Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- [*] MalFamily: ""
- [*] MalScore: 0.3
- [*] File Name: "BookMaker.exe"
- [*] File Size: 2343936
- [*] File Type: "PE32 executable (GUI) Intel 80386, for MS Windows"
- [*] SHA256: "2e0e27bb4fd5cfb09dc6fcc7cdc2f933aa956755f7da1ccdfd6dbc4938256c40"
- [*] MD5: "c56f3fe6e75e8051f6155fefdde09340"
- [*] SHA1: "5b0af02b36a04ed689717e71d4a7e82ffd0277d8"
- [*] SHA512: "95d9b6483b3ce7f4882a283a947778e11988d531da660dfcd691b6144e37f45efcd10eb32fa85436955abebfb11065628072ecc9dfe16d0ea40b75ad04db4a84"
- [*] CRC32: "D2472D30"
- [*] SSDEEP: "49152:MrMilLiDjMfw6CuBNsniE0gZ6Ad1NL8/UkY8dHZL6p0r+JnT8qJt+ScCH37:2Milw2w6VNA10gZ6Ad7L848psp0r+JTJ"
- [*] Process Execution: [
- "BookMaker.exe"
- ]
- [*] Signatures Detected: [
- {
- "Description": "Performs some HTTP requests",
- "Details": [
- {
- "url": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTfqhLjKLEJQZPin0KCzkdAQpVYowQUsT7DaQP4v0cB1JgmGggC72NkK8MCEAPxtOFfOoLxFJZ4s9fYR1w%3D"
- },
- {
- "url": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSPwl%2BrBFlJbvzLXU1bGW08VysJ2wQUj%2Bh%2B8G0yagAFI8dwl2o6kP9r6tQCEA%2BdzSc7B3UzA8k03selSwo%3D"
- },
- {
- "url": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSPwl%2BrBFlJbvzLXU1bGW08VysJ2wQUj%2Bh%2B8G0yagAFI8dwl2o6kP9r6tQCEAaJg2QslT5G973OQUPxM8E%3D"
- }
- ]
- }
- ]
- [*] Started Service: []
- [*] Executed Commands: []
- [*] Mutexes: [
- "CicLoadWinStaWinSta0",
- "Local\\MSCTF.CtfMonitorInstMutexDefault1"
- ]
- [*] Modified Files: []
- [*] Deleted Files: []
- [*] Modified Registry Keys: []
- [*] Deleted Registry Keys: []
- [*] DNS Communications: []
- [*] Domains: []
- [*] Network Communication - ICMP: []
- [*] Network Communication - HTTP: [
- {
- "count": 2,
- "body": "",
- "uri": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTfqhLjKLEJQZPin0KCzkdAQpVYowQUsT7DaQP4v0cB1JgmGggC72NkK8MCEAPxtOFfOoLxFJZ4s9fYR1w%3D",
- "user-agent": "Microsoft-CryptoAPI/6.1",
- "method": "GET",
- "host": "ocsp.digicert.com",
- "version": "1.1",
- "path": "/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTfqhLjKLEJQZPin0KCzkdAQpVYowQUsT7DaQP4v0cB1JgmGggC72NkK8MCEAPxtOFfOoLxFJZ4s9fYR1w%3D",
- "data": "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTfqhLjKLEJQZPin0KCzkdAQpVYowQUsT7DaQP4v0cB1JgmGggC72NkK8MCEAPxtOFfOoLxFJZ4s9fYR1w%3D HTTP/1.1\r\nCache-Control: max-age = 128165\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Sat, 23 Mar 2019 11:02:13 GMT\r\nIf-None-Match: \"5c961235-1d7\"\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.digicert.com\r\n\r\n",
- "port": 80
- },
- {
- "count": 1,
- "body": "",
- "uri": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSPwl%2BrBFlJbvzLXU1bGW08VysJ2wQUj%2Bh%2B8G0yagAFI8dwl2o6kP9r6tQCEA%2BdzSc7B3UzA8k03selSwo%3D",
- "user-agent": "Microsoft-CryptoAPI/6.1",
- "method": "GET",
- "host": "ocsp.digicert.com",
- "version": "1.1",
- "path": "/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSPwl%2BrBFlJbvzLXU1bGW08VysJ2wQUj%2Bh%2B8G0yagAFI8dwl2o6kP9r6tQCEA%2BdzSc7B3UzA8k03selSwo%3D",
- "data": "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSPwl%2BrBFlJbvzLXU1bGW08VysJ2wQUj%2Bh%2B8G0yagAFI8dwl2o6kP9r6tQCEA%2BdzSc7B3UzA8k03selSwo%3D HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.digicert.com\r\n\r\n",
- "port": 80
- },
- {
- "count": 1,
- "body": "",
- "uri": "http://ocsp.digicert.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSPwl%2BrBFlJbvzLXU1bGW08VysJ2wQUj%2Bh%2B8G0yagAFI8dwl2o6kP9r6tQCEAaJg2QslT5G973OQUPxM8E%3D",
- "user-agent": "Microsoft-CryptoAPI/6.1",
- "method": "GET",
- "host": "ocsp.digicert.com",
- "version": "1.1",
- "path": "/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSPwl%2BrBFlJbvzLXU1bGW08VysJ2wQUj%2Bh%2B8G0yagAFI8dwl2o6kP9r6tQCEAaJg2QslT5G973OQUPxM8E%3D",
- "data": "GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSPwl%2BrBFlJbvzLXU1bGW08VysJ2wQUj%2Bh%2B8G0yagAFI8dwl2o6kP9r6tQCEAaJg2QslT5G973OQUPxM8E%3D HTTP/1.1\r\nCache-Control: max-age = 143038\r\nConnection: Keep-Alive\r\nAccept: */*\r\nIf-Modified-Since: Sat, 23 Mar 2019 15:00:07 GMT\r\nIf-None-Match: \"5c9649f7-1d7\"\r\nUser-Agent: Microsoft-CryptoAPI/6.1\r\nHost: ocsp.digicert.com\r\n\r\n",
- "port": 80
- }
- ]
- [*] Network Communication - SMTP: []
- [*] Network Communication - Hosts: []
- [*] Network Communication - IRC: []
- [*] Static Analysis: {
- "pe": {
- "peid_signatures": null,
- "imports": [
- {
- "imports": [
- {
- "name": "WriteConsoleA",
- "address": "0x5c52b0"
- },
- {
- "name": "GetConsoleOutputCP",
- "address": "0x5c52b4"
- },
- {
- "name": "WriteConsoleW",
- "address": "0x5c52b8"
- },
- {
- "name": "GetUserDefaultLCID",
- "address": "0x5c52bc"
- },
- {
- "name": "EnumSystemLocalesA",
- "address": "0x5c52c0"
- },
- {
- "name": "IsValidLocale",
- "address": "0x5c52c4"
- },
- {
- "name": "CompareStringW",
- "address": "0x5c52c8"
- },
- {
- "name": "SetCurrentDirectoryA",
- "address": "0x5c52cc"
- },
- {
- "name": "GetProcessHeap",
- "address": "0x5c52d0"
- },
- {
- "name": "SetEnvironmentVariableA",
- "address": "0x5c52d4"
- },
- {
- "name": "PeekConsoleInputA",
- "address": "0x5c52d8"
- },
- {
- "name": "SetConsoleMode",
- "address": "0x5c52dc"
- },
- {
- "name": "ReadConsoleInputA",
- "address": "0x5c52e0"
- },
- {
- "name": "GetDriveTypeA",
- "address": "0x5c52e4"
- },
- {
- "name": "InitializeCriticalSectionAndSpinCount",
- "address": "0x5c52e8"
- },
- {
- "name": "QueryPerformanceCounter",
- "address": "0x5c52ec"
- },
- {
- "name": "SetConsoleCtrlHandler",
- "address": "0x5c52f0"
- },
- {
- "name": "GetEnvironmentStringsW",
- "address": "0x5c52f4"
- },
- {
- "name": "FreeEnvironmentStringsW",
- "address": "0x5c52f8"
- },
- {
- "name": "GetEnvironmentStrings",
- "address": "0x5c52fc"
- },
- {
- "name": "FreeEnvironmentStringsA",
- "address": "0x5c5300"
- },
- {
- "name": "GetStringTypeW",
- "address": "0x5c5304"
- },
- {
- "name": "GetStringTypeA",
- "address": "0x5c5308"
- },
- {
- "name": "GetTimeZoneInformation",
- "address": "0x5c530c"
- },
- {
- "name": "HeapDestroy",
- "address": "0x5c5310"
- },
- {
- "name": "HeapCreate",
- "address": "0x5c5314"
- },
- {
- "name": "VirtualFree",
- "address": "0x5c5318"
- },
- {
- "name": "FatalAppExitA",
- "address": "0x5c531c"
- },
- {
- "name": "LCMapStringW",
- "address": "0x5c5320"
- },
- {
- "name": "LCMapStringA",
- "address": "0x5c5324"
- },
- {
- "name": "IsValidCodePage",
- "address": "0x5c5328"
- },
- {
- "name": "GetACP",
- "address": "0x5c532c"
- },
- {
- "name": "GetConsoleMode",
- "address": "0x5c5330"
- },
- {
- "name": "GetConsoleCP",
- "address": "0x5c5334"
- },
- {
- "name": "GetStdHandle",
- "address": "0x5c5338"
- },
- {
- "name": "SetHandleCount",
- "address": "0x5c533c"
- },
- {
- "name": "GetFileType",
- "address": "0x5c5340"
- },
- {
- "name": "SetStdHandle",
- "address": "0x5c5344"
- },
- {
- "name": "HeapSize",
- "address": "0x5c5348"
- },
- {
- "name": "HeapReAlloc",
- "address": "0x5c534c"
- },
- {
- "name": "VirtualQuery",
- "address": "0x5c5350"
- },
- {
- "name": "GetSystemInfo",
- "address": "0x5c5354"
- },
- {
- "name": "VirtualAlloc",
- "address": "0x5c5358"
- },
- {
- "name": "RaiseException",
- "address": "0x5c535c"
- },
- {
- "name": "ExitThread",
- "address": "0x5c5360"
- },
- {
- "name": "ExitProcess",
- "address": "0x5c5364"
- },
- {
- "name": "RtlUnwind",
- "address": "0x5c5368"
- },
- {
- "name": "HeapFree",
- "address": "0x5c536c"
- },
- {
- "name": "GetStartupInfoA",
- "address": "0x5c5370"
- },
- {
- "name": "GetCommandLineA",
- "address": "0x5c5374"
- },
- {
- "name": "GetDateFormatA",
- "address": "0x5c5378"
- },
- {
- "name": "GetTimeFormatA",
- "address": "0x5c537c"
- },
- {
- "name": "GetSystemTimeAsFileTime",
- "address": "0x5c5380"
- },
- {
- "name": "IsDebuggerPresent",
- "address": "0x5c5384"
- },
- {
- "name": "SetUnhandledExceptionFilter",
- "address": "0x5c5388"
- },
- {
- "name": "UnhandledExceptionFilter",
- "address": "0x5c538c"
- },
- {
- "name": "TerminateProcess",
- "address": "0x5c5390"
- },
- {
- "name": "HeapAlloc",
- "address": "0x5c5394"
- },
- {
- "name": "LocalLock",
- "address": "0x5c5398"
- },
- {
- "name": "LocalUnlock",
- "address": "0x5c539c"
- },
- {
- "name": "FindResourceExA",
- "address": "0x5c53a0"
- },
- {
- "name": "GetDiskFreeSpaceA",
- "address": "0x5c53a4"
- },
- {
- "name": "VirtualProtect",
- "address": "0x5c53a8"
- },
- {
- "name": "SearchPathA",
- "address": "0x5c53ac"
- },
- {
- "name": "Sleep",
- "address": "0x5c53b0"
- },
- {
- "name": "GetProfileIntA",
- "address": "0x5c53b4"
- },
- {
- "name": "GetTempPathA",
- "address": "0x5c53b8"
- },
- {
- "name": "GetTempFileNameA",
- "address": "0x5c53bc"
- },
- {
- "name": "lstrcpyA",
- "address": "0x5c53c0"
- },
- {
- "name": "GetSystemDirectoryW",
- "address": "0x5c53c4"
- },
- {
- "name": "LoadLibraryW",
- "address": "0x5c53c8"
- },
- {
- "name": "SetErrorMode",
- "address": "0x5c53cc"
- },
- {
- "name": "GetOEMCP",
- "address": "0x5c53d0"
- },
- {
- "name": "GetCPInfo",
- "address": "0x5c53d4"
- },
- {
- "name": "GetAtomNameA",
- "address": "0x5c53d8"
- },
- {
- "name": "GetModuleHandleW",
- "address": "0x5c53dc"
- },
- {
- "name": "InterlockedIncrement",
- "address": "0x5c53e0"
- },
- {
- "name": "TlsFree",
- "address": "0x5c53e4"
- },
- {
- "name": "LocalReAlloc",
- "address": "0x5c53e8"
- },
- {
- "name": "TlsSetValue",
- "address": "0x5c53ec"
- },
- {
- "name": "TlsAlloc",
- "address": "0x5c53f0"
- },
- {
- "name": "GlobalHandle",
- "address": "0x5c53f4"
- },
- {
- "name": "GlobalReAlloc",
- "address": "0x5c53f8"
- },
- {
- "name": "TlsGetValue",
- "address": "0x5c53fc"
- },
- {
- "name": "GlobalFlags",
- "address": "0x5c5400"
- },
- {
- "name": "GetCurrentDirectoryA",
- "address": "0x5c5404"
- },
- {
- "name": "LocalAlloc",
- "address": "0x5c5408"
- },
- {
- "name": "LeaveCriticalSection",
- "address": "0x5c540c"
- },
- {
- "name": "EnterCriticalSection",
- "address": "0x5c5410"
- },
- {
- "name": "DeleteCriticalSection",
- "address": "0x5c5414"
- },
- {
- "name": "InitializeCriticalSection",
- "address": "0x5c5418"
- },
- {
- "name": "GetFileTime",
- "address": "0x5c541c"
- },
- {
- "name": "GetFileSizeEx",
- "address": "0x5c5420"
- },
- {
- "name": "GetFileAttributesA",
- "address": "0x5c5424"
- },
- {
- "name": "SetFileAttributesA",
- "address": "0x5c5428"
- },
- {
- "name": "SetFileTime",
- "address": "0x5c542c"
- },
- {
- "name": "SystemTimeToFileTime",
- "address": "0x5c5430"
- },
- {
- "name": "LocalFileTimeToFileTime",
- "address": "0x5c5434"
- },
- {
- "name": "GetFileAttributesExA",
- "address": "0x5c5438"
- },
- {
- "name": "FileTimeToLocalFileTime",
- "address": "0x5c543c"
- },
- {
- "name": "FileTimeToSystemTime",
- "address": "0x5c5440"
- },
- {
- "name": "GetShortPathNameA",
- "address": "0x5c5444"
- },
- {
- "name": "GetFullPathNameA",
- "address": "0x5c5448"
- },
- {
- "name": "GetVolumeInformationA",
- "address": "0x5c544c"
- },
- {
- "name": "GetCurrentProcess",
- "address": "0x5c5450"
- },
- {
- "name": "DuplicateHandle",
- "address": "0x5c5454"
- },
- {
- "name": "UnlockFile",
- "address": "0x5c5458"
- },
- {
- "name": "LockFile",
- "address": "0x5c545c"
- },
- {
- "name": "FlushFileBuffers",
- "address": "0x5c5460"
- },
- {
- "name": "ReadFile",
- "address": "0x5c5464"
- },
- {
- "name": "lstrcmpiA",
- "address": "0x5c5468"
- },
- {
- "name": "GetThreadLocale",
- "address": "0x5c546c"
- },
- {
- "name": "GetStringTypeExA",
- "address": "0x5c5470"
- },
- {
- "name": "GetPrivateProfileStringA",
- "address": "0x5c5474"
- },
- {
- "name": "WritePrivateProfileStringA",
- "address": "0x5c5478"
- },
- {
- "name": "GetPrivateProfileIntA",
- "address": "0x5c547c"
- },
- {
- "name": "GlobalGetAtomNameA",
- "address": "0x5c5480"
- },
- {
- "name": "GlobalFindAtomA",
- "address": "0x5c5484"
- },
- {
- "name": "lstrcmpW",
- "address": "0x5c5488"
- },
- {
- "name": "GetVersionExA",
- "address": "0x5c548c"
- },
- {
- "name": "InterlockedDecrement",
- "address": "0x5c5490"
- },
- {
- "name": "GetModuleFileNameW",
- "address": "0x5c5494"
- },
- {
- "name": "CopyFileA",
- "address": "0x5c5498"
- },
- {
- "name": "GlobalSize",
- "address": "0x5c549c"
- },
- {
- "name": "FormatMessageA",
- "address": "0x5c54a0"
- },
- {
- "name": "LocalFree",
- "address": "0x5c54a4"
- },
- {
- "name": "lstrlenW",
- "address": "0x5c54a8"
- },
- {
- "name": "MultiByteToWideChar",
- "address": "0x5c54ac"
- },
- {
- "name": "MulDiv",
- "address": "0x5c54b0"
- },
- {
- "name": "GetCurrentProcessId",
- "address": "0x5c54b4"
- },
- {
- "name": "GlobalAddAtomA",
- "address": "0x5c54b8"
- },
- {
- "name": "CreateEventA",
- "address": "0x5c54bc"
- },
- {
- "name": "SuspendThread",
- "address": "0x5c54c0"
- },
- {
- "name": "SetEvent",
- "address": "0x5c54c4"
- },
- {
- "name": "WaitForSingleObject",
- "address": "0x5c54c8"
- },
- {
- "name": "ResumeThread",
- "address": "0x5c54cc"
- },
- {
- "name": "SetThreadPriority",
- "address": "0x5c54d0"
- },
- {
- "name": "lstrlenA",
- "address": "0x5c54d4"
- },
- {
- "name": "SetLastError",
- "address": "0x5c54d8"
- },
- {
- "name": "LoadLibraryA",
- "address": "0x5c54dc"
- },
- {
- "name": "GlobalUnlock",
- "address": "0x5c54e0"
- },
- {
- "name": "FreeResource",
- "address": "0x5c54e4"
- },
- {
- "name": "GlobalFree",
- "address": "0x5c54e8"
- },
- {
- "name": "GlobalDeleteAtom",
- "address": "0x5c54ec"
- },
- {
- "name": "GetCurrentThread",
- "address": "0x5c54f0"
- },
- {
- "name": "ConvertDefaultLocale",
- "address": "0x5c54f4"
- },
- {
- "name": "EnumResourceLanguagesA",
- "address": "0x5c54f8"
- },
- {
- "name": "GetLocaleInfoA",
- "address": "0x5c54fc"
- },
- {
- "name": "FindActCtxSectionStringA",
- "address": "0x5c5500"
- },
- {
- "name": "LoadLibraryExA",
- "address": "0x5c5504"
- },
- {
- "name": "CompareStringA",
- "address": "0x5c5508"
- },
- {
- "name": "InterlockedExchange",
- "address": "0x5c550c"
- },
- {
- "name": "GlobalLock",
- "address": "0x5c5510"
- },
- {
- "name": "lstrcmpA",
- "address": "0x5c5514"
- },
- {
- "name": "GlobalAlloc",
- "address": "0x5c5518"
- },
- {
- "name": "FreeLibrary",
- "address": "0x5c551c"
- },
- {
- "name": "GetModuleHandleA",
- "address": "0x5c5520"
- },
- {
- "name": "GetProcAddress",
- "address": "0x5c5524"
- },
- {
- "name": "GetLastError",
- "address": "0x5c5528"
- },
- {
- "name": "CreateFileMappingA",
- "address": "0x5c552c"
- },
- {
- "name": "UnmapViewOfFile",
- "address": "0x5c5530"
- },
- {
- "name": "MapViewOfFile",
- "address": "0x5c5534"
- },
- {
- "name": "CreateThread",
- "address": "0x5c5538"
- },
- {
- "name": "MoveFileA",
- "address": "0x5c553c"
- },
- {
- "name": "TerminateThread",
- "address": "0x5c5540"
- },
- {
- "name": "WriteFile",
- "address": "0x5c5544"
- },
- {
- "name": "SetEndOfFile",
- "address": "0x5c5548"
- },
- {
- "name": "SetFilePointer",
- "address": "0x5c554c"
- },
- {
- "name": "GetCurrentThreadId",
- "address": "0x5c5550"
- },
- {
- "name": "OutputDebugStringA",
- "address": "0x5c5554"
- },
- {
- "name": "DeleteFileA",
- "address": "0x5c5558"
- },
- {
- "name": "GetFileSize",
- "address": "0x5c555c"
- },
- {
- "name": "CreateFileA",
- "address": "0x5c5560"
- },
- {
- "name": "FindNextFileA",
- "address": "0x5c5564"
- },
- {
- "name": "GetModuleFileNameA",
- "address": "0x5c5568"
- },
- {
- "name": "FindClose",
- "address": "0x5c556c"
- },
- {
- "name": "FindFirstFileA",
- "address": "0x5c5570"
- },
- {
- "name": "GetTickCount",
- "address": "0x5c5574"
- },
- {
- "name": "CloseHandle",
- "address": "0x5c5578"
- },
- {
- "name": "FindResourceA",
- "address": "0x5c557c"
- },
- {
- "name": "LoadResource",
- "address": "0x5c5580"
- },
- {
- "name": "LockResource",
- "address": "0x5c5584"
- },
- {
- "name": "SizeofResource",
- "address": "0x5c5588"
- },
- {
- "name": "GetLocaleInfoW",
- "address": "0x5c558c"
- },
- {
- "name": "WideCharToMultiByte",
- "address": "0x5c5590"
- },
- {
- "name": "GetNumberOfConsoleInputEvents",
- "address": "0x5c5594"
- }
- ],
- "dll": "KERNEL32.dll"
- },
- {
- "imports": [
- {
- "name": "SetRectEmpty",
- "address": "0x5c56a4"
- },
- {
- "name": "BringWindowToTop",
- "address": "0x5c56a8"
- },
- {
- "name": "TranslateAcceleratorA",
- "address": "0x5c56ac"
- },
- {
- "name": "DestroyMenu",
- "address": "0x5c56b0"
- },
- {
- "name": "GetMenuItemInfoA",
- "address": "0x5c56b4"
- },
- {
- "name": "UnregisterClassA",
- "address": "0x5c56b8"
- },
- {
- "name": "DestroyIcon",
- "address": "0x5c56bc"
- },
- {
- "name": "GetSysColorBrush",
- "address": "0x5c56c0"
- },
- {
- "name": "InflateRect",
- "address": "0x5c56c4"
- },
- {
- "name": "GetDialogBaseUnits",
- "address": "0x5c56c8"
- },
- {
- "name": "MessageBeep",
- "address": "0x5c56cc"
- },
- {
- "name": "GetNextDlgGroupItem",
- "address": "0x5c56d0"
- },
- {
- "name": "InvalidateRgn",
- "address": "0x5c56d4"
- },
- {
- "name": "InvalidateRect",
- "address": "0x5c56d8"
- },
- {
- "name": "SetRect",
- "address": "0x5c56dc"
- },
- {
- "name": "IsRectEmpty",
- "address": "0x5c56e0"
- },
- {
- "name": "CopyAcceleratorTableA",
- "address": "0x5c56e4"
- },
- {
- "name": "CharNextA",
- "address": "0x5c56e8"
- },
- {
- "name": "DeleteMenu",
- "address": "0x5c56ec"
- },
- {
- "name": "WaitMessage",
- "address": "0x5c56f0"
- },
- {
- "name": "ReleaseCapture",
- "address": "0x5c56f4"
- },
- {
- "name": "LoadCursorA",
- "address": "0x5c56f8"
- },
- {
- "name": "WindowFromPoint",
- "address": "0x5c56fc"
- },
- {
- "name": "SetCapture",
- "address": "0x5c5700"
- },
- {
- "name": "CharUpperA",
- "address": "0x5c5704"
- },
- {
- "name": "EndPaint",
- "address": "0x5c5708"
- },
- {
- "name": "BeginPaint",
- "address": "0x5c570c"
- },
- {
- "name": "GetWindowDC",
- "address": "0x5c5710"
- },
- {
- "name": "ClientToScreen",
- "address": "0x5c5714"
- },
- {
- "name": "GrayStringA",
- "address": "0x5c5718"
- },
- {
- "name": "DrawTextExA",
- "address": "0x5c571c"
- },
- {
- "name": "DrawTextA",
- "address": "0x5c5720"
- },
- {
- "name": "TabbedTextOutA",
- "address": "0x5c5724"
- },
- {
- "name": "FillRect",
- "address": "0x5c5728"
- },
- {
- "name": "ScrollWindowEx",
- "address": "0x5c572c"
- },
- {
- "name": "ShowWindow",
- "address": "0x5c5730"
- },
- {
- "name": "MoveWindow",
- "address": "0x5c5734"
- },
- {
- "name": "SetWindowTextA",
- "address": "0x5c5738"
- },
- {
- "name": "IsDialogMessageA",
- "address": "0x5c573c"
- },
- {
- "name": "IsDlgButtonChecked",
- "address": "0x5c5740"
- },
- {
- "name": "SetDlgItemTextA",
- "address": "0x5c5744"
- },
- {
- "name": "SetDlgItemInt",
- "address": "0x5c5748"
- },
- {
- "name": "GetDlgItemTextA",
- "address": "0x5c574c"
- },
- {
- "name": "GetDlgItemInt",
- "address": "0x5c5750"
- },
- {
- "name": "CheckRadioButton",
- "address": "0x5c5754"
- },
- {
- "name": "CheckDlgButton",
- "address": "0x5c5758"
- },
- {
- "name": "RegisterWindowMessageA",
- "address": "0x5c575c"
- },
- {
- "name": "SendDlgItemMessageA",
- "address": "0x5c5760"
- },
- {
- "name": "WinHelpA",
- "address": "0x5c5764"
- },
- {
- "name": "IsChild",
- "address": "0x5c5768"
- },
- {
- "name": "GetCapture",
- "address": "0x5c576c"
- },
- {
- "name": "GetClassLongA",
- "address": "0x5c5770"
- },
- {
- "name": "GetClassNameA",
- "address": "0x5c5774"
- },
- {
- "name": "SetPropA",
- "address": "0x5c5778"
- },
- {
- "name": "GetPropA",
- "address": "0x5c577c"
- },
- {
- "name": "RemovePropA",
- "address": "0x5c5780"
- },
- {
- "name": "SetFocus",
- "address": "0x5c5784"
- },
- {
- "name": "GetWindowTextLengthA",
- "address": "0x5c5788"
- },
- {
- "name": "GetWindowTextA",
- "address": "0x5c578c"
- },
- {
- "name": "GetForegroundWindow",
- "address": "0x5c5790"
- },
- {
- "name": "BeginDeferWindowPos",
- "address": "0x5c5794"
- },
- {
- "name": "EndDeferWindowPos",
- "address": "0x5c5798"
- },
- {
- "name": "GetTopWindow",
- "address": "0x5c579c"
- },
- {
- "name": "GetMessageTime",
- "address": "0x5c57a0"
- },
- {
- "name": "GetMessagePos",
- "address": "0x5c57a4"
- },
- {
- "name": "MapWindowPoints",
- "address": "0x5c57a8"
- },
- {
- "name": "ScrollWindow",
- "address": "0x5c57ac"
- },
- {
- "name": "TrackPopupMenuEx",
- "address": "0x5c57b0"
- },
- {
- "name": "TrackPopupMenu",
- "address": "0x5c57b4"
- },
- {
- "name": "SetMenu",
- "address": "0x5c57b8"
- },
- {
- "name": "SetScrollRange",
- "address": "0x5c57bc"
- },
- {
- "name": "GetScrollRange",
- "address": "0x5c57c0"
- },
- {
- "name": "SetScrollPos",
- "address": "0x5c57c4"
- },
- {
- "name": "GetScrollPos",
- "address": "0x5c57c8"
- },
- {
- "name": "SetForegroundWindow",
- "address": "0x5c57cc"
- },
- {
- "name": "ShowScrollBar",
- "address": "0x5c57d0"
- },
- {
- "name": "UpdateWindow",
- "address": "0x5c57d4"
- },
- {
- "name": "CreateWindowExA",
- "address": "0x5c57d8"
- },
- {
- "name": "GetClassInfoExA",
- "address": "0x5c57dc"
- },
- {
- "name": "GetClassInfoA",
- "address": "0x5c57e0"
- },
- {
- "name": "GetSystemMenu",
- "address": "0x5c57e4"
- },
- {
- "name": "GetSysColor",
- "address": "0x5c57e8"
- },
- {
- "name": "AdjustWindowRectEx",
- "address": "0x5c57ec"
- },
- {
- "name": "ScreenToClient",
- "address": "0x5c57f0"
- },
- {
- "name": "EqualRect",
- "address": "0x5c57f4"
- },
- {
- "name": "DeferWindowPos",
- "address": "0x5c57f8"
- },
- {
- "name": "CreatePopupMenu",
- "address": "0x5c57fc"
- },
- {
- "name": "SetScrollInfo",
- "address": "0x5c5800"
- },
- {
- "name": "SetWindowPlacement",
- "address": "0x5c5804"
- },
- {
- "name": "PtInRect",
- "address": "0x5c5808"
- },
- {
- "name": "GetDlgCtrlID",
- "address": "0x5c580c"
- },
- {
- "name": "DefWindowProcA",
- "address": "0x5c5810"
- },
- {
- "name": "CallWindowProcA",
- "address": "0x5c5814"
- },
- {
- "name": "GetMenu",
- "address": "0x5c5818"
- },
- {
- "name": "OffsetRect",
- "address": "0x5c581c"
- },
- {
- "name": "IntersectRect",
- "address": "0x5c5820"
- },
- {
- "name": "SystemParametersInfoA",
- "address": "0x5c5824"
- },
- {
- "name": "GetWindowPlacement",
- "address": "0x5c5828"
- },
- {
- "name": "GetWindowRect",
- "address": "0x5c582c"
- },
- {
- "name": "GetMenuStringA",
- "address": "0x5c5830"
- },
- {
- "name": "AppendMenuA",
- "address": "0x5c5834"
- },
- {
- "name": "GetMenuItemID",
- "address": "0x5c5838"
- },
- {
- "name": "InsertMenuA",
- "address": "0x5c583c"
- },
- {
- "name": "GetMenuItemCount",
- "address": "0x5c5840"
- },
- {
- "name": "GetSubMenu",
- "address": "0x5c5844"
- },
- {
- "name": "RemoveMenu",
- "address": "0x5c5848"
- },
- {
- "name": "GetWindowThreadProcessId",
- "address": "0x5c584c"
- },
- {
- "name": "GetLastActivePopup",
- "address": "0x5c5850"
- },
- {
- "name": "MessageBoxA",
- "address": "0x5c5854"
- },
- {
- "name": "ShowOwnedPopups",
- "address": "0x5c5858"
- },
- {
- "name": "SetCursor",
- "address": "0x5c585c"
- },
- {
- "name": "GetMessageA",
- "address": "0x5c5860"
- },
- {
- "name": "TranslateMessage",
- "address": "0x5c5864"
- },
- {
- "name": "DispatchMessageA",
- "address": "0x5c5868"
- },
- {
- "name": "IsWindowVisible",
- "address": "0x5c586c"
- },
- {
- "name": "GetKeyState",
- "address": "0x5c5870"
- },
- {
- "name": "GetCursorPos",
- "address": "0x5c5874"
- },
- {
- "name": "ValidateRect",
- "address": "0x5c5878"
- },
- {
- "name": "SetMenuItemBitmaps",
- "address": "0x5c587c"
- },
- {
- "name": "GetMenuCheckMarkDimensions",
- "address": "0x5c5880"
- },
- {
- "name": "LoadBitmapA",
- "address": "0x5c5884"
- },
- {
- "name": "GetFocus",
- "address": "0x5c5888"
- },
- {
- "name": "ModifyMenuA",
- "address": "0x5c588c"
- },
- {
- "name": "GetMenuState",
- "address": "0x5c5890"
- },
- {
- "name": "EnableMenuItem",
- "address": "0x5c5894"
- },
- {
- "name": "CheckMenuItem",
- "address": "0x5c5898"
- },
- {
- "name": "SetParent",
- "address": "0x5c589c"
- },
- {
- "name": "UnionRect",
- "address": "0x5c58a0"
- },
- {
- "name": "PostThreadMessageA",
- "address": "0x5c58a4"
- },
- {
- "name": "MapVirtualKeyA",
- "address": "0x5c58a8"
- },
- {
- "name": "GetKeyNameTextA",
- "address": "0x5c58ac"
- },
- {
- "name": "PeekMessageA",
- "address": "0x5c58b0"
- },
- {
- "name": "EnableWindow",
- "address": "0x5c58b4"
- },
- {
- "name": "LoadIconA",
- "address": "0x5c58b8"
- },
- {
- "name": "SendMessageA",
- "address": "0x5c58bc"
- },
- {
- "name": "IsIconic",
- "address": "0x5c58c0"
- },
- {
- "name": "ReleaseDC",
- "address": "0x5c58c4"
- },
- {
- "name": "GetDC",
- "address": "0x5c58c8"
- },
- {
- "name": "CopyRect",
- "address": "0x5c58cc"
- },
- {
- "name": "GetDesktopWindow",
- "address": "0x5c58d0"
- },
- {
- "name": "GetActiveWindow",
- "address": "0x5c58d4"
- },
- {
- "name": "SetActiveWindow",
- "address": "0x5c58d8"
- },
- {
- "name": "CreateDialogIndirectParamA",
- "address": "0x5c58dc"
- },
- {
- "name": "DestroyWindow",
- "address": "0x5c58e0"
- },
- {
- "name": "IsWindow",
- "address": "0x5c58e4"
- },
- {
- "name": "GetDlgItem",
- "address": "0x5c58e8"
- },
- {
- "name": "IsWindowEnabled",
- "address": "0x5c58ec"
- },
- {
- "name": "GetNextDlgTabItem",
- "address": "0x5c58f0"
- },
- {
- "name": "EndDialog",
- "address": "0x5c58f4"
- },
- {
- "name": "GetWindow",
- "address": "0x5c58f8"
- },
- {
- "name": "SetWindowContextHelpId",
- "address": "0x5c58fc"
- },
- {
- "name": "GetParent",
- "address": "0x5c5900"
- },
- {
- "name": "SetTimer",
- "address": "0x5c5904"
- },
- {
- "name": "KillTimer",
- "address": "0x5c5908"
- },
- {
- "name": "LockWindowUpdate",
- "address": "0x5c590c"
- },
- {
- "name": "GetTabbedTextExtentA",
- "address": "0x5c5910"
- },
- {
- "name": "EnumChildWindows",
- "address": "0x5c5914"
- },
- {
- "name": "GetWindowRgn",
- "address": "0x5c5918"
- },
- {
- "name": "WindowFromDC",
- "address": "0x5c591c"
- },
- {
- "name": "DestroyCursor",
- "address": "0x5c5920"
- },
- {
- "name": "SubtractRect",
- "address": "0x5c5924"
- },
- {
- "name": "MapVirtualKeyExA",
- "address": "0x5c5928"
- },
- {
- "name": "IsCharLowerA",
- "address": "0x5c592c"
- },
- {
- "name": "MapDialogRect",
- "address": "0x5c5930"
- },
- {
- "name": "SetWindowPos",
- "address": "0x5c5934"
- },
- {
- "name": "PostQuitMessage",
- "address": "0x5c5938"
- },
- {
- "name": "PostMessageA",
- "address": "0x5c593c"
- },
- {
- "name": "SetWindowLongA",
- "address": "0x5c5940"
- },
- {
- "name": "GetWindowLongA",
- "address": "0x5c5944"
- },
- {
- "name": "UnhookWindowsHookEx",
- "address": "0x5c5948"
- },
- {
- "name": "SetWindowsHookExA",
- "address": "0x5c594c"
- },
- {
- "name": "CallNextHookEx",
- "address": "0x5c5950"
- },
- {
- "name": "DrawIcon",
- "address": "0x5c5954"
- },
- {
- "name": "InsertMenuItemA",
- "address": "0x5c5958"
- },
- {
- "name": "LoadAcceleratorsA",
- "address": "0x5c595c"
- },
- {
- "name": "GetMenuBarInfo",
- "address": "0x5c5960"
- },
- {
- "name": "LoadMenuA",
- "address": "0x5c5964"
- },
- {
- "name": "ReuseDDElParam",
- "address": "0x5c5968"
- },
- {
- "name": "UnpackDDElParam",
- "address": "0x5c596c"
- },
- {
- "name": "GetScrollInfo",
- "address": "0x5c5970"
- },
- {
- "name": "RegisterClipboardFormatA",
- "address": "0x5c5974"
- },
- {
- "name": "GetSystemMetrics",
- "address": "0x5c5978"
- },
- {
- "name": "GetClientRect",
- "address": "0x5c597c"
- },
- {
- "name": "GetIconInfo",
- "address": "0x5c5980"
- },
- {
- "name": "GetDoubleClickTime",
- "address": "0x5c5984"
- },
- {
- "name": "GetDCEx",
- "address": "0x5c5988"
- },
- {
- "name": "CopyIcon",
- "address": "0x5c598c"
- },
- {
- "name": "EmptyClipboard",
- "address": "0x5c5990"
- },
- {
- "name": "CloseClipboard",
- "address": "0x5c5994"
- },
- {
- "name": "SetClipboardData",
- "address": "0x5c5998"
- },
- {
- "name": "LoadImageA",
- "address": "0x5c599c"
- },
- {
- "name": "CopyImage",
- "address": "0x5c59a0"
- },
- {
- "name": "OpenClipboard",
- "address": "0x5c59a4"
- },
- {
- "name": "GetMenuDefaultItem",
- "address": "0x5c59a8"
- },
- {
- "name": "GetUpdateRect",
- "address": "0x5c59ac"
- },
- {
- "name": "FrameRect",
- "address": "0x5c59b0"
- },
- {
- "name": "SendNotifyMessageA",
- "address": "0x5c59b4"
- },
- {
- "name": "IsClipboardFormatAvailable",
- "address": "0x5c59b8"
- },
- {
- "name": "SetMenuDefaultItem",
- "address": "0x5c59bc"
- },
- {
- "name": "CreateMenu",
- "address": "0x5c59c0"
- },
- {
- "name": "InSendMessage",
- "address": "0x5c59c4"
- },
- {
- "name": "IsMenu",
- "address": "0x5c59c8"
- },
- {
- "name": "UpdateLayeredWindow",
- "address": "0x5c59cc"
- },
- {
- "name": "EnableScrollBar",
- "address": "0x5c59d0"
- },
- {
- "name": "TranslateMDISysAccel",
- "address": "0x5c59d4"
- },
- {
- "name": "DrawMenuBar",
- "address": "0x5c59d8"
- },
- {
- "name": "DefMDIChildProcA",
- "address": "0x5c59dc"
- },
- {
- "name": "DefFrameProcA",
- "address": "0x5c59e0"
- },
- {
- "name": "SetCursorPos",
- "address": "0x5c59e4"
- },
- {
- "name": "CreateAcceleratorTableA",
- "address": "0x5c59e8"
- },
- {
- "name": "GetKeyboardState",
- "address": "0x5c59ec"
- },
- {
- "name": "GetKeyboardLayout",
- "address": "0x5c59f0"
- },
- {
- "name": "ToAsciiEx",
- "address": "0x5c59f4"
- },
- {
- "name": "DrawFocusRect",
- "address": "0x5c59f8"
- },
- {
- "name": "DrawFrameControl",
- "address": "0x5c59fc"
- },
- {
- "name": "DrawEdge",
- "address": "0x5c5a00"
- },
- {
- "name": "DrawIconEx",
- "address": "0x5c5a04"
- },
- {
- "name": "DrawStateA",
- "address": "0x5c5a08"
- },
- {
- "name": "SetClassLongA",
- "address": "0x5c5a0c"
- },
- {
- "name": "GetAsyncKeyState",
- "address": "0x5c5a10"
- },
- {
- "name": "NotifyWinEvent",
- "address": "0x5c5a14"
- },
- {
- "name": "DestroyAcceleratorTable",
- "address": "0x5c5a18"
- },
- {
- "name": "RedrawWindow",
- "address": "0x5c5a1c"
- },
- {
- "name": "SetWindowRgn",
- "address": "0x5c5a20"
- },
- {
- "name": "IsZoomed",
- "address": "0x5c5a24"
- },
- {
- "name": "RegisterClassA",
- "address": "0x5c5a28"
- },
- {
- "name": "CharUpperBuffA",
- "address": "0x5c5a2c"
- }
- ],
- "dll": "USER32.dll"
- },
- {
- "imports": [
- {
- "name": "SetMapperFlags",
- "address": "0x5c5070"
- },
- {
- "name": "SetArcDirection",
- "address": "0x5c5074"
- },
- {
- "name": "SetColorAdjustment",
- "address": "0x5c5078"
- },
- {
- "name": "DeleteObject",
- "address": "0x5c507c"
- },
- {
- "name": "SelectClipRgn",
- "address": "0x5c5080"
- },
- {
- "name": "GetClipRgn",
- "address": "0x5c5084"
- },
- {
- "name": "CreateRectRgn",
- "address": "0x5c5088"
- },
- {
- "name": "SelectClipPath",
- "address": "0x5c508c"
- },
- {
- "name": "GetViewportExtEx",
- "address": "0x5c5090"
- },
- {
- "name": "GetWindowExtEx",
- "address": "0x5c5094"
- },
- {
- "name": "BitBlt",
- "address": "0x5c5098"
- },
- {
- "name": "GetPixel",
- "address": "0x5c509c"
- },
- {
- "name": "StartDocA",
- "address": "0x5c50a0"
- },
- {
- "name": "PtVisible",
- "address": "0x5c50a4"
- },
- {
- "name": "RectVisible",
- "address": "0x5c50a8"
- },
- {
- "name": "TextOutA",
- "address": "0x5c50ac"
- },
- {
- "name": "ExtTextOutA",
- "address": "0x5c50b0"
- },
- {
- "name": "Escape",
- "address": "0x5c50b4"
- },
- {
- "name": "SelectObject",
- "address": "0x5c50b8"
- },
- {
- "name": "SetViewportOrgEx",
- "address": "0x5c50bc"
- },
- {
- "name": "OffsetViewportOrgEx",
- "address": "0x5c50c0"
- },
- {
- "name": "SetViewportExtEx",
- "address": "0x5c50c4"
- },
- {
- "name": "ScaleViewportExtEx",
- "address": "0x5c50c8"
- },
- {
- "name": "SetWindowOrgEx",
- "address": "0x5c50cc"
- },
- {
- "name": "OffsetWindowOrgEx",
- "address": "0x5c50d0"
- },
- {
- "name": "SetWindowExtEx",
- "address": "0x5c50d4"
- },
- {
- "name": "ScaleWindowExtEx",
- "address": "0x5c50d8"
- },
- {
- "name": "GetCurrentPositionEx",
- "address": "0x5c50dc"
- },
- {
- "name": "ArcTo",
- "address": "0x5c50e0"
- },
- {
- "name": "PolyDraw",
- "address": "0x5c50e4"
- },
- {
- "name": "PolylineTo",
- "address": "0x5c50e8"
- },
- {
- "name": "PolyBezierTo",
- "address": "0x5c50ec"
- },
- {
- "name": "ExtSelectClipRgn",
- "address": "0x5c50f0"
- },
- {
- "name": "DeleteDC",
- "address": "0x5c50f4"
- },
- {
- "name": "CreateDIBPatternBrushPt",
- "address": "0x5c50f8"
- },
- {
- "name": "CreatePatternBrush",
- "address": "0x5c50fc"
- },
- {
- "name": "CreateCompatibleDC",
- "address": "0x5c5100"
- },
- {
- "name": "GetStockObject",
- "address": "0x5c5104"
- },
- {
- "name": "SelectPalette",
- "address": "0x5c5108"
- },
- {
- "name": "PlayMetaFileRecord",
- "address": "0x5c510c"
- },
- {
- "name": "GetObjectType",
- "address": "0x5c5110"
- },
- {
- "name": "EnumMetaFile",
- "address": "0x5c5114"
- },
- {
- "name": "PlayMetaFile",
- "address": "0x5c5118"
- },
- {
- "name": "CreatePen",
- "address": "0x5c511c"
- },
- {
- "name": "ExtCreatePen",
- "address": "0x5c5120"
- },
- {
- "name": "CreateSolidBrush",
- "address": "0x5c5124"
- },
- {
- "name": "CreateHatchBrush",
- "address": "0x5c5128"
- },
- {
- "name": "GetBkColor",
- "address": "0x5c512c"
- },
- {
- "name": "GetTextColor",
- "address": "0x5c5130"
- },
- {
- "name": "GetRgnBox",
- "address": "0x5c5134"
- },
- {
- "name": "GetTextExtentPoint32A",
- "address": "0x5c5138"
- },
- {
- "name": "GetTextMetricsA",
- "address": "0x5c513c"
- },
- {
- "name": "CreateFontIndirectA",
- "address": "0x5c5140"
- },
- {
- "name": "SetRectRgn",
- "address": "0x5c5144"
- },
- {
- "name": "CombineRgn",
- "address": "0x5c5148"
- },
- {
- "name": "SetTextCharacterExtra",
- "address": "0x5c514c"
- },
- {
- "name": "DPtoLP",
- "address": "0x5c5150"
- },
- {
- "name": "CreateCompatibleBitmap",
- "address": "0x5c5154"
- },
- {
- "name": "GetCharWidthA",
- "address": "0x5c5158"
- },
- {
- "name": "CreateFontA",
- "address": "0x5c515c"
- },
- {
- "name": "StretchDIBits",
- "address": "0x5c5160"
- },
- {
- "name": "CreateDIBitmap",
- "address": "0x5c5164"
- },
- {
- "name": "EnumFontFamiliesA",
- "address": "0x5c5168"
- },
- {
- "name": "GetTextCharsetInfo",
- "address": "0x5c516c"
- },
- {
- "name": "CreateRoundRectRgn",
- "address": "0x5c5170"
- },
- {
- "name": "CreatePolygonRgn",
- "address": "0x5c5174"
- },
- {
- "name": "CreateDIBSection",
- "address": "0x5c5178"
- },
- {
- "name": "CreateEllipticRgn",
- "address": "0x5c517c"
- },
- {
- "name": "Polyline",
- "address": "0x5c5180"
- },
- {
- "name": "Ellipse",
- "address": "0x5c5184"
- },
- {
- "name": "Polygon",
- "address": "0x5c5188"
- },
- {
- "name": "OffsetRgn",
- "address": "0x5c518c"
- },
- {
- "name": "SetDIBColorTable",
- "address": "0x5c5190"
- },
- {
- "name": "GetDIBits",
- "address": "0x5c5194"
- },
- {
- "name": "RealizePalette",
- "address": "0x5c5198"
- },
- {
- "name": "StretchBlt",
- "address": "0x5c519c"
- },
- {
- "name": "SetPixel",
- "address": "0x5c51a0"
- },
- {
- "name": "RoundRect",
- "address": "0x5c51a4"
- },
- {
- "name": "Rectangle",
- "address": "0x5c51a8"
- },
- {
- "name": "CreatePalette",
- "address": "0x5c51ac"
- },
- {
- "name": "GetPaletteEntries",
- "address": "0x5c51b0"
- },
- {
- "name": "GetWindowOrgEx",
- "address": "0x5c51b4"
- },
- {
- "name": "GetViewportOrgEx",
- "address": "0x5c51b8"
- },
- {
- "name": "LPtoDP",
- "address": "0x5c51bc"
- },
- {
- "name": "PtInRegion",
- "address": "0x5c51c0"
- },
- {
- "name": "FillRgn",
- "address": "0x5c51c4"
- },
- {
- "name": "FrameRgn",
- "address": "0x5c51c8"
- },
- {
- "name": "GetBoundsRect",
- "address": "0x5c51cc"
- },
- {
- "name": "ExtFloodFill",
- "address": "0x5c51d0"
- },
- {
- "name": "SetPaletteEntries",
- "address": "0x5c51d4"
- },
- {
- "name": "GetNearestPaletteIndex",
- "address": "0x5c51d8"
- },
- {
- "name": "GetSystemPaletteEntries",
- "address": "0x5c51dc"
- },
- {
- "name": "EnumFontFamiliesExA",
- "address": "0x5c51e0"
- },
- {
- "name": "StartPage",
- "address": "0x5c51e4"
- },
- {
- "name": "EndPage",
- "address": "0x5c51e8"
- },
- {
- "name": "SetAbortProc",
- "address": "0x5c51ec"
- },
- {
- "name": "AbortDoc",
- "address": "0x5c51f0"
- },
- {
- "name": "EndDoc",
- "address": "0x5c51f4"
- },
- {
- "name": "GetNearestColor",
- "address": "0x5c51f8"
- },
- {
- "name": "GetBkMode",
- "address": "0x5c51fc"
- },
- {
- "name": "GetPolyFillMode",
- "address": "0x5c5200"
- },
- {
- "name": "GetROP2",
- "address": "0x5c5204"
- },
- {
- "name": "GetStretchBltMode",
- "address": "0x5c5208"
- },
- {
- "name": "GetTextAlign",
- "address": "0x5c520c"
- },
- {
- "name": "GetTextFaceA",
- "address": "0x5c5210"
- },
- {
- "name": "GetTextExtentPointA",
- "address": "0x5c5214"
- },
- {
- "name": "CreateMetaFileA",
- "address": "0x5c5218"
- },
- {
- "name": "CloseMetaFile",
- "address": "0x5c521c"
- },
- {
- "name": "DeleteMetaFile",
- "address": "0x5c5220"
- },
- {
- "name": "SetPixelV",
- "address": "0x5c5224"
- },
- {
- "name": "SetTextAlign",
- "address": "0x5c5228"
- },
- {
- "name": "SetTextJustification",
- "address": "0x5c522c"
- },
- {
- "name": "MoveToEx",
- "address": "0x5c5230"
- },
- {
- "name": "LineTo",
- "address": "0x5c5234"
- },
- {
- "name": "OffsetClipRgn",
- "address": "0x5c5238"
- },
- {
- "name": "IntersectClipRect",
- "address": "0x5c523c"
- },
- {
- "name": "ExcludeClipRect",
- "address": "0x5c5240"
- },
- {
- "name": "SetMapMode",
- "address": "0x5c5244"
- },
- {
- "name": "ModifyWorldTransform",
- "address": "0x5c5248"
- },
- {
- "name": "SetWorldTransform",
- "address": "0x5c524c"
- },
- {
- "name": "SetGraphicsMode",
- "address": "0x5c5250"
- },
- {
- "name": "SetStretchBltMode",
- "address": "0x5c5254"
- },
- {
- "name": "SetROP2",
- "address": "0x5c5258"
- },
- {
- "name": "SetPolyFillMode",
- "address": "0x5c525c"
- },
- {
- "name": "SetBkMode",
- "address": "0x5c5260"
- },
- {
- "name": "RestoreDC",
- "address": "0x5c5264"
- },
- {
- "name": "SaveDC",
- "address": "0x5c5268"
- },
- {
- "name": "GetObjectA",
- "address": "0x5c526c"
- },
- {
- "name": "SetBkColor",
- "address": "0x5c5270"
- },
- {
- "name": "SetTextColor",
- "address": "0x5c5274"
- },
- {
- "name": "GetClipBox",
- "address": "0x5c5278"
- },
- {
- "name": "GetDCOrgEx",
- "address": "0x5c527c"
- },
- {
- "name": "CreateDCA",
- "address": "0x5c5280"
- },
- {
- "name": "CopyMetaFileA",
- "address": "0x5c5284"
- },
- {
- "name": "GetDeviceCaps",
- "address": "0x5c5288"
- },
- {
- "name": "CreateBitmap",
- "address": "0x5c528c"
- },
- {
- "name": "GetMapMode",
- "address": "0x5c5290"
- },
- {
- "name": "CreateRectRgnIndirect",
- "address": "0x5c5294"
- },
- {
- "name": "PatBlt",
- "address": "0x5c5298"
- }
- ],
- "dll": "GDI32.dll"
- },
- {
- "imports": [
- {
- "name": "AlphaBlend",
- "address": "0x5c559c"
- },
- {
- "name": "TransparentBlt",
- "address": "0x5c55a0"
- }
- ],
- "dll": "MSIMG32.dll"
- },
- {
- "imports": [
- {
- "name": "GetFileTitleA",
- "address": "0x5c5068"
- }
- ],
- "dll": "COMDLG32.dll"
- },
- {
- "imports": [
- {
- "name": "GetJobA",
- "address": "0x5c5adc"
- },
- {
- "name": "DocumentPropertiesA",
- "address": "0x5c5ae0"
- },
- {
- "name": "ClosePrinter",
- "address": "0x5c5ae4"
- },
- {
- "name": "OpenPrinterA",
- "address": "0x5c5ae8"
- }
- ],
- "dll": "WINSPOOL.DRV"
- },
- {
- "imports": [
- {
- "name": "RegEnumKeyExA",
- "address": "0x5c5000"
- },
- {
- "name": "RegQueryValueExA",
- "address": "0x5c5004"
- },
- {
- "name": "RegOpenKeyExA",
- "address": "0x5c5008"
- },
- {
- "name": "RegDeleteKeyA",
- "address": "0x5c500c"
- },
- {
- "name": "RegEnumKeyA",
- "address": "0x5c5010"
- },
- {
- "name": "RegOpenKeyA",
- "address": "0x5c5014"
- },
- {
- "name": "RegQueryValueA",
- "address": "0x5c5018"
- },
- {
- "name": "RegSetValueA",
- "address": "0x5c501c"
- },
- {
- "name": "RegCreateKeyExA",
- "address": "0x5c5020"
- },
- {
- "name": "GetFileSecurityA",
- "address": "0x5c5024"
- },
- {
- "name": "SetFileSecurityA",
- "address": "0x5c5028"
- },
- {
- "name": "RegCloseKey",
- "address": "0x5c502c"
- },
- {
- "name": "RegCreateKeyA",
- "address": "0x5c5030"
- },
- {
- "name": "RegDeleteValueA",
- "address": "0x5c5034"
- },
- {
- "name": "RegSetValueExA",
- "address": "0x5c5038"
- }
- ],
- "dll": "ADVAPI32.dll"
- },
- {
- "imports": [
- {
- "name": "ShellExecuteA",
- "address": "0x5c5654"
- },
- {
- "name": "SHAppBarMessage",
- "address": "0x5c5658"
- },
- {
- "name": "DragQueryFileA",
- "address": "0x5c565c"
- },
- {
- "name": "DragFinish",
- "address": "0x5c5660"
- },
- {
- "name": "ExtractIconA",
- "address": "0x5c5664"
- },
- {
- "name": "SHGetFileInfoA",
- "address": "0x5c5668"
- },
- {
- "name": "SHGetPathFromIDListA",
- "address": "0x5c566c"
- },
- {
- "name": "SHBrowseForFolderA",
- "address": "0x5c5670"
- },
- {
- "name": "SHGetSpecialFolderLocation",
- "address": "0x5c5674"
- },
- {
- "name": "SHGetDesktopFolder",
- "address": "0x5c5678"
- },
- {
- "name": "SHGetMalloc",
- "address": "0x5c567c"
- }
- ],
- "dll": "SHELL32.dll"
- },
- {
- "imports": [
- {
- "name": "ImageList_GetIconSize",
- "address": "0x5c5040"
- },
- {
- "name": "ImageList_ReplaceIcon",
- "address": "0x5c5044"
- },
- {
- "name": "ImageList_GetIcon",
- "address": "0x5c5048"
- },
- {
- "name": "ImageList_Create",
- "address": "0x5c504c"
- },
- {
- "name": "ImageList_GetImageCount",
- "address": "0x5c5050"
- },
- {
- "name": "ImageList_Destroy",
- "address": "0x5c5054"
- },
- {
- "name": "ImageList_AddMasked",
- "address": "0x5c5058"
- },
- {
- "name": "ImageList_Remove",
- "address": "0x5c505c"
- },
- {
- "name": "ImageList_DrawEx",
- "address": "0x5c5060"
- }
- ],
- "dll": "COMCTL32.dll"
- },
- {
- "imports": [
- {
- "name": "UrlUnescapeA",
- "address": "0x5c5684"
- },
- {
- "name": "PathIsUNCA",
- "address": "0x5c5688"
- },
- {
- "name": "PathStripToRootA",
- "address": "0x5c568c"
- },
- {
- "name": "PathRemoveExtensionA",
- "address": "0x5c5690"
- },
- {
- "name": "PathFindExtensionA",
- "address": "0x5c5694"
- },
- {
- "name": "PathFindFileNameA",
- "address": "0x5c5698"
- },
- {
- "name": "PathRemoveFileSpecW",
- "address": "0x5c569c"
- }
- ],
- "dll": "SHLWAPI.dll"
- },
- {
- "imports": [
- {
- "name": null,
- "address": "0x5c5c74"
- }
- ],
- "dll": "oledlg.dll"
- },
- {
- "imports": [
- {
- "name": "WriteFmtUserTypeStg",
- "address": "0x5c5b48"
- },
- {
- "name": "SetConvertStg",
- "address": "0x5c5b4c"
- },
- {
- "name": "CoInitializeEx",
- "address": "0x5c5b50"
- },
- {
- "name": "CLSIDFromString",
- "address": "0x5c5b54"
- },
- {
- "name": "CLSIDFromProgID",
- "address": "0x5c5b58"
- },
- {
- "name": "CoRegisterClassObject",
- "address": "0x5c5b5c"
- },
- {
- "name": "CoRevokeClassObject",
- "address": "0x5c5b60"
- },
- {
- "name": "OleSetClipboard",
- "address": "0x5c5b64"
- },
- {
- "name": "OleIsCurrentClipboard",
- "address": "0x5c5b68"
- },
- {
- "name": "OleFlushClipboard",
- "address": "0x5c5b6c"
- },
- {
- "name": "CoRegisterMessageFilter",
- "address": "0x5c5b70"
- },
- {
- "name": "CreateStreamOnHGlobal",
- "address": "0x5c5b74"
- },
- {
- "name": "StgCreateDocfile",
- "address": "0x5c5b78"
- },
- {
- "name": "CreateFileMoniker",
- "address": "0x5c5b7c"
- },
- {
- "name": "StgOpenStorage",
- "address": "0x5c5b80"
- },
- {
- "name": "StgIsStorageFile",
- "address": "0x5c5b84"
- },
- {
- "name": "OleCreateMenuDescriptor",
- "address": "0x5c5b88"
- },
- {
- "name": "OleDestroyMenuDescriptor",
- "address": "0x5c5b8c"
- },
- {
- "name": "OleTranslateAccelerator",
- "address": "0x5c5b90"
- },
- {
- "name": "IsAccelerator",
- "address": "0x5c5b94"
- },
- {
- "name": "CreateDataAdviseHolder",
- "address": "0x5c5b98"
- },
- {
- "name": "WriteClassStg",
- "address": "0x5c5b9c"
- },
- {
- "name": "CoGetMalloc",
- "address": "0x5c5ba0"
- },
- {
- "name": "GetRunningObjectTable",
- "address": "0x5c5ba4"
- },
- {
- "name": "OleIsRunning",
- "address": "0x5c5ba8"
- },
- {
- "name": "OleQueryLinkFromData",
- "address": "0x5c5bac"
- },
- {
- "name": "OleQueryCreateFromData",
- "address": "0x5c5bb0"
- },
- {
- "name": "RevokeDragDrop",
- "address": "0x5c5bb4"
- },
- {
- "name": "CoLockObjectExternal",
- "address": "0x5c5bb8"
- },
- {
- "name": "RegisterDragDrop",
- "address": "0x5c5bbc"
- },
- {
- "name": "OleGetClipboard",
- "address": "0x5c5bc0"
- },
- {
- "name": "OleRegGetMiscStatus",
- "address": "0x5c5bc4"
- },
- {
- "name": "OleRegEnumVerbs",
- "address": "0x5c5bc8"
- },
- {
- "name": "CreateGenericComposite",
- "address": "0x5c5bcc"
- },
- {
- "name": "CreateItemMoniker",
- "address": "0x5c5bd0"
- },
- {
- "name": "OleGetIconOfClass",
- "address": "0x5c5bd4"
- },
- {
- "name": "OleCreateLinkToFile",
- "address": "0x5c5bd8"
- },
- {
- "name": "OleCreateFromFile",
- "address": "0x5c5bdc"
- },
- {
- "name": "OleSetContainedObject",
- "address": "0x5c5be0"
- },
- {
- "name": "GetHGlobalFromILockBytes",
- "address": "0x5c5be4"
- },
- {
- "name": "OleLoad",
- "address": "0x5c5be8"
- },
- {
- "name": "OleCreate",
- "address": "0x5c5bec"
- },
- {
- "name": "OleCreateStaticFromData",
- "address": "0x5c5bf0"
- },
- {
- "name": "OleCreateLinkFromData",
- "address": "0x5c5bf4"
- },
- {
- "name": "OleRegGetUserType",
- "address": "0x5c5bf8"
- },
- {
- "name": "ReadFmtUserTypeStg",
- "address": "0x5c5bfc"
- },
- {
- "name": "ReadClassStg",
- "address": "0x5c5c00"
- },
- {
- "name": "StringFromCLSID",
- "address": "0x5c5c04"
- },
- {
- "name": "CoTreatAsClass",
- "address": "0x5c5c08"
- },
- {
- "name": "CreateBindCtx",
- "address": "0x5c5c0c"
- },
- {
- "name": "ReleaseStgMedium",
- "address": "0x5c5c10"
- },
- {
- "name": "CoTaskMemAlloc",
- "address": "0x5c5c14"
- },
- {
- "name": "OleDuplicateData",
- "address": "0x5c5c18"
- },
- {
- "name": "CoGetClassObject",
- "address": "0x5c5c1c"
- },
- {
- "name": "StgOpenStorageOnILockBytes",
- "address": "0x5c5c20"
- },
- {
- "name": "StgCreateDocfileOnILockBytes",
- "address": "0x5c5c24"
- },
- {
- "name": "CreateILockBytesOnHGlobal",
- "address": "0x5c5c28"
- },
- {
- "name": "StringFromGUID2",
- "address": "0x5c5c2c"
- },
- {
- "name": "CoDisconnectObject",
- "address": "0x5c5c30"
- },
- {
- "name": "CoCreateInstance",
- "address": "0x5c5c34"
- },
- {
- "name": "OleRun",
- "address": "0x5c5c38"
- },
- {
- "name": "OleUninitialize",
- "address": "0x5c5c3c"
- },
- {
- "name": "CoFreeUnusedLibraries",
- "address": "0x5c5c40"
- },
- {
- "name": "OleInitialize",
- "address": "0x5c5c44"
- },
- {
- "name": "CreateOleAdviseHolder",
- "address": "0x5c5c48"
- },
- {
- "name": "CoUninitialize",
- "address": "0x5c5c4c"
- },
- {
- "name": "OleCreateFromData",
- "address": "0x5c5c50"
- },
- {
- "name": "OleSaveToStream",
- "address": "0x5c5c54"
- },
- {
- "name": "WriteClassStm",
- "address": "0x5c5c58"
- },
- {
- "name": "OleSave",
- "address": "0x5c5c5c"
- },
- {
- "name": "DoDragDrop",
- "address": "0x5c5c60"
- },
- {
- "name": "OleSetMenuDescriptor",
- "address": "0x5c5c64"
- },
- {
- "name": "CoTaskMemFree",
- "address": "0x5c5c68"
- },
- {
- "name": "OleLockRunning",
- "address": "0x5c5c6c"
- }
- ],
- "dll": "ole32.dll"
- },
- {
- "imports": [
- {
- "name": "SysAllocStringByteLen",
- "address": "0x5c55a8"
- },
- {
- "name": "SysStringByteLen",
- "address": "0x5c55ac"
- },
- {
- "name": "VariantClear",
- "address": "0x5c55b0"
- },
- {
- "name": "VariantChangeType",
- "address": "0x5c55b4"
- },
- {
- "name": "VariantInit",
- "address": "0x5c55b8"
- },
- {
- "name": "OleCreateFontIndirect",
- "address": "0x5c55bc"
- },
- {
- "name": "VariantTimeToSystemTime",
- "address": "0x5c55c0"
- },
- {
- "name": "SystemTimeToVariantTime",
- "address": "0x5c55c4"
- },
- {
- "name": "SafeArrayDestroy",
- "address": "0x5c55c8"
- },
- {
- "name": "SysAllocString",
- "address": "0x5c55cc"
- },
- {
- "name": "RegisterTypeLib",
- "address": "0x5c55d0"
- },
- {
- "name": "LoadTypeLib",
- "address": "0x5c55d4"
- },
- {
- "name": "LoadRegTypeLib",
- "address": "0x5c55d8"
- },
- {
- "name": "SafeArrayUnaccessData",
- "address": "0x5c55dc"
- },
- {
- "name": "SafeArrayAccessData",
- "address": "0x5c55e0"
- },
- {
- "name": "SafeArrayGetUBound",
- "address": "0x5c55e4"
- },
- {
- "name": "SafeArrayGetLBound",
- "address": "0x5c55e8"
- },
- {
- "name": "SafeArrayGetElemsize",
- "address": "0x5c55ec"
- },
- {
- "name": "SafeArrayGetDim",
- "address": "0x5c55f0"
- },
- {
- "name": "SysStringLen",
- "address": "0x5c55f4"
- },
- {
- "name": "SafeArrayRedim",
- "address": "0x5c55f8"
- },
- {
- "name": "VariantCopy",
- "address": "0x5c55fc"
- },
- {
- "name": "SafeArrayAllocData",
- "address": "0x5c5600"
- },
- {
- "name": "SafeArrayAllocDescriptor",
- "address": "0x5c5604"
- },
- {
- "name": "SafeArrayCopy",
- "address": "0x5c5608"
- },
- {
- "name": "SafeArrayGetElement",
- "address": "0x5c560c"
- },
- {
- "name": "SafeArrayPtrOfIndex",
- "address": "0x5c5610"
- },
- {
- "name": "SafeArrayPutElement",
- "address": "0x5c5614"
- },
- {
- "name": "SafeArrayLock",
- "address": "0x5c5618"
- },
- {
- "name": "SafeArrayUnlock",
- "address": "0x5c561c"
- },
- {
- "name": "SafeArrayDestroyData",
- "address": "0x5c5620"
- },
- {
- "name": "SafeArrayDestroyDescriptor",
- "address": "0x5c5624"
- },
- {
- "name": "SysReAllocStringLen",
- "address": "0x5c5628"
- },
- {
- "name": "VarDateFromStr",
- "address": "0x5c562c"
- },
- {
- "name": "VarBstrFromCy",
- "address": "0x5c5630"
- },
- {
- "name": "VarBstrFromDec",
- "address": "0x5c5634"
- },
- {
- "name": "VarDecFromStr",
- "address": "0x5c5638"
- },
- {
- "name": "VarCyFromStr",
- "address": "0x5c563c"
- },
- {
- "name": "VarBstrFromDate",
- "address": "0x5c5640"
- },
- {
- "name": "SysAllocStringLen",
- "address": "0x5c5644"
- },
- {
- "name": "SafeArrayCreate",
- "address": "0x5c5648"
- },
- {
- "name": "SysFreeString",
- "address": "0x5c564c"
- }
- ],
- "dll": "OLEAUT32.dll"
- },
- {
- "imports": [
- {
- "name": "InternetCanonicalizeUrlA",
- "address": "0x5c5a34"
- },
- {
- "name": "InternetQueryOptionA",
- "address": "0x5c5a38"
- },
- {
- "name": "InternetSetOptionExA",
- "address": "0x5c5a3c"
- },
- {
- "name": "InternetSetCookieA",
- "address": "0x5c5a40"
- },
- {
- "name": "InternetGetCookieA",
- "address": "0x5c5a44"
- },
- {
- "name": "InternetQueryDataAvailable",
- "address": "0x5c5a48"
- },
- {
- "name": "HttpOpenRequestA",
- "address": "0x5c5a4c"
- },
- {
- "name": "InternetOpenUrlA",
- "address": "0x5c5a50"
- },
- {
- "name": "GopherOpenFileA",
- "address": "0x5c5a54"
- },
- {
- "name": "InternetConnectA",
- "address": "0x5c5a58"
- },
- {
- "name": "FtpFindFirstFileA",
- "address": "0x5c5a5c"
- },
- {
- "name": "GopherCreateLocatorA",
- "address": "0x5c5a60"
- },
- {
- "name": "FtpCommandA",
- "address": "0x5c5a64"
- },
- {
- "name": "FtpOpenFileA",
- "address": "0x5c5a68"
- },
- {
- "name": "GopherGetAttributeA",
- "address": "0x5c5a6c"
- },
- {
- "name": "HttpSendRequestExA",
- "address": "0x5c5a70"
- },
- {
- "name": "HttpEndRequestA",
- "address": "0x5c5a74"
- },
- {
- "name": "HttpSendRequestA",
- "address": "0x5c5a78"
- },
- {
- "name": "InternetReadFile",
- "address": "0x5c5a7c"
- },
- {
- "name": "InternetWriteFile",
- "address": "0x5c5a80"
- },
- {
- "name": "InternetSetFilePointer",
- "address": "0x5c5a84"
- },
- {
- "name": "InternetSetStatusCallback",
- "address": "0x5c5a88"
- },
- {
- "name": "InternetOpenA",
- "address": "0x5c5a8c"
- },
- {
- "name": "InternetGetLastResponseInfoA",
- "address": "0x5c5a90"
- },
- {
- "name": "GopherFindFirstFileA",
- "address": "0x5c5a94"
- },
- {
- "name": "InternetCloseHandle",
- "address": "0x5c5a98"
- },
- {
- "name": "InternetFindNextFileA",
- "address": "0x5c5a9c"
- },
- {
- "name": "HttpQueryInfoA",
- "address": "0x5c5aa0"
- },
- {
- "name": "HttpAddRequestHeadersA",
- "address": "0x5c5aa4"
- },
- {
- "name": "InternetErrorDlg",
- "address": "0x5c5aa8"
- },
- {
- "name": "FtpGetFileA",
- "address": "0x5c5aac"
- },
- {
- "name": "FtpPutFileA",
- "address": "0x5c5ab0"
- },
- {
- "name": "FtpGetCurrentDirectoryA",
- "address": "0x5c5ab4"
- },
- {
- "name": "FtpSetCurrentDirectoryA",
- "address": "0x5c5ab8"
- },
- {
- "name": "FtpRemoveDirectoryA",
- "address": "0x5c5abc"
- },
- {
- "name": "FtpCreateDirectoryA",
- "address": "0x5c5ac0"
- },
- {
- "name": "FtpRenameFileA",
- "address": "0x5c5ac4"
- },
- {
- "name": "FtpDeleteFileA",
- "address": "0x5c5ac8"
- },
- {
- "name": "InternetCrackUrlA",
- "address": "0x5c5acc"
- }
- ],
- "dll": "WININET.dll"
- },
- {
- "imports": [
- {
- "name": "GdipDrawImageI",
- "address": "0x5c5af0"
- },
- {
- "name": "GdipGetImageGraphicsContext",
- "address": "0x5c5af4"
- },
- {
- "name": "GdiplusShutdown",
- "address": "0x5c5af8"
- },
- {
- "name": "GdiplusStartup",
- "address": "0x5c5afc"
- },
- {
- "name": "GdipBitmapUnlockBits",
- "address": "0x5c5b00"
- },
- {
- "name": "GdipBitmapLockBits",
- "address": "0x5c5b04"
- },
- {
- "name": "GdipCreateBitmapFromScan0",
- "address": "0x5c5b08"
- },
- {
- "name": "GdipCreateBitmapFromStreamICM",
- "address": "0x5c5b0c"
- },
- {
- "name": "GdipCreateBitmapFromStream",
- "address": "0x5c5b10"
- },
- {
- "name": "GdipCreateBitmapFromFileICM",
- "address": "0x5c5b14"
- },
- {
- "name": "GdipCreateBitmapFromFile",
- "address": "0x5c5b18"
- },
- {
- "name": "GdipGetImagePalette",
- "address": "0x5c5b1c"
- },
- {
- "name": "GdipGetImagePaletteSize",
- "address": "0x5c5b20"
- },
- {
- "name": "GdipGetImagePixelFormat",
- "address": "0x5c5b24"
- },
- {
- "name": "GdipGetImageHeight",
- "address": "0x5c5b28"
- },
- {
- "name": "GdipGetImageWidth",
- "address": "0x5c5b2c"
- },
- {
- "name": "GdipDisposeImage",
- "address": "0x5c5b30"
- },
- {
- "name": "GdipDeleteGraphics",
- "address": "0x5c5b34"
- },
- {
- "name": "GdipAlloc",
- "address": "0x5c5b38"
- },
- {
- "name": "GdipFree",
- "address": "0x5c5b3c"
- },
- {
- "name": "GdipCloneImage",
- "address": "0x5c5b40"
- }
- ],
- "dll": "gdiplus.dll"
- },
- {
- "imports": [
- {
- "name": "ImmReleaseContext",
- "address": "0x5c52a0"
- },
- {
- "name": "ImmGetContext",
- "address": "0x5c52a4"
- },
- {
- "name": "ImmGetOpenStatus",
- "address": "0x5c52a8"
- }
- ],
- "dll": "IMM32.dll"
- },
- {
- "imports": [
- {
- "name": "PlaySoundA",
- "address": "0x5c5ad4"
- }
- ],
- "dll": "WINMM.dll"
- }
- ],
- "digital_signers": null,
- "exported_dll_name": null,
- "actual_checksum": "0x002469ee",
- "overlay": null,
- "imagebase": "0x00400000",
- "reported_checksum": "0x002469ee",
- "icon_hash": null,
- "entrypoint": "0x005786fc",
- "timestamp": "2011-06-12 13:46:15",
- "osversion": "5.0",
- "sections": [
- {
- "name": ".text",
- "characteristics": "IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ",
- "virtual_address": "0x00001000",
- "size_of_data": "0x001c3800",
- "entropy": "6.57",
- "raw_address": "0x00000400",
- "virtual_size": "0x001c3662",
- "characteristics_raw": "0x60000020"
- },
- {
- "name": ".rdata",
- "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
- "virtual_address": "0x001c5000",
- "size_of_data": "0x0006d200",
- "entropy": "5.32",
- "raw_address": "0x001c3c00",
- "virtual_size": "0x0006d12c",
- "characteristics_raw": "0x40000040"
- },
- {
- "name": ".data",
- "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
- "virtual_address": "0x00233000",
- "size_of_data": "0x00007800",
- "entropy": "4.87",
- "raw_address": "0x00230e00",
- "virtual_size": "0x00112b5c",
- "characteristics_raw": "0xc0000040"
- },
- {
- "name": ".rsrc",
- "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
- "virtual_address": "0x00346000",
- "size_of_data": "0x00003e00",
- "entropy": "4.70",
- "raw_address": "0x00238600",
- "virtual_size": "0x00003c0c",
- "characteristics_raw": "0x40000040"
- }
- ],
- "resources": [],
- "dirents": [
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x0022de7c",
- "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
- "size": "0x00000168"
- },
- {
- "virtual_address": "0x00346000",
- "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
- "size": "0x00003c0c"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x001c6030",
- "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
- "size": "0x0000001c"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_TLS",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00201680",
- "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
- "size": "0x00000040"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x001c5000",
- "name": "IMAGE_DIRECTORY_ENTRY_IAT",
- "size": "0x00000c7c"
- },
- {
- "virtual_address": "0x0022ddcc",
- "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
- "size": "0x00000040"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
- "size": "0x00000000"
- }
- ],
- "exports": [],
- "guest_signers": {},
- "imphash": "0fd1df61093ab8b9d1ad505dac7509f3",
- "icon_fuzzy": null,
- "icon": null,
- "pdbpath": "d:\\skymachine\\tianji code\\tianji tools\\book\\BookMaker\\Release\\BookMaker.pdb",
- "imported_dll_count": 17,
- "versioninfo": []
- }
- }
- [*] Resolved APIs: [
- "kernel32.dll.FlsAlloc",
- "kernel32.dll.FlsGetValue",
- "kernel32.dll.FlsSetValue",
- "kernel32.dll.FlsFree",
- "kernel32.dll.IsProcessorFeaturePresent",
- "user32.dll.GetSystemMetrics",
- "user32.dll.MonitorFromWindow",
- "user32.dll.MonitorFromRect",
- "user32.dll.MonitorFromPoint",
- "user32.dll.EnumDisplayMonitors",
- "user32.dll.GetMonitorInfoA",
- "user32.dll.EnumDisplayDevicesA",
- "uxtheme.dll.DrawThemeParentBackground",
- "uxtheme.dll.DrawThemeTextEx",
- "uxtheme.dll.BeginBufferedPaint",
- "uxtheme.dll.EndBufferedPaint",
- "user32.dll.SetLayeredWindowAttributes",
- "dwmapi.dll.DwmExtendFrameIntoClientArea",
- "dwmapi.dll.DwmDefWindowProc",
- "dwmapi.dll.DwmIsCompositionEnabled",
- "comctl32.dll.DllGetVersion",
- "kernel32.dll.CreateActCtxW",
- "kernel32.dll.ReleaseActCtx",
- "kernel32.dll.ActivateActCtx",
- "kernel32.dll.DeactivateActCtx",
- "user32.dll.NotifyWinEvent",
- "comctl32.dll.InitCommonControlsEx",
- "comctl32.dll.RegisterClassNameW",
- "kernel32.dll.SortGetHandle",
- "kernel32.dll.SortCloseHandle",
- "uxtheme.dll.EnableThemeDialogTexture",
- "uxtheme.dll.OpenThemeData",
- "uxtheme.dll.IsThemePartDefined",
- "uxtheme.dll.GetThemeFont",
- "uxtheme.dll.GetThemeColor",
- "uxtheme.dll.GetThemeBool",
- "imm32.dll.ImmIsIME",
- "uxtheme.dll.GetThemeInt",
- "gdi32.dll.GetLayout",
- "gdi32.dll.GdiRealizationInfo",
- "gdi32.dll.FontIsLinked",
- "advapi32.dll.RegOpenKeyExW",
- "advapi32.dll.RegQueryInfoKeyW",
- "gdi32.dll.GetTextFaceAliasW",
- "advapi32.dll.RegEnumValueW",
- "advapi32.dll.RegCloseKey",
- "advapi32.dll.RegQueryValueExW",
- "gdi32.dll.GetFontAssocStatus",
- "advapi32.dll.RegQueryValueExA",
- "advapi32.dll.RegEnumKeyExW",
- "gdi32.dll.GdiIsMetaPrintDC",
- "ole32.dll.CoInitializeEx",
- "ole32.dll.CoUninitialize",
- "cryptbase.dll.SystemFunction036",
- "ole32.dll.CoRegisterInitializeSpy",
- "ole32.dll.CoRevokeInitializeSpy",
- "imm32.dll.ImmGetContext",
- "imm32.dll.ImmLockIMC",
- "imm32.dll.ImmUnlockIMC",
- "imm32.dll.ImmReleaseContext",
- "imm32.dll.ImmSetCompositionFontW",
- "uxtheme.dll.DrawThemeBackground",
- "imm32.dll.ImmGetCompositionWindow",
- "imm32.dll.ImmSetCompositionWindow",
- "gdi32.dll.GetTextExtentExPointWPri",
- "uxtheme.dll.GetThemeMargins",
- "uxtheme.dll.BufferedPaintInit",
- "uxtheme.dll.BufferedPaintRenderAnimation",
- "uxtheme.dll.GetThemeTransitionDuration",
- "uxtheme.dll.BeginBufferedAnimation",
- "uxtheme.dll.IsThemeBackgroundPartiallyTransparent",
- "uxtheme.dll.DrawThemeParentBackgroundEx",
- "uxtheme.dll.EndBufferedAnimation",
- "uxtheme.dll.GetThemeBackgroundContentRect",
- "uxtheme.dll.DrawThemeText"
- ]
- [*] Static Analysis: {
- "pe": {
- "peid_signatures": null,
- "imports": [
- {
- "imports": [
- {
- "name": "WriteConsoleA",
- "address": "0x5c52b0"
- },
- {
- "name": "GetConsoleOutputCP",
- "address": "0x5c52b4"
- },
- {
- "name": "WriteConsoleW",
- "address": "0x5c52b8"
- },
- {
- "name": "GetUserDefaultLCID",
- "address": "0x5c52bc"
- },
- {
- "name": "EnumSystemLocalesA",
- "address": "0x5c52c0"
- },
- {
- "name": "IsValidLocale",
- "address": "0x5c52c4"
- },
- {
- "name": "CompareStringW",
- "address": "0x5c52c8"
- },
- {
- "name": "SetCurrentDirectoryA",
- "address": "0x5c52cc"
- },
- {
- "name": "GetProcessHeap",
- "address": "0x5c52d0"
- },
- {
- "name": "SetEnvironmentVariableA",
- "address": "0x5c52d4"
- },
- {
- "name": "PeekConsoleInputA",
- "address": "0x5c52d8"
- },
- {
- "name": "SetConsoleMode",
- "address": "0x5c52dc"
- },
- {
- "name": "ReadConsoleInputA",
- "address": "0x5c52e0"
- },
- {
- "name": "GetDriveTypeA",
- "address": "0x5c52e4"
- },
- {
- "name": "InitializeCriticalSectionAndSpinCount",
- "address": "0x5c52e8"
- },
- {
- "name": "QueryPerformanceCounter",
- "address": "0x5c52ec"
- },
- {
- "name": "SetConsoleCtrlHandler",
- "address": "0x5c52f0"
- },
- {
- "name": "GetEnvironmentStringsW",
- "address": "0x5c52f4"
- },
- {
- "name": "FreeEnvironmentStringsW",
- "address": "0x5c52f8"
- },
- {
- "name": "GetEnvironmentStrings",
- "address": "0x5c52fc"
- },
- {
- "name": "FreeEnvironmentStringsA",
- "address": "0x5c5300"
- },
- {
- "name": "GetStringTypeW",
- "address": "0x5c5304"
- },
- {
- "name": "GetStringTypeA",
- "address": "0x5c5308"
- },
- {
- "name": "GetTimeZoneInformation",
- "address": "0x5c530c"
- },
- {
- "name": "HeapDestroy",
- "address": "0x5c5310"
- },
- {
- "name": "HeapCreate",
- "address": "0x5c5314"
- },
- {
- "name": "VirtualFree",
- "address": "0x5c5318"
- },
- {
- "name": "FatalAppExitA",
- "address": "0x5c531c"
- },
- {
- "name": "LCMapStringW",
- "address": "0x5c5320"
- },
- {
- "name": "LCMapStringA",
- "address": "0x5c5324"
- },
- {
- "name": "IsValidCodePage",
- "address": "0x5c5328"
- },
- {
- "name": "GetACP",
- "address": "0x5c532c"
- },
- {
- "name": "GetConsoleMode",
- "address": "0x5c5330"
- },
- {
- "name": "GetConsoleCP",
- "address": "0x5c5334"
- },
- {
- "name": "GetStdHandle",
- "address": "0x5c5338"
- },
- {
- "name": "SetHandleCount",
- "address": "0x5c533c"
- },
- {
- "name": "GetFileType",
- "address": "0x5c5340"
- },
- {
- "name": "SetStdHandle",
- "address": "0x5c5344"
- },
- {
- "name": "HeapSize",
- "address": "0x5c5348"
- },
- {
- "name": "HeapReAlloc",
- "address": "0x5c534c"
- },
- {
- "name": "VirtualQuery",
- "address": "0x5c5350"
- },
- {
- "name": "GetSystemInfo",
- "address": "0x5c5354"
- },
- {
- "name": "VirtualAlloc",
- "address": "0x5c5358"
- },
- {
- "name": "RaiseException",
- "address": "0x5c535c"
- },
- {
- "name": "ExitThread",
- "address": "0x5c5360"
- },
- {
- "name": "ExitProcess",
- "address": "0x5c5364"
- },
- {
- "name": "RtlUnwind",
- "address": "0x5c5368"
- },
- {
- "name": "HeapFree",
- "address": "0x5c536c"
- },
- {
- "name": "GetStartupInfoA",
- "address": "0x5c5370"
- },
- {
- "name": "GetCommandLineA",
- "address": "0x5c5374"
- },
- {
- "name": "GetDateFormatA",
- "address": "0x5c5378"
- },
- {
- "name": "GetTimeFormatA",
- "address": "0x5c537c"
- },
- {
- "name": "GetSystemTimeAsFileTime",
- "address": "0x5c5380"
- },
- {
- "name": "IsDebuggerPresent",
- "address": "0x5c5384"
- },
- {
- "name": "SetUnhandledExceptionFilter",
- "address": "0x5c5388"
- },
- {
- "name": "UnhandledExceptionFilter",
- "address": "0x5c538c"
- },
- {
- "name": "TerminateProcess",
- "address": "0x5c5390"
- },
- {
- "name": "HeapAlloc",
- "address": "0x5c5394"
- },
- {
- "name": "LocalLock",
- "address": "0x5c5398"
- },
- {
- "name": "LocalUnlock",
- "address": "0x5c539c"
- },
- {
- "name": "FindResourceExA",
- "address": "0x5c53a0"
- },
- {
- "name": "GetDiskFreeSpaceA",
- "address": "0x5c53a4"
- },
- {
- "name": "VirtualProtect",
- "address": "0x5c53a8"
- },
- {
- "name": "SearchPathA",
- "address": "0x5c53ac"
- },
- {
- "name": "Sleep",
- "address": "0x5c53b0"
- },
- {
- "name": "GetProfileIntA",
- "address": "0x5c53b4"
- },
- {
- "name": "GetTempPathA",
- "address": "0x5c53b8"
- },
- {
- "name": "GetTempFileNameA",
- "address": "0x5c53bc"
- },
- {
- "name": "lstrcpyA",
- "address": "0x5c53c0"
- },
- {
- "name": "GetSystemDirectoryW",
- "address": "0x5c53c4"
- },
- {
- "name": "LoadLibraryW",
- "address": "0x5c53c8"
- },
- {
- "name": "SetErrorMode",
- "address": "0x5c53cc"
- },
- {
- "name": "GetOEMCP",
- "address": "0x5c53d0"
- },
- {
- "name": "GetCPInfo",
- "address": "0x5c53d4"
- },
- {
- "name": "GetAtomNameA",
- "address": "0x5c53d8"
- },
- {
- "name": "GetModuleHandleW",
- "address": "0x5c53dc"
- },
- {
- "name": "InterlockedIncrement",
- "address": "0x5c53e0"
- },
- {
- "name": "TlsFree",
- "address": "0x5c53e4"
- },
- {
- "name": "LocalReAlloc",
- "address": "0x5c53e8"
- },
- {
- "name": "TlsSetValue",
- "address": "0x5c53ec"
- },
- {
- "name": "TlsAlloc",
- "address": "0x5c53f0"
- },
- {
- "name": "GlobalHandle",
- "address": "0x5c53f4"
- },
- {
- "name": "GlobalReAlloc",
- "address": "0x5c53f8"
- },
- {
- "name": "TlsGetValue",
- "address": "0x5c53fc"
- },
- {
- "name": "GlobalFlags",
- "address": "0x5c5400"
- },
- {
- "name": "GetCurrentDirectoryA",
- "address": "0x5c5404"
- },
- {
- "name": "LocalAlloc",
- "address": "0x5c5408"
- },
- {
- "name": "LeaveCriticalSection",
- "address": "0x5c540c"
- },
- {
- "name": "EnterCriticalSection",
- "address": "0x5c5410"
- },
- {
- "name": "DeleteCriticalSection",
- "address": "0x5c5414"
- },
- {
- "name": "InitializeCriticalSection",
- "address": "0x5c5418"
- },
- {
- "name": "GetFileTime",
- "address": "0x5c541c"
- },
- {
- "name": "GetFileSizeEx",
- "address": "0x5c5420"
- },
- {
- "name": "GetFileAttributesA",
- "address": "0x5c5424"
- },
- {
- "name": "SetFileAttributesA",
- "address": "0x5c5428"
- },
- {
- "name": "SetFileTime",
- "address": "0x5c542c"
- },
- {
- "name": "SystemTimeToFileTime",
- "address": "0x5c5430"
- },
- {
- "name": "LocalFileTimeToFileTime",
- "address": "0x5c5434"
- },
- {
- "name": "GetFileAttributesExA",
- "address": "0x5c5438"
- },
- {
- "name": "FileTimeToLocalFileTime",
- "address": "0x5c543c"
- },
- {
- "name": "FileTimeToSystemTime",
- "address": "0x5c5440"
- },
- {
- "name": "GetShortPathNameA",
- "address": "0x5c5444"
- },
- {
- "name": "GetFullPathNameA",
- "address": "0x5c5448"
- },
- {
- "name": "GetVolumeInformationA",
- "address": "0x5c544c"
- },
- {
- "name": "GetCurrentProcess",
- "address": "0x5c5450"
- },
- {
- "name": "DuplicateHandle",
- "address": "0x5c5454"
- },
- {
- "name": "UnlockFile",
- "address": "0x5c5458"
- },
- {
- "name": "LockFile",
- "address": "0x5c545c"
- },
- {
- "name": "FlushFileBuffers",
- "address": "0x5c5460"
- },
- {
- "name": "ReadFile",
- "address": "0x5c5464"
- },
- {
- "name": "lstrcmpiA",
- "address": "0x5c5468"
- },
- {
- "name": "GetThreadLocale",
- "address": "0x5c546c"
- },
- {
- "name": "GetStringTypeExA",
- "address": "0x5c5470"
- },
- {
- "name": "GetPrivateProfileStringA",
- "address": "0x5c5474"
- },
- {
- "name": "WritePrivateProfileStringA",
- "address": "0x5c5478"
- },
- {
- "name": "GetPrivateProfileIntA",
- "address": "0x5c547c"
- },
- {
- "name": "GlobalGetAtomNameA",
- "address": "0x5c5480"
- },
- {
- "name": "GlobalFindAtomA",
- "address": "0x5c5484"
- },
- {
- "name": "lstrcmpW",
- "address": "0x5c5488"
- },
- {
- "name": "GetVersionExA",
- "address": "0x5c548c"
- },
- {
- "name": "InterlockedDecrement",
- "address": "0x5c5490"
- },
- {
- "name": "GetModuleFileNameW",
- "address": "0x5c5494"
- },
- {
- "name": "CopyFileA",
- "address": "0x5c5498"
- },
- {
- "name": "GlobalSize",
- "address": "0x5c549c"
- },
- {
- "name": "FormatMessageA",
- "address": "0x5c54a0"
- },
- {
- "name": "LocalFree",
- "address": "0x5c54a4"
- },
- {
- "name": "lstrlenW",
- "address": "0x5c54a8"
- },
- {
- "name": "MultiByteToWideChar",
- "address": "0x5c54ac"
- },
- {
- "name": "MulDiv",
- "address": "0x5c54b0"
- },
- {
- "name": "GetCurrentProcessId",
- "address": "0x5c54b4"
- },
- {
- "name": "GlobalAddAtomA",
- "address": "0x5c54b8"
- },
- {
- "name": "CreateEventA",
- "address": "0x5c54bc"
- },
- {
- "name": "SuspendThread",
- "address": "0x5c54c0"
- },
- {
- "name": "SetEvent",
- "address": "0x5c54c4"
- },
- {
- "name": "WaitForSingleObject",
- "address": "0x5c54c8"
- },
- {
- "name": "ResumeThread",
- "address": "0x5c54cc"
- },
- {
- "name": "SetThreadPriority",
- "address": "0x5c54d0"
- },
- {
- "name": "lstrlenA",
- "address": "0x5c54d4"
- },
- {
- "name": "SetLastError",
- "address": "0x5c54d8"
- },
- {
- "name": "LoadLibraryA",
- "address": "0x5c54dc"
- },
- {
- "name": "GlobalUnlock",
- "address": "0x5c54e0"
- },
- {
- "name": "FreeResource",
- "address": "0x5c54e4"
- },
- {
- "name": "GlobalFree",
- "address": "0x5c54e8"
- },
- {
- "name": "GlobalDeleteAtom",
- "address": "0x5c54ec"
- },
- {
- "name": "GetCurrentThread",
- "address": "0x5c54f0"
- },
- {
- "name": "ConvertDefaultLocale",
- "address": "0x5c54f4"
- },
- {
- "name": "EnumResourceLanguagesA",
- "address": "0x5c54f8"
- },
- {
- "name": "GetLocaleInfoA",
- "address": "0x5c54fc"
- },
- {
- "name": "FindActCtxSectionStringA",
- "address": "0x5c5500"
- },
- {
- "name": "LoadLibraryExA",
- "address": "0x5c5504"
- },
- {
- "name": "CompareStringA",
- "address": "0x5c5508"
- },
- {
- "name": "InterlockedExchange",
- "address": "0x5c550c"
- },
- {
- "name": "GlobalLock",
- "address": "0x5c5510"
- },
- {
- "name": "lstrcmpA",
- "address": "0x5c5514"
- },
- {
- "name": "GlobalAlloc",
- "address": "0x5c5518"
- },
- {
- "name": "FreeLibrary",
- "address": "0x5c551c"
- },
- {
- "name": "GetModuleHandleA",
- "address": "0x5c5520"
- },
- {
- "name": "GetProcAddress",
- "address": "0x5c5524"
- },
- {
- "name": "GetLastError",
- "address": "0x5c5528"
- },
- {
- "name": "CreateFileMappingA",
- "address": "0x5c552c"
- },
- {
- "name": "UnmapViewOfFile",
- "address": "0x5c5530"
- },
- {
- "name": "MapViewOfFile",
- "address": "0x5c5534"
- },
- {
- "name": "CreateThread",
- "address": "0x5c5538"
- },
- {
- "name": "MoveFileA",
- "address": "0x5c553c"
- },
- {
- "name": "TerminateThread",
- "address": "0x5c5540"
- },
- {
- "name": "WriteFile",
- "address": "0x5c5544"
- },
- {
- "name": "SetEndOfFile",
- "address": "0x5c5548"
- },
- {
- "name": "SetFilePointer",
- "address": "0x5c554c"
- },
- {
- "name": "GetCurrentThreadId",
- "address": "0x5c5550"
- },
- {
- "name": "OutputDebugStringA",
- "address": "0x5c5554"
- },
- {
- "name": "DeleteFileA",
- "address": "0x5c5558"
- },
- {
- "name": "GetFileSize",
- "address": "0x5c555c"
- },
- {
- "name": "CreateFileA",
- "address": "0x5c5560"
- },
- {
- "name": "FindNextFileA",
- "address": "0x5c5564"
- },
- {
- "name": "GetModuleFileNameA",
- "address": "0x5c5568"
- },
- {
- "name": "FindClose",
- "address": "0x5c556c"
- },
- {
- "name": "FindFirstFileA",
- "address": "0x5c5570"
- },
- {
- "name": "GetTickCount",
- "address": "0x5c5574"
- },
- {
- "name": "CloseHandle",
- "address": "0x5c5578"
- },
- {
- "name": "FindResourceA",
- "address": "0x5c557c"
- },
- {
- "name": "LoadResource",
- "address": "0x5c5580"
- },
- {
- "name": "LockResource",
- "address": "0x5c5584"
- },
- {
- "name": "SizeofResource",
- "address": "0x5c5588"
- },
- {
- "name": "GetLocaleInfoW",
- "address": "0x5c558c"
- },
- {
- "name": "WideCharToMultiByte",
- "address": "0x5c5590"
- },
- {
- "name": "GetNumberOfConsoleInputEvents",
- "address": "0x5c5594"
- }
- ],
- "dll": "KERNEL32.dll"
- },
- {
- "imports": [
- {
- "name": "SetRectEmpty",
- "address": "0x5c56a4"
- },
- {
- "name": "BringWindowToTop",
- "address": "0x5c56a8"
- },
- {
- "name": "TranslateAcceleratorA",
- "address": "0x5c56ac"
- },
- {
- "name": "DestroyMenu",
- "address": "0x5c56b0"
- },
- {
- "name": "GetMenuItemInfoA",
- "address": "0x5c56b4"
- },
- {
- "name": "UnregisterClassA",
- "address": "0x5c56b8"
- },
- {
- "name": "DestroyIcon",
- "address": "0x5c56bc"
- },
- {
- "name": "GetSysColorBrush",
- "address": "0x5c56c0"
- },
- {
- "name": "InflateRect",
- "address": "0x5c56c4"
- },
- {
- "name": "GetDialogBaseUnits",
- "address": "0x5c56c8"
- },
- {
- "name": "MessageBeep",
- "address": "0x5c56cc"
- },
- {
- "name": "GetNextDlgGroupItem",
- "address": "0x5c56d0"
- },
- {
- "name": "InvalidateRgn",
- "address": "0x5c56d4"
- },
- {
- "name": "InvalidateRect",
- "address": "0x5c56d8"
- },
- {
- "name": "SetRect",
- "address": "0x5c56dc"
- },
- {
- "name": "IsRectEmpty",
- "address": "0x5c56e0"
- },
- {
- "name": "CopyAcceleratorTableA",
- "address": "0x5c56e4"
- },
- {
- "name": "CharNextA",
- "address": "0x5c56e8"
- },
- {
- "name": "DeleteMenu",
- "address": "0x5c56ec"
- },
- {
- "name": "WaitMessage",
- "address": "0x5c56f0"
- },
- {
- "name": "ReleaseCapture",
- "address": "0x5c56f4"
- },
- {
- "name": "LoadCursorA",
- "address": "0x5c56f8"
- },
- {
- "name": "WindowFromPoint",
- "address": "0x5c56fc"
- },
- {
- "name": "SetCapture",
- "address": "0x5c5700"
- },
- {
- "name": "CharUpperA",
- "address": "0x5c5704"
- },
- {
- "name": "EndPaint",
- "address": "0x5c5708"
- },
- {
- "name": "BeginPaint",
- "address": "0x5c570c"
- },
- {
- "name": "GetWindowDC",
- "address": "0x5c5710"
- },
- {
- "name": "ClientToScreen",
- "address": "0x5c5714"
- },
- {
- "name": "GrayStringA",
- "address": "0x5c5718"
- },
- {
- "name": "DrawTextExA",
- "address": "0x5c571c"
- },
- {
- "name": "DrawTextA",
- "address": "0x5c5720"
- },
- {
- "name": "TabbedTextOutA",
- "address": "0x5c5724"
- },
- {
- "name": "FillRect",
- "address": "0x5c5728"
- },
- {
- "name": "ScrollWindowEx",
- "address": "0x5c572c"
- },
- {
- "name": "ShowWindow",
- "address": "0x5c5730"
- },
- {
- "name": "MoveWindow",
- "address": "0x5c5734"
- },
- {
- "name": "SetWindowTextA",
- "address": "0x5c5738"
- },
- {
- "name": "IsDialogMessageA",
- "address": "0x5c573c"
- },
- {
- "name": "IsDlgButtonChecked",
- "address": "0x5c5740"
- },
- {
- "name": "SetDlgItemTextA",
- "address": "0x5c5744"
- },
- {
- "name": "SetDlgItemInt",
- "address": "0x5c5748"
- },
- {
- "name": "GetDlgItemTextA",
- "address": "0x5c574c"
- },
- {
- "name": "GetDlgItemInt",
- "address": "0x5c5750"
- },
- {
- "name": "CheckRadioButton",
- "address": "0x5c5754"
- },
- {
- "name": "CheckDlgButton",
- "address": "0x5c5758"
- },
- {
- "name": "RegisterWindowMessageA",
- "address": "0x5c575c"
- },
- {
- "name": "SendDlgItemMessageA",
- "address": "0x5c5760"
- },
- {
- "name": "WinHelpA",
- "address": "0x5c5764"
- },
- {
- "name": "IsChild",
- "address": "0x5c5768"
- },
- {
- "name": "GetCapture",
- "address": "0x5c576c"
- },
- {
- "name": "GetClassLongA",
- "address": "0x5c5770"
- },
- {
- "name": "GetClassNameA",
- "address": "0x5c5774"
- },
- {
- "name": "SetPropA",
- "address": "0x5c5778"
- },
- {
- "name": "GetPropA",
- "address": "0x5c577c"
- },
- {
- "name": "RemovePropA",
- "address": "0x5c5780"
- },
- {
- "name": "SetFocus",
- "address": "0x5c5784"
- },
- {
- "name": "GetWindowTextLengthA",
- "address": "0x5c5788"
- },
- {
- "name": "GetWindowTextA",
- "address": "0x5c578c"
- },
- {
- "name": "GetForegroundWindow",
- "address": "0x5c5790"
- },
- {
- "name": "BeginDeferWindowPos",
- "address": "0x5c5794"
- },
- {
- "name": "EndDeferWindowPos",
- "address": "0x5c5798"
- },
- {
- "name": "GetTopWindow",
- "address": "0x5c579c"
- },
- {
- "name": "GetMessageTime",
- "address": "0x5c57a0"
- },
- {
- "name": "GetMessagePos",
- "address": "0x5c57a4"
- },
- {
- "name": "MapWindowPoints",
- "address": "0x5c57a8"
- },
- {
- "name": "ScrollWindow",
- "address": "0x5c57ac"
- },
- {
- "name": "TrackPopupMenuEx",
- "address": "0x5c57b0"
- },
- {
- "name": "TrackPopupMenu",
- "address": "0x5c57b4"
- },
- {
- "name": "SetMenu",
- "address": "0x5c57b8"
- },
- {
- "name": "SetScrollRange",
- "address": "0x5c57bc"
- },
- {
- "name": "GetScrollRange",
- "address": "0x5c57c0"
- },
- {
- "name": "SetScrollPos",
- "address": "0x5c57c4"
- },
- {
- "name": "GetScrollPos",
- "address": "0x5c57c8"
- },
- {
- "name": "SetForegroundWindow",
- "address": "0x5c57cc"
- },
- {
- "name": "ShowScrollBar",
- "address": "0x5c57d0"
- },
- {
- "name": "UpdateWindow",
- "address": "0x5c57d4"
- },
- {
- "name": "CreateWindowExA",
- "address": "0x5c57d8"
- },
- {
- "name": "GetClassInfoExA",
- "address": "0x5c57dc"
- },
- {
- "name": "GetClassInfoA",
- "address": "0x5c57e0"
- },
- {
- "name": "GetSystemMenu",
- "address": "0x5c57e4"
- },
- {
- "name": "GetSysColor",
- "address": "0x5c57e8"
- },
- {
- "name": "AdjustWindowRectEx",
- "address": "0x5c57ec"
- },
- {
- "name": "ScreenToClient",
- "address": "0x5c57f0"
- },
- {
- "name": "EqualRect",
- "address": "0x5c57f4"
- },
- {
- "name": "DeferWindowPos",
- "address": "0x5c57f8"
- },
- {
- "name": "CreatePopupMenu",
- "address": "0x5c57fc"
- },
- {
- "name": "SetScrollInfo",
- "address": "0x5c5800"
- },
- {
- "name": "SetWindowPlacement",
- "address": "0x5c5804"
- },
- {
- "name": "PtInRect",
- "address": "0x5c5808"
- },
- {
- "name": "GetDlgCtrlID",
- "address": "0x5c580c"
- },
- {
- "name": "DefWindowProcA",
- "address": "0x5c5810"
- },
- {
- "name": "CallWindowProcA",
- "address": "0x5c5814"
- },
- {
- "name": "GetMenu",
- "address": "0x5c5818"
- },
- {
- "name": "OffsetRect",
- "address": "0x5c581c"
- },
- {
- "name": "IntersectRect",
- "address": "0x5c5820"
- },
- {
- "name": "SystemParametersInfoA",
- "address": "0x5c5824"
- },
- {
- "name": "GetWindowPlacement",
- "address": "0x5c5828"
- },
- {
- "name": "GetWindowRect",
- "address": "0x5c582c"
- },
- {
- "name": "GetMenuStringA",
- "address": "0x5c5830"
- },
- {
- "name": "AppendMenuA",
- "address": "0x5c5834"
- },
- {
- "name": "GetMenuItemID",
- "address": "0x5c5838"
- },
- {
- "name": "InsertMenuA",
- "address": "0x5c583c"
- },
- {
- "name": "GetMenuItemCount",
- "address": "0x5c5840"
- },
- {
- "name": "GetSubMenu",
- "address": "0x5c5844"
- },
- {
- "name": "RemoveMenu",
- "address": "0x5c5848"
- },
- {
- "name": "GetWindowThreadProcessId",
- "address": "0x5c584c"
- },
- {
- "name": "GetLastActivePopup",
- "address": "0x5c5850"
- },
- {
- "name": "MessageBoxA",
- "address": "0x5c5854"
- },
- {
- "name": "ShowOwnedPopups",
- "address": "0x5c5858"
- },
- {
- "name": "SetCursor",
- "address": "0x5c585c"
- },
- {
- "name": "GetMessageA",
- "address": "0x5c5860"
- },
- {
- "name": "TranslateMessage",
- "address": "0x5c5864"
- },
- {
- "name": "DispatchMessageA",
- "address": "0x5c5868"
- },
- {
- "name": "IsWindowVisible",
- "address": "0x5c586c"
- },
- {
- "name": "GetKeyState",
- "address": "0x5c5870"
- },
- {
- "name": "GetCursorPos",
- "address": "0x5c5874"
- },
- {
- "name": "ValidateRect",
- "address": "0x5c5878"
- },
- {
- "name": "SetMenuItemBitmaps",
- "address": "0x5c587c"
- },
- {
- "name": "GetMenuCheckMarkDimensions",
- "address": "0x5c5880"
- },
- {
- "name": "LoadBitmapA",
- "address": "0x5c5884"
- },
- {
- "name": "GetFocus",
- "address": "0x5c5888"
- },
- {
- "name": "ModifyMenuA",
- "address": "0x5c588c"
- },
- {
- "name": "GetMenuState",
- "address": "0x5c5890"
- },
- {
- "name": "EnableMenuItem",
- "address": "0x5c5894"
- },
- {
- "name": "CheckMenuItem",
- "address": "0x5c5898"
- },
- {
- "name": "SetParent",
- "address": "0x5c589c"
- },
- {
- "name": "UnionRect",
- "address": "0x5c58a0"
- },
- {
- "name": "PostThreadMessageA",
- "address": "0x5c58a4"
- },
- {
- "name": "MapVirtualKeyA",
- "address": "0x5c58a8"
- },
- {
- "name": "GetKeyNameTextA",
- "address": "0x5c58ac"
- },
- {
- "name": "PeekMessageA",
- "address": "0x5c58b0"
- },
- {
- "name": "EnableWindow",
- "address": "0x5c58b4"
- },
- {
- "name": "LoadIconA",
- "address": "0x5c58b8"
- },
- {
- "name": "SendMessageA",
- "address": "0x5c58bc"
- },
- {
- "name": "IsIconic",
- "address": "0x5c58c0"
- },
- {
- "name": "ReleaseDC",
- "address": "0x5c58c4"
- },
- {
- "name": "GetDC",
- "address": "0x5c58c8"
- },
- {
- "name": "CopyRect",
- "address": "0x5c58cc"
- },
- {
- "name": "GetDesktopWindow",
- "address": "0x5c58d0"
- },
- {
- "name": "GetActiveWindow",
- "address": "0x5c58d4"
- },
- {
- "name": "SetActiveWindow",
- "address": "0x5c58d8"
- },
- {
- "name": "CreateDialogIndirectParamA",
- "address": "0x5c58dc"
- },
- {
- "name": "DestroyWindow",
- "address": "0x5c58e0"
- },
- {
- "name": "IsWindow",
- "address": "0x5c58e4"
- },
- {
- "name": "GetDlgItem",
- "address": "0x5c58e8"
- },
- {
- "name": "IsWindowEnabled",
- "address": "0x5c58ec"
- },
- {
- "name": "GetNextDlgTabItem",
- "address": "0x5c58f0"
- },
- {
- "name": "EndDialog",
- "address": "0x5c58f4"
- },
- {
- "name": "GetWindow",
- "address": "0x5c58f8"
- },
- {
- "name": "SetWindowContextHelpId",
- "address": "0x5c58fc"
- },
- {
- "name": "GetParent",
- "address": "0x5c5900"
- },
- {
- "name": "SetTimer",
- "address": "0x5c5904"
- },
- {
- "name": "KillTimer",
- "address": "0x5c5908"
- },
- {
- "name": "LockWindowUpdate",
- "address": "0x5c590c"
- },
- {
- "name": "GetTabbedTextExtentA",
- "address": "0x5c5910"
- },
- {
- "name": "EnumChildWindows",
- "address": "0x5c5914"
- },
- {
- "name": "GetWindowRgn",
- "address": "0x5c5918"
- },
- {
- "name": "WindowFromDC",
- "address": "0x5c591c"
- },
- {
- "name": "DestroyCursor",
- "address": "0x5c5920"
- },
- {
- "name": "SubtractRect",
- "address": "0x5c5924"
- },
- {
- "name": "MapVirtualKeyExA",
- "address": "0x5c5928"
- },
- {
- "name": "IsCharLowerA",
- "address": "0x5c592c"
- },
- {
- "name": "MapDialogRect",
- "address": "0x5c5930"
- },
- {
- "name": "SetWindowPos",
- "address": "0x5c5934"
- },
- {
- "name": "PostQuitMessage",
- "address": "0x5c5938"
- },
- {
- "name": "PostMessageA",
- "address": "0x5c593c"
- },
- {
- "name": "SetWindowLongA",
- "address": "0x5c5940"
- },
- {
- "name": "GetWindowLongA",
- "address": "0x5c5944"
- },
- {
- "name": "UnhookWindowsHookEx",
- "address": "0x5c5948"
- },
- {
- "name": "SetWindowsHookExA",
- "address": "0x5c594c"
- },
- {
- "name": "CallNextHookEx",
- "address": "0x5c5950"
- },
- {
- "name": "DrawIcon",
- "address": "0x5c5954"
- },
- {
- "name": "InsertMenuItemA",
- "address": "0x5c5958"
- },
- {
- "name": "LoadAcceleratorsA",
- "address": "0x5c595c"
- },
- {
- "name": "GetMenuBarInfo",
- "address": "0x5c5960"
- },
- {
- "name": "LoadMenuA",
- "address": "0x5c5964"
- },
- {
- "name": "ReuseDDElParam",
- "address": "0x5c5968"
- },
- {
- "name": "UnpackDDElParam",
- "address": "0x5c596c"
- },
- {
- "name": "GetScrollInfo",
- "address": "0x5c5970"
- },
- {
- "name": "RegisterClipboardFormatA",
- "address": "0x5c5974"
- },
- {
- "name": "GetSystemMetrics",
- "address": "0x5c5978"
- },
- {
- "name": "GetClientRect",
- "address": "0x5c597c"
- },
- {
- "name": "GetIconInfo",
- "address": "0x5c5980"
- },
- {
- "name": "GetDoubleClickTime",
- "address": "0x5c5984"
- },
- {
- "name": "GetDCEx",
- "address": "0x5c5988"
- },
- {
- "name": "CopyIcon",
- "address": "0x5c598c"
- },
- {
- "name": "EmptyClipboard",
- "address": "0x5c5990"
- },
- {
- "name": "CloseClipboard",
- "address": "0x5c5994"
- },
- {
- "name": "SetClipboardData",
- "address": "0x5c5998"
- },
- {
- "name": "LoadImageA",
- "address": "0x5c599c"
- },
- {
- "name": "CopyImage",
- "address": "0x5c59a0"
- },
- {
- "name": "OpenClipboard",
- "address": "0x5c59a4"
- },
- {
- "name": "GetMenuDefaultItem",
- "address": "0x5c59a8"
- },
- {
- "name": "GetUpdateRect",
- "address": "0x5c59ac"
- },
- {
- "name": "FrameRect",
- "address": "0x5c59b0"
- },
- {
- "name": "SendNotifyMessageA",
- "address": "0x5c59b4"
- },
- {
- "name": "IsClipboardFormatAvailable",
- "address": "0x5c59b8"
- },
- {
- "name": "SetMenuDefaultItem",
- "address": "0x5c59bc"
- },
- {
- "name": "CreateMenu",
- "address": "0x5c59c0"
- },
- {
- "name": "InSendMessage",
- "address": "0x5c59c4"
- },
- {
- "name": "IsMenu",
- "address": "0x5c59c8"
- },
- {
- "name": "UpdateLayeredWindow",
- "address": "0x5c59cc"
- },
- {
- "name": "EnableScrollBar",
- "address": "0x5c59d0"
- },
- {
- "name": "TranslateMDISysAccel",
- "address": "0x5c59d4"
- },
- {
- "name": "DrawMenuBar",
- "address": "0x5c59d8"
- },
- {
- "name": "DefMDIChildProcA",
- "address": "0x5c59dc"
- },
- {
- "name": "DefFrameProcA",
- "address": "0x5c59e0"
- },
- {
- "name": "SetCursorPos",
- "address": "0x5c59e4"
- },
- {
- "name": "CreateAcceleratorTableA",
- "address": "0x5c59e8"
- },
- {
- "name": "GetKeyboardState",
- "address": "0x5c59ec"
- },
- {
- "name": "GetKeyboardLayout",
- "address": "0x5c59f0"
- },
- {
- "name": "ToAsciiEx",
- "address": "0x5c59f4"
- },
- {
- "name": "DrawFocusRect",
- "address": "0x5c59f8"
- },
- {
- "name": "DrawFrameControl",
- "address": "0x5c59fc"
- },
- {
- "name": "DrawEdge",
- "address": "0x5c5a00"
- },
- {
- "name": "DrawIconEx",
- "address": "0x5c5a04"
- },
- {
- "name": "DrawStateA",
- "address": "0x5c5a08"
- },
- {
- "name": "SetClassLongA",
- "address": "0x5c5a0c"
- },
- {
- "name": "GetAsyncKeyState",
- "address": "0x5c5a10"
- },
- {
- "name": "NotifyWinEvent",
- "address": "0x5c5a14"
- },
- {
- "name": "DestroyAcceleratorTable",
- "address": "0x5c5a18"
- },
- {
- "name": "RedrawWindow",
- "address": "0x5c5a1c"
- },
- {
- "name": "SetWindowRgn",
- "address": "0x5c5a20"
- },
- {
- "name": "IsZoomed",
- "address": "0x5c5a24"
- },
- {
- "name": "RegisterClassA",
- "address": "0x5c5a28"
- },
- {
- "name": "CharUpperBuffA",
- "address": "0x5c5a2c"
- }
- ],
- "dll": "USER32.dll"
- },
- {
- "imports": [
- {
- "name": "SetMapperFlags",
- "address": "0x5c5070"
- },
- {
- "name": "SetArcDirection",
- "address": "0x5c5074"
- },
- {
- "name": "SetColorAdjustment",
- "address": "0x5c5078"
- },
- {
- "name": "DeleteObject",
- "address": "0x5c507c"
- },
- {
- "name": "SelectClipRgn",
- "address": "0x5c5080"
- },
- {
- "name": "GetClipRgn",
- "address": "0x5c5084"
- },
- {
- "name": "CreateRectRgn",
- "address": "0x5c5088"
- },
- {
- "name": "SelectClipPath",
- "address": "0x5c508c"
- },
- {
- "name": "GetViewportExtEx",
- "address": "0x5c5090"
- },
- {
- "name": "GetWindowExtEx",
- "address": "0x5c5094"
- },
- {
- "name": "BitBlt",
- "address": "0x5c5098"
- },
- {
- "name": "GetPixel",
- "address": "0x5c509c"
- },
- {
- "name": "StartDocA",
- "address": "0x5c50a0"
- },
- {
- "name": "PtVisible",
- "address": "0x5c50a4"
- },
- {
- "name": "RectVisible",
- "address": "0x5c50a8"
- },
- {
- "name": "TextOutA",
- "address": "0x5c50ac"
- },
- {
- "name": "ExtTextOutA",
- "address": "0x5c50b0"
- },
- {
- "name": "Escape",
- "address": "0x5c50b4"
- },
- {
- "name": "SelectObject",
- "address": "0x5c50b8"
- },
- {
- "name": "SetViewportOrgEx",
- "address": "0x5c50bc"
- },
- {
- "name": "OffsetViewportOrgEx",
- "address": "0x5c50c0"
- },
- {
- "name": "SetViewportExtEx",
- "address": "0x5c50c4"
- },
- {
- "name": "ScaleViewportExtEx",
- "address": "0x5c50c8"
- },
- {
- "name": "SetWindowOrgEx",
- "address": "0x5c50cc"
- },
- {
- "name": "OffsetWindowOrgEx",
- "address": "0x5c50d0"
- },
- {
- "name": "SetWindowExtEx",
- "address": "0x5c50d4"
- },
- {
- "name": "ScaleWindowExtEx",
- "address": "0x5c50d8"
- },
- {
- "name": "GetCurrentPositionEx",
- "address": "0x5c50dc"
- },
- {
- "name": "ArcTo",
- "address": "0x5c50e0"
- },
- {
- "name": "PolyDraw",
- "address": "0x5c50e4"
- },
- {
- "name": "PolylineTo",
- "address": "0x5c50e8"
- },
- {
- "name": "PolyBezierTo",
- "address": "0x5c50ec"
- },
- {
- "name": "ExtSelectClipRgn",
- "address": "0x5c50f0"
- },
- {
- "name": "DeleteDC",
- "address": "0x5c50f4"
- },
- {
- "name": "CreateDIBPatternBrushPt",
- "address": "0x5c50f8"
- },
- {
- "name": "CreatePatternBrush",
- "address": "0x5c50fc"
- },
- {
- "name": "CreateCompatibleDC",
- "address": "0x5c5100"
- },
- {
- "name": "GetStockObject",
- "address": "0x5c5104"
- },
- {
- "name": "SelectPalette",
- "address": "0x5c5108"
- },
- {
- "name": "PlayMetaFileRecord",
- "address": "0x5c510c"
- },
- {
- "name": "GetObjectType",
- "address": "0x5c5110"
- },
- {
- "name": "EnumMetaFile",
- "address": "0x5c5114"
- },
- {
- "name": "PlayMetaFile",
- "address": "0x5c5118"
- },
- {
- "name": "CreatePen",
- "address": "0x5c511c"
- },
- {
- "name": "ExtCreatePen",
- "address": "0x5c5120"
- },
- {
- "name": "CreateSolidBrush",
- "address": "0x5c5124"
- },
- {
- "name": "CreateHatchBrush",
- "address": "0x5c5128"
- },
- {
- "name": "GetBkColor",
- "address": "0x5c512c"
- },
- {
- "name": "GetTextColor",
- "address": "0x5c5130"
- },
- {
- "name": "GetRgnBox",
- "address": "0x5c5134"
- },
- {
- "name": "GetTextExtentPoint32A",
- "address": "0x5c5138"
- },
- {
- "name": "GetTextMetricsA",
- "address": "0x5c513c"
- },
- {
- "name": "CreateFontIndirectA",
- "address": "0x5c5140"
- },
- {
- "name": "SetRectRgn",
- "address": "0x5c5144"
- },
- {
- "name": "CombineRgn",
- "address": "0x5c5148"
- },
- {
- "name": "SetTextCharacterExtra",
- "address": "0x5c514c"
- },
- {
- "name": "DPtoLP",
- "address": "0x5c5150"
- },
- {
- "name": "CreateCompatibleBitmap",
- "address": "0x5c5154"
- },
- {
- "name": "GetCharWidthA",
- "address": "0x5c5158"
- },
- {
- "name": "CreateFontA",
- "address": "0x5c515c"
- },
- {
- "name": "StretchDIBits",
- "address": "0x5c5160"
- },
- {
- "name": "CreateDIBitmap",
- "address": "0x5c5164"
- },
- {
- "name": "EnumFontFamiliesA",
- "address": "0x5c5168"
- },
- {
- "name": "GetTextCharsetInfo",
- "address": "0x5c516c"
- },
- {
- "name": "CreateRoundRectRgn",
- "address": "0x5c5170"
- },
- {
- "name": "CreatePolygonRgn",
- "address": "0x5c5174"
- },
- {
- "name": "CreateDIBSection",
- "address": "0x5c5178"
- },
- {
- "name": "CreateEllipticRgn",
- "address": "0x5c517c"
- },
- {
- "name": "Polyline",
- "address": "0x5c5180"
- },
- {
- "name": "Ellipse",
- "address": "0x5c5184"
- },
- {
- "name": "Polygon",
- "address": "0x5c5188"
- },
- {
- "name": "OffsetRgn",
- "address": "0x5c518c"
- },
- {
- "name": "SetDIBColorTable",
- "address": "0x5c5190"
- },
- {
- "name": "GetDIBits",
- "address": "0x5c5194"
- },
- {
- "name": "RealizePalette",
- "address": "0x5c5198"
- },
- {
- "name": "StretchBlt",
- "address": "0x5c519c"
- },
- {
- "name": "SetPixel",
- "address": "0x5c51a0"
- },
- {
- "name": "RoundRect",
- "address": "0x5c51a4"
- },
- {
- "name": "Rectangle",
- "address": "0x5c51a8"
- },
- {
- "name": "CreatePalette",
- "address": "0x5c51ac"
- },
- {
- "name": "GetPaletteEntries",
- "address": "0x5c51b0"
- },
- {
- "name": "GetWindowOrgEx",
- "address": "0x5c51b4"
- },
- {
- "name": "GetViewportOrgEx",
- "address": "0x5c51b8"
- },
- {
- "name": "LPtoDP",
- "address": "0x5c51bc"
- },
- {
- "name": "PtInRegion",
- "address": "0x5c51c0"
- },
- {
- "name": "FillRgn",
- "address": "0x5c51c4"
- },
- {
- "name": "FrameRgn",
- "address": "0x5c51c8"
- },
- {
- "name": "GetBoundsRect",
- "address": "0x5c51cc"
- },
- {
- "name": "ExtFloodFill",
- "address": "0x5c51d0"
- },
- {
- "name": "SetPaletteEntries",
- "address": "0x5c51d4"
- },
- {
- "name": "GetNearestPaletteIndex",
- "address": "0x5c51d8"
- },
- {
- "name": "GetSystemPaletteEntries",
- "address": "0x5c51dc"
- },
- {
- "name": "EnumFontFamiliesExA",
- "address": "0x5c51e0"
- },
- {
- "name": "StartPage",
- "address": "0x5c51e4"
- },
- {
- "name": "EndPage",
- "address": "0x5c51e8"
- },
- {
- "name": "SetAbortProc",
- "address": "0x5c51ec"
- },
- {
- "name": "AbortDoc",
- "address": "0x5c51f0"
- },
- {
- "name": "EndDoc",
- "address": "0x5c51f4"
- },
- {
- "name": "GetNearestColor",
- "address": "0x5c51f8"
- },
- {
- "name": "GetBkMode",
- "address": "0x5c51fc"
- },
- {
- "name": "GetPolyFillMode",
- "address": "0x5c5200"
- },
- {
- "name": "GetROP2",
- "address": "0x5c5204"
- },
- {
- "name": "GetStretchBltMode",
- "address": "0x5c5208"
- },
- {
- "name": "GetTextAlign",
- "address": "0x5c520c"
- },
- {
- "name": "GetTextFaceA",
- "address": "0x5c5210"
- },
- {
- "name": "GetTextExtentPointA",
- "address": "0x5c5214"
- },
- {
- "name": "CreateMetaFileA",
- "address": "0x5c5218"
- },
- {
- "name": "CloseMetaFile",
- "address": "0x5c521c"
- },
- {
- "name": "DeleteMetaFile",
- "address": "0x5c5220"
- },
- {
- "name": "SetPixelV",
- "address": "0x5c5224"
- },
- {
- "name": "SetTextAlign",
- "address": "0x5c5228"
- },
- {
- "name": "SetTextJustification",
- "address": "0x5c522c"
- },
- {
- "name": "MoveToEx",
- "address": "0x5c5230"
- },
- {
- "name": "LineTo",
- "address": "0x5c5234"
- },
- {
- "name": "OffsetClipRgn",
- "address": "0x5c5238"
- },
- {
- "name": "IntersectClipRect",
- "address": "0x5c523c"
- },
- {
- "name": "ExcludeClipRect",
- "address": "0x5c5240"
- },
- {
- "name": "SetMapMode",
- "address": "0x5c5244"
- },
- {
- "name": "ModifyWorldTransform",
- "address": "0x5c5248"
- },
- {
- "name": "SetWorldTransform",
- "address": "0x5c524c"
- },
- {
- "name": "SetGraphicsMode",
- "address": "0x5c5250"
- },
- {
- "name": "SetStretchBltMode",
- "address": "0x5c5254"
- },
- {
- "name": "SetROP2",
- "address": "0x5c5258"
- },
- {
- "name": "SetPolyFillMode",
- "address": "0x5c525c"
- },
- {
- "name": "SetBkMode",
- "address": "0x5c5260"
- },
- {
- "name": "RestoreDC",
- "address": "0x5c5264"
- },
- {
- "name": "SaveDC",
- "address": "0x5c5268"
- },
- {
- "name": "GetObjectA",
- "address": "0x5c526c"
- },
- {
- "name": "SetBkColor",
- "address": "0x5c5270"
- },
- {
- "name": "SetTextColor",
- "address": "0x5c5274"
- },
- {
- "name": "GetClipBox",
- "address": "0x5c5278"
- },
- {
- "name": "GetDCOrgEx",
- "address": "0x5c527c"
- },
- {
- "name": "CreateDCA",
- "address": "0x5c5280"
- },
- {
- "name": "CopyMetaFileA",
- "address": "0x5c5284"
- },
- {
- "name": "GetDeviceCaps",
- "address": "0x5c5288"
- },
- {
- "name": "CreateBitmap",
- "address": "0x5c528c"
- },
- {
- "name": "GetMapMode",
- "address": "0x5c5290"
- },
- {
- "name": "CreateRectRgnIndirect",
- "address": "0x5c5294"
- },
- {
- "name": "PatBlt",
- "address": "0x5c5298"
- }
- ],
- "dll": "GDI32.dll"
- },
- {
- "imports": [
- {
- "name": "AlphaBlend",
- "address": "0x5c559c"
- },
- {
- "name": "TransparentBlt",
- "address": "0x5c55a0"
- }
- ],
- "dll": "MSIMG32.dll"
- },
- {
- "imports": [
- {
- "name": "GetFileTitleA",
- "address": "0x5c5068"
- }
- ],
- "dll": "COMDLG32.dll"
- },
- {
- "imports": [
- {
- "name": "GetJobA",
- "address": "0x5c5adc"
- },
- {
- "name": "DocumentPropertiesA",
- "address": "0x5c5ae0"
- },
- {
- "name": "ClosePrinter",
- "address": "0x5c5ae4"
- },
- {
- "name": "OpenPrinterA",
- "address": "0x5c5ae8"
- }
- ],
- "dll": "WINSPOOL.DRV"
- },
- {
- "imports": [
- {
- "name": "RegEnumKeyExA",
- "address": "0x5c5000"
- },
- {
- "name": "RegQueryValueExA",
- "address": "0x5c5004"
- },
- {
- "name": "RegOpenKeyExA",
- "address": "0x5c5008"
- },
- {
- "name": "RegDeleteKeyA",
- "address": "0x5c500c"
- },
- {
- "name": "RegEnumKeyA",
- "address": "0x5c5010"
- },
- {
- "name": "RegOpenKeyA",
- "address": "0x5c5014"
- },
- {
- "name": "RegQueryValueA",
- "address": "0x5c5018"
- },
- {
- "name": "RegSetValueA",
- "address": "0x5c501c"
- },
- {
- "name": "RegCreateKeyExA",
- "address": "0x5c5020"
- },
- {
- "name": "GetFileSecurityA",
- "address": "0x5c5024"
- },
- {
- "name": "SetFileSecurityA",
- "address": "0x5c5028"
- },
- {
- "name": "RegCloseKey",
- "address": "0x5c502c"
- },
- {
- "name": "RegCreateKeyA",
- "address": "0x5c5030"
- },
- {
- "name": "RegDeleteValueA",
- "address": "0x5c5034"
- },
- {
- "name": "RegSetValueExA",
- "address": "0x5c5038"
- }
- ],
- "dll": "ADVAPI32.dll"
- },
- {
- "imports": [
- {
- "name": "ShellExecuteA",
- "address": "0x5c5654"
- },
- {
- "name": "SHAppBarMessage",
- "address": "0x5c5658"
- },
- {
- "name": "DragQueryFileA",
- "address": "0x5c565c"
- },
- {
- "name": "DragFinish",
- "address": "0x5c5660"
- },
- {
- "name": "ExtractIconA",
- "address": "0x5c5664"
- },
- {
- "name": "SHGetFileInfoA",
- "address": "0x5c5668"
- },
- {
- "name": "SHGetPathFromIDListA",
- "address": "0x5c566c"
- },
- {
- "name": "SHBrowseForFolderA",
- "address": "0x5c5670"
- },
- {
- "name": "SHGetSpecialFolderLocation",
- "address": "0x5c5674"
- },
- {
- "name": "SHGetDesktopFolder",
- "address": "0x5c5678"
- },
- {
- "name": "SHGetMalloc",
- "address": "0x5c567c"
- }
- ],
- "dll": "SHELL32.dll"
- },
- {
- "imports": [
- {
- "name": "ImageList_GetIconSize",
- "address": "0x5c5040"
- },
- {
- "name": "ImageList_ReplaceIcon",
- "address": "0x5c5044"
- },
- {
- "name": "ImageList_GetIcon",
- "address": "0x5c5048"
- },
- {
- "name": "ImageList_Create",
- "address": "0x5c504c"
- },
- {
- "name": "ImageList_GetImageCount",
- "address": "0x5c5050"
- },
- {
- "name": "ImageList_Destroy",
- "address": "0x5c5054"
- },
- {
- "name": "ImageList_AddMasked",
- "address": "0x5c5058"
- },
- {
- "name": "ImageList_Remove",
- "address": "0x5c505c"
- },
- {
- "name": "ImageList_DrawEx",
- "address": "0x5c5060"
- }
- ],
- "dll": "COMCTL32.dll"
- },
- {
- "imports": [
- {
- "name": "UrlUnescapeA",
- "address": "0x5c5684"
- },
- {
- "name": "PathIsUNCA",
- "address": "0x5c5688"
- },
- {
- "name": "PathStripToRootA",
- "address": "0x5c568c"
- },
- {
- "name": "PathRemoveExtensionA",
- "address": "0x5c5690"
- },
- {
- "name": "PathFindExtensionA",
- "address": "0x5c5694"
- },
- {
- "name": "PathFindFileNameA",
- "address": "0x5c5698"
- },
- {
- "name": "PathRemoveFileSpecW",
- "address": "0x5c569c"
- }
- ],
- "dll": "SHLWAPI.dll"
- },
- {
- "imports": [
- {
- "name": null,
- "address": "0x5c5c74"
- }
- ],
- "dll": "oledlg.dll"
- },
- {
- "imports": [
- {
- "name": "WriteFmtUserTypeStg",
- "address": "0x5c5b48"
- },
- {
- "name": "SetConvertStg",
- "address": "0x5c5b4c"
- },
- {
- "name": "CoInitializeEx",
- "address": "0x5c5b50"
- },
- {
- "name": "CLSIDFromString",
- "address": "0x5c5b54"
- },
- {
- "name": "CLSIDFromProgID",
- "address": "0x5c5b58"
- },
- {
- "name": "CoRegisterClassObject",
- "address": "0x5c5b5c"
- },
- {
- "name": "CoRevokeClassObject",
- "address": "0x5c5b60"
- },
- {
- "name": "OleSetClipboard",
- "address": "0x5c5b64"
- },
- {
- "name": "OleIsCurrentClipboard",
- "address": "0x5c5b68"
- },
- {
- "name": "OleFlushClipboard",
- "address": "0x5c5b6c"
- },
- {
- "name": "CoRegisterMessageFilter",
- "address": "0x5c5b70"
- },
- {
- "name": "CreateStreamOnHGlobal",
- "address": "0x5c5b74"
- },
- {
- "name": "StgCreateDocfile",
- "address": "0x5c5b78"
- },
- {
- "name": "CreateFileMoniker",
- "address": "0x5c5b7c"
- },
- {
- "name": "StgOpenStorage",
- "address": "0x5c5b80"
- },
- {
- "name": "StgIsStorageFile",
- "address": "0x5c5b84"
- },
- {
- "name": "OleCreateMenuDescriptor",
- "address": "0x5c5b88"
- },
- {
- "name": "OleDestroyMenuDescriptor",
- "address": "0x5c5b8c"
- },
- {
- "name": "OleTranslateAccelerator",
- "address": "0x5c5b90"
- },
- {
- "name": "IsAccelerator",
- "address": "0x5c5b94"
- },
- {
- "name": "CreateDataAdviseHolder",
- "address": "0x5c5b98"
- },
- {
- "name": "WriteClassStg",
- "address": "0x5c5b9c"
- },
- {
- "name": "CoGetMalloc",
- "address": "0x5c5ba0"
- },
- {
- "name": "GetRunningObjectTable",
- "address": "0x5c5ba4"
- },
- {
- "name": "OleIsRunning",
- "address": "0x5c5ba8"
- },
- {
- "name": "OleQueryLinkFromData",
- "address": "0x5c5bac"
- },
- {
- "name": "OleQueryCreateFromData",
- "address": "0x5c5bb0"
- },
- {
- "name": "RevokeDragDrop",
- "address": "0x5c5bb4"
- },
- {
- "name": "CoLockObjectExternal",
- "address": "0x5c5bb8"
- },
- {
- "name": "RegisterDragDrop",
- "address": "0x5c5bbc"
- },
- {
- "name": "OleGetClipboard",
- "address": "0x5c5bc0"
- },
- {
- "name": "OleRegGetMiscStatus",
- "address": "0x5c5bc4"
- },
- {
- "name": "OleRegEnumVerbs",
- "address": "0x5c5bc8"
- },
- {
- "name": "CreateGenericComposite",
- "address": "0x5c5bcc"
- },
- {
- "name": "CreateItemMoniker",
- "address": "0x5c5bd0"
- },
- {
- "name": "OleGetIconOfClass",
- "address": "0x5c5bd4"
- },
- {
- "name": "OleCreateLinkToFile",
- "address": "0x5c5bd8"
- },
- {
- "name": "OleCreateFromFile",
- "address": "0x5c5bdc"
- },
- {
- "name": "OleSetContainedObject",
- "address": "0x5c5be0"
- },
- {
- "name": "GetHGlobalFromILockBytes",
- "address": "0x5c5be4"
- },
- {
- "name": "OleLoad",
- "address": "0x5c5be8"
- },
- {
- "name": "OleCreate",
- "address": "0x5c5bec"
- },
- {
- "name": "OleCreateStaticFromData",
- "address": "0x5c5bf0"
- },
- {
- "name": "OleCreateLinkFromData",
- "address": "0x5c5bf4"
- },
- {
- "name": "OleRegGetUserType",
- "address": "0x5c5bf8"
- },
- {
- "name": "ReadFmtUserTypeStg",
- "address": "0x5c5bfc"
- },
- {
- "name": "ReadClassStg",
- "address": "0x5c5c00"
- },
- {
- "name": "StringFromCLSID",
- "address": "0x5c5c04"
- },
- {
- "name": "CoTreatAsClass",
- "address": "0x5c5c08"
- },
- {
- "name": "CreateBindCtx",
- "address": "0x5c5c0c"
- },
- {
- "name": "ReleaseStgMedium",
- "address": "0x5c5c10"
- },
- {
- "name": "CoTaskMemAlloc",
- "address": "0x5c5c14"
- },
- {
- "name": "OleDuplicateData",
- "address": "0x5c5c18"
- },
- {
- "name": "CoGetClassObject",
- "address": "0x5c5c1c"
- },
- {
- "name": "StgOpenStorageOnILockBytes",
- "address": "0x5c5c20"
- },
- {
- "name": "StgCreateDocfileOnILockBytes",
- "address": "0x5c5c24"
- },
- {
- "name": "CreateILockBytesOnHGlobal",
- "address": "0x5c5c28"
- },
- {
- "name": "StringFromGUID2",
- "address": "0x5c5c2c"
- },
- {
- "name": "CoDisconnectObject",
- "address": "0x5c5c30"
- },
- {
- "name": "CoCreateInstance",
- "address": "0x5c5c34"
- },
- {
- "name": "OleRun",
- "address": "0x5c5c38"
- },
- {
- "name": "OleUninitialize",
- "address": "0x5c5c3c"
- },
- {
- "name": "CoFreeUnusedLibraries",
- "address": "0x5c5c40"
- },
- {
- "name": "OleInitialize",
- "address": "0x5c5c44"
- },
- {
- "name": "CreateOleAdviseHolder",
- "address": "0x5c5c48"
- },
- {
- "name": "CoUninitialize",
- "address": "0x5c5c4c"
- },
- {
- "name": "OleCreateFromData",
- "address": "0x5c5c50"
- },
- {
- "name": "OleSaveToStream",
- "address": "0x5c5c54"
- },
- {
- "name": "WriteClassStm",
- "address": "0x5c5c58"
- },
- {
- "name": "OleSave",
- "address": "0x5c5c5c"
- },
- {
- "name": "DoDragDrop",
- "address": "0x5c5c60"
- },
- {
- "name": "OleSetMenuDescriptor",
- "address": "0x5c5c64"
- },
- {
- "name": "CoTaskMemFree",
- "address": "0x5c5c68"
- },
- {
- "name": "OleLockRunning",
- "address": "0x5c5c6c"
- }
- ],
- "dll": "ole32.dll"
- },
- {
- "imports": [
- {
- "name": "SysAllocStringByteLen",
- "address": "0x5c55a8"
- },
- {
- "name": "SysStringByteLen",
- "address": "0x5c55ac"
- },
- {
- "name": "VariantClear",
- "address": "0x5c55b0"
- },
- {
- "name": "VariantChangeType",
- "address": "0x5c55b4"
- },
- {
- "name": "VariantInit",
- "address": "0x5c55b8"
- },
- {
- "name": "OleCreateFontIndirect",
- "address": "0x5c55bc"
- },
- {
- "name": "VariantTimeToSystemTime",
- "address": "0x5c55c0"
- },
- {
- "name": "SystemTimeToVariantTime",
- "address": "0x5c55c4"
- },
- {
- "name": "SafeArrayDestroy",
- "address": "0x5c55c8"
- },
- {
- "name": "SysAllocString",
- "address": "0x5c55cc"
- },
- {
- "name": "RegisterTypeLib",
- "address": "0x5c55d0"
- },
- {
- "name": "LoadTypeLib",
- "address": "0x5c55d4"
- },
- {
- "name": "LoadRegTypeLib",
- "address": "0x5c55d8"
- },
- {
- "name": "SafeArrayUnaccessData",
- "address": "0x5c55dc"
- },
- {
- "name": "SafeArrayAccessData",
- "address": "0x5c55e0"
- },
- {
- "name": "SafeArrayGetUBound",
- "address": "0x5c55e4"
- },
- {
- "name": "SafeArrayGetLBound",
- "address": "0x5c55e8"
- },
- {
- "name": "SafeArrayGetElemsize",
- "address": "0x5c55ec"
- },
- {
- "name": "SafeArrayGetDim",
- "address": "0x5c55f0"
- },
- {
- "name": "SysStringLen",
- "address": "0x5c55f4"
- },
- {
- "name": "SafeArrayRedim",
- "address": "0x5c55f8"
- },
- {
- "name": "VariantCopy",
- "address": "0x5c55fc"
- },
- {
- "name": "SafeArrayAllocData",
- "address": "0x5c5600"
- },
- {
- "name": "SafeArrayAllocDescriptor",
- "address": "0x5c5604"
- },
- {
- "name": "SafeArrayCopy",
- "address": "0x5c5608"
- },
- {
- "name": "SafeArrayGetElement",
- "address": "0x5c560c"
- },
- {
- "name": "SafeArrayPtrOfIndex",
- "address": "0x5c5610"
- },
- {
- "name": "SafeArrayPutElement",
- "address": "0x5c5614"
- },
- {
- "name": "SafeArrayLock",
- "address": "0x5c5618"
- },
- {
- "name": "SafeArrayUnlock",
- "address": "0x5c561c"
- },
- {
- "name": "SafeArrayDestroyData",
- "address": "0x5c5620"
- },
- {
- "name": "SafeArrayDestroyDescriptor",
- "address": "0x5c5624"
- },
- {
- "name": "SysReAllocStringLen",
- "address": "0x5c5628"
- },
- {
- "name": "VarDateFromStr",
- "address": "0x5c562c"
- },
- {
- "name": "VarBstrFromCy",
- "address": "0x5c5630"
- },
- {
- "name": "VarBstrFromDec",
- "address": "0x5c5634"
- },
- {
- "name": "VarDecFromStr",
- "address": "0x5c5638"
- },
- {
- "name": "VarCyFromStr",
- "address": "0x5c563c"
- },
- {
- "name": "VarBstrFromDate",
- "address": "0x5c5640"
- },
- {
- "name": "SysAllocStringLen",
- "address": "0x5c5644"
- },
- {
- "name": "SafeArrayCreate",
- "address": "0x5c5648"
- },
- {
- "name": "SysFreeString",
- "address": "0x5c564c"
- }
- ],
- "dll": "OLEAUT32.dll"
- },
- {
- "imports": [
- {
- "name": "InternetCanonicalizeUrlA",
- "address": "0x5c5a34"
- },
- {
- "name": "InternetQueryOptionA",
- "address": "0x5c5a38"
- },
- {
- "name": "InternetSetOptionExA",
- "address": "0x5c5a3c"
- },
- {
- "name": "InternetSetCookieA",
- "address": "0x5c5a40"
- },
- {
- "name": "InternetGetCookieA",
- "address": "0x5c5a44"
- },
- {
- "name": "InternetQueryDataAvailable",
- "address": "0x5c5a48"
- },
- {
- "name": "HttpOpenRequestA",
- "address": "0x5c5a4c"
- },
- {
- "name": "InternetOpenUrlA",
- "address": "0x5c5a50"
- },
- {
- "name": "GopherOpenFileA",
- "address": "0x5c5a54"
- },
- {
- "name": "InternetConnectA",
- "address": "0x5c5a58"
- },
- {
- "name": "FtpFindFirstFileA",
- "address": "0x5c5a5c"
- },
- {
- "name": "GopherCreateLocatorA",
- "address": "0x5c5a60"
- },
- {
- "name": "FtpCommandA",
- "address": "0x5c5a64"
- },
- {
- "name": "FtpOpenFileA",
- "address": "0x5c5a68"
- },
- {
- "name": "GopherGetAttributeA",
- "address": "0x5c5a6c"
- },
- {
- "name": "HttpSendRequestExA",
- "address": "0x5c5a70"
- },
- {
- "name": "HttpEndRequestA",
- "address": "0x5c5a74"
- },
- {
- "name": "HttpSendRequestA",
- "address": "0x5c5a78"
- },
- {
- "name": "InternetReadFile",
- "address": "0x5c5a7c"
- },
- {
- "name": "InternetWriteFile",
- "address": "0x5c5a80"
- },
- {
- "name": "InternetSetFilePointer",
- "address": "0x5c5a84"
- },
- {
- "name": "InternetSetStatusCallback",
- "address": "0x5c5a88"
- },
- {
- "name": "InternetOpenA",
- "address": "0x5c5a8c"
- },
- {
- "name": "InternetGetLastResponseInfoA",
- "address": "0x5c5a90"
- },
- {
- "name": "GopherFindFirstFileA",
- "address": "0x5c5a94"
- },
- {
- "name": "InternetCloseHandle",
- "address": "0x5c5a98"
- },
- {
- "name": "InternetFindNextFileA",
- "address": "0x5c5a9c"
- },
- {
- "name": "HttpQueryInfoA",
- "address": "0x5c5aa0"
- },
- {
- "name": "HttpAddRequestHeadersA",
- "address": "0x5c5aa4"
- },
- {
- "name": "InternetErrorDlg",
- "address": "0x5c5aa8"
- },
- {
- "name": "FtpGetFileA",
- "address": "0x5c5aac"
- },
- {
- "name": "FtpPutFileA",
- "address": "0x5c5ab0"
- },
- {
- "name": "FtpGetCurrentDirectoryA",
- "address": "0x5c5ab4"
- },
- {
- "name": "FtpSetCurrentDirectoryA",
- "address": "0x5c5ab8"
- },
- {
- "name": "FtpRemoveDirectoryA",
- "address": "0x5c5abc"
- },
- {
- "name": "FtpCreateDirectoryA",
- "address": "0x5c5ac0"
- },
- {
- "name": "FtpRenameFileA",
- "address": "0x5c5ac4"
- },
- {
- "name": "FtpDeleteFileA",
- "address": "0x5c5ac8"
- },
- {
- "name": "InternetCrackUrlA",
- "address": "0x5c5acc"
- }
- ],
- "dll": "WININET.dll"
- },
- {
- "imports": [
- {
- "name": "GdipDrawImageI",
- "address": "0x5c5af0"
- },
- {
- "name": "GdipGetImageGraphicsContext",
- "address": "0x5c5af4"
- },
- {
- "name": "GdiplusShutdown",
- "address": "0x5c5af8"
- },
- {
- "name": "GdiplusStartup",
- "address": "0x5c5afc"
- },
- {
- "name": "GdipBitmapUnlockBits",
- "address": "0x5c5b00"
- },
- {
- "name": "GdipBitmapLockBits",
- "address": "0x5c5b04"
- },
- {
- "name": "GdipCreateBitmapFromScan0",
- "address": "0x5c5b08"
- },
- {
- "name": "GdipCreateBitmapFromStreamICM",
- "address": "0x5c5b0c"
- },
- {
- "name": "GdipCreateBitmapFromStream",
- "address": "0x5c5b10"
- },
- {
- "name": "GdipCreateBitmapFromFileICM",
- "address": "0x5c5b14"
- },
- {
- "name": "GdipCreateBitmapFromFile",
- "address": "0x5c5b18"
- },
- {
- "name": "GdipGetImagePalette",
- "address": "0x5c5b1c"
- },
- {
- "name": "GdipGetImagePaletteSize",
- "address": "0x5c5b20"
- },
- {
- "name": "GdipGetImagePixelFormat",
- "address": "0x5c5b24"
- },
- {
- "name": "GdipGetImageHeight",
- "address": "0x5c5b28"
- },
- {
- "name": "GdipGetImageWidth",
- "address": "0x5c5b2c"
- },
- {
- "name": "GdipDisposeImage",
- "address": "0x5c5b30"
- },
- {
- "name": "GdipDeleteGraphics",
- "address": "0x5c5b34"
- },
- {
- "name": "GdipAlloc",
- "address": "0x5c5b38"
- },
- {
- "name": "GdipFree",
- "address": "0x5c5b3c"
- },
- {
- "name": "GdipCloneImage",
- "address": "0x5c5b40"
- }
- ],
- "dll": "gdiplus.dll"
- },
- {
- "imports": [
- {
- "name": "ImmReleaseContext",
- "address": "0x5c52a0"
- },
- {
- "name": "ImmGetContext",
- "address": "0x5c52a4"
- },
- {
- "name": "ImmGetOpenStatus",
- "address": "0x5c52a8"
- }
- ],
- "dll": "IMM32.dll"
- },
- {
- "imports": [
- {
- "name": "PlaySoundA",
- "address": "0x5c5ad4"
- }
- ],
- "dll": "WINMM.dll"
- }
- ],
- "digital_signers": null,
- "exported_dll_name": null,
- "actual_checksum": "0x002469ee",
- "overlay": null,
- "imagebase": "0x00400000",
- "reported_checksum": "0x002469ee",
- "icon_hash": null,
- "entrypoint": "0x005786fc",
- "timestamp": "2011-06-12 13:46:15",
- "osversion": "5.0",
- "sections": [
- {
- "name": ".text",
- "characteristics": "IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ",
- "virtual_address": "0x00001000",
- "size_of_data": "0x001c3800",
- "entropy": "6.57",
- "raw_address": "0x00000400",
- "virtual_size": "0x001c3662",
- "characteristics_raw": "0x60000020"
- },
- {
- "name": ".rdata",
- "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
- "virtual_address": "0x001c5000",
- "size_of_data": "0x0006d200",
- "entropy": "5.32",
- "raw_address": "0x001c3c00",
- "virtual_size": "0x0006d12c",
- "characteristics_raw": "0x40000040"
- },
- {
- "name": ".data",
- "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
- "virtual_address": "0x00233000",
- "size_of_data": "0x00007800",
- "entropy": "4.87",
- "raw_address": "0x00230e00",
- "virtual_size": "0x00112b5c",
- "characteristics_raw": "0xc0000040"
- },
- {
- "name": ".rsrc",
- "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
- "virtual_address": "0x00346000",
- "size_of_data": "0x00003e00",
- "entropy": "4.70",
- "raw_address": "0x00238600",
- "virtual_size": "0x00003c0c",
- "characteristics_raw": "0x40000040"
- }
- ],
- "resources": [],
- "dirents": [
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x0022de7c",
- "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
- "size": "0x00000168"
- },
- {
- "virtual_address": "0x00346000",
- "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
- "size": "0x00003c0c"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x001c6030",
- "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
- "size": "0x0000001c"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_TLS",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00201680",
- "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
- "size": "0x00000040"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x001c5000",
- "name": "IMAGE_DIRECTORY_ENTRY_IAT",
- "size": "0x00000c7c"
- },
- {
- "virtual_address": "0x0022ddcc",
- "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
- "size": "0x00000040"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
- "size": "0x00000000"
- },
- {
- "virtual_address": "0x00000000",
- "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
- "size": "0x00000000"
- }
- ],
- "exports": [],
- "guest_signers": {},
- "imphash": "0fd1df61093ab8b9d1ad505dac7509f3",
- "icon_fuzzy": null,
- "icon": null,
- "pdbpath": "d:\\skymachine\\tianji code\\tianji tools\\book\\BookMaker\\Release\\BookMaker.pdb",
- "imported_dll_count": 17,
- "versioninfo": []
- }
- }
Add Comment
Please, Sign In to add comment