File Type: EXECUTABLE IMAGE Section contains the following imports: kernel32.dll 421000 Import Address Table 0 Import Name Table 0 time date stamp 0 Index of first forwarder reference 25B MapViewOfFile 302 SetEnvironmentVariableA 39 CompareStringW 38 CompareStringA 301 SetEndOfFile E7 FlushFileBuffers 326 SetStdHandle 1B5 GetStringTypeW 1B2 GetStringTypeA 2C8 RtlUnwind 15F GetFileType 1B1 GetStdHandle 258 LockResource 150 GetEnvironmentStringsW 14E GetEnvironmentStrings F0 FreeEnvironmentStringsW EF FreeEnvironmentStringsA 35C UnhandledExceptionFilter 18C GetOEMCP B8 ExitThread 1D5 GetTickCount 295 QueryPerformanceCounter 296 QueryPerformanceFrequency 343 Sleep 1BA GetSystemDirectoryA 16B GetLocalTime 268 MultiByteToWideChar 2A7 ReadFile 32 CloseHandle 390 WriteFile 355 TransactNamedPipe 50 CreateFileA 175 GetModuleFileNameA 1D6 GetTimeFormatA 140 GetDateFormatA 169 GetLastError 6D CreateThread 15C GetFileSize 157 GetFileAttributesA CD FindClose C4 FileTimeToSystemTime C3 FileTimeToLocalFileTime DA FindNextFileA D1 FindFirstFileA 30A SetFilePointer 244 LeaveCriticalSection 97 EnterCriticalSection 21A InitializeCriticalSectionAndSpinCount 80 DeleteCriticalSection F1 FreeLibrary 152 GetEnvironmentVariableW 199 GetProcAddress 245 LoadLibraryA 20C HeapFree 206 HeapAlloc 19D GetProcessHeap 378 VirtualQueryEx 2AA ReadProcessMemory 1BC GetSystemInfo 278 OpenProcess 177 GetModuleHandleA EC FormatMessageA 200 GlobalUnlock 1F9 GlobalLock 35F UnmapViewOfFile 51 CreateFileMappingA 30E SetFileTime 15E GetFileTime 63 CreateProcessA BA ExpandEnvironmentStringsA 308 SetFileAttributesA 1CC GetTempPathA 153 GetExitCodeProcess 283 PeekNamedPipe 92 DuplicateHandle 13C GetCurrentProcess 62 CreatePipe 1DF GetVersionExA 1FA GlobalMemoryStatus B7 ExitProcess 383 WideCharToMultiByte 10E GetComputerNameA 82 DeleteFileA 13D GetCurrentProcessId 40 CopyFileA 37F WaitForSingleObject 5D CreateMutexA 34C TerminateThread 261 MoveFileA 34B TerminateProcess 3AE lstrcmpi 16C GetLocaleInfoA 170 GetLogicalDrives 1D8 GetTimeZoneInformation 1BF GetSystemTime 210 HeapReAlloc 1AF GetStartupInfoA 10A GetCommandLineA 1DE GetVersion 151 GetEnvironmentVariableA 20A HeapDestroy 208 HeapCreate 372 VirtualFree 36F VirtualAlloc 237 LCMapStringA 238 LCMapStringW FE GetCPInfo F7 GetACP ws2_32.dll 4211B4 Import Address Table 0 Import Name Table 0 time date stamp 0 Index of first forwarder reference 74 WSACleanup 73 WSAStartup 15 setsockopt 2 bind D listen 12 select 97 __WSAFDIsSet 1 accept 34 gethostbyname 16 shutdown B inet_addr 9 htons 10 recv 13 send 17 socket A ioctlsocket 4 connect 3 closesocket Summary 1000 F6000 .data 1000 .idata2 1000 .mackt 2000 .rdata 20000 .text