39900aa448f4456d212cf73c345bc46ad1e0649e5cfe3174ee67a461f7ad947e

info
MZ
PE
resources
imports
exports
foremost
hexdump
disasm
log
discuss
donate

filename	39900aa448f4456d212cf73c345bc46ad1e0649e5cfe3174ee67a461f7ad947e
size	1376256 (0x150000)
md5	13d6c40b54e15c385cecbfb6330ebe8c

type	PE32 executable (console) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	Win.Trojan.Dopper-1 FOUND
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x118

Rich Header

lib id	version	times used
12	7291	35
10	8966	1
14	7299	5
10	8447	14
2	7303	47
19	8022	28
0	0	28
19	8034	19
1	0	486
11	8168	1
10	8168	308
6	1720	1
4	8168	3

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	4
TimeDateStamp	0x44f2b9f3
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x10f
Magic	0x10b
LinkerVersion	6.0
SizeOfCode	0xfc000
SizeOfInitializedData	0x53000
SizeOfUninitializedData	0
AddressOfEntryPoint	0xfbd02
BaseOfCode	0x1000
BaseOfData	0xfd000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x1000
OperatingSystemVersion	4.0
ImageVersion	4.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x15c000
SizeOfHeaders	0x1000
CheckSum	0
Subsystem	3
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v6.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0xfb1ac	0xfc000	R-X CODE
.rdata	0xfd000	0x14a02	0x15000	R-- IDATA
.data	0x112000	0x47a64	0x3c000	RW- IDATA
.rsrc	0x15a000	0x1088	0x2000	R-- IDATA

Data Directory

type	va	size
EXPORT	0x10ba50	0x5fb2
IMPORT	0x10955c	0x118
RESOURCE	0x15a000	0x1088
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
PHP	BAMBALAM_GETINI.PHP	297	1252
PHP	BAMBALAM_INIT.PHP	581	1252
PHP	MAIN	51	1252
PHP	X:\CAZANOVA163\HACKING\CRACKING\RED ZONE\WCRYDL.PHP	2861	1252

module_name	ord	function_name
KERNEL32.DLL		GetCommandLineA
KERNEL32.DLL		GetVersionExA
KERNEL32.DLL		GetTickCount
KERNEL32.DLL		lstrcmpiA
KERNEL32.DLL		ReadFile
KERNEL32.DLL		GetFileSize
KERNEL32.DLL		GetConsoleTitleA
KERNEL32.DLL		GetModuleFileNameA
KERNEL32.DLL		GetSystemDirectoryA
KERNEL32.DLL		GetWindowsDirectoryA
KERNEL32.DLL		GlobalMemoryStatus
KERNEL32.DLL		GetLogicalDrives
KERNEL32.DLL		SizeofResource
KERNEL32.DLL		LoadResource
KERNEL32.DLL		FindResourceA
KERNEL32.DLL		FindResourceExA
KERNEL32.DLL		EndUpdateResourceA
KERNEL32.DLL		UpdateResourceA
KERNEL32.DLL		BeginUpdateResourceA
KERNEL32.DLL		EnumResourceNamesA
KERNEL32.DLL		EnumResourceTypesA
KERNEL32.DLL		ReleaseMutex
KERNEL32.DLL		OpenMutexA
KERNEL32.DLL		MapViewOfFileEx
KERNEL32.DLL		UnmapViewOfFile
KERNEL32.DLL		MapViewOfFile
KERNEL32.DLL		OpenFileMappingA
KERNEL32.DLL		OpenFile
KERNEL32.DLL		CreateFileMappingA
KERNEL32.DLL		FindClose
KERNEL32.DLL		FindNextFileA
KERNEL32.DLL		FindFirstFileA
KERNEL32.DLL		GetSystemTimeAsFileTime
KERNEL32.DLL		QueryPerformanceCounter
KERNEL32.DLL		QueryPerformanceFrequency
KERNEL32.DLL		lstrcmpA
KERNEL32.DLL		MulDiv
KERNEL32.DLL		GlobalAlloc
KERNEL32.DLL		GlobalFree
KERNEL32.DLL		GetTimeZoneInformation
KERNEL32.DLL		FileTimeToSystemTime
KERNEL32.DLL		SystemTimeToFileTime
KERNEL32.DLL		CreateFileA
KERNEL32.DLL		WriteFile
KERNEL32.DLL		_lopen
KERNEL32.DLL		_lread
KERNEL32.DLL		_lclose
KERNEL32.DLL		IsBadCodePtr
KERNEL32.DLL		IsBadWritePtr
KERNEL32.DLL		IsBadStringPtrA
KERNEL32.DLL		IsDBCSLeadByte
KERNEL32.DLL		GetCurrentProcessId
KERNEL32.DLL		HeapFree
KERNEL32.DLL		IsBadReadPtr
KERNEL32.DLL		VirtualFree
KERNEL32.DLL		VirtualProtect
KERNEL32.DLL		SetLastError
KERNEL32.DLL		VirtualAlloc
KERNEL32.DLL		GetProcessHeap
KERNEL32.DLL		HeapAlloc
KERNEL32.DLL		GetModuleHandleA
KERNEL32.DLL		GetComputerNameA
KERNEL32.DLL		GetSystemInfo
KERNEL32.DLL		ReleaseSemaphore
KERNEL32.DLL		CreateSemaphoreA
KERNEL32.DLL		SetThreadPriority
KERNEL32.DLL		WaitNamedPipeA
KERNEL32.DLL		SetNamedPipeHandleState
KERNEL32.DLL		GetFullPathNameA
KERNEL32.DLL		LeaveCriticalSection
KERNEL32.DLL		EnterCriticalSection
KERNEL32.DLL		DeleteCriticalSection
KERNEL32.DLL		InitializeCriticalSection
KERNEL32.DLL		TlsSetValue
KERNEL32.DLL		TlsGetValue
KERNEL32.DLL		TlsFree
KERNEL32.DLL		TlsAlloc
KERNEL32.DLL		HeapDestroy
KERNEL32.DLL		HeapCreate
KERNEL32.DLL		HeapReAlloc
KERNEL32.DLL		GetCurrentThreadId
KERNEL32.DLL		SetEvent
KERNEL32.DLL		CreateEventA
KERNEL32.DLL		UnlockFileEx
KERNEL32.DLL		LockFileEx
KERNEL32.DLL		GetDiskFreeSpaceA
KERNEL32.DLL		GetCurrentProcess
KERNEL32.DLL		DuplicateHandle
KERNEL32.DLL		CreatePipe
KERNEL32.DLL		GetStdHandle
KERNEL32.DLL		CreateProcessA
KERNEL32.DLL		WaitForSingleObject
KERNEL32.DLL		GetExitCodeProcess
KERNEL32.DLL		CloseHandle
KERNEL32.DLL		LoadLibraryA
KERNEL32.DLL		GetProcAddress
KERNEL32.DLL		FreeLibrary
KERNEL32.DLL		Sleep
KERNEL32.DLL		SetEnvironmentVariableA
KERNEL32.DLL		InterlockedDecrement
KERNEL32.DLL		OutputDebugStringA
KERNEL32.DLL		InterlockedIncrement
KERNEL32.DLL		WideCharToMultiByte
KERNEL32.DLL		MultiByteToWideChar
KERNEL32.DLL		GetLastError
KERNEL32.DLL		LocalAlloc
KERNEL32.DLL		GetNamedPipeInfo
KERNEL32.DLL		GetTempFileNameA
KERNEL32.DLL		GetTempPathA
KERNEL32.DLL		FormatMessageA
KERNEL32.DLL		LocalFree
KERNEL32.DLL		CreateMutexA
KERNEL32.DLL		GetVersion
ADVAPI32.dll		ReportEventA
ADVAPI32.dll		DeregisterEventSource
ADVAPI32.dll		RegEnumValueA
ADVAPI32.dll		RegEnumKeyExA
ADVAPI32.dll		GetUserNameA
ADVAPI32.dll		RegCreateKeyExA
ADVAPI32.dll		RegDeleteValueA
ADVAPI32.dll		RegSetValueExA
ADVAPI32.dll		RegOpenKeyExA
ADVAPI32.dll		RegQueryValueExA
ADVAPI32.dll		RegOpenKeyA
ADVAPI32.dll		RegQueryInfoKeyA
ADVAPI32.dll		RegCloseKey
ADVAPI32.dll		RegEnumKeyA
ADVAPI32.dll		RegQueryValueA
ADVAPI32.dll		RegisterEventSourceA
COMCTL32.dll		InitCommonControlsEx
COMCTL32.dll		ImageList_AddMasked
COMCTL32.dll		ImageList_Destroy
COMCTL32.dll		ImageList_Create
COMCTL32.dll		ImageList_Add
COMCTL32.dll		ImageList_Draw
COMCTL32.dll	17
comdlg32.dll		GetSaveFileNameA
comdlg32.dll		ChooseColorA
comdlg32.dll		GetOpenFileNameA
GDI32.dll		SetBkMode
GDI32.dll		PatBlt
GDI32.dll		SetPixel
GDI32.dll		CreateSolidBrush
GDI32.dll		GetPixel
GDI32.dll		MaskBlt
GDI32.dll		TextOutA
GDI32.dll		LineTo
GDI32.dll		MoveToEx
GDI32.dll		Ellipse
GDI32.dll		GetDeviceCaps
GDI32.dll		ExtCreatePen
GDI32.dll		CreateFontA
GDI32.dll		CreateFontIndirectA
GDI32.dll		GetObjectType
GDI32.dll		GetStockObject
GDI32.dll		Rectangle
GDI32.dll		GetBitmapDimensionEx
GDI32.dll		SetDIBits
GDI32.dll		GetDIBits
GDI32.dll		DeleteObject
GDI32.dll		CreateCompatibleDC
GDI32.dll		GetObjectA
GDI32.dll		SelectObject
GDI32.dll		CreateBitmap
GDI32.dll		SetBkColor
GDI32.dll		BitBlt
GDI32.dll		SetTextColor
GDI32.dll		CreateDCA
GDI32.dll		DeleteDC
GDI32.dll		GetTextExtentPoint32A
GDI32.dll		CreateCompatibleBitmap
MSVCRT.dll		vfprintf
MSVCRT.dll		_strdup
MSVCRT.dll		_mbstok
MSVCRT.dll		_vsnprintf
MSVCRT.dll		longjmp
MSVCRT.dll		fopen
MSVCRT.dll		_beginthreadex
MSVCRT.dll		calloc
MSVCRT.dll		_tzset
MSVCRT.dll		_daylight
MSVCRT.dll		_timezone
MSVCRT.dll		freopen
MSVCRT.dll		puts
MSVCRT.dll		ldiv
MSVCRT.dll		_beginthread
MSVCRT.dll		_endthread
MSVCRT.dll		_ftime
MSVCRT.dll		__dllonexit
MSVCRT.dll		_onexit
MSVCRT.dll		_exit
MSVCRT.dll		_XcptFilter
MSVCRT.dll		__p___initenv
MSVCRT.dll		__getmainargs
MSVCRT.dll		_initterm
MSVCRT.dll		__setusermatherr
MSVCRT.dll		_adjust_fdiv
MSVCRT.dll		__p__commode
MSVCRT.dll		__p__fmode
MSVCRT.dll		__set_app_type
MSVCRT.dll		_except_handler3
MSVCRT.dll		_controlfp
MSVCRT.dll		_fmode
MSVCRT.dll		_strnicmp
MSVCRT.dll		_fstat
MSVCRT.dll		_fileno
MSVCRT.dll		_close
MSVCRT.dll		_stricmp
MSVCRT.dll		_unlink
MSVCRT.dll		_write
MSVCRT.dll		_read
MSVCRT.dll		_lseek
MSVCRT.dll		_open
MSVCRT.dll		_putenv
MSVCRT.dll		_findclose
MSVCRT.dll		_findnext
MSVCRT.dll		_findfirst
MSVCRT.dll		ldexp
MSVCRT.dll		frexp
MSVCRT.dll		fputs
MSVCRT.dll		fputc
MSVCRT.dll		fgetc
MSVCRT.dll		tmpfile
MSVCRT.dll		strspn
MSVCRT.dll		localeconv
MSVCRT.dll		abort
MSVCRT.dll		_getpid
MSVCRT.dll		bsearch
MSVCRT.dll		_HUGE
MSVCRT.dll		fmod
MSVCRT.dll		sqrt
MSVCRT.dll		log10
MSVCRT.dll		log
MSVCRT.dll		exp
MSVCRT.dll		tanh
MSVCRT.dll		cosh
MSVCRT.dll		sinh
MSVCRT.dll		atan2
MSVCRT.dll		atan
MSVCRT.dll		acos
MSVCRT.dll		asin
MSVCRT.dll		tan
MSVCRT.dll		cos
MSVCRT.dll		sin
MSVCRT.dll		pow
MSVCRT.dll		floor
MSVCRT.dll		ceil
MSVCRT.dll		fabs
MSVCRT.dll		getc
MSVCRT.dll		strpbrk
MSVCRT.dll		_tzname
MSVCRT.dll		_umask
MSVCRT.dll		_chsize
MSVCRT.dll		_dup
MSVCRT.dll		_itoa
MSVCRT.dll		_ltoa
MSVCRT.dll		_strupr
MSVCRT.dll		_stat
MSVCRT.dll		_getcwd
MSVCRT.dll		_utime
MSVCRT.dll		_chmod
MSVCRT.dll		_creat
MSVCRT.dll		_mkdir
MSVCRT.dll		_rmdir
MSVCRT.dll		_sopen
MSVCRT.dll		_chdir
MSVCRT.dll		perror
MSVCRT.dll		_access
MSVCRT.dll		_open_osfhandle
MSVCRT.dll		_fdopen
MSVCRT.dll		strncat
MSVCRT.dll		rename
MSVCRT.dll		strtok
MSVCRT.dll		strtoul
MSVCRT.dll		abs
MSVCRT.dll		fgets
MSVCRT.dll		printf
MSVCRT.dll		putchar
MSVCRT.dll		mktime
MSVCRT.dll		sscanf
MSVCRT.dll		_finite
MSVCRT.dll		strtol
MSVCRT.dll		sprintf
MSVCRT.dll		strerror
MSVCRT.dll		rewind
MSVCRT.dll		_get_osfhandle
MSVCRT.dll		_setmode
MSVCRT.dll		setvbuf
MSVCRT.dll		fseek
MSVCRT.dll		fflush
MSVCRT.dll		fread
MSVCRT.dll		ftell
MSVCRT.dll		_isnan
MSVCRT.dll		_fpclass
MSVCRT.dll		_ftol
MSVCRT.dll		modf
MSVCRT.dll		tolower
MSVCRT.dll		memchr
MSVCRT.dll		strstr
MSVCRT.dll		atol
MSVCRT.dll		gmtime
MSVCRT.dll		asctime
MSVCRT.dll		ctime
MSVCRT.dll		localtime
MSVCRT.dll		__p__environ
MSVCRT.dll		vsprintf
MSVCRT.dll		realloc
MSVCRT.dll		qsort
MSVCRT.dll		strcoll
MSVCRT.dll		strcat
MSVCRT.dll		fwrite
MSVCRT.dll		strncpy
MSVCRT.dll		malloc
MSVCRT.dll		memmove
MSVCRT.dll		memcmp
MSVCRT.dll		memset
MSVCRT.dll		_iob
MSVCRT.dll		exit
MSVCRT.dll		setlocale
MSVCRT.dll		getenv
MSVCRT.dll		strrchr
MSVCRT.dll		time
MSVCRT.dll		strftime
MSVCRT.dll		fprintf
MSVCRT.dll		atoi
MSVCRT.dll		_setjmp3
MSVCRT.dll		free
MSVCRT.dll		memcpy
MSVCRT.dll		__mb_cur_max
MSVCRT.dll		_isctype
MSVCRT.dll		_pctype
MSVCRT.dll		strcpy
MSVCRT.dll		fclose
MSVCRT.dll		strchr
MSVCRT.dll		_errno
MSVCRT.dll		strcmp
MSVCRT.dll		toupper
MSVCRT.dll		strlen
MSVCRT.dll		strncmp
ODBC32.dll	21
ODBC32.dll	17
ODBC32.dll	57
ODBC32.dll	11
ODBC32.dll	43
ODBC32.dll	13
ODBC32.dll	59
ODBC32.dll	7
ODBC32.dll	41
ODBC32.dll	50
ODBC32.dll	1
ODBC32.dll	2
ODBC32.dll	20
ODBC32.dll	61
ODBC32.dll	42
ODBC32.dll	54
ODBC32.dll	40
ODBC32.dll	56
ODBC32.dll	60
ODBC32.dll	47
ODBC32.dll	65
ODBC32.dll	66
ODBC32.dll	67
ODBC32.dll	52
ODBC32.dll	53
ODBC32.dll	70
ODBC32.dll	16
ODBC32.dll	15
ODBC32.dll	14
ODBC32.dll	23
ODBC32.dll	9
ODBC32.dll	10
ODBC32.dll	4
ODBC32.dll	6
ODBC32.dll	58
ODBC32.dll	72
ODBC32.dll	12
ODBC32.dll	48
ODBC32.dll	49
ODBC32.dll	3
ODBC32.dll	45
ODBC32.dll	51
ODBC32.dll	19
ODBC32.dll	63
ODBC32.dll	18
ole32.dll		CoInitialize
ole32.dll		CoUninitialize
ole32.dll		CoCreateInstanceEx
ole32.dll		CoCreateInstance
ole32.dll		MkParseDisplayName
ole32.dll		CreateBindCtx
ole32.dll		CLSIDFromString
ole32.dll		StringFromCLSID
ole32.dll		CLSIDFromProgID
ole32.dll		CoTaskMemFree
ole32.dll		CoTaskMemAlloc
ole32.dll		OleSetContainedObject
ole32.dll		OleCreate
ole32.dll		OleInitialize
ole32.dll		OleUninitialize
ole32.dll		CoDisconnectObject
OLEAUT32.dll	25
OLEAUT32.dll	9
OLEAUT32.dll	8
OLEAUT32.dll	16
OLEAUT32.dll	40
OLEAUT32.dll	15
OLEAUT32.dll	161
OLEAUT32.dll	162
OLEAUT32.dll	23
OLEAUT32.dll	17
OLEAUT32.dll	77
OLEAUT32.dll	19
OLEAUT32.dll	20
OLEAUT32.dll	232
OLEAUT32.dll	82
OLEAUT32.dll	185
OLEAUT32.dll	21
OLEAUT32.dll	18
OLEAUT32.dll	148
OLEAUT32.dll	22
OLEAUT32.dll	184
OLEAUT32.dll	150
OLEAUT32.dll	197
OLEAUT32.dll	102
OLEAUT32.dll	2
OLEAUT32.dll	6
SHELL32.dll		ShellExecuteA
SHELL32.dll		Shell_NotifyIconA
SHELL32.dll		SHGetMalloc
SHELL32.dll		ExtractIconA
SHELL32.dll		SHBrowseForFolderA
SHELL32.dll		SHGetPathFromIDListA
SHELL32.dll		ExtractIconExA
SHELL32.dll		SHGetSpecialFolderLocation
USER32.dll		DispatchMessageA
USER32.dll		TranslateMessage
USER32.dll		PeekMessageA
USER32.dll		MsgWaitForMultipleObjects
USER32.dll		SendMessageA
USER32.dll		GetWindowTextA
USER32.dll		ReleaseDC
USER32.dll		GetDC
USER32.dll		LoadCursorFromFileA
USER32.dll		GetIconInfo
USER32.dll		SetWindowTextA
USER32.dll		SetWindowLongA
USER32.dll		CreateWindowExA
USER32.dll		GetWindowLongA
USER32.dll		IsWindow
USER32.dll		MessageBoxA
USER32.dll		InvalidateRect
USER32.dll		EnableWindow
USER32.dll		SetMenuItemInfoA
USER32.dll		IsWindowEnabled
USER32.dll		IsWindowVisible
USER32.dll		SetWindowPos
USER32.dll		GetFocus
USER32.dll		PostThreadMessageA
USER32.dll		DestroyWindow
USER32.dll		GetDlgItem
USER32.dll		GetMenuItemInfoA
USER32.dll		IsMenu
USER32.dll		UnregisterClassA
USER32.dll		SetFocus
USER32.dll		IsIconic
USER32.dll		UpdateWindow
USER32.dll		RegisterClassA
USER32.dll		LoadCursorA
USER32.dll		GetClientRect
USER32.dll		GetSysColor
USER32.dll		CallWindowProcA
USER32.dll		GetParent
USER32.dll		SetCursor
USER32.dll		GetKeyState
USER32.dll		EndPaint
USER32.dll		GetCursorPos
USER32.dll		BeginPaint
USER32.dll		DefWindowProcA
USER32.dll		PtInRect
USER32.dll		GetWindowRect
USER32.dll		SetTimer
USER32.dll		SetCapture
USER32.dll		KillTimer
USER32.dll		ReleaseCapture
USER32.dll		ClientToScreen
USER32.dll		GetCapture
USER32.dll		DrawTextExA
USER32.dll		SetMenu
USER32.dll		SetMenuItemBitmaps
USER32.dll		AppendMenuA
USER32.dll		CreateMenu
USER32.dll		ModifyMenuA
USER32.dll		CheckMenuItem
USER32.dll		CheckMenuRadioItem
USER32.dll		GetGuiResources
USER32.dll		GetSystemMetrics
USER32.dll		GetActiveWindow
USER32.dll		MessageBeep
USER32.dll		CreateAcceleratorTableA
USER32.dll		GetMessageA
USER32.dll		TranslateAcceleratorA
USER32.dll		IsDialogMessageA
USER32.dll		DestroyAcceleratorTable
USER32.dll		SystemParametersInfoA
USER32.dll		SendMessageTimeoutA
USER32.dll		GetDesktopWindow
USER32.dll		GetClassLongA
USER32.dll		CopyIcon
USER32.dll		DestroyIcon
USER32.dll		DefDlgProcA
USER32.dll		GetClassNameA
USER32.dll		PostQuitMessage
USER32.dll		LoadIconA
USER32.dll		SetRect
USER32.dll		GetForegroundWindow
USER32.dll		EnumWindows
USER32.dll		SetForegroundWindow
USER32.dll		BringWindowToTop
USER32.dll		GetWindow
USER32.dll		wsprintfA
USER32.dll		FindWindowExA
USER32.dll		ShowWindow
USER32.dll		SetParent
USER32.dll		GetWindowTextLengthA
WINMM.dll		timeSetEvent
WINMM.dll		midiOutClose
WINMM.dll		midiOutReset
WINMM.dll		midiOutOpen
WINMM.dll		PlaySoundA
WINMM.dll		mciSendStringA
WINMM.dll		timeKillEvent
WSOCK32.dll	9
WSOCK32.dll	23
WSOCK32.dll	52
WSOCK32.dll	8
WSOCK32.dll	3
WSOCK32.dll	19
WSOCK32.dll	16
WSOCK32.dll	22
WSOCK32.dll	6
WSOCK32.dll	13
WSOCK32.dll	2
WSOCK32.dll	1
WSOCK32.dll	4
WSOCK32.dll	10
WSOCK32.dll	11
WSOCK32.dll	15
WSOCK32.dll	55
WSOCK32.dll	56
WSOCK32.dll	53
WSOCK32.dll	54
WSOCK32.dll	51
WSOCK32.dll	57
WSOCK32.dll	12
WSOCK32.dll	21
WSOCK32.dll	5
WSOCK32.dll	18
WSOCK32.dll	112
WSOCK32.dll	151
WSOCK32.dll	7
WSOCK32.dll	116
WSOCK32.dll	115
WSOCK32.dll	14
WSOCK32.dll	111

ord	entry_va	function_name
1	0x98c3e	GetSMErrorText
2	0xc11f3	OnUpdateBool
3	0xc124d	OnUpdateInt
4	0xc128a	OnUpdateReal
5	0xc12c5	OnUpdateString
6	0xc12f5	OnUpdateStringUnempty
7	0x52bbb	PHP_MD5Final
8	0x52af5	PHP_MD5Init
9	0x52b1d	PHP_MD5Update
10	0x6a37d	PHP_SHA1Final
11	0x6a2b0	PHP_SHA1Init
12	0x6a2df	PHP_SHA1Update
13	0x98c12	TSMClose
14	0x988e9	TSendMail
15	0x65b09	ValidateFormat
16	0x9ac25	XML_DefaultCurrent
17	0x9ac62	XML_ErrorString
18	0x9ac7a	XML_ExpatVersion
19	0x9ac80	XML_ExpatVersionInfo
20	0x9a264	XML_ExternalEntityParserCreate
21	0x9ac18	XML_FreeContentModel
22	0x9a6e3	XML_GetBase
23	0x9aa09	XML_GetBuffer
24	0x9ab2e	XML_GetCurrentByteCount
25	0x9ab13	XML_GetCurrentByteIndex
26	0x9abbb	XML_GetCurrentColumnNumber
27	0x9ab7c	XML_GetCurrentLineNumber
28	0x9ab08	XML_GetErrorCode
29	0x9acac	XML_GetFeatureList
30	0x9a6f9	XML_GetIdAttributeIndex
31	0x9ab4c	XML_GetInputContext
32	0x9a6ee	XML_GetSpecifiedAttributeCount
33	0x9ac18	XML_MemFree
34	0x9abf9	XML_MemMalloc
35	0x9ac06	XML_MemRealloc
36	0x9a8f6	XML_Parse
37	0x9a97a	XML_ParseBuffer
38	0x99d86	XML_ParserCreate
39	0x99d97	XML_ParserCreateNS
40	0x99db3	XML_ParserCreate_MM
41	0x9a4b2	XML_ParserFree
42	0x9a10f	XML_ParserReset
43	0x9a873	XML_SetAttlistDeclHandler
44	0x9a6a4	XML_SetBase
45	0x9a753	XML_SetCdataSectionHandler
46	0x9a72f	XML_SetCharacterDataHandler
47	0x9a747	XML_SetCommentHandler
48	0x9a77e	XML_SetDefaultHandler
49	0x9a791	XML_SetDefaultHandlerExpand
50	0x9a7a4	XML_SetDoctypeDeclHandler
51	0x9a864	XML_SetElementDeclHandler
52	0x9a704	XML_SetElementHandler
53	0x9a1ed	XML_SetEncoding
54	0x9a772	XML_SetEndCdataSectionHandler
55	0x9a7c3	XML_SetEndDoctypeDeclHandler
56	0x9a723	XML_SetEndElementHandler
57	0x9a806	XML_SetEndNamespaceDeclHandler
58	0x9a882	XML_SetEntityDeclHandler
59	0x9a81e	XML_SetExternalEntityRefHandler
60	0x9a82a	XML_SetExternalEntityRefHandlerArg
61	0x9a7e7	XML_SetNamespaceDeclHandler
62	0x9a812	XML_SetNotStandaloneHandler
63	0x9a7db	XML_SetNotationDeclHandler
64	0x9a8a0	XML_SetParamEntityParsing
65	0x9a73b	XML_SetProcessingInstructionHandler
66	0x9a63c	XML_SetReturnNSTriplet
67	0x9a842	XML_SetSkippedEntityHandler
68	0x9a766	XML_SetStartCdataSectionHandler
69	0x9a7b7	XML_SetStartDoctypeDeclHandler
70	0x9a717	XML_SetStartElementHandler
71	0x9a7fa	XML_SetStartNamespaceDeclHandler
72	0x9a84e	XML_SetUnknownEncodingHandler
73	0x9a7cf	XML_SetUnparsedEntityDeclHandler
74	0x9a68f	XML_SetUserData
75	0x9a891	XML_SetXmlDeclHandler
76	0x9a5e6	XML_UseForeignDTD
77	0x9a5de	XML_UseParserAsHandlerArg
78	0xad3b4	_array_init
79	0xbc066	_convert_to_string
80	0xb8f74	_ecalloc
81	0xb8dba	_efree
82	0xb8a50	_emalloc
83	0xb8fec	_erealloc
84	0xb92a4	_estrdup
85	0xb931d	_estrndup
86	0xad3ea	_object_and_properties_init
87	0xad4a7	_object_init
88	0xad48c	_object_init_ex
89	0x380cb	_php_error_log
90	0x51938	_php_math_basetolong
91	0x519d7	_php_math_basetozval
92	0x51ac6	_php_math_longtobase
93	0x52240	_php_math_number_format
94	0x51b28	_php_math_zvaltobase
95	0xe3c0	_php_stream_alloc
96	0xfd56	_php_stream_cast
97	0xf058	_php_stream_copy_to_mem
98	0xf195	_php_stream_copy_to_stream
99	0xea34	_php_stream_eof
100	0xe774	_php_stream_filter_alloc
101	0xed2d	_php_stream_flush
102	0xfb2f	_php_stream_fopen
103	0xfcb8	_php_stream_fopen_from_fd
104	0xf31d	_php_stream_fopen_from_file
105	0xf380	_php_stream_fopen_from_pipe
106	0xf254	_php_stream_fopen_temporary_file
107	0xf2ac	_php_stream_fopen_tmpfile
108	0xf6e2	_php_stream_fopen_with_path
109	0xe4b2	_php_stream_free
110	0xec02	_php_stream_get_line
111	0x110b1	_php_stream_get_url_stream_wrappers_hash
112	0xea97	_php_stream_getc
113	0x10e1e	_php_stream_make_seekable
114	0x5ba9	_php_stream_memory_create
115	0x5c2c	_php_stream_memory_get_buffer
116	0x5be2	_php_stream_memory_open
117	0x10c4a	_php_stream_open_wrapper_as_file
118	0x10d4f	_php_stream_open_wrapper_as_file_handle
119	0x108bf	_php_stream_open_wrapper_ex
120	0x1060f	_php_stream_opendir
121	0xeff4	_php_stream_passthru
122	0xee1d	_php_stream_printf
123	0xea6e	_php_stream_putc
124	0xeabd	_php_stream_puts
125	0xe87a	_php_stream_read
126	0x1081c	_php_stream_readdir
127	0xee6a	_php_stream_seek
128	0xef9e	_php_stream_set_option
129	0x621e	_php_stream_sock_open_from_socket
130	0x62a2	_php_stream_sock_open_host
131	0x415b6	_php_stream_sock_open_unix
132	0xeb0f	_php_stream_stat
133	0x105d1	_php_stream_stat_path
134	0xee62	_php_stream_tell
135	0x5e02	_php_stream_temp_create
136	0x5e4f	_php_stream_temp_open
137	0xed67	_php_stream_write
138	0xb8cac	_safe_emalloc
139	0x20edf	_xml_zval_strdup
140	0xba7d8	_zend_bailout
141	0xac1ea	_zend_get_parameters_array
142	0xac3a4	_zend_get_parameters_array_ex
143	0xc2706	_zend_list_addref
144	0xc263c	_zend_list_delete
145	0xc26b7	_zend_list_find
146	0xaf111	_zval_copy_ctor
147	0xaefb0	_zval_dtor
148	0xb6636	_zval_ptr_dtor
149	0xad578	add_assoc_bool_ex
150	0xad626	add_assoc_double_ex
151	0xad4c1	add_assoc_function
152	0xad4d8	add_assoc_long_ex
153	0xad52c	add_assoc_null_ex
154	0xad5d2	add_assoc_resource_ex
155	0xad680	add_assoc_string_ex
156	0xad712	add_assoc_stringl_ex
157	0xad79e	add_assoc_zval_ex
158	0xbeabc	add_char_to_string
159	0xbc76e	add_function
160	0xadd49	add_get_assoc_string_ex
161	0xadddd	add_get_assoc_stringl_ex
162	0xadebd	add_get_index_double
163	0xade6b	add_get_index_long
164	0xadf15	add_get_index_string
165	0xadfa5	add_get_index_stringl
166	0xad85b	add_index_bool
167	0xad901	add_index_double
168	0xad7c3	add_index_long
169	0xad813	add_index_null
170	0xad8b1	add_index_resource
171	0xad957	add_index_string
172	0xad9e5	add_index_stringl
173	0xada6d	add_index_zval
174	0xadb22	add_next_index_bool
175	0xadbc4	add_next_index_double
176	0xada8e	add_next_index_long
177	0xadadc	add_next_index_null
178	0xadb76	add_next_index_resource
179	0xadc18	add_next_index_string
180	0xadca4	add_next_index_stringl
181	0xadd2a	add_next_index_zval
182	0xae084	add_property_bool_ex
183	0xae181	add_property_double_ex
184	0xae02f	add_property_long_ex
185	0xae0df	add_property_null_ex
186	0xae12c	add_property_resource_ex
187	0xae1dc	add_property_string_ex
188	0xae26f	add_property_stringl_ex
189	0xae2fc	add_property_zval_ex
190	0xbeb1b	add_string_to_string
191	0x1595bc	alloc_globals_id
192	0xcfd5	ap_php_snprintf
193	0xd899	ap_php_vsnprintf
194	0xbdf52	bitwise_and_function
195	0xbdb05	bitwise_not_function
196	0xbdc01	bitwise_or_function
197	0xbe2a3	bitwise_xor_function
198	0xbd9bb	boolean_not_function
199	0xbd74b	boolean_xor_function
200	0xb6c40	call_user_function
201	0xb6d56	call_user_function_ex
202	0x88e2	cfg_get_double
203	0x887f	cfg_get_long
204	0x8946	cfg_get_string
205	0x159414	com_globals_id
206	0xbef2d	compare_function
207	0xc32ac	compile_file
208	0xc3490	compile_filename
209	0xc36eb	compile_string
210	0x159674	compiler_globals_id
211	0xbebb0	concat_function
212	0xbb90c	convert_scalar_to_number
213	0xbc2af	convert_to_array
214	0xbbed4	convert_to_boolean
215	0xbbd3e	convert_to_double
216	0xbbbae	convert_to_long
217	0xbbbc1	convert_to_long_base
218	0xbbebc	convert_to_null
219	0xbc428	convert_to_object
220	0x1594ec	core_globals_id
221	0xbfebb	decrement_function
222	0xb8416	destroy_op_array
223	0xb8341	destroy_zend_class
224	0xb831d	destroy_zend_function
225	0x80e6	display_ini_entries
226	0xc116e	display_link_numbers
227	0xbd154	div_function
228	0xb2082	do_bind_function_or_class
229	0x5a40	dummy_indent
230	0x139c4c	empty_string
231	0xd38ba	execute
232	0xb5b40	execute_internal
233	0x1595c0	executor_globals_id
234	0x2bde	expand_filepath
235	0x1374e8	extension_version_info
236	0x1593fc	file_globals_id
237	0x145460	first_arg_force_ref
238	0x480d5	flock
239	0xbb69a	free_estring
240	0xb1eb5	function_add_ref
241	0xb6514	get_active_function_name
242	0xb891e	get_binary_op
243	0x7e558	get_module
244	0xb88f2	get_unary_op
245	0xba983	get_zend_version
246	0x9991a	gettimeofday
247	0xc38de	highlight_file
248	0xc3979	highlight_string
249	0xbfb2f	increment_function
250	0x159578	ini_scanner_globals_id
251	0xb81d0	init_op_array
252	0xbf931	is_equal_function
253	0xbf6ed	is_identical_function
254	0xbf982	is_not_equal_function
255	0xbf8f1	is_not_identical_function
256	0xbf9d3	is_smaller_function
257	0xbfa81	is_smaller_or_equal_function
258	0x15957c	language_scanner_globals_id
259	0x159580	le_index_ptr
260	0xc3a0b	lex_scan
261	0x6be69	localeconv_r
262	0x5284c	make_digest
263	0x6a007	make_sha1_digest
264	0x90ec7	mmcache_compile_file
265	0x96069	mmcache_zend_startup
266	0xbd4a4	mod_function
267	0x1596c0	module_registry
268	0xbce2b	mul_function
269	0xbc59e	multi_convert_to_double_ex
270	0xbc4b6	multi_convert_to_long_ex
271	0xbc686	multi_convert_to_string_ex
272	0xbee69	numeric_compare_function
273	0xc30c0	open_file_for_scanning
274	0x1594e8	output_globals_id
275	0xe40f5	pclose
276	0x62338	pcre_get_compiled_regex
277	0x29f52	php_COM_addref
278	0x2cfc6	php_COM_call_function_handler
279	0x2a03c	php_COM_clone
280	0x2a0f9	php_COM_destruct
281	0x2a0a0	php_COM_error_message
282	0x2f352	php_COM_export_as_sink
283	0x2f4b2	php_COM_export_object
284	0x29e78	php_COM_get_ids_of_names
285	0x2d9e7	php_COM_get_le_comval
286	0x2c632	php_COM_get_property_handler
287	0x29cfb	php_COM_invoke
288	0x2d618	php_COM_load_typelib
289	0x2cf0e	php_COM_object_from_dispatch
290	0x29eff	php_COM_release
291	0x29f65	php_COM_set
292	0x2ca6f	php_COM_set_property_handler
293	0x2e988	php_OLECHAR_to_char
294	0x2fa61	php_VARIANT_get_le_variant
295	0x8e0f	php_add_tick_function
296	0x6fc6f	php_addcslashes
297	0x6fdb4	php_addslashes
298	0x6fdd2	php_addslashes_ex
299	0x33400	php_array_merge
300	0x991d	php_asctime_r
301	0x36958	php_base64_decode
302	0x3682c	php_base64_encode
303	0x6d450	php_basename
304	0x6839	php_body_write
305	0x78dea	php_canonicalize_version
306	0x2e8f0	php_char_to_OLECHAR
307	0x6fef0	php_char_to_str
308	0x239b	php_check_open_basedir
309	0x23ae	php_check_open_basedir_ex
310	0x246f	php_check_safe_mode_include_dir
311	0x227c	php_check_specific_open_basedir
312	0xb3a6	php_checkuid
313	0xb03d	php_checkuid_ex
314	0x4f80f	php_combined_lcg
315	0x5e94	php_connect_nonb
316	0x5ead	php_connect_nonb_win32
317	0x45265	php_copy_file
318	0x98eb	php_ctime_r
319	0x76e65	php_debug_zval_dump
320	0x7f1c	php_default_post_reader
321	0x93ee	php_default_treat_data
322	0x6d5d7	php_dirname
323	0x6e0f	php_end_implicit_flush
324	0x6981	php_end_ob_buffer
325	0x6dd0	php_end_ob_buffers
326	0x3404	php_error_docref0
327	0x3426	php_error_docref1
328	0x3446	php_error_docref2
329	0x4a580	php_escape_html_entities
330	0x4063b	php_escape_shell_arg
331	0x405b7	php_escape_shell_cmd
332	0x55d4	php_execute_script
333	0x6c8d2	php_explode
334	0xe2b4	php_file_le_pstream
335	0xe2ae	php_file_le_stream
336	0x480e5	php_flock
337	0x252d	php_fopen_primary_script
338	0x28c6	php_fopen_with_path
339	0xb3bd	php_get_current_user
340	0x38fc6	php_get_highlight_struct
341	0x36bdb	php_get_inf
342	0x36bd4	php_get_nan
343	0x7e6d	php_get_output_start_filename
344	0x7e81	php_get_output_start_lineno
345	0x8afc	php_get_temporary_directory
346	0x4d616	php_get_uname
347	0x4bf6d	php_getimagetype
348	0x56d26	php_getlastmod
349	0x994f	php_gmtime_r
350	0x585d	php_handle_aborted_connection
351	0x58b2	php_handle_auth_data
352	0x5564	php_handle_special_queries
353	0x49fbe	php_header
354	0x6858	php_header_write
355	0x5fc6	php_hostconnect
356	0x3498	php_html_puts
357	0x4be0c	php_image_type_to_mime_type
358	0x6cbb2	php_implode
359	0x117ebc	php_import_environment_variables
360	0x4d5ef	php_info_html_esc
361	0x4e874	php_info_print_box_end
362	0x4e83d	php_info_print_box_start
363	0x1df8	php_info_print_css
364	0x4e88d	php_info_print_hr
365	0x4d5d2	php_info_print_style
366	0x4e8a9	php_info_print_table_colspan_header
367	0x4e828	php_info_print_table_end
368	0x4e8f4	php_info_print_table_header
369	0x4e9f3	php_info_print_table_row
370	0x4e80c	php_info_print_table_start
371	0x14dd70	php_ini_opened_path
372	0x14dd74	php_ini_scanned_files
373	0x413c2	php_le_stream_context
374	0x596c	php_lint_script
375	0x98ad	php_localtime_r
376	0x2f21	php_log_err
377	0x492ba	php_lookup_hostname
378	0x502e5	php_mail
379	0x497d	php_module_shutdown
380	0x4967	php_module_shutdown_for_exec
381	0x4968	php_module_shutdown_wrapper
382	0x3d57	php_module_startup
383	0x64769	php_mt_rand
384	0x64718	php_mt_srand
385	0x7456	php_ob_get_buffer
386	0x7491	php_ob_get_length
387	0x73cb	php_ob_handler_used
388	0x6ee8	php_ob_init_conflict
389	0x6e24	php_ob_set_internal_handler
390	0x8b35	php_open_temporary_fd
391	0x8c32	php_open_temporary_file
392	0x675f	php_output_activate
393	0x67f6	php_output_register_constants
394	0x67da	php_output_set_status
395	0x66cf	php_output_startup
396	0x62df8	php_pcre_replace
397	0x3c83d	php_print_credits
398	0x4d840	php_print_info
399	0x4d7a8	php_print_info_htmlhead
400	0x3021	php_printf
401	0x2d9ed	php_pval_to_variant
402	0x2da60	php_pval_to_variant_ex
403	0x2da80	php_pval_to_variant_ex2
404	0x6469e	php_rand
405	0x99c2	php_rand_r
406	0x75c65	php_raw_url_decode
407	0x75b42	php_raw_url_encode
408	0x6510b	php_reg_replace
409	0x8987	php_register_info_logo
410	0x1004f	php_register_url_stream_wrapper
411	0x100f3	php_register_url_stream_wrapper_volatile
412	0x8ee2	php_register_variable
413	0x8f63	php_register_variable_ex
414	0x8f05	php_register_variable_safe
415	0x8e38	php_remove_tick_function
416	0x75192	php_replace_controlchars
417	0x75139	php_replace_controlchars_ex
418	0x37c2	php_request_shutdown
419	0x37ab	php_request_shutdown_for_exec
420	0x35d2	php_request_startup
421	0x66b56	php_session_register_module
422	0x66b0c	php_session_register_serializer
423	0x6791b	php_session_start
424	0x62ea	php_set_sock_blocking
425	0x49ff3	php_setcookie
426	0xff658	php_sig_bmp
427	0xff650	php_sig_gif
428	0xff688	php_sig_iff
429	0xff67c	php_sig_jp2
430	0xff678	php_sig_jpc
431	0xff664	php_sig_jpg
432	0xff668	php_sig_png
433	0xff654	php_sig_psd
434	0xff660	php_sig_swc
435	0xff65c	php_sig_swf
436	0xff670	php_sig_tif_ii
437	0xff674	php_sig_tif_mm
438	0x61b5	php_socket_strerror
439	0x8d9e	php_sprintf
440	0x64670	php_srand
441	0x65eb4	php_sscanf_internal
442	0x6dfa	php_start_implicit_flush
443	0x6881	php_start_ob_buffer
444	0x6926	php_start_ob_buffer_named
445	0x3d25	php_startup_extensions
446	0x56b91	php_statpage
447	0x935a	php_std_post_handler
448	0x6ff99	php_str_to_str
449	0x10f23	php_stream_context_alloc
450	0x10ef0	php_stream_context_free
451	0x10f7d	php_stream_context_get_option
452	0x10eb1	php_stream_context_set
453	0x10fce	php_stream_context_set_option
454	0xe808	php_stream_filter_append
455	0xe68d	php_stream_filter_create
456	0xe7b2	php_stream_filter_free
457	0xe7e0	php_stream_filter_prepend
458	0xe645	php_stream_filter_register_factory
459	0xe830	php_stream_filter_remove
460	0xe66c	php_stream_filter_unregister_factory
461	0xe347	php_stream_from_persistent_id
462	0xeb5f	php_stream_locate_eol
463	0x103d7	php_stream_locate_url_wrapper
464	0x10f58	php_stream_notification_alloc
465	0x10f64	php_stream_notification_free
466	0x10ec0	php_stream_notification_notify
467	0xfab5	php_stream_parse_fopen_modes
468	0x118698	php_stream_stdio_ops
469	0x118b50	php_stream_userspace_dir_ops
470	0x118b28	php_stream_userspace_ops
471	0x10845	php_stream_wrapper_log_error
472	0x7137b	php_strip_tags
473	0x2b86	php_strip_url_passwd
474	0x6fa9a	php_stripcslashes
475	0x6f630	php_stripslashes
476	0x6d91b	php_stristr
477	0x110ce	php_strlcat
478	0x1112f	php_strlcpy
479	0x99f6	php_strtok_r
480	0x6d370	php_strtolower
481	0x6d290	php_strtoupper
482	0x6edbb	php_strtr
483	0xff68c	php_tiff_bytes_per_format
484	0x6c248	php_trim
485	0x4a2ee	php_unescape_html_entities
486	0x89cf	php_unregister_info_logo
487	0x100d2	php_unregister_url_stream_wrapper
488	0x759b5	php_url_decode
489	0x7588d	php_url_encode
490	0x750ca	php_url_free
491	0x751a9	php_url_parse
492	0x751c0	php_url_parse_ex
493	0x76b2c	php_var_dump
494	0x771b7	php_var_export
495	0x7750f	php_var_serialize
496	0x77f03	php_var_unserialize
497	0x2e3fa	php_variant_to_pval
498	0x3078	php_verror
499	0x78f86	php_version_compare
500	0x1593c0	php_win32_core_globals_id
501	0x99bac	php_win_err
502	0x300c	php_write
503	0xe3cf9	popen
504	0xe3d12	popen_ex
505	0x1593d4	ps_globals_id
506	0xe4702	realpath
507	0x17b9f	_regcomp@12
508	0x197c8	_regerror@16
509	0x198d7	_regexec@20
510	0x1b973	_regfree@4
511	0x9b4f	rfc1867_post_handler
512	0xb97e	sapi_activate
513	0xb871	sapi_activate_headers_only
514	0xbe6b	sapi_add_header_ex
515	0xb798	sapi_apply_default_charset
516	0xbc45	sapi_deactivate
517	0xc819	sapi_flush
518	0xc8cc	sapi_force_http_10
519	0xb4ce	sapi_free_header
520	0xb6b3	sapi_get_default_content_type
521	0xb73f	sapi_get_default_content_type_header
522	0xc8b2	sapi_get_fd
523	0xc83e	sapi_get_stat
524	0xc8fb	sapi_get_target_gid
525	0xc8e1	sapi_get_target_uid
526	0xc894	sapi_getenv
527	0x159420	sapi_globals_id
528	0xb4db	sapi_handle_post
529	0xbeb3	sapi_header_op
530	0xbe18	sapi_initialize_empty_request
531	0x159440	sapi_module
532	0xb557	sapi_read_standard_form_data
533	0xc801	sapi_register_default_post_reader
534	0xc7a0	sapi_register_post_entries
535	0xc7c4	sapi_register_post_entry
536	0xc80d	sapi_register_treat_data
537	0xc50b	sapi_send_headers
538	0xb4b3	sapi_shutdown
539	0xb452	sapi_startup
540	0xc7e4	sapi_unregister_post_entry
541	0x145464	second_arg_force_ref
542	0x698ef	session_adapt_url
543	0xbe5f4	shift_left_function
544	0xbe858	shift_right_function
545	0xe4536	shmat
546	0xe4633	shmctl
547	0xe45bd	shmdt
548	0xe4189	shmget
549	0xb9440	shutdown_memory_manager
550	0xe294	spprintf
551	0xb93e1	start_memory_manager
552	0xbed4c	string_compare_function
553	0xbedd8	string_locale_compare_function
554	0x72c27	strnatcmp_ex
555	0xbcb11	sub_function
556	0x145468	third_arg_force_ref
557	0xe1f1e	ts_allocate_id
558	0xe24c0	ts_free_id
559	0xe235d	ts_free_thread
560	0xe210a	ts_resource_ex
561	0xe2575	tsrm_error_set
562	0xe24d0	tsrm_mutex_alloc
563	0xe24f3	tsrm_mutex_free
564	0xe2515	tsrm_mutex_lock
565	0xe2529	tsrm_mutex_unlock
566	0xe253d	tsrm_set_new_thread_begin_handler
567	0xe2559	tsrm_set_new_thread_end_handler
568	0xe1dee	tsrm_shutdown
569	0xe1d20	tsrm_startup
570	0xe24c5	tsrm_thread_id
571	0xe3cf4	tsrm_win32_shutdown
572	0xe3bd0	tsrm_win32_startup
573	0x77ea1	var_destroy
574	0x77e63	var_replace
575	0xe2f7b	virtual_chdir
576	0xe2fe1	virtual_chdir_file
577	0xe3488	virtual_chmod
578	0xe3634	virtual_creat
579	0xe2669	virtual_cwd_shutdown
580	0xe2590	virtual_cwd_startup
581	0xe27e5	virtual_file_ex
582	0xe32c6	virtual_filepath
583	0xe322e	virtual_filepath_ex
584	0xe331f	virtual_fopen
585	0xe276e	virtual_getcwd
586	0xe268c	virtual_getcwd_ex
587	0xe3986	virtual_mkdir
588	0xe353a	virtual_open
589	0xe3ad6	virtual_opendir
590	0xe3b7d	virtual_popen
591	0xe3148	virtual_realpath
592	0xe36e6	virtual_rename
593	0xe3a2e	virtual_rmdir
594	0xe3829	virtual_stat
595	0xe38de	virtual_unlink
596	0xe33dc	virtual_utime
597	0xd8b9	vspprintf
598	0x20d7b	xml_utf8_decode
599	0xc0c92	zend_alter_ini_entry
600	0xbb6b0	zend_atoi
601	0xc019c	zend_binary_strcasecmp
602	0xc00b4	zend_binary_strcmp
603	0xc0230	zend_binary_strncasecmp
604	0xc00fc	zend_binary_strncmp
605	0xc0370	zend_binary_zval_strcasecmp
606	0xc031c	zend_binary_zval_strcmp
607	0xc0397	zend_binary_zval_strncasecmp
608	0xc0343	zend_binary_zval_strncmp
609	0x159658	zend_block_interruptions
610	0xc05b6	zend_compare_arrays
611	0xc05d7	zend_compare_objects
612	0xc0555	zend_compare_symbol_tables
613	0x1596b4	zend_compile_file
614	0xc08f0	zend_copy_ini_directives
615	0xc3095	zend_destroy_file_handle
616	0xaea9e	zend_disable_class
617	0xaea30	zend_disable_function
618	0xbad89	zend_error
619	0x15965c	zend_error_cb
620	0xb7844	zend_eval_string
621	0x1596ac	zend_execute
622	0x1596b0	zend_execute_internal
623	0xbb3fc	zend_execute_scripts
624	0xc1ce2	zend_extension_dispatch_message
625	0x1374f8	zend_extension_entry
626	0x1595a0	zend_extensions
627	0xc2c22	zend_fetch_list_dtor_id
628	0xc2781	zend_fetch_resource
629	0xc2f8f	zend_file_handle_dtor
630	0x1595c4	zend_fopen
631	0xaf714	zend_get_compiled_filename
632	0xaf72e	zend_get_compiled_lineno
633	0xbad61	zend_get_configuration_directive
634	0xc23af	zend_get_constant
635	0xb65a7	zend_get_executed_filename
636	0xb65e2	zend_get_executed_lineno
637	0xc1d9c	zend_get_extension
638	0xab388	zend_get_hash_value
639	0xae969	zend_get_module
640	0xaef6c	zend_get_module_version
641	0xac0a0	zend_get_parameters
642	0xac30f	zend_get_parameters_ex
643	0xc1d69	zend_get_resource_handle
644	0xaa134	zend_hash_add_empty_element
645	0xa9841	zend_hash_add_or_update
646	0xaadea	zend_hash_apply
647	0xaae88	zend_hash_apply_with_argument
648	0xaaf29	zend_hash_apply_with_arguments
649	0xaaaa0	zend_hash_clean
650	0xabc06	zend_hash_compare
651	0xab0e2	zend_hash_copy
652	0xaa681	zend_hash_del_key_or_index
653	0xaa9b1	zend_hash_destroy
654	0xab5c8	zend_hash_exists
655	0xab39d	zend_hash_find
656	0xa96b0	zend_hash_func
657	0xab9d4	zend_hash_get_current_data_ex
658	0xab8ec	zend_hash_get_current_key_ex
659	0xab989	zend_hash_get_current_key_type_ex
660	0xaaba8	zend_hash_graceful_destroy
661	0xaad83	zend_hash_graceful_reverse_destroy
662	0xab7c1	zend_hash_index_exists
663	0xab766	zend_hash_index_find
664	0xaa161	zend_hash_index_update_or_next_insert
665	0xa9711	zend_hash_init
666	0xa9800	zend_hash_init_ex
667	0xab842	zend_hash_internal_pointer_end_ex
668	0xab81e	zend_hash_internal_pointer_reset_ex
669	0xab17b	zend_hash_merge
670	0xab25e	zend_hash_merge_ex
671	0xac002	zend_hash_minmax
672	0xab8a9	zend_hash_move_backwards_ex
673	0xab866	zend_hash_move_forward_ex
674	0xac090	zend_hash_next_free_element
675	0xab813	zend_hash_num_elements
676	0xa9d66	zend_hash_quick_add_or_update
677	0xab550	zend_hash_quick_find
678	0xaa5f3	zend_hash_rehash
679	0xaaff8	zend_hash_reverse_apply
680	0xa9833	zend_hash_set_apply_protection
681	0xaba15	zend_hash_sort
682	0xc1506	zend_highlight
683	0xc1340	zend_html_putc
684	0xc148f	zend_html_puts
685	0xcb680	zend_indent
686	0xc0ffb	zend_ini_boolean_displayer_cb
687	0xc10a6	zend_ini_color_displayer_cb
688	0xc076e	zend_ini_deactivate
689	0xc0ee6	zend_ini_double
690	0xc0749	zend_ini_global_shutdown
691	0xc0e41	zend_ini_long
692	0xc0c1a	zend_ini_refresh_caches
693	0xc0e0a	zend_ini_register_displayer
694	0xc0705	zend_ini_shutdown
695	0xc0990	zend_ini_sort_entries
696	0xc06b0	zend_ini_startup
697	0xc0f90	zend_ini_string
698	0xaeb41	zend_is_callable
699	0xaf748	zend_is_compiling
700	0xb661c	zend_is_executing
701	0xb66e0	zend_is_true
702	0xc25c0	zend_list_insert
703	0xcbeed	zend_llist_add_element
704	0xcc3a4	zend_llist_apply
705	0xcc4de	zend_llist_apply_with_argument
706	0xcc515	zend_llist_apply_with_arguments
707	0xcc2c5	zend_llist_apply_with_del
708	0xcc1a4	zend_llist_clean
709	0xcc271	zend_llist_copy
710	0xcc55f	zend_llist_count
711	0xcc047	zend_llist_del_element
712	0xcc12c	zend_llist_destroy
713	0xcc56a	zend_llist_get_first_ex
714	0xcc5af	zend_llist_get_last_ex
715	0xcc5f5	zend_llist_get_next_ex
716	0xcc644	zend_llist_get_prev_ex
717	0xcbeb0	zend_llist_init
718	0xcbf9b	zend_llist_prepend_element
719	0xcc1c8	zend_llist_remove_tail
720	0xcc3d7	zend_llist_sort
721	0xc1960	zend_load_extension
722	0xc0618	zend_locale_sprintf_double
723	0xbb5cb	zend_make_compiled_string_description
724	0xb971a	zend_make_printable_zval
725	0xbad42	zend_message_dispatcher
726	0x159664	zend_open
727	0xbb3f7	zend_output_debug_string
728	0xcc8cf	zend_parse_ini_file
729	0xad37d	zend_parse_parameters
730	0xac4b5	zend_parse_parameters_ex
731	0xc3607	zend_prepare_string_for_scanning
732	0xaf2dd	zend_print_variable
733	0xb98d3	zend_print_zval
734	0xb98ef	zend_print_zval_ex
735	0xb9963	zend_print_zval_r
736	0xb997f	zend_print_zval_r_ex
737	0x1596a8	zend_printf
738	0xd34ca	zend_ptr_stack_apply
739	0xd34fe	zend_ptr_stack_clean
740	0xd34ad	zend_ptr_stack_destroy
741	0xd3350	zend_ptr_stack_init
742	0xd344a	zend_ptr_stack_n_pop
743	0xd3387	zend_ptr_stack_n_push
744	0xd3566	zend_ptr_stack_num_elements
745	0xd3090	zend_qsort
746	0xb595a	zend_register_auto_global
747	0xc24cf	zend_register_constant
748	0xc22df	zend_register_double_constant
749	0xc1bce	zend_register_extension
750	0xc0a69	zend_register_ini_entries
751	0xae85e	zend_register_internal_class
752	0xae7df	zend_register_internal_class_ex
753	0xc2b53	zend_register_list_destructors
754	0xc2bbb	zend_register_list_destructors_ex
755	0xc2296	zend_register_long_constant
756	0xae5c4	zend_register_module
757	0xc274e	zend_register_resource
758	0xc237d	zend_register_string_constant
759	0xc232e	zend_register_stringl_constant
760	0xaf6f7	zend_restore_compiled_filename
761	0xc0da7	zend_restore_ini_entry
762	0xc2ed0	zend_restore_lexical_state
763	0xc2cd2	zend_rsrc_list_get_rsrc_type
764	0xc2e46	zend_save_lexical_state
765	0xaf62c	zend_set_compiled_filename
766	0xae991	zend_set_hash_symbol
767	0xb93d9	zend_set_memory_limit
768	0xb813b	zend_set_timeout
769	0xcbd81	zend_stack_apply
770	0xcbe0f	zend_stack_apply_with_argument
771	0xcbd6c	zend_stack_base
772	0xcbd77	zend_stack_count
773	0xcbca7	zend_stack_del_top
774	0xcbd17	zend_stack_destroy
775	0xcbba0	zend_stack_init
776	0xcbcda	zend_stack_int_top
777	0xcbd01	zend_stack_is_empty
778	0xcbbdb	zend_stack_push
779	0xcbc76	zend_stack_top
780	0x1595e0	zend_standard_class_def
781	0xae322	zend_startup_module
782	0xc0064	zend_str_tolower
783	0xbb75d	zend_string_to_double
784	0xc17ba	zend_strip
785	0xb938e	zend_strndup
786	0xcd640	zend_strtod
787	0x159678	zend_ticks_function
788	0xb7df2	zend_timeout
789	0x15968c	zend_unblock_interruptions
790	0xc0bdf	zend_unregister_ini_entries
791	0xb81a4	zend_unset_timeout
792	0x159680	zend_uv
793	0x1596a0	zend_write
794	0xac414	zend_wrong_param_count
795	0xac435	zend_zval_type_name
796	0xc03c4	zendi_smart_strcmp
797	0xaea0f	zif_display_disabled_function
798	0x42d1b	zif_fclose
799	0x430f4	zif_feof
800	0x43c44	zif_fflush
801	0x4361b	zif_fgetc
802	0x4343f	zif_fgets
803	0x436bb	zif_fgetss
804	0x44467	zif_fpassthru
805	0x453a0	zif_fread
806	0x43ed0	zif_fseek
807	0x43e5a	zif_ftell
808	0x439f3	zif_fwrite
809	0x43dd9	zif_rewind
810	0x659ba	zif_sql_regcase
811	0xaf0f6	zval_add_ref
812	0xc0048	zval_is_true
813	0xb67f1	zval_update_constant
814	0x159690	zval_used_for_init

module_name	stub.exe
flags	0
timestamp	2006-08-28 09:40:03
version	0.0
ordinal_base	1
nFunctions	814
nNames	814
Names(814)	0x10c730
Functions(814)	0x10ba78
NameOrdinals(814)	0x10d3e8

show previews

offset	size	type	comment
0	1376256	EXE	08/28/2006 09:40:03	#
15c1	15	HTM		#
1005b0	1736	GIF	(88 x 31)	#
114800	4440	GIF	(100 x 58)	#
115958	2750	GIF	(130 x 67)	#
1164ec	6430	GIF	(120 x 67)	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

39900aa448f4456d212cf73c345bc46ad1e0649e5cfe3174ee67a461f7ad947e-

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

39900aa448f4456d212cf73c345bc46ad1e0649e5cfe3174ee67a461f7ad947e
-