filename | avicap32.dll | |
---|---|---|
size | 86016 (0x15000) | |
md5 | fb6d31af6f4fc7dc278f8240e37cb7bc | |
type | PE32 executable (DLL) (GUI) Intel 80386, for MS Windows | |
mimetype | application/x-dosexec | |
clamav | OK | |
virustotal | → scan with virustotal.com | |
histogram |
MZ Header
signature | MZ |
bytes_in_last_block | 0x90 |
blocks_in_file | 3 |
num_relocs | 0 |
header_paragraphs | 4 |
min_extra_paragraphs | 0 |
max_extra_paragraphs | 0xffff |
ss | 0 |
sp | 0xb8 |
checksum | 0 |
ip | 0 |
cs | 0 |
reloc_table_offset | 0x40 |
overlay_number | 0 |
reserved0 | 0 |
oem_id | 0 |
oem_info | 0 |
reserved2 | 0 |
reserved3 | 0 |
reserved4 | 0 |
reserved5 | 0 |
reserved6 | 0 |
lfanew | 0xf0 |
Rich Header
lib id | version | times used |
---|---|---|
171 | 40219 | 29 |
158 | 40219 | 18 |
170 | 40219 | 75 |
147 | 30729 | 21 |
1 | 0 | 191 |
131 | 30729 | 4 |
175 | 40219 | 16 |
155 | 40219 | 1 |
157 | 40219 | 1 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Packer / Compiler
Sections
name | va | vsize | raw size | flags | |
---|---|---|---|---|---|
.text | 0x1000 | 0xcbaa | 0xcc00 | R-X CODE | |
.rdata | 0xe000 | 0x489b | 0x4a00 | R-- IDATA | |
.data | 0x13000 | 0x2cb0 | 0x1a00 | RW- IDATA | |
.reloc | 0x16000 | 0x1bfa | 0x1c00 | R-- IDATA DISCARDABLE |
Data Directory
module_name | hint | ord | function_name |
---|---|---|---|
NTDLL.dll | 721 | RtlDecompressBuffer | |
NTDLL.dll | 1271 | RtlZeroMemory | |
NTDLL.dll | 607 | RtlAdjustPrivilege | |
NTDLL.dll | 524 | NtShutdownSystem | |
NTDLL.dll | 1235 | RtlUnwind | |
KERNEL32.dll | 1357 | lstrlenA | |
KERNEL32.dll | 1297 | WideCharToMultiByte | |
KERNEL32.dll | 871 | MultiByteToWideChar | |
KERNEL32.dll | 313 | FindFirstFileW | |
KERNEL32.dll | 354 | FreeLibrary | |
KERNEL32.dll | 168 | CreateProcessW | |
KERNEL32.dll | 1260 | VirtualFree | |
KERNEL32.dll | 831 | LoadLibraryW | |
KERNEL32.dll | 369 | GetBinaryTypeW | |
KERNEL32.dll | 1346 | lstrcmpW | |
KERNEL32.dll | 581 | GetProcAddress | |
KERNEL32.dll | 1257 | VirtualAlloc | |
KERNEL32.dll | 302 | FindClose | |
KERNEL32.dll | 325 | FindNextFileW | |
KERNEL32.dll | 214 | DeleteFileW | |
KERNEL32.dll | 1121 | SetFileAttributesW | |
KERNEL32.dll | 181 | CreateThread | |
KERNEL32.dll | 828 | LoadLibraryA | |
KERNEL32.dll | 1263 | VirtualProtect | |
KERNEL32.dll | 281 | ExitProcess | |
KERNEL32.dll | 391 | GetCommandLineW | |
KERNEL32.dll | 476 | GetEnvironmentVariableW | |
KERNEL32.dll | 158 | CreateMutexW | |
KERNEL32.dll | 1112 | SetErrorMode | |
KERNEL32.dll | 864 | MoveFileExW | |
KERNEL32.dll | 448 | GetCurrentProcess | |
KERNEL32.dll | 1273 | WaitForSingleObject | |
KERNEL32.dll | 399 | GetComputerNameW | |
KERNEL32.dll | 1113 | SetEvent | |
KERNEL32.dll | 536 | GetModuleHandleW | |
KERNEL32.dll | 659 | GetTickCount | |
KERNEL32.dll | 738 | InitializeCriticalSection | |
KERNEL32.dll | 896 | OpenProcess | |
KERNEL32.dll | 624 | GetSystemDirectoryW | |
KERNEL32.dll | 1202 | Sleep | |
KERNEL32.dll | 676 | GetVersionExW | |
KERNEL32.dll | 825 | LeaveCriticalSection | |
KERNEL32.dll | 479 | GetExitCodeProcess | |
KERNEL32.dll | 1355 | lstrcpynW | |
KERNEL32.dll | 490 | GetFileAttributesW | |
KERNEL32.dll | 762 | IsBadWritePtr | |
KERNEL32.dll | 1216 | TerminateProcess | |
KERNEL32.dll | 532 | GetModuleFileNameW | |
KERNEL32.dll | 1342 | lstrcatA | |
KERNEL32.dll | 514 | GetLastError | |
KERNEL32.dll | 1139 | SetLastError | |
KERNEL32.dll | 1348 | lstrcmpiA | |
KERNEL32.dll | 238 | EnterCriticalSection | |
KERNEL32.dll | 1264 | VirtualProtectEx | |
KERNEL32.dll | 222 | DisableThreadLibraryCalls | |
KERNEL32.dll | 1039 | ResetEvent | |
KERNEL32.dll | 918 | Process32FirstW | |
KERNEL32.dll | 133 | CreateEventW | |
KERNEL32.dll | 1101 | SetCurrentDirectoryW | |
KERNEL32.dll | 531 | GetModuleFileNameA | |
KERNEL32.dll | 920 | Process32NextW | |
KERNEL32.dll | 1352 | lstrcpyW | |
KERNEL32.dll | 209 | DeleteCriticalSection | |
KERNEL32.dll | 1326 | WriteProcessMemory | |
KERNEL32.dll | 1043 | ResumeThread | |
KERNEL32.dll | 679 | GetVolumeInformationW | |
KERNEL32.dll | 1351 | lstrcpyA | |
KERNEL32.dll | 1265 | VirtualQuery | |
KERNEL32.dll | 646 | GetThreadContext | |
KERNEL32.dll | 722 | HeapReAlloc | |
KERNEL32.dll | 1169 | SetThreadContext | |
KERNEL32.dll | 715 | HeapAlloc | |
KERNEL32.dll | 719 | HeapFree | |
KERNEL32.dll | 745 | InterlockedCompareExchange | |
KERNEL32.dll | 1219 | Thread32First | |
KERNEL32.dll | 718 | HeapDestroy | |
KERNEL32.dll | 717 | HeapCreate | |
KERNEL32.dll | 1220 | Thread32Next | |
KERNEL32.dll | 344 | FlushInstructionCache | |
KERNEL32.dll | 748 | InterlockedExchange | |
KERNEL32.dll | 901 | OpenThread | |
KERNEL32.dll | 453 | GetCurrentThreadId | |
KERNEL32.dll | 449 | GetCurrentProcessId | |
KERNEL32.dll | 1210 | SuspendThread | |
KERNEL32.dll | 285 | ExpandEnvironmentStringsW | |
KERNEL32.dll | 82 | CloseHandle | |
KERNEL32.dll | 813 | LCMapStringW | |
KERNEL32.dll | 724 | HeapSize | |
KERNEL32.dll | 617 | GetStringTypeW | |
KERNEL32.dll | 633 | GetSystemTimeAsFileTime | |
KERNEL32.dll | 935 | QueryPerformanceCounter | |
KERNEL32.dll | 474 | GetEnvironmentStringsW | |
KERNEL32.dll | 353 | FreeEnvironmentStringsW | |
KERNEL32.dll | 611 | GetStartupInfoW | |
KERNEL32.dll | 499 | GetFileType | |
KERNEL32.dll | 739 | InitializeCriticalSectionAndSpinCount | |
KERNEL32.dll | 1135 | SetHandleCount | |
KERNEL32.dll | 1222 | TlsFree | |
KERNEL32.dll | 1224 | TlsSetValue | |
KERNEL32.dll | 1223 | TlsGetValue | |
KERNEL32.dll | 1221 | TlsAlloc | |
KERNEL32.dll | 778 | IsValidCodePage | |
KERNEL32.dll | 567 | GetOEMCP | |
KERNEL32.dll | 360 | GetACP | |
KERNEL32.dll | 747 | InterlockedDecrement | |
KERNEL32.dll | 751 | InterlockedIncrement | |
KERNEL32.dll | 370 | GetCPInfo | |
KERNEL32.dll | 612 | GetStdHandle | |
KERNEL32.dll | 945 | RaiseException | |
KERNEL32.dll | 234 | EncodePointer | |
KERNEL32.dll | 768 | IsDebuggerPresent | |
KERNEL32.dll | 1189 | SetUnhandledExceptionFilter | |
KERNEL32.dll | 1343 | lstrcatW | |
KERNEL32.dll | 1349 | lstrcmpiW | |
KERNEL32.dll | 1358 | lstrlenW | |
KERNEL32.dll | 143 | CreateFileW | |
KERNEL32.dll | 960 | ReadFile | |
KERNEL32.dll | 1317 | WriteFile | |
KERNEL32.dll | 1126 | SetFilePointer | |
KERNEL32.dll | 496 | GetFileSize | |
KERNEL32.dll | 1235 | UnhandledExceptionFilter | |
KERNEL32.dll | 390 | GetCommandLineA | |
KERNEL32.dll | 190 | CreateToolhelp32Snapshot | |
KERNEL32.dll | 772 | IsProcessorFeaturePresent | |
KERNEL32.dll | 202 | DecodePointer | |
USER32.dll | 249 | FindWindowExW | |
USER32.dll | 708 | SetWindowLongW | |
USER32.dll | 295 | GetDlgItem | |
USER32.dll | 274 | GetClassNameW | |
USER32.dll | 419 | GetWindowTextW | |
USER32.dll | 406 | GetWindowLongW | |
USER32.dll | 416 | GetWindowTextA | |
USER32.dll | 46 | CharLowerW | |
USER32.dll | 216 | EnableWindow | |
USER32.dll | 242 | EnumWindows | |
USER32.dll | 294 | GetDlgCtrlID | |
USER32.dll | 30 | CallWindowProcW | |
USER32.dll | 420 | GetWindowThreadProcessId | |
USER32.dll | 819 | wsprintfW | |
USER32.dll | 636 | SendMessageW | |
USER32.dll | 806 | WaitForInputIdle | |
USER32.dll | 818 | wsprintfA | |
USER32.dll | 276 | GetClientRect | |
SHLWAPI.dll | 139 | PathRemoveFileSpecW | |
SHLWAPI.dll | 48 | PathAddBackslashW | |
SHLWAPI.dll | 72 | PathFindFileNameA | |
SHLWAPI.dll | 73 | PathFindFileNameW | |
WININET.dll | 175 | InternetSetOptionW | |
WININET.dll | 90 | HttpQueryInfoW | |
WININET.dll | 94 | HttpSendRequestW | |
WININET.dll | 130 | InternetGetConnectedState | |
WININET.dll | 107 | InternetCloseHandle | |
WININET.dll | 114 | InternetConnectW | |
WININET.dll | 159 | InternetReadFile | |
WININET.dll | 88 | HttpOpenRequestW | |
WININET.dll | 154 | InternetOpenW | |
WININET.dll | 116 | InternetCrackUrlW | |
ADVAPI32.dll | 288 | FreeSid | |
ADVAPI32.dll | 222 | DuplicateToken | |
ADVAPI32.dll | 346 | GetTokenInformation | |
ADVAPI32.dll | 131 | CreateWellKnownSid | |
ADVAPI32.dll | 503 | OpenProcessToken | |
ADVAPI32.dll | 638 | RegSetValueExW | |
ADVAPI32.dll | 622 | RegQueryValueExW | |
ADVAPI32.dll | 569 | RegCreateKeyExW | |
ADVAPI32.dll | 560 | RegCloseKey | |
ADVAPI32.dll | 609 | RegOpenKeyExW | |
ADVAPI32.dll | 584 | RegDeleteValueW | |
ADVAPI32.dll | 357 | GetUserNameW | |
ADVAPI32.dll | 81 | CheckTokenMembership | |
ADVAPI32.dll | 32 | AllocateAndInitializeSid | |
SHELL32.dll | 225 | SHGetSpecialFolderPathW | |
SHELL32.dll | 6 | CommandLineToArgvW | |
SHELL32.dll | 165 | ||
PSAPI.DLL | 16 | GetModuleFileNameExW | |
PSAPI.DLL | 1 | EnumDeviceDrivers | |
PSAPI.DLL | 8 | GetDeviceDriverBaseNameW | |
VERSION.dll | 6 | GetFileVersionInfoW | |
VERSION.dll | 5 | GetFileVersionInfoSizeW | |
VERSION.dll | 14 | VerQueryValueW | |
OLE32.dll | 108 | CoUninitialize | |
OLE32.dll | 62 | CoInitialize | |
OLE32.dll | 16 | CoCreateInstance |
ord | entry_va | function_name | |
---|---|---|---|
1 | 0x1ff6 | AppCleanup | |
2 | 0x1ffe | capCreateCaptureWindowA | |
3 | 0x2004 | capCreateCaptureWindowW | |
4 | 0x200a | capGetDriverDescriptionA | |
5 | 0x2010 | capGetDriverDescriptionW | |
6 | 0x2016 | videoThunk32 |
Please donate some bucks to keep this site up and running: | |
Ko-fi | |
---|---|
Yandex.Money | |
Thank you! |
everything is OK