unins000_exe_2019-06-30_15_30.json

[*] MalFamily: ""

[*] MalScore: 1.3

[*] File Name: "unins000.exe"
[*] File Size: 2617681
[*] File Type: "PE32 executable (GUI) Intel 80386, for MS Windows"
[*] SHA256: "ad41e3e71e16629ad7a6073ea80245c5e696668e278a066ed37a8c841edf4c9f"
[*] MD5: "6247fce503457e2b87038810a99efaa2"
[*] SHA1: "04011f15d5d7b239d115d63571e542c8f95f758b"
[*] SHA512: "492b10491b647c4e8a86bc7b8502241f59f20d1e7d2ad5446e4e84a6fab7d3e83f77decdf87a0bd63708cb1a90ee981b86b6a17c45ca89e3868ede567dbe4bfa"
[*] CRC32: "67C3513B"
[*] SSDEEP: "49152:RdrGT9oY0SAQ4+YI1Qb1oWGxblxZa0o857vQ:RFGTv1QtGxHZabh"

[*] Process Execution: [
    "unins000.exe"
]

[*] Signatures Detected: [
    {
        "Description": "Creates RWX memory",
        "Details": []
    },
    {
        "Description": "Possible date expiration check, exits too soon after checking local time",
        "Details": [
            {
                "process": "unins000.exe, PID 1640"
            }
        ]
    },
    {
        "Description": "Reads data out of its own binary image",
        "Details": [
            {
                "self_read": "process: unins000.exe, pid: 1640, offset: 0x00000030, length: 0x00000004"
            },
            {
                "self_read": "process: unins000.exe, pid: 1640, offset: 0x00279814, length: 0x00000050"
            },
            {
                "self_read": "process: unins000.exe, pid: 1640, offset: 0x00279814, length: 0x0000593d"
            }
        ]
    }
]

[*] Started Service: []

[*] Executed Commands: []

[*] Mutexes: [
    "CicLoadWinStaWinSta0",
    "Local\\MSCTF.CtfMonitorInstMutexDefault1"
]

[*] Modified Files: []

[*] Deleted Files: []

[*] Modified Registry Keys: []

[*] Deleted Registry Keys: []

[*] DNS Communications: []

[*] Domains: []

[*] Network Communication - ICMP: []

[*] Network Communication - HTTP: []

[*] Network Communication - SMTP: []

[*] Network Communication - Hosts: []

[*] Network Communication - IRC: []

[*] Static Analysis: {
    "pe": {
        "peid_signatures": null,
        "imports": [
            {
                "imports": [
                    {
                        "name": "WNetEnumResourceW",
                        "address": "0x65c944"
                    },
                    {
                        "name": "WNetGetUniversalNameW",
                        "address": "0x65c948"
                    },
                    {
                        "name": "WNetGetConnectionW",
                        "address": "0x65c94c"
                    },
                    {
                        "name": "WNetCloseEnum",
                        "address": "0x65c950"
                    },
                    {
                        "name": "WNetOpenEnumW",
                        "address": "0x65c954"
                    }
                ],
                "dll": "mpr.dll"
            },
            {
                "imports": [
                    {
                        "name": "GetSaveFileNameW",
                        "address": "0x65c95c"
                    },
                    {
                        "name": "GetOpenFileNameW",
                        "address": "0x65c960"
                    }
                ],
                "dll": "comdlg32.dll"
            },
            {
                "imports": [
                    {
                        "name": "FlatSB_SetScrollInfo",
                        "address": "0x65c968"
                    },
                    {
                        "name": "InitCommonControls",
                        "address": "0x65c96c"
                    },
                    {
                        "name": "ImageList_DragMove",
                        "address": "0x65c970"
                    },
                    {
                        "name": "ImageList_Destroy",
                        "address": "0x65c974"
                    },
                    {
                        "name": "_TrackMouseEvent",
                        "address": "0x65c978"
                    },
                    {
                        "name": "ImageList_DragShowNolock",
                        "address": "0x65c97c"
                    },
                    {
                        "name": "ImageList_Add",
                        "address": "0x65c980"
                    },
                    {
                        "name": "FlatSB_SetScrollProp",
                        "address": "0x65c984"
                    },
                    {
                        "name": "ImageList_GetDragImage",
                        "address": "0x65c988"
                    },
                    {
                        "name": "ImageList_Create",
                        "address": "0x65c98c"
                    },
                    {
                        "name": "ImageList_EndDrag",
                        "address": "0x65c990"
                    },
                    {
                        "name": "ImageList_DrawEx",
                        "address": "0x65c994"
                    },
                    {
                        "name": "ImageList_SetImageCount",
                        "address": "0x65c998"
                    },
                    {
                        "name": "FlatSB_GetScrollPos",
                        "address": "0x65c99c"
                    },
                    {
                        "name": "FlatSB_SetScrollPos",
                        "address": "0x65c9a0"
                    },
                    {
                        "name": "InitializeFlatSB",
                        "address": "0x65c9a4"
                    },
                    {
                        "name": "FlatSB_GetScrollInfo",
                        "address": "0x65c9a8"
                    },
                    {
                        "name": "ImageList_Write",
                        "address": "0x65c9ac"
                    },
                    {
                        "name": "ImageList_SetBkColor",
                        "address": "0x65c9b0"
                    },
                    {
                        "name": "ImageList_GetBkColor",
                        "address": "0x65c9b4"
                    },
                    {
                        "name": "ImageList_BeginDrag",
                        "address": "0x65c9b8"
                    },
                    {
                        "name": "ImageList_GetIcon",
                        "address": "0x65c9bc"
                    },
                    {
                        "name": "ImageList_GetImageCount",
                        "address": "0x65c9c0"
                    },
                    {
                        "name": "ImageList_DragEnter",
                        "address": "0x65c9c4"
                    },
                    {
                        "name": "ImageList_GetIconSize",
                        "address": "0x65c9c8"
                    },
                    {
                        "name": "ImageList_SetIconSize",
                        "address": "0x65c9cc"
                    },
                    {
                        "name": "ImageList_Read",
                        "address": "0x65c9d0"
                    },
                    {
                        "name": "ImageList_DragLeave",
                        "address": "0x65c9d4"
                    },
                    {
                        "name": "ImageList_Draw",
                        "address": "0x65c9d8"
                    },
                    {
                        "name": "ImageList_Remove",
                        "address": "0x65c9dc"
                    }
                ],
                "dll": "comctl32.dll"
            },
            {
                "imports": [
                    {
                        "name": "SHBrowseForFolderW",
                        "address": "0x65c9e4"
                    },
                    {
                        "name": "ExtractIconW",
                        "address": "0x65c9e8"
                    },
                    {
                        "name": "SHGetMalloc",
                        "address": "0x65c9ec"
                    },
                    {
                        "name": "SHGetFileInfoW",
                        "address": "0x65c9f0"
                    },
                    {
                        "name": "SHChangeNotify",
                        "address": "0x65c9f4"
                    },
                    {
                        "name": "Shell_NotifyIconW",
                        "address": "0x65c9f8"
                    },
                    {
                        "name": "ShellExecuteW",
                        "address": "0x65c9fc"
                    },
                    {
                        "name": "SHGetPathFromIDListW",
                        "address": "0x65ca00"
                    },
                    {
                        "name": "ShellExecuteExW",
                        "address": "0x65ca04"
                    }
                ],
                "dll": "shell32.dll"
            },
            {
                "imports": [
                    {
                        "name": "CopyImage",
                        "address": "0x65ca0c"
                    },
                    {
                        "name": "CreateWindowExW",
                        "address": "0x65ca10"
                    },
                    {
                        "name": "GetMenuItemInfoW",
                        "address": "0x65ca14"
                    },
                    {
                        "name": "SetMenuItemInfoW",
                        "address": "0x65ca18"
                    },
                    {
                        "name": "DefFrameProcW",
                        "address": "0x65ca1c"
                    },
                    {
                        "name": "GetDCEx",
                        "address": "0x65ca20"
                    },
                    {
                        "name": "GetMessageW",
                        "address": "0x65ca24"
                    },
                    {
                        "name": "PeekMessageW",
                        "address": "0x65ca28"
                    },
                    {
                        "name": "MonitorFromWindow",
                        "address": "0x65ca2c"
                    },
                    {
                        "name": "GetDlgCtrlID",
                        "address": "0x65ca30"
                    },
                    {
                        "name": "ScrollWindowEx",
                        "address": "0x65ca34"
                    },
                    {
                        "name": "SetTimer",
                        "address": "0x65ca38"
                    },
                    {
                        "name": "WindowFromPoint",
                        "address": "0x65ca3c"
                    },
                    {
                        "name": "BeginPaint",
                        "address": "0x65ca40"
                    },
                    {
                        "name": "RegisterClipboardFormatW",
                        "address": "0x65ca44"
                    },
                    {
                        "name": "FrameRect",
                        "address": "0x65ca48"
                    },
                    {
                        "name": "MapVirtualKeyW",
                        "address": "0x65ca4c"
                    },
                    {
                        "name": "OffsetRect",
                        "address": "0x65ca50"
                    },
                    {
                        "name": "IsWindowUnicode",
                        "address": "0x65ca54"
                    },
                    {
                        "name": "RegisterWindowMessageW",
                        "address": "0x65ca58"
                    },
                    {
                        "name": "FillRect",
                        "address": "0x65ca5c"
                    },
                    {
                        "name": "GetMenuStringW",
                        "address": "0x65ca60"
                    },
                    {
                        "name": "DispatchMessageW",
                        "address": "0x65ca64"
                    },
                    {
                        "name": "SendMessageA",
                        "address": "0x65ca68"
                    },
                    {
                        "name": "DefMDIChildProcW",
                        "address": "0x65ca6c"
                    },
                    {
                        "name": "EnumWindows",
                        "address": "0x65ca70"
                    },
                    {
                        "name": "GetClassInfoW",
                        "address": "0x65ca74"
                    },
                    {
                        "name": "GetSystemMenu",
                        "address": "0x65ca78"
                    },
                    {
                        "name": "WaitForInputIdle",
                        "address": "0x65ca7c"
                    },
                    {
                        "name": "ShowOwnedPopups",
                        "address": "0x65ca80"
                    },
                    {
                        "name": "GetScrollRange",
                        "address": "0x65ca84"
                    },
                    {
                        "name": "GetScrollPos",
                        "address": "0x65ca88"
                    },
                    {
                        "name": "SetScrollPos",
                        "address": "0x65ca8c"
                    },
                    {
                        "name": "GetActiveWindow",
                        "address": "0x65ca90"
                    },
                    {
                        "name": "SetActiveWindow",
                        "address": "0x65ca94"
                    },
                    {
                        "name": "DrawEdge",
                        "address": "0x65ca98"
                    },
                    {
                        "name": "InflateRect",
                        "address": "0x65ca9c"
                    },
                    {
                        "name": "GetKeyboardLayoutList",
                        "address": "0x65caa0"
                    },
                    {
                        "name": "OemToCharBuffA",
                        "address": "0x65caa4"
                    },
                    {
                        "name": "LoadBitmapW",
                        "address": "0x65caa8"
                    },
                    {
                        "name": "DrawFocusRect",
                        "address": "0x65caac"
                    },
                    {
                        "name": "EnumChildWindows",
                        "address": "0x65cab0"
                    },
                    {
                        "name": "GetScrollBarInfo",
                        "address": "0x65cab4"
                    },
                    {
                        "name": "SendNotifyMessageW",
                        "address": "0x65cab8"
                    },
                    {
                        "name": "ReleaseCapture",
                        "address": "0x65cabc"
                    },
                    {
                        "name": "UnhookWindowsHookEx",
                        "address": "0x65cac0"
                    },
                    {
                        "name": "LoadCursorW",
                        "address": "0x65cac4"
                    },
                    {
                        "name": "GetCapture",
                        "address": "0x65cac8"
                    },
                    {
                        "name": "SetCapture",
                        "address": "0x65cacc"
                    },
                    {
                        "name": "CreatePopupMenu",
                        "address": "0x65cad0"
                    },
                    {
                        "name": "ScrollWindow",
                        "address": "0x65cad4"
                    },
                    {
                        "name": "ShowCaret",
                        "address": "0x65cad8"
                    },
                    {
                        "name": "GetMenuItemID",
                        "address": "0x65cadc"
                    },
                    {
                        "name": "GetLastActivePopup",
                        "address": "0x65cae0"
                    },
                    {
                        "name": "CharLowerBuffW",
                        "address": "0x65cae4"
                    },
                    {
                        "name": "GetSystemMetrics",
                        "address": "0x65cae8"
                    },
                    {
                        "name": "SetWindowLongW",
                        "address": "0x65caec"
                    },
                    {
                        "name": "PostMessageW",
                        "address": "0x65caf0"
                    },
                    {
                        "name": "DrawMenuBar",
                        "address": "0x65caf4"
                    },
                    {
                        "name": "SetParent",
                        "address": "0x65caf8"
                    },
                    {
                        "name": "IsZoomed",
                        "address": "0x65cafc"
                    },
                    {
                        "name": "CharUpperBuffW",
                        "address": "0x65cb00"
                    },
                    {
                        "name": "GetClientRect",
                        "address": "0x65cb04"
                    },
                    {
                        "name": "IsChild",
                        "address": "0x65cb08"
                    },
                    {
                        "name": "ClientToScreen",
                        "address": "0x65cb0c"
                    },
                    {
                        "name": "SetWindowPlacement",
                        "address": "0x65cb10"
                    },
                    {
                        "name": "IsIconic",
                        "address": "0x65cb14"
                    },
                    {
                        "name": "CallNextHookEx",
                        "address": "0x65cb18"
                    },
                    {
                        "name": "GetMonitorInfoW",
                        "address": "0x65cb1c"
                    },
                    {
                        "name": "ShowWindow",
                        "address": "0x65cb20"
                    },
                    {
                        "name": "CheckMenuItem",
                        "address": "0x65cb24"
                    },
                    {
                        "name": "CharUpperW",
                        "address": "0x65cb28"
                    },
                    {
                        "name": "DefWindowProcW",
                        "address": "0x65cb2c"
                    },
                    {
                        "name": "GetForegroundWindow",
                        "address": "0x65cb30"
                    },
                    {
                        "name": "SetForegroundWindow",
                        "address": "0x65cb34"
                    },
                    {
                        "name": "GetWindowTextW",
                        "address": "0x65cb38"
                    },
                    {
                        "name": "EnableWindow",
                        "address": "0x65cb3c"
                    },
                    {
                        "name": "DestroyWindow",
                        "address": "0x65cb40"
                    },
                    {
                        "name": "IsDialogMessageW",
                        "address": "0x65cb44"
                    },
                    {
                        "name": "EndMenu",
                        "address": "0x65cb48"
                    },
                    {
                        "name": "RegisterClassW",
                        "address": "0x65cb4c"
                    },
                    {
                        "name": "CharNextW",
                        "address": "0x65cb50"
                    },
                    {
                        "name": "GetWindowThreadProcessId",
                        "address": "0x65cb54"
                    },
                    {
                        "name": "RedrawWindow",
                        "address": "0x65cb58"
                    },
                    {
                        "name": "GetDC",
                        "address": "0x65cb5c"
                    },
                    {
                        "name": "GetFocus",
                        "address": "0x65cb60"
                    },
                    {
                        "name": "SetFocus",
                        "address": "0x65cb64"
                    },
                    {
                        "name": "EndPaint",
                        "address": "0x65cb68"
                    },
                    {
                        "name": "ExitWindowsEx",
                        "address": "0x65cb6c"
                    },
                    {
                        "name": "ReleaseDC",
                        "address": "0x65cb70"
                    },
                    {
                        "name": "MsgWaitForMultipleObjectsEx",
                        "address": "0x65cb74"
                    },
                    {
                        "name": "LoadKeyboardLayoutW",
                        "address": "0x65cb78"
                    },
                    {
                        "name": "GetClassLongW",
                        "address": "0x65cb7c"
                    },
                    {
                        "name": "ActivateKeyboardLayout",
                        "address": "0x65cb80"
                    },
                    {
                        "name": "GetParent",
                        "address": "0x65cb84"
                    },
                    {
                        "name": "CharToOemBuffA",
                        "address": "0x65cb88"
                    },
                    {
                        "name": "DrawTextW",
                        "address": "0x65cb8c"
                    },
                    {
                        "name": "SetScrollRange",
                        "address": "0x65cb90"
                    },
                    {
                        "name": "InsertMenuItemW",
                        "address": "0x65cb94"
                    },
                    {
                        "name": "PeekMessageA",
                        "address": "0x65cb98"
                    },
                    {
                        "name": "GetPropW",
                        "address": "0x65cb9c"
                    },
                    {
                        "name": "SetClassLongW",
                        "address": "0x65cba0"
                    },
                    {
                        "name": "MessageBoxW",
                        "address": "0x65cba4"
                    },
                    {
                        "name": "MessageBeep",
                        "address": "0x65cba8"
                    },
                    {
                        "name": "SetPropW",
                        "address": "0x65cbac"
                    },
                    {
                        "name": "SetRectEmpty",
                        "address": "0x65cbb0"
                    },
                    {
                        "name": "UpdateWindow",
                        "address": "0x65cbb4"
                    },
                    {
                        "name": "RemovePropW",
                        "address": "0x65cbb8"
                    },
                    {
                        "name": "GetSubMenu",
                        "address": "0x65cbbc"
                    },
                    {
                        "name": "MsgWaitForMultipleObjects",
                        "address": "0x65cbc0"
                    },
                    {
                        "name": "DestroyMenu",
                        "address": "0x65cbc4"
                    },
                    {
                        "name": "DestroyIcon",
                        "address": "0x65cbc8"
                    },
                    {
                        "name": "SetWindowsHookExW",
                        "address": "0x65cbcc"
                    },
                    {
                        "name": "IsWindowVisible",
                        "address": "0x65cbd0"
                    },
                    {
                        "name": "DispatchMessageA",
                        "address": "0x65cbd4"
                    },
                    {
                        "name": "UnregisterClassW",
                        "address": "0x65cbd8"
                    },
                    {
                        "name": "GetTopWindow",
                        "address": "0x65cbdc"
                    },
                    {
                        "name": "SendMessageW",
                        "address": "0x65cbe0"
                    },
                    {
                        "name": "AdjustWindowRectEx",
                        "address": "0x65cbe4"
                    },
                    {
                        "name": "DrawIcon",
                        "address": "0x65cbe8"
                    },
                    {
                        "name": "IsWindow",
                        "address": "0x65cbec"
                    },
                    {
                        "name": "EnumThreadWindows",
                        "address": "0x65cbf0"
                    },
                    {
                        "name": "InvalidateRect",
                        "address": "0x65cbf4"
                    },
                    {
                        "name": "GetKeyboardState",
                        "address": "0x65cbf8"
                    },
                    {
                        "name": "DrawFrameControl",
                        "address": "0x65cbfc"
                    },
                    {
                        "name": "ScreenToClient",
                        "address": "0x65cc00"
                    },
                    {
                        "name": "SendMessageTimeoutW",
                        "address": "0x65cc04"
                    },
                    {
                        "name": "BringWindowToTop",
                        "address": "0x65cc08"
                    },
                    {
                        "name": "SetCursor",
                        "address": "0x65cc0c"
                    },
                    {
                        "name": "CreateIcon",
                        "address": "0x65cc10"
                    },
                    {
                        "name": "CreateMenu",
                        "address": "0x65cc14"
                    },
                    {
                        "name": "LoadStringW",
                        "address": "0x65cc18"
                    },
                    {
                        "name": "CharLowerW",
                        "address": "0x65cc1c"
                    },
                    {
                        "name": "SetWindowPos",
                        "address": "0x65cc20"
                    },
                    {
                        "name": "SetWindowRgn",
                        "address": "0x65cc24"
                    },
                    {
                        "name": "GetMenuItemCount",
                        "address": "0x65cc28"
                    },
                    {
                        "name": "RemoveMenu",
                        "address": "0x65cc2c"
                    },
                    {
                        "name": "AppendMenuW",
                        "address": "0x65cc30"
                    },
                    {
                        "name": "GetSysColorBrush",
                        "address": "0x65cc34"
                    },
                    {
                        "name": "GetKeyboardLayoutNameW",
                        "address": "0x65cc38"
                    },
                    {
                        "name": "GetWindowDC",
                        "address": "0x65cc3c"
                    },
                    {
                        "name": "TranslateMessage",
                        "address": "0x65cc40"
                    },
                    {
                        "name": "DrawTextExW",
                        "address": "0x65cc44"
                    },
                    {
                        "name": "MapWindowPoints",
                        "address": "0x65cc48"
                    },
                    {
                        "name": "EnumDisplayMonitors",
                        "address": "0x65cc4c"
                    },
                    {
                        "name": "CallWindowProcW",
                        "address": "0x65cc50"
                    },
                    {
                        "name": "DestroyCursor",
                        "address": "0x65cc54"
                    },
                    {
                        "name": "ReplyMessage",
                        "address": "0x65cc58"
                    },
                    {
                        "name": "GetScrollInfo",
                        "address": "0x65cc5c"
                    },
                    {
                        "name": "SetWindowTextW",
                        "address": "0x65cc60"
                    },
                    {
                        "name": "GetMessageExtraInfo",
                        "address": "0x65cc64"
                    },
                    {
                        "name": "EnableScrollBar",
                        "address": "0x65cc68"
                    },
                    {
                        "name": "GetSysColor",
                        "address": "0x65cc6c"
                    },
                    {
                        "name": "TrackPopupMenu",
                        "address": "0x65cc70"
                    },
                    {
                        "name": "DrawIconEx",
                        "address": "0x65cc74"
                    },
                    {
                        "name": "PostQuitMessage",
                        "address": "0x65cc78"
                    },
                    {
                        "name": "GetClassNameW",
                        "address": "0x65cc7c"
                    },
                    {
                        "name": "ShowScrollBar",
                        "address": "0x65cc80"
                    },
                    {
                        "name": "EnableMenuItem",
                        "address": "0x65cc84"
                    },
                    {
                        "name": "GetIconInfo",
                        "address": "0x65cc88"
                    },
                    {
                        "name": "GetMessagePos",
                        "address": "0x65cc8c"
                    },
                    {
                        "name": "SetScrollInfo",
                        "address": "0x65cc90"
                    },
                    {
                        "name": "GetKeyNameTextW",
                        "address": "0x65cc94"
                    },
                    {
                        "name": "GetDesktopWindow",
                        "address": "0x65cc98"
                    },
                    {
                        "name": "GetCursorPos",
                        "address": "0x65cc9c"
                    },
                    {
                        "name": "SetCursorPos",
                        "address": "0x65cca0"
                    },
                    {
                        "name": "HideCaret",
                        "address": "0x65cca4"
                    },
                    {
                        "name": "GetMenu",
                        "address": "0x65cca8"
                    },
                    {
                        "name": "GetMenuState",
                        "address": "0x65ccac"
                    },
                    {
                        "name": "SetMenu",
                        "address": "0x65ccb0"
                    },
                    {
                        "name": "SetRect",
                        "address": "0x65ccb4"
                    },
                    {
                        "name": "GetKeyState",
                        "address": "0x65ccb8"
                    },
                    {
                        "name": "FindWindowExW",
                        "address": "0x65ccbc"
                    },
                    {
                        "name": "MonitorFromPoint",
                        "address": "0x65ccc0"
                    },
                    {
                        "name": "SystemParametersInfoW",
                        "address": "0x65ccc4"
                    },
                    {
                        "name": "LoadIconW",
                        "address": "0x65ccc8"
                    },
                    {
                        "name": "GetCursor",
                        "address": "0x65cccc"
                    },
                    {
                        "name": "GetWindow",
                        "address": "0x65ccd0"
                    },
                    {
                        "name": "GetWindowLongW",
                        "address": "0x65ccd4"
                    },
                    {
                        "name": "GetWindowRect",
                        "address": "0x65ccd8"
                    },
                    {
                        "name": "InsertMenuW",
                        "address": "0x65ccdc"
                    },
                    {
                        "name": "KillTimer",
                        "address": "0x65cce0"
                    },
                    {
                        "name": "WaitMessage",
                        "address": "0x65cce4"
                    },
                    {
                        "name": "IsWindowEnabled",
                        "address": "0x65cce8"
                    },
                    {
                        "name": "IsDialogMessageA",
                        "address": "0x65ccec"
                    },
                    {
                        "name": "TranslateMDISysAccel",
                        "address": "0x65ccf0"
                    },
                    {
                        "name": "GetWindowPlacement",
                        "address": "0x65ccf4"
                    },
                    {
                        "name": "FindWindowW",
                        "address": "0x65ccf8"
                    },
                    {
                        "name": "DeleteMenu",
                        "address": "0x65ccfc"
                    },
                    {
                        "name": "GetKeyboardLayout",
                        "address": "0x65cd00"
                    }
                ],
                "dll": "user32.dll"
            },
            {
                "imports": [
                    {
                        "name": "GetFileVersionInfoSizeW",
                        "address": "0x65cd08"
                    },
                    {
                        "name": "VerQueryValueW",
                        "address": "0x65cd0c"
                    },
                    {
                        "name": "GetFileVersionInfoW",
                        "address": "0x65cd10"
                    }
                ],
                "dll": "version.dll"
            },
            {
                "imports": [
                    {
                        "name": "SafeArrayPutElement",
                        "address": "0x65cd18"
                    },
                    {
                        "name": "LoadTypeLib",
                        "address": "0x65cd1c"
                    },
                    {
                        "name": "GetErrorInfo",
                        "address": "0x65cd20"
                    },
                    {
                        "name": "VariantInit",
                        "address": "0x65cd24"
                    },
                    {
                        "name": "VariantClear",
                        "address": "0x65cd28"
                    },
                    {
                        "name": "SysFreeString",
                        "address": "0x65cd2c"
                    },
                    {
                        "name": "SysReAllocStringLen",
                        "address": "0x65cd30"
                    },
                    {
                        "name": "SafeArrayCreate",
                        "address": "0x65cd34"
                    },
                    {
                        "name": "SafeArrayGetElement",
                        "address": "0x65cd38"
                    },
                    {
                        "name": "GetActiveObject",
                        "address": "0x65cd3c"
                    },
                    {
                        "name": "SysAllocStringLen",
                        "address": "0x65cd40"
                    },
                    {
                        "name": "SafeArrayPtrOfIndex",
                        "address": "0x65cd44"
                    },
                    {
                        "name": "SafeArrayGetUBound",
                        "address": "0x65cd48"
                    },
                    {
                        "name": "SafeArrayGetLBound",
                        "address": "0x65cd4c"
                    },
                    {
                        "name": "VariantCopy",
                        "address": "0x65cd50"
                    },
                    {
                        "name": "RegisterTypeLib",
                        "address": "0x65cd54"
                    },
                    {
                        "name": "VariantChangeType",
                        "address": "0x65cd58"
                    },
                    {
                        "name": "VariantCopyInd",
                        "address": "0x65cd5c"
                    }
                ],
                "dll": "oleaut32.dll"
            },
            {
                "imports": [
                    {
                        "name": "RegSetValueExW",
                        "address": "0x65cd64"
                    },
                    {
                        "name": "RegEnumKeyExW",
                        "address": "0x65cd68"
                    },
                    {
                        "name": "AdjustTokenPrivileges",
                        "address": "0x65cd6c"
                    },
                    {
                        "name": "OpenThreadToken",
                        "address": "0x65cd70"
                    },
                    {
                        "name": "GetUserNameW",
                        "address": "0x65cd74"
                    },
                    {
                        "name": "RegDeleteKeyW",
                        "address": "0x65cd78"
                    },
                    {
                        "name": "LookupPrivilegeValueW",
                        "address": "0x65cd7c"
                    },
                    {
                        "name": "OpenProcessToken",
                        "address": "0x65cd80"
                    },
                    {
                        "name": "RegOpenKeyExW",
                        "address": "0x65cd84"
                    },
                    {
                        "name": "RegQueryInfoKeyW",
                        "address": "0x65cd88"
                    },
                    {
                        "name": "AllocateAndInitializeSid",
                        "address": "0x65cd8c"
                    },
                    {
                        "name": "FreeSid",
                        "address": "0x65cd90"
                    },
                    {
                        "name": "EqualSid",
                        "address": "0x65cd94"
                    },
                    {
                        "name": "RegDeleteValueW",
                        "address": "0x65cd98"
                    },
                    {
                        "name": "RegFlushKey",
                        "address": "0x65cd9c"
                    },
                    {
                        "name": "RegQueryValueExW",
                        "address": "0x65cda0"
                    },
                    {
                        "name": "RegEnumValueW",
                        "address": "0x65cda4"
                    },
                    {
                        "name": "GetTokenInformation",
                        "address": "0x65cda8"
                    },
                    {
                        "name": "InitializeSecurityDescriptor",
                        "address": "0x65cdac"
                    },
                    {
                        "name": "RegCloseKey",
                        "address": "0x65cdb0"
                    },
                    {
                        "name": "RegCreateKeyExW",
                        "address": "0x65cdb4"
                    },
                    {
                        "name": "SetSecurityDescriptorDacl",
                        "address": "0x65cdb8"
                    }
                ],
                "dll": "advapi32.dll"
            },
            {
                "imports": [
                    {
                        "name": "NetWkstaGetInfo",
                        "address": "0x65cdc0"
                    },
                    {
                        "name": "NetApiBufferFree",
                        "address": "0x65cdc4"
                    }
                ],
                "dll": "netapi32.dll"
            },
            {
                "imports": [
                    {
                        "name": "SetFileAttributesW",
                        "address": "0x65cdcc"
                    },
                    {
                        "name": "SetFileTime",
                        "address": "0x65cdd0"
                    },
                    {
                        "name": "GetACP",
                        "address": "0x65cdd4"
                    },
                    {
                        "name": "GetExitCodeProcess",
                        "address": "0x65cdd8"
                    },
                    {
                        "name": "IsBadWritePtr",
                        "address": "0x65cddc"
                    },
                    {
                        "name": "CloseHandle",
                        "address": "0x65cde0"
                    },
                    {
                        "name": "LocalFree",
                        "address": "0x65cde4"
                    },
                    {
                        "name": "GetCurrentProcessId",
                        "address": "0x65cde8"
                    },
                    {
                        "name": "SizeofResource",
                        "address": "0x65cdec"
                    },
                    {
                        "name": "VirtualProtect",
                        "address": "0x65cdf0"
                    },
                    {
                        "name": "QueryPerformanceFrequency",
                        "address": "0x65cdf4"
                    },
                    {
                        "name": "FindNextFileW",
                        "address": "0x65cdf8"
                    },
                    {
                        "name": "GetFullPathNameW",
                        "address": "0x65cdfc"
                    },
                    {
                        "name": "VirtualFree",
                        "address": "0x65ce00"
                    },
                    {
                        "name": "ExitProcess",
                        "address": "0x65ce04"
                    },
                    {
                        "name": "HeapAlloc",
                        "address": "0x65ce08"
                    },
                    {
                        "name": "WriteProfileStringW",
                        "address": "0x65ce0c"
                    },
                    {
                        "name": "GetCPInfoExW",
                        "address": "0x65ce10"
                    },
                    {
                        "name": "RtlUnwind",
                        "address": "0x65ce14"
                    },
                    {
                        "name": "GetCPInfo",
                        "address": "0x65ce18"
                    },
                    {
                        "name": "GetStdHandle",
                        "address": "0x65ce1c"
                    },
                    {
                        "name": "FileTimeToLocalFileTime",
                        "address": "0x65ce20"
                    },
                    {
                        "name": "GetModuleHandleW",
                        "address": "0x65ce24"
                    },
                    {
                        "name": "FreeLibrary",
                        "address": "0x65ce28"
                    },
                    {
                        "name": "HeapDestroy",
                        "address": "0x65ce2c"
                    },
                    {
                        "name": "CompareFileTime",
                        "address": "0x65ce30"
                    },
                    {
                        "name": "ReadFile",
                        "address": "0x65ce34"
                    },
                    {
                        "name": "CreateProcessW",
                        "address": "0x65ce38"
                    },
                    {
                        "name": "TransactNamedPipe",
                        "address": "0x65ce3c"
                    },
                    {
                        "name": "GetLastError",
                        "address": "0x65ce40"
                    },
                    {
                        "name": "GetModuleFileNameW",
                        "address": "0x65ce44"
                    },
                    {
                        "name": "SetLastError",
                        "address": "0x65ce48"
                    },
                    {
                        "name": "FindResourceW",
                        "address": "0x65ce4c"
                    },
                    {
                        "name": "OpenMutexW",
                        "address": "0x65ce50"
                    },
                    {
                        "name": "CreateThread",
                        "address": "0x65ce54"
                    },
                    {
                        "name": "CompareStringW",
                        "address": "0x65ce58"
                    },
                    {
                        "name": "CopyFileW",
                        "address": "0x65ce5c"
                    },
                    {
                        "name": "CreateMutexW",
                        "address": "0x65ce60"
                    },
                    {
                        "name": "LoadLibraryA",
                        "address": "0x65ce64"
                    },
                    {
                        "name": "ResetEvent",
                        "address": "0x65ce68"
                    },
                    {
                        "name": "MulDiv",
                        "address": "0x65ce6c"
                    },
                    {
                        "name": "FreeResource",
                        "address": "0x65ce70"
                    },
                    {
                        "name": "GetDriveTypeW",
                        "address": "0x65ce74"
                    },
                    {
                        "name": "GetVersion",
                        "address": "0x65ce78"
                    },
                    {
                        "name": "RaiseException",
                        "address": "0x65ce7c"
                    },
                    {
                        "name": "MoveFileW",
                        "address": "0x65ce80"
                    },
                    {
                        "name": "GlobalAddAtomW",
                        "address": "0x65ce84"
                    },
                    {
                        "name": "GetSystemTimeAsFileTime",
                        "address": "0x65ce88"
                    },
                    {
                        "name": "FormatMessageW",
                        "address": "0x65ce8c"
                    },
                    {
                        "name": "OpenProcess",
                        "address": "0x65ce90"
                    },
                    {
                        "name": "SwitchToThread",
                        "address": "0x65ce94"
                    },
                    {
                        "name": "GetExitCodeThread",
                        "address": "0x65ce98"
                    },
                    {
                        "name": "GetCurrentThread",
                        "address": "0x65ce9c"
                    },
                    {
                        "name": "GetLogicalDrives",
                        "address": "0x65cea0"
                    },
                    {
                        "name": "LocalFileTimeToFileTime",
                        "address": "0x65cea4"
                    },
                    {
                        "name": "SetNamedPipeHandleState",
                        "address": "0x65cea8"
                    },
                    {
                        "name": "LoadLibraryExW",
                        "address": "0x65ceac"
                    },
                    {
                        "name": "TerminateProcess",
                        "address": "0x65ceb0"
                    },
                    {
                        "name": "LockResource",
                        "address": "0x65ceb4"
                    },
                    {
                        "name": "FileTimeToSystemTime",
                        "address": "0x65ceb8"
                    },
                    {
                        "name": "GetShortPathNameW",
                        "address": "0x65cebc"
                    },
                    {
                        "name": "GetCurrentThreadId",
                        "address": "0x65cec0"
                    },
                    {
                        "name": "UnhandledExceptionFilter",
                        "address": "0x65cec4"
                    },
                    {
                        "name": "MoveFileExW",
                        "address": "0x65cec8"
                    },
                    {
                        "name": "VirtualQuery",
                        "address": "0x65cecc"
                    },
                    {
                        "name": "GlobalFindAtomW",
                        "address": "0x65ced0"
                    },
                    {
                        "name": "VirtualQueryEx",
                        "address": "0x65ced4"
                    },
                    {
                        "name": "Sleep",
                        "address": "0x65ced8"
                    },
                    {
                        "name": "EnterCriticalSection",
                        "address": "0x65cedc"
                    },
                    {
                        "name": "SetFilePointer",
                        "address": "0x65cee0"
                    },
                    {
                        "name": "ReleaseMutex",
                        "address": "0x65cee4"
                    },
                    {
                        "name": "FlushFileBuffers",
                        "address": "0x65cee8"
                    },
                    {
                        "name": "LoadResource",
                        "address": "0x65ceec"
                    },
                    {
                        "name": "SuspendThread",
                        "address": "0x65cef0"
                    },
                    {
                        "name": "GetTickCount",
                        "address": "0x65cef4"
                    },
                    {
                        "name": "WritePrivateProfileStringW",
                        "address": "0x65cef8"
                    },
                    {
                        "name": "GetFileSize",
                        "address": "0x65cefc"
                    },
                    {
                        "name": "GetStartupInfoW",
                        "address": "0x65cf00"
                    },
                    {
                        "name": "GlobalDeleteAtom",
                        "address": "0x65cf04"
                    },
                    {
                        "name": "GetFileAttributesW",
                        "address": "0x65cf08"
                    },
                    {
                        "name": "GetCurrentDirectoryW",
                        "address": "0x65cf0c"
                    },
                    {
                        "name": "SetCurrentDirectoryW",
                        "address": "0x65cf10"
                    },
                    {
                        "name": "InitializeCriticalSection",
                        "address": "0x65cf14"
                    },
                    {
                        "name": "GetThreadPriority",
                        "address": "0x65cf18"
                    },
                    {
                        "name": "GetCurrentProcess",
                        "address": "0x65cf1c"
                    },
                    {
                        "name": "SetThreadPriority",
                        "address": "0x65cf20"
                    },
                    {
                        "name": "VirtualAlloc",
                        "address": "0x65cf24"
                    },
                    {
                        "name": "GetSystemInfo",
                        "address": "0x65cf28"
                    },
                    {
                        "name": "GetCommandLineW",
                        "address": "0x65cf2c"
                    },
                    {
                        "name": "LeaveCriticalSection",
                        "address": "0x65cf30"
                    },
                    {
                        "name": "GetProcAddress",
                        "address": "0x65cf34"
                    },
                    {
                        "name": "ResumeThread",
                        "address": "0x65cf38"
                    },
                    {
                        "name": "GetVersionExW",
                        "address": "0x65cf3c"
                    },
                    {
                        "name": "VerifyVersionInfoW",
                        "address": "0x65cf40"
                    },
                    {
                        "name": "HeapCreate",
                        "address": "0x65cf44"
                    },
                    {
                        "name": "GetWindowsDirectoryW",
                        "address": "0x65cf48"
                    },
                    {
                        "name": "DeviceIoControl",
                        "address": "0x65cf4c"
                    },
                    {
                        "name": "GetDiskFreeSpaceW",
                        "address": "0x65cf50"
                    },
                    {
                        "name": "VerSetConditionMask",
                        "address": "0x65cf54"
                    },
                    {
                        "name": "FindFirstFileW",
                        "address": "0x65cf58"
                    },
                    {
                        "name": "GetUserDefaultUILanguage",
                        "address": "0x65cf5c"
                    },
                    {
                        "name": "lstrlenW",
                        "address": "0x65cf60"
                    },
                    {
                        "name": "QueryPerformanceCounter",
                        "address": "0x65cf64"
                    },
                    {
                        "name": "SetEndOfFile",
                        "address": "0x65cf68"
                    },
                    {
                        "name": "lstrcmpW",
                        "address": "0x65cf6c"
                    },
                    {
                        "name": "HeapFree",
                        "address": "0x65cf70"
                    },
                    {
                        "name": "WideCharToMultiByte",
                        "address": "0x65cf74"
                    },
                    {
                        "name": "FindClose",
                        "address": "0x65cf78"
                    },
                    {
                        "name": "MultiByteToWideChar",
                        "address": "0x65cf7c"
                    },
                    {
                        "name": "LoadLibraryW",
                        "address": "0x65cf80"
                    },
                    {
                        "name": "SetEvent",
                        "address": "0x65cf84"
                    },
                    {
                        "name": "CreateFileW",
                        "address": "0x65cf88"
                    },
                    {
                        "name": "GetLocaleInfoW",
                        "address": "0x65cf8c"
                    },
                    {
                        "name": "GetSystemDirectoryW",
                        "address": "0x65cf90"
                    },
                    {
                        "name": "DeleteFileW",
                        "address": "0x65cf94"
                    },
                    {
                        "name": "GetEnvironmentVariableW",
                        "address": "0x65cf98"
                    },
                    {
                        "name": "GetLocalTime",
                        "address": "0x65cf9c"
                    },
                    {
                        "name": "WaitForSingleObject",
                        "address": "0x65cfa0"
                    },
                    {
                        "name": "WriteFile",
                        "address": "0x65cfa4"
                    },
                    {
                        "name": "CreateNamedPipeW",
                        "address": "0x65cfa8"
                    },
                    {
                        "name": "ExitThread",
                        "address": "0x65cfac"
                    },
                    {
                        "name": "DeleteCriticalSection",
                        "address": "0x65cfb0"
                    },
                    {
                        "name": "GetDateFormatW",
                        "address": "0x65cfb4"
                    },
                    {
                        "name": "TlsGetValue",
                        "address": "0x65cfb8"
                    },
                    {
                        "name": "SetErrorMode",
                        "address": "0x65cfbc"
                    },
                    {
                        "name": "GetComputerNameW",
                        "address": "0x65cfc0"
                    },
                    {
                        "name": "IsValidLocale",
                        "address": "0x65cfc4"
                    },
                    {
                        "name": "TlsSetValue",
                        "address": "0x65cfc8"
                    },
                    {
                        "name": "CreateDirectoryW",
                        "address": "0x65cfcc"
                    },
                    {
                        "name": "GetOverlappedResult",
                        "address": "0x65cfd0"
                    },
                    {
                        "name": "GetSystemDefaultUILanguage",
                        "address": "0x65cfd4"
                    },
                    {
                        "name": "EnumCalendarInfoW",
                        "address": "0x65cfd8"
                    },
                    {
                        "name": "GetProfileStringW",
                        "address": "0x65cfdc"
                    },
                    {
                        "name": "LocalAlloc",
                        "address": "0x65cfe0"
                    },
                    {
                        "name": "GetUserDefaultLangID",
                        "address": "0x65cfe4"
                    },
                    {
                        "name": "RemoveDirectoryW",
                        "address": "0x65cfe8"
                    },
                    {
                        "name": "IsDBCSLeadByte",
                        "address": "0x65cfec"
                    },
                    {
                        "name": "CreateEventW",
                        "address": "0x65cff0"
                    },
                    {
                        "name": "GetPrivateProfileStringW",
                        "address": "0x65cff4"
                    },
                    {
                        "name": "WaitForMultipleObjectsEx",
                        "address": "0x65cff8"
                    },
                    {
                        "name": "GetThreadLocale",
                        "address": "0x65cffc"
                    },
                    {
                        "name": "SetThreadLocale",
                        "address": "0x65d000"
                    }
                ],
                "dll": "kernel32.dll"
            },
            {
                "imports": [
                    {
                        "name": "CoCreateInstance",
                        "address": "0x65d008"
                    },
                    {
                        "name": "CLSIDFromString",
                        "address": "0x65d00c"
                    },
                    {
                        "name": "CoUninitialize",
                        "address": "0x65d010"
                    },
                    {
                        "name": "IsEqualGUID",
                        "address": "0x65d014"
                    },
                    {
                        "name": "OleInitialize",
                        "address": "0x65d018"
                    },
                    {
                        "name": "CoFreeUnusedLibraries",
                        "address": "0x65d01c"
                    },
                    {
                        "name": "CLSIDFromProgID",
                        "address": "0x65d020"
                    },
                    {
                        "name": "OleUninitialize",
                        "address": "0x65d024"
                    },
                    {
                        "name": "CoDisconnectObject",
                        "address": "0x65d028"
                    },
                    {
                        "name": "CoInitialize",
                        "address": "0x65d02c"
                    },
                    {
                        "name": "CoTaskMemFree",
                        "address": "0x65d030"
                    },
                    {
                        "name": "CoTaskMemAlloc",
                        "address": "0x65d034"
                    },
                    {
                        "name": "StringFromCLSID",
                        "address": "0x65d038"
                    }
                ],
                "dll": "ole32.dll"
            },
            {
                "imports": [
                    {
                        "name": "Arc",
                        "address": "0x65d040"
                    },
                    {
                        "name": "Pie",
                        "address": "0x65d044"
                    },
                    {
                        "name": "SetBkMode",
                        "address": "0x65d048"
                    },
                    {
                        "name": "SelectPalette",
                        "address": "0x65d04c"
                    },
                    {
                        "name": "CreateCompatibleBitmap",
                        "address": "0x65d050"
                    },
                    {
                        "name": "ExcludeClipRect",
                        "address": "0x65d054"
                    },
                    {
                        "name": "RectVisible",
                        "address": "0x65d058"
                    },
                    {
                        "name": "SetWindowOrgEx",
                        "address": "0x65d05c"
                    },
                    {
                        "name": "MaskBlt",
                        "address": "0x65d060"
                    },
                    {
                        "name": "AngleArc",
                        "address": "0x65d064"
                    },
                    {
                        "name": "Chord",
                        "address": "0x65d068"
                    },
                    {
                        "name": "SetTextColor",
                        "address": "0x65d06c"
                    },
                    {
                        "name": "StretchBlt",
                        "address": "0x65d070"
                    },
                    {
                        "name": "SetDIBits",
                        "address": "0x65d074"
                    },
                    {
                        "name": "SetViewportOrgEx",
                        "address": "0x65d078"
                    },
                    {
                        "name": "CreateRectRgn",
                        "address": "0x65d07c"
                    },
                    {
                        "name": "RealizePalette",
                        "address": "0x65d080"
                    },
                    {
                        "name": "SetDIBColorTable",
                        "address": "0x65d084"
                    },
                    {
                        "name": "GetDIBColorTable",
                        "address": "0x65d088"
                    },
                    {
                        "name": "RoundRect",
                        "address": "0x65d08c"
                    },
                    {
                        "name": "RestoreDC",
                        "address": "0x65d090"
                    },
                    {
                        "name": "SetRectRgn",
                        "address": "0x65d094"
                    },
                    {
                        "name": "GetTextMetricsW",
                        "address": "0x65d098"
                    },
                    {
                        "name": "RemoveFontResourceW",
                        "address": "0x65d09c"
                    },
                    {
                        "name": "GetWindowOrgEx",
                        "address": "0x65d0a0"
                    },
                    {
                        "name": "CreatePalette",
                        "address": "0x65d0a4"
                    },
                    {
                        "name": "CreateBrushIndirect",
                        "address": "0x65d0a8"
                    },
                    {
                        "name": "PatBlt",
                        "address": "0x65d0ac"
                    },
                    {
                        "name": "LineDDA",
                        "address": "0x65d0b0"
                    },
                    {
                        "name": "PolyBezierTo",
                        "address": "0x65d0b4"
                    },
                    {
                        "name": "GetStockObject",
                        "address": "0x65d0b8"
                    },
                    {
                        "name": "CreateSolidBrush",
                        "address": "0x65d0bc"
                    },
                    {
                        "name": "Polygon",
                        "address": "0x65d0c0"
                    },
                    {
                        "name": "Rectangle",
                        "address": "0x65d0c4"
                    },
                    {
                        "name": "MoveToEx",
                        "address": "0x65d0c8"
                    },
                    {
                        "name": "DeleteDC",
                        "address": "0x65d0cc"
                    },
                    {
                        "name": "SaveDC",
                        "address": "0x65d0d0"
                    },
                    {
                        "name": "BitBlt",
                        "address": "0x65d0d4"
                    },
                    {
                        "name": "Ellipse",
                        "address": "0x65d0d8"
                    },
                    {
                        "name": "FrameRgn",
                        "address": "0x65d0dc"
                    },
                    {
                        "name": "GetDeviceCaps",
                        "address": "0x65d0e0"
                    },
                    {
                        "name": "GetBitmapBits",
                        "address": "0x65d0e4"
                    },
                    {
                        "name": "GetTextExtentPoint32W",
                        "address": "0x65d0e8"
                    },
                    {
                        "name": "GetClipBox",
                        "address": "0x65d0ec"
                    },
                    {
                        "name": "Polyline",
                        "address": "0x65d0f0"
                    },
                    {
                        "name": "IntersectClipRect",
                        "address": "0x65d0f4"
                    },
                    {
                        "name": "GetSystemPaletteEntries",
                        "address": "0x65d0f8"
                    },
                    {
                        "name": "CreateBitmap",
                        "address": "0x65d0fc"
                    },
                    {
                        "name": "AddFontResourceW",
                        "address": "0x65d100"
                    },
                    {
                        "name": "CreateDIBitmap",
                        "address": "0x65d104"
                    },
                    {
                        "name": "GetStretchBltMode",
                        "address": "0x65d108"
                    },
                    {
                        "name": "CreateDIBSection",
                        "address": "0x65d10c"
                    },
                    {
                        "name": "CreatePenIndirect",
                        "address": "0x65d110"
                    },
                    {
                        "name": "SetStretchBltMode",
                        "address": "0x65d114"
                    },
                    {
                        "name": "GetDIBits",
                        "address": "0x65d118"
                    },
                    {
                        "name": "CreateFontIndirectW",
                        "address": "0x65d11c"
                    },
                    {
                        "name": "PolyBezier",
                        "address": "0x65d120"
                    },
                    {
                        "name": "LineTo",
                        "address": "0x65d124"
                    },
                    {
                        "name": "GetRgnBox",
                        "address": "0x65d128"
                    },
                    {
                        "name": "EnumFontsW",
                        "address": "0x65d12c"
                    },
                    {
                        "name": "CreateHalftonePalette",
                        "address": "0x65d130"
                    },
                    {
                        "name": "DeleteObject",
                        "address": "0x65d134"
                    },
                    {
                        "name": "SelectObject",
                        "address": "0x65d138"
                    },
                    {
                        "name": "ExtFloodFill",
                        "address": "0x65d13c"
                    },
                    {
                        "name": "UnrealizeObject",
                        "address": "0x65d140"
                    },
                    {
                        "name": "SetBkColor",
                        "address": "0x65d144"
                    },
                    {
                        "name": "CreateCompatibleDC",
                        "address": "0x65d148"
                    },
                    {
                        "name": "GetObjectW",
                        "address": "0x65d14c"
                    },
                    {
                        "name": "GetBrushOrgEx",
                        "address": "0x65d150"
                    },
                    {
                        "name": "GetCurrentPositionEx",
                        "address": "0x65d154"
                    },
                    {
                        "name": "SetROP2",
                        "address": "0x65d158"
                    },
                    {
                        "name": "GetTextExtentPointW",
                        "address": "0x65d15c"
                    },
                    {
                        "name": "ExtTextOutW",
                        "address": "0x65d160"
                    },
                    {
                        "name": "SetBrushOrgEx",
                        "address": "0x65d164"
                    },
                    {
                        "name": "GetPixel",
                        "address": "0x65d168"
                    },
                    {
                        "name": "ArcTo",
                        "address": "0x65d16c"
                    },
                    {
                        "name": "GdiFlush",
                        "address": "0x65d170"
                    },
                    {
                        "name": "SetPixel",
                        "address": "0x65d174"
                    },
                    {
                        "name": "EnumFontFamiliesExW",
                        "address": "0x65d178"
                    },
                    {
                        "name": "GetPaletteEntries",
                        "address": "0x65d17c"
                    }
                ],
                "dll": "gdi32.dll"
            }
        ],
        "digital_signers": null,
        "exported_dll_name": "Setup.exe",
        "actual_checksum": "0x00285e43",
        "overlay": {
            "size": "0x00005951",
            "offset": "0x00279800"
        },
        "imagebase": "0x00400000",
        "reported_checksum": "0x00000000",
        "icon_hash": null,
        "entrypoint": "0x0064d4a0",
        "timestamp": "2019-04-27 08:22:12",
        "osversion": "6.0",
        "sections": [
            {
                "name": ".text",
                "characteristics": "IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ",
                "virtual_address": "0x00001000",
                "size_of_data": "0x00249400",
                "entropy": "6.41",
                "raw_address": "0x00000400",
                "virtual_size": "0x00249228",
                "characteristics_raw": "0x60000020"
            },
            {
                "name": ".itext",
                "characteristics": "IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ",
                "virtual_address": "0x0024b000",
                "size_of_data": "0x00002800",
                "entropy": "6.13",
                "raw_address": "0x00249800",
                "virtual_size": "0x000026c4",
                "characteristics_raw": "0x60000020"
            },
            {
                "name": ".data",
                "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
                "virtual_address": "0x0024e000",
                "size_of_data": "0x00005c00",
                "entropy": "5.06",
                "raw_address": "0x0024c000",
                "virtual_size": "0x00005a34",
                "characteristics_raw": "0xc0000040"
            },
            {
                "name": ".bss",
                "characteristics": "IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
                "virtual_address": "0x00254000",
                "size_of_data": "0x00000000",
                "entropy": "0.00",
                "raw_address": "0x00000000",
                "virtual_size": "0x000071d8",
                "characteristics_raw": "0xc0000000"
            },
            {
                "name": ".idata",
                "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
                "virtual_address": "0x0025c000",
                "size_of_data": "0x00003600",
                "entropy": "5.27",
                "raw_address": "0x00251c00",
                "virtual_size": "0x0000358c",
                "characteristics_raw": "0xc0000040"
            },
            {
                "name": ".didata",
                "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
                "virtual_address": "0x00260000",
                "size_of_data": "0x00000a00",
                "entropy": "4.31",
                "raw_address": "0x00255200",
                "virtual_size": "0x000009ee",
                "characteristics_raw": "0xc0000040"
            },
            {
                "name": ".edata",
                "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
                "virtual_address": "0x00261000",
                "size_of_data": "0x00000200",
                "entropy": "1.85",
                "raw_address": "0x00255c00",
                "virtual_size": "0x00000097",
                "characteristics_raw": "0x40000040"
            },
            {
                "name": ".tls",
                "characteristics": "IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
                "virtual_address": "0x00262000",
                "size_of_data": "0x00000000",
                "entropy": "0.00",
                "raw_address": "0x00000000",
                "virtual_size": "0x00000044",
                "characteristics_raw": "0xc0000000"
            },
            {
                "name": ".rdata",
                "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
                "virtual_address": "0x00263000",
                "size_of_data": "0x00000200",
                "entropy": "1.34",
                "raw_address": "0x00255e00",
                "virtual_size": "0x0000005d",
                "characteristics_raw": "0x40000040"
            },
            {
                "name": ".rsrc",
                "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
                "virtual_address": "0x00264000",
                "size_of_data": "0x00023800",
                "entropy": "5.74",
                "raw_address": "0x00256000",
                "virtual_size": "0x000237e0",
                "characteristics_raw": "0x40000040"
            }
        ],
        "resources": [],
        "dirents": [
            {
                "virtual_address": "0x00261000",
                "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
                "size": "0x00000097"
            },
            {
                "virtual_address": "0x0025c000",
                "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
                "size": "0x0000358c"
            },
            {
                "virtual_address": "0x00264000",
                "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
                "size": "0x000237e0"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00263000",
                "name": "IMAGE_DIRECTORY_ENTRY_TLS",
                "size": "0x00000018"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x0025c944",
                "name": "IMAGE_DIRECTORY_ENTRY_IAT",
                "size": "0x00000840"
            },
            {
                "virtual_address": "0x00260000",
                "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
                "size": "0x000009ee"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
                "size": "0x00000000"
            }
        ],
        "exports": [
            {
                "ordinal": 3,
                "name": "TMethodImplementationIntercept",
                "address": "0x4a131c"
            },
            {
                "ordinal": 2,
                "name": "__dbk_fcall_wrapper",
                "address": "0x40eec0"
            },
            {
                "ordinal": 1,
                "name": "dbkFCallWrapperAddr",
                "address": "0x65763c"
            }
        ],
        "guest_signers": {},
        "imphash": "86c94b49415ec41af9bc34155c313d23",
        "icon_fuzzy": null,
        "icon": null,
        "pdbpath": null,
        "imported_dll_count": 12,
        "versioninfo": []
    }
}

[*] Resolved APIs: [
    "kernel32.dll.GetThreadPreferredUILanguages",
    "kernel32.dll.SetThreadPreferredUILanguages",
    "kernel32.dll.GetThreadUILanguage",
    "kernel32.dll.SetDllDirectoryW",
    "kernel32.dll.SetSearchPathMode",
    "kernel32.dll.SetProcessDEPPolicy",
    "kernel32.dll.GetNativeSystemInfo",
    "kernel32.dll.GetLogicalProcessorInformation",
    "oleaut32.dll.VariantChangeTypeEx",
    "oleaut32.dll.VarNeg",
    "oleaut32.dll.VarNot",
    "oleaut32.dll.VarAdd",
    "oleaut32.dll.VarSub",
    "oleaut32.dll.VarMul",
    "oleaut32.dll.VarDiv",
    "oleaut32.dll.VarIdiv",
    "oleaut32.dll.VarMod",
    "oleaut32.dll.VarAnd",
    "oleaut32.dll.VarOr",
    "oleaut32.dll.VarXor",
    "oleaut32.dll.VarCmp",
    "oleaut32.dll.VarI4FromStr",
    "oleaut32.dll.VarR4FromStr",
    "oleaut32.dll.VarR8FromStr",
    "oleaut32.dll.VarDateFromStr",
    "oleaut32.dll.VarCyFromStr",
    "oleaut32.dll.VarBoolFromStr",
    "oleaut32.dll.VarBstrFromCy",
    "oleaut32.dll.VarBstrFromDate",
    "oleaut32.dll.VarBstrFromBool",
    "kernel32.dll.InitializeConditionVariable",
    "kernel32.dll.WakeConditionVariable",
    "kernel32.dll.WakeAllConditionVariable",
    "kernel32.dll.SleepConditionVariableCS",
    "ole32.dll.CoCreateInstanceEx",
    "ole32.dll.CoInitializeEx",
    "ole32.dll.CoAddRefServerProcess",
    "ole32.dll.CoReleaseServerProcess",
    "ole32.dll.CoResumeClassObjects",
    "ole32.dll.CoSuspendClassObjects",
    "cryptbase.dll.SystemFunction036",
    "dwmapi.dll.DwmIsCompositionEnabled",
    "wtsapi32.dll.WTSRegisterSessionNotification",
    "user32.dll.IsWindow",
    "user32.dll.GetWindowThreadProcessId",
    "winsta.dll.WinStationRegisterConsoleNotification",
    "advapi32.dll.LookupAccountSidW",
    "sechost.dll.LookupAccountSidLocalW",
    "advapi32.dll.CreateWellKnownSid",
    "rpcrt4.dll.RpcStringBindingComposeW",
    "rpcrt4.dll.RpcBindingFromStringBindingW",
    "rpcrt4.dll.RpcStringFreeW",
    "rpcrt4.dll.RpcBindingSetAuthInfoExW",
    "sechost.dll.LookupAccountNameLocalW",
    "rpcrt4.dll.RpcAsyncInitializeHandle",
    "rpcrt4.dll.NdrClientCall2",
    "rpcrt4.dll.NdrAsyncClientCall",
    "uxtheme.dll.BufferedPaintInit",
    "gdi32.dll.GetLayout",
    "gdi32.dll.GdiRealizationInfo",
    "gdi32.dll.FontIsLinked",
    "advapi32.dll.RegOpenKeyExW",
    "advapi32.dll.RegQueryInfoKeyW",
    "gdi32.dll.GetTextFaceAliasW",
    "advapi32.dll.RegEnumValueW",
    "advapi32.dll.RegCloseKey",
    "advapi32.dll.RegQueryValueExW",
    "gdi32.dll.GetFontAssocStatus",
    "advapi32.dll.RegQueryValueExA",
    "advapi32.dll.RegEnumKeyExW",
    "gdi32.dll.GdiIsMetaPrintDC",
    "user32.dll.AnimateWindow",
    "comctl32.dll.InitializeFlatSB",
    "comctl32.dll.UninitializeFlatSB",
    "comctl32.dll.FlatSB_GetScrollProp",
    "comctl32.dll.FlatSB_SetScrollProp",
    "comctl32.dll.FlatSB_EnableScrollBar",
    "comctl32.dll.FlatSB_ShowScrollBar",
    "comctl32.dll.FlatSB_GetScrollRange",
    "comctl32.dll.FlatSB_GetScrollInfo",
    "comctl32.dll.FlatSB_GetScrollPos",
    "comctl32.dll.FlatSB_SetScrollPos",
    "comctl32.dll.FlatSB_SetScrollInfo",
    "comctl32.dll.FlatSB_SetScrollRange",
    "user32.dll.SetLayeredWindowAttributes",
    "uxtheme.dll.OpenThemeData",
    "uxtheme.dll.CloseThemeData",
    "uxtheme.dll.DrawThemeBackground",
    "uxtheme.dll.DrawThemeText",
    "uxtheme.dll.GetThemeBackgroundContentRect",
    "uxtheme.dll.GetThemePartSize",
    "uxtheme.dll.GetThemeTextExtent",
    "uxtheme.dll.GetThemeTextMetrics",
    "uxtheme.dll.GetThemeBackgroundRegion",
    "uxtheme.dll.HitTestThemeBackground",
    "uxtheme.dll.DrawThemeEdge",
    "uxtheme.dll.DrawThemeIcon",
    "uxtheme.dll.IsThemePartDefined",
    "uxtheme.dll.IsThemeBackgroundPartiallyTransparent",
    "uxtheme.dll.GetThemeColor",
    "uxtheme.dll.GetThemeMetric",
    "uxtheme.dll.GetThemeString",
    "uxtheme.dll.GetThemeBool",
    "uxtheme.dll.GetThemeInt",
    "uxtheme.dll.GetThemeEnumValue",
    "uxtheme.dll.GetThemePosition",
    "uxtheme.dll.GetThemeFont",
    "uxtheme.dll.GetThemeRect",
    "uxtheme.dll.GetThemeMargins",
    "uxtheme.dll.GetThemeIntList",
    "uxtheme.dll.GetThemePropertyOrigin",
    "uxtheme.dll.SetWindowTheme",
    "uxtheme.dll.GetThemeFilename",
    "uxtheme.dll.GetThemeSysColor",
    "uxtheme.dll.GetThemeSysColorBrush",
    "uxtheme.dll.GetThemeSysBool",
    "uxtheme.dll.GetThemeSysSize",
    "uxtheme.dll.GetThemeSysFont",
    "uxtheme.dll.GetThemeSysString",
    "uxtheme.dll.GetThemeSysInt",
    "uxtheme.dll.IsThemeActive",
    "uxtheme.dll.IsAppThemed",
    "uxtheme.dll.GetWindowTheme",
    "uxtheme.dll.EnableThemeDialogTexture",
    "uxtheme.dll.IsThemeDialogTextureEnabled",
    "uxtheme.dll.GetThemeAppProperties",
    "uxtheme.dll.SetThemeAppProperties",
    "uxtheme.dll.GetCurrentThemeName",
    "uxtheme.dll.GetThemeDocumentationProperty",
    "uxtheme.dll.DrawThemeParentBackground",
    "uxtheme.dll.EnableTheming",
    "user32.dll.NotifyWinEvent",
    "shell32.dll.SHPathPrepareForWriteW",
    "kernel32.dll.Wow64DisableWow64FsRedirection",
    "kernel32.dll.Wow64RevertWow64FsRedirection",
    "shell32.dll.SHCreateItemFromParsingName",
    "kernel32.dll.VerSetConditionMask",
    "kernel32.dll.VerifyVersionInfoW",
    "comctl32.dll.TaskDialogIndirect",
    "kernel32.dll.IsWow64Process",
    "kernel32.dll.GetSystemWow64DirectoryA",
    "advapi32.dll.RegDeleteKeyExA",
    "shell32.dll.SHGetKnownFolderPath",
    "user32.dll.DisableProcessWindowsGhosting",
    "ole32.dll.CoUninitialize",
    "ole32.dll.CoRegisterInitializeSpy",
    "ole32.dll.CoRevokeInitializeSpy",
    "kernel32.dll.SortGetHandle",
    "kernel32.dll.SortCloseHandle",
    "advapi32.dll.CheckTokenMembership",
    "comctl32.dll.RegisterClassNameW",
    "uxtheme.dll.BufferedPaintRenderAnimation",
    "uxtheme.dll.GetThemeTransitionDuration",
    "uxtheme.dll.BeginBufferedAnimation",
    "uxtheme.dll.EndBufferedAnimation",
    "uxtheme.dll.BufferedPaintStopAllAnimations",
    "uxtheme.dll.BufferedPaintUnInit",
    "wtsapi32.dll.WTSUnRegisterSessionNotification",
    "winsta.dll.WinStationUnRegisterConsoleNotification",
    "rpcrt4.dll.RpcAsyncGetCallStatus",
    "rpcrt4.dll.RpcAsyncCancelCall",
    "rpcrt4.dll.RpcAsyncCompleteCall",
    "rpcrt4.dll.RpcBindingFree",
    "oleaut32.dll.#500",
    "advapi32.dll.UnregisterTraceGuids"
]

[*] Static Analysis: {
    "pe": {
        "peid_signatures": null,
        "imports": [
            {
                "imports": [
                    {
                        "name": "WNetEnumResourceW",
                        "address": "0x65c944"
                    },
                    {
                        "name": "WNetGetUniversalNameW",
                        "address": "0x65c948"
                    },
                    {
                        "name": "WNetGetConnectionW",
                        "address": "0x65c94c"
                    },
                    {
                        "name": "WNetCloseEnum",
                        "address": "0x65c950"
                    },
                    {
                        "name": "WNetOpenEnumW",
                        "address": "0x65c954"
                    }
                ],
                "dll": "mpr.dll"
            },
            {
                "imports": [
                    {
                        "name": "GetSaveFileNameW",
                        "address": "0x65c95c"
                    },
                    {
                        "name": "GetOpenFileNameW",
                        "address": "0x65c960"
                    }
                ],
                "dll": "comdlg32.dll"
            },
            {
                "imports": [
                    {
                        "name": "FlatSB_SetScrollInfo",
                        "address": "0x65c968"
                    },
                    {
                        "name": "InitCommonControls",
                        "address": "0x65c96c"
                    },
                    {
                        "name": "ImageList_DragMove",
                        "address": "0x65c970"
                    },
                    {
                        "name": "ImageList_Destroy",
                        "address": "0x65c974"
                    },
                    {
                        "name": "_TrackMouseEvent",
                        "address": "0x65c978"
                    },
                    {
                        "name": "ImageList_DragShowNolock",
                        "address": "0x65c97c"
                    },
                    {
                        "name": "ImageList_Add",
                        "address": "0x65c980"
                    },
                    {
                        "name": "FlatSB_SetScrollProp",
                        "address": "0x65c984"
                    },
                    {
                        "name": "ImageList_GetDragImage",
                        "address": "0x65c988"
                    },
                    {
                        "name": "ImageList_Create",
                        "address": "0x65c98c"
                    },
                    {
                        "name": "ImageList_EndDrag",
                        "address": "0x65c990"
                    },
                    {
                        "name": "ImageList_DrawEx",
                        "address": "0x65c994"
                    },
                    {
                        "name": "ImageList_SetImageCount",
                        "address": "0x65c998"
                    },
                    {
                        "name": "FlatSB_GetScrollPos",
                        "address": "0x65c99c"
                    },
                    {
                        "name": "FlatSB_SetScrollPos",
                        "address": "0x65c9a0"
                    },
                    {
                        "name": "InitializeFlatSB",
                        "address": "0x65c9a4"
                    },
                    {
                        "name": "FlatSB_GetScrollInfo",
                        "address": "0x65c9a8"
                    },
                    {
                        "name": "ImageList_Write",
                        "address": "0x65c9ac"
                    },
                    {
                        "name": "ImageList_SetBkColor",
                        "address": "0x65c9b0"
                    },
                    {
                        "name": "ImageList_GetBkColor",
                        "address": "0x65c9b4"
                    },
                    {
                        "name": "ImageList_BeginDrag",
                        "address": "0x65c9b8"
                    },
                    {
                        "name": "ImageList_GetIcon",
                        "address": "0x65c9bc"
                    },
                    {
                        "name": "ImageList_GetImageCount",
                        "address": "0x65c9c0"
                    },
                    {
                        "name": "ImageList_DragEnter",
                        "address": "0x65c9c4"
                    },
                    {
                        "name": "ImageList_GetIconSize",
                        "address": "0x65c9c8"
                    },
                    {
                        "name": "ImageList_SetIconSize",
                        "address": "0x65c9cc"
                    },
                    {
                        "name": "ImageList_Read",
                        "address": "0x65c9d0"
                    },
                    {
                        "name": "ImageList_DragLeave",
                        "address": "0x65c9d4"
                    },
                    {
                        "name": "ImageList_Draw",
                        "address": "0x65c9d8"
                    },
                    {
                        "name": "ImageList_Remove",
                        "address": "0x65c9dc"
                    }
                ],
                "dll": "comctl32.dll"
            },
            {
                "imports": [
                    {
                        "name": "SHBrowseForFolderW",
                        "address": "0x65c9e4"
                    },
                    {
                        "name": "ExtractIconW",
                        "address": "0x65c9e8"
                    },
                    {
                        "name": "SHGetMalloc",
                        "address": "0x65c9ec"
                    },
                    {
                        "name": "SHGetFileInfoW",
                        "address": "0x65c9f0"
                    },
                    {
                        "name": "SHChangeNotify",
                        "address": "0x65c9f4"
                    },
                    {
                        "name": "Shell_NotifyIconW",
                        "address": "0x65c9f8"
                    },
                    {
                        "name": "ShellExecuteW",
                        "address": "0x65c9fc"
                    },
                    {
                        "name": "SHGetPathFromIDListW",
                        "address": "0x65ca00"
                    },
                    {
                        "name": "ShellExecuteExW",
                        "address": "0x65ca04"
                    }
                ],
                "dll": "shell32.dll"
            },
            {
                "imports": [
                    {
                        "name": "CopyImage",
                        "address": "0x65ca0c"
                    },
                    {
                        "name": "CreateWindowExW",
                        "address": "0x65ca10"
                    },
                    {
                        "name": "GetMenuItemInfoW",
                        "address": "0x65ca14"
                    },
                    {
                        "name": "SetMenuItemInfoW",
                        "address": "0x65ca18"
                    },
                    {
                        "name": "DefFrameProcW",
                        "address": "0x65ca1c"
                    },
                    {
                        "name": "GetDCEx",
                        "address": "0x65ca20"
                    },
                    {
                        "name": "GetMessageW",
                        "address": "0x65ca24"
                    },
                    {
                        "name": "PeekMessageW",
                        "address": "0x65ca28"
                    },
                    {
                        "name": "MonitorFromWindow",
                        "address": "0x65ca2c"
                    },
                    {
                        "name": "GetDlgCtrlID",
                        "address": "0x65ca30"
                    },
                    {
                        "name": "ScrollWindowEx",
                        "address": "0x65ca34"
                    },
                    {
                        "name": "SetTimer",
                        "address": "0x65ca38"
                    },
                    {
                        "name": "WindowFromPoint",
                        "address": "0x65ca3c"
                    },
                    {
                        "name": "BeginPaint",
                        "address": "0x65ca40"
                    },
                    {
                        "name": "RegisterClipboardFormatW",
                        "address": "0x65ca44"
                    },
                    {
                        "name": "FrameRect",
                        "address": "0x65ca48"
                    },
                    {
                        "name": "MapVirtualKeyW",
                        "address": "0x65ca4c"
                    },
                    {
                        "name": "OffsetRect",
                        "address": "0x65ca50"
                    },
                    {
                        "name": "IsWindowUnicode",
                        "address": "0x65ca54"
                    },
                    {
                        "name": "RegisterWindowMessageW",
                        "address": "0x65ca58"
                    },
                    {
                        "name": "FillRect",
                        "address": "0x65ca5c"
                    },
                    {
                        "name": "GetMenuStringW",
                        "address": "0x65ca60"
                    },
                    {
                        "name": "DispatchMessageW",
                        "address": "0x65ca64"
                    },
                    {
                        "name": "SendMessageA",
                        "address": "0x65ca68"
                    },
                    {
                        "name": "DefMDIChildProcW",
                        "address": "0x65ca6c"
                    },
                    {
                        "name": "EnumWindows",
                        "address": "0x65ca70"
                    },
                    {
                        "name": "GetClassInfoW",
                        "address": "0x65ca74"
                    },
                    {
                        "name": "GetSystemMenu",
                        "address": "0x65ca78"
                    },
                    {
                        "name": "WaitForInputIdle",
                        "address": "0x65ca7c"
                    },
                    {
                        "name": "ShowOwnedPopups",
                        "address": "0x65ca80"
                    },
                    {
                        "name": "GetScrollRange",
                        "address": "0x65ca84"
                    },
                    {
                        "name": "GetScrollPos",
                        "address": "0x65ca88"
                    },
                    {
                        "name": "SetScrollPos",
                        "address": "0x65ca8c"
                    },
                    {
                        "name": "GetActiveWindow",
                        "address": "0x65ca90"
                    },
                    {
                        "name": "SetActiveWindow",
                        "address": "0x65ca94"
                    },
                    {
                        "name": "DrawEdge",
                        "address": "0x65ca98"
                    },
                    {
                        "name": "InflateRect",
                        "address": "0x65ca9c"
                    },
                    {
                        "name": "GetKeyboardLayoutList",
                        "address": "0x65caa0"
                    },
                    {
                        "name": "OemToCharBuffA",
                        "address": "0x65caa4"
                    },
                    {
                        "name": "LoadBitmapW",
                        "address": "0x65caa8"
                    },
                    {
                        "name": "DrawFocusRect",
                        "address": "0x65caac"
                    },
                    {
                        "name": "EnumChildWindows",
                        "address": "0x65cab0"
                    },
                    {
                        "name": "GetScrollBarInfo",
                        "address": "0x65cab4"
                    },
                    {
                        "name": "SendNotifyMessageW",
                        "address": "0x65cab8"
                    },
                    {
                        "name": "ReleaseCapture",
                        "address": "0x65cabc"
                    },
                    {
                        "name": "UnhookWindowsHookEx",
                        "address": "0x65cac0"
                    },
                    {
                        "name": "LoadCursorW",
                        "address": "0x65cac4"
                    },
                    {
                        "name": "GetCapture",
                        "address": "0x65cac8"
                    },
                    {
                        "name": "SetCapture",
                        "address": "0x65cacc"
                    },
                    {
                        "name": "CreatePopupMenu",
                        "address": "0x65cad0"
                    },
                    {
                        "name": "ScrollWindow",
                        "address": "0x65cad4"
                    },
                    {
                        "name": "ShowCaret",
                        "address": "0x65cad8"
                    },
                    {
                        "name": "GetMenuItemID",
                        "address": "0x65cadc"
                    },
                    {
                        "name": "GetLastActivePopup",
                        "address": "0x65cae0"
                    },
                    {
                        "name": "CharLowerBuffW",
                        "address": "0x65cae4"
                    },
                    {
                        "name": "GetSystemMetrics",
                        "address": "0x65cae8"
                    },
                    {
                        "name": "SetWindowLongW",
                        "address": "0x65caec"
                    },
                    {
                        "name": "PostMessageW",
                        "address": "0x65caf0"
                    },
                    {
                        "name": "DrawMenuBar",
                        "address": "0x65caf4"
                    },
                    {
                        "name": "SetParent",
                        "address": "0x65caf8"
                    },
                    {
                        "name": "IsZoomed",
                        "address": "0x65cafc"
                    },
                    {
                        "name": "CharUpperBuffW",
                        "address": "0x65cb00"
                    },
                    {
                        "name": "GetClientRect",
                        "address": "0x65cb04"
                    },
                    {
                        "name": "IsChild",
                        "address": "0x65cb08"
                    },
                    {
                        "name": "ClientToScreen",
                        "address": "0x65cb0c"
                    },
                    {
                        "name": "SetWindowPlacement",
                        "address": "0x65cb10"
                    },
                    {
                        "name": "IsIconic",
                        "address": "0x65cb14"
                    },
                    {
                        "name": "CallNextHookEx",
                        "address": "0x65cb18"
                    },
                    {
                        "name": "GetMonitorInfoW",
                        "address": "0x65cb1c"
                    },
                    {
                        "name": "ShowWindow",
                        "address": "0x65cb20"
                    },
                    {
                        "name": "CheckMenuItem",
                        "address": "0x65cb24"
                    },
                    {
                        "name": "CharUpperW",
                        "address": "0x65cb28"
                    },
                    {
                        "name": "DefWindowProcW",
                        "address": "0x65cb2c"
                    },
                    {
                        "name": "GetForegroundWindow",
                        "address": "0x65cb30"
                    },
                    {
                        "name": "SetForegroundWindow",
                        "address": "0x65cb34"
                    },
                    {
                        "name": "GetWindowTextW",
                        "address": "0x65cb38"
                    },
                    {
                        "name": "EnableWindow",
                        "address": "0x65cb3c"
                    },
                    {
                        "name": "DestroyWindow",
                        "address": "0x65cb40"
                    },
                    {
                        "name": "IsDialogMessageW",
                        "address": "0x65cb44"
                    },
                    {
                        "name": "EndMenu",
                        "address": "0x65cb48"
                    },
                    {
                        "name": "RegisterClassW",
                        "address": "0x65cb4c"
                    },
                    {
                        "name": "CharNextW",
                        "address": "0x65cb50"
                    },
                    {
                        "name": "GetWindowThreadProcessId",
                        "address": "0x65cb54"
                    },
                    {
                        "name": "RedrawWindow",
                        "address": "0x65cb58"
                    },
                    {
                        "name": "GetDC",
                        "address": "0x65cb5c"
                    },
                    {
                        "name": "GetFocus",
                        "address": "0x65cb60"
                    },
                    {
                        "name": "SetFocus",
                        "address": "0x65cb64"
                    },
                    {
                        "name": "EndPaint",
                        "address": "0x65cb68"
                    },
                    {
                        "name": "ExitWindowsEx",
                        "address": "0x65cb6c"
                    },
                    {
                        "name": "ReleaseDC",
                        "address": "0x65cb70"
                    },
                    {
                        "name": "MsgWaitForMultipleObjectsEx",
                        "address": "0x65cb74"
                    },
                    {
                        "name": "LoadKeyboardLayoutW",
                        "address": "0x65cb78"
                    },
                    {
                        "name": "GetClassLongW",
                        "address": "0x65cb7c"
                    },
                    {
                        "name": "ActivateKeyboardLayout",
                        "address": "0x65cb80"
                    },
                    {
                        "name": "GetParent",
                        "address": "0x65cb84"
                    },
                    {
                        "name": "CharToOemBuffA",
                        "address": "0x65cb88"
                    },
                    {
                        "name": "DrawTextW",
                        "address": "0x65cb8c"
                    },
                    {
                        "name": "SetScrollRange",
                        "address": "0x65cb90"
                    },
                    {
                        "name": "InsertMenuItemW",
                        "address": "0x65cb94"
                    },
                    {
                        "name": "PeekMessageA",
                        "address": "0x65cb98"
                    },
                    {
                        "name": "GetPropW",
                        "address": "0x65cb9c"
                    },
                    {
                        "name": "SetClassLongW",
                        "address": "0x65cba0"
                    },
                    {
                        "name": "MessageBoxW",
                        "address": "0x65cba4"
                    },
                    {
                        "name": "MessageBeep",
                        "address": "0x65cba8"
                    },
                    {
                        "name": "SetPropW",
                        "address": "0x65cbac"
                    },
                    {
                        "name": "SetRectEmpty",
                        "address": "0x65cbb0"
                    },
                    {
                        "name": "UpdateWindow",
                        "address": "0x65cbb4"
                    },
                    {
                        "name": "RemovePropW",
                        "address": "0x65cbb8"
                    },
                    {
                        "name": "GetSubMenu",
                        "address": "0x65cbbc"
                    },
                    {
                        "name": "MsgWaitForMultipleObjects",
                        "address": "0x65cbc0"
                    },
                    {
                        "name": "DestroyMenu",
                        "address": "0x65cbc4"
                    },
                    {
                        "name": "DestroyIcon",
                        "address": "0x65cbc8"
                    },
                    {
                        "name": "SetWindowsHookExW",
                        "address": "0x65cbcc"
                    },
                    {
                        "name": "IsWindowVisible",
                        "address": "0x65cbd0"
                    },
                    {
                        "name": "DispatchMessageA",
                        "address": "0x65cbd4"
                    },
                    {
                        "name": "UnregisterClassW",
                        "address": "0x65cbd8"
                    },
                    {
                        "name": "GetTopWindow",
                        "address": "0x65cbdc"
                    },
                    {
                        "name": "SendMessageW",
                        "address": "0x65cbe0"
                    },
                    {
                        "name": "AdjustWindowRectEx",
                        "address": "0x65cbe4"
                    },
                    {
                        "name": "DrawIcon",
                        "address": "0x65cbe8"
                    },
                    {
                        "name": "IsWindow",
                        "address": "0x65cbec"
                    },
                    {
                        "name": "EnumThreadWindows",
                        "address": "0x65cbf0"
                    },
                    {
                        "name": "InvalidateRect",
                        "address": "0x65cbf4"
                    },
                    {
                        "name": "GetKeyboardState",
                        "address": "0x65cbf8"
                    },
                    {
                        "name": "DrawFrameControl",
                        "address": "0x65cbfc"
                    },
                    {
                        "name": "ScreenToClient",
                        "address": "0x65cc00"
                    },
                    {
                        "name": "SendMessageTimeoutW",
                        "address": "0x65cc04"
                    },
                    {
                        "name": "BringWindowToTop",
                        "address": "0x65cc08"
                    },
                    {
                        "name": "SetCursor",
                        "address": "0x65cc0c"
                    },
                    {
                        "name": "CreateIcon",
                        "address": "0x65cc10"
                    },
                    {
                        "name": "CreateMenu",
                        "address": "0x65cc14"
                    },
                    {
                        "name": "LoadStringW",
                        "address": "0x65cc18"
                    },
                    {
                        "name": "CharLowerW",
                        "address": "0x65cc1c"
                    },
                    {
                        "name": "SetWindowPos",
                        "address": "0x65cc20"
                    },
                    {
                        "name": "SetWindowRgn",
                        "address": "0x65cc24"
                    },
                    {
                        "name": "GetMenuItemCount",
                        "address": "0x65cc28"
                    },
                    {
                        "name": "RemoveMenu",
                        "address": "0x65cc2c"
                    },
                    {
                        "name": "AppendMenuW",
                        "address": "0x65cc30"
                    },
                    {
                        "name": "GetSysColorBrush",
                        "address": "0x65cc34"
                    },
                    {
                        "name": "GetKeyboardLayoutNameW",
                        "address": "0x65cc38"
                    },
                    {
                        "name": "GetWindowDC",
                        "address": "0x65cc3c"
                    },
                    {
                        "name": "TranslateMessage",
                        "address": "0x65cc40"
                    },
                    {
                        "name": "DrawTextExW",
                        "address": "0x65cc44"
                    },
                    {
                        "name": "MapWindowPoints",
                        "address": "0x65cc48"
                    },
                    {
                        "name": "EnumDisplayMonitors",
                        "address": "0x65cc4c"
                    },
                    {
                        "name": "CallWindowProcW",
                        "address": "0x65cc50"
                    },
                    {
                        "name": "DestroyCursor",
                        "address": "0x65cc54"
                    },
                    {
                        "name": "ReplyMessage",
                        "address": "0x65cc58"
                    },
                    {
                        "name": "GetScrollInfo",
                        "address": "0x65cc5c"
                    },
                    {
                        "name": "SetWindowTextW",
                        "address": "0x65cc60"
                    },
                    {
                        "name": "GetMessageExtraInfo",
                        "address": "0x65cc64"
                    },
                    {
                        "name": "EnableScrollBar",
                        "address": "0x65cc68"
                    },
                    {
                        "name": "GetSysColor",
                        "address": "0x65cc6c"
                    },
                    {
                        "name": "TrackPopupMenu",
                        "address": "0x65cc70"
                    },
                    {
                        "name": "DrawIconEx",
                        "address": "0x65cc74"
                    },
                    {
                        "name": "PostQuitMessage",
                        "address": "0x65cc78"
                    },
                    {
                        "name": "GetClassNameW",
                        "address": "0x65cc7c"
                    },
                    {
                        "name": "ShowScrollBar",
                        "address": "0x65cc80"
                    },
                    {
                        "name": "EnableMenuItem",
                        "address": "0x65cc84"
                    },
                    {
                        "name": "GetIconInfo",
                        "address": "0x65cc88"
                    },
                    {
                        "name": "GetMessagePos",
                        "address": "0x65cc8c"
                    },
                    {
                        "name": "SetScrollInfo",
                        "address": "0x65cc90"
                    },
                    {
                        "name": "GetKeyNameTextW",
                        "address": "0x65cc94"
                    },
                    {
                        "name": "GetDesktopWindow",
                        "address": "0x65cc98"
                    },
                    {
                        "name": "GetCursorPos",
                        "address": "0x65cc9c"
                    },
                    {
                        "name": "SetCursorPos",
                        "address": "0x65cca0"
                    },
                    {
                        "name": "HideCaret",
                        "address": "0x65cca4"
                    },
                    {
                        "name": "GetMenu",
                        "address": "0x65cca8"
                    },
                    {
                        "name": "GetMenuState",
                        "address": "0x65ccac"
                    },
                    {
                        "name": "SetMenu",
                        "address": "0x65ccb0"
                    },
                    {
                        "name": "SetRect",
                        "address": "0x65ccb4"
                    },
                    {
                        "name": "GetKeyState",
                        "address": "0x65ccb8"
                    },
                    {
                        "name": "FindWindowExW",
                        "address": "0x65ccbc"
                    },
                    {
                        "name": "MonitorFromPoint",
                        "address": "0x65ccc0"
                    },
                    {
                        "name": "SystemParametersInfoW",
                        "address": "0x65ccc4"
                    },
                    {
                        "name": "LoadIconW",
                        "address": "0x65ccc8"
                    },
                    {
                        "name": "GetCursor",
                        "address": "0x65cccc"
                    },
                    {
                        "name": "GetWindow",
                        "address": "0x65ccd0"
                    },
                    {
                        "name": "GetWindowLongW",
                        "address": "0x65ccd4"
                    },
                    {
                        "name": "GetWindowRect",
                        "address": "0x65ccd8"
                    },
                    {
                        "name": "InsertMenuW",
                        "address": "0x65ccdc"
                    },
                    {
                        "name": "KillTimer",
                        "address": "0x65cce0"
                    },
                    {
                        "name": "WaitMessage",
                        "address": "0x65cce4"
                    },
                    {
                        "name": "IsWindowEnabled",
                        "address": "0x65cce8"
                    },
                    {
                        "name": "IsDialogMessageA",
                        "address": "0x65ccec"
                    },
                    {
                        "name": "TranslateMDISysAccel",
                        "address": "0x65ccf0"
                    },
                    {
                        "name": "GetWindowPlacement",
                        "address": "0x65ccf4"
                    },
                    {
                        "name": "FindWindowW",
                        "address": "0x65ccf8"
                    },
                    {
                        "name": "DeleteMenu",
                        "address": "0x65ccfc"
                    },
                    {
                        "name": "GetKeyboardLayout",
                        "address": "0x65cd00"
                    }
                ],
                "dll": "user32.dll"
            },
            {
                "imports": [
                    {
                        "name": "GetFileVersionInfoSizeW",
                        "address": "0x65cd08"
                    },
                    {
                        "name": "VerQueryValueW",
                        "address": "0x65cd0c"
                    },
                    {
                        "name": "GetFileVersionInfoW",
                        "address": "0x65cd10"
                    }
                ],
                "dll": "version.dll"
            },
            {
                "imports": [
                    {
                        "name": "SafeArrayPutElement",
                        "address": "0x65cd18"
                    },
                    {
                        "name": "LoadTypeLib",
                        "address": "0x65cd1c"
                    },
                    {
                        "name": "GetErrorInfo",
                        "address": "0x65cd20"
                    },
                    {
                        "name": "VariantInit",
                        "address": "0x65cd24"
                    },
                    {
                        "name": "VariantClear",
                        "address": "0x65cd28"
                    },
                    {
                        "name": "SysFreeString",
                        "address": "0x65cd2c"
                    },
                    {
                        "name": "SysReAllocStringLen",
                        "address": "0x65cd30"
                    },
                    {
                        "name": "SafeArrayCreate",
                        "address": "0x65cd34"
                    },
                    {
                        "name": "SafeArrayGetElement",
                        "address": "0x65cd38"
                    },
                    {
                        "name": "GetActiveObject",
                        "address": "0x65cd3c"
                    },
                    {
                        "name": "SysAllocStringLen",
                        "address": "0x65cd40"
                    },
                    {
                        "name": "SafeArrayPtrOfIndex",
                        "address": "0x65cd44"
                    },
                    {
                        "name": "SafeArrayGetUBound",
                        "address": "0x65cd48"
                    },
                    {
                        "name": "SafeArrayGetLBound",
                        "address": "0x65cd4c"
                    },
                    {
                        "name": "VariantCopy",
                        "address": "0x65cd50"
                    },
                    {
                        "name": "RegisterTypeLib",
                        "address": "0x65cd54"
                    },
                    {
                        "name": "VariantChangeType",
                        "address": "0x65cd58"
                    },
                    {
                        "name": "VariantCopyInd",
                        "address": "0x65cd5c"
                    }
                ],
                "dll": "oleaut32.dll"
            },
            {
                "imports": [
                    {
                        "name": "RegSetValueExW",
                        "address": "0x65cd64"
                    },
                    {
                        "name": "RegEnumKeyExW",
                        "address": "0x65cd68"
                    },
                    {
                        "name": "AdjustTokenPrivileges",
                        "address": "0x65cd6c"
                    },
                    {
                        "name": "OpenThreadToken",
                        "address": "0x65cd70"
                    },
                    {
                        "name": "GetUserNameW",
                        "address": "0x65cd74"
                    },
                    {
                        "name": "RegDeleteKeyW",
                        "address": "0x65cd78"
                    },
                    {
                        "name": "LookupPrivilegeValueW",
                        "address": "0x65cd7c"
                    },
                    {
                        "name": "OpenProcessToken",
                        "address": "0x65cd80"
                    },
                    {
                        "name": "RegOpenKeyExW",
                        "address": "0x65cd84"
                    },
                    {
                        "name": "RegQueryInfoKeyW",
                        "address": "0x65cd88"
                    },
                    {
                        "name": "AllocateAndInitializeSid",
                        "address": "0x65cd8c"
                    },
                    {
                        "name": "FreeSid",
                        "address": "0x65cd90"
                    },
                    {
                        "name": "EqualSid",
                        "address": "0x65cd94"
                    },
                    {
                        "name": "RegDeleteValueW",
                        "address": "0x65cd98"
                    },
                    {
                        "name": "RegFlushKey",
                        "address": "0x65cd9c"
                    },
                    {
                        "name": "RegQueryValueExW",
                        "address": "0x65cda0"
                    },
                    {
                        "name": "RegEnumValueW",
                        "address": "0x65cda4"
                    },
                    {
                        "name": "GetTokenInformation",
                        "address": "0x65cda8"
                    },
                    {
                        "name": "InitializeSecurityDescriptor",
                        "address": "0x65cdac"
                    },
                    {
                        "name": "RegCloseKey",
                        "address": "0x65cdb0"
                    },
                    {
                        "name": "RegCreateKeyExW",
                        "address": "0x65cdb4"
                    },
                    {
                        "name": "SetSecurityDescriptorDacl",
                        "address": "0x65cdb8"
                    }
                ],
                "dll": "advapi32.dll"
            },
            {
                "imports": [
                    {
                        "name": "NetWkstaGetInfo",
                        "address": "0x65cdc0"
                    },
                    {
                        "name": "NetApiBufferFree",
                        "address": "0x65cdc4"
                    }
                ],
                "dll": "netapi32.dll"
            },
            {
                "imports": [
                    {
                        "name": "SetFileAttributesW",
                        "address": "0x65cdcc"
                    },
                    {
                        "name": "SetFileTime",
                        "address": "0x65cdd0"
                    },
                    {
                        "name": "GetACP",
                        "address": "0x65cdd4"
                    },
                    {
                        "name": "GetExitCodeProcess",
                        "address": "0x65cdd8"
                    },
                    {
                        "name": "IsBadWritePtr",
                        "address": "0x65cddc"
                    },
                    {
                        "name": "CloseHandle",
                        "address": "0x65cde0"
                    },
                    {
                        "name": "LocalFree",
                        "address": "0x65cde4"
                    },
                    {
                        "name": "GetCurrentProcessId",
                        "address": "0x65cde8"
                    },
                    {
                        "name": "SizeofResource",
                        "address": "0x65cdec"
                    },
                    {
                        "name": "VirtualProtect",
                        "address": "0x65cdf0"
                    },
                    {
                        "name": "QueryPerformanceFrequency",
                        "address": "0x65cdf4"
                    },
                    {
                        "name": "FindNextFileW",
                        "address": "0x65cdf8"
                    },
                    {
                        "name": "GetFullPathNameW",
                        "address": "0x65cdfc"
                    },
                    {
                        "name": "VirtualFree",
                        "address": "0x65ce00"
                    },
                    {
                        "name": "ExitProcess",
                        "address": "0x65ce04"
                    },
                    {
                        "name": "HeapAlloc",
                        "address": "0x65ce08"
                    },
                    {
                        "name": "WriteProfileStringW",
                        "address": "0x65ce0c"
                    },
                    {
                        "name": "GetCPInfoExW",
                        "address": "0x65ce10"
                    },
                    {
                        "name": "RtlUnwind",
                        "address": "0x65ce14"
                    },
                    {
                        "name": "GetCPInfo",
                        "address": "0x65ce18"
                    },
                    {
                        "name": "GetStdHandle",
                        "address": "0x65ce1c"
                    },
                    {
                        "name": "FileTimeToLocalFileTime",
                        "address": "0x65ce20"
                    },
                    {
                        "name": "GetModuleHandleW",
                        "address": "0x65ce24"
                    },
                    {
                        "name": "FreeLibrary",
                        "address": "0x65ce28"
                    },
                    {
                        "name": "HeapDestroy",
                        "address": "0x65ce2c"
                    },
                    {
                        "name": "CompareFileTime",
                        "address": "0x65ce30"
                    },
                    {
                        "name": "ReadFile",
                        "address": "0x65ce34"
                    },
                    {
                        "name": "CreateProcessW",
                        "address": "0x65ce38"
                    },
                    {
                        "name": "TransactNamedPipe",
                        "address": "0x65ce3c"
                    },
                    {
                        "name": "GetLastError",
                        "address": "0x65ce40"
                    },
                    {
                        "name": "GetModuleFileNameW",
                        "address": "0x65ce44"
                    },
                    {
                        "name": "SetLastError",
                        "address": "0x65ce48"
                    },
                    {
                        "name": "FindResourceW",
                        "address": "0x65ce4c"
                    },
                    {
                        "name": "OpenMutexW",
                        "address": "0x65ce50"
                    },
                    {
                        "name": "CreateThread",
                        "address": "0x65ce54"
                    },
                    {
                        "name": "CompareStringW",
                        "address": "0x65ce58"
                    },
                    {
                        "name": "CopyFileW",
                        "address": "0x65ce5c"
                    },
                    {
                        "name": "CreateMutexW",
                        "address": "0x65ce60"
                    },
                    {
                        "name": "LoadLibraryA",
                        "address": "0x65ce64"
                    },
                    {
                        "name": "ResetEvent",
                        "address": "0x65ce68"
                    },
                    {
                        "name": "MulDiv",
                        "address": "0x65ce6c"
                    },
                    {
                        "name": "FreeResource",
                        "address": "0x65ce70"
                    },
                    {
                        "name": "GetDriveTypeW",
                        "address": "0x65ce74"
                    },
                    {
                        "name": "GetVersion",
                        "address": "0x65ce78"
                    },
                    {
                        "name": "RaiseException",
                        "address": "0x65ce7c"
                    },
                    {
                        "name": "MoveFileW",
                        "address": "0x65ce80"
                    },
                    {
                        "name": "GlobalAddAtomW",
                        "address": "0x65ce84"
                    },
                    {
                        "name": "GetSystemTimeAsFileTime",
                        "address": "0x65ce88"
                    },
                    {
                        "name": "FormatMessageW",
                        "address": "0x65ce8c"
                    },
                    {
                        "name": "OpenProcess",
                        "address": "0x65ce90"
                    },
                    {
                        "name": "SwitchToThread",
                        "address": "0x65ce94"
                    },
                    {
                        "name": "GetExitCodeThread",
                        "address": "0x65ce98"
                    },
                    {
                        "name": "GetCurrentThread",
                        "address": "0x65ce9c"
                    },
                    {
                        "name": "GetLogicalDrives",
                        "address": "0x65cea0"
                    },
                    {
                        "name": "LocalFileTimeToFileTime",
                        "address": "0x65cea4"
                    },
                    {
                        "name": "SetNamedPipeHandleState",
                        "address": "0x65cea8"
                    },
                    {
                        "name": "LoadLibraryExW",
                        "address": "0x65ceac"
                    },
                    {
                        "name": "TerminateProcess",
                        "address": "0x65ceb0"
                    },
                    {
                        "name": "LockResource",
                        "address": "0x65ceb4"
                    },
                    {
                        "name": "FileTimeToSystemTime",
                        "address": "0x65ceb8"
                    },
                    {
                        "name": "GetShortPathNameW",
                        "address": "0x65cebc"
                    },
                    {
                        "name": "GetCurrentThreadId",
                        "address": "0x65cec0"
                    },
                    {
                        "name": "UnhandledExceptionFilter",
                        "address": "0x65cec4"
                    },
                    {
                        "name": "MoveFileExW",
                        "address": "0x65cec8"
                    },
                    {
                        "name": "VirtualQuery",
                        "address": "0x65cecc"
                    },
                    {
                        "name": "GlobalFindAtomW",
                        "address": "0x65ced0"
                    },
                    {
                        "name": "VirtualQueryEx",
                        "address": "0x65ced4"
                    },
                    {
                        "name": "Sleep",
                        "address": "0x65ced8"
                    },
                    {
                        "name": "EnterCriticalSection",
                        "address": "0x65cedc"
                    },
                    {
                        "name": "SetFilePointer",
                        "address": "0x65cee0"
                    },
                    {
                        "name": "ReleaseMutex",
                        "address": "0x65cee4"
                    },
                    {
                        "name": "FlushFileBuffers",
                        "address": "0x65cee8"
                    },
                    {
                        "name": "LoadResource",
                        "address": "0x65ceec"
                    },
                    {
                        "name": "SuspendThread",
                        "address": "0x65cef0"
                    },
                    {
                        "name": "GetTickCount",
                        "address": "0x65cef4"
                    },
                    {
                        "name": "WritePrivateProfileStringW",
                        "address": "0x65cef8"
                    },
                    {
                        "name": "GetFileSize",
                        "address": "0x65cefc"
                    },
                    {
                        "name": "GetStartupInfoW",
                        "address": "0x65cf00"
                    },
                    {
                        "name": "GlobalDeleteAtom",
                        "address": "0x65cf04"
                    },
                    {
                        "name": "GetFileAttributesW",
                        "address": "0x65cf08"
                    },
                    {
                        "name": "GetCurrentDirectoryW",
                        "address": "0x65cf0c"
                    },
                    {
                        "name": "SetCurrentDirectoryW",
                        "address": "0x65cf10"
                    },
                    {
                        "name": "InitializeCriticalSection",
                        "address": "0x65cf14"
                    },
                    {
                        "name": "GetThreadPriority",
                        "address": "0x65cf18"
                    },
                    {
                        "name": "GetCurrentProcess",
                        "address": "0x65cf1c"
                    },
                    {
                        "name": "SetThreadPriority",
                        "address": "0x65cf20"
                    },
                    {
                        "name": "VirtualAlloc",
                        "address": "0x65cf24"
                    },
                    {
                        "name": "GetSystemInfo",
                        "address": "0x65cf28"
                    },
                    {
                        "name": "GetCommandLineW",
                        "address": "0x65cf2c"
                    },
                    {
                        "name": "LeaveCriticalSection",
                        "address": "0x65cf30"
                    },
                    {
                        "name": "GetProcAddress",
                        "address": "0x65cf34"
                    },
                    {
                        "name": "ResumeThread",
                        "address": "0x65cf38"
                    },
                    {
                        "name": "GetVersionExW",
                        "address": "0x65cf3c"
                    },
                    {
                        "name": "VerifyVersionInfoW",
                        "address": "0x65cf40"
                    },
                    {
                        "name": "HeapCreate",
                        "address": "0x65cf44"
                    },
                    {
                        "name": "GetWindowsDirectoryW",
                        "address": "0x65cf48"
                    },
                    {
                        "name": "DeviceIoControl",
                        "address": "0x65cf4c"
                    },
                    {
                        "name": "GetDiskFreeSpaceW",
                        "address": "0x65cf50"
                    },
                    {
                        "name": "VerSetConditionMask",
                        "address": "0x65cf54"
                    },
                    {
                        "name": "FindFirstFileW",
                        "address": "0x65cf58"
                    },
                    {
                        "name": "GetUserDefaultUILanguage",
                        "address": "0x65cf5c"
                    },
                    {
                        "name": "lstrlenW",
                        "address": "0x65cf60"
                    },
                    {
                        "name": "QueryPerformanceCounter",
                        "address": "0x65cf64"
                    },
                    {
                        "name": "SetEndOfFile",
                        "address": "0x65cf68"
                    },
                    {
                        "name": "lstrcmpW",
                        "address": "0x65cf6c"
                    },
                    {
                        "name": "HeapFree",
                        "address": "0x65cf70"
                    },
                    {
                        "name": "WideCharToMultiByte",
                        "address": "0x65cf74"
                    },
                    {
                        "name": "FindClose",
                        "address": "0x65cf78"
                    },
                    {
                        "name": "MultiByteToWideChar",
                        "address": "0x65cf7c"
                    },
                    {
                        "name": "LoadLibraryW",
                        "address": "0x65cf80"
                    },
                    {
                        "name": "SetEvent",
                        "address": "0x65cf84"
                    },
                    {
                        "name": "CreateFileW",
                        "address": "0x65cf88"
                    },
                    {
                        "name": "GetLocaleInfoW",
                        "address": "0x65cf8c"
                    },
                    {
                        "name": "GetSystemDirectoryW",
                        "address": "0x65cf90"
                    },
                    {
                        "name": "DeleteFileW",
                        "address": "0x65cf94"
                    },
                    {
                        "name": "GetEnvironmentVariableW",
                        "address": "0x65cf98"
                    },
                    {
                        "name": "GetLocalTime",
                        "address": "0x65cf9c"
                    },
                    {
                        "name": "WaitForSingleObject",
                        "address": "0x65cfa0"
                    },
                    {
                        "name": "WriteFile",
                        "address": "0x65cfa4"
                    },
                    {
                        "name": "CreateNamedPipeW",
                        "address": "0x65cfa8"
                    },
                    {
                        "name": "ExitThread",
                        "address": "0x65cfac"
                    },
                    {
                        "name": "DeleteCriticalSection",
                        "address": "0x65cfb0"
                    },
                    {
                        "name": "GetDateFormatW",
                        "address": "0x65cfb4"
                    },
                    {
                        "name": "TlsGetValue",
                        "address": "0x65cfb8"
                    },
                    {
                        "name": "SetErrorMode",
                        "address": "0x65cfbc"
                    },
                    {
                        "name": "GetComputerNameW",
                        "address": "0x65cfc0"
                    },
                    {
                        "name": "IsValidLocale",
                        "address": "0x65cfc4"
                    },
                    {
                        "name": "TlsSetValue",
                        "address": "0x65cfc8"
                    },
                    {
                        "name": "CreateDirectoryW",
                        "address": "0x65cfcc"
                    },
                    {
                        "name": "GetOverlappedResult",
                        "address": "0x65cfd0"
                    },
                    {
                        "name": "GetSystemDefaultUILanguage",
                        "address": "0x65cfd4"
                    },
                    {
                        "name": "EnumCalendarInfoW",
                        "address": "0x65cfd8"
                    },
                    {
                        "name": "GetProfileStringW",
                        "address": "0x65cfdc"
                    },
                    {
                        "name": "LocalAlloc",
                        "address": "0x65cfe0"
                    },
                    {
                        "name": "GetUserDefaultLangID",
                        "address": "0x65cfe4"
                    },
                    {
                        "name": "RemoveDirectoryW",
                        "address": "0x65cfe8"
                    },
                    {
                        "name": "IsDBCSLeadByte",
                        "address": "0x65cfec"
                    },
                    {
                        "name": "CreateEventW",
                        "address": "0x65cff0"
                    },
                    {
                        "name": "GetPrivateProfileStringW",
                        "address": "0x65cff4"
                    },
                    {
                        "name": "WaitForMultipleObjectsEx",
                        "address": "0x65cff8"
                    },
                    {
                        "name": "GetThreadLocale",
                        "address": "0x65cffc"
                    },
                    {
                        "name": "SetThreadLocale",
                        "address": "0x65d000"
                    }
                ],
                "dll": "kernel32.dll"
            },
            {
                "imports": [
                    {
                        "name": "CoCreateInstance",
                        "address": "0x65d008"
                    },
                    {
                        "name": "CLSIDFromString",
                        "address": "0x65d00c"
                    },
                    {
                        "name": "CoUninitialize",
                        "address": "0x65d010"
                    },
                    {
                        "name": "IsEqualGUID",
                        "address": "0x65d014"
                    },
                    {
                        "name": "OleInitialize",
                        "address": "0x65d018"
                    },
                    {
                        "name": "CoFreeUnusedLibraries",
                        "address": "0x65d01c"
                    },
                    {
                        "name": "CLSIDFromProgID",
                        "address": "0x65d020"
                    },
                    {
                        "name": "OleUninitialize",
                        "address": "0x65d024"
                    },
                    {
                        "name": "CoDisconnectObject",
                        "address": "0x65d028"
                    },
                    {
                        "name": "CoInitialize",
                        "address": "0x65d02c"
                    },
                    {
                        "name": "CoTaskMemFree",
                        "address": "0x65d030"
                    },
                    {
                        "name": "CoTaskMemAlloc",
                        "address": "0x65d034"
                    },
                    {
                        "name": "StringFromCLSID",
                        "address": "0x65d038"
                    }
                ],
                "dll": "ole32.dll"
            },
            {
                "imports": [
                    {
                        "name": "Arc",
                        "address": "0x65d040"
                    },
                    {
                        "name": "Pie",
                        "address": "0x65d044"
                    },
                    {
                        "name": "SetBkMode",
                        "address": "0x65d048"
                    },
                    {
                        "name": "SelectPalette",
                        "address": "0x65d04c"
                    },
                    {
                        "name": "CreateCompatibleBitmap",
                        "address": "0x65d050"
                    },
                    {
                        "name": "ExcludeClipRect",
                        "address": "0x65d054"
                    },
                    {
                        "name": "RectVisible",
                        "address": "0x65d058"
                    },
                    {
                        "name": "SetWindowOrgEx",
                        "address": "0x65d05c"
                    },
                    {
                        "name": "MaskBlt",
                        "address": "0x65d060"
                    },
                    {
                        "name": "AngleArc",
                        "address": "0x65d064"
                    },
                    {
                        "name": "Chord",
                        "address": "0x65d068"
                    },
                    {
                        "name": "SetTextColor",
                        "address": "0x65d06c"
                    },
                    {
                        "name": "StretchBlt",
                        "address": "0x65d070"
                    },
                    {
                        "name": "SetDIBits",
                        "address": "0x65d074"
                    },
                    {
                        "name": "SetViewportOrgEx",
                        "address": "0x65d078"
                    },
                    {
                        "name": "CreateRectRgn",
                        "address": "0x65d07c"
                    },
                    {
                        "name": "RealizePalette",
                        "address": "0x65d080"
                    },
                    {
                        "name": "SetDIBColorTable",
                        "address": "0x65d084"
                    },
                    {
                        "name": "GetDIBColorTable",
                        "address": "0x65d088"
                    },
                    {
                        "name": "RoundRect",
                        "address": "0x65d08c"
                    },
                    {
                        "name": "RestoreDC",
                        "address": "0x65d090"
                    },
                    {
                        "name": "SetRectRgn",
                        "address": "0x65d094"
                    },
                    {
                        "name": "GetTextMetricsW",
                        "address": "0x65d098"
                    },
                    {
                        "name": "RemoveFontResourceW",
                        "address": "0x65d09c"
                    },
                    {
                        "name": "GetWindowOrgEx",
                        "address": "0x65d0a0"
                    },
                    {
                        "name": "CreatePalette",
                        "address": "0x65d0a4"
                    },
                    {
                        "name": "CreateBrushIndirect",
                        "address": "0x65d0a8"
                    },
                    {
                        "name": "PatBlt",
                        "address": "0x65d0ac"
                    },
                    {
                        "name": "LineDDA",
                        "address": "0x65d0b0"
                    },
                    {
                        "name": "PolyBezierTo",
                        "address": "0x65d0b4"
                    },
                    {
                        "name": "GetStockObject",
                        "address": "0x65d0b8"
                    },
                    {
                        "name": "CreateSolidBrush",
                        "address": "0x65d0bc"
                    },
                    {
                        "name": "Polygon",
                        "address": "0x65d0c0"
                    },
                    {
                        "name": "Rectangle",
                        "address": "0x65d0c4"
                    },
                    {
                        "name": "MoveToEx",
                        "address": "0x65d0c8"
                    },
                    {
                        "name": "DeleteDC",
                        "address": "0x65d0cc"
                    },
                    {
                        "name": "SaveDC",
                        "address": "0x65d0d0"
                    },
                    {
                        "name": "BitBlt",
                        "address": "0x65d0d4"
                    },
                    {
                        "name": "Ellipse",
                        "address": "0x65d0d8"
                    },
                    {
                        "name": "FrameRgn",
                        "address": "0x65d0dc"
                    },
                    {
                        "name": "GetDeviceCaps",
                        "address": "0x65d0e0"
                    },
                    {
                        "name": "GetBitmapBits",
                        "address": "0x65d0e4"
                    },
                    {
                        "name": "GetTextExtentPoint32W",
                        "address": "0x65d0e8"
                    },
                    {
                        "name": "GetClipBox",
                        "address": "0x65d0ec"
                    },
                    {
                        "name": "Polyline",
                        "address": "0x65d0f0"
                    },
                    {
                        "name": "IntersectClipRect",
                        "address": "0x65d0f4"
                    },
                    {
                        "name": "GetSystemPaletteEntries",
                        "address": "0x65d0f8"
                    },
                    {
                        "name": "CreateBitmap",
                        "address": "0x65d0fc"
                    },
                    {
                        "name": "AddFontResourceW",
                        "address": "0x65d100"
                    },
                    {
                        "name": "CreateDIBitmap",
                        "address": "0x65d104"
                    },
                    {
                        "name": "GetStretchBltMode",
                        "address": "0x65d108"
                    },
                    {
                        "name": "CreateDIBSection",
                        "address": "0x65d10c"
                    },
                    {
                        "name": "CreatePenIndirect",
                        "address": "0x65d110"
                    },
                    {
                        "name": "SetStretchBltMode",
                        "address": "0x65d114"
                    },
                    {
                        "name": "GetDIBits",
                        "address": "0x65d118"
                    },
                    {
                        "name": "CreateFontIndirectW",
                        "address": "0x65d11c"
                    },
                    {
                        "name": "PolyBezier",
                        "address": "0x65d120"
                    },
                    {
                        "name": "LineTo",
                        "address": "0x65d124"
                    },
                    {
                        "name": "GetRgnBox",
                        "address": "0x65d128"
                    },
                    {
                        "name": "EnumFontsW",
                        "address": "0x65d12c"
                    },
                    {
                        "name": "CreateHalftonePalette",
                        "address": "0x65d130"
                    },
                    {
                        "name": "DeleteObject",
                        "address": "0x65d134"
                    },
                    {
                        "name": "SelectObject",
                        "address": "0x65d138"
                    },
                    {
                        "name": "ExtFloodFill",
                        "address": "0x65d13c"
                    },
                    {
                        "name": "UnrealizeObject",
                        "address": "0x65d140"
                    },
                    {
                        "name": "SetBkColor",
                        "address": "0x65d144"
                    },
                    {
                        "name": "CreateCompatibleDC",
                        "address": "0x65d148"
                    },
                    {
                        "name": "GetObjectW",
                        "address": "0x65d14c"
                    },
                    {
                        "name": "GetBrushOrgEx",
                        "address": "0x65d150"
                    },
                    {
                        "name": "GetCurrentPositionEx",
                        "address": "0x65d154"
                    },
                    {
                        "name": "SetROP2",
                        "address": "0x65d158"
                    },
                    {
                        "name": "GetTextExtentPointW",
                        "address": "0x65d15c"
                    },
                    {
                        "name": "ExtTextOutW",
                        "address": "0x65d160"
                    },
                    {
                        "name": "SetBrushOrgEx",
                        "address": "0x65d164"
                    },
                    {
                        "name": "GetPixel",
                        "address": "0x65d168"
                    },
                    {
                        "name": "ArcTo",
                        "address": "0x65d16c"
                    },
                    {
                        "name": "GdiFlush",
                        "address": "0x65d170"
                    },
                    {
                        "name": "SetPixel",
                        "address": "0x65d174"
                    },
                    {
                        "name": "EnumFontFamiliesExW",
                        "address": "0x65d178"
                    },
                    {
                        "name": "GetPaletteEntries",
                        "address": "0x65d17c"
                    }
                ],
                "dll": "gdi32.dll"
            }
        ],
        "digital_signers": null,
        "exported_dll_name": "Setup.exe",
        "actual_checksum": "0x00285e43",
        "overlay": {
            "size": "0x00005951",
            "offset": "0x00279800"
        },
        "imagebase": "0x00400000",
        "reported_checksum": "0x00000000",
        "icon_hash": null,
        "entrypoint": "0x0064d4a0",
        "timestamp": "2019-04-27 08:22:12",
        "osversion": "6.0",
        "sections": [
            {
                "name": ".text",
                "characteristics": "IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ",
                "virtual_address": "0x00001000",
                "size_of_data": "0x00249400",
                "entropy": "6.41",
                "raw_address": "0x00000400",
                "virtual_size": "0x00249228",
                "characteristics_raw": "0x60000020"
            },
            {
                "name": ".itext",
                "characteristics": "IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ",
                "virtual_address": "0x0024b000",
                "size_of_data": "0x00002800",
                "entropy": "6.13",
                "raw_address": "0x00249800",
                "virtual_size": "0x000026c4",
                "characteristics_raw": "0x60000020"
            },
            {
                "name": ".data",
                "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
                "virtual_address": "0x0024e000",
                "size_of_data": "0x00005c00",
                "entropy": "5.06",
                "raw_address": "0x0024c000",
                "virtual_size": "0x00005a34",
                "characteristics_raw": "0xc0000040"
            },
            {
                "name": ".bss",
                "characteristics": "IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
                "virtual_address": "0x00254000",
                "size_of_data": "0x00000000",
                "entropy": "0.00",
                "raw_address": "0x00000000",
                "virtual_size": "0x000071d8",
                "characteristics_raw": "0xc0000000"
            },
            {
                "name": ".idata",
                "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
                "virtual_address": "0x0025c000",
                "size_of_data": "0x00003600",
                "entropy": "5.27",
                "raw_address": "0x00251c00",
                "virtual_size": "0x0000358c",
                "characteristics_raw": "0xc0000040"
            },
            {
                "name": ".didata",
                "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
                "virtual_address": "0x00260000",
                "size_of_data": "0x00000a00",
                "entropy": "4.31",
                "raw_address": "0x00255200",
                "virtual_size": "0x000009ee",
                "characteristics_raw": "0xc0000040"
            },
            {
                "name": ".edata",
                "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
                "virtual_address": "0x00261000",
                "size_of_data": "0x00000200",
                "entropy": "1.85",
                "raw_address": "0x00255c00",
                "virtual_size": "0x00000097",
                "characteristics_raw": "0x40000040"
            },
            {
                "name": ".tls",
                "characteristics": "IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE",
                "virtual_address": "0x00262000",
                "size_of_data": "0x00000000",
                "entropy": "0.00",
                "raw_address": "0x00000000",
                "virtual_size": "0x00000044",
                "characteristics_raw": "0xc0000000"
            },
            {
                "name": ".rdata",
                "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
                "virtual_address": "0x00263000",
                "size_of_data": "0x00000200",
                "entropy": "1.34",
                "raw_address": "0x00255e00",
                "virtual_size": "0x0000005d",
                "characteristics_raw": "0x40000040"
            },
            {
                "name": ".rsrc",
                "characteristics": "IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ",
                "virtual_address": "0x00264000",
                "size_of_data": "0x00023800",
                "entropy": "5.74",
                "raw_address": "0x00256000",
                "virtual_size": "0x000237e0",
                "characteristics_raw": "0x40000040"
            }
        ],
        "resources": [],
        "dirents": [
            {
                "virtual_address": "0x00261000",
                "name": "IMAGE_DIRECTORY_ENTRY_EXPORT",
                "size": "0x00000097"
            },
            {
                "virtual_address": "0x0025c000",
                "name": "IMAGE_DIRECTORY_ENTRY_IMPORT",
                "size": "0x0000358c"
            },
            {
                "virtual_address": "0x00264000",
                "name": "IMAGE_DIRECTORY_ENTRY_RESOURCE",
                "size": "0x000237e0"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_EXCEPTION",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_SECURITY",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_BASERELOC",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_DEBUG",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_COPYRIGHT",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_GLOBALPTR",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00263000",
                "name": "IMAGE_DIRECTORY_ENTRY_TLS",
                "size": "0x00000018"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x0025c944",
                "name": "IMAGE_DIRECTORY_ENTRY_IAT",
                "size": "0x00000840"
            },
            {
                "virtual_address": "0x00260000",
                "name": "IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT",
                "size": "0x000009ee"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR",
                "size": "0x00000000"
            },
            {
                "virtual_address": "0x00000000",
                "name": "IMAGE_DIRECTORY_ENTRY_RESERVED",
                "size": "0x00000000"
            }
        ],
        "exports": [
            {
                "ordinal": 3,
                "name": "TMethodImplementationIntercept",
                "address": "0x4a131c"
            },
            {
                "ordinal": 2,
                "name": "__dbk_fcall_wrapper",
                "address": "0x40eec0"
            },
            {
                "ordinal": 1,
                "name": "dbkFCallWrapperAddr",
                "address": "0x65763c"
            }
        ],
        "guest_signers": {},
        "imphash": "86c94b49415ec41af9bc34155c313d23",
        "icon_fuzzy": null,
        "icon": null,
        "pdbpath": null,
        "imported_dll_count": 12,
        "versioninfo": []
    }
}