filenameAcGenral.dll
size2176512 (0x213600)
md5b5b2896034d8adebd79e0c281b52508f
typePE32 executable (DLL) (console) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xe0

Rich Header

lib idversiontimes used
1473072957
10463
1493072919
13130729129
146307291
13230729294
148307291
145307291

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x5119c993
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x2102
Magic0x10b
LinkerVersion9.0
SizeOfCode0x79000
SizeOfInitializedData0x19c200
SizeOfUninitializedData0
AddressOfEntryPoint0x220f
BaseOfCode0x1000
BaseOfData0x7c000
ImageBase0x755e0000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion6.1
ImageVersion6.1
SubsystemVersion6.1
Reserved10
SizeOfImage0x218000
SizeOfHeaders0x400
CheckSum0x2232e7
Subsystem3
DllCharacteristics0x140
SizeOfStackReserve0x40000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v7.0 DLL

Sections

namevavsizeraw sizeflags
.text0x10000x78e990x79000R-X CODE
.data0x7a0000xa1000x8200RW- IDATA
.rsrc0x850000x1892600x189400R-- IDATA
.reloc0x20f0000x8a900x8c00R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x771200x5d
IMPORT0x771800x244
RESOURCE0x850000x189260
EXCEPTION00
SECURITY00
BASERELOC0x20f0000x8a90
DEBUG0x79e380x38
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0xf7800x40
Bound_IAT00
IAT0x10000x754
Delay_IAT00
CLR_Header00
typenamesizecp
RCDATAASYMETRIXWEB3D2054260
RCDATABORLANDDBESETTINGS59800
RCDATABORLANDDELPHI5107620
RCDATACDNOPTIMA7580
RCDATACOSMIAMAZINGCALENDARMAKER3660
RCDATAGETRIGHT26200
RCDATAINTERLEAFJAMBA106940
RCDATALOTUS123_98_CHS71980
RCDATALOTUS123_98_JPN72860
RCDATALOTUS123_9_572720
RCDATALOTUSAPPROACH9749120
RCDATALOTUSAPPROACH97_CHS48460
RCDATALOTUSAPPROACH97_CHT48460
RCDATALOTUSAPPROACH97_JPN46880
RCDATALOTUSAPPROACH97_KOR48760
RCDATALOTUSAPPROACH98_CHS46920
RCDATALOTUSAPPROACH98_JPN43440
RCDATALOTUSAPPROACH9_545820
RCDATALOTUSFASTSITE98_CHS15640
RCDATALOTUSFASTSITE98_JPN15640
RCDATALOTUSFASTSITE9_514560
RCDATALOTUSFREELANCEGRAPHICS97103780
RCDATALOTUSFREELANCEGRAPHICS97_CHS112020
RCDATALOTUSFREELANCEGRAPHICS97_CHT111440
RCDATALOTUSFREELANCEGRAPHICS97_JPN170900
RCDATALOTUSFREELANCEGRAPHICS97_KOR109040
RCDATALOTUSFREELANCEGRAPHICS98_CHS127520
RCDATALOTUSFREELANCEGRAPHICS98_JPN180600
RCDATALOTUSFREELANCEGRAPHICS9_5123820
RCDATALOTUSORGANIZER98_CHS229420
RCDATALOTUSORGANIZER98_JPN275260
RCDATALOTUSORGANIZER9_5205120
RCDATALOTUSSMARTCENTER971184620
RCDATALOTUSSMARTCENTER97_CHS517280
RCDATALOTUSSMARTCENTER97_CHT1147720
RCDATALOTUSSMARTCENTER97_JPN647360
RCDATALOTUSSMARTCENTER98_CHS1940800
RCDATALOTUSSMARTCENTER98_JPN1430340
RCDATALOTUSSMARTCENTER9_51084680
RCDATALOTUSWORDPRO971009360
RCDATALOTUSWORDPRO97_CHS1015100
RCDATALOTUSWORDPRO97_CHT189680
RCDATALOTUSWORDPRO97_JPN81940
RCDATALOTUSWORDPRO98_CHS1041720
RCDATALOTUSWORDPRO98_JPN120100
RCDATALOTUSWORDPRO9_51041080
RCDATAMIRABILISICQ2000B541820
RCDATAPALMDESKTOP492940
RCDATAQUICKENFAMILYLAWYER200135460
RCDATAROBOHTML10700
RCDATASIERRAVISUALHOME5520
RCDATASIERRAWEBSTUDIO20105540
RCDATATIVODESKTOP233760
RCDATAVISIONLABFAXLINK16A41120
VERSION#18800
module_namehintordfunction_name
ntdll.dll924RtlInitUnicodeString
ntdll.dll398NtQueryInformationProcess
ntdll.dll497NtSetInformationProcess
ntdll.dll982RtlIsDosDeviceName_U
ntdll.dll212NtClose
ntdll.dll1190RtlSubAuthoritySid
ntdll.dll401NtQueryInformationToken
ntdll.dll944RtlInitializeSid
ntdll.dll1005RtlLengthRequiredSid
ntdll.dll791RtlEqualSid
ntdll.dll884RtlGetOwnerSecurityDescriptor
ntdll.dll621RtlAppendUnicodeToString
ntdll.dll412NtQueryObject
ntdll.dll845RtlFreeUnicodeString
ntdll.dll834RtlFormatCurrentUserKeyPath
ntdll.dll1158RtlSetLastWin32ErrorAndNtStatusFromNtStatus
ntdll.dll873RtlGetLastNtStatus
ntdll.dll1236RtlUnwind
ntdll.dll829RtlFirstEntrySList
ntdll.dll957RtlInterlockedPushEntrySList
ntdll.dll942RtlInitializeSListHead
ntdll.dll956RtlInterlockedPopEntrySList
ntdll.dll522NtSetValueKey
ntdll.dll232NtCreateKey
ntdll.dll228NtCreateFile
ntdll.dll560NtWriteFile
ntdll.dll759RtlDosPathNameToNtPathName_U
ntdll.dll346NtOpenKey
ntdll.dll430NtQueryValueKey
ntdll.dll847RtlGUIDFromString
ntdll.dll1052RtlOemStringToUnicodeString
ntdll.dll611RtlAllocateHeap
ntdll.dll840RtlFreeHeap
ntdll.dll1044RtlNtStatusToDosError
ntdll.dll221NtConnectPort
ntdll.dll463NtRequestWaitReplyPort
ntdll.dll904RtlIdentifierAuthoritySid
ntdll.dll860RtlGetDaclSecurityDescriptor
ntdll.dll1189RtlSubAuthorityCountSid
ntdll.dll931RtlInitializeCriticalSection
ntdll.dll432NtQueryVolumeInformationFile
ntdll.dll431NtQueryVirtualMemory
ntdll.dll355NtOpenProcessToken
ntdll.dll363NtOpenThreadToken
ntdll.dll379NtProtectVirtualMemory
ntdll.dll909RtlImageNtHeader
ntdll.dll915RtlInitAnsiString
ntdll.dll616RtlAnsiStringToUnicodeString
ntdll.dll1220RtlUnicodeStringToInteger
ntdll.dll706RtlCreateUnicodeStringFromAsciiz
API-MS-Win-Core-LocalRegistry-L1-1-0.dll30RegQueryValueExW
API-MS-Win-Core-LocalRegistry-L1-1-0.dll25RegOpenKeyExW
API-MS-Win-Core-LocalRegistry-L1-1-0.dll2RegCreateKeyExW
API-MS-Win-Core-LocalRegistry-L1-1-0.dll28RegQueryInfoKeyW
API-MS-Win-Core-LocalRegistry-L1-1-0.dll13RegEnumValueW
API-MS-Win-Core-LocalRegistry-L1-1-0.dll39RegUnLoadKeyW
API-MS-Win-Core-LocalRegistry-L1-1-0.dll11RegEnumKeyExW
API-MS-Win-Core-LocalRegistry-L1-1-0.dll29RegQueryValueExA
API-MS-Win-Core-LocalRegistry-L1-1-0.dll35RegSetKeySecurity
API-MS-Win-Core-LocalRegistry-L1-1-0.dll24RegOpenKeyExA
API-MS-Win-Core-LocalRegistry-L1-1-0.dll15RegGetKeySecurity
API-MS-Win-Core-LocalRegistry-L1-1-0.dll36RegSetValueExA
API-MS-Win-Core-LocalRegistry-L1-1-0.dll17RegGetValueW
API-MS-Win-Core-LocalRegistry-L1-1-0.dll37RegSetValueExW
API-MS-Win-Core-LocalRegistry-L1-1-0.dll19RegLoadKeyW
API-MS-Win-Core-LocalRegistry-L1-1-0.dllRegCloseKey
API-MS-Win-Security-Base-L1-1-0.dll24CheckTokenMembership
API-MS-Win-Security-Base-L1-1-0.dll50GetSecurityDescriptorLength
API-MS-Win-Security-Base-L1-1-0.dll64InitializeSecurityDescriptor
API-MS-Win-Security-Base-L1-1-0.dll91SetSecurityDescriptorDacl
API-MS-Win-Security-Base-L1-1-0.dll45GetLengthSid
API-MS-Win-Security-Base-L1-1-0.dll63InitializeAcl
API-MS-Win-Security-Base-L1-1-0.dll42GetAclInformation
API-MS-Win-Security-Base-L1-1-0.dll31CreateWellKnownSid
API-MS-Win-Security-Base-L1-1-0.dll47GetSecurityDescriptorControl
API-MS-Win-Security-Base-L1-1-0.dll48GetSecurityDescriptorDacl
API-MS-Win-Security-Base-L1-1-0.dll38EqualSid
API-MS-Win-Security-Base-L1-1-0.dll20AllocateAndInitializeSid
API-MS-Win-Security-Base-L1-1-0.dll40FreeSid
API-MS-Win-Security-Base-L1-1-0.dll19AdjustTokenPrivileges
API-MS-Win-Security-Base-L1-1-0.dll43GetFileSecurityW
API-MS-Win-Security-Base-L1-1-0.dll41GetAce
API-MS-Win-Security-Base-L1-1-0.dll7AddAccessAllowedAce
API-MS-WIN-Service-winsvc-L1-1-0.dll2ControlService
API-MS-WIN-Service-Management-L1-1-0.dll2CreateServiceW
API-MS-WIN-Service-Management-L1-1-0.dll5OpenServiceW
API-MS-WIN-Service-Management-L1-1-0.dll6StartServiceW
API-MS-WIN-Service-Management-L1-1-0.dllCloseServiceHandle
API-MS-WIN-Service-Management-L1-1-0.dll4OpenSCManagerW
API-MS-WIN-Service-Management-L2-1-0.dll1ChangeServiceConfigW
SspiCli.dll25GetUserNameExW
SHLWAPI.dll194SHGetValueW
SHLWAPI.dll73PathFindFileNameW
SHLWAPI.dll179SHDeleteKeyW
SHLWAPI.dll139PathRemoveFileSpecW
SHLWAPI.dll461
SHLWAPI.dll255SHStrDupW
UxTheme.dll69SetThemeAppProperties
UxTheme.dll67
USER32.dll449IsCharAlphaA
USER32.dll47CharNextA
USER32.dll610RegisterWindowMessageA
USER32.dll42ChangeWindowMessageFilterEx
USER32.dll260GetAncestor
USER32.dll274GetClassNameW
USER32.dll695SetSystemCursor
USER32.dll491LoadCursorW
USER32.dll83CopyIcon
USER32.dll162DestroyCursor
USER32.dll256GetActiveWindow
USER32.dll291GetDesktopWindow
USER32.dll412GetWindowRect
USER32.dll710SetWindowPos
USER32.dll537MonitorFromRect
USER32.dll351GetMonitorInfoW
USER32.dll289GetDC
USER32.dll613ReleaseDC
USER32.dll349GetMessageW
USER32.dll360GetProcessWindowStation
USER32.dll175DispatchMessageW
USER32.dll718SetWindowsHookExA
USER32.dll317GetKeyState
USER32.dll28CallNextHookEx
USER32.dll730ShowCursor
USER32.dll173DisableProcessWindowsGhosting
USER32.dll405GetWindowLongA
USER32.dll301GetForegroundWindow
USER32.dll817mouse_event
USER32.dll659SetForegroundWindow
USER32.dll29CallWindowProcA
USER32.dll231EnumDisplaySettingsA
USER32.dll35ChangeDisplaySettingsA
USER32.dll685SetPropW
USER32.dll617RemovePropW
USER32.dll363GetPropW
USER32.dll307GetIconInfo
USER32.dll103CreateIconIndirect
USER32.dll163DestroyIcon
USER32.dll60CharUpperW
USER32.dll382GetSystemMetrics
USER32.dll213EmptyClipboard
USER32.dll747SystemParametersInfoA
USER32.dll748SystemParametersInfoW
USER32.dll225EnumDesktopWindows
USER32.dll417GetWindowTextLengthA
USER32.dll416GetWindowTextA
USER32.dll655SetDlgItemTextA
USER32.dll636SendMessageW
USER32.dll810WindowFromDC
USER32.dll392GetUpdateRgn
USER32.dll356GetParent
USER32.dll457IsChild
USER32.dll621ScreenToClient
USER32.dll398GetWindow
USER32.dll480IsWindowVisible
USER32.dll404GetWindowInfo
USER32.dll475IsWindow
USER32.dll302GetGUIThreadInfo
USER32.dll420GetWindowThreadProcessId
USER32.dll395GetUserObjectInformationW
USER32.dll406GetWindowLongW
USER32.dll386GetThreadDesktop
USER32.dll567PostQuitMessage
USER32.dll648SetCursor
USER32.dll540MsgWaitForMultipleObjects
USER32.dll563PeekMessageW
USER32.dll216EnableWindow
USER32.dll6AllowSetForegroundWindow
USER32.dll764TranslateMessage
GDI32.dll459GetDeviceCaps
GDI32.dll525GetStockObject
GDI32.dll509GetObjectW
GDI32.dll48CreateCompatibleDC
GDI32.dll631SelectObject
GDI32.dll19BitBlt
GDI32.dll227DeleteDC
GDI32.dll53CreateDIBSection
GDI32.dll448GetClipBox
GDI32.dll80CreateRectRgnIndirect
GDI32.dll79CreateRectRgn
GDI32.dll524GetRgnBox
GDI32.dll672SetRectRgn
GDI32.dll34CombineRgn
GDI32.dll230DeleteObject
WINMM.dll47mciSendCommandA
samcli.dll10NetLocalGroupAdd
samcli.dll12NetLocalGroupAddMembers
ole32.dll63CoInitializeEx
ole32.dll376StringFromCLSID
ole32.dll62CoInitialize
ole32.dll53CoGetObject
ole32.dll377StringFromGUID2
ole32.dll104CoTaskMemFree
ole32.dll16CoCreateInstance
ole32.dll108CoUninitialize
OLEAUT32.dll6
OLEAUT32.dll442
OLEAUT32.dll7
OLEAUT32.dll2
MSACM32.dll42acmStreamSize
MSACM32.dll39acmStreamOpen
VERSION.dll2GetFileVersionInfoExW
VERSION.dll6GetFileVersionInfoW
VERSION.dll14VerQueryValueW
VERSION.dll5GetFileVersionInfoSizeW
SHELL32.dll194SHGetFolderPathEx
SHELL32.dll225SHGetSpecialFolderPathW
SHELL32.dll288ShellExecuteExA
SHELL32.dll224SHGetSpecialFolderPathA
SHELL32.dll289ShellExecuteExW
SHELL32.dll127SHChangeNotify
SHELL32.dll141SHCreateDirectoryExW
SHELL32.dll195SHGetFolderPathW
SHELL32.dll165
sfc.dll4SfcIsFileProtected
sfc.dll5SfcIsKeyProtected
USERENV.dll30GetUserProfileDirectoryW
USERENV.dll17GetAllUsersProfileDirectoryW
USERENV.dll29GetUserProfileDirectoryA
dwmapi.dll102
dwmapi.dll15DwmIsCompositionEnabled
SETUPAPI.dll249PnpIsFilePnpDriver
apphelp.dll131SdbOpenLocalDatabase
apphelp.dll163SdbResolveDatabase
apphelp.dll106SdbGetPDBFromGUID
apphelp.dll116SdbInitDatabase
apphelp.dll117SdbInitDatabaseEx
apphelp.dll70SdbFindNextTag
apphelp.dll111SdbGetStringTagPtr
apphelp.dll63SdbFindFirstTag
urlmon.dll26CoInternetSetFeatureEnabled
KERNEL32.dll411GetConsoleCP
KERNEL32.dll429GetConsoleMode
KERNEL32.dll627GetSystemInfo
KERNEL32.dll1161SetStdHandle
KERNEL32.dll1311WriteConsoleA
KERNEL32.dll433GetConsoleOutputCP
KERNEL32.dll1321WriteConsoleW
KERNEL32.dll746InterlockedCompareExchange
KERNEL32.dll134CreateEventW
KERNEL32.dll506GetFullPathNameW
KERNEL32.dll1054SearchPathW
KERNEL32.dll1354lstrcmpiW
KERNEL32.dll692GlobalAlloc
KERNEL32.dll200DebugBreak
KERNEL32.dll530GetModuleFileNameA
KERNEL32.dll675GetVersionExA
KERNEL32.dll609GetShortPathNameW
KERNEL32.dll514GetLocalTime
KERNEL32.dll1127SetFilePointer
KERNEL32.dll1018ReleaseMutex
KERNEL32.dll448GetCurrentDirectoryW
KERNEL32.dll159CreateMutexW
KERNEL32.dll905OutputDebugStringA
KERNEL32.dll893OpenMutexW
KERNEL32.dll763IsBadWritePtr
KERNEL32.dll113CopyFileA
KERNEL32.dll1053SearchPathA
KERNEL32.dll855MapViewOfFile
KERNEL32.dll1243UnmapViewOfFile
KERNEL32.dll896OpenProcess
KERNEL32.dll1270VirtualQuery
KERNEL32.dll1112SetEnvironmentVariableA
KERNEL32.dll75CheckElevationEnabled
KERNEL32.dll391GetCommandLineA
KERNEL32.dll165CreateProcessA
KERNEL32.dll631GetSystemTime
KERNEL32.dll935QueryPerformanceCounter
KERNEL32.dll936QueryPerformanceFrequency
KERNEL32.dll633GetSystemTimeAsFileTime
KERNEL32.dll636GetSystemWindowsDirectoryW
KERNEL32.dll495GetFileSize
KERNEL32.dll1220TerminateProcess
KERNEL32.dll1114SetErrorMode
KERNEL32.dll332FindResourceA
KERNEL32.dll1204SizeofResource
KERNEL32.dll834LoadResource
KERNEL32.dll852LockResource
KERNEL32.dll212DeleteFileA
KERNEL32.dll520GetLogicalDrives
KERNEL32.dll468GetDriveTypeW
KERNEL32.dll1322WriteFile
KERNEL32.dll475GetEnvironmentStringsW
KERNEL32.dll354FreeEnvironmentStringsW
KERNEL32.dll130CreateDirectoryW
KERNEL32.dll577GetPrivateProfileStringW
KERNEL32.dll1328WritePrivateProfileStringW
KERNEL32.dll960ReadFile
KERNEL32.dll141CreateFileMappingW
KERNEL32.dll138CreateFileMappingA
KERNEL32.dll324FindNextFileA
KERNEL32.dll623GetSystemDirectoryA
KERNEL32.dll829LoadLibraryA
KERNEL32.dll182CreateThread
KERNEL32.dll1262VirtualAlloc
KERNEL32.dll1265VirtualFree
KERNEL32.dll725HeapSize
KERNEL32.dll728HeapValidate
KERNEL32.dll608GetShortPathNameA
KERNEL32.dll526GetLongPathNameW
KERNEL32.dll783IsWow64Process
KERNEL32.dll1304Wow64DisableWow64FsRedirection
KERNEL32.dll1308Wow64RevertWow64FsRedirection
KERNEL32.dll286ExpandEnvironmentStringsW
KERNEL32.dll233DuplicateHandle
KERNEL32.dll344FlushFileBuffers
KERNEL32.dll532GetModuleHandleA
KERNEL32.dll1350lstrcmpA
KERNEL32.dll222DeviceIoControl
KERNEL32.dll679GetVolumeInformationW
KERNEL32.dll517GetLocaleInfoW
KERNEL32.dll1362lstrlenA
KERNEL32.dll768IsDBCSLeadByteEx
KERNEL32.dll781IsValidLocale
KERNEL32.dll1179SetThreadPriority
KERNEL32.dll453GetCurrentThread
KERNEL32.dll1180SetThreadPriorityBoost
KERNEL32.dll118CopyFileW
KERNEL32.dll215DeleteFileW
KERNEL32.dll945RaiseException
KERNEL32.dll1227TlsGetValue
KERNEL32.dll449GetCurrentProcess
KERNEL32.dll1363lstrlenW
KERNEL32.dll1225TlsAlloc
KERNEL32.dll1228TlsSetValue
KERNEL32.dll1226TlsFree
KERNEL32.dll454GetCurrentThreadId
KERNEL32.dll1136SetHandleCount
KERNEL32.dll612GetStdHandle
KERNEL32.dll498GetFileType
KERNEL32.dll610GetStartupInfoA
KERNEL32.dll353FreeEnvironmentStringsA
KERNEL32.dll473GetEnvironmentStrings
KERNEL32.dll719HeapDestroy
KERNEL32.dll718HeapCreate
KERNEL32.dll864MoveFileExW
KERNEL32.dll1122SetFileAttributesW
KERNEL32.dll515GetLocaleInfoA
KERNEL32.dll740InitializeCriticalSection
KERNEL32.dll830LoadLibraryExA
KERNEL32.dll617GetStringTypeW
KERNEL32.dll614GetStringTypeA
KERNEL32.dll484GetFileAttributesA
KERNEL32.dll210DeleteCriticalSection
KERNEL32.dll741InitializeCriticalSectionAndSpinCount
KERNEL32.dll144CreateFileW
KERNEL32.dll83CloseHandle
KERNEL32.dll314FindFirstFileW
KERNEL32.dll326FindNextFileW
KERNEL32.dll303FindClose
KERNEL32.dll826LeaveCriticalSection
KERNEL32.dll659GetTickCount
KERNEL32.dll699GlobalFree
KERNEL32.dll1268VirtualProtect
KERNEL32.dll624GetSystemDirectoryW
KERNEL32.dll137CreateFileA
KERNEL32.dll1205Sleep
KERNEL32.dll767IsDBCSLeadByte
KERNEL32.dll667GetUserDefaultLCID
KERNEL32.dll760IsBadReadPtr
KERNEL32.dll101CompareStringW
KERNEL32.dll98CompareStringA
KERNEL32.dll1351lstrcmpW
KERNEL32.dll351FormatMessageW
KERNEL32.dll831LoadLibraryExW
KERNEL32.dll355FreeLibrary
KERNEL32.dll814LCMapStringW
KERNEL32.dll812LCMapStringA
KERNEL32.dll489GetFileAttributesW
KERNEL32.dll687GetWindowsDirectoryW
KERNEL32.dll169CreateProcessW
KERNEL32.dll1278WaitForSingleObject
KERNEL32.dll1191SetUnhandledExceptionFilter
KERNEL32.dll1240UnhandledExceptionFilter
KERNEL32.dll566GetOEMCP
KERNEL32.dll480GetExitCodeProcess
KERNEL32.dll645GetTempPathW
KERNEL32.dll643GetTempFileNameW
KERNEL32.dll644GetTempPathA
KERNEL32.dll642GetTempFileNameA
KERNEL32.dll100CompareStringOrdinal
KERNEL32.dll531GetModuleFileNameW
KERNEL32.dll477GetEnvironmentVariableW
KERNEL32.dll1113SetEnvironmentVariableW
KERNEL32.dll121CreateActCtxW
KERNEL32.dll925QueryActCtxW
KERNEL32.dll361GetACP
KERNEL32.dll371GetCPInfo
KERNEL32.dll1140SetLastError
KERNEL32.dll513GetLastError
KERNEL32.dll282ExitProcess
KERNEL32.dll580GetProcAddress
KERNEL32.dll832LoadLibraryW
KERNEL32.dll841LocalFree
KERNEL32.dll392GetCommandLineW
KERNEL32.dll450GetCurrentProcessId
KERNEL32.dll837LocalAlloc
KERNEL32.dll535GetModuleHandleW
KERNEL32.dll99CompareStringEx
KERNEL32.dll811LCIDToLocaleName
KERNEL32.dll720HeapFree
KERNEL32.dll871MultiByteToWideChar
KERNEL32.dll716HeapAlloc
KERNEL32.dll585GetProcessHeap
KERNEL32.dll516GetLocaleInfoEx
KERNEL32.dll813LCMapStringEx
KERNEL32.dll1302WideCharToMultiByte
KERNEL32.dll723HeapReAlloc
KERNEL32.dll322FindNLSStringEx
KERNEL32.dll770IsNLSDefinedString
KERNEL32.dll752InterlockedIncrement
KERNEL32.dll748InterlockedDecrement
KERNEL32.dll239EnterCriticalSection
KERNEL32.dll1017ReleaseActCtx
ADVAPI32.dll116ConvertStringSidToSidW
ADVAPI32.dll401LookupAccountSidW
ADVAPI32.dll689SetNamedSecurityInfoW
ADVAPI32.dll114ConvertStringSecurityDescriptorToSecurityDescriptorW
ADVAPI32.dll407LookupPrivilegeValueW
ADVAPI32.dll503OpenProcessToken
ADVAPI32.dll334GetSecurityInfo
ADVAPI32.dll303GetFileSecurityA
ADVAPI32.dll445LsaOpenPolicy
ADVAPI32.dll678SetEntriesInAclW
ADVAPI32.dll302GetExplicitEntriesFromAclW
ADVAPI32.dll413LsaClose
ADVAPI32.dll410LsaAddAccountRights
ADVAPI32.dll443LsaNtStatusToWinError
ADVAPI32.dll322GetNamedSecurityInfoW
ADVAPI32.dll552QueryServiceStatus
MPR.dll36WNetGetConnectionW
RPCRT4.dll139NdrAsyncClientCall
RPCRT4.dll340RpcAsyncCancelCall
RPCRT4.dll341RpcAsyncCompleteCall
RPCRT4.dll45I_RpcExceptionFilter
RPCRT4.dll343RpcAsyncInitializeHandle
RPCRT4.dll494RpcStringBindingComposeW
RPCRT4.dll351RpcBindingFromStringBindingW
RPCRT4.dll349RpcBindingFree
RPCRT4.dll366RpcBindingSetAuthInfoExW
RPCRT4.dll498RpcStringFreeW
ordentry_vafunction_name
10x590a1GetHookAPIs
20x59b3aNotifyShims
module_nameNULL.dll
flags0
timestamp2013-02-12 03:06:44
version0.0
ordinal_base1
nFunctions2
nNames2
Names(2)0x77150
Functions(2)0x77148
NameOrdinals(2)0x77158

StringTable 040904B0

CompanyNameMicrosoft Corporation
FileDescriptionWindows Compatibility DLL
FileVersion6.1.7601.18076 (win7sp1_gdr.130211-1434)
InternalName
LegalCopyright© Microsoft Corporation. All rights reserved.
OriginalFilename
ProductNameMicrosoft® Windows® Operating System
ProductVersion6.1.7601.18076

VS_FIXEDFILEINFO

FileVersion6.1.7601.18076
ProductVersion6.1.7601.18076
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType2
FileSubtype0
offsetsizetypecomment
02176512DLL02/12/2013 04:48:19#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK