ScreenShot
| Created | 2021.07.20 08:09 | Machine | s1_win7_x6401 |
| Filename | jjroblox.exe | ||
| Type | PE32 executable (GUI) Intel 80386, for MS Windows | ||
| AI Score |
|
Behavior Score |
|
| ZERO API | file : malware | ||
| VT API (file) | |||
| md5 | 2308cedb77f66e4a821d57e8ee1e08a5 | ||
| sha256 | 8eb3881ba7d320c0760042529414e8ee87b8bfc648c34d87dd36ed854b0c8b7b | ||
| ssdeep | 12288:wX2JVHMRtDaSm3TJvVNvWV5YTsY7tHwbz/htfcoCoK632zb7G/QXiU:2ss2Sm39NNv9wY7tHwbzfIoK6MosiU | ||
| imphash | 6f0fecaae0f40ed3ea31df971b69bcca | ||
| impfuzzy | 192:oV3sCbuuoMSUvK9v+ovXE2co7dLoF9Rwuxm1ekHqdYtNBgIPOQuva9MU3i9++:43JoZ9NtQcu41eklNBgIPOQl1I++ | ||
Network IP location
Signature (26cnts)
| Level | Description |
|---|---|
| danger | Connects to IP addresses that are no longer responding to requests (legitimate services will remain up-and-running usually) |
| danger | Disables Windows Security features |
| danger | Executed a process and injected code into it |
| warning | Stops Windows services |
| watch | Allocates execute permission to another process indicative of possible code injection |
| watch | Creates a windows hook that monitors keyboard input (keylogger) |
| watch | Creates known Fynloski/DarkComet files |
| watch | Installs itself for autorun at Windows startup |
| watch | Modifies security center warnings |
| watch | Potential code injection by writing to the memory of another process |
| notice | A process attempted to delay the analysis task. |
| notice | A process created a hidden window |
| notice | Allocates read-write-execute memory (usually to unpack itself) |
| notice | Checks for the Locally Unique Identifier on the system for a suspicious privilege |
| notice | Checks whether any human activity is being performed by constantly checking whether the foreground window changed |
| notice | Connects to a Dynamic DNS Domain |
| notice | Creates a suspicious process |
| notice | Creates executable files on the filesystem |
| notice | Drops a binary and executes it |
| notice | Drops an executable to the user AppData folder |
| notice | Terminates another process |
| notice | Uses Windows utilities for basic Windows functionality |
| info | Checks amount of memory in system |
| info | Command line console output was observed |
| info | The executable contains unknown PE section names indicative of a packer (could be a false positive) |
| info | The file contains an unknown PE resource name possibly indicative of a packer |
Rules (17cnts)
| Level | Name | Description | Collection |
|---|---|---|---|
| danger | Win_Backdoor_njRAT_Zero | Win Backdoor njRAT | binaries (download) |
| danger | Win_Backdoor_njRAT_Zero | Win Backdoor njRAT | binaries (upload) |
| warning | Generic_Malware_Zero | Generic Malware | binaries (download) |
| warning | Generic_Malware_Zero | Generic Malware | binaries (upload) |
| watch | Malicious_Packer_Zero | Malicious Packer | binaries (download) |
| watch | Malicious_Packer_Zero | Malicious Packer | binaries (upload) |
| watch | UPX_Zero | UPX packed file | binaries (download) |
| watch | UPX_Zero | UPX packed file | binaries (upload) |
| info | Is_DotNET_EXE | (no description) | binaries (download) |
| info | IsPE32 | (no description) | binaries (download) |
| info | IsPE32 | (no description) | binaries (upload) |
| info | OS_Processor_Check_Zero | OS Processor Check | binaries (download) |
| info | OS_Processor_Check_Zero | OS Processor Check | binaries (upload) |
| info | PE_Header_Zero | PE File Signature | binaries (download) |
| info | PE_Header_Zero | PE File Signature | binaries (upload) |
| info | Win32_Trojan_Gen_2_0904B0_Zero | Win32 Trojan Gen | binaries (download) |
| info | Win32_Trojan_Gen_2_0904B0_Zero | Win32 Trojan Gen | binaries (upload) |
PE API
IAT(Import Address Table) Library
oleaut32.dll
0x49fc9c SysFreeString
0x49fca0 SysReAllocStringLen
0x49fca4 SysAllocStringLen
advapi32.dll
0x49fcac RegQueryValueExA
0x49fcb0 RegOpenKeyExA
0x49fcb4 RegCloseKey
user32.dll
0x49fcbc GetKeyboardType
0x49fcc0 DestroyWindow
0x49fcc4 LoadStringA
0x49fcc8 MessageBoxA
0x49fccc CharNextA
kernel32.dll
0x49fcd4 GetACP
0x49fcd8 Sleep
0x49fcdc VirtualFree
0x49fce0 VirtualAlloc
0x49fce4 GetTickCount
0x49fce8 QueryPerformanceCounter
0x49fcec GetCurrentThreadId
0x49fcf0 InterlockedDecrement
0x49fcf4 InterlockedIncrement
0x49fcf8 VirtualQuery
0x49fcfc WideCharToMultiByte
0x49fd00 MultiByteToWideChar
0x49fd04 lstrlenA
0x49fd08 lstrcpynA
0x49fd0c LoadLibraryExA
0x49fd10 GetThreadLocale
0x49fd14 GetStartupInfoA
0x49fd18 GetProcAddress
0x49fd1c GetModuleHandleA
0x49fd20 GetModuleFileNameA
0x49fd24 GetLocaleInfoA
0x49fd28 GetLastError
0x49fd2c GetCommandLineA
0x49fd30 FreeLibrary
0x49fd34 FindFirstFileA
0x49fd38 FindClose
0x49fd3c ExitProcess
0x49fd40 ExitThread
0x49fd44 CreateThread
0x49fd48 CompareStringA
0x49fd4c WriteFile
0x49fd50 UnhandledExceptionFilter
0x49fd54 SetFilePointer
0x49fd58 SetEndOfFile
0x49fd5c RtlUnwind
0x49fd60 ReadFile
0x49fd64 RaiseException
0x49fd68 GetStdHandle
0x49fd6c GetFileSize
0x49fd70 GetFileType
0x49fd74 CreateFileA
0x49fd78 CloseHandle
kernel32.dll
0x49fd80 TlsSetValue
0x49fd84 TlsGetValue
0x49fd88 LocalAlloc
0x49fd8c GetModuleHandleA
user32.dll
0x49fd94 CreateWindowExA
0x49fd98 mouse_event
0x49fd9c keybd_event
0x49fda0 WindowFromPoint
0x49fda4 WaitMessage
0x49fda8 VkKeyScanA
0x49fdac UpdateWindow
0x49fdb0 UnregisterClassA
0x49fdb4 UnhookWindowsHookEx
0x49fdb8 TranslateMessage
0x49fdbc TranslateMDISysAccel
0x49fdc0 TrackPopupMenu
0x49fdc4 ToAscii
0x49fdc8 SystemParametersInfoA
0x49fdcc ShowWindow
0x49fdd0 ShowScrollBar
0x49fdd4 ShowOwnedPopups
0x49fdd8 SetWindowsHookExA
0x49fddc SetWindowTextA
0x49fde0 SetWindowPos
0x49fde4 SetWindowPlacement
0x49fde8 SetWindowLongW
0x49fdec SetWindowLongA
0x49fdf0 SetTimer
0x49fdf4 SetScrollRange
0x49fdf8 SetScrollPos
0x49fdfc SetScrollInfo
0x49fe00 SetRectEmpty
0x49fe04 SetRect
0x49fe08 SetPropA
0x49fe0c SetParent
0x49fe10 SetMenuItemInfoA
0x49fe14 SetMenu
0x49fe18 SetForegroundWindow
0x49fe1c SetFocus
0x49fe20 SetCursorPos
0x49fe24 SetCursor
0x49fe28 SetClipboardData
0x49fe2c SetClassLongA
0x49fe30 SetCapture
0x49fe34 SetActiveWindow
0x49fe38 SendMessageW
0x49fe3c SendMessageA
0x49fe40 ScrollWindow
0x49fe44 ScreenToClient
0x49fe48 RemovePropA
0x49fe4c RemoveMenu
0x49fe50 ReleaseDC
0x49fe54 ReleaseCapture
0x49fe58 RegisterWindowMessageA
0x49fe5c RegisterClipboardFormatA
0x49fe60 RegisterClassA
0x49fe64 RedrawWindow
0x49fe68 PtInRect
0x49fe6c PostQuitMessage
0x49fe70 PostMessageA
0x49fe74 PeekMessageW
0x49fe78 PeekMessageA
0x49fe7c OpenClipboard
0x49fe80 OffsetRect
0x49fe84 OemToCharA
0x49fe88 MsgWaitForMultipleObjectsEx
0x49fe8c MsgWaitForMultipleObjects
0x49fe90 MessageBoxA
0x49fe94 MapWindowPoints
0x49fe98 MapVirtualKeyA
0x49fe9c LockWorkStation
0x49fea0 LoadStringA
0x49fea4 LoadKeyboardLayoutA
0x49fea8 LoadIconA
0x49feac LoadCursorA
0x49feb0 LoadBitmapA
0x49feb4 KillTimer
0x49feb8 IsZoomed
0x49febc IsWindowVisible
0x49fec0 IsWindowUnicode
0x49fec4 IsWindowEnabled
0x49fec8 IsWindow
0x49fecc IsRectEmpty
0x49fed0 IsIconic
0x49fed4 IsDialogMessageW
0x49fed8 IsDialogMessageA
0x49fedc IsClipboardFormatAvailable
0x49fee0 IsChild
0x49fee4 InvalidateRect
0x49fee8 IntersectRect
0x49feec InsertMenuItemA
0x49fef0 InsertMenuA
0x49fef4 InflateRect
0x49fef8 GetWindowThreadProcessId
0x49fefc GetWindowTextLengthA
0x49ff00 GetWindowTextA
0x49ff04 GetWindowRect
0x49ff08 GetWindowPlacement
0x49ff0c GetWindowLongW
0x49ff10 GetWindowLongA
0x49ff14 GetWindowDC
0x49ff18 GetTopWindow
0x49ff1c GetSystemMetrics
0x49ff20 GetSystemMenu
0x49ff24 GetSysColorBrush
0x49ff28 GetSysColor
0x49ff2c GetSubMenu
0x49ff30 GetScrollRange
0x49ff34 GetScrollPos
0x49ff38 GetScrollInfo
0x49ff3c GetPropA
0x49ff40 GetParent
0x49ff44 GetWindow
0x49ff48 GetMessagePos
0x49ff4c GetMessageA
0x49ff50 GetMenuStringA
0x49ff54 GetMenuState
0x49ff58 GetMenuItemInfoA
0x49ff5c GetMenuItemID
0x49ff60 GetMenuItemCount
0x49ff64 GetMenu
0x49ff68 GetLastInputInfo
0x49ff6c GetLastActivePopup
0x49ff70 GetKeyboardState
0x49ff74 GetKeyboardLayoutNameA
0x49ff78 GetKeyboardLayoutList
0x49ff7c GetKeyboardLayout
0x49ff80 GetKeyState
0x49ff84 GetKeyNameTextA
0x49ff88 GetIconInfo
0x49ff8c GetForegroundWindow
0x49ff90 GetFocus
0x49ff94 GetDesktopWindow
0x49ff98 GetDCEx
0x49ff9c GetDC
0x49ffa0 GetCursorPos
0x49ffa4 GetCursor
0x49ffa8 GetClipboardData
0x49ffac GetClientRect
0x49ffb0 GetClassNameA
0x49ffb4 GetClassLongA
0x49ffb8 GetClassInfoA
0x49ffbc GetCapture
0x49ffc0 GetActiveWindow
0x49ffc4 FrameRect
0x49ffc8 FindWindowExA
0x49ffcc FindWindowA
0x49ffd0 FillRect
0x49ffd4 ExitWindowsEx
0x49ffd8 EqualRect
0x49ffdc EnumWindows
0x49ffe0 EnumThreadWindows
0x49ffe4 EnumDisplayDevicesA
0x49ffe8 EnumClipboardFormats
0x49ffec EnumChildWindows
0x49fff0 EndPaint
0x49fff4 EnableWindow
0x49fff8 EnableScrollBar
0x49fffc EnableMenuItem
0x4a0000 EmptyClipboard
0x4a0004 DrawTextA
0x4a0008 DrawMenuBar
0x4a000c DrawIconEx
0x4a0010 DrawIcon
0x4a0014 DrawFrameControl
0x4a0018 DrawEdge
0x4a001c DispatchMessageW
0x4a0020 DispatchMessageA
0x4a0024 DestroyWindow
0x4a0028 DestroyMenu
0x4a002c DestroyIcon
0x4a0030 DestroyCursor
0x4a0034 DeleteMenu
0x4a0038 DefWindowProcA
0x4a003c DefMDIChildProcA
0x4a0040 DefFrameProcA
0x4a0044 CreatePopupMenu
0x4a0048 CreateMenu
0x4a004c CreateIcon
0x4a0050 CloseClipboard
0x4a0054 ClientToScreen
0x4a0058 CheckMenuItem
0x4a005c CallWindowProcA
0x4a0060 CallNextHookEx
0x4a0064 BeginPaint
0x4a0068 CharNextA
0x4a006c CharLowerBuffA
0x4a0070 CharLowerA
0x4a0074 CharUpperBuffA
0x4a0078 CharToOemA
0x4a007c AdjustWindowRectEx
0x4a0080 ActivateKeyboardLayout
gdi32.dll
0x4a0088 UnrealizeObject
0x4a008c StretchBlt
0x4a0090 SetWindowOrgEx
0x4a0094 SetWinMetaFileBits
0x4a0098 SetViewportOrgEx
0x4a009c SetTextColor
0x4a00a0 SetStretchBltMode
0x4a00a4 SetROP2
0x4a00a8 SetPixel
0x4a00ac SetEnhMetaFileBits
0x4a00b0 SetDIBColorTable
0x4a00b4 SetBrushOrgEx
0x4a00b8 SetBkMode
0x4a00bc SetBkColor
0x4a00c0 SelectPalette
0x4a00c4 SelectObject
0x4a00c8 SaveDC
0x4a00cc RestoreDC
0x4a00d0 RectVisible
0x4a00d4 RealizePalette
0x4a00d8 PlayEnhMetaFile
0x4a00dc PatBlt
0x4a00e0 MoveToEx
0x4a00e4 MaskBlt
0x4a00e8 LineTo
0x4a00ec IntersectClipRect
0x4a00f0 GetWindowOrgEx
0x4a00f4 GetWinMetaFileBits
0x4a00f8 GetTextMetricsA
0x4a00fc GetTextExtentPoint32A
0x4a0100 GetSystemPaletteEntries
0x4a0104 GetStockObject
0x4a0108 GetRgnBox
0x4a010c GetPixel
0x4a0110 GetPaletteEntries
0x4a0114 GetObjectA
0x4a0118 GetEnhMetaFilePaletteEntries
0x4a011c GetEnhMetaFileHeader
0x4a0120 GetEnhMetaFileBits
0x4a0124 GetDeviceCaps
0x4a0128 GetDIBits
0x4a012c GetDIBColorTable
0x4a0130 GetDCOrgEx
0x4a0134 GetCurrentPositionEx
0x4a0138 GetClipBox
0x4a013c GetBrushOrgEx
0x4a0140 GetBitmapBits
0x4a0144 GdiFlush
0x4a0148 ExtTextOutA
0x4a014c ExcludeClipRect
0x4a0150 DeleteObject
0x4a0154 DeleteEnhMetaFile
0x4a0158 DeleteDC
0x4a015c CreateSolidBrush
0x4a0160 CreatePenIndirect
0x4a0164 CreatePalette
0x4a0168 CreateHalftonePalette
0x4a016c CreateFontIndirectA
0x4a0170 CreateDIBitmap
0x4a0174 CreateDIBSection
0x4a0178 CreateDCA
0x4a017c CreateCompatibleDC
0x4a0180 CreateCompatibleBitmap
0x4a0184 CreateBrushIndirect
0x4a0188 CreateBitmap
0x4a018c CopyEnhMetaFileA
0x4a0190 BitBlt
version.dll
0x4a0198 VerQueryValueA
0x4a019c GetFileVersionInfoSizeA
0x4a01a0 GetFileVersionInfoA
kernel32.dll
0x4a01a8 lstrcpyA
0x4a01ac WriteProcessMemory
0x4a01b0 WriteFile
0x4a01b4 WinExec
0x4a01b8 WaitForSingleObject
0x4a01bc WaitForMultipleObjectsEx
0x4a01c0 VirtualQuery
0x4a01c4 VirtualProtectEx
0x4a01c8 VirtualProtect
0x4a01cc VirtualFreeEx
0x4a01d0 VirtualFree
0x4a01d4 VirtualAllocEx
0x4a01d8 VirtualAlloc
0x4a01dc VerLanguageNameA
0x4a01e0 UnmapViewOfFile
0x4a01e4 TerminateProcess
0x4a01e8 SizeofResource
0x4a01ec SetThreadPriority
0x4a01f0 SetThreadLocale
0x4a01f4 SetThreadContext
0x4a01f8 SetLastError
0x4a01fc SetFileTime
0x4a0200 SetFilePointer
0x4a0204 SetFileAttributesA
0x4a0208 SetEvent
0x4a020c SetErrorMode
0x4a0210 SetEndOfFile
0x4a0214 ResumeThread
0x4a0218 ResetEvent
0x4a021c ReadProcessMemory
0x4a0220 ReadFile
0x4a0224 PeekNamedPipe
0x4a0228 OpenProcess
0x4a022c MultiByteToWideChar
0x4a0230 MulDiv
0x4a0234 MoveFileA
0x4a0238 MapViewOfFile
0x4a023c LockResource
0x4a0240 LocalFileTimeToFileTime
0x4a0244 LocalAlloc
0x4a0248 LoadResource
0x4a024c LoadLibraryA
0x4a0250 LeaveCriticalSection
0x4a0254 IsBadReadPtr
0x4a0258 InitializeCriticalSection
0x4a025c HeapFree
0x4a0260 HeapAlloc
0x4a0264 GlobalUnlock
0x4a0268 GlobalMemoryStatus
0x4a026c GlobalLock
0x4a0270 GlobalFree
0x4a0274 GlobalFindAtomA
0x4a0278 GlobalDeleteAtom
0x4a027c GlobalAlloc
0x4a0280 GlobalAddAtomA
0x4a0284 GetWindowsDirectoryA
0x4a0288 GetVolumeInformationA
0x4a028c GetVersionExA
0x4a0290 GetVersion
0x4a0294 GetUserDefaultLangID
0x4a0298 GetTickCount
0x4a029c GetThreadLocale
0x4a02a0 GetThreadContext
0x4a02a4 GetTempPathA
0x4a02a8 GetSystemPowerStatus
0x4a02ac GetSystemDirectoryA
0x4a02b0 GetStdHandle
0x4a02b4 GetProcessHeap
0x4a02b8 GetProcAddress
0x4a02bc GetModuleHandleA
0x4a02c0 GetModuleFileNameA
0x4a02c4 GetLocaleInfoA
0x4a02c8 GetLocalTime
0x4a02cc GetLastError
0x4a02d0 GetFullPathNameA
0x4a02d4 GetFileTime
0x4a02d8 GetFileSize
0x4a02dc GetFileAttributesA
0x4a02e0 GetExitCodeThread
0x4a02e4 GetExitCodeProcess
0x4a02e8 GetEnvironmentVariableA
0x4a02ec GetDriveTypeA
0x4a02f0 GetDiskFreeSpaceA
0x4a02f4 GetDateFormatA
0x4a02f8 GetCurrentThreadId
0x4a02fc GetCurrentThread
0x4a0300 GetCurrentProcessId
0x4a0304 GetCurrentProcess
0x4a0308 GetComputerNameA
0x4a030c GetCPInfo
0x4a0310 FreeResource
0x4a0314 InterlockedIncrement
0x4a0318 InterlockedExchange
0x4a031c InterlockedDecrement
0x4a0320 FreeLibrary
0x4a0324 FormatMessageA
0x4a0328 FindResourceA
0x4a032c FindNextFileA
0x4a0330 FindFirstFileA
0x4a0334 FindClose
0x4a0338 FileTimeToSystemTime
0x4a033c FileTimeToLocalFileTime
0x4a0340 FileTimeToDosDateTime
0x4a0344 ExitThread
0x4a0348 ExitProcess
0x4a034c EnumResourceNamesA
0x4a0350 EnumCalendarInfoA
0x4a0354 EnterCriticalSection
0x4a0358 DosDateTimeToFileTime
0x4a035c DeleteFileA
0x4a0360 DeleteCriticalSection
0x4a0364 CreateThread
0x4a0368 CreateRemoteThread
0x4a036c CreateProcessA
0x4a0370 CreatePipe
0x4a0374 CreateMutexA
0x4a0378 CreateFileMappingA
0x4a037c CreateFileA
0x4a0380 CreateEventA
0x4a0384 CreateDirectoryA
0x4a0388 CopyFileA
0x4a038c CompareStringA
0x4a0390 CloseHandle
0x4a0394 Beep
advapi32.dll
0x4a039c RegSetValueExA
0x4a03a0 RegQueryValueExA
0x4a03a4 RegQueryInfoKeyA
0x4a03a8 RegOpenKeyExA
0x4a03ac RegOpenKeyA
0x4a03b0 RegFlushKey
0x4a03b4 RegEnumValueA
0x4a03b8 RegEnumKeyExA
0x4a03bc RegDeleteValueA
0x4a03c0 RegDeleteKeyA
0x4a03c4 RegCreateKeyExA
0x4a03c8 RegCreateKeyA
0x4a03cc RegCloseKey
0x4a03d0 OpenThreadToken
0x4a03d4 OpenProcessToken
0x4a03d8 LookupPrivilegeValueA
0x4a03dc LookupPrivilegeNameA
0x4a03e0 LookupPrivilegeDisplayNameA
0x4a03e4 LookupAccountSidA
0x4a03e8 IsValidSid
0x4a03ec GetUserNameA
0x4a03f0 GetTokenInformation
0x4a03f4 GetSidSubAuthorityCount
0x4a03f8 GetSidSubAuthority
0x4a03fc GetSidIdentifierAuthority
0x4a0400 GetCurrentHwProfileA
0x4a0404 AdjustTokenPrivileges
wsock32.dll
0x4a040c __WSAFDIsSet
0x4a0410 WSACleanup
0x4a0414 WSAStartup
0x4a0418 WSAGetLastError
0x4a041c gethostname
0x4a0420 getservbyname
0x4a0424 gethostbyname
0x4a0428 gethostbyaddr
0x4a042c socket
0x4a0430 shutdown
0x4a0434 sendto
0x4a0438 send
0x4a043c select
0x4a0440 recv
0x4a0444 ntohs
0x4a0448 listen
0x4a044c ioctlsocket
0x4a0450 inet_ntoa
0x4a0454 inet_addr
0x4a0458 htons
0x4a045c getsockname
0x4a0460 connect
0x4a0464 closesocket
0x4a0468 ind
0x4a046c accept
kernel32.dll
0x4a0474 Sleep
ole32.dll
0x4a047c CoTaskMemFree
0x4a0480 StringFromCLSID
shell32.dll
0x4a0488 ShellExecuteExA
0x4a048c ShellExecuteA
0x4a0490 SHGetFileInfoA
0x4a0494 SHFileOperationA
0x4a0498 DragQueryFileA
oleaut32.dll
0x4a04a0 GetErrorInfo
0x4a04a4 GetActiveObject
0x4a04a8 SysFreeString
ole32.dll
0x4a04b0 CoTaskMemFree
0x4a04b4 CLSIDFromProgID
0x4a04b8 ProgIDFromCLSID
0x4a04bc StringFromCLSID
0x4a04c0 CoCreateInstance
0x4a04c4 CoUninitialize
0x4a04c8 CoInitialize
0x4a04cc IsEqualGUID
URLMON.DLL
0x4a04d4 URLDownloadToFileA
oleaut32.dll
0x4a04dc SafeArrayPtrOfIndex
0x4a04e0 SafeArrayGetUBound
0x4a04e4 SafeArrayGetLBound
0x4a04e8 SafeArrayCreate
0x4a04ec VariantChangeType
0x4a04f0 VariantCopy
0x4a04f4 VariantClear
0x4a04f8 VariantInit
comctl32.dll
0x4a0500 _TrackMouseEvent
0x4a0504 ImageList_SetIconSize
0x4a0508 ImageList_GetIconSize
0x4a050c ImageList_Write
0x4a0510 ImageList_Read
0x4a0514 ImageList_DragShowNolock
0x4a0518 ImageList_DragMove
0x4a051c ImageList_DragLeave
0x4a0520 ImageList_DragEnter
0x4a0524 ImageList_EndDrag
0x4a0528 ImageList_BeginDrag
0x4a052c ImageList_Remove
0x4a0530 ImageList_DrawEx
0x4a0534 ImageList_Draw
0x4a0538 ImageList_GetBkColor
0x4a053c ImageList_SetBkColor
0x4a0540 ImageList_Add
0x4a0544 ImageList_GetImageCount
0x4a0548 ImageList_Destroy
0x4a054c ImageList_Create
wininet.dll
0x4a0554 InternetOpenUrlA
0x4a0558 InternetOpenA
0x4a055c InternetConnectA
0x4a0560 InternetCloseHandle
0x4a0564 FtpPutFileA
shell32.dll
0x4a056c SHGetSpecialFolderLocation
0x4a0570 SHGetPathFromIDListA
winmm.dll
0x4a0578 waveInUnprepareHeader
0x4a057c waveInStart
0x4a0580 waveInReset
0x4a0584 waveInPrepareHeader
0x4a0588 waveInOpen
0x4a058c waveInClose
0x4a0590 waveInAddBuffer
0x4a0594 PlaySoundA
0x4a0598 mciSendStringA
netapi32.dll
0x4a05a0 Netbios
gdiplus.dll
0x4a05a8 GdipGetImageEncoders
0x4a05ac GdipGetImageEncodersSize
0x4a05b0 GdipDrawImageRectI
0x4a05b4 GdipSetInterpolationMode
0x4a05b8 GdipDeleteGraphics
0x4a05bc GdipCreateBitmapFromHBITMAP
0x4a05c0 GdipCreateBitmapFromScan0
0x4a05c4 GdipGetImagePixelFormat
0x4a05c8 GdipGetImageGraphicsContext
0x4a05cc GdipSaveImageToStream
0x4a05d0 GdipDisposeImage
0x4a05d4 GdiplusShutdown
0x4a05d8 GdiplusStartup
0x4a05dc GdipFree
0x4a05e0 GdipAlloc
advapi32.dll
0x4a05e8 StartServiceA
0x4a05ec QueryServiceStatus
0x4a05f0 OpenServiceA
0x4a05f4 OpenSCManagerA
0x4a05f8 EnumServicesStatusA
0x4a05fc DeleteService
0x4a0600 CreateServiceA
0x4a0604 ControlService
0x4a0608 CloseServiceHandle
msacm32.dll
0x4a0610 acmStreamUnprepareHeader
0x4a0614 acmStreamPrepareHeader
0x4a0618 acmStreamConvert
0x4a061c acmStreamReset
0x4a0620 acmStreamSize
0x4a0624 acmStreamClose
0x4a0628 acmStreamOpen
ntdll.dll
0x4a0630 NtQuerySystemInformation
netapi32.dll
0x4a0638 NetApiBufferFree
0x4a063c NetShareGetInfo
0x4a0640 NetShareEnum
WS2_32.DLL
0x4a0648 WSAIoctl
SHFolder.dll
0x4a0650 SHGetFolderPathA
ntdll
0x4a0658 NtUnmapViewOfSection
user32.dll
0x4a0660 EnumDisplayMonitors
0x4a0664 GetMonitorInfoA
SHELL32.DLL
0x4a066c SHEmptyRecycleBinA
AVICAP32.DLL
0x4a0674 capGetDriverDescriptionA
EAT(Export Address Table) is none
oleaut32.dll
0x49fc9c SysFreeString
0x49fca0 SysReAllocStringLen
0x49fca4 SysAllocStringLen
advapi32.dll
0x49fcac RegQueryValueExA
0x49fcb0 RegOpenKeyExA
0x49fcb4 RegCloseKey
user32.dll
0x49fcbc GetKeyboardType
0x49fcc0 DestroyWindow
0x49fcc4 LoadStringA
0x49fcc8 MessageBoxA
0x49fccc CharNextA
kernel32.dll
0x49fcd4 GetACP
0x49fcd8 Sleep
0x49fcdc VirtualFree
0x49fce0 VirtualAlloc
0x49fce4 GetTickCount
0x49fce8 QueryPerformanceCounter
0x49fcec GetCurrentThreadId
0x49fcf0 InterlockedDecrement
0x49fcf4 InterlockedIncrement
0x49fcf8 VirtualQuery
0x49fcfc WideCharToMultiByte
0x49fd00 MultiByteToWideChar
0x49fd04 lstrlenA
0x49fd08 lstrcpynA
0x49fd0c LoadLibraryExA
0x49fd10 GetThreadLocale
0x49fd14 GetStartupInfoA
0x49fd18 GetProcAddress
0x49fd1c GetModuleHandleA
0x49fd20 GetModuleFileNameA
0x49fd24 GetLocaleInfoA
0x49fd28 GetLastError
0x49fd2c GetCommandLineA
0x49fd30 FreeLibrary
0x49fd34 FindFirstFileA
0x49fd38 FindClose
0x49fd3c ExitProcess
0x49fd40 ExitThread
0x49fd44 CreateThread
0x49fd48 CompareStringA
0x49fd4c WriteFile
0x49fd50 UnhandledExceptionFilter
0x49fd54 SetFilePointer
0x49fd58 SetEndOfFile
0x49fd5c RtlUnwind
0x49fd60 ReadFile
0x49fd64 RaiseException
0x49fd68 GetStdHandle
0x49fd6c GetFileSize
0x49fd70 GetFileType
0x49fd74 CreateFileA
0x49fd78 CloseHandle
kernel32.dll
0x49fd80 TlsSetValue
0x49fd84 TlsGetValue
0x49fd88 LocalAlloc
0x49fd8c GetModuleHandleA
user32.dll
0x49fd94 CreateWindowExA
0x49fd98 mouse_event
0x49fd9c keybd_event
0x49fda0 WindowFromPoint
0x49fda4 WaitMessage
0x49fda8 VkKeyScanA
0x49fdac UpdateWindow
0x49fdb0 UnregisterClassA
0x49fdb4 UnhookWindowsHookEx
0x49fdb8 TranslateMessage
0x49fdbc TranslateMDISysAccel
0x49fdc0 TrackPopupMenu
0x49fdc4 ToAscii
0x49fdc8 SystemParametersInfoA
0x49fdcc ShowWindow
0x49fdd0 ShowScrollBar
0x49fdd4 ShowOwnedPopups
0x49fdd8 SetWindowsHookExA
0x49fddc SetWindowTextA
0x49fde0 SetWindowPos
0x49fde4 SetWindowPlacement
0x49fde8 SetWindowLongW
0x49fdec SetWindowLongA
0x49fdf0 SetTimer
0x49fdf4 SetScrollRange
0x49fdf8 SetScrollPos
0x49fdfc SetScrollInfo
0x49fe00 SetRectEmpty
0x49fe04 SetRect
0x49fe08 SetPropA
0x49fe0c SetParent
0x49fe10 SetMenuItemInfoA
0x49fe14 SetMenu
0x49fe18 SetForegroundWindow
0x49fe1c SetFocus
0x49fe20 SetCursorPos
0x49fe24 SetCursor
0x49fe28 SetClipboardData
0x49fe2c SetClassLongA
0x49fe30 SetCapture
0x49fe34 SetActiveWindow
0x49fe38 SendMessageW
0x49fe3c SendMessageA
0x49fe40 ScrollWindow
0x49fe44 ScreenToClient
0x49fe48 RemovePropA
0x49fe4c RemoveMenu
0x49fe50 ReleaseDC
0x49fe54 ReleaseCapture
0x49fe58 RegisterWindowMessageA
0x49fe5c RegisterClipboardFormatA
0x49fe60 RegisterClassA
0x49fe64 RedrawWindow
0x49fe68 PtInRect
0x49fe6c PostQuitMessage
0x49fe70 PostMessageA
0x49fe74 PeekMessageW
0x49fe78 PeekMessageA
0x49fe7c OpenClipboard
0x49fe80 OffsetRect
0x49fe84 OemToCharA
0x49fe88 MsgWaitForMultipleObjectsEx
0x49fe8c MsgWaitForMultipleObjects
0x49fe90 MessageBoxA
0x49fe94 MapWindowPoints
0x49fe98 MapVirtualKeyA
0x49fe9c LockWorkStation
0x49fea0 LoadStringA
0x49fea4 LoadKeyboardLayoutA
0x49fea8 LoadIconA
0x49feac LoadCursorA
0x49feb0 LoadBitmapA
0x49feb4 KillTimer
0x49feb8 IsZoomed
0x49febc IsWindowVisible
0x49fec0 IsWindowUnicode
0x49fec4 IsWindowEnabled
0x49fec8 IsWindow
0x49fecc IsRectEmpty
0x49fed0 IsIconic
0x49fed4 IsDialogMessageW
0x49fed8 IsDialogMessageA
0x49fedc IsClipboardFormatAvailable
0x49fee0 IsChild
0x49fee4 InvalidateRect
0x49fee8 IntersectRect
0x49feec InsertMenuItemA
0x49fef0 InsertMenuA
0x49fef4 InflateRect
0x49fef8 GetWindowThreadProcessId
0x49fefc GetWindowTextLengthA
0x49ff00 GetWindowTextA
0x49ff04 GetWindowRect
0x49ff08 GetWindowPlacement
0x49ff0c GetWindowLongW
0x49ff10 GetWindowLongA
0x49ff14 GetWindowDC
0x49ff18 GetTopWindow
0x49ff1c GetSystemMetrics
0x49ff20 GetSystemMenu
0x49ff24 GetSysColorBrush
0x49ff28 GetSysColor
0x49ff2c GetSubMenu
0x49ff30 GetScrollRange
0x49ff34 GetScrollPos
0x49ff38 GetScrollInfo
0x49ff3c GetPropA
0x49ff40 GetParent
0x49ff44 GetWindow
0x49ff48 GetMessagePos
0x49ff4c GetMessageA
0x49ff50 GetMenuStringA
0x49ff54 GetMenuState
0x49ff58 GetMenuItemInfoA
0x49ff5c GetMenuItemID
0x49ff60 GetMenuItemCount
0x49ff64 GetMenu
0x49ff68 GetLastInputInfo
0x49ff6c GetLastActivePopup
0x49ff70 GetKeyboardState
0x49ff74 GetKeyboardLayoutNameA
0x49ff78 GetKeyboardLayoutList
0x49ff7c GetKeyboardLayout
0x49ff80 GetKeyState
0x49ff84 GetKeyNameTextA
0x49ff88 GetIconInfo
0x49ff8c GetForegroundWindow
0x49ff90 GetFocus
0x49ff94 GetDesktopWindow
0x49ff98 GetDCEx
0x49ff9c GetDC
0x49ffa0 GetCursorPos
0x49ffa4 GetCursor
0x49ffa8 GetClipboardData
0x49ffac GetClientRect
0x49ffb0 GetClassNameA
0x49ffb4 GetClassLongA
0x49ffb8 GetClassInfoA
0x49ffbc GetCapture
0x49ffc0 GetActiveWindow
0x49ffc4 FrameRect
0x49ffc8 FindWindowExA
0x49ffcc FindWindowA
0x49ffd0 FillRect
0x49ffd4 ExitWindowsEx
0x49ffd8 EqualRect
0x49ffdc EnumWindows
0x49ffe0 EnumThreadWindows
0x49ffe4 EnumDisplayDevicesA
0x49ffe8 EnumClipboardFormats
0x49ffec EnumChildWindows
0x49fff0 EndPaint
0x49fff4 EnableWindow
0x49fff8 EnableScrollBar
0x49fffc EnableMenuItem
0x4a0000 EmptyClipboard
0x4a0004 DrawTextA
0x4a0008 DrawMenuBar
0x4a000c DrawIconEx
0x4a0010 DrawIcon
0x4a0014 DrawFrameControl
0x4a0018 DrawEdge
0x4a001c DispatchMessageW
0x4a0020 DispatchMessageA
0x4a0024 DestroyWindow
0x4a0028 DestroyMenu
0x4a002c DestroyIcon
0x4a0030 DestroyCursor
0x4a0034 DeleteMenu
0x4a0038 DefWindowProcA
0x4a003c DefMDIChildProcA
0x4a0040 DefFrameProcA
0x4a0044 CreatePopupMenu
0x4a0048 CreateMenu
0x4a004c CreateIcon
0x4a0050 CloseClipboard
0x4a0054 ClientToScreen
0x4a0058 CheckMenuItem
0x4a005c CallWindowProcA
0x4a0060 CallNextHookEx
0x4a0064 BeginPaint
0x4a0068 CharNextA
0x4a006c CharLowerBuffA
0x4a0070 CharLowerA
0x4a0074 CharUpperBuffA
0x4a0078 CharToOemA
0x4a007c AdjustWindowRectEx
0x4a0080 ActivateKeyboardLayout
gdi32.dll
0x4a0088 UnrealizeObject
0x4a008c StretchBlt
0x4a0090 SetWindowOrgEx
0x4a0094 SetWinMetaFileBits
0x4a0098 SetViewportOrgEx
0x4a009c SetTextColor
0x4a00a0 SetStretchBltMode
0x4a00a4 SetROP2
0x4a00a8 SetPixel
0x4a00ac SetEnhMetaFileBits
0x4a00b0 SetDIBColorTable
0x4a00b4 SetBrushOrgEx
0x4a00b8 SetBkMode
0x4a00bc SetBkColor
0x4a00c0 SelectPalette
0x4a00c4 SelectObject
0x4a00c8 SaveDC
0x4a00cc RestoreDC
0x4a00d0 RectVisible
0x4a00d4 RealizePalette
0x4a00d8 PlayEnhMetaFile
0x4a00dc PatBlt
0x4a00e0 MoveToEx
0x4a00e4 MaskBlt
0x4a00e8 LineTo
0x4a00ec IntersectClipRect
0x4a00f0 GetWindowOrgEx
0x4a00f4 GetWinMetaFileBits
0x4a00f8 GetTextMetricsA
0x4a00fc GetTextExtentPoint32A
0x4a0100 GetSystemPaletteEntries
0x4a0104 GetStockObject
0x4a0108 GetRgnBox
0x4a010c GetPixel
0x4a0110 GetPaletteEntries
0x4a0114 GetObjectA
0x4a0118 GetEnhMetaFilePaletteEntries
0x4a011c GetEnhMetaFileHeader
0x4a0120 GetEnhMetaFileBits
0x4a0124 GetDeviceCaps
0x4a0128 GetDIBits
0x4a012c GetDIBColorTable
0x4a0130 GetDCOrgEx
0x4a0134 GetCurrentPositionEx
0x4a0138 GetClipBox
0x4a013c GetBrushOrgEx
0x4a0140 GetBitmapBits
0x4a0144 GdiFlush
0x4a0148 ExtTextOutA
0x4a014c ExcludeClipRect
0x4a0150 DeleteObject
0x4a0154 DeleteEnhMetaFile
0x4a0158 DeleteDC
0x4a015c CreateSolidBrush
0x4a0160 CreatePenIndirect
0x4a0164 CreatePalette
0x4a0168 CreateHalftonePalette
0x4a016c CreateFontIndirectA
0x4a0170 CreateDIBitmap
0x4a0174 CreateDIBSection
0x4a0178 CreateDCA
0x4a017c CreateCompatibleDC
0x4a0180 CreateCompatibleBitmap
0x4a0184 CreateBrushIndirect
0x4a0188 CreateBitmap
0x4a018c CopyEnhMetaFileA
0x4a0190 BitBlt
version.dll
0x4a0198 VerQueryValueA
0x4a019c GetFileVersionInfoSizeA
0x4a01a0 GetFileVersionInfoA
kernel32.dll
0x4a01a8 lstrcpyA
0x4a01ac WriteProcessMemory
0x4a01b0 WriteFile
0x4a01b4 WinExec
0x4a01b8 WaitForSingleObject
0x4a01bc WaitForMultipleObjectsEx
0x4a01c0 VirtualQuery
0x4a01c4 VirtualProtectEx
0x4a01c8 VirtualProtect
0x4a01cc VirtualFreeEx
0x4a01d0 VirtualFree
0x4a01d4 VirtualAllocEx
0x4a01d8 VirtualAlloc
0x4a01dc VerLanguageNameA
0x4a01e0 UnmapViewOfFile
0x4a01e4 TerminateProcess
0x4a01e8 SizeofResource
0x4a01ec SetThreadPriority
0x4a01f0 SetThreadLocale
0x4a01f4 SetThreadContext
0x4a01f8 SetLastError
0x4a01fc SetFileTime
0x4a0200 SetFilePointer
0x4a0204 SetFileAttributesA
0x4a0208 SetEvent
0x4a020c SetErrorMode
0x4a0210 SetEndOfFile
0x4a0214 ResumeThread
0x4a0218 ResetEvent
0x4a021c ReadProcessMemory
0x4a0220 ReadFile
0x4a0224 PeekNamedPipe
0x4a0228 OpenProcess
0x4a022c MultiByteToWideChar
0x4a0230 MulDiv
0x4a0234 MoveFileA
0x4a0238 MapViewOfFile
0x4a023c LockResource
0x4a0240 LocalFileTimeToFileTime
0x4a0244 LocalAlloc
0x4a0248 LoadResource
0x4a024c LoadLibraryA
0x4a0250 LeaveCriticalSection
0x4a0254 IsBadReadPtr
0x4a0258 InitializeCriticalSection
0x4a025c HeapFree
0x4a0260 HeapAlloc
0x4a0264 GlobalUnlock
0x4a0268 GlobalMemoryStatus
0x4a026c GlobalLock
0x4a0270 GlobalFree
0x4a0274 GlobalFindAtomA
0x4a0278 GlobalDeleteAtom
0x4a027c GlobalAlloc
0x4a0280 GlobalAddAtomA
0x4a0284 GetWindowsDirectoryA
0x4a0288 GetVolumeInformationA
0x4a028c GetVersionExA
0x4a0290 GetVersion
0x4a0294 GetUserDefaultLangID
0x4a0298 GetTickCount
0x4a029c GetThreadLocale
0x4a02a0 GetThreadContext
0x4a02a4 GetTempPathA
0x4a02a8 GetSystemPowerStatus
0x4a02ac GetSystemDirectoryA
0x4a02b0 GetStdHandle
0x4a02b4 GetProcessHeap
0x4a02b8 GetProcAddress
0x4a02bc GetModuleHandleA
0x4a02c0 GetModuleFileNameA
0x4a02c4 GetLocaleInfoA
0x4a02c8 GetLocalTime
0x4a02cc GetLastError
0x4a02d0 GetFullPathNameA
0x4a02d4 GetFileTime
0x4a02d8 GetFileSize
0x4a02dc GetFileAttributesA
0x4a02e0 GetExitCodeThread
0x4a02e4 GetExitCodeProcess
0x4a02e8 GetEnvironmentVariableA
0x4a02ec GetDriveTypeA
0x4a02f0 GetDiskFreeSpaceA
0x4a02f4 GetDateFormatA
0x4a02f8 GetCurrentThreadId
0x4a02fc GetCurrentThread
0x4a0300 GetCurrentProcessId
0x4a0304 GetCurrentProcess
0x4a0308 GetComputerNameA
0x4a030c GetCPInfo
0x4a0310 FreeResource
0x4a0314 InterlockedIncrement
0x4a0318 InterlockedExchange
0x4a031c InterlockedDecrement
0x4a0320 FreeLibrary
0x4a0324 FormatMessageA
0x4a0328 FindResourceA
0x4a032c FindNextFileA
0x4a0330 FindFirstFileA
0x4a0334 FindClose
0x4a0338 FileTimeToSystemTime
0x4a033c FileTimeToLocalFileTime
0x4a0340 FileTimeToDosDateTime
0x4a0344 ExitThread
0x4a0348 ExitProcess
0x4a034c EnumResourceNamesA
0x4a0350 EnumCalendarInfoA
0x4a0354 EnterCriticalSection
0x4a0358 DosDateTimeToFileTime
0x4a035c DeleteFileA
0x4a0360 DeleteCriticalSection
0x4a0364 CreateThread
0x4a0368 CreateRemoteThread
0x4a036c CreateProcessA
0x4a0370 CreatePipe
0x4a0374 CreateMutexA
0x4a0378 CreateFileMappingA
0x4a037c CreateFileA
0x4a0380 CreateEventA
0x4a0384 CreateDirectoryA
0x4a0388 CopyFileA
0x4a038c CompareStringA
0x4a0390 CloseHandle
0x4a0394 Beep
advapi32.dll
0x4a039c RegSetValueExA
0x4a03a0 RegQueryValueExA
0x4a03a4 RegQueryInfoKeyA
0x4a03a8 RegOpenKeyExA
0x4a03ac RegOpenKeyA
0x4a03b0 RegFlushKey
0x4a03b4 RegEnumValueA
0x4a03b8 RegEnumKeyExA
0x4a03bc RegDeleteValueA
0x4a03c0 RegDeleteKeyA
0x4a03c4 RegCreateKeyExA
0x4a03c8 RegCreateKeyA
0x4a03cc RegCloseKey
0x4a03d0 OpenThreadToken
0x4a03d4 OpenProcessToken
0x4a03d8 LookupPrivilegeValueA
0x4a03dc LookupPrivilegeNameA
0x4a03e0 LookupPrivilegeDisplayNameA
0x4a03e4 LookupAccountSidA
0x4a03e8 IsValidSid
0x4a03ec GetUserNameA
0x4a03f0 GetTokenInformation
0x4a03f4 GetSidSubAuthorityCount
0x4a03f8 GetSidSubAuthority
0x4a03fc GetSidIdentifierAuthority
0x4a0400 GetCurrentHwProfileA
0x4a0404 AdjustTokenPrivileges
wsock32.dll
0x4a040c __WSAFDIsSet
0x4a0410 WSACleanup
0x4a0414 WSAStartup
0x4a0418 WSAGetLastError
0x4a041c gethostname
0x4a0420 getservbyname
0x4a0424 gethostbyname
0x4a0428 gethostbyaddr
0x4a042c socket
0x4a0430 shutdown
0x4a0434 sendto
0x4a0438 send
0x4a043c select
0x4a0440 recv
0x4a0444 ntohs
0x4a0448 listen
0x4a044c ioctlsocket
0x4a0450 inet_ntoa
0x4a0454 inet_addr
0x4a0458 htons
0x4a045c getsockname
0x4a0460 connect
0x4a0464 closesocket
0x4a0468 ind
0x4a046c accept
kernel32.dll
0x4a0474 Sleep
ole32.dll
0x4a047c CoTaskMemFree
0x4a0480 StringFromCLSID
shell32.dll
0x4a0488 ShellExecuteExA
0x4a048c ShellExecuteA
0x4a0490 SHGetFileInfoA
0x4a0494 SHFileOperationA
0x4a0498 DragQueryFileA
oleaut32.dll
0x4a04a0 GetErrorInfo
0x4a04a4 GetActiveObject
0x4a04a8 SysFreeString
ole32.dll
0x4a04b0 CoTaskMemFree
0x4a04b4 CLSIDFromProgID
0x4a04b8 ProgIDFromCLSID
0x4a04bc StringFromCLSID
0x4a04c0 CoCreateInstance
0x4a04c4 CoUninitialize
0x4a04c8 CoInitialize
0x4a04cc IsEqualGUID
URLMON.DLL
0x4a04d4 URLDownloadToFileA
oleaut32.dll
0x4a04dc SafeArrayPtrOfIndex
0x4a04e0 SafeArrayGetUBound
0x4a04e4 SafeArrayGetLBound
0x4a04e8 SafeArrayCreate
0x4a04ec VariantChangeType
0x4a04f0 VariantCopy
0x4a04f4 VariantClear
0x4a04f8 VariantInit
comctl32.dll
0x4a0500 _TrackMouseEvent
0x4a0504 ImageList_SetIconSize
0x4a0508 ImageList_GetIconSize
0x4a050c ImageList_Write
0x4a0510 ImageList_Read
0x4a0514 ImageList_DragShowNolock
0x4a0518 ImageList_DragMove
0x4a051c ImageList_DragLeave
0x4a0520 ImageList_DragEnter
0x4a0524 ImageList_EndDrag
0x4a0528 ImageList_BeginDrag
0x4a052c ImageList_Remove
0x4a0530 ImageList_DrawEx
0x4a0534 ImageList_Draw
0x4a0538 ImageList_GetBkColor
0x4a053c ImageList_SetBkColor
0x4a0540 ImageList_Add
0x4a0544 ImageList_GetImageCount
0x4a0548 ImageList_Destroy
0x4a054c ImageList_Create
wininet.dll
0x4a0554 InternetOpenUrlA
0x4a0558 InternetOpenA
0x4a055c InternetConnectA
0x4a0560 InternetCloseHandle
0x4a0564 FtpPutFileA
shell32.dll
0x4a056c SHGetSpecialFolderLocation
0x4a0570 SHGetPathFromIDListA
winmm.dll
0x4a0578 waveInUnprepareHeader
0x4a057c waveInStart
0x4a0580 waveInReset
0x4a0584 waveInPrepareHeader
0x4a0588 waveInOpen
0x4a058c waveInClose
0x4a0590 waveInAddBuffer
0x4a0594 PlaySoundA
0x4a0598 mciSendStringA
netapi32.dll
0x4a05a0 Netbios
gdiplus.dll
0x4a05a8 GdipGetImageEncoders
0x4a05ac GdipGetImageEncodersSize
0x4a05b0 GdipDrawImageRectI
0x4a05b4 GdipSetInterpolationMode
0x4a05b8 GdipDeleteGraphics
0x4a05bc GdipCreateBitmapFromHBITMAP
0x4a05c0 GdipCreateBitmapFromScan0
0x4a05c4 GdipGetImagePixelFormat
0x4a05c8 GdipGetImageGraphicsContext
0x4a05cc GdipSaveImageToStream
0x4a05d0 GdipDisposeImage
0x4a05d4 GdiplusShutdown
0x4a05d8 GdiplusStartup
0x4a05dc GdipFree
0x4a05e0 GdipAlloc
advapi32.dll
0x4a05e8 StartServiceA
0x4a05ec QueryServiceStatus
0x4a05f0 OpenServiceA
0x4a05f4 OpenSCManagerA
0x4a05f8 EnumServicesStatusA
0x4a05fc DeleteService
0x4a0600 CreateServiceA
0x4a0604 ControlService
0x4a0608 CloseServiceHandle
msacm32.dll
0x4a0610 acmStreamUnprepareHeader
0x4a0614 acmStreamPrepareHeader
0x4a0618 acmStreamConvert
0x4a061c acmStreamReset
0x4a0620 acmStreamSize
0x4a0624 acmStreamClose
0x4a0628 acmStreamOpen
ntdll.dll
0x4a0630 NtQuerySystemInformation
netapi32.dll
0x4a0638 NetApiBufferFree
0x4a063c NetShareGetInfo
0x4a0640 NetShareEnum
WS2_32.DLL
0x4a0648 WSAIoctl
SHFolder.dll
0x4a0650 SHGetFolderPathA
ntdll
0x4a0658 NtUnmapViewOfSection
user32.dll
0x4a0660 EnumDisplayMonitors
0x4a0664 GetMonitorInfoA
SHELL32.DLL
0x4a066c SHEmptyRecycleBinA
AVICAP32.DLL
0x4a0674 capGetDriverDescriptionA
EAT(Export Address Table) is none