C:\WINDOWS\system32\calc.exe
Report Created at 13.02.12 22:09

File Headers (file)

DOS EXE: true
NT EXE: true
Dos STUB size: 176 (b0)

DOS Header (dos)

e_magic: 23117 (5a4d), offsetInFile: 0, sizeInBytes: 2
e_cblp: 144 (90), offsetInFile: 2, sizeInBytes: 2
e_cp: 3 (3), offsetInFile: 4, sizeInBytes: 2
e_crlc: 0 (0), offsetInFile: 6, sizeInBytes: 2
e_cparhdr: 4 (4), offsetInFile: 8, sizeInBytes: 2
e_minalloc: 0 (0), offsetInFile: 10, sizeInBytes: 2
e_maxalloc: 65535 (ffff), offsetInFile: 12, sizeInBytes: 2
e_ss: 0 (0), offsetInFile: 14, sizeInBytes: 2
e_sp: 184 (b8), offsetInFile: 16, sizeInBytes: 2
e_csum: 0 (0), offsetInFile: 18, sizeInBytes: 2
e_ip: 0 (0), offsetInFile: 20, sizeInBytes: 2
e_cs: 0 (0), offsetInFile: 22, sizeInBytes: 2
e_lfarlc: 64 (40), offsetInFile: 24, sizeInBytes: 2
e_ovno: 0 (0), offsetInFile: 26, sizeInBytes: 2
e_res: 0000000000000000, offsetInFile: 28, sizeInBytes: 8
e_oemid: 0 (0), offsetInFile: 36, sizeInBytes: 2
e_oeminfo: 0 (0), offsetInFile: 38, sizeInBytes: 2
e_res2: 0000000000000000000000000000000000000000, offsetInFile: 40, sizeInBytes: 20
e_lfanew: 240 (f0), offsetInFile: 60, sizeInBytes: 4

COFF File Header (Object and Image) (peHeader)

Machine: 332 (14c), offsetInFile: 244, sizeInBytes: 2
NumberOfSections: 3 (3), offsetInFile: 246, sizeInBytes: 2
TimeDateStamp: 998081552 (3b7d8410), offsetInFile: 248, sizeInBytes: 4
PointerToSymbolTable: 0 (0), offsetInFile: 252, sizeInBytes: 4
NumberOfSymbols: 0 (0), offsetInFile: 256, sizeInBytes: 4
SizeOfOptionalHeader: 224 (e0), offsetInFile: 260, sizeInBytes: 2
Characteristics: 271 (10f), offsetInFile: 262, sizeInBytes: 2

COFF File Header (Object and Image) Meta (peHeader.meta)

Machine: Intel 386 or later, and compatible processors
TimeDateStamp: Sat Aug 18 00:52:32 MSD 2001

Characteristics (peHeader.meta.characteristics)

IMAGE_FILE_RELOCS_STRIPPED: 1 (1)
IMAGE_FILE_EXECUTABLE_IMAGE: 2 (2)
IMAGE_FILE_LINE_NUMS_STRIPPED: 4 (4)
IMAGE_FILE_LOCAL_SYMS_STRIPPED: 8 (8)
IMAGE_FILE_32BIT_MACHINE: 256 (100)

Optional Header (Usually Image Only) (peOptionalHeader)

Magic: 267 (10b), offsetInFile: 264, sizeInBytes: 2
MajorLinkerVersion: 7 (7), offsetInFile: 266, sizeInBytes: 1
MinorLinkerVersion: 0 (0), offsetInFile: 267, sizeInBytes: 1
SizeOfCode: 75776 (12800), offsetInFile: 268, sizeInBytes: 4
SizeOfInitializedData: 39936 (9c00), offsetInFile: 272, sizeInBytes: 4
SizeOfUninitializedData: 0 (0), offsetInFile: 276, sizeInBytes: 4
AddressOfEntryPoint: 74869 (12475), offsetInFile: 280, sizeInBytes: 4
BaseOfCode: 4096 (1000), offsetInFile: 284, sizeInBytes: 4
BaseOfData: 81920 (14000), offsetInFile: 288, sizeInBytes: 4
ImageBase: 16777216 (1000000), offsetInFile: 292, sizeInBytes: 4
SectionAlignment: 4096 (1000), offsetInFile: 296, sizeInBytes: 4
FileAlignment: 512 (200), offsetInFile: 300, sizeInBytes: 4
MajorOperatingSystemVersion: 5 (5), offsetInFile: 304, sizeInBytes: 2
MinorOperatingSystemVersion: 1 (1), offsetInFile: 306, sizeInBytes: 2
MajorImageVersion: 5 (5), offsetInFile: 308, sizeInBytes: 2
MinorImageVersion: 1 (1), offsetInFile: 310, sizeInBytes: 2
MajorSubsystemVersion: 4 (4), offsetInFile: 312, sizeInBytes: 2
MinorSubsystemVersion: 0 (0), offsetInFile: 314, sizeInBytes: 2
Reserved1: 0 (0), offsetInFile: 316, sizeInBytes: 4
SizeOfImage: 126976 (1f000), offsetInFile: 320, sizeInBytes: 4
SizeOfHeaders: 1024 (400), offsetInFile: 324, sizeInBytes: 4
CheckSum: 120828 (1d7fc), offsetInFile: 328, sizeInBytes: 4
Subsystem: 2 (2), offsetInFile: 332, sizeInBytes: 2
DllCharacteristics: 32768 (8000), offsetInFile: 334, sizeInBytes: 2
SizeOfStackReserve: 262144 (40000), offsetInFile: 336, sizeInBytes: 4
SizeOfStackCommit: 4096 (1000), offsetInFile: 340, sizeInBytes: 4
SizeOfHeapReserve: 1048576 (100000), offsetInFile: 344, sizeInBytes: 4
SizeOfHeapCommit: 4096 (1000), offsetInFile: 348, sizeInBytes: 4
LoaderFlags: 0 (0), offsetInFile: 352, sizeInBytes: 4
NumberOfRvaAndSizes: 16 (10), offsetInFile: 356, sizeInBytes: 4

Optional Header (Usually Image Only) Meta (peOptionalHeader.meta)

Magic (PE Format): PE32
Subsystem: Image runs in the Windows™ graphical user interface (GUI) subsystem

DllCharacteristics (peOptionalHeader.meta.dllCharacteristics)

IMAGE_FILE_BYTES_REVERSED_HI: 32768 (8000)

Optional Header Data Directories (Image Only) (dataDirectory)

Export Table (dataDirectory.0)

VirtualAddress: 0 (0), offsetInFile: 360, sizeInBytes: 4
Size: 0 (0), offsetInFile: 364, sizeInBytes: 4

Import Table (dataDirectory.1)

VirtualAddress: 76672 (12b80), offsetInFile: 368, sizeInBytes: 4
Size: 140 (8c), offsetInFile: 372, sizeInBytes: 4

Resource Table (dataDirectory.2)

VirtualAddress: 90112 (16000), offsetInFile: 376, sizeInBytes: 4
Size: 35168 (8960), offsetInFile: 380, sizeInBytes: 4

Exception Table (dataDirectory.3)

VirtualAddress: 0 (0), offsetInFile: 384, sizeInBytes: 4
Size: 0 (0), offsetInFile: 388, sizeInBytes: 4

Certificate Table (dataDirectory.4)

VirtualAddress: 0 (0), offsetInFile: 392, sizeInBytes: 4
Size: 0 (0), offsetInFile: 396, sizeInBytes: 4

Base Relocation Table (dataDirectory.5)

VirtualAddress: 0 (0), offsetInFile: 400, sizeInBytes: 4
Size: 0 (0), offsetInFile: 404, sizeInBytes: 4

Debug (dataDirectory.6)

VirtualAddress: 4672 (1240), offsetInFile: 408, sizeInBytes: 4
Size: 28 (1c), offsetInFile: 412, sizeInBytes: 4

Architecture (dataDirectory.7)

VirtualAddress: 0 (0), offsetInFile: 416, sizeInBytes: 4
Size: 0 (0), offsetInFile: 420, sizeInBytes: 4

Global Ptr (dataDirectory.8)

VirtualAddress: 0 (0), offsetInFile: 424, sizeInBytes: 4
Size: 0 (0), offsetInFile: 428, sizeInBytes: 4

TLS Table (dataDirectory.9)

VirtualAddress: 0 (0), offsetInFile: 432, sizeInBytes: 4
Size: 0 (0), offsetInFile: 436, sizeInBytes: 4

Load Config Table (dataDirectory.10)

VirtualAddress: 0 (0), offsetInFile: 440, sizeInBytes: 4
Size: 0 (0), offsetInFile: 444, sizeInBytes: 4

Bound Import (dataDirectory.11)

VirtualAddress: 608 (260), offsetInFile: 448, sizeInBytes: 4
Size: 128 (80), offsetInFile: 452, sizeInBytes: 4

IAT (dataDirectory.12)

VirtualAddress: 4096 (1000), offsetInFile: 456, sizeInBytes: 4
Size: 552 (228), offsetInFile: 460, sizeInBytes: 4

Delay Import Descriptor (dataDirectory.13)

VirtualAddress: 0 (0), offsetInFile: 464, sizeInBytes: 4
Size: 0 (0), offsetInFile: 468, sizeInBytes: 4

COM+ Runtime Header (dataDirectory.14)

VirtualAddress: 0 (0), offsetInFile: 472, sizeInBytes: 4
Size: 0 (0), offsetInFile: 476, sizeInBytes: 4

Reserved (dataDirectory.15)

VirtualAddress: 0 (0), offsetInFile: 480, sizeInBytes: 4
Size: 0 (0), offsetInFile: 484, sizeInBytes: 4

Section Table (Section Headers)[3] (sectionTable)

.text (section.0)

Name: .text, offsetInFile: 488, sizeInBytes: 8
VirtualSize: 75440 (126b0), offsetInFile: 496, sizeInBytes: 4
VirtualAddress: 4096 (1000), offsetInFile: 500, sizeInBytes: 4
SizeOfRawData: 75776 (12800), offsetInFile: 504, sizeInBytes: 4
PointerToRawData: 1024 (400), offsetInFile: 508, sizeInBytes: 4
PointerToRelocations: 0 (0), offsetInFile: 512, sizeInBytes: 4
PointerToLinenumbers: 0 (0), offsetInFile: 516, sizeInBytes: 4
NumberOfRelocations: 0 (0), offsetInFile: 520, sizeInBytes: 2
NumberOfLinenumbers: 0 (0), offsetInFile: 522, sizeInBytes: 2
Characteristics: 1610612768 (60000020), offsetInFile: 524, sizeInBytes: 4

.text Meta (section.0.meta)

.text Characteristics (section.0.meta.characteristics)

Section contains executable code: 32 (20)
Section can be executed as code: 536870912 (20000000)
Section can be read: 1073741824 (40000000)

.data (section.1)

Name: .data, offsetInFile: 528, sizeInBytes: 8
VirtualSize: 4124 (101c), offsetInFile: 536, sizeInBytes: 4
VirtualAddress: 81920 (14000), offsetInFile: 540, sizeInBytes: 4
SizeOfRawData: 2560 (a00), offsetInFile: 544, sizeInBytes: 4
PointerToRawData: 76800 (12c00), offsetInFile: 548, sizeInBytes: 4
PointerToRelocations: 0 (0), offsetInFile: 552, sizeInBytes: 4
PointerToLinenumbers: 0 (0), offsetInFile: 556, sizeInBytes: 4
NumberOfRelocations: 0 (0), offsetInFile: 560, sizeInBytes: 2
NumberOfLinenumbers: 0 (0), offsetInFile: 562, sizeInBytes: 2
Characteristics: 3221225536 (c0000040), offsetInFile: 564, sizeInBytes: 4

.data Meta (section.1.meta)

.data Characteristics (section.1.meta.characteristics)

Section contains initialized data: 64 (40)
Section can be read: 1073741824 (40000000)
Section can be written to: 2147483648 (80000000)

.rsrc (section.2)

Name: .rsrc, offsetInFile: 568, sizeInBytes: 8
VirtualSize: 35168 (8960), offsetInFile: 576, sizeInBytes: 4
VirtualAddress: 90112 (16000), offsetInFile: 580, sizeInBytes: 4
SizeOfRawData: 35328 (8a00), offsetInFile: 584, sizeInBytes: 4
PointerToRawData: 79360 (13600), offsetInFile: 588, sizeInBytes: 4
PointerToRelocations: 0 (0), offsetInFile: 592, sizeInBytes: 4
PointerToLinenumbers: 0 (0), offsetInFile: 596, sizeInBytes: 4
NumberOfRelocations: 0 (0), offsetInFile: 600, sizeInBytes: 2
NumberOfLinenumbers: 0 (0), offsetInFile: 602, sizeInBytes: 2
Characteristics: 1073741888 (40000040), offsetInFile: 604, sizeInBytes: 4

.rsrc Meta (section.2.meta)

.rsrc Characteristics (section.2.meta.characteristics)

Section contains initialized data: 64 (40)
Section can be read: 1073741824 (40000000)

The image does not export any functions

Import table (importTable)

Import table for SHELL32.dll (importTable.SHELL32.dll)

OriginalFirstThunk: 76968 (12ca8), offsetInFile: 73600, sizeInBytes: 4
TimeDateStamp: 4294967295 (ffffffff), offsetInFile: 73604, sizeInBytes: 4
ForwarderChain: 4294967295 (ffffffff), offsetInFile: 73608, sizeInBytes: 4
Name: 77378 (12e42), offsetInFile: 73612, sizeInBytes: 4
FirstThunk: 4252 (109c), offsetInFile: 73616, sizeInBytes: 4
name: SHELL32.dll
count: 1 (1)

Import table for SHELL32.dll, entry 0 (importTable.SHELL32.dll.0)

OriginalFirstThunk: (Name: ShellAboutW, Hint: 148)
u1: 44EE1100, offsetInFile: 73896, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: BB339977, offsetInFile: 1180, sizeInBytes: 4

Import table for msvcrt.dll (importTable.msvcrt.dll)

OriginalFirstThunk: 77256 (12dc8), offsetInFile: 73620, sizeInBytes: 4
TimeDateStamp: 4294967295 (ffffffff), offsetInFile: 73624, sizeInBytes: 4
ForwarderChain: 4294967295 (ffffffff), offsetInFile: 73628, sizeInBytes: 4
Name: 77664 (12f60), offsetInFile: 73632, sizeInBytes: 4
FirstThunk: 4540 (11bc), offsetInFile: 73636, sizeInBytes: 4
name: msvcrt.dll
count: 26 (1a)

Import table for msvcrt.dll, entry 0 (importTable.msvcrt.dll.0)

OriginalFirstThunk: (Name: __CxxFrameHandler, Hint: 82)
u1: EEEE1100, offsetInFile: 74184, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 88AA2277, offsetInFile: 1468, sizeInBytes: 4

Import table for msvcrt.dll, entry 1 (importTable.msvcrt.dll.1)

OriginalFirstThunk: (Name: _CxxThrowException, Hint: 71)
u1: 22EE1100, offsetInFile: 74188, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 55992277, offsetInFile: 1472, sizeInBytes: 4

Import table for msvcrt.dll, entry 2 (importTable.msvcrt.dll.2)

OriginalFirstThunk: (Name: wcstoul, Hint: 824)
u1: 88EE1100, offsetInFile: 74192, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 99771177, offsetInFile: 1476, sizeInBytes: 4

Import table for msvcrt.dll, entry 3 (importTable.msvcrt.dll.3)

OriginalFirstThunk: (Name: toupper, Hint: 794)
u1: 22EE1100, offsetInFile: 74196, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 66771177, offsetInFile: 1480, sizeInBytes: 4

Import table for msvcrt.dll, entry 4 (importTable.msvcrt.dll.4)

OriginalFirstThunk: (Name: wcschr, Hint: 806)
u1: CCEE1100, offsetInFile: 74200, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: EECC4477, offsetInFile: 1484, sizeInBytes: 4

Import table for msvcrt.dll, entry 5 (importTable.msvcrt.dll.5)

OriginalFirstThunk: (Name: memmove, Hint: 734)
u1: 66EE1100, offsetInFile: 74204, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 00114477, offsetInFile: 1488, sizeInBytes: 4

Import table for msvcrt.dll, entry 6 (importTable.msvcrt.dll.6)

OriginalFirstThunk: (Name: wcslen, Hint: 812)
u1: 00EE1100, offsetInFile: 74208, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: CCDD4477, offsetInFile: 1492, sizeInBytes: 4

Import table for msvcrt.dll, entry 7 (importTable.msvcrt.dll.7)

OriginalFirstThunk: (Name: _wcsrev, Hint: 559)
u1: AAEE1100, offsetInFile: 74212, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 00BB4477, offsetInFile: 1496, sizeInBytes: 4

Import table for msvcrt.dll, entry 8 (importTable.msvcrt.dll.8)

OriginalFirstThunk: (Name: _c_exit, Hint: 197)
u1: 44EE1100, offsetInFile: 74216, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 11BB3377, offsetInFile: 1500, sizeInBytes: 4

Import table for msvcrt.dll, entry 9 (importTable.msvcrt.dll.9)

OriginalFirstThunk: (Name: _exit, Hint: 246)
u1: EEEE1100, offsetInFile: 74220, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: EEAA3377, offsetInFile: 1504, sizeInBytes: 4

Import table for msvcrt.dll, entry 10 (importTable.msvcrt.dll.10)

OriginalFirstThunk: (Name: _XcptFilter, Hint: 78)
u1: 66EE1100, offsetInFile: 74224, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 99223377, offsetInFile: 1508, sizeInBytes: 4

Import table for msvcrt.dll, entry 11 (importTable.msvcrt.dll.11)

OriginalFirstThunk: (Name: _cexit, Hint: 200)
u1: 44EE1100, offsetInFile: 74228, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 00BB3377, offsetInFile: 1512, sizeInBytes: 4

Import table for msvcrt.dll, entry 12 (importTable.msvcrt.dll.12)

OriginalFirstThunk: (Name: exit, Hint: 655)
u1: EEEE1100, offsetInFile: 74232, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: CCAA3377, offsetInFile: 1516, sizeInBytes: 4

Import table for msvcrt.dll, entry 13 (importTable.msvcrt.dll.13)

OriginalFirstThunk: (Name: _acmdln, Hint: 168)
u1: 66EE1100, offsetInFile: 74236, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 88775577, offsetInFile: 1520, sizeInBytes: 4

Import table for msvcrt.dll, entry 14 (importTable.msvcrt.dll.14)

OriginalFirstThunk: (Name: __getmainargs, Hint: 109)
u1: 00EE1100, offsetInFile: 74240, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 99991177, offsetInFile: 1524, sizeInBytes: 4

Import table for msvcrt.dll, entry 15 (importTable.msvcrt.dll.15)

OriginalFirstThunk: (Name: _initterm, Hint: 314)
u1: 00FF1100, offsetInFile: 74244, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: BB993377, offsetInFile: 1528, sizeInBytes: 4

Import table for msvcrt.dll, entry 16 (importTable.msvcrt.dll.16)

OriginalFirstThunk: (Name: __setusermatherr, Hint: 154)
u1: CCFF1100, offsetInFile: 74248, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 00FF4477, offsetInFile: 1532, sizeInBytes: 4

Import table for msvcrt.dll, entry 17 (importTable.msvcrt.dll.17)

OriginalFirstThunk: (Name: _adjust_fdiv, Hint: 182)
u1: 00FF1100, offsetInFile: 74252, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 88335577, offsetInFile: 1536, sizeInBytes: 4

Import table for msvcrt.dll, entry 18 (importTable.msvcrt.dll.18)

OriginalFirstThunk: (Name: __p__commode, Hint: 128)
u1: 00FF1100, offsetInFile: 74256, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: AABB1177, offsetInFile: 1540, sizeInBytes: 4

Import table for msvcrt.dll, entry 19 (importTable.msvcrt.dll.19)

OriginalFirstThunk: (Name: __p__fmode, Hint: 133)
u1: 00FF1100, offsetInFile: 74260, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 88BB1177, offsetInFile: 1544, sizeInBytes: 4

Import table for msvcrt.dll, entry 20 (importTable.msvcrt.dll.20)

OriginalFirstThunk: (Name: __set_app_type, Hint: 152)
u1: EEFF1100, offsetInFile: 74264, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 22663377, offsetInFile: 1548, sizeInBytes: 4

Import table for msvcrt.dll, entry 21 (importTable.msvcrt.dll.21)

OriginalFirstThunk: (Name: ??3@YAXPAX@Z, Hint: 18)
u1: CCFF1100, offsetInFile: 74268, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 33992277, offsetInFile: 1552, sizeInBytes: 4

Import table for msvcrt.dll, entry 22 (importTable.msvcrt.dll.22)

OriginalFirstThunk: (Name: ??1type_info@@UAE@XZ, Hint: 16)
u1: CCFF1100, offsetInFile: 74272, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: BBCC2277, offsetInFile: 1556, sizeInBytes: 4

Import table for msvcrt.dll, entry 23 (importTable.msvcrt.dll.23)

OriginalFirstThunk: (Name: _controlfp, Hint: 214)
u1: 44FF1100, offsetInFile: 74276, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 88664477, offsetInFile: 1560, sizeInBytes: 4

Import table for msvcrt.dll, entry 24 (importTable.msvcrt.dll.24)

OriginalFirstThunk: (Name: _except_handler3, Hint: 237)
u1: 22FF1100, offsetInFile: 74280, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 00EE3377, offsetInFile: 1564, sizeInBytes: 4

Import table for msvcrt.dll, entry 25 (importTable.msvcrt.dll.25)

OriginalFirstThunk: (Name: ?terminate@@YAXXZ, Hint: 52)
u1: 66FF1100, offsetInFile: 74284, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: BB992277, offsetInFile: 1568, sizeInBytes: 4

Import table for ADVAPI32.dll (importTable.ADVAPI32.dll)

OriginalFirstThunk: 76812 (12c0c), offsetInFile: 73640, sizeInBytes: 4
TimeDateStamp: 4294967295 (ffffffff), offsetInFile: 73644, sizeInBytes: 4
ForwarderChain: 4294967295 (ffffffff), offsetInFile: 73648, sizeInBytes: 4
Name: 77820 (12ffc), offsetInFile: 73652, sizeInBytes: 4
FirstThunk: 4096 (1000), offsetInFile: 73656, sizeInBytes: 4
name: ADVAPI32.dll
count: 3 (3)

Import table for ADVAPI32.dll, entry 0 (importTable.ADVAPI32.dll.0)

OriginalFirstThunk: (Name: RegOpenKeyExA, Hint: 481)
u1: CCFF1100, offsetInFile: 73740, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: AA22DD77, offsetInFile: 1024, sizeInBytes: 4

Import table for ADVAPI32.dll, entry 1 (importTable.ADVAPI32.dll.1)

OriginalFirstThunk: (Name: RegQueryValueExA, Hint: 491)
u1: 88FF1100, offsetInFile: 73744, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 7733DD77, offsetInFile: 1028, sizeInBytes: 4

Import table for ADVAPI32.dll, entry 2 (importTable.ADVAPI32.dll.2)

OriginalFirstThunk: (Name: RegCloseKey, Hint: 456)
u1: AAFF1100, offsetInFile: 73748, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: AA88DD77, offsetInFile: 1032, sizeInBytes: 4

Import table for KERNEL32.dll (importTable.KERNEL32.dll)

OriginalFirstThunk: 76844 (12c2c), offsetInFile: 73660, sizeInBytes: 4
TimeDateStamp: 4294967295 (ffffffff), offsetInFile: 73664, sizeInBytes: 4
ForwarderChain: 4294967295 (ffffffff), offsetInFile: 73668, sizeInBytes: 4
Name: 78292 (131d4), offsetInFile: 73672, sizeInBytes: 4
FirstThunk: 4128 (1020), offsetInFile: 73676, sizeInBytes: 4
name: KERNEL32.dll
count: 30 (1e)

Import table for KERNEL32.dll, entry 0 (importTable.KERNEL32.dll.0)

OriginalFirstThunk: (Name: GetModuleHandleA, Hint: 359)
u1: EE111100, offsetInFile: 73772, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 33FF7777, offsetInFile: 1056, sizeInBytes: 4

Import table for KERNEL32.dll, entry 1 (importTable.KERNEL32.dll.1)

OriginalFirstThunk: (Name: LoadLibraryA, Hint: 558)
u1: EE111100, offsetInFile: 73776, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 88558877, offsetInFile: 1060, sizeInBytes: 4

Import table for KERNEL32.dll, entry 2 (importTable.KERNEL32.dll.2)

OriginalFirstThunk: (Name: GetProcAddress, Hint: 393)
u1: CC111100, offsetInFile: 73780, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: DD557777, offsetInFile: 1064, sizeInBytes: 4

Import table for KERNEL32.dll, entry 3 (importTable.KERNEL32.dll.3)

OriginalFirstThunk: (Name: GlobalCompact, Hint: 472)
u1: CC111100, offsetInFile: 73784, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: DD999977, offsetInFile: 1068, sizeInBytes: 4

Import table for KERNEL32.dll, entry 4 (importTable.KERNEL32.dll.4)

OriginalFirstThunk: (Name: GlobalAlloc, Hint: 471)
u1: EE111100, offsetInFile: 73788, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 33667777, offsetInFile: 1072, sizeInBytes: 4

Import table for KERNEL32.dll, entry 5 (importTable.KERNEL32.dll.5)

OriginalFirstThunk: (Name: GlobalFree, Hint: 478)
u1: 00111100, offsetInFile: 73792, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 33887777, offsetInFile: 1076, sizeInBytes: 4

Import table for KERNEL32.dll, entry 6 (importTable.KERNEL32.dll.6)

OriginalFirstThunk: (Name: GlobalReAlloc, Hint: 485)
u1: 00111100, offsetInFile: 73796, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 11336677, offsetInFile: 1080, sizeInBytes: 4

Import table for KERNEL32.dll, entry 7 (importTable.KERNEL32.dll.7)

OriginalFirstThunk: (Name: lstrcmpW, Hint: 915)
u1: 44111100, offsetInFile: 73800, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 00DD7777, offsetInFile: 1084, sizeInBytes: 4

Import table for KERNEL32.dll, entry 8 (importTable.KERNEL32.dll.8)

OriginalFirstThunk: (Name: Sleep, Hint: 809)
u1: CC111100, offsetInFile: 73804, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 66BB6677, offsetInFile: 1088, sizeInBytes: 4

Import table for KERNEL32.dll, entry 9 (importTable.KERNEL32.dll.9)

OriginalFirstThunk: (Name: WriteProfileStringW, Hint: 899)
u1: 66111100, offsetInFile: 73808, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: BBAA7777, offsetInFile: 1092, sizeInBytes: 4

Import table for KERNEL32.dll, entry 10 (importTable.KERNEL32.dll.10)

OriginalFirstThunk: (Name: GetStartupInfoA, Hint: 412)
u1: 22111100, offsetInFile: 73812, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: AA776677, offsetInFile: 1096, sizeInBytes: 4

Import table for KERNEL32.dll, entry 11 (importTable.KERNEL32.dll.11)

OriginalFirstThunk: (Name: GlobalSize, Hint: 486)
u1: AA111100, offsetInFile: 73816, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 99886677, offsetInFile: 1100, sizeInBytes: 4

Import table for KERNEL32.dll, entry 12 (importTable.KERNEL32.dll.12)

OriginalFirstThunk: (Name: GlobalUnlock, Hint: 489)
u1: AA001100, offsetInFile: 73820, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 44BB7777, offsetInFile: 1104, sizeInBytes: 4

Import table for KERNEL32.dll, entry 13 (importTable.KERNEL32.dll.13)

OriginalFirstThunk: (Name: CreateEventW, Hint: 71)
u1: AA001100, offsetInFile: 73824, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 11007777, offsetInFile: 1108, sizeInBytes: 4

Import table for KERNEL32.dll, entry 14 (importTable.KERNEL32.dll.14)

OriginalFirstThunk: (Name: CreateThread, Hint: 101)
u1: AA001100, offsetInFile: 73828, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 77CC7777, offsetInFile: 1112, sizeInBytes: 4

Import table for KERNEL32.dll, entry 15 (importTable.KERNEL32.dll.15)

OriginalFirstThunk: (Name: ResetEvent, Hint: 681)
u1: CC001100, offsetInFile: 73832, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 99AA7777, offsetInFile: 1116, sizeInBytes: 4

Import table for KERNEL32.dll, entry 16 (importTable.KERNEL32.dll.16)

OriginalFirstThunk: (Name: lstrcpynW, Hint: 924)
u1: 00001100, offsetInFile: 73836, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: EE666677, offsetInFile: 1120, sizeInBytes: 4

Import table for KERNEL32.dll, entry 17 (importTable.KERNEL32.dll.17)

OriginalFirstThunk: (Name: SetEvent, Hint: 748)
u1: 44001100, offsetInFile: 73840, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: BBAA7777, offsetInFile: 1124, sizeInBytes: 4

Import table for KERNEL32.dll, entry 18 (importTable.KERNEL32.dll.18)

OriginalFirstThunk: (Name: WaitForSingleObject, Hint: 869)
u1: EE001100, offsetInFile: 73844, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: BBDD7777, offsetInFile: 1128, sizeInBytes: 4

Import table for KERNEL32.dll, entry 19 (importTable.KERNEL32.dll.19)

OriginalFirstThunk: (Name: CloseHandle, Hint: 44)
u1: 00001100, offsetInFile: 73848, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 33997777, offsetInFile: 1132, sizeInBytes: 4

Import table for KERNEL32.dll, entry 20 (importTable.KERNEL32.dll.20)

OriginalFirstThunk: (Name: lstrcatW, Hint: 912)
u1: 44001100, offsetInFile: 73852, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 00667777, offsetInFile: 1136, sizeInBytes: 4

Import table for KERNEL32.dll, entry 21 (importTable.KERNEL32.dll.21)

OriginalFirstThunk: (Name: lstrlenW, Hint: 927)
u1: 88001100, offsetInFile: 73856, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 11EE7777, offsetInFile: 1140, sizeInBytes: 4

Import table for KERNEL32.dll, entry 22 (importTable.KERNEL32.dll.22)

OriginalFirstThunk: (Name: LocalReAlloc, Hint: 571)
u1: 88001100, offsetInFile: 73860, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 88447777, offsetInFile: 1144, sizeInBytes: 4

Import table for KERNEL32.dll, entry 23 (importTable.KERNEL32.dll.23)

OriginalFirstThunk: (Name: LocalFree, Hint: 568)
u1: CC001100, offsetInFile: 73864, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 55AA7777, offsetInFile: 1148, sizeInBytes: 4

Import table for KERNEL32.dll, entry 24 (importTable.KERNEL32.dll.24)

OriginalFirstThunk: (Name: LocalAlloc, Hint: 564)
u1: 88001100, offsetInFile: 73868, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 11887777, offsetInFile: 1152, sizeInBytes: 4

Import table for KERNEL32.dll, entry 25 (importTable.KERNEL32.dll.25)

OriginalFirstThunk: (Name: GetProfileStringW, Hint: 408)
u1: 66001100, offsetInFile: 73872, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 77FF6677, offsetInFile: 1156, sizeInBytes: 4

Import table for KERNEL32.dll, entry 26 (importTable.KERNEL32.dll.26)

OriginalFirstThunk: (Name: GlobalLock, Hint: 482)
u1: 88111100, offsetInFile: 73876, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: FF667777, offsetInFile: 1160, sizeInBytes: 4

Import table for KERNEL32.dll, entry 27 (importTable.KERNEL32.dll.27)

OriginalFirstThunk: (Name: GetCommandLineW, Hint: 254)
u1: AA001100, offsetInFile: 73880, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: BB997777, offsetInFile: 1164, sizeInBytes: 4

Import table for KERNEL32.dll, entry 28 (importTable.KERNEL32.dll.28)

OriginalFirstThunk: (Name: lstrcpyW, Hint: 921)
u1: CC001100, offsetInFile: 73884, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 99667777, offsetInFile: 1168, sizeInBytes: 4

Import table for KERNEL32.dll, entry 29 (importTable.KERNEL32.dll.29)

OriginalFirstThunk: (Name: GetProfileIntW, Hint: 404)
u1: AA001100, offsetInFile: 73888, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 55116677, offsetInFile: 1172, sizeInBytes: 4

Import table for GDI32.dll (importTable.GDI32.dll)

OriginalFirstThunk: 76828 (12c1c), offsetInFile: 73680, sizeInBytes: 4
TimeDateStamp: 4294967295 (ffffffff), offsetInFile: 73684, sizeInBytes: 4
ForwarderChain: 4294967295 (ffffffff), offsetInFile: 73688, sizeInBytes: 4
Name: 78348 (1320c), offsetInFile: 73692, sizeInBytes: 4
FirstThunk: 4112 (1010), offsetInFile: 73696, sizeInBytes: 4
name: GDI32.dll
count: 3 (3)

Import table for GDI32.dll, entry 0 (importTable.GDI32.dll.0)

OriginalFirstThunk: (Name: SetBkColor, Hint: 531)
u1: 22111100, offsetInFile: 73756, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: EEEE7777, offsetInFile: 1040, sizeInBytes: 4

Import table for GDI32.dll, entry 1 (importTable.GDI32.dll.1)

OriginalFirstThunk: (Name: SetTextColor, Hint: 570)
u1: 00111100, offsetInFile: 73760, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 33DD7777, offsetInFile: 1044, sizeInBytes: 4

Import table for GDI32.dll, entry 2 (importTable.GDI32.dll.2)

OriginalFirstThunk: (Name: SetBkMode, Hint: 532)
u1: 00221100, offsetInFile: 73764, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: FFEE7777, offsetInFile: 1048, sizeInBytes: 4

Import table for USER32.dll (importTable.USER32.dll)

OriginalFirstThunk: 76976 (12cb0), offsetInFile: 73700, sizeInBytes: 4
TimeDateStamp: 4294967295 (ffffffff), offsetInFile: 73704, sizeInBytes: 4
ForwarderChain: 4294967295 (ffffffff), offsetInFile: 73708, sizeInBytes: 4
Name: 79524 (136a4), offsetInFile: 73712, sizeInBytes: 4
FirstThunk: 4260 (10a4), offsetInFile: 73716, sizeInBytes: 4
name: USER32.dll
count: 69 (45)

Import table for USER32.dll, entry 0 (importTable.USER32.dll.0)

OriginalFirstThunk: (Name: GetMenu, Hint: 300)
u1: CC331100, offsetInFile: 73904, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 00CC5577, offsetInFile: 1188, sizeInBytes: 4

Import table for USER32.dll, entry 1 (importTable.USER32.dll.1)

OriginalFirstThunk: (Name: SetDlgItemInt, Hint: 594)
u1: 44661100, offsetInFile: 73908, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 77667777, offsetInFile: 1192, sizeInBytes: 4

Import table for USER32.dll, entry 2 (importTable.USER32.dll.2)

OriginalFirstThunk: (Name: GetWindowTextW, Hint: 378)
u1: 22661100, offsetInFile: 73912, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 11334477, offsetInFile: 1196, sizeInBytes: 4

Import table for USER32.dll, entry 3 (importTable.USER32.dll.3)

OriginalFirstThunk: (Name: CheckDlgButton, Hint: 56)
u1: 00661100, offsetInFile: 73916, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: AAFF4477, offsetInFile: 1200, sizeInBytes: 4

Import table for USER32.dll, entry 4 (importTable.USER32.dll.4)

OriginalFirstThunk: (Name: HideCaret, Hint: 383)
u1: 44661100, offsetInFile: 73920, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: FF114477, offsetInFile: 1204, sizeInBytes: 4

Import table for USER32.dll, entry 5 (importTable.USER32.dll.5)

OriginalFirstThunk: (Name: CallWindowProcW, Hint: 28)
u1: 22661100, offsetInFile: 73924, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: FF444477, offsetInFile: 1208, sizeInBytes: 4

Import table for USER32.dll, entry 6 (importTable.USER32.dll.6)

OriginalFirstThunk: (Name: DrawTextW, Hint: 191)
u1: 66661100, offsetInFile: 73928, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 33664477, offsetInFile: 1212, sizeInBytes: 4

Import table for USER32.dll, entry 7 (importTable.USER32.dll.7)

OriginalFirstThunk: (Name: WinHelpW, Hint: 723)
u1: AA661100, offsetInFile: 73932, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 55776677, offsetInFile: 1216, sizeInBytes: 4

Import table for USER32.dll, entry 8 (importTable.USER32.dll.8)

OriginalFirstThunk: (Name: PostQuitMessage, Hint: 513)
u1: 88661100, offsetInFile: 73936, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 66884477, offsetInFile: 1220, sizeInBytes: 4

Import table for USER32.dll, entry 9 (importTable.USER32.dll.9)

OriginalFirstThunk: (Name: GetDlgCtrlID, Hint: 272)
u1: 88661100, offsetInFile: 73940, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 00444477, offsetInFile: 1224, sizeInBytes: 4

Import table for USER32.dll, entry 10 (importTable.USER32.dll.10)

OriginalFirstThunk: (Name: ScreenToClient, Hint: 561)
u1: 66661100, offsetInFile: 73944, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: DD114477, offsetInFile: 1228, sizeInBytes: 4

Import table for USER32.dll, entry 11 (importTable.USER32.dll.11)

OriginalFirstThunk: (Name: ChildWindowFromPoint, Hint: 60)
u1: EE551100, offsetInFile: 73948, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: FFFF7777, offsetInFile: 1232, sizeInBytes: 4

Import table for USER32.dll, entry 12 (importTable.USER32.dll.12)

OriginalFirstThunk: (Name: DefWindowProcW, Hint: 143)
u1: CC551100, offsetInFile: 73952, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: DDAA4477, offsetInFile: 1236, sizeInBytes: 4

Import table for USER32.dll, entry 13 (importTable.USER32.dll.13)

OriginalFirstThunk: (Name: IsClipboardFormatAvailable, Hint: 415)
u1: EE551100, offsetInFile: 73956, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 99225577, offsetInFile: 1240, sizeInBytes: 4

Import table for USER32.dll, entry 14 (importTable.USER32.dll.14)

OriginalFirstThunk: (Name: EnableMenuItem, Hint: 194)
u1: CC551100, offsetInFile: 73960, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 33114477, offsetInFile: 1244, sizeInBytes: 4

Import table for USER32.dll, entry 15 (importTable.USER32.dll.15)

OriginalFirstThunk: (Name: TrackPopupMenuEx, Hint: 677)
u1: 88551100, offsetInFile: 73964, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 66337777, offsetInFile: 1248, sizeInBytes: 4

Import table for USER32.dll, entry 16 (importTable.USER32.dll.16)

OriginalFirstThunk: (Name: GetDesktopWindow, Hint: 270)
u1: 44551100, offsetInFile: 73968, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 22EE4477, offsetInFile: 1252, sizeInBytes: 4

Import table for USER32.dll, entry 17 (importTable.USER32.dll.17)

OriginalFirstThunk: (Name: OpenClipboard, Hint: 499)
u1: 44551100, offsetInFile: 73972, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 00335577, offsetInFile: 1256, sizeInBytes: 4

Import table for USER32.dll, entry 18 (importTable.USER32.dll.18)

OriginalFirstThunk: (Name: GetClipboardData, Hint: 257)
u1: 00551100, offsetInFile: 73976, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: CC335577, offsetInFile: 1260, sizeInBytes: 4

Import table for USER32.dll, entry 19 (importTable.USER32.dll.19)

OriginalFirstThunk: (Name: CharNextA, Hint: 42)
u1: 44551100, offsetInFile: 73980, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: CC224477, offsetInFile: 1264, sizeInBytes: 4

Import table for USER32.dll, entry 20 (importTable.USER32.dll.20)

OriginalFirstThunk: (Name: CloseClipboard, Hint: 66)
u1: 22551100, offsetInFile: 73984, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 33335577, offsetInFile: 1268, sizeInBytes: 4

Import table for USER32.dll, entry 21 (importTable.USER32.dll.21)

OriginalFirstThunk: (Name: GetSysColor, Hint: 346)
u1: 44551100, offsetInFile: 73988, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: AA334477, offsetInFile: 1272, sizeInBytes: 4

Import table for USER32.dll, entry 22 (importTable.USER32.dll.22)

OriginalFirstThunk: (Name: DialogBoxParamW, Hint: 159)
u1: 22551100, offsetInFile: 73992, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: EE995577, offsetInFile: 1276, sizeInBytes: 4

Import table for USER32.dll, entry 23 (importTable.USER32.dll.23)

OriginalFirstThunk: (Name: EndDialog, Hint: 198)
u1: 66551100, offsetInFile: 73996, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: BB554477, offsetInFile: 1280, sizeInBytes: 4

Import table for USER32.dll, entry 24 (importTable.USER32.dll.24)

OriginalFirstThunk: (Name: MessageBeep, Hint: 475)
u1: 88551100, offsetInFile: 74000, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 66AA5577, offsetInFile: 1284, sizeInBytes: 4

Import table for USER32.dll, entry 25 (importTable.USER32.dll.25)

OriginalFirstThunk: (Name: GetSubMenu, Hint: 345)
u1: AA441100, offsetInFile: 74004, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 88004477, offsetInFile: 1288, sizeInBytes: 4

Import table for USER32.dll, entry 26 (importTable.USER32.dll.26)

OriginalFirstThunk: (Name: CheckRadioButton, Hint: 59)
u1: 66441100, offsetInFile: 74008, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: CC116677, offsetInFile: 1292, sizeInBytes: 4

Import table for USER32.dll, entry 27 (importTable.USER32.dll.27)

OriginalFirstThunk: (Name: SetWindowTextW, Hint: 647)
u1: 44441100, offsetInFile: 74012, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 99114477, offsetInFile: 1296, sizeInBytes: 4

Import table for USER32.dll, entry 28 (importTable.USER32.dll.28)

OriginalFirstThunk: (Name: SetFocus, Hint: 598)
u1: 88441100, offsetInFile: 74016, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 77114477, offsetInFile: 1300, sizeInBytes: 4

Import table for USER32.dll, entry 29 (importTable.USER32.dll.29)

OriginalFirstThunk: (Name: SetCursor, Hint: 589)
u1: CC441100, offsetInFile: 74020, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: DD334477, offsetInFile: 1304, sizeInBytes: 4

Import table for USER32.dll, entry 30 (importTable.USER32.dll.30)

OriginalFirstThunk: (Name: CharNextW, Hint: 44)
u1: 66221100, offsetInFile: 74024, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 66224477, offsetInFile: 1308, sizeInBytes: 4

Import table for USER32.dll, entry 31 (importTable.USER32.dll.31)

OriginalFirstThunk: (Name: RegisterClassExW, Hint: 536)
u1: 22221100, offsetInFile: 74028, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 88884477, offsetInFile: 1312, sizeInBytes: 4

Import table for USER32.dll, entry 32 (importTable.USER32.dll.32)

OriginalFirstThunk: (Name: GetSysColorBrush, Hint: 347)
u1: 66221100, offsetInFile: 74032, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 33994477, offsetInFile: 1316, sizeInBytes: 4

Import table for USER32.dll, entry 33 (importTable.USER32.dll.33)

OriginalFirstThunk: (Name: LoadCursorW, Hint: 442)
u1: AA221100, offsetInFile: 74036, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: FF884477, offsetInFile: 1320, sizeInBytes: 4

Import table for USER32.dll, entry 34 (importTable.USER32.dll.34)

OriginalFirstThunk: (Name: LoadIconW, Hint: 444)
u1: 88221100, offsetInFile: 74040, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 44004477, offsetInFile: 1324, sizeInBytes: 4

Import table for USER32.dll, entry 35 (importTable.USER32.dll.35)

OriginalFirstThunk: (Name: InvalidateRect, Hint: 403)
u1: 44221100, offsetInFile: 74044, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: CC994477, offsetInFile: 1328, sizeInBytes: 4

Import table for USER32.dll, entry 36 (importTable.USER32.dll.36)

OriginalFirstThunk: (Name: UpdateWindow, Hint: 699)
u1: 66221100, offsetInFile: 74048, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 66CC4477, offsetInFile: 1332, sizeInBytes: 4

Import table for USER32.dll, entry 37 (importTable.USER32.dll.37)

OriginalFirstThunk: (Name: ShowWindow, Hint: 658)
u1: 66221100, offsetInFile: 74052, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 77DD4477, offsetInFile: 1336, sizeInBytes: 4

Import table for USER32.dll, entry 38 (importTable.USER32.dll.38)

OriginalFirstThunk: (Name: SendMessageW, Hint: 576)
u1: 44221100, offsetInFile: 74056, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 77EE4477, offsetInFile: 1340, sizeInBytes: 4

Import table for USER32.dll, entry 39 (importTable.USER32.dll.39)

OriginalFirstThunk: (Name: SetDlgItemTextW, Hint: 596)
u1: 44221100, offsetInFile: 74060, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: DDEE4477, offsetInFile: 1344, sizeInBytes: 4

Import table for USER32.dll, entry 40 (importTable.USER32.dll.40)

OriginalFirstThunk: (Name: CheckMenuItem, Hint: 57)
u1: 66221100, offsetInFile: 74064, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: CC995577, offsetInFile: 1348, sizeInBytes: 4

Import table for USER32.dll, entry 41 (importTable.USER32.dll.41)

OriginalFirstThunk: (Name: CheckMenuRadioItem, Hint: 58)
u1: 66221100, offsetInFile: 74068, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 00DD6677, offsetInFile: 1352, sizeInBytes: 4

Import table for USER32.dll, entry 42 (importTable.USER32.dll.42)

OriginalFirstThunk: (Name: SetWindowPos, Hint: 643)
u1: CC221100, offsetInFile: 74072, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 55554477, offsetInFile: 1356, sizeInBytes: 4

Import table for USER32.dll, entry 43 (importTable.USER32.dll.43)

OriginalFirstThunk: (Name: OffsetRect, Hint: 498)
u1: CC221100, offsetInFile: 74076, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 55EE4477, offsetInFile: 1360, sizeInBytes: 4

Import table for USER32.dll, entry 44 (importTable.USER32.dll.44)

OriginalFirstThunk: (Name: MapWindowPoints, Hint: 471)
u1: AA221100, offsetInFile: 74080, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 88004477, offsetInFile: 1364, sizeInBytes: 4

Import table for USER32.dll, entry 45 (importTable.USER32.dll.45)

OriginalFirstThunk: (Name: GetClientRect, Hint: 255)
u1: CC331100, offsetInFile: 74084, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 33FF4477, offsetInFile: 1368, sizeInBytes: 4

Import table for USER32.dll, entry 46 (importTable.USER32.dll.46)

OriginalFirstThunk: (Name: EnableWindow, Hint: 196)
u1: CC331100, offsetInFile: 74088, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: DD114477, offsetInFile: 1372, sizeInBytes: 4

Import table for USER32.dll, entry 47 (importTable.USER32.dll.47)

OriginalFirstThunk: (Name: LoadMenuW, Hint: 454)
u1: CC331100, offsetInFile: 74092, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: CC554477, offsetInFile: 1376, sizeInBytes: 4

Import table for USER32.dll, entry 48 (importTable.USER32.dll.48)

OriginalFirstThunk: (Name: SetWindowLongW, Hint: 641)
u1: 88331100, offsetInFile: 74096, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: BB994477, offsetInFile: 1380, sizeInBytes: 4

Import table for USER32.dll, entry 49 (importTable.USER32.dll.49)

OriginalFirstThunk: (Name: GetWindowLongW, Hint: 367)
u1: AA331100, offsetInFile: 74100, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 88114477, offsetInFile: 1384, sizeInBytes: 4

Import table for USER32.dll, entry 50 (importTable.USER32.dll.50)

OriginalFirstThunk: (Name: CreateDialogParamW, Hint: 86)
u1: 66331100, offsetInFile: 74104, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: EEBB5577, offsetInFile: 1388, sizeInBytes: 4

Import table for USER32.dll, entry 51 (importTable.USER32.dll.51)

OriginalFirstThunk: (Name: GetDlgItem, Hint: 273)
u1: CC331100, offsetInFile: 74108, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 88AA4477, offsetInFile: 1392, sizeInBytes: 4

Import table for USER32.dll, entry 52 (importTable.USER32.dll.52)

OriginalFirstThunk: (Name: DestroyMenu, Hint: 151)
u1: AA331100, offsetInFile: 74112, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: DDBB4477, offsetInFile: 1396, sizeInBytes: 4

Import table for USER32.dll, entry 53 (importTable.USER32.dll.53)

OriginalFirstThunk: (Name: DestroyWindow, Hint: 153)
u1: 88331100, offsetInFile: 74116, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 11AA4477, offsetInFile: 1400, sizeInBytes: 4

Import table for USER32.dll, entry 54 (importTable.USER32.dll.54)

OriginalFirstThunk: (Name: SetMenu, Hint: 605)
u1: 88331100, offsetInFile: 74120, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 88335577, offsetInFile: 1404, sizeInBytes: 4

Import table for USER32.dll, entry 55 (importTable.USER32.dll.55)

OriginalFirstThunk: (Name: GetWindowRect, Hint: 372)
u1: 22331100, offsetInFile: 74124, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 44FF4477, offsetInFile: 1408, sizeInBytes: 4

Import table for USER32.dll, entry 56 (importTable.USER32.dll.56)

OriginalFirstThunk: (Name: SystemParametersInfoW, Hint: 666)
u1: 22331100, offsetInFile: 74128, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 99554477, offsetInFile: 1412, sizeInBytes: 4

Import table for USER32.dll, entry 57 (importTable.USER32.dll.57)

OriginalFirstThunk: (Name: DispatchMessageW, Hint: 162)
u1: AA331100, offsetInFile: 74132, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 55DD4477, offsetInFile: 1416, sizeInBytes: 4

Import table for USER32.dll, entry 58 (importTable.USER32.dll.58)

OriginalFirstThunk: (Name: TranslateMessage, Hint: 682)
u1: EE331100, offsetInFile: 74136, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 33DD4477, offsetInFile: 1420, sizeInBytes: 4

Import table for USER32.dll, entry 59 (importTable.USER32.dll.59)

OriginalFirstThunk: (Name: TranslateAcceleratorW, Hint: 680)
u1: 22441100, offsetInFile: 74140, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 44004477, offsetInFile: 1424, sizeInBytes: 4

Import table for USER32.dll, entry 60 (importTable.USER32.dll.60)

OriginalFirstThunk: (Name: IsChild, Hint: 414)
u1: AA441100, offsetInFile: 74144, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: FF884477, offsetInFile: 1428, sizeInBytes: 4

Import table for USER32.dll, entry 61 (importTable.USER32.dll.61)

OriginalFirstThunk: (Name: IsDialogMessageW, Hint: 418)
u1: 44441100, offsetInFile: 74148, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 88554477, offsetInFile: 1432, sizeInBytes: 4

Import table for USER32.dll, entry 62 (importTable.USER32.dll.62)

OriginalFirstThunk: (Name: GetMessageW, Hint: 318)
u1: 88441100, offsetInFile: 74152, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: FF004477, offsetInFile: 1436, sizeInBytes: 4

Import table for USER32.dll, entry 63 (importTable.USER32.dll.63)

OriginalFirstThunk: (Name: LoadAcceleratorsW, Hint: 436)
u1: 66441100, offsetInFile: 74156, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 00DD5577, offsetInFile: 1440, sizeInBytes: 4

Import table for USER32.dll, entry 64 (importTable.USER32.dll.64)

OriginalFirstThunk: (Name: CreateWindowExW, Hint: 97)
u1: AA441100, offsetInFile: 74160, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: CCEE4477, offsetInFile: 1444, sizeInBytes: 4

Import table for USER32.dll, entry 65 (importTable.USER32.dll.65)

OriginalFirstThunk: (Name: MessageBoxW, Hint: 483)
u1: CC441100, offsetInFile: 74164, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 99887777, offsetInFile: 1448, sizeInBytes: 4

Import table for USER32.dll, entry 66 (importTable.USER32.dll.66)

OriginalFirstThunk: (Name: LoadStringW, Hint: 457)
u1: AA441100, offsetInFile: 74168, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: CC114477, offsetInFile: 1452, sizeInBytes: 4

Import table for USER32.dll, entry 67 (importTable.USER32.dll.67)

OriginalFirstThunk: (Name: SetProcessDefaultLayout, Hint: 615)
u1: 88441100, offsetInFile: 74172, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 66338877, offsetInFile: 1456, sizeInBytes: 4

Import table for USER32.dll, entry 68 (importTable.USER32.dll.68)

OriginalFirstThunk: (Name: GetProcessDefaultLayout, Hint: 327)
u1: 22441100, offsetInFile: 74176, sizeInBytes: 4
FirstThunk: (Name: null, Hint: 0, BoundImport: true)
u1: 00EE6677, offsetInFile: 1460, sizeInBytes: 4

Generated with Anywhere PE Viewer (http://www.ucware.com/)