filenamexaav.exe
size223232 (0x36800)
md592c154ef90ccaae424284d1ed7471115
typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
mimetypeapplication/octet-stream
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xd8

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|
00000040: 36 1a 53 d2 72 7b c2 7e  72 7b 3d 81 72 7b 3d 81  |6.S.r{.~r{=.r{=.|
00000050: 84 03 ae 81 70 7b 3d 81  72 7b 3c 81 76 7b 3d 81  |....p{=.r{<.v{=.|
00000060: 4e 8b 60 81 77 7b 3d 81  69 e6 92 81 7c 7b 3d 81  |N.`.w{=.i...|{=.|
00000070: 69 e6 a6 81 73 7b 3d 81  69 e6 a7 81 73 7b 3d 81  |i...s{=.i...s{=.|
00000080: 69 e6 a0 81 73 7b 3d 81  00 00 00 00 14 00 00 00  |i...s{=.........|
00000090: 00 00 00 00 00 00 00 00                           |........        |

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x4d8c21a2
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x102
Magic0x10b
LinkerVersion13.0
SizeOfCode0x7e00
SizeOfInitializedData0
SizeOfUninitializedData0
AddressOfEntryPoint0x2532
BaseOfCode0x1000
BaseOfData0x9000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.1
ImageVersion0.0
SubsystemVersion5.1
Reserved10
SizeOfImage0x65000
SizeOfHeaders0x400
CheckSum0x42e25
Subsystem2
DllCharacteristics0
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000x7c280x7e00RWX CODE
.zimp0x90000x16a80x1800RW- IDATA
.data0xb0000x2cb240x1200RW- IDATA
.rsrc0x380000x2b4460x2b600R-- IDATA
.reloc0x640000x5fc0x600R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x6a940x2194
IMPORT0x90000x78
RESOURCE0x380000x2b446
EXCEPTION00
SECURITY00
BASERELOC0x640000x5d8
DEBUG0xbb100x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0xb0000x468
Delay_IAT00
CLR_Header00
typenamesizecp
M375_RT#65821720321252
CURSOR#120441252
CURSOR#225081252
BITMAP#155043421252
module_namehintordfunction_name
USER32.dll99CreateWindowExW
USER32.dll171DrawAnimatedRects
USER32.dll601SetScrollPos
USER32.dll532RemoveMenu
USER32.dll486OpenIcon
USER32.dll582SetMenu
USER32.dll699keybd_event
USER32.dll634ShowOwnedPopups
USER32.dll291GetKeyboardLayoutList
USER32.dll274GetDlgItemTextW
USER32.dll76CopyImage
USER32.dll54CharUpperA
USER32.dll143DefWindowProcW
USER32.dll579SetLastErrorEx
USER32.dll56CharUpperBuffW
USER32.dll9AppendMenuW
USER32.dll42CharNextA
USER32.dll413IsMenu
USER32.dll389InsertMenuItemW
USER32.dll553SendMessageW
USER32.dll53CharToOemW
USER32.dll137DefFrameProcA
USER32.dll43CharNextExA
USER32.dll373GetWindowTextA
USER32.dll566SetCursor
USER32.dll280GetIconInfo
USER32.dll597SetPropW
USER32.dll620SetWindowLongW
USER32.dll382HiliteMenuItem
USER32.dll290GetKeyboardLayout
USER32.dll2AdjustWindowRect
USER32.dll391InternalGetWindowText
USER32.dll45CharNextW
USER32.dll266GetDC
USER32.dll535ReplyMessage
USER32.dll348GetSystemMetrics
USER32.dll38CharLowerA
USER32.dll57CharUpperW
USER32.dll181DrawMenuBar
USER32.dll225FindWindowA
USER32.dll623SetWindowRgn
USER32.dll457MapWindowPoints
USER32.dll244GetClassInfoA
USER32.dll575SetFocus
USER32.dll588SetMenuItemInfoW
USER32.dll643SystemParametersInfoA
USER32.dll70CloseDesktop
USER32.dll142DefWindowProcA
USER32.dll548SendMessageA
USER32.dll217EnumThreadWindows
USER32.dll412IsIconic
USER32.dll74CopyAcceleratorTableW
USER32.dll534RemovePropW
USER32.dll316GetMessagePos
USER32.dll176DrawFocusRect
USER32.dll180DrawIconEx
USER32.dll455MapVirtualKeyExW
USER32.dll600SetScrollInfo
USER32.dll381HideCaret
USER32.dll694WaitMessage
USER32.dll438LoadMenuA
USER32.dll191EnableMenuItem
USER32.dll346GetSysColorBrush
USER32.dll700mouse_event
USER32.dll492PeekMessageA
USER32.dll375GetWindowTextLengthW
USER32.dll306GetMenuItemCount
USER32.dll355GetUpdateRect
USER32.dll299GetMenu
USER32.dll485OpenDesktopW
USER32.dll8AppendMenuA
USER32.dll552SendMessageTimeoutW
USER32.dll151DestroyMenu
USER32.dll246GetClassInfoExW
USER32.dll267GetDCEx
USER32.dll342GetScrollRange
USER32.dll314GetMessageA
USER32.dll253GetClientRect
USER32.dll449LookupIconIdFromDirectory
USER32.dll399IsCharAlphaW
USER32.dll243GetCaretPos
USER32.dll531ReleaseDC
USER32.dll240GetAsyncKeyState
USER32.dll227FindWindowExW
USER32.dll420IsZoomed
USER32.dll87CreateDialogIndirectParamW
USER32.dll657TranslateAcceleratorA
USER32.dll320GetMonitorInfoW
USER32.dll427LoadCursorA
USER32.dll192EnableScrollBar
USER32.dll318GetMessageW
USER32.dll40CharLowerBuffW
USER32.dll464MessageBoxExW
USER32.dll144DeferWindowPos
USER32.dll265GetCursorPos
USER32.dll547SendInput
USER32.dll220EnumWindows
USER32.dll431LoadIconA
USER32.dll635ShowScrollBar
USER32.dll293GetKeyboardLayoutNameW
USER32.dll514RegisterClassExW
USER32.dll3AdjustWindowRectEx
USER32.dll470MonitorFromPoint
USER32.dll170DragObject
USER32.dll10ArrangeIconicWindows
USER32.dll704wvsprintfW
USER32.dll347GetSystemMenu
USER32.dll315GetMessageExtraInfo
USER32.dll277GetForegroundWindow
USER32.dll197EndPaint
USER32.dll369GetWindowPlacement
USER32.dll633ShowCursor
USER32.dll313GetMenuStringW
USER32.dll183DrawStateA
USER32.dll149DestroyCursor
USER32.dll41CharLowerW
USER32.dll247GetClassInfoW
USER32.dll648TileWindows
USER32.dll358GetUserObjectInformationW
USER32.dll512RegisterClassA
KERNEL32.dll1094Sleep
KERNEL32.dll823OpenFileMappingW
KERNEL32.dll679HeapReAlloc
KERNEL32.dll988SetCommState
KERNEL32.dll594LoadLibraryA
KERNEL32.dll333FileTimeToLocalFileTime
KERNEL32.dll176CompareFileTime
KERNEL32.dll1054SetMailslotInfo
KERNEL32.dll964lstrcmpiA
KERNEL32.dll714IsDBCSLeadByte
KERNEL32.dll799MapViewOfFile
KERNEL32.dll579GetStdHandle
KERNEL32.dll588GetSystemDirectoryA
KERNEL32.dll243CreateWaitableTimerW
KERNEL32.dll160CallNamedPipeW
KERNEL32.dll757LCMapStringW
KERNEL32.dll655GlobalHandle
KERNEL32.dll652GlobalFree
KERNEL32.dll1143VirtualAlloc
KERNEL32.dll1047SetHandleInformation
KERNEL32.dll509GetLocaleInfoW
KERNEL32.dll375FlushViewOfFile
KERNEL32.dll980SearchPathA
KERNEL32.dll621GetTimeZoneInformation
KERNEL32.dll577GetStartupInfoA
KERNEL32.dll1050SetLastError
KERNEL32.dll203CreateEventW
KERNEL32.dll379FormatMessageW
KERNEL32.dll346FindFirstChangeNotificationW
KERNEL32.dll819OpenEventA
KERNEL32.dll1115TransactNamedPipe
KERNEL32.dll687HeapWalk
KERNEL32.dll649GlobalFindAtomW
KERNEL32.dll497GetFullPathNameW
KERNEL32.dll657GlobalMemoryStatus
KERNEL32.dll1158WaitForMultipleObjectsEx
KERNEL32.dll508GetLocaleInfoA
KERNEL32.dll589GetSystemDirectoryW
KERNEL32.dll533GetNumberFormatA
KERNEL32.dll1025SetCurrentDirectoryA
KERNEL32.dll1057SetPriorityClass
KERNEL32.dll208CreateFileMappingW
KERNEL32.dll713IsBadWritePtr
KERNEL32.dll1036SetEvent
KERNEL32.dll651GlobalFlags
KERNEL32.dll188CopyFileA
KERNEL32.dll229CreateSemaphoreA
KERNEL32.dll381GetModuleFileNameA
KERNEL32.dll682HeapSize
KERNEL32.dll646GlobalCompact
KERNEL32.dll383GetModuleHandleA
KERNEL32.dll219CreateMutexA
KERNEL32.dll1139VerSetConditionMask
KERNEL32.dll616GetThreadTimes
KERNEL32.dll551GetProcAddress
KERNEL32.dll786LockFile
KERNEL32.dll305ExitThread
GDI32.dll454RoundRect
GDI32.dll135CreateBitmap
GDI32.dll523TextOutA
GDI32.dll394GetTextMetricsA
GDI32.dll210ExtFloodFill
GDI32.dll462SelectObject
GDI32.dll357GetNearestColor
GDI32.dll405LPtoDP
GDI32.dll129CombineRgn
GDI32.dll154CreateFontIndirectA
GDI32.dll301GetCharWidth32W
GDI32.dll165CreatePalette
GDI32.dll455SaveDC
GDI32.dll146CreateDIBSection
GDI32.dll428PolyBezier
GDI32.dll388GetTextExtentPoint32W
GDI32.dll359GetObjectA
GDI32.dll506SetTextColor
GDI32.dll173CreateRoundRectRgn
GDI32.dll320GetDIBits
GDI32.dll441RectInRegion
GDI32.dll215FillRgn
GDI32.dll517StartPage
GDI32.dll314GetCurrentObject
GDI32.dll177DPtoLP
GDI32.dll289GetBitmapBits
GDI32.dll188Ellipse
GDI32.dll467SetBitmapDimensionEx
GDI32.dll416OffsetRgn
GDI32.dll452ResizePalette
GDI32.dll158CreateFontW
GDI32.dll140CreateCompatibleBitmap
GDI32.dll420PatBlt
GDI32.dll513SetWindowOrgEx
GDI32.dll205Escape
GDI32.dll519StretchDIBits
GDI32.dll527UnrealizeObject
GDI32.dll192EndPath
GDI32.dll148CreateDiscardableBitmap
GDI32.dll502SetStretchBltMode
GDI32.dll478SetDIBitsToDevice
GDI32.dll137CreateBrushIndirect
GDI32.dll319GetDIBColorTable
GDI32.dll435Polygon
GDI32.dll383GetTextColor
GDI32.dll197EnumFontFamiliesW
GDI32.dll421PathToRegion
GDI32.dll190EndDoc
GDI32.dll179DeleteDC
GDI32.dll331GetFontData
GDI32.dll143CreateDCW
SHLWAPI.dll225StrChrIA
MSVCRT.dll1039vsprintf
MSVCRT.dll946mbtowc
MSVCRT.dll982sprintf
MSVCRT.dll245_controlfp
MSVCRT.dll179__set_app_type
MSVCRT.dll992strcoll
MSVCRT.dll871fgetc
MSVCRT.dll160__p__fmode
MSVCRT.dll155__p__commode
MSVCRT.dll853bsearch
MSVCRT.dll219_amsg_exit
MSVCRT.dll1071wcstombs
MSVCRT.dll1003strncpy
MSVCRT.dll390_initterm
MSVCRT.dll198_acmdln
MSVCRT.dll930iswspace
MSVCRT.dll1062wcsrchr
MSVCRT.dll873fgets
MSVCRT.dll864exit
MSVCRT.dll1007strrchr
MSVCRT.dll414_ismbblead
MSVCRT.dll978setvbuf
MSVCRT.dll82_XcptFilter
MSVCRT.dll291_exit
MSVCRT.dll916isprint
MSVCRT.dll904gets
MSVCRT.dll915islower
MSVCRT.dll867fclose
MSVCRT.dll892fseek
MSVCRT.dll232_cexit
MSVCRT.dll971remove
MSVCRT.dll1016swprintf
MSVCRT.dll1066wcsstr
MSVCRT.dll909isalnum
MSVCRT.dll1057wcsncmp
MSVCRT.dll855calloc
MSVCRT.dll181__setusermatherr
MSVCRT.dll1011strtok
MSVCRT.dll1018swscanf
MSVCRT.dll910isalpha
MSVCRT.dll1049wcscoll
MSVCRT.dll990strchr
MSVCRT.dll993strcpy
MSVCRT.dll921iswalpha
MSVCRT.dll944mbstowcs
MSVCRT.dll1050wcscpy
MSVCRT.dll968rand
MSVCRT.dll114__getmainargs
ordentry_vafunction_name
10x1edd?RtlPathExW@@YGHPANH]A
20x19c1?RtlProviderW@@YGXPAD]A
30x1ec9?GetExpressionOriginal@@YGPAMDKPADK]A
40x1ed3?IncrementObjectExA@@YGFEE]A
50x19df?ClosePointerEx@@YGXND]A
60x1999?DecrementPoint@@YGJJPAJ]A
70x19cb?KillListItemNew@@YGPAFDHDPAG]A
80x19d5?InsertOptionOld@@YGKPADPAJED]A
90x19b7?InvalidateFileA@@YGGPA_NPAM]A
100x1971?RtlRectEx@@YGDF]A
110x19a3?ValidatePointExW@@YGKM]A
120x19ad?HideMonitorOld@@YGXPAINGPAH]A
130x198f?MonitorExW@@YGDI]A
140x1949?RtlExpressionExW@@YGPAIPAMMDI]A
150x197b?IncrementModuleA@@YGKI]A
160x1985?OnHeaderW@@YGXIPAIGN]A
170x1967?LoadModuleNew@@YGPAHF]A
180x1921?IsNotPenExW@@YGIMNNK]A
190x1953?OnFilePathEx@@YGII_NFH]A
200x195d?CopyProjectEx@@YGPAXKIM]A
210x193f?LoadListEx@@YGPAKPADM]A
220x18f9?IsNotFunctionOld@@YGPAFPAE]A
230x192b?CloseSystemW@@YGPAXDJKPAF]A
240x1935?SetPenExA@@YGPANDFGPAH]A
250x1917?EnumPointA@@YGXFNM]A
260x18d1?CrtAppNameOriginal@@YGHH]A
270x1903?RemoveArgumentOld@@YGJMPAM]A
280x190d?GetClassExW@@YGPAIPAJPAJF]A
290x18ef?HideScreenNew@@YGJPAGI_N]A
300x18a9?ShowProcessA@@YGHHJ]A
310x18db?InvalidateFullNameW@@YGPAXGH]A
320x18e5?CopySystemOld@@YGXFII]A
330x18c7?SendSectionOld@@YGDH]A
340x1881?IsNotProfileA@@YGMEDHF]A
350x18b3?DeletePointEx@@YGGPAE]A
360x18bd?IsNotSectionEx@@YGNPAE]A
370x189f?CallStateW@@YGPAXGPAFI_N]A
380x1859?InstallProfileEx@@YGHFKNH]A
390x188b?SendFileExA@@YGKPAI]A
400x1895?InsertSemaphoreA@@YGXK]A
410x1877?SendTextW@@YGPAKPANNDM]A
420x1831?ShowModuleExA@@YGEJF]A
430x1863?ModifySection@@YGFPAJPAJ]A
440x186d?InsertPathW@@YGFPAM]A
450x184f?FreeFilePathEx@@YGFFGMPAG]A
460x1809?IncrementSection@@YGPAEPAI]A
470x183b?FormatMediaTypeW@@YGPAKPADPAMPAJH]A
480x1845?GetDateTimeNew@@YGPAXF]A
490x1827?OnValueNew@@YGNPAJPAFK]A
500x17e1?FormatThreadW@@YGEJJ]A
510x1813?InstallEventExA@@YGPAF_NHFPAJ]A
520x181d?ModifyCommandLineW@@YGDPAH]A
530x17ff?CallProcess@@YGPAINPAF]A
540x17b9?ValidateThread@@YGPAEPAGPAMHD]A
550x17eb?FindTimerW@@YGIH]A
560x17f5?AddCharOld@@YGJPAIGD]A
570x17d7?DecrementDateExA@@YGXFM]A
580x1791?IsHeaderW@@YGPAGDPAKK]A
590x17c3?DecrementTimer@@YGKPAD]A
600x17cd?KillFileA@@YGPAXPAH]A
610x17af?LoadFunctionW@@YGPAHPAE]A
620x1769?InsertCommandLineA@@YGPAGFEPAF]A
630x179b?HideDataEx@@YGPAMGE]A
640x17a5?CrtMessageOriginal@@YGKJPAIMG]A
650x1787?KillKeyboardNew@@YGXHPAJ]A
660x1741?ModifyPointerEx@@YGPAIPAK]A
670x1773?GenerateConfigOld@@YGPAHPAF]A
680x177d?LoadClass@@YGIPA_NMIE]A
690x175f?CrtWindowExW@@YGPAX_NKPAM]A
700x1719?OnConfigW@@YGEN]A
710x174b?HidePointerA@@YGXPAMPAJPAF]A
720x1755?InstallHeaderA@@YGFPAEPADKI]A
730x1737?FindTimerEx@@YGNPADPAJH]A
740x16f1?CrtObjectNew@@YGPAHI]A
750x1723?AddProfileEx@@YGPAHPADD]A
760x172d?SetHeightExW@@YGPAXPANPAH]A
770x170f?SetStringOriginal@@YGEEKKG]A
780x16c9?LoadFunctionNew@@YGXHEGG]A
790x16fb?FreeFilePathNew@@YGEPAEMPAH]A
800x1705?LoadTimerOriginal@@YGHIPAIPAK]A
810x16e7?CrtThreadEx@@YGPA_NG]A
820x16a1?IsWindowA@@YGJDDF]A
830x16d3?DecrementWindowW@@YGEPAHPAEHPAE]A
840x16dd?CallProjectOriginal@@YGEM]A
850x16bf?CancelDateA@@YGXGJFE]A
860x1679?IsAppNameOriginal@@YGDMPAKPAFM]A
870x16ab?CrtAppNameA@@YGXH_NPAMI]A
880x16b5?FreeWidthW@@YGKEPAHDH]A
890x1697?InstallSystem@@YGDFNKPA_N]A
900x1651?CancelDataNew@@YGNJE_NG]A
910x1683?IsValidKeyboardNew@@YGD_NHNJ]A
920x168d?DecrementProviderA@@YGPAEH]A
930x166f?CopyPathExW@@YGFFFNG]A
940x1629?ShowListItemExW@@YGPAGMMG_N]A
950x165b?GenerateAppNameW@@YGXPAJPADKM]A
960x1665?MemoryExA@@YGHPADDHM]A
970x1647?IsValidMediaTypeNew@@YGXF]A
980x1601?LoadFilePathNew@@YGKDPAJPAFK]A
990x1633?InvalidateMutexW@@YGEHH]A
1000x163d?OnValueEx@@YGPAGJMPAE]A
1010x161f?SendDeviceOld@@YG_NNPAHPAE]A
1020x15d9?AddDialogExA@@YGMMIIF]A
1030x160b?CallTimeEx@@YGIPAFF]A
1040x1615?KillSystem@@YGNM]A
1050x15f7?SetConfigExW@@YGPAJPAK]A
1060x15b1?InvalidateTextExW@@YGPAIPAKG]A
1070x15e3?IsDateOriginal@@YGGD]A
1080x15ed?GetCharExW@@YGPAXPAGGE]A
1090x15cf?LoadRectExA@@YGPAIJGJ]A
1100x1589?IncrementProcessNew@@YGNPAFGPAE]A
1110x15bb?CrtProjectEx@@YGHPAGPAIH]A
1120x15c5?GenerateFullNameNew@@YGXKPAKK]A
1130x15a7?PutWindowInfoExW@@YGGD]A
1140x1561?DecrementKeyNameExW@@YGPANPAG]A
1150x1593?FreeDataA@@YGPAMIJPAKM]A
1160x159d?GenerateClassNew@@YGMKFH_N]A
1170x157f?AddTimerW@@YGPAFPAEPAI]A
1180x1539?SendListW@@YGXPAE]A
1190x156b?AddProcessOld@@YGXPAEPAM]A
1200x1575?CopyWidthExA@@YGNPAE]A
1210x1557?ShowFolderOriginal@@YGPAXPAN]A
1220x1511?KillMutexW@@YGHPAJPAM]A
1230x1543?AddModuleOld@@YGXG]A
1240x154d?PutClassA@@YGJPANHD]A
1250x152f?CallExpression@@YGEIJJ]A
1260x14e9?ModifyFileExA@@YGMPAHI]A
1270x151b?RemoveArgumentExA@@YGPAHPADHPAMJ]A
1280x1525?CrtConfigA@@YGHPAE]A
1290x1507?CancelSectionOld@@YGPAKE_N]A
1300x14c1?FormatMediaTypeExA@@YGEPAJ]A
1310x14f3?ValidateMediaTypeExW@@YGKI]A
1320x14fd?FindSemaphoreW@@YGIDJ]A
1330x14df?GenerateVersionEx@@YGFI_NIM]A
1340x1499?SetMutantNew@@YGPAMMNKPAM]A
1350x14cb?FormatAppNameExA@@YGPAJPAFMPAHM]A
1360x14d5?RtlListItem@@YGPAXPAM]A
1370x14b7?RtlPenEx@@YGENEJI]A
1380x1471?KillObjectOld@@YGXHDPAMPAI]A
1390x14a3?RtlFileNew@@YGXIPAGE_N]A
1400x14ad?FindKeyboardEx@@YGXJDEG]A
1410x148f?ValidateListItemNew@@YGXPAJE]A
1420x1449?KillKeyboardW@@YGMGI_N]A
1430x147b?RemoveDeviceOriginal@@YGHPAIIPAIPAK]A
1440x1485?SetProviderExA@@YGFGPAKPAE]A
1450x1467?FormatObject@@YGX_NJM]A
1460x1421?CopyPathOriginal@@YGXMHPAE]A
1470x1453?DeleteKeyNameExA@@YGMPANPA_NK]A
1480x145d?DecrementOptionEx@@YGMPAIPAHPAKM]A
1490x143f?OnFileExA@@YGPAIPAIHD]A
1500x13f9?SetEventW@@YGXPAGIPAMH]A
1510x142b?CrtExpressionExW@@YGID]A
1520x1435?SendExpressionEx@@YGDPAFPAMPAIF]A
1530x1417?IncrementMutantNew@@YGJPAE_NPAEJ]A
1540x13d1?InstallWidthNew@@YGPAJK_N]A
1550x1403?RemoveComponentOriginal@@YGKFE]A
1560x140d?CrtFilePath@@YGMPAFPAKEPAI]A
1570x13ef?InvalidateFilePathExA@@YGPAKNPAEKPAJ]A
1580x13a9?SendMessageA@@YGPAX_NPAJ]A
1590x13db?RtlDirectoryExA@@YGKPAFPAGD]A
1600x13e5?CloseFolderPathA@@YGHHIPAH]A
1610x13c7?InstallPenExW@@YGGFPAD]A
1620x1381?CancelOptionEx@@YGKPA_NPAEE]A
1630x13b3?CancelName@@YGHPAMIKPAH]A
1640x13bd?FormatSystem@@YGEM]A
1650x139f?CrtMonitorOriginal@@YGHN]A
1660x1359?GlobalFileNew@@YG_NF]A
1670x138b?CloseDialogOriginal@@YGPAE_N]A
1680x1395?SendPathNew@@YGPAXFPADNPAH]A
1690x1377?KillFolderPath@@YGPAHKPAHE]A
1700x1331?GetKeyNameExA@@YGNJPAHPAI]A
1710x1363?ValidatePointerOriginal@@YGIGDK]A
1720x136d?FreeNameOld@@YGPAGPAKJ_N]A
1730x134f?KillPointer@@YGPAJPAHE]A
1740x1309?InsertCommandLineNew@@YGGPAJPANK]A
1750x133b?ModifyMutexExW@@YGGGM]A
1760x1345?ShowPointerEx@@YGGEPAFPAEE]A
1770x1327?CommandLineNew@@YGPAKPADDIG]A
1780x12e1?ValidateEventA@@YGPAGPA_NII]A
1790x1313?ShowEventExW@@YGXII]A
1800x131d?AddTimeExW@@YGPADGPAJPAF]A
1810x12ff?KillTaskEx@@YGMDID]A
1820x12b9?RtlPointerW@@YGMPAEPAIPAE]A
1830x12eb?CopyMediaTypeNew@@YGIM_NPAD]A
1840x12f5?ModifyFullNameExW@@YGXPAMK]A
1850x12d7?InsertProcessOld@@YGNPAJPAMGM]A
1860x1291?RemoveFolderEx@@YGI_NPAN]A
1870x12c3?SendDataA@@YGKEGM]A
1880x12cd?IsValidDateTimeA@@YGKNFMG]A
1890x12af?CallWindowInfoA@@YGPAFKK]A
1900x1269?CopyScreenA@@YGMFHD]A
1910x129b?GlobalMutantOriginal@@YGPAEPAMF]A
1920x12a5?OnSizeExW@@YGXPAM]A
1930x1287?LoadPathA@@YGPAJMKE]A
1940x1241?RtlMutex@@YGMJ]A
1950x1273?LoadThreadA@@YGXPAMKPAHPAG]A
1960x127d?RemoveOptionNew@@YGDM]A
1970x125f?LoadObject@@YGEJPAIG]A
1980x1219?IsValidArgumentOld@@YGPAKJN]A
1990x124b?InstallWindowW@@YGJHE]A
2000x1255?CopyComponentA@@YGPAIH_N]A
2010x1237?IncrementTaskA@@YGEPAH]A
2020x11f1?CloseWindowExA@@YGPAXFPAFPAHM]A
2030x1223?InvalidateValueExA@@YGHPAKPAHI]A
2040x122d?ModifyOptionOld@@YGHFDPAE]A
2050x120f?CopyExpressionExA@@YGFNIM]A
2060x11c9?OnPointExW@@YGGIPANHPAF]A
2070x11fb?ValidateFunctionA@@YGPAIGJG]A
2080x1205?OnCharExA@@YGPAXEIH]A
2090x11e7?IsValidValueOriginal@@YGPAEF]A
2100x11a1?OnFullNameExA@@YGKEIPAMG]A
2110x11d3?SetMutant@@YGMGPAD]A
2120x11dd?ModifyState@@YGPAHI]A
2130x11bf?GlobalFolderPathOriginal@@YGIPAIN_N]A
2140x1179?FindConfigOriginal@@YGKFPAMHI]A
2150x11ab?RtlProjectExA@@YGIFPANK]A
2160x11b5?LoadSizeW@@YGPADPANEH]A
2170x1197?CallConfigNew@@YGDK]A
2180x1000?CallWindowW@@YGXKPAM]A
2190x1183?ValidateDirectoryNew@@YGDPANFPAGD]A
2200x118d?InvalidateDateTimeNew@@YGPADPADPAJF]A
2210x37df?DeleteCommandLineExA@@YGPADMIPAG]A
2220x2391?DestinationSysCounterDnDHuuey@@YGKGHE@Z
2230x1014?InvalidateProfileEx@@YGPAHGM]A
2240x100a?RemoveCommandLineEx@@YGXPAHPAMH]A
module_name!58-7Y-g!o__3!6!1.ukxs
flags0
timestamp2010-12-26 10:39:22
version0.0
ordinal_base1
nFunctions224
nNames224
Names(224)0x6e3c
Functions(224)0x6abc
NameOrdinals(224)0x71bc
offsetsizetypecomment
0223232EXE03/25/2011 05:01:22#
35ef0342BMP(23 x 4)#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable
[?] ignoring invalid PEdump::BITMAPINFOHEADER