Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- [*] MalFamily: ""
- [*] MalScore: 2.35
- [*] File Name: "NetWire_fbada650b7bdbcf0a338d722deb0734f.exe"
- [*] File Size: 2437120
- [*] File Type: "PE32 executable (GUI) Intel 80386, for MS Windows"
- [*] SHA256: "fb5307874c56bf4461100cb5b7856c1441f8c7d63c152f2763ea875c41e67427"
- [*] MD5: "fbada650b7bdbcf0a338d722deb0734f"
- [*] SHA1: "dd86bb640d70e4405c2fc4d42e287219ca2c3ea6"
- [*] SHA512: "d644f313fd908b2cb798c2773326b2c6769dca468e653e8e31626732078ea24eac5e746960c6cbfd24e117613d370ecb8feadd7875e4a747ed6d9d9f438ec271"
- [*] CRC32: "B3BBC897"
- [*] SSDEEP: "49152:LxZKeQAhmOzL0AreYOvAw0nH63BJZoo7Idji/rVIiP80XfM62Vz:meQAhmOzJrGvAw0nHoBJZoop/rVIiPvL"
- [*] Process Execution: []
- [*] Signatures Detected: [
- {
- "Description": "File has been identified by 5 Antiviruses on VirusTotal as malicious",
- "Details": [
- {
- "CrowdStrike": "win/malicious_confidence_80% (D)"
- },
- {
- "Rising": "Malware.Heuristic.MLite(86%) (AI-LITE:j1zD7TbnQ9YoIlU7XoYSjQ)"
- },
- {
- "Cylance": "Unsafe"
- },
- {
- "SentinelOne": "DFI - Suspicious PE"
- },
- {
- "Qihoo-360": "HEUR/QVM19.1.4899.Malware.Gen"
- }
- ]
- },
- {
- "Description": "Anomalous binary characteristics",
- "Details": [
- {
- "anomaly": "Actual checksum does not match that reported in PE header"
- }
- ]
- }
- ]
- [*] Started Service: []
- [*] Executed Commands: []
- [*] Mutexes: []
- [*] Modified Files: []
- [*] Deleted Files: []
- [*] Modified Registry Keys: []
- [*] Deleted Registry Keys: []
- [*] DNS Communications: []
- [*] Domains: []
- [*] Network Communication - ICMP: []
- [*] Network Communication - HTTP: []
- [*] Network Communication - SMTP: []
- [*] Network Communication - Hosts: []
- [*] Network Communication - IRC: []
- [*] Static Analysis: {
- "pe": {
- "peid_signatures": null,
- "imports": [
- {
- "imports": [
- {
- "name": "GetConsoleMode",
- "address": "0x5261dc"
- },
- {
- "name": "GetConsoleCP",
- "address": "0x5261e0"
- },
- {
- "name": "LCMapStringW",
- "address": "0x5261e4"
- },
- {
- "name": "GetTimeZoneInformation",
- "address": "0x5261e8"
- },
- {
- "name": "IsValidCodePage",
- "address": "0x5261ec"
- },
- {
- "name": "GetOEMCP",
- "address": "0x5261f0"
- },
- {
- "name": "GetACP",
- "address": "0x5261f4"
- },
- {
- "name": "GetCPInfo",
- "address": "0x5261f8"
- },
- {
- "name": "IsProcessorFeaturePresent",
- "address": "0x5261fc"
- },
- {
- "name": "GetStringTypeW",
- "address": "0x526200"
- },
- {
- "name": "IsDebuggerPresent",
- "address": "0x526204"
- },
- {
- "name": "UnhandledExceptionFilter",
- "address": "0x526208"
- },
- {
- "name": "TerminateProcess",
- "address": "0x52620c"
- },
- {
- "name": "QueryPerformanceCounter",
- "address": "0x526210"
- },
- {
- "name": "HeapCreate",
- "address": "0x526214"
- },
- {
- "name": "SetHandleCount",
- "address": "0x526218"
- },
- {
- "name": "GetEnvironmentStringsW",
- "address": "0x52621c"
- },
- {
- "name": "FreeEnvironmentStringsW",
- "address": "0x526220"
- },
- {
- "name": "GetStdHandle",
- "address": "0x526224"
- },
- {
- "name": "SetUnhandledExceptionFilter",
- "address": "0x526228"
- },
- {
- "name": "GetFileType",
- "address": "0x52622c"
- },
- {
- "name": "OpenMutexW",
- "address": "0x526230"
- },
- {
- "name": "SetStdHandle",
- "address": "0x526234"
- },
- {
- "name": "VirtualQuery",
- "address": "0x526238"
- },
- {
- "name": "GetSystemInfo",
- "address": "0x52623c"
- },
- {
- "name": "VirtualAlloc",
- "address": "0x526240"
- },
- {
- "name": "GetSystemTimeAsFileTime",
- "address": "0x526244"
- },
- {
- "name": "HeapSize",
- "address": "0x526248"
- },
- {
- "name": "HeapQueryInformation",
- "address": "0x52624c"
- },
- {
- "name": "CreateThread",
- "address": "0x526250"
- },
- {
- "name": "ExitThread",
- "address": "0x526254"
- },
- {
- "name": "HeapReAlloc",
- "address": "0x526258"
- },
- {
- "name": "SetEnvironmentVariableA",
- "address": "0x52625c"
- },
- {
- "name": "RtlUnwind",
- "address": "0x526260"
- },
- {
- "name": "HeapFree",
- "address": "0x526264"
- },
- {
- "name": "HeapAlloc",
- "address": "0x526268"
- },
- {
- "name": "ExitProcess",
- "address": "0x52626c"
- },
- {
- "name": "DecodePointer",
- "address": "0x526270"
- },
- {
- "name": "EncodePointer",
- "address": "0x526274"
- },
- {
- "name": "GetStartupInfoW",
- "address": "0x526278"
- },
- {
- "name": "HeapSetInformation",
- "address": "0x52627c"
- },
- {
- "name": "FindResourceExW",
- "address": "0x526280"
- },
- {
- "name": "VirtualProtect",
- "address": "0x526284"
- },
- {
- "name": "SearchPathW",
- "address": "0x526288"
- },
- {
- "name": "Sleep",
- "address": "0x52628c"
- },
- {
- "name": "GetProfileIntW",
- "address": "0x526290"
- },
- {
- "name": "InitializeCriticalSectionAndSpinCount",
- "address": "0x526294"
- },
- {
- "name": "GetNumberFormatW",
- "address": "0x526298"
- },
- {
- "name": "GetWindowsDirectoryW",
- "address": "0x52629c"
- },
- {
- "name": "GetTickCount",
- "address": "0x5262a0"
- },
- {
- "name": "GetTempPathW",
- "address": "0x5262a4"
- },
- {
- "name": "GetTempFileNameW",
- "address": "0x5262a8"
- },
- {
- "name": "GetFileTime",
- "address": "0x5262ac"
- },
- {
- "name": "GetFileSizeEx",
- "address": "0x5262b0"
- },
- {
- "name": "GetFileAttributesW",
- "address": "0x5262b4"
- },
- {
- "name": "FileTimeToLocalFileTime",
- "address": "0x5262b8"
- },
- {
- "name": "GetFileAttributesExW",
- "address": "0x5262bc"
- },
- {
- "name": "SetErrorMode",
- "address": "0x5262c0"
- },
- {
- "name": "GetFullPathNameW",
- "address": "0x5262c4"
- },
- {
- "name": "GetVolumeInformationW",
- "address": "0x5262c8"
- },
- {
- "name": "WriteConsoleW",
- "address": "0x5262cc"
- },
- {
- "name": "RaiseException",
- "address": "0x5262d0"
- },
- {
- "name": "FindFirstFileW",
- "address": "0x5262d4"
- },
- {
- "name": "FindClose",
- "address": "0x5262d8"
- },
- {
- "name": "GetCurrentProcess",
- "address": "0x5262dc"
- },
- {
- "name": "DuplicateHandle",
- "address": "0x5262e0"
- },
- {
- "name": "GetFileSize",
- "address": "0x5262e4"
- },
- {
- "name": "SetEndOfFile",
- "address": "0x5262e8"
- },
- {
- "name": "UnlockFile",
- "address": "0x5262ec"
- },
- {
- "name": "LockFile",
- "address": "0x5262f0"
- },
- {
- "name": "FlushFileBuffers",
- "address": "0x5262f4"
- },
- {
- "name": "SetFilePointer",
- "address": "0x5262f8"
- },
- {
- "name": "WriteFile",
- "address": "0x5262fc"
- },
- {
- "name": "ReadFile",
- "address": "0x526300"
- },
- {
- "name": "CreateFileW",
- "address": "0x526304"
- },
- {
- "name": "lstrcmpiW",
- "address": "0x526308"
- },
- {
- "name": "FileTimeToSystemTime",
- "address": "0x52630c"
- },
- {
- "name": "lstrlenA",
- "address": "0x526310"
- },
- {
- "name": "GetThreadLocale",
- "address": "0x526314"
- },
- {
- "name": "DeleteFileW",
- "address": "0x526318"
- },
- {
- "name": "InterlockedIncrement",
- "address": "0x52631c"
- },
- {
- "name": "TlsFree",
- "address": "0x526320"
- },
- {
- "name": "DeleteCriticalSection",
- "address": "0x526324"
- },
- {
- "name": "LocalReAlloc",
- "address": "0x526328"
- },
- {
- "name": "TlsSetValue",
- "address": "0x52632c"
- },
- {
- "name": "TlsAlloc",
- "address": "0x526330"
- },
- {
- "name": "InitializeCriticalSection",
- "address": "0x526334"
- },
- {
- "name": "GlobalHandle",
- "address": "0x526338"
- },
- {
- "name": "GlobalReAlloc",
- "address": "0x52633c"
- },
- {
- "name": "EnterCriticalSection",
- "address": "0x526340"
- },
- {
- "name": "TlsGetValue",
- "address": "0x526344"
- },
- {
- "name": "LeaveCriticalSection",
- "address": "0x526348"
- },
- {
- "name": "LocalAlloc",
- "address": "0x52634c"
- },
- {
- "name": "GlobalFlags",
- "address": "0x526350"
- },
- {
- "name": "GetCurrentDirectoryW",
- "address": "0x526354"
- },
- {
- "name": "InterlockedDecrement",
- "address": "0x526358"
- },
- {
- "name": "ReleaseActCtx",
- "address": "0x52635c"
- },
- {
- "name": "CreateActCtxW",
- "address": "0x526360"
- },
- {
- "name": "GlobalFindAtomW",
- "address": "0x526364"
- },
- {
- "name": "GetVersionExW",
- "address": "0x526368"
- },
- {
- "name": "CompareStringW",
- "address": "0x52636c"
- },
- {
- "name": "WaitForSingleObject",
- "address": "0x526370"
- },
- {
- "name": "ResumeThread",
- "address": "0x526374"
- },
- {
- "name": "SetThreadPriority",
- "address": "0x526378"
- },
- {
- "name": "CopyFileW",
- "address": "0x52637c"
- },
- {
- "name": "GlobalSize",
- "address": "0x526380"
- },
- {
- "name": "FormatMessageW",
- "address": "0x526384"
- },
- {
- "name": "LocalFree",
- "address": "0x526388"
- },
- {
- "name": "MulDiv",
- "address": "0x52638c"
- },
- {
- "name": "GlobalUnlock",
- "address": "0x526390"
- },
- {
- "name": "GetCurrentProcessId",
- "address": "0x526394"
- },
- {
- "name": "GlobalGetAtomNameW",
- "address": "0x526398"
- },
- {
- "name": "GlobalAddAtomW",
- "address": "0x52639c"
- },
- {
- "name": "GetPrivateProfileStringW",
- "address": "0x5263a0"
- },
- {
- "name": "lstrlenW",
- "address": "0x5263a4"
- },
- {
- "name": "WritePrivateProfileStringW",
- "address": "0x5263a8"
- },
- {
- "name": "GetPrivateProfileIntW",
- "address": "0x5263ac"
- },
- {
- "name": "lstrcpyW",
- "address": "0x5263b0"
- },
- {
- "name": "FreeResource",
- "address": "0x5263b4"
- },
- {
- "name": "GlobalFree",
- "address": "0x5263b8"
- },
- {
- "name": "lstrcmpA",
- "address": "0x5263bc"
- },
- {
- "name": "GlobalDeleteAtom",
- "address": "0x5263c0"
- },
- {
- "name": "GetCurrentThread",
- "address": "0x5263c4"
- },
- {
- "name": "GetCurrentThreadId",
- "address": "0x5263c8"
- },
- {
- "name": "GetUserDefaultUILanguage",
- "address": "0x5263cc"
- },
- {
- "name": "ConvertDefaultLocale",
- "address": "0x5263d0"
- },
- {
- "name": "GetSystemDefaultUILanguage",
- "address": "0x5263d4"
- },
- {
- "name": "GetModuleFileNameW",
- "address": "0x5263d8"
- },
- {
- "name": "GetLocaleInfoW",
- "address": "0x5263dc"
- },
- {
- "name": "ActivateActCtx",
- "address": "0x5263e0"
- },
- {
- "name": "LoadLibraryW",
- "address": "0x5263e4"
- },
- {
- "name": "GetLastError",
- "address": "0x5263e8"
- },
- {
- "name": "DeactivateActCtx",
- "address": "0x5263ec"
- },
- {
- "name": "SetLastError",
- "address": "0x5263f0"
- },
- {
- "name": "MultiByteToWideChar",
- "address": "0x5263f4"
- },
- {
- "name": "WideCharToMultiByte",
- "address": "0x5263f8"
- },
- {
- "name": "GlobalLock",
- "address": "0x5263fc"
- },
- {
- "name": "lstrcmpW",
- "address": "0x526400"
- },
- {
- "name": "GlobalAlloc",
- "address": "0x526404"
- },
- {
- "name": "GetModuleHandleW",
- "address": "0x526408"
- },
- {
- "name": "GetProcAddress",
- "address": "0x52640c"
- },
- {
- "name": "InterlockedExchange",
- "address": "0x526410"
- },
- {
- "name": "FreeLibrary",
- "address": "0x526414"
- },
- {
- "name": "GetCommandLineW",
- "address": "0x526418"
- },
- {
- "name": "FindResourceW",
- "address": "0x52641c"
- },
- {
- "name": "LoadResource",
- "address": "0x526420"
- },
- {
- "name": "LockResource",
- "address": "0x526424"
- },
- {
- "name": "SizeofResource",
- "address": "0x526428"
- },
- {
- "name": "CreateMutexW",
- "address": "0x52642c"
- },
- {
- "name": "CloseHandle",
- "address": "0x526430"
- }
- ],
- "dll": "KERNEL32.dll"
- },
- {
- "imports": [
- {
- "name": "CharUpperBuffW",
- "address": "0x5264d4"
- },
- {
- "name": "CopyIcon",
- "address": "0x5264d8"
- },
- {
- "name": "FrameRect",
- "address": "0x5264dc"
- },
- {
- "name": "EmptyClipboard",
- "address": "0x5264e0"
- },
- {
- "name": "CloseClipboard",
- "address": "0x5264e4"
- },
- {
- "name": "SetClipboardData",
- "address": "0x5264e8"
- },
- {
- "name": "OpenClipboard",
- "address": "0x5264ec"
- },
- {
- "name": "CopyImage",
- "address": "0x5264f0"
- },
- {
- "name": "GetIconInfo",
- "address": "0x5264f4"
- },
- {
- "name": "HideCaret",
- "address": "0x5264f8"
- },
- {
- "name": "InvertRect",
- "address": "0x5264fc"
- },
- {
- "name": "RegisterClipboardFormatW",
- "address": "0x526500"
- },
- {
- "name": "LockWindowUpdate",
- "address": "0x526504"
- },
- {
- "name": "SetCursorPos",
- "address": "0x526508"
- },
- {
- "name": "CreateAcceleratorTableW",
- "address": "0x52650c"
- },
- {
- "name": "GetKeyboardState",
- "address": "0x526510"
- },
- {
- "name": "GetKeyboardLayout",
- "address": "0x526514"
- },
- {
- "name": "ToUnicodeEx",
- "address": "0x526518"
- },
- {
- "name": "DrawFocusRect",
- "address": "0x52651c"
- },
- {
- "name": "DrawFrameControl",
- "address": "0x526520"
- },
- {
- "name": "DrawEdge",
- "address": "0x526524"
- },
- {
- "name": "DrawIconEx",
- "address": "0x526528"
- },
- {
- "name": "SetClassLongW",
- "address": "0x52652c"
- },
- {
- "name": "DestroyAcceleratorTable",
- "address": "0x526530"
- },
- {
- "name": "UnregisterClassW",
- "address": "0x526534"
- },
- {
- "name": "GetMenuDefaultItem",
- "address": "0x526538"
- },
- {
- "name": "SetMenuDefaultItem",
- "address": "0x52653c"
- },
- {
- "name": "IsMenu",
- "address": "0x526540"
- },
- {
- "name": "MonitorFromPoint",
- "address": "0x526544"
- },
- {
- "name": "UpdateLayeredWindow",
- "address": "0x526548"
- },
- {
- "name": "EnableScrollBar",
- "address": "0x52654c"
- },
- {
- "name": "CharUpperW",
- "address": "0x526550"
- },
- {
- "name": "IsZoomed",
- "address": "0x526554"
- },
- {
- "name": "GetAsyncKeyState",
- "address": "0x526558"
- },
- {
- "name": "NotifyWinEvent",
- "address": "0x52655c"
- },
- {
- "name": "WindowFromPoint",
- "address": "0x526560"
- },
- {
- "name": "RedrawWindow",
- "address": "0x526564"
- },
- {
- "name": "SetWindowRgn",
- "address": "0x526568"
- },
- {
- "name": "UnionRect",
- "address": "0x52656c"
- },
- {
- "name": "SetParent",
- "address": "0x526570"
- },
- {
- "name": "GetSystemMenu",
- "address": "0x526574"
- },
- {
- "name": "GetMenuItemInfoW",
- "address": "0x526578"
- },
- {
- "name": "InflateRect",
- "address": "0x52657c"
- },
- {
- "name": "MessageBeep",
- "address": "0x526580"
- },
- {
- "name": "GetNextDlgGroupItem",
- "address": "0x526584"
- },
- {
- "name": "SetCapture",
- "address": "0x526588"
- },
- {
- "name": "InvalidateRgn",
- "address": "0x52658c"
- },
- {
- "name": "SetRect",
- "address": "0x526590"
- },
- {
- "name": "IsRectEmpty",
- "address": "0x526594"
- },
- {
- "name": "CopyAcceleratorTableW",
- "address": "0x526598"
- },
- {
- "name": "CharNextW",
- "address": "0x52659c"
- },
- {
- "name": "GetSysColorBrush",
- "address": "0x5265a0"
- },
- {
- "name": "LoadCursorW",
- "address": "0x5265a4"
- },
- {
- "name": "SetLayeredWindowAttributes",
- "address": "0x5265a8"
- },
- {
- "name": "GetSystemMetrics",
- "address": "0x5265ac"
- },
- {
- "name": "EnumDisplayMonitors",
- "address": "0x5265b0"
- },
- {
- "name": "SystemParametersInfoW",
- "address": "0x5265b4"
- },
- {
- "name": "KillTimer",
- "address": "0x5265b8"
- },
- {
- "name": "SetTimer",
- "address": "0x5265bc"
- },
- {
- "name": "DeleteMenu",
- "address": "0x5265c0"
- },
- {
- "name": "MoveWindow",
- "address": "0x5265c4"
- },
- {
- "name": "SetWindowTextW",
- "address": "0x5265c8"
- },
- {
- "name": "IsDialogMessageW",
- "address": "0x5265cc"
- },
- {
- "name": "CheckDlgButton",
- "address": "0x5265d0"
- },
- {
- "name": "SendDlgItemMessageW",
- "address": "0x5265d4"
- },
- {
- "name": "SendDlgItemMessageA",
- "address": "0x5265d8"
- },
- {
- "name": "IsChild",
- "address": "0x5265dc"
- },
- {
- "name": "GetClassLongW",
- "address": "0x5265e0"
- },
- {
- "name": "SetPropW",
- "address": "0x5265e4"
- },
- {
- "name": "GetPropW",
- "address": "0x5265e8"
- },
- {
- "name": "RemovePropW",
- "address": "0x5265ec"
- },
- {
- "name": "GetWindowTextLengthW",
- "address": "0x5265f0"
- },
- {
- "name": "GetWindowTextW",
- "address": "0x5265f4"
- },
- {
- "name": "GetForegroundWindow",
- "address": "0x5265f8"
- },
- {
- "name": "BeginDeferWindowPos",
- "address": "0x5265fc"
- },
- {
- "name": "PostThreadMessageW",
- "address": "0x526600"
- },
- {
- "name": "GetTopWindow",
- "address": "0x526604"
- },
- {
- "name": "GetMessageTime",
- "address": "0x526608"
- },
- {
- "name": "GetMessagePos",
- "address": "0x52660c"
- },
- {
- "name": "MonitorFromWindow",
- "address": "0x526610"
- },
- {
- "name": "GetMonitorInfoW",
- "address": "0x526614"
- },
- {
- "name": "MapWindowPoints",
- "address": "0x526618"
- },
- {
- "name": "ScrollWindow",
- "address": "0x52661c"
- },
- {
- "name": "TrackPopupMenu",
- "address": "0x526620"
- },
- {
- "name": "SetScrollRange",
- "address": "0x526624"
- },
- {
- "name": "GetScrollRange",
- "address": "0x526628"
- },
- {
- "name": "SetScrollPos",
- "address": "0x52662c"
- },
- {
- "name": "GetScrollPos",
- "address": "0x526630"
- },
- {
- "name": "ShowScrollBar",
- "address": "0x526634"
- },
- {
- "name": "CreateWindowExW",
- "address": "0x526638"
- },
- {
- "name": "GetClassInfoExW",
- "address": "0x52663c"
- },
- {
- "name": "RegisterClassW",
- "address": "0x526640"
- },
- {
- "name": "AdjustWindowRectEx",
- "address": "0x526644"
- },
- {
- "name": "DeferWindowPos",
- "address": "0x526648"
- },
- {
- "name": "GetScrollInfo",
- "address": "0x52664c"
- },
- {
- "name": "SetScrollInfo",
- "address": "0x526650"
- },
- {
- "name": "SetWindowPlacement",
- "address": "0x526654"
- },
- {
- "name": "GetWindowPlacement",
- "address": "0x526658"
- },
- {
- "name": "DefWindowProcW",
- "address": "0x52665c"
- },
- {
- "name": "CallWindowProcW",
- "address": "0x526660"
- },
- {
- "name": "DrawStateW",
- "address": "0x526664"
- },
- {
- "name": "ShowOwnedPopups",
- "address": "0x526668"
- },
- {
- "name": "GetMessageW",
- "address": "0x52666c"
- },
- {
- "name": "TranslateMessage",
- "address": "0x526670"
- },
- {
- "name": "DispatchMessageW",
- "address": "0x526674"
- },
- {
- "name": "ValidateRect",
- "address": "0x526678"
- },
- {
- "name": "SetMenuItemBitmaps",
- "address": "0x52667c"
- },
- {
- "name": "GetMenuCheckMarkDimensions",
- "address": "0x526680"
- },
- {
- "name": "LoadBitmapW",
- "address": "0x526684"
- },
- {
- "name": "ModifyMenuW",
- "address": "0x526688"
- },
- {
- "name": "EnableMenuItem",
- "address": "0x52668c"
- },
- {
- "name": "CheckMenuItem",
- "address": "0x526690"
- },
- {
- "name": "SetWindowsHookExW",
- "address": "0x526694"
- },
- {
- "name": "UnhookWindowsHookEx",
- "address": "0x526698"
- },
- {
- "name": "GetCursorPos",
- "address": "0x52669c"
- },
- {
- "name": "CallNextHookEx",
- "address": "0x5266a0"
- },
- {
- "name": "GetFocus",
- "address": "0x5266a4"
- },
- {
- "name": "PtInRect",
- "address": "0x5266a8"
- },
- {
- "name": "EndPaint",
- "address": "0x5266ac"
- },
- {
- "name": "BeginPaint",
- "address": "0x5266b0"
- },
- {
- "name": "GetWindowDC",
- "address": "0x5266b4"
- },
- {
- "name": "ClientToScreen",
- "address": "0x5266b8"
- },
- {
- "name": "ScreenToClient",
- "address": "0x5266bc"
- },
- {
- "name": "GrayStringW",
- "address": "0x5266c0"
- },
- {
- "name": "DrawTextExW",
- "address": "0x5266c4"
- },
- {
- "name": "DrawTextW",
- "address": "0x5266c8"
- },
- {
- "name": "TabbedTextOutW",
- "address": "0x5266cc"
- },
- {
- "name": "FillRect",
- "address": "0x5266d0"
- },
- {
- "name": "GetMenuState",
- "address": "0x5266d4"
- },
- {
- "name": "GetMenuStringW",
- "address": "0x5266d8"
- },
- {
- "name": "AppendMenuW",
- "address": "0x5266dc"
- },
- {
- "name": "InsertMenuW",
- "address": "0x5266e0"
- },
- {
- "name": "RemoveMenu",
- "address": "0x5266e4"
- },
- {
- "name": "MessageBoxW",
- "address": "0x5266e8"
- },
- {
- "name": "MapVirtualKeyW",
- "address": "0x5266ec"
- },
- {
- "name": "GetKeyNameTextW",
- "address": "0x5266f0"
- },
- {
- "name": "ReleaseDC",
- "address": "0x5266f4"
- },
- {
- "name": "GetDC",
- "address": "0x5266f8"
- },
- {
- "name": "GetWindowRect",
- "address": "0x5266fc"
- },
- {
- "name": "CreateDialogIndirectParamW",
- "address": "0x526700"
- },
- {
- "name": "DestroyWindow",
- "address": "0x526704"
- },
- {
- "name": "GetNextDlgTabItem",
- "address": "0x526708"
- },
- {
- "name": "EndDialog",
- "address": "0x52670c"
- },
- {
- "name": "GetClassNameW",
- "address": "0x526710"
- },
- {
- "name": "GetSysColor",
- "address": "0x526714"
- },
- {
- "name": "UnpackDDElParam",
- "address": "0x526718"
- },
- {
- "name": "ReuseDDElParam",
- "address": "0x52671c"
- },
- {
- "name": "LoadMenuW",
- "address": "0x526720"
- },
- {
- "name": "DestroyMenu",
- "address": "0x526724"
- },
- {
- "name": "WaitMessage",
- "address": "0x526728"
- },
- {
- "name": "DefFrameProcW",
- "address": "0x52672c"
- },
- {
- "name": "DefMDIChildProcW",
- "address": "0x526730"
- },
- {
- "name": "DrawMenuBar",
- "address": "0x526734"
- },
- {
- "name": "TranslateMDISysAccel",
- "address": "0x526738"
- },
- {
- "name": "GetWindowRgn",
- "address": "0x52673c"
- },
- {
- "name": "DrawIcon",
- "address": "0x526740"
- },
- {
- "name": "DestroyCursor",
- "address": "0x526744"
- },
- {
- "name": "SubtractRect",
- "address": "0x526748"
- },
- {
- "name": "MapVirtualKeyExW",
- "address": "0x52674c"
- },
- {
- "name": "WinHelpW",
- "address": "0x526750"
- },
- {
- "name": "LoadImageW",
- "address": "0x526754"
- },
- {
- "name": "DestroyIcon",
- "address": "0x526758"
- },
- {
- "name": "SetFocus",
- "address": "0x52675c"
- },
- {
- "name": "GetWindowThreadProcessId",
- "address": "0x526760"
- },
- {
- "name": "GetActiveWindow",
- "address": "0x526764"
- },
- {
- "name": "IsWindowEnabled",
- "address": "0x526768"
- },
- {
- "name": "EqualRect",
- "address": "0x52676c"
- },
- {
- "name": "GetDlgItem",
- "address": "0x526770"
- },
- {
- "name": "SetWindowLongW",
- "address": "0x526774"
- },
- {
- "name": "IsCharLowerW",
- "address": "0x526778"
- },
- {
- "name": "GetDoubleClickTime",
- "address": "0x52677c"
- },
- {
- "name": "GetUpdateRect",
- "address": "0x526780"
- },
- {
- "name": "IsClipboardFormatAvailable",
- "address": "0x526784"
- },
- {
- "name": "EndDeferWindowPos",
- "address": "0x526788"
- },
- {
- "name": "CreateMenu",
- "address": "0x52678c"
- },
- {
- "name": "GetDlgCtrlID",
- "address": "0x526790"
- },
- {
- "name": "GetKeyState",
- "address": "0x526794"
- },
- {
- "name": "SetCursor",
- "address": "0x526798"
- },
- {
- "name": "PeekMessageW",
- "address": "0x52679c"
- },
- {
- "name": "GetCapture",
- "address": "0x5267a0"
- },
- {
- "name": "ReleaseCapture",
- "address": "0x5267a4"
- },
- {
- "name": "LoadAcceleratorsW",
- "address": "0x5267a8"
- },
- {
- "name": "SetActiveWindow",
- "address": "0x5267ac"
- },
- {
- "name": "IsWindowVisible",
- "address": "0x5267b0"
- },
- {
- "name": "InvalidateRect",
- "address": "0x5267b4"
- },
- {
- "name": "UpdateWindow",
- "address": "0x5267b8"
- },
- {
- "name": "IsIconic",
- "address": "0x5267bc"
- },
- {
- "name": "InsertMenuItemW",
- "address": "0x5267c0"
- },
- {
- "name": "GetSubMenu",
- "address": "0x5267c4"
- },
- {
- "name": "GetMenuItemID",
- "address": "0x5267c8"
- },
- {
- "name": "GetMenuItemCount",
- "address": "0x5267cc"
- },
- {
- "name": "CreatePopupMenu",
- "address": "0x5267d0"
- },
- {
- "name": "GetClassInfoW",
- "address": "0x5267d4"
- },
- {
- "name": "IntersectRect",
- "address": "0x5267d8"
- },
- {
- "name": "OffsetRect",
- "address": "0x5267dc"
- },
- {
- "name": "SetRectEmpty",
- "address": "0x5267e0"
- },
- {
- "name": "CopyRect",
- "address": "0x5267e4"
- },
- {
- "name": "GetMenu",
- "address": "0x5267e8"
- },
- {
- "name": "GetLastActivePopup",
- "address": "0x5267ec"
- },
- {
- "name": "BringWindowToTop",
- "address": "0x5267f0"
- },
- {
- "name": "SetMenu",
- "address": "0x5267f4"
- },
- {
- "name": "GetDesktopWindow",
- "address": "0x5267f8"
- },
- {
- "name": "ShowWindow",
- "address": "0x5267fc"
- },
- {
- "name": "GetWindowLongW",
- "address": "0x526800"
- },
- {
- "name": "IsWindow",
- "address": "0x526804"
- },
- {
- "name": "TranslateAcceleratorW",
- "address": "0x526808"
- },
- {
- "name": "RegisterWindowMessageW",
- "address": "0x52680c"
- },
- {
- "name": "GetWindow",
- "address": "0x526810"
- },
- {
- "name": "SetWindowContextHelpId",
- "address": "0x526814"
- },
- {
- "name": "GetParent",
- "address": "0x526818"
- },
- {
- "name": "MapDialogRect",
- "address": "0x52681c"
- },
- {
- "name": "SetWindowPos",
- "address": "0x526820"
- },
- {
- "name": "PostMessageW",
- "address": "0x526824"
- },
- {
- "name": "PostQuitMessage",
- "address": "0x526828"
- },
- {
- "name": "GetClientRect",
- "address": "0x52682c"
- },
- {
- "name": "SendMessageW",
- "address": "0x526830"
- },
- {
- "name": "LoadIconW",
- "address": "0x526834"
- },
- {
- "name": "SetForegroundWindow",
- "address": "0x526838"
- },
- {
- "name": "FindWindowW",
- "address": "0x52683c"
- },
- {
- "name": "EnableWindow",
- "address": "0x526840"
- },
- {
- "name": "RealChildWindowFromPoint",
- "address": "0x526844"
- }
- ],
- "dll": "USER32.dll"
- },
- {
- "imports": [
- {
- "name": "CreateHatchBrush",
- "address": "0x526044"
- },
- {
- "name": "CreateDIBitmap",
- "address": "0x526048"
- },
- {
- "name": "CreateFontIndirectW",
- "address": "0x52604c"
- },
- {
- "name": "GetTextMetricsW",
- "address": "0x526050"
- },
- {
- "name": "EnumFontFamiliesW",
- "address": "0x526054"
- },
- {
- "name": "GetTextCharsetInfo",
- "address": "0x526058"
- },
- {
- "name": "GetBkColor",
- "address": "0x52605c"
- },
- {
- "name": "GetTextColor",
- "address": "0x526060"
- },
- {
- "name": "GetRgnBox",
- "address": "0x526064"
- },
- {
- "name": "GetTextExtentPoint32W",
- "address": "0x526068"
- },
- {
- "name": "SetRectRgn",
- "address": "0x52606c"
- },
- {
- "name": "CombineRgn",
- "address": "0x526070"
- },
- {
- "name": "GetMapMode",
- "address": "0x526074"
- },
- {
- "name": "DPtoLP",
- "address": "0x526078"
- },
- {
- "name": "CreateRoundRectRgn",
- "address": "0x52607c"
- },
- {
- "name": "CreateDIBSection",
- "address": "0x526080"
- },
- {
- "name": "CreatePolygonRgn",
- "address": "0x526084"
- },
- {
- "name": "CreateEllipticRgn",
- "address": "0x526088"
- },
- {
- "name": "Polyline",
- "address": "0x52608c"
- },
- {
- "name": "Ellipse",
- "address": "0x526090"
- },
- {
- "name": "Polygon",
- "address": "0x526094"
- },
- {
- "name": "CreatePalette",
- "address": "0x526098"
- },
- {
- "name": "GetPaletteEntries",
- "address": "0x52609c"
- },
- {
- "name": "GetNearestPaletteIndex",
- "address": "0x5260a0"
- },
- {
- "name": "RealizePalette",
- "address": "0x5260a4"
- },
- {
- "name": "GetSystemPaletteEntries",
- "address": "0x5260a8"
- },
- {
- "name": "OffsetRgn",
- "address": "0x5260ac"
- },
- {
- "name": "SetDIBColorTable",
- "address": "0x5260b0"
- },
- {
- "name": "CreateSolidBrush",
- "address": "0x5260b4"
- },
- {
- "name": "SetPixel",
- "address": "0x5260b8"
- },
- {
- "name": "Rectangle",
- "address": "0x5260bc"
- },
- {
- "name": "EnumFontFamiliesExW",
- "address": "0x5260c0"
- },
- {
- "name": "ExtFloodFill",
- "address": "0x5260c4"
- },
- {
- "name": "SetPaletteEntries",
- "address": "0x5260c8"
- },
- {
- "name": "LPtoDP",
- "address": "0x5260cc"
- },
- {
- "name": "GetWindowOrgEx",
- "address": "0x5260d0"
- },
- {
- "name": "GetViewportOrgEx",
- "address": "0x5260d4"
- },
- {
- "name": "PtInRegion",
- "address": "0x5260d8"
- },
- {
- "name": "FillRgn",
- "address": "0x5260dc"
- },
- {
- "name": "FrameRgn",
- "address": "0x5260e0"
- },
- {
- "name": "GetBoundsRect",
- "address": "0x5260e4"
- },
- {
- "name": "GetTextFaceW",
- "address": "0x5260e8"
- },
- {
- "name": "SetPixelV",
- "address": "0x5260ec"
- },
- {
- "name": "Escape",
- "address": "0x5260f0"
- },
- {
- "name": "ExtTextOutW",
- "address": "0x5260f4"
- },
- {
- "name": "TextOutW",
- "address": "0x5260f8"
- },
- {
- "name": "CreatePen",
- "address": "0x5260fc"
- },
- {
- "name": "RectVisible",
- "address": "0x526100"
- },
- {
- "name": "GetObjectType",
- "address": "0x526104"
- },
- {
- "name": "SelectPalette",
- "address": "0x526108"
- },
- {
- "name": "GetStockObject",
- "address": "0x52610c"
- },
- {
- "name": "SelectObject",
- "address": "0x526110"
- },
- {
- "name": "CreateBitmap",
- "address": "0x526114"
- },
- {
- "name": "CreatePatternBrush",
- "address": "0x526118"
- },
- {
- "name": "DeleteDC",
- "address": "0x52611c"
- },
- {
- "name": "ExtSelectClipRgn",
- "address": "0x526120"
- },
- {
- "name": "ScaleWindowExtEx",
- "address": "0x526124"
- },
- {
- "name": "SetWindowExtEx",
- "address": "0x526128"
- },
- {
- "name": "OffsetWindowOrgEx",
- "address": "0x52612c"
- },
- {
- "name": "SetWindowOrgEx",
- "address": "0x526130"
- },
- {
- "name": "ScaleViewportExtEx",
- "address": "0x526134"
- },
- {
- "name": "SetViewportExtEx",
- "address": "0x526138"
- },
- {
- "name": "OffsetViewportOrgEx",
- "address": "0x52613c"
- },
- {
- "name": "StretchBlt",
- "address": "0x526140"
- },
- {
- "name": "CreateCompatibleBitmap",
- "address": "0x526144"
- },
- {
- "name": "PtVisible",
- "address": "0x526148"
- },
- {
- "name": "GetPixel",
- "address": "0x52614c"
- },
- {
- "name": "BitBlt",
- "address": "0x526150"
- },
- {
- "name": "GetWindowExtEx",
- "address": "0x526154"
- },
- {
- "name": "GetViewportExtEx",
- "address": "0x526158"
- },
- {
- "name": "GetObjectW",
- "address": "0x52615c"
- },
- {
- "name": "CreateRectRgn",
- "address": "0x526160"
- },
- {
- "name": "SelectClipRgn",
- "address": "0x526164"
- },
- {
- "name": "DeleteObject",
- "address": "0x526168"
- },
- {
- "name": "SetLayout",
- "address": "0x52616c"
- },
- {
- "name": "GetLayout",
- "address": "0x526170"
- },
- {
- "name": "SetTextAlign",
- "address": "0x526174"
- },
- {
- "name": "MoveToEx",
- "address": "0x526178"
- },
- {
- "name": "LineTo",
- "address": "0x52617c"
- },
- {
- "name": "IntersectClipRect",
- "address": "0x526180"
- },
- {
- "name": "ExcludeClipRect",
- "address": "0x526184"
- },
- {
- "name": "GetClipBox",
- "address": "0x526188"
- },
- {
- "name": "SetMapMode",
- "address": "0x52618c"
- },
- {
- "name": "SetTextColor",
- "address": "0x526190"
- },
- {
- "name": "SetROP2",
- "address": "0x526194"
- },
- {
- "name": "SetPolyFillMode",
- "address": "0x526198"
- },
- {
- "name": "SetBkMode",
- "address": "0x52619c"
- },
- {
- "name": "SetBkColor",
- "address": "0x5261a0"
- },
- {
- "name": "RestoreDC",
- "address": "0x5261a4"
- },
- {
- "name": "SaveDC",
- "address": "0x5261a8"
- },
- {
- "name": "CreateDCW",
- "address": "0x5261ac"
- },
- {
- "name": "CopyMetaFileW",
- "address": "0x5261b0"
- },
- {
- "name": "GetDeviceCaps",
- "address": "0x5261b4"
- },
- {
- "name": "PatBlt",
- "address": "0x5261b8"
- },
- {
- "name": "CreateRectRgnIndirect",
- "address": "0x5261bc"
- },
- {
- "name": "CreateCompatibleDC",
- "address": "0x5261c0"
- },
- {
- "name": "SetViewportOrgEx",
- "address": "0x5261c4"
- }
- ],
- "dll": "GDI32.dll"
- },
- {
- "imports": [
- {
- "name": "AlphaBlend",
- "address": "0x526438"
- },
- {
- "name": "TransparentBlt",
- "address": "0x52643c"
- }
- ],
- "dll": "MSIMG32.dll"
- },
- {
- "imports": [
- {
- "name": "GetFileTitleW",
- "address": "0x52603c"
- }
- ],
- "dll": "COMDLG32.dll"
- },
- {
- "imports": [
- {
- "name": "ClosePrinter",
- "address": "0x526854"
- },
- {
- "name": "OpenPrinterW",
- "address": "0x526858"
- },
- {
- "name": "DocumentPropertiesW",
- "address": "0x52685c"
- }
- ],
- "dll": "WINSPOOL.DRV"
- },
- {
- "imports": [
- {
- "name": "RegQueryValueExW",
- "address": "0x526000"
- },
- {
- "name": "RegOpenKeyExW",
- "address": "0x526004"
- },
- {
- "name": "RegCreateKeyExW",
- "address": "0x526008"
- },
- {
- "name": "RegSetValueExW",
- "address": "0x52600c"
- },
- {
- "name": "RegDeleteValueW",
- "address": "0x526010"
- },
- {
- "name": "RegDeleteKeyW",
- "address": "0x526014"
- },
- {
- "name": "RegEnumKeyW",
- "address": "0x526018"
- },
- {
- "name": "RegQueryValueW",
- "address": "0x52601c"
- },
- {
- "name": "RegCloseKey",
- "address": "0x526020"
- },
- {
- "name": "RegEnumKeyExW",
- "address": "0x526024"
- },
- {
- "name": "RegEnumValueW",
- "address": "0x526028"
- }
- ],
- "dll": "ADVAPI32.dll"
- },
- {
- "imports": [
- {
- "name": "SHGetFileInfoW",
- "address": "0x52648c"
- },
- {
- "name": "SHGetDesktopFolder",
- "address": "0x526490"
- },
- {
- "name": "SHGetSpecialFolderLocation",
- "address": "0x526494"
- },
- {
- "name": "SHGetMalloc",
- "address": "0x526498"
- },
- {
- "name": "SHGetPathFromIDListW",
- "address": "0x52649c"
- },
- {
- "name": "SHBrowseForFolderW",
- "address": "0x5264a0"
- },
- {
- "name": "SHAppBarMessage",
- "address": "0x5264a4"
- },
- {
- "name": "ShellExecuteW",
- "address": "0x5264a8"
- },
- {
- "name": "CommandLineToArgvW",
- "address": "0x5264ac"
- },
- {
- "name": "DragQueryFileW",
- "address": "0x5264b0"
- },
- {
- "name": "DragFinish",
- "address": "0x5264b4"
- }
- ],
- "dll": "SHELL32.dll"
- },
- {
- "imports": [
- {
- "name": "InitCommonControlsEx",
- "address": "0x526030"
- },
- {
- "name": "ImageList_GetIconSize",
- "address": "0x526034"
- }
- ],
- "dll": "COMCTL32.dll"
- },
- {
- "imports": [
- {
- "name": "PathFindFileNameW",
- "address": "0x5264bc"
- },
- {
- "name": "PathStripToRootW",
- "address": "0x5264c0"
- },
- {
- "name": "PathIsUNCW",
- "address": "0x5264c4"
- },
- {
- "name": "PathFindExtensionW",
- "address": "0x5264c8"
- },
- {
- "name": "PathRemoveFileSpecW",
- "address": "0x5264cc"
- }
- ],
- "dll": "SHLWAPI.dll"
- },
- {
- "imports": [
- {
- "name": "OleLockRunning",
- "address": "0x5268c0"
- },
- {
- "name": "IsAccelerator",
- "address": "0x5268c4"
- },
- {
- "name": "OleTranslateAccelerator",
- "address": "0x5268c8"
- },
- {
- "name": "OleDestroyMenuDescriptor",
- "address": "0x5268cc"
- },
- {
- "name": "OleCreateMenuDescriptor",
- "address": "0x5268d0"
- },
- {
- "name": "CoInitializeEx",
- "address": "0x5268d4"
- },
- {
- "name": "DoDragDrop",
- "address": "0x5268d8"
- },
- {
- "name": "OleFlushClipboard",
- "address": "0x5268dc"
- },
- {
- "name": "OleIsCurrentClipboard",
- "address": "0x5268e0"
- },
- {
- "name": "CreateStreamOnHGlobal",
- "address": "0x5268e4"
- },
- {
- "name": "OleInitialize",
- "address": "0x5268e8"
- },
- {
- "name": "CoFreeUnusedLibraries",
- "address": "0x5268ec"
- },
- {
- "name": "OleUninitialize",
- "address": "0x5268f0"
- },
- {
- "name": "StgCreateDocfileOnILockBytes",
- "address": "0x5268f4"
- },
- {
- "name": "StgOpenStorageOnILockBytes",
- "address": "0x5268f8"
- },
- {
- "name": "CoGetClassObject",
- "address": "0x5268fc"
- },
- {
- "name": "CoInitialize",
- "address": "0x526900"
- },
- {
- "name": "CoCreateInstance",
- "address": "0x526904"
- },
- {
- "name": "CoUninitialize",
- "address": "0x526908"
- },
- {
- "name": "OleDuplicateData",
- "address": "0x52690c"
- },
- {
- "name": "CoTaskMemAlloc",
- "address": "0x526910"
- },
- {
- "name": "ReleaseStgMedium",
- "address": "0x526914"
- },
- {
- "name": "CoTaskMemFree",
- "address": "0x526918"
- },
- {
- "name": "RevokeDragDrop",
- "address": "0x52691c"
- },
- {
- "name": "CoLockObjectExternal",
- "address": "0x526920"
- },
- {
- "name": "CLSIDFromString",
- "address": "0x526924"
- },
- {
- "name": "CLSIDFromProgID",
- "address": "0x526928"
- },
- {
- "name": "CoCreateGuid",
- "address": "0x52692c"
- },
- {
- "name": "RegisterDragDrop",
- "address": "0x526930"
- },
- {
- "name": "OleGetClipboard",
- "address": "0x526934"
- },
- {
- "name": "CoRegisterMessageFilter",
- "address": "0x526938"
- },
- {
- "name": "CreateILockBytesOnHGlobal",
- "address": "0x52693c"
- },
- {
- "name": "CoRevokeClassObject",
- "address": "0x526940"
- }
- ],
- "dll": "ole32.dll"
- },
- {
- "imports": [
- {
- "name": "SysFreeString",
- "address": "0x526454"
- },
- {
- "name": "VarBstrFromDate",
- "address": "0x526458"
- },
- {
- "name": "VariantCopy",
- "address": "0x52645c"
- },
- {
- "name": "SafeArrayDestroy",
- "address": "0x526460"
- },
- {
- "name": "SystemTimeToVariantTime",
- "address": "0x526464"
- },
- {
- "name": "VariantTimeToSystemTime",
- "address": "0x526468"
- },
- {
- "name": "OleCreateFontIndirect",
- "address": "0x52646c"
- },
- {
- "name": "SysStringLen",
- "address": "0x526470"
- },
- {
- "name": "VariantInit",
- "address": "0x526474"
- },
- {
- "name": "VariantChangeType",
- "address": "0x526478"
- },
- {
- "name": "VariantClear",
- "address": "0x52647c"
- },
- {
- "name": "SysAllocStringLen",
- "address": "0x526480"
- },
- {
- "name": "SysAllocString",
- "address": "0x526484"
- }
- ],
- "dll": "OLEAUT32.dll"
- },
- {
- "imports": [
- {
- "name": "OleUIBusyW",
- "address": "0x526948"
- }
- ],
- "dll": "oledlg.dll"
- },
- {
- "imports": [
- {
- "name": "GdipGetImageGraphicsContext",
- "address": "0x526864"
- },
- {
- "name": "GdipBitmapUnlockBits",
- "address": "0x526868"
- },
- {
- "name": "GdipBitmapLockBits",
- "address": "0x52686c"
- },
- {
- "name": "GdipCreateBitmapFromScan0",
- "address": "0x526870"
- },
- {
- "name": "GdipCreateBitmapFromStream",
- "address": "0x526874"
- },
- {
- "name": "GdipGetImagePalette",
- "address": "0x526878"
- },
- {
- "name": "GdipGetImagePaletteSize",
- "address": "0x52687c"
- },
- {
- "name": "GdipGetImagePixelFormat",
- "address": "0x526880"
- },
- {
- "name": "GdipGetImageHeight",
- "address": "0x526884"
- },
- {
- "name": "GdipGetImageWidth",
- "address": "0x526888"
- },
- {
- "name": "GdipCloneImage",
- "address": "0x52688c"
- },
- {
- "name": "GdipDrawImageRectI",
- "address": "0x526890"
- },
- {
- "name": "GdipSetInterpolationMode",
- "address": "0x526894"
- },
- {
- "name": "GdipCreateFromHDC",
- "address": "0x526898"
- },
- {
- "name": "GdiplusShutdown",
- "address": "0x52689c"
- },
- {
- "name": "GdiplusStartup",
- "address": "0x5268a0"
- },
- {
- "name": "GdipCreateBitmapFromHBITMAP",
- "address": "0x5268a4"
- },
- {
- "name": "GdipDisposeImage",
- "address": "0x5268a8"
- },
- {
- "name": "GdipDeleteGraphics",
- "address": "0x5268ac"
- },
- {
- "name": "GdipAlloc",
- "address": "0x5268b0"
- },
- {
- "name": "GdipFree",
- "address": "0x5268b4"
- },
- {
- "name": "GdipDrawImageI",
- "address": "0x5268b8"
- }
- ],
- "dll": "gdiplus.dll"
- },
- {
- "imports": [
- {
- "name": "LresultFromObject",
- "address": "0x526444"
- },
- {
- "name": "AccessibleObjectFromWindow",
- "address": "0x526448"
- },
- {
- "name": "CreateStdAccessibleObject",
- "address": "0x52644c"
- }
- ],
- "dll": "OLEACC.dll"
- },
- {
- "imports": [
- {
- "name": "ImmGetOpenStatus",
- "address": "0x5261cc"
- },
- {
- "name": "ImmReleaseContext",
- "address": "0x5261d0"
- },
- {
- "name": "ImmGetContext",
- "address": "0x5261d4"
- }
- ],
- "dll": "IMM32.dll"
- },
- {
- "imports": [
- {
- "name": "PlaySoundW",
- "address": "0x52684c"
- }
- ],
- "dll": "WINMM.dll"
- }
- ],
- "digital_signers": null,
- "exported_dll_name": null,
- "actual_checksum": "0x0025aa50",
- "overlay": {
- "size": "0x00003400",
- "offset": "0x0024fc00"
- },
- "imagebase": "0x00400000",
- "reported_checksum": "0x002625d3",
- "icon_hash": null,
- "entrypoint": "0x00507bc6",
- "timestamp": "2014-09-18 13:13:49",
- "osversion": "5.1",
- "sections": [
- {
- "name": ".text",
- "characteristics": "IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
- "virtual_address": "0x00001000",
- "size_of_data": "0x00124200",
- "entropy": "6.53",
- "raw_address": "0x00000400",
- "virtual_size": "0x001240b0",
- "characteristics_raw": "0xe0000020"
- },
- {
- "name": ".rdata",
- "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
- "virtual_address": "0x00126000",
- "size_of_data": "0x00045200",
- "entropy": "4.97",
- "raw_address": "0x00124600",
- "virtual_size": "0x00045006",
- "characteristics_raw": "0x40000040"
- },
- {
- "name": ".data",
- "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
- "virtual_address": "0x0016c000",
- "size_of_data": "0x00006400",
- "entropy": "4.69",
- "raw_address": "0x00169800",
- "virtual_size": "0x0000da3c",
- "characteristics_raw": "0xc0000040"
- },
- {
- "name": ".rsrc",
- "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
- "virtual_address": "0x0017a000",
- "size_of_data": "0x000b7000",
- "entropy": "3.54",
- "raw_address": "0x0016fc00",
- "virtual_size": "0x000b6efb",
- "characteristics_raw": "0x40000040"
- },
- {
- "name": ".reloc",
- "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ",
- "virtual_address": "0x00231000",
- "size_of_data": "0x00029000",
- "entropy": "5.34",
- "raw_address": "0x00226c00",
- "virtual_size": "0x00028ef2",
- "characteristics_raw": "0x42000040"
- }
- ],
- "resources": [],
- "dirents": [
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00167d58",
- "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
- "size": "0x00000168"
- },
- {
- "virtual_address": "0x0017a000",
- "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
- "size": "0x000b6efb"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00230000",
- "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
- "size": "0x0001a8f4"
- },
- {
- "virtual_address": "0x00126d20",
- "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
- "size": "0x0000001c"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_TLS",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00150c10",
- "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
- "size": "0x00000040"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00126000",
- "name": "IMAGE_DIRECTORY_ENTRY_IAT",
- "size": "0x00000950"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
- "size": "0x00000000"
- }
- ],
- "exports": [],
- "guest_signers": {},
- "imphash": "e5531f0f5a33c38a037bd66aa1e5fc60",
- "icon_fuzzy": null,
- "icon": null,
- "pdbpath": "H:\\sharemk\\3rd Sep 4.0\\S-Cort\\Code\\PleaseWaitWindow\\Release\\WaitHelpWindow.pdb",
- "imported_dll_count": 17,
- "versioninfo": []
- }
- }
- [*] Resolved APIs: []
- [*] Static Analysis: {
- "pe": {
- "peid_signatures": null,
- "imports": [
- {
- "imports": [
- {
- "name": "GetConsoleMode",
- "address": "0x5261dc"
- },
- {
- "name": "GetConsoleCP",
- "address": "0x5261e0"
- },
- {
- "name": "LCMapStringW",
- "address": "0x5261e4"
- },
- {
- "name": "GetTimeZoneInformation",
- "address": "0x5261e8"
- },
- {
- "name": "IsValidCodePage",
- "address": "0x5261ec"
- },
- {
- "name": "GetOEMCP",
- "address": "0x5261f0"
- },
- {
- "name": "GetACP",
- "address": "0x5261f4"
- },
- {
- "name": "GetCPInfo",
- "address": "0x5261f8"
- },
- {
- "name": "IsProcessorFeaturePresent",
- "address": "0x5261fc"
- },
- {
- "name": "GetStringTypeW",
- "address": "0x526200"
- },
- {
- "name": "IsDebuggerPresent",
- "address": "0x526204"
- },
- {
- "name": "UnhandledExceptionFilter",
- "address": "0x526208"
- },
- {
- "name": "TerminateProcess",
- "address": "0x52620c"
- },
- {
- "name": "QueryPerformanceCounter",
- "address": "0x526210"
- },
- {
- "name": "HeapCreate",
- "address": "0x526214"
- },
- {
- "name": "SetHandleCount",
- "address": "0x526218"
- },
- {
- "name": "GetEnvironmentStringsW",
- "address": "0x52621c"
- },
- {
- "name": "FreeEnvironmentStringsW",
- "address": "0x526220"
- },
- {
- "name": "GetStdHandle",
- "address": "0x526224"
- },
- {
- "name": "SetUnhandledExceptionFilter",
- "address": "0x526228"
- },
- {
- "name": "GetFileType",
- "address": "0x52622c"
- },
- {
- "name": "OpenMutexW",
- "address": "0x526230"
- },
- {
- "name": "SetStdHandle",
- "address": "0x526234"
- },
- {
- "name": "VirtualQuery",
- "address": "0x526238"
- },
- {
- "name": "GetSystemInfo",
- "address": "0x52623c"
- },
- {
- "name": "VirtualAlloc",
- "address": "0x526240"
- },
- {
- "name": "GetSystemTimeAsFileTime",
- "address": "0x526244"
- },
- {
- "name": "HeapSize",
- "address": "0x526248"
- },
- {
- "name": "HeapQueryInformation",
- "address": "0x52624c"
- },
- {
- "name": "CreateThread",
- "address": "0x526250"
- },
- {
- "name": "ExitThread",
- "address": "0x526254"
- },
- {
- "name": "HeapReAlloc",
- "address": "0x526258"
- },
- {
- "name": "SetEnvironmentVariableA",
- "address": "0x52625c"
- },
- {
- "name": "RtlUnwind",
- "address": "0x526260"
- },
- {
- "name": "HeapFree",
- "address": "0x526264"
- },
- {
- "name": "HeapAlloc",
- "address": "0x526268"
- },
- {
- "name": "ExitProcess",
- "address": "0x52626c"
- },
- {
- "name": "DecodePointer",
- "address": "0x526270"
- },
- {
- "name": "EncodePointer",
- "address": "0x526274"
- },
- {
- "name": "GetStartupInfoW",
- "address": "0x526278"
- },
- {
- "name": "HeapSetInformation",
- "address": "0x52627c"
- },
- {
- "name": "FindResourceExW",
- "address": "0x526280"
- },
- {
- "name": "VirtualProtect",
- "address": "0x526284"
- },
- {
- "name": "SearchPathW",
- "address": "0x526288"
- },
- {
- "name": "Sleep",
- "address": "0x52628c"
- },
- {
- "name": "GetProfileIntW",
- "address": "0x526290"
- },
- {
- "name": "InitializeCriticalSectionAndSpinCount",
- "address": "0x526294"
- },
- {
- "name": "GetNumberFormatW",
- "address": "0x526298"
- },
- {
- "name": "GetWindowsDirectoryW",
- "address": "0x52629c"
- },
- {
- "name": "GetTickCount",
- "address": "0x5262a0"
- },
- {
- "name": "GetTempPathW",
- "address": "0x5262a4"
- },
- {
- "name": "GetTempFileNameW",
- "address": "0x5262a8"
- },
- {
- "name": "GetFileTime",
- "address": "0x5262ac"
- },
- {
- "name": "GetFileSizeEx",
- "address": "0x5262b0"
- },
- {
- "name": "GetFileAttributesW",
- "address": "0x5262b4"
- },
- {
- "name": "FileTimeToLocalFileTime",
- "address": "0x5262b8"
- },
- {
- "name": "GetFileAttributesExW",
- "address": "0x5262bc"
- },
- {
- "name": "SetErrorMode",
- "address": "0x5262c0"
- },
- {
- "name": "GetFullPathNameW",
- "address": "0x5262c4"
- },
- {
- "name": "GetVolumeInformationW",
- "address": "0x5262c8"
- },
- {
- "name": "WriteConsoleW",
- "address": "0x5262cc"
- },
- {
- "name": "RaiseException",
- "address": "0x5262d0"
- },
- {
- "name": "FindFirstFileW",
- "address": "0x5262d4"
- },
- {
- "name": "FindClose",
- "address": "0x5262d8"
- },
- {
- "name": "GetCurrentProcess",
- "address": "0x5262dc"
- },
- {
- "name": "DuplicateHandle",
- "address": "0x5262e0"
- },
- {
- "name": "GetFileSize",
- "address": "0x5262e4"
- },
- {
- "name": "SetEndOfFile",
- "address": "0x5262e8"
- },
- {
- "name": "UnlockFile",
- "address": "0x5262ec"
- },
- {
- "name": "LockFile",
- "address": "0x5262f0"
- },
- {
- "name": "FlushFileBuffers",
- "address": "0x5262f4"
- },
- {
- "name": "SetFilePointer",
- "address": "0x5262f8"
- },
- {
- "name": "WriteFile",
- "address": "0x5262fc"
- },
- {
- "name": "ReadFile",
- "address": "0x526300"
- },
- {
- "name": "CreateFileW",
- "address": "0x526304"
- },
- {
- "name": "lstrcmpiW",
- "address": "0x526308"
- },
- {
- "name": "FileTimeToSystemTime",
- "address": "0x52630c"
- },
- {
- "name": "lstrlenA",
- "address": "0x526310"
- },
- {
- "name": "GetThreadLocale",
- "address": "0x526314"
- },
- {
- "name": "DeleteFileW",
- "address": "0x526318"
- },
- {
- "name": "InterlockedIncrement",
- "address": "0x52631c"
- },
- {
- "name": "TlsFree",
- "address": "0x526320"
- },
- {
- "name": "DeleteCriticalSection",
- "address": "0x526324"
- },
- {
- "name": "LocalReAlloc",
- "address": "0x526328"
- },
- {
- "name": "TlsSetValue",
- "address": "0x52632c"
- },
- {
- "name": "TlsAlloc",
- "address": "0x526330"
- },
- {
- "name": "InitializeCriticalSection",
- "address": "0x526334"
- },
- {
- "name": "GlobalHandle",
- "address": "0x526338"
- },
- {
- "name": "GlobalReAlloc",
- "address": "0x52633c"
- },
- {
- "name": "EnterCriticalSection",
- "address": "0x526340"
- },
- {
- "name": "TlsGetValue",
- "address": "0x526344"
- },
- {
- "name": "LeaveCriticalSection",
- "address": "0x526348"
- },
- {
- "name": "LocalAlloc",
- "address": "0x52634c"
- },
- {
- "name": "GlobalFlags",
- "address": "0x526350"
- },
- {
- "name": "GetCurrentDirectoryW",
- "address": "0x526354"
- },
- {
- "name": "InterlockedDecrement",
- "address": "0x526358"
- },
- {
- "name": "ReleaseActCtx",
- "address": "0x52635c"
- },
- {
- "name": "CreateActCtxW",
- "address": "0x526360"
- },
- {
- "name": "GlobalFindAtomW",
- "address": "0x526364"
- },
- {
- "name": "GetVersionExW",
- "address": "0x526368"
- },
- {
- "name": "CompareStringW",
- "address": "0x52636c"
- },
- {
- "name": "WaitForSingleObject",
- "address": "0x526370"
- },
- {
- "name": "ResumeThread",
- "address": "0x526374"
- },
- {
- "name": "SetThreadPriority",
- "address": "0x526378"
- },
- {
- "name": "CopyFileW",
- "address": "0x52637c"
- },
- {
- "name": "GlobalSize",
- "address": "0x526380"
- },
- {
- "name": "FormatMessageW",
- "address": "0x526384"
- },
- {
- "name": "LocalFree",
- "address": "0x526388"
- },
- {
- "name": "MulDiv",
- "address": "0x52638c"
- },
- {
- "name": "GlobalUnlock",
- "address": "0x526390"
- },
- {
- "name": "GetCurrentProcessId",
- "address": "0x526394"
- },
- {
- "name": "GlobalGetAtomNameW",
- "address": "0x526398"
- },
- {
- "name": "GlobalAddAtomW",
- "address": "0x52639c"
- },
- {
- "name": "GetPrivateProfileStringW",
- "address": "0x5263a0"
- },
- {
- "name": "lstrlenW",
- "address": "0x5263a4"
- },
- {
- "name": "WritePrivateProfileStringW",
- "address": "0x5263a8"
- },
- {
- "name": "GetPrivateProfileIntW",
- "address": "0x5263ac"
- },
- {
- "name": "lstrcpyW",
- "address": "0x5263b0"
- },
- {
- "name": "FreeResource",
- "address": "0x5263b4"
- },
- {
- "name": "GlobalFree",
- "address": "0x5263b8"
- },
- {
- "name": "lstrcmpA",
- "address": "0x5263bc"
- },
- {
- "name": "GlobalDeleteAtom",
- "address": "0x5263c0"
- },
- {
- "name": "GetCurrentThread",
- "address": "0x5263c4"
- },
- {
- "name": "GetCurrentThreadId",
- "address": "0x5263c8"
- },
- {
- "name": "GetUserDefaultUILanguage",
- "address": "0x5263cc"
- },
- {
- "name": "ConvertDefaultLocale",
- "address": "0x5263d0"
- },
- {
- "name": "GetSystemDefaultUILanguage",
- "address": "0x5263d4"
- },
- {
- "name": "GetModuleFileNameW",
- "address": "0x5263d8"
- },
- {
- "name": "GetLocaleInfoW",
- "address": "0x5263dc"
- },
- {
- "name": "ActivateActCtx",
- "address": "0x5263e0"
- },
- {
- "name": "LoadLibraryW",
- "address": "0x5263e4"
- },
- {
- "name": "GetLastError",
- "address": "0x5263e8"
- },
- {
- "name": "DeactivateActCtx",
- "address": "0x5263ec"
- },
- {
- "name": "SetLastError",
- "address": "0x5263f0"
- },
- {
- "name": "MultiByteToWideChar",
- "address": "0x5263f4"
- },
- {
- "name": "WideCharToMultiByte",
- "address": "0x5263f8"
- },
- {
- "name": "GlobalLock",
- "address": "0x5263fc"
- },
- {
- "name": "lstrcmpW",
- "address": "0x526400"
- },
- {
- "name": "GlobalAlloc",
- "address": "0x526404"
- },
- {
- "name": "GetModuleHandleW",
- "address": "0x526408"
- },
- {
- "name": "GetProcAddress",
- "address": "0x52640c"
- },
- {
- "name": "InterlockedExchange",
- "address": "0x526410"
- },
- {
- "name": "FreeLibrary",
- "address": "0x526414"
- },
- {
- "name": "GetCommandLineW",
- "address": "0x526418"
- },
- {
- "name": "FindResourceW",
- "address": "0x52641c"
- },
- {
- "name": "LoadResource",
- "address": "0x526420"
- },
- {
- "name": "LockResource",
- "address": "0x526424"
- },
- {
- "name": "SizeofResource",
- "address": "0x526428"
- },
- {
- "name": "CreateMutexW",
- "address": "0x52642c"
- },
- {
- "name": "CloseHandle",
- "address": "0x526430"
- }
- ],
- "dll": "KERNEL32.dll"
- },
- {
- "imports": [
- {
- "name": "CharUpperBuffW",
- "address": "0x5264d4"
- },
- {
- "name": "CopyIcon",
- "address": "0x5264d8"
- },
- {
- "name": "FrameRect",
- "address": "0x5264dc"
- },
- {
- "name": "EmptyClipboard",
- "address": "0x5264e0"
- },
- {
- "name": "CloseClipboard",
- "address": "0x5264e4"
- },
- {
- "name": "SetClipboardData",
- "address": "0x5264e8"
- },
- {
- "name": "OpenClipboard",
- "address": "0x5264ec"
- },
- {
- "name": "CopyImage",
- "address": "0x5264f0"
- },
- {
- "name": "GetIconInfo",
- "address": "0x5264f4"
- },
- {
- "name": "HideCaret",
- "address": "0x5264f8"
- },
- {
- "name": "InvertRect",
- "address": "0x5264fc"
- },
- {
- "name": "RegisterClipboardFormatW",
- "address": "0x526500"
- },
- {
- "name": "LockWindowUpdate",
- "address": "0x526504"
- },
- {
- "name": "SetCursorPos",
- "address": "0x526508"
- },
- {
- "name": "CreateAcceleratorTableW",
- "address": "0x52650c"
- },
- {
- "name": "GetKeyboardState",
- "address": "0x526510"
- },
- {
- "name": "GetKeyboardLayout",
- "address": "0x526514"
- },
- {
- "name": "ToUnicodeEx",
- "address": "0x526518"
- },
- {
- "name": "DrawFocusRect",
- "address": "0x52651c"
- },
- {
- "name": "DrawFrameControl",
- "address": "0x526520"
- },
- {
- "name": "DrawEdge",
- "address": "0x526524"
- },
- {
- "name": "DrawIconEx",
- "address": "0x526528"
- },
- {
- "name": "SetClassLongW",
- "address": "0x52652c"
- },
- {
- "name": "DestroyAcceleratorTable",
- "address": "0x526530"
- },
- {
- "name": "UnregisterClassW",
- "address": "0x526534"
- },
- {
- "name": "GetMenuDefaultItem",
- "address": "0x526538"
- },
- {
- "name": "SetMenuDefaultItem",
- "address": "0x52653c"
- },
- {
- "name": "IsMenu",
- "address": "0x526540"
- },
- {
- "name": "MonitorFromPoint",
- "address": "0x526544"
- },
- {
- "name": "UpdateLayeredWindow",
- "address": "0x526548"
- },
- {
- "name": "EnableScrollBar",
- "address": "0x52654c"
- },
- {
- "name": "CharUpperW",
- "address": "0x526550"
- },
- {
- "name": "IsZoomed",
- "address": "0x526554"
- },
- {
- "name": "GetAsyncKeyState",
- "address": "0x526558"
- },
- {
- "name": "NotifyWinEvent",
- "address": "0x52655c"
- },
- {
- "name": "WindowFromPoint",
- "address": "0x526560"
- },
- {
- "name": "RedrawWindow",
- "address": "0x526564"
- },
- {
- "name": "SetWindowRgn",
- "address": "0x526568"
- },
- {
- "name": "UnionRect",
- "address": "0x52656c"
- },
- {
- "name": "SetParent",
- "address": "0x526570"
- },
- {
- "name": "GetSystemMenu",
- "address": "0x526574"
- },
- {
- "name": "GetMenuItemInfoW",
- "address": "0x526578"
- },
- {
- "name": "InflateRect",
- "address": "0x52657c"
- },
- {
- "name": "MessageBeep",
- "address": "0x526580"
- },
- {
- "name": "GetNextDlgGroupItem",
- "address": "0x526584"
- },
- {
- "name": "SetCapture",
- "address": "0x526588"
- },
- {
- "name": "InvalidateRgn",
- "address": "0x52658c"
- },
- {
- "name": "SetRect",
- "address": "0x526590"
- },
- {
- "name": "IsRectEmpty",
- "address": "0x526594"
- },
- {
- "name": "CopyAcceleratorTableW",
- "address": "0x526598"
- },
- {
- "name": "CharNextW",
- "address": "0x52659c"
- },
- {
- "name": "GetSysColorBrush",
- "address": "0x5265a0"
- },
- {
- "name": "LoadCursorW",
- "address": "0x5265a4"
- },
- {
- "name": "SetLayeredWindowAttributes",
- "address": "0x5265a8"
- },
- {
- "name": "GetSystemMetrics",
- "address": "0x5265ac"
- },
- {
- "name": "EnumDisplayMonitors",
- "address": "0x5265b0"
- },
- {
- "name": "SystemParametersInfoW",
- "address": "0x5265b4"
- },
- {
- "name": "KillTimer",
- "address": "0x5265b8"
- },
- {
- "name": "SetTimer",
- "address": "0x5265bc"
- },
- {
- "name": "DeleteMenu",
- "address": "0x5265c0"
- },
- {
- "name": "MoveWindow",
- "address": "0x5265c4"
- },
- {
- "name": "SetWindowTextW",
- "address": "0x5265c8"
- },
- {
- "name": "IsDialogMessageW",
- "address": "0x5265cc"
- },
- {
- "name": "CheckDlgButton",
- "address": "0x5265d0"
- },
- {
- "name": "SendDlgItemMessageW",
- "address": "0x5265d4"
- },
- {
- "name": "SendDlgItemMessageA",
- "address": "0x5265d8"
- },
- {
- "name": "IsChild",
- "address": "0x5265dc"
- },
- {
- "name": "GetClassLongW",
- "address": "0x5265e0"
- },
- {
- "name": "SetPropW",
- "address": "0x5265e4"
- },
- {
- "name": "GetPropW",
- "address": "0x5265e8"
- },
- {
- "name": "RemovePropW",
- "address": "0x5265ec"
- },
- {
- "name": "GetWindowTextLengthW",
- "address": "0x5265f0"
- },
- {
- "name": "GetWindowTextW",
- "address": "0x5265f4"
- },
- {
- "name": "GetForegroundWindow",
- "address": "0x5265f8"
- },
- {
- "name": "BeginDeferWindowPos",
- "address": "0x5265fc"
- },
- {
- "name": "PostThreadMessageW",
- "address": "0x526600"
- },
- {
- "name": "GetTopWindow",
- "address": "0x526604"
- },
- {
- "name": "GetMessageTime",
- "address": "0x526608"
- },
- {
- "name": "GetMessagePos",
- "address": "0x52660c"
- },
- {
- "name": "MonitorFromWindow",
- "address": "0x526610"
- },
- {
- "name": "GetMonitorInfoW",
- "address": "0x526614"
- },
- {
- "name": "MapWindowPoints",
- "address": "0x526618"
- },
- {
- "name": "ScrollWindow",
- "address": "0x52661c"
- },
- {
- "name": "TrackPopupMenu",
- "address": "0x526620"
- },
- {
- "name": "SetScrollRange",
- "address": "0x526624"
- },
- {
- "name": "GetScrollRange",
- "address": "0x526628"
- },
- {
- "name": "SetScrollPos",
- "address": "0x52662c"
- },
- {
- "name": "GetScrollPos",
- "address": "0x526630"
- },
- {
- "name": "ShowScrollBar",
- "address": "0x526634"
- },
- {
- "name": "CreateWindowExW",
- "address": "0x526638"
- },
- {
- "name": "GetClassInfoExW",
- "address": "0x52663c"
- },
- {
- "name": "RegisterClassW",
- "address": "0x526640"
- },
- {
- "name": "AdjustWindowRectEx",
- "address": "0x526644"
- },
- {
- "name": "DeferWindowPos",
- "address": "0x526648"
- },
- {
- "name": "GetScrollInfo",
- "address": "0x52664c"
- },
- {
- "name": "SetScrollInfo",
- "address": "0x526650"
- },
- {
- "name": "SetWindowPlacement",
- "address": "0x526654"
- },
- {
- "name": "GetWindowPlacement",
- "address": "0x526658"
- },
- {
- "name": "DefWindowProcW",
- "address": "0x52665c"
- },
- {
- "name": "CallWindowProcW",
- "address": "0x526660"
- },
- {
- "name": "DrawStateW",
- "address": "0x526664"
- },
- {
- "name": "ShowOwnedPopups",
- "address": "0x526668"
- },
- {
- "name": "GetMessageW",
- "address": "0x52666c"
- },
- {
- "name": "TranslateMessage",
- "address": "0x526670"
- },
- {
- "name": "DispatchMessageW",
- "address": "0x526674"
- },
- {
- "name": "ValidateRect",
- "address": "0x526678"
- },
- {
- "name": "SetMenuItemBitmaps",
- "address": "0x52667c"
- },
- {
- "name": "GetMenuCheckMarkDimensions",
- "address": "0x526680"
- },
- {
- "name": "LoadBitmapW",
- "address": "0x526684"
- },
- {
- "name": "ModifyMenuW",
- "address": "0x526688"
- },
- {
- "name": "EnableMenuItem",
- "address": "0x52668c"
- },
- {
- "name": "CheckMenuItem",
- "address": "0x526690"
- },
- {
- "name": "SetWindowsHookExW",
- "address": "0x526694"
- },
- {
- "name": "UnhookWindowsHookEx",
- "address": "0x526698"
- },
- {
- "name": "GetCursorPos",
- "address": "0x52669c"
- },
- {
- "name": "CallNextHookEx",
- "address": "0x5266a0"
- },
- {
- "name": "GetFocus",
- "address": "0x5266a4"
- },
- {
- "name": "PtInRect",
- "address": "0x5266a8"
- },
- {
- "name": "EndPaint",
- "address": "0x5266ac"
- },
- {
- "name": "BeginPaint",
- "address": "0x5266b0"
- },
- {
- "name": "GetWindowDC",
- "address": "0x5266b4"
- },
- {
- "name": "ClientToScreen",
- "address": "0x5266b8"
- },
- {
- "name": "ScreenToClient",
- "address": "0x5266bc"
- },
- {
- "name": "GrayStringW",
- "address": "0x5266c0"
- },
- {
- "name": "DrawTextExW",
- "address": "0x5266c4"
- },
- {
- "name": "DrawTextW",
- "address": "0x5266c8"
- },
- {
- "name": "TabbedTextOutW",
- "address": "0x5266cc"
- },
- {
- "name": "FillRect",
- "address": "0x5266d0"
- },
- {
- "name": "GetMenuState",
- "address": "0x5266d4"
- },
- {
- "name": "GetMenuStringW",
- "address": "0x5266d8"
- },
- {
- "name": "AppendMenuW",
- "address": "0x5266dc"
- },
- {
- "name": "InsertMenuW",
- "address": "0x5266e0"
- },
- {
- "name": "RemoveMenu",
- "address": "0x5266e4"
- },
- {
- "name": "MessageBoxW",
- "address": "0x5266e8"
- },
- {
- "name": "MapVirtualKeyW",
- "address": "0x5266ec"
- },
- {
- "name": "GetKeyNameTextW",
- "address": "0x5266f0"
- },
- {
- "name": "ReleaseDC",
- "address": "0x5266f4"
- },
- {
- "name": "GetDC",
- "address": "0x5266f8"
- },
- {
- "name": "GetWindowRect",
- "address": "0x5266fc"
- },
- {
- "name": "CreateDialogIndirectParamW",
- "address": "0x526700"
- },
- {
- "name": "DestroyWindow",
- "address": "0x526704"
- },
- {
- "name": "GetNextDlgTabItem",
- "address": "0x526708"
- },
- {
- "name": "EndDialog",
- "address": "0x52670c"
- },
- {
- "name": "GetClassNameW",
- "address": "0x526710"
- },
- {
- "name": "GetSysColor",
- "address": "0x526714"
- },
- {
- "name": "UnpackDDElParam",
- "address": "0x526718"
- },
- {
- "name": "ReuseDDElParam",
- "address": "0x52671c"
- },
- {
- "name": "LoadMenuW",
- "address": "0x526720"
- },
- {
- "name": "DestroyMenu",
- "address": "0x526724"
- },
- {
- "name": "WaitMessage",
- "address": "0x526728"
- },
- {
- "name": "DefFrameProcW",
- "address": "0x52672c"
- },
- {
- "name": "DefMDIChildProcW",
- "address": "0x526730"
- },
- {
- "name": "DrawMenuBar",
- "address": "0x526734"
- },
- {
- "name": "TranslateMDISysAccel",
- "address": "0x526738"
- },
- {
- "name": "GetWindowRgn",
- "address": "0x52673c"
- },
- {
- "name": "DrawIcon",
- "address": "0x526740"
- },
- {
- "name": "DestroyCursor",
- "address": "0x526744"
- },
- {
- "name": "SubtractRect",
- "address": "0x526748"
- },
- {
- "name": "MapVirtualKeyExW",
- "address": "0x52674c"
- },
- {
- "name": "WinHelpW",
- "address": "0x526750"
- },
- {
- "name": "LoadImageW",
- "address": "0x526754"
- },
- {
- "name": "DestroyIcon",
- "address": "0x526758"
- },
- {
- "name": "SetFocus",
- "address": "0x52675c"
- },
- {
- "name": "GetWindowThreadProcessId",
- "address": "0x526760"
- },
- {
- "name": "GetActiveWindow",
- "address": "0x526764"
- },
- {
- "name": "IsWindowEnabled",
- "address": "0x526768"
- },
- {
- "name": "EqualRect",
- "address": "0x52676c"
- },
- {
- "name": "GetDlgItem",
- "address": "0x526770"
- },
- {
- "name": "SetWindowLongW",
- "address": "0x526774"
- },
- {
- "name": "IsCharLowerW",
- "address": "0x526778"
- },
- {
- "name": "GetDoubleClickTime",
- "address": "0x52677c"
- },
- {
- "name": "GetUpdateRect",
- "address": "0x526780"
- },
- {
- "name": "IsClipboardFormatAvailable",
- "address": "0x526784"
- },
- {
- "name": "EndDeferWindowPos",
- "address": "0x526788"
- },
- {
- "name": "CreateMenu",
- "address": "0x52678c"
- },
- {
- "name": "GetDlgCtrlID",
- "address": "0x526790"
- },
- {
- "name": "GetKeyState",
- "address": "0x526794"
- },
- {
- "name": "SetCursor",
- "address": "0x526798"
- },
- {
- "name": "PeekMessageW",
- "address": "0x52679c"
- },
- {
- "name": "GetCapture",
- "address": "0x5267a0"
- },
- {
- "name": "ReleaseCapture",
- "address": "0x5267a4"
- },
- {
- "name": "LoadAcceleratorsW",
- "address": "0x5267a8"
- },
- {
- "name": "SetActiveWindow",
- "address": "0x5267ac"
- },
- {
- "name": "IsWindowVisible",
- "address": "0x5267b0"
- },
- {
- "name": "InvalidateRect",
- "address": "0x5267b4"
- },
- {
- "name": "UpdateWindow",
- "address": "0x5267b8"
- },
- {
- "name": "IsIconic",
- "address": "0x5267bc"
- },
- {
- "name": "InsertMenuItemW",
- "address": "0x5267c0"
- },
- {
- "name": "GetSubMenu",
- "address": "0x5267c4"
- },
- {
- "name": "GetMenuItemID",
- "address": "0x5267c8"
- },
- {
- "name": "GetMenuItemCount",
- "address": "0x5267cc"
- },
- {
- "name": "CreatePopupMenu",
- "address": "0x5267d0"
- },
- {
- "name": "GetClassInfoW",
- "address": "0x5267d4"
- },
- {
- "name": "IntersectRect",
- "address": "0x5267d8"
- },
- {
- "name": "OffsetRect",
- "address": "0x5267dc"
- },
- {
- "name": "SetRectEmpty",
- "address": "0x5267e0"
- },
- {
- "name": "CopyRect",
- "address": "0x5267e4"
- },
- {
- "name": "GetMenu",
- "address": "0x5267e8"
- },
- {
- "name": "GetLastActivePopup",
- "address": "0x5267ec"
- },
- {
- "name": "BringWindowToTop",
- "address": "0x5267f0"
- },
- {
- "name": "SetMenu",
- "address": "0x5267f4"
- },
- {
- "name": "GetDesktopWindow",
- "address": "0x5267f8"
- },
- {
- "name": "ShowWindow",
- "address": "0x5267fc"
- },
- {
- "name": "GetWindowLongW",
- "address": "0x526800"
- },
- {
- "name": "IsWindow",
- "address": "0x526804"
- },
- {
- "name": "TranslateAcceleratorW",
- "address": "0x526808"
- },
- {
- "name": "RegisterWindowMessageW",
- "address": "0x52680c"
- },
- {
- "name": "GetWindow",
- "address": "0x526810"
- },
- {
- "name": "SetWindowContextHelpId",
- "address": "0x526814"
- },
- {
- "name": "GetParent",
- "address": "0x526818"
- },
- {
- "name": "MapDialogRect",
- "address": "0x52681c"
- },
- {
- "name": "SetWindowPos",
- "address": "0x526820"
- },
- {
- "name": "PostMessageW",
- "address": "0x526824"
- },
- {
- "name": "PostQuitMessage",
- "address": "0x526828"
- },
- {
- "name": "GetClientRect",
- "address": "0x52682c"
- },
- {
- "name": "SendMessageW",
- "address": "0x526830"
- },
- {
- "name": "LoadIconW",
- "address": "0x526834"
- },
- {
- "name": "SetForegroundWindow",
- "address": "0x526838"
- },
- {
- "name": "FindWindowW",
- "address": "0x52683c"
- },
- {
- "name": "EnableWindow",
- "address": "0x526840"
- },
- {
- "name": "RealChildWindowFromPoint",
- "address": "0x526844"
- }
- ],
- "dll": "USER32.dll"
- },
- {
- "imports": [
- {
- "name": "CreateHatchBrush",
- "address": "0x526044"
- },
- {
- "name": "CreateDIBitmap",
- "address": "0x526048"
- },
- {
- "name": "CreateFontIndirectW",
- "address": "0x52604c"
- },
- {
- "name": "GetTextMetricsW",
- "address": "0x526050"
- },
- {
- "name": "EnumFontFamiliesW",
- "address": "0x526054"
- },
- {
- "name": "GetTextCharsetInfo",
- "address": "0x526058"
- },
- {
- "name": "GetBkColor",
- "address": "0x52605c"
- },
- {
- "name": "GetTextColor",
- "address": "0x526060"
- },
- {
- "name": "GetRgnBox",
- "address": "0x526064"
- },
- {
- "name": "GetTextExtentPoint32W",
- "address": "0x526068"
- },
- {
- "name": "SetRectRgn",
- "address": "0x52606c"
- },
- {
- "name": "CombineRgn",
- "address": "0x526070"
- },
- {
- "name": "GetMapMode",
- "address": "0x526074"
- },
- {
- "name": "DPtoLP",
- "address": "0x526078"
- },
- {
- "name": "CreateRoundRectRgn",
- "address": "0x52607c"
- },
- {
- "name": "CreateDIBSection",
- "address": "0x526080"
- },
- {
- "name": "CreatePolygonRgn",
- "address": "0x526084"
- },
- {
- "name": "CreateEllipticRgn",
- "address": "0x526088"
- },
- {
- "name": "Polyline",
- "address": "0x52608c"
- },
- {
- "name": "Ellipse",
- "address": "0x526090"
- },
- {
- "name": "Polygon",
- "address": "0x526094"
- },
- {
- "name": "CreatePalette",
- "address": "0x526098"
- },
- {
- "name": "GetPaletteEntries",
- "address": "0x52609c"
- },
- {
- "name": "GetNearestPaletteIndex",
- "address": "0x5260a0"
- },
- {
- "name": "RealizePalette",
- "address": "0x5260a4"
- },
- {
- "name": "GetSystemPaletteEntries",
- "address": "0x5260a8"
- },
- {
- "name": "OffsetRgn",
- "address": "0x5260ac"
- },
- {
- "name": "SetDIBColorTable",
- "address": "0x5260b0"
- },
- {
- "name": "CreateSolidBrush",
- "address": "0x5260b4"
- },
- {
- "name": "SetPixel",
- "address": "0x5260b8"
- },
- {
- "name": "Rectangle",
- "address": "0x5260bc"
- },
- {
- "name": "EnumFontFamiliesExW",
- "address": "0x5260c0"
- },
- {
- "name": "ExtFloodFill",
- "address": "0x5260c4"
- },
- {
- "name": "SetPaletteEntries",
- "address": "0x5260c8"
- },
- {
- "name": "LPtoDP",
- "address": "0x5260cc"
- },
- {
- "name": "GetWindowOrgEx",
- "address": "0x5260d0"
- },
- {
- "name": "GetViewportOrgEx",
- "address": "0x5260d4"
- },
- {
- "name": "PtInRegion",
- "address": "0x5260d8"
- },
- {
- "name": "FillRgn",
- "address": "0x5260dc"
- },
- {
- "name": "FrameRgn",
- "address": "0x5260e0"
- },
- {
- "name": "GetBoundsRect",
- "address": "0x5260e4"
- },
- {
- "name": "GetTextFaceW",
- "address": "0x5260e8"
- },
- {
- "name": "SetPixelV",
- "address": "0x5260ec"
- },
- {
- "name": "Escape",
- "address": "0x5260f0"
- },
- {
- "name": "ExtTextOutW",
- "address": "0x5260f4"
- },
- {
- "name": "TextOutW",
- "address": "0x5260f8"
- },
- {
- "name": "CreatePen",
- "address": "0x5260fc"
- },
- {
- "name": "RectVisible",
- "address": "0x526100"
- },
- {
- "name": "GetObjectType",
- "address": "0x526104"
- },
- {
- "name": "SelectPalette",
- "address": "0x526108"
- },
- {
- "name": "GetStockObject",
- "address": "0x52610c"
- },
- {
- "name": "SelectObject",
- "address": "0x526110"
- },
- {
- "name": "CreateBitmap",
- "address": "0x526114"
- },
- {
- "name": "CreatePatternBrush",
- "address": "0x526118"
- },
- {
- "name": "DeleteDC",
- "address": "0x52611c"
- },
- {
- "name": "ExtSelectClipRgn",
- "address": "0x526120"
- },
- {
- "name": "ScaleWindowExtEx",
- "address": "0x526124"
- },
- {
- "name": "SetWindowExtEx",
- "address": "0x526128"
- },
- {
- "name": "OffsetWindowOrgEx",
- "address": "0x52612c"
- },
- {
- "name": "SetWindowOrgEx",
- "address": "0x526130"
- },
- {
- "name": "ScaleViewportExtEx",
- "address": "0x526134"
- },
- {
- "name": "SetViewportExtEx",
- "address": "0x526138"
- },
- {
- "name": "OffsetViewportOrgEx",
- "address": "0x52613c"
- },
- {
- "name": "StretchBlt",
- "address": "0x526140"
- },
- {
- "name": "CreateCompatibleBitmap",
- "address": "0x526144"
- },
- {
- "name": "PtVisible",
- "address": "0x526148"
- },
- {
- "name": "GetPixel",
- "address": "0x52614c"
- },
- {
- "name": "BitBlt",
- "address": "0x526150"
- },
- {
- "name": "GetWindowExtEx",
- "address": "0x526154"
- },
- {
- "name": "GetViewportExtEx",
- "address": "0x526158"
- },
- {
- "name": "GetObjectW",
- "address": "0x52615c"
- },
- {
- "name": "CreateRectRgn",
- "address": "0x526160"
- },
- {
- "name": "SelectClipRgn",
- "address": "0x526164"
- },
- {
- "name": "DeleteObject",
- "address": "0x526168"
- },
- {
- "name": "SetLayout",
- "address": "0x52616c"
- },
- {
- "name": "GetLayout",
- "address": "0x526170"
- },
- {
- "name": "SetTextAlign",
- "address": "0x526174"
- },
- {
- "name": "MoveToEx",
- "address": "0x526178"
- },
- {
- "name": "LineTo",
- "address": "0x52617c"
- },
- {
- "name": "IntersectClipRect",
- "address": "0x526180"
- },
- {
- "name": "ExcludeClipRect",
- "address": "0x526184"
- },
- {
- "name": "GetClipBox",
- "address": "0x526188"
- },
- {
- "name": "SetMapMode",
- "address": "0x52618c"
- },
- {
- "name": "SetTextColor",
- "address": "0x526190"
- },
- {
- "name": "SetROP2",
- "address": "0x526194"
- },
- {
- "name": "SetPolyFillMode",
- "address": "0x526198"
- },
- {
- "name": "SetBkMode",
- "address": "0x52619c"
- },
- {
- "name": "SetBkColor",
- "address": "0x5261a0"
- },
- {
- "name": "RestoreDC",
- "address": "0x5261a4"
- },
- {
- "name": "SaveDC",
- "address": "0x5261a8"
- },
- {
- "name": "CreateDCW",
- "address": "0x5261ac"
- },
- {
- "name": "CopyMetaFileW",
- "address": "0x5261b0"
- },
- {
- "name": "GetDeviceCaps",
- "address": "0x5261b4"
- },
- {
- "name": "PatBlt",
- "address": "0x5261b8"
- },
- {
- "name": "CreateRectRgnIndirect",
- "address": "0x5261bc"
- },
- {
- "name": "CreateCompatibleDC",
- "address": "0x5261c0"
- },
- {
- "name": "SetViewportOrgEx",
- "address": "0x5261c4"
- }
- ],
- "dll": "GDI32.dll"
- },
- {
- "imports": [
- {
- "name": "AlphaBlend",
- "address": "0x526438"
- },
- {
- "name": "TransparentBlt",
- "address": "0x52643c"
- }
- ],
- "dll": "MSIMG32.dll"
- },
- {
- "imports": [
- {
- "name": "GetFileTitleW",
- "address": "0x52603c"
- }
- ],
- "dll": "COMDLG32.dll"
- },
- {
- "imports": [
- {
- "name": "ClosePrinter",
- "address": "0x526854"
- },
- {
- "name": "OpenPrinterW",
- "address": "0x526858"
- },
- {
- "name": "DocumentPropertiesW",
- "address": "0x52685c"
- }
- ],
- "dll": "WINSPOOL.DRV"
- },
- {
- "imports": [
- {
- "name": "RegQueryValueExW",
- "address": "0x526000"
- },
- {
- "name": "RegOpenKeyExW",
- "address": "0x526004"
- },
- {
- "name": "RegCreateKeyExW",
- "address": "0x526008"
- },
- {
- "name": "RegSetValueExW",
- "address": "0x52600c"
- },
- {
- "name": "RegDeleteValueW",
- "address": "0x526010"
- },
- {
- "name": "RegDeleteKeyW",
- "address": "0x526014"
- },
- {
- "name": "RegEnumKeyW",
- "address": "0x526018"
- },
- {
- "name": "RegQueryValueW",
- "address": "0x52601c"
- },
- {
- "name": "RegCloseKey",
- "address": "0x526020"
- },
- {
- "name": "RegEnumKeyExW",
- "address": "0x526024"
- },
- {
- "name": "RegEnumValueW",
- "address": "0x526028"
- }
- ],
- "dll": "ADVAPI32.dll"
- },
- {
- "imports": [
- {
- "name": "SHGetFileInfoW",
- "address": "0x52648c"
- },
- {
- "name": "SHGetDesktopFolder",
- "address": "0x526490"
- },
- {
- "name": "SHGetSpecialFolderLocation",
- "address": "0x526494"
- },
- {
- "name": "SHGetMalloc",
- "address": "0x526498"
- },
- {
- "name": "SHGetPathFromIDListW",
- "address": "0x52649c"
- },
- {
- "name": "SHBrowseForFolderW",
- "address": "0x5264a0"
- },
- {
- "name": "SHAppBarMessage",
- "address": "0x5264a4"
- },
- {
- "name": "ShellExecuteW",
- "address": "0x5264a8"
- },
- {
- "name": "CommandLineToArgvW",
- "address": "0x5264ac"
- },
- {
- "name": "DragQueryFileW",
- "address": "0x5264b0"
- },
- {
- "name": "DragFinish",
- "address": "0x5264b4"
- }
- ],
- "dll": "SHELL32.dll"
- },
- {
- "imports": [
- {
- "name": "InitCommonControlsEx",
- "address": "0x526030"
- },
- {
- "name": "ImageList_GetIconSize",
- "address": "0x526034"
- }
- ],
- "dll": "COMCTL32.dll"
- },
- {
- "imports": [
- {
- "name": "PathFindFileNameW",
- "address": "0x5264bc"
- },
- {
- "name": "PathStripToRootW",
- "address": "0x5264c0"
- },
- {
- "name": "PathIsUNCW",
- "address": "0x5264c4"
- },
- {
- "name": "PathFindExtensionW",
- "address": "0x5264c8"
- },
- {
- "name": "PathRemoveFileSpecW",
- "address": "0x5264cc"
- }
- ],
- "dll": "SHLWAPI.dll"
- },
- {
- "imports": [
- {
- "name": "OleLockRunning",
- "address": "0x5268c0"
- },
- {
- "name": "IsAccelerator",
- "address": "0x5268c4"
- },
- {
- "name": "OleTranslateAccelerator",
- "address": "0x5268c8"
- },
- {
- "name": "OleDestroyMenuDescriptor",
- "address": "0x5268cc"
- },
- {
- "name": "OleCreateMenuDescriptor",
- "address": "0x5268d0"
- },
- {
- "name": "CoInitializeEx",
- "address": "0x5268d4"
- },
- {
- "name": "DoDragDrop",
- "address": "0x5268d8"
- },
- {
- "name": "OleFlushClipboard",
- "address": "0x5268dc"
- },
- {
- "name": "OleIsCurrentClipboard",
- "address": "0x5268e0"
- },
- {
- "name": "CreateStreamOnHGlobal",
- "address": "0x5268e4"
- },
- {
- "name": "OleInitialize",
- "address": "0x5268e8"
- },
- {
- "name": "CoFreeUnusedLibraries",
- "address": "0x5268ec"
- },
- {
- "name": "OleUninitialize",
- "address": "0x5268f0"
- },
- {
- "name": "StgCreateDocfileOnILockBytes",
- "address": "0x5268f4"
- },
- {
- "name": "StgOpenStorageOnILockBytes",
- "address": "0x5268f8"
- },
- {
- "name": "CoGetClassObject",
- "address": "0x5268fc"
- },
- {
- "name": "CoInitialize",
- "address": "0x526900"
- },
- {
- "name": "CoCreateInstance",
- "address": "0x526904"
- },
- {
- "name": "CoUninitialize",
- "address": "0x526908"
- },
- {
- "name": "OleDuplicateData",
- "address": "0x52690c"
- },
- {
- "name": "CoTaskMemAlloc",
- "address": "0x526910"
- },
- {
- "name": "ReleaseStgMedium",
- "address": "0x526914"
- },
- {
- "name": "CoTaskMemFree",
- "address": "0x526918"
- },
- {
- "name": "RevokeDragDrop",
- "address": "0x52691c"
- },
- {
- "name": "CoLockObjectExternal",
- "address": "0x526920"
- },
- {
- "name": "CLSIDFromString",
- "address": "0x526924"
- },
- {
- "name": "CLSIDFromProgID",
- "address": "0x526928"
- },
- {
- "name": "CoCreateGuid",
- "address": "0x52692c"
- },
- {
- "name": "RegisterDragDrop",
- "address": "0x526930"
- },
- {
- "name": "OleGetClipboard",
- "address": "0x526934"
- },
- {
- "name": "CoRegisterMessageFilter",
- "address": "0x526938"
- },
- {
- "name": "CreateILockBytesOnHGlobal",
- "address": "0x52693c"
- },
- {
- "name": "CoRevokeClassObject",
- "address": "0x526940"
- }
- ],
- "dll": "ole32.dll"
- },
- {
- "imports": [
- {
- "name": "SysFreeString",
- "address": "0x526454"
- },
- {
- "name": "VarBstrFromDate",
- "address": "0x526458"
- },
- {
- "name": "VariantCopy",
- "address": "0x52645c"
- },
- {
- "name": "SafeArrayDestroy",
- "address": "0x526460"
- },
- {
- "name": "SystemTimeToVariantTime",
- "address": "0x526464"
- },
- {
- "name": "VariantTimeToSystemTime",
- "address": "0x526468"
- },
- {
- "name": "OleCreateFontIndirect",
- "address": "0x52646c"
- },
- {
- "name": "SysStringLen",
- "address": "0x526470"
- },
- {
- "name": "VariantInit",
- "address": "0x526474"
- },
- {
- "name": "VariantChangeType",
- "address": "0x526478"
- },
- {
- "name": "VariantClear",
- "address": "0x52647c"
- },
- {
- "name": "SysAllocStringLen",
- "address": "0x526480"
- },
- {
- "name": "SysAllocString",
- "address": "0x526484"
- }
- ],
- "dll": "OLEAUT32.dll"
- },
- {
- "imports": [
- {
- "name": "OleUIBusyW",
- "address": "0x526948"
- }
- ],
- "dll": "oledlg.dll"
- },
- {
- "imports": [
- {
- "name": "GdipGetImageGraphicsContext",
- "address": "0x526864"
- },
- {
- "name": "GdipBitmapUnlockBits",
- "address": "0x526868"
- },
- {
- "name": "GdipBitmapLockBits",
- "address": "0x52686c"
- },
- {
- "name": "GdipCreateBitmapFromScan0",
- "address": "0x526870"
- },
- {
- "name": "GdipCreateBitmapFromStream",
- "address": "0x526874"
- },
- {
- "name": "GdipGetImagePalette",
- "address": "0x526878"
- },
- {
- "name": "GdipGetImagePaletteSize",
- "address": "0x52687c"
- },
- {
- "name": "GdipGetImagePixelFormat",
- "address": "0x526880"
- },
- {
- "name": "GdipGetImageHeight",
- "address": "0x526884"
- },
- {
- "name": "GdipGetImageWidth",
- "address": "0x526888"
- },
- {
- "name": "GdipCloneImage",
- "address": "0x52688c"
- },
- {
- "name": "GdipDrawImageRectI",
- "address": "0x526890"
- },
- {
- "name": "GdipSetInterpolationMode",
- "address": "0x526894"
- },
- {
- "name": "GdipCreateFromHDC",
- "address": "0x526898"
- },
- {
- "name": "GdiplusShutdown",
- "address": "0x52689c"
- },
- {
- "name": "GdiplusStartup",
- "address": "0x5268a0"
- },
- {
- "name": "GdipCreateBitmapFromHBITMAP",
- "address": "0x5268a4"
- },
- {
- "name": "GdipDisposeImage",
- "address": "0x5268a8"
- },
- {
- "name": "GdipDeleteGraphics",
- "address": "0x5268ac"
- },
- {
- "name": "GdipAlloc",
- "address": "0x5268b0"
- },
- {
- "name": "GdipFree",
- "address": "0x5268b4"
- },
- {
- "name": "GdipDrawImageI",
- "address": "0x5268b8"
- }
- ],
- "dll": "gdiplus.dll"
- },
- {
- "imports": [
- {
- "name": "LresultFromObject",
- "address": "0x526444"
- },
- {
- "name": "AccessibleObjectFromWindow",
- "address": "0x526448"
- },
- {
- "name": "CreateStdAccessibleObject",
- "address": "0x52644c"
- }
- ],
- "dll": "OLEACC.dll"
- },
- {
- "imports": [
- {
- "name": "ImmGetOpenStatus",
- "address": "0x5261cc"
- },
- {
- "name": "ImmReleaseContext",
- "address": "0x5261d0"
- },
- {
- "name": "ImmGetContext",
- "address": "0x5261d4"
- }
- ],
- "dll": "IMM32.dll"
- },
- {
- "imports": [
- {
- "name": "PlaySoundW",
- "address": "0x52684c"
- }
- ],
- "dll": "WINMM.dll"
- }
- ],
- "digital_signers": null,
- "exported_dll_name": null,
- "actual_checksum": "0x0025aa50",
- "overlay": {
- "size": "0x00003400",
- "offset": "0x0024fc00"
- },
- "imagebase": "0x00400000",
- "reported_checksum": "0x002625d3",
- "icon_hash": null,
- "entrypoint": "0x00507bc6",
- "timestamp": "2014-09-18 13:13:49",
- "osversion": "5.1",
- "sections": [
- {
- "name": ".text",
- "characteristics": "IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
- "virtual_address": "0x00001000",
- "size_of_data": "0x00124200",
- "entropy": "6.53",
- "raw_address": "0x00000400",
- "virtual_size": "0x001240b0",
- "characteristics_raw": "0xe0000020"
- },
- {
- "name": ".rdata",
- "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
- "virtual_address": "0x00126000",
- "size_of_data": "0x00045200",
- "entropy": "4.97",
- "raw_address": "0x00124600",
- "virtual_size": "0x00045006",
- "characteristics_raw": "0x40000040"
- },
- {
- "name": ".data",
- "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
- "virtual_address": "0x0016c000",
- "size_of_data": "0x00006400",
- "entropy": "4.69",
- "raw_address": "0x00169800",
- "virtual_size": "0x0000da3c",
- "characteristics_raw": "0xc0000040"
- },
- {
- "name": ".rsrc",
- "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
- "virtual_address": "0x0017a000",
- "size_of_data": "0x000b7000",
- "entropy": "3.54",
- "raw_address": "0x0016fc00",
- "virtual_size": "0x000b6efb",
- "characteristics_raw": "0x40000040"
- },
- {
- "name": ".reloc",
- "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ",
- "virtual_address": "0x00231000",
- "size_of_data": "0x00029000",
- "entropy": "5.34",
- "raw_address": "0x00226c00",
- "virtual_size": "0x00028ef2",
- "characteristics_raw": "0x42000040"
- }
- ],
- "resources": [],
- "dirents": [
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00167d58",
- "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
- "size": "0x00000168"
- },
- {
- "virtual_address": "0x0017a000",
- "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
- "size": "0x000b6efb"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00230000",
- "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
- "size": "0x0001a8f4"
- },
- {
- "virtual_address": "0x00126d20",
- "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
- "size": "0x0000001c"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_TLS",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00150c10",
- "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
- "size": "0x00000040"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00126000",
- "name": "IMAGE_DIRECTORY_ENTRY_IAT",
- "size": "0x00000950"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
- "size": "0x00000000"
- }
- ],
- "exports": [],
- "guest_signers": {},
- "imphash": "e5531f0f5a33c38a037bd66aa1e5fc60",
- "icon_fuzzy": null,
- "icon": null,
- "pdbpath": "H:\\sharemk\\3rd Sep 4.0\\S-Cort\\Code\\PleaseWaitWindow\\Release\\WaitHelpWindow.pdb",
- "imported_dll_count": 17,
- "versioninfo": []
- }
- }
Advertisement
Add Comment
Please, Sign In to add comment