Exes_dd8f071fcfb80b5473bc189d7ae19e5c_jpg_2019-07-03_06_30.json

[*] MalFamily: ""

[*] MalScore: 10.0

[*] File Name: "Exes_dd8f071fcfb80b5473bc189d7ae19e5c.jpg"
[*] File Size: 941232
[*] File Type: "PE32 executable (GUI) Intel 80386, for MS Windows"
[*] SHA256: "5a44a65204e80f8abc824cee0b02b8ada9c8b2651ccd49aeda32d4e2dbdf5106"
[*] MD5: "dd8f071fcfb80b5473bc189d7ae19e5c"
[*] SHA1: "92cc0a6d0f5a18d3817a7b8d469419ef9c1a17d1"
[*] SHA512: "46099dabbc78bf2bb7def5acb17bcea29e2898940d5686f694b40ac0d32092f9404c5c61d8f761192fdb3aafba443f9cf960a8776d66625bac64a660f5f6597d"
[*] CRC32: "3AEEE739"
[*] SSDEEP: "24576:GbdwjDjHP7tnQFg18oqyZq4XVVbPbGJLix:e2jXjtQ4Zq4VbgLix"

[*] Process Execution: [
    "Exes_dd8f071fcfb80b5473bc189d7ae19e5c.jpg"
]

[*] Signatures Detected: [
    {
        "Description": "Attempts to connect to a dead IP:Port (2 unique times)",
        "Details": [
            {
                "IP": "154.35.32.5:443"
            },
            {
                "IP": "171.25.193.9:80"
            }
        ]
    },
    {
        "Description": "Creates RWX memory",
        "Details": []
    },
    {
        "Description": "Starts servers listening on 127.0.0.1:41980",
        "Details": []
    },
    {
        "Description": "Reads data out of its own binary image",
        "Details": [
            {
                "self_read": "process: Exes_dd8f071fcfb80b5473bc189d7ae19e5c.jpg, pid: 2084, offset: 0x00000000, length: 0x000e5cb0"
            }
        ]
    },
    {
        "Description": "The binary likely contains encrypted or compressed data.",
        "Details": [
            {
                "section": "name: .text, entropy: 7.94, characteristics: IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ, raw_size: 0x000dce00, virtual_size: 0x000dcd9b"
            }
        ]
    },
    {
        "Description": "Installs Tor on the infected machine",
        "Details": []
    },
    {
        "Description": "Installs itself for autorun at Windows startup",
        "Details": [
            {
                "key": "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Run\\Client Server Runtime Subsystem"
            },
            {
                "data": "\"C:\\ProgramData\\Windows\\csrss.exe\""
            }
        ]
    },
    {
        "Description": "Collects information about installed applications",
        "Details": [
            {
                "Program": "Google Update Helper"
            },
            {
            },
            {
                "Program": "Microsoft Excel MUI  2013"
            },
            {
                "Program": "Microsoft Outlook MUI  2013"
            },
            {
            },
            {
                "Program": "Google Chrome"
            },
            {
                "Program": "Adobe Flash Player 29 NPAPI"
            },
            {
                "Program": "Adobe Flash Player 29 ActiveX"
            },
            {
                "Program": "Microsoft DCF MUI  2013"
            },
            {
                "Program": "Microsoft Access MUI  2013"
            },
            {
                "Program": "Microsoft Office Proofing Tools 2013 - English"
            },
            {
                "Program": "Adobe Acrobat Reader DC"
            },
            {
                "Program": "Microsoft Publisher MUI  2013"
            },
            {
                "Program": "Microsoft Office Shared MUI  2013"
            },
            {
                "Program": "Microsoft Office OSM MUI  2013"
            },
            {
                "Program": "Microsoft InfoPath MUI  2013"
            },
            {
                "Program": "Microsoft Office Shared Setup Metadata MUI  2013"
            },
            {
                "Program": "Outils de v\\xc3\\xa9rification linguistique 2013 de Microsoft Office\\xc2\\xa0- Fran\\xc3\\xa7ais"
            },
            {
                "Program": "Microsoft Word MUI  2013"
            },
            {
                "Program": "Microsoft OneDrive"
            },
            {
                "Program": "Microsoft Groove MUI  2013"
            },
            {
                "Program": "Microsoft Office Proofing Tools 2013 - Espa\\xc3\\xb1ol"
            },
            {
            },
            {
                "Program": "Microsoft Access Setup Metadata MUI  2013"
            },
            {
                "Program": "Microsoft Office OSM UX MUI  2013"
            },
            {
                "Program": "Java Auto Updater"
            },
            {
                "Program": "Microsoft PowerPoint MUI  2013"
            },
            {
                "Program": "Microsoft Office Professional Plus 2013"
            },
            {
                "Program": "Adobe Refresh Manager"
            },
            {
                "Program": "Microsoft Office Proofing  2013"
            },
            {
                "Program": "Microsoft Lync MUI  2013"
            },
            {
            },
            {
                "Program": "Microsoft OneNote MUI  2013"
            }
        ]
    },
    {
        "Description": "Creates a hidden or system file",
        "Details": [
            {
                "file": "C:\\ProgramData\\Windows\\"
            }
        ]
    },
    {
        "Description": "File has been identified by 51 Antiviruses on VirusTotal as malicious",
        "Details": [
            {
                "MicroWorld-eScan": "Trojan.GenericKD.32072544"
            },
            {
                "CAT-QuickHeal": "Trojan.Multi"
            },
            {
                "McAfee": "RDN/Generic.grp"
            },
            {
                "Cylance": "Unsafe"
            },
            {
                "BitDefender": "Trojan.GenericKD.32072544"
            },
            {
                "NANO-Antivirus": "Trojan.Win32.Shade.fsddxz"
            },
            {
                "F-Prot": "W32/Agent.BAZ.gen!Eldorado"
            },
            {
                "Symantec": "Packed.Generic.459"
            },
            {
                "ESET-NOD32": "a variant of Win32/Kryptik.GUEN"
            },
            {
                "APEX": "Malicious"
            },
            {
                "Paloalto": "generic.ml"
            },
            {
                "GData": "Trojan.GenericKD.32072544"
            },
            {
                "Kaspersky": "Trojan-Ransom.Win32.Shade.pxn"
            },
            {
                "Alibaba": "Ransom:Win32/Shade.931e49b2"
            },
            {
                "Avast": "Win32:Malware-gen"
            },
            {
                "Tencent": "Win32.Trojan.Shade.Wuhj"
            },
            {
                "Endgame": "malicious (high confidence)"
            },
            {
                "Sophos": "Mal/Cerber-AL"
            },
            {
                "Comodo": "Malware@#86t4s5r4z6yo"
            },
            {
                "F-Secure": "Trojan.TR/Crypt.ZPACK.vpzwb"
            },
            {
                "DrWeb": "Trojan.Encoder.858"
            },
            {
                "VIPRE": "Trojan.Win32.Generic!BT"
            },
            {
                "Invincea": "heuristic"
            },
            {
                "McAfee-GW-Edition": "RDN/Generic.grp"
            },
            {
                "Trapmine": "malicious.high.ml.score"
            },
            {
                "FireEye": "Generic.mg.dd8f071fcfb80b54"
            },
            {
                "Emsisoft": "Trojan-Ransom.Shade (A)"
            },
            {
                "SentinelOne": "DFI - Malicious PE"
            },
            {
                "Cyren": "W32/Trojan.OCQI-8254"
            },
            {
                "MaxSecure": "Trojan.Malware.3115893.susgen"
            },
            {
                "Avira": "TR/Crypt.ZPACK.vpzwb"
            },
            {
                "Antiy-AVL": "Trojan[Ransom]/Win32.Shade"
            },
            {
                "Microsoft": "Ransom:Win32/Troldesh.A"
            },
            {
                "Arcabit": "Trojan.Generic.D1E96360"
            },
            {
                "AegisLab": "Trojan.Multi.Generic.4!c"
            },
            {
                "ZoneAlarm": "Trojan-Ransom.Win32.Shade.pxn"
            },
            {
                "AhnLab-V3": "Trojan/Win32.Generic.C3298059"
            },
            {
                "Acronis": "suspicious"
            },
            {
                "VBA32": "BScope.Malware-Cryptor.Hlux"
            },
            {
                "ALYac": "Trojan.Ransom.Shade"
            },
            {
                "Ad-Aware": "Trojan.GenericKD.32072544"
            },
            {
                "Rising": "Ransom.CryptInject!1.B73A (CLOUD)"
            },
            {
                "Yandex": "Trojan.Kryptik!g0GFRUw/AKc"
            },
            {
                "Ikarus": "Trojan.Win32.Crypt"
            },
            {
                "eGambit": "PE.Heur.InvalidSig"
            },
            {
                "Fortinet": "W32/Cerber.AL!tr"
            },
            {
                "AVG": "Win32:Malware-gen"
            },
            {
                "Cybereason": "malicious.d0f5a1"
            },
            {
                "Panda": "Generic Malware"
            },
            {
                "CrowdStrike": "win/malicious_confidence_90% (W)"
            },
            {
                "Qihoo-360": "HEUR/QVM20.1.0218.Malware.Gen"
            }
        ]
    },
    {
        "Description": "Creates a copy of itself",
        "Details": [
            {
                "copy": "C:\\ProgramData\\Windows\\csrss.exe"
            }
        ]
    },
    {
        "Description": "Harvests information related to installed mail clients",
        "Details": [
            {
                "file": "C:\\Users\\user\\Documents\\Outlook Files\\Outlook.pst"
            }
        ]
    },
    {
        "Description": "Anomalous binary characteristics",
        "Details": [
            {
                "anomaly": "Actual checksum does not match that reported in PE header"
            }
        ]
    },
    {
        "Description": "Created network traffic indicative of malicious activity",
        "Details": [
            {
                "signature": "ET TOR Known Tor Relay/Router (Not Exit) Node Traffic group 278"
            },
            {
                "signature": "ET TOR Known Tor Relay/Router (Not Exit) Node Traffic group 183"
            }
        ]
    }
]

[*] Started Service: []

[*] Executed Commands: []

[*] Mutexes: []

[*] Modified Files: [
    "\\??\\PIPE\\wkssvc",
    "\\??\\PIPE\\srvsvc",
    "C:\\ProgramData\\Windows\\csrss.exe",
    "C:\\Users\\user\\AppData\\Local\\Temp\\6893A5D897\\lock",
    "C:\\Users\\user\\AppData\\Local\\Temp\\6893A5D897\\state.tmp",
    "C:\\Users\\user\\AppData\\Local\\Temp\\6893A5D897\\state",
    "C:\\Users\\user\\AppData\\Local\\Temp\\6893A5D897\\unverified-microdesc-consensus.tmp",
    "C:\\Users\\user\\AppData\\Local\\Temp\\6893A5D897\\unverified-microdesc-consensus"
]

[*] Deleted Files: [
    "C:\\Users\\user\\AppData\\Local\\Temp\\6893A5D897\\state.tmp",
    "C:\\Users\\user\\AppData\\Local\\Temp\\6893A5D897\\unverified-microdesc-consensus.tmp"
]

[*] Modified Registry Keys: [
    "HKEY_LOCAL_MACHINE\\SOFTWARE\\System32\\Configuration\\",
    "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\System32\\Configuration\\xi",
    "HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Run\\Client Server Runtime Subsystem",
    "HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\System32\\Configuration\\xVersion"
]

[*] Deleted Registry Keys: []

[*] DNS Communications: []

[*] Domains: []

[*] Network Communication - ICMP: []

[*] Network Communication - HTTP: []

[*] Network Communication - SMTP: []

[*] Network Communication - Hosts: []

[*] Network Communication - IRC: []

[*] Static Analysis: {
    "pe": {
        "peid_signatures": null,
        "imports": [
            {
                "imports": [
                    {
                        "name": "lstrcatA",
                        "address": "0x4de2d4"
                    },
                    {
                        "name": "lstrcatW",
                        "address": "0x4de2d8"
                    },
                    {
                        "name": "lstrcmpA",
                        "address": "0x4de2dc"
                    },
                    {
                        "name": "lstrcmpW",
                        "address": "0x4de2e0"
                    },
                    {
                        "name": "lstrcmpiA",
                        "address": "0x4de2e4"
                    },
                    {
                        "name": "lstrcmpiW",
                        "address": "0x4de2e8"
                    },
                    {
                        "name": "_hwrite",
                        "address": "0x4de2ec"
                    },
                    {
                        "name": "lstrcpyW",
                        "address": "0x4de2f0"
                    },
                    {
                        "name": "lstrcpynA",
                        "address": "0x4de2f4"
                    },
                    {
                        "name": "lstrcpynW",
                        "address": "0x4de2f8"
                    },
                    {
                        "name": "lstrlenA",
                        "address": "0x4de2fc"
                    },
                    {
                        "name": "lstrlenW",
                        "address": "0x4de300"
                    },
                    {
                        "name": "WritePrivateProfileStringA",
                        "address": "0x4de304"
                    },
                    {
                        "name": "WriteFile",
                        "address": "0x4de308"
                    },
                    {
                        "name": "WideCharToMultiByte",
                        "address": "0x4de30c"
                    },
                    {
                        "name": "WaitForSingleObject",
                        "address": "0x4de310"
                    },
                    {
                        "name": "WaitForMultipleObjects",
                        "address": "0x4de314"
                    },
                    {
                        "name": "VirtualQuery",
                        "address": "0x4de318"
                    },
                    {
                        "name": "VirtualProtect",
                        "address": "0x4de31c"
                    },
                    {
                        "name": "VirtualFree",
                        "address": "0x4de320"
                    },
                    {
                        "name": "UpdateResourceW",
                        "address": "0x4de324"
                    },
                    {
                        "name": "UnhandledExceptionFilter",
                        "address": "0x4de328"
                    },
                    {
                        "name": "TlsSetValue",
                        "address": "0x4de32c"
                    },
                    {
                        "name": "TlsGetValue",
                        "address": "0x4de330"
                    },
                    {
                        "name": "TlsAlloc",
                        "address": "0x4de334"
                    },
                    {
                        "name": "TerminateThread",
                        "address": "0x4de338"
                    },
                    {
                        "name": "TerminateProcess",
                        "address": "0x4de33c"
                    },
                    {
                        "name": "SwitchToThread",
                        "address": "0x4de340"
                    },
                    {
                        "name": "Sleep",
                        "address": "0x4de344"
                    },
                    {
                        "name": "SizeofResource",
                        "address": "0x4de348"
                    },
                    {
                        "name": "SetVolumeMountPointW",
                        "address": "0x4de34c"
                    },
                    {
                        "name": "SetUnhandledExceptionFilter",
                        "address": "0x4de350"
                    },
                    {
                        "name": "SetThreadLocale",
                        "address": "0x4de354"
                    },
                    {
                        "name": "SetThreadExecutionState",
                        "address": "0x4de358"
                    },
                    {
                        "name": "SetNamedPipeHandleState",
                        "address": "0x4de35c"
                    },
                    {
                        "name": "SetMailslotInfo",
                        "address": "0x4de360"
                    },
                    {
                        "name": "SetLocaleInfoW",
                        "address": "0x4de364"
                    },
                    {
                        "name": "SetLastError",
                        "address": "0x4de368"
                    },
                    {
                        "name": "SetFilePointerEx",
                        "address": "0x4de36c"
                    },
                    {
                        "name": "SetFilePointer",
                        "address": "0x4de370"
                    },
                    {
                        "name": "SetEvent",
                        "address": "0x4de374"
                    },
                    {
                        "name": "SetErrorMode",
                        "address": "0x4de378"
                    },
                    {
                        "name": "SetEndOfFile",
                        "address": "0x4de37c"
                    },
                    {
                        "name": "SetConsoleTitleW",
                        "address": "0x4de380"
                    },
                    {
                        "name": "RtlUnwind",
                        "address": "0x4de384"
                    },
                    {
                        "name": "RtlMoveMemory",
                        "address": "0x4de388"
                    },
                    {
                        "name": "ResumeThread",
                        "address": "0x4de38c"
                    },
                    {
                        "name": "ResetEvent",
                        "address": "0x4de390"
                    },
                    {
                        "name": "ReadFile",
                        "address": "0x4de394"
                    },
                    {
                        "name": "ReadConsoleOutputCharacterW",
                        "address": "0x4de398"
                    },
                    {
                        "name": "RaiseException",
                        "address": "0x4de39c"
                    },
                    {
                        "name": "QueryPerformanceCounter",
                        "address": "0x4de3a0"
                    },
                    {
                        "name": "QueryDosDeviceW",
                        "address": "0x4de3a4"
                    },
                    {
                        "name": "PurgeComm",
                        "address": "0x4de3a8"
                    },
                    {
                        "name": "OutputDebugStringA",
                        "address": "0x4de3ac"
                    },
                    {
                        "name": "OpenSemaphoreA",
                        "address": "0x4de3b0"
                    },
                    {
                        "name": "OpenJobObjectA",
                        "address": "0x4de3b4"
                    },
                    {
                        "name": "MultiByteToWideChar",
                        "address": "0x4de3b8"
                    },
                    {
                        "name": "MulDiv",
                        "address": "0x4de3bc"
                    },
                    {
                        "name": "MoveFileW",
                        "address": "0x4de3c0"
                    },
                    {
                        "name": "LockResource",
                        "address": "0x4de3c4"
                    },
                    {
                        "name": "LocalUnlock",
                        "address": "0x4de3c8"
                    },
                    {
                        "name": "LocalFree",
                        "address": "0x4de3cc"
                    },
                    {
                        "name": "LocalAlloc",
                        "address": "0x4de3d0"
                    },
                    {
                        "name": "LoadResource",
                        "address": "0x4de3d4"
                    },
                    {
                        "name": "LoadLibraryW",
                        "address": "0x4de3d8"
                    },
                    {
                        "name": "LoadLibraryExA",
                        "address": "0x4de3dc"
                    },
                    {
                        "name": "LeaveCriticalSection",
                        "address": "0x4de3e0"
                    },
                    {
                        "name": "LCMapStringA",
                        "address": "0x4de3e4"
                    },
                    {
                        "name": "IsValidLocale",
                        "address": "0x4de3e8"
                    },
                    {
                        "name": "IsValidCodePage",
                        "address": "0x4de3ec"
                    },
                    {
                        "name": "IsDBCSLeadByte",
                        "address": "0x4de3f0"
                    },
                    {
                        "name": "IsBadWritePtr",
                        "address": "0x4de3f4"
                    },
                    {
                        "name": "IsBadStringPtrW",
                        "address": "0x4de3f8"
                    },
                    {
                        "name": "IsBadReadPtr",
                        "address": "0x4de3fc"
                    },
                    {
                        "name": "IsBadCodePtr",
                        "address": "0x4de400"
                    },
                    {
                        "name": "InterlockedIncrement",
                        "address": "0x4de404"
                    },
                    {
                        "name": "InterlockedExchange",
                        "address": "0x4de408"
                    },
                    {
                        "name": "InterlockedDecrement",
                        "address": "0x4de40c"
                    },
                    {
                        "name": "InitializeCriticalSection",
                        "address": "0x4de410"
                    },
                    {
                        "name": "HeapFree",
                        "address": "0x4de414"
                    },
                    {
                        "name": "HeapAlloc",
                        "address": "0x4de418"
                    },
                    {
                        "name": "GlobalUnlock",
                        "address": "0x4de41c"
                    },
                    {
                        "name": "GlobalSize",
                        "address": "0x4de420"
                    },
                    {
                        "name": "GlobalReAlloc",
                        "address": "0x4de424"
                    },
                    {
                        "name": "GlobalLock",
                        "address": "0x4de428"
                    },
                    {
                        "name": "GlobalHandle",
                        "address": "0x4de42c"
                    },
                    {
                        "name": "GlobalFree",
                        "address": "0x4de430"
                    },
                    {
                        "name": "GlobalFindAtomA",
                        "address": "0x4de434"
                    },
                    {
                        "name": "GlobalDeleteAtom",
                        "address": "0x4de438"
                    },
                    {
                        "name": "GlobalAlloc",
                        "address": "0x4de43c"
                    },
                    {
                        "name": "GlobalAddAtomW",
                        "address": "0x4de440"
                    },
                    {
                        "name": "GlobalAddAtomA",
                        "address": "0x4de444"
                    },
                    {
                        "name": "GetWindowsDirectoryW",
                        "address": "0x4de448"
                    },
                    {
                        "name": "GetWindowsDirectoryA",
                        "address": "0x4de44c"
                    },
                    {
                        "name": "GetVolumePathNamesForVolumeNameW",
                        "address": "0x4de450"
                    },
                    {
                        "name": "GetVolumePathNameW",
                        "address": "0x4de454"
                    },
                    {
                        "name": "GetVolumeNameForVolumeMountPointW",
                        "address": "0x4de458"
                    },
                    {
                        "name": "GetVersionExA",
                        "address": "0x4de45c"
                    },
                    {
                        "name": "GetVersion",
                        "address": "0x4de460"
                    },
                    {
                        "name": "GetUserDefaultLCID",
                        "address": "0x4de464"
                    },
                    {
                        "name": "GetTimeFormatA",
                        "address": "0x4de468"
                    },
                    {
                        "name": "GetTickCount",
                        "address": "0x4de46c"
                    },
                    {
                        "name": "GetThreadLocale",
                        "address": "0x4de470"
                    },
                    {
                        "name": "GetTempPathA",
                        "address": "0x4de474"
                    },
                    {
                        "name": "GetSystemTimeAsFileTime",
                        "address": "0x4de478"
                    },
                    {
                        "name": "GetSystemInfo",
                        "address": "0x4de47c"
                    },
                    {
                        "name": "GetSystemDirectoryW",
                        "address": "0x4de480"
                    },
                    {
                        "name": "GetSystemDirectoryA",
                        "address": "0x4de484"
                    },
                    {
                        "name": "GetSystemDefaultLangID",
                        "address": "0x4de488"
                    },
                    {
                        "name": "GetStringTypeW",
                        "address": "0x4de48c"
                    },
                    {
                        "name": "GetStringTypeExA",
                        "address": "0x4de490"
                    },
                    {
                        "name": "GetStringTypeA",
                        "address": "0x4de494"
                    },
                    {
                        "name": "GetStdHandle",
                        "address": "0x4de498"
                    },
                    {
                        "name": "GetStartupInfoA",
                        "address": "0x4de49c"
                    },
                    {
                        "name": "GetProcessHeap",
                        "address": "0x4de4a0"
                    },
                    {
                        "name": "GetPrivateProfileStringW",
                        "address": "0x4de4a4"
                    },
                    {
                        "name": "GetPrivateProfileStringA",
                        "address": "0x4de4a8"
                    },
                    {
                        "name": "GetOEMCP",
                        "address": "0x4de4ac"
                    },
                    {
                        "name": "GetModuleHandleA",
                        "address": "0x4de4b0"
                    },
                    {
                        "name": "GetModuleFileNameW",
                        "address": "0x4de4b4"
                    },
                    {
                        "name": "GetModuleFileNameA",
                        "address": "0x4de4b8"
                    },
                    {
                        "name": "GetLogicalDriveStringsA",
                        "address": "0x4de4bc"
                    },
                    {
                        "name": "GetLocaleInfoA",
                        "address": "0x4de4c0"
                    },
                    {
                        "name": "GetLocalTime",
                        "address": "0x4de4c4"
                    },
                    {
                        "name": "GetLastError",
                        "address": "0x4de4c8"
                    },
                    {
                        "name": "GetFullPathNameA",
                        "address": "0x4de4cc"
                    },
                    {
                        "name": "GetFileAttributesW",
                        "address": "0x4de4d0"
                    },
                    {
                        "name": "GetFileAttributesA",
                        "address": "0x4de4d4"
                    },
                    {
                        "name": "GetExitCodeThread",
                        "address": "0x4de4d8"
                    },
                    {
                        "name": "GetDriveTypeW",
                        "address": "0x4de4dc"
                    },
                    {
                        "name": "GetDiskFreeSpaceA",
                        "address": "0x4de4e0"
                    },
                    {
                        "name": "GetDevicePowerState",
                        "address": "0x4de4e4"
                    },
                    {
                        "name": "GetDateFormatA",
                        "address": "0x4de4e8"
                    },
                    {
                        "name": "GetCurrentThreadId",
                        "address": "0x4de4ec"
                    },
                    {
                        "name": "GetCurrentThread",
                        "address": "0x4de4f0"
                    },
                    {
                        "name": "GetProcAddress",
                        "address": "0x4de4f4"
                    },
                    {
                        "name": "GetCurrentProcessId",
                        "address": "0x4de4f8"
                    },
                    {
                        "name": "GetCurrentProcess",
                        "address": "0x4de4fc"
                    },
                    {
                        "name": "GetCurrentDirectoryA",
                        "address": "0x4de500"
                    },
                    {
                        "name": "GetConsoleCursorInfo",
                        "address": "0x4de504"
                    },
                    {
                        "name": "GetConsoleAliasA",
                        "address": "0x4de508"
                    },
                    {
                        "name": "GetComputerNameW",
                        "address": "0x4de50c"
                    },
                    {
                        "name": "GetComputerNameExW",
                        "address": "0x4de510"
                    },
                    {
                        "name": "GetCompressedFileSizeA",
                        "address": "0x4de514"
                    },
                    {
                        "name": "GetCommandLineA",
                        "address": "0x4de518"
                    },
                    {
                        "name": "GetCPInfo",
                        "address": "0x4de51c"
                    },
                    {
                        "name": "GetACP",
                        "address": "0x4de520"
                    },
                    {
                        "name": "FreeResource",
                        "address": "0x4de524"
                    },
                    {
                        "name": "FreeLibrary",
                        "address": "0x4de528"
                    },
                    {
                        "name": "FormatMessageW",
                        "address": "0x4de52c"
                    },
                    {
                        "name": "FormatMessageA",
                        "address": "0x4de530"
                    },
                    {
                        "name": "FindVolumeClose",
                        "address": "0x4de534"
                    },
                    {
                        "name": "FindResourceA",
                        "address": "0x4de538"
                    },
                    {
                        "name": "FindNextVolumeW",
                        "address": "0x4de53c"
                    },
                    {
                        "name": "FindNextChangeNotification",
                        "address": "0x4de540"
                    },
                    {
                        "name": "FindFirstVolumeW",
                        "address": "0x4de544"
                    },
                    {
                        "name": "FindFirstVolumeMountPointA",
                        "address": "0x4de548"
                    },
                    {
                        "name": "FindFirstFileW",
                        "address": "0x4de54c"
                    },
                    {
                        "name": "FindFirstFileA",
                        "address": "0x4de550"
                    },
                    {
                        "name": "FindFirstChangeNotificationW",
                        "address": "0x4de554"
                    },
                    {
                        "name": "FindFirstChangeNotificationA",
                        "address": "0x4de558"
                    },
                    {
                        "name": "FindCloseChangeNotification",
                        "address": "0x4de55c"
                    },
                    {
                        "name": "FindClose",
                        "address": "0x4de560"
                    },
                    {
                        "name": "FileTimeToLocalFileTime",
                        "address": "0x4de564"
                    },
                    {
                        "name": "FileTimeToDosDateTime",
                        "address": "0x4de568"
                    },
                    {
                        "name": "ExitThread",
                        "address": "0x4de56c"
                    },
                    {
                        "name": "ExitProcess",
                        "address": "0x4de570"
                    },
                    {
                        "name": "EnumSystemCodePagesA",
                        "address": "0x4de574"
                    },
                    {
                        "name": "EnumCalendarInfoA",
                        "address": "0x4de578"
                    },
                    {
                        "name": "EnterCriticalSection",
                        "address": "0x4de57c"
                    },
                    {
                        "name": "DeviceIoControl",
                        "address": "0x4de580"
                    },
                    {
                        "name": "DeleteVolumeMountPointW",
                        "address": "0x4de584"
                    },
                    {
                        "name": "DeleteFileA",
                        "address": "0x4de588"
                    },
                    {
                        "name": "DeleteCriticalSection",
                        "address": "0x4de58c"
                    },
                    {
                        "name": "DefineDosDeviceW",
                        "address": "0x4de590"
                    },
                    {
                        "name": "CreateThread",
                        "address": "0x4de594"
                    },
                    {
                        "name": "CreateSemaphoreW",
                        "address": "0x4de598"
                    },
                    {
                        "name": "CreateMutexA",
                        "address": "0x4de59c"
                    },
                    {
                        "name": "CreateFileW",
                        "address": "0x4de5a0"
                    },
                    {
                        "name": "CreateFileA",
                        "address": "0x4de5a4"
                    },
                    {
                        "name": "CreateEventW",
                        "address": "0x4de5a8"
                    },
                    {
                        "name": "CreateEventA",
                        "address": "0x4de5ac"
                    },
                    {
                        "name": "CopyFileExA",
                        "address": "0x4de5b0"
                    },
                    {
                        "name": "CompareStringW",
                        "address": "0x4de5b4"
                    },
                    {
                        "name": "CompareStringA",
                        "address": "0x4de5b8"
                    },
                    {
                        "name": "CommConfigDialogW",
                        "address": "0x4de5bc"
                    },
                    {
                        "name": "CloseHandle",
                        "address": "0x4de5c0"
                    },
                    {
                        "name": "AddConsoleAliasA",
                        "address": "0x4de5c4"
                    },
                    {
                        "name": "VirtualAlloc",
                        "address": "0x4de5c8"
                    },
                    {
                        "name": "GetModuleHandleW",
                        "address": "0x4de5cc"
                    },
                    {
                        "name": "LoadLibraryA",
                        "address": "0x4de5d0"
                    },
                    {
                        "name": "lstrcpyA",
                        "address": "0x4de5d4"
                    }
                ],
                "dll": "KERNEL32.dll"
            },
            {
                "imports": [
                    {
                        "name": "SetWindowPlacement",
                        "address": "0x4de62c"
                    },
                    {
                        "name": "SetWindowPos",
                        "address": "0x4de630"
                    },
                    {
                        "name": "SetWindowRgn",
                        "address": "0x4de634"
                    },
                    {
                        "name": "SetWindowTextA",
                        "address": "0x4de638"
                    },
                    {
                        "name": "SetWindowsHookExA",
                        "address": "0x4de63c"
                    },
                    {
                        "name": "ShowCursor",
                        "address": "0x4de640"
                    },
                    {
                        "name": "ShowOwnedPopups",
                        "address": "0x4de644"
                    },
                    {
                        "name": "ShowScrollBar",
                        "address": "0x4de648"
                    },
                    {
                        "name": "ShowWindow",
                        "address": "0x4de64c"
                    },
                    {
                        "name": "SubtractRect",
                        "address": "0x4de650"
                    },
                    {
                        "name": "SystemParametersInfoA",
                        "address": "0x4de654"
                    },
                    {
                        "name": "SystemParametersInfoW",
                        "address": "0x4de658"
                    },
                    {
                        "name": "TabbedTextOutA",
                        "address": "0x4de65c"
                    },
                    {
                        "name": "ToAsciiEx",
                        "address": "0x4de660"
                    },
                    {
                        "name": "TrackPopupMenu",
                        "address": "0x4de664"
                    },
                    {
                        "name": "TranslateAcceleratorA",
                        "address": "0x4de668"
                    },
                    {
                        "name": "TranslateAcceleratorW",
                        "address": "0x4de66c"
                    },
                    {
                        "name": "TranslateMDISysAccel",
                        "address": "0x4de670"
                    },
                    {
                        "name": "TranslateMessage",
                        "address": "0x4de674"
                    },
                    {
                        "name": "UnhookWindowsHookEx",
                        "address": "0x4de678"
                    },
                    {
                        "name": "UnregisterClassA",
                        "address": "0x4de67c"
                    },
                    {
                        "name": "UpdateWindow",
                        "address": "0x4de680"
                    },
                    {
                        "name": "ValidateRect",
                        "address": "0x4de684"
                    },
                    {
                        "name": "WaitMessage",
                        "address": "0x4de688"
                    },
                    {
                        "name": "WinHelpA",
                        "address": "0x4de68c"
                    },
                    {
                        "name": "WinHelpW",
                        "address": "0x4de690"
                    },
                    {
                        "name": "WindowFromDC",
                        "address": "0x4de694"
                    },
                    {
                        "name": "WindowFromPoint",
                        "address": "0x4de698"
                    },
                    {
                        "name": "mouse_event",
                        "address": "0x4de69c"
                    },
                    {
                        "name": "wsprintfA",
                        "address": "0x4de6a0"
                    },
                    {
                        "name": "SendNotifyMessageA",
                        "address": "0x4de6a4"
                    },
                    {
                        "name": "SendMessageA",
                        "address": "0x4de6a8"
                    },
                    {
                        "name": "SendDlgItemMessageW",
                        "address": "0x4de6ac"
                    },
                    {
                        "name": "ScrollWindowEx",
                        "address": "0x4de6b0"
                    },
                    {
                        "name": "ScrollWindow",
                        "address": "0x4de6b4"
                    },
                    {
                        "name": "ScreenToClient",
                        "address": "0x4de6b8"
                    },
                    {
                        "name": "RemovePropA",
                        "address": "0x4de6bc"
                    },
                    {
                        "name": "RemoveMenu",
                        "address": "0x4de6c0"
                    },
                    {
                        "name": "ReleaseDC",
                        "address": "0x4de6c4"
                    },
                    {
                        "name": "ReleaseCapture",
                        "address": "0x4de6c8"
                    },
                    {
                        "name": "RegisterWindowMessageA",
                        "address": "0x4de6cc"
                    },
                    {
                        "name": "RegisterDeviceNotificationW",
                        "address": "0x4de6d0"
                    },
                    {
                        "name": "RegisterDeviceNotificationA",
                        "address": "0x4de6d4"
                    },
                    {
                        "name": "RegisterClipboardFormatA",
                        "address": "0x4de6d8"
                    },
                    {
                        "name": "RegisterClassA",
                        "address": "0x4de6dc"
                    },
                    {
                        "name": "RedrawWindow",
                        "address": "0x4de6e0"
                    },
                    {
                        "name": "RealGetWindowClassA",
                        "address": "0x4de6e4"
                    },
                    {
                        "name": "PtInRect",
                        "address": "0x4de6e8"
                    },
                    {
                        "name": "PostThreadMessageW",
                        "address": "0x4de6ec"
                    },
                    {
                        "name": "PostQuitMessage",
                        "address": "0x4de6f0"
                    },
                    {
                        "name": "PostMessageA",
                        "address": "0x4de6f4"
                    },
                    {
                        "name": "PeekMessageA",
                        "address": "0x4de6f8"
                    },
                    {
                        "name": "OpenClipboard",
                        "address": "0x4de6fc"
                    },
                    {
                        "name": "OffsetRect",
                        "address": "0x4de700"
                    },
                    {
                        "name": "OemToCharW",
                        "address": "0x4de704"
                    },
                    {
                        "name": "OemToCharA",
                        "address": "0x4de708"
                    },
                    {
                        "name": "MsgWaitForMultipleObjects",
                        "address": "0x4de70c"
                    },
                    {
                        "name": "ModifyMenuA",
                        "address": "0x4de710"
                    },
                    {
                        "name": "MessageBoxA",
                        "address": "0x4de714"
                    },
                    {
                        "name": "MessageBeep",
                        "address": "0x4de718"
                    },
                    {
                        "name": "MapWindowPoints",
                        "address": "0x4de71c"
                    },
                    {
                        "name": "MapVirtualKeyA",
                        "address": "0x4de720"
                    },
                    {
                        "name": "LoadStringA",
                        "address": "0x4de724"
                    },
                    {
                        "name": "LoadKeyboardLayoutA",
                        "address": "0x4de728"
                    },
                    {
                        "name": "LoadImageA",
                        "address": "0x4de72c"
                    },
                    {
                        "name": "LoadIconA",
                        "address": "0x4de730"
                    },
                    {
                        "name": "LoadCursorA",
                        "address": "0x4de734"
                    },
                    {
                        "name": "LoadBitmapA",
                        "address": "0x4de738"
                    },
                    {
                        "name": "KillTimer",
                        "address": "0x4de73c"
                    },
                    {
                        "name": "IsZoomed",
                        "address": "0x4de740"
                    },
                    {
                        "name": "IsWindowVisible",
                        "address": "0x4de744"
                    },
                    {
                        "name": "IsWindow",
                        "address": "0x4de748"
                    },
                    {
                        "name": "IsRectEmpty",
                        "address": "0x4de74c"
                    },
                    {
                        "name": "IsIconic",
                        "address": "0x4de750"
                    },
                    {
                        "name": "IsDialogMessageA",
                        "address": "0x4de754"
                    },
                    {
                        "name": "IsChild",
                        "address": "0x4de758"
                    },
                    {
                        "name": "IsCharAlphaA",
                        "address": "0x4de75c"
                    },
                    {
                        "name": "InvalidateRgn",
                        "address": "0x4de760"
                    },
                    {
                        "name": "InvalidateRect",
                        "address": "0x4de764"
                    },
                    {
                        "name": "IntersectRect",
                        "address": "0x4de768"
                    },
                    {
                        "name": "InsertMenuItemA",
                        "address": "0x4de76c"
                    },
                    {
                        "name": "InsertMenuA",
                        "address": "0x4de770"
                    },
                    {
                        "name": "InflateRect",
                        "address": "0x4de774"
                    },
                    {
                        "name": "InSendMessageEx",
                        "address": "0x4de778"
                    },
                    {
                        "name": "IMPSetIMEA",
                        "address": "0x4de77c"
                    },
                    {
                        "name": "IMPQueryIMEA",
                        "address": "0x4de780"
                    },
                    {
                        "name": "GetWindowTextA",
                        "address": "0x4de784"
                    },
                    {
                        "name": "GetWindowRgn",
                        "address": "0x4de788"
                    },
                    {
                        "name": "GetWindowRect",
                        "address": "0x4de78c"
                    },
                    {
                        "name": "GetWindowPlacement",
                        "address": "0x4de790"
                    },
                    {
                        "name": "GetWindowLongA",
                        "address": "0x4de794"
                    },
                    {
                        "name": "GetWindowDC",
                        "address": "0x4de798"
                    },
                    {
                        "name": "GetWindow",
                        "address": "0x4de79c"
                    },
                    {
                        "name": "GetTopWindow",
                        "address": "0x4de7a0"
                    },
                    {
                        "name": "GetTabbedTextExtentA",
                        "address": "0x4de7a4"
                    },
                    {
                        "name": "GetSystemMetrics",
                        "address": "0x4de7a8"
                    },
                    {
                        "name": "SetWindowLongA",
                        "address": "0x4de7ac"
                    },
                    {
                        "name": "GetSysColorBrush",
                        "address": "0x4de7b0"
                    },
                    {
                        "name": "GetSysColor",
                        "address": "0x4de7b4"
                    },
                    {
                        "name": "GetSubMenu",
                        "address": "0x4de7b8"
                    },
                    {
                        "name": "GetScrollRange",
                        "address": "0x4de7bc"
                    },
                    {
                        "name": "GetScrollPos",
                        "address": "0x4de7c0"
                    },
                    {
                        "name": "GetScrollInfo",
                        "address": "0x4de7c4"
                    },
                    {
                        "name": "GetQueueStatus",
                        "address": "0x4de7c8"
                    },
                    {
                        "name": "GetPropA",
                        "address": "0x4de7cc"
                    },
                    {
                        "name": "GetMouseMovePointsEx",
                        "address": "0x4de7d0"
                    },
                    {
                        "name": "GetMessageA",
                        "address": "0x4de7d4"
                    },
                    {
                        "name": "GetMenuStringA",
                        "address": "0x4de7d8"
                    },
                    {
                        "name": "GetMenuState",
                        "address": "0x4de7dc"
                    },
                    {
                        "name": "GetMenuItemInfoA",
                        "address": "0x4de7e0"
                    },
                    {
                        "name": "GetMenuItemID",
                        "address": "0x4de7e4"
                    },
                    {
                        "name": "GetMenuItemCount",
                        "address": "0x4de7e8"
                    },
                    {
                        "name": "GetMenuDefaultItem",
                        "address": "0x4de7ec"
                    },
                    {
                        "name": "GetMenu",
                        "address": "0x4de7f0"
                    },
                    {
                        "name": "GetLastActivePopup",
                        "address": "0x4de7f4"
                    },
                    {
                        "name": "GetKeyboardType",
                        "address": "0x4de7f8"
                    },
                    {
                        "name": "GetKeyboardState",
                        "address": "0x4de7fc"
                    },
                    {
                        "name": "GetKeyboardLayoutList",
                        "address": "0x4de800"
                    },
                    {
                        "name": "GetKeyboardLayout",
                        "address": "0x4de804"
                    },
                    {
                        "name": "GetKeyState",
                        "address": "0x4de808"
                    },
                    {
                        "name": "GetKeyNameTextA",
                        "address": "0x4de80c"
                    },
                    {
                        "name": "GetIconInfo",
                        "address": "0x4de810"
                    },
                    {
                        "name": "GetFocus",
                        "address": "0x4de814"
                    },
                    {
                        "name": "GetDoubleClickTime",
                        "address": "0x4de818"
                    },
                    {
                        "name": "GetDlgItem",
                        "address": "0x4de81c"
                    },
                    {
                        "name": "GetDesktopWindow",
                        "address": "0x4de820"
                    },
                    {
                        "name": "GetDCEx",
                        "address": "0x4de824"
                    },
                    {
                        "name": "GetDC",
                        "address": "0x4de828"
                    },
                    {
                        "name": "GetCursorPos",
                        "address": "0x4de82c"
                    },
                    {
                        "name": "GetCursor",
                        "address": "0x4de830"
                    },
                    {
                        "name": "GetClipboardData",
                        "address": "0x4de834"
                    },
                    {
                        "name": "GetClientRect",
                        "address": "0x4de838"
                    },
                    {
                        "name": "GetClassNameA",
                        "address": "0x4de83c"
                    },
                    {
                        "name": "GetClassInfoA",
                        "address": "0x4de840"
                    },
                    {
                        "name": "GetCaretPos",
                        "address": "0x4de844"
                    },
                    {
                        "name": "GetCapture",
                        "address": "0x4de848"
                    },
                    {
                        "name": "FrameRect",
                        "address": "0x4de84c"
                    },
                    {
                        "name": "FindWindowA",
                        "address": "0x4de850"
                    },
                    {
                        "name": "FillRect",
                        "address": "0x4de854"
                    },
                    {
                        "name": "ExitWindowsEx",
                        "address": "0x4de858"
                    },
                    {
                        "name": "ExcludeUpdateRgn",
                        "address": "0x4de85c"
                    },
                    {
                        "name": "EqualRect",
                        "address": "0x4de860"
                    },
                    {
                        "name": "EnumWindows",
                        "address": "0x4de864"
                    },
                    {
                        "name": "EnumThreadWindows",
                        "address": "0x4de868"
                    },
                    {
                        "name": "EndPaint",
                        "address": "0x4de86c"
                    },
                    {
                        "name": "EndDialog",
                        "address": "0x4de870"
                    },
                    {
                        "name": "EnableWindow",
                        "address": "0x4de874"
                    },
                    {
                        "name": "EnableScrollBar",
                        "address": "0x4de878"
                    },
                    {
                        "name": "EnableMenuItem",
                        "address": "0x4de87c"
                    },
                    {
                        "name": "EmptyClipboard",
                        "address": "0x4de880"
                    },
                    {
                        "name": "DrawTextExA",
                        "address": "0x4de884"
                    },
                    {
                        "name": "DrawTextA",
                        "address": "0x4de888"
                    },
                    {
                        "name": "DrawMenuBar",
                        "address": "0x4de88c"
                    },
                    {
                        "name": "DrawIconEx",
                        "address": "0x4de890"
                    },
                    {
                        "name": "DrawIcon",
                        "address": "0x4de894"
                    },
                    {
                        "name": "DrawFrameControl",
                        "address": "0x4de898"
                    },
                    {
                        "name": "DrawFocusRect",
                        "address": "0x4de89c"
                    },
                    {
                        "name": "DrawEdge",
                        "address": "0x4de8a0"
                    },
                    {
                        "name": "DrawCaption",
                        "address": "0x4de8a4"
                    },
                    {
                        "name": "DragDetect",
                        "address": "0x4de8a8"
                    },
                    {
                        "name": "DispatchMessageA",
                        "address": "0x4de8ac"
                    },
                    {
                        "name": "DestroyWindow",
                        "address": "0x4de8b0"
                    },
                    {
                        "name": "DestroyMenu",
                        "address": "0x4de8b4"
                    },
                    {
                        "name": "DestroyIcon",
                        "address": "0x4de8b8"
                    },
                    {
                        "name": "DeleteMenu",
                        "address": "0x4de8bc"
                    },
                    {
                        "name": "DefWindowProcA",
                        "address": "0x4de8c0"
                    },
                    {
                        "name": "DefMDIChildProcA",
                        "address": "0x4de8c4"
                    },
                    {
                        "name": "DefFrameProcA",
                        "address": "0x4de8c8"
                    },
                    {
                        "name": "DdeQueryNextServer",
                        "address": "0x4de8cc"
                    },
                    {
                        "name": "DdeFreeDataHandle",
                        "address": "0x4de8d0"
                    },
                    {
                        "name": "DdeCmpStringHandles",
                        "address": "0x4de8d4"
                    },
                    {
                        "name": "CreateWindowExA",
                        "address": "0x4de8d8"
                    },
                    {
                        "name": "CreatePopupMenu",
                        "address": "0x4de8dc"
                    },
                    {
                        "name": "CreateIcon",
                        "address": "0x4de8e0"
                    },
                    {
                        "name": "CreateDialogIndirectParamW",
                        "address": "0x4de8e4"
                    },
                    {
                        "name": "CopyImage",
                        "address": "0x4de8e8"
                    },
                    {
                        "name": "CloseClipboard",
                        "address": "0x4de8ec"
                    },
                    {
                        "name": "ClientToScreen",
                        "address": "0x4de8f0"
                    },
                    {
                        "name": "CheckMenuItem",
                        "address": "0x4de8f4"
                    },
                    {
                        "name": "CharUpperBuffA",
                        "address": "0x4de8f8"
                    },
                    {
                        "name": "CharUpperA",
                        "address": "0x4de8fc"
                    },
                    {
                        "name": "CharToOemA",
                        "address": "0x4de900"
                    },
                    {
                        "name": "CharPrevExA",
                        "address": "0x4de904"
                    },
                    {
                        "name": "CharNextW",
                        "address": "0x4de908"
                    },
                    {
                        "name": "CharNextA",
                        "address": "0x4de90c"
                    },
                    {
                        "name": "SetTimer",
                        "address": "0x4de910"
                    },
                    {
                        "name": "SetScrollRange",
                        "address": "0x4de914"
                    },
                    {
                        "name": "SetScrollPos",
                        "address": "0x4de918"
                    },
                    {
                        "name": "SetScrollInfo",
                        "address": "0x4de91c"
                    },
                    {
                        "name": "SetRectEmpty",
                        "address": "0x4de920"
                    },
                    {
                        "name": "SetRect",
                        "address": "0x4de924"
                    },
                    {
                        "name": "SetPropW",
                        "address": "0x4de928"
                    },
                    {
                        "name": "SetPropA",
                        "address": "0x4de92c"
                    },
                    {
                        "name": "SetParent",
                        "address": "0x4de930"
                    },
                    {
                        "name": "SetMenuItemInfoA",
                        "address": "0x4de934"
                    },
                    {
                        "name": "SetMenu",
                        "address": "0x4de938"
                    },
                    {
                        "name": "SetKeyboardState",
                        "address": "0x4de93c"
                    },
                    {
                        "name": "SetForegroundWindow",
                        "address": "0x4de940"
                    },
                    {
                        "name": "SetFocus",
                        "address": "0x4de944"
                    },
                    {
                        "name": "SetCursor",
                        "address": "0x4de948"
                    },
                    {
                        "name": "SetClipboardData",
                        "address": "0x4de94c"
                    },
                    {
                        "name": "LoadCursorW",
                        "address": "0x4de950"
                    },
                    {
                        "name": "GetParent",
                        "address": "0x4de954"
                    },
                    {
                        "name": "IsCharAlphaNumericA",
                        "address": "0x4de958"
                    },
                    {
                        "name": "InSendMessage",
                        "address": "0x4de95c"
                    },
                    {
                        "name": "CloseWindowStation",
                        "address": "0x4de960"
                    },
                    {
                        "name": "IsWindowEnabled",
                        "address": "0x4de964"
                    },
                    {
                        "name": "CreateMenu",
                        "address": "0x4de968"
                    },
                    {
                        "name": "DestroyCursor",
                        "address": "0x4de96c"
                    },
                    {
                        "name": "GetDlgCtrlID",
                        "address": "0x4de970"
                    },
                    {
                        "name": "SetClassLongA",
                        "address": "0x4de974"
                    },
                    {
                        "name": "SetCapture",
                        "address": "0x4de978"
                    },
                    {
                        "name": "GetSystemMenu",
                        "address": "0x4de97c"
                    },
                    {
                        "name": "SetActiveWindow",
                        "address": "0x4de980"
                    },
                    {
                        "name": "CharLowerBuffA",
                        "address": "0x4de984"
                    },
                    {
                        "name": "CharLowerA",
                        "address": "0x4de988"
                    },
                    {
                        "name": "CallWindowProcA",
                        "address": "0x4de98c"
                    },
                    {
                        "name": "CallNextHookEx",
                        "address": "0x4de990"
                    },
                    {
                        "name": "BeginPaint",
                        "address": "0x4de994"
                    },
                    {
                        "name": "AdjustWindowRectEx",
                        "address": "0x4de998"
                    },
                    {
                        "name": "ActivateKeyboardLayout",
                        "address": "0x4de99c"
                    },
                    {
                        "name": "GetForegroundWindow",
                        "address": "0x4de9a0"
                    },
                    {
                        "name": "GetActiveWindow",
                        "address": "0x4de9a4"
                    },
                    {
                        "name": "EnumClipboardFormats",
                        "address": "0x4de9a8"
                    },
                    {
                        "name": "GetMessagePos",
                        "address": "0x4de9ac"
                    },
                    {
                        "name": "IsClipboardFormatAvailable",
                        "address": "0x4de9b0"
                    },
                    {
                        "name": "GetOpenClipboardWindow",
                        "address": "0x4de9b4"
                    },
                    {
                        "name": "IsGUIThread",
                        "address": "0x4de9b8"
                    },
                    {
                        "name": "GetAsyncKeyState",
                        "address": "0x4de9bc"
                    },
                    {
                        "name": "GetListBoxInfo",
                        "address": "0x4de9c0"
                    },
                    {
                        "name": "GetWindowThreadProcessId",
                        "address": "0x4de9c4"
                    }
                ],
                "dll": "USER32.dll"
            },
            {
                "imports": [
                    {
                        "name": "EngCheckAbort",
                        "address": "0x4de0ac"
                    },
                    {
                        "name": "EngCreateSemaphore",
                        "address": "0x4de0b0"
                    },
                    {
                        "name": "EngPaint",
                        "address": "0x4de0b4"
                    },
                    {
                        "name": "EqualRgn",
                        "address": "0x4de0b8"
                    },
                    {
                        "name": "ExcludeClipRect",
                        "address": "0x4de0bc"
                    },
                    {
                        "name": "ExtTextOutA",
                        "address": "0x4de0c0"
                    },
                    {
                        "name": "FillPath",
                        "address": "0x4de0c4"
                    },
                    {
                        "name": "FillRgn",
                        "address": "0x4de0c8"
                    },
                    {
                        "name": "FrameRgn",
                        "address": "0x4de0cc"
                    },
                    {
                        "name": "GdiGetCodePage",
                        "address": "0x4de0d0"
                    },
                    {
                        "name": "GdiGetSpoolFileHandle",
                        "address": "0x4de0d4"
                    },
                    {
                        "name": "GdiIsPlayMetafileDC",
                        "address": "0x4de0d8"
                    },
                    {
                        "name": "GetAspectRatioFilterEx",
                        "address": "0x4de0dc"
                    },
                    {
                        "name": "GetBitmapBits",
                        "address": "0x4de0e0"
                    },
                    {
                        "name": "GetBrushOrgEx",
                        "address": "0x4de0e4"
                    },
                    {
                        "name": "GetCharWidthA",
                        "address": "0x4de0e8"
                    },
                    {
                        "name": "GetClipBox",
                        "address": "0x4de0ec"
                    },
                    {
                        "name": "GetClipRgn",
                        "address": "0x4de0f0"
                    },
                    {
                        "name": "GetCurrentObject",
                        "address": "0x4de0f4"
                    },
                    {
                        "name": "GetCurrentPositionEx",
                        "address": "0x4de0f8"
                    },
                    {
                        "name": "GetDCOrgEx",
                        "address": "0x4de0fc"
                    },
                    {
                        "name": "GetDIBColorTable",
                        "address": "0x4de100"
                    },
                    {
                        "name": "GetDIBits",
                        "address": "0x4de104"
                    },
                    {
                        "name": "GetDeviceCaps",
                        "address": "0x4de108"
                    },
                    {
                        "name": "GetEnhMetaFileBits",
                        "address": "0x4de10c"
                    },
                    {
                        "name": "GetEnhMetaFileHeader",
                        "address": "0x4de110"
                    },
                    {
                        "name": "GetEnhMetaFilePaletteEntries",
                        "address": "0x4de114"
                    },
                    {
                        "name": "GetGlyphIndicesA",
                        "address": "0x4de118"
                    },
                    {
                        "name": "GetKerningPairsW",
                        "address": "0x4de11c"
                    },
                    {
                        "name": "GetNearestColor",
                        "address": "0x4de120"
                    },
                    {
                        "name": "GetNearestPaletteIndex",
                        "address": "0x4de124"
                    },
                    {
                        "name": "GetObjectA",
                        "address": "0x4de128"
                    },
                    {
                        "name": "GetPaletteEntries",
                        "address": "0x4de12c"
                    },
                    {
                        "name": "GetPixel",
                        "address": "0x4de130"
                    },
                    {
                        "name": "GetRgnBox",
                        "address": "0x4de134"
                    },
                    {
                        "name": "GetStockObject",
                        "address": "0x4de138"
                    },
                    {
                        "name": "GetSystemPaletteEntries",
                        "address": "0x4de13c"
                    },
                    {
                        "name": "GetTextAlign",
                        "address": "0x4de140"
                    },
                    {
                        "name": "GetTextColor",
                        "address": "0x4de144"
                    },
                    {
                        "name": "GetTextExtentExPointA",
                        "address": "0x4de148"
                    },
                    {
                        "name": "GetTextExtentPoint32A",
                        "address": "0x4de14c"
                    },
                    {
                        "name": "GetTextExtentPointA",
                        "address": "0x4de150"
                    },
                    {
                        "name": "GetTextFaceW",
                        "address": "0x4de154"
                    },
                    {
                        "name": "GetTextMetricsA",
                        "address": "0x4de158"
                    },
                    {
                        "name": "GetViewportOrgEx",
                        "address": "0x4de15c"
                    },
                    {
                        "name": "GetWinMetaFileBits",
                        "address": "0x4de160"
                    },
                    {
                        "name": "GetWindowOrgEx",
                        "address": "0x4de164"
                    },
                    {
                        "name": "EndPath",
                        "address": "0x4de168"
                    },
                    {
                        "name": "LineTo",
                        "address": "0x4de16c"
                    },
                    {
                        "name": "MaskBlt",
                        "address": "0x4de170"
                    },
                    {
                        "name": "MoveToEx",
                        "address": "0x4de174"
                    },
                    {
                        "name": "OffsetRgn",
                        "address": "0x4de178"
                    },
                    {
                        "name": "OffsetWindowOrgEx",
                        "address": "0x4de17c"
                    },
                    {
                        "name": "PATHOBJ_vEnumStart",
                        "address": "0x4de180"
                    },
                    {
                        "name": "PatBlt",
                        "address": "0x4de184"
                    },
                    {
                        "name": "PathToRegion",
                        "address": "0x4de188"
                    },
                    {
                        "name": "PlayEnhMetaFile",
                        "address": "0x4de18c"
                    },
                    {
                        "name": "PolyPolyline",
                        "address": "0x4de190"
                    },
                    {
                        "name": "Polygon",
                        "address": "0x4de194"
                    },
                    {
                        "name": "Polyline",
                        "address": "0x4de198"
                    },
                    {
                        "name": "PtInRegion",
                        "address": "0x4de19c"
                    },
                    {
                        "name": "RealizePalette",
                        "address": "0x4de1a0"
                    },
                    {
                        "name": "RectVisible",
                        "address": "0x4de1a4"
                    },
                    {
                        "name": "Rectangle",
                        "address": "0x4de1a8"
                    },
                    {
                        "name": "ResetDCA",
                        "address": "0x4de1ac"
                    },
                    {
                        "name": "RestoreDC",
                        "address": "0x4de1b0"
                    },
                    {
                        "name": "RoundRect",
                        "address": "0x4de1b4"
                    },
                    {
                        "name": "STROBJ_dwGetCodePage",
                        "address": "0x4de1b8"
                    },
                    {
                        "name": "STROBJ_vEnumStart",
                        "address": "0x4de1bc"
                    },
                    {
                        "name": "SelectClipPath",
                        "address": "0x4de1c0"
                    },
                    {
                        "name": "SelectClipRgn",
                        "address": "0x4de1c4"
                    },
                    {
                        "name": "SelectObject",
                        "address": "0x4de1c8"
                    },
                    {
                        "name": "SelectPalette",
                        "address": "0x4de1cc"
                    },
                    {
                        "name": "SetBkColor",
                        "address": "0x4de1d0"
                    },
                    {
                        "name": "SetBkMode",
                        "address": "0x4de1d4"
                    },
                    {
                        "name": "SetBrushOrgEx",
                        "address": "0x4de1d8"
                    },
                    {
                        "name": "SetDIBColorTable",
                        "address": "0x4de1dc"
                    },
                    {
                        "name": "SetDIBits",
                        "address": "0x4de1e0"
                    },
                    {
                        "name": "SetEnhMetaFileBits",
                        "address": "0x4de1e4"
                    },
                    {
                        "name": "SetPixel",
                        "address": "0x4de1e8"
                    },
                    {
                        "name": "SetROP2",
                        "address": "0x4de1ec"
                    },
                    {
                        "name": "SetRectRgn",
                        "address": "0x4de1f0"
                    },
                    {
                        "name": "SetStretchBltMode",
                        "address": "0x4de1f4"
                    },
                    {
                        "name": "SetTextAlign",
                        "address": "0x4de1f8"
                    },
                    {
                        "name": "SetTextColor",
                        "address": "0x4de1fc"
                    },
                    {
                        "name": "SetTextJustification",
                        "address": "0x4de200"
                    },
                    {
                        "name": "SetViewportOrgEx",
                        "address": "0x4de204"
                    },
                    {
                        "name": "SetWinMetaFileBits",
                        "address": "0x4de208"
                    },
                    {
                        "name": "SetWindowOrgEx",
                        "address": "0x4de20c"
                    },
                    {
                        "name": "StretchBlt",
                        "address": "0x4de210"
                    },
                    {
                        "name": "StretchDIBits",
                        "address": "0x4de214"
                    },
                    {
                        "name": "StrokePath",
                        "address": "0x4de218"
                    },
                    {
                        "name": "TextOutA",
                        "address": "0x4de21c"
                    },
                    {
                        "name": "TextOutW",
                        "address": "0x4de220"
                    },
                    {
                        "name": "EnableEUDC",
                        "address": "0x4de224"
                    },
                    {
                        "name": "EndFormPage",
                        "address": "0x4de228"
                    },
                    {
                        "name": "Ellipse",
                        "address": "0x4de22c"
                    },
                    {
                        "name": "DescribePixelFormat",
                        "address": "0x4de230"
                    },
                    {
                        "name": "DeleteObject",
                        "address": "0x4de234"
                    },
                    {
                        "name": "DeleteEnhMetaFile",
                        "address": "0x4de238"
                    },
                    {
                        "name": "DeleteDC",
                        "address": "0x4de23c"
                    },
                    {
                        "name": "CreateSolidBrush",
                        "address": "0x4de240"
                    },
                    {
                        "name": "CreateRoundRectRgn",
                        "address": "0x4de244"
                    },
                    {
                        "name": "CreateRectRgnIndirect",
                        "address": "0x4de248"
                    },
                    {
                        "name": "CreateRectRgn",
                        "address": "0x4de24c"
                    },
                    {
                        "name": "CreatePolygonRgn",
                        "address": "0x4de250"
                    },
                    {
                        "name": "CreatePenIndirect",
                        "address": "0x4de254"
                    },
                    {
                        "name": "CreatePalette",
                        "address": "0x4de258"
                    },
                    {
                        "name": "CreateHalftonePalette",
                        "address": "0x4de25c"
                    },
                    {
                        "name": "CreateFontIndirectA",
                        "address": "0x4de260"
                    },
                    {
                        "name": "CreateEllipticRgn",
                        "address": "0x4de264"
                    },
                    {
                        "name": "CreateDIBitmap",
                        "address": "0x4de268"
                    },
                    {
                        "name": "CreateDIBSection",
                        "address": "0x4de26c"
                    },
                    {
                        "name": "CreateCompatibleDC",
                        "address": "0x4de270"
                    },
                    {
                        "name": "CreateCompatibleBitmap",
                        "address": "0x4de274"
                    },
                    {
                        "name": "CreateColorSpaceW",
                        "address": "0x4de278"
                    },
                    {
                        "name": "CreateBrushIndirect",
                        "address": "0x4de27c"
                    },
                    {
                        "name": "CreateBitmap",
                        "address": "0x4de280"
                    },
                    {
                        "name": "CopyEnhMetaFileA",
                        "address": "0x4de284"
                    },
                    {
                        "name": "CombineRgn",
                        "address": "0x4de288"
                    },
                    {
                        "name": "CLIPOBJ_cEnumStart",
                        "address": "0x4de28c"
                    },
                    {
                        "name": "BitBlt",
                        "address": "0x4de290"
                    },
                    {
                        "name": "BeginPath",
                        "address": "0x4de294"
                    },
                    {
                        "name": "Arc",
                        "address": "0x4de298"
                    },
                    {
                        "name": "CloseEnhMetaFile",
                        "address": "0x4de29c"
                    },
                    {
                        "name": "GetEnhMetaFileA",
                        "address": "0x4de2a0"
                    },
                    {
                        "name": "GetSystemPaletteUse",
                        "address": "0x4de2a4"
                    },
                    {
                        "name": "UnrealizeObject",
                        "address": "0x4de2a8"
                    },
                    {
                        "name": "CreatePatternBrush",
                        "address": "0x4de2ac"
                    },
                    {
                        "name": "AbortDoc",
                        "address": "0x4de2b0"
                    },
                    {
                        "name": "GetTextCharacterExtra",
                        "address": "0x4de2b4"
                    },
                    {
                        "name": "GetBkColor",
                        "address": "0x4de2b8"
                    },
                    {
                        "name": "SaveDC",
                        "address": "0x4de2bc"
                    },
                    {
                        "name": "GdiFlush",
                        "address": "0x4de2c0"
                    },
                    {
                        "name": "EndPage",
                        "address": "0x4de2c4"
                    },
                    {
                        "name": "IntersectClipRect",
                        "address": "0x4de2c8"
                    },
                    {
                        "name": "AddFontResourceW",
                        "address": "0x4de2cc"
                    }
                ],
                "dll": "GDI32.dll"
            },
            {
                "imports": [
                    {
                        "name": "GetSaveFileNameW",
                        "address": "0x4de0a4"
                    }
                ],
                "dll": "COMDLG32.dll"
            },
            {
                "imports": [
                    {
                        "name": "RegOpenKeyA",
                        "address": "0x4de000"
                    },
                    {
                        "name": "OpenSCManagerA",
                        "address": "0x4de004"
                    },
                    {
                        "name": "OpenServiceA",
                        "address": "0x4de008"
                    },
                    {
                        "name": "QueryServiceStatus",
                        "address": "0x4de00c"
                    },
                    {
                        "name": "RegCloseKey",
                        "address": "0x4de010"
                    },
                    {
                        "name": "RegCreateKeyExA",
                        "address": "0x4de014"
                    },
                    {
                        "name": "RegDeleteKeyA",
                        "address": "0x4de018"
                    },
                    {
                        "name": "RegFlushKey",
                        "address": "0x4de01c"
                    },
                    {
                        "name": "RegOpenKeyExA",
                        "address": "0x4de020"
                    },
                    {
                        "name": "RegOpenKeyExW",
                        "address": "0x4de024"
                    },
                    {
                        "name": "RegQueryValueA",
                        "address": "0x4de028"
                    },
                    {
                        "name": "RegQueryValueExA",
                        "address": "0x4de02c"
                    },
                    {
                        "name": "RegSetValueExA",
                        "address": "0x4de030"
                    },
                    {
                        "name": "CloseServiceHandle",
                        "address": "0x4de034"
                    }
                ],
                "dll": "ADVAPI32.dll"
            },
            {
                "imports": [
                    {
                        "name": "SHFileOperation",
                        "address": "0x4de5dc"
                    },
                    {
                        "name": "Shell_NotifyIconA",
                        "address": "0x4de5e0"
                    },
                    {
                        "name": "ShellExecuteA",
                        "address": "0x4de5e4"
                    },
                    {
                        "name": "DragQueryFileA",
                        "address": "0x4de5e8"
                    },
                    {
                        "name": "DuplicateIcon",
                        "address": "0x4de5ec"
                    },
                    {
                        "name": "ExtractAssociatedIconExA",
                        "address": "0x4de5f0"
                    },
                    {
                        "name": "SHAppBarMessage",
                        "address": "0x4de5f4"
                    },
                    {
                        "name": "SHCreateDirectoryExW",
                        "address": "0x4de5f8"
                    },
                    {
                        "name": "Shell_NotifyIconW",
                        "address": "0x4de5fc"
                    },
                    {
                        "name": "SHFileOperationW",
                        "address": "0x4de600"
                    },
                    {
                        "name": "SHGetDataFromIDListW",
                        "address": "0x4de604"
                    },
                    {
                        "name": "SHGetFolderLocation",
                        "address": "0x4de608"
                    },
                    {
                        "name": "SHGetInstanceExplorer",
                        "address": "0x4de60c"
                    },
                    {
                        "name": "SHGetPathFromIDListW",
                        "address": "0x4de610"
                    },
                    {
                        "name": "SHInvokePrinterCommandA",
                        "address": "0x4de614"
                    }
                ],
                "dll": "SHELL32.dll"
            },
            {
                "imports": [
                    {
                        "name": "StringFromGUID2",
                        "address": "0x4de9cc"
                    },
                    {
                        "name": "StringFromCLSID",
                        "address": "0x4de9d0"
                    },
                    {
                        "name": "IsEqualGUID",
                        "address": "0x4de9d4"
                    },
                    {
                        "name": "CoUninitialize",
                        "address": "0x4de9d8"
                    },
                    {
                        "name": "CoTaskMemFree",
                        "address": "0x4de9dc"
                    },
                    {
                        "name": "CoInitializeEx",
                        "address": "0x4de9e0"
                    },
                    {
                        "name": "CoInitialize",
                        "address": "0x4de9e4"
                    },
                    {
                        "name": "CoCreateInstance",
                        "address": "0x4de9e8"
                    }
                ],
                "dll": "ole32.dll"
            },
            {
                "imports": [
                    {
                        "name": "PathIsUNCW",
                        "address": "0x4de61c"
                    },
                    {
                        "name": "PathIsRelativeW",
                        "address": "0x4de620"
                    },
                    {
                        "name": "StrRChrIA",
                        "address": "0x4de624"
                    }
                ],
                "dll": "SHLWAPI.dll"
            },
            {
                "imports": [
                    {
                        "name": "ImageList_DrawEx",
                        "address": "0x4de03c"
                    },
                    {
                        "name": "ImageList_Draw",
                        "address": "0x4de040"
                    },
                    {
                        "name": "ImageList_DragShowNolock",
                        "address": "0x4de044"
                    },
                    {
                        "name": "ImageList_DragMove",
                        "address": "0x4de048"
                    },
                    {
                        "name": "ImageList_EndDrag",
                        "address": "0x4de04c"
                    },
                    {
                        "name": "ImageList_DragEnter",
                        "address": "0x4de050"
                    },
                    {
                        "name": "ImageList_Destroy",
                        "address": "0x4de054"
                    },
                    {
                        "name": "ImageList_Create",
                        "address": "0x4de058"
                    },
                    {
                        "name": "ImageList_BeginDrag",
                        "address": "0x4de05c"
                    },
                    {
                        "name": "ImageList_Add",
                        "address": "0x4de060"
                    },
                    {
                        "name": "ImageList_GetBkColor",
                        "address": "0x4de064"
                    },
                    {
                        "name": "ImageList_GetDragImage",
                        "address": "0x4de068"
                    },
                    {
                        "name": "ImageList_GetIconSize",
                        "address": "0x4de06c"
                    },
                    {
                        "name": "ImageList_GetImageCount",
                        "address": "0x4de070"
                    },
                    {
                        "name": "ImageList_LoadImageA",
                        "address": "0x4de074"
                    },
                    {
                        "name": "ImageList_Read",
                        "address": "0x4de078"
                    },
                    {
                        "name": "ImageList_Remove",
                        "address": "0x4de07c"
                    },
                    {
                        "name": "ImageList_Replace",
                        "address": "0x4de080"
                    },
                    {
                        "name": "ImageList_ReplaceIcon",
                        "address": "0x4de084"
                    },
                    {
                        "name": "ImageList_SetBkColor",
                        "address": "0x4de088"
                    },
                    {
                        "name": "ImageList_SetDragCursorImage",
                        "address": "0x4de08c"
                    },
                    {
                        "name": "ImageList_SetIconSize",
                        "address": "0x4de090"
                    },
                    {
                        "name": "ImageList_Write",
                        "address": "0x4de094"
                    },
                    {
                        "name": "ImageList_DragLeave",
                        "address": "0x4de098"
                    },
                    {
                        "name": null,
                        "address": "0x4de09c"
                    }
                ],
                "dll": "COMCTL32.dll"
            }
        ],
        "digital_signers": null,
        "exported_dll_name": null,
        "actual_checksum": "0x000f570f",
        "overlay": {
            "size": "0x000014b0",
            "offset": "0x000e4800"
        },
        "imagebase": "0x00400000",
        "reported_checksum": "0x000f36eb",
        "icon_hash": null,
        "entrypoint": "0x00401000",
        "timestamp": "2019-06-21 03:15:38",
        "osversion": "5.0",
        "sections": [
            {
                "name": ".text",
                "characteristics": "IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ",
                "virtual_address": "0x00001000",
                "size_of_data": "0x000dce00",
                "entropy": "7.94",
                "raw_address": "0x00000400",
                "virtual_size": "0x000dcd9b",
                "characteristics_raw": "0x60000020"
            },
            {
                "name": ".rdata",
                "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
                "virtual_address": "0x000de000",
                "size_of_data": "0x00004200",
                "entropy": "5.73",
                "raw_address": "0x000dd200",
                "virtual_size": "0x00004088",
                "characteristics_raw": "0x40000040"
            },
            {
                "name": ".data",
                "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
                "virtual_address": "0x000e3000",
                "size_of_data": "0x00001000",
                "entropy": "4.93",
                "raw_address": "0x000e1400",
                "virtual_size": "0x00000f58",
                "characteristics_raw": "0xc0000040"
            },
            {
                "name": ".rsrc",
                "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
                "virtual_address": "0x000e4000",
                "size_of_data": "0x00002400",
                "entropy": "4.05",
                "raw_address": "0x000e2400",
                "virtual_size": "0x00123380",
                "characteristics_raw": "0x40000040"
            }
        ],
        "resources": [],
        "dirents": [
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x000de9f0",
                "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
                "size": "0x000000c8"
            },
            {
                "virtual_address": "0x000e4000",
                "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
                "size": "0x00002380"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x000e4800",
                "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
                "size": "0x000014b0"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_TLS",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x000de000",
                "name": "IMAGE_DIRECTORY_ENTRY_IAT",
                "size": "0x000009f0"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
                "size": "0x00000000"
            }
        ],
        "exports": [],
        "guest_signers": {},
        "imphash": "c7572d1f2d38207b5314572c3d03cdb6",
        "icon_fuzzy": null,
        "icon": null,
        "pdbpath": null,
        "imported_dll_count": 9,
        "versioninfo": []
    }
}

[*] Resolved APIs: [
    "advapi32.dll.RegQueryValueExA",
    "kernel32.dll.LoadLibraryExA",
    "kernel32.dll.GetProcAddress",
    "kernel32.dll.VirtualAlloc",
    "kernel32.dll.SetFilePointer",
    "kernel32.dll.lstrlenA",
    "kernel32.dll.lstrcatA",
    "kernel32.dll.VirtualProtect",
    "kernel32.dll.UnmapViewOfFile",
    "kernel32.dll.GetModuleHandleA",
    "kernel32.dll.WriteFile",
    "kernel32.dll.CloseHandle",
    "kernel32.dll.VirtualFree",
    "kernel32.dll.GetTempPathA",
    "kernel32.dll.CreateFileA",
    "kernel32.dll.LoadLibraryA",
    "kernel32.dll.ExitProcess",
    "advapi32.dll.RegCloseKey",
    "oleaut32.dll.#6",
    "shell32.dll.SHGetMalloc",
    "user32.dll.CharUpperA",
    "ws2_32.dll.#1",
    "kernel32.dll.Sleep",
    "kernel32.dll.GetSystemTimeAsFileTime",
    "kernel32.dll.HeapFree",
    "kernel32.dll.HeapAlloc",
    "kernel32.dll.GetProcessHeap",
    "kernel32.dll.OpenProcess",
    "kernel32.dll.CreatePipe",
    "kernel32.dll.CreateProcessA",
    "kernel32.dll.GetExitCodeProcess",
    "kernel32.dll.SetHandleInformation",
    "kernel32.dll.PeekNamedPipe",
    "kernel32.dll.LocalFree",
    "kernel32.dll.GlobalMemoryStatusEx",
    "kernel32.dll.CreateFileMappingA",
    "kernel32.dll.InitializeCriticalSection",
    "kernel32.dll.InterlockedDecrement",
    "kernel32.dll.ReadFile",
    "kernel32.dll.CreateFileW",
    "kernel32.dll.GetLastError",
    "kernel32.dll.TerminateProcess",
    "kernel32.dll.GetCurrentProcess",
    "kernel32.dll.UnhandledExceptionFilter",
    "kernel32.dll.SetUnhandledExceptionFilter",
    "kernel32.dll.IsDebuggerPresent",
    "kernel32.dll.GetCommandLineA",
    "kernel32.dll.GetStartupInfoA",
    "kernel32.dll.RaiseException",
    "kernel32.dll.RtlUnwind",
    "kernel32.dll.GetModuleHandleW",
    "kernel32.dll.TlsGetValue",
    "kernel32.dll.TlsAlloc",
    "kernel32.dll.TlsSetValue",
    "kernel32.dll.TlsFree",
    "kernel32.dll.InterlockedIncrement",
    "kernel32.dll.SetLastError",
    "kernel32.dll.GetCurrentThreadId",
    "kernel32.dll.HeapSize",
    "kernel32.dll.GetStdHandle",
    "kernel32.dll.GetModuleFileNameA",
    "kernel32.dll.FreeEnvironmentStringsA",
    "kernel32.dll.GetEnvironmentStrings",
    "kernel32.dll.FreeEnvironmentStringsW",
    "kernel32.dll.WideCharToMultiByte",
    "kernel32.dll.GetEnvironmentStringsW",
    "kernel32.dll.SetHandleCount",
    "kernel32.dll.GetFileType",
    "kernel32.dll.DeleteCriticalSection",
    "kernel32.dll.HeapCreate",
    "kernel32.dll.QueryPerformanceCounter",
    "kernel32.dll.GetTickCount",
    "kernel32.dll.GetCurrentProcessId",
    "kernel32.dll.SetEvent",
    "kernel32.dll.GetACP",
    "kernel32.dll.DeleteFileA",
    "kernel32.dll.IsValidCodePage",
    "kernel32.dll.EnterCriticalSection",
    "kernel32.dll.LeaveCriticalSection",
    "kernel32.dll.GetConsoleCP",
    "kernel32.dll.GetConsoleMode",
    "kernel32.dll.FlushFileBuffers",
    "kernel32.dll.MultiByteToWideChar",
    "kernel32.dll.LCMapStringA",
    "kernel32.dll.LCMapStringW",
    "kernel32.dll.HeapReAlloc",
    "kernel32.dll.SetConsoleCtrlHandler",
    "kernel32.dll.FreeLibrary",
    "kernel32.dll.InitializeCriticalSectionAndSpinCount",
    "kernel32.dll.GetLocaleInfoA",
    "kernel32.dll.GetStringTypeA",
    "kernel32.dll.GetStringTypeW",
    "kernel32.dll.GetTimeFormatA",
    "kernel32.dll.GetDateFormatA",
    "kernel32.dll.SetStdHandle",
    "kernel32.dll.WriteConsoleA",
    "kernel32.dll.GetConsoleOutputCP",
    "kernel32.dll.WriteConsoleW",
    "kernel32.dll.GetTimeZoneInformation",
    "kernel32.dll.SetEndOfFile",
    "kernel32.dll.CompareStringA",
    "kernel32.dll.CompareStringW",
    "kernel32.dll.SetEnvironmentVariableA",
    "kernel32.dll.GetSystemInfo",
    "kernel32.dll.OpenEventA",
    "kernel32.dll.ResetEvent",
    "kernel32.dll.ResumeThread",
    "kernel32.dll.SystemTimeToFileTime",
    "kernel32.dll.WaitForMultipleObjects",
    "kernel32.dll.SetWaitableTimer",
    "kernel32.dll.CreateWaitableTimerA",
    "kernel32.dll.GetVersion",
    "kernel32.dll.GlobalMemoryStatus",
    "kernel32.dll.GetVersionExA",
    "kernel32.dll.FlushConsoleInputBuffer",
    "kernel32.dll.VerSetConditionMask",
    "kernel32.dll.SleepEx",
    "kernel32.dll.VerifyVersionInfoA",
    "kernel32.dll.ExpandEnvironmentStringsA",
    "kernel32.dll.FormatMessageA",
    "kernel32.dll.MapViewOfFile",
    "kernel32.dll.GetFileSize",
    "kernel32.dll.CreateIoCompletionPort",
    "kernel32.dll.PostQueuedCompletionStatus",
    "kernel32.dll.ReleaseSemaphore",
    "kernel32.dll.CreateSemaphoreA",
    "kernel32.dll.GetQueuedCompletionStatus",
    "kernel32.dll.GetFileInformationByHandle",
    "kernel32.dll.MoveFileA",
    "kernel32.dll.LockFile",
    "kernel32.dll.UnlockFile",
    "kernel32.dll.GetModuleFileNameW",
    "kernel32.dll.LoadLibraryW",
    "kernel32.dll.CreateDirectoryA",
    "kernel32.dll.GetOEMCP",
    "kernel32.dll.WaitForSingleObject",
    "kernel32.dll.GetCPInfo",
    "kernel32.dll.CreateEventA",
    "kernel32.dll.GetSystemDirectoryA",
    "kernel32.dll.GetCurrentDirectoryA",
    "kernel32.dll.GetFullPathNameA",
    "kernel32.dll.FindFirstFileA",
    "kernel32.dll.GetDriveTypeA",
    "kernel32.dll.FileTimeToLocalFileTime",
    "kernel32.dll.FileTimeToSystemTime",
    "kernel32.dll.FindClose",
    "kernel32.dll.SetConsoleMode",
    "kernel32.dll.ReadConsoleInputA",
    "kernel32.dll.CreateThread",
    "kernel32.dll.ExitThread",
    "kernel32.dll.VirtualQuery",
    "advapi32.dll.DeregisterEventSource",
    "advapi32.dll.RegisterEventSourceA",
    "advapi32.dll.ReportEventA",
    "advapi32.dll.RegOpenKeyExA",
    "advapi32.dll.CryptAcquireContextA",
    "advapi32.dll.CryptGenRandom",
    "oleaut32.dll.#9",
    "oleaut32.dll.#2",
    "shell32.dll.SHGetSpecialFolderLocation",
    "shell32.dll.SHGetSpecialFolderPathA",
    "shell32.dll.SHGetPathFromIDListA",
    "user32.dll.MessageBoxA",
    "user32.dll.CharLowerW",
    "user32.dll.GetUserObjectInformationW",
    "user32.dll.GetDesktopWindow",
    "user32.dll.GetProcessWindowStation",
    "user32.dll.CharUpperW",
    "ws2_32.dll.freeaddrinfo",
    "ws2_32.dll.getaddrinfo",
    "ws2_32.dll.#17",
    "ws2_32.dll.#55",
    "ws2_32.dll.#54",
    "ws2_32.dll.#13",
    "ws2_32.dll.#8",
    "ws2_32.dll.#14",
    "ws2_32.dll.#57",
    "ws2_32.dll.#52",
    "ws2_32.dll.#10",
    "ws2_32.dll.#19",
    "ws2_32.dll.#18",
    "ws2_32.dll.#151",
    "ws2_32.dll.#5",
    "ws2_32.dll.WSAIoctl",
    "ws2_32.dll.#4",
    "ws2_32.dll.#111",
    "ws2_32.dll.#9",
    "ws2_32.dll.#15",
    "ws2_32.dll.#20",
    "ws2_32.dll.#22",
    "ws2_32.dll.#6",
    "ws2_32.dll.#21",
    "ws2_32.dll.#16",
    "ws2_32.dll.#2",
    "ws2_32.dll.#23",
    "ws2_32.dll.#112",
    "ws2_32.dll.#3",
    "ws2_32.dll.#7",
    "ws2_32.dll.#115",
    "ws2_32.dll.#116",
    "kernel32.dll.FlsAlloc",
    "kernel32.dll.FlsGetValue",
    "kernel32.dll.FlsSetValue",
    "kernel32.dll.FlsFree",
    "kernel32.dll.IsProcessorFeaturePresent",
    "kernel32.dll.GetComputerNameW",
    "kernel32.dll.GetLogicalDriveStringsW",
    "kernel32.dll.GetVolumeInformationW",
    "kernel32.dll.GetDriveTypeW",
    "kernel32.dll.GetSystemDirectoryW",
    "kernel32.dll.GetWindowsDirectoryA",
    "kernel32.dll.GetWindowsDirectoryW",
    "kernel32.dll.GetTempPathW",
    "kernel32.dll.FindFirstFileW",
    "kernel32.dll.FindNextFileW",
    "kernel32.dll.SetFileAttributesW",
    "kernel32.dll.GetFileAttributesW",
    "kernel32.dll.MoveFileW",
    "kernel32.dll.CreateDirectoryW",
    "kernel32.dll.DeleteFileW",
    "kernel32.dll.CopyFileW",
    "kernel32.dll.DeviceIoControl",
    "kernel32.dll.GetShortPathNameW",
    "kernel32.dll.GetVersionExW",
    "kernel32.dll.SetErrorMode",
    "kernel32.dll.CreateProcessW",
    "kernel32.dll.Wow64DisableWow64FsRedirection",
    "kernel32.dll.Wow64RevertWow64FsRedirection",
    "advapi32.dll.RegOpenKeyExW",
    "advapi32.dll.RegQueryValueExW",
    "advapi32.dll.RegSetValueExW",
    "advapi32.dll.RegCreateKeyExW",
    "advapi32.dll.RegDeleteValueW",
    "advapi32.dll.RegEnumKeyW",
    "advapi32.dll.RegQueryInfoKeyW",
    "advapi32.dll.GetUserNameW",
    "shell32.dll.SHGetFolderPathW",
    "shell32.dll.ShellExecuteW",
    "shell32.dll.SHGetKnownFolderPath",
    "ole32.dll.CoInitializeEx",
    "ole32.dll.CoUninitialize",
    "ole32.dll.CoCreateInstance",
    "ole32.dll.CoInitializeSecurity",
    "ole32.dll.CoSetProxyBlanket",
    "ole32.dll.CoTaskMemFree",
    "oleaut32.dll.VariantClear",
    "user32.dll.GetWindowRect",
    "user32.dll.GetDC",
    "user32.dll.DrawTextW",
    "user32.dll.SystemParametersInfoW",
    "user32.dll.GetForegroundWindow",
    "gdi32.dll.CreateCompatibleDC",
    "gdi32.dll.CreateCompatibleBitmap",
    "gdi32.dll.SelectObject",
    "gdi32.dll.DeleteObject",
    "gdi32.dll.DeleteDC",
    "gdi32.dll.CreateBrushIndirect",
    "gdi32.dll.SetTextColor",
    "gdi32.dll.SetBkColor",
    "gdi32.dll.GetCurrentObject",
    "gdi32.dll.GetObjectA",
    "gdi32.dll.CreateFontIndirectA",
    "gdi32.dll.CreateDIBSection",
    "gdi32.dll.BitBlt",
    "gdi32.dll.ExtFloodFill",
    "netapi32.dll.NetServerGetInfo",
    "netapi32.dll.NetApiBufferFree",
    "netapi32.dll.NetWkstaGetInfo",
    "kernel32.dll.SetProcessDEPPolicy",
    "netapi32.dll.NetStatisticsGet",
    "advapi32.dll.CryptAcquireContextW",
    "advapi32.dll.CryptReleaseContext",
    "cryptsp.dll.CryptAcquireContextW",
    "cryptsp.dll.CryptGenRandom",
    "cryptsp.dll.CryptReleaseContext",
    "user32.dll.GetCursorInfo",
    "user32.dll.GetQueueStatus",
    "kernel32.dll.CreateToolhelp32Snapshot",
    "kernel32.dll.Heap32First",
    "kernel32.dll.Heap32Next",
    "kernel32.dll.Heap32ListFirst",
    "kernel32.dll.Heap32ListNext",
    "kernel32.dll.Process32First",
    "kernel32.dll.Process32Next",
    "kernel32.dll.Thread32First",
    "kernel32.dll.Thread32Next",
    "kernel32.dll.Module32First",
    "kernel32.dll.Module32Next",
    "cryptsp.dll.CryptAcquireContextA",
    "cryptbase.dll.SystemFunction036",
    "uxtheme.dll.ThemeInitApiHook",
    "user32.dll.IsProcessDPIAware",
    "ole32.dll.CreateBindCtx",
    "ole32.dll.CoTaskMemAlloc",
    "ole32.dll.CoGetApartmentType",
    "ole32.dll.CoRegisterInitializeSpy",
    "comctl32.dll.#236",
    "ole32.dll.CoGetMalloc",
    "comctl32.dll.#320",
    "comctl32.dll.#324",
    "comctl32.dll.#323",
    "comctl32.dll.#328",
    "comctl32.dll.#334",
    "setupapi.dll.CM_Get_Device_Interface_List_Size_ExW",
    "setupapi.dll.CM_Get_Device_Interface_List_ExW",
    "comctl32.dll.#332",
    "comctl32.dll.#386",
    "advapi32.dll.InitializeSecurityDescriptor",
    "advapi32.dll.SetEntriesInAclW",
    "ntmarta.dll.GetMartaExtensionInterface",
    "advapi32.dll.SetSecurityDescriptorDacl",
    "advapi32.dll.IsTextUnicode",
    "comctl32.dll.#338",
    "comctl32.dll.#339",
    "shell32.dll.#102",
    "ole32.dll.CoRevokeInitializeSpy",
    "comctl32.dll.#388",
    "ole32.dll.NdrOleInitializeExtension",
    "ole32.dll.CoGetClassObject",
    "ole32.dll.CoGetMarshalSizeMax",
    "ole32.dll.CoMarshalInterface",
    "ole32.dll.CoUnmarshalInterface",
    "ole32.dll.StringFromIID",
    "ole32.dll.CoGetPSClsid",
    "ole32.dll.CoReleaseMarshalData",
    "ole32.dll.DcomChannelSetHResult",
    "oleaut32.dll.#500",
    "iphlpapi.dll.GetAdaptersAddresses"
]

[*] Static Analysis: {
    "pe": {
        "peid_signatures": null,
        "imports": [
            {
                "imports": [
                    {
                        "name": "lstrcatA",
                        "address": "0x4de2d4"
                    },
                    {
                        "name": "lstrcatW",
                        "address": "0x4de2d8"
                    },
                    {
                        "name": "lstrcmpA",
                        "address": "0x4de2dc"
                    },
                    {
                        "name": "lstrcmpW",
                        "address": "0x4de2e0"
                    },
                    {
                        "name": "lstrcmpiA",
                        "address": "0x4de2e4"
                    },
                    {
                        "name": "lstrcmpiW",
                        "address": "0x4de2e8"
                    },
                    {
                        "name": "_hwrite",
                        "address": "0x4de2ec"
                    },
                    {
                        "name": "lstrcpyW",
                        "address": "0x4de2f0"
                    },
                    {
                        "name": "lstrcpynA",
                        "address": "0x4de2f4"
                    },
                    {
                        "name": "lstrcpynW",
                        "address": "0x4de2f8"
                    },
                    {
                        "name": "lstrlenA",
                        "address": "0x4de2fc"
                    },
                    {
                        "name": "lstrlenW",
                        "address": "0x4de300"
                    },
                    {
                        "name": "WritePrivateProfileStringA",
                        "address": "0x4de304"
                    },
                    {
                        "name": "WriteFile",
                        "address": "0x4de308"
                    },
                    {
                        "name": "WideCharToMultiByte",
                        "address": "0x4de30c"
                    },
                    {
                        "name": "WaitForSingleObject",
                        "address": "0x4de310"
                    },
                    {
                        "name": "WaitForMultipleObjects",
                        "address": "0x4de314"
                    },
                    {
                        "name": "VirtualQuery",
                        "address": "0x4de318"
                    },
                    {
                        "name": "VirtualProtect",
                        "address": "0x4de31c"
                    },
                    {
                        "name": "VirtualFree",
                        "address": "0x4de320"
                    },
                    {
                        "name": "UpdateResourceW",
                        "address": "0x4de324"
                    },
                    {
                        "name": "UnhandledExceptionFilter",
                        "address": "0x4de328"
                    },
                    {
                        "name": "TlsSetValue",
                        "address": "0x4de32c"
                    },
                    {
                        "name": "TlsGetValue",
                        "address": "0x4de330"
                    },
                    {
                        "name": "TlsAlloc",
                        "address": "0x4de334"
                    },
                    {
                        "name": "TerminateThread",
                        "address": "0x4de338"
                    },
                    {
                        "name": "TerminateProcess",
                        "address": "0x4de33c"
                    },
                    {
                        "name": "SwitchToThread",
                        "address": "0x4de340"
                    },
                    {
                        "name": "Sleep",
                        "address": "0x4de344"
                    },
                    {
                        "name": "SizeofResource",
                        "address": "0x4de348"
                    },
                    {
                        "name": "SetVolumeMountPointW",
                        "address": "0x4de34c"
                    },
                    {
                        "name": "SetUnhandledExceptionFilter",
                        "address": "0x4de350"
                    },
                    {
                        "name": "SetThreadLocale",
                        "address": "0x4de354"
                    },
                    {
                        "name": "SetThreadExecutionState",
                        "address": "0x4de358"
                    },
                    {
                        "name": "SetNamedPipeHandleState",
                        "address": "0x4de35c"
                    },
                    {
                        "name": "SetMailslotInfo",
                        "address": "0x4de360"
                    },
                    {
                        "name": "SetLocaleInfoW",
                        "address": "0x4de364"
                    },
                    {
                        "name": "SetLastError",
                        "address": "0x4de368"
                    },
                    {
                        "name": "SetFilePointerEx",
                        "address": "0x4de36c"
                    },
                    {
                        "name": "SetFilePointer",
                        "address": "0x4de370"
                    },
                    {
                        "name": "SetEvent",
                        "address": "0x4de374"
                    },
                    {
                        "name": "SetErrorMode",
                        "address": "0x4de378"
                    },
                    {
                        "name": "SetEndOfFile",
                        "address": "0x4de37c"
                    },
                    {
                        "name": "SetConsoleTitleW",
                        "address": "0x4de380"
                    },
                    {
                        "name": "RtlUnwind",
                        "address": "0x4de384"
                    },
                    {
                        "name": "RtlMoveMemory",
                        "address": "0x4de388"
                    },
                    {
                        "name": "ResumeThread",
                        "address": "0x4de38c"
                    },
                    {
                        "name": "ResetEvent",
                        "address": "0x4de390"
                    },
                    {
                        "name": "ReadFile",
                        "address": "0x4de394"
                    },
                    {
                        "name": "ReadConsoleOutputCharacterW",
                        "address": "0x4de398"
                    },
                    {
                        "name": "RaiseException",
                        "address": "0x4de39c"
                    },
                    {
                        "name": "QueryPerformanceCounter",
                        "address": "0x4de3a0"
                    },
                    {
                        "name": "QueryDosDeviceW",
                        "address": "0x4de3a4"
                    },
                    {
                        "name": "PurgeComm",
                        "address": "0x4de3a8"
                    },
                    {
                        "name": "OutputDebugStringA",
                        "address": "0x4de3ac"
                    },
                    {
                        "name": "OpenSemaphoreA",
                        "address": "0x4de3b0"
                    },
                    {
                        "name": "OpenJobObjectA",
                        "address": "0x4de3b4"
                    },
                    {
                        "name": "MultiByteToWideChar",
                        "address": "0x4de3b8"
                    },
                    {
                        "name": "MulDiv",
                        "address": "0x4de3bc"
                    },
                    {
                        "name": "MoveFileW",
                        "address": "0x4de3c0"
                    },
                    {
                        "name": "LockResource",
                        "address": "0x4de3c4"
                    },
                    {
                        "name": "LocalUnlock",
                        "address": "0x4de3c8"
                    },
                    {
                        "name": "LocalFree",
                        "address": "0x4de3cc"
                    },
                    {
                        "name": "LocalAlloc",
                        "address": "0x4de3d0"
                    },
                    {
                        "name": "LoadResource",
                        "address": "0x4de3d4"
                    },
                    {
                        "name": "LoadLibraryW",
                        "address": "0x4de3d8"
                    },
                    {
                        "name": "LoadLibraryExA",
                        "address": "0x4de3dc"
                    },
                    {
                        "name": "LeaveCriticalSection",
                        "address": "0x4de3e0"
                    },
                    {
                        "name": "LCMapStringA",
                        "address": "0x4de3e4"
                    },
                    {
                        "name": "IsValidLocale",
                        "address": "0x4de3e8"
                    },
                    {
                        "name": "IsValidCodePage",
                        "address": "0x4de3ec"
                    },
                    {
                        "name": "IsDBCSLeadByte",
                        "address": "0x4de3f0"
                    },
                    {
                        "name": "IsBadWritePtr",
                        "address": "0x4de3f4"
                    },
                    {
                        "name": "IsBadStringPtrW",
                        "address": "0x4de3f8"
                    },
                    {
                        "name": "IsBadReadPtr",
                        "address": "0x4de3fc"
                    },
                    {
                        "name": "IsBadCodePtr",
                        "address": "0x4de400"
                    },
                    {
                        "name": "InterlockedIncrement",
                        "address": "0x4de404"
                    },
                    {
                        "name": "InterlockedExchange",
                        "address": "0x4de408"
                    },
                    {
                        "name": "InterlockedDecrement",
                        "address": "0x4de40c"
                    },
                    {
                        "name": "InitializeCriticalSection",
                        "address": "0x4de410"
                    },
                    {
                        "name": "HeapFree",
                        "address": "0x4de414"
                    },
                    {
                        "name": "HeapAlloc",
                        "address": "0x4de418"
                    },
                    {
                        "name": "GlobalUnlock",
                        "address": "0x4de41c"
                    },
                    {
                        "name": "GlobalSize",
                        "address": "0x4de420"
                    },
                    {
                        "name": "GlobalReAlloc",
                        "address": "0x4de424"
                    },
                    {
                        "name": "GlobalLock",
                        "address": "0x4de428"
                    },
                    {
                        "name": "GlobalHandle",
                        "address": "0x4de42c"
                    },
                    {
                        "name": "GlobalFree",
                        "address": "0x4de430"
                    },
                    {
                        "name": "GlobalFindAtomA",
                        "address": "0x4de434"
                    },
                    {
                        "name": "GlobalDeleteAtom",
                        "address": "0x4de438"
                    },
                    {
                        "name": "GlobalAlloc",
                        "address": "0x4de43c"
                    },
                    {
                        "name": "GlobalAddAtomW",
                        "address": "0x4de440"
                    },
                    {
                        "name": "GlobalAddAtomA",
                        "address": "0x4de444"
                    },
                    {
                        "name": "GetWindowsDirectoryW",
                        "address": "0x4de448"
                    },
                    {
                        "name": "GetWindowsDirectoryA",
                        "address": "0x4de44c"
                    },
                    {
                        "name": "GetVolumePathNamesForVolumeNameW",
                        "address": "0x4de450"
                    },
                    {
                        "name": "GetVolumePathNameW",
                        "address": "0x4de454"
                    },
                    {
                        "name": "GetVolumeNameForVolumeMountPointW",
                        "address": "0x4de458"
                    },
                    {
                        "name": "GetVersionExA",
                        "address": "0x4de45c"
                    },
                    {
                        "name": "GetVersion",
                        "address": "0x4de460"
                    },
                    {
                        "name": "GetUserDefaultLCID",
                        "address": "0x4de464"
                    },
                    {
                        "name": "GetTimeFormatA",
                        "address": "0x4de468"
                    },
                    {
                        "name": "GetTickCount",
                        "address": "0x4de46c"
                    },
                    {
                        "name": "GetThreadLocale",
                        "address": "0x4de470"
                    },
                    {
                        "name": "GetTempPathA",
                        "address": "0x4de474"
                    },
                    {
                        "name": "GetSystemTimeAsFileTime",
                        "address": "0x4de478"
                    },
                    {
                        "name": "GetSystemInfo",
                        "address": "0x4de47c"
                    },
                    {
                        "name": "GetSystemDirectoryW",
                        "address": "0x4de480"
                    },
                    {
                        "name": "GetSystemDirectoryA",
                        "address": "0x4de484"
                    },
                    {
                        "name": "GetSystemDefaultLangID",
                        "address": "0x4de488"
                    },
                    {
                        "name": "GetStringTypeW",
                        "address": "0x4de48c"
                    },
                    {
                        "name": "GetStringTypeExA",
                        "address": "0x4de490"
                    },
                    {
                        "name": "GetStringTypeA",
                        "address": "0x4de494"
                    },
                    {
                        "name": "GetStdHandle",
                        "address": "0x4de498"
                    },
                    {
                        "name": "GetStartupInfoA",
                        "address": "0x4de49c"
                    },
                    {
                        "name": "GetProcessHeap",
                        "address": "0x4de4a0"
                    },
                    {
                        "name": "GetPrivateProfileStringW",
                        "address": "0x4de4a4"
                    },
                    {
                        "name": "GetPrivateProfileStringA",
                        "address": "0x4de4a8"
                    },
                    {
                        "name": "GetOEMCP",
                        "address": "0x4de4ac"
                    },
                    {
                        "name": "GetModuleHandleA",
                        "address": "0x4de4b0"
                    },
                    {
                        "name": "GetModuleFileNameW",
                        "address": "0x4de4b4"
                    },
                    {
                        "name": "GetModuleFileNameA",
                        "address": "0x4de4b8"
                    },
                    {
                        "name": "GetLogicalDriveStringsA",
                        "address": "0x4de4bc"
                    },
                    {
                        "name": "GetLocaleInfoA",
                        "address": "0x4de4c0"
                    },
                    {
                        "name": "GetLocalTime",
                        "address": "0x4de4c4"
                    },
                    {
                        "name": "GetLastError",
                        "address": "0x4de4c8"
                    },
                    {
                        "name": "GetFullPathNameA",
                        "address": "0x4de4cc"
                    },
                    {
                        "name": "GetFileAttributesW",
                        "address": "0x4de4d0"
                    },
                    {
                        "name": "GetFileAttributesA",
                        "address": "0x4de4d4"
                    },
                    {
                        "name": "GetExitCodeThread",
                        "address": "0x4de4d8"
                    },
                    {
                        "name": "GetDriveTypeW",
                        "address": "0x4de4dc"
                    },
                    {
                        "name": "GetDiskFreeSpaceA",
                        "address": "0x4de4e0"
                    },
                    {
                        "name": "GetDevicePowerState",
                        "address": "0x4de4e4"
                    },
                    {
                        "name": "GetDateFormatA",
                        "address": "0x4de4e8"
                    },
                    {
                        "name": "GetCurrentThreadId",
                        "address": "0x4de4ec"
                    },
                    {
                        "name": "GetCurrentThread",
                        "address": "0x4de4f0"
                    },
                    {
                        "name": "GetProcAddress",
                        "address": "0x4de4f4"
                    },
                    {
                        "name": "GetCurrentProcessId",
                        "address": "0x4de4f8"
                    },
                    {
                        "name": "GetCurrentProcess",
                        "address": "0x4de4fc"
                    },
                    {
                        "name": "GetCurrentDirectoryA",
                        "address": "0x4de500"
                    },
                    {
                        "name": "GetConsoleCursorInfo",
                        "address": "0x4de504"
                    },
                    {
                        "name": "GetConsoleAliasA",
                        "address": "0x4de508"
                    },
                    {
                        "name": "GetComputerNameW",
                        "address": "0x4de50c"
                    },
                    {
                        "name": "GetComputerNameExW",
                        "address": "0x4de510"
                    },
                    {
                        "name": "GetCompressedFileSizeA",
                        "address": "0x4de514"
                    },
                    {
                        "name": "GetCommandLineA",
                        "address": "0x4de518"
                    },
                    {
                        "name": "GetCPInfo",
                        "address": "0x4de51c"
                    },
                    {
                        "name": "GetACP",
                        "address": "0x4de520"
                    },
                    {
                        "name": "FreeResource",
                        "address": "0x4de524"
                    },
                    {
                        "name": "FreeLibrary",
                        "address": "0x4de528"
                    },
                    {
                        "name": "FormatMessageW",
                        "address": "0x4de52c"
                    },
                    {
                        "name": "FormatMessageA",
                        "address": "0x4de530"
                    },
                    {
                        "name": "FindVolumeClose",
                        "address": "0x4de534"
                    },
                    {
                        "name": "FindResourceA",
                        "address": "0x4de538"
                    },
                    {
                        "name": "FindNextVolumeW",
                        "address": "0x4de53c"
                    },
                    {
                        "name": "FindNextChangeNotification",
                        "address": "0x4de540"
                    },
                    {
                        "name": "FindFirstVolumeW",
                        "address": "0x4de544"
                    },
                    {
                        "name": "FindFirstVolumeMountPointA",
                        "address": "0x4de548"
                    },
                    {
                        "name": "FindFirstFileW",
                        "address": "0x4de54c"
                    },
                    {
                        "name": "FindFirstFileA",
                        "address": "0x4de550"
                    },
                    {
                        "name": "FindFirstChangeNotificationW",
                        "address": "0x4de554"
                    },
                    {
                        "name": "FindFirstChangeNotificationA",
                        "address": "0x4de558"
                    },
                    {
                        "name": "FindCloseChangeNotification",
                        "address": "0x4de55c"
                    },
                    {
                        "name": "FindClose",
                        "address": "0x4de560"
                    },
                    {
                        "name": "FileTimeToLocalFileTime",
                        "address": "0x4de564"
                    },
                    {
                        "name": "FileTimeToDosDateTime",
                        "address": "0x4de568"
                    },
                    {
                        "name": "ExitThread",
                        "address": "0x4de56c"
                    },
                    {
                        "name": "ExitProcess",
                        "address": "0x4de570"
                    },
                    {
                        "name": "EnumSystemCodePagesA",
                        "address": "0x4de574"
                    },
                    {
                        "name": "EnumCalendarInfoA",
                        "address": "0x4de578"
                    },
                    {
                        "name": "EnterCriticalSection",
                        "address": "0x4de57c"
                    },
                    {
                        "name": "DeviceIoControl",
                        "address": "0x4de580"
                    },
                    {
                        "name": "DeleteVolumeMountPointW",
                        "address": "0x4de584"
                    },
                    {
                        "name": "DeleteFileA",
                        "address": "0x4de588"
                    },
                    {
                        "name": "DeleteCriticalSection",
                        "address": "0x4de58c"
                    },
                    {
                        "name": "DefineDosDeviceW",
                        "address": "0x4de590"
                    },
                    {
                        "name": "CreateThread",
                        "address": "0x4de594"
                    },
                    {
                        "name": "CreateSemaphoreW",
                        "address": "0x4de598"
                    },
                    {
                        "name": "CreateMutexA",
                        "address": "0x4de59c"
                    },
                    {
                        "name": "CreateFileW",
                        "address": "0x4de5a0"
                    },
                    {
                        "name": "CreateFileA",
                        "address": "0x4de5a4"
                    },
                    {
                        "name": "CreateEventW",
                        "address": "0x4de5a8"
                    },
                    {
                        "name": "CreateEventA",
                        "address": "0x4de5ac"
                    },
                    {
                        "name": "CopyFileExA",
                        "address": "0x4de5b0"
                    },
                    {
                        "name": "CompareStringW",
                        "address": "0x4de5b4"
                    },
                    {
                        "name": "CompareStringA",
                        "address": "0x4de5b8"
                    },
                    {
                        "name": "CommConfigDialogW",
                        "address": "0x4de5bc"
                    },
                    {
                        "name": "CloseHandle",
                        "address": "0x4de5c0"
                    },
                    {
                        "name": "AddConsoleAliasA",
                        "address": "0x4de5c4"
                    },
                    {
                        "name": "VirtualAlloc",
                        "address": "0x4de5c8"
                    },
                    {
                        "name": "GetModuleHandleW",
                        "address": "0x4de5cc"
                    },
                    {
                        "name": "LoadLibraryA",
                        "address": "0x4de5d0"
                    },
                    {
                        "name": "lstrcpyA",
                        "address": "0x4de5d4"
                    }
                ],
                "dll": "KERNEL32.dll"
            },
            {
                "imports": [
                    {
                        "name": "SetWindowPlacement",
                        "address": "0x4de62c"
                    },
                    {
                        "name": "SetWindowPos",
                        "address": "0x4de630"
                    },
                    {
                        "name": "SetWindowRgn",
                        "address": "0x4de634"
                    },
                    {
                        "name": "SetWindowTextA",
                        "address": "0x4de638"
                    },
                    {
                        "name": "SetWindowsHookExA",
                        "address": "0x4de63c"
                    },
                    {
                        "name": "ShowCursor",
                        "address": "0x4de640"
                    },
                    {
                        "name": "ShowOwnedPopups",
                        "address": "0x4de644"
                    },
                    {
                        "name": "ShowScrollBar",
                        "address": "0x4de648"
                    },
                    {
                        "name": "ShowWindow",
                        "address": "0x4de64c"
                    },
                    {
                        "name": "SubtractRect",
                        "address": "0x4de650"
                    },
                    {
                        "name": "SystemParametersInfoA",
                        "address": "0x4de654"
                    },
                    {
                        "name": "SystemParametersInfoW",
                        "address": "0x4de658"
                    },
                    {
                        "name": "TabbedTextOutA",
                        "address": "0x4de65c"
                    },
                    {
                        "name": "ToAsciiEx",
                        "address": "0x4de660"
                    },
                    {
                        "name": "TrackPopupMenu",
                        "address": "0x4de664"
                    },
                    {
                        "name": "TranslateAcceleratorA",
                        "address": "0x4de668"
                    },
                    {
                        "name": "TranslateAcceleratorW",
                        "address": "0x4de66c"
                    },
                    {
                        "name": "TranslateMDISysAccel",
                        "address": "0x4de670"
                    },
                    {
                        "name": "TranslateMessage",
                        "address": "0x4de674"
                    },
                    {
                        "name": "UnhookWindowsHookEx",
                        "address": "0x4de678"
                    },
                    {
                        "name": "UnregisterClassA",
                        "address": "0x4de67c"
                    },
                    {
                        "name": "UpdateWindow",
                        "address": "0x4de680"
                    },
                    {
                        "name": "ValidateRect",
                        "address": "0x4de684"
                    },
                    {
                        "name": "WaitMessage",
                        "address": "0x4de688"
                    },
                    {
                        "name": "WinHelpA",
                        "address": "0x4de68c"
                    },
                    {
                        "name": "WinHelpW",
                        "address": "0x4de690"
                    },
                    {
                        "name": "WindowFromDC",
                        "address": "0x4de694"
                    },
                    {
                        "name": "WindowFromPoint",
                        "address": "0x4de698"
                    },
                    {
                        "name": "mouse_event",
                        "address": "0x4de69c"
                    },
                    {
                        "name": "wsprintfA",
                        "address": "0x4de6a0"
                    },
                    {
                        "name": "SendNotifyMessageA",
                        "address": "0x4de6a4"
                    },
                    {
                        "name": "SendMessageA",
                        "address": "0x4de6a8"
                    },
                    {
                        "name": "SendDlgItemMessageW",
                        "address": "0x4de6ac"
                    },
                    {
                        "name": "ScrollWindowEx",
                        "address": "0x4de6b0"
                    },
                    {
                        "name": "ScrollWindow",
                        "address": "0x4de6b4"
                    },
                    {
                        "name": "ScreenToClient",
                        "address": "0x4de6b8"
                    },
                    {
                        "name": "RemovePropA",
                        "address": "0x4de6bc"
                    },
                    {
                        "name": "RemoveMenu",
                        "address": "0x4de6c0"
                    },
                    {
                        "name": "ReleaseDC",
                        "address": "0x4de6c4"
                    },
                    {
                        "name": "ReleaseCapture",
                        "address": "0x4de6c8"
                    },
                    {
                        "name": "RegisterWindowMessageA",
                        "address": "0x4de6cc"
                    },
                    {
                        "name": "RegisterDeviceNotificationW",
                        "address": "0x4de6d0"
                    },
                    {
                        "name": "RegisterDeviceNotificationA",
                        "address": "0x4de6d4"
                    },
                    {
                        "name": "RegisterClipboardFormatA",
                        "address": "0x4de6d8"
                    },
                    {
                        "name": "RegisterClassA",
                        "address": "0x4de6dc"
                    },
                    {
                        "name": "RedrawWindow",
                        "address": "0x4de6e0"
                    },
                    {
                        "name": "RealGetWindowClassA",
                        "address": "0x4de6e4"
                    },
                    {
                        "name": "PtInRect",
                        "address": "0x4de6e8"
                    },
                    {
                        "name": "PostThreadMessageW",
                        "address": "0x4de6ec"
                    },
                    {
                        "name": "PostQuitMessage",
                        "address": "0x4de6f0"
                    },
                    {
                        "name": "PostMessageA",
                        "address": "0x4de6f4"
                    },
                    {
                        "name": "PeekMessageA",
                        "address": "0x4de6f8"
                    },
                    {
                        "name": "OpenClipboard",
                        "address": "0x4de6fc"
                    },
                    {
                        "name": "OffsetRect",
                        "address": "0x4de700"
                    },
                    {
                        "name": "OemToCharW",
                        "address": "0x4de704"
                    },
                    {
                        "name": "OemToCharA",
                        "address": "0x4de708"
                    },
                    {
                        "name": "MsgWaitForMultipleObjects",
                        "address": "0x4de70c"
                    },
                    {
                        "name": "ModifyMenuA",
                        "address": "0x4de710"
                    },
                    {
                        "name": "MessageBoxA",
                        "address": "0x4de714"
                    },
                    {
                        "name": "MessageBeep",
                        "address": "0x4de718"
                    },
                    {
                        "name": "MapWindowPoints",
                        "address": "0x4de71c"
                    },
                    {
                        "name": "MapVirtualKeyA",
                        "address": "0x4de720"
                    },
                    {
                        "name": "LoadStringA",
                        "address": "0x4de724"
                    },
                    {
                        "name": "LoadKeyboardLayoutA",
                        "address": "0x4de728"
                    },
                    {
                        "name": "LoadImageA",
                        "address": "0x4de72c"
                    },
                    {
                        "name": "LoadIconA",
                        "address": "0x4de730"
                    },
                    {
                        "name": "LoadCursorA",
                        "address": "0x4de734"
                    },
                    {
                        "name": "LoadBitmapA",
                        "address": "0x4de738"
                    },
                    {
                        "name": "KillTimer",
                        "address": "0x4de73c"
                    },
                    {
                        "name": "IsZoomed",
                        "address": "0x4de740"
                    },
                    {
                        "name": "IsWindowVisible",
                        "address": "0x4de744"
                    },
                    {
                        "name": "IsWindow",
                        "address": "0x4de748"
                    },
                    {
                        "name": "IsRectEmpty",
                        "address": "0x4de74c"
                    },
                    {
                        "name": "IsIconic",
                        "address": "0x4de750"
                    },
                    {
                        "name": "IsDialogMessageA",
                        "address": "0x4de754"
                    },
                    {
                        "name": "IsChild",
                        "address": "0x4de758"
                    },
                    {
                        "name": "IsCharAlphaA",
                        "address": "0x4de75c"
                    },
                    {
                        "name": "InvalidateRgn",
                        "address": "0x4de760"
                    },
                    {
                        "name": "InvalidateRect",
                        "address": "0x4de764"
                    },
                    {
                        "name": "IntersectRect",
                        "address": "0x4de768"
                    },
                    {
                        "name": "InsertMenuItemA",
                        "address": "0x4de76c"
                    },
                    {
                        "name": "InsertMenuA",
                        "address": "0x4de770"
                    },
                    {
                        "name": "InflateRect",
                        "address": "0x4de774"
                    },
                    {
                        "name": "InSendMessageEx",
                        "address": "0x4de778"
                    },
                    {
                        "name": "IMPSetIMEA",
                        "address": "0x4de77c"
                    },
                    {
                        "name": "IMPQueryIMEA",
                        "address": "0x4de780"
                    },
                    {
                        "name": "GetWindowTextA",
                        "address": "0x4de784"
                    },
                    {
                        "name": "GetWindowRgn",
                        "address": "0x4de788"
                    },
                    {
                        "name": "GetWindowRect",
                        "address": "0x4de78c"
                    },
                    {
                        "name": "GetWindowPlacement",
                        "address": "0x4de790"
                    },
                    {
                        "name": "GetWindowLongA",
                        "address": "0x4de794"
                    },
                    {
                        "name": "GetWindowDC",
                        "address": "0x4de798"
                    },
                    {
                        "name": "GetWindow",
                        "address": "0x4de79c"
                    },
                    {
                        "name": "GetTopWindow",
                        "address": "0x4de7a0"
                    },
                    {
                        "name": "GetTabbedTextExtentA",
                        "address": "0x4de7a4"
                    },
                    {
                        "name": "GetSystemMetrics",
                        "address": "0x4de7a8"
                    },
                    {
                        "name": "SetWindowLongA",
                        "address": "0x4de7ac"
                    },
                    {
                        "name": "GetSysColorBrush",
                        "address": "0x4de7b0"
                    },
                    {
                        "name": "GetSysColor",
                        "address": "0x4de7b4"
                    },
                    {
                        "name": "GetSubMenu",
                        "address": "0x4de7b8"
                    },
                    {
                        "name": "GetScrollRange",
                        "address": "0x4de7bc"
                    },
                    {
                        "name": "GetScrollPos",
                        "address": "0x4de7c0"
                    },
                    {
                        "name": "GetScrollInfo",
                        "address": "0x4de7c4"
                    },
                    {
                        "name": "GetQueueStatus",
                        "address": "0x4de7c8"
                    },
                    {
                        "name": "GetPropA",
                        "address": "0x4de7cc"
                    },
                    {
                        "name": "GetMouseMovePointsEx",
                        "address": "0x4de7d0"
                    },
                    {
                        "name": "GetMessageA",
                        "address": "0x4de7d4"
                    },
                    {
                        "name": "GetMenuStringA",
                        "address": "0x4de7d8"
                    },
                    {
                        "name": "GetMenuState",
                        "address": "0x4de7dc"
                    },
                    {
                        "name": "GetMenuItemInfoA",
                        "address": "0x4de7e0"
                    },
                    {
                        "name": "GetMenuItemID",
                        "address": "0x4de7e4"
                    },
                    {
                        "name": "GetMenuItemCount",
                        "address": "0x4de7e8"
                    },
                    {
                        "name": "GetMenuDefaultItem",
                        "address": "0x4de7ec"
                    },
                    {
                        "name": "GetMenu",
                        "address": "0x4de7f0"
                    },
                    {
                        "name": "GetLastActivePopup",
                        "address": "0x4de7f4"
                    },
                    {
                        "name": "GetKeyboardType",
                        "address": "0x4de7f8"
                    },
                    {
                        "name": "GetKeyboardState",
                        "address": "0x4de7fc"
                    },
                    {
                        "name": "GetKeyboardLayoutList",
                        "address": "0x4de800"
                    },
                    {
                        "name": "GetKeyboardLayout",
                        "address": "0x4de804"
                    },
                    {
                        "name": "GetKeyState",
                        "address": "0x4de808"
                    },
                    {
                        "name": "GetKeyNameTextA",
                        "address": "0x4de80c"
                    },
                    {
                        "name": "GetIconInfo",
                        "address": "0x4de810"
                    },
                    {
                        "name": "GetFocus",
                        "address": "0x4de814"
                    },
                    {
                        "name": "GetDoubleClickTime",
                        "address": "0x4de818"
                    },
                    {
                        "name": "GetDlgItem",
                        "address": "0x4de81c"
                    },
                    {
                        "name": "GetDesktopWindow",
                        "address": "0x4de820"
                    },
                    {
                        "name": "GetDCEx",
                        "address": "0x4de824"
                    },
                    {
                        "name": "GetDC",
                        "address": "0x4de828"
                    },
                    {
                        "name": "GetCursorPos",
                        "address": "0x4de82c"
                    },
                    {
                        "name": "GetCursor",
                        "address": "0x4de830"
                    },
                    {
                        "name": "GetClipboardData",
                        "address": "0x4de834"
                    },
                    {
                        "name": "GetClientRect",
                        "address": "0x4de838"
                    },
                    {
                        "name": "GetClassNameA",
                        "address": "0x4de83c"
                    },
                    {
                        "name": "GetClassInfoA",
                        "address": "0x4de840"
                    },
                    {
                        "name": "GetCaretPos",
                        "address": "0x4de844"
                    },
                    {
                        "name": "GetCapture",
                        "address": "0x4de848"
                    },
                    {
                        "name": "FrameRect",
                        "address": "0x4de84c"
                    },
                    {
                        "name": "FindWindowA",
                        "address": "0x4de850"
                    },
                    {
                        "name": "FillRect",
                        "address": "0x4de854"
                    },
                    {
                        "name": "ExitWindowsEx",
                        "address": "0x4de858"
                    },
                    {
                        "name": "ExcludeUpdateRgn",
                        "address": "0x4de85c"
                    },
                    {
                        "name": "EqualRect",
                        "address": "0x4de860"
                    },
                    {
                        "name": "EnumWindows",
                        "address": "0x4de864"
                    },
                    {
                        "name": "EnumThreadWindows",
                        "address": "0x4de868"
                    },
                    {
                        "name": "EndPaint",
                        "address": "0x4de86c"
                    },
                    {
                        "name": "EndDialog",
                        "address": "0x4de870"
                    },
                    {
                        "name": "EnableWindow",
                        "address": "0x4de874"
                    },
                    {
                        "name": "EnableScrollBar",
                        "address": "0x4de878"
                    },
                    {
                        "name": "EnableMenuItem",
                        "address": "0x4de87c"
                    },
                    {
                        "name": "EmptyClipboard",
                        "address": "0x4de880"
                    },
                    {
                        "name": "DrawTextExA",
                        "address": "0x4de884"
                    },
                    {
                        "name": "DrawTextA",
                        "address": "0x4de888"
                    },
                    {
                        "name": "DrawMenuBar",
                        "address": "0x4de88c"
                    },
                    {
                        "name": "DrawIconEx",
                        "address": "0x4de890"
                    },
                    {
                        "name": "DrawIcon",
                        "address": "0x4de894"
                    },
                    {
                        "name": "DrawFrameControl",
                        "address": "0x4de898"
                    },
                    {
                        "name": "DrawFocusRect",
                        "address": "0x4de89c"
                    },
                    {
                        "name": "DrawEdge",
                        "address": "0x4de8a0"
                    },
                    {
                        "name": "DrawCaption",
                        "address": "0x4de8a4"
                    },
                    {
                        "name": "DragDetect",
                        "address": "0x4de8a8"
                    },
                    {
                        "name": "DispatchMessageA",
                        "address": "0x4de8ac"
                    },
                    {
                        "name": "DestroyWindow",
                        "address": "0x4de8b0"
                    },
                    {
                        "name": "DestroyMenu",
                        "address": "0x4de8b4"
                    },
                    {
                        "name": "DestroyIcon",
                        "address": "0x4de8b8"
                    },
                    {
                        "name": "DeleteMenu",
                        "address": "0x4de8bc"
                    },
                    {
                        "name": "DefWindowProcA",
                        "address": "0x4de8c0"
                    },
                    {
                        "name": "DefMDIChildProcA",
                        "address": "0x4de8c4"
                    },
                    {
                        "name": "DefFrameProcA",
                        "address": "0x4de8c8"
                    },
                    {
                        "name": "DdeQueryNextServer",
                        "address": "0x4de8cc"
                    },
                    {
                        "name": "DdeFreeDataHandle",
                        "address": "0x4de8d0"
                    },
                    {
                        "name": "DdeCmpStringHandles",
                        "address": "0x4de8d4"
                    },
                    {
                        "name": "CreateWindowExA",
                        "address": "0x4de8d8"
                    },
                    {
                        "name": "CreatePopupMenu",
                        "address": "0x4de8dc"
                    },
                    {
                        "name": "CreateIcon",
                        "address": "0x4de8e0"
                    },
                    {
                        "name": "CreateDialogIndirectParamW",
                        "address": "0x4de8e4"
                    },
                    {
                        "name": "CopyImage",
                        "address": "0x4de8e8"
                    },
                    {
                        "name": "CloseClipboard",
                        "address": "0x4de8ec"
                    },
                    {
                        "name": "ClientToScreen",
                        "address": "0x4de8f0"
                    },
                    {
                        "name": "CheckMenuItem",
                        "address": "0x4de8f4"
                    },
                    {
                        "name": "CharUpperBuffA",
                        "address": "0x4de8f8"
                    },
                    {
                        "name": "CharUpperA",
                        "address": "0x4de8fc"
                    },
                    {
                        "name": "CharToOemA",
                        "address": "0x4de900"
                    },
                    {
                        "name": "CharPrevExA",
                        "address": "0x4de904"
                    },
                    {
                        "name": "CharNextW",
                        "address": "0x4de908"
                    },
                    {
                        "name": "CharNextA",
                        "address": "0x4de90c"
                    },
                    {
                        "name": "SetTimer",
                        "address": "0x4de910"
                    },
                    {
                        "name": "SetScrollRange",
                        "address": "0x4de914"
                    },
                    {
                        "name": "SetScrollPos",
                        "address": "0x4de918"
                    },
                    {
                        "name": "SetScrollInfo",
                        "address": "0x4de91c"
                    },
                    {
                        "name": "SetRectEmpty",
                        "address": "0x4de920"
                    },
                    {
                        "name": "SetRect",
                        "address": "0x4de924"
                    },
                    {
                        "name": "SetPropW",
                        "address": "0x4de928"
                    },
                    {
                        "name": "SetPropA",
                        "address": "0x4de92c"
                    },
                    {
                        "name": "SetParent",
                        "address": "0x4de930"
                    },
                    {
                        "name": "SetMenuItemInfoA",
                        "address": "0x4de934"
                    },
                    {
                        "name": "SetMenu",
                        "address": "0x4de938"
                    },
                    {
                        "name": "SetKeyboardState",
                        "address": "0x4de93c"
                    },
                    {
                        "name": "SetForegroundWindow",
                        "address": "0x4de940"
                    },
                    {
                        "name": "SetFocus",
                        "address": "0x4de944"
                    },
                    {
                        "name": "SetCursor",
                        "address": "0x4de948"
                    },
                    {
                        "name": "SetClipboardData",
                        "address": "0x4de94c"
                    },
                    {
                        "name": "LoadCursorW",
                        "address": "0x4de950"
                    },
                    {
                        "name": "GetParent",
                        "address": "0x4de954"
                    },
                    {
                        "name": "IsCharAlphaNumericA",
                        "address": "0x4de958"
                    },
                    {
                        "name": "InSendMessage",
                        "address": "0x4de95c"
                    },
                    {
                        "name": "CloseWindowStation",
                        "address": "0x4de960"
                    },
                    {
                        "name": "IsWindowEnabled",
                        "address": "0x4de964"
                    },
                    {
                        "name": "CreateMenu",
                        "address": "0x4de968"
                    },
                    {
                        "name": "DestroyCursor",
                        "address": "0x4de96c"
                    },
                    {
                        "name": "GetDlgCtrlID",
                        "address": "0x4de970"
                    },
                    {
                        "name": "SetClassLongA",
                        "address": "0x4de974"
                    },
                    {
                        "name": "SetCapture",
                        "address": "0x4de978"
                    },
                    {
                        "name": "GetSystemMenu",
                        "address": "0x4de97c"
                    },
                    {
                        "name": "SetActiveWindow",
                        "address": "0x4de980"
                    },
                    {
                        "name": "CharLowerBuffA",
                        "address": "0x4de984"
                    },
                    {
                        "name": "CharLowerA",
                        "address": "0x4de988"
                    },
                    {
                        "name": "CallWindowProcA",
                        "address": "0x4de98c"
                    },
                    {
                        "name": "CallNextHookEx",
                        "address": "0x4de990"
                    },
                    {
                        "name": "BeginPaint",
                        "address": "0x4de994"
                    },
                    {
                        "name": "AdjustWindowRectEx",
                        "address": "0x4de998"
                    },
                    {
                        "name": "ActivateKeyboardLayout",
                        "address": "0x4de99c"
                    },
                    {
                        "name": "GetForegroundWindow",
                        "address": "0x4de9a0"
                    },
                    {
                        "name": "GetActiveWindow",
                        "address": "0x4de9a4"
                    },
                    {
                        "name": "EnumClipboardFormats",
                        "address": "0x4de9a8"
                    },
                    {
                        "name": "GetMessagePos",
                        "address": "0x4de9ac"
                    },
                    {
                        "name": "IsClipboardFormatAvailable",
                        "address": "0x4de9b0"
                    },
                    {
                        "name": "GetOpenClipboardWindow",
                        "address": "0x4de9b4"
                    },
                    {
                        "name": "IsGUIThread",
                        "address": "0x4de9b8"
                    },
                    {
                        "name": "GetAsyncKeyState",
                        "address": "0x4de9bc"
                    },
                    {
                        "name": "GetListBoxInfo",
                        "address": "0x4de9c0"
                    },
                    {
                        "name": "GetWindowThreadProcessId",
                        "address": "0x4de9c4"
                    }
                ],
                "dll": "USER32.dll"
            },
            {
                "imports": [
                    {
                        "name": "EngCheckAbort",
                        "address": "0x4de0ac"
                    },
                    {
                        "name": "EngCreateSemaphore",
                        "address": "0x4de0b0"
                    },
                    {
                        "name": "EngPaint",
                        "address": "0x4de0b4"
                    },
                    {
                        "name": "EqualRgn",
                        "address": "0x4de0b8"
                    },
                    {
                        "name": "ExcludeClipRect",
                        "address": "0x4de0bc"
                    },
                    {
                        "name": "ExtTextOutA",
                        "address": "0x4de0c0"
                    },
                    {
                        "name": "FillPath",
                        "address": "0x4de0c4"
                    },
                    {
                        "name": "FillRgn",
                        "address": "0x4de0c8"
                    },
                    {
                        "name": "FrameRgn",
                        "address": "0x4de0cc"
                    },
                    {
                        "name": "GdiGetCodePage",
                        "address": "0x4de0d0"
                    },
                    {
                        "name": "GdiGetSpoolFileHandle",
                        "address": "0x4de0d4"
                    },
                    {
                        "name": "GdiIsPlayMetafileDC",
                        "address": "0x4de0d8"
                    },
                    {
                        "name": "GetAspectRatioFilterEx",
                        "address": "0x4de0dc"
                    },
                    {
                        "name": "GetBitmapBits",
                        "address": "0x4de0e0"
                    },
                    {
                        "name": "GetBrushOrgEx",
                        "address": "0x4de0e4"
                    },
                    {
                        "name": "GetCharWidthA",
                        "address": "0x4de0e8"
                    },
                    {
                        "name": "GetClipBox",
                        "address": "0x4de0ec"
                    },
                    {
                        "name": "GetClipRgn",
                        "address": "0x4de0f0"
                    },
                    {
                        "name": "GetCurrentObject",
                        "address": "0x4de0f4"
                    },
                    {
                        "name": "GetCurrentPositionEx",
                        "address": "0x4de0f8"
                    },
                    {
                        "name": "GetDCOrgEx",
                        "address": "0x4de0fc"
                    },
                    {
                        "name": "GetDIBColorTable",
                        "address": "0x4de100"
                    },
                    {
                        "name": "GetDIBits",
                        "address": "0x4de104"
                    },
                    {
                        "name": "GetDeviceCaps",
                        "address": "0x4de108"
                    },
                    {
                        "name": "GetEnhMetaFileBits",
                        "address": "0x4de10c"
                    },
                    {
                        "name": "GetEnhMetaFileHeader",
                        "address": "0x4de110"
                    },
                    {
                        "name": "GetEnhMetaFilePaletteEntries",
                        "address": "0x4de114"
                    },
                    {
                        "name": "GetGlyphIndicesA",
                        "address": "0x4de118"
                    },
                    {
                        "name": "GetKerningPairsW",
                        "address": "0x4de11c"
                    },
                    {
                        "name": "GetNearestColor",
                        "address": "0x4de120"
                    },
                    {
                        "name": "GetNearestPaletteIndex",
                        "address": "0x4de124"
                    },
                    {
                        "name": "GetObjectA",
                        "address": "0x4de128"
                    },
                    {
                        "name": "GetPaletteEntries",
                        "address": "0x4de12c"
                    },
                    {
                        "name": "GetPixel",
                        "address": "0x4de130"
                    },
                    {
                        "name": "GetRgnBox",
                        "address": "0x4de134"
                    },
                    {
                        "name": "GetStockObject",
                        "address": "0x4de138"
                    },
                    {
                        "name": "GetSystemPaletteEntries",
                        "address": "0x4de13c"
                    },
                    {
                        "name": "GetTextAlign",
                        "address": "0x4de140"
                    },
                    {
                        "name": "GetTextColor",
                        "address": "0x4de144"
                    },
                    {
                        "name": "GetTextExtentExPointA",
                        "address": "0x4de148"
                    },
                    {
                        "name": "GetTextExtentPoint32A",
                        "address": "0x4de14c"
                    },
                    {
                        "name": "GetTextExtentPointA",
                        "address": "0x4de150"
                    },
                    {
                        "name": "GetTextFaceW",
                        "address": "0x4de154"
                    },
                    {
                        "name": "GetTextMetricsA",
                        "address": "0x4de158"
                    },
                    {
                        "name": "GetViewportOrgEx",
                        "address": "0x4de15c"
                    },
                    {
                        "name": "GetWinMetaFileBits",
                        "address": "0x4de160"
                    },
                    {
                        "name": "GetWindowOrgEx",
                        "address": "0x4de164"
                    },
                    {
                        "name": "EndPath",
                        "address": "0x4de168"
                    },
                    {
                        "name": "LineTo",
                        "address": "0x4de16c"
                    },
                    {
                        "name": "MaskBlt",
                        "address": "0x4de170"
                    },
                    {
                        "name": "MoveToEx",
                        "address": "0x4de174"
                    },
                    {
                        "name": "OffsetRgn",
                        "address": "0x4de178"
                    },
                    {
                        "name": "OffsetWindowOrgEx",
                        "address": "0x4de17c"
                    },
                    {
                        "name": "PATHOBJ_vEnumStart",
                        "address": "0x4de180"
                    },
                    {
                        "name": "PatBlt",
                        "address": "0x4de184"
                    },
                    {
                        "name": "PathToRegion",
                        "address": "0x4de188"
                    },
                    {
                        "name": "PlayEnhMetaFile",
                        "address": "0x4de18c"
                    },
                    {
                        "name": "PolyPolyline",
                        "address": "0x4de190"
                    },
                    {
                        "name": "Polygon",
                        "address": "0x4de194"
                    },
                    {
                        "name": "Polyline",
                        "address": "0x4de198"
                    },
                    {
                        "name": "PtInRegion",
                        "address": "0x4de19c"
                    },
                    {
                        "name": "RealizePalette",
                        "address": "0x4de1a0"
                    },
                    {
                        "name": "RectVisible",
                        "address": "0x4de1a4"
                    },
                    {
                        "name": "Rectangle",
                        "address": "0x4de1a8"
                    },
                    {
                        "name": "ResetDCA",
                        "address": "0x4de1ac"
                    },
                    {
                        "name": "RestoreDC",
                        "address": "0x4de1b0"
                    },
                    {
                        "name": "RoundRect",
                        "address": "0x4de1b4"
                    },
                    {
                        "name": "STROBJ_dwGetCodePage",
                        "address": "0x4de1b8"
                    },
                    {
                        "name": "STROBJ_vEnumStart",
                        "address": "0x4de1bc"
                    },
                    {
                        "name": "SelectClipPath",
                        "address": "0x4de1c0"
                    },
                    {
                        "name": "SelectClipRgn",
                        "address": "0x4de1c4"
                    },
                    {
                        "name": "SelectObject",
                        "address": "0x4de1c8"
                    },
                    {
                        "name": "SelectPalette",
                        "address": "0x4de1cc"
                    },
                    {
                        "name": "SetBkColor",
                        "address": "0x4de1d0"
                    },
                    {
                        "name": "SetBkMode",
                        "address": "0x4de1d4"
                    },
                    {
                        "name": "SetBrushOrgEx",
                        "address": "0x4de1d8"
                    },
                    {
                        "name": "SetDIBColorTable",
                        "address": "0x4de1dc"
                    },
                    {
                        "name": "SetDIBits",
                        "address": "0x4de1e0"
                    },
                    {
                        "name": "SetEnhMetaFileBits",
                        "address": "0x4de1e4"
                    },
                    {
                        "name": "SetPixel",
                        "address": "0x4de1e8"
                    },
                    {
                        "name": "SetROP2",
                        "address": "0x4de1ec"
                    },
                    {
                        "name": "SetRectRgn",
                        "address": "0x4de1f0"
                    },
                    {
                        "name": "SetStretchBltMode",
                        "address": "0x4de1f4"
                    },
                    {
                        "name": "SetTextAlign",
                        "address": "0x4de1f8"
                    },
                    {
                        "name": "SetTextColor",
                        "address": "0x4de1fc"
                    },
                    {
                        "name": "SetTextJustification",
                        "address": "0x4de200"
                    },
                    {
                        "name": "SetViewportOrgEx",
                        "address": "0x4de204"
                    },
                    {
                        "name": "SetWinMetaFileBits",
                        "address": "0x4de208"
                    },
                    {
                        "name": "SetWindowOrgEx",
                        "address": "0x4de20c"
                    },
                    {
                        "name": "StretchBlt",
                        "address": "0x4de210"
                    },
                    {
                        "name": "StretchDIBits",
                        "address": "0x4de214"
                    },
                    {
                        "name": "StrokePath",
                        "address": "0x4de218"
                    },
                    {
                        "name": "TextOutA",
                        "address": "0x4de21c"
                    },
                    {
                        "name": "TextOutW",
                        "address": "0x4de220"
                    },
                    {
                        "name": "EnableEUDC",
                        "address": "0x4de224"
                    },
                    {
                        "name": "EndFormPage",
                        "address": "0x4de228"
                    },
                    {
                        "name": "Ellipse",
                        "address": "0x4de22c"
                    },
                    {
                        "name": "DescribePixelFormat",
                        "address": "0x4de230"
                    },
                    {
                        "name": "DeleteObject",
                        "address": "0x4de234"
                    },
                    {
                        "name": "DeleteEnhMetaFile",
                        "address": "0x4de238"
                    },
                    {
                        "name": "DeleteDC",
                        "address": "0x4de23c"
                    },
                    {
                        "name": "CreateSolidBrush",
                        "address": "0x4de240"
                    },
                    {
                        "name": "CreateRoundRectRgn",
                        "address": "0x4de244"
                    },
                    {
                        "name": "CreateRectRgnIndirect",
                        "address": "0x4de248"
                    },
                    {
                        "name": "CreateRectRgn",
                        "address": "0x4de24c"
                    },
                    {
                        "name": "CreatePolygonRgn",
                        "address": "0x4de250"
                    },
                    {
                        "name": "CreatePenIndirect",
                        "address": "0x4de254"
                    },
                    {
                        "name": "CreatePalette",
                        "address": "0x4de258"
                    },
                    {
                        "name": "CreateHalftonePalette",
                        "address": "0x4de25c"
                    },
                    {
                        "name": "CreateFontIndirectA",
                        "address": "0x4de260"
                    },
                    {
                        "name": "CreateEllipticRgn",
                        "address": "0x4de264"
                    },
                    {
                        "name": "CreateDIBitmap",
                        "address": "0x4de268"
                    },
                    {
                        "name": "CreateDIBSection",
                        "address": "0x4de26c"
                    },
                    {
                        "name": "CreateCompatibleDC",
                        "address": "0x4de270"
                    },
                    {
                        "name": "CreateCompatibleBitmap",
                        "address": "0x4de274"
                    },
                    {
                        "name": "CreateColorSpaceW",
                        "address": "0x4de278"
                    },
                    {
                        "name": "CreateBrushIndirect",
                        "address": "0x4de27c"
                    },
                    {
                        "name": "CreateBitmap",
                        "address": "0x4de280"
                    },
                    {
                        "name": "CopyEnhMetaFileA",
                        "address": "0x4de284"
                    },
                    {
                        "name": "CombineRgn",
                        "address": "0x4de288"
                    },
                    {
                        "name": "CLIPOBJ_cEnumStart",
                        "address": "0x4de28c"
                    },
                    {
                        "name": "BitBlt",
                        "address": "0x4de290"
                    },
                    {
                        "name": "BeginPath",
                        "address": "0x4de294"
                    },
                    {
                        "name": "Arc",
                        "address": "0x4de298"
                    },
                    {
                        "name": "CloseEnhMetaFile",
                        "address": "0x4de29c"
                    },
                    {
                        "name": "GetEnhMetaFileA",
                        "address": "0x4de2a0"
                    },
                    {
                        "name": "GetSystemPaletteUse",
                        "address": "0x4de2a4"
                    },
                    {
                        "name": "UnrealizeObject",
                        "address": "0x4de2a8"
                    },
                    {
                        "name": "CreatePatternBrush",
                        "address": "0x4de2ac"
                    },
                    {
                        "name": "AbortDoc",
                        "address": "0x4de2b0"
                    },
                    {
                        "name": "GetTextCharacterExtra",
                        "address": "0x4de2b4"
                    },
                    {
                        "name": "GetBkColor",
                        "address": "0x4de2b8"
                    },
                    {
                        "name": "SaveDC",
                        "address": "0x4de2bc"
                    },
                    {
                        "name": "GdiFlush",
                        "address": "0x4de2c0"
                    },
                    {
                        "name": "EndPage",
                        "address": "0x4de2c4"
                    },
                    {
                        "name": "IntersectClipRect",
                        "address": "0x4de2c8"
                    },
                    {
                        "name": "AddFontResourceW",
                        "address": "0x4de2cc"
                    }
                ],
                "dll": "GDI32.dll"
            },
            {
                "imports": [
                    {
                        "name": "GetSaveFileNameW",
                        "address": "0x4de0a4"
                    }
                ],
                "dll": "COMDLG32.dll"
            },
            {
                "imports": [
                    {
                        "name": "RegOpenKeyA",
                        "address": "0x4de000"
                    },
                    {
                        "name": "OpenSCManagerA",
                        "address": "0x4de004"
                    },
                    {
                        "name": "OpenServiceA",
                        "address": "0x4de008"
                    },
                    {
                        "name": "QueryServiceStatus",
                        "address": "0x4de00c"
                    },
                    {
                        "name": "RegCloseKey",
                        "address": "0x4de010"
                    },
                    {
                        "name": "RegCreateKeyExA",
                        "address": "0x4de014"
                    },
                    {
                        "name": "RegDeleteKeyA",
                        "address": "0x4de018"
                    },
                    {
                        "name": "RegFlushKey",
                        "address": "0x4de01c"
                    },
                    {
                        "name": "RegOpenKeyExA",
                        "address": "0x4de020"
                    },
                    {
                        "name": "RegOpenKeyExW",
                        "address": "0x4de024"
                    },
                    {
                        "name": "RegQueryValueA",
                        "address": "0x4de028"
                    },
                    {
                        "name": "RegQueryValueExA",
                        "address": "0x4de02c"
                    },
                    {
                        "name": "RegSetValueExA",
                        "address": "0x4de030"
                    },
                    {
                        "name": "CloseServiceHandle",
                        "address": "0x4de034"
                    }
                ],
                "dll": "ADVAPI32.dll"
            },
            {
                "imports": [
                    {
                        "name": "SHFileOperation",
                        "address": "0x4de5dc"
                    },
                    {
                        "name": "Shell_NotifyIconA",
                        "address": "0x4de5e0"
                    },
                    {
                        "name": "ShellExecuteA",
                        "address": "0x4de5e4"
                    },
                    {
                        "name": "DragQueryFileA",
                        "address": "0x4de5e8"
                    },
                    {
                        "name": "DuplicateIcon",
                        "address": "0x4de5ec"
                    },
                    {
                        "name": "ExtractAssociatedIconExA",
                        "address": "0x4de5f0"
                    },
                    {
                        "name": "SHAppBarMessage",
                        "address": "0x4de5f4"
                    },
                    {
                        "name": "SHCreateDirectoryExW",
                        "address": "0x4de5f8"
                    },
                    {
                        "name": "Shell_NotifyIconW",
                        "address": "0x4de5fc"
                    },
                    {
                        "name": "SHFileOperationW",
                        "address": "0x4de600"
                    },
                    {
                        "name": "SHGetDataFromIDListW",
                        "address": "0x4de604"
                    },
                    {
                        "name": "SHGetFolderLocation",
                        "address": "0x4de608"
                    },
                    {
                        "name": "SHGetInstanceExplorer",
                        "address": "0x4de60c"
                    },
                    {
                        "name": "SHGetPathFromIDListW",
                        "address": "0x4de610"
                    },
                    {
                        "name": "SHInvokePrinterCommandA",
                        "address": "0x4de614"
                    }
                ],
                "dll": "SHELL32.dll"
            },
            {
                "imports": [
                    {
                        "name": "StringFromGUID2",
                        "address": "0x4de9cc"
                    },
                    {
                        "name": "StringFromCLSID",
                        "address": "0x4de9d0"
                    },
                    {
                        "name": "IsEqualGUID",
                        "address": "0x4de9d4"
                    },
                    {
                        "name": "CoUninitialize",
                        "address": "0x4de9d8"
                    },
                    {
                        "name": "CoTaskMemFree",
                        "address": "0x4de9dc"
                    },
                    {
                        "name": "CoInitializeEx",
                        "address": "0x4de9e0"
                    },
                    {
                        "name": "CoInitialize",
                        "address": "0x4de9e4"
                    },
                    {
                        "name": "CoCreateInstance",
                        "address": "0x4de9e8"
                    }
                ],
                "dll": "ole32.dll"
            },
            {
                "imports": [
                    {
                        "name": "PathIsUNCW",
                        "address": "0x4de61c"
                    },
                    {
                        "name": "PathIsRelativeW",
                        "address": "0x4de620"
                    },
                    {
                        "name": "StrRChrIA",
                        "address": "0x4de624"
                    }
                ],
                "dll": "SHLWAPI.dll"
            },
            {
                "imports": [
                    {
                        "name": "ImageList_DrawEx",
                        "address": "0x4de03c"
                    },
                    {
                        "name": "ImageList_Draw",
                        "address": "0x4de040"
                    },
                    {
                        "name": "ImageList_DragShowNolock",
                        "address": "0x4de044"
                    },
                    {
                        "name": "ImageList_DragMove",
                        "address": "0x4de048"
                    },
                    {
                        "name": "ImageList_EndDrag",
                        "address": "0x4de04c"
                    },
                    {
                        "name": "ImageList_DragEnter",
                        "address": "0x4de050"
                    },
                    {
                        "name": "ImageList_Destroy",
                        "address": "0x4de054"
                    },
                    {
                        "name": "ImageList_Create",
                        "address": "0x4de058"
                    },
                    {
                        "name": "ImageList_BeginDrag",
                        "address": "0x4de05c"
                    },
                    {
                        "name": "ImageList_Add",
                        "address": "0x4de060"
                    },
                    {
                        "name": "ImageList_GetBkColor",
                        "address": "0x4de064"
                    },
                    {
                        "name": "ImageList_GetDragImage",
                        "address": "0x4de068"
                    },
                    {
                        "name": "ImageList_GetIconSize",
                        "address": "0x4de06c"
                    },
                    {
                        "name": "ImageList_GetImageCount",
                        "address": "0x4de070"
                    },
                    {
                        "name": "ImageList_LoadImageA",
                        "address": "0x4de074"
                    },
                    {
                        "name": "ImageList_Read",
                        "address": "0x4de078"
                    },
                    {
                        "name": "ImageList_Remove",
                        "address": "0x4de07c"
                    },
                    {
                        "name": "ImageList_Replace",
                        "address": "0x4de080"
                    },
                    {
                        "name": "ImageList_ReplaceIcon",
                        "address": "0x4de084"
                    },
                    {
                        "name": "ImageList_SetBkColor",
                        "address": "0x4de088"
                    },
                    {
                        "name": "ImageList_SetDragCursorImage",
                        "address": "0x4de08c"
                    },
                    {
                        "name": "ImageList_SetIconSize",
                        "address": "0x4de090"
                    },
                    {
                        "name": "ImageList_Write",
                        "address": "0x4de094"
                    },
                    {
                        "name": "ImageList_DragLeave",
                        "address": "0x4de098"
                    },
                    {
                        "name": null,
                        "address": "0x4de09c"
                    }
                ],
                "dll": "COMCTL32.dll"
            }
        ],
        "digital_signers": null,
        "exported_dll_name": null,
        "actual_checksum": "0x000f570f",
        "overlay": {
            "size": "0x000014b0",
            "offset": "0x000e4800"
        },
        "imagebase": "0x00400000",
        "reported_checksum": "0x000f36eb",
        "icon_hash": null,
        "entrypoint": "0x00401000",
        "timestamp": "2019-06-21 03:15:38",
        "osversion": "5.0",
        "sections": [
            {
                "name": ".text",
                "characteristics": "IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ",
                "virtual_address": "0x00001000",
                "size_of_data": "0x000dce00",
                "entropy": "7.94",
                "raw_address": "0x00000400",
                "virtual_size": "0x000dcd9b",
                "characteristics_raw": "0x60000020"
            },
            {
                "name": ".rdata",
                "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
                "virtual_address": "0x000de000",
                "size_of_data": "0x00004200",
                "entropy": "5.73",
                "raw_address": "0x000dd200",
                "virtual_size": "0x00004088",
                "characteristics_raw": "0x40000040"
            },
            {
                "name": ".data",
                "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
                "virtual_address": "0x000e3000",
                "size_of_data": "0x00001000",
                "entropy": "4.93",
                "raw_address": "0x000e1400",
                "virtual_size": "0x00000f58",
                "characteristics_raw": "0xc0000040"
            },
            {
                "name": ".rsrc",
                "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
                "virtual_address": "0x000e4000",
                "size_of_data": "0x00002400",
                "entropy": "4.05",
                "raw_address": "0x000e2400",
                "virtual_size": "0x00123380",
                "characteristics_raw": "0x40000040"
            }
        ],
        "resources": [],
        "dirents": [
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x000de9f0",
                "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
                "size": "0x000000c8"
            },
            {
                "virtual_address": "0x000e4000",
                "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
                "size": "0x00002380"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x000e4800",
                "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
                "size": "0x000014b0"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_TLS",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x000de000",
                "name": "IMAGE_DIRECTORY_ENTRY_IAT",
                "size": "0x000009f0"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
                "size": "0x00000000"
            }
        ],
        "exports": [],
        "guest_signers": {},
        "imphash": "c7572d1f2d38207b5314572c3d03cdb6",
        "icon_fuzzy": null,
        "icon": null,
        "pdbpath": null,
        "imported_dll_count": 9,
        "versioninfo": []
    }
}