KERNEL32LEGACY.DLL - kernel32 - Windows NT BASE API Client DLL

info
MZ
PE
resources
imports
exports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	KERNEL32LEGACY.DLL
size	117248 (0x1ca00)
md5	68df7eb12b67cf3e52f24bc79aed3555

type	PE32 executable (DLL) (console) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xe8

Rich Header

lib id	version	times used
185	30716	91
1	0	942
188	30716	5
184	30716	1
187	30716	8
192	30716	169
183	30716	1
186	30716	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	5
TimeDateStamp	0x50419346
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x2102
Magic	0x10b
LinkerVersion	10.10
SizeOfCode	0x17a00
SizeOfInitializedData	0x5200
SizeOfUninitializedData	0
AddressOfEntryPoint	0x4f18
BaseOfCode	0x1000
BaseOfData	0x19000
ImageBase	0x10000000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	6.2
ImageVersion	6.2
SubsystemVersion	6.2
Reserved1	0
SizeOfImage	0x20000
SizeOfHeaders	0x400
CheckSum	0x248f6
Subsystem	3
DllCharacteristics	0x140
SizeOfStackReserve	0x40000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v7.0 DLL

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x179e1	0x17a00	R-X CODE
.data	0x19000	0x850	0x400	RW- IDATA
.idata	0x1a000	0x24ae	0x2600	R-- IDATA
.rsrc	0x1d000	0x518	0x600	R-- IDATA
.reloc	0x1e000	0x1b0a	0x1c00	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x17930	0x10b1
IMPORT	0x1a000	0x1a4
RESOURCE	0x1d000	0x518
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x1e000	0xdf0
DEBUG	0x1000	0x1c
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x4d28	0x40
Bound_IAT	0	0
IAT	0x1a658	0x4b4
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size	cp
MUI	#1	200	0
VERSION	#1	924	0

module_name	hint	function_name
api-ms-win-core-rtlsupport-l1-2-0.dll	5	RtlUnwind
api-ms-win-core-rtlsupport-l1-2-0.dll		RtlCaptureContext
ntdll.dll	621	RtlAcquirePrivilege
ntdll.dll	1195	RtlReleasePrivilege
ntdll.dll	2114	toupper
ntdll.dll	301	NtDeviceIoControlFile
ntdll.dll	255	NtCreateJobObject
ntdll.dll	379	NtOpenJobObject
ntdll.dll	226	NtAssignProcessToJobObject
ntdll.dll	573	NtTerminateJobObject
ntdll.dll	430	NtQueryInformationJobObject
ntdll.dll	532	NtSetInformationJobObject
ntdll.dll	1335	RtlUpcaseUnicodeChar
ntdll.dll	1159	RtlQueryProcessDebugInformation
ntdll.dll	758	RtlCreateQueryDebugBuffer
ntdll.dll	366	NtMapViewOfSection
ntdll.dll	814	RtlDestroyQueryDebugBuffer
ntdll.dll	589	NtUnmapViewOfSection
ntdll.dll	1137	RtlProcessFlsData
ntdll.dll	911	RtlFreeUserStack
ntdll.dll	770	RtlCreateUserStack
ntdll.dll	902	RtlFreeActivationContextStack
ntdll.dll	655	RtlAllocateActivationContextStack
ntdll.dll	1449	TpCaptureCaller
ntdll.dll	2123	wcscat_s
ntdll.dll	710	RtlCompareUnicodeString
ntdll.dll	63	EtwEventWriteNoRegistration
ntdll.dll	435	NtQueryInformationToken
ntdll.dll	2110	swprintf_s
ntdll.dll	403	NtPowerInformation
ntdll.dll	562	NtSetVolumeInformationFile
ntdll.dll	599	NtWaitForSingleObject
ntdll.dll	111	LdrFindResource_U
ntdll.dll	816	RtlDetermineDosPathNameType_U
ntdll.dll	2097	strncat_s
ntdll.dll	2000	_strcmpi
ntdll.dll	985	RtlInitAnsiStringEx
ntdll.dll	261	NtCreateMailslotFile
ntdll.dll	2001	_stricmp
ntdll.dll	1326	RtlUnlockHeap
ntdll.dll	904	RtlFreeHandle
ntdll.dll	1274	RtlSizeHeap
ntdll.dll	657	RtlAllocateHandle
ntdll.dll	968	RtlGetUserInfoHeap
ntdll.dll	1181	RtlReAllocateHeap
ntdll.dll	1268	RtlSetUserValueHeap
ntdll.dll	1063	RtlIsValidHandle
ntdll.dll	552	NtSetSystemEnvironmentValueEx
ntdll.dll	458	NtQuerySystemEnvironmentValueEx
ntdll.dll	912	RtlGUIDFromString
ntdll.dll	472	NtRaiseHardError
ntdll.dll	466	NtQueryVolumeInformationFile
ntdll.dll	779	RtlDeactivateActivationContextUnsafeFast
ntdll.dll	629	RtlActivateActivationContextUnsafeFast
ntdll.dll	962	RtlGetThreadErrorMode
ntdll.dll	1248	RtlSetLastWin32ErrorAndNtStatusFromNtStatus
ntdll.dll	1176	RtlRaiseStatus
ntdll.dll	537	NtSetInformationThread
ntdll.dll	397	NtOpenThreadToken
ntdll.dll	272	NtCreateSection
ntdll.dll	1146	RtlQueryElevationFlags
ntdll.dll	535	NtSetInformationProcess
ntdll.dll	389	NtOpenProcessToken
ntdll.dll	1119	RtlNtStatusToDosErrorNoTeb
ntdll.dll	854	RtlEqualString
ntdll.dll	328	NtFreeVirtualMemory
ntdll.dll	605	NtWriteFile
ntdll.dll	1060	RtlIsTextUnicode
ntdll.dll	473	NtReadFile
ntdll.dll	1190	RtlRegisterWait
ntdll.dll	805	RtlDeregisterWait
ntdll.dll	1246	RtlSetIoCompletionCallback
ntdll.dll	375	NtOpenEvent
ntdll.dll	471	NtRaiseException
ntdll.dll	201	NtAllocateVirtualMemory
ntdll.dll	587	NtUnlockFile
ntdll.dll	357	NtLockFile
ntdll.dll	822	RtlDosPathNameToNtPathName_U
ntdll.dll	739	RtlCopyUnicodeString
ntdll.dll	298	NtDeleteValueKey
ntdll.dll	2132	wcsncmp
ntdll.dll	1310	RtlUnhandledExceptionFilter
ntdll.dll	1967	_aullshr
ntdll.dll	1021	RtlIntegerToUnicodeString
ntdll.dll	2012	_ui64tow
ntdll.dll	313	NtEnumerateValueKey
ntdll.dll	310	NtEnumerateKey
ntdll.dll	669	RtlAppendUnicodeToString
ntdll.dll	668	RtlAppendUnicodeStringToString
ntdll.dll	899	RtlFormatCurrentUserKeyPath
ntdll.dll	855	RtlEqualUnicodeString
ntdll.dll	1136	RtlPrefixUnicodeString
ntdll.dll	1107	RtlMultiByteToUnicodeSize
ntdll.dll	1106	RtlMultiByteToUnicodeN
ntdll.dll	1319	RtlUnicodeToMultiByteN
ntdll.dll	945	RtlGetLongestNtPathLength
ntdll.dll	27	CsrFreeCaptureBuffer
ntdll.dll	23	CsrCaptureMessageString
ntdll.dll	19	CsrAllocateCaptureBuffer
ntdll.dll	903	RtlFreeAnsiString
ntdll.dll	2100	strncpy_s
ntdll.dll	688	RtlCharToInteger
ntdll.dll	31	CsrVerifyRegion
ntdll.dll	427	NtQueryInformationAtom
ntdll.dll	1142	RtlQueryAtomInAtomTable
ntdll.dll	291	NtDeleteAtom
ntdll.dll	789	RtlDeleteAtomFromAtomTable
ntdll.dll	318	NtFindAtom
ntdll.dll	1095	RtlLookupAtomInAtomTable
ntdll.dll	188	NtAddAtomEx
ntdll.dll	638	RtlAddAtomToAtomTable
ntdll.dll	807	RtlDestroyAtomTable
ntdll.dll	745	RtlCreateAtomTable
ntdll.dll	434	NtQueryInformationThread
ntdll.dll	1289	RtlTimeFieldsToTime
ntdll.dll	1293	RtlTimeToTimeFields
ntdll.dll	432	NtQueryInformationProcess
ntdll.dll	1236	RtlSetCurrentTransaction
ntdll.dll	925	RtlGetCurrentTransaction
ntdll.dll	819	RtlDnsHostNameToComputerName
ntdll.dll	910	RtlFreeUnicodeString
ntdll.dll	664	RtlAnsiStringToUnicodeString
ntdll.dll	984	RtlInitAnsiString
ntdll.dll	1313	RtlUnicodeStringToAnsiString
ntdll.dll	1421	RtlxUnicodeStringToAnsiSize
ntdll.dll	177	NlsMbCodePageTag
ntdll.dll	994	RtlInitUnicodeStringEx
ntdll.dll	1320	RtlUnicodeToMultiByteSize
ntdll.dll	1077	RtlLeaveCriticalSection
ntdll.dll	841	RtlEnterCriticalSection
ntdll.dll	2024	_wcsicmp
ntdll.dll	2134	wcsncpy_s
ntdll.dll	2128	wcscspn
ntdll.dll	1118	RtlNtStatusToDosError
ntdll.dll	2127	wcscpy_s
ntdll.dll	2076	memmove
ntdll.dll	1991	_memicmp
ntdll.dll	323	NtFlushKey
ntdll.dll	561	NtSetValueKey
ntdll.dll	257	NtCreateKey
ntdll.dll	235	NtClose
ntdll.dll	464	NtQueryValueKey
ntdll.dll	380	NtOpenKey
ntdll.dll	25	CsrClientCallServer
ntdll.dll	531	NtSetInformationFile
ntdll.dll	550	NtSetSecurityObject
ntdll.dll	523	NtSetEaFile
ntdll.dll	252	NtCreateFile
ntdll.dll	1079	RtlLengthSecurityDescriptor
ntdll.dll	454	NtQuerySecurityObject
ntdll.dll	424	NtQueryEaFile
ntdll.dll	2027	_wcsnicmp
ntdll.dll	377	NtOpenFile
ntdll.dll	429	NtQueryInformationFile
ntdll.dll	331	NtFsControlFile
ntdll.dll	1247	RtlSetLastWin32Error
ntdll.dll	695	RtlCleanUpTEBLangLists
ntdll.dll	993	RtlInitUnicodeString
ntdll.dll	2021	_vsnwprintf
ntdll.dll	1262	RtlSetThreadPoolStartFunc
ntdll.dll	978	RtlImageNtHeader
ntdll.dll	459	NtQuerySystemInformation
ntdll.dll	905	RtlFreeHeap
ntdll.dll	658	RtlAllocateHeap
ntdll.dll	1003	RtlInitializeExceptionChain
ntdll.dll	574	NtTerminateProcess
ntdll.dll	792	RtlDeleteCriticalSection
ntdll.dll	373	NtOpenDirectoryObject
ntdll.dll	1078	RtlLengthRequiredSid
ntdll.dll	2004	_strnicmp
ntdll.dll	2098	strncmp
ntdll.dll	863	RtlExitUserThread
ntdll.dll	723	RtlConvertSidToUnicodeString
ntdll.dll	1089	RtlLockHeap
ntdll.dll	1956	_allmul
ntdll.dll	1964	_aulldiv
ntdll.dll	1966	_aullrem
ntdll.dll	2073	memcmp
ntdll.dll	2074	memcpy
ntdll.dll	2078	memset
KERNELBASE.dll	5	BasepAdjustObjectAttributesForPrivateNamespace
KERNELBASE.dll	67	KernelBaseGetGlobalData
KERNELBASE.dll	33	GetEightBitStringToUnicodeStringRoutine
KERNELBASE.dll	49	GetUnicodeStringToEightBitStringRoutine
KERNELBASE.dll	77	MoveFileWithProgressTransactedW
KERNELBASE.dll	56	GlobalFree
KERNELBASE.dll	13	CompareStringA
KERNELBASE.dll	1	BaseDllFreeResourceId
KERNELBASE.dll	38	GetNamedPipeAttribute
KERNELBASE.dll	71	LocalFree
KERNELBASE.dll	70	LocalAlloc
KERNELBASE.dll	45	GetStringTypeA
KERNELBASE.dll	55	GlobalAlloc
KERNELBASE.dll	27	GetAdjustObjectAttributesForPrivateNamespaceRoutine
KERNELBASE.dll	34	GetEraNameCountedString
KERNELBASE.dll	26	FatalAppExitW
KERNELBASE.dll	72	LocalLock
KERNELBASE.dll	73	LocalReAlloc
KERNELBASE.dll	74	LocalUnlock
KERNELBASE.dll	87	PulseEvent
KERNELBASE.dll	131	lstrcmpW
KERNELBASE.dll	133	lstrcmpiW
KERNELBASE.dll	134	lstrcpynA
KERNELBASE.dll	84	OpenRegKey
KERNELBASE.dll	42	GetPtrCalDataArray
KERNELBASE.dll	80	NlsIsUserDefaultLocale
KERNELBASE.dll	29	GetCalendar
KERNELBASE.dll	36	GetLocaleInfoHelper
KERNELBASE.dll	41	GetPtrCalData
KERNELBASE.dll	52	GetUserInfo
KERNELBASE.dll	53	GetUserInfoWord
KERNELBASE.dll	37	GetNamedLocaleHashNode
KERNELBASE.dll	116	SpecialMBToWC
KERNELBASE.dll	135	lstrcpynW
KERNELBASE.dll	136	lstrlenA
KERNELBASE.dll	137	lstrlenW
KERNELBASE.dll	25	FatalAppExitA
api-ms-win-core-processthreads-l1-1-1.dll	3	CreateRemoteThread
api-ms-win-core-processthreads-l1-1-1.dll	56	TerminateProcess
api-ms-win-core-heap-l1-2-0.dll	5	HeapDestroy
api-ms-win-core-memory-l1-1-1.dll	1	CreateFileMappingNumaW
api-ms-win-core-memory-l1-1-1.dll	28	VirtualQuery
api-ms-win-core-handle-l1-1-0.dll		CloseHandle
api-ms-win-core-synch-l1-2-0.dll	11	CreateSemaphoreExW
api-ms-win-core-synch-l1-2-0.dll	50	WaitForMultipleObjectsEx
api-ms-win-core-synch-l1-2-0.dll	3	CreateEventA
api-ms-win-core-synch-l1-2-0.dll	51	WaitForSingleObject
api-ms-win-core-file-l1-2-0.dll	35	GetFileAttributesW
api-ms-win-core-file-l1-2-0.dll	51	GetTempPathW
api-ms-win-core-file-l1-2-0.dll	39	GetFileTime
api-ms-win-core-file-l1-2-0.dll	4	CreateFileA
api-ms-win-core-file-l1-2-0.dll	44	GetFullPathNameW
api-ms-win-core-file-l1-2-0.dll	43	GetFullPathNameA
api-ms-win-core-file-l1-2-0.dll	5	CreateFileW
api-ms-win-core-file-l1-2-0.dll	76	WriteFile
api-ms-win-core-file-l1-2-0.dll	66	SetEndOfFile
api-ms-win-core-file-l1-2-0.dll	58	LockFile
api-ms-win-core-file-l1-2-0.dll	37	GetFileSize
api-ms-win-core-file-l1-2-0.dll	61	ReadFile
api-ms-win-core-file-l1-2-0.dll	70	SetFilePointer
api-ms-win-core-file-l1-2-0.dll	7	DeleteFileA
api-ms-win-core-file-l1-2-0.dll	32	GetFileAttributesA
api-ms-win-core-file-l1-2-0.dll	11	FindClose
api-ms-win-core-file-l1-2-0.dll	72	SetFileTime
api-ms-win-core-file-l1-2-0.dll	31	GetDriveTypeW
api-ms-win-core-file-l1-2-0.dll	42	GetFinalPathNameByHandleW
api-ms-win-core-file-l1-2-0.dll	18	FindFirstFileW
api-ms-win-core-file-l1-2-0.dll	71	SetFilePointerEx
api-ms-win-core-file-l1-2-0.dll	38	GetFileSizeEx
api-ms-win-core-io-l1-1-1.dll	4	DeviceIoControl
api-ms-win-core-libraryloader-l1-1-1.dll	5	EnumResourceNamesExW
api-ms-win-core-libraryloader-l1-1-1.dll	8	FindResourceExW
api-ms-win-core-libraryloader-l1-1-1.dll	20	LoadLibraryExA
api-ms-win-core-libraryloader-l1-1-1.dll	10	FreeLibrary
api-ms-win-core-libraryloader-l1-1-1.dll	19	GetProcAddress
api-ms-win-core-libraryloader-l1-1-1.dll	21	LoadLibraryExW
api-ms-win-core-libraryloader-l1-1-1.dll	22	LoadResource
api-ms-win-core-libraryloader-l1-1-1.dll	29	SizeofResource
api-ms-win-core-namedpipe-l1-2-0.dll	1	CreateNamedPipeW
api-ms-win-core-datetime-l1-1-1.dll	5	GetTimeFormatW
api-ms-win-core-datetime-l1-1-1.dll	2	GetDateFormatW
api-ms-win-core-sysinfo-l1-2-0.dll	19	GetTickCount
api-ms-win-core-sysinfo-l1-2-0.dll	2	GetComputerNameExW
api-ms-win-core-sysinfo-l1-2-0.dll	12	GetSystemInfo
api-ms-win-core-sysinfo-l1-2-0.dll	26	GlobalMemoryStatusEx
api-ms-win-core-sysinfo-l1-2-0.dll	24	GetWindowsDirectoryA
api-ms-win-core-sysinfo-l1-2-0.dll	5	GetLogicalProcessorInformationEx
api-ms-win-core-sysinfo-l1-2-0.dll	3	GetLocalTime
api-ms-win-core-sysinfo-l1-2-0.dll	27	SetComputerNameExW
api-ms-win-core-localization-l1-2-0.dll	37	IsDBCSLeadByte
api-ms-win-core-processenvironment-l1-2-0.dll	15	SearchPathA
api-ms-win-core-processenvironment-l1-2-0.dll	11	GetEnvironmentVariableW
api-ms-win-core-string-l1-1-0.dll	7	WideCharToMultiByte
api-ms-win-core-errorhandling-l1-1-1.dll	3	GetLastError
api-ms-win-core-errorhandling-l1-1-1.dll	2	GetErrorMode
api-ms-win-core-errorhandling-l1-1-1.dll	8	SetErrorMode
api-ms-win-core-errorhandling-l1-1-1.dll	9	SetLastError
api-ms-win-core-errorhandling-l1-1-1.dll	11	UnhandledExceptionFilter
api-ms-win-core-fibers-l1-1-1.dll	4	IsThreadAFiber
api-ms-win-core-file-l2-1-0.dll	7	MoveFileWithProgressW
api-ms-win-core-file-l2-1-0.dll	1	CopyFileExW

ord	entry_va	function_name
1	0x8827	AddAtomA
2	0x888f	AddAtomW
3	0x7e50	AddLocalAlternateComputerNameW
4	0x10e19	AssignProcessToJobObject
5	0x6152	BackupRead
6	0x6a24	BackupWrite
7	0x143e0	BaseSetLastNTError
8	0x1117c	BindIoCompletionCallback
9	0xcddc	CheckElevationEnabled
10	0xfb96	ConvertFiberToThread
11	0xfaba	ConvertThreadToFiber
12	0xcfc3	CopyFileA
13	0xd02c	CopyFileW
14	0xf8e8	CreateFiber
15	0xce73	CreateFileMappingA
16	0xd054	CreateFileTransactedW
17	0x10cf5	CreateJobObjectW
18	0xe6bd	CreateMailslotA
19	0xe95a	CreateNamedPipeA
20	0xf83d	CreateSemaphoreW
21	0xfbe8	CreateToolhelp32Snapshot
22	0x885d	DeleteAtom
23	0xfa19	DeleteFiber
24	0x845d	DnsHostnameToComputerNameW
25	0x85c6	DosDateTimeToFileTime
26	0xf5f4	DosPathToSessionPathW
27	0x82c5	EnumerateLocalComputerNamesW
28	0xf81b	FatalAppExitA
29	0xf82c	FatalAppExitW
30	0x8513	FileTimeToDosDateTime
31	0x8843	FindAtomA
32	0x88ab	FindAtomW
33	0xe841	FindResourceA
34	0xe85f	FindResourceExA
35	0xe93b	FindResourceW
36	0xf261	GetActiveProcessorCount
37	0x886f	GetAtomNameA
38	0x88c5	GetAtomNameW
39	0x7d77	GetComputerNameA
40	0x7912	GetComputerNameW
41	0x161c3	GetConsoleWindow
42	0x11741	GetDateFormatAWorker
43	0x11e11	GetDateFormatWWorker
44	0x11bf3	GetDurationFormatEx
45	0xd523	GetFirmwareEnvironmentVariableExW
46	0xd502	GetFirmwareEnvironmentVariableW
47	0xf220	GetMaximumProcessorGroupCount
48	0xe9ad	GetNamedPipeClientProcessId
49	0xe9da	GetNamedPipeServerProcessId
50	0x8ea3	GetPrivateProfileIntA
51	0x9177	GetPrivateProfileIntW
52	0x93a2	GetPrivateProfileSectionW
53	0x8f2a	GetPrivateProfileStringA
54	0x923e	GetPrivateProfileStringW
55	0xf3e7	GetProcessAffinityMask
56	0xf46c	GetProcessIoCounters
57	0x8de1	GetProfileIntA
58	0x8e43	GetProfileIntW
59	0x8e23	GetProfileSectionA
60	0x8e85	GetProfileSectionW
61	0x8dff	GetProfileStringA
62	0x8e61	GetProfileStringW
63	0x10970	GetShortPathNameA
64	0xef74	GetStartupInfoA
65	0x118d4	GetStringTypeExA
66	0xee81	GetSystemPowerStatus
67	0xea07	GetSystemWow64DirectoryA
68	0xea07	GetSystemWow64DirectoryW
69	0x10ca0	GetTapeParameters
70	0xea19	GetTempPathA
71	0x8670	GetThreadSelectorEntry
72	0x115ae	GetTimeFormatAWorker
73	0x11c77	GetTimeFormatWWorker
74	0x86d0	GlobalAddAtomA
75	0x86eb	GlobalAddAtomExA
76	0x8770	GlobalAddAtomExW
77	0x8754	GlobalAddAtomW
78	0xf73e	GlobalAlloc
79	0x8722	GlobalDeleteAtom
80	0x8708	GlobalFindAtomA
81	0x878d	GlobalFindAtomW
82	0xddd7	GlobalFlags
83	0xd675	GlobalFree
84	0x8734	GlobalGetAtomNameA
85	0x87a7	GlobalGetAtomNameW
86	0xdb31	GlobalHandle
87	0xda0c	GlobalLock
88	0xdeef	GlobalMemoryStatus
89	0xd69c	GlobalReAlloc
90	0xdcbc	GlobalSize
91	0xdbef	GlobalUnlock
92	0x87c7	InitAtomTable
93	0xe763	LoadLibraryA
94	0xe826	LoadLibraryW
95	0xf74f	LocalAlloc
96	0xe4b3	LocalFlags
97	0xf760	LocalFree
98	0xf771	LocalLock
99	0xf782	LocalReAlloc
100	0xe399	LocalSize
101	0xf793	LocalUnlock
102	0x1020b	Module32FirstW
103	0x102bb	Module32NextW
104	0xced0	MoveFileA
105	0xceeb	MoveFileExA
106	0xcf75	MoveFileW
107	0x16ae0	MulDiv
108	0xd149	OpenFile
109	0x10d7c	OpenJobObjectW
110	0xff78	Process32FirstW
111	0x10028	Process32NextW
112	0xf7a4	PulseEvent
113	0x10e73	QueryInformationJobObject
114	0x1124f	RaiseFailFastException
115	0xef5e	RegisterWaitForInputIdle
116	0x110ca	RegisterWaitForSingleObject
117	0x7f4b	RemoveLocalAlternateComputerNameW
118	0x161f4	SetConsoleTitleA
119	0xce0d	SetFileCompletionNotificationModes
120	0xd5e3	SetFirmwareEnvironmentVariableExW
121	0xd5c2	SetFirmwareEnvironmentVariableW
122	0xce62	SetHandleCount
123	0x10f73	SetInformationJobObject
124	0x8050	SetLocalPrimaryComputerNameW
125	0xe703	SetMailslotInfo
126	0xf43c	SetProcessAffinityMask
127	0xf886	SetThreadAffinityMask
128	0xeb7c	SetVolumeLabelW
129	0x16c10	SwitchToFiber
130	0x10e46	TerminateJobObject
131	0x100ca	Thread32First
132	0x10171	Thread32Next
133	0x1113d	UnregisterWait
134	0xf733	WTSGetActiveConsoleSessionId
135	0xf864	WaitForMultipleObjects
136	0x912f	WritePrivateProfileSectionA
137	0x9065	WritePrivateProfileStringA
138	0x9353	WritePrivateProfileStringW
139	0xe169	_lclose
140	0xe0bf	_lcreat
141	0xe187	_llseek
142	0xe06d	_lopen
143	0xe0f4	_lread
144	0xe124	_lwrite
145	0xe221	lstrcatW
146	0xe29e	lstrcmpA
147	0xf7b5	lstrcmpW
148	0xe329	lstrcmpiA
149	0xf7c6	lstrcmpiW
150	0xe1c3	lstrcpyW
151	0xf7d7	lstrcpynA
152	0xf7e8	lstrcpynW
153	0xf7f9	lstrlenA
154	0xf80a	lstrlenW

module_name	kernel32legacy.dll
flags	0
timestamp	2012-09-01 02:49:48
version	0.0
ordinal_base	1
nFunctions	154
nNames	154
Names(154)	0x17bc0
Functions(154)	0x17958
NameOrdinals(154)	0x17e28

StringTable 040904B0

CompanyName	Microsoft Corporation
FileDescription	Windows NT BASE API Client DLL
FileVersion	6.2.9200.16409 (win8_gdr.120831-1740)
InternalName	kernel32
LegalCopyright	© Microsoft Corporation. All rights reserved.
OriginalFilename	kernel32
ProductName	Microsoft® Windows® Operating System
ProductVersion	6.2.9200.16409

VS_FIXEDFILEINFO

FileVersion	6.2.9200.16409
ProductVersion	6.2.9200.16409
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	2
FileSubtype	0

show previews

offset	size	type	comment
0	117248	DLL	09/01/2012 04:47:02	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK

KERNEL32LEGACY.DLL-

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 040904B0

VS_FIXEDFILEINFO

KERNEL32LEGACY.DLL
-