpack002/HookDSX.dll
unpack002/HookPROC.dll
unpack002/HookWave.dll
unpack002/Hookey.dll
unpack002/HtcClass.dll
unpack002/HttpReq.dll
unpack002/KRNLAPI.dll
unpack002/KRNLCORE.dll
unpack002/LIBZAPI.dll
unpack002/LUp936.dll
unpack002/LibJBIG.dll
unpack002/LibJPEG.dll
unpack002/LibPNG.dll
unpack002/LibTIFF.dll
unpack002/LineUp.exe
unpack002/LineUpdt.dll
unpack002/MIDIAPI.DLL
unpack002/MMXAUDIO.dll
unpack002/MPEGSYS.dll
unpack002/MPGAUDIO.DLL
unpack002/MPNetMon.dll
unpack002/MPPDEC.DLL
unpack002/MciAll.dll
unpack002/MixerCtl.dll
unpack002/MmxYuv.dll
unpack002/Mmxado.exe
unpack002/MpcDEC.dll
unpack002/Mplex.dll
unpack002/Nvidia3d.dll
unpack002/OnLineStat.dll
unpack002/OnSetup.dll
unpack002/OverPic.dll
unpack002/PICHELP.dll
unpack002/PLAYDVS.dll
unpack002/PlayList.dll
unpack002/PlayObj.dll
unpack002/RDJMF.dll
unpack002/RMCtrl.dll
unpack002/RealHook.dll
unpack002/RegExplr.exe
unpack002/SEGFILE.DLL
unpack002/SHMEM.dll
unpack002/STHMP3.dll
unpack002/SUBPIC.dll
unpack002/SVDVIDEO.dll
unpack002/SthSDVD.exe
unpack002/StrmPack.dll
unpack002/Sys936.dll
unpack002/SysExplr.exe
unpack002/SysFile.dll
unpack002/TCPTO.dll
unpack002/TVQDEC.DLL
unpack002/VACom.dll
unpack002/VCvtShell.dll
unpack002/Video3D.dll
unpack002/VideoWin.dll
unpack002/WAVEBMP.DLL
unpack002/WAVEFILE.dll
unpack002/WAVEOUT.dll
unpack002/WEBDLL.DLL
unpack002/WPageDim.dll
unpack002/WaitHook.dll
unpack002/Waveform.dll
unpack002/WebList.dll
unpack002/WebLoad.dll
unpack002/WebSkin.dll
unpack002/YuvHelp.dll
unpack002/explyobj/CapObj.dll
unpack002/explyobj/DVSMedia.dll
unpack002/explyobj/IMGMedia.dll
unpack002/explyobj/MOVMEDIA.dll
unpack002/explyobj/RMMEDIA.dll
unpack002/explyobj/RWMDISC.dll
unpack002/explyobj/SWFMEDIA.dll
unpack002/explyobj/TORMedia.dll
unpack002/explyobj/WMMEDIA.dll1111
unpack002/explyobj/WMMedia.dll
unpack002/hsrpcplg.dll
unpack002/httphlp.dll
unpack002/libbz2.dll
unpack002/mpg12plg.dll
unpack002/mpgplgr.dll
unpack002/resdll/Ado936.dll
unpack002/resdll/RegEp936.dll
unpack002/resdll/playlist936.dll
unpack002/usuppcli.dll

NSIS installer 1 IoCs

installer

resource	yara_rule
static1/unpack001/setup_3500.exe	nsis_installer_1

Files

d9e7d2960ee5f117510c22d08dbd21fe_JaffaCakes118
.rar
setup_3500.exe
.exe windows:4 windows x86 arch:x86

9c523d8653da5455667e3f82274f2f88

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
SetFileTime
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
CreateFileA
GetFileSize
GetModuleFileNameA
GetTickCount
lstrcmpiA
CopyFileA
ExitProcess
GetCommandLineA
GetWindowsDirectoryA
GetTempPathA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
lstrcmpA
GetEnvironmentVariableA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
SetErrorMode
GetModuleHandleA
LoadLibraryA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetCurrentProcess

user32

ScreenToClient
GetWindowRect
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
EndDialog
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxA
CharPrevA
DispatchMessageA
PeekMessageA
CreateDialogParamA
DestroyWindow
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
RegisterClassA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
TrackPopupMenu
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/InstallOptions.dll
.dll windows:4 windows x86 arch:x86

57354bdeea3dfae6e948101add87501a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetCurrentDirectoryA
GetCurrentDirectoryA
GetPrivateProfileIntA
GetModuleHandleA
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
MultiByteToWideChar
GlobalAlloc

user32

GetDlgCtrlID
GetClientRect
SetWindowRgn
MapWindowPoints
LoadImageA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
PtInRect
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
LoadIconA

gdi32

SetTextColor
GetObjectA
SelectObject
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
CreateCompatibleDC

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetDesktopFolder
SHGetMalloc
ShellExecuteA

comdlg32

GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError

Exports

Exports

dialog
initDialog
show

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 954B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:4 windows x86 arch:x86

4ec328f99bdd944fc98d8a5cf11f7a62

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
GlobalSize
lstrcpyA
lstrcpynA
FreeLibrary
lstrcatA
GetProcAddress
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
GetLastError
VirtualAlloc
VirtualProtect

user32

wsprintfA

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 494B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/ioSpecial.ini
$PLUGINSDIR/modern-wizard.bmp
$PROGRAM_FILES_COMMON/Real/Codecs/14_43260.dll
.dll windows:4 windows x86 arch:x86

10cc1c83f991b066cba98aa471df4e60

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

free
_iob
fprintf
_onexit
_adjust_fdiv
__dllonexit
strrchr
malloc
_CIpow
??3@YAXPAX@Z
_initterm
memmove
sprintf
strchr
atol
??2@YAPAXI@Z
_purecall
calloc

advapi32

RegQueryValueA
RegCreateKeyA
RegSetValueA
RegOpenKeyA
RegEnumKeyA
RegCloseKey

user32

LoadStringA

kernel32

GetModuleFileNameA
LoadLibraryA
FreeLibrary

Exports

Exports

RACloseCodec
RADecode
RAEncode
RAFreeDecoder
RAFreeEncoder
RAGetBackend
RAGetFlavorProperty
RAGetNumberOfFlavors
RAInitDecoder
RAInitEncoder
RAOpenCodec2
RASetFlavor

Sections

.text
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Codecs/28_83260.dll
.dll windows:4 windows x86 arch:x86

3fde72e769c2ba8f88c009f3828dd015

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

atol
_adjust_fdiv
malloc
memmove
_ftol
_purecall
strchr
_initterm
_onexit
__dllonexit
sprintf
free
??2@YAPAXI@Z
strrchr
??3@YAXPAX@Z

advapi32

RegCloseKey
RegEnumKeyA
RegSetValueA
RegCreateKeyA
RegQueryValueA
RegOpenKeyA

user32

LoadStringA

kernel32

GetModuleFileNameA
FreeLibrary
LoadLibraryA

Exports

Exports

RACloseCodec
RADecode
RAEncode
RAFreeDecoder
RAFreeEncoder
RAGetBackend
RAGetFlavorProperty
RAGetNumberOfFlavors
RAInitDecoder
RAInitEncoder
RAOpenCodec2
RASetFlavor

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Codecs/atrc.dll
.dll windows:4 windows x86 arch:x86

5132cde9ac8899a69f40dfaacc320c4d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

_ftol
??3@YAXPAX@Z
memmove
calloc
free
malloc
_CIpow
floor
??2@YAPAXI@Z
_assert
_except_handler3
_purecall
_initterm
_adjust_fdiv
__dllonexit
_onexit

Exports

Exports

RACloseCodec
RACreateEncoderInstance
RADecode
RAEncode
RAFlush
RAFreeDecoder
RAFreeEncoder
RAGetBackend
RAGetDecoderBackendGUID
RAGetFlavorProperty
RAGetGUID
RAGetNumberOfFlavors
RAGetNumberOfFlavors2
RAInitDecoder
RAInitEncoder
RAOpenCodec
RAOpenCodec2
RASetComMode
RASetFlavor
_RASetPwd@8

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Codecs/cook.dll
.dll windows:4 windows x86 arch:x86

7186ef18b8145b9efacd73914d40cee0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

free
??3@YAXPAX@Z
memmove
_purecall
_CIpow
malloc
??2@YAPAXI@Z
_ftol
_initterm
_adjust_fdiv

Exports

Exports

RACloseCodec
RACreateEncoderInstance
RADecode
RAEncode
RAFlush
RAFreeDecoder
RAFreeEncoder
RAGetBackend
RAGetDecoderBackendGUID
RAGetFlavorProperty
RAGetGUID
RAGetNumberOfFlavors
RAGetNumberOfFlavors2
RAInitDecoder
RAInitEncoder
RAOpenCodec
RAOpenCodec2
RASetComMode
RASetFlavor
_RASetPwd@8

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Codecs/ddnt3260.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

CloseDecoder
OpenDecoder
dbDecode
dbFreeDecoder
dbInitDecoder

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 676B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Codecs/dnet3260.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

RACloseCodec
RADecode
RAEncode
RAFreeDecoder
RAFreeEncoder
RAGetBackend
RAGetFlavorProperty
RAGetNumberOfFlavors
RAInitDecoder
RAInitEncoder
RAOpenCodec
RAOpenCodec2
RASetFlavor
SetDLLAccessPath

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 766B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Codecs/drv1.dll
.dll windows:4 windows x86 arch:x86

232d11e71e9db2c13e39696149eba4f6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

printf
putchar
free
_ftol
_iob
calloc
malloc
_initterm
_adjust_fdiv
fprintf

kernel32

DisableThreadLibraryCalls

Exports

Exports

GetGUID
GetRV10DecParams
RV10toRGB3Alloc
RV10toRGB3Free
RV10toRGB3Init
RV10toRGB3Transform
RV10toYUVPostMove
RV10toYUVPostfilter
RV10toYUVTemporalInterp
RV10toYUVTemporalSetup
RV10toYUVTransform
SetRV10DecParams

Sections

.text
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 797B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Codecs/drv2.dll
.dll windows:4 windows x86 arch:x86

44586b56c5dcc55b19268bed59258786

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

_initterm
_ftol
free
__CxxFrameHandler
malloc
_purecall
??2@YAPAXI@Z
??3@YAXPAX@Z
_adjust_fdiv

kernel32

DisableThreadLibraryCalls
GetSystemInfo

advapi32

RegOpenKeyExA
RegCloseKey

Exports

Exports

GetGUID
RV20toYUV420CustomMessage
RV20toYUV420Free
RV20toYUV420HiveMessage
RV20toYUV420Init
RV20toYUV420Transform
RV20toYUV420_RN_FRU_Free
RV20toYUV420_RN_FRU_GetFrame
RV20toYUV420_RN_FRU_Init
RV20toYUV420_RN_FRU_Setup

Sections

.text
Size: 84KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

IACODE2
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

IACODE1
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

MMXCODE1
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

MMXDATA1
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Codecs/drvc.dll
.dll windows:4 windows x86 arch:x86

5d841dc9603dda4e7058b842c1dedbfc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

__CxxFrameHandler
memmove
_ftol
_purecall
malloc
free
??3@YAXPAX@Z
_initterm
_adjust_fdiv
_beginthreadex
??2@YAPAXI@Z

kernel32

WaitForMultipleObjects
CreateThread
LeaveCriticalSection
EnterCriticalSection
GetPrivateProfileIntA
InitializeCriticalSection
DeleteCriticalSection
CloseHandle
WaitForSingleObject
GetSystemInfo
CreateEventA
QueryPerformanceCounter
SetEvent
QueryPerformanceFrequency
ResetEvent

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

Exports

Exports

?GetGUID@@YGJPAE@Z
RV40toYUV420CustomMessage
RV40toYUV420Free
RV40toYUV420HiveMessage
RV40toYUV420Init
RV40toYUV420Transform

Sections

.text
Size: 192KB - Virtual size: 189KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Codecs/hxltcolor.dll
.dll windows:4 windows x86 arch:x86

155821e571b36aca7bf31baf9968f972

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

malloc
_initterm
_ftol
free
_adjust_fdiv

kernel32

DisableThreadLibraryCalls

Exports

Exports

Enhance
EnhanceUniform
GetColorAdjustments
GetColorConverter
GetColorConverter2
GetHXColorGUID
GetSharpnessAdjustments
I420andI420toI420
I420andYUVA
InitColorConverter
ScanAllCompatibleColorFormats
ScanCompatibleColorFormats
SetColorAdjustments
SetSharpnessAdjustments
_GetCompatibleColorFormats@12

Sections

.text
Size: 200KB - Virtual size: 197KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 195KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Codecs/raac.dll
.dll windows:4 windows x86 arch:x86

2569b16af6a5e82c06ef6aed87f5e148

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

??2@YAPAXI@Z
memmove
_CxxThrowException
calloc
free
malloc
exp
fputs
printf
pow
??3@YAXPAX@Z
__CxxFrameHandler
strncpy
log10
atan
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
?terminate@@YAXXZ
_iob
log
_purecall
_except_handler3

kernel32

DisableThreadLibraryCalls
IsBadReadPtr

Exports

Exports

RACloseCodec
RACreateDecoderInstance
RACreateEncoderInstance
RADecode
RAFlush
RAFreeDecoder
RAGetBackend
RAGetFlavorProperty
RAGetGUID
RAInitDecoder
RAOpenCodec2
RASetComMode

Sections

.text
Size: 364KB - Virtual size: 363KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text1
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Codecs/ralf.dll
.dll windows:4 windows x86 arch:x86

ca3cf2dadfa161c51320288930144294

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

malloc
free
??3@YAXPAX@Z
??2@YAPAXI@Z
_ftol
_adjust_fdiv
_purecall
_initterm

kernel32

DisableThreadLibraryCalls

Exports

Exports

RACreateDecoderInstance
RACreateEncoderInstance

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Codecs/rv10.dll
.dll windows:4 windows x86 arch:x86

7d0bbca4dd169c4c1a33b2513aa5069d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

rand
tolower
isupper
fprintf
strncpy
_stricmp
strchr
fread
fopen
__dllonexit
_onexit
free
_initterm
malloc
_adjust_fdiv
srand
memmove
fclose
_purecall
_ftol
??2@YAPAXI@Z
??3@YAXPAX@Z
_putenv

kernel32

DisableThreadLibraryCalls
GetProcAddress
FreeLibrary
SetErrorMode
LoadLibraryA
QueryPerformanceFrequency
QueryPerformanceCounter
GetTickCount

Exports

Exports

PNCodec_Close
PNCodec_GetMediaFormats
PNCodec_GetUIName
PNCodec_GetVersion
PNCodec_Input
PNCodec_Open
PNCodec_PreferredMediaFormat
PNCodec_QueryMediaFormat
PNCodec_StreamOpen
PNStream_Close
PNStream_GetIPNUnknown
PNStream_GetInputBufferSize
PNStream_GetProperty
PNStream_GetStreamHeader
PNStream_GetStreamHeaderSize
PNStream_Input
PNStream_OpenSettingsBox
PNStream_PostProcess
PNStream_ReleaseFrame
PNStream_SetDataCallback
PNStream_SetOutputPacketSize
PNStream_SetProperty
SetDLLAccessPath
_PNCodec_GetIPNUnknown@4

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Codecs/rv20.dll
.dll windows:4 windows x86 arch:x86

de93a6d25a8e8a4317757a0f9e71593a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

_stricmp
strchr
memmove
_purecall
_ftol
tolower
isupper
_initterm
_adjust_fdiv
strncpy
malloc
free
_putenv
??2@YAPAXI@Z
??3@YAXPAX@Z
__dllonexit
_onexit

kernel32

GetProcAddress
FreeLibrary
SetErrorMode
LoadLibraryA
DisableThreadLibraryCalls
QueryPerformanceFrequency
QueryPerformanceCounter

Exports

Exports

PNCodec_Close
PNCodec_GetMediaFormats
PNCodec_GetUIName
PNCodec_GetVersion
PNCodec_Input
PNCodec_Open
PNCodec_PreferredMediaFormat
PNCodec_QueryMediaFormat
PNCodec_StreamOpen
PNStream_Close
PNStream_GetIPNUnknown
PNStream_GetInputBufferSize
PNStream_GetProperty
PNStream_GetStreamHeader
PNStream_GetStreamHeaderSize
PNStream_Input
PNStream_OpenSettingsBox
PNStream_PostProcess
PNStream_ReleaseFrame
PNStream_SetDataCallback
PNStream_SetOutputPacketSize
PNStream_SetProperty
SetDLLAccessPath
_PNCodec_GetIPNUnknown@4

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 684B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Codecs/rv30.dll
.dll windows:4 windows x86 arch:x86

a5049b84d47d09c19faafd0e69f94d06

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

tolower
isupper
strncpy
_stricmp
__dllonexit
_onexit
_initterm
_adjust_fdiv
_ftol
memmove
_purecall
malloc
??2@YAPAXI@Z
free
??3@YAXPAX@Z
strchr
_putenv

kernel32

DisableThreadLibraryCalls
GetProcAddress
FreeLibrary
SetErrorMode
LoadLibraryA
QueryPerformanceFrequency
QueryPerformanceCounter
GetSystemInfo

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Exports

Exports

PNCodec_Close
PNCodec_GetMediaFormats
PNCodec_GetUIName
PNCodec_GetVersion
PNCodec_Input
PNCodec_Open
PNCodec_PreferredMediaFormat
PNCodec_QueryMediaFormat
PNCodec_StreamOpen
PNStream_Close
PNStream_GetIPNUnknown
PNStream_GetInputBufferSize
PNStream_GetProperty
PNStream_GetStreamHeader
PNStream_GetStreamHeaderSize
PNStream_Input
PNStream_OpenSettingsBox
PNStream_PostProcess
PNStream_ReleaseFrame
PNStream_SetDataCallback
PNStream_SetOutputPacketSize
PNStream_SetProperty
SetDLLAccessPath
_PNCodec_GetIPNUnknown@4

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Codecs/rv40.dll
.dll windows:4 windows x86 arch:x86

a5049b84d47d09c19faafd0e69f94d06

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

tolower
isupper
strncpy
_stricmp
__dllonexit
_onexit
_initterm
_adjust_fdiv
_ftol
memmove
_purecall
malloc
??2@YAPAXI@Z
free
??3@YAXPAX@Z
strchr
_putenv

kernel32

DisableThreadLibraryCalls
GetProcAddress
FreeLibrary
SetErrorMode
LoadLibraryA
QueryPerformanceFrequency
QueryPerformanceCounter
GetSystemInfo

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Exports

Exports

PNCodec_Close
PNCodec_GetMediaFormats
PNCodec_GetUIName
PNCodec_GetVersion
PNCodec_Input
PNCodec_Open
PNCodec_PreferredMediaFormat
PNCodec_QueryMediaFormat
PNCodec_StreamOpen
PNStream_Close
PNStream_GetIPNUnknown
PNStream_GetInputBufferSize
PNStream_GetProperty
PNStream_GetStreamHeader
PNStream_GetStreamHeaderSize
PNStream_Input
PNStream_OpenSettingsBox
PNStream_PostProcess
PNStream_ReleaseFrame
PNStream_SetDataCallback
PNStream_SetOutputPacketSize
PNStream_SetProperty
SetDLLAccessPath
_PNCodec_GetIPNUnknown@4

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 930B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Codecs/sipr.dll
.dll windows:4 windows x86 arch:x86

ab44f666347fdcd438ddb88f10cba053

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

frexp
??3@YAXPAX@Z
strncpy
_purecall
_ftol
rand
_CIpow
ldexp
??2@YAPAXI@Z
_CIacos
free
_initterm
malloc
_adjust_fdiv
__dllonexit
_onexit

Exports

Exports

RACloseCodec
RACreateEncoderInstance
RADecode
RAEncode
RAFlush
RAFreeDecoder
RAFreeEncoder
RAGetBackend
RAGetDecoderBackendGUID
RAGetFlavorProperty
RAGetGUID
RAGetNumberOfFlavors
RAInitDecoder
RAInitEncoder
RAOpenCodec
RAOpenCodec2
RASetComMode
RASetFlavor
RASetPwd
_RAGetNumberOfFlavors2@4

Sections

.text
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Common/objb3201.dll
.dll windows:4 windows x86 arch:x86

6d5de578f7b910cd8cd28311bfac5278

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

_adjust_fdiv
_initterm
_onexit
__dllonexit
_findclose
_purecall
_findnext
_findfirst
sscanf
_ismbcspace
strncpy
strtok
strchr
printf
_endthreadex
_beginthreadex
sprintf
_ftol
_vsnprintf
free
_stricmp
_ftime
_stat
_itoa
_putenv
_strcmpi
??3@YAXPAX@Z
??2@YAPAXI@Z
rand
memmove
atoi
strstr
strncmp
realloc
malloc
strrchr

kernel32

Sleep
CreateEventA
SetEvent
DeleteCriticalSection
LeaveCriticalSection
GetVersion
GetSystemInfo
GetProcAddress
GetVersionExA
SetErrorMode
LoadLibraryA
FreeLibrary
InterlockedDecrement
ResetEvent
GetLastError
WaitForSingleObject
CloseHandle
GetCurrentThreadId
GetThreadPriority
SetThreadPriority
ResumeThread
SuspendThread
GetTickCount
DisableThreadLibraryCalls
InitializeCriticalSection
InterlockedIncrement
GetSystemDirectoryA
EnterCriticalSection

user32

CharNextA
GetSystemMetrics
PeekMessageA
DispatchMessageA
GetMessageA
PostMessageA
PostThreadMessageA
KillTimer
SetTimer
CharLowerA

advapi32

RegOpenKeyExA
RegSetValueExA
RegEnumKeyExA
RegQueryValueExA
RegCloseKey
RegEnumKeyA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyA
RegSetValueA
RegOpenKeyA
RegQueryValueA

Exports

Exports

RNGetRootObjectContext
RNGetRootObjectFactory
RNSetupObjectBroker
RNShutdownObjectBroker
SetDLLAccessPath

Sections

.text
Size: 128KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Common/pnen3260.dll
.dll windows:4 windows x86 arch:x86

410ddc106bb9a7f75f0d6302cecc9aa1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

mktime
_adjust_fdiv
_initterm
_onexit
__dllonexit
sscanf
_access
_chmod
fgets
strtok
_strnicmp
fputs
rename
fopen
fread
fclose
memcpy
memset
time
srand
rand
_vsnprintf
_ftol
getenv
memmove
isspace
strcspn
strspn
isupper
tolower
localtime
_strcmpi
_putenv
_stat
fseek
fwrite
atof
strtod
qsort
isalpha
islower
isxdigit
_timezone
_tzset
_endthreadex
_beginthreadex
??3@YAXPAX@Z
_errno
_fstat
_chsize
strftime
strpbrk
_i64toa
_snprintf
fprintf
strtoul
_assert
calloc
_CIpow
ceil
iscntrl
toupper
_mbctype
strrchr
strtol
isdigit
atol
sprintf
free
realloc
malloc
strncmp
_purecall
strstr
strncpy
_stricmp
atoi
strchr
printf
??2@YAPAXI@Z
__CxxFrameHandler
_findfirst
vfprintf
_findclose
gmtime
strcmp
_write
_read
_unlink
_lseek
_sopen
_tell
_creat
_close
_open
_getcwd
_strlwr
_chdir
_itoa
_except_handler3
_ftime
_findnext

kernel32

GetDiskFreeSpaceA
DeleteFileA
GetLastError
ResetEvent
SetEvent
RemoveDirectoryA
CreateDirectoryA
SuspendThread
WaitForSingleObject
Sleep
ResumeThread
SetThreadPriority
GetThreadPriority
CloseHandle
GetFileSize
CreateFileA
FindClose
FindNextFileA
FindFirstFileA
GetFileAttributesA
GetTempPathA
GetWindowsDirectoryA
SetFileAttributesA
MoveFileA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
DeleteCriticalSection
InitializeCriticalSection
CancelIo
GetCurrentProcessId
EnterCriticalSection
QueryPerformanceCounter
QueryPerformanceFrequency
GetProcAddress
LoadLibraryA
FreeLibrary
GetSystemInfo
GetVersionExA
GetVersion
GetModuleFileNameA
GetTickCount
ExitProcess
lstrlenA
GetDriveTypeA
GetVolumeInformationA
GetLogicalDrives
GetLogicalDriveStringsA
GlobalMemoryStatus
GetModuleHandleA
GetSystemDirectoryA
GetSystemDefaultLCID
GetProfileStringA
WinExec
WaitForMultipleObjects
TerminateThread
CreateThread
LeaveCriticalSection
SetErrorMode
GetTempFileNameA
GetCurrentThreadId
CreateEventA

user32

DdeUninitialize
DdeFreeStringHandle
DdeDisconnect
DdeFreeDataHandle
DdeInitializeA
KillTimer
DdeConnect
DdeCreateStringHandleA
PostThreadMessageA
PostMessageA
GetMessageA
DispatchMessageA
SetTimer
DdeGetData
DdeClientTransaction
PeekMessageA
GetActiveWindow
SetFocus
IsChild
GetForegroundWindow
LoadCursorA
SystemParametersInfoA
GetClassNameA
GetWindowLongA
DefWindowProcA
SendMessageA
UnregisterClassA
RegisterWindowMessageA
GetSystemMetrics
wsprintfA
SendMessageTimeoutA
CharNextA
CharPrevA
TranslateMessage
IsDialogMessageA
PostQuitMessage
DestroyWindow
RegisterClassExA
GetClassInfoA
EnumWindows
SetWindowLongA
RegisterClassA
CreateWindowExA

advapi32

RegEnumKeyExA
RegDeleteKeyA
RegQueryValueA
RegQueryValueExA
RegCreateKeyA
RegOpenKeyExA
RegEnumKeyA
RegOpenKeyA
RegSetValueA
RegCloseKey

ole32

CoCreateGuid
CoCreateInstance
CoUninitialize
CoInitializeEx

oleaut32

SysFreeString
VariantClear
VarBstrCmp
VariantInit
SysAllocString
SysStringLen

winmm

waveOutGetDevCapsA
waveOutReset
waveOutUnprepareHeader
mixerGetNumDevs
mixerGetID
mixerClose
waveOutGetVolume
mixerGetControlDetailsA
waveOutSetVolume
mixerSetControlDetails
waveOutPause
waveOutOpen
waveOutClose
waveOutPrepareHeader
waveOutWrite
waveOutRestart
mixerGetLineInfoA
waveOutGetPosition
mixerGetLineControlsA
mixerOpen

Exports

Exports

?AsyncNotifyProc@CAsyncNetThread@@KGJPAUHWND__@@IIJ@Z
?AsyncNotifyProc@CAsyncSockN@@KGJPAUHWND__@@IIJ@Z
?DdeCallback@@YGPAUHDDEDATA__@@IIPAUHCONV__@@PAUHSZ__@@1PAU1@KK@Z
?WaveOutWndProc@CAudioOutWindows@@SGJPAUHWND__@@IIJ@Z
CloseEngine
CreateEngine
SetDLLAccessPath

Sections

.text
Size: 892KB - Virtual size: 888KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 284KB - Virtual size: 282KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_DATA
Size: 4KB - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Common/pngu3267.dll
.dll windows:4 windows x86 arch:x86

6ccc7492ef8eec7391b07abb2d6b8e27

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

printf
_beginthreadex
_endthreadex
_unlink
_write
_read
_tell
_lseek
_sopen
_open
_creat
_close
_putenv
_itoa
_ftime
??3@YAXPAX@Z
_purecall
memset
floor
_ftol
memcpy
??2@YAPAXI@Z
sqrt
strlen
strcpy
free
malloc
realloc
strncpy
mbstowcs
strcmp
ceil
abs
strncmp
isspace
strcspn
_vsnprintf
_ismbcspace
memmove
sprintf
strstr
_stricmp
atoi
strftime
localtime
time
strchr
strrchr
_mbctype
_getmbcp
_errno
_fstat
_chsize
_lseeki64
_telli64
__dllonexit
_onexit
_initterm
_adjust_fdiv

kernel32

GetTempPathA
GetSystemInfo
CreateFileMappingA
GetTempFileNameA
CreateFileA
GetFileSize
GetLastError
CloseHandle
SetErrorMode
GetModuleFileNameA
GetDiskFreeSpaceA
MapViewOfFile
lstrcpyA
InterlockedDecrement
InterlockedIncrement
Sleep
GetModuleHandleA
DisableThreadLibraryCalls
GetProcAddress
FreeLibrary
GetCurrentThreadId
GetVersionExA
LocalAlloc
LocalFree
UnmapViewOfFile
GetVersion
LoadLibraryA
GetTickCount
CreateEventA
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection
GetThreadPriority
SetThreadPriority
WaitForSingleObject
SuspendThread
ResumeThread
ResetEvent
SetEvent

user32

PeekMessageA
IsDialogMessageA
ValidateRect
InvalidateRect
UpdateWindow
ClientToScreen
GetMenu
AdjustWindowRect
GetClientRect
IsIconic
GetWindowPlacement
CreateWindowExA
IsWindow
DestroyWindow
GetParent
IsWindowVisible
EnableWindow
PostQuitMessage
SetScrollRange
GetScrollRange
UnhookWindowsHookEx
SetWindowsHookExA
GetDC
ReleaseDC
LoadBitmapA
GetSysColor
GetMenuItemRect
GetSystemMetrics
SetMenu
SendMessageA
SetWindowLongA
GetWindowLongA
LoadCursorA
UnregisterClassA
DefWindowProcA
LoadIconA
RegisterClassA
SetCursorPos
MessageBeep
OffsetRect
IntersectRect
DrawFrameControl
ChildWindowFromPointEx
DispatchMessageA
TranslateMessage
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
GetCursorPos
GetCursor
GetIconInfo
KillTimer
SetTimer
SetWindowsHookA
MessageBoxA
UnhookWindowsHook
EndPaint
BeginPaint
EndDialog
DialogBoxIndirectParamA
CreateDialogIndirectParamA
GetWindowDC
FillRect
DrawFocusRect
DrawTextA
DrawIconEx
DrawIcon
keybd_event
GetMenuItemInfoA
SetMenuItemInfoA
TrackPopupMenu
TrackPopupMenuEx
CreatePopupMenu
CreateMenu
RemoveMenu
GetMenuStringA
DrawMenuBar
InsertMenuA
SetWindowTextA
CheckMenuItem
GetMenuItemID
GetMenuItemCount
GetMenuState
EnableMenuItem
DestroyMenu
RemovePropA
GetPropA
SetPropA
GetScrollInfo
SetScrollInfo
SetScrollPos
GetScrollPos
IsWindowEnabled
GetActiveWindow
InsertMenuItemA
CharNextA
PtInRect
SetForegroundWindow
SetFocus
SetWindowPlacement
GetForegroundWindow
GetWindowThreadProcessId
AttachThreadInput
IsZoomed
SetParent
ScrollWindowEx
GetFocus
GetDlgItem
GetClassLongA
SetCursor
GetClassNameA
GetSubMenu
PostMessageA
CallWindowProcA
GetWindowTextLengthA
GetWindowTextA
SetWindowPos
CallNextHookEx
ShowWindow
GetWindow
SetActiveWindow
ScreenToClient
BringWindowToTop
MapWindowPoints
GetUpdateRect
ReleaseCapture
SetCapture
SystemParametersInfoA
RedrawWindow
GetWindowRect
CheckMenuRadioItem
ModifyMenuA
PostThreadMessageA
GetMessageA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegDeleteKeyA
RegOpenKeyA
RegEnumKeyExA
RegQueryValueA
RegSetValueA
RegCreateKeyA
RegDeleteValueA
RegEnumKeyA
RegSetValueExA

gdi32

Ellipse
GetBkMode
GetROP2
GetTextColor
GetClipRgn
GetCurrentObject
SetWindowExtEx
SetViewportExtEx
IntersectClipRect
CreateRectRgn
StretchBlt
CreateBitmap
GetTextMetricsA
SetMapMode
GetBkColor
ExtFloodFill
FillRgn
GetTextExtentPoint32A
ExtCreateRegion
SetViewportOrgEx
RoundRect
Rectangle
Polygon
SetPolyFillMode
LineTo
Polyline
MoveToEx
Pie
Arc
SelectClipRgn
SetTextColor
SetBkColor
SetROP2
SetBkMode
CreateRectRgnIndirect
CreatePen
ExtCreatePen
GetDeviceCaps
TextOutA
GetDCOrgEx
GetTextFaceA
CreateFontIndirectA
GetBitmapBits
StretchDIBits
GetRgnBox
CombineRgn
OffsetRgn
PtInRegion
CreatePolygonRgn
EqualRgn
DeleteObject
CreateHatchBrush
CreateSolidBrush
GetClipBox
GetRegionData
GetStockObject
DeleteDC
BitBlt
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCA
CreateDIBSection
GetObjectA
CreateDIBitmap
SetPixel
GetPixel
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
CreateFontA

comctl32

ord17
PropertySheetA
CreatePropertySheetPageA

comdlg32

GetSaveFileNameA
GetOpenFileNameA

shell32

SHGetPathFromIDListA
SHGetMalloc
SHBrowseForFolderA

oleaut32

SysAllocString

Exports

Exports

??0CPNAccessibility@@QAE@ABV0@@Z
??0CPNAccessibility@@QAE@XZ
??0CPNAnimButton@@QAE@ABV0@@Z
??0CPNAnimButton@@QAE@XZ
??0CPNAnimateCtl@@QAE@ABV0@@Z
??0CPNAnimateCtl@@QAE@XZ
??0CPNArrowButton@@QAE@ABV0@@Z
??0CPNArrowButton@@QAE@XZ
??0CPNBitmapDC@@QAE@AAVCPNBitmapImage@@@Z
??0CPNBitmapDC@@QAE@ABV0@@Z
??0CPNBitmapImage@@QAE@AAUtagPN_BITMAPINFO@@@Z
??0CPNBitmapImage@@QAE@ABV0@@Z
??0CPNBitmapImage@@QAE@XZ
??0CPNBrowseDialog@@QAE@ABV0@@Z
??0CPNBrowseDialog@@QAE@PAVCPNWindow@@@Z
??0CPNBrowseDialog@@QAE@XZ
??0CPNBrush@@QAE@AAVCPNColor@@J@Z
??0CPNBrush@@QAE@ABV0@@Z
??0CPNBrush@@QAE@XZ
??0CPNBtnObserver@@QAE@ABV0@@Z
??0CPNBtnObserver@@QAE@PAVXPNButton@@@Z
??0CPNButton@@QAE@ABV0@@Z
??0CPNButton@@QAE@XZ
??0CPNCheckButton@@QAE@ABV0@@Z
??0CPNCheckButton@@QAE@XZ
??0CPNCheckedListbox@@QAE@ABV0@@Z
??0CPNCheckedListbox@@QAE@XZ
??0CPNClientDC@@QAE@ABV0@@Z
??0CPNClientDC@@QAE@PAVCPNWindow@@@Z
??0CPNColor@@QAE@AAK@Z
??0CPNColor@@QAE@ABV0@@Z
??0CPNColor@@QAE@EEE@Z
??0CPNColor@@QAE@H@Z
??0CPNColor@@QAE@XZ
??0CPNColorMap@@QAE@ABV0@@Z
??0CPNColorMap@@QAE@HPBE00@Z
??0CPNColorMap@@QAE@XZ
??0CPNColorSelection@@QAE@ABV0@@Z
??0CPNColorSelection@@QAE@XZ
??0CPNConstraintLayoutMgr@@QAE@ABV0@@Z
??0CPNConstraintLayoutMgr@@QAE@PAUIUnknown@@@Z
??0CPNConstraintLayoutMgr@@QAE@PAUIUnknown@@ABU_PNxRect@@@Z
??0CPNControl@@QAE@ABV0@@Z
??0CPNControl@@QAE@XZ
??0CPNCursor@@QAE@ABV0@@Z
??0CPNCursor@@QAE@XZ
??0CPNCustomFrame@@QAE@ABV0@@Z
??0CPNCustomFrame@@QAE@PAVCPNWindow@@PAVCPNImage@@1@Z
??0CPNCustomMenu@@QAE@ABV0@@Z
??0CPNCustomMenu@@QAE@XZ
??0CPNCustomText@@QAE@ABV0@@Z
??0CPNCustomText@@QAE@XZ
??0CPNDC@@QAE@AAPAX@Z
??0CPNDC@@QAE@ABV0@@Z
??0CPNDC@@QAE@PAUHDC__@@@Z
??0CPNDC@@QAE@XZ
??0CPNDialog@@QAE@ABV0@@Z
??0CPNDialog@@QAE@KPAVCPNWindow@@@Z
??0CPNDialog@@QAE@XZ
??0CPNDrawHelper@@QAE@ABV0@@Z
??0CPNDrawHelper@@QAE@XZ
??0CPNEdit@@QAE@ABV0@@Z
??0CPNEdit@@QAE@XZ
??0CPNEvent@@QAE@ABV0@@Z
??0CPNEvent@@QAE@KKPAVCPNRouter@@KKKK@Z
??0CPNFont@@QAE@ABQAX@Z
??0CPNFont@@QAE@ABV0@@Z
??0CPNFont@@QAE@HHHHPBDH@Z
??0CPNFont@@QAE@XZ
??0CPNFrame@@QAE@ABV0@@Z
??0CPNFrame@@QAE@XZ
??0CPNGifImage@@QAE@ABV0@@Z
??0CPNGifImage@@QAE@XZ
??0CPNGraphicResource@@QAE@ABV0@@Z
??0CPNGraphicResource@@QAE@XZ
??0CPNGroupBox@@QAE@ABV0@@Z
??0CPNGroupBox@@QAE@XZ
??0CPNIcon@@QAE@ABV0@@Z
??0CPNIcon@@QAE@XZ
??0CPNImage@@QAE@ABV0@@Z
??0CPNImage@@QAE@XZ
??0CPNImageBorder@@QAE@ABV0@@Z
??0CPNImageBorder@@QAE@XZ
??0CPNImageButton@@QAE@ABV0@@Z
??0CPNImageButton@@QAE@XZ
??0CPNImageControl@@QAE@ABV0@@Z
??0CPNImageControl@@QAE@XZ
??0CPNImageSlider@@QAE@ABV0@@Z
??0CPNImageSlider@@QAE@XZ
??0CPNListBox@@QAE@ABV0@@Z
??0CPNListBox@@QAE@XZ
??0CPNMapPtrToPtr@@QAE@ABV0@@Z
??0CPNMemoryDC@@QAE@ABV0@@Z
??0CPNMemoryDC@@QAE@PAVCPNDC@@AAVCPNxRect@@@Z
??0CPNMenu@@QAE@ABV0@@Z
??0CPNMenu@@QAE@K@Z
??0CPNMenu@@QAE@XZ
??0CPNMenuButton@@QAE@ABV0@@Z
??0CPNMenuButton@@QAE@XZ
??0CPNMessageBox@@QAE@ABV0@@Z
??0CPNMessageBox@@QAE@XZ
??0CPNMultipleWindowUpdate@@QAE@ABV0@@Z
??0CPNMultipleWindowUpdate@@QAE@XZ
??0CPNObject@@QAE@ABV0@@Z
??0CPNObject@@QAE@XZ
??0CPNOpenFileDialog@@QAE@ABV0@@Z
??0CPNOpenFileDialog@@QAE@PAVCPNWindow@@@Z
??0CPNOpenFileDialog@@QAE@XZ
??0CPNPaintDC@@QAE@ABU_PNxWindow@@@Z
??0CPNPaintDC@@QAE@ABV0@@Z
??0CPNPaintDC@@QAE@PAVCPNWindow@@@Z
??0CPNPen@@QAE@AAVCPNColor@@JJ@Z
??0CPNPen@@QAE@ABV0@@Z
??0CPNPen@@QAE@XZ
??0CPNPopupList@@QAE@ABV0@@Z
??0CPNPopupList@@QAE@XZ
??0CPNProgress@@QAE@ABV0@@Z
??0CPNProgress@@QAE@XZ
??0CPNPropertyPage@@IAE@KPBD@Z
??0CPNPropertyPage@@IAE@XZ
??0CPNPropertyPage@@QAE@ABV0@@Z
??0CPNPropertySheet@@QAE@ABV0@@Z
??0CPNPropertySheet@@QAE@K@Z
??0CPNPropertySheet@@QAE@XZ
??0CPNRadioBtn@@QAE@ABV0@@Z
??0CPNRadioBtn@@QAE@XZ
??0CPNRadioGroup@@QAE@ABV0@@Z
??0CPNRadioGroup@@QAE@XZ
??0CPNRegion@@QAE@ABV0@@Z
??0CPNRegion@@QAE@XZ
??0CPNRouter@@QAE@ABV0@@Z
??0CPNRouter@@QAE@XZ
??0CPNScreenDC@@QAE@ABV0@@Z
??0CPNScreenDC@@QAE@XZ
??0CPNScrollBar@@QAE@ABV0@@Z
??0CPNScrollBar@@QAE@XZ
??0CPNScrollButton@@QAE@ABV0@@Z
??0CPNScrollButton@@QAE@XZ
??0CPNScrollHelper@@QAE@ABV0@@Z
??0CPNScrollHelper@@QAE@PAVXPNButton@@K@Z
??0CPNScrollingText@@QAE@ABV0@@Z
??0CPNScrollingText@@QAE@XZ
??0CPNSlider@@QAE@ABV0@@Z
??0CPNSlider@@QAE@XZ
??0CPNSystemInfo@@QAE@ABV0@@Z
??0CPNSystemInfo@@QAE@XZ
??0CPNText@@QAE@ABV0@@Z
??0CPNText@@QAE@XZ
??0CPNTextWithLink@@QAE@ABV0@@Z
??0CPNTextWithLink@@QAE@XZ
??0CPNTimer@@QAE@ABV0@@Z
??0CPNTimer@@QAE@KHPAPAV0@@Z
??0CPNTimer@@QAE@XZ
??0CPNTipManager@@QAE@ABV0@@Z
??0CPNTipManager@@QAE@PAVCPNWindow@@@Z
??0CPNToolTip@@QAE@ABV0@@Z
??0CPNToolTip@@QAE@XZ
??0CPNTreeControl@@QAE@ABV0@@Z
??0CPNTreeControl@@QAE@XZ
??0CPNWindow@@QAE@ABV0@@Z
??0CPNWindow@@QAE@XZ
??0CPNWindowDC@@QAE@ABV0@@Z
??0CPNWindowDC@@QAE@PAVCPNWindow@@@Z
??0CPNxPoint@@QAE@ABU_PNxPoint@@@Z
??0CPNxPoint@@QAE@ABVCPNxSize@@@Z
??0CPNxPoint@@QAE@JJ@Z
??0CPNxPoint@@QAE@XZ
??0CPNxRect@@QAE@ABU_PNxRect@@@Z
??0CPNxRect@@QAE@ABVCPNxPoint@@ABVCPNxSize@@@Z
??0CPNxRect@@QAE@JJJJ@Z
??0CPNxRect@@QAE@XZ
??0CPNxSize@@QAE@ABU_PNxSize@@@Z
??0CPNxSize@@QAE@ABVCPNxPoint@@@Z
??0CPNxSize@@QAE@JJ@Z
??0CPNxSize@@QAE@XZ
??0XPNAnimButton@@IAE@XZ
??0XPNAnimButton@@QAE@ABV0@@Z
??0XPNAnimateCtl@@IAE@XZ
??0XPNAnimateCtl@@QAE@ABV0@@Z
??0XPNArrowButton@@IAE@XZ
??0XPNArrowButton@@QAE@ABV0@@Z
??0XPNBitmapDC@@QAE@AAVCPNBitmapImage@@@Z
??0XPNBitmapDC@@QAE@ABV0@@Z
??0XPNBitmapImage@@IAE@AAUtagPN_BITMAPINFO@@@Z
??0XPNBitmapImage@@IAE@XZ
??0XPNBitmapImage@@QAE@ABV0@@Z
??0XPNBrowseDialog@@QAE@ABV0@@Z
??0XPNBrowseDialog@@QAE@PAVCPNWindow@@@Z
??0XPNBrowseDialog@@QAE@XZ
??0XPNBrush@@IAE@AAVCPNColor@@J@Z
??0XPNBrush@@IAE@XZ
??0XPNBrush@@QAE@ABV0@@Z
??0XPNButton@@QAE@ABV0@@Z
??0XPNButton@@QAE@XZ
??0XPNCheckButton@@QAE@ABV0@@Z
??0XPNCheckButton@@QAE@XZ
??0XPNClientDC@@QAE@ABV0@@Z
??0XPNClientDC@@QAE@XZ
??0XPNColorSelection@@QAE@ABV0@@Z
??0XPNColorSelection@@QAE@XZ
??0XPNControl@@QAE@ABV0@@Z
??0XPNControl@@QAE@XZ
??0XPNCursor@@QAE@ABV0@@Z
??0XPNCursor@@QAE@XZ
??0XPNCustomButton@@QAE@ABV0@@Z
??0XPNCustomButton@@QAE@XZ
??0XPNCustomText@@QAE@ABV0@@Z
??0XPNCustomText@@QAE@XZ
??0XPNDC@@AAE@AAPAX@Z
??0XPNDC@@QAE@ABV0@@Z
??0XPNDC@@QAE@XZ
??0XPNDialog@@QAE@ABV0@@Z
??0XPNDialog@@QAE@KPAVCPNWindow@@@Z
??0XPNDialog@@QAE@XZ
??0XPNEdit@@IAE@XZ
??0XPNEdit@@QAE@ABV0@@Z
??0XPNFont@@IAE@HHHHPBDH@Z
??0XPNFont@@IAE@XZ
??0XPNFont@@QAE@ABV0@@Z
??0XPNFrame@@QAE@ABV0@@Z
??0XPNFrame@@QAE@XZ
??0XPNGifImage@@IAE@XZ
??0XPNGifImage@@QAE@ABV0@@Z
??0XPNGroupBox@@QAE@ABV0@@Z
??0XPNGroupBox@@QAE@XZ
??0XPNIcon@@QAE@ABV0@@Z
??0XPNIcon@@QAE@XZ
??0XPNImage@@QAE@ABV0@@Z
??0XPNImage@@QAE@XZ
??0XPNImageButton@@IAE@XZ
??0XPNImageButton@@QAE@ABV0@@Z
??0XPNImageSlider@@QAE@ABV0@@Z
??0XPNImageSlider@@QAE@XZ
??0XPNListBox@@IAE@XZ
??0XPNListBox@@QAE@ABV0@@Z
??0XPNMemDC@@QAE@ABV0@@Z
??0XPNMemDC@@QAE@XZ
??0XPNMenu@@QAE@ABV0@@Z
??0XPNMenu@@QAE@K@Z
??0XPNMenu@@QAE@XZ
??0XPNMenuButton@@IAE@XZ
??0XPNMenuButton@@QAE@ABV0@@Z
??0XPNMessageBox@@IAE@XZ
??0XPNMessageBox@@QAE@ABV0@@Z
??0XPNMultipleWindowUpdate@@QAE@ABV0@@Z
??0XPNMultipleWindowUpdate@@QAE@XZ
??0XPNOpenFileDialog@@QAE@ABV0@@Z
??0XPNOpenFileDialog@@QAE@PAVCPNWindow@@@Z
??0XPNOpenFileDialog@@QAE@XZ
??0XPNPaintDC@@QAE@ABU_PNxWindow@@@Z
??0XPNPaintDC@@QAE@ABV0@@Z
??0XPNPaintDC@@QAE@PAVCPNWindow@@@Z
??0XPNPen@@QAE@AAVCPNColor@@JJ@Z
??0XPNPen@@QAE@ABV0@@Z
??0XPNPen@@QAE@XZ
??0XPNPopupList@@IAE@XZ
??0XPNPopupList@@QAE@ABV0@@Z
??0XPNProgress@@IAE@XZ
??0XPNProgress@@QAE@ABV0@@Z
??0XPNPropertyPage@@IAE@KPBD@Z
??0XPNPropertyPage@@IAE@XZ
??0XPNPropertyPage@@QAE@ABV0@@Z
??0XPNPropertySheet@@IAE@K@Z
??0XPNPropertySheet@@QAE@ABV0@@Z
??0XPNRegion@@QAE@ABV0@@Z
??0XPNRegion@@QAE@XZ
??0XPNScreenDC@@QAE@ABV0@@Z
??0XPNScreenDC@@QAE@XZ
??0XPNScrollBar@@QAE@ABV0@@Z
??0XPNScrollBar@@QAE@XZ
??0XPNScrollButton@@IAE@XZ
??0XPNScrollButton@@QAE@ABV0@@Z
??0XPNScrollingText@@IAE@XZ
??0XPNScrollingText@@QAE@ABV0@@Z
??0XPNSlider@@QAE@ABV0@@Z
??0XPNSlider@@QAE@XZ
??0XPNTabControl@@QAE@ABV0@@Z
??0XPNTabControl@@QAE@XZ
??0XPNText@@QAE@ABV0@@Z
??0XPNText@@QAE@XZ
??0XPNTextWithLink@@QAE@ABV0@@Z
??0XPNTextWithLink@@QAE@XZ
??0XPNTimer@@IAE@KHPAPAV0@@Z
??0XPNTimer@@IAE@XZ
??0XPNTimer@@QAE@ABV0@@Z
??0XPNTipManager@@IAE@PAVCPNWindow@@@Z
??0XPNTipManager@@QAE@ABV0@@Z
??0XPNToolTip@@IAE@XZ
??0XPNToolTip@@QAE@ABV0@@Z
??0XPNTreeControl@@IAE@XZ
??0XPNTreeControl@@QAE@ABV0@@Z
??0XPNWindow@@QAE@ABV0@@Z
??0XPNWindow@@QAE@XZ
??0XPNWindowDC@@QAE@ABV0@@Z
??0XPNWindowDC@@QAE@XZ
??0XPNWizardManager@@IAE@PAVCPNWindow@@KK@Z
??0XPNWizardManager@@IAE@PAVCPNWindow@@PBDK@Z
??0XPNWizardManager@@IAE@XZ
??0XPNWizardManager@@QAE@ABV0@@Z
??0XPNWizardPage@@IAE@KPBD@Z
??0XPNWizardPage@@IAE@XZ
??0XPNWizardPage@@QAE@ABV0@@Z
??0xPNRadioBtn@@QAE@ABV0@@Z
??0xPNRadioBtn@@QAE@XZ
??1CPNAccessibility@@UAE@XZ
??1CPNAnimButton@@UAE@XZ
??1CPNAnimateCtl@@UAE@XZ
??1CPNArrowButton@@UAE@XZ
??1CPNBitmapDC@@UAE@XZ
??1CPNBitmapImage@@UAE@XZ
??1CPNBrowseDialog@@UAE@XZ
??1CPNBrush@@UAE@XZ
??1CPNBtnObserver@@UAE@XZ
??1CPNButton@@UAE@XZ
??1CPNCheckButton@@UAE@XZ
??1CPNCheckedListbox@@UAE@XZ
??1CPNClientDC@@UAE@XZ
??1CPNColor@@UAE@XZ
??1CPNColorMap@@UAE@XZ
??1CPNColorSelection@@UAE@XZ
??1CPNConstraintLayoutMgr@@QAE@XZ
??1CPNControl@@UAE@XZ
??1CPNCursor@@UAE@XZ
??1CPNCustomFrame@@UAE@XZ
??1CPNCustomMenu@@UAE@XZ
??1CPNCustomText@@UAE@XZ
??1CPNDC@@UAE@XZ
??1CPNDialog@@UAE@XZ
??1CPNDrawHelper@@UAE@XZ
??1CPNEdit@@UAE@XZ
??1CPNEvent@@UAE@XZ
??1CPNFont@@UAE@XZ
??1CPNFrame@@UAE@XZ
??1CPNGifImage@@UAE@XZ
??1CPNGraphicResource@@UAE@XZ
??1CPNGroupBox@@UAE@XZ
??1CPNIcon@@UAE@XZ
??1CPNImage@@UAE@XZ
??1CPNImageBorder@@UAE@XZ
??1CPNImageButton@@UAE@XZ
??1CPNImageControl@@UAE@XZ
??1CPNImageSlider@@UAE@XZ
??1CPNListBox@@UAE@XZ
??1CPNMemoryDC@@UAE@XZ
??1CPNMenu@@UAE@XZ
??1CPNMenuButton@@UAE@XZ
??1CPNMessageBox@@UAE@XZ
??1CPNMultipleWindowUpdate@@UAE@XZ
??1CPNObject@@UAE@XZ
??1CPNOpenFileDialog@@UAE@XZ
??1CPNPaintDC@@UAE@XZ
??1CPNPen@@UAE@XZ
??1CPNPopupList@@UAE@XZ
??1CPNProgress@@UAE@XZ
??1CPNPropertyPage@@UAE@XZ
??1CPNPropertySheet@@UAE@XZ
??1CPNRadioBtn@@UAE@XZ
??1CPNRadioGroup@@UAE@XZ
??1CPNRegion@@UAE@XZ
??1CPNRouter@@UAE@XZ
??1CPNScreenDC@@UAE@XZ
??1CPNScrollBar@@UAE@XZ
??1CPNScrollButton@@UAE@XZ
??1CPNScrollHelper@@UAE@XZ
??1CPNScrollingText@@UAE@XZ
??1CPNSlider@@UAE@XZ
??1CPNSystemInfo@@UAE@XZ
??1CPNText@@UAE@XZ
??1CPNTextWithLink@@UAE@XZ
??1CPNTimer@@MAE@XZ
??1CPNTipManager@@UAE@XZ
??1CPNToolTip@@UAE@XZ
??1CPNTreeControl@@UAE@XZ
??1CPNWindow@@UAE@XZ
??1CPNWindowDC@@UAE@XZ
??1XPNAnimButton@@MAE@XZ
??1XPNAnimateCtl@@MAE@XZ
??1XPNArrowButton@@MAE@XZ
??1XPNBitmapDC@@UAE@XZ
??1XPNBitmapImage@@MAE@XZ
??1XPNBrowseDialog@@UAE@XZ
??1XPNBrush@@MAE@XZ
??1XPNButton@@UAE@XZ
??1XPNCheckButton@@UAE@XZ
??1XPNClientDC@@UAE@XZ
??1XPNColorSelection@@UAE@XZ
??1XPNControl@@UAE@XZ
??1XPNCursor@@UAE@XZ
??1XPNCustomButton@@UAE@XZ
??1XPNCustomText@@UAE@XZ
??1XPNDC@@UAE@XZ
??1XPNDialog@@UAE@XZ
??1XPNEdit@@MAE@XZ
??1XPNFont@@MAE@XZ
??1XPNFrame@@UAE@XZ
??1XPNGifImage@@MAE@XZ
??1XPNGroupBox@@UAE@XZ
??1XPNIcon@@UAE@XZ
??1XPNImage@@UAE@XZ
??1XPNImageButton@@MAE@XZ
??1XPNImageSlider@@UAE@XZ
??1XPNListBox@@MAE@XZ
??1XPNMemDC@@UAE@XZ
??1XPNMenu@@UAE@XZ
??1XPNMenuButton@@MAE@XZ
??1XPNMessageBox@@MAE@XZ
??1XPNMultipleWindowUpdate@@UAE@XZ
??1XPNOpenFileDialog@@UAE@XZ
??1XPNPaintDC@@UAE@XZ
??1XPNPen@@UAE@XZ
??1XPNPopupList@@MAE@XZ
??1XPNProgress@@MAE@XZ
??1XPNPropertyPage@@UAE@XZ
??1XPNPropertySheet@@UAE@XZ
??1XPNRegion@@UAE@XZ
??1XPNScreenDC@@UAE@XZ
??1XPNScrollBar@@UAE@XZ
??1XPNScrollButton@@MAE@XZ
??1XPNScrollingText@@MAE@XZ
??1XPNSlider@@UAE@XZ
??1XPNTabControl@@UAE@XZ
??1XPNText@@UAE@XZ
??1XPNTextWithLink@@UAE@XZ
??1XPNTimer@@MAE@XZ
??1XPNTipManager@@UAE@XZ
??1XPNToolTip@@MAE@XZ
??1XPNTreeControl@@MAE@XZ
??1XPNWindow@@UAE@XZ
??1XPNWindowDC@@UAE@XZ
??1XPNWizardManager@@MAE@XZ
??1XPNWizardPage@@MAE@XZ
??1xPNRadioBtn@@UAE@XZ
??4CPNAccessibility@@QAEAAV0@ABV0@@Z
??4CPNAnimButton@@QAEAAV0@ABV0@@Z
??4CPNAnimateCtl@@QAEAAV0@ABV0@@Z
??4CPNArrowButton@@QAEAAV0@ABV0@@Z
??4CPNBitmapImage@@QAEAAV0@ABV0@@Z
??4CPNBrowseDialog@@QAEAAV0@ABV0@@Z
??4CPNBrush@@QAEAAV0@ABV0@@Z
??4CPNBtnObserver@@QAEAAV0@ABV0@@Z
??4CPNButton@@QAEAAV0@ABV0@@Z
??4CPNCheckButton@@QAEAAV0@ABV0@@Z
??4CPNCheckedListbox@@QAEAAV0@ABV0@@Z
??4CPNClientDC@@QAEAAV0@AAV0@@Z
??4CPNColor@@QAEAAV0@ABV0@@Z
??4CPNColorMap@@QAEAAV0@ABV0@@Z
??4CPNColorSelection@@QAEAAV0@ABV0@@Z
??4CPNConstraintLayoutMgr@@QAEAAV0@ABV0@@Z
??4CPNControl@@QAEAAV0@ABV0@@Z
??4CPNCursor@@QAEAAV0@ABV0@@Z
??4CPNCustomFrame@@QAEAAV0@ABV0@@Z
??4CPNCustomMenu@@QAEAAV0@ABV0@@Z
??4CPNCustomText@@QAEAAV0@ABV0@@Z
??4CPNDC@@QAEAAV0@AAV0@@Z
??4CPNDialog@@QAEAAV0@ABV0@@Z
??4CPNDrawHelper@@QAEAAV0@ABV0@@Z
??4CPNEdit@@QAEAAV0@ABV0@@Z
??4CPNEvent@@QAEAAV0@ABV0@@Z
??4CPNFont@@UAEABV0@ABV0@@Z
??4CPNFrame@@QAEAAV0@ABV0@@Z
??4CPNGifImage@@QAEAAV0@ABV0@@Z
??4CPNGraphicResource@@QAEAAV0@ABV0@@Z
??4CPNGroupBox@@QAEAAV0@ABV0@@Z
??4CPNIcon@@QAEAAV0@ABV0@@Z
??4CPNImage@@QAEAAV0@ABV0@@Z
??4CPNImageBorder@@QAEAAV0@ABV0@@Z
??4CPNImageButton@@QAEAAV0@ABV0@@Z
??4CPNImageControl@@QAEAAV0@ABV0@@Z
??4CPNImageSlider@@QAEAAV0@AAV0@@Z
??4CPNListBox@@QAEAAV0@ABV0@@Z
??4CPNMapLongToObj@@QAEAAV0@ABV0@@Z
??4CPNMapPtrToPtr@@QAEAAV0@ABV0@@Z
??4CPNMemoryDC@@QAEAAV0@AAV0@@Z
??4CPNMenu@@QAEAAV0@ABV0@@Z
??4CPNMenuButton@@QAEAAV0@ABV0@@Z
??4CPNMessageBox@@QAEAAV0@ABV0@@Z
??4CPNMultipleWindowUpdate@@QAEAAV0@ABV0@@Z
??4CPNObject@@QAEAAV0@ABV0@@Z
??4CPNOpenFileDialog@@QAEAAV0@ABV0@@Z
??4CPNPaintDC@@QAEAAV0@AAV0@@Z
??4CPNPen@@QAEAAV0@ABV0@@Z
??4CPNPopupList@@QAEAAV0@ABV0@@Z
??4CPNProgress@@QAEAAV0@ABV0@@Z
??4CPNPropertyPage@@QAEAAV0@ABV0@@Z
??4CPNPropertySheet@@QAEAAV0@ABV0@@Z
??4CPNPtrArray@@QAEAAV0@ABV0@@Z
??4CPNRadioBtn@@QAEAAV0@ABV0@@Z
??4CPNRadioGroup@@QAEAAV0@ABV0@@Z
??4CPNRegion@@QAEAAV0@AAV0@@Z
??4CPNRouter@@QAEAAV0@ABV0@@Z
??4CPNScreenDC@@QAEAAV0@AAV0@@Z
??4CPNScrollBar@@QAEAAV0@ABV0@@Z
??4CPNScrollButton@@QAEAAV0@ABV0@@Z
??4CPNScrollHelper@@QAEAAV0@ABV0@@Z
??4CPNScrollingText@@QAEAAV0@ABV0@@Z
??4CPNSlider@@QAEAAV0@AAV0@@Z
??4CPNString@@QAEABV0@PBE@Z
??4CPNSystemInfo@@QAEAAV0@ABV0@@Z
??4CPNText@@QAEAAV0@ABV0@@Z
??4CPNTextWithLink@@QAEAAV0@ABV0@@Z

Sections

.text
Size: 220KB - Virtual size: 216KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Common/pnrs3260.dll
.dll windows:4 windows x86 arch:x86

b45d5310f48a5575469b996418824522

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

malloc
free
_initterm
_adjust_fdiv
__dllonexit
_onexit
??2@YAPAXI@Z
_purecall
??3@YAXPAX@Z

kernel32

FindResourceA
LockResource
DisableThreadLibraryCalls
InterlockedDecrement
InterlockedIncrement
LoadResource

user32

AppendMenuA
GetMenuStringA
LoadMenuIndirectA
GetMenuState
GetMenuItemID
GetMenuItemCount
CreatePopupMenu
LoadIconA
LoadBitmapA
LoadStringA
LoadImageA
LoadCursorA

Exports

Exports

PNCreateInstance

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 484B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Common/rppr3260.dll
.dll windows:4 windows x86 arch:x86

268b370b66f229cdfbb467bc1a4ec919

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

__dllonexit
sprintf
_initterm
free
_onexit
printf
??2@YAPAXI@Z
_adjust_fdiv
malloc
realloc
_putenv
??3@YAXPAX@Z
_stricmp
strchr

kernel32

DisableThreadLibraryCalls
GetProcAddress
FreeLibrary
SetErrorMode
LoadLibraryA
InterlockedIncrement
InterlockedDecrement

user32

GetSystemMetrics
CharNextA

Exports

Exports

RPCreateInstance
SetDLLAccessPath

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 390B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Plugins/ExtResources/coreres.xrs
.dll windows:4 windows x86 arch:x86

f6f413da72842076a2a220c30a274ea6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

_adjust_fdiv
free
malloc
_initterm

kernel32

DisableThreadLibraryCalls

Sections

.text
Size: 4KB - Virtual size: 448B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 202B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Plugins/audplin.dll
.dll windows:4 windows x86 arch:x86

e8ad36e034c5dce240f5ea71a79e13e9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

malloc
realloc
free
_stricmp
??2@YAPAXI@Z
_initterm
_adjust_fdiv
__dllonexit
_onexit
atol
??3@YAXPAX@Z
_ftol
_purecall

kernel32

DisableThreadLibraryCalls
LocalFree
LoadLibraryA
GetProcAddress
SetErrorMode
FreeLibrary
LocalAlloc

Exports

Exports

CanUnload
RMACreateInstance

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Plugins/authmgr.dll
.dll windows:4 windows x86 arch:x86

7cd345e4a7dda2d229e66f79f59fc02d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

??2@YAPAXI@Z
_stricmp
strrchr
strncpy
_purecall
??3@YAXPAX@Z
free
_initterm
_adjust_fdiv
__dllonexit
_onexit
malloc
realloc
_strcmpi

kernel32

DisableThreadLibraryCalls

Exports

Exports

RMACreateInstance

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 444B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Plugins/clbascauth.dll
.dll windows:4 windows x86 arch:x86

aefbe779c4f303313e156e6cd06cd711

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

strchr
_strnicmp
sprintf
strncpy
??2@YAPAXI@Z
_purecall
malloc
realloc
isspace
free
??3@YAXPAX@Z
_vsnprintf
_initterm
_adjust_fdiv
__dllonexit
_onexit
_strcmpi

kernel32

DisableThreadLibraryCalls

Exports

Exports

RMACreateInstance
RMAShutdown

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 644B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 970B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Plugins/clntxres.dll
.dll windows:4 windows x86 arch:x86

0dfb556075b08ef627a30335419c6b78

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

__CxxFrameHandler
_errno
free
_initterm
malloc
_adjust_fdiv
__dllonexit
??2@YAPAXI@Z
_stricmp
strncpy
strtoul
_purecall
strstr
??3@YAXPAX@Z
_fstat
_chsize
_onexit
_close
_creat
_open
_sopen
_lseek
_tell
_read
_write
_unlink
realloc

kernel32

DisableThreadLibraryCalls
GetTempPathA
CloseHandle
CreateFileA
GetTempFileNameA
CreateFileMappingA
MapViewOfFile
GetFileSize
UnmapViewOfFile
GetSystemInfo
GetLastError
WideCharToMultiByte

Exports

Exports

CanUnload2
RMACreateInstance

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Plugins/fpsechnd.dll
.dll windows:4 windows x86 arch:x86

9ed71c9ddbcbe962ca9523a84da1f297

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

CryptGenRandom
CryptReleaseContext
CryptAcquireContextA

shlwapi

PathRemoveFileSpecA

msvcrt

memchr
strtoul
isxdigit
strtol
atoi
free
fclose
fread
malloc
ftell
fseek
fopen
_errno
remove
sprintf
strchr
fwrite
memmove
realloc
??2@YAPAXI@Z
_purecall
??3@YAXPAX@Z
sscanf
_adjust_fdiv
strncpy
_ftol
_strnicmp
time
rand
srand
memset
memcpy
_initterm
__dllonexit
_onexit
_vsnprintf
_stricmp

kernel32

GetModuleFileNameA
QueryPerformanceCounter
QueryPerformanceFrequency
DisableThreadLibraryCalls
GetTickCount

Exports

Exports

DeleteInfo
MigrateVersion
RMACreateInstance
UpdateBlobInfo

Sections

.text
Size: 128KB - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Plugins/httpfsys.dll
.dll windows:4 windows x86 arch:x86

e2e7b8cf861a8d8efc839f9503ebf80b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

isalnum
islower
isdigit
isalpha
_onexit
_initterm
_adjust_fdiv
_mbctype
realloc
isxdigit
tolower
_vsnprintf
??3@YAXPAX@Z
isupper
_findclose
_chsize
_findnext
_findfirst
strtok
_fstat
_errno
iscntrl
getenv
__CxxFrameHandler
strspn
strchr
isspace
ctime
fflush
fread
malloc
fprintf
calloc
sscanf
remove
strncpy
strstr
strncmp
free
fopen
strtol
memmove
_stricmp
fwrite
fclose
strrchr
_strnicmp
atol
_purecall
atoi
time
__dllonexit
??2@YAPAXI@Z
_strcmpi
_tell
_read
_write
_lseek
_sopen
_open
_creat
_close
_stat
_getcwd
_chdir
_unlink

kernel32

FreeLibrary
LocalFileTimeToFileTime
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetTempPathA
CreateFileA
GetFileSize
GetTempFileNameA
MapViewOfFile
GetLastError
CreateFileMappingA
GetSystemInfo
MoveFileA
UnmapViewOfFile
SetFileAttributesA
FindNextFileA
GetFileAttributesA
GetDriveTypeA
FindFirstFileA
RemoveDirectoryA
GetWindowsDirectoryA
FindClose
CreateDirectoryA
CloseHandle
ReleaseMutex
DeleteFileA
WaitForSingleObject
LoadLibraryA
CreateMutexA
GetModuleHandleA
GetTickCount
GetDiskFreeSpaceA
DisableThreadLibraryCalls
GetModuleFileNameA
GetProcAddress

user32

CharNextA
GetSystemMetrics
CharPrevA

Exports

Exports

CanUnload
RMACreateInstance
RMAShutdown

Sections

.text
Size: 132KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Plugins/hxsdp.dll
.dll windows:4 windows x86 arch:x86

bbda789d4c1c0ffaebd434c21fc570d4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

_stricmp
strchr
strtol
_purecall
??2@YAPAXI@Z
strtoul
_errno
strtod
strtok
_ftol
strncpy
??3@YAXPAX@Z
_vsnprintf
free
_initterm
malloc
_adjust_fdiv
__dllonexit
_onexit

kernel32

DisableThreadLibraryCalls

Exports

Exports

CanUnload
CanUnload2
RMACreateInstance

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Plugins/hxxml.dll
.dll windows:4 windows x86 arch:x86

92b96abc402f9771dddb589b4aeebd77

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

??2@YAPAXI@Z
strncpy
isspace
malloc
free
realloc
_purecall
??3@YAXPAX@Z
calloc
_initterm
_adjust_fdiv
memmove
abort

kernel32

DisableThreadLibraryCalls

Exports

Exports

CanUnload
CanUnload2
RMACreateInstance

Sections

.text
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Plugins/imgrender.dll
.dll windows:4 windows x86 arch:x86

d89d1bb497f8c54f776e24b65306e71d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

_setjmp3
longjmp
exit
sscanf
fprintf
_iob
getenv
malloc
strspn
toupper
abort
fread
_CIpow
strtod
_initterm
_adjust_fdiv
__dllonexit
_onexit
strtoul
free
_ftol
strcspn
strncpy
isdigit
isspace
strftime
??2@YAPAXI@Z
_strnicmp
isalnum
atoi
strrchr
tolower
isupper
memmove
realloc
calloc
strncmp
strchr
strncat
strtok
atol
strstr
_stricmp
sprintf
??3@YAXPAX@Z
_purecall
_vsnprintf
strtol
gmtime
fclose
_strcmpi
rand
srand
memset
memcpy
fflush
fopen

kernel32

QueryPerformanceFrequency
ExitProcess
GetTickCount
QueryPerformanceCounter
LocalFileTimeToFileTime
GetModuleFileNameA

user32

SetCursor
CharNextA
GetSystemMetrics
GetSysColor
LoadCursorA
GetCursor

Exports

Exports

CanUnload
CanUnload2
RMACreateInstance

Sections

.text
Size: 432KB - Virtual size: 430KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Plugins/memfsys.dll
.dll windows:4 windows x86 arch:x86

c453d1d2cdb3dcaae0a2f73219534518

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

_vsnprintf
_adjust_fdiv
_initterm
malloc
free
realloc
tolower
isupper
__dllonexit
??3@YAXPAX@Z
_purecall
strncpy
strtol
strchr
isdigit
_stricmp
strncmp
atol
_chsize
_fstat
_errno
__CxxFrameHandler
strrchr
_onexit
??2@YAPAXI@Z
_write
_strcmpi
_strnicmp
_read
_tell
_lseek
_sopen
_close
_unlink
_open
_creat

kernel32

CreateFileA
CloseHandle
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetTempPathA
CreateFileMappingA
MapViewOfFile
GetFileSize
UnmapViewOfFile
GetSystemInfo
GetLastError
DisableThreadLibraryCalls
GetTempFileNameA
DeleteFileA

user32

CharNextA
GetSystemMetrics

Exports

Exports

CanUnload
RMACreateInstance
RMAShutdown

Sections

.text
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 748B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Plugins/mp3fformat.dll
.dll windows:4 windows x86 arch:x86

ea6ed34feb8549f2d5bd9838656c3d3d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

malloc
_ftol
strncmp
memchr
atoi
_mbctype
strncpy
??3@YAXPAX@Z
_purecall
realloc
free
??2@YAPAXI@Z
_vsnprintf
strtok
_initterm
_adjust_fdiv
__dllonexit
_onexit

user32

GetSystemMetrics

kernel32

DisableThreadLibraryCalls

Exports

Exports

CanUnload2
RMACreateInstance

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Plugins/mp3render.dll
.dll windows:4 windows x86 arch:x86

ab5711636889b6075a11be4ab30a1106

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

free
_vsnprintf
_copysign
_assert
_CIpow
memmove
_initterm
malloc
rand
_adjust_fdiv
memcpy
??2@YAPAXI@Z
memchr
_stricmp
_ftol
??3@YAXPAX@Z
_purecall
memset
srand

kernel32

QueryPerformanceFrequency
DisableThreadLibraryCalls
QueryPerformanceCounter
ExitProcess
GetTickCount

Exports

Exports

CanUnload
RMACreateInstance

Sections

.text
Size: 96KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Plugins/mp4arender.dll
.dll windows:4 windows x86 arch:x86

bb72da97c1aefc861742f6041288a0d9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

_vsnprintf
_strcmpi
strchr
strrchr
strncmp
strtol
_purecall
_putenv
realloc
??3@YAXPAX@Z
??2@YAPAXI@Z
tolower
isupper
_adjust_fdiv
_initterm
_onexit
__dllonexit
memcpy
free
malloc
memset
memmove
srand
rand
_stricmp
_ftol
strncpy
strtod

kernel32

LoadLibraryA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
ExitProcess
DisableThreadLibraryCalls
QueryPerformanceFrequency
GetTickCount
SetErrorMode
FreeLibrary
QueryPerformanceCounter
GetProcAddress

Exports

Exports

CanUnload
RMACreateInstance
SetDLLAccessPath

Sections

.text
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Plugins/ntlmauth.dll
.dll windows:4 windows x86 arch:x86

a28ab463b24b72af2950a5ac75cd7f39

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

free
_initterm
_adjust_fdiv
??3@YAXPAX@Z
_onexit
realloc
malloc
strncpy
_strnicmp
_ftol
iscntrl
isspace
??2@YAPAXI@Z
strstr
_purecall
__dllonexit
_strcmpi

kernel32

DisableThreadLibraryCalls
GetSystemDirectoryA
LoadLibraryA
GetProcAddress
FreeLibrary

Exports

Exports

RMACreateInstance
RMAShutdown

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Plugins/oggfformat.dll
.dll windows:4 windows x86 arch:x86

2b3cf1eda17b2d6010e9e2a0030d158f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

??2@YAPAXI@Z
strchr
_strnicmp
free
memmove
realloc
memchr
calloc
floor
_ftol
qsort
_purecall
malloc
exit
frexp
_initterm
_adjust_fdiv
__dllonexit
_onexit
_CIpow

kernel32

DisableThreadLibraryCalls

Exports

Exports

RMACreateInstance

Sections

.text
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Plugins/pacplin.dll
.dll windows:4 windows x86 arch:x86

07be556cdf925ab775a96e24b794a6a3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

strncmp
strrchr
memmove
getenv
mktime
sscanf
_endthreadex
_beginthreadex
__CxxFrameHandler
_pctype
_isctype
__mb_cur_max
_iob
malloc
realloc
_errno
_CIfmod
floor
_HUGE
fprintf
fgets
_CIacos
_CIasin
ceil
_CIpow
strftime
__dllonexit
_onexit
_initterm
_adjust_fdiv
??3@YAXPAX@Z
strncpy
isupper
tolower
isspace
memchr
isdigit
isalpha
_assert
gmtime
localtime
isalnum
toupper
free
atoi
_stricmp
fseek
ftell
fread
strtok
strstr
fopen
fwrite
fclose
_i64toa
_vsnprintf
_atoi64
_strnicmp
strchr
sprintf
??2@YAPAXI@Z
_ftol
rand
time
_purecall
_control87
printf
_getcwd
_chdir
_strcmpi
_strlwr
_strdup
_itoa
_ftime
_putenv

ole32

CoInitializeEx
CoUninitialize

kernel32

MoveFileA
GetFileAttributesA
SetFileAttributesA
DeleteFileA
FindNextFileA
RemoveDirectoryA
GetDriveTypeA
FindFirstFileA
CreateDirectoryA
GetModuleFileNameA
GetWindowsDirectoryA
GetDiskFreeSpaceA
FindClose
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetLastError
GetCurrentThreadId
WaitForSingleObject
CloseHandle
Sleep
GetThreadPriority
SetThreadPriority
ResumeThread
SuspendThread
GetTickCount
LoadLibraryA
GetProcAddress
FreeLibrary
DisableThreadLibraryCalls

user32

CreateWindowExA
PostQuitMessage
PeekMessageA
UnregisterClassA
GetMessageA
DispatchMessageA
SetWindowLongA
PostMessageA
wsprintfA
PostThreadMessageA
DefWindowProcA
RegisterClassA
GetWindowLongA
DestroyWindow
CharNextA
GetSystemMetrics
CharPrevA

Exports

Exports

?AsyncNotifyProc@CAsyncNetThread@@KGJPAUHWND__@@IIJ@Z
?AsyncNotifyProc@CAsyncSockN@@KGJPAUHWND__@@IIJ@Z
CanUnload
JSLL_MaxInt
JSLL_MinInt
JSLL_Zero
JS_ArenaAllocate
JS_ArenaFinish
JS_ArenaGrow
JS_ArenaRelease
JS_CeilingLog2
JS_CompactArenaPool
JS_CompareValues
JS_FinishArenaPool
JS_FloorLog2
JS_FreeArenaPool
JS_GetContextPrivate
JS_HashString
JS_HashTableAdd
JS_HashTableDestroy
JS_HashTableDump
JS_HashTableEnumerateEntries
JS_HashTableLookup
JS_HashTableRawAdd
JS_HashTableRawLookup
JS_HashTableRawRemove
JS_HashTableRemove
JS_InitArenaPool
JS_NewHashTable
JS_SetContextPrivate
JS_smprintf
JS_smprintf_free
JS_snprintf
JS_sprintf_append
JS_sxprintf
JS_vsmprintf
JS_vsnprintf
JS_vsprintf_append
JS_vsxprintf
RMACreateInstance
js_FunctionClass
js_ObjectOps
js_SrcNoteArity
js_SrcNoteName
js_WithObjectOps
js_list_scope_ops

Sections

.text
Size: 272KB - Virtual size: 270KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Plugins/plusplin.dll
.dll windows:4 windows x86 arch:x86

7f165e20cd1f0a4661518efbce63d0b1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

strrchr
strncpy
_stricmp
strncmp
atol
??3@YAXPAX@Z
_vsnprintf
__dllonexit
_onexit
free
_initterm
malloc
_adjust_fdiv
strchr
??2@YAPAXI@Z
_purecall
strtol
isdigit
realloc
_putenv
_strnicmp
_strcmpi

kernel32

DisableThreadLibraryCalls

user32

CharNextA
GetSystemMetrics

Exports

Exports

RMACreateInstance

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Plugins/pxcb3210.dll
.dll windows:4 windows x86 arch:x86

ce19a56a5987993865233b0a5fe7cfb9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

??3@YAXPAX@Z
malloc
free
_initterm
_adjust_fdiv
__dllonexit
??2@YAPAXI@Z
_purecall
_onexit

kernel32

InterlockedDecrement
InterlockedIncrement
DisableThreadLibraryCalls

Exports

Exports

CanUnload
RMACreateInstance

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Plugins/ramfformat.dll
.dll windows:4 windows x86 arch:x86

580c92cb5b380a18ed27d54ace09db9f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

_purecall
strspn
strtok
strncmp
strncpy
strncat
isalnum
??2@YAPAXI@Z
strchr
??3@YAXPAX@Z
gmtime
malloc
realloc
free
_initterm
_adjust_fdiv
strftime
_vsnprintf

kernel32

DisableThreadLibraryCalls
LocalFileTimeToFileTime

Exports

Exports

CanUnload
RMACreateInstance

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Plugins/ramrender.dll
.dll windows:4 windows x86 arch:x86

05601a84449ce8c085f5d7e0b185daca

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

_initterm
atoi
_stricmp
strstr
_strnicmp
_purecall
sprintf
malloc
_adjust_fdiv
__dllonexit
_onexit
free
strncpy
atol
??3@YAXPAX@Z
isdigit
strchr
strtol
strrchr
_mbctype
realloc
isspace
memmove
??2@YAPAXI@Z
_vsnprintf
strncmp
_strcmpi

kernel32

DisableThreadLibraryCalls

user32

CharNextA
GetSystemMetrics

Exports

Exports

RMACreateInstance

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Plugins/rarender.dll
.dll windows:4 windows x86 arch:x86

b56371e3df2ef62f4982c4c56a6f952d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

rand
srand
_findfirst
_findclose
isupper
_onexit
_initterm
_adjust_fdiv
memmove
malloc
free
realloc
memset
tolower
??3@YAXPAX@Z
strncpy
_vsnprintf
strrchr
strchr
sprintf
atoi
memcpy
__dllonexit
_stricmp
_ftol
strstr
_purecall
??2@YAPAXI@Z
_putenv

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

kernel32

GlobalHandle
GlobalUnlock
GlobalLock
GetProcAddress
FreeLibrary
GlobalFree
LoadLibraryA
SetErrorMode
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GlobalAlloc
ExitProcess
GetTickCount
DisableThreadLibraryCalls
QueryPerformanceFrequency
QueryPerformanceCounter

Exports

Exports

CanUnload
CanUnload2
RMACreateInstance
SetDLLAccessPath

Sections

.text
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Plugins/rmfformat.dll
.dll windows:4 windows x86 arch:x86

8309c32dbeab8a1759e538c5c51495ff

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

_ftol
strncpy
atoi
_purecall
_stricmp
strstr
sprintf
_strnicmp
isalnum
atol
atof
strchr
??3@YAXPAX@Z
strncmp
??2@YAPAXI@Z
strftime
gmtime
strrchr
malloc
realloc
free
_vsnprintf
_initterm
_adjust_fdiv
__dllonexit
_onexit
qsort
_strcmpi

kernel32

DisableThreadLibraryCalls
LocalFileTimeToFileTime

Exports

Exports

CanUnload
RMACreateInstance

Sections

.text
Size: 132KB - Virtual size: 130KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Plugins/rmxfpln.dll
.dll windows:4 windows x86 arch:x86

4209a8748555c3206d7d11f94627be10

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

_initterm
_stat
free
??3@YAXPAX@Z
fflush
_fsopen
srand
rand
fseek
fclose
ftell
strncmp
fwrite
fread
strftime
time
gmtime
??2@YAPAXI@Z
_purecall
sprintf
malloc
_adjust_fdiv

kernel32

CreateMutexA
GetLastError
DisableThreadLibraryCalls
CloseHandle
GetTickCount
WaitForSingleObject
InterlockedDecrement
InterlockedIncrement
ReleaseMutex
GetProcAddress
LoadLibraryA
FreeLibrary

user32

wsprintfA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyA
RegSetValueExA

Exports

Exports

??0CDataSource@@QAE@XZ
??0CFileWrite@@QAE@XZ
??0CRMXHeader@@QAE@XZ
??0NameValuePropertyEx@@QAE@XZ
??0RMXHeader@@QAE@XZ
??0TableOfContentsEntry@@QAE@XZ
??1CDataSource@@QAE@XZ
??1CFileWrite@@QAE@XZ
??1CRMXHeader@@QAE@XZ
??1NameValuePropertyEx@@QAE@XZ
??1RMXHeader@@QAE@XZ
??1TableOfContentsEntry@@QAE@XZ
??4CDataSource@@QAEAAV0@ABV0@@Z
??4CFileRead@@QAEAAV0@ABV0@@Z
??4CFileWrite@@QAEAAV0@ABV0@@Z
??4CRMXHeader@@QAEAAV0@AAV0@@Z
??4NameValuePropertyEx@@QAEAAV0@AAV0@@Z
??4RMXHeader@@QAEAAV0@AAV0@@Z
??4TableOfContentsEntry@@QAEAAV0@AAV0@@Z
?AppendEmptyProp@CRMXHeader@@AAEPAVNameValuePropertyEx@@K@Z
?AppendTOCEntry@CRMXHeader@@AAEPAVTableOfContentsEntry@@XZ
?ClearHeader@CRMXHeader@@QAEXXZ
?CloseWrite@CFileWrite@@QAEJXZ
?CreateNewTOCEntry@CRMXHeader@@QAEJKGPAKKPAU_SDecryptionData@@@Z
?CreateSecurityInstance@@YGJW4PKI_BCYPHER_TYPE@@PAPAUIRMASecurity@@@Z
?CreateTimesPlayedIndex@CRMXHeader@@AAEJPAK0PAG@Z
?DeleteProp@CRMXHeader@@QAEJKPBD@Z
?DeleteTOCEntry@CRMXHeader@@QAEJK@Z
?EncryptTimeoutData@CRMXHeader@@AAEJGPAE0PAKPAPAU_SDecryptionData@@@Z
?ExportSessionKey@CFileWrite@@AAEJPAEKPAPAEPAK@Z
?FindProp@CRMXHeader@@AAEPAVNameValuePropertyEx@@KPBD@Z
?FixupTimesPlayed@CRMXHeader@@QAEXK@Z
?FreeDecryptionData@@YGXPAU_SDecryptionData@@@Z
?GetDecryptionData@CRMXHeader@@QAEJKPAKPAPAU_SDecryptionData@@_N2@Z
?GetFileVersion@CRMXHeader@@QAEKXZ
?GetHeaderSize@CRMXHeader@@QAEKXZ
?GetObjectVersion@CRMXHeader@@QAEGXZ
?GetSecurity@CFileWrite@@QAEPAUIRMASecurity@@XZ
?GetTOCDataSize@CRMXHeader@@QAEKK@Z
?GetTOCEntries@CRMXHeader@@QAEKXZ
?GetTOCFlags@CRMXHeader@@QAEGK@Z
?GetTOCOffset@CRMXHeader@@QAEKK@Z
?GetTOCPropBlob@CRMXHeader@@QAEJKPBDPAGPAPAE@Z
?GetTOCPropLong@CRMXHeader@@QAEJKPBDPAK@Z
?GetTOCPropString@CRMXHeader@@QAEJKPBDPAPAD@Z
?GetTimeoutData@CRMXHeader@@AAEJKPAGPAPAE@Z
?GetTimesPlayed@CRMXHeader@@QAEJKKGPAGH@Z
?GetTimesPlayedFile@CRMXHeader@@AAEJPADPAPAU_iobuf@@@Z
?HasTimeoutInfo@CRMXHeader@@QAE_NK@Z
?InitWrite@CFileWrite@@QAEJ_NPAKPAPAU_SDecryptionData@@0KPAE@Z
?IsTOCDataEncrypted@CRMXHeader@@QAE_NK@Z
?LoadHeaderFromBuffer@CRMXHeader@@QAEJPAEKPAK@Z
?LoadHeaderFromFile@CRMXHeader@@QAEJXZ
?LoadHeaderFromHeader@CRMXHeader@@QAEJPAV1@@Z
?LoadSecurityDll@@YGPAUHINSTANCE__@@XZ
?MakeValid@CRMXHeader@@AAEJPAD@Z
?OpenTimesPlayedFile@CRMXHeader@@AAEJPADPAPAU_iobuf@@@Z
?PackTimeoutData@CRMXHeader@@AAEJKPAU_SDecryptionData@@KKGGPBD1PAGPAPAE@Z
?Read@CDataSource@@QAEKPAEKK@Z
?Reset@CFileWrite@@AAEXXZ
?Reset@NameValuePropertyEx@@QAEXXZ
?Reset@RMXHeader@@QAEXXZ
?Reset@TableOfContentsEntry@@QAEXXZ
?Seek@CDataSource@@QAEHJH@Z
?Seek@CFileWrite@@QAEJKG@Z
?SetTOCFlags@CRMXHeader@@QAEJKG@Z
?SetTOCOffset@CRMXHeader@@QAEJKK@Z
?SetTOCPropBlob@CRMXHeader@@QAEJKPBDGPAE_N@Z
?SetTOCPropLong@CRMXHeader@@QAEJKPBDK_N@Z
?SetTOCPropString@CRMXHeader@@QAEJKPBD0_N@Z
?SetTimeoutProp@CRMXHeader@@QAEJKKKGPBD0@Z
?Tell@CDataSource@@QAEKXZ
?Tell@CFileWrite@@QAEKXZ
?UnpackTimeoutData@CRMXHeader@@QAEJKPAKPAPAU_SDecryptionData@@00PAG2PAPAD3@Z
?Use@CDataSource@@QAEXPAU_iobuf@@@Z
?Use@CRMXHeader@@QAEXPAU_iobuf@@@Z
?UseBuffer@CDataSource@@QAEXPAEK@Z
?ValidateTimeoutInfoVersion@CRMXHeader@@QAEJK@Z
?Write@CDataSource@@QAEJPAEK@Z
?Write@CFileWrite@@QAEJPAEK@Z
?WriteHeaderToFile@CRMXHeader@@QAEJXZ
?get_blob_property@NameValuePropertyEx@@QAEJPAGPAPAE@Z
?get_blob_property@TableOfContentsEntry@@QAEJPBDPAGPAPAE@Z
?get_long_property@NameValuePropertyEx@@QAEJPAK@Z
?get_long_property@TableOfContentsEntry@@QAEJPBDPAK@Z
?get_string_property@NameValuePropertyEx@@QAEJPAPAD@Z
?get_string_property@TableOfContentsEntry@@QAEJPBDPAPAD@Z
?pack@NameValuePropertyEx@@QAEPAEPAEAAK@Z
?pack@RMXHeader@@QAEPAEPAEAAK@Z
?pack@TableOfContentsEntry@@QAEPAEPAEAAK@Z
?persist_size@NameValuePropertyEx@@QAE?BKXZ
?persist_size@RMXHeader@@QAE?BKXZ
?persist_size@TableOfContentsEntry@@QAE?BKXZ
?set_blob_property@NameValuePropertyEx@@QAEJPBDGPAE@Z
?set_long_property@NameValuePropertyEx@@QAEJPBDK@Z
?set_string_property@NameValuePropertyEx@@QAEJPBD0@Z
?static_size@NameValuePropertyEx@@QAE?BKXZ
?static_size@RMXHeader@@QAE?BKXZ
?static_size@TableOfContentsEntry@@QAE?BKXZ
?unpack@NameValuePropertyEx@@QAEPAEPAEK@Z
?unpack@RMXHeader@@QAEPAEPAEK@Z
?unpack@TableOfContentsEntry@@QAEPAEPAEK@Z
RMACreateInstance

Sections

.text
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 886B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Plugins/rmxrend.dll
.dll windows:4 windows x86 arch:x86

bf92462ba9735f5bd88297e40e632ea4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

time
_stricmp
_ftol
_initterm
_adjust_fdiv
vsprintf
strchr
printf
memmove
_onexit
__dllonexit
_ismbcspace
??2@YAPAXI@Z
malloc
sprintf
??3@YAXPAX@Z
_purecall
_putenv
_errno
_open
_close
_lseek
_read
_write
_get_osfhandle
realloc
free

kernel32

GetFileSize
DisableThreadLibraryCalls
GetTickCount
SetErrorMode
LoadLibraryA
GetProcAddress
InterlockedDecrement
InterlockedIncrement
FreeLibrary

user32

MessageBoxA
GetSystemMetrics
CharNextA

advapi32

RegOpenKeyA
RegQueryValueExA
RegCloseKey

Exports

Exports

RMACreateInstance
SetDLLAccessPath

Sections

.text
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Plugins/rn5auth.dll
.dll windows:4 windows x86 arch:x86

39258a3adbb89bc212ea53f8baabb4a1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

??3@YAXPAX@Z
_strnicmp
_stricmp
sprintf
strncpy
isspace
strchr
malloc
realloc
??2@YAPAXI@Z
_purecall
_vsnprintf
_initterm
_adjust_fdiv
__dllonexit
_onexit
free
_strcmpi

kernel32

DisableThreadLibraryCalls

Exports

Exports

RMACreateInstance
RMAShutdown

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Plugins/rtfformat.dll
.dll windows:4 windows x86 arch:x86

de3cc482328afb0623c134eb6a059797

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

_ftol
isspace
atoi
toupper
memmove
strncmp
strncpy
atol
strstr
_stricmp
malloc
realloc
free
_vsnprintf
_initterm
_adjust_fdiv
__dllonexit
_onexit
sprintf
strchr
_strnicmp
??3@YAXPAX@Z
_purecall
??2@YAPAXI@Z
strftime
gmtime

kernel32

DisableThreadLibraryCalls
LocalFileTimeToFileTime

gdi32

DeleteObject
SelectObject
DeleteDC
CreateCompatibleDC

Exports

Exports

CanUnload
RMACreateInstance

Sections

.text
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Plugins/rtrender.dll
.dll windows:4 windows x86 arch:x86

2507b642612a0176f094432d787cb8c1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

_onexit
__dllonexit
_adjust_fdiv
_initterm
_ftol
strrchr
toupper
strtol
isdigit
memmove
atol
_strcmpi
??3@YAXPAX@Z
??2@YAPAXI@Z
_strnicmp
strstr
strchr
_purecall
strncmp
sprintf
atoi
_vsnprintf
_stricmp
strncpy
realloc
free
malloc

kernel32

LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
MulDiv
QueryPerformanceFrequency
GetTickCount
QueryPerformanceCounter

user32

GetSystemMetrics
CharNextA
GetDC
ReleaseDC
SetCursor
GetCursor
LoadCursorA
DrawTextA

gdi32

SetBkColor
DeleteDC
CreateCompatibleDC
GetDeviceCaps
CreateDIBSection
SetGraphicsMode
GetBkMode
TextOutA
SetBkMode
CreateFontA
GetObjectA
DeleteObject
SelectObject
SetTextColor
GetTextExtentPoint32A

Exports

Exports

CanUnload
RMACreateInstance

Sections

.text
Size: 88KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Plugins/rvrender.dll
.dll windows:4 windows x86 arch:x86

9d321c5997ab086da0c92709e7bc1d5f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

_adjust_fdiv
__dllonexit
_initterm
_onexit
_beginthreadex
_endthreadex
??3@YAXPAX@Z
free
realloc
malloc
strtol
_stricmp
tolower
isupper
_vsnprintf
strncpy
??2@YAPAXI@Z
_purecall
strstr
strrchr
strchr
atoi
_putenv
memmove
_strnicmp
sprintf
_ftol
memset
rand
srand
memcpy

ole32

CoInitializeEx
CoUninitialize

kernel32

InitializeCriticalSection
ExitProcess
DisableThreadLibraryCalls
GetVersionExA
GetVersion
ResetEvent
SetEvent
CreateEventA
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
DeleteCriticalSection
CloseHandle
Sleep
WaitForSingleObject
SetThreadPriority
ResumeThread
GetThreadPriority
GlobalHandle
SetErrorMode
QueryPerformanceCounter
QueryPerformanceFrequency
GetModuleHandleA
GetLastError
GetSystemInfo
GlobalAlloc
GlobalFree
GlobalUnlock
GlobalLock
FreeLibrary
SuspendThread
GetProcAddress
GetTickCount
LoadLibraryA

user32

LoadCursorA
PeekMessageA
DispatchMessageA
GetMessageA
PostMessageA
PostThreadMessageA
CharNextA
GetSystemMetrics
GetCursor
SetCursor

advapi32

RegEnumKeyExA
RegQueryValueA
RegOpenKeyA
RegCloseKey
RegCreateKeyA
RegSetValueA
RegOpenKeyExA
RegEnumKeyA
RegDeleteKeyA

gdi32

GetStockObject
CreatePen
DeleteObject

Exports

Exports

CanUnload
CanUnload2
RMACreateInstance
RMAShutdown
SetDLLAccessPath

Sections

.text
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Plugins/sdpplin.dll
.dll windows:4 windows x86 arch:x86

bba6e15451b79b6ab1416874841c3834

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

_initterm
free
__dllonexit
_onexit
strncpy
malloc
_adjust_fdiv
??2@YAPAXI@Z
??3@YAXPAX@Z
_mbctype
realloc
_purecall
_strcmpi
_vsnprintf

kernel32

DisableThreadLibraryCalls

user32

CharNextA
GetSystemMetrics

Exports

Exports

CanUnload
RMACreateInstance

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Plugins/security.dll
.dll windows:4 windows x86 arch:x86

8a032ff212e67a3ffe705b394044572e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

_initterm
_adjust_fdiv
malloc
??2@YAPAXI@Z
free
_assert
rand
??3@YAXPAX@Z
_purecall

kernel32

CreateFileA
WriteFile
CloseHandle
LoadResource
GetModuleHandleA
GetLastError
InterlockedDecrement
InterlockedIncrement
ReadFile
DisableThreadLibraryCalls
FindResourceA

advapi32

CryptDecrypt
CryptGenRandom
CryptGetKeyParam
CryptGetProvParam
RegOpenKeyA
RegQueryValueExA
RegCloseKey
CryptCreateHash
CryptHashData
CryptImportKey
CryptSetKeyParam
CryptExportKey
CryptAcquireContextA
CryptEncrypt
CryptReleaseContext
CryptGetHashParam
CryptGetUserKey
CryptGenKey
CryptDestroyKey

Exports

Exports

RMACreateInstance
RMACreateSecurityInstance
RMAShutdown

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Plugins/smlfformat.dll
.dll windows:4 windows x86 arch:x86

95bf99268667cd7dad6d4e78e892eabf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

??2@YAPAXI@Z
strncat
isalnum
strncpy
strchr
strncmp
isspace
_stricmp
time
atoi
strstr
strftime
gmtime
??3@YAXPAX@Z
sprintf
memmove
malloc
realloc
free
_vsnprintf
_initterm
_adjust_fdiv
__dllonexit
_onexit
_purecall

kernel32

DisableThreadLibraryCalls
LocalFileTimeToFileTime

Exports

Exports

CanUnload
RMACreateInstance

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Plugins/smlrender.dll
.dll windows:4 windows x86 arch:x86

1133992ac016243a1c496f2008d23285

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

isxdigit
isalnum
atof
difftime
_timezone
strspn
isalpha
strncpy
free
strtok
strtol
_adjust_fdiv
__dllonexit
_onexit
time
isdigit
mktime
localtime
malloc
strstr
??2@YAPAXI@Z
isspace
atoi
_initterm
atol
??3@YAXPAX@Z
_purecall
_strnicmp
_itoa
_vsnprintf
tolower
isupper
realloc
strrchr
memmove
iscntrl
sprintf
floor
_stricmp
_ftol
strtod
fopen
fprintf
fwrite
fclose
strncmp
strchr
_strcmpi

kernel32

GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
GetVersion
GetSystemInfo
GetVersionExA
GetTickCount

user32

GetSysColor
GetDC
CharNextA
ReleaseDC
GetSystemMetrics
LoadCursorA
GetCursor
SetCursor

gdi32

GetDeviceCaps

advapi32

RegOpenKeyExA
RegCloseKey

Exports

Exports

CanUnload
RMACreateInstance

Sections

.text
Size: 444KB - Virtual size: 441KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Plugins/smmrender.dll
.dll windows:4 windows x86 arch:x86

a86f65630984f784d4f2f4adbbdf319e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

strspn
??3@YAXPAX@Z
atol
strtok
strncmp
strncpy
isxdigit
strtoul
_vsnprintf
atoi
fclose
fflush
fprintf
fopen
strchr
memchr
_purecall
strstr
??2@YAPAXI@Z
malloc
realloc
free
_initterm
_adjust_fdiv
__dllonexit
_onexit
strpbrk
_strcmpi

kernel32

DisableThreadLibraryCalls

user32

CharNextA
GetSystemMetrics

Exports

Exports

CanUnload
RMACreateInstance

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Plugins/smplfsys.dll
.dll windows:4 windows x86 arch:x86

8c63d9231f6933c49eab7eafb5b82ae7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

memmove
malloc
realloc
free
isspace
isupper
_adjust_fdiv
_except_handler3
??3@YAXPAX@Z
__dllonexit
_onexit
tolower
_mbctype
isdigit
strncmp
atol
_stricmp
_findclose
_findnext
_findfirst
atoi
strchr
strtol
strncpy
_strnicmp
strtok
__CxxFrameHandler
rename
strrchr
sprintf
??2@YAPAXI@Z
printf
_purecall
_vsnprintf
_initterm
?terminate@@YAXXZ
_strlwr

kernel32

DisableThreadLibraryCalls
QueryPerformanceFrequency
QueryPerformanceCounter
GetTickCount
GetDriveTypeA
UnmapViewOfFile
MapViewOfFile
IsBadReadPtr
CreateFileMappingA
GetFileInformationByHandle
WriteFile
ReadFile
SetFilePointer
DeleteFileA
CreateFileA
GetLastError
CloseHandle
GetVersionExA
Sleep
CreateDirectoryA

user32

GetSystemMetrics
CharNextA

Exports

Exports

CanUnload
RMACreateInstance
RMAShutdown

Sections

.text
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Plugins/stubdrm.dll
.dll windows:4 windows x86 arch:x86

09964e07ab96d40ed2d73985471a31f3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

free
??2@YAPAXI@Z
_purecall
??3@YAXPAX@Z
_initterm
malloc
_adjust_fdiv

Exports

Exports

CanUnload
RMACreateInstance

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 822B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Plugins/tfilesys.dll
.dll windows:4 windows x86 arch:x86

f879079ea9b43be9b48bb86e2476bcb9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

_vsnprintf
_ismbcspace
memmove
atol
strncpy
strtok
_strnicmp
strchr
realloc
isdigit
_findfirst
_findnext
_findclose
??3@YAXPAX@Z
_initterm
_adjust_fdiv
__dllonexit
_onexit
free
malloc
sprintf
rename
_splitpath
strrchr
_purecall
fread
??2@YAPAXI@Z
fclose
strstr
ftell
_fsopen
fseek
strncmp
_stricmp
_strlwr
_strcmpi
_unlink
_fstat
_mkdir
_stat
_fileno

kernel32

DisableThreadLibraryCalls
lstrlenA
InterlockedDecrement
InterlockedIncrement
GetProcAddress
FreeLibrary
LoadLibraryA
lstrcpyA

user32

CharNextA
CharUpperA
GetSystemMetrics

advapi32

RegQueryValueExA
RegOpenKeyA
RegCloseKey

winmm

timeKillEvent
timeSetEvent

Exports

Exports

CanUnload
RMACreateInstance
RMAShutdown
TFileSys_GetLastError

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Plugins/vidplin.dll
.dll windows:4 windows x86 arch:x86

06c415d1e31dfd5125546af61c77d5ba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

_adjust_fdiv
realloc
_onexit
??3@YAXPAX@Z
__dllonexit
__CxxFrameHandler
_strupr
_strcmpi
_putenv
_vsnprintf
_endthreadex
_beginthreadex
_strnicmp
strstr
isdigit
_initterm
strncmp
sprintf
_ftol
free
atol
malloc
isupper
tolower
strrchr
_purecall
??2@YAPAXI@Z
strncpy
strtol
strchr
atoi
_stricmp

ole32

CoTaskMemAlloc
CoUninitialize
CoFreeUnusedLibraries
CoInitializeEx
CoTaskMemFree
CoInitialize
CoCreateInstance

kernel32

Sleep
ResumeThread
SuspendThread
GetLastError
GetThreadPriority
SetThreadPriority
GetProcAddress
SetErrorMode
FreeLibrary
VirtualFree
VirtualAlloc
GetSystemInfo
ReleaseSemaphore
CreateSemaphoreA
QueryPerformanceFrequency
SetEvent
GetCurrentThreadId
ResetEvent
CreateEventA
CloseHandle
LoadLibraryA
WaitForSingleObject
DisableThreadLibraryCalls
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetTickCount
QueryPerformanceCounter

user32

PeekMessageA
DispatchMessageA
CharNextA
GetMessageA
PostMessageA
GetSystemMetrics
PostThreadMessageA

advapi32

RegQueryValueExA
RegOpenKeyExA

msvfw32

ICDecompress
ICInfo
ICOpen
ICClose
ICSendMessage
ICLocate

Exports

Exports

CanUnload
RMACreateInstance

Sections

.text
Size: 124KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Plugins/vidsite.dll
.dll windows:4 windows x86 arch:x86

917d76c46217dbc20207c1e508f8d05e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

_except_handler3
_initterm
_onexit
__dllonexit
memcpy
memset
memmove
_adjust_fdiv
srand
rand
_strlwr
_stat
fread
_assert
fscanf
fgets
strstr
??3@YAXPAX@Z
ftell
sscanf
fseek
fputs
rename
qsort
fopen
fprintf
calloc
fclose
sprintf
strtok
atof
realloc
malloc
_ftol
free
__CxxFrameHandler
atoi
getenv
?terminate@@YAXXZ
strncmp
_stricmp
strncpy
isupper
tolower
_purecall
??2@YAPAXI@Z
_beginthreadex
_endthreadex
_vsnprintf
strchr
_strcmpi
_putenv
_strnicmp

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

kernel32

ReleaseSemaphore
GlobalSize
ExitProcess
GlobalUnlock
GlobalLock
GlobalHandle
GetLastError
GetThreadPriority
Sleep
GetTickCount
GetCurrentThreadId
InitializeCriticalSection
DeleteCriticalSection
GetModuleHandleA
GetCurrentProcessId
LeaveCriticalSection
EnterCriticalSection
MulDiv
CreateMutexA
CreateEventA
WaitForSingleObject
SetEvent
CloseHandle
ReleaseMutex
ResetEvent
SetThreadPriority
CreateThread
CreateSemaphoreA
WaitForMultipleObjects
QueryPerformanceFrequency
PulseEvent
GetProcAddress
lstrcpyA
FreeLibrary
GetSystemInfo
GetVersionExA
GetTimeFormatA
GetDateFormatA
GetSystemTime
lstrcmpiA
DeleteFileA
LoadLibraryA
SetErrorMode
CreateFileMappingA
QueryPerformanceCounter
SuspendThread
GetSystemDirectoryA
GlobalFree
ResumeThread
GlobalAlloc
DisableThreadLibraryCalls

user32

SetForegroundWindow
SetActiveWindow
WindowFromPoint
GetCursorPos
DrawTextA
PeekMessageA
SystemParametersInfoA
SetParent
GetSystemMetrics
EnumChildWindows
SetFocus
GetDC
ReleaseDC
GetAsyncKeyState
BeginPaint
IsChild
SetWindowPos
GetForegroundWindow
CallWindowProcA
InvalidateRect
GetWindowRect
MapWindowPoints
UnhookWindowsHookEx
GetWindowThreadProcessId
SetWindowsHookExA
GetParent
RegisterClassA
DefWindowProcA
GetWindowLongA
SetWindowLongA
DestroyWindow
CreateWindowExA
IsWindowVisible
ShowWindow
CallNextHookEx
UpdateWindow
SetWindowRgn
MoveWindow
IntersectRect
GetCapture
GetClientRect
GetWindowPlacement
GetWindowRgn
ShowWindowAsync
OffsetRect
EnumDisplaySettingsA
EndPaint
IsIconic
SetScrollInfo
UnregisterClassA
FindWindowExA
DispatchMessageA
GetMessageA
PostMessageA
PostThreadMessageA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey

winmm

timeBeginPeriod
timeEndPeriod

gdi32

Rectangle
SetBkColor
GetDeviceCaps
SetTextColor
GetStockObject
GetTextExtentPointA
SelectObject
CreateFontA
SetMapMode
GetClipBox
DeleteObject
CombineRgn
CreateRectRgn
CreatePen
CreateSolidBrush
GetSystemPaletteEntries
GdiFlush
TextOutA
CreateBrushIndirect
GetRegionData
DeleteDC
BitBlt
SetBkMode
CreateCompatibleBitmap
CreateCompatibleDC
GetTextMetricsA
GetDCOrgEx
CreateDCA
GetDIBits
SetDIBColorTable
SetStretchBltMode
GetObjectA
CreateDIBSection
StretchBlt
SetPixel

ole32

CoUninitialize
CoInitializeEx

Exports

Exports

?CHXSiteStatusTextProc@@YGJPAUHWND__@@IIJ@Z
?CHXWinSiteWindowedProc@@YGJPAUHWND__@@IIJ@Z
?HXxHookSiteProc@@YGJPAUHWND__@@IIJ@Z
?HXxWinHookAllMessages@@YGJHIJ@Z
?HXxWinHookChar@@YGJHIJ@Z
?HXxWinHookSiteProc@@YGJPAUHWND__@@IIJ@Z
?WindowProc@CHXWinFullScreenWindow@@SGJPAUHWND__@@IIJ@Z
RMACreateInstance
SetDLLAccessPath

Sections

.text
Size: 252KB - Virtual size: 251KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Plugins/vorbisrend.dll
.dll windows:4 windows x86 arch:x86

4687513daa99ce7938b20ea5d2196960

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

malloc
free
??3@YAXPAX@Z
_ftol
_purecall
_stricmp
memmove
realloc
memchr
calloc
floor
qsort
ldexp
_CIpow
exit
frexp
_initterm
_adjust_fdiv
??2@YAPAXI@Z
ceil

kernel32

DisableThreadLibraryCalls

Exports

Exports

RMACreateInstance

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/Plugins/vsrlocal.dll
.dll windows:4 windows x86 arch:x86

8ae148093ec746c2d79cd18303ee9e7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

time
strncmp
strchr
strrchr
_strnicmp
strtok
asctime
gmtime
_stricmp
qsort
strtol
isspace
iscntrl
atol
isdigit
strstr
_mbctype
strncpy
srand
sprintf
??3@YAXPAX@Z
toupper
tolower
isupper
malloc
realloc
free
_vsnprintf
__dllonexit
_onexit
_initterm
_adjust_fdiv
??2@YAPAXI@Z
rand
_purecall
_putenv
_strcmpi

user32

GetSystemMetrics
CharNextA

kernel32

DisableThreadLibraryCalls

Exports

Exports

CanUnload
RMACreateInstance
SetDLLAccessPath

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/rpplugins/cn/embed_cn.dll
.dll windows:4 windows x86 arch:x86

f62c5820bffa7bfb4324bcdf8163ad86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

malloc
realloc
__dllonexit
_onexit
_initterm
_adjust_fdiv
free
??3@YAXPAX@Z
sprintf
printf
_stricmp
??2@YAPAXI@Z
strrchr
_putenv

kernel32

InterlockedIncrement
GetProcAddress
FreeLibrary
LoadLibraryA
InterlockedDecrement
SetErrorMode
GetModuleFileNameA

user32

GetSystemMetrics
CharNextA

Exports

Exports

CleanupResourceLoader

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 853B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/rpplugins/cn/rpclsvc_cn.dll
.dll windows:4 windows x86 arch:x86

f62c5820bffa7bfb4324bcdf8163ad86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

malloc
realloc
__dllonexit
_onexit
_initterm
_adjust_fdiv
free
??3@YAXPAX@Z
sprintf
printf
_stricmp
??2@YAPAXI@Z
strrchr
_putenv

kernel32

InterlockedIncrement
GetProcAddress
FreeLibrary
LoadLibraryA
InterlockedDecrement
SetErrorMode
GetModuleFileNameA

user32

GetSystemMetrics
CharNextA

Exports

Exports

CleanupResourceLoader

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 855B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/rpplugins/embd3260.dll
.dll windows:4 windows x86 arch:x86

65dfdaf7e61de18a7736b668ef41d572

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pngu3267

?SetScrollDirection@XPNScrollingText@@QAEXW4eScrollDirection@1@@Z
?SetFgColor@XPNScrollingText@@QAEXABVCPNColor@@@Z
??1XPNScrollingText@@MAE@XZ
?GetBtnTextColor@CPNDrawHelper@@SAAAVCPNColor@@XZ
?SetBgColor@XPNScrollingText@@QAEXABVCPNColor@@@Z
?Create@XPNControl@@IAEHKPAVCPNWindow@@JJJJKPBDK@Z
?PaintToScreen@XPNWindow@@IAEHPAVCPNDC@@0PAVCPNxRect@@PAVCPNColor@@@Z
?Attach@CPNBitmapImage@@UAEXPAUHBITMAP__@@@Z
?GetRowBytes@CPNBitmapImage@@UAEKXZ
?GetDataPtr@CPNBitmapImage@@UAEXPAPAX@Z
?LoadStandardBmp@CPNBitmapImage@@UAEHK@Z
?GetColorTableIndexAt@CPNBitmapImage@@UAEJJJ@Z
?GetColorAtColorTableIndex@CPNBitmapImage@@UAEHJAAVCPNColor@@@Z
?SetColorAtColorTableIndex@CPNBitmapImage@@UAEHJABVCPNColor@@@Z
?DeviceDependentImageCopy@CPNImage@@MAEHK@Z
?Free@CPNBitmapImage@@UAEXXZ
?Adopt@CPNBitmapImage@@UAEHK@Z
?Clone@CPNBitmapImage@@UAEPAVCPNImage@@XZ
?ColorizeWithMask@XPNBitmapImage@@UAEHABVCPNColor@@PAV2@K@Z
?Colorize@CPNBitmapImage@@UAEHABVCPNColor@@@Z
?ConvertToGrayscale@CPNBitmapImage@@UAEHXZ
?ReplaceColorAtPoint@CPNBitmapImage@@UAEHJJJJ@Z
?GetColorAt@CPNBitmapImage@@UAEHJJAAVCPNColor@@@Z
?ReplaceColorAt@CPNBitmapImage@@UAEHJJABVCPNColor@@@Z
?Detach@XPNImage@@UAEXXZ
?CreateBlankImage@CPNBitmapImage@@UAEHABVCPNDC@@ABVCPNxSize@@@Z
?SaveToFile@CPNBitmapImage@@UAEHPBD@Z
?LoadFromFile@CPNBitmapImage@@UAEHPBD@Z
?MakeDeviceIndependent@CPNBitmapImage@@UAEHXZ
?MakeDeviceDependent@CPNBitmapImage@@UAEHPAVCPNDC@@@Z
??1CPNBitmapImage@@UAE@XZ
?LoadFromResource@CPNBitmapImage@@UAEHK@Z
??0CPNColor@@QAE@XZ
?CopyImage@CPNBitmapImage@@IAEHABV1@@Z
??0CPNPaintDC@@QAE@ABU_PNxWindow@@@Z
??1CPNFrame@@UAE@XZ
?OnEvent@XPNCustomText@@UAEHAAVCPNEvent@@@Z
?BlitTo@CPNMemoryDC@@QAEXPAVCPNDC@@AAVCPNxRect@@1K@Z
?SetTextFgColor@XPNDC@@QAEPAVCPNColor@@PAV2@@Z
?SetTextBgColor@XPNDC@@QAEPAVCPNColor@@PAV2@@Z
?HasSubImageType@CPNImageButton@@MAEHW4eSubImageType@@@Z
?Create@CPNImageButton@@UAEHKPAVCPNWindow@@JJJJKKK@Z
?SetButtonImageFromHandle@CPNImageButton@@UAEHK@Z
?SetButtonImage@CPNImageButton@@UAEHK@Z
?SetButtonImage@CPNImageButton@@UAEHPAVCPNImage@@@Z
?AdjustButtonFaceRect@XPNImageButton@@MAEXAAVCPNxRect@@ABV2@HHJ@Z
?GetButtonFaceColor@XPNButton@@UAEXAAVCPNColor@@@Z
?SetButtonFaceColor@CPNImageButton@@UAEXABVCPNColor@@@Z
?MakeButtonDefault@XPNButton@@UAEXH@Z
?DrawButtonFace@CPNImageButton@@UAEXPAVCPNDC@@AAVCPNxRect@@HH@Z
?OnPaint@XPNButton@@UAEXPAVCPNDC@@HH@Z
?SetPushedState@XPNButton@@UAEXH@Z
?Create@CPNButton@@UAEHKPAVCPNWindow@@JJJJKKPBD@Z
?SetTitle@XPNImageButton@@UAEXPBD@Z
?OnEvent@CPNImageButton@@UAEHAAVCPNEvent@@@Z
?Create@XPNScrollingText@@UAEHKPAVCPNWindow@@JJJJKK@Z
?StartScrolling@CPNScrollingText@@UAEXXZ
?StopScrolling@CPNScrollingText@@UAEXXZ
?AddText@XPNScrollingText@@UAEXPBD@Z
?OnEvent@CPNScrollingText@@UAEHAAVCPNEvent@@@Z
?SetMenu@CPNFrame@@UAEPAVCPNMenu@@PAV2@@Z
?IsMenuShown@CPNFrame@@UBEHXZ
?ShowMenu@CPNFrame@@UAEXH@Z
?GetMinWidthBeforeMenuWrap@CPNFrame@@UAEKXZ
??1CPNImageButton@@UAE@XZ
?InsertText@XPNScrollingText@@UAEXHPBD@Z
?RemoveText@XPNScrollingText@@UAEXH@Z
??0CPNImageButton@@QAE@XZ
?Get3dFaceColor@CPNDrawHelper@@SAAAVCPNColor@@XZ
??1XPNImageSlider@@UAE@XZ
??0XPNImageSlider@@QAE@XZ
?SetSliderRange@XPNSlider@@QAEXJJ@Z
?SetSliderPos@XPNSlider@@QAEXJ@Z
?SetTrackImageRepeater@XPNImageSlider@@QAEXKK@Z
?Create@XPNImageSlider@@QAEHKPAVCPNWindow@@JJJJKKKK@Z
?Enable@XPNSlider@@UAEXH@Z
?OnEvent@XPNSlider@@MAEHAAVCPNEvent@@@Z
?SetText@CPNControl@@UAEXPBD@Z
?DrawSliderTrack@CPNImageSlider@@MAEXPAVCPNDC@@ABVCPNxRect@@@Z
?DrawThumb@CPNImageSlider@@MAEXPAVCPNDC@@AAVCPNRegion@@H@Z
?DrawTickMarks@XPNImageSlider@@MAEXPAVCPNDC@@ABVCPNxRect@@1@Z
?DrawBackground@XPNSlider@@MAEXPAVCPNDC@@ABVCPNxRect@@@Z
?FillSliderTrack@XPNSlider@@MAEXPAVCPNDC@@ABVCPNColor@@ABVCPNxRect@@@Z
?DrawFocusRect@XPNSlider@@MAEXPAVCPNDC@@ABVCPNxRect@@@Z
?OnSize@XPNSlider@@MAEXFF@Z
?OnPaint@XPNSlider@@MAEXPAVCPNDC@@@Z
?SetBackgroundColor@CPNImageSlider@@UAEXABVCPNColor@@@Z
?UpdateTrackImage@CPNImageSlider@@MAEXXZ
?UpdateThumbImage@CPNImageSlider@@MAEXXZ
?RemoveAllText@XPNScrollingText@@UAEXXZ
?OnPaint@XPNScrollingText@@UAEXAAVCPNDC@@@Z
?InsertSubMenu@CPNMenu@@UAEXKAAV1@PBD@Z
?CheckItem@CPNMenu@@UAEXKH@Z
?RemoveItem@CPNMenu@@UAEXK@Z
?ModifyItemString@CPNMenu@@UAEXKPBD@Z
?DisplayPopupMenu@CPNMenu@@UAEHKABVCPNxPoint@@PAVCPNWindow@@PAVCPNxRect@@@Z
?RemoveSubMenu@CPNMenu@@UAEXK@Z
?Attach@CPNMenu@@UAEHPAUHMENU__@@@Z
?InsertSeparator@CPNMenu@@UAEXK@Z
?Detach@CPNMenu@@QAEPAUHMENU__@@XZ
??1CPNMenu@@UAE@XZ
??0CPNMenu@@QAE@XZ
?GetPNWindow@CPNWindow@@SAPAV1@PAX@Z
??0CPNFont@@QAE@ABQAX@Z
?Create@XPNCustomText@@QAEHKPAVCPNWindow@@JJJJKPBDK@Z
??1CPNFont@@UAE@XZ
??1XPNCustomText@@UAE@XZ
??0XPNCustomText@@QAE@XZ
?OnEvent@CPNCustomText@@UAEHAAVCPNEvent@@@Z
?GetText@CPNControl@@UBEXPADJ@Z
?SetText@XPNCustomText@@UAEXPBD@Z
?GetTextLength@CPNControl@@UBEJXZ
?GetId@CPNControl@@UBEKXZ
?SetId@CPNControl@@UAEXK@Z
?OnSize@XPNScrollingText@@UAEXXZ
??1CPNAnimateCtl@@UAE@XZ
?DrawBorder@CPNDrawHelper@@SAXAAVCPNDC@@AAVCPNxRect@@K@Z
?RemoveObserver@CPNRouter@@QAEXPAV1@@Z
?StopAnimationAtCell@XPNAnimateCtl@@QAEXK@Z
??0CPNBitmapImage@@QAE@XZ
??0CPNScreenDC@@QAE@XZ
?SetFont@XPNDC@@QAEPAVCPNFont@@PAV2@@Z
?GetTextExtent@CPNDC@@UAEXPBDAAVCPNxSize@@@Z
??1CPNScreenDC@@UAE@XZ
?RemoveObservers@CPNRouter@@QAEXXZ
??0CPNAnimateCtl@@QAE@XZ
?Create@XPNAnimateCtl@@QAEHKPAVCPNWindow@@JJJJK@Z
??4CPNColor@@QAEAAV0@ABV0@@Z
?UseBkgndColor@XPNAnimateCtl@@QAEXH@Z
?UnLockResource@CPNGraphicResource@@QAEHXZ
?GetControlsFontName@CPNDrawHelper@@SAPBDXZ
??0CPNFont@@QAE@HHHHPBDH@Z
?LockResource@CPNGraphicResource@@QAEHXZ
??1CPNColor@@UAE@XZ
?GetMenu@CPNFrame@@UBEPAVCPNMenu@@XZ
??0CPNImageControl@@QAE@XZ
?Create@CPNFrame@@UAEHPAVCPNWindow@@PAVCPNMenu@@JJJJKPBD@Z
??1CPNImageControl@@UAE@XZ
??0CPNFrame@@QAE@XZ
?UpdateBackgroundColor@CPNImageControl@@QAEXXZ
?DoModaless@CPNDialog@@UAEKXZ
?InitDialog@CPNDialog@@UAEHXZ
?EndDialog@CPNDialog@@UAEXK@Z
?PreDomodal@XPNDialog@@UAEXPAVCPNWindow@@@Z
?PostDomodal@XPNDialog@@UAEXPAVCPNWindow@@@Z
?GetSingleInstanceId@XPNDialog@@UAEKXZ
?GetTemplateId@XPNDialog@@UBEKXZ
?SetDefaultButtonId@CPNDialog@@UAEXK@Z
?GetDefaultButtonId@CPNDialog@@UBEKXZ
?SetSingleInstance@CPNDialog@@UAEXH@Z
?QueryInterface@XPNTimer@@UAGJABU_GUID@@PAPAX@Z
?AddRef@XPNTimer@@UAGKXZ
?Release@XPNTimer@@UAGKXZ
?Func@XPNTimer@@UAGJXZ
?IsValid@CPNObject@@UBEHXZ
PNGuiTerminate
?EnableToolTips@CPNTipManager@@SAXH@Z
?UseFakeModality@XPNDialog@@SAXH@Z
?UseCustomMessageBoxes@XPNMessageBox@@SAXH@Z
?RemoveProperty@CPNWindow@@QAEPAXPBD@Z
?SetProperty@CPNWindow@@QAEHPBDPAX@Z
PNGuiInitialize
??0CPNOpenFileDialog@@QAE@PAVCPNWindow@@@Z
?DoModal@CPNOpenFileDialog@@UAEKXZ
??1CPNOpenFileDialog@@UAE@XZ
?GetHWND@CPNWindow@@QBEPAUHWND__@@XZ
?OnWndMsg@CPNWindow@@UAEHKIJPAJ@Z
?DefWindowProcA@CPNWindow@@QAEJKIJ@Z
??1CPNWindow@@UAE@XZ
??0CPNWindow@@QAE@XZ
?NotifyObservers@CPNRouter@@UAEXAAVCPNEvent@@@Z
?HandleEvent@CPNWindow@@UAEXAAVCPNEvent@@@Z
?Destroy@CPNWindow@@UAEXXZ
?IsValid@CPNWindow@@UBEHXZ
?GetParent@CPNWindow@@UBEPAV1@XZ
?SetParent@CPNWindow@@UAEXPAV1@@Z
?SetZOrderPosition@CPNWindow@@UAEXK@Z
?SetTitle@CPNWindow@@UAEXPBD@Z
?GetTitle@CPNWindow@@UBEXPADJ@Z
?GetTitleLength@CPNWindow@@UBEJXZ
?SetFont@CPNWindow@@UAEXPAVCPNFont@@H@Z
?GetFont@CPNWindow@@UBEPAVCPNFont@@XZ
?SetSize@CPNWindow@@UAEXABVCPNxSize@@@Z
?GetSize@CPNWindow@@UBEXAAVCPNxSize@@@Z
?GetClientRect@CPNWindow@@UBEXAAVCPNxRect@@@Z
?GetScreenRect@CPNWindow@@UBEXAAVCPNxRect@@@Z
?Move@CPNWindow@@UAEXABVCPNxPoint@@@Z
?Center@CPNWindow@@UAEXXZ
?ScrollWindow@CPNWindow@@UAEXJJPAVCPNxRect@@K@Z
?GetPosition@CPNWindow@@UBEXAAVCPNxPoint@@@Z
?MoveAndSize@CPNWindow@@UAEXABU_PNxRect@@@Z
?MoveAndSize@CPNWindow@@UAEXABU_PNxPoint@@ABU_PNxSize@@@Z
?ClientToScreen@CPNWindow@@UBEXAAVCPNxRect@@@Z
?ClientToScreen@CPNWindow@@UBEXAAVCPNxPoint@@@Z
?ScreenToClient@CPNWindow@@UBEXAAVCPNxRect@@@Z
?ScreenToClient@CPNWindow@@UBEXAAVCPNxPoint@@@Z
?PauseUpdates@CPNWindow@@UAEXXZ
?HasPausedUpdates@CPNWindow@@UBEHXZ
?ResumeUpdates@CPNWindow@@UAEXXZ
?RepaintRect@CPNWindow@@UAEXPBVCPNxRect@@H@Z
?RedrawWindow@CPNWindow@@UAEXXZ
?ValidateRect@CPNWindow@@UAEXPBVCPNxRect@@@Z
?SetCapture@CPNWindow@@UAEXXZ
?ReleaseCapture@CPNWindow@@UAEXXZ
?HasCapture@CPNWindow@@UBEHXZ
?SetFocus@CPNWindow@@UAEHXZ
??0CPNScrollingText@@QAE@XZ
?StartFlashing@XPNCustomText@@QAEXJJ@Z
?SetBrightness@CPNColor@@QAEXM@Z
?ConvertRGBtoHSB@CPNColor@@QAEXXZ
?Brightness@CPNColor@@QAEMXZ
?UpdateColors@CPNImageControl@@QAEXXZ
?ConvertHSBtoRGB@CPNColor@@QAEXXZ
?UpdateColors@XPNAnimateCtl@@QAEXXZ
??9CPNColor@@QBEHABV0@@Z
?SetImage@CPNImageControl@@QAEXPAVCPNImage@@@Z
?GetBorderedRect@CPNDrawHelper@@SAXAAVCPNxRect@@K@Z
??1CPNControl@@UAE@XZ
?Create@CPNControl@@IAEHKPAVCPNWindow@@JJJJKPBDK@Z
??1CPNMultipleWindowUpdate@@UAE@XZ
?GetControlsFontSize@CPNDrawHelper@@SAJXZ
??0CPNControl@@QAE@XZ
??0CPNColor@@QAE@ABV0@@Z
?Create@CPNImageControl@@QAEHKPAVCPNWindow@@JJJJKKPAVCPNImage@@@Z
??0CPNPen@@QAE@AAVCPNColor@@JJ@Z
??0CPNMultipleWindowUpdate@@QAE@XZ
??0CPNPen@@QAE@XZ
?StretchBlit@CPNDC@@UAEXPAVCPNImage@@JJJJJJJJJ@Z
??0CPNBrush@@QAE@XZ
?SetBrush@XPNDC@@QAEPAVCPNBrush@@PAV2@@Z
?SetStyle@CPNPen@@UAEXJ@Z
?SetColor@CPNBrush@@UAEXAAVCPNColor@@@Z
?GetCharHeight@CPNDC@@UAEJXZ
?SetPen@XPNDC@@QAEPAVCPNPen@@PAV2@@Z
?SelectNewFgMixMode@CPNDC@@UAEXJ@Z
?SelectNewTextFgColor@CPNDC@@UAEXPAVCPNColor@@@Z
?DrawRectangle@CPNDC@@UAEXAAVCPNxRect@@@Z
?SelectNewBackgroundMode@CPNDC@@UAEXJ@Z
??1CPNCursor@@UAE@XZ
?DrawTextExA@CPNDC@@UAEXPBDAAVCPNxRect@@K@Z
??1CPNPen@@UAE@XZ
?OnPrimaryBtnDown@CPNImageControl@@MAEXABVCPNxPoint@@@Z
??0CPNCursor@@QAE@XZ
?Create@CPNImageControl@@UAEHKPAVCPNWindow@@JJJJKKK@Z
??1CPNWindowDC@@UAE@XZ
?OnPrimaryBtnUp@CPNImageControl@@MAEXABVCPNxPoint@@@Z
??0CPNWindowDC@@QAE@PAVCPNWindow@@@Z
??0CPNScrollHelper@@QAE@PAVXPNButton@@K@Z
??0CPNObject@@QAE@XZ
?SetPosition@CPNScrollHelper@@QAEXJ@Z
?LoadPopupMenu@CPNMenu@@UAEHK@Z
?GetMenuItemPos@CPNMenu@@UAEKK@Z
??0CPNRegion@@QAE@XZ
?HasFocus@CPNWindow@@UBEHXZ
?Show@CPNWindow@@UAEHH@Z
?IsShown@CPNWindow@@UBEHXZ
?SetShowState@CPNWindow@@UAEXJ@Z
?GetShowState@CPNWindow@@UBEJXZ
?SetForegroundWindow@CPNWindow@@UAEXHK@Z
?Enable@CPNWindow@@UAEXH@Z
?IsEnabled@CPNWindow@@UBEHXZ
?GetMenu@CPNWindow@@UAEHAAVCPNMenu@@@Z
?AttachWindowItem@CPNWindow@@UAEHKPAV1@@Z
?DetachWindowItem@CPNWindow@@UAEXXZ
?Attach@CPNWindow@@UAEXABU_PNxWindow@@@Z
?Attach@CPNWindow@@UAEXPAX@Z
?Detach@CPNWindow@@UAEXXZ
?SubclassWnd@CPNWindow@@UAEHPAU_PNxWindow@@@Z
?GetPNxWindowID@CPNWindow@@UBEPAXXZ
??BCPNWindow@@UBE?BU_PNxWindow@@XZ
?OnEvent@CPNWindow@@UAEHAAVCPNEvent@@@Z
?Create@CPNWindow@@UAEHPAV1@JJJJKPBD@Z
??0CPNEvent@@QAE@KKPAVCPNRouter@@KKKK@Z
??1CPNEvent@@UAE@XZ
?MapCoordinatesTo@CPNWindow@@UBEXPAV1@AAVCPNxRect@@@Z
?MapCoordinatesTo@CPNWindow@@UBEXPAV1@AAVCPNxPoint@@@Z
?UnsubclassWnd@CPNWindow@@QAEPAUHWND__@@XZ
?AddObserver@CPNRouter@@QAEXPAV1@KK@Z
??0CPNDC@@QAE@PAUHDC__@@@Z
??0CPNMemoryDC@@QAE@PAVCPNDC@@AAVCPNxRect@@@Z
??0CPNBrush@@QAE@AAVCPNColor@@J@Z
?FillRectangle@CPNDC@@UAEXABVCPNxRect@@AAVCPNBrush@@@Z
??1CPNBrush@@UAE@XZ
?GetBlackBrush@CPNDrawHelper@@SAAAVCPNBrush@@XZ
?BlitToScreen@CPNMemoryDC@@UAEXXZ
??1CPNMemoryDC@@UAE@XZ
??1CPNDC@@UAE@XZ
??1CPNRouter@@UAE@XZ
??0CPNRouter@@QAE@XZ
??0CPNColor@@QAE@EEE@Z
?SetPending@XPNTimer@@QAEXH@Z
??1CPNDialog@@UAE@XZ
??1CPNTimer@@MAE@XZ
?SetIcon@CPNWindow@@UAEXAAVCPNIcon@@H@Z
?IsPtInWindow@XPNWindow@@UBEHABVCPNxPoint@@@Z
?AddToolTip@CPNWindow@@UAEHPBD@Z
?AddToolTip@CPNWindow@@UAEHAAVCPNxRect@@PBD@Z
?RemoveAllToolTips@CPNWindow@@UAEXXZ
?EnableToolTips@CPNWindow@@UAEXH@Z
?UpdateShowStateIfMinimized@CPNWindow@@UAEXXZ
?ShouldDrawFocus@CPNWindow@@MAEHXZ
?CreateRectRgn@CPNRegion@@UAEHAAVCPNxRect@@@Z
??1CPNRegion@@UAE@XZ
??4CPNRegion@@QAEAAV0@AAV0@@Z
?GetMinimumSize@XPNImageButton@@QAEHAAVCPNxSize@@@Z
?GetWindowRect@XPNWindow@@QAEXAAVCPNxRect@@@Z
?GetWorkAreaForRect@CPNSystemInfo@@SAJABVCPNxRect@@AAV2@@Z
??0CPNPaintDC@@QAE@PAVCPNWindow@@@Z
??1CPNPaintDC@@UAE@XZ
??0CPNDialog@@QAE@KPAVCPNWindow@@@Z
??0CPNTimer@@QAE@KHPAPAV0@@Z
?Destroy@CPNDialog@@UAEXXZ
?Create@CPNDialog@@UAEHKPAVCPNWindow@@@Z
?DoModal@CPNDialog@@UAEKXZ
?DoModeless@CPNDialog@@UAEKXZ
?IsLargeFontMode@CPNSystemInfo@@SAHXZ
?ParentPaintBackground@XPNWindow@@MAEHPAVCPNDC@@PAVCPNxRect@@@Z
??0CPNColor@@QAE@H@Z

pncrt

_getcwd
fopen
fread
_mkdir
_strcmpi
rename
_chmod
_ultoa
_unlink
_write
_read
_tell
_lseek
_sopen
_open
_creat
_close
_putenv
_strlwr
printf
_adjust_fdiv
_initterm
_onexit
__dllonexit
fflush
_assert
memcpy
memset
srand
rand
strpbrk
__CxxFrameHandler
wcslen
fprintf
_telli64
_lseeki64
_chsize
_fstat
_rmdir
_errno
getenv
_mbctype
isdigit
??3@YAXPAX@Z
_chdir
mktime
time
localtime
isxdigit
strtol
strncpy
_strnicmp
atol
memmove
_ismbcspace
_vsnprintf
realloc
free
malloc
strrchr
floor
isspace
strchr
strtok
_ftol
fclose
strncmp
sprintf
_snprintf
atoi
_stricmp
strstr
_purecall
??2@YAPAXI@Z

ole32

CoCreateInstance

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

kernel32

GetDiskFreeSpaceA
GetDriveTypeA
QueryPerformanceCounter
QueryPerformanceFrequency
GetWindowsDirectoryA
GetTempPathA
GetVolumeInformationA
lstrlenA
FindFirstFileA
FindNextFileA
FindClose
ExitProcess
WinExec
lstrcpynA
GetProfileStringA
GetSystemDirectoryA
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
GetTempFileNameA
CreateFileA
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
GetLocaleInfoA
lstrcpyA
DeleteCriticalSection
EnterCriticalSection
GetVersion
GetVersionExA
GetSystemInfo
GetProcAddress
FreeLibrary
SetErrorMode
LoadLibraryA
LeaveCriticalSection
GetTickCount
InterlockedIncrement
InitializeCriticalSection
GetLastError
GetPrivateProfileStringA
GetCurrentThreadId
ExpandEnvironmentStringsA
CloseHandle
GetCurrentProcessId
GetModuleFileNameA

user32

FindWindowA
DdeGetData
DdeFreeDataHandle
DdeUninitialize
DdeInitializeA
DdeFreeStringHandle
DdeCreateStringHandleA
DdeConnect
DdeGetLastError
CharPrevA
GetSystemMetrics
wsprintfA
CharNextA
GetUpdateRect
CharLowerA
GetClassNameA
InvalidateRect
SetActiveWindow
DestroyWindow
GetCursorPos
UpdateWindow
GetFocus
CallNextHookEx
PtInRect
GetDC
DrawFocusRect
GetKeyState
UnhookWindowsHookEx
SetWindowsHookExA
ReleaseDC
SetWindowLongA
GetClientRect
GetWindowLongA
SendMessageTimeoutA
GetWindowThreadProcessId
ClientToScreen
EnumWindows
PostMessageA
GetPropA
GetParent
GetAsyncKeyState
GetWindowRect
BeginPaint
EndPaint
EnumChildWindows
DdeDisconnect
SendMessageA
RegisterWindowMessageA
SystemParametersInfoA
DdeClientTransaction

advapi32

RegOpenKeyExA
RegQueryValueA
RegOpenKeyA
RegSetValueA
RegCreateKeyA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegQueryValueExA
RegEnumKeyA
RegSetValueExA
RegEnumKeyExA

shell32

ShellExecuteExA

oleaut32

SysFreeString

Exports

Exports

?DdeCallback@@YGPAUHDDEDATA__@@IIPAUHCONV__@@PAUHSZ__@@1PAU1@KK@Z
EMBEDGUICreateServiceInstance
EmbedGUICreateInstance
EmbedGUIShutdown
RMACreateInstance
RMAShutdown
SetDLLAccessPath

Sections

.text
Size: 304KB - Virtual size: 303KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_DATA
Size: 4KB - Virtual size: 338B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/rpplugins/rpcl3260.dll
.dll windows:4 windows x86 arch:x86

c5dedf2848baeb0be61a0bd749dc2c31

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

atof
_adjust_fdiv
_initterm
_onexit
__dllonexit
tolower
toupper
_wtoi
isdigit
calloc
_CIpow
_ftol
rand
srand
isspace
_strdup
time
_telli64
_lseeki64
_chsize
_fstat
_itoa
strpbrk
_strnicmp
_ismbcspace
realloc
memmove
strchr
_mbctype
strncmp
strstr
_stricmp
??3@YAXPAX@Z
_vsnprintf
fopen
fread
fclose
strtok
_errno
printf
_strcmpi
_write
_strlwr
_tell
_lseek
_read
_open
_creat
_sopen
_stat
_chdir
_close
_unlink
_rmdir
_getcwd
_chmod
_putenv
fscanf
_splitpath
atol
??2@YAPAXI@Z
rename
free
malloc
_purecall
_endthreadex
atoi
_beginthreadex
strncpy
sprintf
strrchr
getenv
_mkdir

kernel32

lstrcpynA
TerminateThread
GetProcAddress
QueryPerformanceFrequency
QueryPerformanceCounter
FindClose
GetCurrentProcess
SetProcessWorkingSetSize
GetVolumeInformationA
MultiByteToWideChar
lstrlenA
GetPrivateProfileStringA
GetTempFileNameA
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
WinExec
GetProfileStringA
ResetEvent
GetTempPathA
GetLastError
FindNextFileA
GetDriveTypeA
FindFirstFileA
GetWindowsDirectoryA
GetDiskFreeSpaceA
SetErrorMode
DisableThreadLibraryCalls
GetCurrentThreadId
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GlobalLock
GlobalAlloc
WaitForSingleObject
CloseHandle
CreateEventA
GlobalFree
GlobalHandle
GlobalUnlock
SetEvent
FreeLibrary
GetModuleHandleA
CreateThread
LoadLibraryA
WideCharToMultiByte
GetModuleFileNameA
GetEnvironmentVariableA
GetTickCount
GetFileSize
CreateFileA
GetSystemInfo
GetVersionExA
GetVersion
lstrcpyA

user32

MessageBoxA
CheckMenuRadioItem
GetMenuItemInfoA
SendMessageTimeoutA
EnumWindows
CharPrevA
CharLowerA
CharUpperA
GetWindowThreadProcessId
CharNextA
wsprintfA
TrackPopupMenuEx
TranslateMessage
DispatchMessageA
GetSubMenu
ScreenToClient
GetClientRect
PtInRect
SendMessageA
CallNextHookEx
GetClassNameA
GetMenuState
ModifyMenuA
EnableMenuItem
CreatePopupMenu
CheckMenuItem
RemoveMenu
GetMenuItemCount
InsertMenuA
DestroyMenu
GetClassInfoA
IsChild
UnhookWindowsHookEx
GetMenuItemID
DefWindowProcA
GetSystemMetrics
RegisterClassA
CreateWindowExA
SetWindowLongA
CreateDialogIndirectParamA
GetWindowLongA
ShowWindow
PostMessageA
SetWindowTextA
PeekMessageA
DestroyWindow
GetDlgItem
WindowFromPoint
GetMessageA
PostThreadMessageA
SetWindowsHookExA
FindWindowA
SystemParametersInfoA
DdeClientTransaction
DdeGetData
DdeFreeDataHandle
DdeUninitialize
DdeInitializeA
DdeFreeStringHandle
DdeCreateStringHandleA
DdeConnect
DdeDisconnect
DdeGetLastError

advapi32

RegDeleteValueA
RegQueryInfoKeyA
RegEnumKeyExA
RegCreateKeyExA
RegEnumKeyA
RegCloseKey
RegDeleteKeyA
RegCreateKeyA
RegSetValueA
RegQueryValueA
RegOpenKeyA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA

winmm

mixerGetControlDetailsA
mixerSetControlDetails
mixerGetDevCapsA
mixerClose
mixerGetLineControlsA
mixerGetLineInfoA
waveInStart
waveInAddBuffer
waveInPrepareHeader
waveInOpen
waveInClose
waveInReset
waveInUnprepareHeader
mixerGetNumDevs
mixerOpen

Exports

Exports

?DdeCallback@@YGPAUHDDEDATA__@@IIPAUHCONV__@@PAUHSZ__@@1PAU1@KK@Z
RMACreateInstance
RMAShutdown
RPCLSVCCreateInstance
RPCreateAggregatedClass
SetDLLAccessPath

Sections

.text
Size: 388KB - Virtual size: 385KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_DATA
Size: 4KB - Virtual size: 378B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAM_FILES_COMMON/Real/rpplugins/rput3260.dll
.dll windows:4 windows x86 arch:x86

53529fc392e8e5817525b70d90746114

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pngu3267

??0CPNControl@@QAE@XZ
?SetId@CPNControl@@UAEXK@Z
?Create@CPNListBox@@UAEHKPAVCPNWindow@@JJJJK@Z
?GetCount@CPNListBox@@UBEKXZ
?HandleEvent@CPNListBox@@UAEXAAVCPNEvent@@@Z
?IsSelected@CPNListBox@@UBEHK@Z
?GetCurrentSelection@CPNListBox@@UBEKXZ
?SetCurrentSelection@CPNListBox@@UAEHK@Z
?SetSelection@CPNListBox@@UAEHKH@Z
?AddString@CPNListBox@@UAEKK@Z
?AddString@CPNListBox@@UAEKPBD@Z
?InsertString@CPNListBox@@UAEKPBDK@Z
?RemoveString@CPNListBox@@UAEKK@Z
?RemoveAll@CPNListBox@@UAEXXZ
?GetSelectionCount@CPNListBox@@UBEKXZ
?GetSelectedItems@CPNListBox@@UBEKPAKI@Z
?GetString@CPNListBox@@UBEKPADKK@Z
?ItemFromPoint@CPNListBox@@UBEKVCPNxPoint@@@Z
?FindString@CPNListBox@@UAEJPBDKHH@Z
??0CPNImageControl@@QAE@XZ
??0CPNBitmapImage@@QAE@XZ
?Create@CPNImageControl@@QAEHKPAVCPNWindow@@JJJJKKPAVCPNImage@@@Z
?UpdateBackgroundColor@CPNImageControl@@QAEXXZ
??1CPNControl@@UAE@XZ
?Attach@CPNWindow@@QAEXPAUHWND__@@@Z
?SetImage@CPNImageControl@@QAEXPAVCPNImage@@@Z
??0CPNEdit@@QAE@XZ
??1CPNText@@UAE@XZ
??1CPNButton@@UAE@XZ
??0CPNCheckButton@@QAE@XZ
?EndDialog@CPNDialog@@UAEXK@Z
??0CPNText@@QAE@XZ
??0CPNButton@@QAE@XZ
??0CPNPopupList@@QAE@XZ
?AddObserver@CPNRouter@@QAEXPAV1@KK@Z
??1CPNDialog@@UAE@XZ
??0CPNDialog@@QAE@KPAVCPNWindow@@@Z
?OnEvent@XPNDialog@@UAEHAAVCPNEvent@@@Z
?DoModal@CPNDialog@@UAEKXZ
?DoModeless@CPNDialog@@UAEKXZ
?GetScreenMappingFactors@CPNSystemInfo@@SAXAAJ0@Z
?OFNHookProc@CPNOpenFileDialog@@KGIPAUHWND__@@IIJ@Z
?TranslateFlags@CPNOpenFileDialog@@IAEKXZ
?GetHWND@CPNWindow@@QBEPAUHWND__@@XZ
??1CPNOpenFileDialog@@UAE@XZ
?GetPNWindow@CPNWindow@@SAPAV1@PAX@Z
??0CPNWindow@@QAE@XZ
??0CPNOpenFileDialog@@QAE@XZ
?NotifyObservers@CPNRouter@@UAEXAAVCPNEvent@@@Z
?HandleEvent@CPNWindow@@UAEXAAVCPNEvent@@@Z
?Destroy@CPNDialog@@UAEXXZ
?IsValid@CPNWindow@@UBEHXZ
?GetParent@CPNWindow@@UBEPAV1@XZ
?SetParent@CPNWindow@@UAEXPAV1@@Z
?SetZOrderPosition@CPNWindow@@UAEXK@Z
?SetTitle@CPNWindow@@UAEXPBD@Z
?GetTitle@CPNWindow@@UBEXPADJ@Z
?GetTitleLength@CPNWindow@@UBEJXZ
?SetFont@CPNWindow@@UAEXPAVCPNFont@@H@Z
?GetFont@CPNWindow@@UBEPAVCPNFont@@XZ
?SetSize@CPNWindow@@UAEXABVCPNxSize@@@Z
?GetSize@CPNWindow@@UBEXAAVCPNxSize@@@Z
?GetClientRect@CPNWindow@@UBEXAAVCPNxRect@@@Z
?GetScreenRect@CPNWindow@@UBEXAAVCPNxRect@@@Z
?Move@CPNWindow@@UAEXABVCPNxPoint@@@Z
?Center@CPNWindow@@UAEXXZ
?ScrollWindow@CPNWindow@@UAEXJJPAVCPNxRect@@K@Z
?GetPosition@CPNWindow@@UBEXAAVCPNxPoint@@@Z
?MoveAndSize@CPNWindow@@UAEXABU_PNxRect@@@Z
?MoveAndSize@CPNWindow@@UAEXABU_PNxPoint@@ABU_PNxSize@@@Z
?ClientToScreen@CPNWindow@@UBEXAAVCPNxRect@@@Z
?ClientToScreen@CPNWindow@@UBEXAAVCPNxPoint@@@Z
?ScreenToClient@CPNWindow@@UBEXAAVCPNxRect@@@Z
?ScreenToClient@CPNWindow@@UBEXAAVCPNxPoint@@@Z
?PauseUpdates@CPNWindow@@UAEXXZ
?HasPausedUpdates@CPNWindow@@UBEHXZ
?ResumeUpdates@CPNWindow@@UAEXXZ
?RepaintRect@CPNWindow@@UAEXPBVCPNxRect@@H@Z
?RedrawWindow@CPNWindow@@UAEXXZ
?ValidateRect@CPNWindow@@UAEXPBVCPNxRect@@@Z
?SetCapture@CPNWindow@@UAEXXZ
?ReleaseCapture@CPNWindow@@UAEXXZ
?HasCapture@CPNWindow@@UBEHXZ
?SetFocus@CPNWindow@@UAEHXZ
?HasFocus@CPNWindow@@UBEHXZ
?Show@CPNWindow@@UAEHH@Z
?IsShown@CPNWindow@@UBEHXZ
?SetShowState@CPNWindow@@UAEXJ@Z
?GetShowState@CPNWindow@@UBEJXZ
?SetForegroundWindow@CPNWindow@@UAEXHK@Z
?Enable@CPNWindow@@UAEXH@Z
?IsEnabled@CPNWindow@@UBEHXZ
?GetTextLength@CPNControl@@UBEJXZ
?SetText@CPNControl@@UAEXPBD@Z
?DetachWindowItem@CPNWindow@@UAEXXZ
?Attach@CPNWindow@@UAEXABU_PNxWindow@@@Z
?Attach@CPNWindow@@UAEXPAX@Z
?Detach@CPNWindow@@UAEXXZ
?SubclassWnd@CPNWindow@@UAEHPAU_PNxWindow@@@Z
PNGuiInitialize
??BCPNWindow@@UBE?BU_PNxWindow@@XZ
?OnEvent@CPNWindow@@UAEHAAVCPNEvent@@@Z
?Destroy@CPNWindow@@UAEXXZ
??0CPNRouter@@QAE@XZ
??1CPNRouter@@UAE@XZ
?Create@CPNPropertyPage@@UAEHK@Z
?OnWizBack@XPNPropertyPage@@UAEJXZ
?OnWizNext@XPNPropertyPage@@UAEJXZ
?OnHelp@XPNPropertyPage@@UAEHXZ
?OnRestoreDefaults@XPNPropertyPage@@UAEHXZ
?OnEvent@CPNPropertyPage@@UAEHAAVCPNEvent@@@Z
??0CPNPropertySheet@@QAE@K@Z
??0CPNPropertyPage@@IAE@KPBD@Z
?GetPage@XPNPropertySheet@@QBEPAVCPNPropertyPage@@K@Z
??1CPNPropertyPage@@UAE@XZ
?Highlight@CPNText@@UAEXH@Z
?Create@CPNText@@UAEHKPAVCPNWindow@@JJJJKPBDK@Z
??0CPNTreeControl@@QAE@XZ
??0CPNBrush@@QAE@XZ
??1CPNBrush@@UAE@XZ
??0CPNPen@@QAE@XZ
??1CPNPen@@UAE@XZ
??1CPNColor@@UAE@XZ
?SetColor@CPNPen@@UAEXAAVCPNColor@@@Z
?Set@CPNColor@@QAEXEEE@Z
?LockResource@CPNGraphicResource@@QAEHXZ
?SetColor@CPNBrush@@UAEXAAVCPNColor@@@Z
??0CPNColor@@QAE@EEE@Z
?UnLockResource@CPNGraphicResource@@QAEHXZ
??1CPNPaintDC@@UAE@XZ
??0CPNPaintDC@@QAE@PAVCPNWindow@@@Z
??1CPNMemoryDC@@UAE@XZ
?BlitToScreen@CPNMemoryDC@@UAEXXZ
?BlitTo@CPNMemoryDC@@QAEXPAVCPNDC@@AAVCPNxRect@@1K@Z
?DrawLine@CPNDC@@UAEXJJJJ@Z
?SetPen@XPNDC@@QAEPAVCPNPen@@PAV2@@Z
?FillRectangle@CPNDC@@UAEXABVCPNxRect@@AAVCPNBrush@@@Z
??0CPNMemoryDC@@QAE@PAVCPNDC@@AAVCPNxRect@@@Z
??1CPNScreenDC@@UAE@XZ
??0CPNScreenDC@@QAE@XZ
??1CPNWindow@@UAE@XZ
?AddRadio@CPNRadioGroup@@QAEXPAVCPNRadioBtn@@@Z
??0CPNRadioGroup@@QAE@XZ
??0CPNRadioBtn@@QAE@XZ
?DoModal@CPNMessageBox@@UAEKPAVCPNWindow@@PBD1K@Z
??0CPNDialog@@QAE@XZ
?SetSliderPos@XPNSlider@@QAEXJ@Z
?Create@XPNSlider@@QAEHKPAVCPNWindow@@JJJJKK@Z
?PartitionSlider@XPNSlider@@QAEXK@Z
??4CPNColor@@QAEAAV0@ABV0@@Z
??0CPNColor@@QAE@H@Z
?SetSliderRange@XPNSlider@@QAEXJJ@Z
??0CPNSlider@@QAE@XZ
?AddAccessibility@CPNWindow@@QAEHPBDK@Z
??0CPNPropertySheet@@QAE@XZ
??1CPNPropertySheet@@UAE@XZ
??1CPNCursor@@UAE@XZ
?SetCursor@CPNSystemInfo@@SAPAVCPNCursor@@AAV2@@Z
?LoadStandardCursor@CPNCursor@@UAEHJ@Z
??0CPNCursor@@QAE@XZ
?SetText@XPNCustomText@@UAEXPBD@Z
?OnEvent@CPNCustomText@@UAEHAAVCPNEvent@@@Z
?DrawArrow@XPNScrollButton@@MAEXAAVCPNDC@@ABVCPNxRect@@KK@Z
?Create@XPNScrollButton@@UAEHKPAVCPNWindow@@JJJJKK@Z
?AdjustButtonFaceRect@XPNButton@@MAEXAAVCPNxRect@@ABV2@HHJ@Z
?GetButtonFaceColor@XPNButton@@UAEXAAVCPNColor@@@Z
?SetButtonFaceColor@CPNButton@@UAEXABVCPNColor@@@Z
?MakeButtonDefault@XPNButton@@UAEXH@Z
?DrawButtonFace@CPNButton@@UAEXPAVCPNDC@@AAVCPNxRect@@HH@Z
?OnPaint@XPNButton@@UAEXPAVCPNDC@@HH@Z
?SetPushedState@XPNButton@@UAEXH@Z
?Create@CPNButton@@UAEHKPAVCPNWindow@@JJJJKKPBD@Z
?OnEvent@XPNScrollButton@@UAEHAAVCPNEvent@@@Z
?GetControlsFont@CPNDrawHelper@@SAAAVCPNFont@@XZ
?Create@XPNCustomText@@QAEHKPAVCPNWindow@@JJJJKPBDK@Z
??0XPNCustomText@@QAE@XZ
??0XPNScrollButton@@IAE@XZ
??1XPNScrollButton@@MAE@XZ
??1XPNCustomText@@UAE@XZ
?GetFreeDiskSpace@CPNSystemInfo@@SAKABVCPNString@@@Z
?SetPosition@CPNScrollHelper@@QAEXJ@Z
?GetDiskSpace@CPNSystemInfo@@SAXABVCPNString@@AAK1@Z
?MapCoordinatesTo@CPNWindow@@UBEXPAV1@AAVCPNxRect@@@Z
?MapCoordinatesTo@CPNWindow@@UBEXPAV1@AAVCPNxPoint@@@Z
?SetIcon@CPNWindow@@UAEXAAVCPNIcon@@H@Z
?IsPtInWindow@XPNWindow@@UBEHABVCPNxPoint@@@Z
?AddToolTip@CPNWindow@@UAEHPBD@Z
?AddToolTip@CPNWindow@@UAEHAAVCPNxRect@@PBD@Z
?RemoveAllToolTips@CPNWindow@@UAEXXZ
?EnableToolTips@CPNWindow@@UAEXH@Z
?UpdateShowStateIfMinimized@CPNWindow@@UAEXXZ
?ShouldDrawFocus@CPNWindow@@MAEHXZ
?ParentPaintBackground@XPNWindow@@MAEHPAVCPNDC@@PAVCPNxRect@@@Z
?OnWndMsg@CPNWindow@@UAEHKIJPAJ@Z
?Create@CPNDialog@@UAEHKPAVCPNWindow@@@Z
?DoModeless@CPNOpenFileDialog@@UAEKXZ
?DoModaless@CPNDialog@@UAEKXZ
?InitDialog@CPNDialog@@UAEHXZ
?EndDialog@CPNOpenFileDialog@@UAEXK@Z
??1CPNEdit@@UAE@XZ
??1CPNCheckButton@@UAE@XZ
?Create@CPNEdit@@QAEHKPAVCPNWindow@@JJJJKKPBD@Z
?GetId@CPNControl@@UBEKXZ
?GetText@CPNControl@@UBEXPADJ@Z
?OnEvent@CPNOpenFileDialog@@UAEHAAVCPNEvent@@@Z
?Create@CPNWindow@@UAEHPAV1@JJJJKPBD@Z
?GetMenu@CPNWindow@@UAEHAAVCPNMenu@@@Z
?AttachWindowItem@CPNWindow@@UAEHKPAV1@@Z
?GetPNxWindowID@CPNWindow@@UBEPAXXZ
?PreDomodal@XPNDialog@@UAEXPAVCPNWindow@@@Z
?PostDomodal@XPNDialog@@UAEXPAVCPNWindow@@@Z
?GetSingleInstanceId@XPNDialog@@UAEKXZ
?GetTemplateId@XPNDialog@@UBEKXZ
?SetDefaultButtonId@CPNDialog@@UAEXK@Z
?GetDefaultButtonId@CPNDialog@@UBEKXZ
?SetSingleInstance@CPNDialog@@UAEXH@Z
??0CPNIcon@@QAE@XZ
?LoadSizedIcon@CPNIcon@@UAEHKJJ@Z
??1CPNIcon@@UAE@XZ
PNGuiTerminate

pncrt

strncpy
_open
_sopen
_lseek
_tell
_read
_write
_unlink
_ltoa
??2@YAPAXI@Z
_purecall
??3@YAXPAX@Z
wcscat
wcscpy
wcslen
free
wcschr
malloc
_close
_creat
strchr
sprintf
strrchr
strtok
_splitpath
strstr
remove
strncmp
wcstok
_wcsdup
tolower
memmove
_snprintf
_ftol
_putenv
_mbctype
localtime
time
mktime
printf
_vsnprintf
_stricmp
isalpha
isdigit
isspace
strtoul
_errno
realloc
_ismbcspace
atol
_strnicmp
strpbrk
_fstat
_chsize
_lseeki64
_telli64
setlocale
_stat
vsprintf
rand
__dllonexit
_onexit
_initterm
_adjust_fdiv
_strcmpi
_ftime
atoi

ole32

CoInitialize
CoCreateInstance
CoUninitialize

shell32

SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHBrowseForFolderA

comdlg32

GetOpenFileNameW
GetSaveFileNameW
GetSaveFileNameA
GetOpenFileNameA

user32

GetDlgItem
GetDlgItemTextA
CharNextW
SetDlgItemTextA
EnumChildWindows
MoveWindow
GetWindowRect
CharNextA
SetWindowLongA
GetParent
PostMessageA
OffsetRect
SetRect
FindWindowExA
SetWindowPos
GetSystemMetrics
GetClientRect
SetWindowTextA
wsprintfA
EndPaint
FillRect
GetSysColor
BeginPaint
ScreenToClient
InvalidateRect
GetWindowLongA
CreateWindowExA
DrawTextA
DestroyIcon
DrawStateA
PtInRect
ReleaseCapture
WindowFromPoint
ClientToScreen
SetCapture
CallWindowProcA
SendMessageA
DefWindowProcA
UpdateWindow
SetFocus
DestroyWindow
MapDialogRect
CreateDialogParamA
GetWindowThreadProcessId
PostThreadMessageA
SetTimer
SendDlgItemMessageA
CharPrevA
DialogBoxParamA
EnumWindows
SendMessageTimeoutA
GetKeyState
MessageBoxA
SetForegroundWindow
MapWindowPoints
SystemParametersInfoA
GetWindow
ReleaseDC
GetDC
GetWindowTextA
ShowWindow
EnableWindow
IsWindow
IsDlgButtonChecked
IntersectRect
GetLastActivePopup
EndDialog
GetCapture
GetActiveWindow
DdeClientTransaction
DdeGetData
FindWindowA
DdeConnect
DdeDisconnect
DdeFreeDataHandle
DdeUninitialize
DdeInitializeA
DdeFreeStringHandle
DdeCreateStringHandleA
DdeGetLastError

advapi32

RegEnumKeyA
RegCloseKey
RegDeleteValueA
RegQueryValueExA
RegCreateKeyA
RegSetValueExA
RegQueryValueA
RegSetValueA
RegQueryInfoKeyA
RegOpenKeyExA
RegCreateKeyExA
RegOpenKeyA
RegEnumKeyExA
RegDeleteKeyA

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

gdi32

CreateSolidBrush
BitBlt
SetTextColor
SelectObject
SetBkMode
CreateCompatibleBitmap
GetStockObject
GetDCOrgEx
GetClipBox
GetTextExtentPoint32A
DeleteObject
SetBkColor
ExtTextOutA
GetDeviceCaps

comctl32

ImageList_LoadImageA
ImageList_GetIcon

oleaut32

VariantClear
VariantInit

winmm

waveOutGetDevCapsA

kernel32

GetSystemInfo
lstrcpyA
GlobalMemoryStatus
GetLocaleInfoA
lstrlenA
FindFirstFileW
lstrcpynA
CreateDirectoryA
DeleteFileA
GetVersionExA
GlobalFree
GetSystemDirectoryA
GlobalUnlock
FindNextFileA
FindClose
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
OpenFile
GetFileSize
ReadFile
CloseHandle
GetEnvironmentVariableA
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
FreeLibrary
LoadLibraryA
GetPrivateProfileStringA
GetLastError
GetLogicalDriveStringsA
GetDriveTypeA
WideCharToMultiByte
MultiByteToWideChar
InterlockedIncrement
InterlockedDecrement
DisableThreadLibraryCalls
GetFileAttributesA
CreateFileA
GlobalLock
CreateFileMappingA
GetTempFileNameA
CreateProcessA
LCMapStringA
GlobalAlloc
GetVersion
GetTickCount
GetTempPathA
WinExec
SetErrorMode
GetProfileStringA
FindFirstFileA
RemoveDirectoryA
UnmapViewOfFile
MapViewOfFile

Exports

Exports

?DdeCallback@@YGPAUHDDEDATA__@@IIPAUHCONV__@@PAUHSZ__@@1PAU1@KK@Z
RMACreateInstance
RMAShutdown
RPCreateClass
SetDLLAccessPath

Sections

.text
Size: 284KB - Virtual size: 281KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_DATA
Size: 4KB - Virtual size: 378B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 160KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$R0
.dll regsvr32 windows:4 windows x86 arch:x86

856609e709a6cabc2acd456e10aed0e4

Code Sign

01
Certificate

Issuer

CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6d

Not Before

01/08/1996, 00:00

Not After

31/12/2020, 23:59

Subject

CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6d

0a
Certificate

Issuer

CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6d

Not Before

06/08/2003, 00:00

Not After

05/08/2013, 23:59

Subject

CN=Thawte Code Signing CA,O=Thawte Consulting (Pty) Ltd.,C=ZA

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

12:ee:97:f7:6b:56:99:e3:2b:08:af:5d:f8:3a:20:30
Certificate

Issuer

CN=Thawte Code Signing CA,O=Thawte Consulting (Pty) Ltd.,C=ZA

Not Before

30/08/2006, 20:44

Not After

15/09/2007, 17:25

Subject

CN=RealNetworks\, Inc.,OU=Software Product Development,O=RealNetworks\, Inc.,L=Seattle,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04/12/2003, 00:00

Not After

03/12/2008, 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

f0:21:3e:b1:a9:b6:37:1f:ff:1c:dd:ce:74:f4:d0:f5:35:ad:7d:9b
Signer

Actual PE Digest

f0:21:3e:b1:a9:b6:37:1f:ff:1c:dd:ce:74:f4:d0:f5:35:ad:7d:9b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

_initterm
_adjust_fdiv
_ismbcspace
_open
_chsize
_fstat
_onexit
_read
_unlink
_putenv
_write
_sopen
_tell
_lseek
__dllonexit
malloc
_errno
_telli64
_lseeki64
memmove
_vsnprintf
strchr
isdigit
_stricmp
strncmp
printf
getenv
realloc
strstr
_snprintf
atol
atoi
sprintf
strncat
_purecall
??2@YAPAXI@Z
wcslen
wcsncpy
strncpy
strrchr
??3@YAXPAX@Z
free
_strnicmp
_strcmpi
_close
_creat

ole32

CoTaskMemAlloc
CreateBindCtx
CreateOleAdviseHolder
CoTaskMemFree
CoCreateInstance
CoGetMalloc

kernel32

CreateThread
InitializeCriticalSection
GetModuleFileNameA
GetTempPathA
GetTempFileNameA
CloseHandle
CreateFileA
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
GetVersionExA
GetSystemInfo
InterlockedIncrement
InterlockedDecrement
lstrcatA
GetEnvironmentVariableA
LeaveCriticalSection
EnterCriticalSection
WideCharToMultiByte
lstrlenW
lstrcpyA
lstrlenA
lstrcmpA
MultiByteToWideChar
DeleteFileA
WinExec
GetProcAddress
LoadLibraryA
FreeLibrary
SetErrorMode
DeleteCriticalSection
GetLocaleInfoA
GetVersion
GetLastError

user32

CreateDialogParamA
wsprintfA
CharNextA
CharPrevA
IsDialogMessageA
ReleaseDC
GetDC
PtInRect
SendMessageA
SetFocus
BeginPaint
EndPaint
SetParent
IsWindowVisible
GetParent
DefWindowProcA
UnregisterClassA
WinHelpA
GetWindowLongA
ShowWindow
EqualRect
OffsetRect
SetWindowRgn
SetWindowLongA
DestroyWindow
GetWindowRect
MapWindowPoints
SetWindowPos
GetSystemMetrics
GetActiveWindow
LoadStringA
GetDlgItemTextA
SetDlgItemTextA
GetSysColor
FillRect
IntersectRect
CopyRect
GetClientRect
EnumChildWindows
UpdateWindow
LoadCursorA
RegisterClassA
CreateWindowExA
GetKeyState
InvalidateRect
GetClipboardFormatNameA

advapi32

RegSetValueExA
RegDeleteValueA
RegCreateKeyExA
RegOpenKeyExA
RegOpenKeyA
RegDeleteKeyA
RegQueryValueExA
RegCreateKeyA
RegEnumKeyExA
RegQueryValueA
RegSetValueA
RegEnumKeyA
RegCloseKey

gdi32

LPtoDP
CreateSolidBrush
CreateRectRgnIndirect
DeleteDC
SetMapMode
SetWindowOrgEx
DeleteObject
SetViewportOrgEx
GetDeviceCaps
CreateDCA

oleaut32

VariantClear
VariantInit
SysAllocString
LoadTypeLi
LoadRegTypeLi
SysFreeString
OleCreatePropertyFrame
SetErrorInfo
SysAllocStringLen
RegisterTypeLi
VariantChangeType

urlmon

URLDownloadToCacheFileA
HlinkSimpleNavigateToString
CreateURLMoniker
RegisterBindStatusCallback

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 108KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$R2/NSIS.Library.RegTool.v2.$_6_.exe
.exe windows:4 windows x86 arch:x86

27613a5a6234b2a2609ff90c91288dae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateProcessA
FreeLibrary
GetProcAddress
LoadLibraryExA
MultiByteToWideChar
lstrcmpiA
lstrlenA
SetEndOfFile
WaitForSingleObject
UnmapViewOfFile
lstrcpyA
MapViewOfFile
CreateFileMappingA
GetFileSize
CreateFileA
lstrcatA
GetWindowsDirectoryA
GetShortPathNameA
GetCommandLineA
ExitProcess
GetModuleHandleA
GetModuleFileNameA
SetFilePointer
SetErrorMode

oleaut32

LoadTypeLi
RegisterTypeLi

advapi32

RegQueryValueExA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyExA
RegCloseKey

user32

wsprintfA
CharNextA

ole32

OleInitialize
OleUninitialize

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
$SYSDIR/pncrt.dll
.dll windows:4 windows x86 arch:x86

828907b7a8ec04c9c4031e40ef2f76ec

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetFilePointer
RtlUnwind
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
SetUnhandledExceptionFilter
GetModuleFileNameA
GetModuleFileNameW
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetCommandLineA
GetVersion
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
ResumeThread
CreateThread
TlsSetValue
ExitThread
CloseHandle
GetCurrentThreadId
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCurrentThread
FindNextFileA
FindFirstFileA
FindClose
FindNextFileW
FindFirstFileW
HeapFree
HeapAlloc
HeapReAlloc
HeapValidate
HeapSize
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
SetHandleCount
GetFileType
GetStartupInfoA
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
MultiByteToWideChar
GetCommandLineW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
UnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetConsoleCtrlHandler
SetEnvironmentVariableW
InterlockedDecrement
InterlockedIncrement
FlushFileBuffers
RaiseException
SetStdHandle
Sleep
CompareStringA
CompareStringW
GetLocaleInfoA
GetLocaleInfoW
IsValidLocale
IsValidCodePage
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
GetTimeZoneInformation
SetEnvironmentVariableA
Beep
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDiskFreeSpaceA
GetLogicalDrives
SetErrorMode
GetFileAttributesA
GetCurrentDirectoryA
SetCurrentDirectoryA
SetFileAttributesA
GetFullPathNameA
GetDriveTypeA
GetCurrentProcessId
CreateDirectoryA
RemoveDirectoryA
DeleteFileA
GetFileAttributesW
GetCurrentDirectoryW
SetCurrentDirectoryW
SetFileAttributesW
GetFullPathNameW
CreateDirectoryW
DeleteFileW
MoveFileW
RemoveDirectoryW
GetDriveTypeW
MoveFileA
GetExitCodeProcess
WaitForSingleObject
FreeLibrary
CreateProcessA
CreateProcessW
HeapCompact
HeapWalk
ReadConsoleA
SetConsoleMode
GetConsoleMode
SetEndOfFile
WriteConsoleA
DuplicateHandle
GetFileInformationByHandle
PeekNamedPipe
ReadConsoleInputA
PeekConsoleInputA
GetNumberOfConsoleInputEvents
LockFile
UnlockFile
CreateFileA
CreatePipe
ReadFile
CreateFileW
GetLocalTime
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetLocalTime
GetSystemTime
GetModuleHandleA

Exports

Exports

$I10_OUTPUT
??0__non_rtti_object@@QAE@ABV0@@Z
??0__non_rtti_object@@QAE@PBD@Z
??0bad_cast@@QAE@ABQBD@Z
??0bad_cast@@QAE@ABV0@@Z
??0bad_typeid@@QAE@ABV0@@Z
??0bad_typeid@@QAE@PBD@Z
??0exception@@QAE@ABQBD@Z
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@XZ
??1__non_rtti_object@@UAE@XZ
??1bad_cast@@UAE@XZ
??1bad_typeid@@UAE@XZ
??1exception@@UAE@XZ
??1type_info@@UAE@XZ
??2@YAPAXI@Z
??3@YAXPAX@Z
??4__non_rtti_object@@QAEAAV0@ABV0@@Z
??4bad_cast@@QAEAAV0@ABV0@@Z
??4bad_typeid@@QAEAAV0@ABV0@@Z
??4exception@@QAEAAV0@ABV0@@Z
??8type_info@@QBEHABV0@@Z
??9type_info@@QBEHABV0@@Z
??_7__non_rtti_object@@6B@
??_7bad_cast@@6B@
??_7bad_typeid@@6B@
??_7exception@@6B@
??_E__non_rtti_object@@UAEPAXI@Z
??_Ebad_cast@@UAEPAXI@Z
??_Ebad_typeid@@UAEPAXI@Z
??_Eexception@@UAEPAXI@Z
??_G__non_rtti_object@@UAEPAXI@Z
??_Gbad_cast@@UAEPAXI@Z
??_Gbad_typeid@@UAEPAXI@Z
??_Gexception@@UAEPAXI@Z
?_query_new_handler@@YAP6AHI@ZXZ
?_query_new_mode@@YAHXZ
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
?_set_new_mode@@YAHH@Z
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
?before@type_info@@QBEHABV1@@Z
?name@type_info@@QBEPBDXZ
?raw_name@type_info@@QBEPBDXZ
?set_new_handler@@YAP6AXXZP6AXXZ@Z
?set_terminate@@YAP6AXXZP6AXXZ@Z
?set_unexpected@@YAP6AXXZP6AXXZ@Z
?terminate@@YAXXZ
?unexpected@@YAXXZ
?what@exception@@UBEPBDXZ
SetUserHeapAlloc
SetUserHeapCalloc
SetUserHeapFree
SetUserHeapReAlloc
SetUserHeapSize
SetUserHeapValidate
_CIacos
_CIasin
_CIatan
_CIatan2
_CIcos
_CIcosh
_CIexp
_CIfmod
_CIlog
_CIlog10
_CIpow
_CIsin
_CIsinh
_CIsqrt
_CItan
_CItanh
_CrtHeapAlloc
_CrtHeapCalloc
_CrtHeapFree
_CrtHeapReAlloc
_CrtHeapSize
_CrtHeapValidate
_CxxThrowException
_EH_prolog
_Getdays
_Getmonths
_Gettnames
_HUGE
_Strftime
_XcptFilter
__CxxFrameHandler
__CxxLongjmpUnwind
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__STRINGTOLD
__argc
__argv
__badioinfo
__crtCompareStringA
__crtGetLocaleInfoW
__crtLCMapStringA
__dllonexit
__doserrno
__fpecode
__getmainargs
__initenv
__isascii
__iscsym
__iscsymf
__lc_codepage
__lc_handle
__lconv_init
__mb_cur_max
__p___argc
__p___argv
__p___initenv
__p___mb_cur_max
__p___wargv
__p___winitenv
__p__acmdln
__p__amblksiz
__p__commode
__p__daylight
__p__dstbias
__p__environ
__p__fileinfo
__p__fmode
__p__iob
__p__mbcasemap
__p__mbctype
__p__osver
__p__pctype
__p__pgmptr
__p__pwctype
__p__timezone
__p__tzname
__p__wcmdln
__p__wenviron
__p__winmajor
__p__winminor
__p__winver
__p__wpgmptr
__pioinfo
__pxcptinfoptrs
__set_app_type
__setlc_active
__setusermatherr
__threadhandle
__threadid
__toascii
__unDName
__unguarded_readlc_active
__wargv
__wgetmainargs
__winitenv
_abnormal_termination
_access
_acmdln
_adj_fdiv_m16i
_adj_fdiv_m32
_adj_fdiv_m32i
_adj_fdiv_m64
_adj_fdiv_r
_adj_fdivr_m16i
_adj_fdivr_m32
_adj_fdivr_m32i
_adj_fdivr_m64
_adj_fpatan
_adj_fprem
_adj_fprem1
_adj_fptan
_adjust_fdiv
_aexit_rtn
_amsg_exit
_assert
_atodbl
_atoi64
_atoldbl
_beep
_beginthread
_beginthreadex
_c_exit
_cabs
_callnewh
_cexit
_cgets
_chdir
_chdrive
_chgsign
_chmod
_chsize
_clearfp
_close
_commit
_commode
_control87
_controlfp
_copysign
_cprintf
_cputs
_creat
_cscanf
_ctype
_cwait
_daylight
_dstbias
_dup
_dup2
_ecvt
_endthread
_endthreadex
_environ
_eof
_errno
_except_handler2
_except_handler3
_execl
_execle
_execlp
_execlpe
_execv
_execve
_execvp
_execvpe
_exit
_expand
_fcloseall
_fcvt
_fdopen
_fgetchar
_fgetwchar
_filbuf
_fileinfo
_filelength
_filelengthi64
_fileno
_findclose
_findfirst
_findfirsti64
_findnext
_findnexti64
_finite
_flsbuf
_flushall
_fmode
_fpclass
_fpieee_flt
_fpreset
_fputchar
_fputwchar
_fsopen
_fstat
_fstati64
_ftime
_ftol
_fullpath
_futime
_gcvt
_get_osfhandle
_get_sbh_threshold
_getch
_getche
_getcwd
_getdcwd
_getdiskfree
_getdllprocaddr
_getdrive
_getdrives
_getmaxstdio
_getmbcp
_getpid
_getsystime
_getw
_getws
_global_unwind2
_heapadd
_heapchk
_heapmin
_heapset
_heapused
_heapwalk
_hypot
_i64toa
_i64tow
_initterm
_inp
_inpd
_inpw
_iob
_isatty
_isctype
_ismbbalnum
_ismbbalpha
_ismbbgraph
_ismbbkalnum
_ismbbkana
_ismbbkprint
_ismbbkpunct
_ismbblead
_ismbbprint
_ismbbpunct
_ismbbtrail
_ismbcalnum
_ismbcalpha
_ismbcdigit
_ismbcgraph
_ismbchira
_ismbckata
_ismbcl0
_ismbcl1
_ismbcl2
_ismbclegal
_ismbclower
_ismbcprint
_ismbcpunct
_ismbcspace
_ismbcsymbol
_ismbcupper
_ismbslead
_ismbstrail
_isnan
_itoa
_itow
_j0
_j1
_jn
_kbhit
_lfind
_loaddll
_local_unwind2
_lock
_locking
_logb
_longjmpex
_lrotl
_lrotr
_lsearch
_lseek
_lseeki64
_ltoa
_ltow
_makepath
_mbbtombc
_mbbtype
_mbcasemap
_mbccpy
_mbcjistojms
_mbcjmstojis
_mbclen
_mbctohira
_mbctokata
_mbctolower
_mbctombb
_mbctoupper
_mbctype
_mbsbtype
_mbscat
_mbschr
_mbscmp
_mbscoll
_mbscpy
_mbscspn
_mbsdec
_mbsdup
_mbsicmp
_mbsicoll
_mbsinc
_mbslen
_mbslwr
_mbsnbcat
_mbsnbcmp
_mbsnbcnt
_mbsnbcoll
_mbsnbcpy
_mbsnbicmp
_mbsnbicoll
_mbsnbset
_mbsncat
_mbsnccnt
_mbsncmp
_mbsncoll
_mbsncpy
_mbsnextc
_mbsnicmp
_mbsnicoll
_mbsninc
_mbsnset
_mbspbrk
_mbsrchr
_mbsrev
_mbsset
_mbsspn
_mbsspnp
_mbsstr
_mbstok
_mbstrlen
_mbsupr
_memccpy
_memicmp
_mkdir
_mktemp
_msize
_nextafter
_onexit
_open
_open_osfhandle
_osver
_outp
_outpd
_outpw
_pclose
_pctype
_pgmptr
_pipe
_popen
_purecall
_putch
_putenv
_putw
_putws
_pwctype
_read
_rmdir
_rmtmp
_rotl
_rotr
_safe_fdiv
_safe_fdivr
_safe_fprem
_safe_fprem1
_scalb
_searchenv
_seh_longjmp_unwind
_set_error_mode
_set_sbh_threshold
_seterrormode
_setjmp
_setjmp3
_setmaxstdio
_setmbcp
_setmode
_setsystime
_sleep
_snprintf
_snwprintf
_sopen
_spawnl
_spawnle
_spawnlp
_spawnlpe
_spawnv
_spawnve
_spawnvp
_spawnvpe
_splitpath
_stat
_stati64
_statusfp
_strcmpi
_strdate
_strdup
_strerror
_stricmp
_stricoll
_strlwr
_strncoll
_strnicmp
_strnicoll
_strnset
_strrev
_strset
_strtime
_strupr
_swab
_sys_errlist
_sys_nerr
_tell
_telli64
_tempnam
_timezone
_tolower
_toupper
_tzname
_tzset
_ui64toa
_ui64tow
_ultoa
_ultow
_umask
_ungetch
_unlink
_unloaddll
_unlock
_utime
_vsnprintf
_vsnwprintf
_waccess
_wasctime
_wchdir
_wchmod
_wcmdln
_wcreat
_wcsdup
_wcsicmp

Sections

.text
Size: 212KB - Virtual size: 211KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/pndx5016.dll
$SYSDIR/pndx5032.dll
.dll windows:4 windows x86 arch:x86

3dff24d172f5031d837d000fcf3a81f8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SMapLS_IP_EBP_8
SUnMapLS_IP_EBP_8
SMapLS_IP_EBP_12
SUnMapLS_IP_EBP_12
SMapLS_IP_EBP_16
SUnMapLS_IP_EBP_16
ThunkConnect32
GlobalFree
GetVersion
GlobalAlloc
SMapLS_IP_EBP_8
SUnMapLS_IP_EBP_8
SMapLS_IP_EBP_12
SUnMapLS_IP_EBP_12
SMapLS_IP_EBP_16
SUnMapLS_IP_EBP_16
ThunkConnect32
GlobalFree
GetVersion
GlobalAlloc

pncrt

free
_adjust_fdiv
malloc
_initterm

Exports

Exports

GetDevNodeStatus32Call
thk_ThunkData32

Sections

.text
Size: 1024B - Virtual size: 790B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 494B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 194B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/ADO3500.INI
$WINDIR/DVDAMP.INI
$WINDIR/MENUTHEME.INI
$WINDIR/herosoft/InstallCall.exe
.exe windows:4 windows x86 arch:x86

017de576c66d6a4e23d01e060c072421

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyA
WritePrivateProfileStringA
GetLocalTime
Sleep
lstrlenA
GetPrivateProfileStringA
FlushFileBuffers
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetStdHandle
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
SetFilePointer
GetLastError
HeapReAlloc
VirtualAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
CloseHandle

shell32

StrStrIA

netapi32

Netbios

ws2_32

inet_ntoa
connect
send
gethostbyname
WSACleanup
WSAStartup
closesocket
socket
htons
inet_addr
recv
WSAConnect

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
$WINDIR/herosoft/OnSetup.dll
.dll windows:4 windows x86 arch:x86

07ed057173b1cb1ec2c9a5ed7ffdf4aa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetPrivateProfileIntA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
RtlUnwind
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement

user32

IsWindow
SendMessageA

Exports

Exports

ExitAllProgram

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/herosoft/unInstallCall.exe
.exe windows:4 windows x86 arch:x86

d88174c8582166ea5ba6f3fb089c54eb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyA
WritePrivateProfileStringA
GetLocalTime
Sleep
lstrlenA
GetPrivateProfileStringA
FlushFileBuffers
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetStdHandle
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
SetFilePointer
GetLastError
HeapReAlloc
VirtualAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
CloseHandle

netapi32

Netbios

ws2_32

inet_ntoa
connect
send
gethostbyname
WSACleanup
WSAStartup
closesocket
socket
htons
inet_addr
WSAConnect

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ADOPLUS/AdoPlus.dll
.dll windows:4 windows x86 arch:x86

1df788a24317b63b7414233b4da6f8e2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcmpiA
GetVersion
WritePrivateProfileStringA
lstrlenA
GlobalFree
GlobalReAlloc
GlobalUnlock
GlobalLock
GlobalAlloc
SetCurrentDirectoryA
GetPrivateProfileStringA
FindFirstFileA
FindNextFileA
FindClose
lstrcpynA
GetVersionExA
LocalAlloc
LocalFree
GetACP
GetPrivateProfileIntA
GetModuleFileNameA
lstrcatA
lstrcpyA

user32

SetDlgItemTextA
CallWindowProcA
FillRect
GetClientRect
SetWindowLongA
GetSysColor
EndDialog
GetDlgItem
CheckMenuItem
ClientToScreen
TrackPopupMenuEx
DeleteMenu
GetMenuItemInfoA
InsertMenuItemA
GetSystemMetrics
WindowFromPoint
GetMenuStringA
AppendMenuA
RemoveMenu
InvalidateRect
GetSubMenu
GetMenuState
DialogBoxParamA
MapWindowPoints
SetCursorPos
GetMenuItemCount
TrackPopupMenu
DestroyCursor
wsprintfA
SetWindowTextA
LoadImageA
SetWindowRgn
GetWindowRect
SetWindowPos
SetTimer
BeginPaint
EndPaint
PostMessageA
KillTimer
GetCursorPos
ScreenToClient
SendMessageA
SetCapture
SetCursor
MessageBeep
ReleaseCapture
DefWindowProcA
SetRect
DestroyMenu
DestroyWindow
UnregisterClassA
GetDC
ReleaseDC
CreatePopupMenu
LoadCursorA
LoadIconA
RegisterClassA
CreateWindowExA
ShowWindow
UpdateWindow
SetMenuItemInfoA

gdi32

SetStretchBltMode
StretchBlt
CreateCompatibleBitmap
SaveDC
RestoreDC
SelectClipRgn
PtInRegion
GetRgnBox
CreateRectRgn
OffsetRgn
CreateCompatibleDC
GetObjectA
CreateDIBSection
SelectObject
BitBlt
ExtCreateRegion
CombineRgn
DeleteDC
DeleteObject
GetDeviceCaps
CreateFontIndirectA
CreateSolidBrush

comctl32

ord17

coolmenu

ord18
ord7
ord17
ord16
ord14
ord33
ord31
ord20
ord32
ord27

msvcrt

_itoa
_adjust_fdiv
malloc
_initterm
free
??3@YAXPAX@Z
strchr
strtol

Exports

Exports

CreatePlusWindow
MessageHookProc
QueryPlusCaps
ReleasePlusWindow

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ADOPLUS/AudioSkin/Skin4/HAND.CUR
ADOPLUS/AudioSkin/Skin4/HANDH.CUR
ADOPLUS/AudioSkin/Skin4/HANDV.CUR
ADOPLUS/AudioSkin/Skin4/SKIN936.INI
ADOPLUS/AudioSkin/Skin4/audio.bmp
ADOPLUS/AudioSkin/Skin4/audioback.bmp
ADOPLUS/AudioSkin/Skin4/audiogray.bmp
ADOPLUS/AudioSkin/Skin4/audioover.bmp
ADOPLUS/AudioSkin/Skin4/turn.bmp
ADOPLUS/AudioSkin/Skin4/y.bmp
ADOPLUS/AudioSkin/skin5/Audio.bmp
ADOPLUS/AudioSkin/skin5/Audiodown.bmp
ADOPLUS/AudioSkin/skin5/Audiogray.bmp
ADOPLUS/AudioSkin/skin5/Audiomask.bmp
ADOPLUS/AudioSkin/skin5/Audioover.bmp
ADOPLUS/AudioSkin/skin5/HAND.CUR
ADOPLUS/AudioSkin/skin5/HANDH.CUR
ADOPLUS/AudioSkin/skin5/HANDV.CUR
ADOPLUS/AudioSkin/skin5/SKIN936.INI
ADOPLUS/AudioSkin/skin5/turn.bmp
ADOPLUS/AudioSkin/skin5/y.bmp
ADOPLUS/AudioSkin/skin8/AudioGray.bmp
ADOPLUS/AudioSkin/skin8/AudioMask.bmp
ADOPLUS/AudioSkin/skin8/Audiodown.bmp
ADOPLUS/AudioSkin/skin8/Audioover.bmp
ADOPLUS/AudioSkin/skin8/HAND.CUR
ADOPLUS/AudioSkin/skin8/HANDH.CUR
ADOPLUS/AudioSkin/skin8/HANDV.CUR
ADOPLUS/AudioSkin/skin8/SKIN936.INI
ADOPLUS/AudioSkin/skin8/audio.bmp
ADOPLUS/AudioSkin/skin8/turn.bmp
ADOPLUS/AudioSkin/skin8/y.bmp
ADPLAY.INI
AMPEQU.DLL
.dll windows:4 windows x86 arch:x86

a303926e4707ae928d213cd4ed0826d5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

free
__CxxFrameHandler
_adjust_fdiv
malloc
_initterm
??3@YAXPAX@Z
??2@YAPAXI@Z

kernel32

DisableThreadLibraryCalls
GetVersion
GlobalFree
GlobalAlloc

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 187B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 572B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 358B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AVCDROM.dll
.dll windows:4 windows x86 arch:x86

5230015cb49ba87c120802b354f2e721

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
DeviceIoControl
lstrcpyA
GetDriveTypeA
CreateFileA
SetEvent
GetLastError
WaitForSingleObject
CreateThread
CreateEventA
TerminateThread
Sleep
ResetEvent
GetVolumeInformationA
FreeLibrary
GetProcAddress
LoadLibraryA
GetVersion
GetSystemTime
lstrcmpiA
GetVersionExA
GetOverlappedResult
ReadFile
SetFilePointer
GlobalFree
GlobalAlloc

user32

PostMessageA
MessageBoxA

msvcrt

free
_initterm
malloc
_adjust_fdiv

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AmpDll/APEAUDIO.dll
.dll windows:4 windows x86 arch:x86

5b5bbae9e01a8101ea28fe60918015b2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleFileNameA
GetPrivateProfileStringA
GetPrivateProfileIntA
WritePrivateProfileStringA
CloseHandle
CreateFileA
ReadFile
WriteFile
SetFilePointer
SetEndOfFile
GetFileSize
DeleteFileA
SetThreadPriority
CreateThread
TerminateThread
WaitForSingleObject
Sleep
SizeofResource
GetLastError
FindResourceA
GetModuleHandleA
RtlUnwind
RaiseException
GetCommandLineA
GetVersion
GetProcAddress
ExitProcess
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapAlloc
HeapSize
HeapFree
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetUnhandledExceptionFilter
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
InterlockedDecrement
InterlockedIncrement
VirtualAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
SetStdHandle
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
FlushFileBuffers

user32

DialogBoxParamA
SendMessageA
GetDlgItem
SetDlgItemTextA
EndDialog
MessageBoxA
GetDlgItemTextA
wsprintfA
CheckDlgButton
PostMessageA
IsDlgButtonChecked
LoadStringA

Exports

Exports

_DllMain@12
_FillWaveFormatEx@16
_FillWaveHeader@16
winampGetInModule2

Sections

.text
Size: 120KB - Virtual size: 117KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AmpDll/FlacAUDO.dll
.dll windows:4 windows x86 arch:x86

9f3d33b2414e4b74817b0546792d3c78

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetFileSize
GetPrivateProfileStringA
WritePrivateProfileStringA
LocalFree
LocalAlloc
GetModuleFileNameA
CreateThread
CloseHandle
GetPrivateProfileIntA
CreateFileA
TerminateThread
WaitForSingleObject
Sleep
ReadFile
WriteFile

user32

DialogBoxParamA
SetWindowTextA
PostMessageA
ShowWindow
SetWindowPos
ScreenToClient
EnableWindow
GetDlgCtrlID
CheckDlgButton
SendDlgItemMessageA
IsDlgButtonChecked
MessageBoxA
SetDlgItemTextA
GetDlgItemTextA
EndDialog
SetWindowLongA
GetDlgItem
CreateDialogParamA
SendMessageA
GetWindowRect
GetWindowLongA
DestroyWindow

msvcrt

strncpy
calloc
_EH_prolog
_chmod
_utime
_unlink
_stat
_strnicmp
_strdup
_stricmp
_itoa
pow
strchr
strtod
sprintf
strrchr
_ftol
vsprintf
free
malloc
_iob
realloc
atoi
toupper
tolower
isalnum
strstr
__CxxFrameHandler
strncmp
fopen
fclose
_errno
_setmode
fread
fseek
ftell
tanh
fwrite
rename
memchr
memmove

Exports

Exports

winampGetInModule2

Sections

.text
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AmpDll/MP4Audio.dll
.dll windows:4 windows x86 arch:x86

1d64ed19e7f14c806158286f8708d775

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetPrivateProfileStringA
GetModuleFileNameA
WritePrivateProfileStringA
MultiByteToWideChar
WideCharToMultiByte
lstrcpyA
lstrlenA
SetThreadPriority
SetThreadAffinityMask
CreateThread
CloseHandle
TerminateThread
WaitForSingleObject
Sleep
DisableThreadLibraryCalls
GetTempFileNameA

user32

wsprintfA
CharNextA
PostMessageA
DialogBoxParamA
EndDialog
MessageBoxA
GetDlgItemTextA
SendMessageA
EnableWindow
ShowWindow
GetDlgItem
SetDlgItemTextA
GetWindowTextA
GetWindowTextLengthA

comdlg32

GetSaveFileNameA

msvcrt

_fstat
_itoa
??1type_info@@UAE@XZ
_adjust_fdiv
_initterm
strncmp
_ftime
fwrite
_purecall
fclose
fopen
fread
fprintf
_iob
fsetpos
rewind
fgetpos
ftell
fseek
_ftol
floor
malloc
free
realloc
sscanf
atoi
sprintf
strrchr
memmove
strncpy
tolower
_CIpow
qsort
??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler
_stricmp
_errno
_CxxThrowException
_vsnprintf
printf
_snprintf
rename
remove
strerror
strchr
isalnum
_fileno

Exports

Exports

winampGetExtendedFileInfo
winampGetInModule2
winampSetExtendedFileInfo
winampWriteExtendedFileInfo

Sections

.text
Size: 280KB - Virtual size: 278KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 116KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AmpDll/OGGAUDIO.dll
.dll windows:4 windows x86 arch:x86

db4835ba34b5aa791782c6b3c95e92de

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LeaveCriticalSection
EnterCriticalSection
SetFileTime
GetFileTime
GetCurrentProcessId
Sleep
GetTempPathA
GetTempPathW
GetFileSize
GetDiskFreeSpaceA
GetLastError
InitializeCriticalSection
SetFilePointer
GetPrivateProfileStringA
ResumeThread
SetThreadPriority
TerminateThread
DisableThreadLibraryCalls
DeleteFileA
DeleteFileW
MoveFileA
MoveFileW
CopyFileA
CopyFileW
SetFileAttributesA
SetFileAttributesW
GetModuleHandleA
GetTickCount
MultiByteToWideChar
MulDiv
LoadLibraryA
CreateThread
WaitForSingleObject
GetVersionExA
DeleteCriticalSection
FreeLibrary
FindClose
CreateFileA
GetModuleFileNameA
ReadFile
WriteFile
GetLocalTime
CloseHandle
WideCharToMultiByte
FindNextFileW
FindFirstFileW
GetProcAddress
CreateFileW

user32

GetDC
SetTimer
LoadBitmapA
SetDlgItemTextA
KillTimer
RedrawWindow
GetWindowLongA
GetParent
SetWindowLongA
SendMessageA
SetWindowTextA
GetDlgItem
GetWindowTextA
wsprintfA
DialogBoxParamA
RegisterClassA
EndDialog
GetWindowTextLengthA
LoadCursorA
DefWindowProcA
ReleaseDC
DrawEdge
GetWindowTextW
GetClientRect
DialogBoxParamW
CreateDialogParamW
CreateDialogParamA
IsWindowEnabled
GetMessageA
CreateWindowExA
SendMessageW
EnableWindow
GetSystemMetrics
GetWindowRect
DestroyWindow
IsDialogMessageA
TranslateMessage
DispatchMessageA
SetActiveWindow
SetDlgItemTextW
SetWindowPos
ShowWindow
PostMessageA
GetDlgItemInt
SetDlgItemInt
MessageBoxA
SendDlgItemMessageA
GetWindowTextLengthW
SetWindowTextW

gdi32

TextOutA
SelectObject
CreateCompatibleDC
SetTextAlign
SetBkMode
DeleteDC
BitBlt
GetObjectA
SetTextColor
CreateFontIndirectA
DeleteObject
GetStockObject

comdlg32

ChooseFontA

advapi32

RegQueryValueExW
RegDeleteValueA
RegSetValueExW
RegQueryValueExA
RegCreateKeyA
RegCloseKey
RegDeleteKeyA
RegSetValueExA

shell32

SHGetMalloc
SHBrowseForFolderA
SHGetPathFromIDListA

msvcrt

realloc
toupper
tolower
wcstol
_strdup
_wcsnicmp
_wcsdup
_wcsicmp
_stricmp
_adjust_fdiv
_initterm
_onexit
__dllonexit
frexp
cos
sin
exit
ldexp
fabs
qsort
sqrt
ceil
log
floor
exp
atan
memchr
memmove
strcmp
sprintf
calloc
rand
_ftol
_itoa
_strnicmp
pow
wcscmp
atof
_errno
vswprintf
memcmp
_purecall
abs
vsprintf
tanh
strcat
time
strncpy
strcpy
strrchr
strlen
strstr
malloc
free
??2@YAPAXI@Z
wcslen
memset
??3@YAXPAX@Z
atoi
iswalnum
swprintf
wcsstr
__CxxFrameHandler
strchr
strncmp
memcpy

Exports

Exports

winampGetExtendedFileInfo
winampGetInModule2
winampSetExtendedFileInfo
winampWriteExtendedFileInfo

Sections

.text
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AviSys.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 475B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AviVideo.dll
.dll windows:4 windows x86 arch:x86

af8afd422f66fa57d082cab76ec7d865

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

_lclose
_lwrite
_lcreat
CreateEventA
GetPrivateProfileStringA
InitializeCriticalSection
RemoveDirectoryA
DeleteCriticalSection
CloseHandle
GetTickCount
CreateDirectoryA
FindClose
FindNextFileA
DeleteFileA
FindFirstFileA
GetFileAttributesA
WritePrivateProfileStructA
GetSystemDirectoryA
WinExec
GetCurrentThreadId
DisableThreadLibraryCalls
SetEvent
TerminateThread
CreateThread
WaitForSingleObject
Sleep
CompareStringA
GetExitCodeThread
EnterCriticalSection
LeaveCriticalSection
lstrcmpA
LocalFree
GetPrivateProfileIntA
GetPrivateProfileStructA
WritePrivateProfileStringA
GetModuleFileNameA
lstrlenA
lstrcpyA
lstrcatA
lstrcpynA
GetModuleHandleA

user32

GetClassNameA
MessageBoxA
UnhookWindowsHookEx
KillTimer
SetTimer
EnumThreadWindows
SetCursor
SetWindowsHookExA
GetSystemMetrics
wsprintfA
LoadCursorA
LoadStringA
PtInRect
CallNextHookEx
IsWindow
ReleaseDC
GetDC
GetClientRect
ClientToScreen

gdi32

DeleteDC
GetDIBits
TextOutA
CreateFontIndirectA
SetBkMode
CreateCompatibleBitmap
CreateCompatibleDC
DeleteObject
SetTextColor
SelectObject
GetTextExtentPoint32A

comdlg32

ChooseFontA

shell32

ShellExecuteA

httpreq

ord1

krnlapi

ord5
ord6
ord7
ord13
ord10
ord2
ord1
ord3

dibtodib

ord2
ord1

hookddx

ord15
ord14
ord11
ord13
ord10

msvcrt

rand
srand
??2@YAPAXI@Z
??3@YAXPAX@Z
strrchr
atoi
free
malloc
strstr
_initterm
_adjust_fdiv
strchr

Exports

Exports

AdTimeCommand
CreateAdNotify
DelAdNotify

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 261KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.avivide
Size: 4KB - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
BTCNNET.dll
.dll windows:4 windows x86 arch:x86

990382a0f809d8d65809fb05fbac2d4d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcatA
lstrcpyA
LocalAlloc
Sleep
GetModuleFileNameA
lstrcpynA
WriteConsoleA
GetStdHandle
_lclose
_lwrite
_lcreat
lstrcmpiA
lstrlenA
GetPrivateProfileIntA
LocalFree
DisableThreadLibraryCalls

user32

wsprintfA

ws2_32

htonl
getsockname
shutdown
__WSAFDIsSet
ioctlsocket
WSAGetLastError
select

httpreq

ord1

btfile

ord1

tcpto

ord1

msvcrt

__CxxFrameHandler
_adjust_fdiv
malloc
_initterm
free
_except_handler3
atoi
_i64toa
strchr
??3@YAXPAX@Z
??2@YAPAXI@Z
strstr

Exports

Exports

_BTCONNECT
_BTP2P
_BTPEER
_DOWNLOADBTFILE
_PEERSEGMENT

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
BTFILE.dll
.dll windows:4 windows x86 arch:x86

4420ae1ef96dc860088c64d4a10c0a88

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LocalFree
_lclose
_lread
LocalAlloc
GetFileSize
_lopen
lstrcpyA
lstrlenA
lstrcatA
lstrcmpiA
_lwrite
SetFilePointer
_lcreat
CreateDirectoryA
FindClose
FindFirstFileA
DisableThreadLibraryCalls

msvcrt

??2@YAPAXI@Z
__CxxFrameHandler
_atoi64
atoi
printf
_i64toa
qsort
free
_initterm
malloc
_adjust_fdiv
??3@YAXPAX@Z
_itoa

Exports

Exports

_BTDATA
_BTFILE
_BTSEGMENTIO
_BTSELECTFILE
_GENBT

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 580B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
BTLOAD.dll
.dll windows:4 windows x86 arch:x86

305aa63d7878fe42e97f2e6e8d3277bd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcatA
CreateThread
CloseHandle
WaitForSingleObject
CreateEventA
TerminateThread
Sleep
ResetEvent
GetModuleFileNameA
AllocConsole
GetPrivateProfileIntA
SetEvent
WriteConsoleA
GetStdHandle
_lclose
_llseek
_lread
GetFileSize
_lopen
_lwrite
_lcreat
DeleteFileA
SetEndOfFile
lstrlenA
LocalAlloc
lstrcpyA
GetTickCount
lstrcpynA
FreeConsole
LocalFree
DisableThreadLibraryCalls

user32

wsprintfA

btcnnet

ord2
ord1

btfile

ord1
ord4
ord5

msvcrt

??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler
rand
srand
free
_initterm
malloc
_adjust_fdiv

Exports

Exports

_BTLOAD

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1020B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CapVideo.dll
.dll windows:4 windows x86 arch:x86

fa94fc1f24cfd8ab073f8420a5b268a8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LocalFree
WideCharToMultiByte
CreateEventA
LocalAlloc
MultiByteToWideChar
lstrlenA
CloseHandle
lstrcmpiA
ResetEvent
WaitForMultipleObjects
DisableThreadLibraryCalls

ole32

CoCreateInstance
CoInitialize

oleaut32

SysFreeString

msvcrt

_onexit
__dllonexit
__CxxFrameHandler
memcpy
memset
??3@YAXPAX@Z
??2@YAPAXI@Z
_purecall
free
_initterm
malloc
_adjust_fdiv

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 330B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ChgRGB.dll
.dll windows:4 windows x86 arch:x86

cf3193745c208a07bfc5f6f101622a03

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

IntersectRect

msvcrt

_initterm
free
_except_handler3
_adjust_fdiv
malloc

kernel32

GlobalAlloc
GlobalFree
GetVersion

Exports

Exports

ChangeRGB08
ChangeRGB15
ChangeRGB16
ChangeRGB24
ChangeRGB32
MixOverPicRGB08
MixOverPicRGB15
MixOverPicRGB16
MixOverPicRGB24
MixOverPicRGB32
OverPicRGB32
RGBToRGB32

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 351B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 338B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ChgYUV.dll
.dll windows:4 windows x86 arch:x86

1ef7f94adfb74a5a43d28ccf0009628f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

IntersectRect

msvcrt

_initterm
malloc
free
_except_handler3
_ftol
_adjust_fdiv

kernel32

GlobalAlloc
GlobalFree
GetVersion

Exports

Exports

BlurCYCY
BlurYCYC
BlurYXX
ChangeCYCY
ChangeYCC2
ChangeYCC4
ChangeYCYC
MixOverPicCYCY
MixOverPicYCC2
MixOverPicYCC4
MixOverPicYCYC
OverPicCYCY
OverPicYCC2
OverPicYCC4
OverPicYCYC
YUVToRGB32

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 354B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 370B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Codecs/$R2/NSIS.Library.RegTool.v2.$_6_.exe
.exe windows:4 windows x86 arch:x86

27613a5a6234b2a2609ff90c91288dae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateProcessA
FreeLibrary
GetProcAddress
LoadLibraryExA
MultiByteToWideChar
lstrcmpiA
lstrlenA
SetEndOfFile
WaitForSingleObject
UnmapViewOfFile
lstrcpyA
MapViewOfFile
CreateFileMappingA
GetFileSize
CreateFileA
lstrcatA
GetWindowsDirectoryA
GetShortPathNameA
GetCommandLineA
ExitProcess
GetModuleHandleA
GetModuleFileNameA
SetFilePointer
SetErrorMode

oleaut32

LoadTypeLi
RegisterTypeLi

advapi32

RegQueryValueExA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyExA
RegCloseKey

user32

wsprintfA
CharNextA

ole32

OleInitialize
OleUninitialize

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Codecs/Lang/$R2/NSIS.Library.RegTool.v2.$_6_.exe
.exe windows:4 windows x86 arch:x86

27613a5a6234b2a2609ff90c91288dae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateProcessA
FreeLibrary
GetProcAddress
LoadLibraryExA
MultiByteToWideChar
lstrcmpiA
lstrlenA
SetEndOfFile
WaitForSingleObject
UnmapViewOfFile
lstrcpyA
MapViewOfFile
CreateFileMappingA
GetFileSize
CreateFileA
lstrcatA
GetWindowsDirectoryA
GetShortPathNameA
GetCommandLineA
ExitProcess
GetModuleHandleA
GetModuleFileNameA
SetFilePointer
SetErrorMode

oleaut32

LoadTypeLi
RegisterTypeLi

advapi32

RegQueryValueExA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyExA
RegCloseKey

user32

wsprintfA
CharNextA

ole32

OleInitialize
OleUninitialize

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CommSkin.dll
.dll windows:4 windows x86 arch:x86

0c5a5ad2a6e7ca0fbda8e5d00f72d322

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalFree
GlobalReAlloc
GlobalUnlock
GlobalLock
GlobalAlloc
lstrcpynA
_lclose
_lread
_lopen
GetPrivateProfileIntA
FindFirstFileA
lstrcpyA
FindNextFileA
FindClose
lstrcmpiA
GetCurrentDirectoryA
GetPrivateProfileStringA
SetCurrentDirectoryA
WritePrivateProfileStringA
LocalFree
FreeLibrary
GetModuleHandleA
LocalAlloc
lstrcatA
GetProcAddress
GetModuleFileNameA
lstrlenA
_llseek

user32

CreateWindowExA
TrackPopupMenu
InvalidateRect
WindowFromPoint
GetSystemMetrics
CopyRect
SetMenuItemInfoA
GetMenuItemCount
RemoveMenu
AppendMenuA
GetWindowRect
SetWindowPos
SetRect
LoadImageA
DestroyCursor
SetWindowTextA
MapWindowPoints
SetCursorPos
LoadCursorA
CreatePopupMenu
GetDC
ReleaseDC
SetWindowRgn
SetTimer
BeginPaint
GetClientRect
EndPaint
KillTimer
DestroyMenu
GetCursorPos
ScreenToClient
SetCursor
SendMessageA
ReleaseCapture
PostMessageA
SetCapture
MessageBeep
DefWindowProcA
wsprintfA

gdi32

CreateCompatibleBitmap
SelectClipRgn
DeleteDC
ExtCreateRegion
PtInRegion
CombineRgn
SelectObject
DeleteObject
CreateRectRgn
OffsetRgn
GetRgnBox
CreateCompatibleDC
BitBlt
SetStretchBltMode
StretchBlt
SetDIBitsToDevice

comctl32

ord17

msvcrt

??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler
strtol
_itoa
atoi
strtok
free
malloc
_initterm
_adjust_fdiv

Exports

Exports

_CommSkin

Sections

.text
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CoolMenu.dll
.dll windows:4 windows x86 arch:x86

ab4e16406c2ba883126c2114ec0cc4f8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadResource
GetVersion
FindResourceA
lstrcmpA
LockResource
FreeResource
_llseek
lstrlenA
_lclose
LocalFree
LocalAlloc
_lread
_lopen
lstrcpyA
GlobalFree
GlobalAlloc

user32

DrawEdge
GetMenuItemCount
GetMenuItemInfoA
GetMenuStringA
GetMenuItemID
ReleaseDC
GetDC
SystemParametersInfoA
LoadBitmapA
GetSysColor
DrawTextA
SetMenuItemInfoA
GetSubMenu

gdi32

CreateCompatibleBitmap
GetObjectA
CreateFontIndirectA
GetTextExtentPointA
DeleteObject
TextOutA
SelectObject
DeleteDC
BitBlt
CreateDIBitmap
ExtTextOutA
GetDeviceCaps
CreateBitmap
CreateCompatibleDC
SetBkMode
SetTextColor
SetBkColor

comctl32

ImageList_LoadImageA
ImageList_Draw
ImageList_Destroy

msvcrt

_purecall
__CxxFrameHandler
??3@YAXPAX@Z
_adjust_fdiv
malloc
_initterm
_ftol
??2@YAPAXI@Z
free

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 441B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 826B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DAB936.DLL
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DABC.dll
.dll windows:4 windows x86 arch:x86

61e4c27dad851d18d4ee0f617957b2b5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateEventA
GetTickCount
GetCurrentProcessId
OpenMutexA
lstrcpyA
lstrcatA
SetEvent
OpenEventA
Sleep
ReleaseMutex
ExitProcess
lstrlenA
lstrcpynA
WinExec
GetModuleFileNameA
WaitForSingleObject
CloseHandle
LocalFree

user32

PostMessageA
PeekMessageA
DestroyWindow
DispatchMessageA
MsgWaitForMultipleObjects
TranslateMessage
wsprintfA

shmem

ord6
ord7
ord8
ord9
ord3
ord4
ord5
ord2

btfile

ord1

msvcrt

_adjust_fdiv
malloc
_initterm
free
_except_handler3
??2@YAPAXI@Z
??3@YAXPAX@Z

Exports

Exports

AppendDabFile
AppendDacFile
CloseDAB
CloseDabService
DeleteDabFile
DeleteDacFile
GetDABReady
GetDABSize
GetDabFileName
OpenDAB
OpenDABEx
ReadDAB
SeekDAB
SetDABReady
StartDabService

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 934B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DABPROXY.dll
.dll windows:4 windows x86 arch:x86

261d4cba3b3d1adb66f44d792717911c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetTickCount
OpenMutexA
WaitForSingleObject
SetEvent
OpenEventA
CreateThread
Sleep
WaitForMultipleObjects
lstrcmpiA
DeleteFileA
SetFileAttributesA
CreateMutexA
FreeLibrary
CreateEventA
LoadLibraryA
GetModuleFileNameA
SetCurrentDirectoryA
GetCurrentDirectoryA
CreateDirectoryA
GetACP
CloseHandle
GetPrivateProfileStringA
lstrcpyA
lstrlenA
lstrcatA
LocalAlloc
GetPrivateProfileStructA
GetPrivateProfileIntA
WritePrivateProfileStructA
WritePrivateProfileStringA
GetProcAddress
LocalFree

user32

UpdateWindow
CreateWindowExA
DefWindowProcA
PostQuitMessage
wsprintfA
SendMessageA
RegisterClassExA
LoadIconA
EndPaint
GetClientRect
GetMessageA
TranslateMessage
DispatchMessageA
TranslateAcceleratorA
PostMessageA
BeginPaint
LoadCursorA
GetDesktopWindow
ShowWindow
SetWindowPos
SetTimer
GetDC
ReleaseDC
SetDlgItemTextA
SetDlgItemInt
LoadStringA
CheckDlgButton
GetDlgItem
SetWindowTextA
IsDlgButtonChecked
GetDlgItemTextA
GetDlgItemInt
GetWindowRect

gdi32

GetTextExtentPointA

shell32

SHGetMalloc
SHBrowseForFolderA
SHGetSpecialFolderLocation
SHGetPathFromIDListA

comctl32

PropertySheetA

shmem

ord2
ord8
ord5
ord7
ord3
ord1
ord4

btfile

ord1

btload

ord1

msvcrt

_purecall
strtol
??3@YAXPAX@Z
??2@YAPAXI@Z
sprintf
strrchr
free
_initterm
malloc
_adjust_fdiv
__CxxFrameHandler

Exports

Exports

ShowDABS
StartProxy
StopProxy

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DABS.INI
DACDEC.DLL
.dll windows:4 windows x86 arch:x86

3b0953d767aa8fc0513c237274ec9a30

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LocalFree
LocalAlloc
RtlUnwind
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
HeapFree
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
VirtualFree
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
VirtualAlloc
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
UnhandledExceptionFilter
LoadLibraryA
HeapReAlloc
HeapSize
SetConsoleCtrlHandler
FlushFileBuffers
CloseHandle
SetStdHandle
SetFilePointer

decdac

ord2
ord1

Exports

Exports

_DACDEC

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DACENC.DLL
.dll windows:4 windows x86 arch:x86

df7063590c31dd828da1f26d97cdc0ed

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LocalAlloc
LocalFree
RtlUnwind
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
HeapFree
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
VirtualFree
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
LoadLibraryA
HeapReAlloc
HeapSize
FlushFileBuffers
CloseHandle
SetStdHandle
SetFilePointer

encdac

ord2
ord1

Exports

Exports

_DACENC

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DDrawX.dll
.dll windows:4 windows x86 arch:x86

e26d64e83b47ef1fd8e3b5d8be6a0de9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

hookproc

ord3
ord2
ord4
ord5

msvcrt

_adjust_fdiv
malloc
free
_onexit
__dllonexit
??2@YAPAXI@Z
__CxxFrameHandler
??3@YAXPAX@Z
_initterm

kernel32

DisableThreadLibraryCalls
GlobalAlloc
GlobalFree
GetVersion
Sleep
LocalFree

Exports

Exports

?_DDRAWX@@3UtagAPICLASS@@A
Get_DDRAWX_HOOKLINK

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 198B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 508B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 446B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DECDAC.dll
.dll windows:4 windows x86 arch:x86

9f6a69a1c42c0fe93b23bc0fa1bfd350

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LocalFree
LocalAlloc
RtlUnwind
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
HeapFree
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
VirtualFree
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
WriteFile
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
LoadLibraryA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
HeapReAlloc
HeapSize
GetLocaleInfoA
GetLocaleInfoW
FlushFileBuffers
CloseHandle
SetStdHandle
SetFilePointer

Sections

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DEDAC.DLL
.dll windows:4 windows x86 arch:x86

49c6d16c29647a72412b5775c381122a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LocalFree
EnterCriticalSection
LeaveCriticalSection
LocalAlloc
DeleteCriticalSection
_lread
GetFileSize
_lopen
_llseek
_lclose
InitializeCriticalSection
RtlUnwind
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
HeapFree
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
VirtualFree
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
WriteFile
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
FatalAppExitA
UnhandledExceptionFilter
VirtualAlloc
LoadLibraryA
HeapReAlloc
HeapSize
SetConsoleCtrlHandler
FlushFileBuffers
CloseHandle
SetStdHandle
SetFilePointer

dacdec

ord1

Exports

Exports

CloseDacAudio
GetDacAudioBits
GetDacAudioChannel
GetDacAudioFreq
GetDacAudioSize
GetDacAudioType
GetDacBitRate
GetDacByteRate
GetDacLayer
GetDacSyncWord
OpenDacAudio
ReadDacAudio
SeekDacAudio
SetDacAudioFreq

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DIBTODIB.dll
.dll windows:4 windows x86 arch:x86

84eeb99e7e7e8c8f8598b429702d053c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LocalAlloc
VirtualFree
LocalFlags
LocalFree
VirtualAlloc
LocalReAlloc
DisableThreadLibraryCalls

msvcrt

_ftol
free
_initterm
malloc
_adjust_fdiv

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 625B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 594B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DOWNMIX.DLL
.dll windows:4 windows x86 arch:x86

a2e711dedefd3a0b6c0395fcbdd79b4f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

RtlUnwind
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
HeapFree
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
HeapDestroy
HeapCreate
VirtualFree
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
LoadLibraryA
FlushFileBuffers
CloseHandle
SetStdHandle
SetFilePointer

Exports

Exports

ConvertMultiChnl
_DOWNMIX

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DSoundX.dll
.dll windows:4 windows x86 arch:x86

85bee2f32badd8555fa5d7646718d20a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

hookproc

ord5
ord3
ord2
ord4

msvcrt

free
_onexit
__CxxFrameHandler
__dllonexit
??2@YAPAXI@Z
malloc
??3@YAXPAX@Z
_adjust_fdiv
_initterm

kernel32

GlobalAlloc
GlobalFree
DisableThreadLibraryCalls
LocalAlloc
GetVersion
Sleep
LocalFree

Exports

Exports

Get_DSOUNDX_HOOKLINK

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 259B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 530B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 474B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DVD936.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 492KB - Virtual size: 489KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DVD936_original.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 492KB - Virtual size: 489KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DVDINFO.DLL
.dll windows:4 windows x86 arch:x86

d7381401b92acedf46592ffdfb77a15b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
lstrcpyA
lstrlenA
lstrcmpiA
LocalAlloc
GetVolumeInformationA
DisableThreadLibraryCalls
LocalFree
GlobalFree
GetVersion

user32

wsprintfA

sysfile

ord16
ord19
ord6
ord14
ord1

msvcrt

free
malloc
_initterm
_adjust_fdiv

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DVDSkin/skin1/HAND.CUR
DVDSkin/skin1/HANDH.CUR
DVDSkin/skin1/HANDV.CUR
DVDSkin/skin1/HTML/HEROSOFT.HTM
.html
DVDSkin/skin1/HTML/logo3.bmp
DVDSkin/skin1/btnlist.bmp
DVDSkin/skin1/btnlistdown.bmp
DVDSkin/skin1/btnlistmask.bmp
DVDSkin/skin1/btnlistover.bmp
DVDSkin/skin1/equ.bmp
DVDSkin/skin1/equback.bmp
DVDSkin/skin1/equgray.bmp
DVDSkin/skin1/equmask.bmp
DVDSkin/skin1/equover.bmp
DVDSkin/skin1/listleftP.bmp
DVDSkin/skin1/skin936.ini
DVDSkin/skin1/skininfo.ini
DVDSkin/skin1/turn.bmp
DVDSkin/skin1/video.bmp
DVDSkin/skin1/videoback.bmp
DVDSkin/skin1/videogray.bmp
DVDSkin/skin1/videoover.bmp
DVDSkin/skin1/y.bmp
DVDSkin/skin2/HAND.CUR
DVDSkin/skin2/HANDH.CUR
DVDSkin/skin2/HANDV.CUR
DVDSkin/skin2/HTML/HEROSOFT.HTM
.html
DVDSkin/skin2/HTML/logo3.bmp
DVDSkin/skin2/Pause.bmp
DVDSkin/skin2/VdloBottom.bmp
DVDSkin/skin2/VdloLeftEdge.bmp
DVDSkin/skin2/VdloLeftPP.bmp
DVDSkin/skin2/VdloRightEdge.bmp
DVDSkin/skin2/VdloRightPP.bmp
DVDSkin/skin2/VdloleftP.bmp
DVDSkin/skin2/VdoAtitle.bmp
DVDSkin/skin2/VdoLeftP.bmp
DVDSkin/skin2/VdoLeftPP.bmp
DVDSkin/skin2/VdoMenu.bmp
DVDSkin/skin2/VdoRightP.bmp
DVDSkin/skin2/VdoRightPP.bmp
DVDSkin/skin2/Vdotitle.bmp
DVDSkin/skin2/all.bmp
DVDSkin/skin2/listdown.bmp
DVDSkin/skin2/listmask.bmp
DVDSkin/skin2/listover.bmp
DVDSkin/skin2/listup.bmp
DVDSkin/skin2/skin936.ini
DVDSkin/skin2/skininfo.ini
DVDSkin/skin2/turn.bmp
DVDSkin/skin2/vdoLeftEdge.bmp
DVDSkin/skin2/vdoRightEdge.bmp
DVDSkin/skin2/vdobottom.bmp
DVDSkin/skin2/video.bmp
DVDSkin/skin2/videoback.bmp
DVDSkin/skin2/videogray.bmp
DVDSkin/skin2/videomask.bmp
DVDSkin/skin2/videoover.bmp
DVDSkin/skin2/y.bmp
DVDSkin/skin3/HAND.CUR
DVDSkin/skin3/HANDH.CUR
DVDSkin/skin3/HANDV.CUR
DVDSkin/skin3/HTML/HEROSOFT.HTM
.html
DVDSkin/skin3/HTML/logo3.bmp
DVDSkin/skin3/Pause.bmp
DVDSkin/skin3/VdloBottom.bmp
DVDSkin/skin3/VdloLeftEdge.bmp
DVDSkin/skin3/VdloLeftPP.bmp
DVDSkin/skin3/VdloRightEdge.bmp
DVDSkin/skin3/VdloRightPP.bmp
DVDSkin/skin3/VdloleftP.bmp
DVDSkin/skin3/VdoLeftP.bmp
DVDSkin/skin3/VdoLeftPP.bmp
DVDSkin/skin3/VdoMenu.bmp
DVDSkin/skin3/VdoRightP.bmp
DVDSkin/skin3/VdoRightPP.bmp
DVDSkin/skin3/Vdotitle.bmp
DVDSkin/skin3/all.bmp
DVDSkin/skin3/listdown.bmp
DVDSkin/skin3/listmask.bmp
DVDSkin/skin3/listover.bmp
DVDSkin/skin3/listup.bmp
DVDSkin/skin3/skin936.ini
DVDSkin/skin3/skininfo.ini
DVDSkin/skin3/turn.bmp
DVDSkin/skin3/vdoAtitle.bmp
DVDSkin/skin3/vdoLeftEdge.bmp
DVDSkin/skin3/vdoRightEdge.bmp
DVDSkin/skin3/vdobottom.bmp
DVDSkin/skin3/video.bmp
DVDSkin/skin3/videoback.bmp
DVDSkin/skin3/videogray.bmp
DVDSkin/skin3/videomask.bmp
DVDSkin/skin3/videoover.bmp
DVDSkin/skin3/y.bmp
DVSHORT.dll
.dll regsvr32 windows:4 windows x86 arch:x86

169c0ff59ebd342dab93bc9e3a79607b

Code Sign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:9d:d1:cf:c5:3a:f7:fe:36:be:ca:c2:8b:40:9c:d8
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

17/03/2006, 00:00

Not After

17/03/2007, 23:59

Subject

CN=Beijing Herosoft Zongheng Network Technology Co.\, Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Human Resource Depart.,O=Beijing Herosoft Zongheng Network Technology Co.\, Ltd,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

10:0d:af:4c:e6:06:56:fa:59:6f:54:1e:1c:c6:24:2b:59:ed:eb:e0
Signer

Actual PE Digest

10:0d:af:4c:e6:06:56:fa:59:6f:54:1e:1c:c6:24:2b:59:ed:eb:e0

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wininet

GetUrlCacheEntryInfoA
InternetOpenA
InternetOpenUrlA
InternetCloseHandle
CreateUrlCacheEntryA
CommitUrlCacheEntryA
DeleteUrlCacheEntry
InternetCanonicalizeUrlA
InternetReadFile

kernel32

LocalAlloc
LocalFree
GetTickCount
Sleep
CreateThread
ExitThread
CloseHandle
TerminateThread
GetExitCodeThread
lstrcatW
GetACP
CreateEventA
ReadFile
GetFileSize
SetFilePointer
WriteFile
SetEvent
WaitForSingleObject
_lread
_lclose
_lopen
CreateFileA
FreeResource
LockResource
GetPrivateProfileSectionA
GetPrivateProfileStringA
lstrcmpiW
RemoveDirectoryA
FindClose
FindNextFileA
DeleteFileA
lstrcmpA
FindFirstFileA
CreateDirectoryA
GetSystemDirectoryA
WinExec
GetTempPathA
_lwrite
_lcreat
SetFileAttributesA
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
lstrcpyW
GetPrivateProfileIntA
GetCurrentProcess
FlushInstructionCache
GlobalAlloc
InterlockedExchangeAdd
QueryPerformanceFrequency
QueryPerformanceCounter
GlobalLock
_llseek
GlobalUnlock
WideCharToMultiByte
lstrlenW
GetCurrentThreadId
MultiByteToWideChar
InterlockedIncrement
GetShortPathNameA
lstrlenA
GetModuleHandleA
GetModuleFileNameA
FreeLibrary
SizeofResource
LoadResource
FindResourceA
WritePrivateProfileStringA
GetLastError
LoadLibraryExA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
HeapDestroy
DeleteCriticalSection
DisableThreadLibraryCalls
HeapAlloc
GetSystemInfo
GetVersionExA
HeapCreate
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
lstrcpyA
lstrcatA
GetProcAddress
LoadLibraryA
InterlockedDecrement

user32

DispatchMessageA
TranslateMessage
PostQuitMessage
UnregisterClassA
GetUpdateRect
GetMessageA
DialogBoxParamA
SetDlgItemTextA
EndDialog
GetCursorPos
WindowFromPoint
DestroyMenu
LoadMenuA
ScreenToClient
GetSubMenu
EnableMenuItem
CheckMenuItem
CreatePopupMenu
AppendMenuA
GetWindowRect
GetDesktopWindow
MoveWindow
UpdateWindow
GetClassLongA
FillRect
ClientToScreen
TrackPopupMenu
KillTimer
SetTimer
LoadStringA
SetClassLongA
MessageBoxA
DrawTextA
CallWindowProcA
GetWindowLongA
SetWindowLongA
IntersectRect
EqualRect
OffsetRect
SetWindowRgn
SetWindowPos
UnionRect
PtInRect
GetKeyState
SetFocus
InvalidateRect
ShowWindow
IsWindow
DestroyWindow
GetClassInfoExA
LoadCursorA
wsprintfA
RegisterClassExA
CreateWindowExA
GetFocus
IsChild
BeginPaint
GetClientRect
EndPaint
DefWindowProcA
GetDC
ReleaseDC
CharNextA
PostMessageA

gdi32

DeleteDC
LPtoDP
GetDeviceCaps
CreateDCA
CreateRectRgnIndirect
DeleteMetaFile
CloseMetaFile
SetViewportOrgEx
CreateMetaFileA
SelectObject
GetStockObject
RectVisible
CreateBrushIndirect
DeleteObject
StretchDIBits
SetStretchBltMode
CombineRgn
SetWindowOrgEx
SetMapMode
SetWindowExtEx
SaveDC
CreateRectRgn
RestoreDC
SetDIBitsToDevice

advapi32

RegEnumValueA
RegDeleteKeyA
RegEnumKeyExA
RegEnumKeyA
RegCreateKeyA
RegQueryValueExA
RegOpenKeyA
RegSetValueA
RegDeleteValueA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey

shell32

ShellExecuteW

ole32

CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
OleLoadFromStream
WriteClassStm
OleSaveToStream
OleRegGetUserType
CreateOleAdviseHolder
OleRegGetMiscStatus
CreateDataAdviseHolder
OleRegEnumVerbs

oleaut32

SysAllocStringByteLen
LoadRegTypeLi
VariantChangeType
OleCreatePropertyFrame
SysStringLen
VariantClear
LoadTypeLi
SysAllocString
RegisterTypeLi
VarUI4FromStr
SysFreeString
SysStringByteLen

version

VerQueryValueW
GetFileVersionInfoSizeA
GetFileVersionInfoA

yuvhelp

ord1
ord23
ord5
ord25
ord9
ord24
ord2

mpcdec

ord27

dacdec

ord1

waveout

_WAVEOUT

decdvs

ord1

dvsinfo

PostUserAct
GetIPAddress
SendAndRecv

msvcrt

_CxxThrowException
?terminate@@YAXXZ
_initterm
_adjust_fdiv
??1type_info@@UAE@XZ
strrchr
strncpy
_lseek
??3@YAXPAX@Z
free
malloc
__CxxFrameHandler
realloc
??2@YAPAXI@Z
_purecall
_except_handler3
atoi
_close
wcslen
_open
_write
_read

winmm

timeGetTime

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 124KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 148KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DVSHORT.exe
.exe windows:4 windows x86 arch:x86

ff56d509a044e1b38101c58eca937581

Code Sign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

09:ad:51:83:5b:a5:fe:1a:9f:dd:47:7f:75:3c:13:c9
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

23/03/2007, 00:00

Not After

22/03/2008, 23:59

Subject

CN=Herosoft Co.\,Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Network Engineer,O=Herosoft Co.\,Ltd,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

63:36:b8:7c:d2:bf:de:af:2c:1a:8f:cf:b9:c1:d9:69:b1:a5:76:9b
Signer

Actual PE Digest

63:36:b8:7c:d2:bf:de:af:2c:1a:8f:cf:b9:c1:d9:69:b1:a5:76:9b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
FreeLibrary
GetProcAddress
LoadLibraryA
GetPrivateProfileSectionA
GetPrivateProfileStringA
lstrcmpiA
lstrcpynA
GetVersionExA
lstrcmpA
DosDateTimeToFileTime
CreateDirectoryA
GetSystemDirectoryA
GetTempPathA
_lwrite
_lcreat
_lclose
_lread
GetFileSize
_lopen
GetModuleFileNameA
LocalFileTimeToFileTime
SetFileTime
CloseHandle
SetFileAttributesA
LocalFree
LocalAlloc
lstrcpyA
lstrlenA
DeleteFileA
lstrcatA
GetStringTypeW
GetStringTypeA
GetLastError
GetFileType
ReadFile
WriteFile
SetFilePointer
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
SetEndOfFile
SetHandleCount
GetStdHandle
SetStdHandle
TerminateProcess
GetCurrentProcess
HeapFree
RtlUnwind
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
HeapAlloc
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW

advapi32

RegDeleteKeyA
RegEnumKeyA
RegQueryValueExA
RegOpenKeyA
RegCreateKeyA
RegSetValueExA
RegCloseKey
RegSetValueA
RegOpenKeyExA

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DVSHORT.inf
DVSINFO.dll
.dll windows:4 windows x86 arch:x86

25bdd7e45af434407761cfffbd35de00

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleA
LocalAlloc
LocalFree
FreeLibrary
LoadLibraryA
GetProcAddress

ws2_32

__WSAFDIsSet
select
htonl
sendto
htons
recvfrom

tcpto

ord2
ord4

Exports

Exports

GetIPAddress
GetMacID
PostUserAct
RecvInfo
SendAndRecv
SendInfo

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 410B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DecCap.dll
.dll windows:4 windows x86 arch:x86

72a9103ce754bef4f92f000a5d901ed9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
SetEvent
WaitForSingleObject
CreateThread
DisableThreadLibraryCalls
TerminateThread
CreateEventA

user32

SetTimer
KillTimer

capvideo

ord11
ord10

msvcrt

free
malloc
??2@YAPAXI@Z
??3@YAXPAX@Z
_initterm
_adjust_fdiv

Exports

Exports

DecCreateCAPObj
DecDeleteCAPObj

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 679B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 282B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DecDVS.dll
.dll windows:4 windows x86 arch:x86

4d16c25ede956ebf6240b7cc22bdfa5f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LocalFree
LocalAlloc
SetStdHandle
CloseHandle
RtlUnwind
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
HeapFree
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
VirtualFree
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
VirtualAlloc
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
UnhandledExceptionFilter
LoadLibraryA
HeapReAlloc
HeapSize
SetConsoleCtrlHandler
FlushFileBuffers
SetFilePointer

strmpack

ord2

Exports

Exports

_DECDVS

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DecVideo.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 253B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 137KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DllFile/AC3Audio.DLL
.dll windows:4 windows x86 arch:x86

4e9b5bebdbbaea55ec1f94f0bbd7961a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FreeLibrary
lstrcmpiA
GetProcAddress
LoadLibraryA
lstrcatA
GetModuleHandleA
lstrlenA
GetModuleFileNameA
_lopen
_lclose
_llseek
_lread
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
lstrcpyA
Sleep
GetFileSize

user32

wsprintfA

sthmp3

ord2
ord3
ord1

mpegsys

ord41
ord51

mpgaudio

ord14
ord15
ord11
ord22
ord19
ord12
ord17

msvcrt

free
_initterm
malloc
_adjust_fdiv
_onexit
_except_handler3
strrchr
??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler
__dllonexit

Exports

Exports

GetHeroAudio

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DllFile/AIFFAUDIO.DLL
.dll windows:4 windows x86 arch:x86

78c161f4f269d79fec08e275af6579b3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

_lopen
_lclose
_llseek
_lread

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

GetHeroAudio

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 333B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DllFile/APEAUDIO.dll
.dll windows:4 windows x86 arch:x86

33d09acac097b703ed3371504e18ce20

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InitializeCriticalSection
CreateEventA
DeleteCriticalSection
CloseHandle
EnterCriticalSection
LeaveCriticalSection
WaitForSingleObject
SetEvent
LocalFree
LocalAlloc
GetModuleHandleA
lstrcatA
lstrcpynA
lstrcpyA
lstrlenA
FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleFileNameA
GetVersion
GlobalAlloc
GlobalFree

msvcrt

malloc
_initterm
free
_adjust_fdiv

Exports

Exports

GetHeroAudio

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 726B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DllFile/CDAudio.dll
.dll windows:4 windows x86 arch:x86

f94e6449da8861fcd9557f7b764115fd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualFree
LoadLibraryA
FreeLibrary
lstrlenA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
GetProcAddress
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
RtlUnwind
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement

Exports

Exports

GetHeroAudio

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DllFile/DABAudio.dll
.dll windows:4 windows x86 arch:x86

e2c4cec8d5fc824b4822aa9bd0514e39

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LeaveCriticalSection
LocalFree
DeleteCriticalSection
LocalAlloc
InitializeCriticalSection
EnterCriticalSection

dabc

ord4
ord1
ord3
ord5

dacdec

ord1

msvcrt

??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler
free
_initterm
malloc
_adjust_fdiv

Exports

Exports

GetHeroAudio

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 668B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 238B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DllFile/DACAudio.dll
.dll windows:4 windows x86 arch:x86

159bff3c6ced11fec8d8c39b349f041f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
LocalFree
_lclose
_llseek
LocalAlloc
LeaveCriticalSection
EnterCriticalSection
_lread
InitializeCriticalSection
_lopen

dacdec

ord1

msvcrt

??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler
free
_initterm
malloc
_adjust_fdiv

Exports

Exports

GetHeroAudio

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 668B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 328B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 250B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DllFile/DSOut.dll
.dll windows:4 windows x86 arch:x86

7b0d55069d14adb7677712f5747d2dd4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateEventA
CreateThread
DeleteCriticalSection
WaitForSingleObject
SetEvent
LeaveCriticalSection
EnterCriticalSection
CloseHandle
WaitForMultipleObjects
HeapCreate
ResumeThread
SetThreadPriority
HeapAlloc
HeapDestroy
TerminateThread
HeapFree
GetEnvironmentStringsW
GetEnvironmentVariableA
GetEnvironmentStrings
GetCommandLineA
GetVersion
GetProcAddress
GetModuleHandleA
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
InitializeCriticalSection
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
GetVersionExA
VirtualFree
WriteFile
InterlockedDecrement
InterlockedIncrement
VirtualAlloc
HeapReAlloc
RtlUnwind
GetStringTypeA
GetACP
GetOEMCP
LoadLibraryA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW

user32

GetDesktopWindow
PostMessageA
GetForegroundWindow
PostThreadMessageA

ole32

CoUninitialize
CoInitialize

dsound

ord1

Exports

Exports

GetHeroAudio

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DllFile/FlacAUDO.dll
.dll windows:4 windows x86 arch:x86

33d09acac097b703ed3371504e18ce20

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InitializeCriticalSection
CreateEventA
DeleteCriticalSection
CloseHandle
EnterCriticalSection
LeaveCriticalSection
WaitForSingleObject
SetEvent
LocalFree
LocalAlloc
GetModuleHandleA
lstrcatA
lstrcpynA
lstrcpyA
lstrlenA
FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleFileNameA
GetVersion
GlobalAlloc
GlobalFree

msvcrt

malloc
_initterm
free
_adjust_fdiv

Exports

Exports

GetHeroAudio

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 726B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DllFile/MCICDAudio.dll
.dll windows:4 windows x86 arch:x86

46de90e4ab2048e67d6cf11bd7b8aaa2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualFree
HeapFree
WriteFile
lstrlenA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
RtlUnwind
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement

user32

wsprintfA

winmm

mciSendStringA

Exports

Exports

GetHeroAudio

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DllFile/MCIMidiAudio.dll
.dll windows:4 windows x86 arch:x86

46de90e4ab2048e67d6cf11bd7b8aaa2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualFree
HeapFree
WriteFile
lstrlenA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
RtlUnwind
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement

user32

wsprintfA

winmm

mciSendStringA

Exports

Exports

GetHeroAudio

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DllFile/MIDIAudio.dll
.dll windows:4 windows x86 arch:x86

5ab17a09ebbeeeb3bea893b00c665f0c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualFree
GetProcAddress
LoadLibraryA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
FreeLibrary
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
RtlUnwind
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement

Exports

Exports

GetHeroAudio

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DllFile/MPAudio.dll
.dll windows:4 windows x86 arch:x86

edf170f9e9b6f59e1e56ea6ee02481f5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetStdHandle
LoadLibraryA
FreeLibrary
FindClose
FindFirstFileA
CreateFileA
GetFileSize
ReadFile
SetFilePointer
CloseHandle
_lopen
_lread
_llseek
_lclose
lstrcmpiA
lstrcpyA
lstrlenA
WritePrivateProfileStringA
lstrcatA
GetTempPathA
GetPrivateProfileStringA
GetPrivateProfileIntA
SetEvent
ResumeThread
CreateThread
CreateEventA
MapViewOfFile
CreateFileMappingA
SetEndOfFile
UnmapViewOfFile
TerminateThread
Sleep
WaitForSingleObject
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetProcAddress
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
RtlUnwind
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement

Exports

Exports

GetHeroAudio

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DllFile/MPOut.dll
.dll windows:4 windows x86 arch:x86

def0321d56ad404f9fb4de263cb0c0b7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetFileType
lstrlenA
GetModuleFileNameA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcatA
GetProcAddress
LoadLibraryA
Sleep
SetThreadPriority
CreateThread
CloseHandle
WritePrivateProfileStringA
lstrcpyA
GetACP
GetModuleHandleA
GetEnvironmentVariableA
GetEnvironmentStringsW
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
FreeLibrary
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
InterlockedDecrement
InterlockedIncrement
LeaveCriticalSection
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
InitializeCriticalSection
EnterCriticalSection
VirtualAlloc
HeapAlloc
GetCPInfo
GetOEMCP
HeapReAlloc
RtlUnwind
LCMapStringA
LCMapStringW

user32

IsDlgButtonChecked
LoadStringA
GetSystemMetrics
DialogBoxParamA
EndDialog
SendMessageA
CheckRadioButton
SetDlgItemTextA
GetDlgItemTextA
SendDlgItemMessageA

comdlg32

GetSaveFileNameA

Exports

Exports

GetHeroAudio

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DllFile/MPPAudio.dll
.dll windows:4 windows x86 arch:x86

d3dc70911a8573f342c1d8c7da8eaa48

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mppdec

ord11
ord12

kernel32

WriteFile
InitializeCriticalSection
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
RtlUnwind
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement

Exports

Exports

GetHeroAudio

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DllFile/Mp4Audio.dll
.dll windows:4 windows x86 arch:x86

33d09acac097b703ed3371504e18ce20

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InitializeCriticalSection
CreateEventA
DeleteCriticalSection
CloseHandle
EnterCriticalSection
LeaveCriticalSection
WaitForSingleObject
SetEvent
LocalFree
LocalAlloc
GetModuleHandleA
lstrcatA
lstrcpynA
lstrcpyA
lstrlenA
FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleFileNameA
GetVersion
GlobalAlloc
GlobalFree

msvcrt

malloc
_initterm
free
_adjust_fdiv

Exports

Exports

GetHeroAudio

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 726B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DllFile/OGGAUDIO.dll
.dll windows:4 windows x86 arch:x86

33d09acac097b703ed3371504e18ce20

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InitializeCriticalSection
CreateEventA
DeleteCriticalSection
CloseHandle
EnterCriticalSection
LeaveCriticalSection
WaitForSingleObject
SetEvent
LocalFree
LocalAlloc
GetModuleHandleA
lstrcatA
lstrcpynA
lstrcpyA
lstrlenA
FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleFileNameA
GetVersion
GlobalAlloc
GlobalFree

msvcrt

malloc
_initterm
free
_adjust_fdiv

Exports

Exports

GetHeroAudio

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 726B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DllFile/RAAUDIO.dll
.dll windows:4 windows x86 arch:x86

edf57a9438b51aac9522a4a8c1df147e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LocalFree
CreateEventA
LocalAlloc
lstrcatA
GetModuleFileNameA
FreeLibrary
CopyFileA
EnterCriticalSection
InitializeCriticalSection
lstrcpyA
GetProcAddress
LoadLibraryA
FindClose
FindNextFileA
FindFirstFileA
LeaveCriticalSection
WaitForSingleObject
SetEvent
lstrlenA
GetSystemDirectoryA
GetStdHandle
GetCommandLineA
GetVersion
GetModuleHandleA
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
DeleteCriticalSection
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InterlockedDecrement
InterlockedIncrement
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
RtlUnwind

advapi32

RegOpenKeyA
RegQueryValueA
RegCloseKey
RegCreateKeyA
RegSetValueA

Exports

Exports

GetHeroAudio

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DllFile/VQFAudio.dll
.dll windows:4 windows x86 arch:x86

2cae83157c84d51178c57120b77eea3d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleA
_lclose
_lwrite
_llseek
_lread
FreeEnvironmentStringsW
FreeEnvironmentStringsA
InterlockedExchange
EnterCriticalSection
LeaveCriticalSection
ExitProcess
TerminateProcess
GetCurrentProcess
RtlUnwind
RaiseException
GetCommandLineA
GetVersion
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapAlloc
InitializeCriticalSection
HeapReAlloc
HeapSize
HeapFree
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetUnhandledExceptionFilter
GetProcAddress
_lopen
GetModuleFileNameA
ReadFile
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
InterlockedDecrement
InterlockedIncrement
VirtualAlloc
IsBadWritePtr
FlushFileBuffers
IsBadReadPtr
IsBadCodePtr
Sleep
SetFilePointer
CloseHandle
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
GetStringTypeA
SetStdHandle
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW

tvqdec

TvqDecodeFrame
TvqTerminate
TvqInitialize
TvqGetFrameSize
TvqGetNumChannels
TvqUpdateVectorInfo
TvqGetNumFixedBitsPerFrame
TvqWtypeToBtype
TvqGetConfInfo
TvqGetVectorInfo
TvqCheckVersion

Exports

Exports

GetHeroAudio

Sections

.text
Size: 80KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DllFile/WMAUDIO.DLL
.dll windows:4 windows x86 arch:x86

6e154330d290add7cff9f99033b59bd0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

MultiByteToWideChar
SetEvent
WaitForSingleObject
CloseHandle
CreateEventA

ole32

CoInitialize
CoUninitialize
CoCreateInstance

msvcrt

_adjust_fdiv
free
_initterm
malloc

Exports

Exports

GetHeroAudio

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 907B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 324B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DllFile/WavOut.dll
.dll windows:4 windows x86 arch:x86

63de14de4c421b36ac0b2d585cde951d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetHandleCount
WaitForSingleObject
SetEvent
LeaveCriticalSection
EnterCriticalSection
HeapCreate
ResumeThread
SetThreadPriority
CreateThread
CreateEventA
InitializeCriticalSection
HeapAlloc
HeapDestroy
CloseHandle
DeleteCriticalSection
TerminateThread
GetEnvironmentStringsW
GetEnvironmentVariableA
GetCommandLineA
GetVersion
GetProcAddress
GetModuleHandleA
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
HeapFree
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
HeapReAlloc
GetVersionExA
VirtualFree
WriteFile
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
LCMapStringA
GetStringTypeW
LoadLibraryA
MultiByteToWideChar
GetStringTypeA
LCMapStringW
RtlUnwind

winmm

waveOutReset
waveOutWrite
waveOutClose
waveOutPrepareHeader
waveOutUnprepareHeader
waveOutGetPosition
waveOutOpen

Exports

Exports

GetHeroAudio

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DllFile/WaveAudio.dll
.dll windows:4 windows x86 arch:x86

204659e05e1da1e31e30086f4d6a4ac8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

_lread
_lopen
_llseek
_lclose

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

GetHeroAudio

Sections

.text
Size: 4KB - Virtual size: 894B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 333B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DllFile/WordAudio.DLL
.dll windows:4 windows x86 arch:x86

95956a2ecf653d7602356bcd7c79beb5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualFree
_llseek
lstrcatA
lstrlenA
GetModuleFileNameA
_lopen
_lclose
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
_lread
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
RtlUnwind
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement

Exports

Exports

GetHeroAudio

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DllFile/dllconfig.ini
DrawYUV.dll
.dll windows:4 windows x86 arch:x86

af98628ea8e0ec17eb7c63f8730c375b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FreeLibrary
SetStdHandle
CloseHandle
FlushFileBuffers
LoadLibraryA
HeapSize
HeapReAlloc
IsBadCodePtr
IsBadWritePtr
GetProcAddress
GetVersionExA
RtlUnwind
GetCommandLineA
GetModuleHandleA
GetVersion
HeapFree
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
VirtualFree
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
SetUnhandledExceptionFilter
IsBadReadPtr
SetFilePointer

user32

GetClassLongA
GetSysColorBrush
GetDesktopWindow
GetClientRect
GetDC
ReleaseDC
ClientToScreen
GetParent

gdi32

GetSystemPaletteEntries
GetObjectA

Exports

Exports

BmpToRGB32
DIBToDIB32
YUV420ToI420
YUV420ToIF09
YUV420ToIYUV
YUV420ToUYVY
YUV420ToVYUY
YUV420ToY211
YUV420ToY411
YUV420ToYUV9
YUV420ToYUY2
YUV420ToYUYV
YUV420ToYV12
YUV420ToYVU9
YUV420ToYVYU
_DXDRAW

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DvdFile.dll
.dll windows:4 windows x86 arch:x86

2f6269bcc1d704029dd505e2db819bd0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObject
ResetEvent
GetTickCount
lstrcmpiA
lstrlenA
lstrcpyA
_lclose
_lread
_lopen
LocalFree
GetVolumeInformationA
GetDriveTypeA
GetFullPathNameA
CloseHandle
FindClose
FindFirstFileA
GetShortPathNameA
LocalAlloc
lstrcatA
GetFileSize
CreateFileA
ReadFile
WriteFile
SetFilePointer
SetEndOfFile
FlushFileBuffers
GetVersionExA
FindNextFileA
CreateEventA
GetVersion
GlobalAlloc
GlobalFree
DisableThreadLibraryCalls

avcdrom

ord54

msvcrt

_adjust_fdiv
_initterm
free
_except_handler3
__CxxFrameHandler
malloc

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 568B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ENCDAC.DLL
.dll windows:4 windows x86 arch:x86

26b5bf7c5cf2b0062858f1d7fab4c222

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LocalFree
LocalAlloc
RtlUnwind
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
HeapFree
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
VirtualFree
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
WriteFile
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
LoadLibraryA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
HeapReAlloc
HeapSize
FlushFileBuffers
GetLocaleInfoA
GetLocaleInfoW
CloseHandle
SetStdHandle
SetFilePointer

Sections

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ENCMPA.dll
.dll windows:4 windows x86 arch:x86

ae89a41f88db14b2ef0633c9d38e5a29

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

fflush
fwrite
fopen
fclose
calloc
free
_except_handler3
_initterm
malloc
_adjust_fdiv
_ftol

kernel32

GetVersion
GlobalAlloc
GlobalFree

Sections

.text
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.0MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 378B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
English.lcd
Equ.dll
.dll windows:4 windows x86 arch:x86

c101259fa3e4eee2999eae790839d69c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ord858
ord849
ord216
ord289
ord284
ord417
ord312
ord395
ord829
ord178
ord362
ord811
ord551
ord550
ord657
ord553
ord329
ord476
ord419
ord397
ord248
ord765
ord346
ord349
ord775
ord770
ord772
ord724
ord774
ord385
ord864
ord722
ord443
ord377
ord441
ord214
ord304
ord305
ord515
ord364
ord365
ord477
ord512
ord511
ord795
ord513
ord822
ord594
ord444
ord447
ord525
ord528
ord522
ord225
ord552
ord509
ord318
ord406
ord793

user32

ord425
ord513
ord254
ord498
ord249
ord12
ord187
ord147
ord253
ord341
ord504
ord380
ord343
ord183
ord581
ord185
ord539

gdi32

ord329
ord326

fdct

ord1

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
FACEHELP.DLL
.dll windows:4 windows x86 arch:x86

03b87713de72b3d9d7d3fdda696d1a5d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
WriteFile
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetOEMCP
GetACP
GetCPInfo
GetModuleFileNameA
DeleteCriticalSection
GetStartupInfoA
GetFileType
SetHandleCount
VirtualFree
HeapCreate
HeapDestroy
GetLastError
TlsGetValue
SetLastError
TlsFree
TlsAlloc
TlsSetValue
GetCurrentProcess
TerminateProcess
ExitProcess
GetVersion
HeapAlloc
HeapFree
VirtualAlloc
FlushFileBuffers
LockResource
CloseHandle
SetStdHandle
GetCurrentThreadId
lstrlenA
lstrcpyA
LoadLibraryA
GetProcAddress
FreeLibrary
lstrcmpiA
FreeResource
_lopen
_llseek
GlobalAlloc
GlobalLock
_hread
GlobalUnlock
GlobalFree
_lclose
GetStdHandle
GetCommandLineA
GetModuleHandleA
SetFilePointer

user32

CallNextHookEx
GetMenuState
GetMenuItemID
PostMessageA
MapWindowPoints
GetSubMenu
TrackPopupMenuEx
CallWindowProcA
ScreenToClient
WindowFromPoint
UnhookWindowsHookEx
GetMenuItemCount
GetMenuStringA
CreateWindowExA
SendMessageA
SetWindowLongA
SetWindowsHookExA
DrawEdge
SystemParametersInfoA
SetWindowPos
DefWindowProcA
LoadCursorA
RegisterClassA
GetSystemMetrics
BeginPaint
EndPaint
GetWindowLongA
SetClassLongA
GetWindow
GetParent
GetClassNameA
LoadBitmapA
GetSysColor
InvalidateRect
DrawIcon
GetClientRect
GetDC
FillRect
ReleaseDC
ClientToScreen

gdi32

GetTextExtentPoint32A
CreatePen
LineTo
MoveToEx
ExtTextOutA
GetTextMetricsA
CreateFontIndirectA
SetBkColor
SetBkMode
CreateSolidBrush
CreateBrushIndirect
CreateDIBitmap
GetDeviceCaps
CreatePalette
SetDIBitsToDevice
CreateCompatibleDC
DeleteObject
CreateCompatibleBitmap
GetObjectA
RealizePalette
BitBlt
SelectObject
SelectPalette
DeleteDC

comctl32

ord17

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
FDCT.dll
.dll windows:4 windows x86 arch:x86

e10a4031d1c67affe9f8d308f67292a6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InterlockedDecrement
GetVersion
GetProcAddress
GetModuleHandleA
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
GetCommandLineA
InterlockedIncrement
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
LoadLibraryA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
RtlUnwind

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
FFT.dll
.dll windows:4 windows x86 arch:x86

e10a4031d1c67affe9f8d308f67292a6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InterlockedDecrement
GetVersion
GetProcAddress
GetModuleHandleA
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
GetCommandLineA
InterlockedIncrement
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
LoadLibraryA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
RtlUnwind

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
FILEIO.dll
.dll windows:4 windows x86 arch:x86

6e51ffd942186c679d7a5cde52a76b4c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

fgetc
getc
ftell
fseek
fclose
fwrite
fread
ungetc
putc
fflush
fgets
fscanf
fprintf
fputc
fopen
_initterm
malloc
_adjust_fdiv
fputs
free
_fileno
_fdopen
_fstat
_stat
_filelength
_access
_setmode

kernel32

DisableThreadLibraryCalls

Exports

Exports

_Access
_Fclose
_Fdopen
_Feof
_Ferror
_Fflush
_Fgetc
_Fgets
_Filelength
_Fileno
_Fopen
_Fprintf
_Fputc
_Fputs
_Fread
_Fscanf
_Fseek
_Fstat
_Ftell
_Fwrite
_Getc
_Putc
_Setmode
_Stat
_Ungetc

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 182B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
FTPREQ.DLL
.dll windows:4 windows x86 arch:x86

8f74a8f92b789d65546aa656a66215fd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

htons
socket
getsockname
WSACloseEvent
WSACleanup
setsockopt
send
bind
listen
htonl
accept
inet_addr
gethostbyname
ioctlsocket
WSACreateEvent
WSAEventSelect
WSAEnumNetworkEvents
closesocket
connect
recv
WSAStartup

kernel32

lstrlenA
LocalFree
LocalAlloc
lstrcatA
lstrcpynA
lstrcmpiA
DisableThreadLibraryCalls
lstrcpyA

user32

wsprintfA

msvcrt

_onexit
_adjust_fdiv
malloc
_initterm
free
strchr
strtol
printf
__CxxFrameHandler
??2@YAPAXI@Z
??3@YAXPAX@Z
__dllonexit

Exports

Exports

_FtpFile
_FtpReq

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 388B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 454B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
FileHook.dll
.dll windows:4 windows x86 arch:x86

2f80d79d1b2fae3b0c33fcd4b7a792c1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcatA
lstrcmpiW
lstrlenA
lstrcmpiA
MultiByteToWideChar
lstrlenW
GetModuleFileNameA
GlobalAlloc
DisableThreadLibraryCalls
GlobalFree
GetVersion
Sleep
LocalFree

hookproc

ord6
ord3
ord5
ord4
ord2

msvcrt

__dllonexit
_initterm
free
_onexit
??2@YAPAXI@Z
??3@YAXPAX@Z
malloc
_adjust_fdiv
__CxxFrameHandler

Exports

Exports

Get_BASEIO_HOOKLINK

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 675B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 676B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
GENBT.dll
.dll windows:4 windows x86 arch:x86

0e0a91569a709f3da47c56a47c3c4f70

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcmpiA
FindFirstFileA
lstrcatA
lstrcpyA
_lclose
FindNextFileA
_lcreat
LocalFree
LocalAlloc
WideCharToMultiByte
_lwrite
FindClose
DisableThreadLibraryCalls

btfile

ord2

msvcrt

_i64toa
??3@YAXPAX@Z
??2@YAPAXI@Z
free
_initterm
malloc
_adjust_fdiv
__CxxFrameHandler
_stat

Exports

Exports

_GENBTFILE

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 807B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
GETKID.DLL
.dll windows:4 windows x86 arch:x86

b51cf5db0feef6b9ff4fa5859cdbbbfb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
lstrcpynA
lstrlenA
CreateFileMappingA
GetTickCount
DisableThreadLibraryCalls
GlobalAlloc
GetVersion
CloseHandle
GlobalFree

user32

wsprintfA
SendMessageA

msvcrt

_adjust_fdiv
malloc
_initterm
free

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 71B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 560B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
HeroLIB.dll
.dll windows:4 windows x86 arch:x86

5ca2d9ac76305b143293fcb8707a3322

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpyA
GlobalAlloc
GlobalFree
lstrlenA
lstrcmpiA
DisableThreadLibraryCalls

user32

MessageBoxA
GetDesktopWindow
GetDC
ReleaseDC
FillRect

gdi32

GetEnhMetaFileA
DeleteObject
DeleteDC
SelectObject
PlayEnhMetaFile
GetDeviceCaps
CreateCompatibleDC
SetWinMetaFileBits
DeleteEnhMetaFile
CreateDIBSection

krnlcore

ord150
ord69
ord4
ord68
ord96
ord100
ord5
ord112
ord3
ord123
ord104
ord98
ord71
ord116
ord12
ord57
ord134
ord61
ord1
ord129
ord66
ord133
ord97
ord54
ord53
ord181
ord180
ord151
ord128
ord29
ord105
ord99
ord177
ord178
ord72
ord182
ord56
ord132
ord155
ord109
ord63
ord94
ord21
ord2
ord70
ord131

libzapi

ord22
ord20
ord19

libjbig

ord17
ord13
ord10
ord12
ord11
ord9
ord8

libjpeg

ord48
ord76
ord86
ord74
ord90
ord31
ord43
ord88
ord96
ord85
ord83
ord80
ord89
ord30
ord42

libpng

ord72
ord131
ord135
ord134
ord56
ord13
ord8
ord10
ord65
ord12
ord9
ord66
ord93
ord17
ord112
ord99

libtiff

ord11
ord34
ord3
ord32
ord30
ord1
ord43
ord42
ord35
ord19
ord10
ord6
ord8
ord36

libbz2

ord5
ord4
ord6

msvcrt

_adjust_fdiv
malloc
_ftol
??3@YAXPAX@Z
??2@YAPAXI@Z
free
_initterm

Exports

Exports

RegisterLIBImage
UnregisterLIBImage

Sections

.text
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
HookDDX.dll
.dll windows:4 windows x86 arch:x86

d5162c2446f22e7253600596faf23d53

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalFree
LocalAlloc
EnterCriticalSection
LeaveCriticalSection
GetVersion
DeleteCriticalSection
InitializeCriticalSection
GetModuleHandleA
LocalFree
Sleep
GlobalAlloc

chgrgb

ord10
ord6
ord8
ord9
ord11
ord12
ord7
ord1
ord3
ord2
ord4
ord5

chgyuv

ord6
ord10
ord9
ord12
ord11
ord16
ord13
ord14
ord15
ord7
ord5
ord8
ord2
ord4
ord1
ord3

ddrawx

ord1

msvcrt

??2@YAPAXI@Z
_except_handler3
_ftol
__dllonexit
_onexit
free
_initterm
malloc
_adjust_fdiv
??3@YAXPAX@Z
__CxxFrameHandler

Exports

Exports

AlphaOverPic
ChagOverPic
CtrlOverPic
DDrawXEnableSwapChannel
FreeOverPic
GetBlurEnable
GetIncYUV
GetMaybeVideoSize
GetOverlayStepX
GetOverlayStepY
GetVideoPiture
InitOverPic
SetBlurEnable
SetDrawPicture
SetEnableDDX
SetIncYUV
SetMainVideoSize
SetOverlayAlpha

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 1014B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
HookDSX.dll
.dll windows:4 windows x86 arch:x86

327781a64a2c8875743755602a27ca07

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InitializeCriticalSection
GetModuleHandleA
LocalFree
LocalAlloc
EnterCriticalSection
DeleteCriticalSection
LeaveCriticalSection
GlobalFree
GetVersion
GlobalAlloc
DisableThreadLibraryCalls
Sleep

ampequ

ord3
ord4
ord6
ord5
ord1
ord2

dsoundx

ord1

msvcrt

__CxxFrameHandler
??3@YAXPAX@Z
malloc
_adjust_fdiv
_onexit
__dllonexit
free
_purecall
_initterm
??2@YAPAXI@Z

Exports

Exports

Ds_EnableAmpDB
Ds_FreeAmp
Ds_GetAmpDB
Ds_InitAmp
Ds_SetAmpDB
Ds_SetChannel
Ds_SetChnlList
Ds_SetMute

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 772B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 836B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
HookPROC.dll
.dll windows:4 windows x86 arch:x86

8ba403c884c6edbe46a9ff7dd64543c1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryW
IsBadReadPtr
lstrcpyA
lstrlenA
GetSystemTime
GetSystemInfo
GetModuleHandleA
FreeLibrary
GetProcAddress
lstrcmpiA
CloseHandle
LoadLibraryA
GetCurrentProcessId
WriteProcessMemory
GetCurrentProcess
IsBadWritePtr
VirtualProtect
GetModuleFileNameA
GetVersion
LoadLibraryExA
LoadLibraryExW
LocalFree
LocalAlloc
GlobalFree
Sleep
GlobalAlloc

msvcrt

_onexit
??3@YAXPAX@Z
__dllonexit
malloc
_adjust_fdiv
__CxxFrameHandler
free
??2@YAPAXI@Z
_initterm

Exports

Exports

Get_LIBRARY_HOOKLINK
_HOOKLINK

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 918B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 658B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
HookWave.dll
.dll windows:4 windows x86 arch:x86

dc1cb3ebbe83bc776ed4e8c769291273

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LocalAlloc
InitializeCriticalSection
LocalFree
GetModuleHandleA
GetVersion
DeleteCriticalSection
LeaveCriticalSection
DisableThreadLibraryCalls
EnterCriticalSection
GlobalFree
Sleep
GlobalAlloc

ampequ

ord5
ord3
ord1
ord2
ord4
ord6

waveform

ord1

msvcrt

_onexit
__CxxFrameHandler
__dllonexit
malloc
_adjust_fdiv
_except_handler3
free
_initterm

Exports

Exports

Wv_EnableAmpDB
Wv_FreeAmp
Wv_GetAmpDB
Wv_InitAmp
Wv_SetAmpDB
Wv_SetChannel
Wv_SetChnlList
Wv_SetMute

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 746B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 734B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 604B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Hookey.dll
.dll windows:4 windows x86 arch:x86

4e5b29af6a14628fbfb7375881c54d98

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetVersion

user32

SendMessageA
UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx

msvcrt

free
_initterm
malloc
_onexit
__dllonexit
_adjust_fdiv

Exports

Exports

InitHookey
InstallHook

Sections

.text
Size: 4KB - Virtual size: 716B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 526B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 138B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
HtcClass.dll
.dll regsvr32 windows:4 windows x86 arch:x86

0c362ca5bc55b2c70b2c8a8212b60bbe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

EnterCriticalSection
lstrcpyA
lstrcatA
GetProcAddress
LoadLibraryA
InterlockedIncrement
InterlockedDecrement
GlobalUnlock
GlobalLock
GlobalAlloc
LeaveCriticalSection
FlushInstructionCache
GetCurrentProcess
LocalFree
LocalAlloc
SetCurrentDirectoryA
lstrcpyW
DebugBreak
HeapReAlloc
HeapFree
DeleteCriticalSection
HeapDestroy
InitializeCriticalSection
HeapCreate
GetVersionExA
GetSystemInfo
HeapAlloc
DisableThreadLibraryCalls
IsDBCSLeadByte
lstrcpynA
lstrcmpiA
LoadLibraryExA
GetLastError
FindResourceA
LoadResource
SizeofResource
FreeLibrary
WideCharToMultiByte
lstrlenW
MultiByteToWideChar
RtlUnwind
GetModuleFileNameA
GetModuleHandleA
GetShortPathNameA
GetCurrentThreadId
lstrlenA

user32

SetWindowRgn
SetWindowPos
UnionRect
PtInRect
GetKeyState
InvalidateRect
IsWindow
OffsetRect
BeginPaint
GetClientRect
EndPaint
GetFocus
IsChild
GetDC
ReleaseDC
CharNextA
IntersectRect
EqualRect
RegisterClassExA
LoadCursorA
GetClassInfoExA
DefWindowProcA
SetFocus
ShowWindow
CallWindowProcA
CreateWindowExA
GetWindowLongA
SetWindowLongA
DestroyWindow
GetParent
wsprintfA

gdi32

CloseMetaFile
DeleteMetaFile
CreateMetaFileA
CreateRectRgnIndirect
CreateDCA
GetDeviceCaps
LPtoDP
SaveDC
SetMapMode
SetWindowOrgEx
SetViewportOrgEx
SetWindowExtEx
RestoreDC
DeleteDC

advapi32

RegQueryInfoKeyA
RegSetValueExA
RegEnumKeyExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
RegEnumValueA

shell32

SHGetMalloc

ole32

OleSaveToStream
WriteClassStm
OleLoadFromStream
CreateDataAdviseHolder
OleRegGetMiscStatus
CreateOleAdviseHolder
OleRegGetUserType
OleRegEnumVerbs
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree

oleaut32

SysFreeString
RegisterTypeLi
LoadTypeLi
SysAllocString
LoadRegTypeLi
SysStringLen
VariantClear
OleCreatePropertyFrame
SysAllocStringByteLen
VariantChangeType
SysStringByteLen
VarUI4FromStr

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
HttpReq.dll
.dll windows:4 windows x86 arch:x86

97cb958b170bb5014b85d3b60942ecb7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WriteConsoleA
lstrlenA
GetStdHandle
InterlockedIncrement
lstrcpyA
LocalAlloc
LocalFree
InterlockedDecrement
CreateThread
lstrcpynA
CloseHandle
TerminateThread
WaitForSingleObject
lstrcatA
FormatMessageA
DisableThreadLibraryCalls
lstrcmpiA
GetVersionExA
GetProcAddress
GetModuleHandleA

user32

wsprintfA

msvcrt

free
??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler
atol
printf
_initterm
malloc
_adjust_fdiv

ws2_32

WSAGetLastError
closesocket
connect
ioctlsocket
htonl
htons
inet_addr
recv
send
setsockopt
shutdown
socket
gethostbyname
WSAStartup
WSACleanup
WSACloseEvent
WSACreateEvent
WSAEventSelect
WSAEnumNetworkEvents

Exports

Exports

_HttpReq

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 806B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ICON/AUDIO.ico
ICON/MPG.ico
ICON/VIDEO.ico
KRNLAPI.dll
.dll windows:4 windows x86 arch:x86

dc5f27360f16ba1cd989811fdbd2cd09

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenA
GlobalUnlock
lstrcpyA
GlobalFree
GlobalLock
GlobalAlloc
GlobalReAlloc
lstrcmpiA
GlobalSize
DisableThreadLibraryCalls

krnlcore

ord42
ord107
ord110
ord87
ord2
ord38
ord89
ord114
ord23
ord13
ord32
ord43
ord181
ord177
ord178
ord104

msvcrt

malloc
_adjust_fdiv
_initterm
free

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 756B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
KRNLCORE.dll
.dll windows:4 windows x86 arch:x86

feb2b739870f44ef865d55421ddf8d0c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
GetTempFileNameA
GetTempPathA
WaitForSingleObject
GetStartupInfoA
CreateFileMappingA
CreateSemaphoreA
ReleaseSemaphore
FormatMessageA
GetExitCodeProcess
GetLastError
UnmapViewOfFile
GetSystemTime
SystemTimeToFileTime
GetProcessTimes
CloseHandle
MapViewOfFile
LocalAlloc
LocalSize
LoadLibraryA
GetProcAddress
FreeLibrary
GetCurrentProcess
GetVersionExA
GetLogicalDrives
lstrcatA
TerminateProcess
FindClose
LocalReAlloc
lstrlenA
lstrcpyA
FindFirstFileA
FindNextFileA
LocalFree

user32

MessageBoxA

fileio

_Fclose
_Feof
_Access
_Fprintf
_Fputc
_Filelength
_Stat
_Fscanf
_Fdopen
_Fputs
_Fstat
_Putc
_Ungetc
_Fgets
_Fwrite
_Fflush
_Fread
_Ferror
_Getc
_Fileno
_Ftell
_Fseek
_Fgetc
_Setmode
_Fopen

msvcrt

vsprintf
remove
_ftol
_setjmp3
strerror
_errno
_iob
time
exit
toupper
strncpy
strchr
_get_osfhandle
_access
_pctype
__mb_cur_max
_isctype
tolower
strtod
__dllonexit
_onexit
free
_initterm
malloc
_adjust_fdiv

Exports

Exports

FreeMemory
GlobExpression

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
LIBZAPI.dll
.dll windows:4 windows x86 arch:x86

59547577ed6460392d220c37356d1a95

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenA
lstrcatA
DisableThreadLibraryCalls
lstrcpyA

krnlcore

ord168
ord171
ord155
ord150
ord153
ord158
ord163
ord160
ord151
ord161
ord162
ord176
ord154

msvcrt

malloc
vsprintf
rewind
free
_initterm
sprintf
_adjust_fdiv
_errno

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 606B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
LUp936.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 596KB - Virtual size: 592KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Lang936.lcd
Lang950.lcd
LibJBIG.dll
.dll windows:4 windows x86 arch:x86

8d2b67dbed7ced4ae82faa6aa0512518

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

krnlcore

ord152
ord151
ord150

msvcrt

_adjust_fdiv
free
_initterm
malloc

kernel32

DisableThreadLibraryCalls

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 604B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 342B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
LibJPEG.dll
.dll windows:4 windows x86 arch:x86

3961a2a3c857b14e1e55510291f00cc4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

krnlcore

ord163
ord161
ord150
ord151
ord158
ord171
ord162

msvcrt

malloc
exit
getenv
_iob
free
_initterm
sprintf
_adjust_fdiv
_ftol
sscanf

kernel32

DisableThreadLibraryCalls

Sections

.text
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
LibPNG.dll
.dll windows:4 windows x86 arch:x86

043fd2481c806c1cb3511972fbb78eb6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DisableThreadLibraryCalls
lstrlenA

libzapi

ord6
ord10
ord7
ord4
ord19
ord20
ord22
ord23
ord3

krnlcore

ord163
ord161
ord178
ord171
ord151
ord150
ord162
ord177

msvcrt

_ftol
_CIpow
gmtime
free
_iob
sprintf
malloc
_adjust_fdiv
_initterm

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
LibTIFF.dll
.dll windows:4 windows x86 arch:x86

5e7528f737e3196ac175c36161c7226b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenA
ReadFile
WriteFile
SetFilePointer
CloseHandle
GetFileSize
MapViewOfFile
CreateFileMappingA
UnmapViewOfFile
CreateFileA
GlobalAlloc
GlobalFree
GlobalSize
GlobalReAlloc
LocalFree
LocalAlloc
lstrcpyA
DisableThreadLibraryCalls

user32

GetFocus
wvsprintfA
wsprintfA
MessageBoxA

libzapi

ord25
ord23
ord22
ord19
ord10
ord4
ord6
ord20
ord9
ord8

libjpeg

ord83
ord32
ord31
ord74
ord30
ord86
ord76
ord49
ord75
ord80
ord88
ord91
ord97
ord79
ord85
ord96
ord95
ord48
ord41
ord77

krnlcore

ord176
ord178
ord177
ord171

msvcrt

_pctype
strchr
floor
_ftol
_CIpow
strncmp
qsort
sprintf
__mb_cur_max
_isctype
free
_initterm
malloc
_adjust_fdiv

Sections

.text
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 108KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
LineUp.exe
.exe windows:4 windows x86 arch:x86

eaa64d49c89699cef3f4ac8671500ec8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

select
__WSAFDIsSet

winmm

timeGetTime

comctl32

ord17
ImageList_LoadImageA
ImageList_Destroy

httpreq

ord1

kernel32

FindNextFileA
FindFirstFileA
Sleep
WaitForSingleObject
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
_lopen
GetFileSize
SetFilePointer
_llseek
_lread
SetEndOfFile
FlushFileBuffers
LocalFree
LocalAlloc
GetTickCount
lstrcpynA
GlobalFree
GlobalAlloc
GetPrivateProfileStringA
CreateDirectoryA
CloseHandle
FreeLibrary
CreateEventA
GetProcAddress
LoadLibraryA
GetACP
GetPrivateProfileIntA
GetModuleFileNameA
GetFileAttributesA
CreateThread
CopyFileA
MoveFileA
CreateProcessA
WritePrivateProfileStringA
GetLocalTime
FindClose
GetVersionExA
RemoveDirectoryA
CompareStringA
GetVolumeInformationA
QueryPerformanceCounter
QueryPerformanceFrequency
GetDiskFreeSpaceExA
GetDriveTypeA
GlobalMemoryStatus
lstrcmpA
MultiByteToWideChar
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
WriteFile
GetFileType
GetStdHandle
GetStringTypeA
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
TerminateProcess
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
HeapAlloc
HeapFree
RtlUnwind
GetStringTypeW
LCMapStringA
LCMapStringW
GetCurrentDirectoryA
SetCurrentDirectoryA
lstrlenA
lstrcpyA
lstrcatA
_lcreat
_lwrite
_lclose
DeleteFileA
TerminateThread
GetCPInfo
GetOEMCP
GetLastError
GetCurrentProcess
SetStdHandle

user32

DestroyWindow
SetFocus
DialogBoxParamA
EnableWindow
ExitWindowsEx
SetDlgItemTextA
GetCursorPos
GetClientRect
GetDC
ReleaseDC
EndDialog
PostQuitMessage
SetTimer
GetWindowRect
ScreenToClient
SetWindowPos
KillTimer
LoadStringA
MessageBoxA
GetDlgItem
SendMessageA
LoadIconA
CreateDialogParamA
ShowWindow
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
wsprintfA
PostMessageA
SetClassLongA

gdi32

GetTextExtentPoint32A
SetBkMode
CreateSolidBrush
SetTextColor
SetBkColor

advapi32

LookupPrivilegeValueA
OpenProcessToken
AdjustTokenPrivileges
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegEnumKeyA
RegSetValueExA

segfile

ord2

httphlp

StringToUInt32A
GetVariableFromHttpHeader

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
LineUp.ini
LineUpdt.dll
.dll windows:4 windows x86 arch:x86

695ed6b8e3c6ab56f14ef4ac6e4db20b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

timeGetTime

httpreq

ord1

kernel32

LocalFree
GlobalMemoryStatus
WritePrivateProfileStringA
GetPrivateProfileStringA
lstrlenA
lstrcpynA
GetProcAddress
GetPrivateProfileIntA
lstrcatA
GetModuleHandleA
GetModuleFileNameA
GetVolumeInformationA
GetVersionExA
QueryPerformanceCounter
QueryPerformanceFrequency
Sleep
GetDiskFreeSpaceExA
GetDriveTypeA
lstrcmpA
GetCurrentDirectoryA

user32

wsprintfA

msvcrt

_adjust_fdiv
malloc
atoi
strchr
??2@YAPAXI@Z
??3@YAXPAX@Z
_except_handler3
free
_initterm

Exports

Exports

CreateExBtn
ReleaseExBtn

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 644B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MIDIAPI.DLL
.dll windows:4 windows x86 arch:x86

9190929a1dca81dc3da9d4072fbf61a6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

TlsAlloc
MultiByteToWideChar
SetEvent
WaitForSingleObject
QueryPerformanceCounter
QueryPerformanceFrequency
Sleep
InterlockedIncrement
GetProcessHeap
HeapFree
InterlockedDecrement
SetThreadPriority
CreateThread
CloseHandle
TerminateThread
HeapAlloc
CreateEventA
SetHandleCount
GetFileType
SetStdHandle
FlushFileBuffers
SetFilePointer
LoadLibraryA
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
lstrlenA
TlsFree
SetLastError
TlsGetValue
GetLastError
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
GetEnvironmentStrings
GetStdHandle
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
InitializeCriticalSection
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
WriteFile
EnterCriticalSection
LeaveCriticalSection

ole32

CoCreateInstance
CoUninitialize
CoInitialize

winmm

timeGetTime

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 201KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MMXAUDIO.dll
.dll windows:4 windows x86 arch:x86

70b896b2c6a523eb86d48ec34c98a3c5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

TerminateThread
GetVersionExA
GetVersion
GetSystemTime
GetModuleHandleA
GlobalAlloc
lstrcmpiA
lstrlenA
LocalFree
LocalAlloc
GlobalLock
GlobalUnlock
GlobalFree
Sleep
GetTickCount
WaitForMultipleObjects
EnterCriticalSection
LeaveCriticalSection
CloseHandle
WaitForSingleObject
LoadLibraryA
GetProcAddress
CreateEventA
CreateThread
SetThreadPriority
ResumeThread
DeleteCriticalSection
InitializeCriticalSection
ResetEvent
lstrcpyA
SetEvent

user32

MessageBoxA
PostThreadMessageA
PostMessageA

ole32

CoUninitialize
CoInitialize

winmm

waveOutUnprepareHeader
waveOutRestart
waveOutPause
timeGetTime
waveOutReset
waveOutOpen
waveOutPrepareHeader
waveOutWrite
waveOutClose
waveOutGetPosition
waveOutGetNumDevs
waveOutGetDevCapsA
waveOutGetVolume
waveOutSetVolume

avisys

ord20
ord31
ord23
ord33
ord12
ord30
ord29
ord9
ord28
ord27
ord32
ord4
ord26

mpegsys

ord51
ord46
ord32
ord42
ord43
ord41
ord31
ord39
ord38
ord52
ord34

sysfile

ord1
ord18
ord17

ampequ

ord5
ord1
ord3
ord6
ord4
ord2

sthmp3

ord3
ord2
ord1

msvcrt

__CxxFrameHandler
??2@YAPAXI@Z
_CIpow
_ftol
_except_handler3
free
_initterm
malloc
_adjust_fdiv
??3@YAXPAX@Z

Sections

.text
Size: 115KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 913B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 136KB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MPEGSYS.dll
.dll windows:4 windows x86 arch:x86

df4ae822f4388ec735c5d9d522b99432

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapFree
GetVolumeInformationA
GetPrivateProfileStringA
WritePrivateProfileStringA
lstrcmpiA
lstrlenA
LocalFree
LocalAlloc
lstrcatA
GetDriveTypeA
HeapAlloc
GetProcessHeap
HeapReAlloc
GetSystemTime
GetVersion
DeleteCriticalSection
InitializeCriticalSection
TerminateThread
CloseHandle
CreateEventA
GetFullPathNameA
Sleep
SetEvent
ResetEvent
VirtualAlloc
VirtualFree
LeaveCriticalSection
EnterCriticalSection
WaitForSingleObject
GlobalAlloc
GlobalFree
GetProcAddress
LoadLibraryA
FreeLibrary
lstrcpyA
CreateThread
SetThreadPriority
ResumeThread

user32

MessageBoxA
wsprintfA

winmm

mciSendStringA
timeGetTime

avisys

ord24
ord22
ord10
ord7
ord19
ord15
ord14
ord9
ord3
ord13
ord17
ord16
ord2
ord12
ord8
ord21
ord18
ord20
ord23
ord4
ord11
ord6
ord5
ord1
ord25

sysfile

ord17
ord1
ord15
ord2
ord4
ord18
ord13
ord10
ord7
ord6
ord5
ord14
ord16
ord19

avcdrom

ord54
ord52
ord51
ord56
ord53

msvcrt

free
??3@YAXPAX@Z
__CxxFrameHandler
??2@YAPAXI@Z
_initterm
malloc
_adjust_fdiv

Sections

.text
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 336B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MPGAUDIO.DLL
.dll windows:4 windows x86 arch:x86

6be72b24526f4a20b4e68b1e0f80ba7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetEnvironmentStringsW
LocalFree
InterlockedIncrement
InterlockedDecrement
RtlUnwind
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
VirtualFree
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
LocalAlloc
WideCharToMultiByte
WriteFile
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
HeapAlloc
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
VirtualAlloc
LoadLibraryA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
RaiseException
HeapReAlloc
HeapSize
FlushFileBuffers
GetLocaleInfoA
GetLocaleInfoW
CloseHandle
SetStdHandle
SetFilePointer

Sections

.text
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 41KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MPNetMon.dll
.dll regsvr32 windows:4 windows x86 arch:x86

7cbb519fe64c976dd63a74beeb5a8b66

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryExA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
DisableThreadLibraryCalls
HeapAlloc
GetSystemInfo
GetVersionExA
HeapCreate
InitializeCriticalSection
HeapDestroy
DeleteCriticalSection
LeaveCriticalSection
GetLastError
lstrcpyA
lstrcatA
GetProcAddress
LoadLibraryA
InterlockedDecrement
InterlockedIncrement
LocalAlloc
LocalFree
GetPrivateProfileStringA
GetACP
WinExec
FindResourceA
LoadResource
SizeofResource
FreeLibrary
lstrlenW
WideCharToMultiByte
GetModuleFileNameA
GetModuleHandleA
GetShortPathNameA
lstrlenA
MultiByteToWideChar
EnterCriticalSection

user32

GetSystemMetrics
CharNextA

advapi32

RegCreateKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
RegSetValueA
RegCreateKeyA
RegEnumValueA

ole32

CoTaskMemFree
CoTaskMemRealloc
CoCreateInstance
CoTaskMemAlloc

oleaut32

SysStringLen
LoadRegTypeLi
LoadTypeLi
SysAllocString
RegisterTypeLi
VarUI4FromStr
SysFreeString

msvcrt

free
_adjust_fdiv
_initterm
?terminate@@YAXXZ
_except_handler3
strcpy
strcat
_purecall
memcmp
memset
??2@YAPAXI@Z
memcpy
realloc
malloc
??3@YAXPAX@Z
__CxxFrameHandler

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MPPDEC.DLL
.dll windows:4 windows x86 arch:x86

f58271f5d6528af588d12de0e1404a08

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualFree
_lread
_lopen
_lclose
GetCommandLineA
GetVersion
RtlUnwind
HeapFree
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
_llseek
WriteFile
GetProcAddress
VirtualAlloc
HeapReAlloc
IsBadWritePtr
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
RaiseException

Sections

.text
Size: 168KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text1
Size: 4KB - Virtual size: 204B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MciAll.dll
.dll windows:4 windows x86 arch:x86

46de90e4ab2048e67d6cf11bd7b8aaa2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualFree
HeapFree
WriteFile
lstrlenA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
RtlUnwind
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement

user32

wsprintfA

winmm

mciSendStringA

Exports

Exports

GetHeroAudio

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MixerCtl.dll
.dll windows:4 windows x86 arch:x86

39344094086f4b6bcb5193b1d1d89b6b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

mixerGetLineControlsA
mixerGetControlDetailsA
mixerOpen
mixerSetControlDetails
mixerGetNumDevs
mixerClose
mixerGetDevCapsA
mixerGetLineInfoA

kernel32

GetModuleHandleA
GetEnvironmentVariableA
LocalAlloc
LocalFree
GetCommandLineA
GetVersion
HeapAlloc
HeapFree
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
MmxYuv.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 350B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 332B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 262B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Mmxado.exe
.exe windows:4 windows x86 arch:x86

834b2b39790cd23324c5219e0dfe3381

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileStructA
GetStartupInfoA
GetModuleHandleA
RtlUnwind
VirtualProtect
GetPrivateProfileIntA
lstrcatA
lstrcpyA
WritePrivateProfileStringA
lstrcmpiA
lstrlenA
FindClose
FindNextFileA
FreeLibrary
lstrcpynA
GetProcAddress
LoadLibraryA
FindFirstFileA
InitializeCriticalSection
lstrcmpA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
_lwrite
_lclose
_lread
_lopen
_llseek
LocalAlloc
LocalFree
GetPrivateProfileStringA
SetEvent
CopyFileA
GetSystemDirectoryA
GlobalFree
GlobalUnlock
_hread
GlobalLock
GlobalAlloc
FreeResource
LockResource
LoadResource
FindResourceA
GetLocalTime
GetCurrentThreadId
CreateEventA
CloseHandle
ResumeThread
CreateThread
TerminateThread
WaitForSingleObject
Sleep
_lcreat
SetCurrentDirectoryA
GetModuleFileNameA
SetThreadPriority
GetVersionExA
IsValidCodePage
GetACP
GetVersion
GetVolumeInformationA
GetDriveTypeA
WinExec
GetTempPathA
GetLogicalDrives
GetWindowsDirectoryA
WaitForMultipleObjects
HeapFree
HeapCreate
HeapAlloc
HeapDestroy
ExitProcess
GetEnvironmentVariableA
VirtualFree
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
HeapSize
GetLastError
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
WriteFile
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
WritePrivateProfileStructA
SetStdHandle
FlushFileBuffers
CreateFileA
RaiseException
ReadFile
GetCPInfo
GetOEMCP
SetFilePointer
SetEndOfFile
GetCommandLineA

user32

GetMenuItemCount
GetSubMenu
DialogBoxParamA
CreateDialogIndirectParamA
DialogBoxIndirectParamA
GetWindow
EnableWindow
CheckDlgButton
IsDlgButtonChecked
SetDlgItemInt
LoadStringA
ScreenToClient
GetCursorPos
LoadCursorA
LoadIconA
SetCapture
ChildWindowFromPoint
SetWindowPos
SetCursor
ReleaseCapture
EndPaint
BeginPaint
ReleaseDC
MapWindowPoints
GetClientRect
GetDC
InvalidateRect
LoadBitmapA
wsprintfA
DrawEdge
PtInRect
SendDlgItemMessageA
GetMenuItemInfoA
PostMessageA
EndDialog
GetDlgItem
SendMessageA
ValidateRect
FillRect
ShowWindow
CheckRadioButton
GetDlgItemTextA
GetWindowLongA
GetClassNameA
GetSystemMetrics
GetDlgCtrlID
SetFocus
GetWindowTextA
SetWindowTextA
RemoveMenu
MessageBoxA
GetWindowRect
GetParent
SetWindowLongA
SetDlgItemTextA
CallWindowProcA
PostThreadMessageA
CreateDialogParamA
DeleteMenu
DrawMenuBar
GetMenu
SetMenu
WinHelpA
LoadImageA
GetSystemMenu
CheckMenuItem
IsWindow
LoadAcceleratorsA
TranslateAcceleratorA
DestroyIcon
UnregisterClassA
PostQuitMessage
UpdateWindow
GetMessageA
DispatchMessageA
TranslateMessage
GetDesktopWindow
ShowScrollBar
CallNextHookEx
GetMenuState
TrackPopupMenuEx
WindowFromPoint
SystemParametersInfoA
UnhookWindowsHookEx
SetWindowsHookExA
CopyAcceleratorTableA
CreateAcceleratorTableA
DestroyAcceleratorTable
GetMenuItemID
InsertMenuA
GetSysColor
SetTimer
CreatePopupMenu
GetMenuStringA
AppendMenuA
DefWindowProcA
RegisterClassA
TrackPopupMenu
IsWindowVisible
IsIconic
DestroyMenu
KillTimer
LoadMenuA
InsertMenuItemA
GetWindowTextLengthA
ClientToScreen
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
SetClassLongA
CreateWindowExA
EnableMenuItem

gdi32

OffsetRgn
CreatePolygonRgn
SelectClipRgn
CreatePenIndirect
GetRgnBox
ExtTextOutA
GetTextMetricsA
StretchBlt
SetTextColor
CreateSolidBrush
SetDIBitsToDevice
GetStockObject
GetTextExtentPoint32A
SetPixel
GetTextExtentPointA
SetBkMode
TextOutA
CreatePalette
CreateDIBitmap
GetDeviceCaps
SelectPalette
RealizePalette
Polyline
CreateBrushIndirect
CreateBitmap
SetBkColor
CreateCompatibleDC
CreateCompatibleBitmap
SaveDC
BitBlt
RestoreDC
DeleteDC
CreateRectRgn
CombineRgn
CreatePen
SelectObject
MoveToEx
LineTo
PtInRegion
GetObjectA
DeleteObject
CreateFontIndirectA

comdlg32

GetOpenFileNameA
GetSaveFileNameA
ChooseFontA
GetFileTitleA
ChooseColorA

advapi32

RegQueryValueExA
RegOpenKeyExA

shell32

DragFinish
DragQueryFileA
SHBrowseForFolderA
SHGetPathFromIDListA

ole32

RegisterDragDrop
OleUninitialize
OleInitialize
CoInitialize
CoUninitialize
ReleaseStgMedium
RevokeDragDrop

winmm

waveOutGetPosition
waveOutClose
waveOutWrite
waveOutUnprepareHeader
waveOutPrepareHeader
waveOutReset
waveOutGetDevCapsA
waveOutGetID
mixerClose
mixerGetID
mixerGetDevCapsA
mixerGetLineInfoA
mixerGetLineControlsA
mixerGetControlDetailsA
mixerSetControlDetails
mciSendStringA
waveOutGetNumDevs
waveOutOpen
timeGetTime
mixerOpen

comctl32

ord17
CreateToolbarEx
ImageList_LoadImageA
ord5
ImageList_Destroy
PropertySheetA

dsound

ord1

fft

ord5
ord3

avcdrom

ord54
ord51

facehelp

ord30
ord25
ord38
ord39
ord9
ord6
ord34
ord13
ord11
ord7
ord8
ord32
ord35
ord4
ord29
ord12
ord33

fdct

ord1

coolmenu

ord17
ord16
ord14
ord33
ord31
ord27
ord26
ord24
ord23
ord22
ord21
ord32
ord18
ord7
ord20

ampequ

ord6
ord3
ord1
ord5
ord2
ord4

realhook

ord1

downmix

ord2

Sections

.text
Size: 236KB - Virtual size: 235KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 7.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 392KB - Virtual size: 390KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
MpcDEC.dll
.dll windows:4 windows x86 arch:x86

5cd3986e912a286af6fbe701c8289d78

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualAlloc
VirtualFree
LocalAlloc
LocalFree
WaitForSingleObject
Sleep
ResumeThread
CreateThread
CreateEventA
CloseHandle
TerminateThread
SetEvent
ResetEvent
InterlockedIncrement
InterlockedDecrement
QueryPerformanceCounter
QueryPerformanceFrequency
GetVersion
GlobalAlloc
GlobalFree
DisableThreadLibraryCalls

winmm

timeGetTime

msvcrt

free
_initterm
malloc
_adjust_fdiv
__CxxFrameHandler
_purecall

Exports

Exports

_DECMPC

Sections

.text
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 925B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 125KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 820B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Mplex.dll
.dll windows:4 windows x86 arch:x86

b2f1e3c1ac447dc19c42e909cba32af6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

MessageBoxA

kernel32

TlsAlloc
HeapFree
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
GetLastError
DeleteFileA
GetCommandLineA
GetVersion
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
ReadFile
WriteFile
CloseHandle
GetProcAddress
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetFilePointer
RaiseException
GetCurrentThreadId
TlsSetValue
GetFileAttributesA
TlsFree
SetLastError
TlsGetValue
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetStdHandle
FlushFileBuffers
CreateFileA
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
SetEndOfFile
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
CompareStringA
CompareStringW
SetEnvironmentVariableA

Sections

.text
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Nvidia3d.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 4KB - Virtual size: 656B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 77B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
OnLineStat.dll
.dll windows:4 windows x86 arch:x86

7816e4bbf1ad39f512ab95e79432cb8b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

urlmon

URLDownloadToFileA

kernel32

DisableThreadLibraryCalls
CreateThread
lstrcpyA
GetSystemTime
WritePrivateProfileStringA
GetPrivateProfileIntA
Sleep
lstrlenA
GetPrivateProfileStringA
CreateDirectoryA
lstrcpynA
DeleteFileA
CopyFileA
LocalFree
_lread
_lclose
LocalAlloc
_llseek
_lopen

user32

wsprintfA

shell32

ShellExecuteA

msvcrt

_adjust_fdiv
malloc
??3@YAXPAX@Z
strtoul
strstr
sprintf
strrchr
strchr
??2@YAPAXI@Z
__CxxFrameHandler
free
_initterm

netapi32

Netbios

ws2_32

socket
closesocket
WSAStartup
WSACleanup
WSAConnect
recv
send
connect
inet_ntoa
gethostbyname
htons
inet_addr

Exports

Exports

OnlineSta

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
OnSetup.dll
.dll windows:4 windows x86 arch:x86

07ed057173b1cb1ec2c9a5ed7ffdf4aa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetPrivateProfileIntA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
RtlUnwind
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement

user32

IsWindow
SendMessageA

Exports

Exports

ExitAllProgram

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
OverPic.dll
.dll windows:4 windows x86 arch:x86

15906aa0250ffe40764b91d8437f7c9c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LocalFree
LocalAlloc

msvcrt

free
_ftol
_initterm
malloc
_adjust_fdiv

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 328B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 228B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PICHELP.dll
.dll windows:4 windows x86 arch:x86

63e4059f957ac5bfff59e249a4b4f543

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DisableThreadLibraryCalls
GetProcessHeap
HeapFree
HeapAlloc
GlobalFree
GetVersion
GlobalAlloc

msvcrt

free
malloc
_initterm
_adjust_fdiv

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 218B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PLAYDVS.dll
.dll windows:4 windows x86 arch:x86

4081fbd1ec30ed8f9c1aff78a92a7dc4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

yuvhelp

ord5
ord9
ord1

mpcdec

ord27

dacdec

ord1

waveout

_WAVEOUT

decdvs

ord1

kernel32

SetConsoleCtrlHandler
SetFilePointer
HeapSize
CloseHandle
HeapReAlloc
GetLastError
FlushFileBuffers
InitializeCriticalSection
DeleteCriticalSection
LocalFree
LocalAlloc
_lread
_llseek
_lopen
lstrcmpiA
lstrlenA
EnterCriticalSection
LeaveCriticalSection
GetFileSize
QueryPerformanceCounter
QueryPerformanceFrequency
InterlockedDecrement
InterlockedIncrement
_lclose
RtlUnwind
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
HeapFree
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
LoadLibraryA
GetCurrentThread
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
VirtualFree
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
WriteFile
FatalAppExitA
VirtualAlloc
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
UnhandledExceptionFilter
SetStdHandle

winmm

timeGetTime

Exports

Exports

_PLAYDVS

Sections

.text
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PlayDST.exe
.exe windows:4 windows x86 arch:x86

4f64a21950d10ce479885f9e9ca85f68

Code Sign

70:ba:e4:1d:10:d9:29:34:b6:38:ca:7b:03:cc:ba:bf
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

29/01/1996, 00:00

Not After

01/08/2028, 23:59

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:9d:d1:cf:c5:3a:f7:fe:36:be:ca:c2:8b:40:9c:d8
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

17/03/2006, 00:00

Not After

17/03/2007, 23:59

Subject

CN=Beijing Herosoft Zongheng Network Technology Co.\, Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Human Resource Depart.,O=Beijing Herosoft Zongheng Network Technology Co.\, Ltd,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

97:46:31:66:29:d6:c2:4f:2e:16:80:8a:6c:77:e1:57:9b:b8:6b:dc
Signer

Actual PE Digest

97:46:31:66:29:d6:c2:4f:2e:16:80:8a:6c:77:e1:57:9b:b8:6b:dc

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyA
Sleep
GetACP
GetTickCount
_llseek
_lread
lstrcmpiA
GetModuleFileNameA
QueryPerformanceCounter
lstrcatA
QueryPerformanceFrequency
lstrlenA
LeaveCriticalSection
InterlockedExchangeAdd
EnterCriticalSection
InterlockedDecrement
InterlockedIncrement
GetCurrentThreadId
_lclose
GetStartupInfoA
DeleteCriticalSection
InitializeCriticalSection
GetProcAddress
FindResourceA
LoadResource
LockResource
FreeResource
LocalFree
LocalAlloc
GetFileSize
GetModuleHandleA
_lopen

user32

wsprintfA
GetDC
ReleaseDC
InvalidateRect
GetMessageA
DispatchMessageA
TranslateMessage
DefWindowProcA
KillTimer
BeginPaint
TranslateAcceleratorA
PostQuitMessage
LoadCursorA
RegisterClassExA
GetDesktopWindow
GetClientRect
GetWindowRect
CreateWindowExA
UpdateWindow
MoveWindow
ShowWindow
PostMessageA
SetWindowRgn
IsWindowVisible
WindowFromPoint
PtInRect
GetCursorPos
DialogBoxParamA
EndDialog
ScreenToClient
ValidateRect
ClientToScreen
TrackPopupMenu
SetWindowPos
LoadMenuA
DestroyAcceleratorTable
EnableMenuItem
CheckMenuItem
SetTimer
LoadAcceleratorsA
EndPaint
DestroyWindow
GetSubMenu

gdi32

CreateRectRgn
SetRectRgn
CombineRgn
DeleteObject
SetDIBitsToDevice

advapi32

RegSetValueExA
RegCloseKey
RegSetValueA
RegCreateKeyA

comctl32

ord17

yuvhelp

ord25
ord9
ord1
ord5
ord2
ord23
ord24

mpcdec

ord27

dacdec

ord1

waveout

_WAVEOUT

decdvs

ord1

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_except_handler3
_purecall
__CxxFrameHandler
??2@YAPAXI@Z
??3@YAXPAX@Z

winmm

timeGetTime

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
PlayList.dll
.dll windows:4 windows x86 arch:x86

c6b6acb6a19080d0fbe64646f2e9012a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

facehelp

ord38
ord35
ord34
ord6
ord9
ord8
ord7
ord29
ord32
ord33
ord11
ord13
ord12
ord30
ord25

kernel32

ord329
ord509
ord513
ord248
ord765
ord657
ord378
ord473
ord722
ord443
ord377
ord441
ord304
ord305
ord362
ord364
ord365
ord477
ord512
ord511
ord795
ord517
ord406
ord536
ord444
ord447
ord750
ord360
ord533
ord530
ord736
ord166
ord167
ord711
ord349
ord594
ord811
ord525
ord528
ord864
ord798
ord855
ord565
ord560
ord827
ord409
ord415
ord344
ord705
ord312
ord553
ord710
ord822
ord296
ord719
ord346
ord638
ord185
ord274
ord273
ord550
ord318
ord395
ord427
ord492
ord593
ord713
ord774
ord568
ord775
ord225
ord499
ord552
ord772
ord496
ord214
ord770
ord522
ord289
ord284
ord385
ord724
ord280
ord861
ord307
ord476
ord849
ord494
ord484
ord489
ord858
ord397
ord419
ord503
ord493
ord574
ord291
ord558
ord160
ord497
ord486
ord488
ord852
ord348
ord551
ord793
ord627
ord515

user32

ord73
ord3
ord539
ord436
ord508
ord628
ord394
ord581
ord592
ord624
ord478
ord61
ord415
ord601
ord175
ord349
ord411
ord319
ord143
ord225
ord662
ord671
ord228
ord482
ord279
ord285
ord317
ord286
ord343
ord253
ord135
ord232
ord557
ord309
ord295
ord260
ord579
ord495
ord599
ord398
ord340
ord341
ord185
ord521
ord401
ord321
ord144
ord281
ord409
ord290
ord446
ord549
ord55
ord181
ord259
ord302
ord293
ord616
ord149
ord221
ord270
ord22
ord404
ord470
ord248
ord585
ord277
ord439
ord619
ord473
ord475
ord425
ord318
ord249
ord498
ord23
ord634
ord332
ord234
ord336
ord305
ord576
ord254
ord535
ord536
ord147
ord145
ord83
ord81
ord93
ord237
ord540
ord183
ord513
ord500
ord326
ord296
ord530
ord402

gdi32

ord176
ord131
ord241
ord412
ord377
ord282
ord173
ord366
ord364
ord297
ord395
ord415
ord332
ord414
ord367
ord417
ord368
ord250
ord206
ord357
ord428
ord354
ord199
ord371

comdlg32

ord110
ord112

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

ord259
ord239
ord220
ord216

shell32

ord206
ord266
ord207
ord288
ord285

comctl32

ord5
ord17

Exports

Exports

DoPlayList
SetHBitmap

Sections

.text
Size: 96KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PlayObj.dll
.dll windows:4 windows x86 arch:x86

74d5baa9f206807b7bf5ac97b09203eb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcmpiA
GetModuleFileNameA
lstrcpynA
_lclose
_lread
LoadLibraryA
GetPrivateProfileIntA
FindClose
FindNextFileA
FindFirstFileA
GetProcAddress
FreeLibrary
lstrcatA
LocalFree
lstrlenA
lstrcpyA
_lopen
LocalAlloc

user32

wsprintfA
IsWindow
ReleaseCapture
PtInRect
SetCapture
GetClientRect
IntersectRect
ReleaseDC
DrawFocusRect
GetDC
SetWindowTextA

mixerctl

ord2
ord1

svdvideo

ord87
ord79
ord102
ord83
ord82
ord101
ord78
ord75
ord84

mpegsys

ord48
ord49
ord34
ord46
ord47
ord51

sysfile

ord1
ord5
ord4
ord2
ord3
ord19
ord18
ord16
ord14
ord13
ord10
ord7
ord6

dvdinfo

ord1
ord4
ord2

dvdfile

ord2
ord3
ord1

mmxaudio

ord71
ord72
ord82
ord81

msvcrt

??2@YAPAXI@Z
??3@YAXPAX@Z
free
_initterm
malloc
_adjust_fdiv

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
RDJMF.dll
.dll windows:4 windows x86 arch:x86

b7046fdd502362c83d51b232552252e3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LocalFree
_lclose
_lread
_lopen
LocalAlloc
_llseek
lstrcpyA
SetFilePointer
lstrlenA
GetVersion
GlobalAlloc
GlobalFree
LocalReAlloc
LocalSize
DisableThreadLibraryCalls

msvcrt

free
_initterm
malloc
_adjust_fdiv
memmove
??2@YAPAXI@Z
__CxxFrameHandler
??3@YAXPAX@Z

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 150B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 690B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
RMCtrl.dll
.dll windows:4 windows x86 arch:x86

6d9db4b6c3be5f38183000d7e5ed2713

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcatA
DeleteCriticalSection
InterlockedDecrement
LoadLibraryA
GetProcAddress
lstrcpyA
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
FreeLibrary
Sleep
TerminateProcess
FreeEnvironmentStringsW
WideCharToMultiByte
LCMapStringW
LCMapStringA
RtlUnwind
GetCommandLineA
GetVersion
HeapFree
HeapAlloc
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetModuleHandleA
ExitProcess
InterlockedIncrement
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
IsBadWritePtr
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
HeapReAlloc
GetCPInfo
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetACP
GetOEMCP
MultiByteToWideChar
GetStringTypeA
GetStringTypeW

user32

DispatchMessageA
SetWindowTextA
TranslateMessage
PeekMessageA
GetWindowRect
AdjustWindowRect
SetWindowPos
GetSystemMetrics
SetWindowLongA
wsprintfA
IsWindow
GetClientRect

advapi32

RegQueryValueA
RegOpenKeyA
RegCloseKey

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
RealHook.dll
.dll windows:4 windows x86 arch:x86

17f20d19c916d5f2d879e1b3b97e85b4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenW
FindClose
lstrcatA
lstrlenA
lstrcpyA
FindFirstFileA
lstrcatW
MultiByteToWideChar
GlobalAlloc
GlobalFree
GetVersion
Sleep
DisableThreadLibraryCalls

advapi32

RegCloseKey
RegQueryValueA
RegCreateKeyExW
RegCreateKeyW
RegOpenKeyExW
RegOpenKeyW
RegCreateKeyExA
RegCreateKeyA
RegOpenKeyA
RegOpenKeyExA

hookproc

ord2
ord4

msvcrt

_initterm
free
_onexit
__dllonexit
_adjust_fdiv
malloc

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 854B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
RegExplr.exe
.exe windows:4 windows x86 arch:x86

971c12c90df8aaf33898233c8e448987

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_Destroy
ImageList_LoadImageA
ord17

kernel32

lstrcmpiA
lstrcatA
GetPrivateProfileStringA
LCMapStringA
GetProcAddress
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetCPInfo
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
WriteFile
RtlUnwind
HeapFree
VirtualFree
GetPrivateProfileSectionA
lstrcpyA
GetModuleFileNameA
GetACP
lstrlenA
LoadLibraryA
FreeLibrary
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
LCMapStringW

user32

GetDesktopWindow
GetWindowRect
SetWindowPos
GetParent
DestroyIcon
LoadIconA
EndDialog
GetCursorPos
ScreenToClient
SendMessageA
GetDlgItem
EnableWindow
wsprintfA
DialogBoxParamA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyA
RegOpenKeyA
RegCloseKey

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 300KB - Virtual size: 299KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
SEGFILE.DLL
.dll windows:4 windows x86 arch:x86

f03ac7685b501f5b2d7224e94d4569b2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateThread
CreateEventA
SetEvent
TerminateThread
WaitForSingleObject
CloseHandle
LocalFree
LocalAlloc
_lcreat
_lopen
GetFileSize
SetFilePointer
_llseek
_lread
_lwrite
SetEndOfFile
FlushFileBuffers
_lclose
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
lstrcpyA
Sleep
GetVersion
GlobalAlloc
GlobalFree
DisableThreadLibraryCalls

msvcrt

malloc
_adjust_fdiv
__dllonexit
_onexit
free
??2@YAPAXI@Z
__CxxFrameHandler
??3@YAXPAX@Z
_initterm

Exports

Exports

_MULTIDOWN
_SEGMENTFILE

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 962B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SHMEM.dll
.dll windows:4 windows x86 arch:x86

153df577b7e3d2133f344b01010fb946

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObject
ReleaseMutex
CreateMutexA
OpenMutexA
CloseHandle
CreateFileMappingA
OpenFileMappingA
MapViewOfFile
UnmapViewOfFile

msvcrt

_initterm
malloc
_adjust_fdiv
__dllonexit
_onexit
free

Exports

Exports

AllocShareMemory
FreeShareMemory
LockShareMemory
OpenShareMemory
ShareAlloc
ShareFree
ShareLock
ShareUnlock
UnlockShareMemory

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 762B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
STHMP3.dll
.dll windows:4 windows x86 arch:x86

d624392f93f0b1462f9320f69ca99c21

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetOEMCP
GetVersion
HeapAlloc
HeapFree
GetCommandLineA
GetProcAddress
GetModuleHandleA
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
GetModuleFileNameA
GetCPInfo
GetACP
FatalAppExitA
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
WriteFile
LoadLibraryA
SetFilePointer
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetStdHandle
FlushFileBuffers
GetLocaleInfoA
GetLocaleInfoW
CloseHandle

user32

wsprintfA
MessageBoxA

Exports

Exports

STHMP3
STHMP3
STHMP3

Sections

.text
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_DATA1
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

CONST
Size: 512B - Virtual size: 22B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
STHVXD.VXD
SUBPIC.dll
.dll windows:4 windows x86 arch:x86

384e0a7824dd18243138676d3f03606f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

EnterCriticalSection
WaitForMultipleObjects
ResumeThread
LeaveCriticalSection
SetEvent
LocalAlloc
InitializeCriticalSection
DeleteCriticalSection
TerminateThread
Sleep
CloseHandle
CreateEventA
SetThreadPriority
CreateThread
LocalFree
DisableThreadLibraryCalls
GetVersion
GlobalAlloc
GlobalFree

user32

ReleaseDC
FillRect
GetDC
IntersectRect
GetClientRect
SetRect

gdi32

StretchDIBits
CreateBrushIndirect
SetStretchBltMode
DeleteObject

msvcrt

free
malloc
_ftol
??3@YAXPAX@Z
__CxxFrameHandler
??2@YAPAXI@Z
_initterm
_adjust_fdiv

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 335B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 863KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SVDVIDEO.dll
.dll windows:4 windows x86 arch:x86

b83e5347019269551be75fdfcafc0c37

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalLock
GlobalUnlock
lstrcatA
GlobalAlloc
GetModuleHandleA
CreateEventA
InitializeCriticalSection
Sleep
GetProcAddress
VirtualFree
VirtualAlloc
LocalAlloc
LocalFree
GetDriveTypeA
DeleteCriticalSection
CreateThread
SetThreadPriority
ResumeThread
TerminateThread
CloseHandle
WaitForSingleObject
FreeLibrary
GetVersion
LoadLibraryA
GetVersionExA
LeaveCriticalSection
EnterCriticalSection
QueryPerformanceCounter
QueryPerformanceFrequency
ResetEvent
SetEvent
lstrcpyA
lstrlenA
GlobalFree
lstrcmpiA
GetSystemTime

user32

LoadCursorA
RegisterClassA
CreateWindowExA
MessageBoxA
ShowCursor
DestroyIcon
LoadIconA
OffsetRect
GetParent
ScreenToClient
GetWindowLongA
SetParent
UnionRect
SetWindowPos
ShowWindow
CallWindowProcA
SendMessageA
ValidateRect
GetDC
FillRect
ReleaseDC
InvalidateRect
GetClassLongA
SetClassLongA
ClientToScreen
GetClientRect
MapWindowPoints
GetDesktopWindow
GetWindowRect
IntersectRect
DrawFocusRect
DefWindowProcA
MoveWindow
SetRect
SystemParametersInfoA
PostMessageA
CheckMenuItem
DestroyWindow
UnregisterClassA
SetWindowLongA
GetClassNameA
FindWindowA
EnumChildWindows
GetSystemMetrics
BeginPaint
EndPaint
IsWindow
IsWindowVisible
AdjustWindowRect
SetWindowTextA
GetCursorPos
UpdateWindow

gdi32

GetObjectA
CreateCompatibleDC
StretchBlt
SelectObject
DeleteDC
GetPaletteEntries
CreateDIBitmap
DeleteObject
CreateBrushIndirect
SetStretchBltMode
GetSystemPaletteEntries
GetDeviceCaps
SelectPalette
RealizePalette
GetTextExtentPointA
CreatePalette
StretchDIBits
SetTextColor
TextOutA
SetBkMode
GetStockObject
SetDIBitsToDevice

comdlg32

GetFileTitleA

advapi32

RegQueryValueExA
RegOpenKeyA
RegSetValueExA
RegCloseKey

winmm

timeGetTime

decvideo

ord16
ord1
ord2
ord3
ord4
ord6
ord7
ord8
ord9
ord10
ord11
ord12
ord13
ord14
ord15
ord5
ord17
ord18
ord19
ord20
ord21
ord22
ord23
ord24
ord25
ord26

mmxaudio

ord83
ord71
ord72
ord62
ord69
ord64
ord70
ord81
ord80
ord61
ord79
ord68
ord63
ord75
ord76
ord74
ord82
ord67
ord65
ord78

sysfile

ord14
ord1
ord18
ord16
ord19
ord17

mpegsys

ord51
ord44
ord41
ord32
ord46
ord34
ord36
ord50
ord45
ord40
ord31
ord38

mmxyuv

ord4
ord1
ord2
ord3
ord7

overpic

ord3
ord2
ord1

avivideo

ord5
ord6
ord4
ord11
ord19
ord18
ord17
ord16
ord15
ord14
ord10
ord8
ord7
ord9
ord13
ord12
ord1
ord2
ord3

dvdinfo

ord4
ord1
ord3

subpic

ord7
ord3
ord10
ord13
ord14
ord16
ord15
ord9
ord8
ord5
ord11
ord1

nvidia3d

ord5
ord6
ord4
ord3
ord1
ord2

msvcrt

free
_except_handler3
_ftol
_initterm
malloc
_adjust_fdiv

video3d

ord5
ord4
ord6
ord1
ord2
ord3

Sections

.text
Size: 185KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 437B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 815KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SthSDVD.exe
.exe windows:4 windows x86 arch:x86

e93bbe1b454a9ae5180cf85920a995f2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

timeGetTime

comctl32

ImageList_Add
ImageList_Destroy
ImageList_LoadImageA
PropertySheetA
ord17
ImageList_Create

commskin

ord1

httpreq

ord1

kernel32

GlobalAlloc
GlobalFree
GetCurrentDirectoryA
CompareStringA
GetTickCount
LockResource
LoadResource
FindResourceA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
_lread
GetComputerNameA
CreateProcessA
GlobalLock
FreeResource
GetCurrentThreadId
WideCharToMultiByte
MultiByteToWideChar
GetFileSize
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetWindowsDirectoryA
HeapAlloc
HeapReAlloc
GetCurrentProcess
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapFree
RtlUnwind
GetStartupInfoA
GetCommandLineA
GetFileType
HeapDestroy
HeapCreate
VirtualFree
ExitProcess
LCMapStringW
GlobalUnlock
_lopen
_llseek
WaitForSingleObject
TerminateThread
CreateThread
GetSystemInfo
_lcreat
_lwrite
_lclose
GetLogicalDrives
GetSystemTime
GetProfileStringA
IsBadReadPtr
SetEvent
GetStringTypeA
GetStringTypeW
VirtualAlloc
IsBadWritePtr
GetVersion
GetVersionExA
OpenEventA
CreateEventA
GetLastError
Sleep
GetACP
lstrcmpA
lstrcpynA
RemoveDirectoryA
FindNextFileA
SetCurrentDirectoryA
WinExec
GetPrivateProfileSectionA
GetLogicalDriveStringsA
FindFirstFileA
FindClose
GetSystemDirectoryA
CopyFileA
GetPrivateProfileStructA
WritePrivateProfileStructA
GetVolumeInformationA
GetDriveTypeA
HeapSize
CreateDirectoryA
DeleteFileA
MoveFileA
GetPrivateProfileStringA
CreateFileA
WriteFile
CloseHandle
WritePrivateProfileStringA
GetPrivateProfileIntA
LocalFree
LoadLibraryA
GetProcAddress
FreeLibrary
LocalAlloc
GetModuleFileNameA
lstrlenA
GetModuleHandleA
lstrcatA
lstrcpyA
lstrcmpiA
LCMapStringA
TerminateProcess
GetCPInfo
GetOEMCP

user32

LoadAcceleratorsA
BringWindowToTop
SystemParametersInfoA
UpdateWindow
DefWindowProcA
DestroyIcon
ShowCursor
GetWindowRect
ClientToScreen
GetClassNameA
GetWindowLongA
DrawEdge
PtInRect
ShowWindow
CheckRadioButton
IsWindowEnabled
ValidateRect
DrawIcon
SetDlgItemInt
GetDlgItemTextA
SendDlgItemMessageA
GetDlgCtrlID
SetDlgItemTextA
FillRect
LoadBitmapA
InvalidateRect
GetMenuStringA
ReleaseCapture
SetCursor
ChildWindowFromPoint
RegisterClassA
BeginPaint
EndPaint
LoadIconA
GetMessageA
GetCursorPos
ScreenToClient
GetParent
DeleteMenu
WinHelpA
GetWindow
GetWindowTextLengthA
LoadStringA
PostMessageA
LoadMenuA
FindWindowA
PeekMessageA
InsertMenuA
GetMenuItemInfoA
SetMenuItemInfoA
GetSysColor
RemoveMenu
SetWindowTextA
SetFocus
CheckDlgButton
IsDlgButtonChecked
GetWindowTextA
GetDlgItem
EnableWindow
EndDialog
SendMessageA
GetDC
ReleaseDC
EnableMenuItem
GetSubMenu
DialogBoxParamA
GetMenuItemCount
CheckMenuItem
wsprintfA
LoadImageA
TranslateMessage
DispatchMessageA
TranslateAcceleratorA
DestroyAcceleratorTable
AdjustWindowRect
RegisterClipboardFormatA
SetWindowLongA
RegisterClassExA
CreateWindowExA
DestroyWindow
LoadCursorA
MessageBoxA
IsZoomed
SetForegroundWindow
GetForegroundWindow
PostQuitMessage
KillTimer
SetTimer
TrackPopupMenuEx
TrackPopupMenu
IsIconic
UnhookWindowsHookEx
WindowFromPoint
GetMenuState
CallWindowProcA
DrawTextA
DrawIconEx
GetWindowDC
SetWindowRgn
SetParent
GetMenuItemID
SetSysColors
SetCapture
GetAsyncKeyState
CallNextHookEx
ShowScrollBar
CreateDialogParamA
IsChild
IntersectRect
InflateRect
MapWindowPoints
GetDesktopWindow
GetClientRect
SetRect
SetClassLongA
GetSystemMetrics
SetWindowPos
CreatePopupMenu
AppendMenuA
IsWindow
IsWindowVisible
DestroyMenu
SetWindowsHookExA

gdi32

PatBlt
GetClipBox
SelectClipRgn
CreateRectRgnIndirect
CreatePatternBrush
GetTextMetricsA
GetStockObject
CreateFontIndirectA
SetTextColor
SetDIBitsToDevice
SetBkMode
Polyline
CreateBrushIndirect
CreateSolidBrush
GetDeviceCaps
GetSystemPaletteEntries
CreatePalette
SelectPalette
RealizePalette
StretchDIBits
CreateRoundRectRgn
CreateEllipticRgn
GetDIBits
TextOutA
CreateBitmap
SetBkColor
CreateCompatibleBitmap
BitBlt
CreateRectRgn
CombineRgn
PtInRegion
DeleteObject
GetObjectA
DeleteDC
CreatePen
StretchBlt
SetStretchBltMode
SelectObject
CreateDIBSection
CreateDIBitmap
CreateCompatibleDC
RestoreDC
LineTo
MoveToEx
SaveDC
GetTextExtentPoint32A

comdlg32

ChooseColorA
GetOpenFileNameA
GetSaveFileNameA

advapi32

RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegCreateKeyA
RegOpenKeyA
RegDeleteValueA
RegQueryValueA
RegCreateKeyExA
ControlService
CloseServiceHandle
OpenServiceA
OpenSCManagerA
RegEnumValueA
RegQueryValueExA

shell32

SHGetSpecialFolderLocation
DragFinish
DragQueryFileA
SHGetDesktopFolder
SHGetPathFromIDListA
SHBrowseForFolderA
ShellExecuteA
SHGetSpecialFolderPathA
SHGetFileInfoA
SHGetMalloc

ole32

OleInitialize
ReleaseStgMedium
OleUninitialize
RevokeDragDrop
RegisterDragDrop

hookddx

ord8
ord4
ord5
ord2
ord9
ord6
ord7

hookwave

ord2
ord3
ord6
ord8
ord1

hookdsx

ord6
ord2
ord3
ord8
ord1

filehook

ord2
ord3
ord1

videowin

ord2
ord1

webdll

ReleaseWebObj

overpic

ord5
ord4

hookey

ord1
ord2

mixerctl

ord1
ord2

coolmenu

ord9
ord10
ord20
ord5
ord3
ord26
ord32
ord22
ord7
ord23
ord21
ord19
ord33
ord14
ord16
ord17
ord27
ord6
ord24
ord18
ord31

sysfile

ord15
ord6
ord18
ord21
ord20
ord2
ord4
ord14
ord19
ord16
ord17

subpic

ord17
ord21
ord12
ord23
ord18
ord22
ord20
ord19

mpegsys

ord51
ord73

realhook

ord1

svdvideo

ord75
ord88
ord89
ord80
ord79
ord93
ord81

mmxaudio

ord71
ord73
ord72
ord82

playobj

ord2
ord1

weblist

ord1
ord2

Sections

.text
Size: 352KB - Virtual size: 350KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 892KB - Virtual size: 891KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
StrmPack.dll
.dll windows:4 windows x86 arch:x86

5a9818a6706c21b7a8e1ff0f33b4b0ae

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LocalFree
LocalAlloc
RtlUnwind
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
HeapFree
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
VirtualFree
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
VirtualAlloc
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
UnhandledExceptionFilter
LoadLibraryA
HeapReAlloc
HeapSize
SetConsoleCtrlHandler
FlushFileBuffers
CloseHandle
SetStdHandle
SetFilePointer

Exports

Exports

_DECSTREAM
_ENCSTREAM

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Sys936.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 4KB - Virtual size: 289B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 136KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SysExplr.exe
.exe windows:4 windows x86 arch:x86

d698f4116e21f95d72448bc2d5ac6a64

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadCodePtr
SetUnhandledExceptionFilter
SetConsoleCtrlHandler
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetFileType
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapCreate
HeapDestroy
GetEnvironmentVariableA
VirtualAlloc
VirtualFree
WritePrivateProfileStringA
HeapFree
HeapReAlloc
HeapAlloc
InterlockedIncrement
OutputDebugStringA
GetCPInfo
WriteFile
GetStdHandle
DebugBreak
GetCurrentProcess
TerminateProcess
ExitProcess
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
HeapValidate
IsBadReadPtr
IsBadWritePtr
RtlUnwind
CloseHandle
WinExec
_lopen
_llseek
GetOEMCP
SetFilePointer
SetStdHandle
GetProcAddress
GetLogicalDrives
GetDriveTypeA
FindNextFileA
FindFirstFileA
FindClose
lstrcmpA
GetVolumeInformationA
OpenFile
GetVersion
GetVersionExA
GetACP
FlushFileBuffers
LoadLibraryA
GetShortPathNameA
CreateFileA
FreeLibrary
RemoveDirectoryA
CompareStringA
lstrcmpiA
GetModuleFileNameA
_lcreat
_lwrite
CreateDirectoryA
GetCurrentDirectoryA
SetCurrentDirectoryA
GlobalAlloc
GlobalFree
DeviceIoControl
MultiByteToWideChar
lstrcpynA
CreateThread
LocalAlloc
_lclose
_lread
LocalFree
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcpyA
lstrcatA
DeleteFileA
InterlockedDecrement
GetLocalTime
GetFileAttributesA
GetLastError
lstrlenA

user32

InvalidateRect
GetClientRect
UpdateWindow
SetClassLongA
GetSysColor
ReleaseCapture
GetWindowPlacement
SetFocus
SetDlgItemInt
BeginPaint
EndPaint
PostQuitMessage
DefWindowProcA
IsIconic
SetForegroundWindow
CheckMenuItem
EnableMenuItem
GetCursorPos
TrackPopupMenu
GetAsyncKeyState
GetClassNameA
IsWindow
ClientToScreen
SetCapture
EndDialog
LoadIconA
LoadMenuA
GetSubMenu
GetMenuStringA
GetDC
ReleaseDC
RegisterClassA
CreateWindowExA
ShowWindow
LoadBitmapA
BringWindowToTop
DestroyIcon
DestroyMenu
SetMenuItemInfoA
GetDesktopWindow
CharNextA
MessageBoxA
LoadStringA
GetDlgItemTextA
IsDlgButtonChecked
EnableWindow
SetDlgItemTextA
CheckDlgButton
GetMenuItemCount
DeleteMenu
AppendMenuA
DialogBoxParamA
wsprintfA
PostMessageA
FillRect
DestroyCursor
SystemParametersInfoA
GetWindowRect
SetWindowPos
GetDlgItem
SendMessageA
LoadCursorA
SetTimer
KillTimer

gdi32

BitBlt
DeleteDC
SetTextColor
SetBkMode
SetBkColor
CreateFontIndirectA
GetObjectA
DeleteObject
GetDeviceCaps
TextOutA
GetTextExtentPointA
LineTo
MoveToEx
GetStockObject
CreateCompatibleDC
SelectObject

comdlg32

GetOpenFileNameA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegSetValueA
RegDeleteValueA
RegCreateKeyA
RegSetValueExA
RegCloseKey

shell32

ShellExecuteA
SHGetPathFromIDListA
SHBrowseForFolderA
Shell_NotifyIconA

ole32

CoUninitialize
CoInitialize
CoCreateInstance

comctl32

PropertySheetA
ord17

httpreq

ord1

dabproxy

StartProxy

coolmenu

ord17
ord16
ord1
ord14
ord15
ord4
ord19
ord3
ord18
ord5
ord9
ord10
ord20
ord7
ord2
ord6

httphlp

StringToUInt32A
GetVariableFromHttpHeader

avcdrom

ord51
ord53
ord54

Sections

.text
Size: 132KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SysFile.dll
.dll windows:4 windows x86 arch:x86

247b73ee07b39a54c865be7e0177506a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FindNextFileA
FindClose
CreateFileA
GetFileSize
ReadFile
WriteFile
SetFilePointer
SetEndOfFile
FlushFileBuffers
FindFirstFileA
_lopen
_lcreat
_lread
_lwrite
_llseek
_lclose
LocalAlloc
LocalFree
lstrcpynA
lstrlenA
lstrcmpiA
WideCharToMultiByte
MultiByteToWideChar
lstrcpyA
CloseHandle
lstrcatA
DisableThreadLibraryCalls

rdjmf

ord1

getkid

ord5
ord2
ord3

filehook

ord5
ord4

msvcrt

__CxxFrameHandler
_except_handler3
__dllonexit
_onexit
free
_initterm
malloc
_adjust_fdiv

Exports

Exports

SetCallBackJMK

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
TCPTO.dll
.dll windows:4 windows x86 arch:x86

a7f5b0487884d2b712e3a73026a83a3a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

getsockname
getpeername
WSAEnumNetworkEvents
recv
WSACreateEvent
__WSAFDIsSet
select
send
listen
accept
bind
htons
connect
shutdown
closesocket
WSACloseEvent
socket
setsockopt
inet_addr
ioctlsocket
htonl
gethostbyname
WSACleanup
WSAEventSelect
WSAStartup

msvcrt

_onexit
_adjust_fdiv
malloc
_initterm
free
abs
_purecall
??2@YAPAXI@Z
??3@YAXPAX@Z
__CxxFrameHandler
memcpy
__dllonexit

kernel32

GetVersion
GlobalAlloc
GlobalFree
Sleep

Exports

Exports

GetLocalAddress
IPNameToAddress
_TCPTO

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 471B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 990B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
TVQDEC.DLL
.dll windows:4 windows x86 arch:x86

6dd8836d196e9a1f5a5f7a27f42c8bb7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

MessageBoxA
GetForegroundWindow

kernel32

GetFileType
GetStartupInfoA
ExitProcess
TerminateProcess
GetCurrentProcess
HeapAlloc
HeapFree
GetCommandLineA
GetVersion
GetProcAddress
GetModuleHandleA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
RtlUnwind
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
InterlockedDecrement
InterlockedIncrement
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
RaiseException
SetStdHandle
FlushFileBuffers
CloseHandle

Exports

Exports

TvqCheckVersion
TvqDecodeFrame
TvqGetBitRate
TvqGetConfInfo
TvqGetFrameSize
TvqGetModuleVersion
TvqGetNumChannels
TvqGetNumFixedBitsPerFrame
TvqGetNumFrames
TvqGetSamplingRate
TvqGetSetupInfo
TvqGetVectorInfo
TvqInitialize
TvqResetFrameCounter
TvqSetFrameCounter
TvqTerminate
TvqUpdateVectorInfo
TvqWtypeToBtype

Sections

.text
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 468KB - Virtual size: 802KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VACom.dll
.dll windows:4 windows x86 arch:x86

3d7912bb4ccec784104d17e9c29ab048

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleFileNameA
LocalAlloc
Sleep
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
DeleteCriticalSection
IsValidCodePage
LocalFree
InterlockedIncrement
InterlockedDecrement
IsValidLocale
GetStringTypeA
LCMapStringW
GetStringTypeW
MultiByteToWideChar
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoW
GetTimeZoneInformation
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
RtlUnwind
GetCommandLineA
GetVersion
HeapFree
HeapAlloc
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetConsoleCtrlHandler
LCMapStringA
FreeEnvironmentStringsA
InitializeCriticalSection
IsBadWritePtr
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
UnhandledExceptionFilter
GetCPInfo
GetACP
GetOEMCP

msacm32

acmStreamClose
acmDriverDetailsA
acmDriverEnum
acmFormatEnumA
acmDriverOpen
acmStreamConvert
acmStreamUnprepareHeader
acmStreamSize
acmStreamOpen
acmDriverClose
acmStreamPrepareHeader

msvfw32

ICInfo
ICGetInfo
ICCompress
ICDecompress
ICSendMessage
ICOpen
ICClose

Sections

.text
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VCvtShell.dll
.dll windows:4 windows x86 arch:x86

eeaf30521c1a637781870acb2142ce39

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentDirectoryA
GetProcAddress
LoadLibraryA
lstrcatA
WideCharToMultiByte
lstrcmpiA
lstrlenA
FreeLibrary
GetCurrentProcessId
SetCurrentDirectoryA
TlsAlloc
TerminateProcess
ExitProcess
InterlockedIncrement
InterlockedDecrement
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
IsBadWritePtr
HeapReAlloc
VirtualAlloc
WriteFile
VirtualFree
RtlUnwind
GetCommandLineA
GetVersion
HeapAlloc
HeapFree
GetCurrentThreadId
TlsSetValue
GetModuleFileNameA
TlsFree
SetLastError
TlsGetValue
GetLastError
HeapCreate
FreeEnvironmentStringsA
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy

user32

GetClassNameA
SetWindowPos
EnumWindows
LoadIconA
SetWindowsHookExA
GetWindowThreadProcessId
CallNextHookEx
PtInRect
SetCapture
ClientToScreen
ReleaseCapture
EnumChildWindows
PostMessageA
GetWindowDC
ReleaseDC
CallWindowProcA
DestroyIcon
UnhookWindowsHookEx
DrawIconEx
GetSystemMetrics
GetWindowRect
GetWindowLongA
OpenClipboard
SendMessageA
CloseClipboard
ShowWindow
SetParent
SetWindowLongA
GetClientRect

gdi32

DeleteObject

shell32

DragFinish
DragQueryFileA

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Video3D.dll
.dll windows:4 windows x86 arch:x86

25ae927ff76357f8e1491def26442396

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualFree
VirtualAlloc
Sleep
LocalFree
LocalAlloc

user32

GetDesktopWindow
GetClientRect
ShowWindow
GetDC
FillRect
ReleaseDC
SetWindowPos

gdi32

CreatePen
DeleteObject
SelectObject
LineTo
MoveToEx
GetStockObject

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 652B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 510B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
VideoWin.dll
.dll windows:4 windows x86 arch:x86

7ec26f2a1234db6649456899630fcfd5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpyA
GetModuleHandleA
lstrcpynA
GetProcAddress
LocalAlloc
GetVersionExA
LocalFree

user32

GetClientRect
PostMessageA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
SetWindowLongA
EnumDisplaySettingsA
ChangeDisplaySettingsExA
OffsetRect
IntersectRect
SystemParametersInfoA
GetDesktopWindow
ShowWindow
SetWindowPos

gdi32

GetDCOrgEx
GetClipBox

msvcrt

_adjust_fdiv
malloc
_initterm
free
??3@YAXPAX@Z
??2@YAPAXI@Z

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
WAVEBMP.DLL
.dll windows:4 windows x86 arch:x86

58fc1528690a57a5c2a6dfadfb4bd830

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LocalFree
LocalAlloc
RtlUnwind
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
HeapFree
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
HeapCreate
VirtualFree
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
LoadLibraryA
HeapReAlloc
HeapSize
FlushFileBuffers
CloseHandle
SetStdHandle
SetFilePointer

Exports

Exports

_WAVEBMP

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
WAVEFILE.dll
.dll windows:4 windows x86 arch:x86

7c8cd291674764441fb6e910889133b9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

_lread
_llseek
_lclose
_lopen
_lwrite
_lcreat
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
HeapDestroy
HeapCreate
VirtualFree
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
HeapFree
VirtualAlloc
LoadLibraryA
FlushFileBuffers
CloseHandle
SetStdHandle
SetFilePointer

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 989B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
WAVEOUT.dll
.dll windows:4 windows x86 arch:x86

71dcf82bed4587c81ee389e825f065ee

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LocalFree
CreateThread
CreateEventA
LocalAlloc
CloseHandle
WaitForSingleObject
SetEvent
HeapFree
LeaveCriticalSection
EnterCriticalSection
HeapCreate
ResumeThread
SetThreadPriority
InitializeCriticalSection
Sleep
HeapAlloc
HeapDestroy
DeleteCriticalSection
TerminateThread
SetStdHandle
FlushFileBuffers
SetConsoleCtrlHandler
HeapSize
HeapReAlloc
LoadLibraryA
UnhandledExceptionFilter
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
RtlUnwind
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
ExitProcess
TerminateProcess
GetCurrentProcess
VirtualFree
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
WriteFile
FatalAppExitA
VirtualAlloc
SetUnhandledExceptionFilter
SetFilePointer

winmm

waveOutGetPosition
waveOutClose
waveOutRestart
waveOutPause
waveOutReset
waveOutPrepareHeader
waveOutWrite
waveOutOpen
waveOutUnprepareHeader

Exports

Exports

CloseWaveOut
CreateWaveOut
GetPlayingData
GetWaveOutPos
WaveOutBeEnd
WriteWaveOut
_WAVEOUT

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
WEBDLL.DLL
.dll windows:4 windows x86 arch:x86

39a887c121d3fa29d314082890e030a6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
lstrcpyW
lstrlenW
GetModuleHandleA
LocalFree
LocalAlloc
MultiByteToWideChar
lstrlenA
DisableThreadLibraryCalls

user32

SetWindowLongA
CreateWindowExA
GetWindowLongA
SetWindowPos
DefWindowProcA
GetClientRect
MessageBoxA
LoadCursorA
RegisterClassA

shell32

SHGetMalloc

ole32

CoUninitialize
CoInitialize
CoCreateInstance

msvcrt

_onexit
malloc
_initterm
free
_purecall
__CxxFrameHandler
??2@YAPAXI@Z
??3@YAXPAX@Z
__dllonexit
_adjust_fdiv

Exports

Exports

CreateWebObj
ReleaseWebObj

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 844KB - Virtual size: 844KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
WPageDim.dll
.dll windows:4 windows x86 arch:x86

d2d64282314c67908f0d209358b309d0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DisableThreadLibraryCalls
GetCurrentThreadId
lstrcmpiA

user32

GetWindowLongA
SendMessageA
GetClassNameA
AdjustWindowRect
SetWindowPos
EnumThreadWindows

msvcrt

free
malloc
_initterm
_adjust_fdiv

Exports

Exports

SetVdoWndSize

Sections

.text
Size: 4KB - Virtual size: 670B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 541B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 126B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
WaitHook.dll
.dll windows:4 windows x86 arch:x86

80c4c7eca5542c1e6ea56ae1491343b1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentThreadId
_llseek
_lcreat
_lopen
lstrlenA
lstrcpyA
GlobalAlloc
GlobalFree
_lwrite
_lclose
WaitForSingleObject
GetVersion
Sleep
DisableThreadLibraryCalls

user32

wsprintfA

hookproc

ord4
ord2

msvcrt

_initterm
malloc
_adjust_fdiv
_onexit
__dllonexit
free

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 153B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 646B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 236B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Waveform.dll
.dll windows:4 windows x86 arch:x86

8b94be921e8b710782bec5bed35508cc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

hookproc

ord2
ord4
ord3
ord5

msvcrt

free
_onexit
__CxxFrameHandler
__dllonexit
??2@YAPAXI@Z
malloc
??3@YAXPAX@Z
_adjust_fdiv
_initterm

kernel32

GlobalAlloc
GlobalFree
DisableThreadLibraryCalls
LocalAlloc
GetVersion
Sleep
LocalFree

Exports

Exports

Get_WAVEFORM_HOOKLINK

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 421B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 530B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
WebList.dll
.dll windows:4 windows x86 arch:x86

9e6fdbbf4be12f32471f6d86bff4c4ee

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleFileNameA
GlobalFree
FreeLibrary
GlobalUnlock
GlobalLock
GlobalAlloc
DisableThreadLibraryCalls
GetModuleHandleA
FindNextFileA
_lcreat
CloseHandle
_lwrite
lstrcmpiA
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
_lopen
_lread
lstrcpynA
_lclose
LocalAlloc
Sleep
LocalFree
lstrcatA
lstrcpyA
FindFirstFileA
FindClose
CreateFileA
ReadFile
lstrlenA
GlobalReAlloc

user32

DrawIconEx
IsWindowVisible
InvalidateRgn
BeginPaint
ReleaseDC
EndPaint
ShowWindow
EnumChildWindows
GetWindowRect
SetWindowRgn
CreateWindowExA
GetWindowDC
InsertMenuItemA
KillTimer
DestroyMenu
PostQuitMessage
ScreenToClient
GetCursorPos
EnableMenuItem
SendMessageA
wsprintfA
SetWindowLongA
SetTimer
InvalidateRect
RegisterClassA
LoadCursorA
GetDC
CreatePopupMenu
GetWindowLongA
PostMessageA
TrackPopupMenu
PtInRect
MessageBoxA
IsWindow
SetCapture
DefWindowProcA
MessageBeep
ReleaseCapture
MoveWindow
FillRect
GetWindowTextA
DrawTextA
DrawFocusRect
LoadImageA
SetRect
GetClientRect

gdi32

ExtCreateRegion
CreateDIBSection
SetTextColor
BitBlt
CreateRectRgnIndirect
CreateCompatibleDC
SelectObject
SetStretchBltMode
OffsetRgn
DeleteDC
CreateRoundRectRgn
CreateRectRgn
CreateEllipticRgn
CombineRgn
SetBkMode
DeleteObject
GetObjectA
GetStockObject
SelectClipRgn
StretchBlt
CreateFontIndirectA
CreateCompatibleBitmap

comdlg32

GetSaveFileNameA
GetOpenFileNameA

shell32

SHBrowseForFolderA
DragQueryFileA
DragFinish
DragAcceptFiles
ShellExecuteA
SHGetPathFromIDListA

msvcrt

strstr
strrchr
strchr
strtok
strtol
sprintf
_itoa
_ftol
free
_initterm
malloc
_adjust_fdiv

comctl32

ImageList_Destroy

Exports

Exports

CreateList
ListCmd

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 569KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
WebLoad.dll
.dll windows:4 windows x86 arch:x86

8268e9fe26eec86e54406ff12651af70

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateDirectoryA
_lwrite
_lcreat
_lclose
LocalFree
LocalAlloc
GetCurrentDirectoryA
_lread
GetFileSize
_lopen
SetCurrentDirectoryA
lstrcpyA
lstrcpynA
WideCharToMultiByte
lstrlenA
RtlUnwind
GetCommandLineA
GetVersion
HeapFree
HeapAlloc
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
VirtualAlloc
HeapReAlloc
IsBadWritePtr
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
LCMapStringA
LCMapStringW
InterlockedDecrement
InterlockedIncrement

user32

wsprintfA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

httpreq

ord1

Exports

Exports

_WEBLOAD

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
WebSkin.dll
.dll regsvr32 windows:4 windows x86 arch:x86

53bad704cff3ff53accfc7c29a36d62f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadResource
GetLastError
LoadLibraryExA
IsDBCSLeadByte
HeapDestroy
DeleteCriticalSection
DisableThreadLibraryCalls
GetSystemInfo
GetVersionExA
HeapCreate
InitializeCriticalSection
LeaveCriticalSection
SizeofResource
GetProcAddress
InterlockedDecrement
InterlockedIncrement
GetCurrentThreadId
GlobalUnlock
GlobalLock
GlobalAlloc
FlushInstructionCache
GetCurrentProcess
GetStringTypeW
GetStringTypeA
WideCharToMultiByte
GetModuleFileNameA
GetModuleHandleA
MultiByteToWideChar
GetShortPathNameA
lstrlenW
HeapFree
HeapReAlloc
HeapAlloc
DebugBreak
LocalFree
lstrcmpiA
LoadLibraryA
FreeLibrary
LocalAlloc
FindResourceA
FindNextFileA
FindFirstFileA
RtlUnwind
FindClose
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcatA
GetPrivateProfileStringA
EnterCriticalSection
lstrcpyA

user32

SetFocus
ShowWindow
IsWindow
GetClassInfoExA
LoadCursorA
RegisterClassExA
CreateWindowExA
DestroyWindow
FillRect
GetKeyState
GetClientRect
EndPaint
GetFocus
IsChild
GetDC
ReleaseDC
CharNextA
LoadStringA
DefWindowProcA
wsprintfA
PtInRect
UnionRect
SetWindowPos
SetWindowRgn
OffsetRect
EqualRect
IntersectRect
SendMessageA
CallWindowProcA
GetWindowLongA
BeginPaint
SetWindowLongA
InvalidateRect

gdi32

DeleteMetaFile
CloseMetaFile
CreateRectRgnIndirect
CreateMetaFileA
GetStockObject
CreateDCA
GetDeviceCaps
LPtoDP
SaveDC
SetMapMode
SetWindowOrgEx
SetViewportOrgEx
SetWindowExtEx
RestoreDC
DeleteDC

advapi32

RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegEnumKeyExA
RegDeleteKeyA
RegDeleteValueA
RegEnumValueA

ole32

CreateDataAdviseHolder
OleRegGetMiscStatus
CreateOleAdviseHolder
OleRegGetUserType
OleRegEnumVerbs
OleSaveToStream
WriteClassStm
OleLoadFromStream
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree

oleaut32

VariantClear
SysAllocString
VarUI4FromStr
RegisterTypeLi
LoadTypeLi
SysStringLen
LoadRegTypeLi
VariantChangeType
SysAllocStringByteLen
SysStringByteLen
OleCreatePropertyFrame
SysFreeString

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
SetCallBack
SetCmdToSkin

Sections

.text
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
YuvHelp.dll
.dll windows:4 windows x86 arch:x86

0983fcb857f79dd05a8868ebc2538196

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LocalFree
LocalAlloc
InterlockedIncrement
InterlockedDecrement
GetVersion
GlobalAlloc
GlobalFree
DisableThreadLibraryCalls

msvcrt

_initterm
_adjust_fdiv
free
_ftol
_purecall
__CxxFrameHandler
malloc

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 616B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 452B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 754B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
explyobj/CapObj.dll
.dll windows:4 windows x86 arch:x86

10f973da74dcf4a697688f56ebbf4ce6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

waveOutReset
waveOutClose
waveOutPrepareHeader
waveOutWrite
waveOutOpen
waveOutUnprepareHeader

kernel32

DisableThreadLibraryCalls
lstrcmpA
lstrcpynA
TerminateThread
WaitForSingleObject
IsBadReadPtr
CloseHandle
LocalFree
LocalAlloc
CreateThread
Sleep

user32

InvalidateRect
GetWindowLongA
GetDC
ReleaseDC
FillRect
PostMessageA
GetClientRect
CallWindowProcA
DefWindowProcA
SetWindowLongA

gdi32

SetDIBitsToDevice
SetStretchBltMode
GetStockObject
StretchDIBits

capvideo

ord10
ord11

msvcrt

??2@YAPAXI@Z
malloc
_adjust_fdiv
_initterm
free
__CxxFrameHandler
??3@YAXPAX@Z

Exports

Exports

CreateExMedia
ReleaseExMedia

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 338B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
explyobj/DVSMedia.dll
.dll windows:4 windows x86 arch:x86

fc9d4d52e433ea4c44807b3a12ea5391

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

_lread
_llseek
_lclose
LoadLibraryA
InterlockedIncrement
InterlockedDecrement
GetStringTypeW
GetStringTypeA
LCMapStringW
_lopen
GetFileSize
FreeLibrary
LCMapStringA
MultiByteToWideChar
GetProcAddress
RtlUnwind
GetCommandLineA
GetVersion
HeapFree
HeapAlloc
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
HeapReAlloc
IsBadWritePtr
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
LocalFree

user32

GetDC
ReleaseDC
GetWindowRect
GetWindowLongA
CreateWindowExA
MoveWindow
IsWindow
GetParent
SetWindowLongA
CallWindowProcA
GetClientRect
FillRect
BeginPaint
EndPaint
DefWindowProcA
DestroyWindow

gdi32

CreateSolidBrush
DeleteObject
SetDIBitsToDevice

playdvs

ord1

drawyuv

ord16

Exports

Exports

CreateExMedia
ReleaseExMedia

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
explyobj/IMGMedia.dll
.dll windows:4 windows x86 arch:x86

f3eeab7c0db3e8580fcd347413ebd0ad

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleFileNameA
LocalAlloc
LocalFree
GetModuleHandleA
lstrcmpiA
lstrlenA
DisableThreadLibraryCalls

user32

GetDC
GetClientRect
SetWindowLongA
ReleaseDC
SetTimer
BeginPaint
KillTimer
EndPaint
DefWindowProcA

gdi32

SetDIBitsToDevice

krnlapi

ord7
ord16
ord3
ord17
ord2
ord1
ord5
ord10
ord13
ord9
ord6

dibtodib

ord18
ord2
ord1

msvcrt

_ftol
_adjust_fdiv
free
??3@YAXPAX@Z
malloc
??2@YAPAXI@Z
_initterm

Exports

Exports

CreateExMedia
ReleaseExMedia

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 282B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
explyobj/MOVMEDIA.dll
.dll windows:4 windows x86 arch:x86

642c3f80c1ceed68f67f03e4630a1e63

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReleaseMutex
DisableThreadLibraryCalls
GetModuleHandleA
GetModuleFileNameA
LoadLibraryA
GetSystemDirectoryA
GetCurrentProcessId
CreateMutexA
WaitForSingleObject
GetLastError
GetProcAddress
CloseHandle
lstrcmpiA
FreeLibrary

user32

GetClientRect
SetWindowLongA
SetWindowTextA
UpdateWindow
GetDesktopWindow
OffsetRect
SetWindowPos
GetMessageTime
CallWindowProcA
wsprintfA
IsZoomed
GetWindowRect
MoveWindow
IsIconic
GetMessagePos

msvcrt

free
_ftol
??3@YAXPAX@Z
malloc
_adjust_fdiv
??2@YAPAXI@Z
_initterm
_strcmpi

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

Exports

Exports

CreateExMedia
ReleaseExMedia

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
explyobj/RMMEDIA.dll
.dll windows:4 windows x86 arch:x86

b2c17672b0189d5a3074642e57302bdd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InitializeCriticalSection
DeleteCriticalSection
FreeLibrary
lstrcpyA
GetProcAddress
LoadLibraryA
lstrlenA
lstrcatA
EnterCriticalSection
CloseHandle
ReadFile
GetFileSize
CreateFileA
lstrcmpA
lstrcmpiA
Sleep
InterlockedDecrement
LeaveCriticalSection
InterlockedIncrement
DisableThreadLibraryCalls

user32

DispatchMessageA
TranslateMessage
PeekMessageA
SetWindowTextA
GetSystemMetrics
SetWindowLongA
GetWindowRect
wsprintfA
GetClientRect
IsWindow
SetWindowPos

advapi32

RegCloseKey
RegOpenKeyA
RegQueryValueA

msvcrt

fprintf
_adjust_fdiv
malloc
_initterm
free
_purecall
_strlwr
strncmp
strstr
??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler
_iob
memmove

Exports

Exports

CreateExMedia
ReleaseExMedia

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 460B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 754B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
explyobj/RWMDISC.dll
.dll windows:4 windows x86 arch:x86

d2940833168457faf5c890d81a814518

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
GetModuleFileNameA
SetCurrentDirectoryA
FindClose
FindNextFileA
FindFirstFileA
lstrlenA
LoadLibraryA
lstrcatA
FreeLibrary
DisableThreadLibraryCalls

msvcrt

??3@YAXPAX@Z
__CxxFrameHandler
sprintf
isupper
free
_initterm
malloc
_adjust_fdiv
??2@YAPAXI@Z

Exports

Exports

CreateExDisc
ReleaseExDisc

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 787B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 372B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
explyobj/SWFMEDIA.dll
.dll windows:4 windows x86 arch:x86

31925e2572d5a8df5f6e57a664908982

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcmpiA
InterlockedDecrement
GetProcAddress
LoadLibraryA
FreeLibrary
lstrcatA
GetModuleFileNameA
DisableThreadLibraryCalls
LocalFree
MultiByteToWideChar
GetLastError
InterlockedIncrement
lstrlenA

user32

CreateWindowExA
GetWindowLongA
GetClientRect
RegisterClassA
GetDesktopWindow
UpdateWindow
LoadCursorA
DestroyWindow
GetWindow
SetWindowLongA
PostMessageA
SetWindowPos
CallWindowProcA
DefWindowProcA
GetWindowRect
SetWindowTextA

gdi32

GetStockObject

ole32

CoInitialize
CoCreateInstance

oleaut32

SysAllocString
SysFreeString
VariantClear
GetErrorInfo

msvcrt

_onexit
__dllonexit
_adjust_fdiv
malloc
_initterm
free
_CxxThrowException
__CxxFrameHandler
??1type_info@@UAE@XZ
??2@YAPAXI@Z
??3@YAXPAX@Z
_strcmpi

Exports

Exports

CreateExMedia
ReleaseExMedia

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 926B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
explyobj/TORMedia.dll
.dll windows:4 windows x86 arch:x86

b2aace04ea77c9042ed1dff11380a9c4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

_lclose
_lread
_lopen
GetModuleHandleA
lstrcmpiA
LocalFree
lstrcpynA
lstrcatA
lstrcpyA
GetModuleFileNameA
lstrlenA
IsBadReadPtr
WaitForSingleObject
TerminateThread
CloseHandle
GetProcAddress
GetPrivateProfileIntA
Sleep
WideCharToMultiByte
CreateThread
DisableThreadLibraryCalls

user32

SendMessageA
IsWindow
MessageBoxA

ole32

CoInitialize
CoUninitialize

hookproc

ord4
ord2
ord3

dabc

ord3
ord4
ord14
ord5
ord15
ord2
ord1

msvcrt

_adjust_fdiv
??3@YAXPAX@Z
??2@YAPAXI@Z
__dllonexit
_onexit
free
_initterm
malloc

btfile

ord1

Exports

Exports

CreateExMedia
ReleaseExMedia

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
explyobj/WMMEDIA.dll1111
.dll windows:4 windows x86 arch:x86

5f81993da3627f386f2386b306e7ed90

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InitializeCriticalSection
DeleteCriticalSection
lstrcpyA
LeaveCriticalSection
EnterCriticalSection
lstrcmpiA
MultiByteToWideChar
DisableThreadLibraryCalls

user32

GetClientRect
GetSystemMetrics
SetWindowLongA
GetWindowRect
SetWindowPos
GetDC
ReleaseDC
UpdateWindow
SetWindowTextA
IsWindow

ole32

CoUninitialize
CoInitialize
CoCreateInstance

msvcrt

malloc
_initterm
free
strncpy
_strlwr
??2@YAPAXI@Z
??3@YAXPAX@Z
_adjust_fdiv

Exports

Exports

CreateExMedia
ReleaseExMedia

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 392B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 416B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
explyobj/WMMedia.dll
.dll windows:4 windows x86 arch:x86

5f81993da3627f386f2386b306e7ed90

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InitializeCriticalSection
DeleteCriticalSection
lstrcpyA
LeaveCriticalSection
EnterCriticalSection
lstrcmpiA
MultiByteToWideChar
DisableThreadLibraryCalls

user32

GetClientRect
GetSystemMetrics
SetWindowLongA
GetWindowRect
SetWindowPos
GetDC
ReleaseDC
UpdateWindow
SetWindowTextA
IsWindow

ole32

CoUninitialize
CoInitialize
CoCreateInstance

msvcrt

malloc
_initterm
free
strncpy
_strlwr
??2@YAPAXI@Z
??3@YAXPAX@Z
_adjust_fdiv

Exports

Exports

CreateExMedia
ReleaseExMedia

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 440B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
helper.chm
.chm
hsrpcplg.dll
.dll windows:4 windows x86 arch:x86

4198d80e02c7d61ced7ad2d50300cf34

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FreeEnvironmentStringsW
GlobalFree
lstrlenA
lstrcpynA
GetModuleFileNameA
GlobalAlloc
_lclose
_lread
_lopen
LoadLibraryA
GetModuleHandleA
lstrcatA
GetProcAddress
lstrcmpiA
HeapCreate
VirtualFree
HeapDestroy
SetEnvironmentVariableA
CompareStringW
CompareStringA
LocalAlloc
LocalFree
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
DisableThreadLibraryCalls
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
GetTimeZoneInformation
GetOEMCP
GetLocaleInfoW
HeapFree
WriteFile
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
HeapAlloc
UnhandledExceptionFilter
GetCPInfo
GetACP
InterlockedDecrement
VirtualAlloc
HeapReAlloc
IsBadWritePtr
RtlUnwind
LCMapStringA
LCMapStringW
InterlockedIncrement
Sleep
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID

user32

wsprintfA

httphlp

HS_SendHttpHeader
GetRequestHttpUrl
GetRequestHttpVer

Exports

Exports

oksvcResponeUser

Sections

.text
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
httphlp.dll
.dll windows:4 windows x86 arch:x86

d98502e7676f03300890f70f23a69d93

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapDestroy
lstrcpynA
GetModuleFileNameA
GetLastError
CreateDirectoryA
HeapFree
lstrlenA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapCreate
VirtualFree
GetProcAddress
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetStringTypeW
LoadLibraryA
RtlUnwind
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
InterlockedDecrement
InterlockedIncrement

user32

wsprintfA

ws2_32

send
recv
WSACleanup
WSAStartup

Exports

Exports

CleanupSocketVer
ConvertCharCaseA
GetFileNameFromPath
GetFilePath
GetRequestHttpUrl
GetRequestHttpVer
GetVariableFromHttpHeader
HS_CompareDiffStringA
HS_CreateFloderByPath
HS_MapFilePath
HS_RecvData
HS_RecvHttpHeader
HS_SendData
HS_SendHttpHeader
InitializeSocketVer
SearchSubStrA
StringToUInt32A
UInt2Str32A
ipv4_inet_addr

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
keys.dat
libbz2.dll
.dll windows:4 windows x86 arch:x86

49066898cb56c19f95ad7c720fc01112

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcatA
lstrcmpA
DisableThreadLibraryCalls

krnlcore

ord151
ord162
ord150
ord171
ord161
ord164
ord156
ord160
ord168
ord179
ord163
ord153
ord159

msvcrt

malloc
__mb_cur_max
_isctype
free
_initterm
_pctype
_adjust_fdiv
_iob

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 643B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 530B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
logo/HEROSOFT.HTM
.html
logo/logo3.bmp
mpg12plg.dll
.dll windows:4 windows x86 arch:x86

bfdb875c1ed241b8cf015b3965f36edd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
CompareStringA
lstrlenA
GetVersionExA
HeapFree
VirtualFree
LocalFree
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
lstrcpynA
HeapDestroy
HeapCreate
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
RtlUnwind
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement

user32

wsprintfA

httpreq

ord1

Exports

Exports

FreeFileIO
InitFileIO
SetProxyInfo

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
mpgplgr.dll
.dll windows:4 windows x86 arch:x86

132d60f0c48520e01bab180899e37288

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CompareStringA
QueryPerformanceCounter
QueryPerformanceFrequency
GetCurrentThreadId
GlobalFree
GlobalAlloc
lstrcpyA
lstrcmpiA
Sleep
GetACP
LeaveCriticalSection
EnterCriticalSection
WaitForSingleObject
CreateThread
CreateEventA
lstrcpynA
SetLastError
DeleteCriticalSection
TerminateThread
CloseHandle
SetEvent
FindClose
FreeLibrary
GetProcAddress
LoadLibraryA
FindNextFileA
FindFirstFileA
GetModuleFileNameA
LocalFree
DisableThreadLibraryCalls
lstrlenA
InitializeCriticalSection

user32

PostMessageA
EnumThreadWindows
CharNextA
GetClassNameA
IsWindow
wsprintfA
MessageBoxA

advapi32

RegQueryValueExA
RegOpenKeyExA

ws2_32

inet_ntoa
WSAStartup
inet_addr
gethostbyname
gethostname
WSACleanup

winmm

timeGetTime

httpreq

ord1

usuppcli

USERSUPPORT_ApplyOneSupport
USERSUPPORT_ReleaseOneSupport

msvcrt

_initterm
strchr
atol
strrchr
memmove
_adjust_fdiv
malloc
free

Exports

Exports

FreeFileIO
InitFileIO
SetProxyInfo
StartToPlay
StopToPlay
TestVodFileType
UseVodNotify

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
readme.txt
resdll/Ado936.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 392KB - Virtual size: 390KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resdll/RegEp936.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 288KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
resdll/playlist936.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
usuppcli.dll
.dll windows:4 windows x86 arch:x86

569052f7c6760145a8ca7a543c4eaaa9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WriteConsoleA
lstrlenA
GlobalAlloc
CloseHandle
TerminateThread
WaitForSingleObject
Sleep
DeleteCriticalSection
InitializeCriticalSection
GlobalFree
GetStdHandle
lstrcpynA
LeaveCriticalSection
CompareStringA
EnterCriticalSection
GetFullPathNameA
InterlockedExchangeAdd
DisableThreadLibraryCalls
CreateThread
LocalFree

user32

wsprintfA
CharNextA

httpreq

ord1

msvcrt

printf
isalnum
atol
strchr
free
_initterm
malloc
_adjust_fdiv

Exports

Exports

FreeUserSupport
InitUserSupport
USERSUPPORT_AllocPath
USERSUPPORT_AnsiToUtf8
USERSUPPORT_ApplyOneSupport
USERSUPPORT_GetAvSvrInfo
USERSUPPORT_GetSupportInfo
USERSUPPORT_GetSupportInfo2
USERSUPPORT_Login
USERSUPPORT_Logoff
USERSUPPORT_Notify
USERSUPPORT_ReleaseAllSupport
USERSUPPORT_ReleaseOneSupport
USERSUPPORT_Utf8ToAnsi

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
新云软件.url
.url

Sharing

General

Malware Config

Signatures

Files

9c523d8653da5455667e3f82274f2f88

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

Sections

.text Size: 23KB - Virtual size: 22KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 1024B - Virtual size: 110KB

.ndata Size: - Virtual size: 40KB

.rsrc Size: 29KB - Virtual size: 29KB

57354bdeea3dfae6e948101add87501a

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

comdlg32

Exports

Exports

Sections

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 1KB - Virtual size: 9KB

.rsrc Size: 512B - Virtual size: 152B

.reloc Size: 1024B - Virtual size: 954B

4ec328f99bdd944fc98d8a5cf11f7a62

Headers

File Characteristics

Imports

kernel32

user32

ole32

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 6KB

.rdata Size: 1024B - Virtual size: 784B

.data Size: 512B - Virtual size: 92B

.reloc Size: 512B - Virtual size: 494B

10cc1c83f991b066cba98aa471df4e60

Headers

File Characteristics

Imports

pncrt

advapi32

user32

kernel32

Exports

Exports

Sections

.text Size: 24KB - Virtual size: 22KB

.rdata Size: 44KB - Virtual size: 40KB

.data Size: 16KB - Virtual size: 16KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 1KB

3fde72e769c2ba8f88c009f3828dd015

Headers

File Characteristics

Imports

pncrt

advapi32

user32

kernel32

Exports

Exports

.text
Size: 23KB - Virtual size: 22KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 110KB

.ndata
Size: - Virtual size: 40KB

.rsrc
Size: 29KB - Virtual size: 29KB

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 1KB - Virtual size: 9KB

.rsrc
Size: 512B - Virtual size: 152B

.reloc
Size: 1024B - Virtual size: 954B

.text
Size: 7KB - Virtual size: 6KB

.rdata
Size: 1024B - Virtual size: 784B

.data
Size: 512B - Virtual size: 92B

.reloc
Size: 512B - Virtual size: 494B

.text
Size: 24KB - Virtual size: 22KB

.rdata
Size: 44KB - Virtual size: 40KB

.data
Size: 16KB - Virtual size: 16KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 1KB

.text
Size: 24KB - Virtual size: 21KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 16KB - Virtual size: 19KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 1KB

.text
Size: 44KB - Virtual size: 41KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 8KB - Virtual size: 23KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 1KB

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 8KB - Virtual size: 26KB

.rsrc
Size: 8KB - Virtual size: 5KB

.reloc
Size: 4KB - Virtual size: 1KB

.text
Size: 21KB - Virtual size: 20KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 7KB - Virtual size: 6KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 676B

.text
Size: 11KB - Virtual size: 11KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 1024B - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 1024B - Virtual size: 766B

.text
Size: 72KB - Virtual size: 69KB

.rdata
Size: 4KB - Virtual size: 797B

.data
Size: 12KB - Virtual size: 155KB

.rsrc
Size: 4KB - Virtual size: 992B

.reloc
Size: 4KB - Virtual size: 2KB