filenamemspaint.exe
size938496 (0xe5200)
md5b77bbef18ab33c9bf411c461463b1da8
typePE32+ executable (GUI) x86-64, for MS Windows
mimetypeapplication/x-dosexec
clamavscan pending
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf0

Rich Header

lib idversiontimes used
1473072954
259274123
2602741227
2612741248
2572741229
101287
26427412128
255274121
258274121

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x8664
NumberOfSections7
TimeDateStamp0xc790b244
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xf0
Characteristics0x22
Magic0x20b
LinkerVersion14.20
SizeOfCode0x9b200
SizeOfInitializedData0x4d000
SizeOfUninitializedData0
AddressOfEntryPoint0x952c0
BaseOfCode0x1000
ImageBase0x140000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion10.0
ImageVersion10.0
SubsystemVersion10.0
Reserved10
SizeOfImage0xed000
SizeOfHeaders0x400
CheckSum0xf1233
Subsystem2
DllCharacteristics0xc160
SizeOfStackReserve0x80000
SizeOfStackCommit0x2000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000x9b15c0x9b200R-X CODE
.rdata0x9d0000x3a41c0x3a600R-- IDATA
.data0xd80000x81000x4e00RW- IDATA
.pdata0xe10000x69540x6a00R-- IDATA
.didat0xe80000x3600x400RW- IDATA
.rsrc0xe90000xc080xe00R-- IDATA
.reloc0xea0000x2af80x2c00R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0xd28280x320
RESOURCE0xe90000xc08
EXCEPTION0xe10000x6954
SECURITY00
BASERELOC0xea0000x2af8
DEBUG0xb63800x54
ARCHITECTURE00
GLOBALPTR00
TLS0xa8bb80x28
LOAD_CONFIG0x9d0200x118
Bound_IAT00
IAT0xa8be00x2328
Delay_IAT0xd17c00x40
CLR_Header00

TLS

raw
start		raw
end		indexcallbkszero
fill		flags
0x1400c10e80x1400c10f00x1400dd4d00x1400ab1b800x300000
typenamesizecp
EDPENLIGHTENEDAPPINFOIDMICROSOFTEDPENLIGHTENEDAPPINFO20
EDPPERMISSIVEAPPINFOIDMICROSOFTEDPPERMISSIVEAPPINFO20
MUI#14000
VERSION#18800
MANIFEST#111720
module_namehintordfunction_name
ADVAPI32.dll615RegCreateKeyExW
ADVAPI32.dll668RegQueryValueExW
ADVAPI32.dll606RegCloseKey
ADVAPI32.dll684RegSetValueExW
ADVAPI32.dll267EncryptFileW
ADVAPI32.dll234DecryptFileW
ADVAPI32.dll297EventWriteTransfer
ADVAPI32.dll239DuplicateEncryptionInfoFile
ADVAPI32.dll291EventUnregister
ADVAPI32.dll289EventRegister
ADVAPI32.dll655RegOpenKeyExW
ADVAPI32.dll343GetNamedSecurityInfoW
ADVAPI32.dll742SetNamedSecurityInfoW
ADVAPI32.dll541OpenThreadToken
ADVAPI32.dll536OpenProcessToken
ADVAPI32.dll355GetSecurityInfo
ADVAPI32.dll312GetAclInformation
ADVAPI32.dll311GetAce
ADVAPI32.dll365GetSidSubAuthorityCount
ADVAPI32.dll364GetSidSubAuthority
ADVAPI32.dll431LookupPrivilegeValueW
ADVAPI32.dll31AdjustTokenPrivileges
ADVAPI32.dll405InitiateSystemShutdownExW
ADVAPI32.dll626RegDeleteKeyW
KERNEL32.dll637GetModuleFileNameW
KERNEL32.dll157CompareStringOrdinal
KERNEL32.dll544GetCurrentProcess
KERNEL32.dll548GetCurrentThread
KERNEL32.dll443GetACP
KERNEL32.dll176CopyFileW
KERNEL32.dll1007MoveFileExW
KERNEL32.dll281DeleteFileW
KERNEL32.dll638GetModuleHandleA
KERNEL32.dll194CreateEventW
KERNEL32.dll1319SetEvent
KERNEL32.dll1118QueueUserWorkItem
KERNEL32.dll436FreeLibrary
KERNEL32.dll971LoadLibraryW
KERNEL32.dll857HeapSetInformation
KERNEL32.dll480GetCommandLineW
KERNEL32.dll1497VerifyVersionInfoW
KERNEL32.dll1493VerSetConditionMask
KERNEL32.dll276DeleteCriticalSection
KERNEL32.dll777GetThreadLocale
KERNEL32.dll1100QueryFullProcessImageNameW
KERNEL32.dll1042OpenProcess
KERNEL32.dll768GetTempPathW
KERNEL32.dll1611lstrcmpiW
KERNEL32.dll1313SetEndOfFile
KERNEL32.dll393FindFirstFileW
KERNEL32.dll611GetFullPathNameW
KERNEL32.dll1209ReleaseSRWLockExclusive
KERNEL32.dllAcquireSRWLockExclusive
KERNEL32.dll785GetTickCount
KERNEL32.dll827GlobalDeleteAtom
KERNEL32.dll824GlobalAddAtomW
KERNEL32.dll1318SetErrorMode
KERNEL32.dll982LocalFree
KERNEL32.dll977LocalAlloc
KERNEL32.dll1129RaiseException
KERNEL32.dll840GlobalSize
KERNEL32.dll583GetExitCodeThread
KERNEL32.dll790GetTimeFormatW
KERNEL32.dll555GetDateFormatW
KERNEL32.dll371FileTimeToSystemTime
KERNEL32.dll370FileTimeToLocalFileTime
KERNEL32.dll597GetFileSize
KERNEL32.dll1620lstrlenW
KERNEL32.dll622GetLocaleInfoW
KERNEL32.dll1013MulDiv
KERNEL32.dll292DeviceIoControl
KERNEL32.dll1335SetFileTime
KERNEL32.dll1326SetFileAttributesW
KERNEL32.dll599GetFileTime
KERNEL32.dll591GetFileAttributesW
KERNEL32.dll382FindClose
KERNEL32.dll1574WriteFile
KERNEL32.dll1146ReadFile
KERNEL32.dll406FindNextStreamW
KERNEL32.dll395FindFirstStreamW
KERNEL32.dll839GlobalReAlloc
KERNEL32.dll843GlobalUnlock
KERNEL32.dll836GlobalLock
KERNEL32.dll825GlobalAlloc
KERNEL32.dll832GlobalFree
KERNEL32.dll598GetFileSizeEx
KERNEL32.dll206CreateFileW
KERNEL32.dll901IsDebuggerPresent
KERNEL32.dll266DebugBreak
KERNEL32.dll641GetModuleHandleW
KERNEL32.dll636GetModuleFileNameA
KERNEL32.dll238CreateSemaphoreExW
KERNEL32.dll853HeapFree
KERNEL32.dll1346SetLastError
KERNEL32.dll545GetCurrentProcessId
KERNEL32.dll1211ReleaseSemaphore
KERNEL32.dll640GetModuleHandleExW
KERNEL32.dll1515WaitForSingleObject
KERNEL32.dll549GetCurrentThreadId
KERNEL32.dll1207ReleaseMutex
KERNEL32.dll432FormatMessageW
KERNEL32.dll618GetLastError
KERNEL32.dll1054OutputDebugStringW
KERNEL32.dll1516WaitForSingleObjectEx
KERNEL32.dll1046OpenSemaphoreW
KERNEL32.dll137CloseHandle
KERNEL32.dll849HeapAlloc
KERNEL32.dll696GetProcAddress
KERNEL32.dll220CreateMutexExW
KERNEL32.dll1608lstrcmpW
KERNEL32.dll33ApplicationRecoveryFinished
KERNEL32.dll34ApplicationRecoveryInProgress
KERNEL32.dll1193RegisterApplicationRecoveryCallback
KERNEL32.dll1194RegisterApplicationRestart
KERNEL32.dll254CreateToolhelp32Snapshot
KERNEL32.dll1073Process32FirstW
KERNEL32.dll1075Process32NextW
KERNEL32.dll1504VirtualProtect
KERNEL32.dll969LoadLibraryExA
KERNEL32.dll749GetSystemInfo
KERNEL32.dll1506VirtualQuery
KERNEL32.dll702GetProcessHeap
GDI32.dll452EnumFontFamiliesExW
GDI32.dll728GetTextFaceW
GDI32.dll553GdiGradientFill
GDI32.dll730GetTextMetricsW
GDI32.dll797Polyline
GDI32.dll911SetROP2
GDI32.dll82CreatePolygonRgn
GDI32.dll938TranslateCharsetInfo
GDI32.dll722GetTextExtentPoint32W
GDI32.dll68CreateFontW
GDI32.dll932StretchDIBits
GDI32.dll52CreateDCW
GDI32.dll67CreateFontIndirectW
GDI32.dll914SetStretchBltMode
GDI32.dll603GetBrushOrgEx
GDI32.dll704GetRgnBox
GDI32.dll34CombineRgn
GDI32.dll83CreateRectRgn
GDI32.dll469ExtSelectClipRgn
GDI32.dll468ExtFloodFill
GDI32.dll695GetPixel
GDI32.dll940UnrealizeObject
GDI32.dll882SetBrushOrgEx
GDI32.dll931StretchBlt
GDI32.dll796Polygon
GDI32.dll771OffsetRgn
GDI32.dll907SetPixel
GDI32.dll748LineTo
GDI32.dll768MoveToEx
GDI32.dll79CreatePen
GDI32.dll889SetDIBitsToDevice
GDI32.dll681GetNearestColor
GDI32.dll56CreateDIBitmap
GDI32.dll637GetDIBits
GDI32.dll69CreateHalftonePalette
GDI32.dll55CreateDIBSection
GDI32.dll785PlayMetaFile
GDI32.dll920SetViewportExtEx
GDI32.dll815RestoreDC
GDI32.dll746LPtoDP
GDI32.dll705GetStockObject
GDI32.dll822SaveDC
GDI32.dll77CreatePalette
GDI32.dll805Rectangle
GDI32.dll492GdiAlphaBlend
GDI32.dll918SetTextColor
GDI32.dll878SetBkColor
GDI32.dll688GetObjectW
GDI32.dll630GetCurrentObject
GDI32.dll887SetDIBColorTable
GDI32.dll636GetDIBColorTable
GDI32.dll84CreateRectRgnIndirect
GDI32.dll900SetMapMode
GDI32.dll481FillRgn
GDI32.dll780PatBlt
GDI32.dll90CreateSolidBrush
GDI32.dll78CreatePatternBrush
GDI32.dll906SetPaletteEntries
GDI32.dll814ResizePalette
GDI32.dll682GetNearestPaletteIndex
GDI32.dll691GetPaletteEntries
GDI32.dll888SetDIBits
GDI32.dll41CreateBitmap
GDI32.dll387DeleteObject
GDI32.dll384DeleteDC
GDI32.dll19BitBlt
GDI32.dll48CreateCompatibleBitmap
GDI32.dll49CreateCompatibleDC
GDI32.dll802RealizePalette
GDI32.dll872SelectPalette
GDI32.dll871SelectObject
GDI32.dll638GetDeviceCaps
USER32.dll777ScreenToClient
USER32.dll947UnionRect
USER32.dll545IntersectRect
USER32.dll995WindowFromPoint
USER32.dll697PtInRect
USER32.dll293GetCapture
USER32.dll859SetRectEmpty
USER32.dll875SetTimer
USER32.dll592KillTimer
USER32.dll573IsRectEmpty
USER32.dll267EqualRect
USER32.dll808SetCursor
USER32.dll796SetCapture
USER32.dll289GetAsyncKeyState
USER32.dll857SetPropW
USER32.dll91CopyRect
USER32.dll522InflateRect
USER32.dll400GetParent
USER32.dll489GetWindowLongW
USER32.dll600LoadCursorW
USER32.dll361GetKeyboardLayout
USER32.dll604LoadImageW
USER32.dll19BringWindowToTop
USER32.dll343GetFocus
USER32.dll795SetActiveWindow
USER32.dll466GetTouchInputInfo
USER32.dll333GetDlgItemInt
USER32.dll764ReleaseDC
USER32.dll390GetMessageExtraInfo
USER32.dll272FillRect
USER32.dll77ClientToScreen
USER32.dll934TrackMouseEvent
USER32.dll454GetSystemMenu
USER32.dll768RemoveMenu
USER32.dll181DestroyWindow
USER32.dll175DestroyCursor
USER32.dll925SystemParametersInfoW
USER32.dll488GetWindowLongPtrW
USER32.dll504GetWindowThreadProcessId
USER32.dll178DestroyMenu
USER32.dll656MonitorFromRect
USER32.dll395GetMonitorInfoW
USER32.dll299GetClassInfoW
USER32.dll602LoadIconW
USER32.dll596LoadBitmapW
USER32.dll322GetDC
USER32.dll818SetDlgItemInt
USER32.dll783SendDlgItemMessageW
USER32.dll888SetWindowLongPtrW
USER32.dll660MsgWaitForMultipleObjectsEx
USER32.dll889SetWindowLongW
USER32.dll568IsMenu
USER32.dll375GetMenu
USER32.dll961UnregisterTouchWindow
USER32.dll759RegisterTouchWindow
USER32.dll321GetCursorPos
USER32.dll668OffsetRect
USER32.dll737RegisterClipboardFormatW
USER32.dll558IsClipboardFormatAvailable
USER32.dll688PostQuitMessage
USER32.dll826SetGestureConfig
USER32.dll687PostMessageW
USER32.dll683PeekMessageW
USER32.dll896SetWindowTextW
USER32.dll763ReleaseCapture
USER32.dll662NotifyWinEvent
USER32.dll360GetKeyState
USER32.dll652MessageBoxW
USER32.dll644MessageBeep
USER32.dll858SetRect
USER32.dll239EnableWindow
USER32.dll967UpdateWindow
USER32.dll583IsWindow
USER32.dll546InvalidateRect
USER32.dll455GetSystemMetrics
USER32.dll496GetWindowRect
USER32.dll307GetClientRect
USER32.dll451GetSysColor
USER32.dll177DestroyIcon
USER32.dll792SendMessageW
USER32.dll762RegisterWindowMessageW
USER32.dll332GetDlgItem
USER32.dll82CloseTouchInputHandle
USER32.dll66CheckDlgButton
USER32.dll480GetWindowDC
USER32.dll237EnableScrollBar
USER32.dll468GetUpdateRect
USER32.dll978ValidateRect
USER32.dll67CheckMenuItem
USER32.dll730RedrawWindow
USER32.dll612LoadMenuW
USER32.dll450GetSubMenu
USER32.dll295GetCaretPos
USER32.dll801SetClassLongPtrW
USER32.dll615LoadStringW
USER32.dll589IsWindowVisible
USER32.dll786SendInput
USER32.dll810SetCursorPos
USER32.dll904ShowCursor
MFC42u.dll3889
MFC42u.dll1035
MFC42u.dll3894
MFC42u.dll1055
MFC42u.dll650
MFC42u.dll1931
MFC42u.dll613
MFC42u.dll2133
MFC42u.dll6379
MFC42u.dll3639
MFC42u.dll1036
MFC42u.dll1726
MFC42u.dll4589
MFC42u.dll1029
MFC42u.dll2132
MFC42u.dll2129
MFC42u.dll2138
MFC42u.dll1387
MFC42u.dll4609
MFC42u.dll5700
MFC42u.dll4860
MFC42u.dll6216
MFC42u.dll4741
MFC42u.dll3743
MFC42u.dll822
MFC42u.dll408
MFC42u.dll904
MFC42u.dll2105
MFC42u.dll2087
MFC42u.dll311
MFC42u.dll827
MFC42u.dll4295
MFC42u.dll4294
MFC42u.dll312
MFC42u.dll1859
MFC42u.dll1945
MFC42u.dll4554
MFC42u.dll321
MFC42u.dll837
MFC42u.dll1719
MFC42u.dll3748
MFC42u.dll3753
MFC42u.dll4705
MFC42u.dll6050
MFC42u.dll1584
MFC42u.dll5670
MFC42u.dll6162
MFC42u.dll3744
MFC42u.dll4238
MFC42u.dll1353
MFC42u.dll4234
MFC42u.dll2793
MFC42u.dll6540
MFC42u.dll823
MFC42u.dll307
MFC42u.dll4952
MFC42u.dll4436
MFC42u.dll6691
MFC42u.dll1650
MFC42u.dll2449
MFC42u.dll3820
MFC42u.dll2595
MFC42u.dll4544
MFC42u.dll2258
MFC42u.dll6817
MFC42u.dll4612
MFC42u.dll6887
MFC42u.dll6886
MFC42u.dll620
MFC42u.dll1040
MFC42u.dll626
MFC42u.dll525
MFC42u.dll984
MFC42u.dll3638
MFC42u.dll6455
MFC42u.dll6457
MFC42u.dll286
MFC42u.dll1574
MFC42u.dll4473
MFC42u.dll2629
MFC42u.dll624
MFC42u.dll6102
MFC42u.dll4623
MFC42u.dll5467
MFC42u.dll6632
MFC42u.dll4770
MFC42u.dll4988
MFC42u.dll4371
MFC42u.dll3164
MFC42u.dll4077
MFC42u.dll4083
MFC42u.dll4082
MFC42u.dll3046
MFC42u.dll3166
MFC42u.dll3052
MFC42u.dll3366
MFC42u.dll3231
MFC42u.dll4815
MFC42u.dll3362
MFC42u.dll3243
MFC42u.dll3049
MFC42u.dll5699
MFC42u.dll2140
MFC42u.dll2455
MFC42u.dll5680
MFC42u.dll1736
MFC42u.dll5484
MFC42u.dll3933
MFC42u.dll6814
MFC42u.dll2060
MFC42u.dll2670
MFC42u.dll4789
MFC42u.dll5229
MFC42u.dll4017
MFC42u.dll5701
MFC42u.dll4694
MFC42u.dll6806
MFC42u.dll5586
MFC42u.dll2399
MFC42u.dll5656
MFC42u.dll4749
MFC42u.dll1778
MFC42u.dll4365
MFC42u.dll6440
MFC42u.dll1723
MFC42u.dll1716
MFC42u.dll5506
MFC42u.dll2404
MFC42u.dll4422
MFC42u.dll5838
MFC42u.dll4345
MFC42u.dll4706
MFC42u.dll2535
MFC42u.dll6556
MFC42u.dll2596
MFC42u.dll2408
MFC42u.dll2427
MFC42u.dll3830
MFC42u.dll3790
MFC42u.dll3740
MFC42u.dll1869
MFC42u.dll445
MFC42u.dll940
MFC42u.dll2779
MFC42u.dll1379
MFC42u.dll6880
MFC42u.dll1483
MFC42u.dll5933
MFC42u.dll1463
MFC42u.dll371
MFC42u.dll877
MFC42u.dll1126
MFC42u.dll5986
MFC42u.dll3222
MFC42u.dll3780
MFC42u.dll367
MFC42u.dll5602
MFC42u.dll6762
MFC42u.dll336
MFC42u.dll851
MFC42u.dll1646
MFC42u.dll1647
MFC42u.dll6127
MFC42u.dll2461
MFC42u.dll6135
MFC42u.dll2420
MFC42u.dll1677
MFC42u.dll2676
MFC42u.dll1471
MFC42u.dll4548
MFC42u.dll1566
MFC42u.dll6021
MFC42u.dll1122
MFC42u.dll4602
MFC42u.dll2846
MFC42u.dll1428
MFC42u.dll1838
MFC42u.dll2925
MFC42u.dll1561
MFC42u.dll1425
MFC42u.dll314
MFC42u.dll2516
MFC42u.dll852
MFC42u.dll3742
MFC42u.dll5949
MFC42u.dll337
MFC42u.dll2379
MFC42u.dll2319
MFC42u.dll2381
MFC42u.dll2315
MFC42u.dll2384
MFC42u.dll2311
MFC42u.dll2781
MFC42u.dll2975
MFC42u.dll2979
MFC42u.dll5887
MFC42u.dll4557
MFC42u.dll3177
MFC42u.dll6614
MFC42u.dll5077
MFC42u.dll1787
MFC42u.dll5245
MFC42u.dll3003
MFC42u.dll6767
MFC42u.dll2318
MFC42u.dll2376
MFC42u.dll4344
MFC42u.dll3180
MFC42u.dll1781
MFC42u.dll3761
MFC42u.dll4771
MFC42u.dll2457
MFC42u.dll5683
MFC42u.dll5702
MFC42u.dll6812
MFC42u.dll5663
MFC42u.dll4752
MFC42u.dll1777
MFC42u.dll6437
MFC42u.dll2517
MFC42u.dll5406
MFC42u.dll4721
MFC42u.dll5687
MFC42u.dll6018
MFC42u.dll5730
MFC42u.dll2857
MFC42u.dll5712
MFC42u.dll3535
MFC42u.dll3867
MFC42u.dll1067
MFC42u.dll665
MFC42u.dll996
MFC42u.dll3408
MFC42u.dll2122
MFC42u.dll2898
MFC42u.dll3879
MFC42u.dll2900
MFC42u.dll6559
MFC42u.dll6238
MFC42u.dll2463
MFC42u.dll4127
MFC42u.dll3861
MFC42u.dll2084
MFC42u.dll4375
MFC42u.dll310
MFC42u.dll826
MFC42u.dll4650
MFC42u.dll660
MFC42u.dll1064
MFC42u.dll2906
MFC42u.dll6130
MFC42u.dll6131
MFC42u.dll303
MFC42u.dll6123
MFC42u.dll6609
MFC42u.dll4297
MFC42u.dll6138
MFC42u.dll6511
MFC42u.dll1950
MFC42u.dll4599
MFC42u.dll1537
MFC42u.dll2393
MFC42u.dll6577
MFC42u.dll4187
MFC42u.dll4014
MFC42u.dll6520
MFC42u.dll3936
MFC42u.dll6351
MFC42u.dll3099
MFC42u.dll3647
MFC42u.dll1441
MFC42u.dll2394
MFC42u.dll3440
MFC42u.dll5807
MFC42u.dll1977
MFC42u.dll4565
MFC42u.dll387
MFC42u.dll890
MFC42u.dll2100
MFC42u.dll2903
MFC42u.dll4806
MFC42u.dll4784
MFC42u.dll5468
MFC42u.dll5175
MFC42u.dll4774
MFC42u.dll5674
MFC42u.dll1674
MFC42u.dll2671
MFC42u.dll5704
MFC42u.dll5659
MFC42u.dll4364
MFC42u.dll4461
MFC42u.dll2919
MFC42u.dll2920
MFC42u.dll3536
MFC42u.dll5839
MFC42u.dll1316
MFC42u.dll5420
MFC42u.dll3481
MFC42u.dll4633
MFC42u.dll4817
MFC42u.dll5524
MFC42u.dll5521
MFC42u.dll3141
MFC42u.dll2405
MFC42u.dll2750
MFC42u.dll3920
MFC42u.dll4580
MFC42u.dll540
MFC42u.dll992
MFC42u.dll5232
MFC42u.dll1903
MFC42u.dll4690
MFC42u.dll6474
MFC42u.dll994
MFC42u.dll2802
MFC42u.dll4780
MFC42u.dll5682
MFC42u.dll1734
MFC42u.dll3932
MFC42u.dll5662
MFC42u.dll4405
MFC42u.dll5366
MFC42u.dll5369
MFC42u.dll4879
MFC42u.dll4884
MFC42u.dll4881
MFC42u.dll4899
MFC42u.dll4901
MFC42u.dll4886
MFC42u.dll5282
MFC42u.dll5090
MFC42u.dll4682
MFC42u.dll5496
MFC42u.dll4891
MFC42u.dll5288
MFC42u.dll4712
MFC42u.dll5297
MFC42u.dll4945
MFC42u.dll4946
MFC42u.dll1730
MFC42u.dll5649
MFC42u.dll4867
MFC42u.dll528
MFC42u.dll3862
MFC42u.dll1893
MFC42u.dll4578
MFC42u.dll4979
MFC42u.dll5519
MFC42u.dll4288
MFC42u.dll504
MFC42u.dll977
MFC42u.dll5215
MFC42u.dll5252
MFC42u.dll5362
MFC42u.dll5894
MFC42u.dll5989
MFC42u.dll1753
MFC42u.dll1442
MFC42u.dll6777
MFC42u.dll6078
MFC42u.dll1498
MFC42u.dll2513
MFC42u.dll2801
MFC42u.dll1284
MFC42u.dll5905
MFC42u.dll6465
MFC42u.dll5021
MFC42u.dll1559
MFC42u.dll287
MFC42u.dll2756
MFC42u.dll2754
MFC42u.dll2757
MFC42u.dll506
MFC42u.dll979
MFC42u.dll2272
MFC42u.dll292
MFC42u.dll815
MFC42u.dll1972
MFC42u.dll1992
MFC42u.dll6828
MFC42u.dll1301
MFC42u.dll2015
MFC42u.dll1296
MFC42u.dll5622
MFC42u.dll2417
MFC42u.dll3282
MFC42u.dll3601
MFC42u.dll5431
MFC42u.dll6612
MFC42u.dll4844
MFC42u.dll4982
MFC42u.dll4977
MFC42u.dll4981
MFC42u.dll4777
MFC42u.dll4984
MFC42u.dll3365
MFC42u.dll6586
MFC42u.dll4732
MFC42u.dll4769
MFC42u.dll5666
MFC42u.dll6769
MFC42u.dll3147
MFC42u.dll3142
MFC42u.dll5064
MFC42u.dll3353
MFC42u.dll3994
MFC42u.dll3595
MFC42u.dll1361
MFC42u.dll5956
MFC42u.dll3672
MFC42u.dll5436
MFC42u.dll3556
MFC42u.dll3059
MFC42u.dll4989
MFC42u.dll5871
MFC42u.dll4762
MFC42u.dll5408
MFC42u.dll4964
MFC42u.dll3191
MFC42u.dll5432
MFC42u.dll4841
MFC42u.dll5410
MFC42u.dll5317
MFC42u.dll5001
MFC42u.dll4870
MFC42u.dll2195
MFC42u.dll2448
MFC42u.dll5354
MFC42u.dll3270
MFC42u.dll5216
MFC42u.dll5253
MFC42u.dll5363
MFC42u.dll5047
MFC42u.dll5052
MFC42u.dll4797
MFC42u.dll1536
MFC42u.dll5037
MFC42u.dll4849
MFC42u.dll4124
MFC42u.dll5441
MFC42u.dll5402
MFC42u.dll5269
MFC42u.dll5309
MFC42u.dll4862
MFC42u.dll5582
MFC42u.dll6610
MFC42u.dll4759
MFC42u.dll5093
MFC42u.dll524
MFC42u.dll3675
MFC42u.dll2530
MFC42u.dll6136
MFC42u.dll5068
MFC42u.dll5306
MFC42u.dll4947
MFC42u.dll4703
MFC42u.dll4598
MFC42u.dll4976
MFC42u.dll659
MFC42u.dll1063
MFC42u.dll507
MFC42u.dll3783
MFC42u.dll971
MFC42u.dll1447
MFC42u.dll6510
MFC42u.dll1505
MFC42u.dll598
MFC42u.dll6538
MFC42u.dll1337
MFC42u.dll2036
MFC42u.dll6056
MFC42u.dll6055
MFC42u.dll5870
MFC42u.dll1287
MFC42u.dll2565
MFC42u.dll2752
MFC42u.dll6813
MFC42u.dll4368
MFC42u.dll5065
MFC42u.dll3468
MFC42u.dll1499
MFC42u.dll4970
MFC42u.dll3280
MFC42u.dll3593
MFC42u.dll1264
MFC42u.dll1286
MFC42u.dll4521
MFC42u.dll1388
MFC42u.dll6888
MFC42u.dll2939
MFC42u.dll3916
MFC42u.dll4983
MFC42u.dll6053
MFC42u.dll5711
MFC42u.dll5724
MFC42u.dll5722
MFC42u.dll2412
MFC42u.dll4191
MFC42u.dll6071
MFC42u.dll2515
MFC42u.dll2559
MFC42u.dll4836
MFC42u.dll4273
MFC42u.dll542
MFC42u.dll5690
MFC42u.dll1575
MFC42u.dll1472
MFC42u.dll5654
MFC42u.dll6661
MFC42u.dll1904
MFC42u.dll1946
MFC42u.dll4597
MFC42u.dll657
MFC42u.dll1061
MFC42u.dll1898
MFC42u.dll2540
MFC42u.dll2542
MFC42u.dll2261
MFC42u.dll5285
MFC42u.dll4813
MFC42u.dll4859
MFC42u.dll1259
MFC42u.dll2644
MFC42u.dll4974
MFC42u.dll544
MFC42u.dll2543
MFC42u.dll2661
MFC42u.dll1735
MFC42u.dll5367
MFC42u.dll5370
MFC42u.dll3516
MFC42u.dll5244
MFC42u.dll4720
MFC42u.dll1665
MFC42u.dll3432
MFC42u.dll4663
MFC42u.dll4621
MFC42u.dll4442
MFC42u.dll6076
MFC42u.dll6015
MFC42u.dll6243
MFC42u.dll6575
MFC42u.dll6398
MFC42u.dll6823
MFC42u.dll4472
MFC42u.dll3681
MFC42u.dll3682
MFC42u.dll6841
MFC42u.dll6842
MFC42u.dll1966
MFC42u.dll1894
MFC42u.dll505
MFC42u.dll978
MFC42u.dll2402
MFC42u.dll2401
MFC42u.dll5016
MFC42u.dll2561
MFC42u.dll5400
MFC42u.dll5249
MFC42u.dll5055
MFC42u.dll465
MFC42u.dll3030
MFC42u.dll5341
MFC42u.dll5336
MFC42u.dll4987
MFC42u.dll3484
MFC42u.dll3387
MFC42u.dll4320
MFC42u.dll5495
MFC42u.dll4893
MFC42u.dll4875
MFC42u.dll5386
MFC42u.dll5008
MFC42u.dll5312
MFC42u.dll5529
MFC42u.dll5084
MFC42u.dll5331
MFC42u.dll5397
MFC42u.dll3540
MFC42u.dll5364
MFC42u.dll443
MFC42u.dll938
MFC42u.dll6222
MFC42u.dll1562
MFC42u.dll6542
MFC42u.dll6818
msvcrt.dll123__dllonexit
msvcrt.dll833_unlock
msvcrt.dll486_lock
msvcrt.dll1211sqrtf
msvcrt.dll656_onexit
msvcrt.dll1205sinf
msvcrt.dll1169memcmp
msvcrt.dll1174memset
msvcrt.dll1172memmove
msvcrt.dll18public: virtual __cdecl type_info::~type_info(void) __ptr64

??1type_info@@UEAA@XZ

msvcrt.dll1249tanf
msvcrt.dll1170memcpy
msvcrt.dll47void __cdecl terminate(void)

?terminate@@YAXXZ

msvcrt.dll210_commode
msvcrt.dll295_fmode
msvcrt.dll898_wcmdln
msvcrt.dll381_initterm
msvcrt.dll144__setusermatherr
msvcrt.dll193_cexit
msvcrt.dll270_exit
msvcrt.dll142__set_app_type
msvcrt.dll157__wgetmainargs
msvcrt.dll174_amsg_exit
msvcrt.dll85_XcptFilter
msvcrt.dll1126isdigit
msvcrt.dll1123isalnum
msvcrt.dll1042abort
msvcrt.dll1168memchr
msvcrt.dll1257tolower
msvcrt.dll1132isspace
msvcrt.dll151__uncaught_exception
msvcrt.dll119__crtGetStringTypeW
msvcrt.dll121__crtLCMapStringW
msvcrt.dll137__mb_cur_max
msvcrt.dll138__pctype_func
msvcrt.dll107___lc_codepage_func
msvcrt.dll109___lc_handle_func
msvcrt.dll261_errno
msvcrt.dll110___mb_cur_max_func
msvcrt.dll1201setlocale
msvcrt.dll75_CxxThrowException
msvcrt.dll191_callnewh
msvcrt.dll11public: __cdecl exception::exception(char const * __ptr64 const & __ptr64, int) __ptr64

??0exception@@QEAA@AEBQEBDH@Z

msvcrt.dll1158malloc
msvcrt.dll1274vswprintf_s
msvcrt.dll1074exit
msvcrt.dll1291wcsncmp
msvcrt.dll1002_wsetlocale
msvcrt.dll901_wcsdup
msvcrt.dll153__wargv
msvcrt.dll113__argc
msvcrt.dll906_wcsicmp
msvcrt.dll87__C_specific_handler
msvcrt.dll1191rand
msvcrt.dll188_beginthreadex
msvcrt.dll1029_wtoi
msvcrt.dll1014_wsplitpath_s
msvcrt.dll1222strcspn
msvcrt.dll1151localeconv
msvcrt.dll1209sprintf_s
msvcrt.dll784_strtoi64
msvcrt.dll787_strtoui64
msvcrt.dll670_purecall
msvcrt.dll1100free
msvcrt.dll1173memmove_s
msvcrt.dll10public: __cdecl exception::exception(char const * __ptr64 const & __ptr64) __ptr64

??0exception@@QEAA@AEBQEBD@Z

msvcrt.dll49public: virtual char const * __ptr64 __cdecl exception::what(void)const __ptr64

?what@exception@@UEBAPEBDXZ

msvcrt.dll871_vsnprintf_s
msvcrt.dll12public: __cdecl exception::exception(class exception const & __ptr64) __ptr64

??0exception@@QEAA@AEBV0@@Z

msvcrt.dll13public: __cdecl exception::exception(void) __ptr64

??0exception@@QEAA@XZ

msvcrt.dll17public: virtual __cdecl exception::~exception(void) __ptr64

??1exception@@UEAA@XZ

msvcrt.dll1171memcpy_s
msvcrt.dll873_vsnwprintf
msvcrt.dll91__CxxFrameHandler3
msvcrt.dll1244swprintf_s
msvcrt.dll1285wcscpy_s
msvcrt.dll1307wcstoul
msvcrt.dll1272vsprintf_s
msvcrt.dll104__RTDynamicCast
msvcrt.dll1051atan2
msvcrt.dll1052atan2f
msvcrt.dll1068cosf
msvcrt.dll1282wcscmp
OLEAUT32.dll6
OLEAUT32.dll27
OLEAUT32.dll16
OLEAUT32.dll26
OLEAUT32.dll411
OLEAUT32.dll194
OLEAUT32.dll220
OLEAUT32.dll9
OLEAUT32.dll8
OLEAUT32.dll192
OLEAUT32.dll2
api-ms-win-core-com-l1-1-0.dll81PropVariantCopy
api-ms-win-core-com-l1-1-0.dll75CreateStreamOnHGlobal
api-ms-win-core-com-l1-1-0.dll2CLSIDFromString
api-ms-win-core-com-l1-1-0.dll40CoInitializeEx
api-ms-win-core-com-l1-1-0.dll67CoTaskMemFree
api-ms-win-core-com-l1-1-0.dll70CoUninitialize
api-ms-win-core-com-l1-1-0.dll30CoGetInterfaceAndReleaseStream
api-ms-win-core-com-l1-1-0.dll56CoReleaseMarshalData
api-ms-win-core-com-l1-1-0.dll46CoMarshalInterThreadInterfaceInStream
api-ms-win-core-com-l1-1-0.dll7CoCreateFreeThreadedMarshaler
api-ms-win-core-com-l1-1-0.dll9CoCreateInstance
api-ms-win-core-com-l1-1-0.dll66CoTaskMemAlloc
api-ms-win-core-com-l1-1-0.dll8CoCreateGuid
api-ms-win-core-com-l1-1-0.dll80PropVariantClear
api-ms-win-core-com-l1-1-0.dll76FreePropVariantArray
api-ms-win-core-com-l1-1-0.dll73CoWaitForMultipleHandles
api-ms-win-core-com-l1-1-1.dll82RoGetAgileReference
api-ms-win-core-winrt-string-l1-1-0.dll16WindowsGetStringRawBuffer
api-ms-win-core-winrt-string-l1-1-0.dll12WindowsDeleteString
api-ms-win-core-winrt-string-l1-1-0.dll11WindowsCreateStringReference
api-ms-win-core-winrt-string-l1-1-0.dll10WindowsCreateString
api-ms-win-core-winrt-l1-1-0.dll1RoGetActivationFactory
api-ms-win-core-winrt-error-l1-1-0.dll18SetRestrictedErrorInfo
api-ms-win-core-winrt-error-l1-1-1.dll6RoGetMatchingRestrictedErrorInfo
RPCRT4.dll551UuidToStringW
RPCRT4.dll533RpcStringFreeW
RPCRT4.dll542UuidCreate
api-ms-win-core-string-l1-1-0.dll7WideCharToMultiByte
api-ms-win-core-string-l1-1-0.dll6MultiByteToWideChar
api-ms-win-core-synch-l1-1-0.dll5CreateEventExW
api-ms-win-core-synch-l1-1-0.dll24InitializeCriticalSection
api-ms-win-core-synch-l1-1-0.dll17EnterCriticalSection
api-ms-win-core-synch-l1-1-0.dll29LeaveCriticalSection
api-ms-win-core-synch-l1-1-0.dll10CreateMutexW
api-ms-win-core-synch-l1-2-0.dll47SleepConditionVariableSRW
api-ms-win-core-synch-l1-2-0.dll45Sleep
api-ms-win-core-synch-l1-2-0.dll57WakeAllConditionVariable
api-ms-win-core-processthreads-l1-1-0.dll32GetStartupInfoW
api-ms-win-core-processthreads-l1-1-0.dll80TerminateProcess
api-ms-win-core-processthreads-l1-1-0.dll6CreateThread
api-ms-win-core-rtlsupport-l1-1-0.dll2RtlCaptureContext
api-ms-win-core-rtlsupport-l1-1-0.dll10RtlLookupFunctionEntry
api-ms-win-core-rtlsupport-l1-1-0.dll16RtlVirtualUnwind
api-ms-win-core-errorhandling-l1-1-0.dll15SetUnhandledExceptionFilter
api-ms-win-core-errorhandling-l1-1-0.dll17UnhandledExceptionFilter
api-ms-win-core-debug-l1-1-0.dll6OutputDebugStringA
api-ms-win-core-profile-l1-1-0.dllQueryPerformanceCounter
api-ms-win-core-sysinfo-l1-1-0.dll22GetSystemTimeAsFileTime
api-ms-win-core-sysinfo-l1-1-0.dll19GetSystemTime
api-ms-win-core-localization-l2-1-0.dll11GetNumberFormatEx
api-ms-win-core-localization-l1-2-0.dll20GetLocaleInfoEx
api-ms-win-core-libraryloader-l1-2-0.dll9FindResourceExW
api-ms-win-core-libraryloader-l1-2-0.dll32SizeofResource
api-ms-win-core-libraryloader-l1-2-0.dll29LockResource
api-ms-win-core-libraryloader-l1-2-0.dll26LoadResource
api-ms-win-core-file-l1-1-0.dll60GetTempFileNameW
api-ms-win-core-file-l1-1-0.dll1CompareFileTime
api-ms-win-core-registry-l1-1-0.dll33RegQueryInfoKeyW
api-ms-win-core-registry-l1-1-0.dll20RegGetValueW
api-ms-win-core-registry-l1-1-0.dll14RegEnumKeyExW
api-ms-win-core-registry-l1-1-0.dll16RegEnumValueW
api-ms-win-core-timezone-l1-1-0.dll10SystemTimeToFileTime
api-ms-win-eventing-provider-l1-1-0.dll4EventSetInformation
COMCTL32.dll345
COMCTL32.dll101ImageList_GetImageCount
COMCTL32.dll110ImageList_Remove
COMCTL32.dll112ImageList_ReplaceIcon
COMCTL32.dll91ImageList_Draw
COMCTL32.dll381
COMDLG32.dll12GetOpenFileNameW
COMDLG32.dll10GetFileTitleW
ole32.dll542WriteClassStg
ole32.dll423OleGetClipboard
ole32.dll475ReleaseStgMedium
ole32.dll96CoInitialize
ole32.dll544WriteFmtUserTypeStg
PROPSYS.dll147PropVariantToString
PROPSYS.dll62PSGetPropertyDescriptionListFromString
PROPSYS.dll156PropVariantToUInt32
PROPSYS.dll159PropVariantToUInt32WithDefault
PROPSYS.dll150PropVariantToStringVectorAlloc
SHELL32.dll346SHGetKnownFolderPath
SHELL32.dll161SHCreateItemFromParsingName
SHELL32.dll175SHCreateShellItemArrayFromShellItem
SHELL32.dll134SHBindToParent
SHELL32.dll171SHCreateShellItem
SHELL32.dll423ShellAboutW
SHELL32.dll155
SHELL32.dll75
SHELL32.dll9CommandLineToArgvW
SHELL32.dll430ShellExecuteExW
SHELL32.dll165
SHELL32.dll366SHGetSpecialFolderPathW
SHELL32.dll126SHAddToRecentDocs
SHELL32.dll38DragFinish
SHELL32.dll42DragQueryFileW
SHELL32.dll387SHParseDisplayName
SHELL32.dll141SHChangeNotify
SHLWAPI.dll77PathFindFileNameW
SHLWAPI.dll73PathFileExistsW
SHLWAPI.dll153PathStripPathW
SHLWAPI.dll12
SHLWAPI.dll61PathCombineW
WINMM.dll138timeGetTime
DismApi.DLL27DismOpenSession
DismApi.DLL29DismRemoveCapability
DismApi.DLL6DismCloseSession
DismApi.DLL34DismShutdown
DismApi.DLL25DismInitialize
api-ms-win-core-featurestaging-l1-1-0.dll3RecordFeatureUsage
api-ms-win-core-featurestaging-l1-1-0.dll4SubscribeFeatureStateChangeNotification
api-ms-win-core-featurestaging-l1-1-0.dll5UnsubscribeFeatureStateChangeNotification

StringTable 040904B0

CompanyNameMicrosoft Corporation
FileDescriptionPaint
FileVersion10.0.19041.4717 (WinBuild.160101.0800)
InternalNameMSPAINT
LegalCopyright© Microsoft Corporation. All rights reserved.
OriginalFilenameMSPAINT.EXE
ProductNameMicrosoft® Windows® Operating System
ProductVersion10.0.19041.4717

VS_FIXEDFILEINFO

FileVersion10.0.19041.4717
ProductVersion10.0.19041.4717
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0
offsetsizetypecomment
15c115HTM#
15d0932912BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] can't find file_offset of VA 0xdd4d0