Peggle Game Collection[.]7z

Sharing

Copy URL Twitter E-mail

General

Target

Peggle Game Collection.7z
Size

57.6MB
MD5

e7f700b77e9f594f15b18cb188f64e87
SHA1

d9369757912e81f16c3186ae3574854f53ad0492
SHA256

19716ce453715d6b8b7a0c81679189d271a4cc80103f232e5f0cda27fb2aa4bc
SHA512

fbf6811b3591363760983123804520b5a10f045dd7a4f65f234afa48c88443f9cf0a02d1f6af9fa3d5e0625a80b03f5e1947e7cad32716787c837ee182294dfe
SSDEEP

786432:OMeeBsfIiw7es2ktZD+5Sex1CuYhBw54gdYQOMQ5sGay1x0YFXbAQnC8d1eMl:Or9Vw7eZ4Zi5ScAP7+xGv0uxC8d1eMl

Score

3^/10

Malware Config

Signatures

Unsigned PE 9 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Popcap Game Collection/Peggle Deluxe/bass.dll
unpack001/Popcap Game Collection/Peggle Deluxe/j2k-codec.dll
unpack001/Popcap Game Collection/Peggle Extreme/PeggleExtreme.exe
unpack001/Popcap Game Collection/Peggle Extreme/bass.dll
unpack001/Popcap Game Collection/Peggle Extreme/j2k-codec.dll
unpack001/Popcap Game Collection/Peggle Nights Deluxe/bass.dll
unpack001/Popcap Game Collection/Peggle Nights Deluxe/j2k-codec.dll
unpack001/Popcap Game Collection/Peggle World of Warcraft Edition/bass.dll
unpack001/Popcap Game Collection/Peggle World of Warcraft Edition/j2k-codec.dll

Files

Peggle Game Collection.7z
.7z

Password: cs.rin.ru
Popcap Game Collection/Peggle Deluxe/Peggle.exe
.exe windows:4 windows x86 arch:x86

Password: cs.rin.ru

e571d886a34eae925e25e775a0222c46

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

3c:61:df:38:d5:bb:38:36:a8:b4:4b:98:5c:50:44:79
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

01/09/2006, 00:00

Not After

21/09/2009, 23:59

Subject

CN=PopCap Games,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=PopCap Games,L=Seattle,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\GameSrc\cpp\Thunderball\Peggle.pdb

Imports

winmm

timeEndPeriod
timeBeginPeriod
mixerClose
timeGetTime
mixerGetControlDetailsA
mixerGetLineControlsA
mixerGetLineInfoA
mixerGetDevCapsA
mixerOpen
mixerSetControlDetails
PlaySoundA

kernel32

LoadLibraryA
GetProcAddress
FreeLibrary
GetWindowsDirectoryA
CompareFileTime
DeleteFileA
GetCurrentThreadId
InitializeCriticalSection
CreateThread
GetModuleHandleA
SetEvent
CreateEventA
GetCurrentProcessId
EnterCriticalSection
LeaveCriticalSection
CreateFileMappingA
MapViewOfFile
CloseHandle
WaitForSingleObject
UnmapViewOfFile
DeleteCriticalSection
CopyFileA
MoveFileA
FindNextFileA
FindClose
GetTickCount
FindFirstFileA
OutputDebugStringA
Sleep
InterlockedDecrement
InterlockedIncrement
TlsSetValue
SetEndOfFile
CreateFileW
SetEnvironmentVariableA
GetLocaleInfoW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
SetCurrentDirectoryA
GetCurrentDirectoryA
FlushFileBuffers
VirtualAlloc
ReadFile
SetFilePointer
MulDiv
FileTimeToSystemTime
GetFileTime
CreateFileA
GetSystemDirectoryA
SetUnhandledExceptionFilter
GetCurrentProcess
GetModuleFileNameA
VirtualQuery
QueryPerformanceCounter
QueryPerformanceFrequency
SetThreadPriority
GetThreadPriority
GetCurrentThread
GetVersionExA
VirtualProtect
IsBadWritePtr
GetLastError
OpenFileMappingA
SetErrorMode
MultiByteToWideChar
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
GetCommandLineA
CreateMutexA
GetFileSize
WideCharToMultiByte
InterlockedCompareExchange
InterlockedExchange
GetLocaleInfoA
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoA
GetDriveTypeA
GetFullPathNameA
CreateDirectoryA
HeapReAlloc
ExitThread
ResumeThread
GetLocalTime
ExitProcess
LCMapStringA
LCMapStringW
GetCPInfo
GetTimeFormatA
GetDateFormatA
CompareStringA
CompareStringW
GetStringTypeA
GetStringTypeW
TlsGetValue
TlsAlloc
RemoveDirectoryA
TlsFree
SetLastError
GetACP
GetOEMCP
IsValidCodePage
SetHandleCount
GetStdHandle
GetFileType
HeapSize
GetTimeZoneInformation
WriteFile
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
GetConsoleCP
GetConsoleMode

user32

GetKeyState
CloseWindow
SetWindowTextA
PostThreadMessageA
SendMessageA
IsWindow
DefWindowProcA
GetWindowLongA
DestroyWindow
GetParent
ClientToScreen
GetClientRect
ReleaseDC
GetDC
DrawTextExA
GetSystemMetrics
OffsetRect
FillRect
MoveWindow
AdjustWindowRectEx
GetWindowInfo
GetWindowRect
SystemParametersInfoA
IsDialogMessageA
EndPaint
DrawTextA
BeginPaint
SetFocus
GetFocus
MessageBoxA
AdjustWindowRect
GetWindowTextA
SetTimer
SetForegroundWindow
LoadCursorA
GetSysColor
GetDesktopWindow
MessageBoxW
GetSysColorBrush
CreateWindowExW
SetCursor
GetCursorPos
GetWindowPlacement
ReleaseCapture
ScreenToClient
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
EndDialog
GetDlgItem
DispatchMessageA
SetCapture
WindowFromPoint
GetClipboardData
DefWindowProcW
InvalidateRect
IsWindowVisible
IsIconic
ChangeDisplaySettingsA
EnumWindows
EnumDisplaySettingsA
CreateCursor
GetActiveWindow
DestroyCursor
SetCaretPos
ShowCaret
CreateCaret
DestroyCaret
HideCaret
TranslateMessage
GetMessageA
SetWindowLongA
CreateWindowExA
LoadIconA
DialogBoxIndirectParamA
PeekMessageA
ShowWindow
RegisterWindowMessageA
RegisterClassA
PostMessageA

advapi32

RegDeleteValueA
RegOpenKeyA
RegCloseKey
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA

shell32

ShellExecuteExA
ShellExecuteA

wsock32

ioctlsocket
gethostbyname
__WSAFDIsSet
select
WSACleanup
closesocket
recv
WSAStartup
socket
htons
send
WSAGetLastError
connect
inet_ntoa

gdi32

GetObjectA
CreateCompatibleDC
CreateFontIndirectA
DeleteObject
GetTextMetricsA
CreateFontA
SelectObject
GetStockObject
CreateDIBSection
TextOutA
SetTextColor
IntersectClipRect
SetBkMode
CreateSolidBrush
GetTextExtentPoint32A
GetDeviceCaps
DeleteDC

comdlg32

GetSaveFileNameA
GetOpenFileNameA

ole32

CoCreateInstance
CoInitialize

oleaut32

SysFreeString
VariantClear
SysAllocString

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 476KB - Virtual size: 474KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 260KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 408KB - Virtual size: 406KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Popcap Game Collection/Peggle Deluxe/bass.dll
.dll windows:4 windows x86 arch:x86

Password: cs.rin.ru

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

BASS_Apply3D
BASS_ChannelBytes2Seconds
BASS_ChannelGet3DAttributes
BASS_ChannelGet3DPosition
BASS_ChannelGetAttributes
BASS_ChannelGetData
BASS_ChannelGetDevice
BASS_ChannelGetEAXMix
BASS_ChannelGetInfo
BASS_ChannelGetLength
BASS_ChannelGetLevel
BASS_ChannelGetPosition
BASS_ChannelIsActive
BASS_ChannelIsSliding
BASS_ChannelPause
BASS_ChannelPlay
BASS_ChannelPreBuf
BASS_ChannelRemoveDSP
BASS_ChannelRemoveFX
BASS_ChannelRemoveLink
BASS_ChannelRemoveSync
BASS_ChannelSeconds2Bytes
BASS_ChannelSet3DAttributes
BASS_ChannelSet3DPosition
BASS_ChannelSetAttributes
BASS_ChannelSetDSP
BASS_ChannelSetEAXMix
BASS_ChannelSetFX
BASS_ChannelSetFlags
BASS_ChannelSetLink
BASS_ChannelSetPosition
BASS_ChannelSetSync
BASS_ChannelSlideAttributes
BASS_ChannelStop
BASS_ErrorGetCode
BASS_FXGetParameters
BASS_FXSetParameters
BASS_Free
BASS_Get3DFactors
BASS_Get3DPosition
BASS_GetCPU
BASS_GetConfig
BASS_GetDSoundObject
BASS_GetDevice
BASS_GetDeviceDescription
BASS_GetEAXParameters
BASS_GetInfo
BASS_GetVersion
BASS_GetVolume
BASS_Init
BASS_MusicFree
BASS_MusicGetAttribute
BASS_MusicGetName
BASS_MusicGetOrderPosition
BASS_MusicGetOrders
BASS_MusicLoad
BASS_MusicSetAttribute
BASS_Pause
BASS_PluginFree
BASS_PluginLoad
BASS_RecordFree
BASS_RecordGetDevice
BASS_RecordGetDeviceDescription
BASS_RecordGetInfo
BASS_RecordGetInput
BASS_RecordGetInputName
BASS_RecordInit
BASS_RecordSetDevice
BASS_RecordSetInput
BASS_RecordStart
BASS_SampleCreate
BASS_SampleCreateDone
BASS_SampleFree
BASS_SampleGetChannel
BASS_SampleGetInfo
BASS_SampleLoad
BASS_SampleSetInfo
BASS_SampleStop
BASS_Set3DFactors
BASS_Set3DPosition
BASS_SetConfig
BASS_SetDevice
BASS_SetEAXParameters
BASS_SetVolume
BASS_Start
BASS_Stop
BASS_StreamCreate
BASS_StreamCreateFile
BASS_StreamCreateFileUser
BASS_StreamCreateURL
BASS_StreamFree
BASS_StreamGetFilePosition
BASS_StreamGetTags
BASS_Update
_

Sections

Size: 85KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 568B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Popcap Game Collection/Peggle Deluxe/j2k-codec.dll
.dll windows:4 windows x86 arch:x86

Password: cs.rin.ru

9b63e7f4e0446602b5690410414a5738

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
GetLocalTime
GetCurrentThreadId
EnterCriticalSection
GetSystemTime
SetLastError
GetLastError
Beep

msvcrt

fclose
fopen
fflush
fprintf
vsprintf
rand
srand
malloc
??2@YAPAXI@Z
??3@YAXPAX@Z
free
__CxxFrameHandler
fseek
_ftol
system
fgetc
fputc
fread
fwrite
_except_handler3
__dllonexit
_onexit
_initterm
_adjust_fdiv
_strnicmp

Exports

Exports

_J2K_Cancel@4
_J2K_Close@4
_J2K_Decode@20
_J2K_EasyDecode@24
_J2K_GetInfo@16
_J2K_GetInfoEx@8
_J2K_GetMetaData@20
_J2K_GetResolutionDimensions@16
_J2K_GetResolutionDimensionsByStr@16
_J2K_GetResolutions@8
_J2K_OpenCustom@8
_J2K_OpenFile@4
_J2K_OpenMemory@8
_J2K_SelectTiles@16
_J2K_StartLogging@8
_J2K_StopLogging@0
_J2K_Unlock@4
_J2K_getErrorStr@4
_J2K_getErrorStrVB@8
_J2K_getLastError@0
_J2K_getLastErrorStr@0
_J2K_getVersion@0

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Popcap Game Collection/Peggle Deluxe/license.txt
Popcap Game Collection/Peggle Deluxe/main.pak
Popcap Game Collection/Peggle Deluxe/music/PeggleBeats.mo3
Popcap Game Collection/Peggle Deluxe/music/odetojoy.ogg
Popcap Game Collection/Peggle Deluxe/music/opening.ogg
Popcap Game Collection/Peggle Deluxe/properties/partner.xml
Popcap Game Collection/Peggle Deluxe/properties/partner.xml.sig
Popcap Game Collection/Peggle Deluxe/properties/partner_logo.jpg
.jpg

Password: cs.rin.ru
Popcap Game Collection/Peggle Deluxe/readme.html
.html
Popcap Game Collection/Peggle Extreme/PeggleExtreme.exe
.exe windows:4 windows x86 arch:x86

Password: cs.rin.ru

e571d886a34eae925e25e775a0222c46

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\GameSrc\cpp\ThunderballExtreme\PeggleExtreme.pdb

Imports

winmm

timeEndPeriod
timeBeginPeriod
mixerClose
timeGetTime
mixerGetControlDetailsA
mixerGetLineControlsA
mixerGetLineInfoA
mixerGetDevCapsA
mixerOpen
mixerSetControlDetails
PlaySoundA

kernel32

LoadLibraryA
GetProcAddress
FreeLibrary
GetWindowsDirectoryA
CompareFileTime
DeleteFileA
GetCurrentThreadId
InitializeCriticalSection
CreateThread
GetModuleHandleA
SetEvent
CreateEventA
GetCurrentProcessId
EnterCriticalSection
LeaveCriticalSection
CreateFileMappingA
MapViewOfFile
CloseHandle
WaitForSingleObject
UnmapViewOfFile
DeleteCriticalSection
CopyFileA
MoveFileA
FindNextFileA
FindClose
GetTickCount
FindFirstFileA
OutputDebugStringA
Sleep
InterlockedDecrement
InterlockedIncrement
TlsSetValue
SetEndOfFile
CreateFileW
SetEnvironmentVariableA
GetLocaleInfoW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
SetCurrentDirectoryA
GetCurrentDirectoryA
FlushFileBuffers
VirtualAlloc
ReadFile
SetFilePointer
MulDiv
FileTimeToSystemTime
GetFileTime
CreateFileA
GetSystemDirectoryA
SetUnhandledExceptionFilter
GetCurrentProcess
GetModuleFileNameA
VirtualQuery
QueryPerformanceCounter
QueryPerformanceFrequency
SetThreadPriority
GetThreadPriority
GetCurrentThread
GetVersionExA
VirtualProtect
IsBadWritePtr
GetLastError
OpenFileMappingA
SetErrorMode
MultiByteToWideChar
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
GetCommandLineA
CreateMutexA
GetFileSize
WideCharToMultiByte
InterlockedCompareExchange
InterlockedExchange
GetLocaleInfoA
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoA
GetDriveTypeA
GetFullPathNameA
CreateDirectoryA
HeapReAlloc
ExitThread
ResumeThread
GetLocalTime
ExitProcess
LCMapStringA
LCMapStringW
GetCPInfo
GetTimeFormatA
GetDateFormatA
CompareStringA
CompareStringW
GetStringTypeA
GetStringTypeW
TlsGetValue
TlsAlloc
RemoveDirectoryA
TlsFree
SetLastError
GetACP
GetOEMCP
IsValidCodePage
SetHandleCount
GetStdHandle
GetFileType
HeapSize
GetTimeZoneInformation
WriteFile
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
GetConsoleCP
GetConsoleMode

user32

GetKeyState
CloseWindow
SetWindowTextA
PostThreadMessageA
SendMessageA
IsWindow
DefWindowProcA
GetWindowLongA
DestroyWindow
GetParent
ClientToScreen
GetClientRect
ReleaseDC
GetDC
DrawTextExA
GetSystemMetrics
OffsetRect
FillRect
MoveWindow
AdjustWindowRectEx
GetWindowInfo
GetWindowRect
SystemParametersInfoA
IsDialogMessageA
EndPaint
DrawTextA
BeginPaint
SetFocus
GetFocus
MessageBoxA
AdjustWindowRect
GetWindowTextA
SetTimer
SetForegroundWindow
LoadCursorA
GetSysColor
GetDesktopWindow
MessageBoxW
GetSysColorBrush
CreateWindowExW
SetCursor
GetCursorPos
GetWindowPlacement
ReleaseCapture
ScreenToClient
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
EndDialog
GetDlgItem
DispatchMessageA
SetCapture
WindowFromPoint
GetClipboardData
DefWindowProcW
InvalidateRect
IsWindowVisible
IsIconic
ChangeDisplaySettingsA
EnumWindows
EnumDisplaySettingsA
CreateCursor
GetActiveWindow
DestroyCursor
SetCaretPos
ShowCaret
CreateCaret
DestroyCaret
HideCaret
TranslateMessage
GetMessageA
SetWindowLongA
CreateWindowExA
LoadIconA
DialogBoxIndirectParamA
PeekMessageA
ShowWindow
RegisterWindowMessageA
RegisterClassA
PostMessageA

advapi32

RegDeleteValueA
RegOpenKeyA
RegCloseKey
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA

shell32

ShellExecuteExA
ShellExecuteA

wsock32

ioctlsocket
gethostbyname
__WSAFDIsSet
select
WSACleanup
closesocket
recv
WSAStartup
socket
htons
send
WSAGetLastError
connect
inet_ntoa

gdi32

GetObjectA
CreateCompatibleDC
CreateFontIndirectA
DeleteObject
GetTextMetricsA
CreateFontA
SelectObject
GetStockObject
CreateDIBSection
TextOutA
SetTextColor
IntersectClipRect
SetBkMode
CreateSolidBrush
GetTextExtentPoint32A
GetDeviceCaps
DeleteDC

comdlg32

GetSaveFileNameA
GetOpenFileNameA

ole32

CoCreateInstance
CoInitialize

oleaut32

SysFreeString
VariantClear
SysAllocString

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 496KB - Virtual size: 493KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 260KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 408KB - Virtual size: 405KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Popcap Game Collection/Peggle Extreme/bass.dll
.dll windows:4 windows x86 arch:x86

Password: cs.rin.ru

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

BASS_Apply3D
BASS_ChannelBytes2Seconds
BASS_ChannelGet3DAttributes
BASS_ChannelGet3DPosition
BASS_ChannelGetAttributes
BASS_ChannelGetData
BASS_ChannelGetDevice
BASS_ChannelGetEAXMix
BASS_ChannelGetInfo
BASS_ChannelGetLength
BASS_ChannelGetLevel
BASS_ChannelGetPosition
BASS_ChannelIsActive
BASS_ChannelIsSliding
BASS_ChannelPause
BASS_ChannelPlay
BASS_ChannelPreBuf
BASS_ChannelRemoveDSP
BASS_ChannelRemoveFX
BASS_ChannelRemoveLink
BASS_ChannelRemoveSync
BASS_ChannelSeconds2Bytes
BASS_ChannelSet3DAttributes
BASS_ChannelSet3DPosition
BASS_ChannelSetAttributes
BASS_ChannelSetDSP
BASS_ChannelSetEAXMix
BASS_ChannelSetFX
BASS_ChannelSetFlags
BASS_ChannelSetLink
BASS_ChannelSetPosition
BASS_ChannelSetSync
BASS_ChannelSlideAttributes
BASS_ChannelStop
BASS_ErrorGetCode
BASS_FXGetParameters
BASS_FXSetParameters
BASS_Free
BASS_Get3DFactors
BASS_Get3DPosition
BASS_GetCPU
BASS_GetConfig
BASS_GetDSoundObject
BASS_GetDevice
BASS_GetDeviceDescription
BASS_GetEAXParameters
BASS_GetInfo
BASS_GetVersion
BASS_GetVolume
BASS_Init
BASS_MusicFree
BASS_MusicGetAttribute
BASS_MusicGetName
BASS_MusicGetOrderPosition
BASS_MusicGetOrders
BASS_MusicLoad
BASS_MusicSetAttribute
BASS_Pause
BASS_PluginFree
BASS_PluginLoad
BASS_RecordFree
BASS_RecordGetDevice
BASS_RecordGetDeviceDescription
BASS_RecordGetInfo
BASS_RecordGetInput
BASS_RecordGetInputName
BASS_RecordInit
BASS_RecordSetDevice
BASS_RecordSetInput
BASS_RecordStart
BASS_SampleCreate
BASS_SampleCreateDone
BASS_SampleFree
BASS_SampleGetChannel
BASS_SampleGetInfo
BASS_SampleLoad
BASS_SampleSetInfo
BASS_SampleStop
BASS_Set3DFactors
BASS_Set3DPosition
BASS_SetConfig
BASS_SetDevice
BASS_SetEAXParameters
BASS_SetVolume
BASS_Start
BASS_Stop
BASS_StreamCreate
BASS_StreamCreateFile
BASS_StreamCreateFileUser
BASS_StreamCreateURL
BASS_StreamFree
BASS_StreamGetFilePosition
BASS_StreamGetTags
BASS_Update
_

Sections

Size: 85KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 568B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Popcap Game Collection/Peggle Extreme/cached/sounds/AwardFanfareV2.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/FireBallLoopV4.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/FireworkPop.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/Koka_morning_finaledit.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/MnE_Dia_n.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/PortalLost.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/aah.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/applause.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/approval.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/ball_add.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/blow.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/bubbles.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/buckethit.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/button.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/button2.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/cannonshot.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/clear.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/coin_freeball_denied.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/coin_spin.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/cymbal.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/dinghi.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/excellent_work.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/explode.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/extraball.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/extraball2.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/extraball3.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/extremefever2.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/feverhit.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/fireballbounce.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/fireballshoot.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/fireworks1.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/fireworks2.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/flatline.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/flip.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/flip2.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/flipperbounce.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/flipperdown.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/flipperup.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/freeball2.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/gapbonus1.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/gman_win03.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/gong.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/guncock.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/headchew.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/headchew2.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/headchew3.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/heavy_goodjob.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/heavy_neg.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/heavy_niceshot.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/miss.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/missile.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/mouseoverV1.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/multiball.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/peghit.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/peghit_low.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/peghit_plus4b.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/peghit_plus_mega9.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/pegpop.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/penalty.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/portal.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/powerup.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/powerup_fireball3.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/powerup_flippers_4.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/powerup_flowerpower2.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/powerup_guide.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/powerup_luckyspin.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/powerup_multiball.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/powerup_pyramid.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/powerup_spaceblast.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/powerup_spooky1.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/powerup_spooky2.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/powerup_spooky3.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/powerup_spooky4.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/powerup_zen3.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/rainbow.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/scorecounter.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/sigh.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/timpaniroll.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/ting.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/tone.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/tonehi.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/tonelo.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/tonesuperhi.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/typing2.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/ultra2.wav
Popcap Game Collection/Peggle Extreme/cached/sounds/xbump_mod2.wav
Popcap Game Collection/Peggle Extreme/j2k-codec.dll
.dll windows:4 windows x86 arch:x86

Password: cs.rin.ru

9b63e7f4e0446602b5690410414a5738

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
GetLocalTime
GetCurrentThreadId
EnterCriticalSection
GetSystemTime
SetLastError
GetLastError
Beep

msvcrt

fclose
fopen
fflush
fprintf
vsprintf
rand
srand
malloc
??2@YAPAXI@Z
??3@YAXPAX@Z
free
__CxxFrameHandler
fseek
_ftol
system
fgetc
fputc
fread
fwrite
_except_handler3
__dllonexit
_onexit
_initterm
_adjust_fdiv
_strnicmp

Exports

Exports

_J2K_Cancel@4
_J2K_Close@4
_J2K_Decode@20
_J2K_EasyDecode@24
_J2K_GetInfo@16
_J2K_GetInfoEx@8
_J2K_GetMetaData@20
_J2K_GetResolutionDimensions@16
_J2K_GetResolutionDimensionsByStr@16
_J2K_GetResolutions@8
_J2K_OpenCustom@8
_J2K_OpenFile@4
_J2K_OpenMemory@8
_J2K_SelectTiles@16
_J2K_StartLogging@8
_J2K_StopLogging@0
_J2K_Unlock@4
_J2K_getErrorStr@4
_J2K_getErrorStrVB@8
_J2K_getLastError@0
_J2K_getLastErrorStr@0
_J2K_getVersion@0

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Popcap Game Collection/Peggle Extreme/main.pak
Popcap Game Collection/Peggle Extreme/music/PeggleBeats.mo3
Popcap Game Collection/Peggle Extreme/music/odetojoy.ogg
Popcap Game Collection/Peggle Extreme/music/opening.ogg
Popcap Game Collection/Peggle Extreme/properties/partner.xml
Popcap Game Collection/Peggle Extreme/properties/partner.xml.sig
Popcap Game Collection/Peggle Extreme/properties/partner_logo.jpg
.jpg

Password: cs.rin.ru
Popcap Game Collection/Peggle Extreme/readme.html
.html
Popcap Game Collection/Peggle Nights Deluxe/PeggleNights.exe
.exe windows:4 windows x86 arch:x86

929effd2a450cef68a932ac0bbd328d6

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

3c:61:df:38:d5:bb:38:36:a8:b4:4b:98:5c:50:44:79
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

01/09/2006, 00:00

Not After

21/09/2009, 23:59

Subject

CN=PopCap Games,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=PopCap Games,L=Seattle,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

f:\work_min\games\ThunderballNights\main\cpp\ThunderballNights\PeggleNights.pdb

Imports

winmm

timeBeginPeriod
timeEndPeriod
PlaySoundA
mixerGetLineInfoA
mixerClose
mixerGetLineControlsA
mixerOpen
mixerGetControlDetailsA
mixerSetControlDetails
mixerGetDevCapsA
timeGetTime

kernel32

FreeLibrary
GetProcAddress
LoadLibraryA
GetWindowsDirectoryA
DeleteFileA
CreateFileMappingA
LeaveCriticalSection
GetCurrentProcessId
CreateEventA
UnmapViewOfFile
MapViewOfFile
GetModuleHandleA
CloseHandle
EnterCriticalSection
SetEvent
GetCurrentThreadId
DeleteCriticalSection
WaitForSingleObject
CreateThread
InitializeCriticalSection
GlobalSize
GlobalUnlock
MoveFileA
SetFileAttributesA
OutputDebugStringA
FindFirstFileA
GlobalLock
CopyFileA
FindNextFileA
GetModuleFileNameA
FindClose
GetTickCount
Sleep
InterlockedIncrement
InterlockedDecrement
CompareFileTime
GetTimeFormatA
SetEndOfFile
CreateFileW
SetEnvironmentVariableA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoW
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
SetCurrentDirectoryA
GetCurrentDirectoryA
FlushFileBuffers
VirtualAlloc
GetConsoleMode
GetConsoleCP
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
SetFilePointer
CreateFileA
MulDiv
FileTimeToSystemTime
GetFileTime
GetSystemDirectoryA
MultiByteToWideChar
SetThreadPriority
GetCommandLineA
CreateMutexA
GlobalAlloc
GlobalFree
GetCurrentThread
GetLastError
GetVersionExA
QueryPerformanceCounter
IsBadWritePtr
GetThreadPriority
VirtualQuery
OpenFileMappingA
SetErrorMode
SetUnhandledExceptionFilter
GetCurrentProcess
QueryPerformanceFrequency
FindResourceA
LockResource
SizeofResource
LoadResource
GetFileSize
WideCharToMultiByte
InterlockedExchange
InterlockedCompareExchange
GetLocaleInfoA
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoA
ExitProcess
GetLocalTime
ExitThread
ResumeThread
RtlUnwind
GetDriveTypeA
GetFullPathNameA
HeapReAlloc
CreateDirectoryA
RaiseException
LCMapStringA
LCMapStringW
GetCPInfo
RemoveDirectoryA
GetDateFormatA
CompareStringA
CompareStringW
GetStringTypeA
GetStringTypeW
WriteFile
GetStdHandle
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
SetHandleCount
GetFileType
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetTimeZoneInformation
ReadFile

user32

PostMessageA
CloseWindow
IsWindow
GetWindowLongA
GetMessageA
RegisterClassA
PostThreadMessageA
DestroyWindow
ShowWindow
PeekMessageA
TranslateMessage
ScreenToClient
GetKeyState
SetWindowTextA
SetWindowLongA
RegisterWindowMessageA
SetCaretPos
HideCaret
ShowCaret
DestroyCaret
LoadCursorA
CreateCaret
GetWindowInfo
GetDC
GetClientRect
DrawTextExA
GetSystemMetrics
MoveWindow
OffsetRect
AdjustWindowRectEx
ClientToScreen
ReleaseDC
FillRect
MessageBoxA
GetClipboardData
SetFocus
CloseClipboard
IsIconic
DialogBoxIndirectParamA
DestroyCursor
AdjustWindowRect
SetCursor
EndDialog
SetClipboardData
InvalidateRect
WindowFromPoint
GetActiveWindow
GetDlgItem
SetForegroundWindow
IsWindowVisible
GetWindowTextA
EmptyClipboard
EndPaint
SetActiveWindow
EnumWindows
IsWindowEnabled
ReleaseCapture
EnumDisplaySettingsA
GetWindowRect
SystemParametersInfoA
GetWindowPlacement
BeginPaint
MessageBoxW
SetTimer
ChangeDisplaySettingsA
OpenClipboard
SetCapture
LoadIconA
DefWindowProcW
GetCursorPos
CreateCursor
CreateWindowExW
GetSysColor
GetDesktopWindow
DrawTextA
GetSysColorBrush
IsDialogMessageA
GetFocus
GetParent
DefWindowProcA
SendMessageA
DispatchMessageA
CreateWindowExA

advapi32

RegDeleteValueA
RegOpenKeyA
RegCloseKey
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA

shell32

ShellExecuteA
ShellExecuteExA

ole32

CoInitialize
RegisterDragDrop
OleInitialize
OleUninitialize
RevokeDragDrop
ReleaseStgMedium
CoCreateInstance

wsock32

WSAGetLastError
closesocket
send
WSAStartup
connect
ioctlsocket
htons
inet_ntoa
select
WSACleanup
recv
gethostbyname
__WSAFDIsSet
socket

gdi32

SelectObject
GetTextMetricsA
TextOutA
GetStockObject
CreateFontIndirectA
GetObjectA
GetDeviceCaps
CreateFontA
IntersectClipRect
CreateDIBSection
DeleteDC
CreateCompatibleDC
SetTextColor
GetTextExtentPoint32A
CreateSolidBrush
DeleteObject
SetBkMode

comdlg32

GetSaveFileNameA
GetOpenFileNameA

oleaut32

SysFreeString
VariantClear
SysAllocString

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 328KB - Virtual size: 327KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 277KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 408KB - Virtual size: 406KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Popcap Game Collection/Peggle Nights Deluxe/bass.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

BASS_Apply3D
BASS_ChannelBytes2Seconds
BASS_ChannelGet3DAttributes
BASS_ChannelGet3DPosition
BASS_ChannelGetAttributes
BASS_ChannelGetData
BASS_ChannelGetDevice
BASS_ChannelGetEAXMix
BASS_ChannelGetInfo
BASS_ChannelGetLength
BASS_ChannelGetLevel
BASS_ChannelGetPosition
BASS_ChannelIsActive
BASS_ChannelIsSliding
BASS_ChannelPause
BASS_ChannelPlay
BASS_ChannelPreBuf
BASS_ChannelRemoveDSP
BASS_ChannelRemoveFX
BASS_ChannelRemoveLink
BASS_ChannelRemoveSync
BASS_ChannelSeconds2Bytes
BASS_ChannelSet3DAttributes
BASS_ChannelSet3DPosition
BASS_ChannelSetAttributes
BASS_ChannelSetDSP
BASS_ChannelSetEAXMix
BASS_ChannelSetFX
BASS_ChannelSetFlags
BASS_ChannelSetLink
BASS_ChannelSetPosition
BASS_ChannelSetSync
BASS_ChannelSlideAttributes
BASS_ChannelStop
BASS_ErrorGetCode
BASS_FXGetParameters
BASS_FXSetParameters
BASS_Free
BASS_Get3DFactors
BASS_Get3DPosition
BASS_GetCPU
BASS_GetConfig
BASS_GetDSoundObject
BASS_GetDevice
BASS_GetDeviceDescription
BASS_GetEAXParameters
BASS_GetInfo
BASS_GetVersion
BASS_GetVolume
BASS_Init
BASS_MusicFree
BASS_MusicGetAttribute
BASS_MusicGetName
BASS_MusicGetOrderPosition
BASS_MusicGetOrders
BASS_MusicLoad
BASS_MusicSetAttribute
BASS_Pause
BASS_PluginFree
BASS_PluginLoad
BASS_RecordFree
BASS_RecordGetDevice
BASS_RecordGetDeviceDescription
BASS_RecordGetInfo
BASS_RecordGetInput
BASS_RecordGetInputName
BASS_RecordInit
BASS_RecordSetDevice
BASS_RecordSetInput
BASS_RecordStart
BASS_SampleCreate
BASS_SampleCreateDone
BASS_SampleFree
BASS_SampleGetChannel
BASS_SampleGetInfo
BASS_SampleLoad
BASS_SampleSetInfo
BASS_SampleStop
BASS_Set3DFactors
BASS_Set3DPosition
BASS_SetConfig
BASS_SetDevice
BASS_SetEAXParameters
BASS_SetVolume
BASS_Start
BASS_Stop
BASS_StreamCreate
BASS_StreamCreateFile
BASS_StreamCreateFileUser
BASS_StreamCreateURL
BASS_StreamFree
BASS_StreamGetFilePosition
BASS_StreamGetTags
BASS_Update
_

Sections

Size: 85KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 568B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Popcap Game Collection/Peggle Nights Deluxe/j2k-codec.dll
.dll windows:4 windows x86 arch:x86

9b63e7f4e0446602b5690410414a5738

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
GetLocalTime
GetCurrentThreadId
EnterCriticalSection
GetSystemTime
SetLastError
GetLastError
Beep

msvcrt

fclose
fopen
fflush
fprintf
vsprintf
rand
srand
malloc
??2@YAPAXI@Z
??3@YAXPAX@Z
free
__CxxFrameHandler
fseek
_ftol
system
fgetc
fputc
fread
fwrite
_except_handler3
__dllonexit
_onexit
_initterm
_adjust_fdiv
_strnicmp

Exports

Exports

_J2K_Cancel@4
_J2K_Close@4
_J2K_Decode@20
_J2K_EasyDecode@24
_J2K_GetInfo@16
_J2K_GetInfoEx@8
_J2K_GetMetaData@20
_J2K_GetResolutionDimensions@16
_J2K_GetResolutionDimensionsByStr@16
_J2K_GetResolutions@8
_J2K_OpenCustom@8
_J2K_OpenFile@4
_J2K_OpenMemory@8
_J2K_SelectTiles@16
_J2K_StartLogging@8
_J2K_StopLogging@0
_J2K_Unlock@4
_J2K_getErrorStr@4
_J2K_getErrorStrVB@8
_J2K_getLastError@0
_J2K_getLastErrorStr@0
_J2K_getVersion@0

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Popcap Game Collection/Peggle Nights Deluxe/levelpacks/Holiday08.pak
Popcap Game Collection/Peggle Nights Deluxe/levelpacks/z__01contest.pak
Popcap Game Collection/Peggle Nights Deluxe/levelpacks/z_spring.pak
Popcap Game Collection/Peggle Nights Deluxe/license.txt
Popcap Game Collection/Peggle Nights Deluxe/main.pak
Popcap Game Collection/Peggle Nights Deluxe/music/01.mo3
Popcap Game Collection/Peggle Nights Deluxe/music/02.mo3
Popcap Game Collection/Peggle Nights Deluxe/music/03.mo3
Popcap Game Collection/Peggle Nights Deluxe/music/04.mo3
Popcap Game Collection/Peggle Nights Deluxe/music/05.mo3
Popcap Game Collection/Peggle Nights Deluxe/music/06.mo3
Popcap Game Collection/Peggle Nights Deluxe/music/07.mo3
Popcap Game Collection/Peggle Nights Deluxe/music/08.mo3
Popcap Game Collection/Peggle Nights Deluxe/music/09.mo3
Popcap Game Collection/Peggle Nights Deluxe/music/10.mo3
Popcap Game Collection/Peggle Nights Deluxe/music/Menu_Amb_2.ogg
Popcap Game Collection/Peggle Nights Deluxe/music/credits.ogg
Popcap Game Collection/Peggle Nights Deluxe/music/menu.ogg
Popcap Game Collection/Peggle Nights Deluxe/music/odetojoy.ogg
Popcap Game Collection/Peggle Nights Deluxe/music/opening.ogg
Popcap Game Collection/Peggle Nights Deluxe/music/progress.ogg
Popcap Game Collection/Peggle Nights Deluxe/properties/partner.xml
Popcap Game Collection/Peggle Nights Deluxe/properties/partner.xml.sig
Popcap Game Collection/Peggle Nights Deluxe/properties/partner_logo.jpg
.jpg
Popcap Game Collection/Peggle Nights Deluxe/readme.html
.html
Popcap Game Collection/Peggle World of Warcraft Edition/PeggleWoW.exe
.exe windows:4 windows x86 arch:x86

b0413d5fa844c624b0724025c1d65133

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

3c:61:df:38:d5:bb:38:36:a8:b4:4b:98:5c:50:44:79
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

01/09/2006, 00:00

Not After

21/09/2009, 23:59

Subject

CN=PopCap Games,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=PopCap Games,L=Seattle,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

f:\work_min\games\ThunderballNights\WoW\cpp\ThunderballNights\PeggleWoW.pdb

Imports

winmm

PlaySoundA
timeEndPeriod
timeBeginPeriod
mixerGetLineInfoA
mixerClose
mixerGetLineControlsA
mixerOpen
mixerGetControlDetailsA
mixerSetControlDetails
mixerGetDevCapsA
timeGetTime

kernel32

GetProcAddress
GetWindowsDirectoryA
FreeLibrary
CompareFileTime
DeleteFileA
DeleteCriticalSection
WaitForSingleObject
CreateThread
InitializeCriticalSection
CreateFileMappingA
LeaveCriticalSection
GetCurrentProcessId
CreateEventA
UnmapViewOfFile
MapViewOfFile
GetModuleHandleA
CloseHandle
EnterCriticalSection
SetEvent
GetCurrentThreadId
CopyFileA
FindClose
MoveFileA
OutputDebugStringA
GlobalUnlock
GlobalLock
SetFileAttributesA
Sleep
GetTickCount
GlobalSize
FindFirstFileA
FindNextFileA
GetModuleFileNameA
InterlockedIncrement
InterlockedDecrement
LoadLibraryA
GetDateFormatA
SetEndOfFile
CreateFileW
SetEnvironmentVariableA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoW
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
SetCurrentDirectoryA
GetCurrentDirectoryA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetVersionExA
SetErrorMode
MulDiv
QueryPerformanceFrequency
SetUnhandledExceptionFilter
IsBadWritePtr
SetThreadPriority
GetCurrentProcess
QueryPerformanceCounter
GetThreadPriority
OpenFileMappingA
GetCurrentThread
VirtualQuery
GetFileTime
FileTimeToSystemTime
GetSystemDirectoryA
CreateFileA
GetCommandLineA
CreateMutexA
GetLastError
GlobalAlloc
MultiByteToWideChar
GlobalFree
SizeofResource
LoadResource
GetFileSize
FindResourceA
LockResource
WideCharToMultiByte
InterlockedExchange
InterlockedCompareExchange
GetLocaleInfoA
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoA
HeapReAlloc
ExitThread
ResumeThread
CreateDirectoryA
GetDriveTypeA
GetFullPathNameA
GetLocalTime
ExitProcess
RtlUnwind
RaiseException
LCMapStringA
LCMapStringW
GetCPInfo
GetTimeFormatA
RemoveDirectoryA
CompareStringA
CompareStringW
GetStringTypeA
GetStringTypeW
WriteFile
GetStdHandle
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetACP
GetOEMCP
IsValidCodePage
HeapSize
SetHandleCount
GetFileType
GetTimeZoneInformation
SetFilePointer
ReadFile

user32

IsWindow
ScreenToClient
CloseWindow
RegisterWindowMessageA
DefWindowProcA
SendMessageA
DispatchMessageA
CreateWindowExA
PeekMessageA
SetWindowLongA
GetKeyState
DialogBoxIndirectParamA
PostMessageA
SetWindowTextA
TranslateMessage
EndPaint
IsDialogMessageA
MoveWindow
GetDC
GetWindowTextA
GetFocus
ReleaseDC
SetFocus
LoadCursorA
SystemParametersInfoA
MessageBoxW
GetSysColor
MessageBoxA
SetCursor
GetDesktopWindow
GetClientRect
GetWindowRect
GetSysColorBrush
AdjustWindowRect
ShowWindow
SetTimer
LoadIconA
CreateWindowExW
BeginPaint
DrawTextA
FillRect
GetSystemMetrics
AdjustWindowRectEx
OffsetRect
ClientToScreen
GetWindowInfo
DrawTextExA
EnumDisplaySettingsA
ChangeDisplaySettingsA
DestroyCursor
InvalidateRect
EnumWindows
EndDialog
IsIconic
GetDlgItem
PostThreadMessageA
CreateCursor
GetWindowPlacement
GetActiveWindow
DefWindowProcW
EmptyClipboard
SetClipboardData
SetActiveWindow
CloseClipboard
IsWindowVisible
SetForegroundWindow
ReleaseCapture
GetClipboardData
WindowFromPoint
OpenClipboard
GetCursorPos
IsWindowEnabled
SetCapture
DestroyCaret
ShowCaret
HideCaret
SetCaretPos
CreateCaret
GetParent
GetWindowLongA
GetMessageA
RegisterClassA
DestroyWindow

advapi32

RegDeleteValueA
RegOpenKeyA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA

shell32

ShellExecuteExA
ShellExecuteA

ole32

CoInitialize
RevokeDragDrop
RegisterDragDrop
OleUninitialize
OleInitialize
ReleaseStgMedium
CoCreateInstance

wsock32

closesocket
connect
select
send
htons
WSAStartup
__WSAFDIsSet
gethostbyname
WSACleanup
recv
WSAGetLastError
socket
inet_ntoa
ioctlsocket

gdi32

CreateFontA
SetBkMode
DeleteObject
GetStockObject
GetObjectA
CreateCompatibleDC
SetTextColor
CreateFontIndirectA
GetDeviceCaps
CreateDIBSection
DeleteDC
GetTextMetricsA
GetTextExtentPoint32A
SelectObject
IntersectClipRect
TextOutA
CreateSolidBrush

comdlg32

GetSaveFileNameA
GetOpenFileNameA

oleaut32

SysAllocString
VariantClear
SysFreeString

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 320KB - Virtual size: 318KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 286KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 408KB - Virtual size: 405KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Popcap Game Collection/Peggle World of Warcraft Edition/bass.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

BASS_Apply3D
BASS_ChannelBytes2Seconds
BASS_ChannelGet3DAttributes
BASS_ChannelGet3DPosition
BASS_ChannelGetAttributes
BASS_ChannelGetData
BASS_ChannelGetDevice
BASS_ChannelGetEAXMix
BASS_ChannelGetInfo
BASS_ChannelGetLength
BASS_ChannelGetLevel
BASS_ChannelGetPosition
BASS_ChannelIsActive
BASS_ChannelIsSliding
BASS_ChannelPause
BASS_ChannelPlay
BASS_ChannelPreBuf
BASS_ChannelRemoveDSP
BASS_ChannelRemoveFX
BASS_ChannelRemoveLink
BASS_ChannelRemoveSync
BASS_ChannelSeconds2Bytes
BASS_ChannelSet3DAttributes
BASS_ChannelSet3DPosition
BASS_ChannelSetAttributes
BASS_ChannelSetDSP
BASS_ChannelSetEAXMix
BASS_ChannelSetFX
BASS_ChannelSetFlags
BASS_ChannelSetLink
BASS_ChannelSetPosition
BASS_ChannelSetSync
BASS_ChannelSlideAttributes
BASS_ChannelStop
BASS_ErrorGetCode
BASS_FXGetParameters
BASS_FXSetParameters
BASS_Free
BASS_Get3DFactors
BASS_Get3DPosition
BASS_GetCPU
BASS_GetConfig
BASS_GetDSoundObject
BASS_GetDevice
BASS_GetDeviceDescription
BASS_GetEAXParameters
BASS_GetInfo
BASS_GetVersion
BASS_GetVolume
BASS_Init
BASS_MusicFree
BASS_MusicGetAttribute
BASS_MusicGetName
BASS_MusicGetOrderPosition
BASS_MusicGetOrders
BASS_MusicLoad
BASS_MusicSetAttribute
BASS_Pause
BASS_PluginFree
BASS_PluginLoad
BASS_RecordFree
BASS_RecordGetDevice
BASS_RecordGetDeviceDescription
BASS_RecordGetInfo
BASS_RecordGetInput
BASS_RecordGetInputName
BASS_RecordInit
BASS_RecordSetDevice
BASS_RecordSetInput
BASS_RecordStart
BASS_SampleCreate
BASS_SampleCreateDone
BASS_SampleFree
BASS_SampleGetChannel
BASS_SampleGetInfo
BASS_SampleLoad
BASS_SampleSetInfo
BASS_SampleStop
BASS_Set3DFactors
BASS_Set3DPosition
BASS_SetConfig
BASS_SetDevice
BASS_SetEAXParameters
BASS_SetVolume
BASS_Start
BASS_Stop
BASS_StreamCreate
BASS_StreamCreateFile
BASS_StreamCreateFileUser
BASS_StreamCreateURL
BASS_StreamFree
BASS_StreamGetFilePosition
BASS_StreamGetTags
BASS_Update
_

Sections

Size: 85KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 568B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Popcap Game Collection/Peggle World of Warcraft Edition/eula.txt
Popcap Game Collection/Peggle World of Warcraft Edition/j2k-codec.dll
.dll windows:4 windows x86 arch:x86

9b63e7f4e0446602b5690410414a5738

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
GetLocalTime
GetCurrentThreadId
EnterCriticalSection
GetSystemTime
SetLastError
GetLastError
Beep

msvcrt

fclose
fopen
fflush
fprintf
vsprintf
rand
srand
malloc
??2@YAPAXI@Z
??3@YAXPAX@Z
free
__CxxFrameHandler
fseek
_ftol
system
fgetc
fputc
fread
fwrite
_except_handler3
__dllonexit
_onexit
_initterm
_adjust_fdiv
_strnicmp

Exports

Exports

_J2K_Cancel@4
_J2K_Close@4
_J2K_Decode@20
_J2K_EasyDecode@24
_J2K_GetInfo@16
_J2K_GetInfoEx@8
_J2K_GetMetaData@20
_J2K_GetResolutionDimensions@16
_J2K_GetResolutionDimensionsByStr@16
_J2K_GetResolutions@8
_J2K_OpenCustom@8
_J2K_OpenFile@4
_J2K_OpenMemory@8
_J2K_SelectTiles@16
_J2K_StartLogging@8
_J2K_StopLogging@0
_J2K_Unlock@4
_J2K_getErrorStr@4
_J2K_getErrorStrVB@8
_J2K_getLastError@0
_J2K_getLastErrorStr@0
_J2K_getVersion@0

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Popcap Game Collection/Peggle World of Warcraft Edition/main.pak
Popcap Game Collection/Peggle World of Warcraft Edition/music/01.mo3
Popcap Game Collection/Peggle World of Warcraft Edition/music/02.mo3
Popcap Game Collection/Peggle World of Warcraft Edition/music/03.mo3
Popcap Game Collection/Peggle World of Warcraft Edition/music/Menu_Amb_2.ogg
Popcap Game Collection/Peggle World of Warcraft Edition/music/menu.ogg
Popcap Game Collection/Peggle World of Warcraft Edition/music/odetojoy.ogg
Popcap Game Collection/Peggle World of Warcraft Edition/music/opening.ogg
Popcap Game Collection/Peggle World of Warcraft Edition/properties/partner.xml
Popcap Game Collection/Peggle World of Warcraft Edition/properties/partner.xml.sig
Popcap Game Collection/Peggle World of Warcraft Edition/properties/partner_logo.jpg
.jpg
Popcap Game Collection/Peggle World of Warcraft Edition/readme.html
.html

Sharing

General

Malware Config

Signatures

Files

Password: cs.rin.ru

Password: cs.rin.ru

e571d886a34eae925e25e775a0222c46

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2Certificate

Extended Key Usages

Key Usages

3c:61:df:38:d5:bb:38:36:a8:b4:4b:98:5c:50:44:79Certificate

Extended Key Usages

Key Usages

Signer

Headers

File Characteristics

PDB Paths

Imports

winmm

kernel32

user32

advapi32

shell32

wsock32

gdi32

comdlg32

ole32

oleaut32

Sections

.text Size: 1.8MB - Virtual size: 1.8MB

.rdata Size: 476KB - Virtual size: 474KB

.data Size: 28KB - Virtual size: 260KB

.rsrc Size: 408KB - Virtual size: 406KB

Password: cs.rin.ru

Headers

File Characteristics

Exports

Exports

Sections

Size: 85KB - Virtual size: 244KB

.rsrc Size: 568B - Virtual size: 4KB

Size: - Virtual size: 4KB

Size: 4KB - Virtual size: 3KB

Password: cs.rin.ru

9b63e7f4e0446602b5690410414a5738

Headers

File Characteristics

Imports

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 64KB - Virtual size: 63KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 12KB - Virtual size: 11KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 3KB

Password: cs.rin.ru

Password: cs.rin.ru

e571d886a34eae925e25e775a0222c46

Headers

File Characteristics

PDB Paths

Imports

winmm

kernel32

user32

advapi32

shell32

wsock32

gdi32

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

3c:61:df:38:d5:bb:38:36:a8:b4:4b:98:5c:50:44:79
Certificate

.text
Size: 1.8MB - Virtual size: 1.8MB

.rdata
Size: 476KB - Virtual size: 474KB

.data
Size: 28KB - Virtual size: 260KB

.rsrc
Size: 408KB - Virtual size: 406KB

.rsrc
Size: 568B - Virtual size: 4KB

.text
Size: 64KB - Virtual size: 63KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 11KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 3KB

.text
Size: 1.8MB - Virtual size: 1.8MB

.rdata
Size: 496KB - Virtual size: 493KB

.data
Size: 28KB - Virtual size: 260KB

.rsrc
Size: 408KB - Virtual size: 405KB

.rsrc
Size: 568B - Virtual size: 4KB

.text
Size: 64KB - Virtual size: 63KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 11KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 3KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

3c:61:df:38:d5:bb:38:36:a8:b4:4b:98:5c:50:44:79
Certificate

.text
Size: 2.4MB - Virtual size: 2.4MB

.rdata
Size: 328KB - Virtual size: 327KB

.data
Size: 32KB - Virtual size: 277KB

.rsrc
Size: 408KB - Virtual size: 406KB