filename | xaav.exe | |
---|---|---|
size | 223232 (0x36800) | |
md5 | 92c154ef90ccaae424284d1ed7471115 | |
type | PE32 executable for MS Windows (GUI) Intel 80386 32-bit | |
mimetype | application/octet-stream | |
clamav | OK | |
virustotal | → scan with virustotal.com | |
histogram |
MZ Header
signature | MZ |
bytes_in_last_block | 0x90 |
blocks_in_file | 3 |
num_relocs | 0 |
header_paragraphs | 4 |
min_extra_paragraphs | 0 |
max_extra_paragraphs | 0xffff |
ss | 0 |
sp | 0xb8 |
checksum | 0 |
ip | 0 |
cs | 0 |
reloc_table_offset | 0x40 |
overlay_number | 0 |
reserved0 | 0 |
oem_id | 0 |
oem_info | 0 |
reserved2 | 0 |
reserved3 | 0 |
reserved4 | 0 |
reserved5 | 0 |
reserved6 | 0 |
lfanew | 0xd8 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......| 00000040: 36 1a 53 d2 72 7b c2 7e 72 7b 3d 81 72 7b 3d 81 |6.S.r{.~r{=.r{=.| 00000050: 84 03 ae 81 70 7b 3d 81 72 7b 3c 81 76 7b 3d 81 |....p{=.r{<.v{=.| 00000060: 4e 8b 60 81 77 7b 3d 81 69 e6 92 81 7c 7b 3d 81 |N.`.w{=.i...|{=.| 00000070: 69 e6 a6 81 73 7b 3d 81 69 e6 a7 81 73 7b 3d 81 |i...s{=.i...s{=.| 00000080: 69 e6 a0 81 73 7b 3d 81 00 00 00 00 14 00 00 00 |i...s{=.........| 00000090: 00 00 00 00 00 00 00 00 |........ |
PE Header
Sections
name | va | vsize | raw size | flags | |
---|---|---|---|---|---|
.text | 0x1000 | 0x7c28 | 0x7e00 | RWX CODE | |
.zimp | 0x9000 | 0x16a8 | 0x1800 | RW- IDATA | |
.data | 0xb000 | 0x2cb24 | 0x1200 | RW- IDATA | |
.rsrc | 0x38000 | 0x2b446 | 0x2b600 | R-- IDATA | |
.reloc | 0x64000 | 0x5fc | 0x600 | R-- IDATA DISCARDABLE |
Data Directory
module_name | hint | ord | function_name |
---|---|---|---|
USER32.dll | 99 | CreateWindowExW | |
USER32.dll | 171 | DrawAnimatedRects | |
USER32.dll | 601 | SetScrollPos | |
USER32.dll | 532 | RemoveMenu | |
USER32.dll | 486 | OpenIcon | |
USER32.dll | 582 | SetMenu | |
USER32.dll | 699 | keybd_event | |
USER32.dll | 634 | ShowOwnedPopups | |
USER32.dll | 291 | GetKeyboardLayoutList | |
USER32.dll | 274 | GetDlgItemTextW | |
USER32.dll | 76 | CopyImage | |
USER32.dll | 54 | CharUpperA | |
USER32.dll | 143 | DefWindowProcW | |
USER32.dll | 579 | SetLastErrorEx | |
USER32.dll | 56 | CharUpperBuffW | |
USER32.dll | 9 | AppendMenuW | |
USER32.dll | 42 | CharNextA | |
USER32.dll | 413 | IsMenu | |
USER32.dll | 389 | InsertMenuItemW | |
USER32.dll | 553 | SendMessageW | |
USER32.dll | 53 | CharToOemW | |
USER32.dll | 137 | DefFrameProcA | |
USER32.dll | 43 | CharNextExA | |
USER32.dll | 373 | GetWindowTextA | |
USER32.dll | 566 | SetCursor | |
USER32.dll | 280 | GetIconInfo | |
USER32.dll | 597 | SetPropW | |
USER32.dll | 620 | SetWindowLongW | |
USER32.dll | 382 | HiliteMenuItem | |
USER32.dll | 290 | GetKeyboardLayout | |
USER32.dll | 2 | AdjustWindowRect | |
USER32.dll | 391 | InternalGetWindowText | |
USER32.dll | 45 | CharNextW | |
USER32.dll | 266 | GetDC | |
USER32.dll | 535 | ReplyMessage | |
USER32.dll | 348 | GetSystemMetrics | |
USER32.dll | 38 | CharLowerA | |
USER32.dll | 57 | CharUpperW | |
USER32.dll | 181 | DrawMenuBar | |
USER32.dll | 225 | FindWindowA | |
USER32.dll | 623 | SetWindowRgn | |
USER32.dll | 457 | MapWindowPoints | |
USER32.dll | 244 | GetClassInfoA | |
USER32.dll | 575 | SetFocus | |
USER32.dll | 588 | SetMenuItemInfoW | |
USER32.dll | 643 | SystemParametersInfoA | |
USER32.dll | 70 | CloseDesktop | |
USER32.dll | 142 | DefWindowProcA | |
USER32.dll | 548 | SendMessageA | |
USER32.dll | 217 | EnumThreadWindows | |
USER32.dll | 412 | IsIconic | |
USER32.dll | 74 | CopyAcceleratorTableW | |
USER32.dll | 534 | RemovePropW | |
USER32.dll | 316 | GetMessagePos | |
USER32.dll | 176 | DrawFocusRect | |
USER32.dll | 180 | DrawIconEx | |
USER32.dll | 455 | MapVirtualKeyExW | |
USER32.dll | 600 | SetScrollInfo | |
USER32.dll | 381 | HideCaret | |
USER32.dll | 694 | WaitMessage | |
USER32.dll | 438 | LoadMenuA | |
USER32.dll | 191 | EnableMenuItem | |
USER32.dll | 346 | GetSysColorBrush | |
USER32.dll | 700 | mouse_event | |
USER32.dll | 492 | PeekMessageA | |
USER32.dll | 375 | GetWindowTextLengthW | |
USER32.dll | 306 | GetMenuItemCount | |
USER32.dll | 355 | GetUpdateRect | |
USER32.dll | 299 | GetMenu | |
USER32.dll | 485 | OpenDesktopW | |
USER32.dll | 8 | AppendMenuA | |
USER32.dll | 552 | SendMessageTimeoutW | |
USER32.dll | 151 | DestroyMenu | |
USER32.dll | 246 | GetClassInfoExW | |
USER32.dll | 267 | GetDCEx | |
USER32.dll | 342 | GetScrollRange | |
USER32.dll | 314 | GetMessageA | |
USER32.dll | 253 | GetClientRect | |
USER32.dll | 449 | LookupIconIdFromDirectory | |
USER32.dll | 399 | IsCharAlphaW | |
USER32.dll | 243 | GetCaretPos | |
USER32.dll | 531 | ReleaseDC | |
USER32.dll | 240 | GetAsyncKeyState | |
USER32.dll | 227 | FindWindowExW | |
USER32.dll | 420 | IsZoomed | |
USER32.dll | 87 | CreateDialogIndirectParamW | |
USER32.dll | 657 | TranslateAcceleratorA | |
USER32.dll | 320 | GetMonitorInfoW | |
USER32.dll | 427 | LoadCursorA | |
USER32.dll | 192 | EnableScrollBar | |
USER32.dll | 318 | GetMessageW | |
USER32.dll | 40 | CharLowerBuffW | |
USER32.dll | 464 | MessageBoxExW | |
USER32.dll | 144 | DeferWindowPos | |
USER32.dll | 265 | GetCursorPos | |
USER32.dll | 547 | SendInput | |
USER32.dll | 220 | EnumWindows | |
USER32.dll | 431 | LoadIconA | |
USER32.dll | 635 | ShowScrollBar | |
USER32.dll | 293 | GetKeyboardLayoutNameW | |
USER32.dll | 514 | RegisterClassExW | |
USER32.dll | 3 | AdjustWindowRectEx | |
USER32.dll | 470 | MonitorFromPoint | |
USER32.dll | 170 | DragObject | |
USER32.dll | 10 | ArrangeIconicWindows | |
USER32.dll | 704 | wvsprintfW | |
USER32.dll | 347 | GetSystemMenu | |
USER32.dll | 315 | GetMessageExtraInfo | |
USER32.dll | 277 | GetForegroundWindow | |
USER32.dll | 197 | EndPaint | |
USER32.dll | 369 | GetWindowPlacement | |
USER32.dll | 633 | ShowCursor | |
USER32.dll | 313 | GetMenuStringW | |
USER32.dll | 183 | DrawStateA | |
USER32.dll | 149 | DestroyCursor | |
USER32.dll | 41 | CharLowerW | |
USER32.dll | 247 | GetClassInfoW | |
USER32.dll | 648 | TileWindows | |
USER32.dll | 358 | GetUserObjectInformationW | |
USER32.dll | 512 | RegisterClassA | |
KERNEL32.dll | 1094 | Sleep | |
KERNEL32.dll | 823 | OpenFileMappingW | |
KERNEL32.dll | 679 | HeapReAlloc | |
KERNEL32.dll | 988 | SetCommState | |
KERNEL32.dll | 594 | LoadLibraryA | |
KERNEL32.dll | 333 | FileTimeToLocalFileTime | |
KERNEL32.dll | 176 | CompareFileTime | |
KERNEL32.dll | 1054 | SetMailslotInfo | |
KERNEL32.dll | 964 | lstrcmpiA | |
KERNEL32.dll | 714 | IsDBCSLeadByte | |
KERNEL32.dll | 799 | MapViewOfFile | |
KERNEL32.dll | 579 | GetStdHandle | |
KERNEL32.dll | 588 | GetSystemDirectoryA | |
KERNEL32.dll | 243 | CreateWaitableTimerW | |
KERNEL32.dll | 160 | CallNamedPipeW | |
KERNEL32.dll | 757 | LCMapStringW | |
KERNEL32.dll | 655 | GlobalHandle | |
KERNEL32.dll | 652 | GlobalFree | |
KERNEL32.dll | 1143 | VirtualAlloc | |
KERNEL32.dll | 1047 | SetHandleInformation | |
KERNEL32.dll | 509 | GetLocaleInfoW | |
KERNEL32.dll | 375 | FlushViewOfFile | |
KERNEL32.dll | 980 | SearchPathA | |
KERNEL32.dll | 621 | GetTimeZoneInformation | |
KERNEL32.dll | 577 | GetStartupInfoA | |
KERNEL32.dll | 1050 | SetLastError | |
KERNEL32.dll | 203 | CreateEventW | |
KERNEL32.dll | 379 | FormatMessageW | |
KERNEL32.dll | 346 | FindFirstChangeNotificationW | |
KERNEL32.dll | 819 | OpenEventA | |
KERNEL32.dll | 1115 | TransactNamedPipe | |
KERNEL32.dll | 687 | HeapWalk | |
KERNEL32.dll | 649 | GlobalFindAtomW | |
KERNEL32.dll | 497 | GetFullPathNameW | |
KERNEL32.dll | 657 | GlobalMemoryStatus | |
KERNEL32.dll | 1158 | WaitForMultipleObjectsEx | |
KERNEL32.dll | 508 | GetLocaleInfoA | |
KERNEL32.dll | 589 | GetSystemDirectoryW | |
KERNEL32.dll | 533 | GetNumberFormatA | |
KERNEL32.dll | 1025 | SetCurrentDirectoryA | |
KERNEL32.dll | 1057 | SetPriorityClass | |
KERNEL32.dll | 208 | CreateFileMappingW | |
KERNEL32.dll | 713 | IsBadWritePtr | |
KERNEL32.dll | 1036 | SetEvent | |
KERNEL32.dll | 651 | GlobalFlags | |
KERNEL32.dll | 188 | CopyFileA | |
KERNEL32.dll | 229 | CreateSemaphoreA | |
KERNEL32.dll | 381 | GetModuleFileNameA | |
KERNEL32.dll | 682 | HeapSize | |
KERNEL32.dll | 646 | GlobalCompact | |
KERNEL32.dll | 383 | GetModuleHandleA | |
KERNEL32.dll | 219 | CreateMutexA | |
KERNEL32.dll | 1139 | VerSetConditionMask | |
KERNEL32.dll | 616 | GetThreadTimes | |
KERNEL32.dll | 551 | GetProcAddress | |
KERNEL32.dll | 786 | LockFile | |
KERNEL32.dll | 305 | ExitThread | |
GDI32.dll | 454 | RoundRect | |
GDI32.dll | 135 | CreateBitmap | |
GDI32.dll | 523 | TextOutA | |
GDI32.dll | 394 | GetTextMetricsA | |
GDI32.dll | 210 | ExtFloodFill | |
GDI32.dll | 462 | SelectObject | |
GDI32.dll | 357 | GetNearestColor | |
GDI32.dll | 405 | LPtoDP | |
GDI32.dll | 129 | CombineRgn | |
GDI32.dll | 154 | CreateFontIndirectA | |
GDI32.dll | 301 | GetCharWidth32W | |
GDI32.dll | 165 | CreatePalette | |
GDI32.dll | 455 | SaveDC | |
GDI32.dll | 146 | CreateDIBSection | |
GDI32.dll | 428 | PolyBezier | |
GDI32.dll | 388 | GetTextExtentPoint32W | |
GDI32.dll | 359 | GetObjectA | |
GDI32.dll | 506 | SetTextColor | |
GDI32.dll | 173 | CreateRoundRectRgn | |
GDI32.dll | 320 | GetDIBits | |
GDI32.dll | 441 | RectInRegion | |
GDI32.dll | 215 | FillRgn | |
GDI32.dll | 517 | StartPage | |
GDI32.dll | 314 | GetCurrentObject | |
GDI32.dll | 177 | DPtoLP | |
GDI32.dll | 289 | GetBitmapBits | |
GDI32.dll | 188 | Ellipse | |
GDI32.dll | 467 | SetBitmapDimensionEx | |
GDI32.dll | 416 | OffsetRgn | |
GDI32.dll | 452 | ResizePalette | |
GDI32.dll | 158 | CreateFontW | |
GDI32.dll | 140 | CreateCompatibleBitmap | |
GDI32.dll | 420 | PatBlt | |
GDI32.dll | 513 | SetWindowOrgEx | |
GDI32.dll | 205 | Escape | |
GDI32.dll | 519 | StretchDIBits | |
GDI32.dll | 527 | UnrealizeObject | |
GDI32.dll | 192 | EndPath | |
GDI32.dll | 148 | CreateDiscardableBitmap | |
GDI32.dll | 502 | SetStretchBltMode | |
GDI32.dll | 478 | SetDIBitsToDevice | |
GDI32.dll | 137 | CreateBrushIndirect | |
GDI32.dll | 319 | GetDIBColorTable | |
GDI32.dll | 435 | Polygon | |
GDI32.dll | 383 | GetTextColor | |
GDI32.dll | 197 | EnumFontFamiliesW | |
GDI32.dll | 421 | PathToRegion | |
GDI32.dll | 190 | EndDoc | |
GDI32.dll | 179 | DeleteDC | |
GDI32.dll | 331 | GetFontData | |
GDI32.dll | 143 | CreateDCW | |
SHLWAPI.dll | 225 | StrChrIA | |
MSVCRT.dll | 1039 | vsprintf | |
MSVCRT.dll | 946 | mbtowc | |
MSVCRT.dll | 982 | sprintf | |
MSVCRT.dll | 245 | _controlfp | |
MSVCRT.dll | 179 | __set_app_type | |
MSVCRT.dll | 992 | strcoll | |
MSVCRT.dll | 871 | fgetc | |
MSVCRT.dll | 160 | __p__fmode | |
MSVCRT.dll | 155 | __p__commode | |
MSVCRT.dll | 853 | bsearch | |
MSVCRT.dll | 219 | _amsg_exit | |
MSVCRT.dll | 1071 | wcstombs | |
MSVCRT.dll | 1003 | strncpy | |
MSVCRT.dll | 390 | _initterm | |
MSVCRT.dll | 198 | _acmdln | |
MSVCRT.dll | 930 | iswspace | |
MSVCRT.dll | 1062 | wcsrchr | |
MSVCRT.dll | 873 | fgets | |
MSVCRT.dll | 864 | exit | |
MSVCRT.dll | 1007 | strrchr | |
MSVCRT.dll | 414 | _ismbblead | |
MSVCRT.dll | 978 | setvbuf | |
MSVCRT.dll | 82 | _XcptFilter | |
MSVCRT.dll | 291 | _exit | |
MSVCRT.dll | 916 | isprint | |
MSVCRT.dll | 904 | gets | |
MSVCRT.dll | 915 | islower | |
MSVCRT.dll | 867 | fclose | |
MSVCRT.dll | 892 | fseek | |
MSVCRT.dll | 232 | _cexit | |
MSVCRT.dll | 971 | remove | |
MSVCRT.dll | 1016 | swprintf | |
MSVCRT.dll | 1066 | wcsstr | |
MSVCRT.dll | 909 | isalnum | |
MSVCRT.dll | 1057 | wcsncmp | |
MSVCRT.dll | 855 | calloc | |
MSVCRT.dll | 181 | __setusermatherr | |
MSVCRT.dll | 1011 | strtok | |
MSVCRT.dll | 1018 | swscanf | |
MSVCRT.dll | 910 | isalpha | |
MSVCRT.dll | 1049 | wcscoll | |
MSVCRT.dll | 990 | strchr | |
MSVCRT.dll | 993 | strcpy | |
MSVCRT.dll | 921 | iswalpha | |
MSVCRT.dll | 944 | mbstowcs | |
MSVCRT.dll | 1050 | wcscpy | |
MSVCRT.dll | 968 | rand | |
MSVCRT.dll | 114 | __getmainargs |
ord | entry_va | function_name | |
---|---|---|---|
1 | 0x1edd | ?RtlPathExW@@YGHPANH]A | |
2 | 0x19c1 | ?RtlProviderW@@YGXPAD]A | |
3 | 0x1ec9 | ?GetExpressionOriginal@@YGPAMDKPADK]A | |
4 | 0x1ed3 | ?IncrementObjectExA@@YGFEE]A | |
5 | 0x19df | ?ClosePointerEx@@YGXND]A | |
6 | 0x1999 | ?DecrementPoint@@YGJJPAJ]A | |
7 | 0x19cb | ?KillListItemNew@@YGPAFDHDPAG]A | |
8 | 0x19d5 | ?InsertOptionOld@@YGKPADPAJED]A | |
9 | 0x19b7 | ?InvalidateFileA@@YGGPA_NPAM]A | |
10 | 0x1971 | ?RtlRectEx@@YGDF]A | |
11 | 0x19a3 | ?ValidatePointExW@@YGKM]A | |
12 | 0x19ad | ?HideMonitorOld@@YGXPAINGPAH]A | |
13 | 0x198f | ?MonitorExW@@YGDI]A | |
14 | 0x1949 | ?RtlExpressionExW@@YGPAIPAMMDI]A | |
15 | 0x197b | ?IncrementModuleA@@YGKI]A | |
16 | 0x1985 | ?OnHeaderW@@YGXIPAIGN]A | |
17 | 0x1967 | ?LoadModuleNew@@YGPAHF]A | |
18 | 0x1921 | ?IsNotPenExW@@YGIMNNK]A | |
19 | 0x1953 | ?OnFilePathEx@@YGII_NFH]A | |
20 | 0x195d | ?CopyProjectEx@@YGPAXKIM]A | |
21 | 0x193f | ?LoadListEx@@YGPAKPADM]A | |
22 | 0x18f9 | ?IsNotFunctionOld@@YGPAFPAE]A | |
23 | 0x192b | ?CloseSystemW@@YGPAXDJKPAF]A | |
24 | 0x1935 | ?SetPenExA@@YGPANDFGPAH]A | |
25 | 0x1917 | ?EnumPointA@@YGXFNM]A | |
26 | 0x18d1 | ?CrtAppNameOriginal@@YGHH]A | |
27 | 0x1903 | ?RemoveArgumentOld@@YGJMPAM]A | |
28 | 0x190d | ?GetClassExW@@YGPAIPAJPAJF]A | |
29 | 0x18ef | ?HideScreenNew@@YGJPAGI_N]A | |
30 | 0x18a9 | ?ShowProcessA@@YGHHJ]A | |
31 | 0x18db | ?InvalidateFullNameW@@YGPAXGH]A | |
32 | 0x18e5 | ?CopySystemOld@@YGXFII]A | |
33 | 0x18c7 | ?SendSectionOld@@YGDH]A | |
34 | 0x1881 | ?IsNotProfileA@@YGMEDHF]A | |
35 | 0x18b3 | ?DeletePointEx@@YGGPAE]A | |
36 | 0x18bd | ?IsNotSectionEx@@YGNPAE]A | |
37 | 0x189f | ?CallStateW@@YGPAXGPAFI_N]A | |
38 | 0x1859 | ?InstallProfileEx@@YGHFKNH]A | |
39 | 0x188b | ?SendFileExA@@YGKPAI]A | |
40 | 0x1895 | ?InsertSemaphoreA@@YGXK]A | |
41 | 0x1877 | ?SendTextW@@YGPAKPANNDM]A | |
42 | 0x1831 | ?ShowModuleExA@@YGEJF]A | |
43 | 0x1863 | ?ModifySection@@YGFPAJPAJ]A | |
44 | 0x186d | ?InsertPathW@@YGFPAM]A | |
45 | 0x184f | ?FreeFilePathEx@@YGFFGMPAG]A | |
46 | 0x1809 | ?IncrementSection@@YGPAEPAI]A | |
47 | 0x183b | ?FormatMediaTypeW@@YGPAKPADPAMPAJH]A | |
48 | 0x1845 | ?GetDateTimeNew@@YGPAXF]A | |
49 | 0x1827 | ?OnValueNew@@YGNPAJPAFK]A | |
50 | 0x17e1 | ?FormatThreadW@@YGEJJ]A | |
51 | 0x1813 | ?InstallEventExA@@YGPAF_NHFPAJ]A | |
52 | 0x181d | ?ModifyCommandLineW@@YGDPAH]A | |
53 | 0x17ff | ?CallProcess@@YGPAINPAF]A | |
54 | 0x17b9 | ?ValidateThread@@YGPAEPAGPAMHD]A | |
55 | 0x17eb | ?FindTimerW@@YGIH]A | |
56 | 0x17f5 | ?AddCharOld@@YGJPAIGD]A | |
57 | 0x17d7 | ?DecrementDateExA@@YGXFM]A | |
58 | 0x1791 | ?IsHeaderW@@YGPAGDPAKK]A | |
59 | 0x17c3 | ?DecrementTimer@@YGKPAD]A | |
60 | 0x17cd | ?KillFileA@@YGPAXPAH]A | |
61 | 0x17af | ?LoadFunctionW@@YGPAHPAE]A | |
62 | 0x1769 | ?InsertCommandLineA@@YGPAGFEPAF]A | |
63 | 0x179b | ?HideDataEx@@YGPAMGE]A | |
64 | 0x17a5 | ?CrtMessageOriginal@@YGKJPAIMG]A | |
65 | 0x1787 | ?KillKeyboardNew@@YGXHPAJ]A | |
66 | 0x1741 | ?ModifyPointerEx@@YGPAIPAK]A | |
67 | 0x1773 | ?GenerateConfigOld@@YGPAHPAF]A | |
68 | 0x177d | ?LoadClass@@YGIPA_NMIE]A | |
69 | 0x175f | ?CrtWindowExW@@YGPAX_NKPAM]A | |
70 | 0x1719 | ?OnConfigW@@YGEN]A | |
71 | 0x174b | ?HidePointerA@@YGXPAMPAJPAF]A | |
72 | 0x1755 | ?InstallHeaderA@@YGFPAEPADKI]A | |
73 | 0x1737 | ?FindTimerEx@@YGNPADPAJH]A | |
74 | 0x16f1 | ?CrtObjectNew@@YGPAHI]A | |
75 | 0x1723 | ?AddProfileEx@@YGPAHPADD]A | |
76 | 0x172d | ?SetHeightExW@@YGPAXPANPAH]A | |
77 | 0x170f | ?SetStringOriginal@@YGEEKKG]A | |
78 | 0x16c9 | ?LoadFunctionNew@@YGXHEGG]A | |
79 | 0x16fb | ?FreeFilePathNew@@YGEPAEMPAH]A | |
80 | 0x1705 | ?LoadTimerOriginal@@YGHIPAIPAK]A | |
81 | 0x16e7 | ?CrtThreadEx@@YGPA_NG]A | |
82 | 0x16a1 | ?IsWindowA@@YGJDDF]A | |
83 | 0x16d3 | ?DecrementWindowW@@YGEPAHPAEHPAE]A | |
84 | 0x16dd | ?CallProjectOriginal@@YGEM]A | |
85 | 0x16bf | ?CancelDateA@@YGXGJFE]A | |
86 | 0x1679 | ?IsAppNameOriginal@@YGDMPAKPAFM]A | |
87 | 0x16ab | ?CrtAppNameA@@YGXH_NPAMI]A | |
88 | 0x16b5 | ?FreeWidthW@@YGKEPAHDH]A | |
89 | 0x1697 | ?InstallSystem@@YGDFNKPA_N]A | |
90 | 0x1651 | ?CancelDataNew@@YGNJE_NG]A | |
91 | 0x1683 | ?IsValidKeyboardNew@@YGD_NHNJ]A | |
92 | 0x168d | ?DecrementProviderA@@YGPAEH]A | |
93 | 0x166f | ?CopyPathExW@@YGFFFNG]A | |
94 | 0x1629 | ?ShowListItemExW@@YGPAGMMG_N]A | |
95 | 0x165b | ?GenerateAppNameW@@YGXPAJPADKM]A | |
96 | 0x1665 | ?MemoryExA@@YGHPADDHM]A | |
97 | 0x1647 | ?IsValidMediaTypeNew@@YGXF]A | |
98 | 0x1601 | ?LoadFilePathNew@@YGKDPAJPAFK]A | |
99 | 0x1633 | ?InvalidateMutexW@@YGEHH]A | |
100 | 0x163d | ?OnValueEx@@YGPAGJMPAE]A | |
101 | 0x161f | ?SendDeviceOld@@YG_NNPAHPAE]A | |
102 | 0x15d9 | ?AddDialogExA@@YGMMIIF]A | |
103 | 0x160b | ?CallTimeEx@@YGIPAFF]A | |
104 | 0x1615 | ?KillSystem@@YGNM]A | |
105 | 0x15f7 | ?SetConfigExW@@YGPAJPAK]A | |
106 | 0x15b1 | ?InvalidateTextExW@@YGPAIPAKG]A | |
107 | 0x15e3 | ?IsDateOriginal@@YGGD]A | |
108 | 0x15ed | ?GetCharExW@@YGPAXPAGGE]A | |
109 | 0x15cf | ?LoadRectExA@@YGPAIJGJ]A | |
110 | 0x1589 | ?IncrementProcessNew@@YGNPAFGPAE]A | |
111 | 0x15bb | ?CrtProjectEx@@YGHPAGPAIH]A | |
112 | 0x15c5 | ?GenerateFullNameNew@@YGXKPAKK]A | |
113 | 0x15a7 | ?PutWindowInfoExW@@YGGD]A | |
114 | 0x1561 | ?DecrementKeyNameExW@@YGPANPAG]A | |
115 | 0x1593 | ?FreeDataA@@YGPAMIJPAKM]A | |
116 | 0x159d | ?GenerateClassNew@@YGMKFH_N]A | |
117 | 0x157f | ?AddTimerW@@YGPAFPAEPAI]A | |
118 | 0x1539 | ?SendListW@@YGXPAE]A | |
119 | 0x156b | ?AddProcessOld@@YGXPAEPAM]A | |
120 | 0x1575 | ?CopyWidthExA@@YGNPAE]A | |
121 | 0x1557 | ?ShowFolderOriginal@@YGPAXPAN]A | |
122 | 0x1511 | ?KillMutexW@@YGHPAJPAM]A | |
123 | 0x1543 | ?AddModuleOld@@YGXG]A | |
124 | 0x154d | ?PutClassA@@YGJPANHD]A | |
125 | 0x152f | ?CallExpression@@YGEIJJ]A | |
126 | 0x14e9 | ?ModifyFileExA@@YGMPAHI]A | |
127 | 0x151b | ?RemoveArgumentExA@@YGPAHPADHPAMJ]A | |
128 | 0x1525 | ?CrtConfigA@@YGHPAE]A | |
129 | 0x1507 | ?CancelSectionOld@@YGPAKE_N]A | |
130 | 0x14c1 | ?FormatMediaTypeExA@@YGEPAJ]A | |
131 | 0x14f3 | ?ValidateMediaTypeExW@@YGKI]A | |
132 | 0x14fd | ?FindSemaphoreW@@YGIDJ]A | |
133 | 0x14df | ?GenerateVersionEx@@YGFI_NIM]A | |
134 | 0x1499 | ?SetMutantNew@@YGPAMMNKPAM]A | |
135 | 0x14cb | ?FormatAppNameExA@@YGPAJPAFMPAHM]A | |
136 | 0x14d5 | ?RtlListItem@@YGPAXPAM]A | |
137 | 0x14b7 | ?RtlPenEx@@YGENEJI]A | |
138 | 0x1471 | ?KillObjectOld@@YGXHDPAMPAI]A | |
139 | 0x14a3 | ?RtlFileNew@@YGXIPAGE_N]A | |
140 | 0x14ad | ?FindKeyboardEx@@YGXJDEG]A | |
141 | 0x148f | ?ValidateListItemNew@@YGXPAJE]A | |
142 | 0x1449 | ?KillKeyboardW@@YGMGI_N]A | |
143 | 0x147b | ?RemoveDeviceOriginal@@YGHPAIIPAIPAK]A | |
144 | 0x1485 | ?SetProviderExA@@YGFGPAKPAE]A | |
145 | 0x1467 | ?FormatObject@@YGX_NJM]A | |
146 | 0x1421 | ?CopyPathOriginal@@YGXMHPAE]A | |
147 | 0x1453 | ?DeleteKeyNameExA@@YGMPANPA_NK]A | |
148 | 0x145d | ?DecrementOptionEx@@YGMPAIPAHPAKM]A | |
149 | 0x143f | ?OnFileExA@@YGPAIPAIHD]A | |
150 | 0x13f9 | ?SetEventW@@YGXPAGIPAMH]A | |
151 | 0x142b | ?CrtExpressionExW@@YGID]A | |
152 | 0x1435 | ?SendExpressionEx@@YGDPAFPAMPAIF]A | |
153 | 0x1417 | ?IncrementMutantNew@@YGJPAE_NPAEJ]A | |
154 | 0x13d1 | ?InstallWidthNew@@YGPAJK_N]A | |
155 | 0x1403 | ?RemoveComponentOriginal@@YGKFE]A | |
156 | 0x140d | ?CrtFilePath@@YGMPAFPAKEPAI]A | |
157 | 0x13ef | ?InvalidateFilePathExA@@YGPAKNPAEKPAJ]A | |
158 | 0x13a9 | ?SendMessageA@@YGPAX_NPAJ]A | |
159 | 0x13db | ?RtlDirectoryExA@@YGKPAFPAGD]A | |
160 | 0x13e5 | ?CloseFolderPathA@@YGHHIPAH]A | |
161 | 0x13c7 | ?InstallPenExW@@YGGFPAD]A | |
162 | 0x1381 | ?CancelOptionEx@@YGKPA_NPAEE]A | |
163 | 0x13b3 | ?CancelName@@YGHPAMIKPAH]A | |
164 | 0x13bd | ?FormatSystem@@YGEM]A | |
165 | 0x139f | ?CrtMonitorOriginal@@YGHN]A | |
166 | 0x1359 | ?GlobalFileNew@@YG_NF]A | |
167 | 0x138b | ?CloseDialogOriginal@@YGPAE_N]A | |
168 | 0x1395 | ?SendPathNew@@YGPAXFPADNPAH]A | |
169 | 0x1377 | ?KillFolderPath@@YGPAHKPAHE]A | |
170 | 0x1331 | ?GetKeyNameExA@@YGNJPAHPAI]A | |
171 | 0x1363 | ?ValidatePointerOriginal@@YGIGDK]A | |
172 | 0x136d | ?FreeNameOld@@YGPAGPAKJ_N]A | |
173 | 0x134f | ?KillPointer@@YGPAJPAHE]A | |
174 | 0x1309 | ?InsertCommandLineNew@@YGGPAJPANK]A | |
175 | 0x133b | ?ModifyMutexExW@@YGGGM]A | |
176 | 0x1345 | ?ShowPointerEx@@YGGEPAFPAEE]A | |
177 | 0x1327 | ?CommandLineNew@@YGPAKPADDIG]A | |
178 | 0x12e1 | ?ValidateEventA@@YGPAGPA_NII]A | |
179 | 0x1313 | ?ShowEventExW@@YGXII]A | |
180 | 0x131d | ?AddTimeExW@@YGPADGPAJPAF]A | |
181 | 0x12ff | ?KillTaskEx@@YGMDID]A | |
182 | 0x12b9 | ?RtlPointerW@@YGMPAEPAIPAE]A | |
183 | 0x12eb | ?CopyMediaTypeNew@@YGIM_NPAD]A | |
184 | 0x12f5 | ?ModifyFullNameExW@@YGXPAMK]A | |
185 | 0x12d7 | ?InsertProcessOld@@YGNPAJPAMGM]A | |
186 | 0x1291 | ?RemoveFolderEx@@YGI_NPAN]A | |
187 | 0x12c3 | ?SendDataA@@YGKEGM]A | |
188 | 0x12cd | ?IsValidDateTimeA@@YGKNFMG]A | |
189 | 0x12af | ?CallWindowInfoA@@YGPAFKK]A | |
190 | 0x1269 | ?CopyScreenA@@YGMFHD]A | |
191 | 0x129b | ?GlobalMutantOriginal@@YGPAEPAMF]A | |
192 | 0x12a5 | ?OnSizeExW@@YGXPAM]A | |
193 | 0x1287 | ?LoadPathA@@YGPAJMKE]A | |
194 | 0x1241 | ?RtlMutex@@YGMJ]A | |
195 | 0x1273 | ?LoadThreadA@@YGXPAMKPAHPAG]A | |
196 | 0x127d | ?RemoveOptionNew@@YGDM]A | |
197 | 0x125f | ?LoadObject@@YGEJPAIG]A | |
198 | 0x1219 | ?IsValidArgumentOld@@YGPAKJN]A | |
199 | 0x124b | ?InstallWindowW@@YGJHE]A | |
200 | 0x1255 | ?CopyComponentA@@YGPAIH_N]A | |
201 | 0x1237 | ?IncrementTaskA@@YGEPAH]A | |
202 | 0x11f1 | ?CloseWindowExA@@YGPAXFPAFPAHM]A | |
203 | 0x1223 | ?InvalidateValueExA@@YGHPAKPAHI]A | |
204 | 0x122d | ?ModifyOptionOld@@YGHFDPAE]A | |
205 | 0x120f | ?CopyExpressionExA@@YGFNIM]A | |
206 | 0x11c9 | ?OnPointExW@@YGGIPANHPAF]A | |
207 | 0x11fb | ?ValidateFunctionA@@YGPAIGJG]A | |
208 | 0x1205 | ?OnCharExA@@YGPAXEIH]A | |
209 | 0x11e7 | ?IsValidValueOriginal@@YGPAEF]A | |
210 | 0x11a1 | ?OnFullNameExA@@YGKEIPAMG]A | |
211 | 0x11d3 | ?SetMutant@@YGMGPAD]A | |
212 | 0x11dd | ?ModifyState@@YGPAHI]A | |
213 | 0x11bf | ?GlobalFolderPathOriginal@@YGIPAIN_N]A | |
214 | 0x1179 | ?FindConfigOriginal@@YGKFPAMHI]A | |
215 | 0x11ab | ?RtlProjectExA@@YGIFPANK]A | |
216 | 0x11b5 | ?LoadSizeW@@YGPADPANEH]A | |
217 | 0x1197 | ?CallConfigNew@@YGDK]A | |
218 | 0x1000 | ?CallWindowW@@YGXKPAM]A | |
219 | 0x1183 | ?ValidateDirectoryNew@@YGDPANFPAGD]A | |
220 | 0x118d | ?InvalidateDateTimeNew@@YGPADPADPAJF]A | |
221 | 0x37df | ?DeleteCommandLineExA@@YGPADMIPAG]A | |
222 | 0x2391 | ?DestinationSysCounterDnDHuuey@@YGKGHE@Z | |
223 | 0x1014 | ?InvalidateProfileEx@@YGPAHGM]A | |
224 | 0x100a | ?RemoveCommandLineEx@@YGXPAHPAMH]A |
![]() |
Please donate some bucks to keep this site up and running: | |
Ko-fi | |
---|---|
Yandex.Money | |
Thank you! |
[?] ignoring invalid PEdump::BITMAPINFOHEADER