67f5b76b9414d6a157be19548e74146a601f9bf945f4848101a90860f29cd261
- IMPHASH 2b7967b3a04df6323106d167b9c0d7ee
- SHA256 67f5b76b9414d6a157be19548e74146a601f9bf945f4848101a90860f29cd261
- MD5 7d494bb5c6eb4dceb57647efdd62ff10
- SHA1 df7c5d9790d2a4db2d6340c73c20c51d72ab9e31
- SHA512 7fb01c2e0e5647d4f0523654b9c1d5a187080825f853c5f3c165aaf05cabfb91ad6fa508a5e6f93ecd38c5c656c0b2a6438a4894f248f4fca51f6c0a4acc986f
- SSDEEP 6144:kusYL46AwW2ijmkelucCMkCTnSyS/dVITskrOOlXsyx8x/B:XB82ijmkekcCmFmICyx8B
- TLSH T1D244485176A40DA5E6A3E23ED6A38645E2F238021B21CBCF1121876B1F73BE5BC3D715
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
2
Major OS version
5
Entry point
169972
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
e:\svnhome\shield6_576\Release\x64\ShdPub.pdb
kernel32
GetModuleFileNameW
WideCharToMultiByte
lstrcmpiA
WritePrivateProfileStringW
GetPrivateProfileStringW
IsBadReadPtr
WritePrivateProfileStructW
IsBadWritePtr
GetPrivateProfileStructW
WritePrivateProfileSectionW
GetPrivateProfileSectionW
LocalReAlloc
GetPrivateProfileSectionNamesW
GetProcAddress
GetModuleHandleW
GetSystemInfo
GetVersionExW
IsWow64Process
CreateProcessW
WaitForSingleObject
GetExitCodeProcess
OpenProcess
TerminateProcess
SetPriorityClass
SetThreadPriority
GetCurrentThread
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
ProcessIdToSessionId
Module32FirstW
VirtualAllocEx
WriteProcessMemory
VirtualFreeEx
CreateRemoteThread
LoadLibraryA
CreateMutexW
LoadLibraryExW
FormatMessageW
FreeLibrary
GetDateFormatW
GetTimeFormatW
FileTimeToSystemTime
GetLongPathNameW
SystemTimeToFileTime
FileTimeToLocalFileTime
GetSystemTimeAsFileTime
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateEventW
SetEvent
TerminateThread
Sleep
GetEnvironmentVariableW
ExpandEnvironmentStringsW
GetTickCount
lstrlenA
GetCommandLineW
GetCurrentProcessId
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
GetFileSize
SetEndOfFile
GetCurrentThreadId
OutputDebugStringW
LoadLibraryW
AddVectoredExceptionHandler
SetUnhandledExceptionFilter
lstrcmpW
FileTimeToDosDateTime
DosDateTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
RaiseException
GetProcessHeap
HeapSize
HeapReAlloc
GetTempFileNameW
GetTempPathW
FindNextFileW
CopyFileW
SetFileAttributesW
GetFileAttributesExW
GetVolumeInformationW
GetLogicalDrives
QueryDosDeviceW
MultiByteToWideChar
GetSystemDirectoryW
FlushFileBuffers
GetDriveTypeW
WriteFile
VirtualFree
VirtualAlloc
ReadFile
SetFilePointer
GetCurrentProcess
LocalAlloc
LocalFree
GetCurrentDirectoryW
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
lstrcpynW
lstrcmpiW
lstrlenW
lstrcpyW
FindClose
FindFirstFileW
SetLastError
GetFileAttributesW
DeleteFileW
CloseHandle
RemoveDirectoryW
DeviceIoControl
CreateFileW
GetLastError
GetLocalTime
HeapFree
HeapAlloc
HeapDestroy
user32
IsIconic
FindWindowW
ExitWindowsEx
GetSystemMetrics
SetForegroundWindow
ShowWindow
PostMessageW
SendMessageW
SendMessageTimeoutW
advapi32
StartServiceW
IsTextUnicode
SetServiceObjectSecurity
DeleteService
ControlService
ChangeServiceConfigW
QueryServiceConfigW
QueryServiceStatus
CreateServiceW
OpenServiceW
OpenSCManagerW
CloseServiceHandle
ConvertStringSecurityDescriptorToSecurityDescriptorW
CreateProcessAsUserW
RegQueryValueExW
RegDeleteValueW
RegSetValueExW
RegOpenKeyExW
RegSaveKeyW
RegCreateKeyExW
RegCloseKey
CryptReleaseContext
CryptGenRandom
CryptAcquireContextW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
GetTokenInformation
LookupAccountSidW
ConvertSidToStringSidW
LookupAccountNameW
ConvertStringSidToSidW
SetFileSecurityW
GetFileSecurityW
SetNamedSecurityInfoW
SetEntriesInAclW
BuildExplicitAccessWithNameW
GetNamedSecurityInfoW
shell32
SHCreateDirectoryExW
SHFileOperationW
ord155
SHBrowseForFolderW
ShellExecuteW
SHGetFolderLocation
SHGetPathFromIDListW
CommandLineToArgvW
ole32
CoSetProxyBlanket
CoCreateInstance
StringFromGUID2
CLSIDFromString
StgOpenStorage
oleaut32
VariantInit
VariantClear
SysFreeString
SysAllocString
VariantChangeType
shlwapi
StrStrIW
StrFormatByteSizeW
StrCmpNW
StrChrA
StrStrIA
StrRChrW
StrChrW
StrCmpNIW
PathIsRelativeW
PathAddBackslashW
PathRemoveBackslashW
SHDeleteKeyW
userenv
DestroyEnvironmentBlock
CreateEnvironmentBlock
msvcr90
fread
__CxxFrameHandler3
memcpy
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
?terminate@@YAXXZ
__crt_debugger_hook
__CppXcptFilter
_amsg_exit
_encoded_null
_initterm_e
_initterm
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
__C_specific_handler
memset
ferror
fclose
_fseeki64
_ftelli64
fwrite
_CxxThrowException
fopen
wcscspn
wcsspn
??3@YAXPEAX@Z
malloc
free
memcpy_s
memmove_s
wcsnlen
_vscwprintf
vswprintf_s
srand
_time64
rand
iswalpha
_wcsicmp
wcsstr
iswspace
calloc
_wtoi
wcsrchr
wcschr
strnlen
_mbsinc
_ismbcspace
_vscprintf
vsprintf_s
swprintf_s
_itow_s
wcstoul
_i64tow_s
_wcstoi64
wcstod
??_V@YAXPEAX@Z
??_U@YAPEAX_K@Z
??2@YAPEAX_K@Z
_beginthreadex
__argc
__wargv
wprintf
isprint
qsort
bsearch
iswdigit
wintrust
WinVerifyTrust
setupapi
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsW
SetupDiGetDeviceInterfaceDetailW
psapi
GetModuleBaseNameW
GetModuleFileNameExW
GetProcessImageFileNameW
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
wininet
InternetOpenW
HttpOpenRequestW
HttpQueryInfoW
HttpSendRequestW
InternetOpenUrlA
InternetReadFile
InternetConnectW
InternetCloseHandle
netapi32
NetShareAdd
zlib
deflateInit2_
deflateEnd
inflate
crc32
inflateInit2_
inflateEnd
deflate
??0CShdDisk@@QEAA@AEAV0@@Z
??0CShdDisk@@QEAA@XZ
??0CShdDump@@QEAA@H@Z
??0CShdHttp@@QEAA@AEBV0@@Z
??0CShdHttp@@QEAA@XZ
??0CShdIni@@QEAA@AEBV0@@Z
??0CShdIni@@QEAA@PEB_W@Z
??0CShdIni@@QEAA@XZ
??0CShdKey@@QEAA@AEAV0@@Z
??0CShdKey@@QEAA@XZ
??0CShdMd5@@QEAA@XZ
??0CShdSvc@@QEAA@XZ
??0CShdWmi@@QEAA@PEB_W@Z
??0CShdWmi@@QEAA@XZ
??0CShdWorker@@QEAA@XZ
??0CShdXml@@QEAA@XZ
??0CShdZip@@QEAA@AEBV0@@Z
??0CShdZip@@QEAA@XZ
??0CTextFile@@QEAA@AEAV0@@Z
??0CTextFile@@QEAA@XZ
??0CXmlElem@@QEAA@XZ
??1CShdDisk@@QEAA@XZ
??1CShdHttp@@QEAA@XZ
??1CShdIni@@QEAA@XZ
??1CShdKey@@QEAA@XZ
??1CShdSvc@@QEAA@XZ
??1CShdWmi@@QEAA@XZ
??1CShdWorker@@QEAA@XZ
??1CShdXml@@QEAA@XZ
??1CShdZip@@QEAA@XZ
??1CTextFile@@QEAA@XZ
??1CXmlElem@@QEAA@XZ
??4CShdDisk@@QEAAAEAV0@AEAV0@@Z
??4CShdDump@@QEAAAEAU0@AEBU0@@Z
??4CShdHttp@@QEAAAEAV0@AEBV0@@Z
??4CShdIni@@QEAAAEAV0@AEBV0@@Z
??4CShdKey@@QEAAAEAV0@AEAV0@@Z
??4CShdMd5@@QEAAAEAV0@AEBV0@@Z
??4CShdSvc@@QEAAAEAV0@AEBV0@@Z
??4CShdWmi@@QEAAAEAV0@AEBV0@@Z
??4CShdXml@@QEAAAEAV0@AEBV0@@Z
??4CShdZip@@QEAAAEAV0@AEBV0@@Z
??4CTextFile@@QEAAAEAV0@AEAV0@@Z
??BCShdSvc@@QEBAPEAUSC_HANDLE__@@XZ
??_7CShdHttp@@6B@
??_FCShdDump@@QEAAXXZ
?AStrToUTF8@@YA?AV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@PEBD@Z
?AddElem@CXmlElem@@QEAAHPEAV1@@Z
?AddElem@CXmlElem@@QEAAPEAV1@PEB_W0@Z
?AddWork@CShdWorker@@QEAAJP6AXHPEAX@Z0@Z
?CalcSize@CShdZip@@AEAAJXZ
?ChangeStartType@CShdSvc@@QEAAHK@Z
?Clear@CShdWorker@@AEAAXXZ
?Clear@CShdXml@@QEAAHXZ
?Clear@CShdZip@@AEAAXXZ
?Clear@CXmlElem@@AEAAXXZ
?Close@CShdSvc@@QEAAXXZ
?Close@CShdWmi@@QEAAXXZ
?Close@CTextFile@@QEAAXXZ
?Create@CShdSvc@@QEAAHPEB_W0KKK@Z
?CreateLinkKey@CShdKey@@QEAAJPEAUHKEY__@@PEB_W1K@Z
?CreateSymbolicLinkW@@YAHPEB_W0@Z
?DelAttr@CXmlElem@@QEAAHPEB_W@Z
?DelElem@CXmlElem@@QEAAHPEB_W@Z
?DeleteLinkKey@CShdKey@@QEAAJPEAUHKEY__@@PEB_W@Z
?DeleteSymbolicLink@@YAHPEB_W@Z
?Digest@CShdMd5@@QEAAHPEB_WPEAE@Z
?Digest@CShdMd5@@QEAAXPEBEIPEAE@Z
?DoWorks@CShdWorker@@AEAAXXZ
?DoZip@CShdZip@@AEAAJXZ
?DownloadData@CShdHttp@@QEAAJAEAU_SHDHTTP_REQUEST@@@Z
?EnterElement@CShdXml@@QEAAPEAVCXmlElem@@I@Z
?EnterElement@CShdXml@@QEAAPEAVCXmlElem@@PEB_W@Z
?ExecMethod@CShdWmi@@QEAAHPEAUtagVARIANT@@PEB_W1HZZ
?ExecMethod@CShdWmi@@QEAAHPEB_W0@Z
?ExecQuery@CShdWmi@@QEAAHPEB_WAEAPEAUIEnumWbemClassObject@@@Z
?Final@CShdMd5@@QEAAXPEAE@Z
?FindSection@CShdXml@@AEAAHPEB_W@Z
?FlushAll@CShdDisk@@SAXXZ
?GetAttr@CXmlElem@@QEAAPEAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@PEB_WH@Z
?GetAttr@CXmlElem@@QEAAPEB_WPEB_W@Z
?GetAttrInt@CXmlElem@@QEAA_JPEB_W_J@Z
?GetBinaryValue@CShdIni@@QEAAHPEB_W0PEAXK@Z
?GetBuild@@YAKXZ
?GetChild@CXmlElem@@QEAAPEAV1@I@Z
?GetChild@CXmlElem@@QEAAPEAV1@PEB_W@Z
?GetChildCount@CXmlElem@@QEAAIXZ
?GetChildData@CXmlElem@@QEAAPEB_WPEB_WH@Z
?GetChildDataInt@CXmlElem@@QEAA_JPEB_W_J@Z
?GetCurrent@CShdXml@@QEAAPEAVCXmlElem@@XZ
?GetDeviceNumber@CShdDisk@@AEAAHAEAU_STORAGE_DEVICE_NUMBER@@@Z
?GetDiskExtent@CShdDisk@@QEAAHAEAU_DISK_EXTENT@@@Z
?GetDiskGeometry@CShdDisk@@QEAAHPEAU_DISK_GEOMETRY@@@Z
?GetDiskGeometryEx@CShdDisk@@QEAAHPEAU_DISK_GEOMETRY_EX@@@Z
?GetDiskInfo@CShdDisk@@QEAAHAEAU_DISK_PARAMETER@@@Z
?GetDiskInfos@CShdDisk@@SAHAEAV?$CAtlArray@U_DISK_PARAMETER@@V?$CElementTraits@U_DISK_PARAMETER@@@ATL@@@ATL@@@Z
?GetDiskParameter@CShdDisk@@SAPEAU_DISK_PARAMETER@@E@Z
?GetDiskSerial@CShdDisk@@SAHKAEAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?GetDoubleValue@CShdIni@@QEAANPEB_W0N@Z
?GetDriveDiskNumber@CShdDisk@@SAJPEB_W@Z
?GetDriveDiskNumber@CShdDisk@@SAJ_W@Z
?GetDriveInfo@CShdDisk@@SAH_WAEAKAEA_K@Z
?GetDrivePos@CShdDisk@@AEAAHAEA_K0@Z
?GetFileName@CShdIni@@QEAAAEAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@XZ
?GetGuidValue@CShdIni@@QEAAHPEB_W0AEAU_GUID@@@Z
?GetHotplugInfo@CShdDisk@@AEAAHAEAU_STORAGE_HOTPLUG_INFO@@@Z
?GetInt32Value@CShdIni@@QEAAHPEB_W0H@Z
?GetInt64Value@CShdIni@@QEAA_JPEB_W0_J@Z
?GetKeyNames@CShdIni@@QEAAXPEB_WAEAV?$CAtlArray@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V?$CElementTraits@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@2@@ATL@@@Z
?GetMethod@CShdWmi@@QEAAHPEB_W0@Z
?GetNode@CXmlElem@@QEAAPEAV1@PEB_W@Z
?GetNodeData@CXmlElem@@QEAAPEB_WPEB_W@Z
?GetOutParam@CShdWmi@@QEAAHPEB_WPEAUtagVARIANT@@@Z
?GetParent@CXmlElem@@QEAAPEAV1@XZ
?GetRoot@CShdXml@@QEAAPEAVCXmlElem@@XZ
?GetSection@CShdIni@@QEAAKPEB_WPEA_WK@Z
?GetSection@CShdIni@@QEAAXPEB_WAEAV?$CAtlMap@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V12@V?$CElementTraits@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@2@V32@@ATL@@@Z
?GetSectionNames@CShdIni@@QEAAXAEAV?$CAtlArray@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V?$CElementTraits@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@2@@ATL@@@Z
?GetSerialByIdentify@CShdDisk@@AEAAHKPEAD@Z
?GetSerialBySmart@CShdDisk@@AEAAHPEAD@Z
?GetStorageProperty@CShdDisk@@AEAAHW4_STORAGE_PROPERTY_ID@@PEAXK@Z
?GetStringValue@CShdIni@@QEAAXPEB_W0AEAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@0@Z
?GetSysDriveDiskNumber@CShdDisk@@SAJXZ
?GetVerString@@YAPEB_WXZ
?Init@CShdMd5@@QEAAXXZ
?Ipv4AddressToString@@YA?AV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@PEBUin_addr@@@Z
?Ipv4StringToAddress@@YAJPEBDPEAUin_addr@@@Z
?Ipv6AddressToString@@YA?AV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@PEBUin6_addr@@@Z
?Ipv6StringToAddress@@YAJPEBDPEAUin6_addr@@@Z
?IsFixedDisk@CShdDisk@@QEAAHXZ
?IsLinkKey@CShdKey@@QEAAHXZ
?IsOpened@CTextFile@@QEAAHXZ
?IsRunning@CShdZip@@QEAAHXZ
?IsServer@@YAHXZ
?IsWin64@@YAHXZ
?IsWow64@@YAHXZ
?LZ4Compress@@YAHPEAEPEAK0K@Z
?LZ4Uncompress@@YAHPEAEPEAK0K@Z
?LeaveElement@CShdXml@@QEAAXXZ
?Load@CShdXml@@QEAAPEAVCXmlElem@@PEAEJPEB_WI@Z
?Load@CShdXml@@QEAAPEAVCXmlElem@@PEB_W0H@Z
?Lock@CShdDisk@@QEAAHH@Z
?Lock@CShdDisk@@SAH_WH@Z
?LockAll@CShdDisk@@SAXH@Z
?NotifyPercent@CShdZip@@AEAAXXZ
?NtClose@@YAJPEAX@Z
?NtCreateFile@@YAJPEAPEAXKPEAU_OBJECT_ATTRIBUTES@@PEAU_IO_STATUS_BLOCK@@PEAT_LARGE_INTEGER@@KKKKPEAXK@Z
?NtGetSysInfos@@YAPEAXW4_SYSTEM_INFORMATION_CLASS@@@Z
?NtMapViewOfSection@@YAJPEAX0PEAPEAXKKPEAT_LARGE_INTEGER@@PEAKW4_SECTION_INHERIT@@KK@Z
?NtOpenSection@@YAJPEAPEAXKPEAU_OBJECT_ATTRIBUTES@@@Z
?NtQueryInformationFile@@YAJPEAXPEAU_IO_STATUS_BLOCK@@0KW4_FILE_INFORMATION_CLASS@@@Z
?NtQueryInformationProcess@@YAJPEAXI0KPEAK@Z
?NtQueryObject@@YAJPEAXW4_OBJECT_INFORMATION_CLASS@@0KPEAK@Z
?NtQuerySysInfos@@YAPEAXW4_SYSTEM_INFORMATION_CLASS@@@Z
?NtQuerySystemInformation@@YAJW4_SYSTEM_INFORMATION_CLASS@@PEAX_KPEA_K@Z
?NtUnmapViewOfSection@@YAJPEAX0@Z
?OnData@CShdHttp@@MEAAHPEAEI@Z
?Open@CShdDisk@@QEAAHK@Z
?Open@CShdDisk@@QEAAHPEB_W@Z
?Open@CShdKey@@QEAAJPEAUHKEY__@@PEB_WKK@Z
?Open@CShdSvc@@QEAAHPEB_WK@Z
?Open@CShdWmi@@QEAAHPEB_W@Z
?Open@CTextFile@@QEAAJPEB_WKK@Z
?Parse@CShdXml@@AEAAPEAVCXmlElem@@XZ
?Phy2LBA@CShdDisk@@SA_KKKKK@Z
?PutInParam@CShdWmi@@QEAAHPEB_W0@Z
?PutInParam@CShdWmi@@QEAAHPEB_WPEAUtagVARIANT@@@Z
?QueryBinValue@CShdKey@@QEAAJPEB_WAEAPEAEAEAK@Z
?QueryConfig@CShdSvc@@QEAAKAEAVCShdBuf@@@Z
?QueryLinkValue@CShdKey@@QEAAJAEAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?QueryMultiStrValue@CShdKey@@QEAAJPEB_WAEAV?$CAtlArray@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V?$CElementTraits@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@2@@ATL@@@Z
?QueryStrValue@CShdKey@@QEAAJPEB_WAEAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@H@Z
?QuerySymbolicLink@@YAHPEB_WAEAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?RSAPrivateDecrypt@@YAHPEAURSA_PRIVATE_KEY@@PEAEI1PEAI@Z
?RSAPrivateEncrypt@@YAHPEAURSA_PRIVATE_KEY@@PEAEI1PEAI@Z
?RSAPublicDecrypt@@YAHPEAURSA_PUBLIC_KEY@@PEAEI1PEAI@Z
?RSAPublicEncrypt@@YAHPEAURSA_PUBLIC_KEY@@PEAEI1PEAI@Z
?ReInitDiskInfo@CShdDisk@@QEAAHXZ
?Read@CShdDisk@@QEAAHKPEAX@Z
?Read@CShdDisk@@QEAAH_KKPEAX@Z
?ReadChar@CTextFile@@AEAAHXZ
?ReadElemData@CShdXml@@AEAAXPEAVCXmlElem@@_W@Z
?ReadEntityChar@CShdXml@@AEAAXAEA_W@Z
?ReadLine@CTextFile@@QEAAHAEAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?ReadNext@CShdXml@@AEAAHAEA_W@Z
?ReadNextTag@CShdXml@@AEAAHPEAVCXmlElem@@@Z
?ReadTagAttr@CShdXml@@AEAAHPEAVCXmlElem@@@Z
?RecvData@CShdHttp@@AEAAHPEAX@Z
?RemoveAllKeys@CShdIni@@QEAAHPEB_W@Z
?RemoveKey@CShdIni@@QEAAHPEB_W0@Z
?RemoveSection@CShdIni@@QEAAHPEB_W@Z
?ReplaceEntityChar@CShdXml@@SAAEAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@AEAV23@@Z
?Reset@CTextFile@@QEAAJXZ
?RtlAnsiStringToUnicodeString@@YAJPEAU_UNICODE_STRING@@PEAU_ANSI_STRING@@E@Z
?RtlFreeUnicodeString@@YAXPEAU_UNICODE_STRING@@@Z
?RtlInitAnsiString@@YAXPEAU_ANSI_STRING@@PEAD@Z
?RtlInitUnicodeString@@YAXPEAU_UNICODE_STRING@@PEB_W@Z
?RtlUnicodeStringToAnsiString@@YAJPEAU_ANSI_STRING@@PEAU_UNICODE_STRING@@E@Z
?Save@CShdXml@@QEAAHPEB_W@Z
?SaveElem@CShdXml@@AEAAHAEAVCAtlFile@ATL@@I@Z
?Seek@CShdDisk@@QEAAH_JK@Z
?SendNotify@CShdZip@@AEAAIIPEB_W@Z
?SendRequest@CShdHttp@@AEAAHPEAXAEAU_SHDHTTP_REQUEST@@@Z
?SetAttr@CXmlElem@@QEAAHPEB_W0@Z
?SetAttrV@CXmlElem@@QEAAHPEB_W0ZZ
?SetBinaryValue@CShdIni@@QEAAHPEB_W0PEAXK@Z
?SetDoubleValue@CShdIni@@QEAAHPEB_W0N@Z
?SetEncode@CTextFile@@AEAAJXZ
?SetFileName@CShdIni@@QEAAXPEB_WZZ
?SetGuidValue@CShdIni@@QEAAHPEB_W0AEBU_GUID@@@Z
?SetInt32Value@CShdIni@@QEAAHPEB_W0HH@Z
?SetInt64Value@CShdIni@@QEAAHPEB_W0_JH@Z
?SetMultiStrValue@CShdKey@@QEAAJPEB_WAEAV?$CAtlArray@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V?$CElementTraits@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@2@@ATL@@@Z
?SetSection@CShdIni@@QEAAHPEB_W0@Z
?SetStringValue@CShdIni@@QEAAHPEB_W00@Z
?ShdAChar2Bin@@YAHPEBD@Z
?ShdAStr2Bin@@YAHPEBDPEAEH@Z
?ShdAcronym2PrimaryKey@@YAPEAUHKEY__@@PEB_WPEAH@Z
?ShdAddExceptionApp@@YAJPEB_W0H@Z
?ShdAddLangFiles@@YAHPEB_W0PEAPEB_WH@Z
?ShdAddPathEnvironment@@YAHPEB_W@Z
?ShdAddZipFileCfg@@YAJPEB_WPEBD@Z
?ShdAttachDllToProcess@@YAHKPEB_W0@Z
?ShdBackupBcd@@YAHPEB_W@Z
?ShdBin2AStr@@YA?AV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@PEBEH@Z
?ShdBrowseFolder@@YAHPEAUHWND__@@AEAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@PEB_WK@Z
?ShdCalcCrc32@@YAKPEAEK@Z
?ShdCloseTraceFile@@YAHXZ
?ShdCloseTraceMapping@@YAHXZ
?ShdCopyFile@@YAHPEB_W0@Z
?ShdCopyFileSecurity@@YAHPEB_W0@Z
?ShdCopyReparsePoint@@YAHPEB_W0@Z
?ShdCopyTraceFile@@YAHPEB_W@Z
?ShdCreateDir@@YAHPEB_WPEAU_SECURITY_ATTRIBUTES@@@Z
?ShdCreateDirEx@@YAHPEB_W0@Z
?ShdCreateHiveFile@@YAJPEB_WP6AJAEAVCShdKey@@PEAX@Z2@Z
?ShdCreateJunctionPoint@@YAHPEB_W0@Z
?ShdCreateMountPoint@@YAHPEB_W0@Z
?ShdCreateReadOnlyMemStream@@YAPEAUIStream@@HPEBXI@Z
?ShdCreateShellLink@@YAJPEB_W00@Z
?ShdCreateShutdownBlockReason@@YAHPEAUHWND__@@PEB_W@Z
?ShdCreateSymblicLink@@YAHPEB_W0H@Z
?ShdDeleteDir@@YAHPEB_WH@Z
?ShdDeleteFile@@YAHAEAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@I@Z
?ShdDeleteFile@@YAHPEB_W@Z
?ShdDeleteFiles@@YAHPEB_W@Z
?ShdDeleteReparsePoint@@YAHPEB_W@Z
?ShdDeleteSelf@@YAHH@Z
?ShdDestroyShutdownBlockReason@@YAHPEAUHWND__@@@Z
?ShdDevPathToDosPath@@YAHPEB_WAEAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?ShdDisableWindowsUpdate@@YAHH@Z
?ShdDisableWow64FsRedirection@@YAHPEAPEAX@Z
?ShdDosPathToDevPath@@YAHPEB_WAEAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?ShdDownloadData@@YAHPEBDPEBXH@Z
?ShdEnablePrivilege@@YAHPEB_WH@Z
?ShdEnableSystemRestore@@YAHH@Z
?ShdEnumProcess@@YAHP6AHKPEB_WPEAX@Z1@Z
?ShdExitWindows@@YAHH@Z
?ShdExpandEnvironmentStrings@@YAHPEB_WAEAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?ShdFindExtName@@YAHPEB_W0@Z
?ShdFindName@@YAHPEB_W0_W@Z
?ShdFindSwitch@@YAHPEB_W@Z
?ShdFormatMessage@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@JK@Z
?ShdFormatSize@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@_K@Z
?ShdFormatTime@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@AEAU_FILETIME@@@Z
?ShdFormatTime@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@AEAU_SYSTEMTIME@@@Z
?ShdFormatTime@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@_J@Z
?ShdGenRandom@@YAXPEAEH@Z
?ShdGetAccountName@@YAHPEAXAEAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@H@Z
?ShdGetAccountName@@YAHPEB_WAEAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@H@Z
?ShdGetAccountSid@@YAHPEB_WAEAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?ShdGetCurrentTime@@YA_JXZ
?ShdGetEfiBootVolume@@YAEXZ
?ShdGetEnvironmentVariable@@YAHPEB_WAEAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?ShdGetFileSecurity@@YAPEAXPEB_WK@Z
?ShdGetFileSize@@YAHPEB_WAEA_K@Z
?ShdGetFileVerInfo@@YAKPEB_W@Z
?ShdGetFirstSwitch@@YAPEB_WXZ
?ShdGetGlobalEnvironment@@YAHPEB_WAEAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?ShdGetLongPathName@@YAHPEB_WAEAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?ShdGetModulePath@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@PEAUHINSTANCE__@@@Z
?ShdGetParentProcId@@YAKPEAX@Z
?ShdGetParentProcName@@YAHPEAXAEAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?ShdGetProcessFullName@@YAHKAEAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?ShdGetProcessFullName@@YAHPEAXAEAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?ShdGetProcessId@@YAKPEB_WK@Z
?ShdGetProcessName@@YAHKAEAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?ShdGetProcessToken@@YAPEAXKK@Z
?ShdGetReparsePointInfo@@YAKPEB_WAEAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?ShdGetReparsePointTag@@YAKPEB_W@Z
?ShdGetSwitchParam@@YAHPEB_WAEAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@H@Z
?ShdGetSwitchParamInt@@YAHPEB_WH@Z
?ShdGetSwitchParams@@YAHPEB_WAEAV?$CAtlArray@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V?$CElementTraits@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@2@@ATL@@@Z
?ShdGetSystemDisk@@YAHAEAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?ShdGetSystemPartition@@YAHAEAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?ShdGetTempFileName@@YAXPEB_WAEAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?ShdGetTimeZoneBias@@YAJXZ
?ShdGetTokenInfo@@YAKPEAXW4_TOKEN_INFORMATION_CLASS@@AEAVCShdBuf@@@Z
?ShdGetTokenUserName@@YAHPEAXAEAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@K@Z
?ShdGetTraceCfg@@YAJAEAU_SHDTRACECFG@@@Z
?ShdGetValueByName@@YAHPEBD0AEAV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@@Z
?ShdGetVncPath@@YAHAEAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?ShdGetVolumeName@@YAHEAEAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?ShdGetWindowsDirectory@@YAHAEAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?ShdGetZipFileCfg@@YAJPEB_WAEAV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@@Z
?ShdInstallService@@YAHPEB_W0H@Z
?ShdInstallVnc@@YAXPEB_W@Z
?ShdIsAlreadyRunning@@YAHPEB_W00@Z
?ShdIsDir@@YAHPEB_W@Z
?ShdIsEfiBootVolume@@YAHE@Z
?ShdIsFile@@YAHPEB_W@Z
?ShdIsHttpUrl@@YAHPEBD@Z
?ShdIsMsiFile@@YAHPEB_W@Z
?ShdIsPath@@YAHPEB_WPEAK@Z
?ShdIsSidString@@YAHPEB_W@Z
?ShdIsSystemRestoreEnabled@@YAHXZ
?ShdKillProcess@@YAHKK@Z
?ShdLoadResource@@YAPEBXPEAUHINSTANCE__@@PEB_W1AEAK@Z
?ShdMakeParentDir@@YAHPEB_W@Z
?ShdParseTraceCfg@@YAJAEAU_SHDTRACECFG@@H@Z
?ShdPathAddBackslash@@YAXAEAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?ShdPrimaryKey2Acronym@@YAPEB_WPEAUHKEY__@@@Z
?ShdRemoveChars@@YAXAEAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@PEB_W@Z
?ShdRemoveExceptionApp@@YAJPEB_W@Z
?ShdRemovePathEnvironment@@YAHPEB_W@Z
?ShdRemoveService@@YAHPEB_WK@Z
?ShdRestoreBcd@@YAHPEA_W@Z
?ShdRevertWow64FsRedirection@@YAHPEAX@Z
?ShdRunProgram@@YAPEAXV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@HH@Z
?ShdRunProgramAsUser@@YAHPEAXPEB_WHPEAPEAX@Z
?ShdRunProgramEx@@YAHPEB_WHKPEAK@Z
?ShdSaveKey@@YAHPEAUHKEY__@@PEB_W1@Z
?ShdSaveResource@@YAHPEAUHINSTANCE__@@PEB_W11@Z
?ShdSetObjectSecurity@@YAJPEB_WW4_SE_OBJECT_TYPE@@PEA_WKW4_ACCESS_MODE@@K@Z
?ShdSetTraceCfg@@YAJAEAU_SHDTRACECFG@@@Z
?ShdShareDir@@YAJPEB_W0@Z
?ShdShowPreInstanceWnd@@YAHPEB_W0@Z
?ShdStartService@@YAHPEB_W@Z
?ShdStopApps@@YAHPEB_WPEAPEB_WH@Z
?ShdStopService@@YAHPEB_WK@Z
?ShdTrace@@YAXKKPEB_W0K0ZZ
?ShdTraceBinary@@YAXKPEAEH@Z
?ShdUninstallVnc@@YAXXZ
?ShdUnzipFile@@YAHPEB_W0@Z
?ShdUrlEncode@@YA?AV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@PEBD@Z
?ShdUtcTime2LocalTime@@YA_J_J@Z
?ShdVerifyPEFileSignature@@YAHPEB_WK@Z
?Start@CShdSvc@@QEAAHKPEAPEB_W@Z
?Start@CShdWorker@@QEAAHXZ
?Start@CShdZip@@QEAAJPEAUHWND__@@PEB_W1K@Z
?Stop@CShdSvc@@QEAAHK@Z
?Stop@CShdWorker@@QEAAXXZ
?Stop@CShdZip@@QEAAXXZ
?Travel@CShdZip@@AEAAJXZ
?TravelDir@CShdZip@@AEAAJXZ
?UTF8ToAStr@@YA?AV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@PEBD@Z
?UTF8ToWStr@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@PEBD@Z
?Update@CShdMd5@@QEAAXPEBEI@Z
?UpdateProperties@CShdDisk@@AEAAHXZ
?WStrToUTF8@@YA?AV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@PEB_W@Z
?Wait@CShdSvc@@QEAAJAEAU_SERVICE_STATUS@@KK@Z
?WorkThread@CShdWorker@@CAIPEAX@Z
?Write@CShdDisk@@QEAAHKPEAX@Z
?Write@CShdDisk@@QEAAH_KKPEAX@Z
?WriteBom@CTextFile@@AEAAJXZ
?WriteString@CTextFile@@QEAAJPEB_W@Z
?WriteStringV@CTextFile@@QEAAJPEB_WZZ
?Zip@CShdZip@@AEAAJXZ
?ZipData@CShdZip@@AEAAJPEAX@Z
?ZipFile@CShdZip@@AEAAJXZ
?ZipThread@CShdZip@@CAIPEAX@Z
?g_AppPath@@3V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@A
?g_OsVer@@3GA
?g_SpVer@@3GA
?m_DiskInfo@CShdDisk@@2PAU_DISK_PARAMETER@@A
?m_dwDiskCount@CShdDisk@@2KA
?m_dwMaxDiskNumber@CShdDisk@@2KA
Name
.text
Size
173KB
Virtual Size
172KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
80KB
Virtual Size
79KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
862B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=150, version=20413,
count=2, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=6, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=16, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=135, version=30729,
count=33, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=314, id=1, productName=Unmarked objects,
count=25, id=138, version=30729,
count=1, id=146, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,