31cee7ed0822a260.exe

info
MZ
PE
imports
foremost
hexdump
disasm
log
discuss
donate

filename	31cee7ed0822a260.exe
size	43520 (0xaa00)
md5	afbd67f2f91748543c062da5ff55507f

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xe0

Rich Header

lib id	version	times used
96	3194	12
1	0	244
29	9466	7
6	2134	172
105	2067	183
15	3077	5
95	3343	157
93	3077	14

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	5
TimeDateStamp	0x52470d35
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x10a
Magic	0x10b
LinkerVersion	9.0
SizeOfCode	0xc00
SizeOfInitializedData	0xa800
SizeOfUninitializedData	0x5000
AddressOfEntryPoint	0x1671
BaseOfCode	0x1000
BaseOfData	0x2000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0xf000
SizeOfHeaders	0x400
CheckSum	0
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x107000
SizeOfStackCommit	0x9000
SizeOfHeapReserve	0x35000
SizeOfHeapCommit	0x1c000
LoaderFlags	0x100000
NumberOfRvaAndSizes	0x10

Packer / Compiler

FASM v1.5x

Sections

name	va	vsize	raw size	flags
.text	0x1000	0xb54	0xc00	R-X CODE
.rdata	0x2000	0x525a	0x5400	RW- IDATA
.data	0x8000	0x4e4e	0x4000	RW- IDATA UDATA
.reloc	0xd000	0x324	0x400	R-- IDATA DISCARDABLE
.tls	0xe000	8	0x200	RW-

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x2c00	0xf0
RESOURCE	0	0
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0xd000	0x324
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0x4d60	0x18
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x2000	0x600
Delay_IAT	0	0
CLR_Header	0	0

TLS

raw start	raw end	index	callbks	zero fill	flags
0x404d78	0x404d80	0x40e000	0x404d70	0	0

module_name	hint	function_name
ODBCJT32.dll	508	InitDialogAgain
ODBCJT32.dll	138	SQLSetConnectAttrW
ODBCJT32.dll	135	SQLGetDiagRecW
ODBCJT32.dll	172	SQLSetDescFieldW
ODBCJT32.dll	67	SQLSetPos
ODBCJT32.dll	60	SQLMoreResults
ODBCJT32.dll	13	SQLFreeConnect
ODBCJT32.dll	15	SQLFreeStmt
ODBCJT32.dll	2	SQLAllocStmt
ODBCJT32.dll	74	SQLSetEnvAttr
ODBCJT32.dll	68	SQLSetScrollOptions
ODBCJT32.dll	58	SQLExtendedFetch
USER32.dll	242	GetAsyncKeyState
USER32.dll	89	CreateIconFromResourceEx
USER32.dll	500	OemToCharW
USER32.dll	311	GetMenuState
USER32.dll	450	LoadKeyboardLayoutA
USER32.dll	385	IMPGetIMEA
USER32.dll	565	ScrollWindowEx
USER32.dll	73	CopyImage
USER32.dll	623	SetScrollPos
USER32.dll	207	EnumDesktopsW
USER32.dll	627	SetSysColors
USER32.dll	609	SetMenuItemBitmaps
USER32.dll	70	CopyAcceleratorTableA
USER32.dll	375	GetWindowTextA
USER32.dll	569	SendIMEMessageExW
USER32.dll	479	MessageBoxA
USER32.dll	144	DeferWindowPos
USER32.dll	592	SetDebugErrorLevel
USER32.dll	372	GetWindowRect
USER32.dll	398	InsertMenuItemA
USER32.dll	300	GetMenu
USER32.dll	279	GetForegroundWindow
USER32.dll	425	IsRectEmpty
USER32.dll	255	GetClientRect
USER32.dll	414	IsChild
USER32.dll	143	DefWindowProcW
USER32.dll	451	LoadKeyboardLayoutEx
USER32.dll	327	GetProcessDefaultLayout
USER32.dll	81	CreateDesktopW
USER32.dll	378	GetWindowTextW
USER32.dll	270	GetDesktopWindow
USER32.dll	230	FindWindowW
USER32.dll	347	GetSysColorBrush
USER32.dll	278	GetFocus
USER32.dll	452	LoadKeyboardLayoutW
USER32.dll	289	GetKeyState
USER32.dll	11	AttachThreadInput
USER32.dll	227	FindWindowA
MSI.dll	246	MsiQueryFeatureStateExA
MSI.dll	14	MsiDatabaseApplyTransformW
MSI.dll	23	MsiDatabaseImportW
MSI.dll	57	MsiGetFeatureValidStatesW
MSI.dll	35	MsiEnumComponentsA
MSI.dll	112	MsiRecordGetStringA
MSI.dll	119	MsiRecordSetStringA
MSI.dll	253	MsiSourceListClearSourceW
MSI.dll	193	MsiMessageBoxA
MSI.dll	99	MsiProvideComponentA
MSI.dll	251	MsiSourceListAddSourceExW
MSI.dll	258	MsiSourceListEnumSourcesA
MSI.dll	268	MsiSourceListAddMediaDiskA
MSI.dll	13	MsiDatabaseApplyTransformA
MSI.dll	55	MsiGetFeatureUsageW
MSI.dll	98	MsiProcessMessage
MSI.dll	244	MsiQueryComponentStateA
MSI.dll	102	MsiProvideComponentW
MSI.dll	226	MsiOpenPackageExA
MSI.dll	166	MsiFormatRecordW
MSI.dll	118	MsiRecordSetStreamW
MSI.dll	69	MsiGetPropertyW
MSI.dll	209	MsiIsProductElevatedA
MSI.dll	214	MsiGetFileHashW
MSI.dll	20	MsiDatabaseGetPrimaryKeysA
MSI.dll	264	MsiEnumPatchesExA
MSI.dll	276	MsiSetExternalUIRecord
MSI.dll	250	MsiSourceListAddSourceExA
MSI.dll	239	MsiGetPatchInfoExW
MSI.dll	106	MsiQueryFeatureStateW
MSI.dll	257	MsiSourceListForceResolutionExW
MSI.dll	116	MsiRecordSetInteger
MSI.dll	96	MsiProcessAdvertiseScriptA
MSI.dll	194	MsiMessageBoxW
MSI.dll	49	MsiGetFeatureCostW
MSI.dll	200	MsiEnumRelatedProductsW
MSI.dll	123	MsiReinstallFeatureFromDescriptorW
MSI.dll	36	MsiEnumComponentsW
MSI.dll	240	MsiEnumProductsExA
MSI.dll	61	MsiGetProductCodeW
MSI.dll	83	MsiInstallProductW
MSI.dll	189	MsiGetFileVersionA
MSI.dll	5	MsiCollectUserInfoW
MSI.dll	94	MsiPreviewDialogA
MSI.dll	53	MsiGetFeatureStateW
MSI.dll	125	MsiReinstallProductA
MSI.dll	255	MsiSourceListClearAllExW
MSI.dll	79	MsiInstallMissingComponentW
MSI.dll	32	MsiEnumClientsW
MSI.dll	38	MsiEnumFeaturesW
MSI.dll	128	MsiSequenceW
MSI.dll	51	MsiGetFeatureInfoW
MSI.dll	156	MsiViewGetErrorA
MSI.dll	111	MsiRecordGetInteger
MSI.dll	198	MsiProvideQualifiedComponentExW
MSI.dll	267	MsiSourceListEnumMediaDisksW
MSI.dll	174	MsiGetPatchInfoW
MSI.dll	148	MsiSummaryInfoSetPropertyW
MSI.dll	80	MsiInstallMissingFileA
MSI.dll	104	MsiProvideQualifiedComponentW
MSI.dll	234	MsiApplyMultiplePatchesA
MSI.dll	170	MsiApplyPatchW
MSI.dll	109	MsiRecordDataSize
MSI.dll	114	MsiRecordIsNull
MSI.dll	77	MsiGetUserInfoW
MSI.dll	45	MsiGetComponentStateA
MSI.dll	101	MsiProvideComponentFromDescriptorW
MSI.dll	64	MsiGetProductInfoFromScriptW
MSI.dll	202	MsiSetFeatureAttributesW
MSI.dll	95	MsiPreviewDialogW
MSI.dll	122	MsiReinstallFeatureFromDescriptorA
MSI.dll	31	MsiEnumClientsA
MSI.dll	27	MsiDatabaseOpenViewW
MSI.dll	270	MsiSourceListClearMediaDiskA
MSI.dll	24	MsiDatabaseMergeA
MSI.dll	15	MsiDatabaseCommit
MSI.dll	180	MsiCreateTransformSummaryInfoA
MSI.dll	181	MsiCreateTransformSummaryInfoW
MSI.dll	135	MsiSetInstallLevel
MSI.dll	120	MsiRecordSetStringW
MSI.dll	145	MsiSummaryInfoGetPropertyW
MFC42.dll		DllGetClassObject
MFC42.dll	5	public: static struct CRuntimeClass const CDataPathProperty::classCDataPathProperty ?classCDataPathProperty@CDataPathProperty@@2UCRuntimeClass@@B
MFC42.dll	1	DllCanUnloadNow
MFC42.dll	3	DllUnregisterServer
MFC42.dll	2	DllRegisterServer
MFC42.dll	4	public: static struct CRuntimeClass const CCachedDataPathProperty::classCCachedDataPathProperty ?classCCachedDataPathProperty@CCachedDataPathProperty@@2UCRuntimeClass@@B
WSOCK32.dll	1114	GetNameByTypeA
WSOCK32.dll		accept
WSOCK32.dll	8	htons
WSOCK32.dll	17	select
WSOCK32.dll	21	shutdown
WSOCK32.dll	104	WSAAsyncGetProtoByName
WSOCK32.dll	110	WSAGetLastError
WSOCK32.dll	1111	EnumProtocolsW
WSOCK32.dll	2	closesocket
WSOCK32.dll	14	ntohs
WSOCK32.dll	112	WSACancelBlockingCall
WSOCK32.dll	4	getpeername
WSOCK32.dll	111	WSASetLastError
WSOCK32.dll	101	WSAAsyncGetHostByAddr
WSOCK32.dll	1107	s_perror
WSOCK32.dll	55	getservbyport
WSOCK32.dll	1	bind
WSOCK32.dll	113	WSAIsBlocking
WSOCK32.dll	19	sendto
WSOCK32.dll	1113	GetTypeByNameW
WSOCK32.dll	100	WSAAsyncSelect
WSOCK32.dll	106	WSAAsyncGetServByName
WSOCK32.dll	6	getsockopt
WSOCK32.dll	13	ntohl
WSOCK32.dll	999	WSApSetPostRoutine
WSOCK32.dll	1110	EnumProtocolsA
WSOCK32.dll	1105	dn_expand
WSOCK32.dll	115	WSACleanup
WSOCK32.dll	114	WSAStartup
WSOCK32.dll	5	getsockname
WSOCK32.dll	1118	GetServiceA
WSOCK32.dll	18	send
WSOCK32.dll	15	recv
WSOCK32.dll	10	inet_ntoa
WSOCK32.dll	23	MigrateWinsockConfiguration
WSOCK32.dll	499	WEP
WSOCK32.dll	7	htonl
WSOCK32.dll	102	WSAAsyncGetHostByName
WSOCK32.dll	107	WSACancelAsyncRequest
WSOCK32.dll	103	WSAAsyncGetProtoByNumber
WSOCK32.dll	11	ioctlsocket
WSOCK32.dll	1108	GetAddressByNameA
WSOCK32.dll	1116	SetServiceA
WSOCK32.dll	22	socket
WSOCK32.dll	1139	TransmitFile
WSOCK32.dll	20	setsockopt
WSOCK32.dll	1106	WSARecvEx
WSOCK32.dll	108	WSASetBlockingHook
WSOCK32.dll	51	gethostbyname
WSOCK32.dll	1117	SetServiceW
WSOCK32.dll	1141	GetAcceptExSockaddrs
WSOCK32.dll	1112	GetTypeByNameA
WSOCK32.dll	1129	NPLoadNameSpaces
WSOCK32.dll	105	WSAAsyncGetServByPort
WSOCK32.dll	1109	GetAddressByNameW
WSOCK32.dll	150	__WSAFDIsSet
WSOCK32.dll	9	inet_addr
WSOCK32.dll	56	gethostname
WSOCK32.dll	1119	GetServiceW
WSOCK32.dll	12	listen
WSOCK32.dll	53	getprotobynumber
WSOCK32.dll	3	connect
WSOCK32.dll	1115	GetNameByTypeW
WSOCK32.dll	16	recvfrom
WSOCK32.dll	1140	AcceptEx
WSOCK32.dll	50	gethostbyaddr
WSOCK32.dll	52	getprotobyname
WSOCK32.dll	54	getservbyname
WSOCK32.dll	109	WSAUnhookBlockingHook
LOCALSEC.dll		DllCanUnloadNow
LOCALSEC.dll	2	DllRegisterServer
LOCALSEC.dll	1	DllGetClassObject
UNTFS.dll	101	public: unsigned char __thiscall NTFS_FILE_RECORD_SEGMENT::QueryAttribute(class NTFS_ATTRIBUTE , unsigned char , unsigned long, class WSTRING const *) ?QueryAttribute@NTFS_FILE_RECORD_SEGMENT@@QAEEPAVNTFS_ATTRIBUTE@@PAEKPBVWSTRING@@@Z
UNTFS.dll	100	long __stdcall NtfsUpcaseCompare(unsigned short const , unsigned long, unsigned short const , unsigned long, class NTFS_UPCASE_TABLE const *, unsigned char) ?NtfsUpcaseCompare@@YGJPBGK0KPBVNTFS_UPCASE_TABLE@@E@Z
UNTFS.dll	74	public: unsigned char __thiscall NTFS_FILE_RECORD_SEGMENT::Initialize(class BIG_INT, class NTFS_MASTER_FILE_TABLE *) ?Initialize@NTFS_FILE_RECORD_SEGMENT@@QAEEVBIG_INT@@PAVNTFS_MASTER_FILE_TABLE@@@Z
UNTFS.dll	121	public: unsigned char __thiscall NTFS_ATTRIBUTE::Read(void , class BIG_INT, unsigned long, unsigned long ) ?Read@NTFS_ATTRIBUTE@@QAEEPAXVBIG_INT@@KPAK@Z
UNTFS.dll	59	public: unsigned char __thiscall NTFS_MFT_FILE::Flush(void) ?Flush@NTFS_MFT_FILE@@QAEEXZ
UNTFS.dll	65	public: unsigned char __thiscall NTFS_ATTRIBUTE_DEFINITION_TABLE::Initialize(class NTFS_MASTER_FILE_TABLE *, unsigned char) ?Initialize@NTFS_ATTRIBUTE_DEFINITION_TABLE@@QAEEPAVNTFS_MASTER_FILE_TABLE@@E@Z
UNTFS.dll	85	public: unsigned char __thiscall NTFS_MFT_INFO::Initialize(void) ?Initialize@NTFS_MFT_INFO@@QAEEXZ
UNTFS.dll	12	public: __thiscall NTFS_INDEX_TREE::NTFS_INDEX_TREE(void) ??0NTFS_INDEX_TREE@@QAE@XZ
UNTFS.dll	60	public: struct _INDEX_ENTRY const * __thiscall NTFS_INDEX_TREE::GetNext(unsigned long , unsigned char , unsigned char) ?GetNext@NTFS_INDEX_TREE@@QAEPBU_INDEX_ENTRY@@PAKPAEE@Z
UNTFS.dll	46	public: unsigned char __thiscall NTFS_FILE_RECORD_SEGMENT::AddSecurityDescriptor(enum _CANNED_SECURITY_TYPE, class NTFS_BITMAP *) ?AddSecurityDescriptor@NTFS_FILE_RECORD_SEGMENT@@QAEEW4_CANNED_SECURITY_TYPE@@PAVNTFS_BITMAP@@@Z
UNTFS.dll	39	public: virtual __thiscall NTFS_SA::~NTFS_SA(void) ??1NTFS_SA@@UAE@XZ
UNTFS.dll	11	public: __thiscall NTFS_FRS_STRUCTURE::NTFS_FRS_STRUCTURE(void) ??0NTFS_FRS_STRUCTURE@@QAE@XZ
UNTFS.dll	52	private: static void __stdcall NTFS_MFT_INFO::ComputeFileNameSignature(unsigned long, struct _FILE_NAME , unsigned char const) ?ComputeFileNameSignature@NTFS_MFT_INFO@@CGXKPAU_FILE_NAME@@QAE@Z
UNTFS.dll	54	public: unsigned char __thiscall NTFS_FILE_RECORD_SEGMENT::Create(struct _STANDARD_INFORMATION const *, unsigned short) ?Create@NTFS_FILE_RECORD_SEGMENT@@QAEEPBU_STANDARD_INFORMATION@@G@Z
UNTFS.dll	23	public: virtual __thiscall NTFS_ATTRIBUTE_DEFINITION_TABLE::~NTFS_ATTRIBUTE_DEFINITION_TABLE(void) ??1NTFS_ATTRIBUTE_DEFINITION_TABLE@@UAE@XZ
UNTFS.dll	107	public: unsigned char __thiscall NTFS_INDEX_TREE::QueryEntry(unsigned long, void , unsigned long, struct _INDEX_ENTRY , class NTFS_INDEX_BUFFER , unsigned char ) ?QueryEntry@NTFS_INDEX_TREE@@QAEEKPAXKPAPAU_INDEX_ENTRY@@PAPAVNTFS_INDEX_BUFFER@@PAE@Z
UNTFS.dll	77	public: unsigned char __thiscall NTFS_FRS_STRUCTURE::Initialize(class MEM , class LOG_IO_DP_DRIVE , class BIG_INT, unsigned long, class BIG_INT, unsigned long, class NTFS_UPCASE_TABLE *, unsigned long) ?Initialize@NTFS_FRS_STRUCTURE@@QAEEPAVMEM@@PAVLOG_IO_DP_DRIVE@@VBIG_INT@@K2KPAVNTFS_UPCASE_TABLE@@K@Z
UNTFS.dll	138	public: virtual unsigned char __thiscall NTFS_ATTRIBUTE::Write(void const , class BIG_INT, unsigned long, unsigned long , class NTFS_BITMAP *) ?Write@NTFS_ATTRIBUTE@@UAEEPBXVBIG_INT@@KPAKPAVNTFS_BITMAP@@@Z
UNTFS.dll	67	public: unsigned char __thiscall NTFS_BAD_CLUSTER_FILE::Initialize(class NTFS_MASTER_FILE_TABLE *) ?Initialize@NTFS_BAD_CLUSTER_FILE@@QAEEPAVNTFS_MASTER_FILE_TABLE@@@Z
IASACCT.dll	3	DllUnregisterServer
IASACCT.dll		DllCanUnloadNow
IASACCT.dll	2	DllRegisterServer
IASACCT.dll	1	DllGetClassObject
FONTEXT.dll		DllGetClassObject
FONTEXT.dll	1	DllCanUnloadNow
KERNEL32.dll	151	DuplicateHandle
KERNEL32.dll	37	BuildCommDCBA
KERNEL32.dll	351	GetExitCodeThread
KERNEL32.dll	507	GlobalAddAtomW
KERNEL32.dll	319	GetConsoleWindow
KERNEL32.dll	964	lstrcmpA
KERNEL32.dll	780	SetConsoleWindowInfo
KERNEL32.dll	317	GetConsoleTitleA
KERNEL32.dll	66	ConvertDefaultLocale
KERNEL32.dll	949	WriteProfileStringW
KERNEL32.dll	215	FindFirstFileExA
KERNEL32.dll	958	_lread
KERNEL32.dll	854	SetupComm
KERNEL32.dll	213	FindFirstChangeNotificationW
KERNEL32.dll	277	GetCommandLineW
KERNEL32.dll	357	GetFileAttributesW
KERNEL32.dll	90	CreateHardLinkA
KERNEL32.dll	57	CommConfigDialogA
KERNEL32.dll	387	GetModuleHandleA
KERNEL32.dll	354	GetFileAttributesA
KERNEL32.dll	627	MoveFileExA
KERNEL32.dll	278	GetCompressedFileSizeA
KERNEL32.dll	70	CopyFileA
KERNEL32.dll	166	EnumLanguageGroupLocalesW
KERNEL32.dll	903	VirtualFree
KERNEL32.dll	965	lstrcmpW
KERNEL32.dll	494	GetVersionExW
KERNEL32.dll	54	CloseHandle
KERNEL32.dll	318	GetConsoleTitleW
KERNEL32.dll	887	UnregisterWait
KERNEL32.dll	276	GetCommandLineA
KERNEL32.dll	330	GetCurrentThreadId
KERNEL32.dll	688	ReadConsoleInputExW
KERNEL32.dll	452	GetSystemDefaultUILanguage
KERNEL32.dll	327	GetCurrentProcessId
KERNEL32.dll	192	ExpandEnvironmentStringsA
KERNEL32.dll	700	ReadProcessMemory
KERNEL32.dll	742	SetCommBreak
KERNEL32.dll	107	CreateProcessInternalW
KERNEL32.dll	386	GetModuleFileNameW
KERNEL32.dll	950	WriteTapemark
KERNEL32.dll	329	GetCurrentThread
KERNEL32.dll	977	lstrlenW
KERNEL32.dll	326	GetCurrentProcess
KERNEL32.dll	178	EnumSystemLanguageGroupsW
KERNEL32.dll	892	VDMOperationStarted
KERNEL32.dll	573	IsDebuggerPresent
KERNEL32.dll	349	GetEnvironmentVariableW
KERNEL32.dll	861	SwitchToFiber
KERNEL32.dll	521	GlobalMemoryStatusEx
KERNEL32.dll	895	VerLanguageNameA
KERNEL32.dll	862	SwitchToThread
KERNEL32.dll	976	lstrlenA
KERNEL32.dll	86	CreateFileA
KERNEL32.dll	180	EnumSystemLocalesW
KERNEL32.dll	80	CreateDirectoryExW
KERNEL32.dll	729	RtlFillMemory
KERNEL32.dll	292	GetConsoleAliasesLengthW
KERNEL32.dll	723	ResetEvent
KERNEL32.dll	868	TermsrvAppInstallMode
KERNEL32.dll	34	BeginUpdateResourceA
KERNEL32.dll	845	SetTimerQueueTimer
KERNEL32.dll	444	GetStartupInfoW
KERNEL32.dll	488	GetUserDefaultLangID
KERNEL32.dll	122	DebugActiveProcess
KERNEL32.dll	93	CreateJobObjectA
KERNEL32.dll	491	GetVDMCurrentDirectories
KERNEL32.dll	279	GetCompressedFileSizeW
KERNEL32.dll	135	DeleteFileA
KERNEL32.dll	307	GetConsoleInputExeNameW
KERNEL32.dll	697	ReadFile
KERNEL32.dll	666	Process32First
KERNEL32.dll	607	LocalFlags
KERNEL32.dll	538	HeapFree
KERNEL32.dll	659	PeekConsoleInputA
KERNEL32.dll	825	SetProcessWorkingSetSize
KERNEL32.dll	936	WriteFile
KERNEL32.dll	340	GetDiskFreeSpaceW
KERNEL32.dll	927	WriteConsoleInputVDMA
KERNEL32.dll	913	WaitForDebugEvent
KERNEL32.dll	375	GetLocalTime
KERNEL32.dll	966	lstrcmpi
KERNEL32.dll	857	SizeofResource
KERNEL32.dll	492	GetVersion
KERNEL32.dll	783	SetCurrentDirectoryW
KERNEL32.dll	644	OpenFileMappingA
KERNEL32.dll	764	SetConsoleInputExeNameW
KERNEL32.dll	460	GetSystemTime
KERNEL32.dll	532	HeapAlloc
KERNEL32.dll	163	EnumDateFormatsExW
KERNEL32.dll	694	ReadConsoleOutputW
KERNEL32.dll	268	GetCalendarInfoW
KERNEL32.dll	179	EnumSystemLocalesA
KERNEL32.dll	182	EnumTimeFormatsW
KERNEL32.dll	901	VirtualAlloc
MSVCRT.dll	633	ftell
MSVCRT.dll	465	_strlwr
MSVCRT.dll	113	__p__fmode
MSVCRT.dll	537	_wfullpath
MSVCRT.dll	536	_wfsopen
MSVCRT.dll	684	memcpy
MSVCRT.dll	600	clock
MSVCRT.dll	131	__set_app_type
MSVCRT.dll	293	_ismbbkprint
MSVCRT.dll	722	strftime
MSVCRT.dll	479	_tempnam
MSVCRT.dll	236	_fmode
MSVCRT.dll	454	_splitpath
MSVCRT.dll	37	int __cdecl _query_new_mode(void) ?_query_new_mode@@YAHXZ
MSVCRT.dll	271	_gmtime64
MSVCRT.dll	108	__p__commode
MSVCRT.dll	772	wcstok
MSVCRT.dll	263	_getdrives
MSVCRT.dll	49	public: virtual char const * __thiscall exception::what(void)const ?what@exception@@UBEPBDXZ
MSVCRT.dll	322	_jn
MSVCRT.dll	652	isprint
MSVCRT.dll	678	malloc
MSVCRT.dll	354	_mbscat
MSVCRT.dll	245	_fstati64
MSVCRT.dll	261	_getdllprocaddr
MSVCRT.dll	333	_lrotr
MSVCRT.dll	765	wcsncmp
MSVCRT.dll	372	_mbsnbicmp
MSVCRT.dll	170	_cabs
MSVCRT.dll	618	floor
MSVCRT.dll	627	free
MSVCRT.dll	758	wcscmp
MSVCRT.dll	18	public: class bad_typeid & __thiscall bad_typeid::operator=(class bad_typeid const &) ??4bad_typeid@@QAEAAV0@ABV0@@Z
MSVCRT.dll	672	ldiv
MSVCRT.dll	609	fclose
MSVCRT.dll	336	_lseeki64
MSVCRT.dll	327	_localtime64
MSVCRT.dll	241	_fputwchar
MSVCRT.dll	311	_ismbcpunct
MSVCRT.dll	352	_mbctype
MSVCRT.dll	613	fgetc
MSVCRT.dll	40	void (__cdecl__cdecl _set_se_translator(void (__cdecl)(unsigned int, struct _EXCEPTION_POINTERS )))(unsigned int, struct _EXCEPTION_POINTERS ) ?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
MSVCRT.dll	44	void (__cdecl__cdecl set_new_handler(void (__cdecl)(void)))(void) ?set_new_handler@@YAP6AXXZP6AXXZ@Z
MSVCRT.dll	628	freopen

show previews

offset	size	type	comment
0	43520	EXE	09/28/2013 17:09:09	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK