26647f00b8ca373d2e098e2c5f649d1d_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

26647f00b8ca373d2e098e2c5f649d1d_JaffaCakes118
Size

15.8MB
MD5

26647f00b8ca373d2e098e2c5f649d1d
SHA1

5e9ee805557eef6231435407ee0c3c62c33083d5
SHA256

5f8de860b971c573888ed82345cbeeaaf4504edbbbcceaf5cb05e492acf06e1a
SHA512

a644c4759b8755fb317eb4c9c9f28e1b0c9450498fc8c9f117796c9e3ac9223144fdf814f8b734ca2c18c261db7e9ace0836feea5a83e4bf752ad12286d23ce9
SSDEEP

393216:O+185xPyf89rSxMkVkCn/6xZuUnEHAqiNHNGZA0e5k8yO:irPyUi1Vjn/6dQiNHQZAj5k89

Score

7^/10

upx

Malware Config

Signatures

ACProtect 1.3x - 1.4x DLL software 2 IoCs

Detects file using ACProtect software.

resource	yara_rule
static1/unpack001/$SYSDIR/DCBassSourceMod.ax	acprotect
static1/unpack001/$SYSDIR/DCBassSourceMod.ax.new	acprotect

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/$SYSDIR/DCBassSourceMod.ax	upx
static1/unpack001/$SYSDIR/DCBassSourceMod.ax.new	upx

Unsigned PE 174 IoCs

Checks for missing Authenticode signature.

resource
26647f00b8ca373d2e098e2c5f649d1d_JaffaCakes118
unpack001/$PLUGINSDIR/HwInfo.dll
unpack001/$PLUGINSDIR/InstallOptions.dll
unpack001/$PLUGINSDIR/KillProcDLL.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/cpudesc.dll
unpack001/$PLUGINSDIR/nsDialogs.dll
unpack002/$PLUGINSDIR/NSISdl.dll
unpack003/$PLUGINSDIR/HwInfo.dll
unpack003/$PLUGINSDIR/InstallOptions.dll
unpack003/$PLUGINSDIR/System.dll
unpack003/$PLUGINSDIR/cpudesc.dll
unpack003/$PLUGINSDIR/nsDialogs.dll
unpack003/$PLUGINSDIR/nsExec.dll
unpack004/$PLUGINSDIR/KillProcDLL.dll
unpack004/$PLUGINSDIR/System.dll
unpack005/$PLUGINSDIR/System.dll
unpack001/$SYSDIR/C2MP/TrayMenu.exe
unpack006/$PLUGINSDIR/InstallOptions.dll
unpack006/$PLUGINSDIR/System.dll
unpack006/$PLUGINSDIR/nsExec.dll
unpack001/$SYSDIR/DCBassSourceMod.ax
unpack001/$SYSDIR/DCBassSourceMod.ax.new
unpack001/$SYSDIR/DivXa32.acm
unpack001/$SYSDIR/DivXa32.acm.new
unpack001/$SYSDIR/FLVSplitter.ax
unpack001/$SYSDIR/FLVSplitter.ax.new
unpack001/$SYSDIR/Lagarith.dll
unpack001/$SYSDIR/Lagarith.dll.new
unpack001/$SYSDIR/LameACM.acm.new
unpack001/$SYSDIR/OptimFROG.dll
unpack001/$SYSDIR/OptimFROG.dll.new
unpack001/$SYSDIR/TomsMoComp_ff.dll
unpack001/$SYSDIR/TomsMoComp_ff.dll.new
unpack001/$SYSDIR/VSFilter.dll
unpack001/$SYSDIR/VSFilter.dll.new
unpack001/$SYSDIR/avcodec-lav-55.dll
unpack001/$SYSDIR/avi.dll
unpack001/$SYSDIR/avi.dll.new
unpack001/$SYSDIR/avs.dll
unpack001/$SYSDIR/avs.dll.new
unpack001/$SYSDIR/avss.dll
unpack001/$SYSDIR/avss.dll.new
unpack001/$SYSDIR/bass.dll
unpack001/$SYSDIR/bass.dll.new
unpack001/$SYSDIR/bass_aac.dll
unpack001/$SYSDIR/bass_aac.dll.new
unpack001/$SYSDIR/bass_alac.dll
unpack001/$SYSDIR/bass_alac.dll.new
unpack001/$SYSDIR/bass_ape.dll
unpack001/$SYSDIR/bass_ape.dll.new
unpack001/$SYSDIR/bass_cd.dll
unpack001/$SYSDIR/bass_cd.dll.new
unpack001/$SYSDIR/bass_flac.dll
unpack001/$SYSDIR/bass_flac.dll.new
unpack001/$SYSDIR/bass_mpc.dll
unpack001/$SYSDIR/bass_mpc.dll.new
unpack001/$SYSDIR/bass_ofr.dll
unpack001/$SYSDIR/bass_ofr.dll.new
unpack001/$SYSDIR/bass_opus.dll
unpack001/$SYSDIR/bass_opus.dll.new
unpack001/$SYSDIR/bass_tak.dll
unpack001/$SYSDIR/bass_tak.dll.new
unpack001/$SYSDIR/bass_tta.dll
unpack001/$SYSDIR/bass_tta.dll.new
unpack001/$SYSDIR/bass_wv.dll
unpack001/$SYSDIR/bass_wv.dll.new
unpack001/$SYSDIR/cdxareader.ax
unpack001/$SYSDIR/cdxareader.ax.new
unpack001/$SYSDIR/dsmux.exe
unpack001/$SYSDIR/dsmux.exe.new
unpack001/$SYSDIR/dxr.dll
unpack001/$SYSDIR/dxr.dll.new
unpack001/$SYSDIR/ff_liba52.dll
unpack001/$SYSDIR/ff_liba52.dll.new
unpack001/$SYSDIR/ff_libdts.dll
unpack001/$SYSDIR/ff_libdts.dll.new
unpack001/$SYSDIR/ff_libmad.dll
unpack001/$SYSDIR/ff_libmad.dll.new
unpack001/$SYSDIR/ff_samplerate.dll
unpack001/$SYSDIR/ff_samplerate.dll.new
unpack001/$SYSDIR/ff_unrar.dll
unpack001/$SYSDIR/ff_unrar.dll.new
unpack001/$SYSDIR/ff_vfw.dll
unpack001/$SYSDIR/ff_vfw.dll.new
unpack001/$SYSDIR/ff_wmv9.dll
unpack001/$SYSDIR/ff_wmv9.dll.new
unpack001/$SYSDIR/ffdshow.ax
unpack001/$SYSDIR/ffdshow.ax.new
unpack001/$SYSDIR/ffmpeg.dll
unpack001/$SYSDIR/ffmpeg.dll.new
unpack001/$SYSDIR/gdsmux.exe
unpack001/$SYSDIR/gdsmux.exe.new
unpack001/$SYSDIR/lameACM.acm
unpack001/$SYSDIR/libmpeg2_ff.dll
unpack001/$SYSDIR/libmpeg2_ff.dll.new
unpack001/$SYSDIR/mkunicode.dll
unpack001/$SYSDIR/mkunicode.dll.new
unpack001/$SYSDIR/mkv2vfr.exe
unpack001/$SYSDIR/mkv2vfr.exe.new
unpack001/$SYSDIR/mkx.dll
unpack001/$SYSDIR/mkx.dll.new
unpack001/$SYSDIR/mkzlib.dll
unpack001/$SYSDIR/mkzlib.dll.new
unpack001/$SYSDIR/mp4.dll
unpack001/$SYSDIR/mp4.dll.new
unpack001/$SYSDIR/ogm.dll
unpack001/$SYSDIR/ogm.dll.new
unpack001/$SYSDIR/splitter.ax
unpack001/$SYSDIR/splitter.ax.new
unpack001/$SYSDIR/tak_deco_lib.dll
unpack001/$SYSDIR/tak_deco_lib.dll.new
unpack001/$SYSDIR/ts.dll
unpack001/$SYSDIR/ts.dll.new
unpack001/$SYSDIR/x264vfw.dll
unpack001/$SYSDIR/x264vfw.dll.new
unpack001/$SYSDIR/xvidcore.dll
unpack001/$SYSDIR/xvidcore.dll.new
unpack001/$SYSDIR/xvidvfw.dll
unpack001/$SYSDIR/xvidvfw.dll.new
unpack001/$WINDIR/system32/FLVSplitter.ax
unpack001/$WINDIR/system32/FLVSplitter.ax.new
unpack001/$WINDIR/system32/TomsMoComp_ff.dll
unpack001/$WINDIR/system32/TomsMoComp_ff.dll.new
unpack001/$WINDIR/system32/VSFilter.dll
unpack001/$WINDIR/system32/VSFilter.dll.new
unpack001/$WINDIR/system32/avi.x64.dll
unpack001/$WINDIR/system32/avi.x64.dll.new
unpack001/$WINDIR/system32/cdxareader.ax
unpack001/$WINDIR/system32/cdxareader.ax.new
unpack001/$WINDIR/system32/dsmux.x64.exe
unpack001/$WINDIR/system32/dsmux.x64.exe.new
unpack001/$WINDIR/system32/dxr.x64.dll
unpack001/$WINDIR/system32/dxr.x64.dll.new
unpack001/$WINDIR/system32/ff_kernelDeint.dll
unpack001/$WINDIR/system32/ff_kernelDeint.dll.new
unpack001/$WINDIR/system32/ff_liba52.dll
unpack001/$WINDIR/system32/ff_liba52.dll.new
unpack001/$WINDIR/system32/ff_libdts.dll
unpack001/$WINDIR/system32/ff_libdts.dll.new
unpack001/$WINDIR/system32/ff_libmad.dll
unpack001/$WINDIR/system32/ff_libmad.dll.new
unpack001/$WINDIR/system32/ff_samplerate.dll
unpack001/$WINDIR/system32/ff_samplerate.dll.new
unpack001/$WINDIR/system32/ff_unrar.dll
unpack001/$WINDIR/system32/ff_unrar.dll.new
unpack001/$WINDIR/system32/ff_vfw.dll
unpack001/$WINDIR/system32/ff_vfw.dll.new
unpack001/$WINDIR/system32/ff_wmv9.dll
unpack001/$WINDIR/system32/ff_wmv9.dll.new
unpack001/$WINDIR/system32/ffdshow.ax
unpack001/$WINDIR/system32/ffdshow.ax.new
unpack001/$WINDIR/system32/ffmpeg.dll
unpack001/$WINDIR/system32/ffmpeg.dll.new
unpack001/$WINDIR/system32/gdsmux.x64.exe
unpack001/$WINDIR/system32/gdsmux.x64.exe.new
unpack001/$WINDIR/system32/libmpeg2_ff.dll
unpack001/$WINDIR/system32/libmpeg2_ff.dll.new
unpack001/$WINDIR/system32/mkunicode.x64.dll
unpack001/$WINDIR/system32/mkunicode.x64.dll.new
unpack001/$WINDIR/system32/mkv2vfr.x64.exe
unpack001/$WINDIR/system32/mkv2vfr.x64.exe.new
unpack001/$WINDIR/system32/mkx.x64.dll
unpack001/$WINDIR/system32/mkx.x64.dll.new
unpack001/$WINDIR/system32/mkzlib.x64.dll
unpack001/$WINDIR/system32/mkzlib.x64.dll.new
unpack001/$WINDIR/system32/mp4.x64.dll
unpack001/$WINDIR/system32/mp4.x64.dll.new
unpack001/$WINDIR/system32/ogm.x64.dll
unpack001/$WINDIR/system32/ogm.x64.dll.new
unpack001/$WINDIR/system32/splitter.x64.ax
unpack001/$WINDIR/system32/splitter.x64.ax.new
unpack001/$WINDIR/system32/ts.x64.dll
unpack001/$WINDIR/system32/ts.x64.dll.new

NSIS installer 14 IoCs

installer

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2
static1/unpack001/$SYSDIR/$SYSDIR/C2MP/UpdateChecker.exe	nsis_installer_1
static1/unpack001/$SYSDIR/$SYSDIR/C2MP/UpdateChecker.exe	nsis_installer_2
static1/unpack001/$SYSDIR/C2MP/$SYSDIR/C2MP/CodecSettings.exe	nsis_installer_1
static1/unpack001/$SYSDIR/C2MP/$SYSDIR/C2MP/CodecSettings.exe	nsis_installer_2
static1/unpack001/$SYSDIR/C2MP/CleanUp.exe	nsis_installer_1
static1/unpack001/$SYSDIR/C2MP/CleanUp.exe	nsis_installer_2
static1/unpack001/$SYSDIR/C2MP/CleanUp_x64.exe	nsis_installer_1
static1/unpack001/$SYSDIR/C2MP/CleanUp_x64.exe	nsis_installer_2
static1/unpack001/$SYSDIR/C2MP/Uninst.exe	nsis_installer_1
static1/unpack001/$SYSDIR/C2MP/Uninst.exe	nsis_installer_2
static1/unpack001/$SYSDIR/DiscHandler.exe	nsis_installer_1
static1/unpack001/$SYSDIR/DiscHandler.exe	nsis_installer_2

Files

26647f00b8ca373d2e098e2c5f649d1d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

099c0646ea7282d232219f8807883be0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
CreateFileA
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
SetFileTime
GetTempPathA
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetWindowsDirectoryA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 68KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/HwInfo.dll
.dll windows:4 windows x86 arch:x86

4e6a4062a56dafcc8b54b60996e9ff37

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\My Dev Projects\HwInfo\Release\HwInfo.pdb

Imports

ddraw

DirectDrawCreateEx

kernel32

GetPriorityClass
GetCurrentProcess
GlobalMemoryStatus
GetThreadPriority
SetPriorityClass
CloseHandle
GetCurrentThread
SetThreadPriority
QueryPerformanceFrequency
QueryPerformanceCounter
lstrcpyA
ExitProcess
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcAddress
GetModuleHandleA
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
HeapFree
HeapReAlloc
HeapAlloc
TerminateProcess
HeapSize
TlsAlloc
SetLastError
GetLastError
TlsFree
TlsSetValue
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
UnhandledExceptionFilter
WriteFile
RaiseException
LoadLibraryA
RtlUnwind
InterlockedExchange
VirtualQuery
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
SetFilePointer
GetACP
GetOEMCP
GetCPInfo
InitializeCriticalSection
LCMapStringA
MultiByteToWideChar
LCMapStringW
SetStdHandle
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
VirtualProtect
GetSystemInfo
FlushFileBuffers

user32

GetDesktopWindow
GetDC
GetSystemMetrics

gdi32

GetDeviceCaps

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

Exports

Exports

??0CHardwareInfo@@QAE@ABV0@@Z
??0CHardwareInfo@@QAE@XZ
??1CHardwareInfo@@UAE@XZ
??4CHardwareInfo@@QAEAAV0@ABV0@@Z
??_7CHardwareInfo@@6B@
?GetCPUDescription@CHardwareInfo@@QAEXPAD@Z
?GetCPUSpeed@CHardwareInfo@@QAEXAAH@Z
?GetTotalSystemMemory@CHardwareInfo@@QAEXAAH@Z
?GetVideoAdapterDescription@CHardwareInfo@@QAEXPAD@Z
?GetVideoAdapterTotalMemory@CHardwareInfo@@QAEXAAH@Z
GetCpuNameAndSpeed
GetCpuSpeed
GetSystemMemory
GetVideoCardMemory
GetVideoCardName

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/InstallOptions.dll
.dll windows:4 windows x86 arch:x86

b1cd0d78f652ce5fc63f0879371af012

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetCurrentDirectoryA
GetCurrentDirectoryA
MultiByteToWideChar
GetPrivateProfileIntA
GlobalLock
GetModuleHandleA
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
GlobalUnlock
GlobalAlloc

user32

MapWindowPoints
GetDlgCtrlID
CloseClipboard
GetClipboardData
OpenClipboard
PtInRect
SetWindowRgn
LoadIconA
LoadImageA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableMenuItem
GetSystemMenu
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
GetClientRect

gdi32

SetTextColor
CreateCompatibleDC
GetObjectA
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
SelectObject

shell32

SHBrowseForFolderA
SHGetDesktopFolder
SHGetPathFromIDListA
ShellExecuteA

comdlg32

GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError

ole32

CoTaskMemFree

Exports

Exports

dialog
initDialog
show

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/KillProcDLL.dll
.dll windows:4 windows x86 arch:x86

153027ec3b10bcea606b777657dd3402

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetVersionExA
TerminateProcess
OpenProcess
LoadLibraryA
CloseHandle
GetProcAddress
FreeLibrary
GlobalFree
lstrcpyA
DisableThreadLibraryCalls

msvcrt

strcmp
_strupr
toupper
strlen
free
_initterm
malloc
_adjust_fdiv
strcpy
_itoa

Exports

Exports

KillProc

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/OCSetupHlp.dll
.dll regsvr32 windows:5 windows x86 arch:x86

09aeabcb1d89633d4ca17613706aa1c6

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

6f:fc:26:3a:35:11:34:19:4c:f1:6e:1e:6d:0e:08:06
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

25/01/2011, 00:00

Not After

14/03/2014, 23:59

Subject

CN=OpenCandy Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=OpenCandy Inc.,L=San Diego,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4b:87:9e:ed:29:15:a8:06:c4:76:94:d7:49:5a:5c:06:a5:b7:ae:93
Signer

Actual PE Digest

4b:87:9e:ed:29:15:a8:06:c4:76:94:d7:49:5a:5c:06:a5:b7:ae:93

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetFileSize
GetCurrentProcessId
GetEnvironmentVariableW
FindFirstFileW
FindNextFileW
FindClose
ReadFile
GetTimeZoneInformation
GetTempPathW
DeleteFileW
WriteFile
ProcessIdToSessionId
SetLastError
HeapAlloc
GetProcessHeap
HeapFree
CreateDirectoryW
ExpandEnvironmentStringsW
WaitForSingleObject
FlushInstructionCache
GetCurrentThreadId
OutputDebugStringW
lstrcpynW
MulDiv
CreateMutexW
OpenMutexW
ReleaseMutex
UnmapViewOfFile
MapViewOfFileEx
CreateFileMappingW
OpenFileMappingW
GetShortPathNameW
SetFilePointer
CreateEventW
GlobalFree
ResumeThread
FreeResource
SetEvent
ResetEvent
GetTickCount
CreateProcessW
MoveFileExW
CreateFileW
GetFileAttributesW
SetEnvironmentVariableW
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetExitCodeProcess
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
GetFullPathNameW
SetEndOfFile
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetErrorMode
CreateFileA
lstrlenA
WideCharToMultiByte
PeekNamedPipe
GetFileInformationByHandle
GetFullPathNameA
FlushFileBuffers
GetModuleHandleA
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
SetHandleCount
LCMapStringA
ExitProcess
LCMapStringW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleFileNameA
GetStdHandle
HeapCreate
RtlUnwind
GetDriveTypeW
GetFileType
GetConsoleMode
GetConsoleCP
FindFirstFileA
GetDriveTypeA
FileTimeToLocalFileTime
GetCommandLineA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
ExitThread
GetSystemTimeAsFileTime
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
InterlockedCompareExchange
HeapSize
HeapReAlloc
HeapDestroy
FindResourceA
GlobalMemoryStatusEx
GetDiskFreeSpaceExW
GetFileAttributesExW
CompareFileTime
GetVersion
GetTempFileNameW
ReleaseSemaphore
InitializeCriticalSectionAndSpinCount
CreateSemaphoreW
GetSystemInfo
GetVersionExW
FileTimeToSystemTime
GetSystemDefaultLCID
FormatMessageA
ExpandEnvironmentStringsA
SleepEx
GetCurrentProcess
DeleteCriticalSection
lstrcmpiW
EnterCriticalSection
GetProcAddress
GetThreadLocale
GetLastError
SetThreadLocale
RaiseException
lstrlenW
MultiByteToWideChar
GetModuleFileNameW
LeaveCriticalSection
InitializeCriticalSection
GetModuleHandleW
InterlockedDecrement
InterlockedIncrement
LoadLibraryExW
GlobalUnlock
GlobalLock
GlobalAlloc
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
CloseHandle
OpenProcess
GetUserDefaultUILanguage
GetLocaleInfoW
FreeLibrary
LoadLibraryW
Sleep
CreateThread
FindResourceExW
FindResourceW
LoadResource
LockResource
GetCurrentDirectoryA
SizeofResource

psapi

GetProcessImageFileNameW
EnumProcesses

ws2_32

select
WSACleanup
WSAStartup
closesocket
WSAGetLastError
socket
recv
send
getsockname
ntohs
bind
htons
getsockopt
getpeername
setsockopt
connect
WSASetLastError
__WSAFDIsSet
getaddrinfo
gethostname
ioctlsocket
freeaddrinfo

msimg32

AlphaBlend

shlwapi

PathMatchSpecW

user32

GetCursorPos
TrackPopupMenu
ReleaseCapture
DrawFocusRect
UnregisterClassA
GetCursor
SetCursor
SetWindowLongW
GetWindowLongW
DefWindowProcW
CallWindowProcW
IsWindow
DestroyWindow
PostQuitMessage
KillTimer
DestroyMenu
PeekMessageW
MsgWaitForMultipleObjects
NotifyWinEvent
FindWindowW
ScreenToClient
GetSysColor
GetUpdateRect
SetRect
GetAncestor
SetFocus
CreateDialogParamW
GetSystemMetrics
CallNextHookEx
UnhookWindowsHookEx
SetTimer
PostMessageW
GetWindowTextLengthW
GetWindowTextW
EnumChildWindows
EnumWindows
ShowWindow
GetDlgItem
GetMessageW
IsDialogMessageW
TranslateMessage
DispatchMessageW
LoadIconW
SendMessageW
SetWindowTextW
GetClientRect
MoveWindow
SystemParametersInfoW
SetWindowsHookExW
DrawIconEx
GetIconInfo
SetMenuItemInfoW
IsWindowVisible
SetForegroundWindow
SetDlgItemTextW
SendDlgItemMessageW
EnableMenuItem
GetSystemMenu
EnableWindow
LoadImageW
MessageBoxW
DrawTextW
MapWindowPoints
GetParent
CreateWindowExW
LoadCursorW
GetClassInfoExW
RegisterClassExW
GetDesktopWindow
CharNextW
FillRect
InvalidateRect
GetAsyncKeyState
PtInRect
CopyRect
GetMonitorInfoW
MonitorFromPoint
GetWindowRect
EndPaint
BeginPaint
GetForegroundWindow
ReleaseDC
GetDC
GetSysColorBrush
SetClipboardData
CloseClipboard
EmptyClipboard
OpenClipboard
GetWindowThreadProcessId
SetWindowPos

gdi32

GetStockObject
GetTextExtentPoint32W
GetObjectW
SetTextColor
CreatePatternBrush
CreateDIBSection
GetDeviceCaps
DeleteDC
DeleteObject
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
GdiFlush
DPtoLP
BitBlt
SetViewportOrgEx
CreateSolidBrush
SetBkMode
CreateFontIndirectW

advapi32

OpenProcessToken
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegQueryInfoKeyW
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegSetValueExW
GetTokenInformation
DuplicateTokenEx
LookupAccountSidW
CreateProcessAsUserW
LookupPrivilegeValueW
AdjustTokenPrivileges
GetUserNameW
RegEnumKeyW

shell32

SHGetFolderPathW
Shell_NotifyIconW
ShellExecuteW

ole32

CoInitializeSecurity
CreateStreamOnHGlobal
CLSIDFromProgID
CoInitialize
CoUninitialize
CoSetProxyBlanket
CoTaskMemFree
CoCreateInstance
CoInitializeEx
CoCreateGuid
CoTaskMemAlloc
StringFromGUID2
CoTaskMemRealloc

oleaut32

LoadTypeLi
UnRegisterTypeLi
VarUI4FromStr
RegisterTypeLi
SysFreeString
SysStringLen
VariantClear
SysAllocStringLen
VariantChangeType
LoadRegTypeLi
OleLoadPicture
SysAllocString
VariantInit

comctl32

InitCommonControlsEx

gdiplus

GdipCloneImage
GdipLoadImageFromFile
GdipDrawImageRectRect
GdipDeleteGraphics
GdipCreateFromHDC
GdipDisposeImage
GdipAlloc
GdipFree
GdiplusShutdown
GdiplusStartup
GdipDrawImagePointRectI

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

urlmon

URLDownloadToFileW

wininet

InternetQueryOptionW
InternetGetConnectedStateExW

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
OCPRD294OpenCandy1
OCPRD294OpenCandy10
OCPRD294OpenCandy11
OCPRD294OpenCandy12
OCPRD294OpenCandy13
OCPRD294OpenCandy14
OCPRD294OpenCandy15
OCPRD294OpenCandy16
OCPRD294OpenCandy17
OCPRD294OpenCandy18
OCPRD294OpenCandy19
OCPRD294OpenCandy20
OCPRD294OpenCandy21
OCPRD294OpenCandy22
OCPRD294OpenCandy23
OCPRD294OpenCandy24
OCPRD294OpenCandy29
OCPRD294OpenCandy30
OCPRD294OpenCandy31
OCPRD294OpenCandy32
OCPRD294OpenCandy33
OCPRD294OpenCandy34
OCPRD294OpenCandy35
OCPRD294OpenCandy36
OCPRD294OpenCandy37
OCPRD294OpenCandy38
OCPRD294OpenCandy39
OCPRD294OpenCandy40
OCPRD294OpenCandy41
OCPRD294OpenCandy42
OCPRD294OpenCandy44
OCPRD294OpenCandy45
OCPRD294OpenCandy46
OCPRD294OpenCandy47
OCPRD294OpenCandy48
OCPRD294OpenCandy49
OCPRD294OpenCandy5
OCPRD294OpenCandy50
OCPRD294OpenCandy51
OCPRD294OpenCandy52
OCPRD294OpenCandy53
OCPRD294OpenCandy54
OCPRD294OpenCandy55
OCPRD294OpenCandy6
OCPRD294OpenCandy7
OCPRD294OpenCandy8
OCPRD294OpenCandy9
_OCPRD294OpenCandy25@12
_OCPRD294OpenCandy26@16
_OCPRD294OpenCandy27@16
_OCPRD294OpenCandy28@16
_OCPRD294OpenCandy2@16
_OCPRD294OpenCandy3@16
_OCPRD294OpenCandy43@16
_OCPRD294OpenCandy4@16

Sections

.text
Size: 529KB - Virtual size: 529KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 167KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:4 windows x86 arch:x86

2017f2acbdaa42ab3e4adeb8b4c37e7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyA
lstrcpynA
FreeLibrary
lstrcatA
GetProcAddress
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
VirtualAlloc
VirtualProtect

user32

wsprintfA

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/audio.ini
$PLUGINSDIR/cpudesc.dll
.dll windows:4 windows x86 arch:x86

c6a59b1080c20e84c1c392f75b2d75f4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalMemoryStatus
SetThreadPriority
SetPriorityClass
GetThreadPriority
lstrcpynA
GlobalAlloc
IsProcessorFeaturePresent
QueryPerformanceCounter
QueryPerformanceFrequency
GetSystemInfo
GetCurrentThread
GetPriorityClass
GetCurrentProcess

user32

wsprintfA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Exports

Exports

tell

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/nsDialogs.dll
.dll windows:4 windows x86 arch:x86

1e2884056e655f2b7bc5a904e352fc80

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpyA
GetFileAttributesA
lstrcmpiA
MulDiv
lstrlenA
HeapFree
GetCurrentDirectoryA
HeapAlloc
HeapReAlloc
GlobalFree
lstrcpynA
GlobalAlloc
GetProcessHeap
SetCurrentDirectoryA

user32

GetPropA
DestroyWindow
CallWindowProcA
SetCursor
LoadCursorA
RemovePropA
CharPrevA
GetWindowLongA
DrawTextA
GetWindowTextA
GetDlgItem
SetWindowLongA
SetWindowPos
CreateDialogParamA
MapWindowPoints
GetWindowRect
SetPropA
CreateWindowExA
IsWindow
SetTimer
KillTimer
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
ShowWindow
wsprintfA
MapDialogRect
GetClientRect
CharNextA
SendMessageA
DrawFocusRect

gdi32

SetTextColor

shell32

SHBrowseForFolderA
SHGetPathFromIDListA

comdlg32

GetSaveFileNameA
GetOpenFileNameA
CommDlgExtendedError

ole32

CoTaskMemFree

Exports

Exports

Create
CreateControl
CreateItem
CreateTimer
GetUserData
KillTimer
OnBack
OnChange
OnClick
OnNotify
SelectFileDialog
SelectFolderDialog
SetRTL
SetUserData
Show

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 572B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/video.ini
$PLUGINSDIR/video_hardware.ini
$SYSDIR/$SYSDIR/C2MP/UpdateChecker.exe
.exe windows:4 windows x86 arch:x86

099c0646ea7282d232219f8807883be0

Code Sign

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

07/06/2005, 08:09

Not After

30/05/2020, 10:48

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

10/05/2010, 00:00

Not After

10/05/2015, 23:59

Subject

CN=COMODO Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

24/08/2011, 00:00

Not After

30/05/2020, 10:48

Subject

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

39:b7:c2:87:c1:79:fb:d0:f1:31:85:d6:6a:9e:71:ab
Certificate

Issuer

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12/10/2011, 00:00

Not After

11/10/2014, 23:59

Subject

CN=Cole Williams,O=Cole Williams,POSTALCODE=DN32 9LQ,STREET=156 Hainton Avenue,L=Grimsby,ST=South Humberside,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

4b:75:7f:00:a7:b9:68:45:5d:20:55:fa:50:c5:7e:e2:a4:b4:4a:7d
Signer

Actual PE Digest

4b:75:7f:00:a7:b9:68:45:5d:20:55:fa:50:c5:7e:e2:a4:b4:4a:7d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
CreateFileA
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
SetFileTime
GetTempPathA
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetWindowsDirectoryA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/NSISdl.dll
.dll windows:4 windows x86 arch:x86

9cce555dd3ff1b6c7dc92d64c794c51a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObject
lstrcpynA
lstrlenA
lstrcatA
GlobalAlloc
GlobalFree
CloseHandle
GetTickCount
DeleteFileA
Sleep
WriteFile
CreateFileA
lstrcmpiA
lstrcpyA
MulDiv
CreateThread

user32

CharPrevA
SetWindowLongA
RegisterWindowMessageA
CallWindowProcA
DestroyWindow
EnableWindow
GetWindowLongA
CreateWindowExA
GetWindowRect
GetClientRect
ShowWindow
IsWindowVisible
GetFocus
GetDlgItem
FindWindowExA
SetWindowTextA
SendMessageA
wsprintfA
SetDlgItemTextA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

ws2_32

gethostbyname
inet_addr
ioctlsocket
htons
socket
closesocket
shutdown
connect
__WSAFDIsSet
select
recv
WSAGetLastError
send
WSACleanup
WSAStartup

Exports

Exports

download
download_quiet

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 836B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/C2MP/$SYSDIR/C2MP/CodecSettings.exe
.exe windows:4 windows x86 arch:x86

7fa974366048f9c551ef45714595665e

Code Sign

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

07/06/2005, 08:09

Not After

30/05/2020, 10:48

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

10/05/2010, 00:00

Not After

10/05/2015, 23:59

Subject

CN=COMODO Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

24/08/2011, 00:00

Not After

30/05/2020, 10:48

Subject

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

39:b7:c2:87:c1:79:fb:d0:f1:31:85:d6:6a:9e:71:ab
Certificate

Issuer

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12/10/2011, 00:00

Not After

11/10/2014, 23:59

Subject

CN=Cole Williams,O=Cole Williams,POSTALCODE=DN32 9LQ,STREET=156 Hainton Avenue,L=Grimsby,ST=South Humberside,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

63:a2:e2:13:8e:ea:25:b0:71:34:52:be:c4:5f:38:18:ac:6b:fa:82
Signer

Actual PE Digest

63:a2:e2:13:8e:ea:25:b0:71:34:52:be:c4:5f:38:18:ac:6b:fa:82

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
GetWindowsDirectoryA
SetFileTime
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetTempPathA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/HwInfo.dll
.dll windows:4 windows x86 arch:x86

4e6a4062a56dafcc8b54b60996e9ff37

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\My Dev Projects\HwInfo\Release\HwInfo.pdb

Imports

ddraw

DirectDrawCreateEx

kernel32

GetPriorityClass
GetCurrentProcess
GlobalMemoryStatus
GetThreadPriority
SetPriorityClass
CloseHandle
GetCurrentThread
SetThreadPriority
QueryPerformanceFrequency
QueryPerformanceCounter
lstrcpyA
ExitProcess
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcAddress
GetModuleHandleA
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
HeapFree
HeapReAlloc
HeapAlloc
TerminateProcess
HeapSize
TlsAlloc
SetLastError
GetLastError
TlsFree
TlsSetValue
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
UnhandledExceptionFilter
WriteFile
RaiseException
LoadLibraryA
RtlUnwind
InterlockedExchange
VirtualQuery
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
SetFilePointer
GetACP
GetOEMCP
GetCPInfo
InitializeCriticalSection
LCMapStringA
MultiByteToWideChar
LCMapStringW
SetStdHandle
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
VirtualProtect
GetSystemInfo
FlushFileBuffers

user32

GetDesktopWindow
GetDC
GetSystemMetrics

gdi32

GetDeviceCaps

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

Exports

Exports

??0CHardwareInfo@@QAE@ABV0@@Z
??0CHardwareInfo@@QAE@XZ
??1CHardwareInfo@@UAE@XZ
??4CHardwareInfo@@QAEAAV0@ABV0@@Z
??_7CHardwareInfo@@6B@
?GetCPUDescription@CHardwareInfo@@QAEXPAD@Z
?GetCPUSpeed@CHardwareInfo@@QAEXAAH@Z
?GetTotalSystemMemory@CHardwareInfo@@QAEXAAH@Z
?GetVideoAdapterDescription@CHardwareInfo@@QAEXPAD@Z
?GetVideoAdapterTotalMemory@CHardwareInfo@@QAEXAAH@Z
GetCpuNameAndSpeed
GetCpuSpeed
GetSystemMemory
GetVideoCardMemory
GetVideoCardName

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/InstallOptions.dll
.dll windows:4 windows x86 arch:x86

b1cd0d78f652ce5fc63f0879371af012

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetCurrentDirectoryA
GetCurrentDirectoryA
MultiByteToWideChar
GetPrivateProfileIntA
GlobalLock
GetModuleHandleA
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
GlobalUnlock
GlobalAlloc

user32

MapWindowPoints
GetDlgCtrlID
CloseClipboard
GetClipboardData
OpenClipboard
PtInRect
SetWindowRgn
LoadIconA
LoadImageA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableMenuItem
GetSystemMenu
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
GetClientRect

gdi32

SetTextColor
CreateCompatibleDC
GetObjectA
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
SelectObject

shell32

SHBrowseForFolderA
SHGetDesktopFolder
SHGetPathFromIDListA
ShellExecuteA

comdlg32

GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError

ole32

CoTaskMemFree

Exports

Exports

dialog
initDialog
show

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:4 windows x86 arch:x86

2017f2acbdaa42ab3e4adeb8b4c37e7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyA
lstrcpynA
FreeLibrary
lstrcatA
GetProcAddress
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
VirtualAlloc
VirtualProtect

user32

wsprintfA

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/audio.ini
$PLUGINSDIR/codec_settings.ini
$PLUGINSDIR/cpudesc.dll
.dll windows:4 windows x86 arch:x86

c6a59b1080c20e84c1c392f75b2d75f4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalMemoryStatus
SetThreadPriority
SetPriorityClass
GetThreadPriority
lstrcpynA
GlobalAlloc
IsProcessorFeaturePresent
QueryPerformanceCounter
QueryPerformanceFrequency
GetSystemInfo
GetCurrentThread
GetPriorityClass
GetCurrentProcess

user32

wsprintfA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Exports

Exports

tell

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/nsDialogs.dll
.dll windows:4 windows x86 arch:x86

1e2884056e655f2b7bc5a904e352fc80

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpyA
GetFileAttributesA
lstrcmpiA
MulDiv
lstrlenA
HeapFree
GetCurrentDirectoryA
HeapAlloc
HeapReAlloc
GlobalFree
lstrcpynA
GlobalAlloc
GetProcessHeap
SetCurrentDirectoryA

user32

GetPropA
DestroyWindow
CallWindowProcA
SetCursor
LoadCursorA
RemovePropA
CharPrevA
GetWindowLongA
DrawTextA
GetWindowTextA
GetDlgItem
SetWindowLongA
SetWindowPos
CreateDialogParamA
MapWindowPoints
GetWindowRect
SetPropA
CreateWindowExA
IsWindow
SetTimer
KillTimer
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
ShowWindow
wsprintfA
MapDialogRect
GetClientRect
CharNextA
SendMessageA
DrawFocusRect

gdi32

SetTextColor

shell32

SHBrowseForFolderA
SHGetPathFromIDListA

comdlg32

GetSaveFileNameA
GetOpenFileNameA
CommDlgExtendedError

ole32

CoTaskMemFree

Exports

Exports

Create
CreateControl
CreateItem
CreateTimer
GetUserData
KillTimer
OnBack
OnChange
OnClick
OnNotify
SelectFileDialog
SelectFolderDialog
SetRTL
SetUserData
Show

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 572B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/nsExec.dll
.dll windows:4 windows x86 arch:x86

d83f71e61ee459ee63ca3e829966a9dc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetExitCodeProcess
WaitForSingleObject
Sleep
TerminateProcess
lstrcpyA
lstrcpynA
GlobalReAlloc
GlobalUnlock
GlobalSize
ReadFile
PeekNamedPipe
GetTickCount
CreateProcessA
GetStartupInfoA
CreatePipe
GetVersionExA
GetModuleHandleA
DeleteFileA
lstrcmpiA
lstrlenA
lstrcatA
CloseHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
CreateFileA
CopyFileA
GetTempFileNameA
GlobalFree
GlobalAlloc
GetModuleFileNameA
ExitProcess
GetCommandLineA
GetProcAddress
GlobalLock
GetCurrentProcess

user32

SendMessageA
OemToCharBuffA
CharNextA
wsprintfA
CharPrevA
FindWindowExA

advapi32

InitializeSecurityDescriptor
SetSecurityDescriptorDacl

Exports

Exports

Exec
ExecToLog
ExecToStack

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 410B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/video.ini
$PLUGINSDIR/video_hardware.ini
$SYSDIR/C2MP/CleanUp.exe
.exe windows:4 windows x86 arch:x86

099c0646ea7282d232219f8807883be0

Code Sign

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

07/06/2005, 08:09

Not After

30/05/2020, 10:48

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

10/05/2010, 00:00

Not After

10/05/2015, 23:59

Subject

CN=COMODO Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

24/08/2011, 00:00

Not After

30/05/2020, 10:48

Subject

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

39:b7:c2:87:c1:79:fb:d0:f1:31:85:d6:6a:9e:71:ab
Certificate

Issuer

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12/10/2011, 00:00

Not After

11/10/2014, 23:59

Subject

CN=Cole Williams,O=Cole Williams,POSTALCODE=DN32 9LQ,STREET=156 Hainton Avenue,L=Grimsby,ST=South Humberside,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

4f:d4:15:cd:68:ea:7b:84:5d:67:60:05:cb:f5:15:e9:f9:bc:ba:1a
Signer

Actual PE Digest

4f:d4:15:cd:68:ea:7b:84:5d:67:60:05:cb:f5:15:e9:f9:bc:ba:1a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
CreateFileA
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
SetFileTime
GetTempPathA
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetWindowsDirectoryA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/KillProcDLL.dll
.dll windows:4 windows x86 arch:x86

153027ec3b10bcea606b777657dd3402

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetVersionExA
TerminateProcess
OpenProcess
LoadLibraryA
CloseHandle
GetProcAddress
FreeLibrary
GlobalFree
lstrcpyA
DisableThreadLibraryCalls

msvcrt

strcmp
_strupr
toupper
strlen
free
_initterm
malloc
_adjust_fdiv
strcpy
_itoa

Exports

Exports

KillProc

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:4 windows x86 arch:x86

2017f2acbdaa42ab3e4adeb8b4c37e7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyA
lstrcpynA
FreeLibrary
lstrcatA
GetProcAddress
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
VirtualAlloc
VirtualProtect

user32

wsprintfA

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/C2MP/CleanUp_x64.exe
.exe windows:4 windows x86 arch:x86

099c0646ea7282d232219f8807883be0

Code Sign

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

07/06/2005, 08:09

Not After

30/05/2020, 10:48

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

10/05/2010, 00:00

Not After

10/05/2015, 23:59

Subject

CN=COMODO Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

24/08/2011, 00:00

Not After

30/05/2020, 10:48

Subject

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

39:b7:c2:87:c1:79:fb:d0:f1:31:85:d6:6a:9e:71:ab
Certificate

Issuer

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12/10/2011, 00:00

Not After

11/10/2014, 23:59

Subject

CN=Cole Williams,O=Cole Williams,POSTALCODE=DN32 9LQ,STREET=156 Hainton Avenue,L=Grimsby,ST=South Humberside,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

f5:3d:15:9c:37:38:2c:51:6b:cf:c5:ce:5e:01:81:63:60:60:ed:de
Signer

Actual PE Digest

f5:3d:15:9c:37:38:2c:51:6b:cf:c5:ce:5e:01:81:63:60:60:ed:de

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
CreateFileA
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
SetFileTime
GetTempPathA
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetWindowsDirectoryA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:4 windows x86 arch:x86

2017f2acbdaa42ab3e4adeb8b4c37e7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyA
lstrcpynA
FreeLibrary
lstrcatA
GetProcAddress
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
VirtualAlloc
VirtualProtect

user32

wsprintfA

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/C2MP/TrayMenu.exe
.exe windows:5 windows x86 arch:x86

2b22d7cfdec3456360fe4e1e81d2f522

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

WSACleanup
inet_addr
gethostbyname
gethostname
WSAStartup

winmm

mixerSetControlDetails
waveOutGetVolume
joyGetPosEx
mixerGetControlDetailsA
mixerOpen
mixerGetDevCapsA
mixerGetLineControlsA
waveOutSetVolume
mixerClose
mciSendStringA
joyGetDevCapsA
mixerGetLineInfoA

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

comctl32

ImageList_Create
ord6
ImageList_ReplaceIcon
ord17
ImageList_GetIconSize
ImageList_Destroy
ImageList_AddMasked

psapi

GetModuleBaseNameA
GetModuleFileNameExA

kernel32

FindNextFileA
FindClose
FileTimeToLocalFileTime
SetEnvironmentVariableA
Beep
MoveFileA
OutputDebugStringA
CreateProcessA
GetFileAttributesA
MultiByteToWideChar
WideCharToMultiByte
GetExitCodeProcess
WriteProcessMemory
ReadProcessMemory
GetCurrentProcessId
OpenProcess
TerminateProcess
SetPriorityClass
SetLastError
GetEnvironmentVariableA
GetLocalTime
GetDateFormatA
GetTimeFormatA
SetErrorMode
GetDiskFreeSpaceA
SetVolumeLabelA
CreateFileA
DeviceIoControl
GetDriveTypeA
GetVolumeInformationA
CreateDirectoryA
ReadFile
GetACP
WriteFile
GlobalSize
DeleteFileA
SetFileAttributesA
LocalFileTimeToFileTime
SetFileTime
GetSystemTime
GetComputerNameA
GetWindowsDirectoryA
GetTempPathA
GetFullPathNameA
GetShortPathNameA
LoadLibraryA
FindFirstFileA
EnterCriticalSection
LeaveCriticalSection
VirtualProtect
QueryDosDeviceA
CompareStringA
RemoveDirectoryA
CopyFileA
GetCurrentProcess
FormatMessageA
GetPrivateProfileStringA
GetPrivateProfileSectionA
GetPrivateProfileSectionNamesA
WritePrivateProfileStringA
WritePrivateProfileSectionA
SetEndOfFile
GetFileType
SetFilePointerEx
GetFileSizeEx
SystemTimeToFileTime
FileTimeToSystemTime
GetFileSize
VirtualAllocEx
VirtualFreeEx
EnumResourceNamesA
LoadLibraryExA
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
InterlockedDecrement
InterlockedIncrement
GetStartupInfoW
HeapSetInformation
GetCommandLineA
HeapQueryInformation
HeapSize
HeapReAlloc
ExitProcess
GetModuleHandleW
HeapAlloc
HeapFree
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
GetStdHandle
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
LockResource
LoadResource
SizeofResource
FindResourceA
GetSystemTimeAsFileTime
MulDiv
GetModuleFileNameA
DeleteCriticalSection
GetCPInfo
GetVersionExA
GetLastError
CreateMutexA
CloseHandle
GetExitCodeThread
SetThreadPriority
CreateThread
lstrcmpiA
GetCurrentThreadId
GlobalUnlock
GlobalFree
GlobalAlloc
GlobalLock
GetModuleHandleA
GetProcAddress
GetCurrentDirectoryA
InitializeCriticalSection
SetCurrentDirectoryA
Sleep
GetTickCount
TlsFree
LCMapStringW
LoadLibraryW
SetHandleCount
IsProcessorFeaturePresent
GetStringTypeW
RaiseException
RtlUnwind
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsW
UnhandledExceptionFilter
GetEnvironmentStringsW
QueryPerformanceCounter
SetFilePointer
FlushFileBuffers
WriteConsoleW
SetStdHandle
GetProcessHeap
CreateFileW
FreeLibrary
VirtualQuery

user32

SetMenu
FlashWindow
MapWindowPoints
RedrawWindow
SetParent
UpdateWindow
GetMessagePos
GetClassLongA
DefDlgProcA
CallWindowProcA
CheckRadioButton
IntersectRect
PtInRect
CreateAcceleratorTableA
DestroyAcceleratorTable
AppendMenuA
SetMenuDefaultItem
RemoveMenu
SetMenuItemInfoA
IsMenu
CreateMenu
CreatePopupMenu
SetMenuInfo
DestroyMenu
TrackPopupMenuEx
CreateIconIndirect
GetDesktopWindow
CopyImage
LookupIconIdFromDirectoryEx
CreateIconFromResourceEx
GetWindow
BringWindowToTop
GetTopWindow
SystemParametersInfoA
AdjustWindowRectEx
DrawTextA
SetRect
GetIconInfo
SetWindowTextA
IsWindowVisible
CheckMenuItem
MessageBoxA
SetClipboardViewer
ExitWindowsEx
ReleaseDC
GetDC
EnableMenuItem
CreateWindowExA
RegisterClassExA
LoadCursorA
LoadImageA
ChangeClipboardChain
DestroyIcon
DestroyWindow
IsCharAlphaA
MapVirtualKeyA
VkKeyScanExA
SendDlgItemMessageA
mouse_event
WindowFromPoint
GetSystemMetrics
keybd_event
SetKeyboardState
GetKeyboardState
GetCursorPos
PostMessageW
GetAsyncKeyState
AttachThreadInput
SendInput
UnregisterHotKey
RegisterHotKey
PostQuitMessage
SendMessageTimeoutA
UnhookWindowsHookEx
SetWindowsHookExA
PostThreadMessageA
IsCharUpperA
IsCharLowerA
IsCharAlphaNumericA
ToAsciiEx
GetKeyboardLayout
CallNextHookEx
CharLowerA
OpenClipboard
GetClipboardData
GetClipboardFormatNameA
CloseClipboard
SetClipboardData
EmptyClipboard
IsWindowEnabled
GetMenuStringA
GetSubMenu
GetMenuItemID
GetMenuItemCount
GetCursor
ClientToScreen
GetCaretPos
EnumClipboardFormats
MessageBeep
SetDlgItemTextA
LoadAcceleratorsA
GetDlgItem
PostMessageA
FindWindowA
EndDialog
IsWindow
DispatchMessageA
TranslateMessage
ShowWindow
CountClipboardFormats
SetWindowLongA
ScreenToClient
DialogBoxParamA
SetForegroundWindow
DefWindowProcA
FillRect
DrawIconEx
GetSysColorBrush
GetSysColor
RegisterWindowMessageA
IsIconic
IsZoomed
EnumWindows
GetWindowTextLengthA
EnableWindow
InvalidateRect
SetWindowPos
SetWindowRgn
SetFocus
SetActiveWindow
EnumChildWindows
MoveWindow
GetQueueStatus
IsDialogMessageA
SendMessageA
GetWindowLongA
GetKeyState
TranslateAcceleratorA
KillTimer
PeekMessageA
GetFocus
GetClassNameA
GetWindowThreadProcessId
GetForegroundWindow
GetMessageA
SetTimer
GetParent
GetDlgCtrlID
CharUpperA
IsClipboardFormatAvailable
GetWindowRect
GetWindowTextA
GetClientRect
GetMenu

gdi32

FillRgn
GetClipBox
SetBkMode
EnumFontFamiliesExA
CreateDIBSection
GdiFlush
ExcludeClipRect
SetTextColor
SetBkColor
GetPixel
BitBlt
CreateCompatibleBitmap
GetSystemPaletteEntries
GetDIBits
CreateCompatibleDC
CreatePolygonRgn
CreateRectRgn
CreateRoundRectRgn
CreateEllipticRgn
DeleteDC
GetObjectA
GetTextMetricsA
GetTextFaceA
SelectObject
GetStockObject
CreateDCA
CreateSolidBrush
GetDeviceCaps
GetClipRgn
DeleteObject
CreateFontA

comdlg32

GetOpenFileNameA
CommDlgExtendedError
GetSaveFileNameA

advapi32

RegDeleteKeyA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
CloseServiceHandle
UnlockServiceDatabase
LockServiceDatabase
OpenSCManagerA
GetUserNameA
RegEnumKeyExA
RegEnumValueA
RegQueryInfoKeyA
RegOpenKeyExA
RegCloseKey
RegConnectRegistryA
RegDeleteValueA

shell32

DragQueryPoint
SHFileOperationA
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetDesktopFolder
SHGetMalloc
SHGetFolderPathA
ShellExecuteExA
Shell_NotifyIconA
DragFinish
DragQueryFileA
ExtractIconA

ole32

OleInitialize
OleUninitialize
CoInitialize
CoCreateInstance
CoUninitialize
CLSIDFromString
CoGetObject
StringFromGUID2
CreateStreamOnHGlobal

oleaut32

SafeArrayGetDim
GetActiveObject
OleLoadPicture
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayUnlock
VariantCopy
SafeArrayGetElemsize
SafeArrayPtrOfIndex
SafeArrayLock
SafeArrayDestroy
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayCopy
SysAllocString
VariantChangeType
VariantClear
SafeArrayCreate
SysFreeString
SysStringLen

Sections

.text
Size: 571KB - Virtual size: 571KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$SYSDIR/C2MP/Uninst.exe
.exe windows:4 windows x86 arch:x86

7fa974366048f9c551ef45714595665e

Code Sign

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

07/06/2005, 08:09

Not After

30/05/2020, 10:48

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

10/05/2010, 00:00

Not After

10/05/2015, 23:59

Subject

CN=COMODO Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

24/08/2011, 00:00

Not After

30/05/2020, 10:48

Subject

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

39:b7:c2:87:c1:79:fb:d0:f1:31:85:d6:6a:9e:71:ab
Certificate

Issuer

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12/10/2011, 00:00

Not After

11/10/2014, 23:59

Subject

CN=Cole Williams,O=Cole Williams,POSTALCODE=DN32 9LQ,STREET=156 Hainton Avenue,L=Grimsby,ST=South Humberside,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

83:06:0c:e3:80:54:95:d3:53:8e:95:77:c3:96:5d:40:83:45:f4:f2
Signer

Actual PE Digest

83:06:0c:e3:80:54:95:d3:53:8e:95:77:c3:96:5d:40:83:45:f4:f2

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
GetWindowsDirectoryA
SetFileTime
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetTempPathA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/InstallOptions.dll
.dll windows:4 windows x86 arch:x86

b1cd0d78f652ce5fc63f0879371af012

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetCurrentDirectoryA
GetCurrentDirectoryA
MultiByteToWideChar
GetPrivateProfileIntA
GlobalLock
GetModuleHandleA
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
GlobalUnlock
GlobalAlloc

user32

MapWindowPoints
GetDlgCtrlID
CloseClipboard
GetClipboardData
OpenClipboard
PtInRect
SetWindowRgn
LoadIconA
LoadImageA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableMenuItem
GetSystemMenu
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
GetClientRect

gdi32

SetTextColor
CreateCompatibleDC
GetObjectA
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
SelectObject

shell32

SHBrowseForFolderA
SHGetDesktopFolder
SHGetPathFromIDListA
ShellExecuteA

comdlg32

GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError

ole32

CoTaskMemFree

Exports

Exports

dialog
initDialog
show

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:4 windows x86 arch:x86

2017f2acbdaa42ab3e4adeb8b4c37e7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyA
lstrcpynA
FreeLibrary
lstrcatA
GetProcAddress
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
VirtualAlloc
VirtualProtect

user32

wsprintfA

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/nsExec.dll
.dll windows:4 windows x86 arch:x86

d83f71e61ee459ee63ca3e829966a9dc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetExitCodeProcess
WaitForSingleObject
Sleep
TerminateProcess
lstrcpyA
lstrcpynA
GlobalReAlloc
GlobalUnlock
GlobalSize
ReadFile
PeekNamedPipe
GetTickCount
CreateProcessA
GetStartupInfoA
CreatePipe
GetVersionExA
GetModuleHandleA
DeleteFileA
lstrcmpiA
lstrlenA
lstrcatA
CloseHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
CreateFileA
CopyFileA
GetTempFileNameA
GlobalFree
GlobalAlloc
GetModuleFileNameA
ExitProcess
GetCommandLineA
GetProcAddress
GlobalLock
GetCurrentProcess

user32

SendMessageA
OemToCharBuffA
CharNextA
wsprintfA
CharPrevA
FindWindowExA

advapi32

InitializeSecurityDescriptor
SetSecurityDescriptorDacl

Exports

Exports

Exec
ExecToLog
ExecToStack

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 410B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/unstart.ini
$SYSDIR/DCBassSourceMod.ax
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

UPX0
Size: - Virtual size: 440KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 222KB - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
$SYSDIR/DCBassSourceMod.ax.new
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

UPX0
Size: - Virtual size: 440KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 222KB - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
$SYSDIR/DiscHandler.exe
.exe windows:4 windows x86 arch:x86

099c0646ea7282d232219f8807883be0

Code Sign

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

07/06/2005, 08:09

Not After

30/05/2020, 10:48

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

10/05/2010, 00:00

Not After

10/05/2015, 23:59

Subject

CN=COMODO Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

24/08/2011, 00:00

Not After

30/05/2020, 10:48

Subject

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

39:b7:c2:87:c1:79:fb:d0:f1:31:85:d6:6a:9e:71:ab
Certificate

Issuer

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12/10/2011, 00:00

Not After

11/10/2014, 23:59

Subject

CN=Cole Williams,O=Cole Williams,POSTALCODE=DN32 9LQ,STREET=156 Hainton Avenue,L=Grimsby,ST=South Humberside,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

31:96:ce:8c:91:a6:33:eb:41:fc:3c:52:da:50:cc:2b:41:6b:17:1c
Signer

Actual PE Digest

31:96:ce:8c:91:a6:33:eb:41:fc:3c:52:da:50:cc:2b:41:6b:17:1c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
CreateFileA
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
SetFileTime
GetTempPathA
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetWindowsDirectoryA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$SYSDIR/DivXa32.acm
.dll windows:4 windows x86 arch:x86

4a6b5dd91037124752d0b0b9bee8d857

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

ntdll

RtlUnwind

kernel32

LocalFree
MulDiv
GlobalAlloc
WaitForSingleObject
SetEvent
CreateThread
CreateEventA
LocalAlloc
CloseHandle
LockResource
LoadResource
FindResourceA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
SizeofResource
HeapReAlloc
GetCurrentProcess
HeapSize
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
GetProcAddress
GetModuleHandleA
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
HeapAlloc
GetACP
GetStdHandle
GetFileType
MultiByteToWideChar
GetModuleFileNameA
GetCPInfo
GetOEMCP
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
HeapDestroy
HeapCreate
VirtualFree
WriteFile
HeapFree
VirtualAlloc
GetLocaleInfoA
LCMapStringA
LCMapStringW
SetFilePointer
GetStringTypeA
GetStringTypeW
LoadLibraryA
SetStdHandle
RaiseException
FlushFileBuffers
GetLocaleInfoW
GlobalFree
SetHandleCount
GetStartupInfoA

user32

LoadStringA

winmm

DefDriverProc
GetDriverModuleHandle

Exports

Exports

DriverProc

Sections

.text
Size: 119KB - Virtual size: 119KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 118KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/DivXa32.acm.new
.dll windows:4 windows x86 arch:x86

4a6b5dd91037124752d0b0b9bee8d857

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

ntdll

RtlUnwind

kernel32

LocalFree
MulDiv
GlobalAlloc
WaitForSingleObject
SetEvent
CreateThread
CreateEventA
LocalAlloc
CloseHandle
LockResource
LoadResource
FindResourceA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
SizeofResource
HeapReAlloc
GetCurrentProcess
HeapSize
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
GetProcAddress
GetModuleHandleA
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
HeapAlloc
GetACP
GetStdHandle
GetFileType
MultiByteToWideChar
GetModuleFileNameA
GetCPInfo
GetOEMCP
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
HeapDestroy
HeapCreate
VirtualFree
WriteFile
HeapFree
VirtualAlloc
GetLocaleInfoA
LCMapStringA
LCMapStringW
SetFilePointer
GetStringTypeA
GetStringTypeW
LoadLibraryA
SetStdHandle
RaiseException
FlushFileBuffers
GetLocaleInfoW
GlobalFree
SetHandleCount
GetStartupInfoA

user32

LoadStringA

winmm

DefDriverProc
GetDriverModuleHandle

Exports

Exports

DriverProc

Sections

.text
Size: 119KB - Virtual size: 119KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 118KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/FLVSplitter.ax
.dll regsvr32 windows:5 windows x86 arch:x86

f40be78237c7cffb5cae2930a44b45a5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

H:\progs\Compiling\mpc-hc\bin\Filters_x86\FLVSplitter.pdb

Imports

kernel32

GetFullPathNameW
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
SetErrorMode
EncodePointer
DecodePointer
HeapFree
GetCommandLineA
HeapAlloc
QueryPerformanceCounter
GetSystemTimeAsFileTime
RtlUnwind
HeapReAlloc
HeapQueryInformation
HeapSize
ExitProcess
SetStdHandle
GetFileType
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetStringTypeW
HeapCreate
HeapDestroy
SetHandleCount
GetStdHandle
GetStartupInfoW
FreeEnvironmentStringsW
GetEnvironmentStringsW
LCMapStringW
IsProcessorFeaturePresent
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
WriteConsoleW
SetEnvironmentVariableA
FlushFileBuffers
SetFilePointer
WriteFile
LocalAlloc
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFileAttributesExW
lstrcmpA
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoW
LoadLibraryExW
GlobalFlags
GetCurrentProcessId
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
InitializeCriticalSectionAndSpinCount
ReleaseActCtx
CreateActCtxW
ReadFile
SetFilePointerEx
GetFileSizeEx
DeleteFileW
Sleep
DisableThreadLibraryCalls
GetCurrentProcess
lstrcmpW
InterlockedDecrement
InterlockedIncrement
GetCurrentThreadId
SetThreadPriority
GetCurrentThread
GetTickCount
ResetEvent
SetEvent
CreateThread
InterlockedExchange
WaitForSingleObject
CreateEventW
lstrlenA
GetModuleFileNameA
GetSystemInfo
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
RaiseException
WideCharToMultiByte
GetModuleFileNameW
GetVolumeInformationW
CloseHandle
CreateFileW
FindClose
FindFirstFileW
GetModuleHandleW
lstrlenW
FreeLibrary
lstrcpyW
GetVersionExW
GetSystemDirectoryW
GetProcAddress
LoadLibraryW
MultiByteToWideChar
FindResourceW
LoadResource
LockResource
SizeofResource
ActivateActCtx
GetLastError
DeactivateActCtx
IsDebuggerPresent
SetLastError

user32

UnregisterClassW
CharUpperW
SetTimer
KillTimer
PostQuitMessage
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
GetMessageW
TranslateMessage
GetCursorPos
RealChildWindowFromPoint
SetWindowTextW
DestroyMenu
SetCursor
ShowWindow
InvalidateRect
GetWindowThreadProcessId
IsWindowEnabled
GetWindowDC
ClientToScreen
GrayStringW
DrawTextW
TabbedTextOutW
GetMenuState
LoadIconW
WinHelpW
GetCapture
CallNextHookEx
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetFocus
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MonitorFromWindow
GetKeyState
SetMenu
EnableWindow
SetForegroundWindow
IsWindowVisible
ValidateRect
UpdateWindow
PostMessageW
MessageBoxW
GetClassInfoExW
RegisterClassW
GetWindowRect
ScreenToClient
DrawTextExW
GetDlgCtrlID
CallWindowProcW
PtInRect
UnhookWindowsHookEx
RegisterWindowMessageW
DispatchMessageW
PeekMessageW
ReleaseDC
GetDC
SetRect
GetActiveWindow
GetMenuItemID
AdjustWindowRectEx
SetWindowPos
RedrawWindow
IsWindow
GetWindowLongW
SetWindowLongW
GetMenu
CreateWindowExW
GetSubMenu
GetMenuItemCount
LoadCursorW
MapWindowPoints
GetParent
GetSysColorBrush
GetSysColor
SystemParametersInfoW
EnumDisplayMonitors
SetRectEmpty
CopyRect
GetMonitorInfoW
GetSystemMetrics
GetClientRect
SendMessageW
GetClassNameW
GetWindow
DefWindowProcW
GetClassInfoW
SetWindowsHookExW

gdi32

DeleteDC
CreateBitmap
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetClipBox
SetMapMode
RestoreDC
SaveDC
SetBkColor
SetTextColor
CreateDIBitmap
GetTextMetricsW
CreatePatternBrush
CreatePen
CreateSolidBrush
GetObjectW
GetStockObject
CreateFontIndirectW
EnumFontFamiliesW
GetTextCharsetInfo
DeleteObject
GetDeviceCaps

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

advapi32

RegEnumKeyW
RegOpenKeyExW
RegDeleteKeyW
RegCreateKeyExW
RegSetValueExW
RegEnumKeyExW
RegCreateKeyW
RegEnumValueW
RegQueryValueW
RegCloseKey
RegDeleteValueW
RegQueryValueExW
RegSetValueW

shell32

ShellExecuteW

shlwapi

PathStripToRootW
PathFindExtensionW
PathFindFileNameW
PathIsUNCW

ole32

CoFreeUnusedLibraries
CoTaskMemFree
CLSIDFromString
CoUninitialize
CoCreateInstance
CoCreateGuid
CoInitialize
CoTaskMemAlloc
StringFromGUID2

oleaut32

SysAllocString
SysFreeString
VariantInit
VariantClear
SysAllocStringLen
VariantChangeType

oleacc

LresultFromObject
CreateStdAccessibleObject

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 250KB - Virtual size: 249KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/FLVSplitter.ax.new
.dll regsvr32 windows:5 windows x86 arch:x86

f40be78237c7cffb5cae2930a44b45a5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

H:\progs\Compiling\mpc-hc\bin\Filters_x86\FLVSplitter.pdb

Imports

kernel32

GetFullPathNameW
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
SetErrorMode
EncodePointer
DecodePointer
HeapFree
GetCommandLineA
HeapAlloc
QueryPerformanceCounter
GetSystemTimeAsFileTime
RtlUnwind
HeapReAlloc
HeapQueryInformation
HeapSize
ExitProcess
SetStdHandle
GetFileType
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetStringTypeW
HeapCreate
HeapDestroy
SetHandleCount
GetStdHandle
GetStartupInfoW
FreeEnvironmentStringsW
GetEnvironmentStringsW
LCMapStringW
IsProcessorFeaturePresent
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
WriteConsoleW
SetEnvironmentVariableA
FlushFileBuffers
SetFilePointer
WriteFile
LocalAlloc
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFileAttributesExW
lstrcmpA
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoW
LoadLibraryExW
GlobalFlags
GetCurrentProcessId
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
InitializeCriticalSectionAndSpinCount
ReleaseActCtx
CreateActCtxW
ReadFile
SetFilePointerEx
GetFileSizeEx
DeleteFileW
Sleep
DisableThreadLibraryCalls
GetCurrentProcess
lstrcmpW
InterlockedDecrement
InterlockedIncrement
GetCurrentThreadId
SetThreadPriority
GetCurrentThread
GetTickCount
ResetEvent
SetEvent
CreateThread
InterlockedExchange
WaitForSingleObject
CreateEventW
lstrlenA
GetModuleFileNameA
GetSystemInfo
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
RaiseException
WideCharToMultiByte
GetModuleFileNameW
GetVolumeInformationW
CloseHandle
CreateFileW
FindClose
FindFirstFileW
GetModuleHandleW
lstrlenW
FreeLibrary
lstrcpyW
GetVersionExW
GetSystemDirectoryW
GetProcAddress
LoadLibraryW
MultiByteToWideChar
FindResourceW
LoadResource
LockResource
SizeofResource
ActivateActCtx
GetLastError
DeactivateActCtx
IsDebuggerPresent
SetLastError

user32

UnregisterClassW
CharUpperW
SetTimer
KillTimer
PostQuitMessage
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
GetMessageW
TranslateMessage
GetCursorPos
RealChildWindowFromPoint
SetWindowTextW
DestroyMenu
SetCursor
ShowWindow
InvalidateRect
GetWindowThreadProcessId
IsWindowEnabled
GetWindowDC
ClientToScreen
GrayStringW
DrawTextW
TabbedTextOutW
GetMenuState
LoadIconW
WinHelpW
GetCapture
CallNextHookEx
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetFocus
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MonitorFromWindow
GetKeyState
SetMenu
EnableWindow
SetForegroundWindow
IsWindowVisible
ValidateRect
UpdateWindow
PostMessageW
MessageBoxW
GetClassInfoExW
RegisterClassW
GetWindowRect
ScreenToClient
DrawTextExW
GetDlgCtrlID
CallWindowProcW
PtInRect
UnhookWindowsHookEx
RegisterWindowMessageW
DispatchMessageW
PeekMessageW
ReleaseDC
GetDC
SetRect
GetActiveWindow
GetMenuItemID
AdjustWindowRectEx
SetWindowPos
RedrawWindow
IsWindow
GetWindowLongW
SetWindowLongW
GetMenu
CreateWindowExW
GetSubMenu
GetMenuItemCount
LoadCursorW
MapWindowPoints
GetParent
GetSysColorBrush
GetSysColor
SystemParametersInfoW
EnumDisplayMonitors
SetRectEmpty
CopyRect
GetMonitorInfoW
GetSystemMetrics
GetClientRect
SendMessageW
GetClassNameW
GetWindow
DefWindowProcW
GetClassInfoW
SetWindowsHookExW

gdi32

DeleteDC
CreateBitmap
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetClipBox
SetMapMode
RestoreDC
SaveDC
SetBkColor
SetTextColor
CreateDIBitmap
GetTextMetricsW
CreatePatternBrush
CreatePen
CreateSolidBrush
GetObjectW
GetStockObject
CreateFontIndirectW
EnumFontFamiliesW
GetTextCharsetInfo
DeleteObject
GetDeviceCaps

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

advapi32

RegEnumKeyW
RegOpenKeyExW
RegDeleteKeyW
RegCreateKeyExW
RegSetValueExW
RegEnumKeyExW
RegCreateKeyW
RegEnumValueW
RegQueryValueW
RegCloseKey
RegDeleteValueW
RegQueryValueExW
RegSetValueW

shell32

ShellExecuteW

shlwapi

PathStripToRootW
PathFindExtensionW
PathFindFileNameW
PathIsUNCW

ole32

CoFreeUnusedLibraries
CoTaskMemFree
CLSIDFromString
CoUninitialize
CoCreateInstance
CoCreateGuid
CoInitialize
CoTaskMemAlloc
StringFromGUID2

oleaut32

SysAllocString
SysFreeString
VariantInit
VariantClear
SysAllocStringLen
VariantChangeType

oleacc

LresultFromObject
CreateStdAccessibleObject

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 250KB - Virtual size: 249KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/Formats.ini
$SYSDIR/Formats.ini.new
$SYSDIR/LAVAudio.ax
.dll regsvr32 windows:5 windows x86 arch:x86

024cc18fc0b6c816c384b342e4a33596

Code Sign

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

07/06/2005, 08:09

Not After

30/05/2020, 10:48

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

10/05/2010, 00:00

Not After

10/05/2015, 23:59

Subject

CN=COMODO Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

24/08/2011, 00:00

Not After

30/05/2020, 10:48

Subject

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

f7:00:2f:49:81:e5:47:c9:8c:39:eb:b0:b6:75:39:d9
Certificate

Issuer

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

05/11/2012, 00:00

Not After

05/11/2014, 23:59

Subject

CN=Hendrik Leppkes,O=Hendrik Leppkes,POSTALCODE=22419,STREET=Wulffsblöcken 35,L=Hamburg,ST=Hamburg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

98:b1:ea:53:db:06:55:33:1a:b5:f6:45:35:40:f2:94:e0:92:11:1e
Signer

Actual PE Digest

98:b1:ea:53:db:06:55:33:1a:b5:f6:45:35:40:f2:94:e0:92:11:1e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Multimedia\LAV\LAVFilters\bin_Win32\LAVAudio\LAVAudio.pdb

Imports

ole32

CoCreateInstance
CoFreeUnusedLibraries
CoUninitialize
StringFromGUID2
CoTaskMemFree
CoTaskMemAlloc
CoInitialize

user32

KillTimer
SendDlgItemMessageW
EnableWindow
GetDlgItem
SendMessageW
SetTimer
DestroyMenu
PostMessageW
MoveWindow
InvalidateRect
ShowWindow
DestroyWindow
SetWindowLongW
GetWindowLongW
CreateDialogParamW
DefWindowProcW
DispatchMessageW
LoadStringW
GetWindowRect
GetDesktopWindow
CreateWindowExW
SetWindowPos
DestroyIcon
UnregisterClassW
GetMessageW
TranslateMessage
RegisterClassExW
LoadImageW
GetWindow
SetForegroundWindow
PostQuitMessage
EnumThreadWindows
GetCursorPos
TrackPopupMenu

shlwapi

PathRemoveFileSpecW
PathFindFileNameW

comctl32

InitCommonControlsEx

avformat-lav-55

av_new_stream
ff_vorbis_comment
ff_sipr_subpk_size
av_register_all
av_write_frame
avformat_free_context
av_write_trailer
avio_alloc_context
avformat_alloc_output_context2
ff_rm_reorder_sipr_data
avformat_write_header

avutil-lav-52

av_freep
av_opt_set_int
av_realloc_f
av_mallocz
av_log_set_callback
av_frame_free
av_opt_set_double
av_get_channel_layout_nb_channels
av_frame_alloc
av_dict_get
av_dict_free
av_get_bytes_per_sample
av_frame_unref
av_free

avcodec-lav-55

ff_dca_convert_bitstream
av_parser_init
avcodec_alloc_context3
avcodec_find_decoder
avpriv_dca_sample_rates
avcodec_decode_audio4
avcodec_flush_buffers
avpriv_flac_parse_block_header
avpriv_flac_is_extradata_valid
avcodec_open2
avcodec_find_decoder_by_name
av_parser_parse2
av_init_packet
avcodec_close
av_parser_close

avresample-lav-1

avresample_open
avresample_set_matrix
avresample_build_matrix
avresample_alloc_context
avresample_close
avresample_free
avresample_convert

kernel32

GetStringTypeW
LCMapStringW
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetStartupInfoW
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
Sleep
ExitProcess
GetStdHandle
WriteFile
HeapSize
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
IsProcessorFeaturePresent
HeapDestroy
HeapCreate
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
ExitThread
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetCommandLineA
HeapAlloc
EncodePointer
DecodePointer
HeapReAlloc
HeapFree
SetFilePointer
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleW
CreateFileW
FlushFileBuffers
GetModuleFileNameW
LoadLibraryExW
LoadLibraryW
GetProcAddress
FreeLibrary
EnterCriticalSection
LeaveCriticalSection
lstrlenA
MultiByteToWideChar
GetLastError
lstrlenW
GetModuleFileNameA
GetVersionExW
DisableThreadLibraryCalls
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
lstrcmpW
InterlockedIncrement
CloseHandle
CreateEventW
SetEvent
ResetEvent
WaitForSingleObject
GetCurrentProcess
GetCurrentThreadId
GetModuleHandleW
GetTickCount
CreateThread
RaiseException
SetLastError

advapi32

RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegSetValueExW
RegSetValueW
RegCreateKeyW
RegCreateKeyExW
RegQueryValueExW
RegDeleteValueW
RegDeleteKeyW

oleaut32

OleCreatePropertyFrame

shell32

Shell_NotifyIconW

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
OpenConfiguration

Sections

.text
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/LAVAudio.ax.new
.dll regsvr32 windows:5 windows x86 arch:x86

024cc18fc0b6c816c384b342e4a33596

Code Sign

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

07/06/2005, 08:09

Not After

30/05/2020, 10:48

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

10/05/2010, 00:00

Not After

10/05/2015, 23:59

Subject

CN=COMODO Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

24/08/2011, 00:00

Not After

30/05/2020, 10:48

Subject

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

f7:00:2f:49:81:e5:47:c9:8c:39:eb:b0:b6:75:39:d9
Certificate

Issuer

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

05/11/2012, 00:00

Not After

05/11/2014, 23:59

Subject

CN=Hendrik Leppkes,O=Hendrik Leppkes,POSTALCODE=22419,STREET=Wulffsblöcken 35,L=Hamburg,ST=Hamburg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

98:b1:ea:53:db:06:55:33:1a:b5:f6:45:35:40:f2:94:e0:92:11:1e
Signer

Actual PE Digest

98:b1:ea:53:db:06:55:33:1a:b5:f6:45:35:40:f2:94:e0:92:11:1e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Multimedia\LAV\LAVFilters\bin_Win32\LAVAudio\LAVAudio.pdb

Imports

ole32

CoCreateInstance
CoFreeUnusedLibraries
CoUninitialize
StringFromGUID2
CoTaskMemFree
CoTaskMemAlloc
CoInitialize

user32

KillTimer
SendDlgItemMessageW
EnableWindow
GetDlgItem
SendMessageW
SetTimer
DestroyMenu
PostMessageW
MoveWindow
InvalidateRect
ShowWindow
DestroyWindow
SetWindowLongW
GetWindowLongW
CreateDialogParamW
DefWindowProcW
DispatchMessageW
LoadStringW
GetWindowRect
GetDesktopWindow
CreateWindowExW
SetWindowPos
DestroyIcon
UnregisterClassW
GetMessageW
TranslateMessage
RegisterClassExW
LoadImageW
GetWindow
SetForegroundWindow
PostQuitMessage
EnumThreadWindows
GetCursorPos
TrackPopupMenu

shlwapi

PathRemoveFileSpecW
PathFindFileNameW

comctl32

InitCommonControlsEx

avformat-lav-55

av_new_stream
ff_vorbis_comment
ff_sipr_subpk_size
av_register_all
av_write_frame
avformat_free_context
av_write_trailer
avio_alloc_context
avformat_alloc_output_context2
ff_rm_reorder_sipr_data
avformat_write_header

avutil-lav-52

av_freep
av_opt_set_int
av_realloc_f
av_mallocz
av_log_set_callback
av_frame_free
av_opt_set_double
av_get_channel_layout_nb_channels
av_frame_alloc
av_dict_get
av_dict_free
av_get_bytes_per_sample
av_frame_unref
av_free

avcodec-lav-55

ff_dca_convert_bitstream
av_parser_init
avcodec_alloc_context3
avcodec_find_decoder
avpriv_dca_sample_rates
avcodec_decode_audio4
avcodec_flush_buffers
avpriv_flac_parse_block_header
avpriv_flac_is_extradata_valid
avcodec_open2
avcodec_find_decoder_by_name
av_parser_parse2
av_init_packet
avcodec_close
av_parser_close

avresample-lav-1

avresample_open
avresample_set_matrix
avresample_build_matrix
avresample_alloc_context
avresample_close
avresample_free
avresample_convert

kernel32

GetStringTypeW
LCMapStringW
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetStartupInfoW
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
Sleep
ExitProcess
GetStdHandle
WriteFile
HeapSize
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
IsProcessorFeaturePresent
HeapDestroy
HeapCreate
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
ExitThread
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetCommandLineA
HeapAlloc
EncodePointer
DecodePointer
HeapReAlloc
HeapFree
SetFilePointer
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleW
CreateFileW
FlushFileBuffers
GetModuleFileNameW
LoadLibraryExW
LoadLibraryW
GetProcAddress
FreeLibrary
EnterCriticalSection
LeaveCriticalSection
lstrlenA
MultiByteToWideChar
GetLastError
lstrlenW
GetModuleFileNameA
GetVersionExW
DisableThreadLibraryCalls
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
lstrcmpW
InterlockedIncrement
CloseHandle
CreateEventW
SetEvent
ResetEvent
WaitForSingleObject
GetCurrentProcess
GetCurrentThreadId
GetModuleHandleW
GetTickCount
CreateThread
RaiseException
SetLastError

advapi32

RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegSetValueExW
RegSetValueW
RegCreateKeyW
RegCreateKeyExW
RegQueryValueExW
RegDeleteValueW
RegDeleteKeyW

oleaut32

OleCreatePropertyFrame

shell32

Shell_NotifyIconW

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
OpenConfiguration

Sections

.text
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/LAVSplitter.ax
.dll regsvr32 windows:5 windows x86 arch:x86

72e5edfef72e85abb0a145add7cdb9c7

Code Sign

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

07/06/2005, 08:09

Not After

30/05/2020, 10:48

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

10/05/2010, 00:00

Not After

10/05/2015, 23:59

Subject

CN=COMODO Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

24/08/2011, 00:00

Not After

30/05/2020, 10:48

Subject

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

f7:00:2f:49:81:e5:47:c9:8c:39:eb:b0:b6:75:39:d9
Certificate

Issuer

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

05/11/2012, 00:00

Not After

05/11/2014, 23:59

Subject

CN=Hendrik Leppkes,O=Hendrik Leppkes,POSTALCODE=22419,STREET=Wulffsblöcken 35,L=Hamburg,ST=Hamburg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

a1:10:16:a7:63:d0:e6:f6:0c:09:0c:86:72:42:1e:ff:e7:1d:6c:5d
Signer

Actual PE Digest

a1:10:16:a7:63:d0:e6:f6:0c:09:0c:86:72:42:1e:ff:e7:1d:6c:5d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Multimedia\LAV\LAVFilters\bin_Win32\LAVSplitter\LAVSplitter.pdb

Imports

ole32

CoCreateInstance
CoFreeUnusedLibraries
CoUninitialize
StringFromGUID2
CoTaskMemAlloc
CoTaskMemFree
CoInitialize

user32

GetDlgItem
SendMessageW
InsertMenuItemW
CreatePopupMenu
DestroyMenu
PostMessageW
TrackPopupMenu
GetCursorPos
EnumThreadWindows
PostQuitMessage
SetForegroundWindow
GetWindow
LoadImageW
RegisterClassExW
TranslateMessage
GetMessageW
UnregisterClassW
DestroyIcon
SetWindowPos
SendDlgItemMessageW
LoadStringW
DestroyWindow
GetWindowRect
CreateDialogParamW
GetDesktopWindow
CreateWindowExW
DispatchMessageW
DefWindowProcW
GetWindowLongW
SetWindowLongW
ShowWindow
InvalidateRect
MoveWindow

oleaut32

OleCreatePropertyFrame
SysAllocString
SysFreeString

comctl32

InitCommonControlsEx

shlwapi

PathFindExtensionW
PathRemoveFileSpecA
UrlGetPartW
PathFindFileNameW

avformat-lav-55

av_mkv_get_edition
av_mkv_get_editions
av_mkv_get_num_editions
avformat_find_stream_info
avpriv_mpegts_add_stream
avformat_close_input
avformat_open_input
av_read_frame
avformat_alloc_context
av_iformat_next
avformat_network_init
av_register_all
avformat_get_riff_video_tags
av_read_play
avio_alloc_context
av_seek_frame
avformat_get_riff_audio_tags
av_codec_get_tag
av_mkv_set_next_edition
av_find_input_format

avutil-lav-52

av_free
av_mallocz
av_buffer_unref
av_buffer_realloc
av_buffer_ref
av_log_set_callback
av_dict_set
av_opt_set_int
av_dict_copy
av_rescale
av_asprintf
av_freep
av_reduce
av_dict_get
av_rescale_q
av_get_default_channel_layout
av_pix_fmt_desc_get
av_get_bits_per_pixel
av_get_bits_per_sample_fmt
av_get_pix_fmt_name
av_get_channel_layout_string

avcodec-lav-55

av_get_bits_per_sample
av_packet_get_side_data
av_free_packet
av_get_profile_name
avcodec_find_decoder
av_get_codec_tag_string
av_parser_init

libbluray

clpi_parse
clpi_free
bd_read
bd_tell
bd_get_title_size
bd_seek
bd_free_title_info
bd_close
bd_open
bd_get_titles
bd_get_title_info
bd_get_event
bd_get_clip_infos
bd_select_title
bd_get_clpi
bd_free_clpi
bd_find_seek_point
bd_get_current_chapter

kernel32

CreateSemaphoreW
LoadLibraryW
GetProcAddress
GetModuleHandleW
FreeLibrary
CreateThread
FlushFileBuffers
CreateFileW
ReadFile
WriteConsoleW
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
GetStringTypeW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
HeapSize
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStartupInfoW
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
ExitProcess
HeapDestroy
HeapCreate
IsProcessorFeaturePresent
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetACP
GetLocaleInfoW
GetStdHandle
WriteFile
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
CompareStringW
GetCPInfo
LCMapStringW
HeapAlloc
ExitThread
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetCommandLineA
HeapReAlloc
HeapFree
DecodePointer
EncodePointer
SetLastError
RaiseException
GetCurrentThreadId
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InterlockedDecrement
GetSystemInfo
CloseHandle
WaitForSingleObject
InterlockedExchange
ResetEvent
SetEvent
Sleep
GetModuleFileNameW
MultiByteToWideChar
WideCharToMultiByte
lstrlenW
lstrlenA
GetLastError
GetModuleFileNameA
GetVersionExW
DisableThreadLibraryCalls
lstrcmpW
InterlockedIncrement
CreateEventW
ReleaseSemaphore
GetCurrentProcess
GetTickCount

advapi32

RegDeleteKeyW
RegEnumKeyExW
RegOpenKeyExW
RegSetValueExW
RegSetValueW
RegCreateKeyW
RegCreateKeyExW
RegQueryValueExW
RegCloseKey

shell32

Shell_NotifyIconW

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
OpenConfiguration

Sections

.text
Size: 291KB - Virtual size: 291KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/LAVSplitter.ax.new
.dll regsvr32 windows:5 windows x86 arch:x86

72e5edfef72e85abb0a145add7cdb9c7

Code Sign

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

07/06/2005, 08:09

Not After

30/05/2020, 10:48

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

10/05/2010, 00:00

Not After

10/05/2015, 23:59

Subject

CN=COMODO Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

24/08/2011, 00:00

Not After

30/05/2020, 10:48

Subject

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

f7:00:2f:49:81:e5:47:c9:8c:39:eb:b0:b6:75:39:d9
Certificate

Issuer

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

05/11/2012, 00:00

Not After

05/11/2014, 23:59

Subject

CN=Hendrik Leppkes,O=Hendrik Leppkes,POSTALCODE=22419,STREET=Wulffsblöcken 35,L=Hamburg,ST=Hamburg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

a1:10:16:a7:63:d0:e6:f6:0c:09:0c:86:72:42:1e:ff:e7:1d:6c:5d
Signer

Actual PE Digest

a1:10:16:a7:63:d0:e6:f6:0c:09:0c:86:72:42:1e:ff:e7:1d:6c:5d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Multimedia\LAV\LAVFilters\bin_Win32\LAVSplitter\LAVSplitter.pdb

Imports

ole32

CoCreateInstance
CoFreeUnusedLibraries
CoUninitialize
StringFromGUID2
CoTaskMemAlloc
CoTaskMemFree
CoInitialize

user32

GetDlgItem
SendMessageW
InsertMenuItemW
CreatePopupMenu
DestroyMenu
PostMessageW
TrackPopupMenu
GetCursorPos
EnumThreadWindows
PostQuitMessage
SetForegroundWindow
GetWindow
LoadImageW
RegisterClassExW
TranslateMessage
GetMessageW
UnregisterClassW
DestroyIcon
SetWindowPos
SendDlgItemMessageW
LoadStringW
DestroyWindow
GetWindowRect
CreateDialogParamW
GetDesktopWindow
CreateWindowExW
DispatchMessageW
DefWindowProcW
GetWindowLongW
SetWindowLongW
ShowWindow
InvalidateRect
MoveWindow

oleaut32

OleCreatePropertyFrame
SysAllocString
SysFreeString

comctl32

InitCommonControlsEx

shlwapi

PathFindExtensionW
PathRemoveFileSpecA
UrlGetPartW
PathFindFileNameW

avformat-lav-55

av_mkv_get_edition
av_mkv_get_editions
av_mkv_get_num_editions
avformat_find_stream_info
avpriv_mpegts_add_stream
avformat_close_input
avformat_open_input
av_read_frame
avformat_alloc_context
av_iformat_next
avformat_network_init
av_register_all
avformat_get_riff_video_tags
av_read_play
avio_alloc_context
av_seek_frame
avformat_get_riff_audio_tags
av_codec_get_tag
av_mkv_set_next_edition
av_find_input_format

avutil-lav-52

av_free
av_mallocz
av_buffer_unref
av_buffer_realloc
av_buffer_ref
av_log_set_callback
av_dict_set
av_opt_set_int
av_dict_copy
av_rescale
av_asprintf
av_freep
av_reduce
av_dict_get
av_rescale_q
av_get_default_channel_layout
av_pix_fmt_desc_get
av_get_bits_per_pixel
av_get_bits_per_sample_fmt
av_get_pix_fmt_name
av_get_channel_layout_string

avcodec-lav-55

av_get_bits_per_sample
av_packet_get_side_data
av_free_packet
av_get_profile_name
avcodec_find_decoder
av_get_codec_tag_string
av_parser_init

libbluray

clpi_parse
clpi_free
bd_read
bd_tell
bd_get_title_size
bd_seek
bd_free_title_info
bd_close
bd_open
bd_get_titles
bd_get_title_info
bd_get_event
bd_get_clip_infos
bd_select_title
bd_get_clpi
bd_free_clpi
bd_find_seek_point
bd_get_current_chapter

kernel32

CreateSemaphoreW
LoadLibraryW
GetProcAddress
GetModuleHandleW
FreeLibrary
CreateThread
FlushFileBuffers
CreateFileW
ReadFile
WriteConsoleW
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
GetStringTypeW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
HeapSize
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStartupInfoW
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
ExitProcess
HeapDestroy
HeapCreate
IsProcessorFeaturePresent
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetACP
GetLocaleInfoW
GetStdHandle
WriteFile
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
CompareStringW
GetCPInfo
LCMapStringW
HeapAlloc
ExitThread
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetCommandLineA
HeapReAlloc
HeapFree
DecodePointer
EncodePointer
SetLastError
RaiseException
GetCurrentThreadId
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InterlockedDecrement
GetSystemInfo
CloseHandle
WaitForSingleObject
InterlockedExchange
ResetEvent
SetEvent
Sleep
GetModuleFileNameW
MultiByteToWideChar
WideCharToMultiByte
lstrlenW
lstrlenA
GetLastError
GetModuleFileNameA
GetVersionExW
DisableThreadLibraryCalls
lstrcmpW
InterlockedIncrement
CreateEventW
ReleaseSemaphore
GetCurrentProcess
GetTickCount

advapi32

RegDeleteKeyW
RegEnumKeyExW
RegOpenKeyExW
RegSetValueExW
RegSetValueW
RegCreateKeyW
RegCreateKeyExW
RegQueryValueExW
RegCloseKey

shell32

Shell_NotifyIconW

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
OpenConfiguration

Sections

.text
Size: 291KB - Virtual size: 291KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/LAVVideo.ax
.dll regsvr32 windows:5 windows x86 arch:x86

49a6e575eef51305e57f3e8111c095a5

Code Sign

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

07/06/2005, 08:09

Not After

30/05/2020, 10:48

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

10/05/2010, 00:00

Not After

10/05/2015, 23:59

Subject

CN=COMODO Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

24/08/2011, 00:00

Not After

30/05/2020, 10:48

Subject

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

f7:00:2f:49:81:e5:47:c9:8c:39:eb:b0:b6:75:39:d9
Certificate

Issuer

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

05/11/2012, 00:00

Not After

05/11/2014, 23:59

Subject

CN=Hendrik Leppkes,O=Hendrik Leppkes,POSTALCODE=22419,STREET=Wulffsblöcken 35,L=Hamburg,ST=Hamburg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

eb:15:ae:eb:41:a5:8c:b1:95:ad:ff:5b:34:d4:be:2e:3a:1d:9d:fe
Signer

Actual PE Digest

eb:15:ae:eb:41:a5:8c:b1:95:ad:ff:5b:34:d4:be:2e:3a:1d:9d:fe

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Multimedia\LAV\LAVFilters\bin_Win32\LAVVideo\LAVVideo.pdb

Imports

ole32

CoTaskMemAlloc
CoCreateInstance
CoTaskMemRealloc
CoUninitialize
CoFreeUnusedLibraries
CoInitialize
StringFromGUID2
CoTaskMemFree

gdi32

GetStockObject

user32

GetShellWindow
DestroyWindow
UnregisterClassW
DefWindowProcW
LoadIconW
CreateWindowExW
RegisterClassW
LoadCursorW
DispatchMessageW
LoadStringW
GetWindowRect
SetRect
GetDesktopWindow
MoveWindow
InvalidateRect
ShowWindow
SetWindowLongW
GetWindowLongW
SetWindowPos
DestroyIcon
GetMessageW
TranslateMessage
RegisterClassExW
LoadImageW
GetWindow
SetForegroundWindow
PostQuitMessage
EnumThreadWindows
GetCursorPos
TrackPopupMenu
PostMessageW
DestroyMenu
SendDlgItemMessageW
EnableWindow
GetDlgItem
SendMessageW
CreateDialogParamW

shlwapi

PathFindExtensionW
PathFindFileNameW
PathRemoveFileSpecW

comctl32

InitCommonControlsEx

d3d9

Direct3DCreate9

avutil-lav-52

av_get_pix_fmt_name
av_buffer_unref
av_free
av_malloc
av_buffer_create
av_get_cpu_flags
av_frame_ref
av_get_picture_type_char
av_reduce
av_frame_unref
av_realloc_f
av_frame_free
av_freep
av_mallocz
av_frame_alloc
av_log_set_callback
av_realloc
av_strdup
av_pix_fmt_desc_get
av_buffer_ref
av_rescale
av_frame_move_ref

avcodec-lav-55

av_parser_parse2
avcodec_register_all
avcodec_find_decoder
avcodec_alloc_context3
av_parser_init
ff_cropTbl
avcodec_open2
avcodec_decode_subtitle2
ff_vc1_pixel_aspect
avpriv_find_start_code
avcodec_flush_buffers
avcodec_decode_video2
avsubtitle_free
av_packet_new_side_data
av_init_packet
avcodec_close
av_parser_close

swscale-lav-2

sws_getCoefficients
sws_getColorspaceDetails
sws_scale
sws_getCachedContext
sws_freeContext
sws_setColorspaceDetails

avfilter-lav-3

avfilter_graph_create_filter
avfilter_graph_alloc
avfilter_inout_alloc
avfilter_get_by_name
avfilter_free
avfilter_graph_parse
avfilter_graph_config
av_buffersrc_write_frame
av_buffersink_get_frame
avfilter_register_all
avfilter_graph_free

kernel32

GetStringTypeW
LCMapStringW
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetStartupInfoW
GetFileType
SetHandleCount
SetThreadAffinityMask
VirtualProtect
GetProcessAffinityMask
ExitProcess
CreateTimerQueueTimer
DeleteTimerQueueTimer
CreateTimerQueue
InterlockedFlushSList
InterlockedPopEntrySList
QueryDepthSList
InterlockedPushEntrySList
InitializeSListHead
HeapDestroy
HeapCreate
HeapReAlloc
HeapSize
SetFilePointer
TlsSetValue
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetStdHandle
WriteFile
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
ExitThread
GetCurrentProcessId
QueryPerformanceCounter
RtlUnwind
GetCommandLineA
InitializeCriticalSectionAndSpinCount
GetThreadTimes
FreeLibraryAndExitThread
GetModuleHandleA
SwitchToThread
HeapAlloc
TlsGetValue
HeapFree
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
GetConsoleCP
GetConsoleMode
FlushFileBuffers
TlsAlloc
SetStdHandle
WriteConsoleW
SignalObjectAndWait
SleepEx
TlsFree
GetSystemInfo
FreeLibrary
LoadLibraryW
GetProcAddress
Sleep
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
InterlockedDecrement
GetModuleFileNameW
GetLastError
InitializeCriticalSection
DeleteCriticalSection
ResetEvent
CloseHandle
WaitForSingleObject
InterlockedExchange
SetEvent
WaitForMultipleObjects
lstrlenA
MultiByteToWideChar
LocalAlloc
lstrcmpW
CreateEventW
ReleaseSemaphore
VirtualFree
DuplicateHandle
GetCurrentProcess
GetCurrentThreadId
CreateSemaphoreW
VirtualAlloc
GetVersionExW
DisableThreadLibraryCalls
GetModuleHandleW
SetThreadPriority
GetThreadPriority
GetCurrentThread
GetTickCount
CreateThread
lstrlenW
GetModuleFileNameA
CreateFileW
RaiseException
SetLastError

advapi32

RegDeleteKeyW
RegEnumKeyExW
RegOpenKeyExW
RegSetValueExW
RegSetValueW
RegCreateKeyW
RegCreateKeyExW
RegQueryValueExW
RegDeleteValueW
RegCloseKey

oleaut32

OleCreatePropertyFrame

shell32

Shell_NotifyIconW

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
OpenConfiguration

Sections

.text
Size: 957KB - Virtual size: 956KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 41KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/LAVVideo.ax.new
.dll regsvr32 windows:5 windows x86 arch:x86

49a6e575eef51305e57f3e8111c095a5

Code Sign

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

07/06/2005, 08:09

Not After

30/05/2020, 10:48

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

10/05/2010, 00:00

Not After

10/05/2015, 23:59

Subject

CN=COMODO Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

24/08/2011, 00:00

Not After

30/05/2020, 10:48

Subject

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

f7:00:2f:49:81:e5:47:c9:8c:39:eb:b0:b6:75:39:d9
Certificate

Issuer

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

05/11/2012, 00:00

Not After

05/11/2014, 23:59

Subject

CN=Hendrik Leppkes,O=Hendrik Leppkes,POSTALCODE=22419,STREET=Wulffsblöcken 35,L=Hamburg,ST=Hamburg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

eb:15:ae:eb:41:a5:8c:b1:95:ad:ff:5b:34:d4:be:2e:3a:1d:9d:fe
Signer

Actual PE Digest

eb:15:ae:eb:41:a5:8c:b1:95:ad:ff:5b:34:d4:be:2e:3a:1d:9d:fe

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Multimedia\LAV\LAVFilters\bin_Win32\LAVVideo\LAVVideo.pdb

Imports

ole32

CoTaskMemAlloc
CoCreateInstance
CoTaskMemRealloc
CoUninitialize
CoFreeUnusedLibraries
CoInitialize
StringFromGUID2
CoTaskMemFree

gdi32

GetStockObject

user32

GetShellWindow
DestroyWindow
UnregisterClassW
DefWindowProcW
LoadIconW
CreateWindowExW
RegisterClassW
LoadCursorW
DispatchMessageW
LoadStringW
GetWindowRect
SetRect
GetDesktopWindow
MoveWindow
InvalidateRect
ShowWindow
SetWindowLongW
GetWindowLongW
SetWindowPos
DestroyIcon
GetMessageW
TranslateMessage
RegisterClassExW
LoadImageW
GetWindow
SetForegroundWindow
PostQuitMessage
EnumThreadWindows
GetCursorPos
TrackPopupMenu
PostMessageW
DestroyMenu
SendDlgItemMessageW
EnableWindow
GetDlgItem
SendMessageW
CreateDialogParamW

shlwapi

PathFindExtensionW
PathFindFileNameW
PathRemoveFileSpecW

comctl32

InitCommonControlsEx

d3d9

Direct3DCreate9

avutil-lav-52

av_get_pix_fmt_name
av_buffer_unref
av_free
av_malloc
av_buffer_create
av_get_cpu_flags
av_frame_ref
av_get_picture_type_char
av_reduce
av_frame_unref
av_realloc_f
av_frame_free
av_freep
av_mallocz
av_frame_alloc
av_log_set_callback
av_realloc
av_strdup
av_pix_fmt_desc_get
av_buffer_ref
av_rescale
av_frame_move_ref

avcodec-lav-55

av_parser_parse2
avcodec_register_all
avcodec_find_decoder
avcodec_alloc_context3
av_parser_init
ff_cropTbl
avcodec_open2
avcodec_decode_subtitle2
ff_vc1_pixel_aspect
avpriv_find_start_code
avcodec_flush_buffers
avcodec_decode_video2
avsubtitle_free
av_packet_new_side_data
av_init_packet
avcodec_close
av_parser_close

swscale-lav-2

sws_getCoefficients
sws_getColorspaceDetails
sws_scale
sws_getCachedContext
sws_freeContext
sws_setColorspaceDetails

avfilter-lav-3

avfilter_graph_create_filter
avfilter_graph_alloc
avfilter_inout_alloc
avfilter_get_by_name
avfilter_free
avfilter_graph_parse
avfilter_graph_config
av_buffersrc_write_frame
av_buffersink_get_frame
avfilter_register_all
avfilter_graph_free

kernel32

GetStringTypeW
LCMapStringW
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetStartupInfoW
GetFileType
SetHandleCount
SetThreadAffinityMask
VirtualProtect
GetProcessAffinityMask
ExitProcess
CreateTimerQueueTimer
DeleteTimerQueueTimer
CreateTimerQueue
InterlockedFlushSList
InterlockedPopEntrySList
QueryDepthSList
InterlockedPushEntrySList
InitializeSListHead
HeapDestroy
HeapCreate
HeapReAlloc
HeapSize
SetFilePointer
TlsSetValue
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetStdHandle
WriteFile
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
ExitThread
GetCurrentProcessId
QueryPerformanceCounter
RtlUnwind
GetCommandLineA
InitializeCriticalSectionAndSpinCount
GetThreadTimes
FreeLibraryAndExitThread
GetModuleHandleA
SwitchToThread
HeapAlloc
TlsGetValue
HeapFree
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
GetConsoleCP
GetConsoleMode
FlushFileBuffers
TlsAlloc
SetStdHandle
WriteConsoleW
SignalObjectAndWait
SleepEx
TlsFree
GetSystemInfo
FreeLibrary
LoadLibraryW
GetProcAddress
Sleep
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
InterlockedDecrement
GetModuleFileNameW
GetLastError
InitializeCriticalSection
DeleteCriticalSection
ResetEvent
CloseHandle
WaitForSingleObject
InterlockedExchange
SetEvent
WaitForMultipleObjects
lstrlenA
MultiByteToWideChar
LocalAlloc
lstrcmpW
CreateEventW
ReleaseSemaphore
VirtualFree
DuplicateHandle
GetCurrentProcess
GetCurrentThreadId
CreateSemaphoreW
VirtualAlloc
GetVersionExW
DisableThreadLibraryCalls
GetModuleHandleW
SetThreadPriority
GetThreadPriority
GetCurrentThread
GetTickCount
CreateThread
lstrlenW
GetModuleFileNameA
CreateFileW
RaiseException
SetLastError

advapi32

RegDeleteKeyW
RegEnumKeyExW
RegOpenKeyExW
RegSetValueExW
RegSetValueW
RegCreateKeyW
RegCreateKeyExW
RegQueryValueExW
RegDeleteValueW
RegCloseKey

oleaut32

OleCreatePropertyFrame

shell32

Shell_NotifyIconW

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
OpenConfiguration

Sections

.text
Size: 957KB - Virtual size: 956KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 41KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/Lagarith.dll
.dll windows:5 windows x86 arch:x86

90476a3346fd4faed5ad4cb9506f84de

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Documents and Settings\Lags.LAGS-TRXYZ5NCXS\My Documents\Lagarith_Source\Release\lagarith.pdb

Imports

winmm

DefDriverProc

shell32

ShellExecuteA

comctl32

InitCommonControlsEx

user32

LoadStringA
GetClientRect
SendMessageA
GetWindowLongA
CreateWindowExA
SendDlgItemMessageA
EndDialog
SetWindowPos
CheckDlgButton
IsDlgButtonChecked
EnableWindow
DialogBoxParamA
GetDlgItem

kernel32

LCMapStringW
GetLocaleInfoW
LoadLibraryW
InterlockedExchange
FreeLibrary
MultiByteToWideChar
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
EnterCriticalSection
IsValidCodePage
WaitForSingleObject
SetEvent
SetThreadPriority
WaitForMultipleObjects
GetPrivateProfileIntA
IsBadWritePtr
SignalObjectAndWait
WaitForMultipleObjectsEx
CreateEventA
CloseHandle
ResumeThread
CreateThread
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
FatalAppExitA
HeapReAlloc
GetCurrentThreadId
DecodePointer
GetCommandLineA
HeapAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
HeapSize
GetLastError
HeapFree
HeapQueryInformation
IsValidLocale
IsProcessorFeaturePresent
SetConsoleCtrlHandler
RaiseException
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
InterlockedDecrement
GetCurrentThread
GetProcAddress
Sleep
ExitProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
WriteFile
GetModuleFileNameW
LeaveCriticalSection

advapi32

RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey

Exports

Exports

DriverProc

Sections

.text
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

_TEXT64
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/Lagarith.dll.new
.dll windows:5 windows x86 arch:x86

90476a3346fd4faed5ad4cb9506f84de

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\Documents and Settings\Lags.LAGS-TRXYZ5NCXS\My Documents\Lagarith_Source\Release\lagarith.pdb

Imports

winmm

DefDriverProc

shell32

ShellExecuteA

comctl32

InitCommonControlsEx

user32

LoadStringA
GetClientRect
SendMessageA
GetWindowLongA
CreateWindowExA
SendDlgItemMessageA
EndDialog
SetWindowPos
CheckDlgButton
IsDlgButtonChecked
EnableWindow
DialogBoxParamA
GetDlgItem

kernel32

LCMapStringW
GetLocaleInfoW
LoadLibraryW
InterlockedExchange
FreeLibrary
MultiByteToWideChar
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
EnterCriticalSection
IsValidCodePage
WaitForSingleObject
SetEvent
SetThreadPriority
WaitForMultipleObjects
GetPrivateProfileIntA
IsBadWritePtr
SignalObjectAndWait
WaitForMultipleObjectsEx
CreateEventA
CloseHandle
ResumeThread
CreateThread
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
FatalAppExitA
HeapReAlloc
GetCurrentThreadId
DecodePointer
GetCommandLineA
HeapAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
HeapSize
GetLastError
HeapFree
HeapQueryInformation
IsValidLocale
IsProcessorFeaturePresent
SetConsoleCtrlHandler
RaiseException
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
InterlockedDecrement
GetCurrentThread
GetProcAddress
Sleep
ExitProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
WriteFile
GetModuleFileNameW
LeaveCriticalSection

advapi32

RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey

Exports

Exports

DriverProc

Sections

.text
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

_TEXT64
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/LameACM.acm.new
.dll windows:5 windows x86 arch:x86

0f5013cb4ced28168b43f92a1813decc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shell32

ShellExecuteA

url

TranslateURLA

advapi32

RegQueryValueExA
RegOpenKeyExA

user32

CheckDlgButton
EnableWindow
IsDlgButtonChecked
RemovePropA
SetWindowPos
CreateWindowExA
SetPropA
SendMessageA
GetWindowLongA
DialogBoxParamA
LoadIconA
LoadCursorA
SetWindowTextA
SetCursor
wsprintfA
PtInRect
GetWindowRect
GetDlgItem
GetCursorPos
EndDialog
GetPropA

kernel32

SetEndOfFile
GetProcessHeap
InitializeCriticalSection
GetACP
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
ReadFile
FlushFileBuffers
GetConsoleMode
GetConsoleCP
SetFilePointer
GetThreadLocale
FormatMessageA
GetLocaleInfoW
HeapSize
InitializeCriticalSectionAndSpinCount
LoadLibraryA
InterlockedExchange
lstrcpyW
MultiByteToWideChar
GetModuleFileNameA
CreateFileA
CloseHandle
LocalAlloc
LocalFree
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetCurrentThreadId
GetCommandLineA
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetLastError
InterlockedDecrement
HeapAlloc
HeapFree
GetModuleHandleA
GetCPInfo
GetOEMCP
IsValidCodePage
Sleep
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
WriteFile
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID

winmm

GetDriverModuleHandle
DefDriverProc

Exports

Exports

DriverProc

Sections

.text
Size: 455KB - Virtual size: 455KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text1
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 145KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.trace
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/OptimFROG.dll
.dll windows:4 windows x86 arch:x86

268c7998831e868ca3c8dcee7cd68fb1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
CreateFileA
GetFileType
ReadFile
GetStdHandle
CloseHandle
SetFilePointer
GetFileSize
GetFileTime
HeapAlloc
HeapFree
RtlUnwind
RaiseException
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
ExitProcess
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcessHeap
DeleteCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
WriteFile
GetModuleFileNameA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
GetStartupInfoA
GetConsoleCP
GetConsoleMode
LoadLibraryA
InitializeCriticalSection
Sleep
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
HeapSize
SetEndOfFile

Exports

Exports

OptimFROG_close
OptimFROG_createInstance
OptimFROG_decodeFile
OptimFROG_destroyInstance
OptimFROG_freeTags
OptimFROG_getInfo
OptimFROG_getPos
OptimFROG_getTags
OptimFROG_getVersion
OptimFROG_infoFile
OptimFROG_open
OptimFROG_openExt
OptimFROG_read
OptimFROG_readHead
OptimFROG_readTail
OptimFROG_recoverableErrors
OptimFROG_seekPoint
OptimFROG_seekTime
OptimFROG_seekable

Sections

.text
Size: 156KB - Virtual size: 154KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/OptimFROG.dll.new
.dll windows:4 windows x86 arch:x86

268c7998831e868ca3c8dcee7cd68fb1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
CreateFileA
GetFileType
ReadFile
GetStdHandle
CloseHandle
SetFilePointer
GetFileSize
GetFileTime
HeapAlloc
HeapFree
RtlUnwind
RaiseException
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
ExitProcess
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcessHeap
DeleteCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
WriteFile
GetModuleFileNameA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
GetStartupInfoA
GetConsoleCP
GetConsoleMode
LoadLibraryA
InitializeCriticalSection
Sleep
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
HeapSize
SetEndOfFile

Exports

Exports

OptimFROG_close
OptimFROG_createInstance
OptimFROG_decodeFile
OptimFROG_destroyInstance
OptimFROG_freeTags
OptimFROG_getInfo
OptimFROG_getPos
OptimFROG_getTags
OptimFROG_getVersion
OptimFROG_infoFile
OptimFROG_open
OptimFROG_openExt
OptimFROG_read
OptimFROG_readHead
OptimFROG_readTail
OptimFROG_recoverableErrors
OptimFROG_seekPoint
OptimFROG_seekTime
OptimFROG_seekable

Sections

.text
Size: 156KB - Virtual size: 154KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/TomsMoComp_ff.dll
.dll windows:5 windows x86 arch:x86

8b8ea27d5e141738b4c6a0de5a392d44

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\SVN ffdshow\trunk\obj\Release_Win32_VC2010\TomsMoComp_ff.pdb

Imports

kernel32

GetLastError
HeapFree
HeapAlloc
GetCurrentThreadId
DecodePointer
GetCommandLineA
IsProcessorFeaturePresent
HeapCreate
HeapDestroy
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
EncodePointer
RaiseException
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
LeaveCriticalSection
EnterCriticalSection
RtlUnwind
LoadLibraryW
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
LCMapStringW
MultiByteToWideChar
GetStringTypeW

Exports

Exports

createI
getVersion

Sections

.text
Size: 239KB - Virtual size: 238KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/TomsMoComp_ff.dll.new
.dll windows:5 windows x86 arch:x86

8b8ea27d5e141738b4c6a0de5a392d44

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\SVN ffdshow\trunk\obj\Release_Win32_VC2010\TomsMoComp_ff.pdb

Imports

kernel32

GetLastError
HeapFree
HeapAlloc
GetCurrentThreadId
DecodePointer
GetCommandLineA
IsProcessorFeaturePresent
HeapCreate
HeapDestroy
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
EncodePointer
RaiseException
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
LeaveCriticalSection
EnterCriticalSection
RtlUnwind
LoadLibraryW
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
LCMapStringW
MultiByteToWideChar
GetStringTypeW

Exports

Exports

createI
getVersion

Sections

.text
Size: 239KB - Virtual size: 238KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/VSFilter.dll
.dll regsvr32 windows:5 windows x86 arch:x86

39bde0051beb4452a4c9bf5972c0771a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

H:\progs\Compiling\mpc-hc\bin\Filters_x86\VSFilter.pdb

Imports

kernel32

lstrcmpA
LoadLibraryExW
GetLocaleInfoW
GetSystemDefaultUILanguage
ConvertDefaultLocale
GetUserDefaultUILanguage
GetFileAttributesExW
GetFileSizeEx
DeleteFileW
LockFile
UnlockFile
GetFileSize
LocalAlloc
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
RtlUnwind
EncodePointer
DecodePointer
HeapFree
HeapAlloc
GetCommandLineA
HeapReAlloc
ExitProcess
DeleteFileA
GetPrivateProfileStringW
GetSystemTimeAsFileTime
HeapQueryInformation
HeapSize
SetStdHandle
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetACP
GetOEMCP
IsValidCodePage
IsProcessorFeaturePresent
GetStringTypeW
HeapCreate
HeapDestroy
SetHandleCount
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
WriteConsoleW
SetEnvironmentVariableA
GetProcessHeap
WritePrivateProfileStringW
GetPrivateProfileIntW
GlobalFlags
FreeResource
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
InitializeCriticalSectionAndSpinCount
ActivateActCtx
ReleaseActCtx
CreateActCtxW
DeactivateActCtx
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
SetErrorMode
DisableThreadLibraryCalls
lstrlenA
GetTickCount
VirtualAlloc
CreateSemaphoreW
GetCurrentThreadId
DuplicateHandle
lstrcmpW
VirtualFree
ReleaseSemaphore
ResetEvent
InterlockedDecrement
InterlockedIncrement
MoveFileW
GetCurrentProcess
GetCurrentThread
FindFirstFileA
FindNextFileA
CreateDirectoryW
CreateDirectoryA
LoadLibraryA
SetFileAttributesW
SetFileAttributesA
GetFileAttributesA
GetSystemTime
FileTimeToLocalFileTime
FileTimeToSystemTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetCPInfo
IsDBCSLeadByte
WriteFile
SetFileTime
GetStdHandle
ReadFile
CreateFileA
GetFileType
GetFileTime
SetEndOfFile
SetFilePointer
FlushFileBuffers
GetModuleFileNameA
GetFullPathNameA
GetCurrentProcessId
DebugBreak
GetFullPathNameW
GetTempFileNameW
GetTempPathW
IsDBCSLeadByteEx
CreateFileW
DeviceIoControl
GetVolumeInformationW
FindFirstFileW
FindNextFileW
FindClose
RaiseException
GetSystemInfo
GetStartupInfoW
SetThreadPriority
WaitForMultipleObjects
FindNextChangeNotification
Sleep
TerminateThread
FindCloseChangeNotification
FindFirstChangeNotificationW
MulDiv
CreateThread
SetEvent
CreateEventW
InterlockedExchange
WaitForSingleObject
CloseHandle
WideCharToMultiByte
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
lstrlenW
GetVersionExW
lstrcpyW
GetSystemDirectoryW
OutputDebugStringA
GetModuleFileNameW
LoadLibraryW
FreeLibrary
MultiByteToWideChar
GetLastError
SetLastError
FindResourceW
LoadResource
LockResource
SizeofResource
GetVersion
GetFileAttributesW
GetProcAddress
GetModuleHandleW
GetModuleHandleA
QueryPerformanceCounter

user32

SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
DestroyMenu
SetCursor
GetWindowThreadProcessId
IsWindowEnabled
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
TabbedTextOutW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
GetCapture
SetWindowsHookExW
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetFocus
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
GetTopWindow
GetMessageTime
GetMessagePos
MonitorFromWindow
TrackPopupMenu
GetKeyState
SetMenu
IsWindowVisible
ValidateRect
UpdateWindow
GetClassInfoExW
RegisterClassW
ScreenToClient
GetDlgCtrlID
CallWindowProcW
PtInRect
GetMenuState
ShowWindow
MoveWindow
PeekMessageW
CharUpperW
CharUpperA
IsDialogMessageW
SetWindowTextW
CharLowerA
CharToOemA
CharToOemBuffW
OemToCharBuffA
OemToCharA
CharLowerBuffW
UnionRect
MessageBoxW
EqualRect
InflateRect
SetRect
IsRectEmpty
RegisterWindowMessageW
GetCursorPos
GetMessageW
TranslateMessage
DispatchMessageW
LoadIconW
DestroyIcon
SetForegroundWindow
RealChildWindowFromPoint
EndDialog
GetNextDlgTabItem
CreateDialogIndirectParamW
KillTimer
SetTimer
UnregisterClassW
AppendMenuW
CreatePopupMenu
UnhookWindowsHookEx
PostQuitMessage
PostMessageW
CallNextHookEx
InvalidateRect
SetDlgItemTextW
GetDlgItem
GetDesktopWindow
GetWindowRect
DestroyWindow
CreateDialogParamW
EnableWindow
GetDC
ReleaseDC
DrawTextW
IntersectRect
OffsetRect
CreateWindowExW
AdjustWindowRectEx
RedrawWindow
SetWindowPos
GetWindowLongW
SetWindowLongW
IsWindow
GetActiveWindow
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetMenu
GetSysColorBrush
GetSystemMetrics
EnumDisplayMonitors
GetMonitorInfoW
GetParent
MapWindowPoints
GetClientRect
SetRectEmpty
CopyRect
SystemParametersInfoW
LoadCursorW
GetSysColor
GetClassNameW
DefWindowProcW
GetClassInfoW
SendMessageW
GetWindow

gdi32

SetWindowExtEx
ScaleWindowExtEx
CreateBitmap
SetViewportExtEx
ScaleViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutW
RectVisible
PtVisible
GetClipBox
CreateDIBitmap
RestoreDC
SaveDC
SetBkColor
CloseFigure
EndPath
GetPath
AbortPath
BeginPath
TextOutW
AddFontResourceW
TranslateCharsetInfo
GetTextExtentPoint32W
DeleteDC
CreateDIBSection
SelectObject
SetTextColor
SetBkMode
SetMapMode
DeleteObject
GetTextCharsetInfo
EnumFontFamiliesW
GetTextMetricsW
GetDeviceCaps
CreateCompatibleDC
GetObjectW
CreateFontIndirectW
CreatePatternBrush
CreateSolidBrush
CreatePen
GetStockObject

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

advapi32

RegSetValueW
RegDeleteKeyW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegDeleteValueW
RegCreateKeyW
RegCloseKey
RegEnumKeyExW
SetFileSecurityW
SetFileSecurityA
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
RegQueryValueExW

shell32

SHGetPathFromIDListW
SHBrowseForFolderW
ShellExecuteW
Shell_NotifyIconW

shlwapi

PathRemoveFileSpecW
PathStripToRootW
PathFindExtensionW
PathFindFileNameW
PathIsUNCW
UrlUnescapeW

ole32

StringFromGUID2
CLSIDFromString
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
CoUninitialize
CoInitialize
CoCreateInstance
CoFreeUnusedLibraries
CoInitializeEx
CoCreateGuid

oleaut32

SysStringLen
SysFreeString
SysAllocString
OleCreatePropertyFrame
VariantInit
VariantClear
VarBstrCmp
VariantChangeType

wininet

InternetWriteFile
InternetOpenUrlW
InternetCrackUrlW
InternetCanonicalizeUrlW
InternetQueryOptionW
InternetQueryDataAvailable
InternetCloseHandle
InternetGetLastResponseInfoW
InternetOpenW
InternetSetStatusCallbackW
InternetSetFilePointer
InternetReadFile

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

Exports

Exports

DirectVobSub
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
VirtualdubFilterModuleDeinit
VirtualdubFilterModuleInit2
_AvisynthPluginInit2@4
_AvisynthPluginInit@4
csri_close
csri_open_file
csri_open_mem
csri_query_ext
csri_render
csri_renderer_byname
csri_renderer_default
csri_renderer_info
csri_renderer_next
csri_request_fmt

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 51KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/VSFilter.dll.new
.dll regsvr32 windows:5 windows x86 arch:x86

39bde0051beb4452a4c9bf5972c0771a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

H:\progs\Compiling\mpc-hc\bin\Filters_x86\VSFilter.pdb

Imports

kernel32

lstrcmpA
LoadLibraryExW
GetLocaleInfoW
GetSystemDefaultUILanguage
ConvertDefaultLocale
GetUserDefaultUILanguage
GetFileAttributesExW
GetFileSizeEx
DeleteFileW
LockFile
UnlockFile
GetFileSize
LocalAlloc
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
RtlUnwind
EncodePointer
DecodePointer
HeapFree
HeapAlloc
GetCommandLineA
HeapReAlloc
ExitProcess
DeleteFileA
GetPrivateProfileStringW
GetSystemTimeAsFileTime
HeapQueryInformation
HeapSize
SetStdHandle
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetACP
GetOEMCP
IsValidCodePage
IsProcessorFeaturePresent
GetStringTypeW
HeapCreate
HeapDestroy
SetHandleCount
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
WriteConsoleW
SetEnvironmentVariableA
GetProcessHeap
WritePrivateProfileStringW
GetPrivateProfileIntW
GlobalFlags
FreeResource
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
InitializeCriticalSectionAndSpinCount
ActivateActCtx
ReleaseActCtx
CreateActCtxW
DeactivateActCtx
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
SetErrorMode
DisableThreadLibraryCalls
lstrlenA
GetTickCount
VirtualAlloc
CreateSemaphoreW
GetCurrentThreadId
DuplicateHandle
lstrcmpW
VirtualFree
ReleaseSemaphore
ResetEvent
InterlockedDecrement
InterlockedIncrement
MoveFileW
GetCurrentProcess
GetCurrentThread
FindFirstFileA
FindNextFileA
CreateDirectoryW
CreateDirectoryA
LoadLibraryA
SetFileAttributesW
SetFileAttributesA
GetFileAttributesA
GetSystemTime
FileTimeToLocalFileTime
FileTimeToSystemTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetCPInfo
IsDBCSLeadByte
WriteFile
SetFileTime
GetStdHandle
ReadFile
CreateFileA
GetFileType
GetFileTime
SetEndOfFile
SetFilePointer
FlushFileBuffers
GetModuleFileNameA
GetFullPathNameA
GetCurrentProcessId
DebugBreak
GetFullPathNameW
GetTempFileNameW
GetTempPathW
IsDBCSLeadByteEx
CreateFileW
DeviceIoControl
GetVolumeInformationW
FindFirstFileW
FindNextFileW
FindClose
RaiseException
GetSystemInfo
GetStartupInfoW
SetThreadPriority
WaitForMultipleObjects
FindNextChangeNotification
Sleep
TerminateThread
FindCloseChangeNotification
FindFirstChangeNotificationW
MulDiv
CreateThread
SetEvent
CreateEventW
InterlockedExchange
WaitForSingleObject
CloseHandle
WideCharToMultiByte
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
lstrlenW
GetVersionExW
lstrcpyW
GetSystemDirectoryW
OutputDebugStringA
GetModuleFileNameW
LoadLibraryW
FreeLibrary
MultiByteToWideChar
GetLastError
SetLastError
FindResourceW
LoadResource
LockResource
SizeofResource
GetVersion
GetFileAttributesW
GetProcAddress
GetModuleHandleW
GetModuleHandleA
QueryPerformanceCounter

user32

SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
DestroyMenu
SetCursor
GetWindowThreadProcessId
IsWindowEnabled
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
TabbedTextOutW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
GetCapture
SetWindowsHookExW
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetFocus
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
GetTopWindow
GetMessageTime
GetMessagePos
MonitorFromWindow
TrackPopupMenu
GetKeyState
SetMenu
IsWindowVisible
ValidateRect
UpdateWindow
GetClassInfoExW
RegisterClassW
ScreenToClient
GetDlgCtrlID
CallWindowProcW
PtInRect
GetMenuState
ShowWindow
MoveWindow
PeekMessageW
CharUpperW
CharUpperA
IsDialogMessageW
SetWindowTextW
CharLowerA
CharToOemA
CharToOemBuffW
OemToCharBuffA
OemToCharA
CharLowerBuffW
UnionRect
MessageBoxW
EqualRect
InflateRect
SetRect
IsRectEmpty
RegisterWindowMessageW
GetCursorPos
GetMessageW
TranslateMessage
DispatchMessageW
LoadIconW
DestroyIcon
SetForegroundWindow
RealChildWindowFromPoint
EndDialog
GetNextDlgTabItem
CreateDialogIndirectParamW
KillTimer
SetTimer
UnregisterClassW
AppendMenuW
CreatePopupMenu
UnhookWindowsHookEx
PostQuitMessage
PostMessageW
CallNextHookEx
InvalidateRect
SetDlgItemTextW
GetDlgItem
GetDesktopWindow
GetWindowRect
DestroyWindow
CreateDialogParamW
EnableWindow
GetDC
ReleaseDC
DrawTextW
IntersectRect
OffsetRect
CreateWindowExW
AdjustWindowRectEx
RedrawWindow
SetWindowPos
GetWindowLongW
SetWindowLongW
IsWindow
GetActiveWindow
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetMenu
GetSysColorBrush
GetSystemMetrics
EnumDisplayMonitors
GetMonitorInfoW
GetParent
MapWindowPoints
GetClientRect
SetRectEmpty
CopyRect
SystemParametersInfoW
LoadCursorW
GetSysColor
GetClassNameW
DefWindowProcW
GetClassInfoW
SendMessageW
GetWindow

gdi32

SetWindowExtEx
ScaleWindowExtEx
CreateBitmap
SetViewportExtEx
ScaleViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutW
RectVisible
PtVisible
GetClipBox
CreateDIBitmap
RestoreDC
SaveDC
SetBkColor
CloseFigure
EndPath
GetPath
AbortPath
BeginPath
TextOutW
AddFontResourceW
TranslateCharsetInfo
GetTextExtentPoint32W
DeleteDC
CreateDIBSection
SelectObject
SetTextColor
SetBkMode
SetMapMode
DeleteObject
GetTextCharsetInfo
EnumFontFamiliesW
GetTextMetricsW
GetDeviceCaps
CreateCompatibleDC
GetObjectW
CreateFontIndirectW
CreatePatternBrush
CreateSolidBrush
CreatePen
GetStockObject

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

advapi32

RegSetValueW
RegDeleteKeyW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegDeleteValueW
RegCreateKeyW
RegCloseKey
RegEnumKeyExW
SetFileSecurityW
SetFileSecurityA
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
RegQueryValueExW

shell32

SHGetPathFromIDListW
SHBrowseForFolderW
ShellExecuteW
Shell_NotifyIconW

shlwapi

PathRemoveFileSpecW
PathStripToRootW
PathFindExtensionW
PathFindFileNameW
PathIsUNCW
UrlUnescapeW

ole32

StringFromGUID2
CLSIDFromString
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
CoUninitialize
CoInitialize
CoCreateInstance
CoFreeUnusedLibraries
CoInitializeEx
CoCreateGuid

oleaut32

SysStringLen
SysFreeString
SysAllocString
OleCreatePropertyFrame
VariantInit
VariantClear
VarBstrCmp
VariantChangeType

wininet

InternetWriteFile
InternetOpenUrlW
InternetCrackUrlW
InternetCanonicalizeUrlW
InternetQueryOptionW
InternetQueryDataAvailable
InternetCloseHandle
InternetGetLastResponseInfoW
InternetOpenW
InternetSetStatusCallbackW
InternetSetFilePointer
InternetReadFile

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

Exports

Exports

DirectVobSub
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
VirtualdubFilterModuleDeinit
VirtualdubFilterModuleInit2
_AvisynthPluginInit2@4
_AvisynthPluginInit@4
csri_close
csri_open_file
csri_open_mem
csri_query_ext
csri_render
csri_renderer_byname
csri_renderer_default
csri_renderer_info
csri_renderer_next
csri_request_fmt

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 51KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/avcodec-lav-55.dll
.dll windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 5.4MB - Virtual size: 5.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rodata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4.8MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 1024B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 1024B - Virtual size: 697B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 512B - Virtual size: 304B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 512B - Virtual size: 77B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/92
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/avi.dll
.dll regsvr32 windows:5 windows x86 arch:x86

137c2204050ee4bb5202bad653832958

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadResource
SizeofResource
LoadLibraryExW
MultiByteToWideChar
FreeLibrary
GetThreadLocale
SetThreadLocale
GetModuleFileNameW
InterlockedDecrement
InterlockedIncrement
lstrcmpiW
GetModuleHandleW
GetProcAddress
GetLastError
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
FindResourceW
lstrlenW
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
lstrlenA
GetTickCount
CloseHandle
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
GetCurrentThreadId
GetCommandLineA
VirtualFree
VirtualAlloc
HeapCreate
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
VirtualQuery
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetModuleHandleA
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetLocaleInfoA
SetFilePointer
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

user32

CharNextW

advapi32

RegQueryInfoKeyW
RegDeleteKeyW
RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegEnumKeyExW
RegSetValueExW

ole32

CoTaskMemRealloc
CoTaskMemFree
CoCreateInstance
StringFromGUID2
CoTaskMemAlloc

oleaut32

SysStringLen
SafeArrayCreate
SafeArrayAccessData
SafeArrayDestroy
VariantClear
SysAllocStringLen
VariantChangeType
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString
SafeArrayUnaccessData

mkunicode

Utf8ToUtf16

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/avi.dll.new
.dll regsvr32 windows:5 windows x86 arch:x86

137c2204050ee4bb5202bad653832958

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadResource
SizeofResource
LoadLibraryExW
MultiByteToWideChar
FreeLibrary
GetThreadLocale
SetThreadLocale
GetModuleFileNameW
InterlockedDecrement
InterlockedIncrement
lstrcmpiW
GetModuleHandleW
GetProcAddress
GetLastError
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
FindResourceW
lstrlenW
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
lstrlenA
GetTickCount
CloseHandle
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
GetCurrentThreadId
GetCommandLineA
VirtualFree
VirtualAlloc
HeapCreate
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
VirtualQuery
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetModuleHandleA
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetLocaleInfoA
SetFilePointer
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

user32

CharNextW

advapi32

RegQueryInfoKeyW
RegDeleteKeyW
RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegEnumKeyExW
RegSetValueExW

ole32

CoTaskMemRealloc
CoTaskMemFree
CoCreateInstance
StringFromGUID2
CoTaskMemAlloc

oleaut32

SysStringLen
SafeArrayCreate
SafeArrayAccessData
SafeArrayDestroy
VariantClear
SysAllocStringLen
VariantChangeType
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString
SafeArrayUnaccessData

mkunicode

Utf8ToUtf16

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/avs.dll
.dll regsvr32 windows:5 windows x86 arch:x86

6b20afe02d526ed71972f2d1712f0ea1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

EnterCriticalSection
lstrcmpiW
GetProcAddress
GetModuleHandleA
GetThreadLocale
GetLastError
SetThreadLocale
RaiseException
lstrlenW
MultiByteToWideChar
GetModuleFileNameW
LeaveCriticalSection
SizeofResource
InitializeCriticalSection
GetModuleHandleW
InterlockedDecrement
InterlockedIncrement
LoadLibraryExW
LoadResource
FreeLibrary
DeleteCriticalSection
FindResourceW
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
lstrlenA
GetTickCount
CloseHandle
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
VirtualFree
VirtualAlloc
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetLocaleInfoA
SetFilePointer
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualQuery

user32

CharNextW

advapi32

RegSetValueExW
RegCreateKeyExW
RegQueryInfoKeyW
RegDeleteKeyW
RegDeleteValueW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey

ole32

CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
StringFromGUID2

oleaut32

VariantClear
VariantInit
SysAllocStringLen
SysFreeString
VarUI4FromStr
SafeArrayCreate
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayDestroy
VariantChangeType

mkunicode

Utf8ToUtf16

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/avs.dll.new
.dll regsvr32 windows:5 windows x86 arch:x86

6b20afe02d526ed71972f2d1712f0ea1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

EnterCriticalSection
lstrcmpiW
GetProcAddress
GetModuleHandleA
GetThreadLocale
GetLastError
SetThreadLocale
RaiseException
lstrlenW
MultiByteToWideChar
GetModuleFileNameW
LeaveCriticalSection
SizeofResource
InitializeCriticalSection
GetModuleHandleW
InterlockedDecrement
InterlockedIncrement
LoadLibraryExW
LoadResource
FreeLibrary
DeleteCriticalSection
FindResourceW
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
lstrlenA
GetTickCount
CloseHandle
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
VirtualFree
VirtualAlloc
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetLocaleInfoA
SetFilePointer
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualQuery

user32

CharNextW

advapi32

RegSetValueExW
RegCreateKeyExW
RegQueryInfoKeyW
RegDeleteKeyW
RegDeleteValueW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey

ole32

CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
StringFromGUID2

oleaut32

VariantClear
VariantInit
SysAllocStringLen
SysFreeString
VarUI4FromStr
SafeArrayCreate
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayDestroy
VariantChangeType

mkunicode

Utf8ToUtf16

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/avss.dll
.dll windows:5 windows x86 arch:x86

d09205a0efe7fb1cd0791fba2a764d7f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentProcessId
CloseHandle
CreateEventW
ResetEvent
GetLastError
MultiByteToWideChar
SetEvent
WaitForSingleObject
InterlockedDecrement
InterlockedIncrement
lstrlenA
RaiseException
GetTickCount
GetProcAddress
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
Sleep
ExitProcess
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
RtlUnwind
SetFilePointer
GetConsoleCP
GetConsoleMode
LoadLibraryA
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
FlushFileBuffers
GetModuleHandleA

ole32

CreateItemMoniker
CoCreateInstance
CoTaskMemFree
GetRunningObjectTable

oleaut32

VariantClear

Exports

Exports

_AvisynthPluginInit2@4

Sections

.text
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/avss.dll.new
.dll windows:5 windows x86 arch:x86

d09205a0efe7fb1cd0791fba2a764d7f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentProcessId
CloseHandle
CreateEventW
ResetEvent
GetLastError
MultiByteToWideChar
SetEvent
WaitForSingleObject
InterlockedDecrement
InterlockedIncrement
lstrlenA
RaiseException
GetTickCount
GetProcAddress
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
Sleep
ExitProcess
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
RtlUnwind
SetFilePointer
GetConsoleCP
GetConsoleMode
LoadLibraryA
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
FlushFileBuffers
GetModuleHandleA

ole32

CreateItemMoniker
CoCreateInstance
CoTaskMemFree
GetRunningObjectTable

oleaut32

VariantClear

Exports

Exports

_AvisynthPluginInit2@4

Sections

.text
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/bass.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

BASS_Apply3D
BASS_ChannelBytes2Seconds
BASS_ChannelFlags
BASS_ChannelGet3DAttributes
BASS_ChannelGet3DPosition
BASS_ChannelGetAttribute
BASS_ChannelGetData
BASS_ChannelGetDevice
BASS_ChannelGetInfo
BASS_ChannelGetLength
BASS_ChannelGetLevel
BASS_ChannelGetPosition
BASS_ChannelGetTags
BASS_ChannelIsActive
BASS_ChannelIsSliding
BASS_ChannelLock
BASS_ChannelPause
BASS_ChannelPlay
BASS_ChannelRemoveDSP
BASS_ChannelRemoveFX
BASS_ChannelRemoveLink
BASS_ChannelRemoveSync
BASS_ChannelSeconds2Bytes
BASS_ChannelSet3DAttributes
BASS_ChannelSet3DPosition
BASS_ChannelSetAttribute
BASS_ChannelSetDSP
BASS_ChannelSetDevice
BASS_ChannelSetFX
BASS_ChannelSetLink
BASS_ChannelSetPosition
BASS_ChannelSetSync
BASS_ChannelSlideAttribute
BASS_ChannelStop
BASS_ChannelUpdate
BASS_ErrorGetCode
BASS_FXGetParameters
BASS_FXReset
BASS_FXSetParameters
BASS_Free
BASS_Get3DFactors
BASS_Get3DPosition
BASS_GetCPU
BASS_GetConfig
BASS_GetConfigPtr
BASS_GetDSoundObject
BASS_GetDevice
BASS_GetDeviceInfo
BASS_GetEAXParameters
BASS_GetInfo
BASS_GetVersion
BASS_GetVolume
BASS_Init
BASS_MusicFree
BASS_MusicLoad
BASS_Pause
BASS_PluginFree
BASS_PluginGetInfo
BASS_PluginLoad
BASS_RecordFree
BASS_RecordGetDevice
BASS_RecordGetDeviceInfo
BASS_RecordGetInfo
BASS_RecordGetInput
BASS_RecordGetInputName
BASS_RecordInit
BASS_RecordSetDevice
BASS_RecordSetInput
BASS_RecordStart
BASS_SampleCreate
BASS_SampleFree
BASS_SampleGetChannel
BASS_SampleGetChannels
BASS_SampleGetData
BASS_SampleGetInfo
BASS_SampleLoad
BASS_SampleSetData
BASS_SampleSetInfo
BASS_SampleStop
BASS_Set3DFactors
BASS_Set3DPosition
BASS_SetConfig
BASS_SetConfigPtr
BASS_SetDevice
BASS_SetEAXParameters
BASS_SetVolume
BASS_Start
BASS_Stop
BASS_StreamCreate
BASS_StreamCreateFile
BASS_StreamCreateFileUser
BASS_StreamCreateURL
BASS_StreamFree
BASS_StreamGetFilePosition
BASS_StreamPutData
BASS_StreamPutFileData
BASS_Update
_

Sections

Size: 98KB - Virtual size: 284KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 568B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
$SYSDIR/bass.dll.new
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

BASS_Apply3D
BASS_ChannelBytes2Seconds
BASS_ChannelFlags
BASS_ChannelGet3DAttributes
BASS_ChannelGet3DPosition
BASS_ChannelGetAttribute
BASS_ChannelGetData
BASS_ChannelGetDevice
BASS_ChannelGetInfo
BASS_ChannelGetLength
BASS_ChannelGetLevel
BASS_ChannelGetPosition
BASS_ChannelGetTags
BASS_ChannelIsActive
BASS_ChannelIsSliding
BASS_ChannelLock
BASS_ChannelPause
BASS_ChannelPlay
BASS_ChannelRemoveDSP
BASS_ChannelRemoveFX
BASS_ChannelRemoveLink
BASS_ChannelRemoveSync
BASS_ChannelSeconds2Bytes
BASS_ChannelSet3DAttributes
BASS_ChannelSet3DPosition
BASS_ChannelSetAttribute
BASS_ChannelSetDSP
BASS_ChannelSetDevice
BASS_ChannelSetFX
BASS_ChannelSetLink
BASS_ChannelSetPosition
BASS_ChannelSetSync
BASS_ChannelSlideAttribute
BASS_ChannelStop
BASS_ChannelUpdate
BASS_ErrorGetCode
BASS_FXGetParameters
BASS_FXReset
BASS_FXSetParameters
BASS_Free
BASS_Get3DFactors
BASS_Get3DPosition
BASS_GetCPU
BASS_GetConfig
BASS_GetConfigPtr
BASS_GetDSoundObject
BASS_GetDevice
BASS_GetDeviceInfo
BASS_GetEAXParameters
BASS_GetInfo
BASS_GetVersion
BASS_GetVolume
BASS_Init
BASS_MusicFree
BASS_MusicLoad
BASS_Pause
BASS_PluginFree
BASS_PluginGetInfo
BASS_PluginLoad
BASS_RecordFree
BASS_RecordGetDevice
BASS_RecordGetDeviceInfo
BASS_RecordGetInfo
BASS_RecordGetInput
BASS_RecordGetInputName
BASS_RecordInit
BASS_RecordSetDevice
BASS_RecordSetInput
BASS_RecordStart
BASS_SampleCreate
BASS_SampleFree
BASS_SampleGetChannel
BASS_SampleGetChannels
BASS_SampleGetData
BASS_SampleGetInfo
BASS_SampleLoad
BASS_SampleSetData
BASS_SampleSetInfo
BASS_SampleStop
BASS_Set3DFactors
BASS_Set3DPosition
BASS_SetConfig
BASS_SetConfigPtr
BASS_SetDevice
BASS_SetEAXParameters
BASS_SetVolume
BASS_Start
BASS_Stop
BASS_StreamCreate
BASS_StreamCreateFile
BASS_StreamCreateFileUser
BASS_StreamCreateURL
BASS_StreamFree
BASS_StreamGetFilePosition
BASS_StreamPutData
BASS_StreamPutFileData
BASS_Update
_

Sections

Size: 98KB - Virtual size: 284KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 568B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
$SYSDIR/bass_aac.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

BASS_AAC_StreamCreateFile
BASS_AAC_StreamCreateFileUser
BASS_AAC_StreamCreateURL
BASS_MP4_StreamCreateFile
BASS_MP4_StreamCreateFileUser
BASSplugin

Sections

Size: 142KB - Virtual size: 248KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 728B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
$SYSDIR/bass_aac.dll.new
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

BASS_AAC_StreamCreateFile
BASS_AAC_StreamCreateFileUser
BASS_AAC_StreamCreateURL
BASS_MP4_StreamCreateFile
BASS_MP4_StreamCreateFileUser
BASSplugin

Sections

Size: 142KB - Virtual size: 248KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 728B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
$SYSDIR/bass_alac.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

BASS_ALAC_StreamCreateFile
BASS_ALAC_StreamCreateFileUser
BASSplugin

Sections

Size: 10KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 712B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1024B - Virtual size: 969B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
$SYSDIR/bass_alac.dll.new
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

BASS_ALAC_StreamCreateFile
BASS_ALAC_StreamCreateFileUser
BASSplugin

Sections

Size: 10KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 712B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1024B - Virtual size: 969B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
$SYSDIR/bass_ape.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

BASS_APE_StreamCreateFile
BASS_APE_StreamCreateFileUser
BASSplugin
_FillWaveFormatEx@16
_FillWaveHeader@16

Sections

Size: 30KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 688B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
$SYSDIR/bass_ape.dll.new
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

BASS_APE_StreamCreateFile
BASS_APE_StreamCreateFileUser
BASSplugin
_FillWaveFormatEx@16
_FillWaveHeader@16

Sections

Size: 30KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 688B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
$SYSDIR/bass_cd.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

BASS_CD_Analog_GetPosition
BASS_CD_Analog_IsActive
BASS_CD_Analog_Play
BASS_CD_Analog_PlayFile
BASS_CD_Analog_Stop
BASS_CD_Door
BASS_CD_DoorIsLocked
BASS_CD_DoorIsOpen
BASS_CD_GetCache
BASS_CD_GetID
BASS_CD_GetInfo
BASS_CD_GetSpeed
BASS_CD_GetTOC
BASS_CD_GetTrackLength
BASS_CD_GetTrackPregap
BASS_CD_GetTracks
BASS_CD_IsReady
BASS_CD_Release
BASS_CD_SetCache
BASS_CD_SetInterface
BASS_CD_SetOffset
BASS_CD_SetSpeed
BASS_CD_StreamCreate
BASS_CD_StreamCreateEx
BASS_CD_StreamCreateFile
BASS_CD_StreamCreateFileEx
BASS_CD_StreamGetTrack
BASS_CD_StreamSetTrack
BASSplugin

Sections

Size: 15KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 576B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
$SYSDIR/bass_cd.dll.new
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

BASS_CD_Analog_GetPosition
BASS_CD_Analog_IsActive
BASS_CD_Analog_Play
BASS_CD_Analog_PlayFile
BASS_CD_Analog_Stop
BASS_CD_Door
BASS_CD_DoorIsLocked
BASS_CD_DoorIsOpen
BASS_CD_GetCache
BASS_CD_GetID
BASS_CD_GetInfo
BASS_CD_GetSpeed
BASS_CD_GetTOC
BASS_CD_GetTrackLength
BASS_CD_GetTrackPregap
BASS_CD_GetTracks
BASS_CD_IsReady
BASS_CD_Release
BASS_CD_SetCache
BASS_CD_SetInterface
BASS_CD_SetOffset
BASS_CD_SetSpeed
BASS_CD_StreamCreate
BASS_CD_StreamCreateEx
BASS_CD_StreamCreateFile
BASS_CD_StreamCreateFileEx
BASS_CD_StreamGetTrack
BASS_CD_StreamSetTrack
BASSplugin

Sections

Size: 15KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 576B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
$SYSDIR/bass_flac.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

BASS_FLAC_StreamCreateFile
BASS_FLAC_StreamCreateFileUser
BASS_FLAC_StreamCreateURL
BASSplugin

Sections

Size: 22KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 576B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1024B - Virtual size: 1004B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
$SYSDIR/bass_flac.dll.new
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

BASS_FLAC_StreamCreateFile
BASS_FLAC_StreamCreateFileUser
BASS_FLAC_StreamCreateURL
BASSplugin

Sections

Size: 22KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 576B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1024B - Virtual size: 1004B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
$SYSDIR/bass_mpc.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

BASS_MPC_StreamCreateFile
BASS_MPC_StreamCreateFileUser
BASS_MPC_StreamCreateURL
BASSplugin

Sections

Size: 18KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 632B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1024B - Virtual size: 1001B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
$SYSDIR/bass_mpc.dll.new
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

BASS_MPC_StreamCreateFile
BASS_MPC_StreamCreateFileUser
BASS_MPC_StreamCreateURL
BASSplugin

Sections

Size: 18KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 632B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1024B - Virtual size: 1001B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
$SYSDIR/bass_ofr.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

BASS_OFR_StreamCreateFile
BASS_OFR_StreamCreateFileUser
BASSplugin

Sections

Size: 3KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 840B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
$SYSDIR/bass_ofr.dll.new
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

BASS_OFR_StreamCreateFile
BASS_OFR_StreamCreateFileUser
BASSplugin

Sections

Size: 3KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 840B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
$SYSDIR/bass_opus.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

BASS_OPUS_StreamCreateFile
BASS_OPUS_StreamCreateFileUser
BASS_OPUS_StreamCreateURL
BASSplugin

Sections

Size: 51KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 568B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1024B - Virtual size: 1004B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
$SYSDIR/bass_opus.dll.new
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

BASS_OPUS_StreamCreateFile
BASS_OPUS_StreamCreateFileUser
BASS_OPUS_StreamCreateURL
BASSplugin

Sections

Size: 51KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 568B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1024B - Virtual size: 1004B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
$SYSDIR/bass_tak.dll
.dll windows:5 windows x86 arch:x86

01c0b0abac6724275b20caa475d1f9c6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\github-bass2.4\bass_tak2.4\Release\bass_tak2.4.pdb

Imports

kernel32

HeapReAlloc
GetProcessHeap
HeapFree
DisableThreadLibraryCalls
HeapAlloc
HeapSize
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetLastError
InterlockedDecrement
Sleep
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
WriteFile
LoadLibraryA
InitializeCriticalSectionAndSpinCount
RtlUnwind

user32

MessageBoxA

bass

_
BASS_GetVersion

tak_deco_lib

tak_SSD_GetStreamInfo
tak_APE_GetTextItemValueAsAnsi
tak_SSD_ReadAudio
tak_SSD_Valid
tak_SSD_Seek
tak_APE_Valid
tak_SSD_Create_FromStream
tak_APE_GetItemNum
tak_APE_GetItemKey
tak_APE_GetItemValue
tak_SSD_Destroy
tak_SSD_GetAPEv2Tag

Exports

Exports

BASS_TAK_StreamCreateFile
BASS_TAK_StreamCreateFileUser
BASS_TAK_StreamCreateURL
BASSplugin

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/bass_tak.dll.new
.dll windows:5 windows x86 arch:x86

01c0b0abac6724275b20caa475d1f9c6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\github-bass2.4\bass_tak2.4\Release\bass_tak2.4.pdb

Imports

kernel32

HeapReAlloc
GetProcessHeap
HeapFree
DisableThreadLibraryCalls
HeapAlloc
HeapSize
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetLastError
InterlockedDecrement
Sleep
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
WriteFile
LoadLibraryA
InitializeCriticalSectionAndSpinCount
RtlUnwind

user32

MessageBoxA

bass

_
BASS_GetVersion

tak_deco_lib

tak_SSD_GetStreamInfo
tak_APE_GetTextItemValueAsAnsi
tak_SSD_ReadAudio
tak_SSD_Valid
tak_SSD_Seek
tak_APE_Valid
tak_SSD_Create_FromStream
tak_APE_GetItemNum
tak_APE_GetItemKey
tak_APE_GetItemValue
tak_SSD_Destroy
tak_SSD_GetAPEv2Tag

Exports

Exports

BASS_TAK_StreamCreateFile
BASS_TAK_StreamCreateFileUser
BASS_TAK_StreamCreateURL
BASSplugin

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/bass_tta.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

BASS_TTA_StreamCreateFile
BASS_TTA_StreamCreateFileUser
BASSplugin

Sections

Size: 6KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 856B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1024B - Virtual size: 966B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
$SYSDIR/bass_tta.dll.new
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

BASS_TTA_StreamCreateFile
BASS_TTA_StreamCreateFileUser
BASSplugin

Sections

Size: 6KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 856B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1024B - Virtual size: 966B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
$SYSDIR/bass_wv.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

BASS_WV_StreamCreateFile
BASS_WV_StreamCreateFileUser
BASS_WV_StreamCreateURL
BASSplugin

Sections

Size: 25KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 576B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1024B - Virtual size: 996B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
$SYSDIR/bass_wv.dll.new
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

BASS_WV_StreamCreateFile
BASS_WV_StreamCreateFileUser
BASS_WV_StreamCreateURL
BASSplugin

Sections

Size: 25KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 576B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1024B - Virtual size: 996B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
$SYSDIR/cdxareader.ax
.dll regsvr32 windows:5 windows x86 arch:x86

897a0f6edf7e87cc94b41860270a80c8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

H:\progs\Compiling\mpc-hc\bin\Filters_x86\CDXAReader.pdb

Imports

kernel32

WriteFile
SetFilePointer
FlushFileBuffers
GetFullPathNameW
EncodePointer
DecodePointer
HeapFree
GetCommandLineA
HeapAlloc
QueryPerformanceCounter
GetSystemTimeAsFileTime
RtlUnwind
HeapReAlloc
HeapQueryInformation
HeapSize
ExitProcess
SetStdHandle
GetFileType
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetOEMCP
IsValidCodePage
Sleep
GetStringTypeW
HeapCreate
HeapDestroy
GetStdHandle
SetHandleCount
GetStartupInfoW
FreeEnvironmentStringsW
GetEnvironmentStringsW
LCMapStringW
IsProcessorFeaturePresent
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
WriteConsoleW
SetEnvironmentVariableA
DeleteFileW
SetErrorMode
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFileAttributesExW
lstrcmpA
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoW
LoadLibraryExW
GlobalFlags
GetCurrentProcessId
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
InitializeCriticalSectionAndSpinCount
ReleaseActCtx
CreateActCtxW
DisableThreadLibraryCalls
GetCurrentThread
GetTickCount
CreateThread
InterlockedExchange
lstrlenA
GetModuleFileNameA
VirtualFree
VirtualAlloc
ReleaseSemaphore
CreateSemaphoreW
WaitForSingleObject
WaitForMultipleObjects
SetEvent
GetCurrentProcess
GetCurrentThreadId
ResetEvent
CreateEventW
InterlockedDecrement
InterlockedIncrement
lstrcmpW
GetSystemInfo
RaiseException
WideCharToMultiByte
GetModuleFileNameW
GetVolumeInformationW
FindClose
FindFirstFileW
GetModuleHandleW
SetFilePointerEx
LeaveCriticalSection
EnterCriticalSection
GetFileSizeEx
ReadFile
CreateFileW
CloseHandle
DeleteCriticalSection
InitializeCriticalSection
lstrlenW
FreeLibrary
lstrcpyW
GetVersionExW
GetSystemDirectoryW
GetProcAddress
LoadLibraryW
MultiByteToWideChar
FindResourceW
LoadResource
LockResource
SizeofResource
ActivateActCtx
GetLastError
DeactivateActCtx
GetACP
SetLastError

user32

KillTimer
SetTimer
UnregisterClassW
PostQuitMessage
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
GetMessageW
TranslateMessage
GetCursorPos
RealChildWindowFromPoint
SetWindowTextW
DestroyMenu
SetCursor
ShowWindow
InvalidateRect
GetWindowThreadProcessId
IsWindowEnabled
GetWindowDC
ClientToScreen
DrawTextExW
DrawTextW
TabbedTextOutW
GetMenuState
LoadIconW
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetFocus
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MonitorFromWindow
GetKeyState
SetMenu
EnableWindow
SetForegroundWindow
IsWindowVisible
ValidateRect
UpdateWindow
PostMessageW
MessageBoxW
GetClassInfoExW
RegisterClassW
GetWindowRect
CharUpperW
GrayStringW
ScreenToClient
GetDlgCtrlID
CallWindowProcW
PtInRect
UnhookWindowsHookEx
RegisterWindowMessageW
DispatchMessageW
PeekMessageW
ReleaseDC
GetDC
GetActiveWindow
GetMenuItemID
AdjustWindowRectEx
SetWindowPos
RedrawWindow
IsWindow
GetWindowLongW
SetWindowLongW
GetMenu
CreateWindowExW
GetSubMenu
GetMenuItemCount
LoadCursorW
MapWindowPoints
GetParent
GetSysColorBrush
GetSysColor
SystemParametersInfoW
EnumDisplayMonitors
SetRectEmpty
CopyRect
GetMonitorInfoW
GetSystemMetrics
GetClientRect
SendMessageW
GetClassNameW
GetWindow
DefWindowProcW
GetClassInfoW
WinHelpW

gdi32

DeleteDC
CreateBitmap
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetClipBox
SetMapMode
RestoreDC
SaveDC
SetBkColor
SetTextColor
CreateDIBitmap
GetTextMetricsW
CreatePatternBrush
CreatePen
CreateSolidBrush
GetObjectW
GetStockObject
CreateFontIndirectW
EnumFontFamiliesW
GetTextCharsetInfo
DeleteObject
GetDeviceCaps

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

advapi32

RegEnumKeyW
RegOpenKeyExW
RegEnumKeyExW
RegQueryValueExW
RegDeleteKeyW
RegCreateKeyExW
RegSetValueExW
RegEnumValueW
RegQueryValueW
RegCloseKey
RegDeleteValueW
RegSetValueW
RegCreateKeyW

shell32

ShellExecuteW

shlwapi

PathStripToRootW
PathFindExtensionW
PathFindFileNameW
PathIsUNCW

ole32

CoFreeUnusedLibraries
StringFromGUID2
CoTaskMemFree
CLSIDFromString
CoTaskMemAlloc
CoUninitialize
CoCreateInstance
CoCreateGuid
CoInitialize

oleaut32

SysAllocString
SysFreeString
VariantInit
VariantClear
VariantChangeType

oleacc

LresultFromObject
CreateStdAccessibleObject

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 206KB - Virtual size: 206KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/cdxareader.ax.new
.dll regsvr32 windows:5 windows x86 arch:x86

897a0f6edf7e87cc94b41860270a80c8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

H:\progs\Compiling\mpc-hc\bin\Filters_x86\CDXAReader.pdb

Imports

kernel32

WriteFile
SetFilePointer
FlushFileBuffers
GetFullPathNameW
EncodePointer
DecodePointer
HeapFree
GetCommandLineA
HeapAlloc
QueryPerformanceCounter
GetSystemTimeAsFileTime
RtlUnwind
HeapReAlloc
HeapQueryInformation
HeapSize
ExitProcess
SetStdHandle
GetFileType
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetOEMCP
IsValidCodePage
Sleep
GetStringTypeW
HeapCreate
HeapDestroy
GetStdHandle
SetHandleCount
GetStartupInfoW
FreeEnvironmentStringsW
GetEnvironmentStringsW
LCMapStringW
IsProcessorFeaturePresent
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
WriteConsoleW
SetEnvironmentVariableA
DeleteFileW
SetErrorMode
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFileAttributesExW
lstrcmpA
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoW
LoadLibraryExW
GlobalFlags
GetCurrentProcessId
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
InitializeCriticalSectionAndSpinCount
ReleaseActCtx
CreateActCtxW
DisableThreadLibraryCalls
GetCurrentThread
GetTickCount
CreateThread
InterlockedExchange
lstrlenA
GetModuleFileNameA
VirtualFree
VirtualAlloc
ReleaseSemaphore
CreateSemaphoreW
WaitForSingleObject
WaitForMultipleObjects
SetEvent
GetCurrentProcess
GetCurrentThreadId
ResetEvent
CreateEventW
InterlockedDecrement
InterlockedIncrement
lstrcmpW
GetSystemInfo
RaiseException
WideCharToMultiByte
GetModuleFileNameW
GetVolumeInformationW
FindClose
FindFirstFileW
GetModuleHandleW
SetFilePointerEx
LeaveCriticalSection
EnterCriticalSection
GetFileSizeEx
ReadFile
CreateFileW
CloseHandle
DeleteCriticalSection
InitializeCriticalSection
lstrlenW
FreeLibrary
lstrcpyW
GetVersionExW
GetSystemDirectoryW
GetProcAddress
LoadLibraryW
MultiByteToWideChar
FindResourceW
LoadResource
LockResource
SizeofResource
ActivateActCtx
GetLastError
DeactivateActCtx
GetACP
SetLastError

user32

KillTimer
SetTimer
UnregisterClassW
PostQuitMessage
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
GetMessageW
TranslateMessage
GetCursorPos
RealChildWindowFromPoint
SetWindowTextW
DestroyMenu
SetCursor
ShowWindow
InvalidateRect
GetWindowThreadProcessId
IsWindowEnabled
GetWindowDC
ClientToScreen
DrawTextExW
DrawTextW
TabbedTextOutW
GetMenuState
LoadIconW
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetFocus
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MonitorFromWindow
GetKeyState
SetMenu
EnableWindow
SetForegroundWindow
IsWindowVisible
ValidateRect
UpdateWindow
PostMessageW
MessageBoxW
GetClassInfoExW
RegisterClassW
GetWindowRect
CharUpperW
GrayStringW
ScreenToClient
GetDlgCtrlID
CallWindowProcW
PtInRect
UnhookWindowsHookEx
RegisterWindowMessageW
DispatchMessageW
PeekMessageW
ReleaseDC
GetDC
GetActiveWindow
GetMenuItemID
AdjustWindowRectEx
SetWindowPos
RedrawWindow
IsWindow
GetWindowLongW
SetWindowLongW
GetMenu
CreateWindowExW
GetSubMenu
GetMenuItemCount
LoadCursorW
MapWindowPoints
GetParent
GetSysColorBrush
GetSysColor
SystemParametersInfoW
EnumDisplayMonitors
SetRectEmpty
CopyRect
GetMonitorInfoW
GetSystemMetrics
GetClientRect
SendMessageW
GetClassNameW
GetWindow
DefWindowProcW
GetClassInfoW
WinHelpW

gdi32

DeleteDC
CreateBitmap
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetClipBox
SetMapMode
RestoreDC
SaveDC
SetBkColor
SetTextColor
CreateDIBitmap
GetTextMetricsW
CreatePatternBrush
CreatePen
CreateSolidBrush
GetObjectW
GetStockObject
CreateFontIndirectW
EnumFontFamiliesW
GetTextCharsetInfo
DeleteObject
GetDeviceCaps

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

advapi32

RegEnumKeyW
RegOpenKeyExW
RegEnumKeyExW
RegQueryValueExW
RegDeleteKeyW
RegCreateKeyExW
RegSetValueExW
RegEnumValueW
RegQueryValueW
RegCloseKey
RegDeleteValueW
RegSetValueW
RegCreateKeyW

shell32

ShellExecuteW

shlwapi

PathStripToRootW
PathFindExtensionW
PathFindFileNameW
PathIsUNCW

ole32

CoFreeUnusedLibraries
StringFromGUID2
CoTaskMemFree
CLSIDFromString
CoTaskMemAlloc
CoUninitialize
CoCreateInstance
CoCreateGuid
CoInitialize

oleaut32

SysAllocString
SysFreeString
VariantInit
VariantClear
VariantChangeType

oleacc

LresultFromObject
CreateStdAccessibleObject

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 206KB - Virtual size: 206KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/cue2xml.js
.js
$SYSDIR/cue2xml.js.new
.js
$SYSDIR/dsmux.exe
.exe windows:5 windows x86 arch:x86

a1011808f6bcb162775c8fb7ccc3f3ba

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleOutputCP
GetStdHandle
VirtualAlloc
SetConsoleCtrlHandler
GetACP
GetModuleFileNameA
VirtualProtect
CloseHandle
DeleteFileW
GetModuleFileNameW
SizeofResource
GetConsoleMode
WideCharToMultiByte
WriteFile
GetModuleHandleW
WaitForSingleObject
CreateProcessW
LoadResource
FindResourceW
FindResourceExW
VirtualQuery
LockResource
GetCommandLineW
RaiseException
MultiByteToWideChar
GetTickCount
GetProcAddress
CreateFileW
GetTempPathW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
GetLastError
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapCreate
VirtualFree
Sleep
ExitProcess
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlUnwind
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
SetFilePointer
GetConsoleCP
LoadLibraryA
SetStdHandle
WriteConsoleA
WriteConsoleW
ReadFile
CreateFileA
FlushFileBuffers
GetModuleHandleA

ole32

CoTaskMemFree
CoInitialize
CoUninitialize
CoCreateInstance

oleaut32

SysFreeString
SysAllocStringLen
VariantClear

Sections

.text
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/dsmux.exe.new
.exe windows:5 windows x86 arch:x86

a1011808f6bcb162775c8fb7ccc3f3ba

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleOutputCP
GetStdHandle
VirtualAlloc
SetConsoleCtrlHandler
GetACP
GetModuleFileNameA
VirtualProtect
CloseHandle
DeleteFileW
GetModuleFileNameW
SizeofResource
GetConsoleMode
WideCharToMultiByte
WriteFile
GetModuleHandleW
WaitForSingleObject
CreateProcessW
LoadResource
FindResourceW
FindResourceExW
VirtualQuery
LockResource
GetCommandLineW
RaiseException
MultiByteToWideChar
GetTickCount
GetProcAddress
CreateFileW
GetTempPathW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
GetLastError
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapCreate
VirtualFree
Sleep
ExitProcess
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlUnwind
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
SetFilePointer
GetConsoleCP
LoadLibraryA
SetStdHandle
WriteConsoleA
WriteConsoleW
ReadFile
CreateFileA
FlushFileBuffers
GetModuleHandleA

ole32

CoTaskMemFree
CoInitialize
CoUninitialize
CoCreateInstance

oleaut32

SysFreeString
SysAllocStringLen
VariantClear

Sections

.text
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/dxr.dll
.dll regsvr32 windows:5 windows x86 arch:x86

10f6dc7f7cd187587dd715e428f866be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

timeSetEvent
timeEndPeriod
timeBeginPeriod
timeGetTime

d3d9

Direct3DCreate9

gdi32

DeleteDC
CreateRectRgnIndirect
DeleteObject
CombineRgn
CreateSolidBrush
FillRgn
SetBkColor
ExtTextOutW
GetGlyphOutlineW
GetTextMetricsW
SelectObject
CreateFontW
CreateCompatibleDC
CreateRectRgn

kernel32

InterlockedCompareExchange
CreateEventW
CreateThread
CloseHandle
SetThreadPriority
CreateSemaphoreW
WaitForMultipleObjects
InterlockedDecrement
MultiByteToWideChar
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
WideCharToMultiByte
GetCommandLineA
ResetEvent
WaitForSingleObject
SetEvent
ReleaseSemaphore
InterlockedIncrement
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
FlushFileBuffers
CreateFileA
InitializeCriticalSection
GetModuleHandleA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetLocaleInfoA
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
SetFilePointer
RtlUnwind
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
SetLastError
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStdHandle
WriteFile
ExitProcess
ReadFile
lstrcpynW
GetCurrentProcess
VirtualFree
lstrcmpW
lstrlenW
VirtualAlloc
GetSystemInfo
GetCurrentThreadId
DuplicateHandle
FreeLibrary
LoadLibraryW
GetLastError
GetProcAddress
GetVersionExW
DisableThreadLibraryCalls
lstrlenA
GetModuleFileNameA
GetModuleHandleW
GetTickCount
InterlockedExchange
lstrcmpiA
RaiseException
OutputDebugStringA
Sleep

user32

SetRectEmpty
UnionRect
InflateRect
GetClientRect
ScreenToClient
IntersectRect
GetDC
ReleaseDC
GetDlgItem
EnableWindow
SetDlgItemTextA
SendDlgItemMessageA
AttachThreadInput
GetWindowThreadProcessId
SetWindowTextW
GetWindowPlacement
IsWindowVisible
GetWindowTextW
SendMessageTimeoutW
EnumDisplayDevicesA
GetMonitorInfoW
GetWindowRect
GetWindowLongW
SetWindowLongW
RegisterClassW
LoadCursorW
DestroyWindow
SetParent
MsgWaitForMultipleObjects
DispatchMessageW
PeekMessageW
CreateWindowExW
DefWindowProcW
ValidateRect
SetCursor
GetClassLongW
GetParent
SetWindowPos
PostQuitMessage
PostMessageW
UnhookWindowsHookEx
SetWindowsHookExW
CallNextHookEx
GetKeyState
SendMessageW
ShowWindow
KillTimer
MoveWindow
CreateDialogParamW
InvalidateRect
LoadStringW
GetDesktopWindow
SetTimer

advapi32

RegQueryValueExW
RegCloseKey
CryptReleaseContext
CryptAcquireContextW
CryptGenRandom
RegCreateKeyExW
RegEnumKeyExW
RegOpenKeyExW
RegDeleteKeyW
RegSetValueW
RegCreateKeyW
RegSetValueExW

ole32

CoInitialize
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
CoUninitialize
CoFreeUnusedLibraries
StringFromGUID2
CoInitializeEx

oleaut32

SysFreeString
VariantChangeType
SysAllocString
VariantClear
VariantInit
SafeArrayUnaccessData
SafeArrayAccessData
SysAllocStringLen
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetDim

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 177KB - Virtual size: 177KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/dxr.dll.new
.dll regsvr32 windows:5 windows x86 arch:x86

10f6dc7f7cd187587dd715e428f866be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

timeSetEvent
timeEndPeriod
timeBeginPeriod
timeGetTime

d3d9

Direct3DCreate9

gdi32

DeleteDC
CreateRectRgnIndirect
DeleteObject
CombineRgn
CreateSolidBrush
FillRgn
SetBkColor
ExtTextOutW
GetGlyphOutlineW
GetTextMetricsW
SelectObject
CreateFontW
CreateCompatibleDC
CreateRectRgn

kernel32

InterlockedCompareExchange
CreateEventW
CreateThread
CloseHandle
SetThreadPriority
CreateSemaphoreW
WaitForMultipleObjects
InterlockedDecrement
MultiByteToWideChar
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
WideCharToMultiByte
GetCommandLineA
ResetEvent
WaitForSingleObject
SetEvent
ReleaseSemaphore
InterlockedIncrement
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
FlushFileBuffers
CreateFileA
InitializeCriticalSection
GetModuleHandleA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetLocaleInfoA
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
SetFilePointer
RtlUnwind
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
SetLastError
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStdHandle
WriteFile
ExitProcess
ReadFile
lstrcpynW
GetCurrentProcess
VirtualFree
lstrcmpW
lstrlenW
VirtualAlloc
GetSystemInfo
GetCurrentThreadId
DuplicateHandle
FreeLibrary
LoadLibraryW
GetLastError
GetProcAddress
GetVersionExW
DisableThreadLibraryCalls
lstrlenA
GetModuleFileNameA
GetModuleHandleW
GetTickCount
InterlockedExchange
lstrcmpiA
RaiseException
OutputDebugStringA
Sleep

user32

SetRectEmpty
UnionRect
InflateRect
GetClientRect
ScreenToClient
IntersectRect
GetDC
ReleaseDC
GetDlgItem
EnableWindow
SetDlgItemTextA
SendDlgItemMessageA
AttachThreadInput
GetWindowThreadProcessId
SetWindowTextW
GetWindowPlacement
IsWindowVisible
GetWindowTextW
SendMessageTimeoutW
EnumDisplayDevicesA
GetMonitorInfoW
GetWindowRect
GetWindowLongW
SetWindowLongW
RegisterClassW
LoadCursorW
DestroyWindow
SetParent
MsgWaitForMultipleObjects
DispatchMessageW
PeekMessageW
CreateWindowExW
DefWindowProcW
ValidateRect
SetCursor
GetClassLongW
GetParent
SetWindowPos
PostQuitMessage
PostMessageW
UnhookWindowsHookEx
SetWindowsHookExW
CallNextHookEx
GetKeyState
SendMessageW
ShowWindow
KillTimer
MoveWindow
CreateDialogParamW
InvalidateRect
LoadStringW
GetDesktopWindow
SetTimer

advapi32

RegQueryValueExW
RegCloseKey
CryptReleaseContext
CryptAcquireContextW
CryptGenRandom
RegCreateKeyExW
RegEnumKeyExW
RegOpenKeyExW
RegDeleteKeyW
RegSetValueW
RegCreateKeyW
RegSetValueExW

ole32

CoInitialize
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
CoUninitialize
CoFreeUnusedLibraries
StringFromGUID2
CoInitializeEx

oleaut32

SysFreeString
VariantChangeType
SysAllocString
VariantClear
VariantInit
SafeArrayUnaccessData
SafeArrayAccessData
SysAllocStringLen
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetDim

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 177KB - Virtual size: 177KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/ff_liba52.dll
.dll windows:5 windows x86 arch:x86

9071ecf73a0e7e902fab67701f60806c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\SVN ffdshow\trunk\obj\Release_Win32_VC2010\ff_liba52.pdb

Imports

kernel32

GetLastError
HeapFree
HeapAlloc
GetCurrentThreadId
DecodePointer
GetCommandLineA
EncodePointer
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
HeapCreate
HeapDestroy
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
HeapReAlloc
RtlUnwind
LCMapStringW
MultiByteToWideChar
GetStringTypeW
RaiseException
HeapSize

Exports

Exports

a52_block
a52_dynrng
a52_dynrngsetlevel
a52_frame
a52_free
a52_init
a52_samples
a52_syncinfo
getVersion

Sections

.text
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/ff_liba52.dll.new
.dll windows:5 windows x86 arch:x86

9071ecf73a0e7e902fab67701f60806c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\SVN ffdshow\trunk\obj\Release_Win32_VC2010\ff_liba52.pdb

Imports

kernel32

GetLastError
HeapFree
HeapAlloc
GetCurrentThreadId
DecodePointer
GetCommandLineA
EncodePointer
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
HeapCreate
HeapDestroy
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
HeapReAlloc
RtlUnwind
LCMapStringW
MultiByteToWideChar
GetStringTypeW
RaiseException
HeapSize

Exports

Exports

a52_block
a52_dynrng
a52_dynrngsetlevel
a52_frame
a52_free
a52_init
a52_samples
a52_syncinfo
getVersion

Sections

.text
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/ff_libdts.dll
.dll windows:5 windows x86 arch:x86

578d9e210d96f960b61f707e2f837f6a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\SVN ffdshow\trunk\obj\Release_Win32_VC2010\ff_libdts.pdb

Imports

kernel32

EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
HeapAlloc
GetCurrentThreadId
DecodePointer
GetCommandLineA
EncodePointer
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
Sleep
GetProcAddress
GetModuleHandleW
ExitProcess
IsProcessorFeaturePresent
HeapCreate
HeapDestroy
WriteFile
GetModuleFileNameW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
HeapReAlloc
LoadLibraryW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringW
MultiByteToWideChar
GetStringTypeW
SetFilePointer
HeapSize
CloseHandle
WriteConsoleW
SetStdHandle
RaiseException
CreateFileW

Exports

Exports

dca_block
dca_blocks_num
dca_dynrng
dca_frame
dca_free
dca_init
dca_samples
dca_syncinfo
getVersion

Sections

.text
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/ff_libdts.dll.new
.dll windows:5 windows x86 arch:x86

578d9e210d96f960b61f707e2f837f6a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\SVN ffdshow\trunk\obj\Release_Win32_VC2010\ff_libdts.pdb

Imports

kernel32

EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
HeapAlloc
GetCurrentThreadId
DecodePointer
GetCommandLineA
EncodePointer
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
Sleep
GetProcAddress
GetModuleHandleW
ExitProcess
IsProcessorFeaturePresent
HeapCreate
HeapDestroy
WriteFile
GetModuleFileNameW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
HeapReAlloc
LoadLibraryW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringW
MultiByteToWideChar
GetStringTypeW
SetFilePointer
HeapSize
CloseHandle
WriteConsoleW
SetStdHandle
RaiseException
CreateFileW

Exports

Exports

dca_block
dca_blocks_num
dca_dynrng
dca_frame
dca_free
dca_init
dca_samples
dca_syncinfo
getVersion

Sections

.text
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/ff_libmad.dll
.dll windows:5 windows x86 arch:x86

c3ed9850268f979599383fdbb3aff7cd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\SVN ffdshow\trunk\obj\Release_Win32_VC2010\ff_libmad.pdb

Imports

kernel32

GetLastError
HeapFree
HeapAlloc
GetCurrentThreadId
DecodePointer
GetCommandLineA
HeapCreate
HeapDestroy
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
EncodePointer
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
RtlUnwind
HeapSize
SetStdHandle
WriteConsoleW
MultiByteToWideChar
LCMapStringW
GetStringTypeW
CreateFileW
CloseHandle
FlushFileBuffers

Exports

Exports

getVersion
mad_frame_decode
mad_frame_finish
mad_frame_init
mad_stream_buffer
mad_stream_finish
mad_stream_init
mad_synth_frame
mad_synth_init

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/ff_libmad.dll.new
.dll windows:5 windows x86 arch:x86

c3ed9850268f979599383fdbb3aff7cd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\SVN ffdshow\trunk\obj\Release_Win32_VC2010\ff_libmad.pdb

Imports

kernel32

GetLastError
HeapFree
HeapAlloc
GetCurrentThreadId
DecodePointer
GetCommandLineA
HeapCreate
HeapDestroy
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
EncodePointer
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
RtlUnwind
HeapSize
SetStdHandle
WriteConsoleW
MultiByteToWideChar
LCMapStringW
GetStringTypeW
CreateFileW
CloseHandle
FlushFileBuffers

Exports

Exports

getVersion
mad_frame_decode
mad_frame_finish
mad_frame_init
mad_stream_buffer
mad_stream_finish
mad_stream_init
mad_synth_frame
mad_synth_init

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/ff_samplerate.dll
.dll windows:5 windows x86 arch:x86

711c912569ba6546872196a432a0a85a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\SVN ffdshow\trunk\obj\Release_Win32_VC2010\ff_samplerate.pdb

Imports

kernel32

GetLastError
HeapFree
GetCurrentThreadId
DecodePointer
GetCommandLineA
EncodePointer
HeapCreate
HeapDestroy
IsProcessorFeaturePresent
HeapAlloc
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
InterlockedDecrement
GetProcAddress
Sleep
ExitProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
LoadLibraryW
WriteFile
GetModuleFileNameW
RtlUnwind
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapSize

Exports

Exports

getVersion
src_delete
src_new
src_process
src_reset

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/ff_samplerate.dll.new
.dll windows:5 windows x86 arch:x86

711c912569ba6546872196a432a0a85a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\SVN ffdshow\trunk\obj\Release_Win32_VC2010\ff_samplerate.pdb

Imports

kernel32

GetLastError
HeapFree
GetCurrentThreadId
DecodePointer
GetCommandLineA
EncodePointer
HeapCreate
HeapDestroy
IsProcessorFeaturePresent
HeapAlloc
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
InterlockedDecrement
GetProcAddress
Sleep
ExitProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
LoadLibraryW
WriteFile
GetModuleFileNameW
RtlUnwind
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapSize

Exports

Exports

getVersion
src_delete
src_new
src_process
src_reset

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/ff_unrar.dll
.dll windows:5 windows x86 arch:x86

d9313a4f50a2b6274bc1e2ba2668d76d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\SVN ffdshow\trunk\obj\Release_Win32_VC2010\ff_unrar.pdb

Imports

kernel32

GetFileType
CreateFileA
CreateFileW
ReadFile
GetStdHandle
WriteFile
GetProcAddress
GetModuleHandleW
GetFileAttributesA
GetFileAttributesW
SetFileAttributesA
SetFileAttributesW
DeviceIoControl
CreateDirectoryA
CreateDirectoryW
FindClose
FindNextFileA
FindFirstFileA
FindNextFileW
FindFirstFileW
GetVersionExW
GetFullPathNameA
GetModuleFileNameW
MultiByteToWideChar
FreeLibrary
LoadLibraryW
GetCurrentProcessId
LocalFileTimeToFileTime
SystemTimeToFileTime
FileTimeToSystemTime
FileTimeToLocalFileTime
GetSystemTime
WideCharToMultiByte
IsDBCSLeadByte
GetCPInfo
SetStdHandle
GetConsoleMode
GetConsoleCP
GetStringTypeW
SetEndOfFile
SetFilePointer
FlushFileBuffers
Sleep
MoveFileW
SetFileTime
GetCurrentProcess
GetLastError
CloseHandle
GetModuleFileNameA
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
RtlUnwind
HeapAlloc
HeapFree
HeapReAlloc
RaiseException
ExitProcess
DecodePointer
DeleteFileA
EncodePointer
GetCurrentThreadId
GetCommandLineA
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
HeapDestroy
IsProcessorFeaturePresent
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapSize
LCMapStringW
SetHandleCount
GetStartupInfoW
WriteConsoleW

user32

CharLowerA
CharToOemA
CharUpperW
CharToOemBuffW
OemToCharA
OemToCharBuffA
CharUpperA

advapi32

SetFileSecurityA
SetFileSecurityW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges

Exports

Exports

RARCloseArchive
RAROpenArchiveEx
RARProcessFile
RARReadHeaderEx
RARSetCallback
getVersion

Sections

.text
Size: 121KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/ff_unrar.dll.new
.dll windows:5 windows x86 arch:x86

d9313a4f50a2b6274bc1e2ba2668d76d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\SVN ffdshow\trunk\obj\Release_Win32_VC2010\ff_unrar.pdb

Imports

kernel32

GetFileType
CreateFileA
CreateFileW
ReadFile
GetStdHandle
WriteFile
GetProcAddress
GetModuleHandleW
GetFileAttributesA
GetFileAttributesW
SetFileAttributesA
SetFileAttributesW
DeviceIoControl
CreateDirectoryA
CreateDirectoryW
FindClose
FindNextFileA
FindFirstFileA
FindNextFileW
FindFirstFileW
GetVersionExW
GetFullPathNameA
GetModuleFileNameW
MultiByteToWideChar
FreeLibrary
LoadLibraryW
GetCurrentProcessId
LocalFileTimeToFileTime
SystemTimeToFileTime
FileTimeToSystemTime
FileTimeToLocalFileTime
GetSystemTime
WideCharToMultiByte
IsDBCSLeadByte
GetCPInfo
SetStdHandle
GetConsoleMode
GetConsoleCP
GetStringTypeW
SetEndOfFile
SetFilePointer
FlushFileBuffers
Sleep
MoveFileW
SetFileTime
GetCurrentProcess
GetLastError
CloseHandle
GetModuleFileNameA
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
RtlUnwind
HeapAlloc
HeapFree
HeapReAlloc
RaiseException
ExitProcess
DecodePointer
DeleteFileA
EncodePointer
GetCurrentThreadId
GetCommandLineA
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
HeapDestroy
IsProcessorFeaturePresent
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapSize
LCMapStringW
SetHandleCount
GetStartupInfoW
WriteConsoleW

user32

CharLowerA
CharToOemA
CharUpperW
CharToOemBuffW
OemToCharA
OemToCharBuffA
CharUpperA

advapi32

SetFileSecurityA
SetFileSecurityW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges

Exports

Exports

RARCloseArchive
RAROpenArchiveEx
RARProcessFile
RARReadHeaderEx
RARSetCallback
getVersion

Sections

.text
Size: 121KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/ff_vfw.dll
.dll windows:5 windows x86 arch:x86

5d97066d495c5c67c556a47cc53eb82d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\SVN ffdshow\trunk\obj\Release_Win32_VC2010\ff_vfw.pdb

Imports

winmm

DefDriverProc

comctl32

ord17

kernel32

GetFileType
CloseHandle
CreateEventA
WaitForSingleObject
SetEvent
GetCurrentThreadId
LocalFree
FormatMessageA
DecodePointer
EncodePointer
RaiseException
RtlUnwind
GetCommandLineA
HeapAlloc
GetLastError
HeapFree
IsProcessorFeaturePresent
WriteFile
GetStdHandle
GetModuleFileNameW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
InterlockedDecrement
GetProcAddress
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
Sleep
HeapSize
ExitProcess
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
SetFilePointer
GetConsoleCP
GetConsoleMode
MultiByteToWideChar
LCMapStringW
GetStringTypeW
SetStdHandle
WriteConsoleW
CreateFileW
FlushFileBuffers
GetProcessHeap
OpenEventA
ResetEvent

ole32

CoInitialize
CoUninitialize
CoCreateInstance

Exports

Exports

DriverProc
configureVFW

Sections

.text
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/ff_vfw.dll.new
.dll windows:5 windows x86 arch:x86

5d97066d495c5c67c556a47cc53eb82d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\SVN ffdshow\trunk\obj\Release_Win32_VC2010\ff_vfw.pdb

Imports

winmm

DefDriverProc

comctl32

ord17

kernel32

GetFileType
CloseHandle
CreateEventA
WaitForSingleObject
SetEvent
GetCurrentThreadId
LocalFree
FormatMessageA
DecodePointer
EncodePointer
RaiseException
RtlUnwind
GetCommandLineA
HeapAlloc
GetLastError
HeapFree
IsProcessorFeaturePresent
WriteFile
GetStdHandle
GetModuleFileNameW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
InterlockedDecrement
GetProcAddress
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
Sleep
HeapSize
ExitProcess
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
SetFilePointer
GetConsoleCP
GetConsoleMode
MultiByteToWideChar
LCMapStringW
GetStringTypeW
SetStdHandle
WriteConsoleW
CreateFileW
FlushFileBuffers
GetProcessHeap
OpenEventA
ResetEvent

ole32

CoInitialize
CoUninitialize
CoCreateInstance

Exports

Exports

DriverProc
configureVFW

Sections

.text
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/ff_wmv9.dll
.dll windows:5 windows x86 arch:x86

5a968c30e1d5b85b4095569a44489059

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\SVN ffdshow\trunk\obj\Release_Win32_VC2010\ff_wmv9.pdb

Imports

kernel32

InterlockedIncrement
InterlockedDecrement
GetProcAddress
LoadLibraryW
FreeLibrary
GetSystemDefaultLCID
CloseHandle
WriteFile
GetLastError
CreateFileW
HeapReAlloc
FlushFileBuffers
DecodePointer
EncodePointer
RaiseException
RtlUnwind
HeapFree
HeapAlloc
GetCurrentThreadId
GetCommandLineA
SetStdHandle
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
GetFileType
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
IsProcessorFeaturePresent
GetStdHandle
GetModuleFileNameW
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
HeapCreate
HeapDestroy
ExitProcess
Sleep
SetHandleCount
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
WriteConsoleW
MultiByteToWideChar
SetFilePointer
HeapSize
LCMapStringW
GetStringTypeW

ole32

CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance

oleaut32

VariantInit
SysAllocString
SysFreeString

Exports

Exports

createWmv9
destroyWmv9
getVersion

Sections

.text
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/ff_wmv9.dll.new
.dll windows:5 windows x86 arch:x86

5a968c30e1d5b85b4095569a44489059

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\SVN ffdshow\trunk\obj\Release_Win32_VC2010\ff_wmv9.pdb

Imports

kernel32

InterlockedIncrement
InterlockedDecrement
GetProcAddress
LoadLibraryW
FreeLibrary
GetSystemDefaultLCID
CloseHandle
WriteFile
GetLastError
CreateFileW
HeapReAlloc
FlushFileBuffers
DecodePointer
EncodePointer
RaiseException
RtlUnwind
HeapFree
HeapAlloc
GetCurrentThreadId
GetCommandLineA
SetStdHandle
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
GetFileType
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
IsProcessorFeaturePresent
GetStdHandle
GetModuleFileNameW
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
HeapCreate
HeapDestroy
ExitProcess
Sleep
SetHandleCount
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
WriteConsoleW
MultiByteToWideChar
SetFilePointer
HeapSize
LCMapStringW
GetStringTypeW

ole32

CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance

oleaut32

VariantInit
SysAllocString
SysFreeString

Exports

Exports

createWmv9
destroyWmv9
getVersion

Sections

.text
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/ffdshow.ax
.dll regsvr32 windows:5 windows x86 arch:x86

25a67eac62a9ac933eeecfbde5e43f45

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\SVN ffdshow\trunk\obj\Release_Win32_VC2010\ffdshow.pdb

Imports

winmm

mmioRead
mmioAscend
mmioDescend
mmioOpenW
mmioClose

comctl32

ImageList_Add
ImageList_Create
ImageList_Destroy
ImageList_DrawEx
ord17
ImageList_Draw

dinput

DirectInputCreateW

shlwapi

PathIsRelativeW
PathCanonicalizeW
PathCompactPathW
PathCompactPathExW
SHDeleteKeyW

d3d9

Direct3DCreate9

kernel32

LockResource
LoadResource
FindResourceW
DebugBreak
GetUserDefaultLCID
IsDBCSLeadByteEx
FindCloseChangeNotification
FindFirstChangeNotificationW
SetThreadPriority
HeapFree
GetProcessHeap
ReleaseSemaphore
HeapAlloc
CreateSemaphoreA
DuplicateHandle
GetCurrentProcess
SetThreadPriorityBoost
SizeofResource
LocalFree
GetSystemInfo
GetModuleFileNameW
GetSystemDirectoryW
DeleteFileW
GetVolumeInformationW
lstrcpynW
WaitForMultipleObjects
CreateSemaphoreW
VirtualFree
VirtualAlloc
DisableThreadLibraryCalls
lstrlenA
GetModuleFileNameA
GetModuleHandleW
GetThreadPriority
GetCurrentThread
SetFilePointer
LCMapStringW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
IsProcessorFeaturePresent
LocalAlloc
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
WriteFile
HeapDestroy
HeapCreate
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStartupInfoW
GetFileType
GetStdHandle
SetHandleCount
ExitProcess
InterlockedDecrement
InterlockedIncrement
SetLastError
GetThreadTimes
FreeLibraryAndExitThread
GetModuleHandleA
SwitchToThread
InitializeCriticalSectionAndSpinCount
GetLocalTime
HeapReAlloc
CreateThread
ExitThread
RtlUnwind
RaiseException
EncodePointer
GetCommandLineA
DecodePointer
QueryPerformanceCounter
FormatMessageA
CreateWaitableTimerA
SetWaitableTimer
ResumeThread
TlsSetValue
OpenEventA
TlsGetValue
TlsFree
TlsAlloc
GetSystemTimeAsFileTime
HeapQueryInformation
InitializeSListHead
InterlockedPushEntrySList
QueryDepthSList
InterlockedPopEntrySList
InterlockedFlushSList
CreateTimerQueue
DeleteTimerQueueTimer
CreateTimerQueueTimer
GetProcessAffinityMask
VirtualProtect
SetThreadAffinityMask
GetVersionExW
lstrcmpW
GetCurrentThreadId
ResetEvent
GetLocaleInfoW
SystemTimeToFileTime
CreateEventA
GetWindowsDirectoryW
HeapSize
GetFullPathNameW
GetLastError
GetFileSize
ReadFile
CreateFileW
GetFileTime
FindNextFileW
lstrlenW
FindFirstFileW
FindClose
GetFileAttributesW
GetCurrentProcessId
CreateEventW
GetTickCount
Sleep
SetEvent
OutputDebugStringW
OutputDebugStringA
WideCharToMultiByte
MultiByteToWideChar
WaitForSingleObject
GetExitCodeThread
CloseHandle
SearchPathW
LoadLibraryW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetProcAddress
FreeLibrary
GetCommandLineW
CompareStringW
GetStringTypeW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetStdHandle
WriteConsoleW
CreateFileA
SetEndOfFile
SignalObjectAndWait
IsDebuggerPresent
SleepEx

user32

MapWindowPoints
PtInRect
WindowFromPoint
PeekMessageW
SetWindowPlacement
IsWindow
GetWindowPlacement
GetDesktopWindow
CreateDialogIndirectParamW
GetSystemMetrics
SetScrollInfo
GetScrollInfo
ScrollWindow
GetWindowTextLengthW
SetWindowTextW
SetParent
EndDialog
LoadMenuW
GetSubMenu
SetCursorPos
IsWindowEnabled
GetSysColorBrush
LoadCursorW
SetCursor
ScreenToClient
LoadBitmapW
SetCapture
DrawEdge
LoadIconW
MapDialogRect
SetMenuItemInfoW
GetMenuItemInfoW
ReleaseCapture
GetSysColor
DrawTextW
GetClientRect
ClientToScreen
GetFocus
GetParent
OffsetRect
MoveWindow
SetFocus
IsWindowVisible
InvalidateRect
EnableWindow
GetMenuItemCount
CreateDialogParamW
DialogBoxParamW
DialogBoxIndirectParamW
MonitorFromWindow
EnumWindows
CallWindowProcW
GetDlgItemInt
GetDlgItemTextW
SetDlgItemInt
GetDlgItem
ShowWindow
IsRectEmpty
FillRect
DestroyIcon
GetMenuStringW
LoadImageW
GetCursorPos
SetForegroundWindow
TrackPopupMenu
DestroyMenu
KillTimer
SetTimer
CreatePopupMenu
InsertMenuItemW
LoadStringW
GetDlgCtrlID
SetDlgItemTextW
GetDC
GetWindowRect
SetWindowPos
ReleaseDC
GetClassNameW
GetWindowTextW
GetForegroundWindow
GetWindowThreadProcessId
DestroyWindow
SetRect
MessageBoxW
PostMessageW
IntersectRect
EnumChildWindows
RegisterClassW
CreateWindowExW
RegisterWindowMessageW
SetWindowLongW
GetMessageW
TranslateMessage
DispatchMessageW
UnregisterClassW
GetWindowLongW
PostQuitMessage
SendMessageTimeoutW
DefWindowProcW
SendMessageW
SendDlgItemMessageW
wsprintfW
MessageBoxA
EnableMenuItem

gdi32

CreateFontIndirectW
GetTextMetricsW
GetTextExtentExPointW
GetDeviceCaps
SetDIBitsToDevice
CreateCompatibleDC
GetObjectW
GetCurrentObject
DeleteObject
GetBkColor
CreateCompatibleBitmap
CreateBrushIndirect
LineTo
MoveToEx
CreatePen
Polygon
SetTextAlign
StretchBlt
StretchDIBits
GetStockObject
SetBkColor
GetDIBits
TextOutW
GetTextExtentPoint32W
SelectObject
GetTextColor
GetOutlineTextMetricsW
CreateSolidBrush
BeginPath
AbortPath
GetPath
EndPath
CloseFigure
DeleteDC
SetMapMode
EnumFontFamiliesExW
SetBkMode
SetTextColor

comdlg32

ChooseColorW
GetSaveFileNameW
GetOpenFileNameW

advapi32

RegSetValueW
RegEnumKeyExW
RegDeleteKeyW
RegOpenKeyW
RegEnumKeyW
RegEnumValueW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
GetUserNameW
RegQueryValueExW
RegCloseKey
RegCreateKeyW

shell32

SHGetPathFromIDListW
Shell_NotifyIconW
ShellExecuteW
SHBrowseForFolderW

ole32

CoTaskMemFree
CoGetMalloc
CreateItemMoniker
GetRunningObjectTable
CoCreateInstance
CoUninitialize
CoInitialize
CoTaskMemAlloc
CoFreeUnusedLibraries
StringFromGUID2
StringFromIID

oleaut32

VariantClear
SysFreeString
VariantInit
OleCreatePropertyFrame
OleLoadPicturePath

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
configure
configureAudio
configureAudioRaw
configureDXVA
configureDec
configureEnc
configureRaw
configureSubtitles
ffacm2creator

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rotext
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.TEXT
Size: 1024B - Virtual size: 790B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 564KB - Virtual size: 564KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 53KB - Virtual size: 681KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 202KB - Virtual size: 202KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 162KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/ffdshow.ax.new
.dll regsvr32 windows:5 windows x86 arch:x86

25a67eac62a9ac933eeecfbde5e43f45

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\SVN ffdshow\trunk\obj\Release_Win32_VC2010\ffdshow.pdb

Imports

winmm

mmioRead
mmioAscend
mmioDescend
mmioOpenW
mmioClose

comctl32

ImageList_Add
ImageList_Create
ImageList_Destroy
ImageList_DrawEx
ord17
ImageList_Draw

dinput

DirectInputCreateW

shlwapi

PathIsRelativeW
PathCanonicalizeW
PathCompactPathW
PathCompactPathExW
SHDeleteKeyW

d3d9

Direct3DCreate9

kernel32

LockResource
LoadResource
FindResourceW
DebugBreak
GetUserDefaultLCID
IsDBCSLeadByteEx
FindCloseChangeNotification
FindFirstChangeNotificationW
SetThreadPriority
HeapFree
GetProcessHeap
ReleaseSemaphore
HeapAlloc
CreateSemaphoreA
DuplicateHandle
GetCurrentProcess
SetThreadPriorityBoost
SizeofResource
LocalFree
GetSystemInfo
GetModuleFileNameW
GetSystemDirectoryW
DeleteFileW
GetVolumeInformationW
lstrcpynW
WaitForMultipleObjects
CreateSemaphoreW
VirtualFree
VirtualAlloc
DisableThreadLibraryCalls
lstrlenA
GetModuleFileNameA
GetModuleHandleW
GetThreadPriority
GetCurrentThread
SetFilePointer
LCMapStringW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
IsProcessorFeaturePresent
LocalAlloc
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
WriteFile
HeapDestroy
HeapCreate
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStartupInfoW
GetFileType
GetStdHandle
SetHandleCount
ExitProcess
InterlockedDecrement
InterlockedIncrement
SetLastError
GetThreadTimes
FreeLibraryAndExitThread
GetModuleHandleA
SwitchToThread
InitializeCriticalSectionAndSpinCount
GetLocalTime
HeapReAlloc
CreateThread
ExitThread
RtlUnwind
RaiseException
EncodePointer
GetCommandLineA
DecodePointer
QueryPerformanceCounter
FormatMessageA
CreateWaitableTimerA
SetWaitableTimer
ResumeThread
TlsSetValue
OpenEventA
TlsGetValue
TlsFree
TlsAlloc
GetSystemTimeAsFileTime
HeapQueryInformation
InitializeSListHead
InterlockedPushEntrySList
QueryDepthSList
InterlockedPopEntrySList
InterlockedFlushSList
CreateTimerQueue
DeleteTimerQueueTimer
CreateTimerQueueTimer
GetProcessAffinityMask
VirtualProtect
SetThreadAffinityMask
GetVersionExW
lstrcmpW
GetCurrentThreadId
ResetEvent
GetLocaleInfoW
SystemTimeToFileTime
CreateEventA
GetWindowsDirectoryW
HeapSize
GetFullPathNameW
GetLastError
GetFileSize
ReadFile
CreateFileW
GetFileTime
FindNextFileW
lstrlenW
FindFirstFileW
FindClose
GetFileAttributesW
GetCurrentProcessId
CreateEventW
GetTickCount
Sleep
SetEvent
OutputDebugStringW
OutputDebugStringA
WideCharToMultiByte
MultiByteToWideChar
WaitForSingleObject
GetExitCodeThread
CloseHandle
SearchPathW
LoadLibraryW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetProcAddress
FreeLibrary
GetCommandLineW
CompareStringW
GetStringTypeW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetStdHandle
WriteConsoleW
CreateFileA
SetEndOfFile
SignalObjectAndWait
IsDebuggerPresent
SleepEx

user32

MapWindowPoints
PtInRect
WindowFromPoint
PeekMessageW
SetWindowPlacement
IsWindow
GetWindowPlacement
GetDesktopWindow
CreateDialogIndirectParamW
GetSystemMetrics
SetScrollInfo
GetScrollInfo
ScrollWindow
GetWindowTextLengthW
SetWindowTextW
SetParent
EndDialog
LoadMenuW
GetSubMenu
SetCursorPos
IsWindowEnabled
GetSysColorBrush
LoadCursorW
SetCursor
ScreenToClient
LoadBitmapW
SetCapture
DrawEdge
LoadIconW
MapDialogRect
SetMenuItemInfoW
GetMenuItemInfoW
ReleaseCapture
GetSysColor
DrawTextW
GetClientRect
ClientToScreen
GetFocus
GetParent
OffsetRect
MoveWindow
SetFocus
IsWindowVisible
InvalidateRect
EnableWindow
GetMenuItemCount
CreateDialogParamW
DialogBoxParamW
DialogBoxIndirectParamW
MonitorFromWindow
EnumWindows
CallWindowProcW
GetDlgItemInt
GetDlgItemTextW
SetDlgItemInt
GetDlgItem
ShowWindow
IsRectEmpty
FillRect
DestroyIcon
GetMenuStringW
LoadImageW
GetCursorPos
SetForegroundWindow
TrackPopupMenu
DestroyMenu
KillTimer
SetTimer
CreatePopupMenu
InsertMenuItemW
LoadStringW
GetDlgCtrlID
SetDlgItemTextW
GetDC
GetWindowRect
SetWindowPos
ReleaseDC
GetClassNameW
GetWindowTextW
GetForegroundWindow
GetWindowThreadProcessId
DestroyWindow
SetRect
MessageBoxW
PostMessageW
IntersectRect
EnumChildWindows
RegisterClassW
CreateWindowExW
RegisterWindowMessageW
SetWindowLongW
GetMessageW
TranslateMessage
DispatchMessageW
UnregisterClassW
GetWindowLongW
PostQuitMessage
SendMessageTimeoutW
DefWindowProcW
SendMessageW
SendDlgItemMessageW
wsprintfW
MessageBoxA
EnableMenuItem

gdi32

CreateFontIndirectW
GetTextMetricsW
GetTextExtentExPointW
GetDeviceCaps
SetDIBitsToDevice
CreateCompatibleDC
GetObjectW
GetCurrentObject
DeleteObject
GetBkColor
CreateCompatibleBitmap
CreateBrushIndirect
LineTo
MoveToEx
CreatePen
Polygon
SetTextAlign
StretchBlt
StretchDIBits
GetStockObject
SetBkColor
GetDIBits
TextOutW
GetTextExtentPoint32W
SelectObject
GetTextColor
GetOutlineTextMetricsW
CreateSolidBrush
BeginPath
AbortPath
GetPath
EndPath
CloseFigure
DeleteDC
SetMapMode
EnumFontFamiliesExW
SetBkMode
SetTextColor

comdlg32

ChooseColorW
GetSaveFileNameW
GetOpenFileNameW

advapi32

RegSetValueW
RegEnumKeyExW
RegDeleteKeyW
RegOpenKeyW
RegEnumKeyW
RegEnumValueW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
GetUserNameW
RegQueryValueExW
RegCloseKey
RegCreateKeyW

shell32

SHGetPathFromIDListW
Shell_NotifyIconW
ShellExecuteW
SHBrowseForFolderW

ole32

CoTaskMemFree
CoGetMalloc
CreateItemMoniker
GetRunningObjectTable
CoCreateInstance
CoUninitialize
CoInitialize
CoTaskMemAlloc
CoFreeUnusedLibraries
StringFromGUID2
StringFromIID

oleaut32

VariantClear
SysFreeString
VariantInit
OleCreatePropertyFrame
OleLoadPicturePath

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
configure
configureAudio
configureAudioRaw
configureDXVA
configureDec
configureEnc
configureRaw
configureSubtitles
ffacm2creator

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rotext
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.TEXT
Size: 1024B - Virtual size: 790B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 564KB - Virtual size: 564KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 53KB - Virtual size: 681KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 202KB - Virtual size: 202KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 162KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/ffmpeg.dll
.dll windows:4 windows x86 arch:x86

fadb548b33e24175594594b6457b2afe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateEventA
CreateSemaphoreA
DeleteCriticalSection
DisableThreadLibraryCalls
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProcessAffinityMask
GetSystemInfo
GetSystemTimeAsFileTime
GetTickCount
GetVersionExA
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryW
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
ReleaseSemaphore
ResetEvent
SetEvent
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForSingleObject

msvcrt

_close
_open
_read
_write
__dllonexit
__setusermatherr
_amsg_exit
_beginthreadex
_errno
_exit
_initterm
_iob
_lock
_lseeki64
_onexit
_unlock
_vsnprintf
_vsnwprintf
_wopen
abort
acos
asin
atan
calloc
ceil
clock
cosh
floor
fprintf
fputs
free
frexp
fwrite
islower
isspace
isupper
localeconv
log10
malloc
memchr
memcmp
memcpy
memmove
memset
qsort
raise
realloc
sinh
sprintf
sscanf
strcat
strchr
strcmp
strcpy
strerror
strlen
strncmp
strspn
strtok
strtol
tan
tanh
toupper
vfprintf
wcstombs

user32

MessageBoxA

Exports

Exports

FF264UpdateRefFrameSliceLong
FFGetMBNumber
FFH264BuildPicParams
FFH264CheckCompatibility
FFH264DecodeBuffer
FFH264IsRefFrameInUse
FFH264SetCurrentPicture
FFH264SetDxvaSliceLong
FFH264UpdateRefFramesList
FFIsSkipped
FFVC1UpdatePictureParam
GetCPUCount
GetFFMpegPictureType
av_free
av_h264_decode_frame
av_init_packet
av_log_get_callback
av_log_get_level
av_log_set_callback
av_log_set_level
av_mallocz
av_packet_new_side_data
av_parser_close
av_parser_init
av_parser_parse2
av_set_cpu_flags_mask
av_vc1_decode_frame
avcodec_alloc_context3
avcodec_alloc_frame
avcodec_close
avcodec_decode_audio3
avcodec_decode_audio4
avcodec_decode_video2
avcodec_default_get_buffer
avcodec_default_reget_buffer
avcodec_default_release_buffer
avcodec_encode_audio
avcodec_encode_audio2
avcodec_encode_video
avcodec_find_decoder
avcodec_find_encoder
avcodec_flush_buffers
avcodec_get_current_idct
avcodec_get_encoder_info
avcodec_h264_search_recovery_point
avcodec_open2
avcodec_register_all
ff_simple_idct_mmx
getVersion
gradfunFilter
gradfunInit
pp_free_context
pp_get_context
pp_postprocess
sws_freeContext
sws_freeFilter
sws_freeVec
sws_getCachedContext
sws_getCoefficients
sws_getConstVec
sws_getDefaultFilter
sws_getGaussianVec
sws_normalizeVec
sws_scale
sws_setColorspaceDetails
yadif_filter
yadif_init
yadif_uninit

Sections

.text
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 701KB - Virtual size: 700KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rodata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/ffmpeg.dll.new
.dll windows:4 windows x86 arch:x86

fadb548b33e24175594594b6457b2afe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateEventA
CreateSemaphoreA
DeleteCriticalSection
DisableThreadLibraryCalls
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProcessAffinityMask
GetSystemInfo
GetSystemTimeAsFileTime
GetTickCount
GetVersionExA
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryW
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
ReleaseSemaphore
ResetEvent
SetEvent
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForSingleObject

msvcrt

_close
_open
_read
_write
__dllonexit
__setusermatherr
_amsg_exit
_beginthreadex
_errno
_exit
_initterm
_iob
_lock
_lseeki64
_onexit
_unlock
_vsnprintf
_vsnwprintf
_wopen
abort
acos
asin
atan
calloc
ceil
clock
cosh
floor
fprintf
fputs
free
frexp
fwrite
islower
isspace
isupper
localeconv
log10
malloc
memchr
memcmp
memcpy
memmove
memset
qsort
raise
realloc
sinh
sprintf
sscanf
strcat
strchr
strcmp
strcpy
strerror
strlen
strncmp
strspn
strtok
strtol
tan
tanh
toupper
vfprintf
wcstombs

user32

MessageBoxA

Exports

Exports

FF264UpdateRefFrameSliceLong
FFGetMBNumber
FFH264BuildPicParams
FFH264CheckCompatibility
FFH264DecodeBuffer
FFH264IsRefFrameInUse
FFH264SetCurrentPicture
FFH264SetDxvaSliceLong
FFH264UpdateRefFramesList
FFIsSkipped
FFVC1UpdatePictureParam
GetCPUCount
GetFFMpegPictureType
av_free
av_h264_decode_frame
av_init_packet
av_log_get_callback
av_log_get_level
av_log_set_callback
av_log_set_level
av_mallocz
av_packet_new_side_data
av_parser_close
av_parser_init
av_parser_parse2
av_set_cpu_flags_mask
av_vc1_decode_frame
avcodec_alloc_context3
avcodec_alloc_frame
avcodec_close
avcodec_decode_audio3
avcodec_decode_audio4
avcodec_decode_video2
avcodec_default_get_buffer
avcodec_default_reget_buffer
avcodec_default_release_buffer
avcodec_encode_audio
avcodec_encode_audio2
avcodec_encode_video
avcodec_find_decoder
avcodec_find_encoder
avcodec_flush_buffers
avcodec_get_current_idct
avcodec_get_encoder_info
avcodec_h264_search_recovery_point
avcodec_open2
avcodec_register_all
ff_simple_idct_mmx
getVersion
gradfunFilter
gradfunInit
pp_free_context
pp_get_context
pp_postprocess
sws_freeContext
sws_freeFilter
sws_freeVec
sws_getCachedContext
sws_getCoefficients
sws_getConstVec
sws_getDefaultFilter
sws_getGaussianVec
sws_normalizeVec
sws_scale
sws_setColorspaceDetails
yadif_filter
yadif_init
yadif_uninit

Sections

.text
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 701KB - Virtual size: 700KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rodata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/gdsmux.exe
.exe windows:5 windows x86 arch:x86

bd820d10cb5f94e7df124a16dcf57992

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

GetSaveFileNameW
GetOpenFileNameW

rpcrt4

RpcStringFreeA
UuidToStringA
UuidCreate

kernel32

InterlockedIncrement
LocalAlloc
GetCommandLineW
FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringA
InterlockedExchange
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetStdHandle
WriteFile
ExitProcess
Sleep
HeapCreate
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RtlUnwind
GetStartupInfoW
HeapSize
HeapReAlloc
HeapDestroy
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
WideCharToMultiByte
CreateFileA
GetFileSize
FormatMessageA
SetFilePointer
ReadFile
GetTempPathW
CreateFileW
CloseHandle
FormatMessageW
GetVersionExA
lstrlenA
VirtualQuery
lstrcpynA
FindResourceExW
FindResourceW
FreeLibrary
LoadResource
LoadLibraryExW
GetModuleHandleA
InterlockedDecrement
GetCurrentProcess
GlobalLock
GetModuleHandleW
GetTickCount
InitializeCriticalSection
GlobalAlloc
LoadLibraryW
SizeofResource
GetVersionExW
LeaveCriticalSection
lstrcpynW
MulDiv
GetModuleFileNameW
lstrcmpW
MultiByteToWideChar
lstrlenW
GlobalUnlock
FlushInstructionCache
RaiseException
GetLastError
SetLastError
lstrcpyW
GetCurrentProcessId
DeleteFileW
GetCurrentThreadId
DeleteCriticalSection
VirtualProtect
lstrcmpiW
GetModuleFileNameA
LockResource
EnterCriticalSection
VirtualAlloc
GetProcAddress

user32

ScreenToClient
SetTimer
DestroyAcceleratorTable
GetDlgItemInt
SendMessageW
TranslateAcceleratorW
SetDlgItemTextW
IsWindowVisible
GetWindowTextLengthW
SetCursor
DestroyWindow
ClientToScreen
EndPaint
GetWindowRect
SetWindowTextW
SetMenuItemInfoW
GetDialogBaseUnits
GetMonitorInfoW
CallWindowProcW
DefWindowProcW
CopyRect
GetWindow
GetSystemMetrics
ReleaseCapture
MessageBoxW
EqualRect
SetMenuDefaultItem
CreateWindowExW
RemoveMenu
MapDialogRect
EnableWindow
GetDlgCtrlID
MapWindowPoints
GetMessageW
MonitorFromPoint
PostQuitMessage
CharNextW
TrackPopupMenu
GetWindowDC
RegisterWindowMessageW
MoveWindow
UnregisterClassA
DispatchMessageW
FillRect
IsChild
LoadImageW
SetCapture
PostMessageW
DrawTextW
KillTimer
GetKeyState
LoadStringA
GetFocus
DialogBoxParamW
GetParent
InvalidateRgn
LoadCursorW
MessageBeep
GetClientRect
CreateAcceleratorTableW
SetFocus
DrawEdge
GetMenuItemInfoW
SetRectEmpty
BeginPaint
GetClassLongW
PtInRect
GetClassInfoExW
wsprintfW
GetDoubleClickTime
GetDC
GetCapture
DrawFocusRect
TranslateMessage
LoadAcceleratorsW
InflateRect
SetDlgItemInt
IsDialogMessageW
RegisterClassExW
OffsetRect
TrackPopupMenuEx
IntersectRect
InvalidateRect
LoadMenuW
GetWindowLongW
AppendMenuW
GetWindowTextW
SystemParametersInfoW
PeekMessageW
GetDCEx
GetClassNameW
ReleaseDC
MonitorFromWindow
GetDlgItem
SetWindowLongW
EndDialog
RedrawWindow
DestroyCursor
GetDesktopWindow
GetSysColor
SetWindowPos
GetCursorPos
LoadStringW
ShowWindow
CreatePopupMenu
GetSysColorBrush
CreateDialogParamW
GetMenuItemCount
IsWindow
DestroyMenu

gdi32

GetClipRgn
MoveToEx
SetWindowOrgEx
BitBlt
PatBlt
SetViewportOrgEx
LineTo
LPtoDP
SetTextColor
DeleteDC
Polygon
CreateFontIndirectW
GetDeviceCaps
SetBkColor
ExcludeClipRect
RemoveFontMemResourceEx
SetBkMode
DeleteObject
SelectObject
SelectClipRgn
CreateCompatibleDC
CreateRectRgnIndirect
DPtoLP
CombineRgn
CreateCompatibleBitmap
ExtTextOutW
SaveDC
CreateFontW
GetObjectW
AddFontMemResourceEx
CreateRectRgn
Polyline
CreatePen
GetClipBox
IntersectClipRect
GetStockObject
RestoreDC
CreateSolidBrush

advapi32

RegCreateKeyExW
RegQueryInfoKeyW
RegDeleteKeyW
RegQueryValueExW
RegDeleteValueW
RegOpenKeyExW
RegCloseKey
RegSetValueExW
RegEnumKeyExW

ole32

CoTaskMemFree
DoDragDrop
CreateItemMoniker
CoGetClassObject
CoTaskMemAlloc
StringFromGUID2
CreateStreamOnHGlobal
CLSIDFromString
CLSIDFromProgID
CoTaskMemRealloc
OleLockRunning
OleInitialize
CoCreateInstance
GetRunningObjectTable
OleUninitialize

oleaut32

SysStringLen
LoadRegTypeLi
SysFreeString
VarUI4FromStr
OleCreateFontIndirect
OleCreatePropertyFrame
VariantChangeType
SysAllocStringLen
VarBstrCmp
VariantInit
LoadTypeLi
VariantClear
DispCallFunc
SysAllocString

mkzlib

inflateEnd
inflateInit_
inflate
inflateReset

mkunicode

iso_getentry
Utf16ToUtf8

shlwapi

SHAutoComplete
StrCmpIW
UrlEscapeW

comctl32

ImageList_Draw
ImageList_SetOverlayImage
InitCommonControlsEx
ImageList_GetImageInfo
ImageList_LoadImageW
_TrackMouseEvent

Sections

.text
Size: 231KB - Virtual size: 230KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/gdsmux.exe.new
.exe windows:5 windows x86 arch:x86

bd820d10cb5f94e7df124a16dcf57992

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

GetSaveFileNameW
GetOpenFileNameW

rpcrt4

RpcStringFreeA
UuidToStringA
UuidCreate

kernel32

InterlockedIncrement
LocalAlloc
GetCommandLineW
FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringA
InterlockedExchange
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetStdHandle
WriteFile
ExitProcess
Sleep
HeapCreate
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RtlUnwind
GetStartupInfoW
HeapSize
HeapReAlloc
HeapDestroy
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
WideCharToMultiByte
CreateFileA
GetFileSize
FormatMessageA
SetFilePointer
ReadFile
GetTempPathW
CreateFileW
CloseHandle
FormatMessageW
GetVersionExA
lstrlenA
VirtualQuery
lstrcpynA
FindResourceExW
FindResourceW
FreeLibrary
LoadResource
LoadLibraryExW
GetModuleHandleA
InterlockedDecrement
GetCurrentProcess
GlobalLock
GetModuleHandleW
GetTickCount
InitializeCriticalSection
GlobalAlloc
LoadLibraryW
SizeofResource
GetVersionExW
LeaveCriticalSection
lstrcpynW
MulDiv
GetModuleFileNameW
lstrcmpW
MultiByteToWideChar
lstrlenW
GlobalUnlock
FlushInstructionCache
RaiseException
GetLastError
SetLastError
lstrcpyW
GetCurrentProcessId
DeleteFileW
GetCurrentThreadId
DeleteCriticalSection
VirtualProtect
lstrcmpiW
GetModuleFileNameA
LockResource
EnterCriticalSection
VirtualAlloc
GetProcAddress

user32

ScreenToClient
SetTimer
DestroyAcceleratorTable
GetDlgItemInt
SendMessageW
TranslateAcceleratorW
SetDlgItemTextW
IsWindowVisible
GetWindowTextLengthW
SetCursor
DestroyWindow
ClientToScreen
EndPaint
GetWindowRect
SetWindowTextW
SetMenuItemInfoW
GetDialogBaseUnits
GetMonitorInfoW
CallWindowProcW
DefWindowProcW
CopyRect
GetWindow
GetSystemMetrics
ReleaseCapture
MessageBoxW
EqualRect
SetMenuDefaultItem
CreateWindowExW
RemoveMenu
MapDialogRect
EnableWindow
GetDlgCtrlID
MapWindowPoints
GetMessageW
MonitorFromPoint
PostQuitMessage
CharNextW
TrackPopupMenu
GetWindowDC
RegisterWindowMessageW
MoveWindow
UnregisterClassA
DispatchMessageW
FillRect
IsChild
LoadImageW
SetCapture
PostMessageW
DrawTextW
KillTimer
GetKeyState
LoadStringA
GetFocus
DialogBoxParamW
GetParent
InvalidateRgn
LoadCursorW
MessageBeep
GetClientRect
CreateAcceleratorTableW
SetFocus
DrawEdge
GetMenuItemInfoW
SetRectEmpty
BeginPaint
GetClassLongW
PtInRect
GetClassInfoExW
wsprintfW
GetDoubleClickTime
GetDC
GetCapture
DrawFocusRect
TranslateMessage
LoadAcceleratorsW
InflateRect
SetDlgItemInt
IsDialogMessageW
RegisterClassExW
OffsetRect
TrackPopupMenuEx
IntersectRect
InvalidateRect
LoadMenuW
GetWindowLongW
AppendMenuW
GetWindowTextW
SystemParametersInfoW
PeekMessageW
GetDCEx
GetClassNameW
ReleaseDC
MonitorFromWindow
GetDlgItem
SetWindowLongW
EndDialog
RedrawWindow
DestroyCursor
GetDesktopWindow
GetSysColor
SetWindowPos
GetCursorPos
LoadStringW
ShowWindow
CreatePopupMenu
GetSysColorBrush
CreateDialogParamW
GetMenuItemCount
IsWindow
DestroyMenu

gdi32

GetClipRgn
MoveToEx
SetWindowOrgEx
BitBlt
PatBlt
SetViewportOrgEx
LineTo
LPtoDP
SetTextColor
DeleteDC
Polygon
CreateFontIndirectW
GetDeviceCaps
SetBkColor
ExcludeClipRect
RemoveFontMemResourceEx
SetBkMode
DeleteObject
SelectObject
SelectClipRgn
CreateCompatibleDC
CreateRectRgnIndirect
DPtoLP
CombineRgn
CreateCompatibleBitmap
ExtTextOutW
SaveDC
CreateFontW
GetObjectW
AddFontMemResourceEx
CreateRectRgn
Polyline
CreatePen
GetClipBox
IntersectClipRect
GetStockObject
RestoreDC
CreateSolidBrush

advapi32

RegCreateKeyExW
RegQueryInfoKeyW
RegDeleteKeyW
RegQueryValueExW
RegDeleteValueW
RegOpenKeyExW
RegCloseKey
RegSetValueExW
RegEnumKeyExW

ole32

CoTaskMemFree
DoDragDrop
CreateItemMoniker
CoGetClassObject
CoTaskMemAlloc
StringFromGUID2
CreateStreamOnHGlobal
CLSIDFromString
CLSIDFromProgID
CoTaskMemRealloc
OleLockRunning
OleInitialize
CoCreateInstance
GetRunningObjectTable
OleUninitialize

oleaut32

SysStringLen
LoadRegTypeLi
SysFreeString
VarUI4FromStr
OleCreateFontIndirect
OleCreatePropertyFrame
VariantChangeType
SysAllocStringLen
VarBstrCmp
VariantInit
LoadTypeLi
VariantClear
DispCallFunc
SysAllocString

mkzlib

inflateEnd
inflateInit_
inflate
inflateReset

mkunicode

iso_getentry
Utf16ToUtf8

shlwapi

SHAutoComplete
StrCmpIW
UrlEscapeW

comctl32

ImageList_Draw
ImageList_SetOverlayImage
InitCommonControlsEx
ImageList_GetImageInfo
ImageList_LoadImageW
_TrackMouseEvent

Sections

.text
Size: 231KB - Virtual size: 230KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/lameACM.acm
.dll windows:5 windows x86 arch:x86

0f5013cb4ced28168b43f92a1813decc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shell32

ShellExecuteA

url

TranslateURLA

advapi32

RegQueryValueExA
RegOpenKeyExA

user32

CheckDlgButton
EnableWindow
IsDlgButtonChecked
RemovePropA
SetWindowPos
CreateWindowExA
SetPropA
SendMessageA
GetWindowLongA
DialogBoxParamA
LoadIconA
LoadCursorA
SetWindowTextA
SetCursor
wsprintfA
PtInRect
GetWindowRect
GetDlgItem
GetCursorPos
EndDialog
GetPropA

kernel32

SetEndOfFile
GetProcessHeap
InitializeCriticalSection
GetACP
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
ReadFile
FlushFileBuffers
GetConsoleMode
GetConsoleCP
SetFilePointer
GetThreadLocale
FormatMessageA
GetLocaleInfoW
HeapSize
InitializeCriticalSectionAndSpinCount
LoadLibraryA
InterlockedExchange
lstrcpyW
MultiByteToWideChar
GetModuleFileNameA
CreateFileA
CloseHandle
LocalAlloc
LocalFree
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetCurrentThreadId
GetCommandLineA
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetLastError
InterlockedDecrement
HeapAlloc
HeapFree
GetModuleHandleA
GetCPInfo
GetOEMCP
IsValidCodePage
Sleep
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
WriteFile
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID

winmm

GetDriverModuleHandle
DefDriverProc

Exports

Exports

DriverProc

Sections

.text
Size: 455KB - Virtual size: 455KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text1
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 145KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.trace
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/lame_acm.xml
$SYSDIR/lame_acm.xml.new
$SYSDIR/libmpeg2_ff.dll
.dll windows:5 windows x86 arch:x86

2581b53aba56b87fe9a8244887dbcfcc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\SVN ffdshow\trunk\obj\Release_Win32_VC2010\libmpeg2_ff.pdb

Imports

kernel32

GetCurrentThreadId
DecodePointer
GetCommandLineA
HeapAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
HeapSize
GetLastError
HeapFree
HeapReAlloc
IsProcessorFeaturePresent
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
InterlockedDecrement
GetProcAddress
Sleep
ExitProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
WriteFile
GetModuleFileNameW
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryW
RtlUnwind
LCMapStringW
MultiByteToWideChar
GetStringTypeW

Exports

Exports

getVersion
mpeg2_accel
mpeg2_buffer
mpeg2_close
mpeg2_info
mpeg2_init
mpeg2_parse
mpeg2_reset
mpeg2_set_accel
mpeg2_set_rtStart

Sections

.text
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/libmpeg2_ff.dll.new
.dll windows:5 windows x86 arch:x86

2581b53aba56b87fe9a8244887dbcfcc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\SVN ffdshow\trunk\obj\Release_Win32_VC2010\libmpeg2_ff.pdb

Imports

kernel32

GetCurrentThreadId
DecodePointer
GetCommandLineA
HeapAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
HeapSize
GetLastError
HeapFree
HeapReAlloc
IsProcessorFeaturePresent
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
InterlockedDecrement
GetProcAddress
Sleep
ExitProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
WriteFile
GetModuleFileNameW
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryW
RtlUnwind
LCMapStringW
MultiByteToWideChar
GetStringTypeW

Exports

Exports

getVersion
mpeg2_accel
mpeg2_buffer
mpeg2_close
mpeg2_info
mpeg2_init
mpeg2_parse
mpeg2_reset
mpeg2_set_accel
mpeg2_set_rtStart

Sections

.text
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/mkunicode.dll
.dll windows:5 windows x86 arch:x86

1da5d5aea5082cc09bfa84c92764c4f2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLocaleInfoA
MultiByteToWideChar

Exports

Exports

Utf16ToUtf8
Utf8ToUtf16
iso_code2tocode3
iso_code3tocode2
iso_code3tocode3
iso_codetoname
iso_getentry
iso_getlcid
iso_getsyslang
iso_nametocode3

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 158B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/mkunicode.dll.new
.dll windows:5 windows x86 arch:x86

1da5d5aea5082cc09bfa84c92764c4f2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLocaleInfoA
MultiByteToWideChar

Exports

Exports

Utf16ToUtf8
Utf8ToUtf16
iso_code2tocode3
iso_code3tocode2
iso_code3tocode3
iso_codetoname
iso_getentry
iso_getlcid
iso_getsyslang
iso_nametocode3

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 158B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/mkv2vfr.exe
.exe windows:5 windows x86 arch:x86

ade293a585eb79dab2b7a2ee063e1967

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
GetLastError
SetFilePointer
CreateFileW
CloseHandle
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
WideCharToMultiByte
GetConsoleOutputCP
GetConsoleMode
GetACP
GetStdHandle
GetCommandLineW
GetTickCount
SetEndOfFile
GetVersionExA
ReadFile
FormatMessageW
MultiByteToWideChar
FormatMessageA
GetFileSize
CreateFileA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
RtlUnwind
GetCommandLineA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleFileNameA
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
VirtualAlloc
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
Sleep
ExitProcess
GetCPInfo
GetOEMCP
IsValidCodePage
SetHandleCount
GetFileType
GetStartupInfoA
GetModuleHandleA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryA
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
GetConsoleCP
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
FlushFileBuffers
WriteConsoleA
WriteConsoleW

mkzlib

inflateEnd
inflateInit_
inflateReset
inflate

mkunicode

Utf16ToUtf8

Sections

.text
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/mkv2vfr.exe.new
.exe windows:5 windows x86 arch:x86

ade293a585eb79dab2b7a2ee063e1967

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
GetLastError
SetFilePointer
CreateFileW
CloseHandle
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
WideCharToMultiByte
GetConsoleOutputCP
GetConsoleMode
GetACP
GetStdHandle
GetCommandLineW
GetTickCount
SetEndOfFile
GetVersionExA
ReadFile
FormatMessageW
MultiByteToWideChar
FormatMessageA
GetFileSize
CreateFileA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
RtlUnwind
GetCommandLineA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleFileNameA
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
VirtualAlloc
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
Sleep
ExitProcess
GetCPInfo
GetOEMCP
IsValidCodePage
SetHandleCount
GetFileType
GetStartupInfoA
GetModuleHandleA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryA
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
GetConsoleCP
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
FlushFileBuffers
WriteConsoleA
WriteConsoleW

mkzlib

inflateEnd
inflateInit_
inflateReset
inflate

mkunicode

Utf16ToUtf8

Sections

.text
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/mkx.dll
.dll regsvr32 windows:5 windows x86 arch:x86

ffba31037d99e8d5c93426513a3f3a48

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

inet_ntoa
htonl
getservbyname
htons
gethostbyname
ntohs
getservbyport
WSASetLastError
WSACleanup
closesocket
recv
shutdown
WSAGetLastError
gethostbyaddr
WSAStartup
socket
setsockopt
ioctlsocket
connect
select
__WSAFDIsSet
send
inet_addr

kernel32

FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
RaiseException
LeaveCriticalSection
DeleteCriticalSection
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
Sleep
InterlockedExchange
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
HeapFree
EnterCriticalSection
HeapAlloc
GetProcessHeap
GetLastError
ReadFile
SetFilePointer
GetFileSize
GetFileTime
CreateFileA
WideCharToMultiByte
CreateFileW
VirtualFree
CloseHandle
lstrlenW
InitializeCriticalSection
InterlockedIncrement
InterlockedDecrement
GetModuleHandleW
lstrcmpiW
GetModuleFileNameW
SetThreadLocale
GetThreadLocale
MultiByteToWideChar
LoadLibraryExW
FormatMessageW
FormatMessageA
HeapReAlloc
HeapCreate
HeapDestroy
SetStdHandle
VirtualQuery
LCMapStringW
SetHandleCount
FreeEnvironmentStringsW
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
VirtualAlloc
GetConsoleMode
GetConsoleCP
ExitProcess
GetModuleFileNameA
GetStdHandle
WriteFile
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringA
InitializeCriticalSectionAndSpinCount
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
GetVersionExA
lstrlenA
GetTickCount
HeapSize
GetCurrentThreadId
GetCommandLineA
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP

user32

CharNextW

advapi32

RegCreateKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegQueryValueExW

ole32

CoCreateInstance
StringFromGUID2
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc

oleaut32

VariantChangeType
VariantClear
VariantInit
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysStringLen
SysFreeString
SafeArrayUnaccessData
SafeArrayDestroy
SafeArrayAccessData
SafeArrayCreate
SysAllocStringLen

mkzlib

inflate
inflateInit_
inflateEnd
inflateReset

mkunicode

Utf8ToUtf16
Utf16ToUtf8

rpcrt4

UuidToStringA
RpcStringFreeA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 111KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/mkx.dll.new
.dll regsvr32 windows:5 windows x86 arch:x86

ffba31037d99e8d5c93426513a3f3a48

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

inet_ntoa
htonl
getservbyname
htons
gethostbyname
ntohs
getservbyport
WSASetLastError
WSACleanup
closesocket
recv
shutdown
WSAGetLastError
gethostbyaddr
WSAStartup
socket
setsockopt
ioctlsocket
connect
select
__WSAFDIsSet
send
inet_addr

kernel32

FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
RaiseException
LeaveCriticalSection
DeleteCriticalSection
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
Sleep
InterlockedExchange
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
HeapFree
EnterCriticalSection
HeapAlloc
GetProcessHeap
GetLastError
ReadFile
SetFilePointer
GetFileSize
GetFileTime
CreateFileA
WideCharToMultiByte
CreateFileW
VirtualFree
CloseHandle
lstrlenW
InitializeCriticalSection
InterlockedIncrement
InterlockedDecrement
GetModuleHandleW
lstrcmpiW
GetModuleFileNameW
SetThreadLocale
GetThreadLocale
MultiByteToWideChar
LoadLibraryExW
FormatMessageW
FormatMessageA
HeapReAlloc
HeapCreate
HeapDestroy
SetStdHandle
VirtualQuery
LCMapStringW
SetHandleCount
FreeEnvironmentStringsW
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
VirtualAlloc
GetConsoleMode
GetConsoleCP
ExitProcess
GetModuleFileNameA
GetStdHandle
WriteFile
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringA
InitializeCriticalSectionAndSpinCount
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
GetVersionExA
lstrlenA
GetTickCount
HeapSize
GetCurrentThreadId
GetCommandLineA
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP

user32

CharNextW

advapi32

RegCreateKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegQueryValueExW

ole32

CoCreateInstance
StringFromGUID2
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc

oleaut32

VariantChangeType
VariantClear
VariantInit
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysStringLen
SysFreeString
SafeArrayUnaccessData
SafeArrayDestroy
SafeArrayAccessData
SafeArrayCreate
SysAllocStringLen

mkzlib

inflate
inflateInit_
inflateEnd
inflateReset

mkunicode

Utf8ToUtf16
Utf16ToUtf8

rpcrt4

UuidToStringA
RpcStringFreeA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 111KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/mkzlib.dll
.dll windows:5 windows x86 arch:x86

efcc761811aa76f93e9c981878270d69

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
HeapFree
HeapAlloc
GetCurrentThreadId
GetCommandLineA
HeapCreate
HeapDestroy
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
RtlUnwind
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW

Exports

Exports

adler32
adler32_combine
compress
compress2
compressBound
crc32
crc32_combine
deflate
deflateBound
deflateCopy
deflateEnd
deflateInit2_
deflateInit_
deflateParams
deflatePrime
deflateReset
deflateSetDictionary
deflateSetHeader
deflateTune
get_crc_table
inflate
inflateCopy
inflateEnd
inflateGetHeader
inflateInit2_
inflateInit_
inflatePrime
inflateReset
inflateSetDictionary
inflateSync
inflateSyncPoint
zError
zlibCompileFlags
zlibVersion

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/mkzlib.dll.new
.dll windows:5 windows x86 arch:x86

efcc761811aa76f93e9c981878270d69

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
HeapFree
HeapAlloc
GetCurrentThreadId
GetCommandLineA
HeapCreate
HeapDestroy
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
RtlUnwind
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW

Exports

Exports

adler32
adler32_combine
compress
compress2
compressBound
crc32
crc32_combine
deflate
deflateBound
deflateCopy
deflateEnd
deflateInit2_
deflateInit_
deflateParams
deflatePrime
deflateReset
deflateSetDictionary
deflateSetHeader
deflateTune
get_crc_table
inflate
inflateCopy
inflateEnd
inflateGetHeader
inflateInit2_
inflateInit_
inflatePrime
inflateReset
inflateSetDictionary
inflateSync
inflateSyncPoint
zError
zlibCompileFlags
zlibVersion

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/mp4.dll
.dll regsvr32 windows:5 windows x86 arch:x86

3f440f513153ae823175c3bf5cd0945f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleW
lstrcmpiW
GetModuleFileNameW
GetProcAddress
GetThreadLocale
FreeLibrary
LoadLibraryExW
lstrlenW
InterlockedDecrement
InterlockedIncrement
lstrlenA
WideCharToMultiByte
MultiByteToWideChar
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetLastError
SetThreadLocale
RaiseException
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
SetFilePointer
GetTickCount
CloseHandle
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
VirtualQuery
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapCreate
VirtualFree
VirtualAlloc
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleHandleA
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA

user32

CharNextW

advapi32

RegQueryInfoKeyW
RegDeleteKeyW
RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegEnumKeyExW
RegSetValueExW

ole32

CoTaskMemFree
StringFromGUID2
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc

oleaut32

VariantChangeType
SafeArrayCreate
SafeArrayAccessData
SafeArrayDestroy
SafeArrayUnaccessData
VariantClear
SysFreeString
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysStringLen
SysAllocStringLen

mkzlib

inflate
inflateInit_
inflateEnd

mkunicode

Utf16ToUtf8
Utf8ToUtf16

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/mp4.dll.new
.dll regsvr32 windows:5 windows x86 arch:x86

3f440f513153ae823175c3bf5cd0945f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleW
lstrcmpiW
GetModuleFileNameW
GetProcAddress
GetThreadLocale
FreeLibrary
LoadLibraryExW
lstrlenW
InterlockedDecrement
InterlockedIncrement
lstrlenA
WideCharToMultiByte
MultiByteToWideChar
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetLastError
SetThreadLocale
RaiseException
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
SetFilePointer
GetTickCount
CloseHandle
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
VirtualQuery
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapCreate
VirtualFree
VirtualAlloc
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleHandleA
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA

user32

CharNextW

advapi32

RegQueryInfoKeyW
RegDeleteKeyW
RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegEnumKeyExW
RegSetValueExW

ole32

CoTaskMemFree
StringFromGUID2
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc

oleaut32

VariantChangeType
SafeArrayCreate
SafeArrayAccessData
SafeArrayDestroy
SafeArrayUnaccessData
VariantClear
SysFreeString
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysStringLen
SysAllocStringLen

mkzlib

inflate
inflateInit_
inflateEnd

mkunicode

Utf16ToUtf8
Utf8ToUtf16

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/ogm.dll
.dll regsvr32 windows:5 windows x86 arch:x86

b917edfd761f1ce9e8e8288156f4e023

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcmpiW
GetModuleFileNameW
SetThreadLocale
GetModuleHandleW
FreeLibrary
LoadLibraryExW
GetProcAddress
GetLastError
lstrlenW
InterlockedDecrement
InterlockedIncrement
WideCharToMultiByte
MultiByteToWideChar
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetThreadLocale
RaiseException
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
LoadLibraryA
lstrlenA
GetTickCount
CloseHandle
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
LCMapStringA
LCMapStringW
RtlUnwind
VirtualQuery
HeapCreate
VirtualFree
VirtualAlloc
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleHandleA
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount

user32

CharNextW

advapi32

RegQueryInfoKeyW
RegDeleteKeyW
RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegEnumKeyExW
RegSetValueExW

ole32

CoTaskMemRealloc
CoTaskMemFree
StringFromGUID2
CoCreateInstance
CoTaskMemAlloc

oleaut32

VariantChangeType
SafeArrayDestroy
SafeArrayUnaccessData
SysAllocStringLen
VariantClear
VariantInit
SafeArrayCreate
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysStringLen
SafeArrayAccessData
SysFreeString

mkunicode

iso_nametocode3
Utf8ToUtf16
iso_code3tocode3

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/ogm.dll.new
.dll regsvr32 windows:5 windows x86 arch:x86

b917edfd761f1ce9e8e8288156f4e023

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcmpiW
GetModuleFileNameW
SetThreadLocale
GetModuleHandleW
FreeLibrary
LoadLibraryExW
GetProcAddress
GetLastError
lstrlenW
InterlockedDecrement
InterlockedIncrement
WideCharToMultiByte
MultiByteToWideChar
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetThreadLocale
RaiseException
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
LoadLibraryA
lstrlenA
GetTickCount
CloseHandle
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
LCMapStringA
LCMapStringW
RtlUnwind
VirtualQuery
HeapCreate
VirtualFree
VirtualAlloc
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleHandleA
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount

user32

CharNextW

advapi32

RegQueryInfoKeyW
RegDeleteKeyW
RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegEnumKeyExW
RegSetValueExW

ole32

CoTaskMemRealloc
CoTaskMemFree
StringFromGUID2
CoCreateInstance
CoTaskMemAlloc

oleaut32

VariantChangeType
SafeArrayDestroy
SafeArrayUnaccessData
SysAllocStringLen
VariantClear
VariantInit
SafeArrayCreate
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysStringLen
SafeArrayAccessData
SysFreeString

mkunicode

iso_nametocode3
Utf8ToUtf16
iso_code3tocode3

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/splitter.ax
.dll regsvr32 windows:5 windows x86 arch:x86

414ec1bc0de0d85027929ca19e0d6be5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

comctl32

InitCommonControlsEx

gdi32

BitBlt
AddFontResourceW
DeleteObject
CreateCompatibleDC
CreateDIBSection
SelectObject
CreateFontW
GetDeviceCaps
GetTextMetricsW
SetBkColor
SetBkMode
ExtTextOutW
DeleteDC
GdiFlush
SetTextColor
SetTextAlign
CreateDCA
RemoveFontResourceW

kernel32

GetModuleFileNameW
MultiByteToWideChar
GetCurrentProcessId
GetModuleFileNameA
DeleteFileW
GetTempPathW
GetTempFileNameW
CreateFileW
WriteFile
GetLastError
GetSystemTime
SystemTimeToFileTime
CreateFileA
SetFilePointer
ReadFile
CreateThread
VirtualFree
VirtualAlloc
SetEndOfFile
GetVersion
InterlockedExchange
SetThreadPriority
GetCurrentThread
GetCurrentThreadId
GetProcAddress
GetModuleHandleW
MulDiv
lstrlenW
EnterCriticalSection
FindFirstFileW
FindNextFileW
FindClose
lstrlenA
VirtualQuery
FreeLibrary
WideCharToMultiByte
DeleteCriticalSection
InitializeCriticalSection
FindResourceW
LeaveCriticalSection
FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetConsoleMode
GetConsoleCP
GetStringTypeW
GetStringTypeA
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
LoadLibraryA
GetModuleHandleA
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
ExitProcess
LoadResource
LockResource
SizeofResource
WaitForSingleObject
HeapAlloc
WaitForMultipleObjects
HeapFree
InterlockedDecrement
HeapDestroy
CreateEventW
HeapCreate
InterlockedIncrement
CloseHandle
ResetEvent
SetEvent
FindResourceExW
GetTickCount
Sleep
SetLastError
TlsFree
TlsSetValue
GetCurrentProcess
TlsAlloc
TlsGetValue
GetStdHandle
RtlUnwind
lstrcpynW
lstrcmpW
ReleaseSemaphore
CreateSemaphoreW
GetSystemInfo
DuplicateHandle
GetVersionExW
DisableThreadLibraryCalls
lstrcmpiA
RaiseException
OutputDebugStringA
FormatMessageW
HeapReAlloc
HeapSize
GetCommandLineA
ExitThread
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetProcessHeap
LoadLibraryW

user32

GetDlgItemInt
GetDlgItemTextW
SetDlgItemInt
SetDlgItemTextW
ShowWindow
GetWindowThreadProcessId
IsWindowVisible
MessageBoxW
EnumWindows
CreatePopupMenu
SendDlgItemMessageW
GetDesktopWindow
LoadStringW
DestroyWindow
InvalidateRect
CreateDialogParamW
GetMenuItemCount
CheckMenuRadioItem
DestroyMenu
GetDlgItem
SendMessageW
AppendMenuW
PostMessageW
TrackPopupMenu
GetCursorPos
SetForegroundWindow
LoadIconW
PostQuitMessage
DefWindowProcW
GetSystemMetrics
CreateWindowExW
RegisterClassW
DispatchMessageW
TranslateMessage
GetMessageW
SetTimer
RegisterWindowMessageW
CallWindowProcW
EndPaint
BeginPaint
RedrawWindow
ReleaseDC
GetDC
GetClientRect
MoveWindow
ScreenToClient
GetWindowRect
SetWindowLongW
GetWindowLongW
KillTimer
GetSysColor

advapi32

RegEnumKeyExW
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
RegEnumValueA
RegOpenKeyExW
RegQueryValueExA
RegOpenKeyExA
CryptReleaseContext
CryptAcquireContextW
CryptGenRandom
RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegSetValueExW
RegCreateKeyW
RegSetValueW
RegQueryValueExW

shell32

Shell_NotifyIconW

ole32

CoTaskMemAlloc
CoCreateInstance
StringFromGUID2
CoInitialize
CoFreeUnusedLibraries
CoInitializeEx
CoTaskMemFree
CoUninitialize

oleaut32

SafeArrayDestroy
SafeArrayCreateVector
VariantChangeType
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
VarBstrCmp
SysStringLen
SysStringByteLen
SysAllocStringByteLen
VariantClear
SysAllocString
VariantInit
OleCreatePropertyFrame
SysFreeString
SysAllocStringLen
OleLoadPicture
SafeArrayCreate
SafeArrayGetDim

mkzlib

deflateBound
deflate
deflateInit_
deflateEnd
crc32
deflateReset
compress

mkunicode

iso_getlcid
iso_codetoname
iso_getentry
Utf8ToUtf16
Utf16ToUtf8
iso_getsyslang

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

rpcrt4

UuidToStringA
UuidFromStringA
RpcStringFreeA

Exports

Exports

Configure
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 393KB - Virtual size: 392KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/splitter.ax.new
.dll regsvr32 windows:5 windows x86 arch:x86

414ec1bc0de0d85027929ca19e0d6be5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

comctl32

InitCommonControlsEx

gdi32

BitBlt
AddFontResourceW
DeleteObject
CreateCompatibleDC
CreateDIBSection
SelectObject
CreateFontW
GetDeviceCaps
GetTextMetricsW
SetBkColor
SetBkMode
ExtTextOutW
DeleteDC
GdiFlush
SetTextColor
SetTextAlign
CreateDCA
RemoveFontResourceW

kernel32

GetModuleFileNameW
MultiByteToWideChar
GetCurrentProcessId
GetModuleFileNameA
DeleteFileW
GetTempPathW
GetTempFileNameW
CreateFileW
WriteFile
GetLastError
GetSystemTime
SystemTimeToFileTime
CreateFileA
SetFilePointer
ReadFile
CreateThread
VirtualFree
VirtualAlloc
SetEndOfFile
GetVersion
InterlockedExchange
SetThreadPriority
GetCurrentThread
GetCurrentThreadId
GetProcAddress
GetModuleHandleW
MulDiv
lstrlenW
EnterCriticalSection
FindFirstFileW
FindNextFileW
FindClose
lstrlenA
VirtualQuery
FreeLibrary
WideCharToMultiByte
DeleteCriticalSection
InitializeCriticalSection
FindResourceW
LeaveCriticalSection
FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetConsoleMode
GetConsoleCP
GetStringTypeW
GetStringTypeA
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
LoadLibraryA
GetModuleHandleA
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
ExitProcess
LoadResource
LockResource
SizeofResource
WaitForSingleObject
HeapAlloc
WaitForMultipleObjects
HeapFree
InterlockedDecrement
HeapDestroy
CreateEventW
HeapCreate
InterlockedIncrement
CloseHandle
ResetEvent
SetEvent
FindResourceExW
GetTickCount
Sleep
SetLastError
TlsFree
TlsSetValue
GetCurrentProcess
TlsAlloc
TlsGetValue
GetStdHandle
RtlUnwind
lstrcpynW
lstrcmpW
ReleaseSemaphore
CreateSemaphoreW
GetSystemInfo
DuplicateHandle
GetVersionExW
DisableThreadLibraryCalls
lstrcmpiA
RaiseException
OutputDebugStringA
FormatMessageW
HeapReAlloc
HeapSize
GetCommandLineA
ExitThread
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetProcessHeap
LoadLibraryW

user32

GetDlgItemInt
GetDlgItemTextW
SetDlgItemInt
SetDlgItemTextW
ShowWindow
GetWindowThreadProcessId
IsWindowVisible
MessageBoxW
EnumWindows
CreatePopupMenu
SendDlgItemMessageW
GetDesktopWindow
LoadStringW
DestroyWindow
InvalidateRect
CreateDialogParamW
GetMenuItemCount
CheckMenuRadioItem
DestroyMenu
GetDlgItem
SendMessageW
AppendMenuW
PostMessageW
TrackPopupMenu
GetCursorPos
SetForegroundWindow
LoadIconW
PostQuitMessage
DefWindowProcW
GetSystemMetrics
CreateWindowExW
RegisterClassW
DispatchMessageW
TranslateMessage
GetMessageW
SetTimer
RegisterWindowMessageW
CallWindowProcW
EndPaint
BeginPaint
RedrawWindow
ReleaseDC
GetDC
GetClientRect
MoveWindow
ScreenToClient
GetWindowRect
SetWindowLongW
GetWindowLongW
KillTimer
GetSysColor

advapi32

RegEnumKeyExW
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
RegEnumValueA
RegOpenKeyExW
RegQueryValueExA
RegOpenKeyExA
CryptReleaseContext
CryptAcquireContextW
CryptGenRandom
RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegSetValueExW
RegCreateKeyW
RegSetValueW
RegQueryValueExW

shell32

Shell_NotifyIconW

ole32

CoTaskMemAlloc
CoCreateInstance
StringFromGUID2
CoInitialize
CoFreeUnusedLibraries
CoInitializeEx
CoTaskMemFree
CoUninitialize

oleaut32

SafeArrayDestroy
SafeArrayCreateVector
VariantChangeType
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
VarBstrCmp
SysStringLen
SysStringByteLen
SysAllocStringByteLen
VariantClear
SysAllocString
VariantInit
OleCreatePropertyFrame
SysFreeString
SysAllocStringLen
OleLoadPicture
SafeArrayCreate
SafeArrayGetDim

mkzlib

deflateBound
deflate
deflateInit_
deflateEnd
crc32
deflateReset
compress

mkunicode

iso_getlcid
iso_codetoname
iso_getentry
Utf8ToUtf16
Utf16ToUtf8
iso_getsyslang

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

rpcrt4

UuidToStringA
UuidFromStringA
RpcStringFreeA

Exports

Exports

Configure
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 393KB - Virtual size: 392KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/tak_deco_lib.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

tak_APE_GetDesc
tak_APE_GetErrorString
tak_APE_GetIndexOfKey
tak_APE_GetItemDesc
tak_APE_GetItemKey
tak_APE_GetItemNum
tak_APE_GetItemValue
tak_APE_GetTextItemValueAsAnsi
tak_APE_ReadOnly
tak_APE_State
tak_APE_Valid
tak_GetCodecName
tak_GetLibraryVersion
tak_GetWaveExtensibleSpeakerMask
tak_SSD_Create_FromFile
tak_SSD_Create_FromStream
tak_SSD_Destroy
tak_SSD_GetAPEv2Tag
tak_SSD_GetCurFrameBitRate
tak_SSD_GetEncoderInfo
tak_SSD_GetErrorString
tak_SSD_GetFrameSize
tak_SSD_GetMD5
tak_SSD_GetReadPos
tak_SSD_GetSimpleWaveDataDesc
tak_SSD_GetStateInfo
tak_SSD_GetStreamInfo
tak_SSD_GetStreamInfo_V22
tak_SSD_ReadAudio
tak_SSD_ReadSimpleWaveData
tak_SSD_Seek
tak_SSD_State
tak_SSD_Valid

Sections

CODE
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$SYSDIR/tak_deco_lib.dll.new
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

tak_APE_GetDesc
tak_APE_GetErrorString
tak_APE_GetIndexOfKey
tak_APE_GetItemDesc
tak_APE_GetItemKey
tak_APE_GetItemNum
tak_APE_GetItemValue
tak_APE_GetTextItemValueAsAnsi
tak_APE_ReadOnly
tak_APE_State
tak_APE_Valid
tak_GetCodecName
tak_GetLibraryVersion
tak_GetWaveExtensibleSpeakerMask
tak_SSD_Create_FromFile
tak_SSD_Create_FromStream
tak_SSD_Destroy
tak_SSD_GetAPEv2Tag
tak_SSD_GetCurFrameBitRate
tak_SSD_GetEncoderInfo
tak_SSD_GetErrorString
tak_SSD_GetFrameSize
tak_SSD_GetMD5
tak_SSD_GetReadPos
tak_SSD_GetSimpleWaveDataDesc
tak_SSD_GetStateInfo
tak_SSD_GetStreamInfo
tak_SSD_GetStreamInfo_V22
tak_SSD_ReadAudio
tak_SSD_ReadSimpleWaveData
tak_SSD_Seek
tak_SSD_State
tak_SSD_Valid

Sections

CODE
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$SYSDIR/ts.dll
.dll regsvr32 windows:5 windows x86 arch:x86

282ab4084f47e3d52f7361377f375f8f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcmpiW
GetModuleHandleA
GetProcAddress
GetThreadLocale
GetLastError
SetThreadLocale
lstrlenW
GetModuleFileNameW
GetModuleHandleW
LoadLibraryExW
FreeLibrary
DeleteCriticalSection
LockResource
EnterCriticalSection
RaiseException
MultiByteToWideChar
GetFileAttributesW
LeaveCriticalSection
SizeofResource
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
LoadResource
FindResourceW
FindResourceExW
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoA
lstrlenA
OutputDebugStringA
GetTickCount
CloseHandle
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
VirtualFree
VirtualAlloc
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
LCMapStringW
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlUnwind
SetFilePointer
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
LoadLibraryA
LCMapStringA
GetStringTypeA
GetStringTypeW
VirtualQuery

user32

CharNextW

advapi32

RegOpenKeyExW
CryptGetHashParam
CryptAcquireContextW
CryptReleaseContext
CryptCreateHash
CryptDestroyHash
CryptHashData
RegSetValueExW
RegCloseKey
RegEnumKeyExW
RegQueryValueExW
RegDeleteValueW
RegDeleteKeyW
RegQueryInfoKeyW
RegCreateKeyExW

ole32

CoCreateInstance
CoTaskMemAlloc
StringFromGUID2
CoTaskMemRealloc
CoTaskMemFree

oleaut32

VariantInit
SysAllocStringLen
SafeArrayUnaccessData
VarUI4FromStr
SysFreeString
VariantChangeType
SafeArrayCreate
SafeArrayDestroy
SafeArrayAccessData
VariantClear

mkunicode

Utf8ToUtf16

rpcrt4

RpcStringFreeA
UuidToStringA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 788B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/ts.dll.new
.dll regsvr32 windows:5 windows x86 arch:x86

282ab4084f47e3d52f7361377f375f8f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcmpiW
GetModuleHandleA
GetProcAddress
GetThreadLocale
GetLastError
SetThreadLocale
lstrlenW
GetModuleFileNameW
GetModuleHandleW
LoadLibraryExW
FreeLibrary
DeleteCriticalSection
LockResource
EnterCriticalSection
RaiseException
MultiByteToWideChar
GetFileAttributesW
LeaveCriticalSection
SizeofResource
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
LoadResource
FindResourceW
FindResourceExW
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoA
lstrlenA
OutputDebugStringA
GetTickCount
CloseHandle
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
VirtualFree
VirtualAlloc
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
LCMapStringW
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlUnwind
SetFilePointer
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
LoadLibraryA
LCMapStringA
GetStringTypeA
GetStringTypeW
VirtualQuery

user32

CharNextW

advapi32

RegOpenKeyExW
CryptGetHashParam
CryptAcquireContextW
CryptReleaseContext
CryptCreateHash
CryptDestroyHash
CryptHashData
RegSetValueExW
RegCloseKey
RegEnumKeyExW
RegQueryValueExW
RegDeleteValueW
RegDeleteKeyW
RegQueryInfoKeyW
RegCreateKeyExW

ole32

CoCreateInstance
CoTaskMemAlloc
StringFromGUID2
CoTaskMemRealloc
CoTaskMemFree

oleaut32

VariantInit
SysAllocStringLen
SafeArrayUnaccessData
VarUI4FromStr
SysFreeString
VariantChangeType
SafeArrayCreate
SafeArrayDestroy
SafeArrayAccessData
VariantClear

mkunicode

Utf8ToUtf16

rpcrt4

RpcStringFreeA
UuidToStringA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 788B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/x264vfw.dll
.dll windows:4 windows x86 arch:x86

d8798f85e2760a4ddfe2f14e05e7668d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

advapi32

RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA

comdlg32

GetOpenFileNameA
GetSaveFileNameA

gdi32

GetStockObject
GetTextExtentPoint32A
SelectObject

kernel32

CloseHandle
CreateEventA
CreateSemaphoreA
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
FreeLibrary
GetConsoleScreenBufferInfo
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetProcessAffinityMask
GetStdHandle
GetSystemTimeAsFileTime
GetThreadContext
GetThreadPriority
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
InitializeCriticalSection
InterlockedCompareExchange
InterlockedExchange
InterlockedExchangeAdd
InterlockedIncrement
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
OpenProcess
ReleaseSemaphore
ResetEvent
ResumeThread
SetConsoleTextAttribute
SetEvent
SetLastError
SetThreadContext
SetThreadPriority
Sleep
SuspendThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte

msvcrt

_close
_fstat
_ftime
_isatty
_open
_read
_stat
_strdup
_unlink
_write
__dllonexit
__mb_cur_max
_assert
_beginthreadex
_endthreadex
_errno
_filelengthi64
_fstati64
_ftime
_iob
_isctype
_lseeki64
_pctype
_setjmp
_stati64
_stricmp
_strnicmp
_winmajor
_wopen
abort
acos
asin
atan
atof
atoi
calloc
ceil
cos
cosh
exit
exp
fclose
fflush
fgetpos
fgets
floor
fopen
fprintf
fputc
fputs
fread
free
fsetpos
fwrite
getenv
localeconv
log
longjmp
malloc
memcmp
memcpy
memmove
memset
pow
printf
qsort
realloc
rename
setlocale
sin
sinh
sprintf
sqrt
sscanf
strcat
strchr
strcmp
strcpy
strcspn
strlen
strncmp
strpbrk
strrchr
strspn
strstr
strtok
strtol
tan
tanh
time
toupper
vfprintf
wcscpy
wcslen

shell32

ShellExecuteA

user32

BringWindowToTop
CheckDlgButton
CloseClipboard
CreateDialogParamA
CreateWindowExA
DestroyWindow
DialogBoxParamA
EmptyClipboard
EnableWindow
EndDialog
EnumChildWindows
GetClientRect
GetDC
GetDesktopWindow
GetDlgCtrlID
GetDlgItem
GetDlgItemInt
GetDlgItemTextA
GetParent
GetWindowLongA
IsDlgButtonChecked
LoadStringA
MapDialogRect
MessageBoxA
MoveWindow
OpenClipboard
ReleaseDC
SendDlgItemMessageA
SendMessageA
SetClipboardData
SetDlgItemInt
SetDlgItemTextA
SetWindowLongA
SetWindowPos
ShowWindow

winmm

DefDriverProc

wsock32

WSAGetLastError
WSASetLastError

Exports

Exports

Configure
DriverProc

Sections

.text
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 158KB - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rodata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 584KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 93B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/x264vfw.dll.new
.dll windows:4 windows x86 arch:x86

d8798f85e2760a4ddfe2f14e05e7668d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

advapi32

RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA

comdlg32

GetOpenFileNameA
GetSaveFileNameA

gdi32

GetStockObject
GetTextExtentPoint32A
SelectObject

kernel32

CloseHandle
CreateEventA
CreateSemaphoreA
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
FreeLibrary
GetConsoleScreenBufferInfo
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetProcessAffinityMask
GetStdHandle
GetSystemTimeAsFileTime
GetThreadContext
GetThreadPriority
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
InitializeCriticalSection
InterlockedCompareExchange
InterlockedExchange
InterlockedExchangeAdd
InterlockedIncrement
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
OpenProcess
ReleaseSemaphore
ResetEvent
ResumeThread
SetConsoleTextAttribute
SetEvent
SetLastError
SetThreadContext
SetThreadPriority
Sleep
SuspendThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte

msvcrt

_close
_fstat
_ftime
_isatty
_open
_read
_stat
_strdup
_unlink
_write
__dllonexit
__mb_cur_max
_assert
_beginthreadex
_endthreadex
_errno
_filelengthi64
_fstati64
_ftime
_iob
_isctype
_lseeki64
_pctype
_setjmp
_stati64
_stricmp
_strnicmp
_winmajor
_wopen
abort
acos
asin
atan
atof
atoi
calloc
ceil
cos
cosh
exit
exp
fclose
fflush
fgetpos
fgets
floor
fopen
fprintf
fputc
fputs
fread
free
fsetpos
fwrite
getenv
localeconv
log
longjmp
malloc
memcmp
memcpy
memmove
memset
pow
printf
qsort
realloc
rename
setlocale
sin
sinh
sprintf
sqrt
sscanf
strcat
strchr
strcmp
strcpy
strcspn
strlen
strncmp
strpbrk
strrchr
strspn
strstr
strtok
strtol
tan
tanh
time
toupper
vfprintf
wcscpy
wcslen

shell32

ShellExecuteA

user32

BringWindowToTop
CheckDlgButton
CloseClipboard
CreateDialogParamA
CreateWindowExA
DestroyWindow
DialogBoxParamA
EmptyClipboard
EnableWindow
EndDialog
EnumChildWindows
GetClientRect
GetDC
GetDesktopWindow
GetDlgCtrlID
GetDlgItem
GetDlgItemInt
GetDlgItemTextA
GetParent
GetWindowLongA
IsDlgButtonChecked
LoadStringA
MapDialogRect
MessageBoxA
MoveWindow
OpenClipboard
ReleaseDC
SendDlgItemMessageA
SendMessageA
SetClipboardData
SetDlgItemInt
SetDlgItemTextA
SetWindowLongA
SetWindowPos
ShowWindow

winmm

DefDriverProc

wsock32

WSAGetLastError
WSASetLastError

Exports

Exports

Configure
DriverProc

Sections

.text
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 158KB - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rodata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 584KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 93B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/xvidcore.dll
.dll windows:4 windows x86 arch:x86

e9ecea346b9b42c7495986678b8cc673

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateThread
DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemInfo
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WaitForSingleObject

msvcrt

__dllonexit
_errno
_iob
_setjmp
_winmajor
abort
calloc
fclose
fflush
fgetc
fopen
fprintf
free
fwrite
longjmp
malloc
memcpy
memset
printf
rand
realloc
setbuf
signal
sprintf
srand
sscanf
strerror
vfprintf
vsprintf

Exports

Exports

xvid_decore
xvid_encore
xvid_global
xvid_plugin_2pass1
xvid_plugin_2pass2
xvid_plugin_dump
xvid_plugin_lumimasking
xvid_plugin_psnr
xvid_plugin_psnrhvsm
xvid_plugin_single
xvid_plugin_ssim

Sections

.text
Size: 551KB - Virtual size: 550KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rotext
Size: 131KB - Virtual size: 130KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rodata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 421KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 1024B - Virtual size: 998B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 512B - Virtual size: 188B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 512B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/xvidcore.dll.new
.dll windows:4 windows x86 arch:x86

e9ecea346b9b42c7495986678b8cc673

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateThread
DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemInfo
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WaitForSingleObject

msvcrt

__dllonexit
_errno
_iob
_setjmp
_winmajor
abort
calloc
fclose
fflush
fgetc
fopen
fprintf
free
fwrite
longjmp
malloc
memcpy
memset
printf
rand
realloc
setbuf
signal
sprintf
srand
sscanf
strerror
vfprintf
vsprintf

Exports

Exports

xvid_decore
xvid_encore
xvid_global
xvid_plugin_2pass1
xvid_plugin_2pass2
xvid_plugin_dump
xvid_plugin_lumimasking
xvid_plugin_psnr
xvid_plugin_psnrhvsm
xvid_plugin_single
xvid_plugin_ssim

Sections

.text
Size: 551KB - Virtual size: 550KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rotext
Size: 131KB - Virtual size: 130KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rodata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 421KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 1024B - Virtual size: 998B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 512B - Virtual size: 188B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 512B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/xvidvfw.dll
.dll windows:4 windows x86 arch:x86

e89029a15b1178935cd4b3ceea6051cd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA

comctl32

InitCommonControls
PropertySheetA

comdlg32

GetOpenFileNameA
GetSaveFileNameA

gdi32

CreateFontIndirectA
GetObjectA
GetStockObject
GetTextAlign
GetTextMetricsA
SelectObject
SetBkColor
SetBkMode
SetDIBitsToDevice
SetTextAlign
SetTextColor
TextOutA

kernel32

CloseHandle
CreateFileA
DeleteCriticalSection
EnterCriticalSection
FindResourceA
FreeLibrary
FreeResource
GetFileSize
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LoadResource
LockResource
OutputDebugStringA
ReadFile
TlsGetValue
VirtualProtect
VirtualQuery
WriteFile
lstrcatA
lstrcmpiA
lstrcpyA
lstrlenA

msvcrt

__dllonexit
_errno
_iob
_winmajor
abort
atof
atoi
calloc
fflush
free
fwrite
malloc
memcpy
memset
sprintf
sscanf
strcpy
strlen
vfprintf
wcscpy

shell32

ShellExecuteA

user32

CheckDlgButton
CheckRadioButton
CreateDialogParamA
CreateWindowExA
DestroyWindow
DialogBoxParamA
EnableWindow
EndDialog
EnumChildWindows
GetDC
GetDesktopWindow
GetDlgCtrlID
GetDlgItem
GetDlgItemInt
GetDlgItemTextA
GetParent
GetWindowLongA
GetWindowRect
InvalidateRect
IsDlgButtonChecked
KillTimer
LoadCursorA
LoadImageA
LoadStringA
MessageBoxA
SendDlgItemMessageA
SendMessageA
SetClassLongA
SetDlgItemInt
SetDlgItemTextA
SetTimer
SetWindowLongA
SetWindowPos
ShowWindow
wsprintfA

winmm

DefDriverProc

Exports

Exports

Configure
DriverProc

Sections

.text
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 93B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 115KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 1024B - Virtual size: 582B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 512B - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 1024B - Virtual size: 955B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$SYSDIR/xvidvfw.dll.new
.dll windows:4 windows x86 arch:x86

e89029a15b1178935cd4b3ceea6051cd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA

comctl32

InitCommonControls
PropertySheetA

comdlg32

GetOpenFileNameA
GetSaveFileNameA

gdi32

CreateFontIndirectA
GetObjectA
GetStockObject
GetTextAlign
GetTextMetricsA
SelectObject
SetBkColor
SetBkMode
SetDIBitsToDevice
SetTextAlign
SetTextColor
TextOutA

kernel32

CloseHandle
CreateFileA
DeleteCriticalSection
EnterCriticalSection
FindResourceA
FreeLibrary
FreeResource
GetFileSize
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LoadResource
LockResource
OutputDebugStringA
ReadFile
TlsGetValue
VirtualProtect
VirtualQuery
WriteFile
lstrcatA
lstrcmpiA
lstrcpyA
lstrlenA

msvcrt

__dllonexit
_errno
_iob
_winmajor
abort
atof
atoi
calloc
fflush
free
fwrite
malloc
memcpy
memset
sprintf
sscanf
strcpy
strlen
vfprintf
wcscpy

shell32

ShellExecuteA

user32

CheckDlgButton
CheckRadioButton
CreateDialogParamA
CreateWindowExA
DestroyWindow
DialogBoxParamA
EnableWindow
EndDialog
EnumChildWindows
GetDC
GetDesktopWindow
GetDlgCtrlID
GetDlgItem
GetDlgItemInt
GetDlgItemTextA
GetParent
GetWindowLongA
GetWindowRect
InvalidateRect
IsDlgButtonChecked
KillTimer
LoadCursorA
LoadImageA
LoadStringA
MessageBoxA
SendDlgItemMessageA
SendMessageA
SetClassLongA
SetDlgItemInt
SetDlgItemTextA
SetTimer
SetWindowLongA
SetWindowPos
ShowWindow
wsprintfA

winmm

DefDriverProc

Exports

Exports

Configure
DriverProc

Sections

.text
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 93B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 115KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 1024B - Virtual size: 582B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 512B - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 1024B - Virtual size: 955B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/system32/FLVSplitter.ax
.dll regsvr32 windows:5 windows x64 arch:x64

3df81a3812c399b5e323eb06b81c8831

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

H:\progs\Compiling\mpc-hc\bin\Filters_x64\FLVSplitter.pdb

Imports

kernel32

TlsAlloc
GlobalReAlloc
GlobalHandle
TlsSetValue
LocalReAlloc
TlsFree
SetErrorMode
EncodePointer
DecodePointer
HeapFree
FlsSetValue
GetCommandLineA
HeapAlloc
QueryPerformanceCounter
GetSystemTimeAsFileTime
RtlLookupFunctionEntry
RtlUnwindEx
RtlPcToFileHeader
HeapReAlloc
HeapQueryInformation
HeapSize
ExitProcess
SetStdHandle
GetFileType
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TlsGetValue
RtlVirtualUnwind
RtlCaptureContext
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FlsGetValue
FlsFree
FlsAlloc
GetStringTypeW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
SetHandleCount
GetStdHandle
GetStartupInfoW
FreeEnvironmentStringsW
GetEnvironmentStringsW
LCMapStringW
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
WriteConsoleW
SetEnvironmentVariableA
GetFullPathNameW
FlushFileBuffers
SetFilePointer
WriteFile
LocalAlloc
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFileAttributesExW
lstrcmpA
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoW
LoadLibraryExW
GlobalFlags
GetCurrentProcessId
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
InitializeCriticalSectionAndSpinCount
ReleaseActCtx
CreateActCtxW
ReadFile
SetFilePointerEx
GetFileSizeEx
DeleteFileW
Sleep
DisableThreadLibraryCalls
GetCurrentProcess
lstrcmpW
GetCurrentThreadId
SetThreadPriority
GetCurrentThread
GetTickCount
ResetEvent
SetEvent
CreateThread
WaitForSingleObject
CreateEventW
lstrlenA
GetModuleFileNameA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
RaiseException
WideCharToMultiByte
GetModuleFileNameW
GetVolumeInformationW
CloseHandle
CreateFileW
FindClose
FindFirstFileW
GetModuleHandleW
lstrlenW
FreeLibrary
lstrcpyW
GetVersionExW
GetSystemDirectoryW
GetProcAddress
LoadLibraryW
MultiByteToWideChar
FindResourceW
LoadResource
LockResource
SizeofResource
ActivateActCtx
GetLastError
DeactivateActCtx
IsDebuggerPresent
SetLastError

user32

PostQuitMessage
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
GetMessageW
TranslateMessage
GetCursorPos
RealChildWindowFromPoint
SetWindowTextW
DestroyMenu
SetCursor
ShowWindow
InvalidateRect
GetWindowThreadProcessId
IsWindowEnabled
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
GetMenuState
LoadIconW
WinHelpW
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongPtrW
SetPropW
GetPropW
RemovePropW
GetFocus
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
GetDlgItem
GetTopWindow
DestroyWindow
GetWindowLongPtrW
SetWindowLongPtrW
GetMessageTime
GetMessagePos
MonitorFromWindow
GetKeyState
SetMenu
EnableWindow
SetForegroundWindow
IsWindowVisible
ValidateRect
UpdateWindow
PostMessageW
MessageBoxW
GetClassInfoExW
RegisterClassW
GetWindowRect
ScreenToClient
UnregisterClassW
CharUpperW
SetTimer
KillTimer
GetDlgCtrlID
CallWindowProcW
PtInRect
UnhookWindowsHookEx
RegisterWindowMessageW
DispatchMessageW
PeekMessageW
ReleaseDC
GetDC
SetRect
GetActiveWindow
GetMenuItemID
AdjustWindowRectEx
SetWindowPos
RedrawWindow
IsWindow
GetWindowLongW
GetMenu
CreateWindowExW
GetSubMenu
GetMenuItemCount
LoadCursorW
MapWindowPoints
GetParent
GetSysColorBrush
GetSysColor
SystemParametersInfoW
EnumDisplayMonitors
SetRectEmpty
CopyRect
GetMonitorInfoW
GetSystemMetrics
GetClientRect
SendMessageW
GetClassNameW
GetWindow
DefWindowProcW
GetClassInfoW

gdi32

DeleteDC
CreateBitmap
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetClipBox
SetMapMode
RestoreDC
SaveDC
SetBkColor
SetTextColor
CreateDIBitmap
GetTextMetricsW
CreatePatternBrush
CreatePen
CreateSolidBrush
GetObjectW
GetStockObject
CreateFontIndirectW
EnumFontFamiliesW
GetTextCharsetInfo
DeleteObject
GetDeviceCaps

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegQueryValueExW
RegOpenKeyExW
RegDeleteKeyW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegDeleteValueW
RegCloseKey
RegSetValueW
RegCreateKeyW
RegEnumKeyExW
RegSetValueExW
RegCreateKeyExW

shell32

ShellExecuteW

shlwapi

PathStripToRootW
PathFindExtensionW
PathFindFileNameW
PathIsUNCW

ole32

CoTaskMemAlloc
CoFreeUnusedLibraries
StringFromGUID2
CLSIDFromString
CoUninitialize
CoCreateInstance
CoInitialize
CoTaskMemFree
CoCreateGuid

oleaut32

SysAllocString
SysFreeString
VariantInit
VariantClear
SysAllocStringLen
VariantChangeType

oleacc

LresultFromObject
CreateStdAccessibleObject

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 283KB - Virtual size: 282KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 42KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/system32/FLVSplitter.ax.new
.dll regsvr32 windows:5 windows x64 arch:x64

3df81a3812c399b5e323eb06b81c8831

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

H:\progs\Compiling\mpc-hc\bin\Filters_x64\FLVSplitter.pdb

Imports

kernel32

TlsAlloc
GlobalReAlloc
GlobalHandle
TlsSetValue
LocalReAlloc
TlsFree
SetErrorMode
EncodePointer
DecodePointer
HeapFree
FlsSetValue
GetCommandLineA
HeapAlloc
QueryPerformanceCounter
GetSystemTimeAsFileTime
RtlLookupFunctionEntry
RtlUnwindEx
RtlPcToFileHeader
HeapReAlloc
HeapQueryInformation
HeapSize
ExitProcess
SetStdHandle
GetFileType
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TlsGetValue
RtlVirtualUnwind
RtlCaptureContext
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FlsGetValue
FlsFree
FlsAlloc
GetStringTypeW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
SetHandleCount
GetStdHandle
GetStartupInfoW
FreeEnvironmentStringsW
GetEnvironmentStringsW
LCMapStringW
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
WriteConsoleW
SetEnvironmentVariableA
GetFullPathNameW
FlushFileBuffers
SetFilePointer
WriteFile
LocalAlloc
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFileAttributesExW
lstrcmpA
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoW
LoadLibraryExW
GlobalFlags
GetCurrentProcessId
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
InitializeCriticalSectionAndSpinCount
ReleaseActCtx
CreateActCtxW
ReadFile
SetFilePointerEx
GetFileSizeEx
DeleteFileW
Sleep
DisableThreadLibraryCalls
GetCurrentProcess
lstrcmpW
GetCurrentThreadId
SetThreadPriority
GetCurrentThread
GetTickCount
ResetEvent
SetEvent
CreateThread
WaitForSingleObject
CreateEventW
lstrlenA
GetModuleFileNameA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
RaiseException
WideCharToMultiByte
GetModuleFileNameW
GetVolumeInformationW
CloseHandle
CreateFileW
FindClose
FindFirstFileW
GetModuleHandleW
lstrlenW
FreeLibrary
lstrcpyW
GetVersionExW
GetSystemDirectoryW
GetProcAddress
LoadLibraryW
MultiByteToWideChar
FindResourceW
LoadResource
LockResource
SizeofResource
ActivateActCtx
GetLastError
DeactivateActCtx
IsDebuggerPresent
SetLastError

user32

PostQuitMessage
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
GetMessageW
TranslateMessage
GetCursorPos
RealChildWindowFromPoint
SetWindowTextW
DestroyMenu
SetCursor
ShowWindow
InvalidateRect
GetWindowThreadProcessId
IsWindowEnabled
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
GetMenuState
LoadIconW
WinHelpW
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongPtrW
SetPropW
GetPropW
RemovePropW
GetFocus
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
GetDlgItem
GetTopWindow
DestroyWindow
GetWindowLongPtrW
SetWindowLongPtrW
GetMessageTime
GetMessagePos
MonitorFromWindow
GetKeyState
SetMenu
EnableWindow
SetForegroundWindow
IsWindowVisible
ValidateRect
UpdateWindow
PostMessageW
MessageBoxW
GetClassInfoExW
RegisterClassW
GetWindowRect
ScreenToClient
UnregisterClassW
CharUpperW
SetTimer
KillTimer
GetDlgCtrlID
CallWindowProcW
PtInRect
UnhookWindowsHookEx
RegisterWindowMessageW
DispatchMessageW
PeekMessageW
ReleaseDC
GetDC
SetRect
GetActiveWindow
GetMenuItemID
AdjustWindowRectEx
SetWindowPos
RedrawWindow
IsWindow
GetWindowLongW
GetMenu
CreateWindowExW
GetSubMenu
GetMenuItemCount
LoadCursorW
MapWindowPoints
GetParent
GetSysColorBrush
GetSysColor
SystemParametersInfoW
EnumDisplayMonitors
SetRectEmpty
CopyRect
GetMonitorInfoW
GetSystemMetrics
GetClientRect
SendMessageW
GetClassNameW
GetWindow
DefWindowProcW
GetClassInfoW

gdi32

DeleteDC
CreateBitmap
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetClipBox
SetMapMode
RestoreDC
SaveDC
SetBkColor
SetTextColor
CreateDIBitmap
GetTextMetricsW
CreatePatternBrush
CreatePen
CreateSolidBrush
GetObjectW
GetStockObject
CreateFontIndirectW
EnumFontFamiliesW
GetTextCharsetInfo
DeleteObject
GetDeviceCaps

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegQueryValueExW
RegOpenKeyExW
RegDeleteKeyW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegDeleteValueW
RegCloseKey
RegSetValueW
RegCreateKeyW
RegEnumKeyExW
RegSetValueExW
RegCreateKeyExW

shell32

ShellExecuteW

shlwapi

PathStripToRootW
PathFindExtensionW
PathFindFileNameW
PathIsUNCW

ole32

CoTaskMemAlloc
CoFreeUnusedLibraries
StringFromGUID2
CLSIDFromString
CoUninitialize
CoCreateInstance
CoInitialize
CoTaskMemFree
CoCreateGuid

oleaut32

SysAllocString
SysFreeString
VariantInit
VariantClear
SysAllocStringLen
VariantChangeType

oleacc

LresultFromObject
CreateStdAccessibleObject

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 283KB - Virtual size: 282KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 42KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/system32/LAVAudio.ax
.dll regsvr32 windows:5 windows x64 arch:x64

82faa3f2feb8c73429a9685c72f2cd4a

Code Sign

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

07/06/2005, 08:09

Not After

30/05/2020, 10:48

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

10/05/2010, 00:00

Not After

10/05/2015, 23:59

Subject

CN=COMODO Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

24/08/2011, 00:00

Not After

30/05/2020, 10:48

Subject

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

f7:00:2f:49:81:e5:47:c9:8c:39:eb:b0:b6:75:39:d9
Certificate

Issuer

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

05/11/2012, 00:00

Not After

05/11/2014, 23:59

Subject

CN=Hendrik Leppkes,O=Hendrik Leppkes,POSTALCODE=22419,STREET=Wulffsblöcken 35,L=Hamburg,ST=Hamburg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

d7:16:c0:44:ac:8f:f3:bb:b1:81:e4:05:aa:05:42:1e:08:79:56:99
Signer

Actual PE Digest

d7:16:c0:44:ac:8f:f3:bb:b1:81:e4:05:aa:05:42:1e:08:79:56:99

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\Multimedia\LAV\LAVFilters\bin_x64\LAVAudio\LAVAudio.pdb

Imports

ole32

CoCreateInstance
CoFreeUnusedLibraries
CoUninitialize
StringFromGUID2
CoTaskMemFree
CoTaskMemAlloc
CoInitialize

user32

SetTimer
SendMessageW
GetDlgItem
EnableWindow
MoveWindow
InvalidateRect
ShowWindow
DestroyWindow
SetWindowLongW
GetWindowLongW
SetWindowLongPtrW
GetWindowLongPtrW
CreateDialogParamW
DefWindowProcW
SendDlgItemMessageW
DispatchMessageW
LoadStringW
GetWindowRect
GetDesktopWindow
CreateWindowExW
SetWindowPos
DestroyIcon
UnregisterClassW
GetMessageW
TranslateMessage
RegisterClassExW
LoadImageW
GetWindow
SetForegroundWindow
PostQuitMessage
EnumThreadWindows
KillTimer
TrackPopupMenu
PostMessageW
DestroyMenu
GetCursorPos

shlwapi

PathFindFileNameW
PathRemoveFileSpecW

comctl32

InitCommonControlsEx

avformat-lav-55

avformat_free_context
av_write_frame
av_register_all
ff_sipr_subpk_size
ff_vorbis_comment
ff_rm_reorder_sipr_data
av_write_trailer
avio_alloc_context
avformat_alloc_output_context2
av_new_stream
avformat_write_header

avutil-lav-52

av_freep
av_opt_set_int
av_realloc_f
av_mallocz
av_log_set_callback
av_frame_free
av_opt_set_double
av_get_channel_layout_nb_channels
av_frame_alloc
av_dict_get
av_dict_free
av_get_bytes_per_sample
av_frame_unref
av_free

avcodec-lav-55

av_parser_init
avcodec_alloc_context3
avcodec_find_decoder
ff_dca_convert_bitstream
avpriv_dca_sample_rates
avcodec_decode_audio4
avcodec_flush_buffers
avpriv_flac_parse_block_header
avpriv_flac_is_extradata_valid
avcodec_open2
avcodec_find_decoder_by_name
av_parser_parse2
av_init_packet
avcodec_close
av_parser_close

avresample-lav-1

avresample_free
avresample_alloc_context
avresample_build_matrix
avresample_set_matrix
avresample_open
avresample_convert
avresample_close

kernel32

GetStringTypeW
LCMapStringW
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetStartupInfoW
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
Sleep
ExitProcess
GetStdHandle
WriteFile
HeapSize
FlsAlloc
FlsFree
FlsGetValue
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
HeapDestroy
HeapCreate
GetVersion
HeapSetInformation
RtlCaptureContext
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RtlPcToFileHeader
ExitThread
RtlUnwindEx
RtlLookupFunctionEntry
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetCommandLineA
FlsSetValue
HeapAlloc
DecodePointer
HeapReAlloc
HeapFree
SetFilePointer
FlushFileBuffers
GetModuleFileNameW
LoadLibraryExW
LoadLibraryW
GetProcAddress
FreeLibrary
EnterCriticalSection
LeaveCriticalSection
lstrlenA
MultiByteToWideChar
GetLastError
lstrlenW
GetModuleFileNameA
GetVersionExW
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
lstrcmpW
CloseHandle
CreateEventW
SetEvent
ResetEvent
WaitForSingleObject
GetCurrentProcess
GetCurrentThreadId
GetModuleHandleW
GetTickCount
CreateThread
RaiseException
SetLastError
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleW
CreateFileW
EncodePointer

advapi32

RegCreateKeyW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW
RegDeleteValueW
RegSetValueW

oleaut32

OleCreatePropertyFrame

shell32

Shell_NotifyIconW

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
OpenConfiguration

Sections

.text
Size: 167KB - Virtual size: 167KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

text
Size: 1024B - Virtual size: 645B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/system32/LAVAudio.ax.new
.dll regsvr32 windows:5 windows x64 arch:x64

82faa3f2feb8c73429a9685c72f2cd4a

Code Sign

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

07/06/2005, 08:09

Not After

30/05/2020, 10:48

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

10/05/2010, 00:00

Not After

10/05/2015, 23:59

Subject

CN=COMODO Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

24/08/2011, 00:00

Not After

30/05/2020, 10:48

Subject

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

f7:00:2f:49:81:e5:47:c9:8c:39:eb:b0:b6:75:39:d9
Certificate

Issuer

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

05/11/2012, 00:00

Not After

05/11/2014, 23:59

Subject

CN=Hendrik Leppkes,O=Hendrik Leppkes,POSTALCODE=22419,STREET=Wulffsblöcken 35,L=Hamburg,ST=Hamburg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

d7:16:c0:44:ac:8f:f3:bb:b1:81:e4:05:aa:05:42:1e:08:79:56:99
Signer

Actual PE Digest

d7:16:c0:44:ac:8f:f3:bb:b1:81:e4:05:aa:05:42:1e:08:79:56:99

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\Multimedia\LAV\LAVFilters\bin_x64\LAVAudio\LAVAudio.pdb

Imports

ole32

CoCreateInstance
CoFreeUnusedLibraries
CoUninitialize
StringFromGUID2
CoTaskMemFree
CoTaskMemAlloc
CoInitialize

user32

SetTimer
SendMessageW
GetDlgItem
EnableWindow
MoveWindow
InvalidateRect
ShowWindow
DestroyWindow
SetWindowLongW
GetWindowLongW
SetWindowLongPtrW
GetWindowLongPtrW
CreateDialogParamW
DefWindowProcW
SendDlgItemMessageW
DispatchMessageW
LoadStringW
GetWindowRect
GetDesktopWindow
CreateWindowExW
SetWindowPos
DestroyIcon
UnregisterClassW
GetMessageW
TranslateMessage
RegisterClassExW
LoadImageW
GetWindow
SetForegroundWindow
PostQuitMessage
EnumThreadWindows
KillTimer
TrackPopupMenu
PostMessageW
DestroyMenu
GetCursorPos

shlwapi

PathFindFileNameW
PathRemoveFileSpecW

comctl32

InitCommonControlsEx

avformat-lav-55

avformat_free_context
av_write_frame
av_register_all
ff_sipr_subpk_size
ff_vorbis_comment
ff_rm_reorder_sipr_data
av_write_trailer
avio_alloc_context
avformat_alloc_output_context2
av_new_stream
avformat_write_header

avutil-lav-52

av_freep
av_opt_set_int
av_realloc_f
av_mallocz
av_log_set_callback
av_frame_free
av_opt_set_double
av_get_channel_layout_nb_channels
av_frame_alloc
av_dict_get
av_dict_free
av_get_bytes_per_sample
av_frame_unref
av_free

avcodec-lav-55

av_parser_init
avcodec_alloc_context3
avcodec_find_decoder
ff_dca_convert_bitstream
avpriv_dca_sample_rates
avcodec_decode_audio4
avcodec_flush_buffers
avpriv_flac_parse_block_header
avpriv_flac_is_extradata_valid
avcodec_open2
avcodec_find_decoder_by_name
av_parser_parse2
av_init_packet
avcodec_close
av_parser_close

avresample-lav-1

avresample_free
avresample_alloc_context
avresample_build_matrix
avresample_set_matrix
avresample_open
avresample_convert
avresample_close

kernel32

GetStringTypeW
LCMapStringW
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetStartupInfoW
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
Sleep
ExitProcess
GetStdHandle
WriteFile
HeapSize
FlsAlloc
FlsFree
FlsGetValue
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
HeapDestroy
HeapCreate
GetVersion
HeapSetInformation
RtlCaptureContext
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RtlPcToFileHeader
ExitThread
RtlUnwindEx
RtlLookupFunctionEntry
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetCommandLineA
FlsSetValue
HeapAlloc
DecodePointer
HeapReAlloc
HeapFree
SetFilePointer
FlushFileBuffers
GetModuleFileNameW
LoadLibraryExW
LoadLibraryW
GetProcAddress
FreeLibrary
EnterCriticalSection
LeaveCriticalSection
lstrlenA
MultiByteToWideChar
GetLastError
lstrlenW
GetModuleFileNameA
GetVersionExW
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
lstrcmpW
CloseHandle
CreateEventW
SetEvent
ResetEvent
WaitForSingleObject
GetCurrentProcess
GetCurrentThreadId
GetModuleHandleW
GetTickCount
CreateThread
RaiseException
SetLastError
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleW
CreateFileW
EncodePointer

advapi32

RegCreateKeyW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW
RegDeleteValueW
RegSetValueW

oleaut32

OleCreatePropertyFrame

shell32

Shell_NotifyIconW

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
OpenConfiguration

Sections

.text
Size: 167KB - Virtual size: 167KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

text
Size: 1024B - Virtual size: 645B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/system32/LAVSplitter.ax
.dll regsvr32 windows:5 windows x64 arch:x64

daa098c2040562078e5292a44e67e463

Code Sign

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

07/06/2005, 08:09

Not After

30/05/2020, 10:48

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

10/05/2010, 00:00

Not After

10/05/2015, 23:59

Subject

CN=COMODO Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

24/08/2011, 00:00

Not After

30/05/2020, 10:48

Subject

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

f7:00:2f:49:81:e5:47:c9:8c:39:eb:b0:b6:75:39:d9
Certificate

Issuer

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

05/11/2012, 00:00

Not After

05/11/2014, 23:59

Subject

CN=Hendrik Leppkes,O=Hendrik Leppkes,POSTALCODE=22419,STREET=Wulffsblöcken 35,L=Hamburg,ST=Hamburg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1a:c7:1a:35:fc:16:8d:22:03:97:dc:bf:d4:c6:ea:fb:95:45:18:93
Signer

Actual PE Digest

1a:c7:1a:35:fc:16:8d:22:03:97:dc:bf:d4:c6:ea:fb:95:45:18:93

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\Multimedia\LAV\LAVFilters\bin_x64\LAVSplitter\LAVSplitter.pdb

Imports

ole32

CoCreateInstance
CoFreeUnusedLibraries
CoUninitialize
StringFromGUID2
CoTaskMemAlloc
CoTaskMemFree
CoInitialize

user32

GetDlgItem
SendMessageW
InsertMenuItemW
CreatePopupMenu
DestroyMenu
PostMessageW
TrackPopupMenu
GetCursorPos
EnumThreadWindows
PostQuitMessage
SetForegroundWindow
GetWindow
LoadImageW
RegisterClassExW
TranslateMessage
GetMessageW
UnregisterClassW
DestroyIcon
SetWindowPos
SendDlgItemMessageW
LoadStringW
DestroyWindow
GetWindowRect
CreateDialogParamW
GetDesktopWindow
CreateWindowExW
DispatchMessageW
DefWindowProcW
GetWindowLongPtrW
SetWindowLongPtrW
GetWindowLongW
SetWindowLongW
ShowWindow
InvalidateRect
MoveWindow

oleaut32

OleCreatePropertyFrame
SysAllocString
SysFreeString

comctl32

InitCommonControlsEx

shlwapi

PathFindExtensionW
PathRemoveFileSpecA
UrlGetPartW
PathFindFileNameW

avformat-lav-55

av_mkv_set_next_edition
avformat_find_stream_info
av_mkv_get_editions
avformat_close_input
avformat_open_input
av_find_input_format
av_mkv_get_edition
av_iformat_next
avformat_network_init
av_register_all
avformat_get_riff_video_tags
av_read_play
avio_alloc_context
av_mkv_get_num_editions
av_read_frame
av_seek_frame
avformat_get_riff_audio_tags
av_codec_get_tag
avpriv_mpegts_add_stream
avformat_alloc_context

avutil-lav-52

av_free
av_mallocz
av_buffer_unref
av_buffer_realloc
av_buffer_ref
av_log_set_callback
av_dict_set
av_opt_set_int
av_dict_copy
av_rescale
av_asprintf
av_freep
av_reduce
av_dict_get
av_rescale_q
av_get_default_channel_layout
av_pix_fmt_desc_get
av_get_bits_per_pixel
av_get_bits_per_sample_fmt
av_get_pix_fmt_name
av_get_channel_layout_string

avcodec-lav-55

avcodec_find_decoder
av_get_bits_per_sample
av_packet_get_side_data
av_free_packet
av_get_codec_tag_string
av_get_profile_name
av_parser_init

libbluray

clpi_parse
clpi_free
bd_read
bd_tell
bd_get_title_size
bd_seek
bd_free_title_info
bd_close
bd_open
bd_get_titles
bd_get_title_info
bd_get_event
bd_get_clip_infos
bd_select_title
bd_get_clpi
bd_free_clpi
bd_find_seek_point
bd_get_current_chapter

kernel32

GetProcAddress
GetTickCount
CreateThread
RaiseException
GetModuleHandleW
EncodePointer
FlushFileBuffers
CreateFileW
ReadFile
WriteConsoleW
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
GetStringTypeW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
HeapSize
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStartupInfoW
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
ExitProcess
HeapDestroy
HeapCreate
GetVersion
HeapSetInformation
FlsAlloc
FlsFree
FlsGetValue
IsValidCodePage
GetOEMCP
GetACP
GetLocaleInfoW
GetStdHandle
WriteFile
RtlCaptureContext
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
CompareStringW
GetCPInfo
LCMapStringW
HeapAlloc
RtlPcToFileHeader
ExitThread
RtlUnwindEx
RtlLookupFunctionEntry
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetCommandLineA
FlsSetValue
HeapReAlloc
HeapFree
DecodePointer
LoadLibraryW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetSystemInfo
CloseHandle
WaitForSingleObject
ResetEvent
SetEvent
Sleep
GetModuleFileNameW
MultiByteToWideChar
WideCharToMultiByte
lstrlenW
lstrlenA
GetLastError
GetModuleFileNameA
GetVersionExW
DisableThreadLibraryCalls
lstrcmpW
CreateEventW
ReleaseSemaphore
GetCurrentProcess
GetCurrentThreadId
CreateSemaphoreW
FreeLibrary
SetLastError

advapi32

RegDeleteKeyW
RegEnumKeyExW
RegOpenKeyExW
RegSetValueExW
RegSetValueW
RegCreateKeyW
RegCreateKeyExW
RegQueryValueExW
RegCloseKey

shell32

Shell_NotifyIconW

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
OpenConfiguration

Sections

.text
Size: 319KB - Virtual size: 319KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/system32/LAVSplitter.ax.new
.dll regsvr32 windows:5 windows x64 arch:x64

daa098c2040562078e5292a44e67e463

Code Sign

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

07/06/2005, 08:09

Not After

30/05/2020, 10:48

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

10/05/2010, 00:00

Not After

10/05/2015, 23:59

Subject

CN=COMODO Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

24/08/2011, 00:00

Not After

30/05/2020, 10:48

Subject

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

f7:00:2f:49:81:e5:47:c9:8c:39:eb:b0:b6:75:39:d9
Certificate

Issuer

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

05/11/2012, 00:00

Not After

05/11/2014, 23:59

Subject

CN=Hendrik Leppkes,O=Hendrik Leppkes,POSTALCODE=22419,STREET=Wulffsblöcken 35,L=Hamburg,ST=Hamburg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1a:c7:1a:35:fc:16:8d:22:03:97:dc:bf:d4:c6:ea:fb:95:45:18:93
Signer

Actual PE Digest

1a:c7:1a:35:fc:16:8d:22:03:97:dc:bf:d4:c6:ea:fb:95:45:18:93

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\Multimedia\LAV\LAVFilters\bin_x64\LAVSplitter\LAVSplitter.pdb

Imports

ole32

CoCreateInstance
CoFreeUnusedLibraries
CoUninitialize
StringFromGUID2
CoTaskMemAlloc
CoTaskMemFree
CoInitialize

user32

GetDlgItem
SendMessageW
InsertMenuItemW
CreatePopupMenu
DestroyMenu
PostMessageW
TrackPopupMenu
GetCursorPos
EnumThreadWindows
PostQuitMessage
SetForegroundWindow
GetWindow
LoadImageW
RegisterClassExW
TranslateMessage
GetMessageW
UnregisterClassW
DestroyIcon
SetWindowPos
SendDlgItemMessageW
LoadStringW
DestroyWindow
GetWindowRect
CreateDialogParamW
GetDesktopWindow
CreateWindowExW
DispatchMessageW
DefWindowProcW
GetWindowLongPtrW
SetWindowLongPtrW
GetWindowLongW
SetWindowLongW
ShowWindow
InvalidateRect
MoveWindow

oleaut32

OleCreatePropertyFrame
SysAllocString
SysFreeString

comctl32

InitCommonControlsEx

shlwapi

PathFindExtensionW
PathRemoveFileSpecA
UrlGetPartW
PathFindFileNameW

avformat-lav-55

av_mkv_set_next_edition
avformat_find_stream_info
av_mkv_get_editions
avformat_close_input
avformat_open_input
av_find_input_format
av_mkv_get_edition
av_iformat_next
avformat_network_init
av_register_all
avformat_get_riff_video_tags
av_read_play
avio_alloc_context
av_mkv_get_num_editions
av_read_frame
av_seek_frame
avformat_get_riff_audio_tags
av_codec_get_tag
avpriv_mpegts_add_stream
avformat_alloc_context

avutil-lav-52

av_free
av_mallocz
av_buffer_unref
av_buffer_realloc
av_buffer_ref
av_log_set_callback
av_dict_set
av_opt_set_int
av_dict_copy
av_rescale
av_asprintf
av_freep
av_reduce
av_dict_get
av_rescale_q
av_get_default_channel_layout
av_pix_fmt_desc_get
av_get_bits_per_pixel
av_get_bits_per_sample_fmt
av_get_pix_fmt_name
av_get_channel_layout_string

avcodec-lav-55

avcodec_find_decoder
av_get_bits_per_sample
av_packet_get_side_data
av_free_packet
av_get_codec_tag_string
av_get_profile_name
av_parser_init

libbluray

clpi_parse
clpi_free
bd_read
bd_tell
bd_get_title_size
bd_seek
bd_free_title_info
bd_close
bd_open
bd_get_titles
bd_get_title_info
bd_get_event
bd_get_clip_infos
bd_select_title
bd_get_clpi
bd_free_clpi
bd_find_seek_point
bd_get_current_chapter

kernel32

GetProcAddress
GetTickCount
CreateThread
RaiseException
GetModuleHandleW
EncodePointer
FlushFileBuffers
CreateFileW
ReadFile
WriteConsoleW
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
GetStringTypeW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
HeapSize
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStartupInfoW
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
ExitProcess
HeapDestroy
HeapCreate
GetVersion
HeapSetInformation
FlsAlloc
FlsFree
FlsGetValue
IsValidCodePage
GetOEMCP
GetACP
GetLocaleInfoW
GetStdHandle
WriteFile
RtlCaptureContext
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
CompareStringW
GetCPInfo
LCMapStringW
HeapAlloc
RtlPcToFileHeader
ExitThread
RtlUnwindEx
RtlLookupFunctionEntry
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetCommandLineA
FlsSetValue
HeapReAlloc
HeapFree
DecodePointer
LoadLibraryW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetSystemInfo
CloseHandle
WaitForSingleObject
ResetEvent
SetEvent
Sleep
GetModuleFileNameW
MultiByteToWideChar
WideCharToMultiByte
lstrlenW
lstrlenA
GetLastError
GetModuleFileNameA
GetVersionExW
DisableThreadLibraryCalls
lstrcmpW
CreateEventW
ReleaseSemaphore
GetCurrentProcess
GetCurrentThreadId
CreateSemaphoreW
FreeLibrary
SetLastError

advapi32

RegDeleteKeyW
RegEnumKeyExW
RegOpenKeyExW
RegSetValueExW
RegSetValueW
RegCreateKeyW
RegCreateKeyExW
RegQueryValueExW
RegCloseKey

shell32

Shell_NotifyIconW

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
OpenConfiguration

Sections

.text
Size: 319KB - Virtual size: 319KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/system32/LAVVideo.ax
.dll regsvr32 windows:5 windows x64 arch:x64

0d5571e8c90ddcd52603ac9b768e61c3

Code Sign

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

07/06/2005, 08:09

Not After

30/05/2020, 10:48

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

10/05/2010, 00:00

Not After

10/05/2015, 23:59

Subject

CN=COMODO Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

24/08/2011, 00:00

Not After

30/05/2020, 10:48

Subject

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

f7:00:2f:49:81:e5:47:c9:8c:39:eb:b0:b6:75:39:d9
Certificate

Issuer

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

05/11/2012, 00:00

Not After

05/11/2014, 23:59

Subject

CN=Hendrik Leppkes,O=Hendrik Leppkes,POSTALCODE=22419,STREET=Wulffsblöcken 35,L=Hamburg,ST=Hamburg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

9a:01:e2:21:ce:2d:6f:ac:03:3d:01:da:83:41:1e:65:70:26:47:92
Signer

Actual PE Digest

9a:01:e2:21:ce:2d:6f:ac:03:3d:01:da:83:41:1e:65:70:26:47:92

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\Multimedia\LAV\LAVFilters\bin_x64\LAVVideo\LAVVideo.pdb

Imports

ole32

CoTaskMemAlloc
CoCreateInstance
CoTaskMemRealloc
CoUninitialize
CoFreeUnusedLibraries
CoInitialize
StringFromGUID2
CoTaskMemFree

gdi32

GetStockObject

user32

DispatchMessageW
LoadStringW
GetWindowRect
CreateDialogParamW
GetDesktopWindow
MoveWindow
InvalidateRect
ShowWindow
SetWindowLongW
GetWindowLongW
SetWindowLongPtrW
GetWindowLongPtrW
SetWindowPos
DestroyIcon
GetMessageW
TranslateMessage
RegisterClassExW
LoadImageW
GetWindow
SetForegroundWindow
PostQuitMessage
EnumThreadWindows
GetCursorPos
TrackPopupMenu
PostMessageW
DestroyMenu
SendDlgItemMessageW
SetRect
GetShellWindow
LoadIconW
DestroyWindow
UnregisterClassW
DefWindowProcW
CreateWindowExW
SendMessageW
GetDlgItem
RegisterClassW
LoadCursorW
EnableWindow

shlwapi

PathFindFileNameW
PathFindExtensionW
PathRemoveFileSpecW

comctl32

InitCommonControlsEx

d3d9

Direct3DCreate9

avutil-lav-52

av_get_pix_fmt_name
av_buffer_unref
av_free
av_malloc
av_buffer_create
av_get_cpu_flags
av_frame_ref
av_get_picture_type_char
av_reduce
av_frame_unref
av_realloc_f
av_frame_free
av_freep
av_mallocz
av_frame_alloc
av_log_set_callback
av_realloc
av_strdup
av_pix_fmt_desc_get
av_buffer_ref
av_rescale
av_frame_move_ref

avcodec-lav-55

ff_cropTbl
avcodec_register_all
avcodec_find_decoder
av_parser_init
avcodec_alloc_context3
avcodec_open2
avsubtitle_free
avcodec_decode_subtitle2
ff_vc1_pixel_aspect
avpriv_find_start_code
avcodec_flush_buffers
avcodec_decode_video2
av_parser_parse2
av_packet_new_side_data
av_init_packet
avcodec_close
av_parser_close

swscale-lav-2

sws_getCoefficients
sws_getColorspaceDetails
sws_scale
sws_getCachedContext
sws_freeContext
sws_setColorspaceDetails

avfilter-lav-3

avfilter_graph_free
avfilter_get_by_name
avfilter_inout_alloc
avfilter_graph_alloc
avfilter_graph_create_filter
avfilter_free
avfilter_graph_parse
av_buffersrc_write_frame
av_buffersink_get_frame
avfilter_register_all
avfilter_graph_config

kernel32

GetStringTypeW
LCMapStringW
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetStartupInfoW
GetFileType
SetHandleCount
SetThreadAffinityMask
VirtualProtect
GetProcessAffinityMask
GetLogicalProcessorInformation
ExitProcess
CreateTimerQueueTimer
DeleteTimerQueueTimer
CreateTimerQueue
TlsSetValue
InterlockedFlushSList
InterlockedPopEntrySList
QueryDepthSList
InterlockedPushEntrySList
InitializeSListHead
TlsFree
TlsAlloc
HeapDestroy
HeapCreate
GetVersion
HeapSetInformation
HeapReAlloc
HeapSize
FlsAlloc
FlsFree
FlsGetValue
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetStdHandle
WriteFile
RtlCaptureContext
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
ExitThread
GetCurrentProcessId
QueryPerformanceCounter
RtlUnwindEx
RtlLookupFunctionEntry
SetFilePointer
FlsSetValue
InitializeCriticalSectionAndSpinCount
GetThreadTimes
FreeLibraryAndExitThread
GetModuleHandleA
SwitchToThread
HeapAlloc
RtlPcToFileHeader
TlsGetValue
HeapFree
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
GetConsoleCP
GetSystemInfo
FreeLibrary
LoadLibraryW
GetProcAddress
Sleep
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
GetLastError
InitializeCriticalSection
DeleteCriticalSection
ResetEvent
CloseHandle
WaitForSingleObject
SetEvent
WaitForMultipleObjects
lstrlenA
MultiByteToWideChar
LocalAlloc
lstrcmpW
CreateEventW
ReleaseSemaphore
VirtualFree
DuplicateHandle
GetCurrentProcess
GetCurrentThreadId
CreateSemaphoreW
VirtualAlloc
GetVersionExW
DisableThreadLibraryCalls
GetModuleHandleW
SetThreadPriority
GetThreadPriority
GetCurrentThread
GetTickCount
CreateThread
lstrlenW
GetModuleFileNameA
RaiseException
SetLastError
GetConsoleMode
FlushFileBuffers
CreateFileW
SetStdHandle
WriteConsoleW
SignalObjectAndWait
SleepEx
GetCommandLineA

advapi32

RegSetValueExW
RegQueryValueExW
RegCreateKeyExW
RegCreateKeyW
RegSetValueW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW

oleaut32

OleCreatePropertyFrame

shell32

Shell_NotifyIconW

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
OpenConfiguration

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 242KB - Virtual size: 241KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

text
Size: 1024B - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/system32/LAVVideo.ax.new
.dll regsvr32 windows:5 windows x64 arch:x64

0d5571e8c90ddcd52603ac9b768e61c3

Code Sign

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

07/06/2005, 08:09

Not After

30/05/2020, 10:48

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

10/05/2010, 00:00

Not After

10/05/2015, 23:59

Subject

CN=COMODO Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

10:70:9d:4f:f5:54:08:d7:30:60:01:d8:ea:91:75:bb
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

24/08/2011, 00:00

Not After

30/05/2020, 10:48

Subject

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

f7:00:2f:49:81:e5:47:c9:8c:39:eb:b0:b6:75:39:d9
Certificate

Issuer

CN=COMODO Code Signing CA 2,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

05/11/2012, 00:00

Not After

05/11/2014, 23:59

Subject

CN=Hendrik Leppkes,O=Hendrik Leppkes,POSTALCODE=22419,STREET=Wulffsblöcken 35,L=Hamburg,ST=Hamburg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

9a:01:e2:21:ce:2d:6f:ac:03:3d:01:da:83:41:1e:65:70:26:47:92
Signer

Actual PE Digest

9a:01:e2:21:ce:2d:6f:ac:03:3d:01:da:83:41:1e:65:70:26:47:92

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\Multimedia\LAV\LAVFilters\bin_x64\LAVVideo\LAVVideo.pdb

Imports

ole32

CoTaskMemAlloc
CoCreateInstance
CoTaskMemRealloc
CoUninitialize
CoFreeUnusedLibraries
CoInitialize
StringFromGUID2
CoTaskMemFree

gdi32

GetStockObject

user32

DispatchMessageW
LoadStringW
GetWindowRect
CreateDialogParamW
GetDesktopWindow
MoveWindow
InvalidateRect
ShowWindow
SetWindowLongW
GetWindowLongW
SetWindowLongPtrW
GetWindowLongPtrW
SetWindowPos
DestroyIcon
GetMessageW
TranslateMessage
RegisterClassExW
LoadImageW
GetWindow
SetForegroundWindow
PostQuitMessage
EnumThreadWindows
GetCursorPos
TrackPopupMenu
PostMessageW
DestroyMenu
SendDlgItemMessageW
SetRect
GetShellWindow
LoadIconW
DestroyWindow
UnregisterClassW
DefWindowProcW
CreateWindowExW
SendMessageW
GetDlgItem
RegisterClassW
LoadCursorW
EnableWindow

shlwapi

PathFindFileNameW
PathFindExtensionW
PathRemoveFileSpecW

comctl32

InitCommonControlsEx

d3d9

Direct3DCreate9

avutil-lav-52

av_get_pix_fmt_name
av_buffer_unref
av_free
av_malloc
av_buffer_create
av_get_cpu_flags
av_frame_ref
av_get_picture_type_char
av_reduce
av_frame_unref
av_realloc_f
av_frame_free
av_freep
av_mallocz
av_frame_alloc
av_log_set_callback
av_realloc
av_strdup
av_pix_fmt_desc_get
av_buffer_ref
av_rescale
av_frame_move_ref

avcodec-lav-55

ff_cropTbl
avcodec_register_all
avcodec_find_decoder
av_parser_init
avcodec_alloc_context3
avcodec_open2
avsubtitle_free
avcodec_decode_subtitle2
ff_vc1_pixel_aspect
avpriv_find_start_code
avcodec_flush_buffers
avcodec_decode_video2
av_parser_parse2
av_packet_new_side_data
av_init_packet
avcodec_close
av_parser_close

swscale-lav-2

sws_getCoefficients
sws_getColorspaceDetails
sws_scale
sws_getCachedContext
sws_freeContext
sws_setColorspaceDetails

avfilter-lav-3

avfilter_graph_free
avfilter_get_by_name
avfilter_inout_alloc
avfilter_graph_alloc
avfilter_graph_create_filter
avfilter_free
avfilter_graph_parse
av_buffersrc_write_frame
av_buffersink_get_frame
avfilter_register_all
avfilter_graph_config

kernel32

GetStringTypeW
LCMapStringW
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetStartupInfoW
GetFileType
SetHandleCount
SetThreadAffinityMask
VirtualProtect
GetProcessAffinityMask
GetLogicalProcessorInformation
ExitProcess
CreateTimerQueueTimer
DeleteTimerQueueTimer
CreateTimerQueue
TlsSetValue
InterlockedFlushSList
InterlockedPopEntrySList
QueryDepthSList
InterlockedPushEntrySList
InitializeSListHead
TlsFree
TlsAlloc
HeapDestroy
HeapCreate
GetVersion
HeapSetInformation
HeapReAlloc
HeapSize
FlsAlloc
FlsFree
FlsGetValue
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetStdHandle
WriteFile
RtlCaptureContext
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
ExitThread
GetCurrentProcessId
QueryPerformanceCounter
RtlUnwindEx
RtlLookupFunctionEntry
SetFilePointer
FlsSetValue
InitializeCriticalSectionAndSpinCount
GetThreadTimes
FreeLibraryAndExitThread
GetModuleHandleA
SwitchToThread
HeapAlloc
RtlPcToFileHeader
TlsGetValue
HeapFree
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
GetConsoleCP
GetSystemInfo
FreeLibrary
LoadLibraryW
GetProcAddress
Sleep
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
GetLastError
InitializeCriticalSection
DeleteCriticalSection
ResetEvent
CloseHandle
WaitForSingleObject
SetEvent
WaitForMultipleObjects
lstrlenA
MultiByteToWideChar
LocalAlloc
lstrcmpW
CreateEventW
ReleaseSemaphore
VirtualFree
DuplicateHandle
GetCurrentProcess
GetCurrentThreadId
CreateSemaphoreW
VirtualAlloc
GetVersionExW
DisableThreadLibraryCalls
GetModuleHandleW
SetThreadPriority
GetThreadPriority
GetCurrentThread
GetTickCount
CreateThread
lstrlenW
GetModuleFileNameA
RaiseException
SetLastError
GetConsoleMode
FlushFileBuffers
CreateFileW
SetStdHandle
WriteConsoleW
SignalObjectAndWait
SleepEx
GetCommandLineA

advapi32

RegSetValueExW
RegQueryValueExW
RegCreateKeyExW
RegCreateKeyW
RegSetValueW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW

oleaut32

OleCreatePropertyFrame

shell32

Shell_NotifyIconW

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
OpenConfiguration

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 242KB - Virtual size: 241KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

text
Size: 1024B - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/system32/TomsMoComp_ff.dll
.dll windows:5 windows x64 arch:x64

5ad0714a5d32419106e9fd6770075cc5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

F:\SVN ffdshow\trunk\obj\Release_x64_VC2010\TomsMoComp_ff.pdb

Imports

kernel32

GetLastError
HeapFree
HeapAlloc
GetCurrentThreadId
FlsSetValue
GetCommandLineA
EncodePointer
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
RaiseException
RtlPcToFileHeader
RtlUnwindEx
FlsGetValue
FlsFree
SetLastError
FlsAlloc
Sleep
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
TerminateProcess
GetCurrentProcess
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
HeapSize
HeapReAlloc
LCMapStringW
MultiByteToWideChar
GetStringTypeW

Exports

Exports

createI
getVersion

Sections

.text
Size: 581KB - Virtual size: 580KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/system32/TomsMoComp_ff.dll.new
.dll windows:5 windows x64 arch:x64

5ad0714a5d32419106e9fd6770075cc5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

F:\SVN ffdshow\trunk\obj\Release_x64_VC2010\TomsMoComp_ff.pdb

Imports

kernel32

GetLastError
HeapFree
HeapAlloc
GetCurrentThreadId
FlsSetValue
GetCommandLineA
EncodePointer
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
RaiseException
RtlPcToFileHeader
RtlUnwindEx
FlsGetValue
FlsFree
SetLastError
FlsAlloc
Sleep
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
TerminateProcess
GetCurrentProcess
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
HeapSize
HeapReAlloc
LCMapStringW
MultiByteToWideChar
GetStringTypeW

Exports

Exports

createI
getVersion

Sections

.text
Size: 581KB - Virtual size: 580KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/system32/VSFilter.dll
.dll regsvr32 windows:5 windows x64 arch:x64

e4c0fd2ef5d5fc82a0936190b569162d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

H:\progs\Compiling\mpc-hc\bin\Filters_x64\VSFilter.pdb

Imports

kernel32

GetSystemDefaultUILanguage
ConvertDefaultLocale
GetUserDefaultUILanguage
GetFileAttributesExW
GetFileSizeEx
DeleteFileW
LockFile
UnlockFile
GetFileSize
LocalAlloc
TlsGetValue
TlsAlloc
GlobalReAlloc
GlobalHandle
TlsSetValue
LocalReAlloc
TlsFree
RtlUnwindEx
RtlLookupFunctionEntry
EncodePointer
DecodePointer
HeapFree
RtlPcToFileHeader
HeapAlloc
FlsSetValue
GetCommandLineA
HeapReAlloc
ExitProcess
DeleteFileA
QueryPerformanceCounter
GetSystemTimeAsFileTime
HeapQueryInformation
HeapSize
SetStdHandle
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
TerminateProcess
GetACP
GetOEMCP
IsValidCodePage
FlsGetValue
FlsFree
FlsAlloc
GetStringTypeW
HeapSetInformation
HeapCreate
HeapDestroy
SetHandleCount
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
WriteConsoleW
SetEnvironmentVariableA
GetProcessHeap
GetLocaleInfoW
LoadLibraryExW
lstrcmpA
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
GlobalFlags
FreeResource
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
InitializeCriticalSectionAndSpinCount
ReleaseActCtx
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
SetErrorMode
DisableThreadLibraryCalls
lstrlenA
GetTickCount
VirtualAlloc
CreateSemaphoreW
GetCurrentThreadId
DuplicateHandle
VirtualFree
GetSystemInfo
ReleaseSemaphore
ResetEvent
lstrcmpW
MoveFileW
GetCurrentProcess
GetCurrentThread
FindFirstFileA
FindNextFileA
CreateDirectoryW
CreateDirectoryA
SetFileAttributesW
LoadLibraryA
SetFileAttributesA
GetFileAttributesW
GetFileAttributesA
GetSystemTime
FileTimeToLocalFileTime
FileTimeToSystemTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetCPInfo
IsDBCSLeadByte
WriteFile
SetFileTime
GetStdHandle
ReadFile
CreateFileA
GetFileType
GetFileTime
SetEndOfFile
SetFilePointer
FlushFileBuffers
GetModuleFileNameA
GetFullPathNameA
GetCurrentProcessId
DebugBreak
GetFullPathNameW
GetTempFileNameW
GetTempPathW
IsDBCSLeadByteEx
CreateFileW
DeviceIoControl
GetVolumeInformationW
FindFirstFileW
FindNextFileW
FindClose
GetModuleHandleW
RaiseException
GetStartupInfoW
SetThreadPriority
WaitForMultipleObjects
FindNextChangeNotification
Sleep
GetVersion
TerminateThread
FindCloseChangeNotification
FindFirstChangeNotificationW
MulDiv
CreateThread
SetEvent
CreateEventW
WaitForSingleObject
CloseHandle
WideCharToMultiByte
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
lstrlenW
GetVersionExW
lstrcpyW
GetProcAddress
GetSystemDirectoryW
FreeLibrary
OutputDebugStringA
GetModuleHandleExW
GetModuleFileNameW
LoadLibraryW
QueryActCtxW
FindActCtxSectionStringW
CreateActCtxW
MultiByteToWideChar
GetLastError
SetLastError
FindResourceW
LoadResource
LockResource
SizeofResource
DeactivateActCtx
ActivateActCtx

user32

SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
DestroyMenu
SetCursor
GetWindowThreadProcessId
IsWindowEnabled
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
TabbedTextOutW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
GetCapture
SetWindowsHookExW
GetClassLongPtrW
SetPropW
GetPropW
RemovePropW
GetFocus
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
GetTopWindow
GetMessageTime
GetMessagePos
MonitorFromWindow
CreateDialogIndirectParamW
GetKeyState
SetMenu
IsWindowVisible
ValidateRect
UpdateWindow
GetClassInfoExW
RegisterClassW
ScreenToClient
GetDlgCtrlID
CallWindowProcW
PtInRect
GetMenuState
ShowWindow
MoveWindow
GetWindowLongPtrW
PeekMessageW
CharUpperW
CharUpperA
CharLowerA
CharToOemA
CharToOemBuffW
OemToCharBuffA
OemToCharA
CharLowerBuffW
UnionRect
MessageBoxW
EqualRect
InflateRect
SetRect
IsRectEmpty
RegisterWindowMessageW
GetCursorPos
GetMessageW
TranslateMessage
DispatchMessageW
LoadIconW
DestroyIcon
SetForegroundWindow
KillTimer
SetTimer
IsDialogMessageW
SetWindowTextW
RealChildWindowFromPoint
EndDialog
GetNextDlgTabItem
AppendMenuW
TrackPopupMenu
UnregisterClassW
CreatePopupMenu
UnhookWindowsHookEx
PostQuitMessage
PostMessageW
CallNextHookEx
InvalidateRect
SetWindowLongPtrW
SetDlgItemTextA
GetDlgItem
GetDesktopWindow
GetWindowRect
DestroyWindow
EnableWindow
CreateDialogParamW
GetDC
ReleaseDC
DrawTextW
IntersectRect
OffsetRect
AdjustWindowRectEx
RedrawWindow
SetWindowPos
GetWindowLongW
SetWindowLongW
IsWindow
GetActiveWindow
CreateWindowExW
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetMenu
GetSysColorBrush
GetSystemMetrics
EnumDisplayMonitors
GetMonitorInfoW
GetParent
MapWindowPoints
GetClientRect
SetRectEmpty
CopyRect
SystemParametersInfoW
LoadCursorW
GetSysColor
GetClassNameW
DefWindowProcW
SendMessageW
GetClassInfoW
GetWindow

gdi32

SetWindowExtEx
ScaleWindowExtEx
CreateBitmap
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutW
RectVisible
PtVisible
CreateDIBitmap
RestoreDC
SaveDC
SetBkColor
CloseFigure
EndPath
GetPath
AbortPath
BeginPath
TextOutW
AddFontResourceW
TranslateCharsetInfo
GetTextExtentPoint32W
DeleteDC
CreateDIBSection
SelectObject
SetTextColor
SetBkMode
SetMapMode
DeleteObject
GetTextCharsetInfo
EnumFontFamiliesW
GetTextMetricsW
GetDeviceCaps
CreateCompatibleDC
GetObjectW
CreateFontIndirectW
CreatePatternBrush
CreateSolidBrush
CreatePen
GetStockObject
GetClipBox

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

RegSetValueW
RegDeleteKeyW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegDeleteValueW
RegCreateKeyW
RegCloseKey
RegEnumKeyExW
SetFileSecurityW
SetFileSecurityA
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
RegQueryValueExW

shell32

Shell_NotifyIconW
ShellExecuteW
SHBrowseForFolderW
SHGetPathFromIDListW

shlwapi

PathIsUNCW
PathFindFileNameW
PathFindExtensionW
PathStripToRootW
PathRemoveFileSpecW
UrlUnescapeW

ole32

CoFreeUnusedLibraries
StringFromGUID2
CLSIDFromString
CoInitializeEx
CoCreateGuid
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
CoUninitialize
CoInitialize
CoCreateInstance

oleaut32

SysStringLen
SysFreeString
SysAllocString
OleCreatePropertyFrame
VariantInit
VariantClear
VarBstrCmp
VariantChangeType

wininet

InternetOpenUrlW
InternetCrackUrlW
InternetCanonicalizeUrlW
InternetQueryOptionW
InternetQueryDataAvailable
InternetCloseHandle
InternetGetLastResponseInfoW
InternetOpenW
InternetSetStatusCallbackW
InternetSetFilePointer
InternetWriteFile
InternetReadFile

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Exports

Exports

AvisynthPluginInit
AvisynthPluginInit2
DirectVobSub
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
VirtualdubFilterModuleDeinit
VirtualdubFilterModuleInit2
csri_close
csri_open_file
csri_open_mem
csri_query_ext
csri_render
csri_renderer_byname
csri_renderer_default
csri_renderer_info
csri_renderer_next
csri_request_fmt

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 195KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/system32/VSFilter.dll.new
.dll regsvr32 windows:5 windows x64 arch:x64

e4c0fd2ef5d5fc82a0936190b569162d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

H:\progs\Compiling\mpc-hc\bin\Filters_x64\VSFilter.pdb

Imports

kernel32

GetSystemDefaultUILanguage
ConvertDefaultLocale
GetUserDefaultUILanguage
GetFileAttributesExW
GetFileSizeEx
DeleteFileW
LockFile
UnlockFile
GetFileSize
LocalAlloc
TlsGetValue
TlsAlloc
GlobalReAlloc
GlobalHandle
TlsSetValue
LocalReAlloc
TlsFree
RtlUnwindEx
RtlLookupFunctionEntry
EncodePointer
DecodePointer
HeapFree
RtlPcToFileHeader
HeapAlloc
FlsSetValue
GetCommandLineA
HeapReAlloc
ExitProcess
DeleteFileA
QueryPerformanceCounter
GetSystemTimeAsFileTime
HeapQueryInformation
HeapSize
SetStdHandle
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
TerminateProcess
GetACP
GetOEMCP
IsValidCodePage
FlsGetValue
FlsFree
FlsAlloc
GetStringTypeW
HeapSetInformation
HeapCreate
HeapDestroy
SetHandleCount
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
WriteConsoleW
SetEnvironmentVariableA
GetProcessHeap
GetLocaleInfoW
LoadLibraryExW
lstrcmpA
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
GlobalFlags
FreeResource
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
InitializeCriticalSectionAndSpinCount
ReleaseActCtx
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
SetErrorMode
DisableThreadLibraryCalls
lstrlenA
GetTickCount
VirtualAlloc
CreateSemaphoreW
GetCurrentThreadId
DuplicateHandle
VirtualFree
GetSystemInfo
ReleaseSemaphore
ResetEvent
lstrcmpW
MoveFileW
GetCurrentProcess
GetCurrentThread
FindFirstFileA
FindNextFileA
CreateDirectoryW
CreateDirectoryA
SetFileAttributesW
LoadLibraryA
SetFileAttributesA
GetFileAttributesW
GetFileAttributesA
GetSystemTime
FileTimeToLocalFileTime
FileTimeToSystemTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetCPInfo
IsDBCSLeadByte
WriteFile
SetFileTime
GetStdHandle
ReadFile
CreateFileA
GetFileType
GetFileTime
SetEndOfFile
SetFilePointer
FlushFileBuffers
GetModuleFileNameA
GetFullPathNameA
GetCurrentProcessId
DebugBreak
GetFullPathNameW
GetTempFileNameW
GetTempPathW
IsDBCSLeadByteEx
CreateFileW
DeviceIoControl
GetVolumeInformationW
FindFirstFileW
FindNextFileW
FindClose
GetModuleHandleW
RaiseException
GetStartupInfoW
SetThreadPriority
WaitForMultipleObjects
FindNextChangeNotification
Sleep
GetVersion
TerminateThread
FindCloseChangeNotification
FindFirstChangeNotificationW
MulDiv
CreateThread
SetEvent
CreateEventW
WaitForSingleObject
CloseHandle
WideCharToMultiByte
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
lstrlenW
GetVersionExW
lstrcpyW
GetProcAddress
GetSystemDirectoryW
FreeLibrary
OutputDebugStringA
GetModuleHandleExW
GetModuleFileNameW
LoadLibraryW
QueryActCtxW
FindActCtxSectionStringW
CreateActCtxW
MultiByteToWideChar
GetLastError
SetLastError
FindResourceW
LoadResource
LockResource
SizeofResource
DeactivateActCtx
ActivateActCtx

user32

SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
DestroyMenu
SetCursor
GetWindowThreadProcessId
IsWindowEnabled
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
TabbedTextOutW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
GetCapture
SetWindowsHookExW
GetClassLongPtrW
SetPropW
GetPropW
RemovePropW
GetFocus
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
GetTopWindow
GetMessageTime
GetMessagePos
MonitorFromWindow
CreateDialogIndirectParamW
GetKeyState
SetMenu
IsWindowVisible
ValidateRect
UpdateWindow
GetClassInfoExW
RegisterClassW
ScreenToClient
GetDlgCtrlID
CallWindowProcW
PtInRect
GetMenuState
ShowWindow
MoveWindow
GetWindowLongPtrW
PeekMessageW
CharUpperW
CharUpperA
CharLowerA
CharToOemA
CharToOemBuffW
OemToCharBuffA
OemToCharA
CharLowerBuffW
UnionRect
MessageBoxW
EqualRect
InflateRect
SetRect
IsRectEmpty
RegisterWindowMessageW
GetCursorPos
GetMessageW
TranslateMessage
DispatchMessageW
LoadIconW
DestroyIcon
SetForegroundWindow
KillTimer
SetTimer
IsDialogMessageW
SetWindowTextW
RealChildWindowFromPoint
EndDialog
GetNextDlgTabItem
AppendMenuW
TrackPopupMenu
UnregisterClassW
CreatePopupMenu
UnhookWindowsHookEx
PostQuitMessage
PostMessageW
CallNextHookEx
InvalidateRect
SetWindowLongPtrW
SetDlgItemTextA
GetDlgItem
GetDesktopWindow
GetWindowRect
DestroyWindow
EnableWindow
CreateDialogParamW
GetDC
ReleaseDC
DrawTextW
IntersectRect
OffsetRect
AdjustWindowRectEx
RedrawWindow
SetWindowPos
GetWindowLongW
SetWindowLongW
IsWindow
GetActiveWindow
CreateWindowExW
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetMenu
GetSysColorBrush
GetSystemMetrics
EnumDisplayMonitors
GetMonitorInfoW
GetParent
MapWindowPoints
GetClientRect
SetRectEmpty
CopyRect
SystemParametersInfoW
LoadCursorW
GetSysColor
GetClassNameW
DefWindowProcW
SendMessageW
GetClassInfoW
GetWindow

gdi32

SetWindowExtEx
ScaleWindowExtEx
CreateBitmap
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutW
RectVisible
PtVisible
CreateDIBitmap
RestoreDC
SaveDC
SetBkColor
CloseFigure
EndPath
GetPath
AbortPath
BeginPath
TextOutW
AddFontResourceW
TranslateCharsetInfo
GetTextExtentPoint32W
DeleteDC
CreateDIBSection
SelectObject
SetTextColor
SetBkMode
SetMapMode
DeleteObject
GetTextCharsetInfo
EnumFontFamiliesW
GetTextMetricsW
GetDeviceCaps
CreateCompatibleDC
GetObjectW
CreateFontIndirectW
CreatePatternBrush
CreateSolidBrush
CreatePen
GetStockObject
GetClipBox

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

RegSetValueW
RegDeleteKeyW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegDeleteValueW
RegCreateKeyW
RegCloseKey
RegEnumKeyExW
SetFileSecurityW
SetFileSecurityA
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
RegQueryValueExW

shell32

Shell_NotifyIconW
ShellExecuteW
SHBrowseForFolderW
SHGetPathFromIDListW

shlwapi

PathIsUNCW
PathFindFileNameW
PathFindExtensionW
PathStripToRootW
PathRemoveFileSpecW
UrlUnescapeW

ole32

CoFreeUnusedLibraries
StringFromGUID2
CLSIDFromString
CoInitializeEx
CoCreateGuid
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
CoUninitialize
CoInitialize
CoCreateInstance

oleaut32

SysStringLen
SysFreeString
SysAllocString
OleCreatePropertyFrame
VariantInit
VariantClear
VarBstrCmp
VariantChangeType

wininet

InternetOpenUrlW
InternetCrackUrlW
InternetCanonicalizeUrlW
InternetQueryOptionW
InternetQueryDataAvailable
InternetCloseHandle
InternetGetLastResponseInfoW
InternetOpenW
InternetSetStatusCallbackW
InternetSetFilePointer
InternetWriteFile
InternetReadFile

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Exports

Exports

AvisynthPluginInit
AvisynthPluginInit2
DirectVobSub
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
VirtualdubFilterModuleDeinit
VirtualdubFilterModuleInit2
csri_close
csri_open_file
csri_open_mem
csri_query_ext
csri_render
csri_renderer_byname
csri_renderer_default
csri_renderer_info
csri_renderer_next
csri_request_fmt

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 195KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/system32/avi.x64.dll
.dll regsvr32 windows:5 windows x64 arch:x64

88c2c898c10c959123104c59ececc357

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
FreeLibrary
GetThreadLocale
SetThreadLocale
GetModuleFileNameW
lstrcmpiW
GetModuleHandleW
GetProcAddress
GetLastError
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
LoadLibraryExW
lstrlenW
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
lstrlenA
GetTickCount
CloseHandle
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
RtlUnwindEx
GetCurrentThreadId
FlsSetValue
GetCommandLineA
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
HeapSetInformation
HeapCreate
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
EncodePointer
DecodePointer
FlsGetValue
FlsFree
SetLastError
FlsAlloc
RtlPcToFileHeader
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
SetFilePointer
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

user32

CharNextW

advapi32

RegQueryInfoKeyW
RegDeleteKeyW
RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegEnumKeyExW
RegSetValueExW

ole32

CoTaskMemRealloc
CoTaskMemFree
CoCreateInstance
StringFromGUID2
CoTaskMemAlloc

oleaut32

SysStringLen
SafeArrayCreate
SafeArrayAccessData
SafeArrayDestroy
VariantClear
SysAllocStringLen
VariantChangeType
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString
SafeArrayUnaccessData

mkunicode.x64

Utf8ToUtf16

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/system32/avi.x64.dll.new
.dll regsvr32 windows:5 windows x64 arch:x64

88c2c898c10c959123104c59ececc357

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
FreeLibrary
GetThreadLocale
SetThreadLocale
GetModuleFileNameW
lstrcmpiW
GetModuleHandleW
GetProcAddress
GetLastError
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
LoadLibraryExW
lstrlenW
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
lstrlenA
GetTickCount
CloseHandle
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
RtlUnwindEx
GetCurrentThreadId
FlsSetValue
GetCommandLineA
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
HeapSetInformation
HeapCreate
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
EncodePointer
DecodePointer
FlsGetValue
FlsFree
SetLastError
FlsAlloc
RtlPcToFileHeader
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
SetFilePointer
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

user32

CharNextW

advapi32

RegQueryInfoKeyW
RegDeleteKeyW
RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegEnumKeyExW
RegSetValueExW

ole32

CoTaskMemRealloc
CoTaskMemFree
CoCreateInstance
StringFromGUID2
CoTaskMemAlloc

oleaut32

SysStringLen
SafeArrayCreate
SafeArrayAccessData
SafeArrayDestroy
VariantClear
SysAllocStringLen
VariantChangeType
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString
SafeArrayUnaccessData

mkunicode.x64

Utf8ToUtf16

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/system32/cdxareader.ax
.dll regsvr32 windows:5 windows x64 arch:x64

6abf7203b99ea32e36d889ba4d533f9e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

H:\progs\Compiling\mpc-hc\bin\Filters_x64\CDXAReader.pdb

Imports

kernel32

GetFullPathNameW
EncodePointer
DecodePointer
HeapFree
FlsSetValue
GetCommandLineA
HeapAlloc
QueryPerformanceCounter
GetSystemTimeAsFileTime
RtlLookupFunctionEntry
RtlUnwindEx
RtlPcToFileHeader
HeapReAlloc
HeapQueryInformation
HeapSize
ExitProcess
SetStdHandle
GetFileType
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
FlushFileBuffers
GetACP
GetOEMCP
IsValidCodePage
FlsGetValue
FlsFree
FlsAlloc
Sleep
GetStringTypeW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
GetStdHandle
SetHandleCount
GetStartupInfoW
FreeEnvironmentStringsW
GetEnvironmentStringsW
LCMapStringW
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
WriteConsoleW
SetEnvironmentVariableA
SetFilePointer
WriteFile
DeleteFileW
SetErrorMode
TlsFree
LocalReAlloc
TlsSetValue
GlobalHandle
GlobalReAlloc
TlsAlloc
TlsGetValue
LocalAlloc
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFileAttributesExW
lstrcmpA
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoW
LoadLibraryExW
GlobalFlags
GetCurrentProcessId
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
InitializeCriticalSectionAndSpinCount
ReleaseActCtx
CreateActCtxW
DisableThreadLibraryCalls
GetCurrentThread
GetTickCount
CreateThread
lstrlenA
GetModuleFileNameA
VirtualFree
VirtualAlloc
GetSystemInfo
ReleaseSemaphore
CreateSemaphoreW
WaitForSingleObject
WaitForMultipleObjects
SetEvent
GetCurrentProcess
GetCurrentThreadId
ResetEvent
CreateEventW
lstrcmpW
RaiseException
WideCharToMultiByte
GetModuleFileNameW
GetVolumeInformationW
FindClose
FindFirstFileW
GetModuleHandleW
SetFilePointerEx
LeaveCriticalSection
EnterCriticalSection
GetFileSizeEx
ReadFile
CreateFileW
CloseHandle
DeleteCriticalSection
InitializeCriticalSection
lstrlenW
FreeLibrary
lstrcpyW
GetVersionExW
GetSystemDirectoryW
GetProcAddress
LoadLibraryW
MultiByteToWideChar
FindResourceW
LoadResource
LockResource
SizeofResource
ActivateActCtx
GetLastError
DeactivateActCtx
GetCPInfo
SetLastError

user32

UnregisterClassW
PostQuitMessage
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
GetMessageW
TranslateMessage
GetCursorPos
RealChildWindowFromPoint
SetWindowTextW
DestroyMenu
SetCursor
ShowWindow
InvalidateRect
GetWindowThreadProcessId
IsWindowEnabled
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
GetMenuState
LoadIconW
WinHelpW
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongPtrW
SetPropW
RemovePropW
GetFocus
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
GetDlgItem
GetTopWindow
DestroyWindow
GetWindowLongPtrW
SetWindowLongPtrW
GetMessageTime
GetMessagePos
MonitorFromWindow
GetKeyState
SetMenu
EnableWindow
SetForegroundWindow
IsWindowVisible
ValidateRect
UpdateWindow
PostMessageW
MessageBoxW
GetClassInfoExW
RegisterClassW
GetWindowRect
ScreenToClient
CharUpperW
KillTimer
SetTimer
TabbedTextOutW
GetDlgCtrlID
CallWindowProcW
PtInRect
UnhookWindowsHookEx
RegisterWindowMessageW
DispatchMessageW
PeekMessageW
ReleaseDC
GetDC
GetActiveWindow
GetMenuItemID
AdjustWindowRectEx
SetWindowPos
RedrawWindow
IsWindow
GetWindowLongW
GetMenu
CreateWindowExW
GetSubMenu
GetMenuItemCount
LoadCursorW
MapWindowPoints
GetParent
GetSysColorBrush
GetSysColor
SystemParametersInfoW
EnumDisplayMonitors
SetRectEmpty
CopyRect
GetMonitorInfoW
GetSystemMetrics
GetClientRect
SendMessageW
GetClassNameW
GetWindow
DefWindowProcW
GetClassInfoW
GetPropW

gdi32

DeleteDC
CreateBitmap
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetClipBox
SetMapMode
RestoreDC
SaveDC
SetBkColor
SetTextColor
CreateDIBitmap
GetTextMetricsW
CreatePatternBrush
CreatePen
CreateSolidBrush
GetObjectW
GetStockObject
CreateFontIndirectW
EnumFontFamiliesW
GetTextCharsetInfo
DeleteObject
GetDeviceCaps

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

advapi32

RegSetValueW
RegOpenKeyExW
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegDeleteValueW
RegCloseKey
RegCreateKeyW
RegSetValueExW
RegCreateKeyExW
RegDeleteKeyW
RegQueryValueExW

shell32

ShellExecuteW

shlwapi

PathStripToRootW
PathFindExtensionW
PathFindFileNameW
PathIsUNCW

ole32

CoFreeUnusedLibraries
StringFromGUID2
CLSIDFromString
CoTaskMemAlloc
CoUninitialize
CoCreateInstance
CoInitialize
CoCreateGuid
CoTaskMemFree

oleaut32

SysAllocString
SysFreeString
VariantInit
VariantClear
VariantChangeType

oleacc

LresultFromObject
CreateStdAccessibleObject

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 229KB - Virtual size: 228KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 109KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 42KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/system32/cdxareader.ax.new
.dll regsvr32 windows:5 windows x64 arch:x64

6abf7203b99ea32e36d889ba4d533f9e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

H:\progs\Compiling\mpc-hc\bin\Filters_x64\CDXAReader.pdb

Imports

kernel32

GetFullPathNameW
EncodePointer
DecodePointer
HeapFree
FlsSetValue
GetCommandLineA
HeapAlloc
QueryPerformanceCounter
GetSystemTimeAsFileTime
RtlLookupFunctionEntry
RtlUnwindEx
RtlPcToFileHeader
HeapReAlloc
HeapQueryInformation
HeapSize
ExitProcess
SetStdHandle
GetFileType
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
FlushFileBuffers
GetACP
GetOEMCP
IsValidCodePage
FlsGetValue
FlsFree
FlsAlloc
Sleep
GetStringTypeW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
GetStdHandle
SetHandleCount
GetStartupInfoW
FreeEnvironmentStringsW
GetEnvironmentStringsW
LCMapStringW
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
WriteConsoleW
SetEnvironmentVariableA
SetFilePointer
WriteFile
DeleteFileW
SetErrorMode
TlsFree
LocalReAlloc
TlsSetValue
GlobalHandle
GlobalReAlloc
TlsAlloc
TlsGetValue
LocalAlloc
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFileAttributesExW
lstrcmpA
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoW
LoadLibraryExW
GlobalFlags
GetCurrentProcessId
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
InitializeCriticalSectionAndSpinCount
ReleaseActCtx
CreateActCtxW
DisableThreadLibraryCalls
GetCurrentThread
GetTickCount
CreateThread
lstrlenA
GetModuleFileNameA
VirtualFree
VirtualAlloc
GetSystemInfo
ReleaseSemaphore
CreateSemaphoreW
WaitForSingleObject
WaitForMultipleObjects
SetEvent
GetCurrentProcess
GetCurrentThreadId
ResetEvent
CreateEventW
lstrcmpW
RaiseException
WideCharToMultiByte
GetModuleFileNameW
GetVolumeInformationW
FindClose
FindFirstFileW
GetModuleHandleW
SetFilePointerEx
LeaveCriticalSection
EnterCriticalSection
GetFileSizeEx
ReadFile
CreateFileW
CloseHandle
DeleteCriticalSection
InitializeCriticalSection
lstrlenW
FreeLibrary
lstrcpyW
GetVersionExW
GetSystemDirectoryW
GetProcAddress
LoadLibraryW
MultiByteToWideChar
FindResourceW
LoadResource
LockResource
SizeofResource
ActivateActCtx
GetLastError
DeactivateActCtx
GetCPInfo
SetLastError

user32

UnregisterClassW
PostQuitMessage
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
GetMessageW
TranslateMessage
GetCursorPos
RealChildWindowFromPoint
SetWindowTextW
DestroyMenu
SetCursor
ShowWindow
InvalidateRect
GetWindowThreadProcessId
IsWindowEnabled
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
GetMenuState
LoadIconW
WinHelpW
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongPtrW
SetPropW
RemovePropW
GetFocus
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
GetDlgItem
GetTopWindow
DestroyWindow
GetWindowLongPtrW
SetWindowLongPtrW
GetMessageTime
GetMessagePos
MonitorFromWindow
GetKeyState
SetMenu
EnableWindow
SetForegroundWindow
IsWindowVisible
ValidateRect
UpdateWindow
PostMessageW
MessageBoxW
GetClassInfoExW
RegisterClassW
GetWindowRect
ScreenToClient
CharUpperW
KillTimer
SetTimer
TabbedTextOutW
GetDlgCtrlID
CallWindowProcW
PtInRect
UnhookWindowsHookEx
RegisterWindowMessageW
DispatchMessageW
PeekMessageW
ReleaseDC
GetDC
GetActiveWindow
GetMenuItemID
AdjustWindowRectEx
SetWindowPos
RedrawWindow
IsWindow
GetWindowLongW
GetMenu
CreateWindowExW
GetSubMenu
GetMenuItemCount
LoadCursorW
MapWindowPoints
GetParent
GetSysColorBrush
GetSysColor
SystemParametersInfoW
EnumDisplayMonitors
SetRectEmpty
CopyRect
GetMonitorInfoW
GetSystemMetrics
GetClientRect
SendMessageW
GetClassNameW
GetWindow
DefWindowProcW
GetClassInfoW
GetPropW

gdi32

DeleteDC
CreateBitmap
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetClipBox
SetMapMode
RestoreDC
SaveDC
SetBkColor
SetTextColor
CreateDIBitmap
GetTextMetricsW
CreatePatternBrush
CreatePen
CreateSolidBrush
GetObjectW
GetStockObject
CreateFontIndirectW
EnumFontFamiliesW
GetTextCharsetInfo
DeleteObject
GetDeviceCaps

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

advapi32

RegSetValueW
RegOpenKeyExW
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegDeleteValueW
RegCloseKey
RegCreateKeyW
RegSetValueExW
RegCreateKeyExW
RegDeleteKeyW
RegQueryValueExW

shell32

ShellExecuteW

shlwapi

PathStripToRootW
PathFindExtensionW
PathFindFileNameW
PathIsUNCW

ole32

CoFreeUnusedLibraries
StringFromGUID2
CLSIDFromString
CoTaskMemAlloc
CoUninitialize
CoCreateInstance
CoInitialize
CoCreateGuid
CoTaskMemFree

oleaut32

SysAllocString
SysFreeString
VariantInit
VariantClear
VariantChangeType

oleacc

LresultFromObject
CreateStdAccessibleObject

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 229KB - Virtual size: 228KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 109KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 42KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/system32/cue2xml.js
.js
$WINDIR/system32/cue2xml.js.new
.js
$WINDIR/system32/dsmux.x64.exe
.exe windows:5 windows x64 arch:x64

e8ea481a4589400f011867893e0a74e3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetConsoleOutputCP
GetStdHandle
VirtualAlloc
SetConsoleCtrlHandler
GetACP
GetModuleFileNameA
VirtualProtect
CloseHandle
DeleteFileW
GetModuleFileNameW
SizeofResource
GetConsoleMode
WideCharToMultiByte
WriteFile
GetModuleHandleW
WaitForSingleObject
CreateProcessW
LoadResource
FindResourceW
FindResourceExW
VirtualQuery
LockResource
GetCommandLineW
RaiseException
MultiByteToWideChar
GetTickCount
GetProcAddress
CreateFileW
GetTempPathW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
GetLastError
GetCommandLineA
RtlUnwindEx
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetCPInfo
GetOEMCP
IsValidCodePage
EncodePointer
DecodePointer
FlsGetValue
FlsSetValue
FlsFree
SetLastError
GetCurrentThreadId
FlsAlloc
HeapSetInformation
HeapCreate
Sleep
ExitProcess
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
RtlPcToFileHeader
SetFilePointer
GetConsoleCP
LoadLibraryA
InitializeCriticalSectionAndSpinCount
SetStdHandle
WriteConsoleA
WriteConsoleW
ReadFile
CreateFileA
FlushFileBuffers

ole32

CoTaskMemFree
CoUninitialize
CoInitialize
CoCreateInstance

oleaut32

SysFreeString
SysAllocStringLen
VariantClear

Sections

.text
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/system32/dsmux.x64.exe.new
.exe windows:5 windows x64 arch:x64

e8ea481a4589400f011867893e0a74e3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetConsoleOutputCP
GetStdHandle
VirtualAlloc
SetConsoleCtrlHandler
GetACP
GetModuleFileNameA
VirtualProtect
CloseHandle
DeleteFileW
GetModuleFileNameW
SizeofResource
GetConsoleMode
WideCharToMultiByte
WriteFile
GetModuleHandleW
WaitForSingleObject
CreateProcessW
LoadResource
FindResourceW
FindResourceExW
VirtualQuery
LockResource
GetCommandLineW
RaiseException
MultiByteToWideChar
GetTickCount
GetProcAddress
CreateFileW
GetTempPathW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
GetLastError
GetCommandLineA
RtlUnwindEx
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetCPInfo
GetOEMCP
IsValidCodePage
EncodePointer
DecodePointer
FlsGetValue
FlsSetValue
FlsFree
SetLastError
GetCurrentThreadId
FlsAlloc
HeapSetInformation
HeapCreate
Sleep
ExitProcess
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
RtlPcToFileHeader
SetFilePointer
GetConsoleCP
LoadLibraryA
InitializeCriticalSectionAndSpinCount
SetStdHandle
WriteConsoleA
WriteConsoleW
ReadFile
CreateFileA
FlushFileBuffers

ole32

CoTaskMemFree
CoUninitialize
CoInitialize
CoCreateInstance

oleaut32

SysFreeString
SysAllocStringLen
VariantClear

Sections

.text
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/system32/dxr.x64.dll
.dll regsvr32 windows:5 windows x64 arch:x64

a25bd6d106023309a765de862be6a65b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

winmm

timeSetEvent
timeEndPeriod
timeBeginPeriod
timeGetTime

d3d9

Direct3DCreate9

gdi32

DeleteDC
CreateRectRgnIndirect
DeleteObject
CombineRgn
CreateSolidBrush
FillRgn
SetBkColor
ExtTextOutW
GetGlyphOutlineW
GetTextMetricsW
SelectObject
CreateFontW
CreateCompatibleDC
CreateRectRgn

kernel32

CreateThread
CloseHandle
SetThreadPriority
CreateSemaphoreW
WaitForMultipleObjects
MultiByteToWideChar
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
WideCharToMultiByte
SetUnhandledExceptionFilter
CreateEventW
ResetEvent
WaitForSingleObject
SetEvent
ReleaseSemaphore
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
FlushFileBuffers
CreateFileA
ReadFile
WriteConsoleW
InitializeCriticalSection
WriteConsoleA
SetStdHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetConsoleMode
GetConsoleCP
SetFilePointer
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RtlPcToFileHeader
SetHandleCount
FlsAlloc
SetLastError
FlsFree
FlsGetValue
UnhandledExceptionFilter
TerminateProcess
RtlUnwindEx
GetCommandLineA
FlsSetValue
GetProcessHeap
HeapSize
HeapReAlloc
DecodePointer
EncodePointer
GetStdHandle
WriteFile
ExitProcess
Sleep
HeapSetInformation
GetConsoleOutputCP
VirtualAlloc
GetCurrentProcess
VirtualFree
lstrcpynW
lstrcmpW
lstrlenW
HeapFree
GetSystemInfo
GetCurrentThreadId
DuplicateHandle
FreeLibrary
LoadLibraryW
GetLastError
GetProcAddress
GetVersionExW
DisableThreadLibraryCalls
lstrlenA
GetModuleFileNameA
GetModuleHandleW
GetTickCount
lstrcmpiA
RaiseException
OutputDebugStringA
HeapDestroy
HeapAlloc
HeapCreate

user32

SetRectEmpty
UnionRect
InflateRect
GetClientRect
ScreenToClient
IntersectRect
GetDC
ReleaseDC
GetDlgItem
EnableWindow
SetDlgItemTextA
SendDlgItemMessageA
SetWindowLongW
AttachThreadInput
GetWindowThreadProcessId
SetWindowTextW
GetWindowLongW
GetWindowPlacement
IsWindowVisible
GetWindowTextW
SendMessageTimeoutW
EnumDisplayDevicesA
GetMonitorInfoW
GetWindowRect
GetWindowLongPtrW
SetWindowLongPtrW
RegisterClassW
LoadCursorW
DestroyWindow
SetParent
MsgWaitForMultipleObjects
DispatchMessageW
PeekMessageW
CreateWindowExW
DefWindowProcW
ValidateRect
SetCursor
GetClassLongPtrW
GetParent
SetWindowPos
PostQuitMessage
PostMessageW
UnhookWindowsHookEx
SetWindowsHookExW
CallNextHookEx
GetKeyState
SendMessageW
ShowWindow
KillTimer
MoveWindow
CreateDialogParamW
InvalidateRect
LoadStringW
GetDesktopWindow
SetTimer

advapi32

RegQueryValueExW
RegCloseKey
CryptReleaseContext
CryptAcquireContextW
CryptGenRandom
RegCreateKeyExW
RegEnumKeyExW
RegOpenKeyExW
RegDeleteKeyW
RegSetValueW
RegCreateKeyW
RegSetValueExW

ole32

CoInitialize
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
CoUninitialize
CoFreeUnusedLibraries
StringFromGUID2
CoInitializeEx

oleaut32

SysFreeString
VariantChangeType
SysAllocString
VariantClear
VariantInit
SafeArrayUnaccessData
SafeArrayAccessData
SysAllocStringLen
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetDim

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 228KB - Virtual size: 227KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/system32/dxr.x64.dll.new
.dll regsvr32 windows:5 windows x64 arch:x64

a25bd6d106023309a765de862be6a65b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

winmm

timeSetEvent
timeEndPeriod
timeBeginPeriod
timeGetTime

d3d9

Direct3DCreate9

gdi32

DeleteDC
CreateRectRgnIndirect
DeleteObject
CombineRgn
CreateSolidBrush
FillRgn
SetBkColor
ExtTextOutW
GetGlyphOutlineW
GetTextMetricsW
SelectObject
CreateFontW
CreateCompatibleDC
CreateRectRgn

kernel32

CreateThread
CloseHandle
SetThreadPriority
CreateSemaphoreW
WaitForMultipleObjects
MultiByteToWideChar
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
WideCharToMultiByte
SetUnhandledExceptionFilter
CreateEventW
ResetEvent
WaitForSingleObject
SetEvent
ReleaseSemaphore
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
FlushFileBuffers
CreateFileA
ReadFile
WriteConsoleW
InitializeCriticalSection
WriteConsoleA
SetStdHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetConsoleMode
GetConsoleCP
SetFilePointer
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RtlPcToFileHeader
SetHandleCount
FlsAlloc
SetLastError
FlsFree
FlsGetValue
UnhandledExceptionFilter
TerminateProcess
RtlUnwindEx
GetCommandLineA
FlsSetValue
GetProcessHeap
HeapSize
HeapReAlloc
DecodePointer
EncodePointer
GetStdHandle
WriteFile
ExitProcess
Sleep
HeapSetInformation
GetConsoleOutputCP
VirtualAlloc
GetCurrentProcess
VirtualFree
lstrcpynW
lstrcmpW
lstrlenW
HeapFree
GetSystemInfo
GetCurrentThreadId
DuplicateHandle
FreeLibrary
LoadLibraryW
GetLastError
GetProcAddress
GetVersionExW
DisableThreadLibraryCalls
lstrlenA
GetModuleFileNameA
GetModuleHandleW
GetTickCount
lstrcmpiA
RaiseException
OutputDebugStringA
HeapDestroy
HeapAlloc
HeapCreate

user32

SetRectEmpty
UnionRect
InflateRect
GetClientRect
ScreenToClient
IntersectRect
GetDC
ReleaseDC
GetDlgItem
EnableWindow
SetDlgItemTextA
SendDlgItemMessageA
SetWindowLongW
AttachThreadInput
GetWindowThreadProcessId
SetWindowTextW
GetWindowLongW
GetWindowPlacement
IsWindowVisible
GetWindowTextW
SendMessageTimeoutW
EnumDisplayDevicesA
GetMonitorInfoW
GetWindowRect
GetWindowLongPtrW
SetWindowLongPtrW
RegisterClassW
LoadCursorW
DestroyWindow
SetParent
MsgWaitForMultipleObjects
DispatchMessageW
PeekMessageW
CreateWindowExW
DefWindowProcW
ValidateRect
SetCursor
GetClassLongPtrW
GetParent
SetWindowPos
PostQuitMessage
PostMessageW
UnhookWindowsHookEx
SetWindowsHookExW
CallNextHookEx
GetKeyState
SendMessageW
ShowWindow
KillTimer
MoveWindow
CreateDialogParamW
InvalidateRect
LoadStringW
GetDesktopWindow
SetTimer

advapi32

RegQueryValueExW
RegCloseKey
CryptReleaseContext
CryptAcquireContextW
CryptGenRandom
RegCreateKeyExW
RegEnumKeyExW
RegOpenKeyExW
RegDeleteKeyW
RegSetValueW
RegCreateKeyW
RegSetValueExW

ole32

CoInitialize
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
CoUninitialize
CoFreeUnusedLibraries
StringFromGUID2
CoInitializeEx

oleaut32

SysFreeString
VariantChangeType
SysAllocString
VariantClear
VariantInit
SafeArrayUnaccessData
SafeArrayAccessData
SysAllocStringLen
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetDim

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 228KB - Virtual size: 227KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/system32/ff_kernelDeint.dll
.dll windows:5 windows x64 arch:x64

eac6ae8095acfa14cb58cbefe4957ea8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

F:\SVN ffdshow\trunk\obj\Release_x64_VC2010\ff_kernelDeint.pdb

Imports

kernel32

GetCurrentThreadId
FlsSetValue
GetCommandLineA
HeapAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
EncodePointer
DecodePointer
TerminateProcess
GetCurrentProcess
HeapSize
GetLastError
HeapFree
HeapReAlloc
RaiseException
RtlPcToFileHeader
RtlUnwindEx
FlsGetValue
FlsFree
SetLastError
FlsAlloc
Sleep
GetProcAddress
GetModuleHandleW
ExitProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
WriteFile
GetModuleFileNameW
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryW
LCMapStringW
MultiByteToWideChar
GetStringTypeW

Exports

Exports

createI
getVersion

Sections

.text
Size: 437KB - Virtual size: 436KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/system32/ff_kernelDeint.dll.new
.dll windows:5 windows x64 arch:x64

eac6ae8095acfa14cb58cbefe4957ea8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

F:\SVN ffdshow\trunk\obj\Release_x64_VC2010\ff_kernelDeint.pdb

Imports

kernel32

GetCurrentThreadId
FlsSetValue
GetCommandLineA
HeapAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
EncodePointer
DecodePointer
TerminateProcess
GetCurrentProcess
HeapSize
GetLastError
HeapFree
HeapReAlloc
RaiseException
RtlPcToFileHeader
RtlUnwindEx
FlsGetValue
FlsFree
SetLastError
FlsAlloc
Sleep
GetProcAddress
GetModuleHandleW
ExitProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
WriteFile
GetModuleFileNameW
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryW
LCMapStringW
MultiByteToWideChar
GetStringTypeW

Exports

Exports

createI
getVersion

Sections

.text
Size: 437KB - Virtual size: 436KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/system32/ff_liba52.dll
.dll windows:5 windows x64 arch:x64

af467d9ec593851a4e3194ffe04b3937

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

F:\SVN ffdshow\trunk\obj\Release_x64_VC2010\ff_liba52.pdb

Imports

kernel32

GetLastError
HeapFree
HeapAlloc
GetCurrentThreadId
FlsSetValue
GetCommandLineA
EncodePointer
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
RtlUnwindEx
FlsGetValue
FlsFree
SetLastError
FlsAlloc
Sleep
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RaiseException
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
HeapReAlloc
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapSize

Exports

Exports

a52_block
a52_dynrng
a52_dynrngsetlevel
a52_frame
a52_free
a52_init
a52_samples
a52_syncinfo
getVersion

Sections

.text
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/system32/ff_liba52.dll.new
.dll windows:5 windows x64 arch:x64

af467d9ec593851a4e3194ffe04b3937

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

F:\SVN ffdshow\trunk\obj\Release_x64_VC2010\ff_liba52.pdb

Imports

kernel32

GetLastError
HeapFree
HeapAlloc
GetCurrentThreadId
FlsSetValue
GetCommandLineA
EncodePointer
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
RtlUnwindEx
FlsGetValue
FlsFree
SetLastError
FlsAlloc
Sleep
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RaiseException
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
HeapReAlloc
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapSize

Exports

Exports

a52_block
a52_dynrng
a52_dynrngsetlevel
a52_frame
a52_free
a52_init
a52_samples
a52_syncinfo
getVersion

Sections

.text
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/system32/ff_libdts.dll
.dll windows:5 windows x64 arch:x64

ab62a0698443b2a4d0bab726bf089e6b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

F:\SVN ffdshow\trunk\obj\Release_x64_VC2010\ff_libdts.pdb

Imports

kernel32

EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
HeapAlloc
GetCurrentThreadId
FlsSetValue
GetCommandLineA
EncodePointer
RtlUnwindEx
DecodePointer
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
TerminateProcess
GetCurrentProcess
Sleep
GetProcAddress
GetModuleHandleW
ExitProcess
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
WriteFile
GetModuleFileNameW
FlsGetValue
FlsFree
SetLastError
FlsAlloc
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
LoadLibraryW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringW
MultiByteToWideChar
GetStringTypeW
SetFilePointer
HeapSize
CloseHandle
WriteConsoleW
SetStdHandle
RaiseException
CreateFileW

Exports

Exports

dca_block
dca_blocks_num
dca_dynrng
dca_frame
dca_free
dca_init
dca_samples
dca_syncinfo
getVersion

Sections

.text
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 71KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/system32/ff_libdts.dll.new
.dll windows:5 windows x64 arch:x64

ab62a0698443b2a4d0bab726bf089e6b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

F:\SVN ffdshow\trunk\obj\Release_x64_VC2010\ff_libdts.pdb

Imports

kernel32

EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
HeapAlloc
GetCurrentThreadId
FlsSetValue
GetCommandLineA
EncodePointer
RtlUnwindEx
DecodePointer
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
TerminateProcess
GetCurrentProcess
Sleep
GetProcAddress
GetModuleHandleW
ExitProcess
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
WriteFile
GetModuleFileNameW
FlsGetValue
FlsFree
SetLastError
FlsAlloc
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
LoadLibraryW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringW
MultiByteToWideChar
GetStringTypeW
SetFilePointer
HeapSize
CloseHandle
WriteConsoleW
SetStdHandle
RaiseException
CreateFileW

Exports

Exports

dca_block
dca_blocks_num
dca_dynrng
dca_frame
dca_free
dca_init
dca_samples
dca_syncinfo
getVersion

Sections

.text
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 71KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/system32/ff_libmad.dll
.dll windows:5 windows x64 arch:x64

ac1953fbc8012b40c12247bf7ecd4377

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

F:\SVN ffdshow\trunk\obj\Release_x64_VC2010\ff_libmad.pdb

Imports

kernel32

GetLastError
HeapFree
HeapAlloc
GetCurrentThreadId
FlsSetValue
GetCommandLineA
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
EncodePointer
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RtlUnwindEx
FlsGetValue
FlsFree
SetLastError
FlsAlloc
Sleep
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
HeapSize
SetStdHandle
WriteConsoleW
MultiByteToWideChar
LCMapStringW
GetStringTypeW
CreateFileW
CloseHandle
FlushFileBuffers

Exports

Exports

getVersion
mad_frame_decode
mad_frame_finish
mad_frame_init
mad_stream_buffer
mad_stream_finish
mad_stream_init
mad_synth_frame
mad_synth_init

Sections

.text
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 87KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/system32/ff_libmad.dll.new
.dll windows:5 windows x64 arch:x64

ac1953fbc8012b40c12247bf7ecd4377

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

F:\SVN ffdshow\trunk\obj\Release_x64_VC2010\ff_libmad.pdb

Imports

kernel32

GetLastError
HeapFree
HeapAlloc
GetCurrentThreadId
FlsSetValue
GetCommandLineA
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
EncodePointer
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RtlUnwindEx
FlsGetValue
FlsFree
SetLastError
FlsAlloc
Sleep
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
HeapSize
SetStdHandle
WriteConsoleW
MultiByteToWideChar
LCMapStringW
GetStringTypeW
CreateFileW
CloseHandle
FlushFileBuffers

Exports

Exports

getVersion
mad_frame_decode
mad_frame_finish
mad_frame_init
mad_stream_buffer
mad_stream_finish
mad_stream_init
mad_synth_frame
mad_synth_init

Sections

.text
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 87KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/system32/ff_samplerate.dll
.dll windows:5 windows x64 arch:x64

f3eedd2639ef25065e7b0ea38bf565ff

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

F:\SVN ffdshow\trunk\obj\Release_x64_VC2010\ff_samplerate.pdb

Imports

kernel32

GetLastError
HeapFree
GetCurrentThreadId
FlsSetValue
GetCommandLineA
EncodePointer
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
HeapAlloc
RtlUnwindEx
FlsGetValue
FlsFree
SetLastError
FlsAlloc
Sleep
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
TerminateProcess
GetCurrentProcess
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
LoadLibraryW
WriteFile
GetModuleFileNameW
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapSize

Exports

Exports

getVersion
src_delete
src_new
src_process
src_reset

Sections

.text
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/system32/ff_samplerate.dll.new
.dll windows:5 windows x64 arch:x64

f3eedd2639ef25065e7b0ea38bf565ff

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

F:\SVN ffdshow\trunk\obj\Release_x64_VC2010\ff_samplerate.pdb

Imports

kernel32

GetLastError
HeapFree
GetCurrentThreadId
FlsSetValue
GetCommandLineA
EncodePointer
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
HeapAlloc
RtlUnwindEx
FlsGetValue
FlsFree
SetLastError
FlsAlloc
Sleep
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
TerminateProcess
GetCurrentProcess
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
LoadLibraryW
WriteFile
GetModuleFileNameW
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapSize

Exports

Exports

getVersion
src_delete
src_new
src_process
src_reset

Sections

.text
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/system32/ff_unrar.dll
.dll windows:5 windows x64 arch:x64

993c89d9f6cfe1c83b867fbbdc81c8df

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

F:\SVN ffdshow\trunk\obj\Release_x64_VC2010\ff_unrar.pdb

Imports

kernel32

GetFileType
CreateFileA
CreateFileW
ReadFile
GetStdHandle
WriteFile
GetProcAddress
GetModuleHandleW
GetFileAttributesA
GetFileAttributesW
SetFileAttributesA
SetFileAttributesW
DeviceIoControl
CreateDirectoryA
CreateDirectoryW
FindClose
FindNextFileA
FindFirstFileA
FindNextFileW
FindFirstFileW
GetVersionExW
GetFullPathNameA
GetModuleFileNameW
MultiByteToWideChar
FreeLibrary
LoadLibraryW
GetCurrentProcessId
LocalFileTimeToFileTime
SystemTimeToFileTime
FileTimeToSystemTime
FileTimeToLocalFileTime
GetSystemTime
WideCharToMultiByte
IsDBCSLeadByte
GetCPInfo
SetStdHandle
GetConsoleMode
GetConsoleCP
GetStringTypeW
SetEndOfFile
SetFilePointer
FlushFileBuffers
MoveFileW
Sleep
SetFileTime
GetCurrentProcess
GetLastError
CloseHandle
GetModuleFileNameA
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
RtlLookupFunctionEntry
RtlUnwindEx
HeapAlloc
HeapFree
HeapReAlloc
RaiseException
RtlPcToFileHeader
ExitProcess
DecodePointer
DeleteFileA
EncodePointer
GetCurrentThreadId
FlsSetValue
GetCommandLineA
FlsGetValue
FlsFree
SetLastError
FlsAlloc
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapSize
LCMapStringW
SetHandleCount
GetStartupInfoW
WriteConsoleW

user32

CharLowerA
CharToOemA
CharUpperW
CharToOemBuffW
OemToCharA
OemToCharBuffA
CharUpperA

advapi32

SetFileSecurityW
SetFileSecurityA
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges

Exports

Exports

RARCloseArchive
RAROpenArchiveEx
RARProcessFile
RARReadHeaderEx
RARSetCallback
getVersion

Sections

.text
Size: 135KB - Virtual size: 134KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/system32/ff_unrar.dll.new
.dll windows:5 windows x64 arch:x64

993c89d9f6cfe1c83b867fbbdc81c8df

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

F:\SVN ffdshow\trunk\obj\Release_x64_VC2010\ff_unrar.pdb

Imports

kernel32

GetFileType
CreateFileA
CreateFileW
ReadFile
GetStdHandle
WriteFile
GetProcAddress
GetModuleHandleW
GetFileAttributesA
GetFileAttributesW
SetFileAttributesA
SetFileAttributesW
DeviceIoControl
CreateDirectoryA
CreateDirectoryW
FindClose
FindNextFileA
FindFirstFileA
FindNextFileW
FindFirstFileW
GetVersionExW
GetFullPathNameA
GetModuleFileNameW
MultiByteToWideChar
FreeLibrary
LoadLibraryW
GetCurrentProcessId
LocalFileTimeToFileTime
SystemTimeToFileTime
FileTimeToSystemTime
FileTimeToLocalFileTime
GetSystemTime
WideCharToMultiByte
IsDBCSLeadByte
GetCPInfo
SetStdHandle
GetConsoleMode
GetConsoleCP
GetStringTypeW
SetEndOfFile
SetFilePointer
FlushFileBuffers
MoveFileW
Sleep
SetFileTime
GetCurrentProcess
GetLastError
CloseHandle
GetModuleFileNameA
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
RtlLookupFunctionEntry
RtlUnwindEx
HeapAlloc
HeapFree
HeapReAlloc
RaiseException
RtlPcToFileHeader
ExitProcess
DecodePointer
DeleteFileA
EncodePointer
GetCurrentThreadId
FlsSetValue
GetCommandLineA
FlsGetValue
FlsFree
SetLastError
FlsAlloc
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapSize
LCMapStringW
SetHandleCount
GetStartupInfoW
WriteConsoleW

user32

CharLowerA
CharToOemA
CharUpperW
CharToOemBuffW
OemToCharA
OemToCharBuffA
CharUpperA

advapi32

SetFileSecurityW
SetFileSecurityA
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges

Exports

Exports

RARCloseArchive
RAROpenArchiveEx
RARProcessFile
RARReadHeaderEx
RARSetCallback
getVersion

Sections

.text
Size: 135KB - Virtual size: 134KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/system32/ff_vfw.dll
.dll windows:5 windows x64 arch:x64

a0c6239c08e69d3c9f9c74e3806b1ca2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

F:\SVN ffdshow\trunk\obj\Release_x64_VC2010\ff_vfw.pdb

Imports

winmm

DefDriverProc

comctl32

ord17

kernel32

DeleteCriticalSection
CloseHandle
CreateEventA
WaitForSingleObject
SetEvent
GetCurrentThreadId
LocalFree
FormatMessageA
DecodePointer
EncodePointer
RaiseException
RtlPcToFileHeader
RtlLookupFunctionEntry
RtlUnwindEx
FlsSetValue
GetCommandLineA
HeapAlloc
GetLastError
HeapFree
WriteFile
GetStdHandle
GetModuleFileNameW
FlsGetValue
FlsFree
SetLastError
FlsAlloc
Sleep
HeapSize
GetProcAddress
GetModuleHandleW
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
SetFilePointer
GetConsoleCP
GetConsoleMode
MultiByteToWideChar
LCMapStringW
GetStringTypeW
SetStdHandle
WriteConsoleW
CreateFileW
FlushFileBuffers
GetProcessHeap
TlsAlloc
TlsFree
TlsGetValue
OpenEventA
ResetEvent
TlsSetValue

ole32

CoInitialize
CoUninitialize
CoCreateInstance

Exports

Exports

DriverProc
configureVFW

Sections

.text
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/system32/ff_vfw.dll.new
.dll windows:5 windows x64 arch:x64

a0c6239c08e69d3c9f9c74e3806b1ca2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

F:\SVN ffdshow\trunk\obj\Release_x64_VC2010\ff_vfw.pdb

Imports

winmm

DefDriverProc

comctl32

ord17

kernel32

DeleteCriticalSection
CloseHandle
CreateEventA
WaitForSingleObject
SetEvent
GetCurrentThreadId
LocalFree
FormatMessageA
DecodePointer
EncodePointer
RaiseException
RtlPcToFileHeader
RtlLookupFunctionEntry
RtlUnwindEx
FlsSetValue
GetCommandLineA
HeapAlloc
GetLastError
HeapFree
WriteFile
GetStdHandle
GetModuleFileNameW
FlsGetValue
FlsFree
SetLastError
FlsAlloc
Sleep
HeapSize
GetProcAddress
GetModuleHandleW
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
SetFilePointer
GetConsoleCP
GetConsoleMode
MultiByteToWideChar
LCMapStringW
GetStringTypeW
SetStdHandle
WriteConsoleW
CreateFileW
FlushFileBuffers
GetProcessHeap
TlsAlloc
TlsFree
TlsGetValue
OpenEventA
ResetEvent
TlsSetValue

ole32

CoInitialize
CoUninitialize
CoCreateInstance

Exports

Exports

DriverProc
configureVFW

Sections

.text
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/system32/ff_wmv9.dll
.dll windows:5 windows x64 arch:x64

a4dcb781315d8f990f0ef8f4ba17f34a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

F:\SVN ffdshow\trunk\obj\Release_x64_VC2010\ff_wmv9.pdb

Imports

kernel32

GetProcAddress
LoadLibraryW
FreeLibrary
GetSystemDefaultLCID
CloseHandle
WriteFile
GetLastError
CreateFileW
HeapReAlloc
FlushFileBuffers
DecodePointer
EncodePointer
RaiseException
RtlPcToFileHeader
RtlLookupFunctionEntry
RtlUnwindEx
HeapFree
HeapAlloc
GetCurrentThreadId
FlsSetValue
GetCommandLineA
SetStdHandle
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
GetFileType
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetStdHandle
GetModuleFileNameW
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FlsGetValue
FlsFree
SetLastError
FlsAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
TerminateProcess
GetCurrentProcess
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
GetModuleHandleW
ExitProcess
Sleep
SetHandleCount
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
WriteConsoleW
MultiByteToWideChar
SetFilePointer
HeapSize
LCMapStringW
GetStringTypeW

ole32

CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance

oleaut32

VariantInit
SysAllocString
SysFreeString

Exports

Exports

createWmv9
destroyWmv9
getVersion

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/system32/ff_wmv9.dll.new
.dll windows:5 windows x64 arch:x64

a4dcb781315d8f990f0ef8f4ba17f34a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

F:\SVN ffdshow\trunk\obj\Release_x64_VC2010\ff_wmv9.pdb

Imports

kernel32

GetProcAddress
LoadLibraryW
FreeLibrary
GetSystemDefaultLCID
CloseHandle
WriteFile
GetLastError
CreateFileW
HeapReAlloc
FlushFileBuffers
DecodePointer
EncodePointer
RaiseException
RtlPcToFileHeader
RtlLookupFunctionEntry
RtlUnwindEx
HeapFree
HeapAlloc
GetCurrentThreadId
FlsSetValue
GetCommandLineA
SetStdHandle
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
GetFileType
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetStdHandle
GetModuleFileNameW
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FlsGetValue
FlsFree
SetLastError
FlsAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
TerminateProcess
GetCurrentProcess
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
GetModuleHandleW
ExitProcess
Sleep
SetHandleCount
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
WriteConsoleW
MultiByteToWideChar
SetFilePointer
HeapSize
LCMapStringW
GetStringTypeW

ole32

CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance

oleaut32

VariantInit
SysAllocString
SysFreeString

Exports

Exports

createWmv9
destroyWmv9
getVersion

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/system32/ffdshow.ax
.dll regsvr32 windows:5 windows x64 arch:x64

11d26782f00295ef8d74c21e715fb9d3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

F:\SVN ffdshow\trunk\obj\Release_x64_VC2010\ffdshow.pdb

Imports

winmm

mmioRead
mmioAscend
mmioDescend
mmioOpenW
mmioClose

comctl32

ImageList_Add
ImageList_Create
ImageList_Destroy
ImageList_DrawEx
ord17
ImageList_Draw

dinput

DirectInputCreateW

shlwapi

PathCompactPathW
PathIsRelativeW
PathCanonicalizeW
SHDeleteKeyW
PathCompactPathExW

d3d9

Direct3DCreate9

kernel32

LockResource
LoadResource
FindResourceW
DebugBreak
GetUserDefaultLCID
IsDBCSLeadByteEx
FindCloseChangeNotification
FindFirstChangeNotificationW
SetThreadPriority
HeapFree
GetProcessHeap
ReleaseSemaphore
HeapAlloc
CreateSemaphoreA
DuplicateHandle
GetCurrentProcess
SetThreadPriorityBoost
SizeofResource
LocalFree
GetSystemInfo
GetModuleFileNameW
GetSystemDirectoryW
DeleteFileW
GetVolumeInformationW
lstrcpynW
WaitForMultipleObjects
CreateSemaphoreW
VirtualFree
VirtualAlloc
DisableThreadLibraryCalls
lstrlenA
GetModuleFileNameA
GetModuleHandleW
GetThreadPriority
GetCurrentThread
GetStringTypeW
SetFilePointer
LCMapStringW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
RtlCaptureContext
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LocalAlloc
WriteFile
HeapDestroy
HeapCreate
GetVersion
HeapSetInformation
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStartupInfoW
GetFileType
GetStdHandle
SetHandleCount
ExitProcess
FlsAlloc
FlsFree
FlsGetValue
SetLastError
GetThreadTimes
FreeLibraryAndExitThread
GetModuleHandleA
SwitchToThread
InitializeCriticalSectionAndSpinCount
GetLocalTime
HeapReAlloc
CreateThread
ExitThread
RtlUnwindEx
RtlLookupFunctionEntry
RtlPcToFileHeader
RaiseException
EncodePointer
DecodePointer
GetCommandLineA
FlsSetValue
QueryPerformanceCounter
FormatMessageA
CreateWaitableTimerA
SetWaitableTimer
ResumeThread
TlsSetValue
OpenEventA
TlsGetValue
TlsFree
TlsAlloc
GetSystemTimeAsFileTime
InitializeSListHead
InterlockedPushEntrySList
QueryDepthSList
InterlockedPopEntrySList
InterlockedFlushSList
CreateTimerQueue
DeleteTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetProcessAffinityMask
VirtualProtect
SetThreadAffinityMask
GetVersionExW
lstrcmpW
GetCurrentThreadId
ResetEvent
GetLocaleInfoW
SystemTimeToFileTime
HeapQueryInformation
CreateEventA
GetWindowsDirectoryW
GetFullPathNameW
GetLastError
GetFileSize
ReadFile
CreateFileW
GetFileTime
FindNextFileW
lstrlenW
FindFirstFileW
FindClose
GetFileAttributesW
GetCurrentProcessId
CreateEventW
GetTickCount
Sleep
SetEvent
OutputDebugStringW
OutputDebugStringA
WideCharToMultiByte
MultiByteToWideChar
WaitForSingleObject
GetExitCodeThread
CloseHandle
SearchPathW
LoadLibraryW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetProcAddress
FreeLibrary
GetCommandLineW
CompareStringW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetStdHandle
HeapSize
WriteConsoleW
CreateFileA
SetEndOfFile
SignalObjectAndWait
TerminateProcess
SleepEx

user32

MapWindowPoints
PtInRect
WindowFromPoint
PeekMessageW
SetWindowPlacement
IsWindow
GetWindowPlacement
GetDesktopWindow
CreateDialogIndirectParamW
GetScrollInfo
SetScrollInfo
ScrollWindow
GetSystemMetrics
GetWindowTextLengthW
SetWindowTextW
EndDialog
LoadMenuW
GetSubMenu
EnableMenuItem
SetCursorPos
IsWindowEnabled
DrawEdge
LoadIconW
MapDialogRect
SetMenuItemInfoW
GetMenuItemInfoW
GetSysColorBrush
LoadCursorW
SetCursor
ScreenToClient
LoadBitmapW
SetCapture
ReleaseCapture
GetSysColor
DrawTextW
GetClientRect
ClientToScreen
GetFocus
EnableWindow
GetMenuItemCount
CreateDialogParamW
DialogBoxParamW
DialogBoxIndirectParamW
MonitorFromWindow
EnumWindows
MessageBoxA
OffsetRect
MoveWindow
SetFocus
IsWindowVisible
InvalidateRect
CallWindowProcW
GetDlgItemInt
GetDlgItemTextW
SetDlgItemInt
GetDlgItem
ShowWindow
IsRectEmpty
FillRect
DestroyIcon
GetMenuStringW
LoadImageW
GetCursorPos
SetForegroundWindow
TrackPopupMenu
DestroyMenu
KillTimer
SetTimer
CreatePopupMenu
InsertMenuItemW
LoadStringW
GetDlgCtrlID
SetDlgItemTextW
GetDC
GetWindowRect
SetWindowPos
ReleaseDC
GetClassNameW
GetWindowTextW
GetForegroundWindow
GetWindowThreadProcessId
DestroyWindow
SetRect
MessageBoxW
PostMessageW
IntersectRect
EnumChildWindows
RegisterClassW
CreateWindowExW
GetWindowLongW
SetWindowLongW
RegisterWindowMessageW
SetWindowLongPtrW
GetMessageW
TranslateMessage
DispatchMessageW
UnregisterClassW
GetWindowLongPtrW
PostQuitMessage
SendMessageTimeoutW
DefWindowProcW
SendMessageW
SendDlgItemMessageW
wsprintfW
GetParent
SetParent

gdi32

CreateFontIndirectW
GetTextMetricsW
GetTextExtentExPointW
GetDeviceCaps
SetDIBitsToDevice
GetPath
GetObjectW
GetCurrentObject
EndPath
GetBkColor
CreateCompatibleBitmap
CreateBrushIndirect
LineTo
MoveToEx
CreatePen
Polygon
SetTextAlign
StretchBlt
StretchDIBits
DeleteObject
GetTextExtentPoint32W
SelectObject
BeginPath
CloseFigure
DeleteDC
GetTextColor
AbortPath
CreateSolidBrush
SetMapMode
SetTextColor
SetBkMode
CreateCompatibleDC
GetOutlineTextMetricsW
TextOutW
GetDIBits
EnumFontFamiliesExW
GetStockObject
SetBkColor

comdlg32

ChooseColorW
GetSaveFileNameW
GetOpenFileNameW

advapi32

RegSetValueW
RegEnumKeyExW
RegDeleteKeyW
RegOpenKeyW
RegEnumKeyW
RegEnumValueW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
GetUserNameW
RegQueryValueExW
RegCloseKey
RegCreateKeyW

shell32

Shell_NotifyIconW
SHGetPathFromIDListW
SHBrowseForFolderW
ShellExecuteW

ole32

CoTaskMemFree
CoGetMalloc
CreateItemMoniker
GetRunningObjectTable
CoCreateInstance
CoUninitialize
CoInitialize
CoTaskMemAlloc
CoFreeUnusedLibraries
StringFromGUID2
StringFromIID

oleaut32

OleCreatePropertyFrame
VariantInit
OleLoadPicturePath
SysFreeString
VariantClear

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
configure
configureAudio
configureAudioRaw
configureDXVA
configureDec
configureEnc
configureRaw
configureSubtitles
ffacm2creator

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rotext
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.TEXT
Size: 1024B - Virtual size: 940B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 939KB - Virtual size: 938KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 700KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 126KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rodata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

data
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 202KB - Virtual size: 202KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/system32/ffdshow.ax.new
.dll regsvr32 windows:5 windows x64 arch:x64

11d26782f00295ef8d74c21e715fb9d3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

F:\SVN ffdshow\trunk\obj\Release_x64_VC2010\ffdshow.pdb

Imports

winmm

mmioRead
mmioAscend
mmioDescend
mmioOpenW
mmioClose

comctl32

ImageList_Add
ImageList_Create
ImageList_Destroy
ImageList_DrawEx
ord17
ImageList_Draw

dinput

DirectInputCreateW

shlwapi

PathCompactPathW
PathIsRelativeW
PathCanonicalizeW
SHDeleteKeyW
PathCompactPathExW

d3d9

Direct3DCreate9

kernel32

LockResource
LoadResource
FindResourceW
DebugBreak
GetUserDefaultLCID
IsDBCSLeadByteEx
FindCloseChangeNotification
FindFirstChangeNotificationW
SetThreadPriority
HeapFree
GetProcessHeap
ReleaseSemaphore
HeapAlloc
CreateSemaphoreA
DuplicateHandle
GetCurrentProcess
SetThreadPriorityBoost
SizeofResource
LocalFree
GetSystemInfo
GetModuleFileNameW
GetSystemDirectoryW
DeleteFileW
GetVolumeInformationW
lstrcpynW
WaitForMultipleObjects
CreateSemaphoreW
VirtualFree
VirtualAlloc
DisableThreadLibraryCalls
lstrlenA
GetModuleFileNameA
GetModuleHandleW
GetThreadPriority
GetCurrentThread
GetStringTypeW
SetFilePointer
LCMapStringW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
RtlCaptureContext
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LocalAlloc
WriteFile
HeapDestroy
HeapCreate
GetVersion
HeapSetInformation
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStartupInfoW
GetFileType
GetStdHandle
SetHandleCount
ExitProcess
FlsAlloc
FlsFree
FlsGetValue
SetLastError
GetThreadTimes
FreeLibraryAndExitThread
GetModuleHandleA
SwitchToThread
InitializeCriticalSectionAndSpinCount
GetLocalTime
HeapReAlloc
CreateThread
ExitThread
RtlUnwindEx
RtlLookupFunctionEntry
RtlPcToFileHeader
RaiseException
EncodePointer
DecodePointer
GetCommandLineA
FlsSetValue
QueryPerformanceCounter
FormatMessageA
CreateWaitableTimerA
SetWaitableTimer
ResumeThread
TlsSetValue
OpenEventA
TlsGetValue
TlsFree
TlsAlloc
GetSystemTimeAsFileTime
InitializeSListHead
InterlockedPushEntrySList
QueryDepthSList
InterlockedPopEntrySList
InterlockedFlushSList
CreateTimerQueue
DeleteTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetProcessAffinityMask
VirtualProtect
SetThreadAffinityMask
GetVersionExW
lstrcmpW
GetCurrentThreadId
ResetEvent
GetLocaleInfoW
SystemTimeToFileTime
HeapQueryInformation
CreateEventA
GetWindowsDirectoryW
GetFullPathNameW
GetLastError
GetFileSize
ReadFile
CreateFileW
GetFileTime
FindNextFileW
lstrlenW
FindFirstFileW
FindClose
GetFileAttributesW
GetCurrentProcessId
CreateEventW
GetTickCount
Sleep
SetEvent
OutputDebugStringW
OutputDebugStringA
WideCharToMultiByte
MultiByteToWideChar
WaitForSingleObject
GetExitCodeThread
CloseHandle
SearchPathW
LoadLibraryW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetProcAddress
FreeLibrary
GetCommandLineW
CompareStringW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetStdHandle
HeapSize
WriteConsoleW
CreateFileA
SetEndOfFile
SignalObjectAndWait
TerminateProcess
SleepEx

user32

MapWindowPoints
PtInRect
WindowFromPoint
PeekMessageW
SetWindowPlacement
IsWindow
GetWindowPlacement
GetDesktopWindow
CreateDialogIndirectParamW
GetScrollInfo
SetScrollInfo
ScrollWindow
GetSystemMetrics
GetWindowTextLengthW
SetWindowTextW
EndDialog
LoadMenuW
GetSubMenu
EnableMenuItem
SetCursorPos
IsWindowEnabled
DrawEdge
LoadIconW
MapDialogRect
SetMenuItemInfoW
GetMenuItemInfoW
GetSysColorBrush
LoadCursorW
SetCursor
ScreenToClient
LoadBitmapW
SetCapture
ReleaseCapture
GetSysColor
DrawTextW
GetClientRect
ClientToScreen
GetFocus
EnableWindow
GetMenuItemCount
CreateDialogParamW
DialogBoxParamW
DialogBoxIndirectParamW
MonitorFromWindow
EnumWindows
MessageBoxA
OffsetRect
MoveWindow
SetFocus
IsWindowVisible
InvalidateRect
CallWindowProcW
GetDlgItemInt
GetDlgItemTextW
SetDlgItemInt
GetDlgItem
ShowWindow
IsRectEmpty
FillRect
DestroyIcon
GetMenuStringW
LoadImageW
GetCursorPos
SetForegroundWindow
TrackPopupMenu
DestroyMenu
KillTimer
SetTimer
CreatePopupMenu
InsertMenuItemW
LoadStringW
GetDlgCtrlID
SetDlgItemTextW
GetDC
GetWindowRect
SetWindowPos
ReleaseDC
GetClassNameW
GetWindowTextW
GetForegroundWindow
GetWindowThreadProcessId
DestroyWindow
SetRect
MessageBoxW
PostMessageW
IntersectRect
EnumChildWindows
RegisterClassW
CreateWindowExW
GetWindowLongW
SetWindowLongW
RegisterWindowMessageW
SetWindowLongPtrW
GetMessageW
TranslateMessage
DispatchMessageW
UnregisterClassW
GetWindowLongPtrW
PostQuitMessage
SendMessageTimeoutW
DefWindowProcW
SendMessageW
SendDlgItemMessageW
wsprintfW
GetParent
SetParent

gdi32

CreateFontIndirectW
GetTextMetricsW
GetTextExtentExPointW
GetDeviceCaps
SetDIBitsToDevice
GetPath
GetObjectW
GetCurrentObject
EndPath
GetBkColor
CreateCompatibleBitmap
CreateBrushIndirect
LineTo
MoveToEx
CreatePen
Polygon
SetTextAlign
StretchBlt
StretchDIBits
DeleteObject
GetTextExtentPoint32W
SelectObject
BeginPath
CloseFigure
DeleteDC
GetTextColor
AbortPath
CreateSolidBrush
SetMapMode
SetTextColor
SetBkMode
CreateCompatibleDC
GetOutlineTextMetricsW
TextOutW
GetDIBits
EnumFontFamiliesExW
GetStockObject
SetBkColor

comdlg32

ChooseColorW
GetSaveFileNameW
GetOpenFileNameW

advapi32

RegSetValueW
RegEnumKeyExW
RegDeleteKeyW
RegOpenKeyW
RegEnumKeyW
RegEnumValueW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
GetUserNameW
RegQueryValueExW
RegCloseKey
RegCreateKeyW

shell32

Shell_NotifyIconW
SHGetPathFromIDListW
SHBrowseForFolderW
ShellExecuteW

ole32

CoTaskMemFree
CoGetMalloc
CreateItemMoniker
GetRunningObjectTable
CoCreateInstance
CoUninitialize
CoInitialize
CoTaskMemAlloc
CoFreeUnusedLibraries
StringFromGUID2
StringFromIID

oleaut32

OleCreatePropertyFrame
VariantInit
OleLoadPicturePath
SysFreeString
VariantClear

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
configure
configureAudio
configureAudioRaw
configureDXVA
configureDec
configureEnc
configureRaw
configureSubtitles
ffacm2creator

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rotext
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.TEXT
Size: 1024B - Virtual size: 940B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 939KB - Virtual size: 938KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 700KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 126KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rodata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

data
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 202KB - Virtual size: 202KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/system32/ffmpeg.dll
.dll windows:4 windows x64 arch:x64

8b2be6e82e1a2f5b6a6ac4ed9979b98b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateEventA
CreateSemaphoreA
DeleteCriticalSection
DisableThreadLibraryCalls
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProcessAffinityMask
GetSystemInfo
GetSystemTimeAsFileTime
GetTickCount
GetVersionExA
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryW
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
ReleaseSemaphore
ResetEvent
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetEvent
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForSingleObject

msvcrt

_close
_open
_read
_write
__dllonexit
__iob_func
__setusermatherr
_amsg_exit
_beginthreadex
_errno
_exit
_initterm
_lock
_lseeki64
_onexit
_unlock
_vsnprintf
_vsnwprintf
_wopen
abort
acos
asin
atan
calloc
ceil
clock
cosh
floor
fprintf
fputs
free
frexp
fwrite
islower
isspace
isupper
localeconv
log10
malloc
memchr
memcmp
memcpy
memmove
memset
qsort
raise
realloc
signal
sinh
sprintf
sscanf
strcat
strchr
strcmp
strcpy
strerror
strlen
strncmp
strspn
strtok
strtol
tan
tanh
toupper
vfprintf
wcstombs

user32

MessageBoxA

Exports

Exports

FF264UpdateRefFrameSliceLong
FFGetMBNumber
FFH264BuildPicParams
FFH264CheckCompatibility
FFH264DecodeBuffer
FFH264IsRefFrameInUse
FFH264SetCurrentPicture
FFH264SetDxvaSliceLong
FFH264UpdateRefFramesList
FFIsSkipped
FFVC1UpdatePictureParam
GetCPUCount
GetFFMpegPictureType
av_free
av_h264_decode_frame
av_init_packet
av_log_get_callback
av_log_get_level
av_log_set_callback
av_log_set_level
av_mallocz
av_packet_new_side_data
av_parser_close
av_parser_init
av_parser_parse2
av_set_cpu_flags_mask
av_vc1_decode_frame
avcodec_alloc_context3
avcodec_alloc_frame
avcodec_close
avcodec_decode_audio3
avcodec_decode_audio4
avcodec_decode_video2
avcodec_default_get_buffer
avcodec_default_reget_buffer
avcodec_default_release_buffer
avcodec_encode_audio
avcodec_encode_audio2
avcodec_encode_video
avcodec_find_decoder
avcodec_find_encoder
avcodec_flush_buffers
avcodec_get_current_idct
avcodec_get_encoder_info
avcodec_h264_search_recovery_point
avcodec_open2
avcodec_register_all
ff_simple_idct_mmx
getVersion
gradfunFilter
gradfunInit
pp_free_context
pp_get_context
pp_postprocess
sws_freeContext
sws_freeFilter
sws_freeVec
sws_getCachedContext
sws_getCoefficients
sws_getConstVec
sws_getDefaultFilter
sws_getGaussianVec
sws_normalizeVec
sws_scale
sws_setColorspaceDetails
yadif_filter
yadif_init
yadif_uninit

Sections

.text
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 672KB - Virtual size: 672KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rodata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/system32/ffmpeg.dll.new
.dll windows:4 windows x64 arch:x64

8b2be6e82e1a2f5b6a6ac4ed9979b98b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateEventA
CreateSemaphoreA
DeleteCriticalSection
DisableThreadLibraryCalls
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProcessAffinityMask
GetSystemInfo
GetSystemTimeAsFileTime
GetTickCount
GetVersionExA
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryW
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
ReleaseSemaphore
ResetEvent
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetEvent
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForSingleObject

msvcrt

_close
_open
_read
_write
__dllonexit
__iob_func
__setusermatherr
_amsg_exit
_beginthreadex
_errno
_exit
_initterm
_lock
_lseeki64
_onexit
_unlock
_vsnprintf
_vsnwprintf
_wopen
abort
acos
asin
atan
calloc
ceil
clock
cosh
floor
fprintf
fputs
free
frexp
fwrite
islower
isspace
isupper
localeconv
log10
malloc
memchr
memcmp
memcpy
memmove
memset
qsort
raise
realloc
signal
sinh
sprintf
sscanf
strcat
strchr
strcmp
strcpy
strerror
strlen
strncmp
strspn
strtok
strtol
tan
tanh
toupper
vfprintf
wcstombs

user32

MessageBoxA

Exports

Exports

FF264UpdateRefFrameSliceLong
FFGetMBNumber
FFH264BuildPicParams
FFH264CheckCompatibility
FFH264DecodeBuffer
FFH264IsRefFrameInUse
FFH264SetCurrentPicture
FFH264SetDxvaSliceLong
FFH264UpdateRefFramesList
FFIsSkipped
FFVC1UpdatePictureParam
GetCPUCount
GetFFMpegPictureType
av_free
av_h264_decode_frame
av_init_packet
av_log_get_callback
av_log_get_level
av_log_set_callback
av_log_set_level
av_mallocz
av_packet_new_side_data
av_parser_close
av_parser_init
av_parser_parse2
av_set_cpu_flags_mask
av_vc1_decode_frame
avcodec_alloc_context3
avcodec_alloc_frame
avcodec_close
avcodec_decode_audio3
avcodec_decode_audio4
avcodec_decode_video2
avcodec_default_get_buffer
avcodec_default_reget_buffer
avcodec_default_release_buffer
avcodec_encode_audio
avcodec_encode_audio2
avcodec_encode_video
avcodec_find_decoder
avcodec_find_encoder
avcodec_flush_buffers
avcodec_get_current_idct
avcodec_get_encoder_info
avcodec_h264_search_recovery_point
avcodec_open2
avcodec_register_all
ff_simple_idct_mmx
getVersion
gradfunFilter
gradfunInit
pp_free_context
pp_get_context
pp_postprocess
sws_freeContext
sws_freeFilter
sws_freeVec
sws_getCachedContext
sws_getCoefficients
sws_getConstVec
sws_getDefaultFilter
sws_getGaussianVec
sws_normalizeVec
sws_scale
sws_setColorspaceDetails
yadif_filter
yadif_init
yadif_uninit

Sections

.text
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 672KB - Virtual size: 672KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rodata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/system32/gdsmux.x64.exe
.exe windows:5 windows x64 arch:x64

c9a0304905e801d3ffcc31cdf94bff94

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

comdlg32

GetSaveFileNameW
GetOpenFileNameW

rpcrt4

UuidToStringA
RpcStringFreeA
UuidCreate

kernel32

GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringA
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetConsoleMode
GetConsoleCP
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
RtlPcToFileHeader
LCMapStringW
FlsAlloc
FlsFree
FlsSetValue
FlsGetValue
DecodePointer
EncodePointer
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetStdHandle
WriteFile
ExitProcess
Sleep
HeapCreate
HeapSetInformation
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RtlUnwindEx
GetStartupInfoW
HeapSize
HeapReAlloc
HeapDestroy
InterlockedPopEntrySList
VirtualFree
GetProcessHeap
HeapAlloc
HeapFree
InterlockedPushEntrySList
WideCharToMultiByte
CreateFileA
GetFileSize
FormatMessageA
SetFilePointer
ReadFile
GetTempPathW
CreateFileW
CloseHandle
FormatMessageW
GetVersionExA
lstrlenA
VirtualQuery
lstrcpynA
FindResourceExW
FindResourceW
FreeLibrary
LoadResource
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
GetCommandLineW
LocalAlloc
LoadLibraryExW
GetCurrentProcess
GlobalLock
GetModuleHandleW
GetTickCount
InitializeCriticalSection
GlobalAlloc
LoadLibraryW
SizeofResource
GetVersionExW
LeaveCriticalSection
lstrcpynW
MulDiv
GetModuleFileNameW
lstrcmpW
MultiByteToWideChar
lstrlenW
GlobalUnlock
FlushInstructionCache
RaiseException
GetLastError
lstrcpyW
GetCurrentProcessId
DeleteFileW
GetCurrentThreadId
DeleteCriticalSection
VirtualProtect
lstrcmpiW
GetModuleFileNameA
LockResource
EnterCriticalSection
VirtualAlloc
GetProcAddress
SetLastError

user32

SetTimer
UnregisterClassA
ScreenToClient
GetWindowTextLengthW
SetCursor
DestroyWindow
ClientToScreen
EndPaint
EnableWindow
DestroyMenu
GetDlgCtrlID
TranslateAcceleratorW
SetMenuItemInfoW
GetDialogBaseUnits
GetMonitorInfoW
CallWindowProcW
DefWindowProcW
CopyRect
MapDialogRect
GetMessageW
MonitorFromPoint
PostQuitMessage
CharNextW
TrackPopupMenu
GetWindowDC
GetDlgItemInt
DestroyAcceleratorTable
SetWindowTextW
MapWindowPoints
RegisterWindowMessageW
FillRect
IsChild
LoadImageW
SetCapture
PostMessageW
DrawTextW
GetWindow
MoveWindow
GetWindowRect
KillTimer
GetKeyState
LoadStringA
GetFocus
DialogBoxParamW
GetParent
InvalidateRgn
LoadCursorW
MessageBeep
GetWindowLongPtrW
GetClientRect
CreateAcceleratorTableW
SetFocus
DrawEdge
GetMenuItemInfoW
SetRectEmpty
BeginPaint
PtInRect
GetClassInfoExW
wsprintfW
GetDoubleClickTime
GetDC
GetCapture
DrawFocusRect
TranslateMessage
LoadAcceleratorsW
InflateRect
SetDlgItemInt
IsDialogMessageW
RegisterClassExW
OffsetRect
TrackPopupMenuEx
IntersectRect
InvalidateRect
LoadMenuW
GetWindowLongW
AppendMenuW
GetClassLongPtrW
GetWindowTextW
SystemParametersInfoW
PeekMessageW
GetDCEx
GetClassNameW
ReleaseDC
MonitorFromWindow
GetDlgItem
SetWindowLongW
EndDialog
RedrawWindow
DestroyCursor
GetDesktopWindow
GetSysColor
SetWindowPos
GetCursorPos
LoadStringW
ShowWindow
CreatePopupMenu
GetSysColorBrush
CreateDialogParamW
GetMenuItemCount
IsWindow
RemoveMenu
CreateWindowExW
SetMenuDefaultItem
EqualRect
MessageBoxW
ReleaseCapture
GetSystemMetrics
IsWindowVisible
SetWindowLongPtrW
SetDlgItemTextW
SendMessageW
DispatchMessageW

gdi32

GetClipRgn
MoveToEx
SetWindowOrgEx
BitBlt
PatBlt
SetViewportOrgEx
LineTo
LPtoDP
SetTextColor
DeleteDC
Polygon
CreateFontIndirectW
GetDeviceCaps
SetBkColor
ExcludeClipRect
RemoveFontMemResourceEx
SetBkMode
DeleteObject
SelectObject
SelectClipRgn
CreateCompatibleDC
CreateRectRgnIndirect
DPtoLP
CombineRgn
CreateCompatibleBitmap
ExtTextOutW
SaveDC
CreateFontW
GetObjectW
AddFontMemResourceEx
CreateRectRgn
Polyline
CreatePen
GetClipBox
IntersectClipRect
GetStockObject
RestoreDC
CreateSolidBrush

advapi32

RegCreateKeyExW
RegQueryInfoKeyW
RegDeleteKeyW
RegQueryValueExW
RegDeleteValueW
RegOpenKeyExW
RegCloseKey
RegSetValueExW
RegEnumKeyExW

ole32

CoGetClassObject
CoTaskMemFree
CoTaskMemAlloc
CreateItemMoniker
OleInitialize
StringFromGUID2
CreateStreamOnHGlobal
CLSIDFromString
CLSIDFromProgID
CoTaskMemRealloc
OleLockRunning
OleUninitialize
DoDragDrop
GetRunningObjectTable
CoCreateInstance

oleaut32

LoadRegTypeLi
SysFreeString
VarUI4FromStr
OleCreateFontIndirect
OleCreatePropertyFrame
VariantChangeType
SysAllocStringLen
VarBstrCmp
VariantInit
LoadTypeLi
VariantClear
SysStringLen
DispCallFunc
SysAllocString

mkzlib.x64

inflateReset
inflateEnd
inflateInit_
inflate

mkunicode.x64

iso_getentry
Utf16ToUtf8

shlwapi

SHAutoComplete
StrCmpIW
UrlEscapeW

comctl32

ImageList_Draw
ImageList_SetOverlayImage
InitCommonControlsEx
ImageList_GetImageInfo
ImageList_LoadImageW
_TrackMouseEvent

Sections

.text
Size: 309KB - Virtual size: 308KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 87KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/system32/gdsmux.x64.exe.new
.exe windows:5 windows x64 arch:x64

c9a0304905e801d3ffcc31cdf94bff94

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

comdlg32

GetSaveFileNameW
GetOpenFileNameW

rpcrt4

UuidToStringA
RpcStringFreeA
UuidCreate

kernel32

GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringA
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetConsoleMode
GetConsoleCP
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
RtlPcToFileHeader
LCMapStringW
FlsAlloc
FlsFree
FlsSetValue
FlsGetValue
DecodePointer
EncodePointer
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetStdHandle
WriteFile
ExitProcess
Sleep
HeapCreate
HeapSetInformation
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RtlUnwindEx
GetStartupInfoW
HeapSize
HeapReAlloc
HeapDestroy
InterlockedPopEntrySList
VirtualFree
GetProcessHeap
HeapAlloc
HeapFree
InterlockedPushEntrySList
WideCharToMultiByte
CreateFileA
GetFileSize
FormatMessageA
SetFilePointer
ReadFile
GetTempPathW
CreateFileW
CloseHandle
FormatMessageW
GetVersionExA
lstrlenA
VirtualQuery
lstrcpynA
FindResourceExW
FindResourceW
FreeLibrary
LoadResource
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
GetCommandLineW
LocalAlloc
LoadLibraryExW
GetCurrentProcess
GlobalLock
GetModuleHandleW
GetTickCount
InitializeCriticalSection
GlobalAlloc
LoadLibraryW
SizeofResource
GetVersionExW
LeaveCriticalSection
lstrcpynW
MulDiv
GetModuleFileNameW
lstrcmpW
MultiByteToWideChar
lstrlenW
GlobalUnlock
FlushInstructionCache
RaiseException
GetLastError
lstrcpyW
GetCurrentProcessId
DeleteFileW
GetCurrentThreadId
DeleteCriticalSection
VirtualProtect
lstrcmpiW
GetModuleFileNameA
LockResource
EnterCriticalSection
VirtualAlloc
GetProcAddress
SetLastError

user32

SetTimer
UnregisterClassA
ScreenToClient
GetWindowTextLengthW
SetCursor
DestroyWindow
ClientToScreen
EndPaint
EnableWindow
DestroyMenu
GetDlgCtrlID
TranslateAcceleratorW
SetMenuItemInfoW
GetDialogBaseUnits
GetMonitorInfoW
CallWindowProcW
DefWindowProcW
CopyRect
MapDialogRect
GetMessageW
MonitorFromPoint
PostQuitMessage
CharNextW
TrackPopupMenu
GetWindowDC
GetDlgItemInt
DestroyAcceleratorTable
SetWindowTextW
MapWindowPoints
RegisterWindowMessageW
FillRect
IsChild
LoadImageW
SetCapture
PostMessageW
DrawTextW
GetWindow
MoveWindow
GetWindowRect
KillTimer
GetKeyState
LoadStringA
GetFocus
DialogBoxParamW
GetParent
InvalidateRgn
LoadCursorW
MessageBeep
GetWindowLongPtrW
GetClientRect
CreateAcceleratorTableW
SetFocus
DrawEdge
GetMenuItemInfoW
SetRectEmpty
BeginPaint
PtInRect
GetClassInfoExW
wsprintfW
GetDoubleClickTime
GetDC
GetCapture
DrawFocusRect
TranslateMessage
LoadAcceleratorsW
InflateRect
SetDlgItemInt
IsDialogMessageW
RegisterClassExW
OffsetRect
TrackPopupMenuEx
IntersectRect
InvalidateRect
LoadMenuW
GetWindowLongW
AppendMenuW
GetClassLongPtrW
GetWindowTextW
SystemParametersInfoW
PeekMessageW
GetDCEx
GetClassNameW
ReleaseDC
MonitorFromWindow
GetDlgItem
SetWindowLongW
EndDialog
RedrawWindow
DestroyCursor
GetDesktopWindow
GetSysColor
SetWindowPos
GetCursorPos
LoadStringW
ShowWindow
CreatePopupMenu
GetSysColorBrush
CreateDialogParamW
GetMenuItemCount
IsWindow
RemoveMenu
CreateWindowExW
SetMenuDefaultItem
EqualRect
MessageBoxW
ReleaseCapture
GetSystemMetrics
IsWindowVisible
SetWindowLongPtrW
SetDlgItemTextW
SendMessageW
DispatchMessageW

gdi32

GetClipRgn
MoveToEx
SetWindowOrgEx
BitBlt
PatBlt
SetViewportOrgEx
LineTo
LPtoDP
SetTextColor
DeleteDC
Polygon
CreateFontIndirectW
GetDeviceCaps
SetBkColor
ExcludeClipRect
RemoveFontMemResourceEx
SetBkMode
DeleteObject
SelectObject
SelectClipRgn
CreateCompatibleDC
CreateRectRgnIndirect
DPtoLP
CombineRgn
CreateCompatibleBitmap
ExtTextOutW
SaveDC
CreateFontW
GetObjectW
AddFontMemResourceEx
CreateRectRgn
Polyline
CreatePen
GetClipBox
IntersectClipRect
GetStockObject
RestoreDC
CreateSolidBrush

advapi32

RegCreateKeyExW
RegQueryInfoKeyW
RegDeleteKeyW
RegQueryValueExW
RegDeleteValueW
RegOpenKeyExW
RegCloseKey
RegSetValueExW
RegEnumKeyExW

ole32

CoGetClassObject
CoTaskMemFree
CoTaskMemAlloc
CreateItemMoniker
OleInitialize
StringFromGUID2
CreateStreamOnHGlobal
CLSIDFromString
CLSIDFromProgID
CoTaskMemRealloc
OleLockRunning
OleUninitialize
DoDragDrop
GetRunningObjectTable
CoCreateInstance

oleaut32

LoadRegTypeLi
SysFreeString
VarUI4FromStr
OleCreateFontIndirect
OleCreatePropertyFrame
VariantChangeType
SysAllocStringLen
VarBstrCmp
VariantInit
LoadTypeLi
VariantClear
SysStringLen
DispCallFunc
SysAllocString

mkzlib.x64

inflateReset
inflateEnd
inflateInit_
inflate

mkunicode.x64

iso_getentry
Utf16ToUtf8

shlwapi

SHAutoComplete
StrCmpIW
UrlEscapeW

comctl32

ImageList_Draw
ImageList_SetOverlayImage
InitCommonControlsEx
ImageList_GetImageInfo
ImageList_LoadImageW
_TrackMouseEvent

Sections

.text
Size: 309KB - Virtual size: 308KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 87KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/system32/libmpeg2_ff.dll
.dll windows:5 windows x64 arch:x64

55602eb1f6d642c269db89dd0cb2ca6e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

F:\SVN ffdshow\trunk\obj\Release_x64_VC2010\libmpeg2_ff.pdb

Imports

kernel32

GetCurrentThreadId
FlsSetValue
GetCommandLineA
HeapAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
EncodePointer
DecodePointer
TerminateProcess
GetCurrentProcess
HeapSize
GetLastError
HeapFree
HeapReAlloc
RtlUnwindEx
FlsGetValue
FlsFree
SetLastError
FlsAlloc
Sleep
GetProcAddress
GetModuleHandleW
ExitProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
WriteFile
GetModuleFileNameW
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
LCMapStringW
MultiByteToWideChar
GetStringTypeW

Exports

Exports

getVersion
mpeg2_accel
mpeg2_buffer
mpeg2_close
mpeg2_info
mpeg2_init
mpeg2_parse
mpeg2_reset
mpeg2_set_accel
mpeg2_set_rtStart

Sections

.text
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/system32/libmpeg2_ff.dll.new
.dll windows:5 windows x64 arch:x64

55602eb1f6d642c269db89dd0cb2ca6e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

F:\SVN ffdshow\trunk\obj\Release_x64_VC2010\libmpeg2_ff.pdb

Imports

kernel32

GetCurrentThreadId
FlsSetValue
GetCommandLineA
HeapAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
EncodePointer
DecodePointer
TerminateProcess
GetCurrentProcess
HeapSize
GetLastError
HeapFree
HeapReAlloc
RtlUnwindEx
FlsGetValue
FlsFree
SetLastError
FlsAlloc
Sleep
GetProcAddress
GetModuleHandleW
ExitProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
WriteFile
GetModuleFileNameW
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
LCMapStringW
MultiByteToWideChar
GetStringTypeW

Exports

Exports

getVersion
mpeg2_accel
mpeg2_buffer
mpeg2_close
mpeg2_info
mpeg2_init
mpeg2_parse
mpeg2_reset
mpeg2_set_accel
mpeg2_set_rtStart

Sections

.text
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/system32/mkunicode.x64.dll
.dll windows:5 windows x64 arch:x64

1da5d5aea5082cc09bfa84c92764c4f2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetLocaleInfoA
MultiByteToWideChar

Exports

Exports

Utf16ToUtf8
Utf8ToUtf16
iso_code2tocode3
iso_code3tocode2
iso_code3tocode3
iso_codetoname
iso_getentry
iso_getlcid
iso_getsyslang
iso_nametocode3

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$WINDIR/system32/mkunicode.x64.dll.new
.dll windows:5 windows x64 arch:x64

1da5d5aea5082cc09bfa84c92764c4f2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetLocaleInfoA
MultiByteToWideChar

Exports

Exports

Utf16ToUtf8
Utf8ToUtf16
iso_code2tocode3
iso_code3tocode2
iso_code3tocode3
iso_codetoname
iso_getentry
iso_getlcid
iso_getsyslang
iso_nametocode3

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$WINDIR/system32/mkv2vfr.x64.exe
.exe windows:5 windows x64 arch:x64

5d2ed88419b60fe965d809f6f7d3149d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

WriteFile
GetLastError
SetFilePointer
CreateFileW
CloseHandle
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
WideCharToMultiByte
GetConsoleOutputCP
GetConsoleMode
GetACP
GetStdHandle
GetCommandLineW
GetTickCount
SetEndOfFile
GetVersionExA
ReadFile
FormatMessageW
MultiByteToWideChar
FormatMessageA
GetFileSize
CreateFileA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
RtlPcToFileHeader
RtlLookupFunctionEntry
RtlUnwindEx
GetCommandLineA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlCaptureContext
GetModuleFileNameA
EncodePointer
DecodePointer
FlsGetValue
FlsSetValue
FlsFree
SetLastError
GetCurrentThreadId
FlsAlloc
HeapSetInformation
HeapCreate
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
RtlVirtualUnwind
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
GetCPInfo
GetOEMCP
IsValidCodePage
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryA
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
GetConsoleCP
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
FlushFileBuffers
WriteConsoleA
WriteConsoleW

mkzlib.x64

inflateEnd
inflateInit_
inflateReset
inflate

mkunicode.x64

Utf16ToUtf8

Sections

.text
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/system32/mkv2vfr.x64.exe.new
.exe windows:5 windows x64 arch:x64

5d2ed88419b60fe965d809f6f7d3149d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

WriteFile
GetLastError
SetFilePointer
CreateFileW
CloseHandle
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
WideCharToMultiByte
GetConsoleOutputCP
GetConsoleMode
GetACP
GetStdHandle
GetCommandLineW
GetTickCount
SetEndOfFile
GetVersionExA
ReadFile
FormatMessageW
MultiByteToWideChar
FormatMessageA
GetFileSize
CreateFileA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
RtlPcToFileHeader
RtlLookupFunctionEntry
RtlUnwindEx
GetCommandLineA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlCaptureContext
GetModuleFileNameA
EncodePointer
DecodePointer
FlsGetValue
FlsSetValue
FlsFree
SetLastError
GetCurrentThreadId
FlsAlloc
HeapSetInformation
HeapCreate
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
RtlVirtualUnwind
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
GetCPInfo
GetOEMCP
IsValidCodePage
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryA
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
GetConsoleCP
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
FlushFileBuffers
WriteConsoleA
WriteConsoleW

mkzlib.x64

inflateEnd
inflateInit_
inflateReset
inflate

mkunicode.x64

Utf16ToUtf8

Sections

.text
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/system32/mkx.x64.dll
.dll regsvr32 windows:5 windows x64 arch:x64

c0400ed0c2fe026261d62814c1bd618e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

ws2_32

WSAStartup
socket
setsockopt
ioctlsocket
connect
select
__WSAFDIsSet
inet_addr
shutdown
recv
closesocket
WSACleanup
WSASetLastError
getservbyport
ntohs
gethostbyaddr
htons
getservbyname
htonl
inet_ntoa
gethostbyname
WSAGetLastError
send

kernel32

GetLocaleInfoA
RaiseException
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
Sleep
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
HeapFree
VirtualAlloc
HeapAlloc
GetProcessHeap
GetLastError
ReadFile
SetFilePointer
GetFileSize
GetFileTime
CreateFileA
WideCharToMultiByte
CreateFileW
VirtualFree
CloseHandle
lstrlenW
InitializeCriticalSection
GetModuleHandleW
lstrcmpiW
GetModuleFileNameW
SetThreadLocale
GetThreadLocale
MultiByteToWideChar
LoadLibraryExW
FormatMessageW
FormatMessageA
HeapReAlloc
HeapCreate
HeapDestroy
GetStringTypeW
GetStringTypeA
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
SetStdHandle
WriteConsoleA
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
LCMapStringW
RtlPcToFileHeader
FreeEnvironmentStringsW
ExitProcess
GetModuleFileNameA
GetStdHandle
WriteFile
FlsAlloc
SetLastError
FlsFree
FlsGetValue
DecodePointer
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
FlushFileBuffers
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
GetVersionExA
lstrlenA
GetTickCount
HeapSize
RtlUnwindEx
GetCurrentThreadId
FlsSetValue
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
HeapSetInformation
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
EncodePointer

user32

CharNextW

advapi32

RegEnumKeyExW
RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegQueryValueExW
RegDeleteKeyW

ole32

StringFromGUID2
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance

oleaut32

SafeArrayUnaccessData
SysAllocStringLen
VariantChangeType
VariantClear
VariantInit
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString
SafeArrayDestroy
SafeArrayAccessData
SafeArrayCreate
SysStringLen

mkzlib.x64

inflateReset
inflateEnd
inflateInit_
inflate

mkunicode.x64

Utf8ToUtf16
Utf16ToUtf8

rpcrt4

UuidToStringA
RpcStringFreeA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 125KB - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/system32/mkx.x64.dll.new
.dll regsvr32 windows:5 windows x64 arch:x64

c0400ed0c2fe026261d62814c1bd618e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

ws2_32

WSAStartup
socket
setsockopt
ioctlsocket
connect
select
__WSAFDIsSet
inet_addr
shutdown
recv
closesocket
WSACleanup
WSASetLastError
getservbyport
ntohs
gethostbyaddr
htons
getservbyname
htonl
inet_ntoa
gethostbyname
WSAGetLastError
send

kernel32

GetLocaleInfoA
RaiseException
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
Sleep
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
HeapFree
VirtualAlloc
HeapAlloc
GetProcessHeap
GetLastError
ReadFile
SetFilePointer
GetFileSize
GetFileTime
CreateFileA
WideCharToMultiByte
CreateFileW
VirtualFree
CloseHandle
lstrlenW
InitializeCriticalSection
GetModuleHandleW
lstrcmpiW
GetModuleFileNameW
SetThreadLocale
GetThreadLocale
MultiByteToWideChar
LoadLibraryExW
FormatMessageW
FormatMessageA
HeapReAlloc
HeapCreate
HeapDestroy
GetStringTypeW
GetStringTypeA
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
SetStdHandle
WriteConsoleA
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
LCMapStringW
RtlPcToFileHeader
FreeEnvironmentStringsW
ExitProcess
GetModuleFileNameA
GetStdHandle
WriteFile
FlsAlloc
SetLastError
FlsFree
FlsGetValue
DecodePointer
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
FlushFileBuffers
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
GetVersionExA
lstrlenA
GetTickCount
HeapSize
RtlUnwindEx
GetCurrentThreadId
FlsSetValue
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
HeapSetInformation
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
EncodePointer

user32

CharNextW

advapi32

RegEnumKeyExW
RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegQueryValueExW
RegDeleteKeyW

ole32

StringFromGUID2
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance

oleaut32

SafeArrayUnaccessData
SysAllocStringLen
VariantChangeType
VariantClear
VariantInit
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString
SafeArrayDestroy
SafeArrayAccessData
SafeArrayCreate
SysStringLen

mkzlib.x64

inflateReset
inflateEnd
inflateInit_
inflate

mkunicode.x64

Utf8ToUtf16
Utf16ToUtf8

rpcrt4

UuidToStringA
RpcStringFreeA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 125KB - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/system32/mkzlib.x64.dll
.dll windows:5 windows x64 arch:x64

4188e1c9b299cdc32db0f3f73faa550b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
HeapFree
HeapAlloc
GetCurrentThreadId
FlsSetValue
GetCommandLineA
HeapSetInformation
HeapCreate
HeapDestroy
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
EncodePointer
DecodePointer
FlsGetValue
FlsFree
SetLastError
FlsAlloc
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
RtlUnwindEx
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
HeapSize
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW

Exports

Exports

adler32
adler32_combine
compress
compress2
compressBound
crc32
crc32_combine
deflate
deflateBound
deflateCopy
deflateEnd
deflateInit2_
deflateInit_
deflateParams
deflatePrime
deflateReset
deflateSetDictionary
deflateSetHeader
deflateTune
get_crc_table
inflate
inflateCopy
inflateEnd
inflateGetHeader
inflateInit2_
inflateInit_
inflatePrime
inflateReset
inflateSetDictionary
inflateSync
inflateSyncPoint
zError
zlibCompileFlags
zlibVersion

Sections

.text
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 714B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/system32/mkzlib.x64.dll.new
.dll windows:5 windows x64 arch:x64

4188e1c9b299cdc32db0f3f73faa550b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
HeapFree
HeapAlloc
GetCurrentThreadId
FlsSetValue
GetCommandLineA
HeapSetInformation
HeapCreate
HeapDestroy
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
EncodePointer
DecodePointer
FlsGetValue
FlsFree
SetLastError
FlsAlloc
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
RtlUnwindEx
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
HeapSize
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW

Exports

Exports

adler32
adler32_combine
compress
compress2
compressBound
crc32
crc32_combine
deflate
deflateBound
deflateCopy
deflateEnd
deflateInit2_
deflateInit_
deflateParams
deflatePrime
deflateReset
deflateSetDictionary
deflateSetHeader
deflateTune
get_crc_table
inflate
inflateCopy
inflateEnd
inflateGetHeader
inflateInit2_
inflateInit_
inflatePrime
inflateReset
inflateSetDictionary
inflateSync
inflateSyncPoint
zError
zlibCompileFlags
zlibVersion

Sections

.text
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 714B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/system32/mp4.x64.dll
.dll regsvr32 windows:5 windows x64 arch:x64

53cc1ce9c695979f07bc09e7ded54e51

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleFileNameW
SetThreadLocale
lstrcmpiW
FreeLibrary
LoadLibraryExW
GetModuleHandleW
GetProcAddress
lstrlenW
lstrlenA
WideCharToMultiByte
MultiByteToWideChar
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetLastError
GetThreadLocale
RaiseException
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetConsoleMode
GetConsoleCP
SetFilePointer
GetLocaleInfoA
GetTickCount
CloseHandle
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
RtlUnwindEx
GetCurrentThreadId
FlsSetValue
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
DecodePointer
FlsGetValue
FlsFree
SetLastError
FlsAlloc
HeapSetInformation
HeapCreate
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
RtlPcToFileHeader
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

user32

CharNextW

advapi32

RegQueryInfoKeyW
RegDeleteKeyW
RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegEnumKeyExW
RegSetValueExW

ole32

CoTaskMemFree
StringFromGUID2
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc

oleaut32

VariantChangeType
SafeArrayCreate
SafeArrayAccessData
SafeArrayDestroy
SafeArrayUnaccessData
VariantClear
SysFreeString
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysStringLen
SysAllocStringLen

mkzlib.x64

inflate
inflateInit_
inflateEnd

mkunicode.x64

Utf16ToUtf8
Utf8ToUtf16

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 122KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/system32/mp4.x64.dll.new
.dll regsvr32 windows:5 windows x64 arch:x64

53cc1ce9c695979f07bc09e7ded54e51

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleFileNameW
SetThreadLocale
lstrcmpiW
FreeLibrary
LoadLibraryExW
GetModuleHandleW
GetProcAddress
lstrlenW
lstrlenA
WideCharToMultiByte
MultiByteToWideChar
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetLastError
GetThreadLocale
RaiseException
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetConsoleMode
GetConsoleCP
SetFilePointer
GetLocaleInfoA
GetTickCount
CloseHandle
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
RtlUnwindEx
GetCurrentThreadId
FlsSetValue
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
DecodePointer
FlsGetValue
FlsFree
SetLastError
FlsAlloc
HeapSetInformation
HeapCreate
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
RtlPcToFileHeader
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

user32

CharNextW

advapi32

RegQueryInfoKeyW
RegDeleteKeyW
RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegEnumKeyExW
RegSetValueExW

ole32

CoTaskMemFree
StringFromGUID2
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc

oleaut32

VariantChangeType
SafeArrayCreate
SafeArrayAccessData
SafeArrayDestroy
SafeArrayUnaccessData
VariantClear
SysFreeString
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysStringLen
SysAllocStringLen

mkzlib.x64

inflate
inflateInit_
inflateEnd

mkunicode.x64

Utf16ToUtf8
Utf8ToUtf16

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 122KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/system32/ogm.x64.dll
.dll regsvr32 windows:5 windows x64 arch:x64

2c90a9b0b6091ae06d33892d042f0778

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

SetThreadLocale
GetThreadLocale
GetModuleFileNameW
LoadLibraryExW
lstrcmpiW
GetModuleHandleW
GetProcAddress
GetLastError
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
FreeLibrary
RaiseException
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
InitializeCriticalSectionAndSpinCount
LoadLibraryA
lstrlenA
GetTickCount
CloseHandle
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
RtlUnwindEx
GetCurrentThreadId
FlsSetValue
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
DecodePointer
FlsGetValue
FlsFree
SetLastError
FlsAlloc
LCMapStringA
LCMapStringW
HeapSetInformation
HeapCreate
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
RtlPcToFileHeader
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeA
GetStringTypeW
GetLocaleInfoA

user32

CharNextW

advapi32

RegQueryInfoKeyW
RegDeleteKeyW
RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegEnumKeyExW
RegSetValueExW

ole32

CoTaskMemRealloc
CoTaskMemFree
StringFromGUID2
CoCreateInstance
CoTaskMemAlloc

oleaut32

VariantChangeType
SafeArrayDestroy
SafeArrayUnaccessData
SysAllocStringLen
VariantClear
VariantInit
SafeArrayCreate
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysStringLen
SafeArrayAccessData
SysFreeString

mkunicode.x64

iso_nametocode3
Utf8ToUtf16
iso_code3tocode3

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/system32/ogm.x64.dll.new
.dll regsvr32 windows:5 windows x64 arch:x64

2c90a9b0b6091ae06d33892d042f0778

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

SetThreadLocale
GetThreadLocale
GetModuleFileNameW
LoadLibraryExW
lstrcmpiW
GetModuleHandleW
GetProcAddress
GetLastError
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
FreeLibrary
RaiseException
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
InitializeCriticalSectionAndSpinCount
LoadLibraryA
lstrlenA
GetTickCount
CloseHandle
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
RtlUnwindEx
GetCurrentThreadId
FlsSetValue
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
DecodePointer
FlsGetValue
FlsFree
SetLastError
FlsAlloc
LCMapStringA
LCMapStringW
HeapSetInformation
HeapCreate
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
RtlPcToFileHeader
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeA
GetStringTypeW
GetLocaleInfoA

user32

CharNextW

advapi32

RegQueryInfoKeyW
RegDeleteKeyW
RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegEnumKeyExW
RegSetValueExW

ole32

CoTaskMemRealloc
CoTaskMemFree
StringFromGUID2
CoCreateInstance
CoTaskMemAlloc

oleaut32

VariantChangeType
SafeArrayDestroy
SafeArrayUnaccessData
SysAllocStringLen
VariantClear
VariantInit
SafeArrayCreate
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysStringLen
SafeArrayAccessData
SysFreeString

mkunicode.x64

iso_nametocode3
Utf8ToUtf16
iso_code3tocode3

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/system32/splitter.x64.ax
.dll regsvr32 windows:5 windows x64 arch:x64

5354f4c90316b55780955ffb065da2d8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

comctl32

InitCommonControlsEx

gdi32

CreateDCA
AddFontResourceW
DeleteObject
CreateCompatibleDC
CreateDIBSection
SelectObject
CreateFontW
GetDeviceCaps
GetTextMetricsW
SetBkColor
SetBkMode
ExtTextOutW
DeleteDC
GdiFlush
SetTextColor
SetTextAlign
BitBlt
RemoveFontResourceW

kernel32

GetCurrentProcessId
GetModuleFileNameA
DeleteFileW
GetTempPathW
GetTempFileNameW
CreateFileW
WriteFile
GetLastError
GetSystemTime
SystemTimeToFileTime
CreateFileA
SetFilePointer
ReadFile
CreateThread
VirtualFree
VirtualAlloc
SetEndOfFile
GetVersion
SetThreadPriority
GetCurrentThread
GetCurrentThreadId
GetProcAddress
GetModuleHandleW
MulDiv
lstrlenW
GetTickCount
FindFirstFileW
FindNextFileW
FindClose
lstrlenA
VirtualQuery
CreateSemaphoreW
ReleaseSemaphore
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
MultiByteToWideChar
GetModuleFileNameW
FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetConsoleMode
GetConsoleCP
GetStringTypeW
GetStringTypeA
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
LoadLibraryA
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
LCMapStringW
LCMapStringA
HeapSetInformation
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
ExitProcess
FindResourceExW
WideCharToMultiByte
FindResourceW
LoadResource
LockResource
SizeofResource
WaitForSingleObject
HeapAlloc
WaitForMultipleObjects
HeapFree
HeapDestroy
CreateEventW
HeapCreate
CloseHandle
ResetEvent
SetEvent
Sleep
FlsAlloc
SetLastError
FlsFree
FlsGetValue
DecodePointer
EncodePointer
GetStdHandle
lstrcmpW
lstrcpynW
GetCurrentProcess
LoadLibraryW
FreeLibrary
LeaveCriticalSection
DuplicateHandle
GetVersionExW
DisableThreadLibraryCalls
lstrcmpiA
RaiseException
OutputDebugStringA
FormatMessageW
HeapReAlloc
RtlUnwindEx
RtlPcToFileHeader
GetCommandLineA
FlsSetValue
ExitThread
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetProcessHeap
HeapSize
GetSystemInfo

user32

MessageBoxW
EnumWindows
CreatePopupMenu
AppendMenuW
GetDesktopWindow
LoadStringW
DestroyWindow
InvalidateRect
GetWindowLongW
IsWindowVisible
CreateDialogParamW
GetMenuItemCount
CheckMenuRadioItem
DestroyMenu
GetDlgItem
SendMessageW
GetSysColor
SendDlgItemMessageW
GetDlgItemInt
GetDlgItemTextW
SetDlgItemInt
GetWindowThreadProcessId
SetWindowLongW
TrackPopupMenu
GetCursorPos
SetForegroundWindow
LoadIconW
PostQuitMessage
DefWindowProcW
GetSystemMetrics
CreateWindowExW
RegisterClassW
DispatchMessageW
TranslateMessage
GetMessageW
PostMessageW
RegisterWindowMessageW
CallWindowProcW
EndPaint
BeginPaint
RedrawWindow
ReleaseDC
GetDC
GetClientRect
MoveWindow
ScreenToClient
GetWindowRect
SetWindowLongPtrW
GetWindowLongPtrW
KillTimer
SetTimer
ShowWindow
SetDlgItemTextW

advapi32

RegQueryValueExW
RegSetValueW
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
RegEnumValueA
RegOpenKeyExW
RegQueryValueExA
RegOpenKeyExA
CryptReleaseContext
CryptAcquireContextW
CryptGenRandom
RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegSetValueExW
RegCreateKeyW
RegEnumKeyExW

shell32

Shell_NotifyIconW

ole32

CoTaskMemAlloc
CoCreateInstance
StringFromGUID2
CoInitialize
CoFreeUnusedLibraries
CoUninitialize
CoInitializeEx
CoTaskMemFree

oleaut32

SafeArrayDestroy
SafeArrayCreateVector
VariantChangeType
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
VarBstrCmp
SysStringLen
SysStringByteLen
SysAllocStringByteLen
VariantClear
SysAllocString
VariantInit
OleCreatePropertyFrame
SysFreeString
SysAllocStringLen
SafeArrayCreate
SafeArrayGetDim
OleLoadPicture

mkzlib.x64

compress
deflateEnd
deflateInit_
deflate
deflateBound
deflateReset
crc32

mkunicode.x64

iso_getlcid
iso_codetoname
iso_getentry
Utf8ToUtf16
Utf16ToUtf8
iso_getsyslang

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

rpcrt4

RpcStringFreeA
UuidToStringA
UuidFromStringA

Exports

Exports

Configure
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 599KB - Virtual size: 599KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 167KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/system32/splitter.x64.ax.new
.dll regsvr32 windows:5 windows x64 arch:x64

5354f4c90316b55780955ffb065da2d8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

comctl32

InitCommonControlsEx

gdi32

CreateDCA
AddFontResourceW
DeleteObject
CreateCompatibleDC
CreateDIBSection
SelectObject
CreateFontW
GetDeviceCaps
GetTextMetricsW
SetBkColor
SetBkMode
ExtTextOutW
DeleteDC
GdiFlush
SetTextColor
SetTextAlign
BitBlt
RemoveFontResourceW

kernel32

GetCurrentProcessId
GetModuleFileNameA
DeleteFileW
GetTempPathW
GetTempFileNameW
CreateFileW
WriteFile
GetLastError
GetSystemTime
SystemTimeToFileTime
CreateFileA
SetFilePointer
ReadFile
CreateThread
VirtualFree
VirtualAlloc
SetEndOfFile
GetVersion
SetThreadPriority
GetCurrentThread
GetCurrentThreadId
GetProcAddress
GetModuleHandleW
MulDiv
lstrlenW
GetTickCount
FindFirstFileW
FindNextFileW
FindClose
lstrlenA
VirtualQuery
CreateSemaphoreW
ReleaseSemaphore
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
MultiByteToWideChar
GetModuleFileNameW
FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetConsoleMode
GetConsoleCP
GetStringTypeW
GetStringTypeA
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
LoadLibraryA
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
LCMapStringW
LCMapStringA
HeapSetInformation
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
ExitProcess
FindResourceExW
WideCharToMultiByte
FindResourceW
LoadResource
LockResource
SizeofResource
WaitForSingleObject
HeapAlloc
WaitForMultipleObjects
HeapFree
HeapDestroy
CreateEventW
HeapCreate
CloseHandle
ResetEvent
SetEvent
Sleep
FlsAlloc
SetLastError
FlsFree
FlsGetValue
DecodePointer
EncodePointer
GetStdHandle
lstrcmpW
lstrcpynW
GetCurrentProcess
LoadLibraryW
FreeLibrary
LeaveCriticalSection
DuplicateHandle
GetVersionExW
DisableThreadLibraryCalls
lstrcmpiA
RaiseException
OutputDebugStringA
FormatMessageW
HeapReAlloc
RtlUnwindEx
RtlPcToFileHeader
GetCommandLineA
FlsSetValue
ExitThread
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetProcessHeap
HeapSize
GetSystemInfo

user32

MessageBoxW
EnumWindows
CreatePopupMenu
AppendMenuW
GetDesktopWindow
LoadStringW
DestroyWindow
InvalidateRect
GetWindowLongW
IsWindowVisible
CreateDialogParamW
GetMenuItemCount
CheckMenuRadioItem
DestroyMenu
GetDlgItem
SendMessageW
GetSysColor
SendDlgItemMessageW
GetDlgItemInt
GetDlgItemTextW
SetDlgItemInt
GetWindowThreadProcessId
SetWindowLongW
TrackPopupMenu
GetCursorPos
SetForegroundWindow
LoadIconW
PostQuitMessage
DefWindowProcW
GetSystemMetrics
CreateWindowExW
RegisterClassW
DispatchMessageW
TranslateMessage
GetMessageW
PostMessageW
RegisterWindowMessageW
CallWindowProcW
EndPaint
BeginPaint
RedrawWindow
ReleaseDC
GetDC
GetClientRect
MoveWindow
ScreenToClient
GetWindowRect
SetWindowLongPtrW
GetWindowLongPtrW
KillTimer
SetTimer
ShowWindow
SetDlgItemTextW

advapi32

RegQueryValueExW
RegSetValueW
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
RegEnumValueA
RegOpenKeyExW
RegQueryValueExA
RegOpenKeyExA
CryptReleaseContext
CryptAcquireContextW
CryptGenRandom
RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegSetValueExW
RegCreateKeyW
RegEnumKeyExW

shell32

Shell_NotifyIconW

ole32

CoTaskMemAlloc
CoCreateInstance
StringFromGUID2
CoInitialize
CoFreeUnusedLibraries
CoUninitialize
CoInitializeEx
CoTaskMemFree

oleaut32

SafeArrayDestroy
SafeArrayCreateVector
VariantChangeType
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
VarBstrCmp
SysStringLen
SysStringByteLen
SysAllocStringByteLen
VariantClear
SysAllocString
VariantInit
OleCreatePropertyFrame
SysFreeString
SysAllocStringLen
SafeArrayCreate
SafeArrayGetDim
OleLoadPicture

mkzlib.x64

compress
deflateEnd
deflateInit_
deflate
deflateBound
deflateReset
crc32

mkunicode.x64

iso_getlcid
iso_codetoname
iso_getentry
Utf8ToUtf16
Utf16ToUtf8
iso_getsyslang

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

rpcrt4

RpcStringFreeA
UuidToStringA
UuidFromStringA

Exports

Exports

Configure
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 599KB - Virtual size: 599KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 167KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/system32/ts.x64.dll
.dll regsvr32 windows:5 windows x64 arch:x64

39f79f6efc0dafbdc31a1e961f0e646c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

lstrcmpiW
GetProcAddress
GetThreadLocale
GetLastError
SetThreadLocale
lstrlenW
GetModuleFileNameW
GetModuleHandleW
LoadLibraryExW
FreeLibrary
DeleteCriticalSection
LockResource
EnterCriticalSection
RaiseException
MultiByteToWideChar
GetFileAttributesW
LeaveCriticalSection
SizeofResource
InitializeCriticalSection
LoadResource
FindResourceW
FindResourceExW
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoA
lstrlenA
OutputDebugStringA
GetTickCount
CloseHandle
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
GetCurrentThreadId
FlsSetValue
GetCommandLineA
RtlUnwindEx
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
HeapSetInformation
HeapCreate
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
DecodePointer
FlsGetValue
FlsFree
SetLastError
FlsAlloc
LCMapStringW
RtlPcToFileHeader
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
LoadLibraryA
InitializeCriticalSectionAndSpinCount
LCMapStringA
GetStringTypeA
GetStringTypeW

user32

CharNextW

advapi32

RegQueryValueExW
CryptAcquireContextW
CryptReleaseContext
CryptCreateHash
CryptDestroyHash
CryptHashData
RegCreateKeyExW
RegSetValueExW
RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegDeleteValueW
RegDeleteKeyW
RegQueryInfoKeyW
CryptGetHashParam

ole32

CoTaskMemRealloc
CoCreateInstance
CoTaskMemFree
StringFromGUID2
CoTaskMemAlloc

oleaut32

VariantClear
SysAllocStringLen
SafeArrayUnaccessData
VarUI4FromStr
SysFreeString
VariantChangeType
SafeArrayCreate
SafeArrayDestroy
SafeArrayAccessData
VariantInit

mkunicode.x64

Utf8ToUtf16

rpcrt4

RpcStringFreeA
UuidToStringA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 133KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$WINDIR/system32/ts.x64.dll.new
.dll regsvr32 windows:5 windows x64 arch:x64

39f79f6efc0dafbdc31a1e961f0e646c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

lstrcmpiW
GetProcAddress
GetThreadLocale
GetLastError
SetThreadLocale
lstrlenW
GetModuleFileNameW
GetModuleHandleW
LoadLibraryExW
FreeLibrary
DeleteCriticalSection
LockResource
EnterCriticalSection
RaiseException
MultiByteToWideChar
GetFileAttributesW
LeaveCriticalSection
SizeofResource
InitializeCriticalSection
LoadResource
FindResourceW
FindResourceExW
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoA
lstrlenA
OutputDebugStringA
GetTickCount
CloseHandle
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
GetCurrentThreadId
FlsSetValue
GetCommandLineA
RtlUnwindEx
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
HeapSetInformation
HeapCreate
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
DecodePointer
FlsGetValue
FlsFree
SetLastError
FlsAlloc
LCMapStringW
RtlPcToFileHeader
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
LoadLibraryA
InitializeCriticalSectionAndSpinCount
LCMapStringA
GetStringTypeA
GetStringTypeW

user32

CharNextW

advapi32

RegQueryValueExW
CryptAcquireContextW
CryptReleaseContext
CryptCreateHash
CryptDestroyHash
CryptHashData
RegCreateKeyExW
RegSetValueExW
RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegDeleteValueW
RegDeleteKeyW
RegQueryInfoKeyW
CryptGetHashParam

ole32

CoTaskMemRealloc
CoCreateInstance
CoTaskMemFree
StringFromGUID2
CoTaskMemAlloc

oleaut32

VariantClear
SysAllocStringLen
SafeArrayUnaccessData
VarUI4FromStr
SysFreeString
VariantChangeType
SafeArrayCreate
SafeArrayDestroy
SafeArrayAccessData
VariantInit

mkunicode.x64

Utf8ToUtf16

rpcrt4

RpcStringFreeA
UuidToStringA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 133KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

099c0646ea7282d232219f8807883be0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

Sections

.text Size: 23KB - Virtual size: 22KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 1024B - Virtual size: 107KB

.ndata Size: - Virtual size: 68KB

.rsrc Size: 75KB - Virtual size: 74KB

4e6a4062a56dafcc8b54b60996e9ff37

Headers

File Characteristics

PDB Paths

Imports

ddraw

kernel32

user32

gdi32

advapi32

Exports

Exports

Sections

.text Size: 40KB - Virtual size: 38KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 4KB - Virtual size: 10KB

.reloc Size: 8KB - Virtual size: 4KB

b1cd0d78f652ce5fc63f0879371af012

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

comdlg32

ole32

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 6KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 2KB - Virtual size: 10KB

.rsrc Size: 512B - Virtual size: 152B

.reloc Size: 1KB - Virtual size: 1KB

153027ec3b10bcea606b777657dd3402

Headers

File Characteristics

Imports

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 2KB - Virtual size: 2KB

.reloc Size: 512B - Virtual size: 172B

09aeabcb1d89633d4ca17613706aa1c6

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:edCertificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

6f:fc:26:3a:35:11:34:19:4c:f1:6e:1e:6d:0e:08:06Certificate

Extended Key Usages

.text
Size: 23KB - Virtual size: 22KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 107KB

.ndata
Size: - Virtual size: 68KB

.rsrc
Size: 75KB - Virtual size: 74KB

.text
Size: 40KB - Virtual size: 38KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 4KB - Virtual size: 10KB

.reloc
Size: 8KB - Virtual size: 4KB

.text
Size: 7KB - Virtual size: 6KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 10KB

.rsrc
Size: 512B - Virtual size: 152B

.reloc
Size: 1KB - Virtual size: 1KB

.text
Size: 2KB - Virtual size: 2KB

.reloc
Size: 512B - Virtual size: 172B

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

6f:fc:26:3a:35:11:34:19:4c:f1:6e:1e:6d:0e:08:06
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

4b:87:9e:ed:29:15:a8:06:c4:76:94:d7:49:5a:5c:06:a5:b7:ae:93
Signer

.text
Size: 529KB - Virtual size: 529KB

.rdata
Size: 167KB - Virtual size: 166KB

.data
Size: 10KB - Virtual size: 21KB

.rsrc
Size: 18KB - Virtual size: 18KB

.reloc
Size: 32KB - Virtual size: 32KB

.text
Size: 7KB - Virtual size: 7KB

.rdata
Size: 1024B - Virtual size: 784B

.data
Size: 512B - Virtual size: 100B

.reloc
Size: 1024B - Virtual size: 520B

.text
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 192B

.reloc
Size: 512B - Virtual size: 118B