a7cbc3019b580e519499763bd01438686133743adcb7bf182a22415c82d43ce7
- IMPHASH 7ede71eb90c95efc246a0e448bbc1bd0
- SHA256 a7cbc3019b580e519499763bd01438686133743adcb7bf182a22415c82d43ce7
- MD5 f7230b9338b9f464ede00cd6a1bb978e
- SHA1 479c67e64d8ed211907ff44171a3edd7704488ee
- SHA512 ee030c18ffa4a05037f723445460fa8c3e914ff21bedbeae9858abdf89f750166d161e08ca9d3454e20686faf4e089b4879beb2b9bd628523f782ae18b1418f6
- SSDEEP 3072:lxW0SBhf2GDaFAqU1yfOUvyW7ldmzj9Fu3qH7CwqtWqmgmK2eOtKxOrryM7L:EBYoAU1PRq3o7ktWA2eOtZN
- TLSH T1B3146CC1FFDA83BEE787573668F78B09117D664647208AC7A2181D1A5D306E27C3E34A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
5
Entry point
133659
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
e:\svnhome\shield6_576\Release\Win32\ShdPub.pdb
kernel32
GetModuleFileNameW
WideCharToMultiByte
lstrcmpiA
WritePrivateProfileStringW
GetPrivateProfileStringW
IsBadReadPtr
WritePrivateProfileStructW
IsBadWritePtr
GetPrivateProfileStructW
WritePrivateProfileSectionW
GetPrivateProfileSectionW
LocalReAlloc
GetPrivateProfileSectionNamesW
GetProcAddress
GetModuleHandleW
GetSystemInfo
GetVersionExW
IsWow64Process
CreateProcessW
WaitForSingleObject
GetExitCodeProcess
OpenProcess
TerminateProcess
SetPriorityClass
SetThreadPriority
GetCurrentThread
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
ProcessIdToSessionId
Module32FirstW
VirtualAllocEx
WriteProcessMemory
VirtualFreeEx
CreateRemoteThread
LoadLibraryA
CreateMutexW
LoadLibraryExW
FormatMessageW
FreeLibrary
GetDateFormatW
GetTimeFormatW
FileTimeToSystemTime
GetLongPathNameW
SystemTimeToFileTime
FileTimeToLocalFileTime
GetSystemTimeAsFileTime
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateEventW
SetEvent
TerminateThread
Sleep
GetEnvironmentVariableW
ExpandEnvironmentStringsW
GetTickCount
lstrlenA
GetCommandLineW
GetCurrentProcessId
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
GetFileSize
SetEndOfFile
GetCurrentThreadId
OutputDebugStringW
LoadLibraryW
AddVectoredExceptionHandler
SetUnhandledExceptionFilter
lstrcmpW
FileTimeToDosDateTime
DosDateTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
QueryPerformanceCounter
IsDebuggerPresent
UnhandledExceptionFilter
InterlockedCompareExchange
InterlockedExchange
RaiseException
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
GetTempFileNameW
GetTempPathW
FindNextFileW
CopyFileW
SetFileAttributesW
GetFileAttributesExW
GetVolumeInformationW
GetLogicalDrives
QueryDosDeviceW
MultiByteToWideChar
GetSystemDirectoryW
FlushFileBuffers
GetDriveTypeW
WriteFile
VirtualFree
VirtualAlloc
ReadFile
SetFilePointer
GetCurrentProcess
LocalAlloc
LocalFree
GetCurrentDirectoryW
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
lstrcpynW
lstrcmpiW
lstrlenW
lstrcpyW
FindClose
FindFirstFileW
SetLastError
GetFileAttributesW
DeleteFileW
CloseHandle
RemoveDirectoryW
DeviceIoControl
CreateFileW
GetLastError
GetLocalTime
HeapAlloc
HeapDestroy
user32
IsIconic
FindWindowW
ExitWindowsEx
GetSystemMetrics
SetForegroundWindow
ShowWindow
PostMessageW
SendMessageW
SendMessageTimeoutW
advapi32
StartServiceW
IsTextUnicode
SetServiceObjectSecurity
DeleteService
ControlService
ChangeServiceConfigW
QueryServiceConfigW
QueryServiceStatus
CreateServiceW
OpenServiceW
OpenSCManagerW
CloseServiceHandle
ConvertStringSecurityDescriptorToSecurityDescriptorW
CreateProcessAsUserW
RegQueryValueExW
RegDeleteValueW
RegSetValueExW
RegOpenKeyExW
RegSaveKeyW
RegCreateKeyExW
RegCloseKey
CryptReleaseContext
CryptGenRandom
CryptAcquireContextW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
GetTokenInformation
LookupAccountSidW
ConvertSidToStringSidW
LookupAccountNameW
ConvertStringSidToSidW
SetFileSecurityW
GetFileSecurityW
SetNamedSecurityInfoW
SetEntriesInAclW
BuildExplicitAccessWithNameW
GetNamedSecurityInfoW
shell32
SHFileOperationW
SHBrowseForFolderW
SHGetFolderLocation
SHCreateDirectoryExW
ShellExecuteW
ord155
SHGetPathFromIDListW
CommandLineToArgvW
ole32
CoSetProxyBlanket
CoCreateInstance
StringFromGUID2
CLSIDFromString
StgOpenStorage
oleaut32
VariantClear
VariantChangeType
SysAllocString
VariantInit
SysFreeString
shlwapi
StrCmpNW
StrStrIW
SHDeleteKeyW
StrChrA
StrStrIA
StrRChrW
StrChrW
StrCmpNIW
PathIsRelativeW
PathAddBackslashW
PathRemoveBackslashW
StrFormatByteSizeW
userenv
DestroyEnvironmentBlock
CreateEnvironmentBlock
msvcr90
fopen
memcpy
__CxxFrameHandler3
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_crt_debugger_hook
_except_handler4_common
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
memset
ferror
fclose
_fseeki64
_ftelli64
fwrite
fread
_CxxThrowException
wcscspn
wcsspn
??3@YAXPAX@Z
malloc
free
memcpy_s
memmove_s
wcsnlen
_vscwprintf
vswprintf_s
srand
_time64
rand
iswalpha
_wcsicmp
wcsstr
iswspace
calloc
_wtoi
wcsrchr
wcschr
strnlen
_mbsinc
_ismbcspace
_vscprintf
vsprintf_s
swprintf_s
_itow_s
wcstoul
_i64tow_s
_wcstoi64
wcstod
??_V@YAXPAX@Z
??_U@YAPAXI@Z
??2@YAPAXI@Z
_beginthreadex
__argc
__wargv
wprintf
isprint
qsort
bsearch
iswdigit
wintrust
WinVerifyTrust
setupapi
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsW
SetupDiGetDeviceInterfaceDetailW
psapi
GetModuleBaseNameW
GetProcessImageFileNameW
GetModuleFileNameExW
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
wininet
InternetOpenW
HttpQueryInfoW
HttpSendRequestW
InternetOpenUrlA
InternetCloseHandle
InternetReadFile
InternetConnectW
HttpOpenRequestW
netapi32
NetShareAdd
zlib
deflateInit2_
inflateEnd
deflateEnd
crc32
inflateInit2_
inflate
deflate
??0CShdDisk@@QAE@AAV0@@Z
??0CShdDisk@@QAE@XZ
??0CShdDump@@QAE@H@Z
??0CShdHttp@@QAE@ABV0@@Z
??0CShdHttp@@QAE@XZ
??0CShdIni@@QAE@ABV0@@Z
??0CShdIni@@QAE@PB_W@Z
??0CShdIni@@QAE@XZ
??0CShdKey@@QAE@AAV0@@Z
??0CShdKey@@QAE@XZ
??0CShdMd5@@QAE@XZ
??0CShdSvc@@QAE@XZ
??0CShdWmi@@QAE@PB_W@Z
??0CShdWmi@@QAE@XZ
??0CShdWorker@@QAE@XZ
??0CShdXml@@QAE@XZ
??0CShdZip@@QAE@ABV0@@Z
??0CShdZip@@QAE@XZ
??0CTextFile@@QAE@AAV0@@Z
??0CTextFile@@QAE@XZ
??0CXmlElem@@QAE@XZ
??1CShdDisk@@QAE@XZ
??1CShdHttp@@QAE@XZ
??1CShdIni@@QAE@XZ
??1CShdKey@@QAE@XZ
??1CShdSvc@@QAE@XZ
??1CShdWmi@@QAE@XZ
??1CShdWorker@@QAE@XZ
??1CShdXml@@QAE@XZ
??1CShdZip@@QAE@XZ
??1CTextFile@@QAE@XZ
??1CXmlElem@@QAE@XZ
??4CShdDisk@@QAEAAV0@AAV0@@Z
??4CShdDump@@QAEAAU0@ABU0@@Z
??4CShdHttp@@QAEAAV0@ABV0@@Z
??4CShdIni@@QAEAAV0@ABV0@@Z
??4CShdKey@@QAEAAV0@AAV0@@Z
??4CShdMd5@@QAEAAV0@ABV0@@Z
??4CShdSvc@@QAEAAV0@ABV0@@Z
??4CShdWmi@@QAEAAV0@ABV0@@Z
??4CShdXml@@QAEAAV0@ABV0@@Z
??4CShdZip@@QAEAAV0@ABV0@@Z
??4CTextFile@@QAEAAV0@AAV0@@Z
??BCShdSvc@@QBEPAUSC_HANDLE__@@XZ
??_7CShdHttp@@6B@
??_FCShdDump@@QAEXXZ
?AStrToUTF8@@YA?AV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@PBD@Z
?AddElem@CXmlElem@@QAEHPAV1@@Z
?AddElem@CXmlElem@@QAEPAV1@PB_W0@Z
?AddWork@CShdWorker@@QAEJP6GXHPAX@Z0@Z
?CalcSize@CShdZip@@AAEJXZ
?ChangeStartType@CShdSvc@@QAEHK@Z
?Clear@CShdWorker@@AAEXXZ
?Clear@CShdXml@@QAEHXZ
?Clear@CShdZip@@AAEXXZ
?Clear@CXmlElem@@AAEXXZ
?Close@CShdSvc@@QAEXXZ
?Close@CShdWmi@@QAEXXZ
?Close@CTextFile@@QAEXXZ
?Create@CShdSvc@@QAEHPB_W0KKK@Z
?CreateLinkKey@CShdKey@@QAEJPAUHKEY__@@PB_W1K@Z
?CreateSymbolicLinkW@@YAHPB_W0@Z
?DelAttr@CXmlElem@@QAEHPB_W@Z
?DelElem@CXmlElem@@QAEHPB_W@Z
?DeleteLinkKey@CShdKey@@QAEJPAUHKEY__@@PB_W@Z
?DeleteSymbolicLink@@YAHPB_W@Z
?Digest@CShdMd5@@QAEHPB_WPAE@Z
?Digest@CShdMd5@@QAEXPBEIPAE@Z
?DoWorks@CShdWorker@@AAEXXZ
?DoZip@CShdZip@@AAEJXZ
?DownloadData@CShdHttp@@QAEJAAU_SHDHTTP_REQUEST@@@Z
?EnterElement@CShdXml@@QAEPAVCXmlElem@@I@Z
?EnterElement@CShdXml@@QAEPAVCXmlElem@@PB_W@Z
?ExecMethod@CShdWmi@@QAAHPAUtagVARIANT@@PB_W1HZZ
?ExecMethod@CShdWmi@@QAEHPB_W0@Z
?ExecQuery@CShdWmi@@QAEHPB_WAAPAUIEnumWbemClassObject@@@Z
?Final@CShdMd5@@QAEXPAE@Z
?FindSection@CShdXml@@AAEHPB_W@Z
?FlushAll@CShdDisk@@SAXXZ
?GetAttr@CXmlElem@@QAEPAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@PB_WH@Z
?GetAttr@CXmlElem@@QAEPB_WPB_W@Z
?GetAttrInt@CXmlElem@@QAE_JPB_W_J@Z
?GetBinaryValue@CShdIni@@QAEHPB_W0PAXK@Z
?GetBuild@@YAKXZ
?GetChild@CXmlElem@@QAEPAV1@I@Z
?GetChild@CXmlElem@@QAEPAV1@PB_W@Z
?GetChildCount@CXmlElem@@QAEIXZ
?GetChildData@CXmlElem@@QAEPB_WPB_WH@Z
?GetChildDataInt@CXmlElem@@QAE_JPB_W_J@Z
?GetCurrent@CShdXml@@QAEPAVCXmlElem@@XZ
?GetDeviceNumber@CShdDisk@@AAEHAAU_STORAGE_DEVICE_NUMBER@@@Z
?GetDiskExtent@CShdDisk@@QAEHAAU_DISK_EXTENT@@@Z
?GetDiskGeometry@CShdDisk@@QAEHPAU_DISK_GEOMETRY@@@Z
?GetDiskGeometryEx@CShdDisk@@QAEHPAU_DISK_GEOMETRY_EX@@@Z
?GetDiskInfo@CShdDisk@@QAEHAAU_DISK_PARAMETER@@@Z
?GetDiskInfos@CShdDisk@@SAHAAV?$CAtlArray@U_DISK_PARAMETER@@V?$CElementTraits@U_DISK_PARAMETER@@@ATL@@@ATL@@@Z
?GetDiskParameter@CShdDisk@@SAPAU_DISK_PARAMETER@@E@Z
?GetDiskSerial@CShdDisk@@SAHKAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?GetDoubleValue@CShdIni@@QAENPB_W0N@Z
?GetDriveDiskNumber@CShdDisk@@SAJPB_W@Z
?GetDriveDiskNumber@CShdDisk@@SAJ_W@Z
?GetDriveInfo@CShdDisk@@SAH_WAAKAA_K@Z
?GetDrivePos@CShdDisk@@AAEHAA_K0@Z
?GetFileName@CShdIni@@QAEAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@XZ
?GetGuidValue@CShdIni@@QAEHPB_W0AAU_GUID@@@Z
?GetHotplugInfo@CShdDisk@@AAEHAAU_STORAGE_HOTPLUG_INFO@@@Z
?GetInt32Value@CShdIni@@QAEHPB_W0H@Z
?GetInt64Value@CShdIni@@QAE_JPB_W0_J@Z
?GetKeyNames@CShdIni@@QAEXPB_WAAV?$CAtlArray@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V?$CElementTraits@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@2@@ATL@@@Z
?GetMethod@CShdWmi@@QAEHPB_W0@Z
?GetNode@CXmlElem@@QAEPAV1@PB_W@Z
?GetNodeData@CXmlElem@@QAEPB_WPB_W@Z
?GetOutParam@CShdWmi@@QAEHPB_WPAUtagVARIANT@@@Z
?GetParent@CXmlElem@@QAEPAV1@XZ
?GetRoot@CShdXml@@QAEPAVCXmlElem@@XZ
?GetSection@CShdIni@@QAEKPB_WPA_WK@Z
?GetSection@CShdIni@@QAEXPB_WAAV?$CAtlMap@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V12@V?$CElementTraits@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@2@V32@@ATL@@@Z
?GetSectionNames@CShdIni@@QAEXAAV?$CAtlArray@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V?$CElementTraits@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@2@@ATL@@@Z
?GetSerialByIdentify@CShdDisk@@AAEHKPAD@Z
?GetSerialBySmart@CShdDisk@@AAEHPAD@Z
?GetStorageProperty@CShdDisk@@AAEHW4_STORAGE_PROPERTY_ID@@PAXK@Z
?GetStringValue@CShdIni@@QAEXPB_W0AAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@0@Z
?GetSysDriveDiskNumber@CShdDisk@@SAJXZ
?GetVerString@@YAPB_WXZ
?Init@CShdMd5@@QAEXXZ
?Ipv4AddressToString@@YA?AV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@PBUin_addr@@@Z
?Ipv4StringToAddress@@YAJPBDPAUin_addr@@@Z
?Ipv6AddressToString@@YA?AV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@PBUin6_addr@@@Z
?Ipv6StringToAddress@@YAJPBDPAUin6_addr@@@Z
?IsFixedDisk@CShdDisk@@QAEHXZ
?IsLinkKey@CShdKey@@QAEHXZ
?IsOpened@CTextFile@@QAEHXZ
?IsRunning@CShdZip@@QAEHXZ
?IsServer@@YAHXZ
?IsWin64@@YAHXZ
?IsWow64@@YAHXZ
?LZ4Compress@@YAHPAEPAK0K@Z
?LZ4Uncompress@@YAHPAEPAK0K@Z
?LeaveElement@CShdXml@@QAEXXZ
?Load@CShdXml@@QAEPAVCXmlElem@@PAEJPB_WI@Z
?Load@CShdXml@@QAEPAVCXmlElem@@PB_W0H@Z
?Lock@CShdDisk@@QAEHH@Z
?Lock@CShdDisk@@SAH_WH@Z
?LockAll@CShdDisk@@SAXH@Z
?NotifyPercent@CShdZip@@AAEXXZ
?NtClose@@YAJPAX@Z
?NtCreateFile@@YAJPAPAXKPAU_OBJECT_ATTRIBUTES@@PAU_IO_STATUS_BLOCK@@PAT_LARGE_INTEGER@@KKKKPAXK@Z
?NtGetSysInfos@@YAPAXW4_SYSTEM_INFORMATION_CLASS@@@Z
?NtMapViewOfSection@@YAJPAX0PAPAXKKPAT_LARGE_INTEGER@@PAKW4_SECTION_INHERIT@@KK@Z
?NtOpenSection@@YAJPAPAXKPAU_OBJECT_ATTRIBUTES@@@Z
?NtQueryInformationFile@@YAJPAXPAU_IO_STATUS_BLOCK@@0KW4_FILE_INFORMATION_CLASS@@@Z
?NtQueryInformationProcess@@YAJPAXI0KPAK@Z
?NtQueryObject@@YAJPAXW4_OBJECT_INFORMATION_CLASS@@0KPAK@Z
?NtQuerySysInfos@@YAPAXW4_SYSTEM_INFORMATION_CLASS@@@Z
?NtQuerySystemInformation@@YAJW4_SYSTEM_INFORMATION_CLASS@@PAXKPAK@Z
?NtUnmapViewOfSection@@YAJPAX0@Z
?OnData@CShdHttp@@MAEHPAEI@Z
?Open@CShdDisk@@QAEHK@Z
?Open@CShdDisk@@QAEHPB_W@Z
?Open@CShdKey@@QAEJPAUHKEY__@@PB_WKK@Z
?Open@CShdSvc@@QAEHPB_WK@Z
?Open@CShdWmi@@QAEHPB_W@Z
?Open@CTextFile@@QAEJPB_WKK@Z
?Parse@CShdXml@@AAEPAVCXmlElem@@XZ
?Phy2LBA@CShdDisk@@SA_KKKKK@Z
?PutInParam@CShdWmi@@QAEHPB_W0@Z
?PutInParam@CShdWmi@@QAEHPB_WPAUtagVARIANT@@@Z
?QueryBinValue@CShdKey@@QAEJPB_WAAPAEAAK@Z
?QueryConfig@CShdSvc@@QAEKAAVCShdBuf@@@Z
?QueryLinkValue@CShdKey@@QAEJAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?QueryMultiStrValue@CShdKey@@QAEJPB_WAAV?$CAtlArray@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V?$CElementTraits@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@2@@ATL@@@Z
?QueryStrValue@CShdKey@@QAEJPB_WAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@H@Z
?QuerySymbolicLink@@YAHPB_WAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?RSAPrivateDecrypt@@YAHPAURSA_PRIVATE_KEY@@PAEI1PAI@Z
?RSAPrivateEncrypt@@YAHPAURSA_PRIVATE_KEY@@PAEI1PAI@Z
?RSAPublicDecrypt@@YAHPAURSA_PUBLIC_KEY@@PAEI1PAI@Z
?RSAPublicEncrypt@@YAHPAURSA_PUBLIC_KEY@@PAEI1PAI@Z
?ReInitDiskInfo@CShdDisk@@QAEHXZ
?Read@CShdDisk@@QAEHKPAX@Z
?Read@CShdDisk@@QAEH_KKPAX@Z
?ReadChar@CTextFile@@AAEHXZ
?ReadElemData@CShdXml@@AAEXPAVCXmlElem@@_W@Z
?ReadEntityChar@CShdXml@@AAEXAA_W@Z
?ReadLine@CTextFile@@QAEHAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?ReadNext@CShdXml@@AAEHAA_W@Z
?ReadNextTag@CShdXml@@AAEHPAVCXmlElem@@@Z
?ReadTagAttr@CShdXml@@AAEHPAVCXmlElem@@@Z
?RecvData@CShdHttp@@AAEHPAX@Z
?RemoveAllKeys@CShdIni@@QAEHPB_W@Z
?RemoveKey@CShdIni@@QAEHPB_W0@Z
?RemoveSection@CShdIni@@QAEHPB_W@Z
?ReplaceEntityChar@CShdXml@@SAAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@AAV23@@Z
?Reset@CTextFile@@QAEJXZ
?RtlAnsiStringToUnicodeString@@YAJPAU_UNICODE_STRING@@PAU_ANSI_STRING@@E@Z
?RtlFreeUnicodeString@@YAXPAU_UNICODE_STRING@@@Z
?RtlInitAnsiString@@YAXPAU_ANSI_STRING@@PAD@Z
?RtlInitUnicodeString@@YAXPAU_UNICODE_STRING@@PB_W@Z
?RtlUnicodeStringToAnsiString@@YAJPAU_ANSI_STRING@@PAU_UNICODE_STRING@@E@Z
?Save@CShdXml@@QAEHPB_W@Z
?SaveElem@CShdXml@@AAEHAAVCAtlFile@ATL@@I@Z
?Seek@CShdDisk@@QAEH_JK@Z
?SendNotify@CShdZip@@AAEIIPB_W@Z
?SendRequest@CShdHttp@@AAEHPAXAAU_SHDHTTP_REQUEST@@@Z
?SetAttr@CXmlElem@@QAEHPB_W0@Z
?SetAttrV@CXmlElem@@QAAHPB_W0ZZ
?SetBinaryValue@CShdIni@@QAEHPB_W0PAXK@Z
?SetDoubleValue@CShdIni@@QAEHPB_W0N@Z
?SetEncode@CTextFile@@AAEJXZ
?SetFileName@CShdIni@@QAAXPB_WZZ
?SetGuidValue@CShdIni@@QAEHPB_W0ABU_GUID@@@Z
?SetInt32Value@CShdIni@@QAEHPB_W0HH@Z
?SetInt64Value@CShdIni@@QAEHPB_W0_JH@Z
?SetMultiStrValue@CShdKey@@QAEJPB_WAAV?$CAtlArray@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V?$CElementTraits@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@2@@ATL@@@Z
?SetSection@CShdIni@@QAEHPB_W0@Z
?SetStringValue@CShdIni@@QAEHPB_W00@Z
?ShdAChar2Bin@@YAHPBD@Z
?ShdAStr2Bin@@YAHPBDPAEH@Z
?ShdAcronym2PrimaryKey@@YAPAUHKEY__@@PB_WPAH@Z
?ShdAddExceptionApp@@YAJPB_W0H@Z
?ShdAddLangFiles@@YAHPB_W0PAPB_WH@Z
?ShdAddPathEnvironment@@YAHPB_W@Z
?ShdAddZipFileCfg@@YAJPB_WPBD@Z
?ShdAttachDllToProcess@@YAHKPB_W0@Z
?ShdBackupBcd@@YAHPB_W@Z
?ShdBin2AStr@@YA?AV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@PBEH@Z
?ShdBrowseFolder@@YAHPAUHWND__@@AAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@PB_WK@Z
?ShdCalcCrc32@@YAKPAEK@Z
?ShdCloseTraceFile@@YAHXZ
?ShdCloseTraceMapping@@YAHXZ
?ShdCopyFile@@YAHPB_W0@Z
?ShdCopyFileSecurity@@YAHPB_W0@Z
?ShdCopyReparsePoint@@YAHPB_W0@Z
?ShdCopyTraceFile@@YAHPB_W@Z
?ShdCreateDir@@YAHPB_WPAU_SECURITY_ATTRIBUTES@@@Z
?ShdCreateDirEx@@YAHPB_W0@Z
?ShdCreateHiveFile@@YAJPB_WP6GJAAVCShdKey@@PAX@Z2@Z
?ShdCreateJunctionPoint@@YAHPB_W0@Z
?ShdCreateMountPoint@@YAHPB_W0@Z
?ShdCreateReadOnlyMemStream@@YAPAUIStream@@HPBXI@Z
?ShdCreateShellLink@@YAJPB_W00@Z
?ShdCreateShutdownBlockReason@@YAHPAUHWND__@@PB_W@Z
?ShdCreateSymblicLink@@YAHPB_W0H@Z
?ShdDeleteDir@@YAHPB_WH@Z
?ShdDeleteFile@@YAHAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@I@Z
?ShdDeleteFile@@YAHPB_W@Z
?ShdDeleteFiles@@YAHPB_W@Z
?ShdDeleteReparsePoint@@YAHPB_W@Z
?ShdDeleteSelf@@YAHH@Z
?ShdDestroyShutdownBlockReason@@YAHPAUHWND__@@@Z
?ShdDevPathToDosPath@@YAHPB_WAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?ShdDisableWindowsUpdate@@YAHH@Z
?ShdDisableWow64FsRedirection@@YAHPAPAX@Z
?ShdDosPathToDevPath@@YAHPB_WAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?ShdDownloadData@@YAHPBDPBXH@Z
?ShdEnablePrivilege@@YAHPB_WH@Z
?ShdEnableSystemRestore@@YAHH@Z
?ShdEnumProcess@@YAHP6GHKPB_WPAX@Z1@Z
?ShdExitWindows@@YAHH@Z
?ShdExpandEnvironmentStrings@@YAHPB_WAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?ShdFindExtName@@YAHPB_W0@Z
?ShdFindName@@YAHPB_W0_W@Z
?ShdFindSwitch@@YAHPB_W@Z
?ShdFormatMessage@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@JK@Z
?ShdFormatSize@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@_K@Z
?ShdFormatTime@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@AAU_FILETIME@@@Z
?ShdFormatTime@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@AAU_SYSTEMTIME@@@Z
?ShdFormatTime@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@_J@Z
?ShdGenRandom@@YAXPAEH@Z
?ShdGetAccountName@@YAHPAXAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@H@Z
?ShdGetAccountName@@YAHPB_WAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@H@Z
?ShdGetAccountSid@@YAHPB_WAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?ShdGetCurrentTime@@YA_JXZ
?ShdGetEfiBootVolume@@YAEXZ
?ShdGetEnvironmentVariable@@YAHPB_WAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?ShdGetFileSecurity@@YAPAXPB_WK@Z
?ShdGetFileSize@@YAHPB_WAA_K@Z
?ShdGetFileVerInfo@@YAKPB_W@Z
?ShdGetFirstSwitch@@YAPB_WXZ
?ShdGetGlobalEnvironment@@YAHPB_WAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?ShdGetLongPathName@@YAHPB_WAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?ShdGetModulePath@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@PAUHINSTANCE__@@@Z
?ShdGetParentProcId@@YAKPAX@Z
?ShdGetParentProcName@@YAHPAXAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?ShdGetProcessFullName@@YAHKAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?ShdGetProcessFullName@@YAHPAXAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?ShdGetProcessId@@YAKPB_WK@Z
?ShdGetProcessName@@YAHKAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?ShdGetProcessToken@@YAPAXKK@Z
?ShdGetReparsePointInfo@@YAKPB_WAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?ShdGetReparsePointTag@@YAKPB_W@Z
?ShdGetSwitchParam@@YAHPB_WAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@H@Z
?ShdGetSwitchParamInt@@YAHPB_WH@Z
?ShdGetSwitchParams@@YAHPB_WAAV?$CAtlArray@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V?$CElementTraits@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@2@@ATL@@@Z
?ShdGetSystemDisk@@YAHAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?ShdGetSystemPartition@@YAHAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?ShdGetTempFileName@@YAXPB_WAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?ShdGetTimeZoneBias@@YAJXZ
?ShdGetTokenInfo@@YAKPAXW4_TOKEN_INFORMATION_CLASS@@AAVCShdBuf@@@Z
?ShdGetTokenUserName@@YAHPAXAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@K@Z
?ShdGetTraceCfg@@YAJAAU_SHDTRACECFG@@@Z
?ShdGetValueByName@@YAHPBD0AAV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@@Z
?ShdGetVncPath@@YAHAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?ShdGetVolumeName@@YAHEAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?ShdGetWindowsDirectory@@YAHAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?ShdGetZipFileCfg@@YAJPB_WAAV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@@Z
?ShdInstallService@@YAHPB_W0H@Z
?ShdInstallVnc@@YAXPB_W@Z
?ShdIsAlreadyRunning@@YAHPB_W00@Z
?ShdIsDir@@YAHPB_W@Z
?ShdIsEfiBootVolume@@YAHE@Z
?ShdIsFile@@YAHPB_W@Z
?ShdIsHttpUrl@@YAHPBD@Z
?ShdIsMsiFile@@YAHPB_W@Z
?ShdIsPath@@YAHPB_WPAK@Z
?ShdIsSidString@@YAHPB_W@Z
?ShdIsSystemRestoreEnabled@@YAHXZ
?ShdKillProcess@@YAHKK@Z
?ShdLoadResource@@YAPBXPAUHINSTANCE__@@PB_W1AAK@Z
?ShdMakeParentDir@@YAHPB_W@Z
?ShdParseTraceCfg@@YAJAAU_SHDTRACECFG@@H@Z
?ShdPathAddBackslash@@YAXAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?ShdPrimaryKey2Acronym@@YAPB_WPAUHKEY__@@@Z
?ShdRemoveChars@@YAXAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@PB_W@Z
?ShdRemoveExceptionApp@@YAJPB_W@Z
?ShdRemovePathEnvironment@@YAHPB_W@Z
?ShdRemoveService@@YAHPB_WK@Z
?ShdRestoreBcd@@YAHPA_W@Z
?ShdRevertWow64FsRedirection@@YAHPAX@Z
?ShdRunProgram@@YAPAXV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@HH@Z
?ShdRunProgramAsUser@@YAHPAXPB_WHPAPAX@Z
?ShdRunProgramEx@@YAHPB_WHKPAK@Z
?ShdSaveKey@@YAHPAUHKEY__@@PB_W1@Z
?ShdSaveResource@@YAHPAUHINSTANCE__@@PB_W11@Z
?ShdSetObjectSecurity@@YAJPB_WW4_SE_OBJECT_TYPE@@PA_WKW4_ACCESS_MODE@@K@Z
?ShdSetTraceCfg@@YAJAAU_SHDTRACECFG@@@Z
?ShdShareDir@@YAJPB_W0@Z
?ShdShowPreInstanceWnd@@YAHPB_W0@Z
?ShdStartService@@YAHPB_W@Z
?ShdStopApps@@YAHPB_WPAPB_WH@Z
?ShdStopService@@YAHPB_WK@Z
?ShdTrace@@YAXKKPB_W0K0ZZ
?ShdTraceBinary@@YAXKPAEH@Z
?ShdUninstallVnc@@YAXXZ
?ShdUnzipFile@@YAHPB_W0@Z
?ShdUrlEncode@@YA?AV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@PBD@Z
?ShdUtcTime2LocalTime@@YA_J_J@Z
?ShdVerifyPEFileSignature@@YAHPB_WK@Z
?Start@CShdSvc@@QAEHKPAPB_W@Z
?Start@CShdWorker@@QAEHXZ
?Start@CShdZip@@QAEJPAUHWND__@@PB_W1K@Z
?Stop@CShdSvc@@QAEHK@Z
?Stop@CShdWorker@@QAEXXZ
?Stop@CShdZip@@QAEXXZ
?Travel@CShdZip@@AAEJXZ
?TravelDir@CShdZip@@AAEJXZ
?UTF8ToAStr@@YA?AV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@PBD@Z
?UTF8ToWStr@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@PBD@Z
?Update@CShdMd5@@QAEXPBEI@Z
?UpdateProperties@CShdDisk@@AAEHXZ
?WStrToUTF8@@YA?AV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@PB_W@Z
?Wait@CShdSvc@@QAEJAAU_SERVICE_STATUS@@KK@Z
?WorkThread@CShdWorker@@CGIPAX@Z
?Write@CShdDisk@@QAEHKPAX@Z
?Write@CShdDisk@@QAEH_KKPAX@Z
?WriteBom@CTextFile@@AAEJXZ
?WriteString@CTextFile@@QAEJPB_W@Z
?WriteStringV@CTextFile@@QAAJPB_WZZ
?Zip@CShdZip@@AAEJXZ
?ZipData@CShdZip@@AAEJPAX@Z
?ZipFile@CShdZip@@AAEJXZ
?ZipThread@CShdZip@@CGIPAX@Z
?g_AppPath@@3V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@A
?g_OsVer@@3GA
?g_SpVer@@3GA
?m_DiskInfo@CShdDisk@@2PAU_DISK_PARAMETER@@A
?m_dwDiskCount@CShdDisk@@2KA
?m_dwMaxDiskNumber@CShdDisk@@2KA
Name
.text
Size
135KB
Virtual Size
135KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
51KB
Virtual Size
51KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=150, version=20413,
count=6, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=6, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=20, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=33, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=314, id=1, productName=Unmarked objects,
count=25, id=138, version=30729,
count=1, id=146, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,