Sample details: afea8821723bb98d71fb7cb4e6493af6 --

Hashes
MD5: afea8821723bb98d71fb7cb4e6493af6
SHA1: 813f554fca4c4f010c98a1df452102681f5fc645
SHA256: 7e75394d2f8f2b1d040bcc0de67a5f9c6a40b746704ac70fc59c4134b3fb0706
SSDEEP: 3072:NFKJvOggZ0VtDFXo+B8oZdefKw9aJKhLpYD/m2s:NFsOWq6YSJSdYDls
Details
File Type: PE32
Added: 2018-02-23 16:56:50
Yara Hits
YRP/Armadillo_v171 | YRP/Microsoft_Visual_Cpp_v60 | YRP/Microsoft_Visual_Cpp_v50v60_MFC_additional | YRP/Microsoft_Visual_Cpp_50 | YRP/Microsoft_Visual_Cpp_v50v60_MFC | YRP/Install_Shield_2000 | YRP/Armadillo_v171_additional | YRP/Armadillo_v4x | YRP/Microsoft_Visual_Cpp | YRP/InstallShield_2000_additional | YRP/IsPE32 | YRP/IsConsole | YRP/HasOverlay | YRP/HasDebugData | YRP/domain | YRP/contentis_base64 | YRP/SEH__v4 | YRP/escalate_priv | YRP/win_registry | YRP/win_token | YRP/win_files_operation |
Parent Files
04f50b7f721e3ae2bee5686a4cb584bd
Source
Strings
		!This program cannot be run in DOS mode.
`.rdata
@.data
.idata
T$(SSSSWQh 
VUWPh 
T$$WSR
L$ RQP
WWURj	S
HSUVWh
WUVQh 
|$$UWQ
L$ PPVQj
D$$RVPj
VRWSUP
D$0PVQh 
D$ _^]
t.;t$$t(
VC20XC00U
+D$ _^][
`h````
ppxxxx
(null)
runtime error 
TLOSS error
SING error
DOMAIN error
- unable to initialize heap
- not enough space for lowio initialization
- not enough space for stdio initialization
- pure virtual function call
- not enough space for _onexit/atexit table
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
- not enough space for thread data
abnormal program termination
- not enough space for environment
- not enough space for arguments
- floating point not loaded
Microsoft Visual C++ Runtime Library
Runtime Error!
Program: 
<program name unknown>
GetLastActivePopup
GetActiveWindow
MessageBoxA
user32.dll
missing pid or task name
type kill /? for help
tlist requires Windows NT or Windows 95
process #%d killed
process #%d could not be killed
*KILL*
process #%d [%s] killed
process #%d [%s] could not be killed
%c is an invalid switch
Microsoft (R) Windows (TM) KILL
Copyright (C) 1994-1996 Microsoft Corp. All rights reserved
usage: KILL [options] <<pid> | <pattern>>
           [options]:
               /?     This help
               /f     Force process kill
           <pid>
              This is the process id for the task
               to be killed.  Use TLIST to get a
               valid pid
           <pattern>
              The pattern can be a complete task
              name or a regular expression pattern
              to use as a match.  Kill matches the
              supplied pattern against the task names
              and the window titles.
KERNEL32.DLL
CreateToolhelp32Snapshot
Process32First
Process32Next
software\microsoft\windows nt\currentversion\perflib
%s\%03x
Counters
Counters
process
id process
unknown
OpenProcessToken failed with %d
SeDebugPrivilege
LookupPrivilegeValue failed with %d
AdjustTokenPrivileges failed with %d
GetCurrentProcessId
GetVersionExA
GetCommandLineA
ExitProcess
CloseHandle
lstrcpyA
lstrlenA
GetProcAddress
GetModuleHandleA
WideCharToMultiByte
GetLastError
GetCurrentProcess
TerminateProcess
OpenProcess
HeapReAlloc
HeapAlloc
HeapFree
GetVersion
GetStringTypeA
GetStringTypeW
MultiByteToWideChar
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetCPInfo
GetACP
GetOEMCP
RtlUnwind
WriteFile
FlushFileBuffers
SetFilePointer
LoadLibraryA
SetStdHandle
KERNEL32.dll
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
ADVAPI32.dll
PostMessageA
EnumWindows
GetWindowTextA
GetWindowThreadProcessId
USER32.dll
kill.exe
common.obj
kill.obj
build\intel\st_obj\tolower.obj
build\intel\st_obj\stricmp.obj
build\intel\st_obj\strupr.obj
build\intel\st_obj\dosmap.obj
build\intel\st_obj\osfinfo.obj
build\intel\st_obj\_freebuf.obj
build\intel\st_obj\close.obj
build\intel\st_obj\crt0fp.obj
build\intel\st_obj\crtmbox.obj
build\intel\st_obj\wcslen.obj
build\intel\st_obj\strncpy.obj
build\intel\st_obj\_getbuf.obj
build\intel\st_obj\lseek.obj
build\intel\st_obj\write.obj
build\intel\st_obj\commit.obj
build\intel\st_obj\crt0init.obj
build\intel\st_obj\fclose.obj
build\intel\st_obj\memmove.obj
build\intel\st_obj\ullrem.obj
build\intel\st_obj\ulldiv.obj
build\intel\st_obj\wctomb.obj
build\intel\st_obj\cmiscdat.obj
build\intel\st_obj\isatty.obj
build\intel\st_obj\crt0msg.obj
build\intel\st_obj\exsup3.obj
build\intel\st_obj\exsup.obj
build\intel\st_obj\mbctype.obj
build\intel\st_obj\aw_env.obj
build\intel\st_obj\stdargv.obj
build\intel\st_obj\stdenvp.obj
build\intel\st_obj\winxfltr.obj
build\intel\st_obj\nlsdata2.obj
build\intel\st_obj\aw_map.obj
build\intel\st_obj\_flsbuf.obj
build\intel\st_obj\llmul.obj
build\intel\st_obj\sbheap.obj
build\intel\st_obj\heapinit.obj
build\intel\st_obj\_newmode.obj
build\intel\st_obj\handler.obj
build\intel\st_obj\fflush.obj
build\intel\st_obj\crt0dat.obj
build\intel\st_obj\closeall.obj
build\intel\st_obj\calloc.obj
build\intel\st_obj\ioinit.obj
build\intel\st_obj\aw_str.obj
build\intel\st_obj\output.obj
build\intel\st_obj\_sftbuf.obj
build\intel\st_obj\crt0.obj
build\intel\st_obj\toupper.obj
build\intel\st_obj\sprintf.obj
build\intel\st_obj\malloc.obj
build\intel\st_obj\memset.obj
build\intel\st_obj\atox.obj
build\intel\st_obj\strlen.obj
build\intel\st_obj\free.obj
build\intel\st_obj\realloc.obj
build\intel\st_obj\_file.obj
build\intel\st_obj\fprintf.obj
build\intel\st_obj\nlsdata1.obj
build\intel\st_obj\isctype.obj
build\intel\st_obj\ctype.obj
build\intel\st_obj\printf.obj
build\intel\st_obj\strcat.obj
build\intel\st_obj\strchr.obj
CV'build\intel\st_obj\oldnames\stricmp.obj
CV&build\intel\st_obj\oldnames\strupr.obj
KERNEL32.dll
KERNEL32.dll
KERNEL32.dll
KERNEL32.dll
KERNEL32.dll
KERNEL32.dll
KERNEL32.dll
KERNEL32.dll
KERNEL32.dll
KERNEL32.dll
KERNEL32.dll
KERNEL32.dll
KERNEL32.dll
KERNEL32.dll
KERNEL32.dll
KERNEL32.dll
KERNEL32.dll
KERNEL32.dll
KERNEL32.dll
KERNEL32.dll
KERNEL32.dll
KERNEL32.dll
KERNEL32.dll
KERNEL32.dll
KERNEL32.dll
KERNEL32.dll
KERNEL32.dll
KERNEL32.dll
KERNEL32.dll
KERNEL32.dll
KERNEL32.dll
KERNEL32.dll
KERNEL32.dll
KERNEL32.dll
KERNEL32.dll
KERNEL32.dll
KERNEL32.dll
KERNEL32.dll
KERNEL32.dll
KERNEL32.dll
KERNEL32.dll
KERNEL32.dll
KERNEL32.dll
KERNEL32.dll
KERNEL32.dll
KERNEL32.dll
KERNEL32.dll
KERNEL32.dll
KERNEL32.dll
ADVAPI32.dll
ADVAPI32.dll
ADVAPI32.dll
ADVAPI32.dll
ADVAPI32.dll
ADVAPI32.dll
ADVAPI32.dll
ADVAPI32.dll
USER32.dll
USER32.dll
USER32.dll
USER32.dll
USER32.dll
USER32.dll
common.obj
<Microsoft (R) 32-bit C/C++ Optimizing Compiler Version 11.00
GetTaskList95
dwNumTasks
hProcessSnap
pCreateToolhelp32Snapshot
hKernel
pProcess32First
dwTaskCount
pProcess32Next
pCurChar
GetTaskListNT
dwNumTasks
dwLimit
szSubKey
pCounterDef
szProcessName
dwSize
pCounter
dwProcessIdCounter
dwProcessIdTitle
dwType
	hKeyNames
EnableDebugPriv95
EnableDebugPrivNT
hToken
DebugValue
KillProcess
fForce
hProcess
GetWindowTitles
EnumWindowsProc
lParam
numTasks
MatchPattern
String
Pattern
common.c
kill.obj
<Microsoft (R) 32-bit C/C++ Optimizing Compiler Version 11.00
verInfo
ThisPid
GetTaskList
numTasks
EnableDebugPriv
GetCommandLineArgs
lpstrCmd
kill.c
KERNEL32.dll
Microsoft LINK 3.10.6142 (NT)
KERNEL32.dll
Microsoft LINK 3.10.6142 (NT)
KERNEL32.dll
Microsoft LINK 3.10.6142 (NT)
KERNEL32.dll
Microsoft LINK 3.10.6142 (NT)
SetStdHandle
KERNEL32.dll
Microsoft LINK 3.10.6142 (NT)
LoadLibraryA
KERNEL32.dll
Microsoft LINK 3.10.6142 (NT)
SetFilePointer
KERNEL32.dll
Microsoft LINK 3.10.6142 (NT)
FlushFileBuffers
KERNEL32.dll
Microsoft LINK 3.10.6142 (NT)
	WriteFile
KERNEL32.dll
Microsoft LINK 3.10.6142 (NT)
	RtlUnwind
KERNEL32.dll
Microsoft LINK 3.10.6142 (NT)
GetOEMCP
KERNEL32.dll
Microsoft LINK 3.10.6142 (NT)
GetACP
KERNEL32.dll
Microsoft LINK 3.10.6142 (NT)
	GetCPInfo
KERNEL32.dll
Microsoft LINK 3.10.6142 (NT)
GetEnvironmentStringsW
KERNEL32.dll
Microsoft LINK 3.10.6142 (NT)
GetEnvironmentStrings
KERNEL32.dll
Microsoft LINK 3.10.6142 (NT)
FreeEnvironmentStringsW
KERNEL32.dll
Microsoft LINK 3.10.6142 (NT)
FreeEnvironmentStringsA
KERNEL32.dll
Microsoft LINK 3.10.6142 (NT)
GetModuleFileNameA
KERNEL32.dll
Microsoft LINK 3.10.6142 (NT)
UnhandledExceptionFilter
KERNEL32.dll
Microsoft LINK 3.10.6142 (NT)
LCMapStringW
KERNEL32.dll
Microsoft LINK 3.10.6142 (NT)
LCMapStringA
KERNEL32.dll
Microsoft LINK 3.10.6142 (NT)
VirtualAlloc
KERNEL32.dll
Microsoft LINK 3.10.6142 (NT)
VirtualFree
KERNEL32.dll
Microsoft LINK 3.10.6142 (NT)
HeapCreate
KERNEL32.dll
Microsoft LINK 3.10.6142 (NT)
HeapDestroy
KERNEL32.dll
Microsoft LINK 3.10.6142 (NT)
GetStartupInfoA
KERNEL32.dll
Microsoft LINK 3.10.6142 (NT)
GetFileType
KERNEL32.dll
Microsoft LINK 3.10.6142 (NT)
GetStdHandle
KERNEL32.dll
Microsoft LINK 3.10.6142 (NT)
SetHandleCount
KERNEL32.dll
Microsoft LINK 3.10.6142 (NT)
MultiByteToWideChar
KERNEL32.dll
Microsoft LINK 3.10.6142 (NT)
GetStringTypeW
KERNEL32.dll
Microsoft LINK 3.10.6142 (NT)
GetStringTypeA
KERNEL32.dll
Microsoft LINK 3.10.6142 (NT)
GetVersion
KERNEL32.dll
Microsoft LINK 3.10.6142 (NT)
HeapFree
KERNEL32.dll
Microsoft LINK 3.10.6142 (NT)
	HeapAlloc
KERNEL32.dll
Microsoft LINK 3.10.6142 (NT)
HeapReAlloc
KERNEL32.dll
Microsoft LINK 3.10.6142 (NT)
OpenProcess
KERNEL32.dll
Microsoft LINK 3.10.6142 (NT)
TerminateProcess
KERNEL32.dll
Microsoft LINK 3.10.6142 (NT)
GetCurrentProcess
KERNEL32.dll
Microsoft LINK 3.10.6142 (NT)
GetLastError
KERNEL32.dll
Microsoft LINK 3.10.6142 (NT)
WideCharToMultiByte
KERNEL32.dll
Microsoft LINK 3.10.6142 (NT)
GetModuleHandleA
KERNEL32.dll
Microsoft LINK 3.10.6142 (NT)
GetProcAddress
KERNEL32.dll
Microsoft LINK 3.10.6142 (NT)
lstrlenA
KERNEL32.dll
Microsoft LINK 3.10.6142 (NT)
lstrcpyA
KERNEL32.dll
Microsoft LINK 3.10.6142 (NT)
CloseHandle
KERNEL32.dll
Microsoft LINK 3.10.6142 (NT)
ExitProcess
KERNEL32.dll
Microsoft LINK 3.10.6142 (NT)
GetCommandLineA
KERNEL32.dll
Microsoft LINK 3.10.6142 (NT)
GetVersionExA
KERNEL32.dll
Microsoft LINK 3.10.6142 (NT)
GetCurrentProcessId
ADVAPI32.dll
Microsoft LINK 3.10.6142 (NT)
ADVAPI32.dll
Microsoft LINK 3.10.6142 (NT)
ADVAPI32.dll
Microsoft LINK 3.10.6142 (NT)
OpenProcessToken
ADVAPI32.dll
Microsoft LINK 3.10.6142 (NT)
LookupPrivilegeValueA
ADVAPI32.dll
Microsoft LINK 3.10.6142 (NT)
AdjustTokenPrivileges
ADVAPI32.dll
Microsoft LINK 3.10.6142 (NT)
RegOpenKeyExA
ADVAPI32.dll
Microsoft LINK 3.10.6142 (NT)
RegQueryValueExA
ADVAPI32.dll
Microsoft LINK 3.10.6142 (NT)
RegCloseKey
USER32.dll
Microsoft LINK 3.10.6142 (NT)
USER32.dll
Microsoft LINK 3.10.6142 (NT)
USER32.dll
Microsoft LINK 3.10.6142 (NT)
GetWindowThreadProcessId
USER32.dll
Microsoft LINK 3.10.6142 (NT)
GetWindowTextA
USER32.dll
Microsoft LINK 3.10.6142 (NT)
EnumWindows
USER32.dll
Microsoft LINK 3.10.6142 (NT)
PostMessageA
_HeapFree@12
___wnullstring
___decimal_point_length
__imp__PostMessageA@16
__C_Exit_Done
__get_osfhandle
_WideCharToMultiByte@32
_HeapReAlloc@16
__imp__VirtualFree@12.
__imp__LookupPrivilegeValueA@12
__XcptFilter
__imp__GetACP@0
__imp__GetWindowTextA@12
__flush
_fflush
__lseek
_strupr
2??_C@_0BH@NNCD@?$DMprogram?5name?5unknown?$DO?$AA@
_EnumWindowsProc@8
_HeapDestroy@4
!__imp__UnhandledExceptionFilter@4
___crtMessageBoxA
_PostMessageA@16
__XcptActTab
__imp__GetVersionExA@4
__C_Termination_Done
__NLG_Destination
___sbh_find_block
_HeapCreate@12
__free_osfhnd"
__imp__GetLastError@0"
?_pnhHeap@@3P6AHI@ZA
_GetStartupInfoA@4
__heap_alloc
___xt_a
___xt_z
___badioinfo
__IMPORT_DESCRIPTOR_ADVAPI32
___sbh_alloc_block_from_page
__amblksiz
_GetCPInfo@8
__alloc_osfhnd
__amsg_exit
__imp__GetStdHandle@4.
__imp__GetEnvironmentStringsW@0
___lookuptable
__NMSG_WRITE
_HeapAlloc@12&
__abnormal_termination
:??_C@_0DF@CKIP@R6024?$AN?6?9?5not?5enough?5space?5for?5_o@
__imp__FlushFileBuffers@4
_Usage
__get_sbh_threshold
__imp__VirtualAlloc@16
__set_sbh_threshold
__XcptActTabCount&
??_C@_02JJJH@?6?6?$AA@
__imp__RegOpenKeyExA@20
__open_osfhandle
#??_C@_0P@GGKG@runtime?5error?5?$AA@
_AdjustTokenPrivileges@24
___app_type
__global_unwind2
_CloseHandle@4
___lc_handle
_RtlUnwind@16
	__strcmpi
_RegCloseKey@4
_RegQueryValueExA@24
__imp__ExitProcess@4
8??_C@_0CN@FPEG@R6017?$AN?6?9?5unexpected?5multithread?5@
__imp__GetCurrentProcessId@0
___nullstring
_VirtualAlloc@16
__osver
__bufin
??_C@_0L@HKL@user32?4dll?$AA@F
9??_C@_0CF@LKPB@R6002?$AN?6?9?5floating?5point?5not?5load@"
_SetFilePointer@16
_WriteFile@20
	__environF
9??_C@_0CF@EANP@R6028?$AN?6?9?5unable?5to?5initialize?5he@&
USER32_NULL_THUNK_DATA
__set_osfhnd
__imp__LoadLibraryA@4.
??_C@_0M@PKCK@MessageBoxA?$AA@
_GetCurrentProcessId@0
_LoadLibraryA@4
_GetCurrentProcess@0
__doserrno
__wenviron
__winmajor
__winminor
__NLG_Return2
___lc_codepage
_ExitProcess@4
__except_handler3
_VirtualFree@12
___decimal_point
__imp__GetModuleFileNameA@12
_GetCommandLineA@0
__heap_init
___mbulinfo
;??_C@_1O@POHA@?$AA?$CI?$AAn?$AAu?$AAl?$AAl?$AA?$CJ?$AA?$AA@
__imp__GetEnvironmentStrings@0
___initenv
__NLG_Dispatch
___xp_a
___xp_z
_TerminateProcess@8
__flushall
__pxcptinfoptrs
_GetFileType@4
??_C@_01A@?$AA?$AA@
:??_C@_0CJ@GGOE@R6019?$AN?6?9?5unable?5to?5open?5console?5@
	__aullrem
__nh_malloc
__NLG_Notify
___error_mode
_memset
_tlist
_strchr
_strcat
_strcpy
___xc_a
___xc_z
___onexitbegin
__imp__GetCommandLineA@0
	__nstream
_GetStdHandle@4
_SetStdHandle@8
??_C@_02PIMC@?$AN?6?$AA@
_GetCommandLineArgs
_LookupPrivilegeValueA@12
__GET_RTERRMSG
__imp__GetVersion@0
_ForceKill
_GetVersion@0J
:??_C@_0CM@JOOB@R6009?$AN?6?9?5not?5enough?5space?5for?5en@
___mbcodepage
__imp__lstrcpyA@8
__NLG_Notify1&
___from_strstr_to_strchr
___argc
___argv
__ftbuf
__stbuf
	__toupper*
__IMPORT_DESCRIPTOR_USER32
__imp__HeapAlloc@12
_GetEnvironmentStringsW@0&
__imp__LCMapStringA@24
__imp__LCMapStringW@24
_GetEnvironmentStrings@0
___sbh_resize_block
___crtLCMapStringA
___crtLCMapStringW
__imp__EnumWindows@8
:??_C@_0CB@HPAL@?$AN?6abnormal?5program?5termination?$AN?6@
__imp__GetOEMCP@0"
__imp__HeapFree@12
_GetModuleHandleA@4
___sbh_new_region
__aexit_rtn
_UnhandledExceptionFilter@4
_pname
__imp__GetCPInfo@8
__imp__RegCloseKey@4
__imp__GetStartupInfoA@4
	__wpgmptr"
__imp__HeapDestroy@4
__IMPORT_DESCRIPTOR_KERNEL32
__imp__RtlUnwind@16
___crtGetStringTypeW
___crtGetStringTypeA
%??_C@_0O@DELO@TLOSS?5error?$AN?6?$AA@2
%?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
	__tolower"
_GetStringTypeA@20
	__aenvptr
	__wenvptrJ
:??_C@_0DF@FKAC@R6026?$AN?6?9?5not?5enough?5space?5for?5st@
5??_C@_0BK@DEOK@Runtime?5Error?$CB?6?6Program?3?5?$AA@"
___small_block_heap
_malloc
_calloc
_strlen
_wcslen
	__setenvp
	__getmbcp
	__setmbcp
__getbuf
_FreeEnvironmentStringsA@4
_FreeEnvironmentStringsW@4
__pctype
__FF_MSGBANNER
__ioterm
_GetWindowTitles
__output
__fptrap
	__crtheap
___sbh_free_block
_toupper
__umaskval
	__stricmp
__strupr
__imp__MultiByteToWideChar@24
__flsbuf
__imp__SetStdHandle@8
__fcloseall
_GetStringTypeW@16
__imp__lstrlenA@4J
:??_C@_0DF@ECGN@R6027?$AN?6?9?5not?5enough?5space?5for?5lo@
___sbh_release_region
__exitflag
___sbh_threshold
___crtGetEnvironmentStringsW
___crtGetEnvironmentStringsA
_FlushFileBuffers@4
_fclose
__close
_wctomb
__c_exit
__stdbuf
!__imp__GetWindowThreadProcessId@8.
??_C@_06ONKE@?$CInull?$CJ?$AA@
	_GetACP@0
___wargv
__isatty
_EnableDebugPrivNT
_lstrlenA@4
_lstrcpyA@8
__cflush
_realloc
__allmul
__imp__RegQueryValueExA@24
__pgmptr
_MultiByteToWideChar@24
__seh_longjmp_unwind@4
__acmdln
_memmove
__commit
_GetOEMCP@0
___mb_cur_max
__atoi64
__winver
_strncpy
_tolower
__imp__OpenProcess@12"
_GetWindowTextA@12
__FPinit
_fprintf
_sprintf
_stricmp
_GetTaskListNT
__ioinit
_printf
__cinit
_mainCRTStartup
_errno
__NULL_IMPORT_DESCRIPTOR
	__setargv.
 __imp__FreeEnvironmentStringsA@4
 __imp__FreeEnvironmentStringsW@4
#??_C@_0BA@GILI@GetActiveWindow?$AA@
_GetModuleFileNameA@12
_EnableDebugPriv95
_EnumWindows@8
ADVAPI32_NULL_THUNK_DATA
	__adbgmsg
__callnewh
__imp__AdjustTokenPrivileges@24
:??_C@_0CM@OBIC@R6016?$AN?6?9?5not?5enough?5space?5for?5th@
_KillProcess
_GetTaskList95
__imp__GetStringTypeA@20
__ctype
__exit
___xi_a
___xi_z
__write
___piob
___initmbctable
__local_unwind2
	__freebuf
_SetHandleCount@4&
KERNEL32_NULL_THUNK_DATA
_MatchPattern6
&??_C@_0P@OJAK@DOMAIN?5error?$AN?6?$AA@
&??_C@_0BD@NJFP@GetLastActivePopup?$AA@
_RegOpenKeyExA@20*
__imp__WideCharToMultiByte@32
_GetProcAddress@8*
__imp__GetCurrentProcess@0
__imp__SetFilePointer@16
:??_C@_0CF@JPDF@Microsoft?5Visual?5C?$CL?$CL?5Runtime?5Lib@
	__aulldiv*
_GetWindowThreadProcessId@8
__imp__TerminateProcess@8&
__imp__SetHandleCount@4
___sbh_heap_checkJ
:??_C@_0CK@OIBL@R6008?$AN?6?9?5not?5enough?5space?5for?5ar@
_GetVersionExA@4
9??_C@_0CG@DPMN@R6025?$AN?6?9?5pure?5virtual?5function?5c@&
__imp__GetStringTypeW@16
___pioinfo
$??_C@_0N@OMLL@SING?5error?$AN?6?$AA@
__cexit
___sbh_alloc_block
	__fpecode"
__imp__GetFileType@4
<??_C@_0CB@LBOB@R6018?$AN?6?9?5unexpected?5heap?5error?$AN?6@
__imp__WriteFile@20
___sbh_decommit_pages
_OpenProcess@12
??_C@_13A@?$AA?$AA?$AA?$AA@
__imp__OpenProcessToken@12
_LCMapStringA@24
__heap_term
__imp__HeapReAlloc@16
	__nhandle
	__pwctype
	__isctype
	__mbctype
__First_FPE_Indx
 ?_query_new_handler@@YAP6AHI@ZXZ
	__Num_FPE
___winitenv
__imp__GetProcAddress@8
__imp__HeapCreate@12
??_C@_03NAME@?4?4?4?$AA@
__imp__CloseHandle@4
_LCMapStringW@24
	__newmode&
__imp__GetModuleHandleA@4
_GetLastError@0
	___mblcid
__cfltcvt_tab
__dosmaperr
___initstdio
___endstdio
_OpenProcessToken@12
___onexitend
B{*;h&
v*:+<"
2S8I4	
tagPROCESSENTRY32
SOCKET
PROPENUMPROCEXA
PROPENUMPROCEXW
LPOVERLAPPED_COMPLETION_ROUTINE
WSABUF
ENUMRESLANGPROC
ENUMRESNAMEPROC
TOKEN_TYPE
tagPOINT
ACL_INFORMATION_CLASS
LPGetTaskList
LPBSTR
LPCSTR
LPBYTE
LPWSTR
"LPWSAOVERLAPPED_COMPLETION_ROUTINE
PQUERYHANDLER
TYPEKIND
_iobuf
DESCKIND
 USER_MARSHAL_MARSHALLING_ROUTINE
DLGTEMPLATE
PHANDLE
WSAESETSERVICEOP
LPPROCESSENTRY32
ENUMRESTYPEPROC
BOOLEAN
boolean
tagENHMETARECORD
PHANDLER_ROUTINE
DRAWSTATEPROC
HACCEL
HMODULE
HRESULT
HMIXER
HWAVEIN
RPC_CLIENT_ALLOC@4
WNDENUMPROC
LRESULT
	HMIDISTRM
tagMETARECORD
DATEFMT_ENUMPROCA
VARIANT_BOOL
TIMEFMT_ENUMPROCA
PSECURITY_DESCRIPTOR
GET_FILEEX_INFO_LEVELS
FONTENUMPROCW
SECURITY_DESCRIPTOR_CONTROL
SENDASYNCPROC
PROPENUMPROCW
RPC_AUTH_KEY_RETRIEVAL_FN
HCRYPTPROV
wctype_t
	SC_HANDLE
	TIMERPROC
RPC_STATUS
RPC_BUFPTR
I_RPC_HANDLE
MENUTEMPLATEW
ARRAY_INFO
POSVERSIONINFOA
_OSVERSIONINFOA
FUNCKIND
SECURITY_INFORMATION
IRpcChannelBufferVtbl
_SYSTEMTIME"
LPSERVICE_MAIN_FUNCTIONW
LPSERVICE_MAIN_FUNCTIONA
TIMECALLBACK@20
REGISTERWORDENUMPROCA
WAVECALLBACK@20
PFORMAT_STRING
DRVCALLBACK@20
_PERF_COUNTER_DEFINITION
_FULL_PTR_XLAT_TABLES
_LARGE_INTEGER
FINDEX_SEARCH_OPS
INVOKEKIND
MIDICALLBACK@20
NDR_CCONTEXT
NDR_SCONTEXT
PFLOAT
PUCHAR
FONTENUMPROCA
SECURITY_IMPERSONATION_LEVEL
PPERF_INSTANCE_DEFINITION
_PERF_INSTANCE_DEFINITION
REGSAM
PAPCFUNC
COMM_FAULT_OFFSETS
PROPENUMPROCA
u_char
HMETAFILEPICT
	HCRYPTKEY
FXPT2DOT30
DESKTOPENUMPROCA
DESKTOPENUMPROCW
WPARAM
RPC_CLIENT_FREE@4
NDR_RUNDOWN
RPC_EP_INQ_HANDLE
NDR_PIPE_ALLOC_RTN
MENUTEMPLATEA
LCTYPE
RPC_SS_THREAD_HANDLE
GOBJENUMPROC
PROCESSWALK
LPOVERLAPPED
REGISTERWORDENUMPROCW
PTASK_LIST_ENUM
_TASK_LIST_ENUM
ENHMFENUMPROC
PFNCALLBACK
RPC_AUTHZ_HANDLE
ACCESS_MASK
HLOCAL
__GENERIC_BINDING_INFO
RPC_FORWARD_FUNCTION@20
PFNPROPSHEETCALLBACK
RPC_DISPATCH_FUNCTION
GENERIC_BINDING_ROUTINE_PAIR
	TASK_LIST
LPARAM
EDITWORDBREAKPROCA
LUID_AND_ATTRIBUTES_ARRAY
PROPSHEETPAGEW
	HMIXEROBJ
EXCEPTION_DISPOSITION
CLIPFORMAT
	ULONGLONG
FINDEX_INFO_LEVELS
	LPHWAVEIN
DLGPROC
	GUARANTEE
	MMVERSION
FARPROC
COLORREF
_USER_MARSHAL_ROUTINE_QUADRUPLE
LARGE_INTEGER
HGLOBAL
PROCESSENTRY32
LPTOP_LEVEL_EXCEPTION_FILTER
LPWORD
_PERF_DATA_BLOCK
	LPHMIDIIN
tagRPCOLEMESSAGE
LPSETUPHOOKPROC
PDWORD
PMIDL_STUB_MESSAGE
_MIDL_STUB_MESSAGE
	ABORTPROC
	DWORDLONG
MFENUMPROC
USHORT
FOURCC
val_context
wchar_t
WNDPROC
CALLCONV
HWINSTA
HBRUSH
HCURSOR
RPC_MESSAGE&
SECURITY_CONTEXT_TRACKING_MODE
PRPC_SYNTAX_IDENTIFIER
_RPC_SYNTAX_IDENTIFIER
LPCLSID
LPCWSTR
LPMMIOPROC
_PROPSHEETPAGEA
_PROPSHEETPAGEW
DATEFMT_ENUMPROCW
TIMEFMT_ENUMPROCW
_WSABUF"
RPC_MGMT_AUTHORIZATION_FN
	HINSTANCE
_GENERIC_BINDING_ROUTINE_PAIR
LPOLESTR
RPC_IF_CALLBACK_FN
QUERYHANDLER
DOUBLE
_MIDL_STUB_DESC
LPWSABUF
MMIOPROC@16
MCIERROR
LPFRHOOKPROC
MMRESULT
LONGLONG
HANDLE
PFIBER_START_ROUTINE
	XLAT_SIDE
PSECURITY_INFORMATION
LPHANDLE
STUB_THUNK
LPPAGEPAINTHOOK
PEXCEPTION_RECORD
_EXCEPTION_RECORD
LPHMIXER
_TASK_LIST
_FULL_PTR_TO_REFID_ELEMENT
	OLERENDER
LPPAGESETUPHOOK
MEMBERID
LPCFHOOKPROC
	HCONVLIST
CHANGEKIND
	_flowspec
	HMETAFILE
I_RPC_MUTEX
_EXCEPTION_POINTERS
LPCCHOOKPROC
HBITMAP
CODEPAGE_ENUMPROCA
CODEPAGE_ENUMPROCW
PPERF_COUNTER_BLOCK
_PERF_COUNTER_BLOCK
LCSGAMUTMATCH
LINEDDAPROC
SYSTEMTIME
LPFIBER_START_ROUTINE
_CONTEXT
PACCESS_TOKEN
size_t
SC_LOCK
PARRAY_INFO*
"USER_MARSHAL_UNMARSHALLING_ROUTINE
u_short
PSID_NAME_USE
_OVERLAPPED
wint_t
TOKEN_INFORMATION_CLASS
	LPCOLESTR
LPPRINTHOOKPROC
GENERIC_BINDING_ROUTINE
RPC_NS_HANDLE
SERVER_ROUTINE
LPUINT
LPLONG
LPMENUTEMPLATEA
RPC_BINDING_HANDLE
PTHREAD_START_ROUTINE
WINSTAENUMPROCA
WINSTAENUMPROCW
FLOATING_SAVE_AREA
CREATESNAPSHOT
u_long
USER_MARSHAL_FREEING_ROUTINE
fpos_t
SERVICE_STATUS_HANDLE
HGDIOBJ
_FLOATING_SAVE_AREA
GENERIC_UNBIND_ROUTINE
_QualityOfService
TASK_LIST_ENUM
RPC_AUTH_IDENTITY_HANDLE
LPBOOL
LPCVOID
LPDWORD
EXCEPTION_RECORD
_TOKEN_PRIVILEGES
LPOSVERSIONINFOA
CALINFO_ENUMPROCW
HDDEDATA
HWAVEOUT
PROPID
MCIDEVICEID
WSAECOMPARATOR
HPALETTE
REGKIND
LPEnableDebugPriv
SYSKIND
LPCONDITIONPROC
LPFNADDPROPSHEETPAGE
va_list
VARKIND
VARTYPE
	LCSCSTYPE
handle_t
HOLEMENU
MSGBOXCALLBACK
	EXPR_EVAL
	LPCONTEXT
LPHANDLER_FUNCTION
_PERF_OBJECT_TYPE
HMIDIOUT
LPHMIDISTRM
OLECHAR
_pctype
XMIT_HELPER_ROUTINE
HREFTYPE
ALG_ID
CALTYPE
GRAYSTRINGPROC
LPHWAVEOUT
DISPID
PGENERIC_BINDING_INFO
HOOKPROC
PIMAGE_TLS_CALLBACK
TOKEN_PRIVILEGES
HMIDIIN
tagHANDLETABLE
LPOFNHOOKPROC
HENHMETAFILE
RPC_IF_HANDLE
LPTHREAD_START_ROUTINE
HCOLORSPACE
LPVOID
LANGID
LPPOINT"
USER_MARSHAL_SIZING_ROUTINE
LPHMIDIOUT
CALINFO_ENUMPROCA
RPCOLEDATAREP
_COMM_FAULT_OFFSETS
OSVERSIONINFOA
	YIELDPROC
WIN_TRUST_SUBJECT
LPTIMECALLBACK
	ForceKill
tagHELPINFO
RPC_VERSION
PRPC_MESSAGE
_RPC_MESSAGE
_RPC_VERSION
PTIMERAPCROUTINE
HCRYPTHASH
PSECURITY_DESCRIPTOR_CONTROL
LOCALE_ENUMPROCA
LOCALE_ENUMPROCW
LUID_AND_ATTRIBUTES
__mb_cur_max
NDR_PIPE_PULL_RTN
IRpcChannelBuffer
_XMIT_ROUTINE_QUINTUPLE
	_onexit_t
NDR_PIPE_PUSH_RTN
PTOP_LEVEL_EXCEPTION_FILTER
_MALLOC_FREE_STRUCT
ICMENUMPROCA
ICMENUMPROCW
LPFNPSPCALLBACKW
LPFNPSPCALLBACKA
PRPC_RUNDOWN
_LUID_AND_ATTRIBUTES
RPC_OBJECT_INQ_FN@12
	OLEUPDATE
LPPROGRESS_ROUTINE
FILEOP_FLAGS
:N;84%
*c:\program files\devstudio\vc\lib\libc.lib.c:\program files\devstudio\vc\lib\oldnames.lib.c:\program files\devstudio\vc\lib\kernel32.lib,c:\program files\devstudio\vc\lib\ws2_32.lib-c:\program files\devstudio\vc\lib\mswsock.lib.c:\program files\devstudio\vc\lib\advapi32.lib,c:\program files\devstudio\vc\lib\user32.lib
dwProcessId
dwInheritedFromProcessId
ProcessName
WindowTitle
_TASK_LIST
dwSize
cntUsage
th32ProcessID
th32DefaultHeapID
th32ModuleID
cntThreads
th32ParentProcessID
pcPriClassBase
dwFlags
	szExeFile&
tagPROCESSENTRY32
wMonth
wDayOfWeek
wMinute
wSecond
wMilliseconds"
_SYSTEMTIME
LowPart
HighPart
	__unnamedJ
LowPart
HighPart
QuadPart
_LARGE_INTEGER
	Signature
LittleEndian
Version
Revision
TotalByteLength
HeaderLength
NumObjectTypes
DefaultObject
SystemTime
PerfTime
PerfFreq
PerfTime100nSec
SystemNameLength
SystemNameOffset
_PERF_DATA_BLOCK
ByteLength
CounterNameTitleIndex
CounterNameTitle
CounterHelpTitleIndex
CounterHelpTitle
DefaultScale
DetailLevel
CounterType
CounterSize
CounterOffset.
_PERF_COUNTER_DEFINITION
ByteLength
_PERF_COUNTER_BLOCK
TotalByteLength
DefinitionLength
HeaderLength
ObjectNameTitleIndex
ObjectNameTitle
ObjectHelpTitleIndex
ObjectHelpTitle
DetailLevel
NumCounters
DefaultCounter
NumInstances
CodePage
PerfTime
PerfFreq
_PERF_OBJECT_TYPE
ByteLength
ParentObjectTitleIndex
ParentObjectInstance
UniqueID
NameOffset
NameLength
_PERF_INSTANCE_DEFINITION
_LUID*
Attributes
_LUID_AND_ATTRIBUTES
PrivilegeCount
Privileges
_TOKEN_PRIVILEGES
numtasks
_TASK_LIST_ENUM
	reserved1
dataRepresentation
Buffer
cbBuffer
iMethod
	reserved2
rpcFlags
tagRPCOLEMESSAGE
IRpcChannelBufferVtbl
QueryInterface
AddRef
Release
	GetBuffer
SendReceive
FreeBuffer
GetDestCtx
IsConnected
IRpcChannelBuffer
lpVtbl
_FULL_PTR_TO_REFID_ELEMENT
Pointer
CommOffset
FaultOffset
_COMM_FAULT_OFFSETS
pfnBind
	pfnUnbind2
_GENERIC_BINDING_ROUTINE_PAIR
ControlWord
StatusWord
TagWord
ErrorOffset
ErrorSelector
DataOffset
DataSelector
RegisterArea
Cr0NpxState
_FLOATING_SAVE_AREA
pfnBind
	pfnUnbind.
__GENERIC_BINDING_INFO
_EXCEPTION_RECORD
ExceptionCode
ExceptionFlags
ExceptionRecord
ExceptionAddress
NumberParameters
ExceptionInformation
MajorVersion
MinorVersion
_RPC_VERSION
SyntaxGUID
SyntaxVersion.
_RPC_SYNTAX_IDENTIFIER
Handle
DataRepresentation
Buffer
BufferLength
ProcNum
TransferSyntax
RpcInterfaceInformation
ReservedForRuntime
ManagerEpv
ImportContext
RpcFlags
_RPC_MESSAGE
pAutoHandle
pPrimitiveHandle
pGenericBindingInfo
	__unnamed
pfnAllocate
pfnFree
_MALLOC_FREE_STRUCT
pfnBufferSize
pfnMarshall
pfnUnmarshall
pfnFree
_USER_MARSHAL_ROUTINE_QUADRUPLE
	XlatTable
StateTable
NumberOfEntries
	__unnamed
	XlatTable
NumberOfBuckets
HashMask
	__unnamedb
RefIdToPointer
PointerToRefId
	NextRefId
XlatSide
_FULL_PTR_XLAT_TABLES
userContext
	__unnamed
	Dimension
BufferConformanceMark
BufferVarianceMark
MaxCountArray
OffsetArray
ActualCountArray
ARRAY_INFO
_NDR_PIPE_DESC
_XMIT_ROUTINE_QUINTUPLE
pfnTranslateToXmit
pfnTranslateFromXmit
pfnFreeXmit
pfnFreeInst
_MIDL_STUB_MESSAGE
RpcMsg
Buffer
BufferStart
	BufferEnd
BufferMark
BufferLength
MemorySize
Memory
IsClient
ReuseBuffer
AllocAllNodesMemory
AllocAllNodesMemoryEnd
IgnoreEmbeddedPointers
PointerBufferMark
fBufferValid
Unused
MaxCount
Offset
ActualCount
pfnAllocate
pfnFree
StackTop
pPresentedType
pTransmitType
SavedHandle
StubDesc
FullPtrXlatTables
FullPtrRefId
fCheckBounds
fInDontFree
fDontCallFreeInst
fInOnlyParam
fHasReturn
dwDestContext
pvDestContext
SavedContextHandles
ParamNumber
pRpcChannelBuffer
pArrayInfo
SizePtrCountArray
SizePtrOffsetArray
SizePtrLengthArray
	pArgQueue
dwStubPhase
	pPipeDesc
Reserved
_MIDL_STUB_DESC
RpcInterfaceInformation
pfnAllocate
pfnFree
IMPLICIT_HANDLE_INFO
apfnNdrRundownRoutines
aGenericBindingRoutinePairs
apfnExprEval
aXmitQuintuple
pFormatTypes
fCheckBounds
Version
pMallocFreeStruct
MIDLVersion
CommFaultOffsets
aUserMarshalQuadruple
	Reserved1
	Reserved2
	Reserved3
	Reserved4
	Reserved5
ContextFlags
	FloatSave
EFlags
_CONTEXT
tagPOINT
ExceptionRecord
ContextRecord*
_EXCEPTION_POINTERS
Internal
InternalHigh
Offset
OffsetHigh
hEvent
_OVERLAPPED
dwExtendedStyle
DLGTEMPLATE
rdSize
rdFunction
rdParm
tagMETARECORDF
valuelen
value_context
val_buff_ptr
val_context
_PROPSHEETPAGEW
dwSize
dwFlags
	hInstance
pszTemplate
	pResource
pszIcon
pszTitle
pfnDlgProc
lParam
pfnCallback
pcRefParent
_PROPSHEETPAGEA
dwSize
dwFlags
	hInstance
pszTemplate
	pResource
pszIcon
pszTitle
pfnDlgProc
lParam
pfnCallback
pcRefParent
cbSize
iContextType
iCtrlId
hItemHandle
dwContextId
MousePos
tagHELPINFO
objectHandle
tagHANDLETABLE
_WSABUF
	TokenRate
TokenBucketSize
PeakBandwidth
Latency
DelayVariation
LevelOfGuarantee
CostOfCall
NetworkAvailability
	_flowspec
dParm&
tagENHMETARECORD
SendingFlowspec
ReceivingFlowspec
ProviderSpecific
_QualityOfService
dwOSVersionInfoSize
dwMajorVersion
dwMinorVersion
dwBuildNumber
dwPlatformId
szCSDVersion
_OSVERSIONINFOA
_charbuf
_bufsiz
	_tmpfname
_iobuf
common.c
kill.c