General

Malware Config

Signatures

Files

• 42725ec7fc4d1185cb467d190aa47b86_JaffaCakes118

  .exe windows:4 windows x86 arch:x86

  099c0646ea7282d232219f8807883be0

  
  

  Code Sign

  42:5d:91:4a:c9:6d:ee:04:00:3f:71:00:d7:0b:12:21:ba:04:a6:d4

  Signer

  Actual PE Digest

  42:5d:91:4a:c9:6d:ee:04:00:3f:71:00:d7:0b:12:21:ba:04:a6:d4

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  CompareFileTime

  SearchPathA

  GetShortPathNameA

  GetFullPathNameA

  MoveFileA

  SetCurrentDirectoryA

  GetFileAttributesA

  GetLastError

  CreateDirectoryA

  SetFileAttributesA

  Sleep

  GetTickCount

  CreateFileA

  GetFileSize

  GetModuleFileNameA

  GetCurrentProcess

  CopyFileA

  ExitProcess

  SetFileTime

  GetTempPathA

  GetCommandLineA

  SetErrorMode

  LoadLibraryA

  lstrcpynA

  GetDiskFreeSpaceA

  GlobalUnlock

  GlobalLock

  CreateThread

  CreateProcessA

  RemoveDirectoryA

  GetTempFileNameA

  lstrlenA

  lstrcatA

  GetSystemDirectoryA

  GetVersion

  CloseHandle

  lstrcmpiA

  lstrcmpA

  ExpandEnvironmentStringsA

  GlobalFree

  GlobalAlloc

  WaitForSingleObject

  GetExitCodeProcess

  GetModuleHandleA

  LoadLibraryExA

  GetProcAddress

  FreeLibrary

  MultiByteToWideChar

  WritePrivateProfileStringA

  GetPrivateProfileStringA

  WriteFile

  ReadFile

  MulDiv

  SetFilePointer

  FindClose

  FindNextFileA

  FindFirstFileA

  DeleteFileA

  GetWindowsDirectoryA

  user32

  EndDialog

  ScreenToClient

  GetWindowRect

  EnableMenuItem

  GetSystemMenu

  SetClassLongA

  IsWindowEnabled

  SetWindowPos

  GetSysColor

  GetWindowLongA

  SetCursor

  LoadCursorA

  CheckDlgButton

  GetMessagePos

  LoadBitmapA

  CallWindowProcA

  IsWindowVisible

  CloseClipboard

  SetClipboardData

  EmptyClipboard

  RegisterClassA

  TrackPopupMenu

  AppendMenuA

  CreatePopupMenu

  GetSystemMetrics

  SetDlgItemTextA

  GetDlgItemTextA

  MessageBoxIndirectA

  CharPrevA

  DispatchMessageA

  PeekMessageA

  DestroyWindow

  CreateDialogParamA

  SetTimer

  SetWindowTextA

  PostQuitMessage

  SetForegroundWindow

  wsprintfA

  SendMessageTimeoutA

  FindWindowExA

  SystemParametersInfoA

  CreateWindowExA

  GetClassInfoA

  DialogBoxParamA

  CharNextA

  OpenClipboard

  ExitWindowsEx

  IsWindow

  GetDlgItem

  SetWindowLongA

  LoadImageA

  GetDC

  EnableWindow

  InvalidateRect

  SendMessageA

  DefWindowProcA

  BeginPaint

  GetClientRect

  FillRect

  DrawTextA

  EndPaint

  ShowWindow

  gdi32

  SetBkColor

  GetDeviceCaps

  DeleteObject

  CreateBrushIndirect

  CreateFontIndirectA

  SetBkMode

  SetTextColor

  SelectObject

  shell32

  SHGetPathFromIDListA

  SHBrowseForFolderA

  SHGetFileInfoA

  ShellExecuteA

  SHFileOperationA

  SHGetSpecialFolderLocation

  advapi32

  RegQueryValueExA

  RegSetValueExA

  RegEnumKeyA

  RegEnumValueA

  RegOpenKeyExA

  RegDeleteKeyA

  RegDeleteValueA

  RegCloseKey

  RegCreateKeyExA

  comctl32

  ImageList_AddMasked

  ImageList_Destroy

  ord17

  ImageList_Create

  ole32

  CoTaskMemFree

  OleInitialize

  OleUninitialize

  CoCreateInstance

  version

  GetFileVersionInfoSizeA

  GetFileVersionInfoA

  VerQueryValueA

  Sections

  .text

  Size: 23KB - Virtual size: 22KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 4KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1024B - Virtual size: 107KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .ndata

  Size: - Virtual size: 104KB

  IMAGE_SCN_CNT_UNINITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 284KB - Virtual size: 283KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• $PLUGINSDIR/FindProcDLL.dll

  .dll windows:4 windows x86 arch:x86

  8df26927f8978d4eb40ff179c0aa961b

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  kernel32

  GetProcAddress

  lstrcmpA

  OpenProcess

  lstrcpyA

  LoadLibraryA

  CloseHandle

  FreeLibrary

  GetVersionExA

  lstrlenA

  GlobalFree

  user32

  wsprintfA

  Exports

  Exports

  FindProc

  Sections

  .text

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .reloc

  Size: 512B - Virtual size: 104B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• $PLUGINSDIR/KillProcDLL.dll

  .dll windows:4 windows x86 arch:x86

  153027ec3b10bcea606b777657dd3402

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  kernel32

  GetVersionExA

  TerminateProcess

  OpenProcess

  LoadLibraryA

  CloseHandle

  GetProcAddress

  FreeLibrary

  GlobalFree

  lstrcpyA

  DisableThreadLibraryCalls

  msvcrt

  strcmp

  _strupr

  toupper

  strlen

  free

  _initterm

  malloc

  _adjust_fdiv

  strcpy

  _itoa

  Exports

  Exports

  KillProc

  Sections

  .text

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .reloc

  Size: 512B - Virtual size: 172B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• $PLUGINSDIR/License.rtf

  .rtf
• $PLUGINSDIR/SkinBtn.dll

  .dll windows:4 windows x86 arch:x86

  baf2d405231cd43dae48df474a521d01

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  kernel32

  lstrcmpiA

  GlobalAlloc

  lstrcpynA

  GetModuleHandleA

  GlobalFree

  user32

  InvalidateRect

  GetParent

  SetWindowLongA

  CallWindowProcA

  GetPropA

  SendMessageA

  DrawTextA

  DrawStateA

  LoadImageA

  RemovePropA

  GetWindowLongA

  SetPropA

  gdi32

  GetObjectA

  CreateCompatibleDC

  DeleteObject

  SelectObject

  DeleteDC

  SetBkMode

  msimg32

  TransparentBlt

  comctl32

  _TrackMouseEvent

  Exports

  Exports

  Init

  Set

  onClick

  Sections

  .text

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 1024B - Virtual size: 947B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 24B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .reloc

  Size: 512B - Virtual size: 284B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• $PLUGINSDIR/SkinProgress.dll

  .dll windows:4 windows x86 arch:x86

  df38729be926f91d3390389029adf53b

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  kernel32

  lstrcpyA

  GlobalAlloc

  GlobalFree

  GetModuleHandleA

  user32

  GetWindowRect

  BeginPaint

  GetWindowDC

  CallWindowProcA

  ReleaseDC

  EndPaint

  GetWindowLongA

  GetPropA

  SetPropA

  SetWindowLongA

  RemovePropA

  LoadImageA

  SendMessageA

  gdi32

  DeleteDC

  BitBlt

  CreateCompatibleBitmap

  StretchBlt

  SelectObject

  CreateCompatibleDC

  GetObjectA

  DeleteObject

  Exports

  Exports

  Set

  Sections

  .text

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 1024B - Virtual size: 797B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 16B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .reloc

  Size: 512B - Virtual size: 254B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• $PLUGINSDIR/System.dll

  .dll windows:4 windows x86 arch:x86

  2017f2acbdaa42ab3e4adeb8b4c37e7b

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  kernel32

  GlobalAlloc

  GlobalFree

  GlobalSize

  GetLastError

  lstrcpyA

  lstrcpynA

  FreeLibrary

  lstrcatA

  GetProcAddress

  LoadLibraryA

  GetModuleHandleA

  MultiByteToWideChar

  lstrlenA

  WideCharToMultiByte

  VirtualAlloc

  VirtualProtect

  user32

  wsprintfA

  ole32

  StringFromGUID2

  CLSIDFromString

  Exports

  Exports

  Alloc

  Call

  Copy

  Free

  Get

  Int64Op

  Store

  Sections

  .text

  Size: 7KB - Virtual size: 7KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 1024B - Virtual size: 784B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 100B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .reloc

  Size: 1024B - Virtual size: 520B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• $PLUGINSDIR/WndProc.dll

  .dll windows:4 windows x86 arch:x86

  b3f659d7637a91b4fec12ff9b930080d

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  kernel32

  GlobalFree

  lstrcpyA

  GlobalAlloc

  user32

  CallWindowProcA

  SetWindowLongA

  GetPropA

  SetPropA

  wsprintfA

  Exports

  Exports

  onCallback

  Sections

  .text

  Size: 1024B - Virtual size: 934B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 512B - Virtual size: 377B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 20B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .reloc

  Size: 512B - Virtual size: 284B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• $PLUGINSDIR/bg.bmp
• $PLUGINSDIR/bgAgreement.bmp
• $PLUGINSDIR/btn_agreement.bmp
• $PLUGINSDIR/btn_close.bmp
• $PLUGINSDIR/btn_custom.bmp
• $PLUGINSDIR/btn_install.bmp
• $PLUGINSDIR/btn_install1.bmp
• $PLUGINSDIR/btn_next.bmp
• $PLUGINSDIR/btn_ok1.bmp
• $PLUGINSDIR/btn_path.bmp
• $PLUGINSDIR/btn_return.bmp
• $PLUGINSDIR/btn_run.bmp
• $PLUGINSDIR/finish.bmp
• $PLUGINSDIR/kv1.bmp
• $PLUGINSDIR/kv2.bmp
• $PLUGINSDIR/loading1.bmp
• $PLUGINSDIR/loading2.bmp
• $PLUGINSDIR/nsDialogs.dll

  .dll windows:4 windows x86 arch:x86

  1e2884056e655f2b7bc5a904e352fc80

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  kernel32

  lstrcpyA

  GetFileAttributesA

  lstrcmpiA

  MulDiv

  lstrlenA

  HeapFree

  GetCurrentDirectoryA

  HeapAlloc

  HeapReAlloc

  GlobalFree

  lstrcpynA

  GlobalAlloc

  GetProcessHeap

  SetCurrentDirectoryA

  user32

  GetPropA

  DestroyWindow

  CallWindowProcA

  SetCursor

  LoadCursorA

  RemovePropA

  CharPrevA

  GetWindowLongA

  DrawTextA

  GetWindowTextA

  GetDlgItem

  SetWindowLongA

  SetWindowPos

  CreateDialogParamA

  MapWindowPoints

  GetWindowRect

  SetPropA

  CreateWindowExA

  IsWindow

  SetTimer

  KillTimer

  DispatchMessageA

  TranslateMessage

  GetMessageA

  IsDialogMessageA

  ShowWindow

  wsprintfA

  MapDialogRect

  GetClientRect

  CharNextA

  SendMessageA

  DrawFocusRect

  gdi32

  SetTextColor

  shell32

  SHBrowseForFolderA

  SHGetPathFromIDListA

  comdlg32

  GetSaveFileNameA

  GetOpenFileNameA

  CommDlgExtendedError

  ole32

  CoTaskMemFree

  Exports

  Exports

  Create

  CreateControl

  CreateItem

  CreateTimer

  GetUserData

  KillTimer

  OnBack

  OnChange

  OnClick

  OnNotify

  SelectFileDialog

  SelectFolderDialog

  SetRTL

  SetUserData

  Show

  Sections

  .text

  Size: 4KB - Virtual size: 4KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 512B - Virtual size: 152B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1024B - Virtual size: 572B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• $PLUGINSDIR/welcome.bmp
• $_48_/Head/1.png

  .png
• $_48_/Head/10.png

  .png
• $_48_/Head/10_login.png

  .png
• $_48_/Head/10_over.png

  .png
• $_48_/Head/11.png

  .png
• $_48_/Head/11_login.png

  .png
• $_48_/Head/11_over.png

  .png
• $_48_/Head/12.png

  .png
• $_48_/Head/12_login.png

  .png
• $_48_/Head/12_over.png

  .png
• $_48_/Head/13.png

  .png
• $_48_/Head/13_login.png

  .png
• $_48_/Head/13_over.png

  .png
• $_48_/Head/14.png

  .png
• $_48_/Head/14_login.png

  .png
• $_48_/Head/14_over.png

  .png
• $_48_/Head/15.png

  .png
• $_48_/Head/15_login.png

  .png
• $_48_/Head/15_over.png

  .png
• $_48_/Head/16.png

  .png
• $_48_/Head/16_login.png

  .png
• $_48_/Head/16_over.png

  .png
• $_48_/Head/17.png

  .png
• $_48_/Head/17_login.png

  .png
• $_48_/Head/17_over.png

  .png
• $_48_/Head/18.png

  .png
• $_48_/Head/18_login.png

  .png
• $_48_/Head/18_over.png

  .png
• $_48_/Head/1_login.png

  .png
• $_48_/Head/1_over.png

  .png
• $_48_/Head/2.png

  .png
• $_48_/Head/2_login.png

  .png
• $_48_/Head/2_over.png

  .png
• $_48_/Head/3.png

  .png
• $_48_/Head/3_login.png

  .png
• $_48_/Head/3_over.png

  .png
• $_48_/Head/4.png

  .png
• $_48_/Head/4_login.png

  .png
• $_48_/Head/4_over.png

  .png
• $_48_/Head/5.png

  .png
• $_48_/Head/5_login.png

  .png
• $_48_/Head/5_over.png

  .png
• $_48_/Head/6.png

  .png
• $_48_/Head/6_login.png

  .png
• $_48_/Head/6_over.png

  .png
• $_48_/Head/7.png

  .png
• $_48_/Head/7_login.png

  .png
• $_48_/Head/7_over.png

  .png
• $_48_/Head/8.png

  .png
• $_48_/Head/8_login.png

  .png
• $_48_/Head/8_over.png

  .png
• $_48_/Head/9.png

  .png
• $_48_/Head/9_login.png

  .png
• $_48_/Head/9_over.png

  .png
• $_48_/Skin/Default.jpg

  .jpg
• $_48_/Skin/Default/BottomBackground.bmp
• $_48_/Skin/Default/Clear_Background.png

  .png
• $_48_/Skin/Default/Clear_down.png

  .png
• $_48_/Skin/Default/DownLoadForm_BK.bmp
• $_48_/Skin/Default/DownLoadForm_Progress1.bmp
• $_48_/Skin/Default/DownLoadForm_Progress2.bmp
• $_48_/Skin/Default/Entergame_Down.png

  .png
• $_48_/Skin/Default/Entergame_Normal.png

  .png
• $_48_/Skin/Default/Entergame_Over.png

  .png
• $_48_/Skin/Default/FlashCrashedIcon.png

  .png
• $_48_/Skin/Default/FlashCrashedInfo.png

  .png
• $_48_/Skin/Default/FloatForm_Body.png

  .png
• $_48_/Skin/Default/FloatForm_Left.png

  .png
• $_48_/Skin/Default/FormExitMenu_Exit.png

  .png
• $_48_/Skin/Default/FormExitMenu_ExitOver.png

  .png
• $_48_/Skin/Default/FormExitMenu_Open.png

  .png
• $_48_/Skin/Default/FormExitMenu_OpenOver.png

  .png
• $_48_/Skin/Default/FormExitMenu_Set.png

  .png
• $_48_/Skin/Default/FormExitMenu_SetOver.png

  .png
• $_48_/Skin/Default/FormMain_Background.png

  .png
• $_48_/Skin/Default/FormMain_Close_Down.png

  .png
• $_48_/Skin/Default/FormMain_Close_Normal.png

  .png
• $_48_/Skin/Default/FormMain_Close_Over.png

  .png
• $_48_/Skin/Default/FormMain_Min_Down.png

  .png
• $_48_/Skin/Default/FormMain_Min_Normal.png

  .png
• $_48_/Skin/Default/FormMain_Min_Over.png

  .png
• $_48_/Skin/Default/FormMulAccount_Add_Normal.png

  .png
• $_48_/Skin/Default/FormMulAccount_Add_Over.png

  .png
• $_48_/Skin/Default/FormMulAccount_Delete.png

  .png
• $_48_/Skin/Default/FormMulAccount_Delete_Normal.png

  .png
• $_48_/Skin/Default/FormMulAccount_Delete_Over.png

  .png
• $_48_/Skin/Default/FormMulAccount_Edit.png

  .png
• $_48_/Skin/Default/FormMulAccount_Edit_Normal.png

  .png
• $_48_/Skin/Default/FormMulAccount_Edit_Over.png

  .png
• $_48_/Skin/Default/FormMulAccount_EnterGame_Normal.png

  .png
• $_48_/Skin/Default/FormMulAccount_EnterGame_Over.png

  .png
• $_48_/Skin/Default/FormMulAccount_Icon.png

  .png
• $_48_/Skin/Default/FormMulAccount_Line.jpg

  .jpg
• $_48_/Skin/Default/FormMulAccount_Line.png

  .png
• $_48_/Skin/Default/FormSetMenu_About.png

  .png
• $_48_/Skin/Default/FormSetMenu_AboutOver.png

  .png
• $_48_/Skin/Default/FormSetMenu_Commonproblem.png

  .png
• $_48_/Skin/Default/FormSetMenu_CommonproblemOver.png

  .png
• $_48_/Skin/Default/FormSetMenu_FeedBack.png

  .png
• $_48_/Skin/Default/FormSetMenu_FeedBackOver.png

  .png
• $_48_/Skin/Default/FormSetMenu_Officical.png

  .png
• $_48_/Skin/Default/FormSetMenu_OfficicalOver.png

  .png
• $_48_/Skin/Default/FormSetMenu_Set.png

  .png
• $_48_/Skin/Default/FormSetMenu_SetOver.png

  .png
• $_48_/Skin/Default/FormSetMenu_Version.png

  .png
• $_48_/Skin/Default/FormSetMenu_VersionOver.png

  .png
• $_48_/Skin/Default/FormUserMenu_Change.png

  .png
• $_48_/Skin/Default/FormUserMenu_Change_Over.png

  .png
• $_48_/Skin/Default/FormUserMenu_Safe.png

  .png
• $_48_/Skin/Default/FormUserMenu_Safe_Over.png

  .png
• $_48_/Skin/Default/Form_About_Logo.png

  .png
• $_48_/Skin/Default/Form_AddClock_Down.png

  .png
• $_48_/Skin/Default/Form_AddClock_Normal.png

  .png
• $_48_/Skin/Default/Form_AddClock_Over.png

  .png
• $_48_/Skin/Default/Form_Background.png

  .png
• $_48_/Skin/Default/Form_Boder.png

  .png
• $_48_/Skin/Default/Form_Bottom_Round.png

  .png
• $_48_/Skin/Default/Form_Checked.png

  .png
• $_48_/Skin/Default/Form_Close_Down.png

  .png
• $_48_/Skin/Default/Form_Close_Normal.png

  .png
• $_48_/Skin/Default/Form_Close_Over.png

  .png
• $_48_/Skin/Default/Form_Cutline.png

  .png
• $_48_/Skin/Default/Form_Delete.png

  .png
• $_48_/Skin/Default/Form_Delete_Squarely.png

  .png
• $_48_/Skin/Default/Form_DropDown_Normal.png

  .png
• $_48_/Skin/Default/Form_DropDown_Over.png

  .png
• $_48_/Skin/Default/Form_EditBg.png

  .png
• $_48_/Skin/Default/Form_Edit_Round.png

  .png
• $_48_/Skin/Default/Form_Edit_Squarely.png

  .png
• $_48_/Skin/Default/Form_FullScreen_Exit.png

  .png
• $_48_/Skin/Default/Form_FullScreen_Exit_Over.png

  .png
• $_48_/Skin/Default/Form_FullScreen_Exit_down.png

  .png
• $_48_/Skin/Default/Form_FullScreen_Lock.png

  .png
• $_48_/Skin/Default/Form_FullScreen_Lock_Over.png

  .png
• $_48_/Skin/Default/Form_FullScreen_Lock_down.png

  .png
• $_48_/Skin/Default/Form_FullScreen_UnLock.png

  .png
• $_48_/Skin/Default/Form_FullScreen_UnLock_Over.png

  .png
• $_48_/Skin/Default/Form_FullScreen_UnLock_down.png

  .png
• $_48_/Skin/Default/Form_FullScreen_bg.png

  .png
• $_48_/Skin/Default/Form_Guide1.jpg

  .jpg
• $_48_/Skin/Default/Form_Guide2.jpg

  .jpg
• $_48_/Skin/Default/Form_Guide3.jpg

  .jpg
• $_48_/Skin/Default/Form_Help_Down.png

  .png
• $_48_/Skin/Default/Form_Help_Normal.png

  .png
• $_48_/Skin/Default/Form_Help_Over.png

  .png
• $_48_/Skin/Default/Form_KMHook_Frame.png

  .png
• $_48_/Skin/Default/Form_Large_Clock.png

  .png
• $_48_/Skin/Default/Form_Left.png

  .png
• $_48_/Skin/Default/Form_Min1_Down.png

  .png
• $_48_/Skin/Default/Form_Min1_Normal.png

  .png
• $_48_/Skin/Default/Form_Min1_Over.png

  .png
• $_48_/Skin/Default/Form_Min_Down.png

  .png
• $_48_/Skin/Default/Form_Min_Normal.png

  .png
• $_48_/Skin/Default/Form_Min_Over.png

  .png
• $_48_/Skin/Default/Form_MulAccount_bg.png

  .png
• $_48_/Skin/Default/Form_OK_Down.png

  .png
• $_48_/Skin/Default/Form_OK_Normal.png

  .png
• $_48_/Skin/Default/Form_OK_Over.png

  .png
• $_48_/Skin/Default/Form_RemindBg.png

  .png
• $_48_/Skin/Default/Form_Restore_Hint.png

  .png
• $_48_/Skin/Default/Form_Right.png

  .png
• $_48_/Skin/Default/Form_Set_Background_Grey.png

  .png
• $_48_/Skin/Default/Form_Set_Background_White.png

  .png
• $_48_/Skin/Default/Form_Set_Bg_Down.png

  .png
• $_48_/Skin/Default/Form_Set_Bg_Normal.png

  .png
• $_48_/Skin/Default/Form_Set_Bg_Over.png

  .png
• $_48_/Skin/Default/Form_Small_Clock.png

  .png
• $_48_/Skin/Default/Form_Tips_Icon.png

  .png
• $_48_/Skin/Default/Form_Title.png

  .png
• $_48_/Skin/Default/Form_Title1.png

  .png
• $_48_/Skin/Default/Form_Unchecked.png

  .png
• $_48_/Skin/Default/Form_Upgrade_Down.png

  .png
• $_48_/Skin/Default/Form_Upgrade_New.png

  .png
• $_48_/Skin/Default/Form_Upgrade_ProBack.png

  .png
• $_48_/Skin/Default/Form_Upgrade_ProPercent.png

  .png
• $_48_/Skin/Default/Form_Upgrade_Tips.png

  .png
• $_48_/Skin/Default/Frame_Boder.png

  .png
• $_48_/Skin/Default/Frame_Titlebg.png

  .png
• $_48_/Skin/Default/GameNews_Btn_Normal.png

  .png
• $_48_/Skin/Default/GameNews_Btn_Over.png

  .png
• $_48_/Skin/Default/KMHelp.jpg

  .jpg
• $_48_/Skin/Default/Progress_Back.png

  .png
• $_48_/Skin/Default/Progress_Point.png

  .png
• $_48_/Skin/Default/Progress_Roll.png

  .png
• $_48_/Skin/Default/Radio_Checked.png

  .png
• $_48_/Skin/Default/Radio_Unchecked.png

  .png
• $_48_/Skin/Default/Radiobtn_Checked.png

  .png
• $_48_/Skin/Default/Radiobtn_Unchecked.png

  .png
• $_48_/Skin/Default/Recharge_down.png

  .png
• $_48_/Skin/Default/Refresh_down.png

  .png
• $_48_/Skin/Default/ScrollBackground.png

  .png
• $_48_/Skin/Default/ScrollDown_Normal.png

  .png
• $_48_/Skin/Default/ScrollDown_Over.png

  .png
• $_48_/Skin/Default/ScrollDropdown_Normal.png

  .png
• $_48_/Skin/Default/ScrollDropdown_Over.png

  .png
• $_48_/Skin/Default/ScrollPercent_Normal.png

  .png
• $_48_/Skin/Default/ScrollPercent_Over.png

  .png
• $_48_/Skin/Default/ScrollUp_Normal.png

  .png
• $_48_/Skin/Default/ScrollUp_Over.png

  .png
• $_48_/Skin/Default/SkinDefine.xml
• $_48_/Skin/Default/Tick_Off.png

  .png
• $_48_/Skin/Default/Tick_On.png

  .png
• $_48_/Skin/Default/VIP0.png

  .png
• $_48_/Skin/Default/VIP1.png

  .png
• $_48_/Skin/Default/VIP2.png

  .png
• $_48_/Skin/Default/VIP3.png

  .png
• $_48_/Skin/Default/VIP4.png

  .png
• $_48_/Skin/Default/VIP5.png

  .png
• $_48_/Skin/Default/VIP6.png

  .png
• $_48_/Skin/Default/VIP7.png

  .png
• $_48_/Skin/Default/VIP8.png

  .png
• $_48_/Skin/Default/accelerate_b_down.png

  .png
• $_48_/Skin/Default/accelerate_b_normal.png

  .png
• $_48_/Skin/Default/accelerate_b_over.png

  .png
• $_48_/Skin/Default/accelerate_down.png

  .png
• $_48_/Skin/Default/accelerate_normal.png

  .png
• $_48_/Skin/Default/accelerate_over.png

  .png
• $_48_/Skin/Default/autoclear_normal.png

  .png
• $_48_/Skin/Default/autoclear_over.png

  .png
• $_48_/Skin/Default/autoclear_sel_normal.png

  .png
• $_48_/Skin/Default/autoclear_sel_over.png

  .png
• $_48_/Skin/Default/btn_Clear_Down.png

  .png
• $_48_/Skin/Default/btn_Clear_Normal.png

  .png
• $_48_/Skin/Default/btn_Clear_Over.png

  .png
• $_48_/Skin/Default/btn_off.png

  .png
• $_48_/Skin/Default/btn_on.png

  .png
• $_48_/Skin/Default/bulletin_down.png

  .png
• $_48_/Skin/Default/bulletin_normal.png

  .png
• $_48_/Skin/Default/bulletin_over.png

  .png
• $_48_/Skin/Default/catechisml_down.png

  .png
• $_48_/Skin/Default/catechisml_normal.png

  .png
• $_48_/Skin/Default/catechisml_over.png

  .png
• $_48_/Skin/Default/clear_normal.png

  .png
• $_48_/Skin/Default/clear_over.png

  .png
• $_48_/Skin/Default/clock_down.png

  .png
• $_48_/Skin/Default/clock_normal.png

  .png
• $_48_/Skin/Default/clock_over.png

  .png
• $_48_/Skin/Default/dropdown_down.png

  .png
• $_48_/Skin/Default/dropdown_normal.png

  .png
• $_48_/Skin/Default/dropdown_over.png

  .png
• $_48_/Skin/Default/form_bottom.png

  .png
• $_48_/Skin/Default/form_remind_active.png

  .png
• $_48_/Skin/Default/form_remind_background.png

  .png
• $_48_/Skin/Default/form_remind_clock.png

  .png
• $_48_/Skin/Default/form_remind_close_down.png

  .png
• $_48_/Skin/Default/form_remind_close_normal.png

  .png
• $_48_/Skin/Default/form_remind_close_over.png

  .png
• $_48_/Skin/Default/form_remind_gift.png

  .png
• $_48_/Skin/Default/form_standalone_border.png

  .png
• $_48_/Skin/Default/form_standalone_boss.png

  .png
• $_48_/Skin/Default/form_standalone_button_down.png

  .png
• $_48_/Skin/Default/form_standalone_button_normal.png

  .png
• $_48_/Skin/Default/form_standalone_button_over.png

  .png
• $_48_/Skin/Default/form_standalone_mute.png

  .png
• $_48_/Skin/Default/form_standalone_recharge.png

  .png
• $_48_/Skin/Default/form_standalone_refresh.png

  .png
• $_48_/Skin/Default/form_standalone_standalone.png

  .png
• $_48_/Skin/Default/form_standalone_topmost.png

  .png
• $_48_/Skin/Default/form_standalone_topmost_sel.png

  .png
• $_48_/Skin/Default/form_standalone_voice.png

  .png
• $_48_/Skin/Default/fullscreen_down.png

  .png
• $_48_/Skin/Default/fullscreen_normal.png

  .png
• $_48_/Skin/Default/fullscreen_over.png

  .png
• $_48_/Skin/Default/fullscreen_sel_down.png

  .png
• $_48_/Skin/Default/fullscreen_sel_normal.png

  .png
• $_48_/Skin/Default/fullscreen_sel_over.png

  .png
• $_48_/Skin/Default/game_bbs_normal.png

  .png
• $_48_/Skin/Default/game_bbs_over.png

  .png
• $_48_/Skin/Default/game_boder.png

  .png
• $_48_/Skin/Default/game_boss_normal.png

  .png
• $_48_/Skin/Default/game_boss_over.png

  .png
• $_48_/Skin/Default/game_bottom.png

  .png
• $_48_/Skin/Default/game_close_down.bmp
• $_48_/Skin/Default/game_close_down.png

  .png
• $_48_/Skin/Default/game_close_normal.png

  .png
• $_48_/Skin/Default/game_close_over.png

  .png
• $_48_/Skin/Default/game_left.bmp
• $_48_/Skin/Default/game_max_down.png

  .png
• $_48_/Skin/Default/game_max_normal.png

  .png
• $_48_/Skin/Default/game_max_over.png

  .png
• $_48_/Skin/Default/game_message_down.png

  .png
• $_48_/Skin/Default/game_message_normal.png

  .png
• $_48_/Skin/Default/game_message_over.png

  .png
• $_48_/Skin/Default/game_min_down.png

  .png
• $_48_/Skin/Default/game_min_normal.png

  .png
• $_48_/Skin/Default/game_min_over.png

  .png
• $_48_/Skin/Default/game_nor_down.png

  .png
• $_48_/Skin/Default/game_nor_normal.png

  .png
• $_48_/Skin/Default/game_nor_over.png

  .png
• $_48_/Skin/Default/game_official_normal.png

  .png
• $_48_/Skin/Default/game_official_over.png

  .png
• $_48_/Skin/Default/game_right.bmp
• $_48_/Skin/Default/game_right.png

  .png
• $_48_/Skin/Default/game_set_down.png

  .png
• $_48_/Skin/Default/game_set_normal.png

  .png
• $_48_/Skin/Default/game_set_over.png

  .png
• $_48_/Skin/Default/game_skin_down.png

  .png
• $_48_/Skin/Default/game_skin_normal.png

  .png
• $_48_/Skin/Default/game_skin_over.png

  .png
• $_48_/Skin/Default/game_top.png

  .png
• $_48_/Skin/Default/gift_down.png

  .png
• $_48_/Skin/Default/gift_normal.jpg

  .jpg
• $_48_/Skin/Default/gift_normal.png

  .png
• $_48_/Skin/Default/gift_over.jpg

  .jpg
• $_48_/Skin/Default/gift_over.png

  .png
• $_48_/Skin/Default/guide_close_normal.jpg

  .jpg
• $_48_/Skin/Default/guide_close_normal.png

  .png
• $_48_/Skin/Default/guide_close_over.jpg

  .jpg
• $_48_/Skin/Default/guide_close_over.png

  .png
• $_48_/Skin/Default/guide_next1_normal.jpg

  .jpg
• $_48_/Skin/Default/guide_next1_normal.png

  .png
• $_48_/Skin/Default/guide_next1_over.jpg

  .jpg
• $_48_/Skin/Default/guide_next1_over.png

  .png
• $_48_/Skin/Default/guide_next2 _over.png

  .png
• $_48_/Skin/Default/guide_next3_normal.jpg

  .jpg
• $_48_/Skin/Default/guide_next3_normal.png

  .png
• $_48_/Skin/Default/guide_next3_over.jpg

  .jpg
• $_48_/Skin/Default/guide_next3_over.png

  .png
• $_48_/Skin/Default/hidden_down.png

  .png
• $_48_/Skin/Default/hidden_normal.png

  .png
• $_48_/Skin/Default/hidden_over.png

  .png
• $_48_/Skin/Default/home_down.png

  .png
• $_48_/Skin/Default/home_normal.png

  .png
• $_48_/Skin/Default/home_over.png

  .png
• $_48_/Skin/Default/icon.png

  .png
• $_48_/Skin/Default/keyelves_down.png

  .png
• $_48_/Skin/Default/keyelves_normal.png

  .png
• $_48_/Skin/Default/keyelves_over.png

  .png
• $_48_/Skin/Default/keyelves_stop_down.png

  .png
• $_48_/Skin/Default/keyelves_stop_normal.png

  .png
• $_48_/Skin/Default/keyelves_stop_over.png

  .png
• $_48_/Skin/Default/menu_button_normal.png

  .png
• $_48_/Skin/Default/menu_button_over.png

  .png
• $_48_/Skin/Default/more_down.png

  .png
• $_48_/Skin/Default/more_normal.png

  .png
• $_48_/Skin/Default/more_over.png

  .png
• $_48_/Skin/Default/more_sel_down.png

  .png
• $_48_/Skin/Default/more_sel_normal.png

  .png
• $_48_/Skin/Default/more_sel_over.png

  .png
• $_48_/Skin/Default/multaccount_down.png

  .png
• $_48_/Skin/Default/multaccount_normal.png

  .png
• $_48_/Skin/Default/multaccount_over.png

  .png
• $_48_/Skin/Default/official_down.png

  .png
• $_48_/Skin/Default/official_normal.png

  .png
• $_48_/Skin/Default/official_over.png

  .png
• $_48_/Skin/Default/progressbar.png

  .png
• $_48_/Skin/Default/progressbar_bg.png

  .png
• $_48_/Skin/Default/recharge_normal.png

  .png
• $_48_/Skin/Default/recharge_over.png

  .png
• $_48_/Skin/Default/record_down.png

  .png
• $_48_/Skin/Default/record_normal.png

  .png
• $_48_/Skin/Default/record_over.png

  .png
• $_48_/Skin/Default/record_unable.png

  .png
• $_48_/Skin/Default/refresh_normal.png

  .png
• $_48_/Skin/Default/refresh_over.png

  .png
• $_48_/Skin/Default/remind_down.png

  .png
• $_48_/Skin/Default/remind_normal.png

  .png
• $_48_/Skin/Default/remind_over.png

  .png
• $_48_/Skin/Default/replay_down.png

  .png
• $_48_/Skin/Default/replay_normal.png

  .png
• $_48_/Skin/Default/replay_over.png

  .png
• $_48_/Skin/Default/replay_unable.png

  .png
• $_48_/Skin/Default/right.bmp
• $_48_/Skin/Default/search_down.png

  .png
• $_48_/Skin/Default/search_normal.png

  .png
• $_48_/Skin/Default/search_over.png

  .png
• $_48_/Skin/Default/service_down.png

  .png
• $_48_/Skin/Default/service_normal.png

  .png
• $_48_/Skin/Default/service_over.png

  .png
• $_48_/Skin/Default/shadow_frame.png

  .png
• $_48_/Skin/Default/shadow_frame_title.png

  .png
• $_48_/Skin/Default/shop_down.png

  .png
• $_48_/Skin/Default/shop_normal.png

  .png
• $_48_/Skin/Default/shop_over.png

  .png
• $_48_/Skin/Default/shortcut_down.png

  .png
• $_48_/Skin/Default/shortcut_normal.png

  .png
• $_48_/Skin/Default/shortcut_over.png

  .png
• $_48_/Skin/Default/shutdown_down.png

  .png
• $_48_/Skin/Default/shutdown_down_b.png

  .png
• $_48_/Skin/Default/shutdown_normal.png

  .png
• $_48_/Skin/Default/shutdown_normal_b.png

  .png
• $_48_/Skin/Default/shutdown_over.png

  .png
• $_48_/Skin/Default/shutdown_over_b.png

  .png
• $_48_/Skin/Default/signin_down.png

  .png
• $_48_/Skin/Default/signin_normal.png

  .png
• $_48_/Skin/Default/signin_over.png

  .png
• $_48_/Skin/Default/skin_over_frame.png

  .png
• $_48_/Skin/Default/skin_selected.png

  .png
• $_48_/Skin/Default/standalone_down.png

  .png
• $_48_/Skin/Default/standalone_normal.png

  .png
• $_48_/Skin/Default/standalone_over.png

  .png
• $_48_/Skin/Default/stop_down.png

  .png
• $_48_/Skin/Default/stop_normal.png

  .png
• $_48_/Skin/Default/stop_over.png

  .png
• $_48_/Skin/Default/stop_record_down.png

  .png
• $_48_/Skin/Default/stop_record_normal.png

  .png
• $_48_/Skin/Default/stop_record_over.png

  .png
• $_48_/Skin/Default/stop_replay_down.png

  .png
• $_48_/Skin/Default/stop_replay_normal.png

  .png
• $_48_/Skin/Default/stop_replay_over.png

  .png
• $_48_/Skin/Default/stop_unable.png

  .png
• $_48_/Skin/Default/tab_head_close_normal.png

  .png
• $_48_/Skin/Default/tab_head_close_over.png

  .png
• $_48_/Skin/Default/tab_head_normal.png

  .png
• $_48_/Skin/Default/tab_head_over.png

  .png
• $_48_/Skin/Default/tab_head_sel_normal.png

  .png
• $_48_/Skin/Default/taccelerate_down.png

  .png
• $_48_/Skin/Default/taccelerate_normal.png

  .png
• $_48_/Skin/Default/taccelerate_over.png

  .png
• $_48_/Skin/Default/tcatechisml_down.png

  .png
• $_48_/Skin/Default/tcatechisml_normal.png

  .png
• $_48_/Skin/Default/tcatechisml_over.png

  .png
• $_48_/Skin/Default/tclock_down.png

  .png
• $_48_/Skin/Default/tclock_normal.png

  .png
• $_48_/Skin/Default/tclock_over.png

  .png
• $_48_/Skin/Default/tips_reddot.png

  .png
• $_48_/Skin/Default/tips_reddot2.png

  .png
• $_48_/Skin/Default/tkeyelves_down.png

  .png
• $_48_/Skin/Default/tkeyelves_normal.png

  .png
• $_48_/Skin/Default/tkeyelves_over.png

  .png
• $_48_/Skin/Default/tmultaccount_down.png

  .png
• $_48_/Skin/Default/tmultaccount_normal.png

  .png
• $_48_/Skin/Default/tmultaccount_over.png

  .png
• $_48_/Skin/Default/tool_button_down.png

  .png
• $_48_/Skin/Default/tool_button_normal.png

  .png
• $_48_/Skin/Default/tool_button_over.png

  .png
• $_48_/Skin/Default/tool_menu_normal.png

  .png
• $_48_/Skin/Default/tool_menu_over.png

  .png
• $_48_/Skin/Default/toolmanage_down.png

  .png
• $_48_/Skin/Default/toolmanage_normal.png

  .png
• $_48_/Skin/Default/toolmanage_over.png

  .png
• $_48_/Skin/Default/tshutdown_down.png

  .png
• $_48_/Skin/Default/tshutdown_normal.png

  .png
• $_48_/Skin/Default/tshutdown_over.png

  .png
• $_48_/Skin/Default/tvoice_down.png

  .png
• $_48_/Skin/Default/tvoice_normal.png

  .png
• $_48_/Skin/Default/tvoice_over.png

  .png
• $_48_/Skin/Default/voice_down.png

  .png
• $_48_/Skin/Default/voice_mute_down.png

  .png
• $_48_/Skin/Default/voice_mute_normal.png

  .png
• $_48_/Skin/Default/voice_mute_over.png

  .png
• $_48_/Skin/Default/voice_normal.png

  .png
• $_48_/Skin/Default/voice_over.png

  .png
• $_48_/Skin/Default/web_button_down.png

  .png
• $_48_/Skin/Default/web_button_normal.png

  .png
• $_48_/Skin/Default/web_button_over.png

  .png
• $_48_/Skin/Waiting.jpg

  .jpg
• $_48_/Skin/.jpg

  .jpg
• $_48_/Skin//game_bottom.png

  .png
• $_48_/Skin//game_top.png

  .png
• $_48_/Skin//home_down.png

  .png
• $_48_/Skin//home_normal.png

  .png
• $_48_/Skin//home_over.png

  .png
• $_48_/Skin//search_down.png

  .png
• $_48_/Skin//search_normal.png

  .png
• $_48_/Skin//search_over.png

  .png
• $_48_/Skin//shop_down.png

  .png
• $_48_/Skin//shop_normal.png

  .png
• $_48_/Skin//shop_over.png

  .png
• $_48_/Skin//tab_head_close_normal.png

  .png
• $_48_/Skin//tab_head_sel_normal.png

  .png
• $_48_/Skin//web_button_down.png

  .png
• $_48_/Skin//web_button_normal.png

  .png
• $_48_/Skin//web_button_over.png

  .png
• $_48_/Skin/Ҷ.jpg

  .jpg
• $_48_/Skin/Ҷ/game_bottom.png

  .png
• $_48_/Skin/Ҷ/game_top.png

  .png
• $_48_/Skin/Ҷ/home_down.png

  .png
• $_48_/Skin/Ҷ/home_normal.png

  .png
• $_48_/Skin/Ҷ/home_over.png

  .png
• $_48_/Skin/Ҷ/search_down.png

  .png
• $_48_/Skin/Ҷ/search_normal.png

  .png
• $_48_/Skin/Ҷ/search_over.png

  .png
• $_48_/Skin/Ҷ/shop_down.png

  .png
• $_48_/Skin/Ҷ/shop_normal.png

  .png
• $_48_/Skin/Ҷ/shop_over.png

  .png
• $_48_/Skin/Ҷ/tab_head_close_normal.png

  .png
• $_48_/Skin/Ҷ/tab_head_sel_normal.png

  .png
• $_48_/Skin/Ҷ/web_button_down.png

  .png
• $_48_/Skin/Ҷ/web_button_normal.png

  .png
• $_48_/Skin/Ҷ/web_button_over.png

  .png
• $_48_/Skin/.jpg

  .jpg
• $_48_/Skin//game_bottom.png

  .png
• $_48_/Skin//game_top.png

  .png
• $_48_/Skin//home_down.png

  .png
• $_48_/Skin//home_normal.png

  .png
• $_48_/Skin//home_over.png

  .png
• $_48_/Skin//search_down.png

  .png
• $_48_/Skin//search_normal.png

  .png
• $_48_/Skin//search_over.png

  .png
• $_48_/Skin//shop_down.png

  .png
• $_48_/Skin//shop_normal.png

  .png
• $_48_/Skin//shop_over.png

  .png
• $_48_/Skin//tab_head_close_normal.png

  .png
• $_48_/Skin//tab_head_sel_normal.png

  .png
• $_48_/Skin//web_button_down.png

  .png
• $_48_/Skin//web_button_normal.png

  .png
• $_48_/Skin//web_button_over.png

  .png
• $_48_/Skin/ִ.jpg

  .jpg
• $_48_/Skin/ִ/game_bottom.png

  .png
• $_48_/Skin/ִ/game_top.png

  .png
• $_48_/Skin/ִ/home_down.png

  .png
• $_48_/Skin/ִ/home_normal.png

  .png
• $_48_/Skin/ִ/home_over.png

  .png
• $_48_/Skin/ִ/search_down.png

  .png
• $_48_/Skin/ִ/search_normal.png

  .png
• $_48_/Skin/ִ/search_over.png

  .png
• $_48_/Skin/ִ/shop_down.png

  .png
• $_48_/Skin/ִ/shop_normal.png

  .png
• $_48_/Skin/ִ/shop_over.png

  .png
• $_48_/Skin/ִ/tab_head_close_normal.png

  .png
• $_48_/Skin/ִ/tab_head_sel_normal.png

  .png
• $_48_/Skin/ִ/web_button_down.png

  .png
• $_48_/Skin/ִ/web_button_normal.png

  .png
• $_48_/Skin/ִ/web_button_over.png

  .png
• $_48_/Skin/ǿ.jpg

  .jpg
• $_48_/Skin/ǿ/game_bottom.png

  .png
• $_48_/Skin/ǿ/game_top.png

  .png
• $_48_/Skin/ǿ/home_down.png

  .png
• $_48_/Skin/ǿ/home_normal.png

  .png
• $_48_/Skin/ǿ/home_over.png

  .png
• $_48_/Skin/ǿ/search_down.png

  .png
• $_48_/Skin/ǿ/search_normal.png

  .png
• $_48_/Skin/ǿ/search_over.png

  .png
• $_48_/Skin/ǿ/shop_down.png

  .png
• $_48_/Skin/ǿ/shop_normal.png

  .png
• $_48_/Skin/ǿ/shop_over.png

  .png
• $_48_/Skin/ǿ/tab_head_sel_normal.png

  .png
• $_48_/Skin/ǿ/web_button_down.png

  .png
• $_48_/Skin/ǿ/web_button_normal.png

  .png
• $_48_/Skin/ǿ/web_button_over.png

  .png
• $_48_/config.ini
• MouseHook.dll

  .dll windows:5 windows x86 arch:x86

  2ec69b2244de641991caee6a5bdb9daa

  
  

  Code Sign

  e1:e2:9f:76:de:9c:ab:e7:23:06:c7:eb:78:24:04:be:0b:c3:f9:d9

  Signer

  Actual PE Digest

  e1:e2:9f:76:de:9c:ab:e7:23:06:c7:eb:78:24:04:be:0b:c3:f9:d9

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  E:\37work\pc_code\gamebox\jisubox_1.0\04代码\Bin\MouseHook.pdb

  Imports

  kernel32

  Sleep

  GetSystemTimeAsFileTime

  GetCurrentProcessId

  GetCurrentThreadId

  GetTickCount

  QueryPerformanceCounter

  IsDebuggerPresent

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  GetCurrentProcess

  InterlockedCompareExchange

  TerminateProcess

  InterlockedExchange

  user32

  GetSystemMetrics

  SendInput

  UnhookWindowsHookEx

  SetWindowsHookExA

  CallNextHookEx

  GetCursorPos

  keybd_event

  mouse_event

  msvcp90

  ?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEHPB_WH@Z

  ?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ

  ?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEXXZ

  ?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEXXZ

  ?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z

  ?close@?$basic_fstream@_WU?$char_traits@_W@std@@@std@@QAEXXZ

  ?open@?$basic_fstream@_WU?$char_traits@_W@std@@@std@@QAEXPB_WHH@Z

  ??0?$basic_fstream@_WU?$char_traits@_W@std@@@std@@QAE@XZ

  ?close@?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@QAEXXZ

  ?open@?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@QAEXPB_WHH@Z

  ??0?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@QAE@XZ

  ?getline@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@PA_WH@Z

  ?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ

  ?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z

  ??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z

  ??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ

  ??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z

  ??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ

  ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z

  ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z

  ??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z

  ??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z

  ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z

  ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z

  ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

  ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z

  ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z

  ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

  ??_D?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@QAEXXZ

  ??_D?$basic_fstream@_WU?$char_traits@_W@std@@@std@@QAEXXZ

  ?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z

  ?uncaught_exception@std@@YA_NXZ

  msvcr90

  ??0exception@std@@QAE@XZ

  ??0exception@std@@QAE@ABV01@@Z

  ??2@YAPAXI@Z

  ??_V@YAXPAX@Z

  _invalid_parameter_noinfo

  setlocale

  wcstombs

  mbstowcs

  clock

  _itoa_s

  atoi

  ?what@exception@std@@UBEPBDXZ

  _unlock

  __dllonexit

  _encode_pointer

  _lock

  _onexit

  _decode_pointer

  _malloc_crt

  free

  _encoded_null

  _initterm

  _initterm_e

  _amsg_exit

  _adjust_fdiv

  __CppXcptFilter

  _crt_debugger_hook

  ?terminate@@YAXXZ

  ?_type_info_dtor_internal_method@type_info@@QAEXXZ

  _except_handler4_common

  __clean_type_info_names_internal

  ??1exception@std@@UAE@XZ

  ??0exception@std@@QAE@ABQBD@Z

  ??3@YAXPAX@Z

  _CxxThrowException

  __CxxFrameHandler3

  memset

  Exports

  Exports

  Consecutive

  KmSimulate

  StartHook

  StopHook

  Sections

  .text

  Size: 14KB - Virtual size: 13KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 7KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 688B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• NPSWF32.dll

  .dll regsvr32 windows:5 windows x86 arch:x86

  4546e0f89746257b262cdb08be4686af

  
  

  Code Sign

  7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

  Certificate

  Issuer

  CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

  Not Before

  21-12-2012 00:00

  Not After

  30-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

  Certificate

  Issuer

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Not Before

  18-10-2012 00:00

  Not After

  29-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  6c:59:ef:a9:e1:00:e1:0e:e3:06:ba:8f:e0:29:25:59

  Certificate

  Issuer

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  07-06-2012 00:00

  Not After

  06-06-2022 23:59

  Subject

  CN=Symantec Class 3 Extended Validation Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  1f:54:6c:a4:3c:12:f0:19:80:1d:a6:77:27:34:eb:1e

  Certificate

  Issuer

  CN=Symantec Class 3 Extended Validation Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Not Before

  14-05-2015 00:00

  Not After

  07-05-2017 23:59

  Subject

  SERIALNUMBER=2748129,CN=Adobe Systems Incorporated,OU=Flash Player,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  6c:2b:fb:ee:19:82:33:f4:d3:51:a9:12:d7:9d:79:f3:c1:23:f4:07

  Signer

  Actual PE Digest

  6c:2b:fb:ee:19:82:33:f4:d3:51:a9:12:d7:9d:79:f3:c1:23:f4:07

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  NPSWF32.pdb

  Imports

  version

  VerQueryValueW

  GetFileVersionInfoSizeA

  GetFileVersionInfoA

  GetFileVersionInfoSizeW

  GetFileVersionInfoW

  VerQueryValueA

  winmm

  mixerClose

  waveInMessage

  waveOutMessage

  waveOutGetDevCapsA

  waveInGetDevCapsA

  mixerGetID

  mixerGetLineControlsA

  mixerGetLineInfoA

  mixerGetDevCapsA

  mixerOpen

  waveOutGetDevCapsW

  waveInGetDevCapsW

  waveOutGetNumDevs

  waveInGetNumDevs

  waveInStart

  mixerGetControlDetailsA

  waveInStop

  waveInClose

  waveInUnprepareHeader

  waveInReset

  waveInPrepareHeader

  waveInOpen

  timeSetEvent

  timeKillEvent

  timeEndPeriod

  timeBeginPeriod

  timeGetDevCaps

  waveOutWrite

  waveOutPrepareHeader

  waveOutUnprepareHeader

  waveOutReset

  waveOutClose

  waveOutOpen

  waveOutGetPosition

  timeGetTime

  waveOutRestart

  waveOutPause

  waveInGetPosition

  waveInAddBuffer

  mixerSetControlDetails

  wininet

  HttpSendRequestA

  InternetReadFile

  InternetCloseHandle

  InternetSetOptionA

  HttpOpenRequestA

  InternetConnectA

  InternetOpenA

  HttpQueryInfoA

  crypt32

  CertEnumCertificatesInStore

  CertAddCertificateContextToStore

  CertCompareCertificateName

  CryptFindOIDInfo

  CertRDNValueToStrW

  CertFindRDNAttr

  CryptDecodeObjectEx

  CertNameToStrW

  CertVerifyTimeValidity

  CertVerifyRevocation

  CertOpenStore

  CertAddStoreToCollection

  CryptVerifyMessageSignature

  CryptGetMessageCertificates

  CertCreateCertificateContext

  CertVerifySubjectCertificateContext

  CertFindCertificateInStore

  CertFreeCertificateContext

  CertCloseStore

  CertCompareCertificate

  rpcrt4

  RpcStringFreeA

  UuidToStringA

  oleaut32

  VariantClear

  UnRegisterTypeLi

  RegisterTypeLi

  LoadTypeLi

  LoadRegTypeLi

  SysAllocString

  SysStringLen

  SysFreeString

  VariantInit

  urlmon

  CopyStgMedium

  dsound

  ord8

  ord1

  dinput8

  DirectInput8Create

  kernel32

  GetSystemInfo

  GetUserDefaultUILanguage

  MoveFileExW

  VirtualQuery

  GetUserDefaultLangID

  GetVersionExA

  SetFilePointer

  VerifyVersionInfoW

  VerSetConditionMask

  CreateThread

  ReadFile

  GetFileSize

  FindResourceExA

  FindResourceExW

  SetUnhandledExceptionFilter

  GetTempPathW

  GetTimeZoneInformation

  ReleaseSemaphore

  CreateSemaphoreW

  DeviceIoControl

  GetTempFileNameW

  GetSystemDirectoryW

  GetSystemWow64DirectoryW

  ExpandEnvironmentStringsA

  GetLongPathNameW

  GetTempPathA

  GetFileAttributesA

  CreateMutexA

  SetFilePointerEx

  GetFileAttributesExW

  GetFileInformationByHandle

  GetVolumeInformationW

  GetCurrentDirectoryW

  SetCurrentDirectoryW

  GetFullPathNameW

  OutputDebugStringA

  TlsSetValue

  ReleaseMutex

  CreateFileMappingA

  GetExitCodeThread

  DuplicateHandle

  TerminateThread

  CreateWaitableTimerW

  SetThreadPriority

  GetSystemDirectoryA

  CompareFileTime

  LocalFree

  QueryPerformanceCounter

  QueryPerformanceFrequency

  QueueUserAPC

  OpenThread

  SleepEx

  SwitchToThread

  GetConsoleMode

  GetConsoleCP

  HeapReAlloc

  GetCommandLineA

  RtlUnwind

  UnhandledExceptionFilter

  IsProcessorFeaturePresent

  GetProcessAffinityMask

  HeapSize

  HeapFree

  GetProcessHeap

  HeapAlloc

  EnumSystemLocalesW

  IsValidLocale

  GetUserDefaultLCID

  GetTimeFormatW

  GetDateFormatW

  CompareStringW

  GetCurrencyFormatW

  GetNumberFormatW

  VirtualProtect

  CreateSemaphoreA

  SetSystemTime

  DebugBreak

  VirtualFree

  VirtualAlloc

  GetVersion

  GlobalAlloc

  SetWaitableTimer

  CreateWaitableTimerA

  CreateEventA

  FlushFileBuffers

  SetEndOfFile

  CreateIoCompletionPort

  GetQueuedCompletionStatus

  PostQueuedCompletionStatus

  CopyFileW

  GetNativeSystemInfo

  RegisterWaitForSingleObject

  UnregisterWaitEx

  GlobalMemoryStatusEx

  IsDebuggerPresent

  FileTimeToSystemTime

  TlsAlloc

  TlsFree

  GetSystemTimeAsFileTime

  GetStdHandle

  ResumeThread

  GetModuleHandleExA

  OpenProcess

  CreateToolhelp32Snapshot

  Thread32First

  GetThreadTimes

  Thread32Next

  InitializeCriticalSectionAndSpinCount

  FormatMessageA

  CreateProcessW

  CreateFileMappingW

  CreateMutexW

  GetNamedPipeInfo

  CreateNamedPipeW

  CancelIo

  ConnectNamedPipe

  InterlockedExchangeAdd

  ExitProcess

  TerminateProcess

  SetConsoleCtrlHandler

  GetOEMCP

  IsValidCodePage

  SetHandleCount

  GetFileType

  GetStartupInfoA

  HeapCreate

  HeapDestroy

  FreeEnvironmentStringsA

  GetEnvironmentStrings

  FreeEnvironmentStringsW

  GetEnvironmentStringsW

  WriteConsoleA

  GetConsoleOutputCP

  CancelWaitableTimer

  GlobalSize

  WriteConsoleW

  SetStdHandle

  GetLocaleInfoA

  GetStringTypeA

  GetStringTypeW

  EnumSystemLocalesA

  CompareStringA

  SetEnvironmentVariableA

  LocalAlloc

  lstrcpynW

  GlobalMemoryStatus

  FlushConsoleInputBuffer

  lstrlenA

  ReadConsoleInputA

  SetConsoleMode

  TlsGetValue

  InitializeCriticalSection

  GlobalLock

  GlobalUnlock

  UnmapViewOfFile

  MapViewOfFile

  GetProcessTimes

  GlobalFree

  GetEnvironmentVariableA

  CreateDirectoryA

  GetCurrentDirectoryA

  GetTempFileNameA

  CreateFileA

  WriteFile

  DeleteFileA

  GetCurrentProcessId

  GetModuleHandleA

  CreateProcessA

  WideCharToMultiByte

  CreateDirectoryW

  GetFileAttributesW

  CreateFileW

  GetFileSizeEx

  GetSystemTime

  SystemTimeToFileTime

  FindFirstFileW

  RemoveDirectoryW

  DeleteFileW

  FindNextFileW

  FindClose

  GetModuleFileNameA

  FindResourceA

  SizeofResource

  LoadResource

  LockResource

  OpenFile

  _lwrite

  _lclose

  FreeResource

  GetModuleFileNameW

  lstrlenW

  SetLastError

  GetCurrentProcess

  FlushInstructionCache

  RaiseException

  LCMapStringW

  GetTickCount

  GetCurrentThreadId

  GetLocaleInfoW

  TryEnterCriticalSection

  LoadLibraryW

  GetVersionExW

  LoadLibraryA

  GetProcAddress

  WaitForMultipleObjects

  GetLastError

  FreeLibrary

  WaitForSingleObject

  ResetEvent

  CloseHandle

  CreateEventW

  SetEvent

  GetModuleHandleW

  InterlockedDecrement

  InterlockedIncrement

  GetCurrentThread

  SetThreadAffinityMask

  IsDBCSLeadByte

  GetACP

  GetCPInfo

  MultiByteToWideChar

  ExitThread

  ExpandEnvironmentStringsW

  InterlockedExchange

  InterlockedCompareExchange

  Sleep

  LeaveCriticalSection

  EnterCriticalSection

  DeleteCriticalSection

  LCMapStringA

  user32

  EnumDisplayMonitors

  RegisterWindowMessageA

  PostMessageA

  SetWindowLongA

  GetWindowLongA

  DefWindowProcA

  LoadIconA

  LoadCursorA

  RegisterClassExA

  MsgWaitForMultipleObjectsEx

  UnregisterClassW

  CallMsgFilterW

  MsgWaitForMultipleObjects

  GetClassNameA

  CallNextHookEx

  GetUpdateRect

  ValidateRect

  GetClassNameW

  FindWindowExW

  RemovePropW

  SetWinEventHook

  MonitorFromRect

  UnhookWindowsHookEx

  SetActiveWindow

  SetParent

  UpdateWindow

  GetAncestor

  IsIconic

  MapWindowPoints

  GetWindowTextW

  SetWindowPlacement

  GetWindowPlacement

  IsZoomed

  GetSystemMenu

  FlashWindowEx

  GetActiveWindow

  MoveWindow

  SetCaretPos

  CreateCaret

  ShowCaret

  DestroyCaret

  EnumDisplayDevicesW

  EmptyClipboard

  GetMonitorInfoA

  wsprintfW

  GetUserObjectInformationW

  GetProcessWindowStation

  GetDesktopWindow

  MonitorFromWindow

  EnumDisplaySettingsW

  SetClipboardData

  IsClipboardFormatAvailable

  OpenClipboard

  GetClipboardData

  CloseClipboard

  RegisterClipboardFormatW

  RemoveMenu

  SetMenuItemInfoW

  GetForegroundWindow

  SetRect

  EnumDisplayDevicesA

  GetMenuItemInfoW

  InsertMenuItemW

  CreatePopupMenu

  TrackPopupMenu

  DestroyMenu

  DrawMenuBar

  GetMenuInfo

  CreateMenu

  SetMenuInfo

  MapVirtualKeyW

  CharUpperW

  CharLowerW

  PostThreadMessageW

  GetMessageW

  TranslateMessage

  OffsetRect

  CreateWindowExW

  ShowWindow

  GetWindow

  ShowWindowAsync

  GetWindowTextLengthW

  DestroyWindow

  GetDoubleClickTime

  DeleteMenu

  SetWindowsHookExW

  DispatchMessageW

  CloseWindow

  WaitForInputIdle

  MessageBoxA

  DialogBoxParamW

  SetWindowTextA

  RedrawWindow

  DialogBoxIndirectParamW

  SetWindowTextW

  SendMessageTimeoutW

  CreateIconIndirect

  GetMonitorInfoW

  SetRectEmpty

  GetCursor

  DestroyIcon

  LoadImageW

  GetPropW

  SetPropW

  PtInRect

  InflateRect

  GetClipboardFormatNameA

  RegisterClipboardFormatA

  SetWindowPos

  RegisterClassA

  CreateWindowExA

  SetCapture

  ReleaseCapture

  SetCursorPos

  GetSubMenu

  GetCapture

  SystemParametersInfoW

  ScreenToClient

  GetMessageTime

  GetCursorPos

  WindowFromPoint

  LoadIconW

  RegisterClassW

  PeekMessageW

  GetQueueStatus

  KillTimer

  SetTimer

  IsWindowVisible

  PostMessageW

  GetFocus

  GetParent

  GetWindowThreadProcessId

  AttachThreadInput

  GetDlgItem

  IsWindow

  EnableWindow

  SendMessageW

  InvalidateRect

  GetKeyState

  ReleaseDC

  LoadStringW

  MessageBoxW

  SetCursor

  EnableMenuItem

  CheckMenuItem

  FillRect

  GetDC

  BeginPaint

  GetClientRect

  EndPaint

  GetSystemMetrics

  EndDialog

  UnregisterClassA

  SetFocus

  GetWindowInfo

  CopyRect

  RegisterClassExW

  CallWindowProcW

  PostQuitMessage

  LoadCursorW

  GetClassInfoExW

  SetWindowLongW

  DefWindowProcW

  ClientToScreen

  SendInput

  ActivateKeyboardLayout

  GetKeyboardLayout

  GetWindowLongW

  GetWindowRect

  UpdateLayeredWindow

  gdi32

  EnumFontFamiliesExW

  CreateDCW

  GetFontData

  RestoreDC

  SaveDC

  SelectClipPath

  PolyBezierTo

  SetPolyFillMode

  EndPath

  BeginPath

  EndPage

  StartPage

  FillPath

  ExtCreatePen

  StrokePath

  EndDoc

  StartDocW

  CreatePalette

  GetWorldTransform

  SetGraphicsMode

  SetWorldTransform

  GetTextCharacterExtra

  DPtoLP

  EnumFontFamiliesA

  GetCurrentObject

  CreatePen

  MoveToEx

  LineTo

  SetTextCharacterExtra

  GetBkColor

  SelectClipRgn

  GetTextColor

  GetBkMode

  GetTextAlign

  SetBkMode

  SetTextAlign

  CreateRectRgn

  GetClipRgn

  IntersectClipRect

  CreateFontIndirectA

  SetTextColor

  GetTextMetricsW

  GetTextExtentPoint32W

  ExtTextOutA

  GetTextExtentPoint32A

  CreateFontIndirectW

  CreateBitmap

  SetPixel

  CreateDCA

  GetICMProfileA

  SelectPalette

  RealizePalette

  RectVisible

  LPtoDP

  StretchDIBits

  GetStockObject

  Rectangle

  GetDeviceCaps

  GetSystemPaletteEntries

  GetClipBox

  CreateSolidBrush

  EnumFontFamiliesW

  GetStretchBltMode

  CreateCompatibleBitmap

  SetStretchBltMode

  SetBkColor

  ExtTextOutW

  BitBlt

  StretchBlt

  GdiAlphaBlend

  CreateDIBSection

  GetObjectW

  SelectObject

  DeleteObject

  GdiFlush

  DeleteDC

  CreateCompatibleDC

  comdlg32

  GetSaveFileNameW

  GetOpenFileNameW

  CommDlgExtendedError

  PrintDlgW

  advapi32

  CryptDecrypt

  CryptSetKeyParam

  CryptGetHashParam

  CryptHashData

  CryptDestroyHash

  CryptAcquireContextA

  CryptCreateHash

  RegisterEventSourceA

  ReportEventA

  DeregisterEventSource

  IsValidSid

  CryptImportKey

  CryptGenKey

  CryptDestroyKey

  CryptExportKey

  CryptEncrypt

  RegOpenKeyA

  OpenProcessToken

  GetTokenInformation

  GetSidSubAuthorityCount

  GetSidSubAuthority

  RegCreateKeyExA

  CryptAcquireContextW

  CryptGenRandom

  CryptReleaseContext

  RegDeleteValueA

  RegOpenKeyExW

  RegCloseKey

  RegQueryValueExA

  RegSetValueExA

  RegOpenKeyExA

  RegCreateKeyA

  RegQueryValueExW

  shell32

  SHGetFolderPathW

  SHGetFolderPathA

  SHGetPathFromIDListW

  SHBrowseForFolderW

  SHAppBarMessage

  SHGetFolderLocation

  SHGetSettings

  ord165

  ShellExecuteW

  SHGetDiskFreeSpaceExW

  SHGetSpecialFolderPathW

  SHFileOperationW

  ole32

  OleGetClipboard

  OleInitialize

  CoUninitialize

  CoSetProxyBlanket

  CoInitializeEx

  OleIsCurrentClipboard

  OleFlushClipboard

  OleSetClipboard

  CoTaskMemFree

  CoFreeUnusedLibraries

  CoInitialize

  CoCreateInstance

  CoTaskMemAlloc

  OleUninitialize

  ReleaseStgMedium

  CreateBindCtx

  MkParseDisplayName

  PropVariantClear

  ws2_32

  WSAAsyncSelect

  closesocket

  WSACleanup

  WSAStartup

  WSASocketA

  ntohl

  select

  gethostname

  connect

  WSAGetLastError

  WSAEnumNetworkEvents

  WSAEventSelect

  WSACreateEvent

  WSAAddressToStringA

  bind

  sendto

  setsockopt

  recv

  send

  ntohs

  getsockname

  WSAIoctl

  socket

  ioctlsocket

  WSASocketW

  htons

  WSACloseEvent

  gethostbyname

  inet_ntoa

  htonl

  getservbyname

  gethostbyaddr

  getservbyport

  WSASetLastError

  recvfrom

  inet_addr

  shlwapi

  StrStrIW

  StrRStrIW

  UrlCanonicalizeW

  AssocQueryStringW

  PathRemoveFileSpecA

  mscms

  OpenColorProfileW

  CreateColorTransformW

  CloseColorProfile

  TranslateBitmapBits

  DeleteColorTransform

  iphlpapi

  GetAdaptersAddresses

  winspool.drv

  GetPrinterW

  ClosePrinter

  OpenPrinterW

  Exports

  Exports

  AdobeCPGetAPI

  BrokerMainW

  DllRegisterServer

  DllUnregisterServer

  FlashPlayer_18_0_0_232_FlashPlayer

  Flash_DisableLocalSecurity

  Flash_EnforceLocalSecurity

  IAEModule_AEModule_PutKernel

  IAEModule_IAEKernel_LoadModule

  IAEModule_IAEKernel_UnloadModule

  Java_ShockwaveFlash_CurrentFrame_stub

  Java_ShockwaveFlash_FlashVersion_stub

  Java_ShockwaveFlash_FrameLoaded_stub

  Java_ShockwaveFlash_GetVariable_stub

  Java_ShockwaveFlash_GotoFrame_stub

  Java_ShockwaveFlash_IsPlaying_stub

  Java_ShockwaveFlash_LoadMovie_stub

  Java_ShockwaveFlash_Pan_stub

  Java_ShockwaveFlash_PercentLoaded_stub

  Java_ShockwaveFlash_Play_stub

  Java_ShockwaveFlash_SetVariable_stub

  Java_ShockwaveFlash_SetZoomRect_stub

  Java_ShockwaveFlash_StopPlay_stub

  Java_ShockwaveFlash_TCallFrame_stub

  Java_ShockwaveFlash_TCallLabel_stub

  Java_ShockwaveFlash_TCurrentFrame_stub

  Java_ShockwaveFlash_TCurrentLabel_stub

  Java_ShockwaveFlash_TGetProperty_stub

  Java_ShockwaveFlash_TGotoFrame_stub

  Java_ShockwaveFlash_TGotoLabel_stub

  Java_ShockwaveFlash_TPlay_stub

  Java_ShockwaveFlash_TSetProperty_stub

  Java_ShockwaveFlash_TStopPlay_stub

  Java_ShockwaveFlash_TotalFrames_stub

  Java_ShockwaveFlash_Zoom_stub

  NP_Acrobat_GetEntryPoints

  NP_Acrobat_Initialize

  NP_GetEntryPoints

  NP_Initialize

  NP_SetBrokerClient

  NP_SetNPAPIHostProxy

  NP_Shutdown

  native_ShockwaveFlash_CurrentFrame

  native_ShockwaveFlash_FlashVersion

  native_ShockwaveFlash_FrameLoaded

  native_ShockwaveFlash_GetVariable

  native_ShockwaveFlash_GotoFrame

  native_ShockwaveFlash_IsPlaying

  native_ShockwaveFlash_LoadMovie

  native_ShockwaveFlash_Pan

  native_ShockwaveFlash_PercentLoaded

  native_ShockwaveFlash_Play

  native_ShockwaveFlash_SetVariable

  native_ShockwaveFlash_SetZoomRect

  native_ShockwaveFlash_StopPlay

  native_ShockwaveFlash_TCallFrame

  native_ShockwaveFlash_TCallLabel

  native_ShockwaveFlash_TCurrentFrame

  native_ShockwaveFlash_TCurrentLabel

  native_ShockwaveFlash_TGetProperty

  native_ShockwaveFlash_TGotoFrame

  native_ShockwaveFlash_TGotoLabel

  native_ShockwaveFlash_TPlay

  native_ShockwaveFlash_TSetProperty

  native_ShockwaveFlash_TStopPlay

  native_ShockwaveFlash_TotalFrames

  native_ShockwaveFlash_Zoom

  register_ShockwaveFlash

  unregister_ShockwaveFlash

  unuse_ShockwaveFlash

  unuse_netscape_plugin_Plugin

  use_ShockwaveFlash

  use_netscape_plugin_Plugin

  Sections

  .text

  Size: 11.7MB - Virtual size: 11.7MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rodata

  Size: 4KB - Virtual size: 4KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 3.2MB - Virtual size: 3.2MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 803KB - Virtual size: 1.8MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .tls

  Size: 512B - Virtual size: 2B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 347KB - Virtual size: 346KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 604KB - Virtual size: 603KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Service.ico
• cef.pak

  .js
• cef_100_percent.pak
• cef_200_percent.pak
• clock.wav
• d3dcompiler_43.dll

  .dll windows:6 windows x86 arch:x86

  6ba7b0e4e74a8eea96dca4fffc88b859

  
  

  Code Sign

  a0:dc:fd:f1:04:c6:f9:25:f4:de:ed:83:b3:1b:1c:9e:4a:d1:be:fb

  Signer

  Actual PE Digest

  a0:dc:fd:f1:04:c6:f9:25:f4:de:ed:83:b3:1b:1c:9e:4a:d1:be:fb

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  D3DCompiler_43.pdb

  Imports

  msvcrt

  ??1type_info@@UAE@XZ

  ?terminate@@YAXXZ

  _unlock

  __dllonexit

  _lock

  _onexit

  _amsg_exit

  _initterm

  _XcptFilter

  _CxxThrowException

  memset

  memcpy

  isxdigit

  atof

  setlocale

  _strdup

  _mbstrlen

  modf

  isalnum

  _isnan

  ceil

  _finite

  strrchr

  _clearfp

  _controlfp

  _strnicmp

  _fpclass

  _purecall

  strncmp

  isspace

  strstr

  getenv

  _stricmp

  memmove

  qsort

  isalpha

  toupper

  atoi

  isdigit

  tolower

  free

  malloc

  ??2@YAPAXI@Z

  ??3@YAXPAX@Z

  strchr

  _vsnprintf

  _errno

  __CxxFrameHandler

  floor

  _CIfmod

  _CItanh

  _CItan

  _CIsinh

  _CIsin

  _CIlog

  _CIpow

  _CIexp

  _CIsqrt

  _CIcosh

  _CIcos

  _CIatan2

  _CIatan

  _CIasin

  _CIacos

  gdi32

  DeleteObject

  kernel32

  UnhandledExceptionFilter

  GetCurrentProcess

  TerminateProcess

  GetSystemTimeAsFileTime

  GetCurrentProcessId

  GetCurrentThreadId

  GetTickCount

  QueryPerformanceCounter

  RtlUnwind

  UnmapViewOfFile

  CloseHandle

  DeleteCriticalSection

  InitializeCriticalSection

  VirtualFree

  GetLastError

  SetUnhandledExceptionFilter

  WideCharToMultiByte

  GetFullPathNameA

  HeapCreate

  OutputDebugStringA

  LoadLibraryA

  GetModuleHandleA

  lstrcmpiA

  TlsFree

  TlsGetValue

  HeapDestroy

  TlsSetValue

  InterlockedExchange

  TlsAlloc

  Sleep

  InterlockedCompareExchange

  FreeLibrary

  GetSystemInfo

  GetProcAddress

  VirtualAlloc

  GetProcessHeap

  HeapFree

  HeapAlloc

  DisableThreadLibraryCalls

  MultiByteToWideChar

  GetVersion

  Exports

  Exports

  D3DAssemble

  D3DCompile

  D3DCompressShaders

  D3DCreateBlob

  D3DDecompressShaders

  D3DDisassemble

  D3DDisassemble10Effect

  D3DGetBlobPart

  D3DGetDebugInfo

  D3DGetInputAndOutputSignatureBlob

  D3DGetInputSignatureBlob

  D3DGetOutputSignatureBlob

  D3DPreprocess

  D3DReflect

  D3DReturnFailure1

  D3DStripShader

  DebugSetMute

  Sections

  .text

  Size: 1.9MB - Virtual size: 1.9MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 16KB - Virtual size: 31KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 968B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 56KB - Virtual size: 55KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• d3dcompiler_47.dll

  .dll windows:6 windows x86 arch:x86

  f63cad154afed6da772d0ab361f448f6

  
  

  Code Sign

  69:26:3d:60:06:7a:72:dd:e2:38:44:52:38:d1:d7:f8:7e:61:16:0d

  Signer

  Actual PE Digest

  69:26:3d:60:06:7a:72:dd:e2:38:44:52:38:d1:d7:f8:7e:61:16:0d

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  D3DCompiler_47.pdb

  Imports

  msvcrt

  _onexit

  __dllonexit

  _unlock

  _lock

  ?terminate@@YAXXZ

  ??1type_info@@UAE@XZ

  _initterm

  _amsg_exit

  _XcptFilter

  _strtoui64

  sscanf

  _isnan

  _vsnprintf

  strtoul

  isxdigit

  atof

  setlocale

  _strdup

  _mbstrlen

  _vsnwprintf

  strnlen

  ceil

  modf

  strrchr

  strncpy_s

  memcpy_s

  isalnum

  _finite

  _clearfp

  _controlfp

  strcpy_s

  malloc

  _strnicmp

  _fpclass

  strncmp

  isspace

  strstr

  strchr

  free

  sprintf_s

  _stricmp

  _purecall

  memmove

  qsort

  isalpha

  toupper

  atoi

  _except_handler4_common

  tolower

  ??2@YAPAXI@Z

  getenv

  ??3@YAXPAX@Z

  wcsncmp

  wcsncpy_s

  _wcsicmp

  memcpy

  memset

  fclose

  strcat_s

  bsearch

  _CxxThrowException

  _snwprintf_s

  wcschr

  iswdigit

  __unDName

  fread

  fseek

  _wfsopen

  vsprintf_s

  wcstol

  _wcsnicmp

  _wsplitpath_s

  towlower

  wcscpy_s

  ??_U@YAPAXI@Z

  ??_V@YAXPAX@Z

  swprintf_s

  wcsncat_s

  wcsrchr

  _wmakepath_s

  time

  _wfullpath

  _wcsdup

  _wgetenv

  _chsize

  _close

  _read

  _write

  _lseeki64

  _get_osfhandle

  _open_osfhandle

  wcscat_s

  ftell

  _mbscmp

  _memicmp

  isdigit

  _wsopen

  _CIacos

  _CIasin

  _CIatan

  _CIatan2

  _CIcos

  _CIcosh

  _CIexp

  _CIfmod

  _CIlog

  _CIpow

  _CIsin

  _CIsinh

  _CIsqrt

  _CItan

  _CItanh

  __CxxFrameHandler3

  _ftol2

  _ftol2_sse

  floor

  advapi32

  CryptDestroyHash

  CryptHashData

  CryptCreateHash

  CryptGetHashParam

  CryptReleaseContext

  CryptAcquireContextW

  RegOpenKeyExW

  RegQueryValueExA

  RegEnumKeyExA

  RegOpenKeyExA

  RegCloseKey

  RegQueryValueExW

  kernel32

  SetLastError

  LocalFree

  LocalAlloc

  GetVersion

  InterlockedDecrement

  InterlockedIncrement

  GetTickCount

  GetSystemTimeAsFileTime

  GetCurrentThreadId

  GetCurrentProcessId

  TerminateProcess

  GetCurrentProcess

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  LCMapStringW

  CreateFileMappingW

  UnmapViewOfFile

  MapViewOfFile

  GetFileSize

  GetSystemInfo

  VirtualAlloc

  VirtualFree

  GetProcAddress

  LoadLibraryExW

  GetEnvironmentVariableA

  GetFullPathNameA

  GetFullPathNameW

  TlsFree

  TlsGetValue

  TlsSetValue

  TlsAlloc

  Sleep

  HeapFree

  GetFileAttributesW

  SetFileAttributesW

  CopyFileExW

  DeleteFileW

  GetFileType

  DeviceIoControl

  ExpandEnvironmentStringsW

  InitializeCriticalSectionAndSpinCount

  SetFilePointer

  FlushViewOfFile

  MapViewOfFileEx

  GetModuleFileNameA

  CreateFileA

  DisableThreadLibraryCalls

  CreateFileW

  GetLastError

  GetFileSizeEx

  ReadFile

  CloseHandle

  WriteFile

  WideCharToMultiByte

  FreeLibrary

  lstrcmpiA

  MultiByteToWideChar

  OutputDebugStringA

  QueryPerformanceCounter

  HeapCreate

  HeapDestroy

  InitializeCriticalSection

  DeleteCriticalSection

  EnterCriticalSection

  LeaveCriticalSection

  HeapAlloc

  GetProcessHeap

  rpcrt4

  UuidCreate

  Exports

  Exports

  D3DAssemble

  D3DCompile

  D3DCompile2

  D3DCompileFromFile

  D3DCompressShaders

  D3DCreateBlob

  D3DCreateFunctionLinkingGraph

  D3DCreateLinker

  D3DDecompressShaders

  D3DDisassemble

  D3DDisassemble10Effect

  D3DDisassemble11Trace

  D3DDisassembleRegion

  D3DGetBlobPart

  D3DGetDebugInfo

  D3DGetInputAndOutputSignatureBlob

  D3DGetInputSignatureBlob

  D3DGetOutputSignatureBlob

  D3DGetTraceInstructionOffsets

  D3DLoadModule

  D3DPreprocess

  D3DReadFileToBlob

  D3DReflect

  D3DReflectLibrary

  D3DReturnFailure1

  D3DSetBlobPart

  D3DStripShader

  D3DWriteBlobToFile

  DebugSetMute

  Sections

  .text

  Size: 3.1MB - Virtual size: 3.1MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 23KB - Virtual size: 55KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 4KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 170KB - Virtual size: 170KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• devtools_resources.pak

  .js
• ffmpegsumo.dll

  .dll windows:5 windows x86 arch:x86

  f2604f91749cde45e994dd7bffbea7f6

  
  

  Code Sign

  f8:a7:7f:2a:53:ef:85:f4:fd:b5:50:f6:a4:c6:cc:df:2b:27:57:e1

  Signer

  Actual PE Digest

  f8:a7:7f:2a:53:ef:85:f4:fd:b5:50:f6:a4:c6:cc:df:2b:27:57:e1

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  E:\Win-2272\download\chromium\src\out\Release\ffmpegsumo.dll.pdb

  Imports

  kernel32

  DeleteCriticalSection

  SetEvent

  ResetEvent

  ReleaseSemaphore

  WaitForSingleObject

  CreateEventW

  GetModuleHandleW

  GetProcAddress

  CreateSemaphoreW

  GetCurrentProcess

  GetProcessAffinityMask

  LeaveCriticalSection

  GetStdHandle

  GetConsoleScreenBufferInfo

  SetConsoleTextAttribute

  Sleep

  GetSystemTimeAsFileTime

  DisableThreadLibraryCalls

  HeapAlloc

  HeapReAlloc

  HeapFree

  GetProcessHeap

  HeapSetInformation

  EnterCriticalSection

  InitializeCriticalSection

  MultiByteToWideChar

  CloseHandle

  IsProcessorFeaturePresent

  EncodePointer

  DecodePointer

  GetLastError

  CreateThread

  GetCurrentThreadId

  ExitThread

  LoadLibraryExW

  IsDebuggerPresent

  WideCharToMultiByte

  CreateFileW

  GetFileType

  ExitProcess

  GetModuleHandleExW

  GetCommandLineA

  IsValidCodePage

  GetACP

  GetOEMCP

  GetCPInfo

  SetLastError

  RaiseException

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  InitializeCriticalSectionAndSpinCount

  TerminateProcess

  TlsAlloc

  TlsGetValue

  TlsSetValue

  TlsFree

  GetStartupInfoW

  SetStdHandle

  WriteFile

  GetConsoleCP

  GetConsoleMode

  ReadFile

  ReadConsoleW

  SetFilePointerEx

  HeapSize

  HeapQueryInformation

  GetTimeZoneInformation

  GetModuleFileNameW

  GetModuleFileNameA

  QueryPerformanceCounter

  GetCurrentProcessId

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  GetStringTypeW

  GetDateFormatW

  GetTimeFormatW

  CompareStringW

  LCMapStringW

  RtlUnwind

  WriteConsoleW

  SetEnvironmentVariableA

  FlushFileBuffers

  OutputDebugStringW

  advapi32

  CryptReleaseContext

  CryptAcquireContextW

  CryptGenRandom

  Exports

  Exports

  av_bitstream_filter_close

  av_bitstream_filter_filter

  av_bitstream_filter_init

  av_buffer_create

  av_buffer_get_opaque

  av_dict_get

  av_dict_set

  av_dup_packet

  av_frame_alloc

  av_frame_free

  av_frame_unref

  av_free

  av_free_packet

  av_get_bytes_per_sample

  av_image_check_size

  av_image_fill_linesizes

  av_index_search_timestamp

  av_init_packet

  av_lockmgr_register

  av_log_default_callback

  av_log_format_line

  av_log_set_callback

  av_log_set_level

  av_malloc

  av_new_packet

  av_opt_get_int

  av_packet_copy_props

  av_packet_get_side_data

  av_packet_split_side_data

  av_rdft_calc

  av_rdft_end

  av_rdft_init

  av_read_frame

  av_register_all

  av_register_bitstream_filter

  av_rescale_q

  av_samples_get_buffer_size

  av_seek_frame

  avcodec_align_dimensions

  avcodec_alloc_context3

  avcodec_close

  avcodec_decode_audio4

  avcodec_decode_video2

  avcodec_fill_audio_frame

  avcodec_find_decoder

  avcodec_flush_buffers

  avcodec_free_context

  avcodec_free_frame

  avcodec_get_frame_defaults

  avcodec_get_name

  avcodec_open2

  avformat_alloc_context

  avformat_close_input

  avformat_find_stream_info

  avformat_free_context

  avformat_open_input

  avio_alloc_context

  avio_close

  avpriv_mpa_bitrate_tab

  avpriv_mpa_freq_tab

  avpriv_mpeg4audio_sample_rates

  avpriv_pix_fmt_bps_avi

  avpriv_pix_fmt_bps_mov

  Sections

  .text

  Size: 636KB - Virtual size: 635KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 264KB - Virtual size: 264KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 7KB - Virtual size: 710KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rodata

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  _RDATA

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 24KB - Virtual size: 24KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• icudtl.dat
• jisubox.exe

  .exe windows:5 windows x86 arch:x86

  1b3334a5fe53ea2bb59120153a2363be

  
  

  Code Sign

  5a:88:3c:d2:7f:2b:9d:d8:91:90:50:7d:97:73:e1:5d:d9:06:1e:90

  Signer

  Actual PE Digest

  5a:88:3c:d2:7f:2b:9d:d8:91:90:50:7d:97:73:e1:5d:d9:06:1e:90

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  PDB Paths

  e:\37work\pc_code\gamebox\jisubox_1.0\04代码\bin\lander.pdb

  Imports

  libcef

  cef_string_multimap_free

  cef_string_multimap_alloc

  cef_request_create

  cef_urlrequest_create

  cef_process_message_create

  cef_v8context_get_current_context

  cef_string_list_append

  cef_string_map_append

  cef_string_multimap_append

  cef_string_map_value

  cef_string_map_key

  cef_string_map_size

  cef_string_multimap_value

  cef_string_multimap_key

  cef_string_multimap_size

  cef_string_list_value

  cef_string_list_size

  cef_v8value_create_bool

  cef_v8value_create_int

  cef_command_line_get_global

  cef_v8value_create_string

  cef_v8value_create_function

  cef_string_list_copy

  cef_refresh_web_plugins

  cef_currently_on

  cef_shutdown

  cef_string_userfree_utf16_free

  cef_command_line_create

  cef_string_map_alloc

  cef_string_map_free

  cef_cookie_manager_get_global_manager

  cef_log

  cef_browser_host_create_browser

  cef_register_web_plugin_crash

  cef_add_web_plugin_path

  cef_register_extension

  cef_base64encode

  cef_string_list_alloc

  cef_string_list_free

  cef_post_task

  cef_initialize

  cef_api_hash

  cef_execute_process

  cef_string_utf16_clear

  cef_string_utf16_cmp

  cef_time_to_timet

  cef_string_utf16_to_utf8

  cef_string_utf8_clear

  cef_string_utf8_to_utf16

  cef_string_utf16_set

  kernel32

  GetModuleHandleW

  LoadLibraryW

  GetProcAddress

  FreeLibrary

  lstrcmpiW

  MultiByteToWideChar

  LoadLibraryExW

  CreateMutexW

  ReleaseMutex

  CreateFileMappingW

  MapViewOfFile

  UnmapViewOfFile

  GetTempPathW

  GetPrivateProfileStringW

  WritePrivateProfileStringW

  GetPrivateProfileIntW

  WideCharToMultiByte

  GetVersionExW

  GetSystemInfo

  TerminateProcess

  InterlockedExchange

  CreateEventW

  SetEvent

  CreateFileW

  WriteFile

  TerminateThread

  ReadFile

  GetProcessAffinityMask

  SetProcessAffinityMask

  SetPriorityClass

  DeviceIoControl

  InitializeCriticalSectionAndSpinCount

  IsValidCodePage

  GetOEMCP

  GetACP

  FlushFileBuffers

  CreateDirectoryW

  GetConsoleMode

  GetConsoleCP

  GetStartupInfoA

  GetFileType

  SetHandleCount

  GetModuleFileNameA

  CreateProcessW

  HeapCreate

  TlsFree

  TlsSetValue

  TlsAlloc

  TlsGetValue

  GetStringTypeW

  GetCPInfo

  LCMapStringW

  LCMapStringA

  RtlUnwind

  GetStartupInfoW

  GetFullPathNameA

  GetDriveTypeA

  ExitProcess

  VirtualQuery

  VirtualProtect

  GetDateFormatA

  GetTimeFormatA

  GetFileAttributesA

  GetTimeZoneInformation

  GetSystemTimeAsFileTime

  IsDebuggerPresent

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  ExitThread

  VirtualAlloc

  VirtualFree

  IsProcessorFeaturePresent

  LoadLibraryA

  InterlockedCompareExchange

  GetProcessHeap

  HeapSize

  HeapReAlloc

  HeapFree

  HeapAlloc

  HeapDestroy

  SetFilePointer

  WaitForSingleObject

  lstrcpyA

  FindResourceExW

  FindResourceW

  LoadResource

  LockResource

  SizeofResource

  MoveFileW

  GetTickCount

  GetCommandLineW

  CreateThread

  GetCurrentProcessId

  GlobalAddAtomW

  CopyFileW

  GetLocalTime

  Sleep

  lstrcmpW

  MulDiv

  GlobalAlloc

  GlobalLock

  GlobalUnlock

  FlushInstructionCache

  GetCurrentProcess

  SetLastError

  RaiseException

  GetCurrentThreadId

  GetEnvironmentStringsW

  QueryPerformanceCounter

  GetModuleHandleA

  WriteConsoleA

  GetConsoleOutputCP

  WriteConsoleW

  SetStdHandle

  CreateFileA

  GetLocaleInfoW

  CompareStringA

  CompareStringW

  SetEnvironmentVariableA

  SetEndOfFile

  lstrlenA

  GetLastError

  GetModuleFileNameW

  IsBadWritePtr

  InterlockedDecrement

  InterlockedIncrement

  lstrlenW

  LeaveCriticalSection

  EnterCriticalSection

  DeleteCriticalSection

  InitializeCriticalSection

  GlobalMemoryStatusEx

  Process32NextW

  SetProcessWorkingSetSize

  OpenProcess

  Process32FirstW

  CreateToolhelp32Snapshot

  FindClose

  FindNextFileW

  DeleteFileW

  OutputDebugStringW

  FindFirstFileW

  ResumeThread

  CloseHandle

  GetUserDefaultLCID

  GetLocaleInfoA

  EnumSystemLocalesA

  IsValidLocale

  GetStringTypeA

  GetCurrentDirectoryA

  GetStdHandle

  FreeEnvironmentStringsW

  user32

  GetAncestor

  SetParent

  DrawTextW

  LoadImageW

  SetCursor

  PtInRect

  EqualRect

  ExitWindowsEx

  PeekMessageW

  GetMessageW

  TranslateMessage

  DispatchMessageW

  LoadStringW

  PostQuitMessage

  EnableWindow

  GetAsyncKeyState

  GetWindowThreadProcessId

  SetWindowPlacement

  GetSystemMetrics

  GetWindowPlacement

  UnregisterHotKey

  RegisterHotKey

  TrackPopupMenu

  GetCursorPos

  DestroyMenu

  RemoveMenu

  GetSubMenu

  LoadMenuW

  IsIconic

  DefWindowProcW

  SetWindowRgn

  UnregisterClassA

  SetForegroundWindow

  GetForegroundWindow

  LoadIconW

  IsWindowVisible

  UnionRect

  SetWindowPos

  SetWindowLongW

  GetWindowLongW

  ShowWindow

  UpdateWindow

  SetCapture

  ReleaseCapture

  SetFocus

  MessageBoxW

  IsChild

  GetParent

  GetKeyState

  CallWindowProcW

  RegisterClassExW

  LoadCursorW

  DestroyAcceleratorTable

  GetDesktopWindow

  ReleaseDC

  GetDC

  InvalidateRect

  InvalidateRgn

  GetClientRect

  FillRect

  MoveWindow

  ScreenToClient

  ClientToScreen

  CreateAcceleratorTableW

  DestroyWindow

  CreateWindowExW

  GetClassInfoExW

  RedrawWindow

  CharNextW

  GetSysColor

  GetClassNameW

  IsWindow

  GetDlgItem

  GetWindow

  GetFocus

  EndPaint

  BeginPaint

  SystemParametersInfoW

  OffsetRect

  SetWindowTextW

  GetWindowTextW

  GetWindowTextLengthW

  RegisterWindowMessageW

  PostMessageW

  SetLayeredWindowAttributes

  SetTimer

  KillTimer

  UpdateLayeredWindow

  CopyRect

  InflateRect

  SendMessageW

  gdi32

  SaveDC

  CreateFontW

  CreateSolidBrush

  CreateCompatibleBitmap

  GetStockObject

  GetDeviceCaps

  GetObjectW

  SelectObject

  DeleteObject

  BitBlt

  SetBkColor

  DeleteDC

  RestoreDC

  ExtTextOutW

  CreateRoundRectRgn

  CreateDIBSection

  SetDIBColorTable

  SetBkMode

  SetTextColor

  StretchBlt

  CreateCompatibleDC

  advapi32

  GetTokenInformation

  AdjustTokenPrivileges

  LookupPrivilegeValueW

  OpenProcessToken

  RegCreateKeyExW

  RegEnumKeyExW

  RegQueryInfoKeyW

  RegDeleteKeyW

  RegDeleteValueW

  RegSetValueExW

  RegCreateKeyW

  RegCloseKey

  RegQueryValueExW

  RegOpenKeyExW

  IsTextUnicode

  shell32

  SHGetSpecialFolderPathW

  SHFileOperationW

  SHGetFolderPathW

  ShellExecuteW

  Shell_NotifyIconW

  ShellExecuteExW

  ole32

  CoCreateGuid

  CoTaskMemRealloc

  CoTaskMemFree

  CoUninitialize

  CoInitialize

  OleInitialize

  CLSIDFromString

  CLSIDFromProgID

  CoGetClassObject

  CreateStreamOnHGlobal

  OleLockRunning

  StringFromGUID2

  CoTaskMemAlloc

  OleUninitialize

  CoCreateInstance

  oleaut32

  VariantInit

  VariantClear

  SafeArrayCreate

  SafeArrayPutElement

  LoadRegTypeLi

  LoadTypeLi

  DispCallFunc

  OleCreateFontIndirect

  SysStringLen

  VariantTimeToSystemTime

  SystemTimeToVariantTime

  VarUI4FromStr

  SafeArrayAccessData

  SafeArrayGetLBound

  SafeArrayGetUBound

  SafeArrayUnaccessData

  SysAllocString

  SysFreeString

  SysAllocStringLen

  shlwapi

  StrCmpW

  PathFileExistsW

  StrCpyW

  comctl32

  _TrackMouseEvent

  msimg32

  TransparentBlt

  AlphaBlend

  gdiplus

  GdiplusShutdown

  GdiplusStartup

  GdipBitmapUnlockBits

  GdipBitmapLockBits

  GdipCreateBitmapFromScan0

  GdipCreateBitmapFromFile

  GdipGetImagePalette

  GdipGetImagePaletteSize

  GdipGetImagePixelFormat

  GdipGetImageHeight

  GdipGetImageWidth

  GdipCloneImage

  GdipDrawImageI

  GdipDeleteGraphics

  GdipGetImageGraphicsContext

  GdipDisposeImage

  GdipFree

  GdipAlloc

  wininet

  FindFirstUrlCacheEntryW

  FindNextUrlCacheEntryW

  FindCloseUrlCache

  InternetCrackUrlW

  InternetOpenW

  InternetConnectW

  InternetCloseHandle

  InternetReadFile

  HttpQueryInfoW

  HttpSendRequestW

  HttpAddRequestHeadersW

  HttpOpenRequestW

  DeleteUrlCacheEntryW

  winmm

  waveOutSetVolume

  waveOutClose

  waveOutGetVolume

  waveOutOpen

  PlaySoundW

  iphlpapi

  GetAdaptersInfo

  Sections

  .text

  Size: 1.2MB - Virtual size: 1.2MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 207KB - Virtual size: 206KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 18KB - Virtual size: 54KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 291KB - Virtual size: 290KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 82KB - Virtual size: 82KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• lander.ico
• libEGL.dll

  .dll windows:5 windows x86 arch:x86

  ef5ed02110f52d4fc39a1a348d2ce8f3

  
  

  Code Sign

  f8:12:6b:45:4f:51:88:45:ae:b7:17:d3:38:6e:c4:29:88:c9:d4:15

  Signer

  Actual PE Digest

  f8:12:6b:45:4f:51:88:45:ae:b7:17:d3:38:6e:c4:29:88:c9:d4:15

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  E:\Win-2272\download\chromium\src\out\Release\libEGL.dll.pdb

  Imports

  libglesv2

  ?GetPlatformDisplayEXT@egl@@YGPAXIPAXPBH@Z

  ?PostSubBufferNV@egl@@YGIPAX0HHHH@Z

  ?QuerySurfacePointerANGLE@egl@@YGIPAX0HPAPAX@Z

  ?GetCurrentContext@egl@@YGPAXXZ

  ?WaitClient@egl@@YGIXZ

  ?ReleaseThread@egl@@YGIXZ

  ?CreatePbufferFromClientBuffer@egl@@YGPAXPAXI00PBH@Z

  ?QueryAPI@egl@@YGIXZ

  ?BindAPI@egl@@YGII@Z

  ?SwapInterval@egl@@YGIPAXH@Z

  ?SurfaceAttrib@egl@@YGIPAX0HH@Z

  ?ReleaseTexImage@egl@@YGIPAX0H@Z

  ?BindTexImage@egl@@YGIPAX0H@Z

  ?WaitNative@egl@@YGIH@Z

  ?WaitGL@egl@@YGIXZ

  ?Terminate@egl@@YGIPAX@Z

  ?SwapBuffers@egl@@YGIPAX0@Z

  ?QuerySurface@egl@@YGIPAX0HPAH@Z

  ?QueryString@egl@@YGPBDPAXH@Z

  ?QueryContext@egl@@YGIPAX0HPAH@Z

  ?MakeCurrent@egl@@YGIPAX000@Z

  ?Initialize@egl@@YGIPAXPAH1@Z

  ?GetProcAddress@egl@@YGP6AXXZPBD@Z

  ?GetError@egl@@YGHXZ

  ?GetDisplay@egl@@YGPAXPAUHDC__@@@Z

  ?GetCurrentSurface@egl@@YGPAXH@Z

  ?GetCurrentDisplay@egl@@YGPAXXZ

  ?GetConfigs@egl@@YGIPAXPAPAXHPAH@Z

  ?GetConfigAttrib@egl@@YGIPAX0HPAH@Z

  ?DestroySurface@egl@@YGIPAX0@Z

  ?DestroyContext@egl@@YGIPAX0@Z

  ?CreateWindowSurface@egl@@YGPAXPAX0PAUHWND__@@PBH@Z

  ?CreatePixmapSurface@egl@@YGPAXPAX0PAUHBITMAP__@@PBH@Z

  ?CreatePbufferSurface@egl@@YGPAXPAX0PBH@Z

  ?CreateContext@egl@@YGPAXPAX00PBH@Z

  ?CopyBuffers@egl@@YGIPAX0PAUHBITMAP__@@@Z

  ?ChooseConfig@egl@@YGIPAXPBHPAPAXHPAH@Z

  kernel32

  GetFileType

  CreateFileW

  CloseHandle

  WriteConsoleW

  SetFilePointerEx

  SetStdHandle

  GetConsoleMode

  GetConsoleCP

  FlushFileBuffers

  LCMapStringW

  HeapSize

  OutputDebugStringW

  GetStringTypeW

  HeapReAlloc

  HeapAlloc

  RtlUnwind

  LoadLibraryExW

  GetModuleFileNameW

  WriteFile

  IsProcessorFeaturePresent

  IsDebuggerPresent

  GetCPInfo

  GetOEMCP

  GetACP

  IsValidCodePage

  LeaveCriticalSection

  EnterCriticalSection

  GetModuleHandleW

  TlsFree

  TlsSetValue

  TlsGetValue

  TlsAlloc

  TerminateProcess

  GetCurrentProcess

  GetCommandLineA

  GetCurrentThreadId

  GetLastError

  SetLastError

  EncodePointer

  DecodePointer

  ExitProcess

  GetModuleHandleExW

  GetProcAddress

  MultiByteToWideChar

  WideCharToMultiByte

  GetProcessHeap

  GetStdHandle

  DeleteCriticalSection

  GetStartupInfoW

  GetModuleFileNameA

  HeapFree

  QueryPerformanceCounter

  GetCurrentProcessId

  GetSystemTimeAsFileTime

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  InitializeCriticalSectionAndSpinCount

  Sleep

  Exports

  Exports

  eglBindAPI

  eglBindTexImage

  eglChooseConfig

  eglCopyBuffers

  eglCreateContext

  eglCreatePbufferFromClientBuffer

  eglCreatePbufferSurface

  eglCreatePixmapSurface

  eglCreateWindowSurface

  eglDestroyContext

  eglDestroySurface

  eglGetConfigAttrib

  eglGetConfigs

  eglGetCurrentContext

  eglGetCurrentDisplay

  eglGetCurrentSurface

  eglGetDisplay

  eglGetError

  eglGetPlatformDisplayEXT

  eglGetProcAddress

  eglInitialize

  eglMakeCurrent

  eglPostSubBufferNV

  eglQueryAPI

  eglQueryContext

  eglQueryString

  eglQuerySurface

  eglQuerySurfacePointerANGLE

  eglReleaseTexImage

  eglReleaseThread

  eglSurfaceAttrib

  eglSwapBuffers

  eglSwapInterval

  eglTerminate

  eglWaitClient

  eglWaitGL

  eglWaitNative

  Sections

  .text

  Size: 41KB - Virtual size: 40KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 20KB - Virtual size: 20KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 4KB - Virtual size: 11KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• libGLESv2.dll

  .dll windows:5 windows x86 arch:x86

  03984688d57e77e5399d18167b94d503

  
  

  Code Sign

  ee:25:04:09:a1:f5:9f:23:01:15:86:67:78:e8:56:57:fb:b9:d0:ee

  Signer

  Actual PE Digest

  ee:25:04:09:a1:f5:9f:23:01:15:86:67:78:e8:56:57:fb:b9:d0:ee

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  E:\Win-2272\download\chromium\src\out\Release\libGLESv2.dll.pdb

  Imports

  kernel32

  TlsAlloc

  TlsGetValue

  TlsSetValue

  TlsFree

  Sleep

  GetTempPathA

  GetTempFileNameA

  GetModuleHandleW

  GetProcAddress

  GetCurrentProcessId

  FreeLibrary

  LoadLibraryW

  GetModuleHandleExA

  GetLastError

  SetLastError

  GetCurrentThreadId

  QueryPerformanceCounter

  QueryPerformanceFrequency

  VerSetConditionMask

  VerifyVersionInfoW

  ReadConsoleW

  ReadFile

  SetEndOfFile

  CreateFileW

  OutputDebugStringW

  GetStringTypeW

  WriteConsoleW

  FlushFileBuffers

  SetStdHandle

  SetFilePointerEx

  EnumSystemLocalesW

  GetUserDefaultLCID

  IsValidLocale

  GetLocaleInfoW

  LCMapStringW

  EncodePointer

  DecodePointer

  GetCommandLineA

  IsDebuggerPresent

  IsProcessorFeaturePresent

  HeapFree

  WideCharToMultiByte

  HeapAlloc

  EnterCriticalSection

  LeaveCriticalSection

  ExitProcess

  GetModuleHandleExW

  AreFileApisANSI

  MultiByteToWideChar

  HeapReAlloc

  RaiseException

  HeapSize

  GetProcessHeap

  GetStdHandle

  GetFileType

  DeleteCriticalSection

  GetStartupInfoW

  GetModuleFileNameA

  GetSystemTimeAsFileTime

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  InitializeCriticalSectionAndSpinCount

  GetCurrentProcess

  TerminateProcess

  CloseHandle

  RtlUnwind

  WriteFile

  GetConsoleCP

  GetConsoleMode

  IsValidCodePage

  GetACP

  GetOEMCP

  GetCPInfo

  GetModuleFileNameW

  LoadLibraryExW

  user32

  WindowFromDC

  GetClientRect

  IsIconic

  IsWindow

  InvalidateRect

  SetWindowLongW

  RemovePropW

  GetPropW

  SetPropW

  CallWindowProcW

  GetWindowThreadProcessId

  DestroyWindow

  CreateWindowExW

  d3d9

  Direct3DCreate9

  Exports

  Exports

  ?ActiveTexture@gl@@YGXI@Z

  ?AttachShader@gl@@YGXII@Z

  ?BeginQuery@gl@@YGXII@Z

  ?BeginQueryEXT@gl@@YGXII@Z

  ?BeginTransformFeedback@gl@@YGXI@Z

  ?BindAPI@egl@@YGII@Z

  ?BindAttribLocation@gl@@YGXIIPBD@Z

  ?BindBuffer@gl@@YGXII@Z

  ?BindBufferBase@gl@@YGXIII@Z

  ?BindBufferRange@gl@@YGXIIIJJ@Z

  ?BindFramebuffer@gl@@YGXII@Z

  ?BindRenderbuffer@gl@@YGXII@Z

  ?BindSampler@gl@@YGXII@Z

  ?BindTexImage@egl@@YGIPAX0H@Z

  ?BindTexture@gl@@YGXII@Z

  ?BindTransformFeedback@gl@@YGXII@Z

  ?BindVertexArray@gl@@YGXI@Z

  ?BlendColor@gl@@YGXMMMM@Z

  ?BlendEquation@gl@@YGXI@Z

  ?BlendEquationSeparate@gl@@YGXII@Z

  ?BlendFunc@gl@@YGXII@Z

  ?BlendFuncSeparate@gl@@YGXIIII@Z

  ?BlitFramebuffer@gl@@YGXHHHHHHHHII@Z

  ?BlitFramebufferANGLE@gl@@YGXHHHHHHHHII@Z

  ?BufferData@gl@@YGXIJPBXI@Z

  ?BufferSubData@gl@@YGXIJJPBX@Z

  ?CheckFramebufferStatus@gl@@YGII@Z

  ?ChooseConfig@egl@@YGIPAXPBHPAPAXHPAH@Z

  ?Clear@gl@@YGXI@Z

  ?ClearBufferfi@gl@@YGXIHMH@Z

  ?ClearBufferfv@gl@@YGXIHPBM@Z

  ?ClearBufferiv@gl@@YGXIHPBH@Z

  ?ClearBufferuiv@gl@@YGXIHPBI@Z

  ?ClearColor@gl@@YGXMMMM@Z

  ?ClearDepthf@gl@@YGXM@Z

  ?ClearStencil@gl@@YGXH@Z

  ?ClientWaitSync@egl@@YGHPAX0H_K@Z

  ?ClientWaitSync@gl@@YGIPAU__GLsync@@I_K@Z

  ?ColorMask@gl@@YGXEEEE@Z

  ?CompileShader@gl@@YGXI@Z

  ?CompressedTexImage2D@gl@@YGXIHIHHHHPBX@Z

  ?CompressedTexImage3D@gl@@YGXIHIHHHHHPBX@Z

  ?CompressedTexSubImage2D@gl@@YGXIHHHHHIHPBX@Z

  ?CompressedTexSubImage3D@gl@@YGXIHHHHHHHIHPBX@Z

  ?CopyBufferSubData@gl@@YGXIIJJJ@Z

  ?CopyBuffers@egl@@YGIPAX0PAUHBITMAP__@@@Z

  ?CopyTexImage2D@gl@@YGXIHIHHHHH@Z

  ?CopyTexSubImage2D@gl@@YGXIHHHHHHH@Z

  ?CopyTexSubImage3D@gl@@YGXIHHHHHHHH@Z

  ?CreateContext@egl@@YGPAXPAX00PBH@Z

  ?CreatePbufferFromClientBuffer@egl@@YGPAXPAXI00PBH@Z

  ?CreatePbufferSurface@egl@@YGPAXPAX0PBH@Z

  ?CreatePixmapSurface@egl@@YGPAXPAX0PAUHBITMAP__@@PBH@Z

  ?CreatePlatformPixmapSurface@egl@@YGPAXPAX00PBH@Z

  ?CreatePlatformWindowSurface@egl@@YGPAXPAX00PBH@Z

  ?CreateProgram@gl@@YGIXZ

  ?CreateShader@gl@@YGII@Z

  ?CreateSync@egl@@YGPAXPAXIPBH@Z

  ?CreateWindowSurface@egl@@YGPAXPAX0PAUHWND__@@PBH@Z

  ?CullFace@gl@@YGXI@Z

  ?DeleteBuffers@gl@@YGXHPBI@Z

  ?DeleteFencesNV@gl@@YGXHPBI@Z

  ?DeleteFramebuffers@gl@@YGXHPBI@Z

  ?DeleteProgram@gl@@YGXI@Z

  ?DeleteQueries@gl@@YGXHPBI@Z

  ?DeleteQueriesEXT@gl@@YGXHPBI@Z

  ?DeleteRenderbuffers@gl@@YGXHPBI@Z

  ?DeleteSamplers@gl@@YGXHPBI@Z

  ?DeleteShader@gl@@YGXI@Z

  ?DeleteSync@gl@@YGXPAU__GLsync@@@Z

  ?DeleteTextures@gl@@YGXHPBI@Z

  ?DeleteTransformFeedbacks@gl@@YGXHPBI@Z

  ?DeleteVertexArrays@gl@@YGXHPBI@Z

  ?DepthFunc@gl@@YGXI@Z

  ?DepthMask@gl@@YGXE@Z

  ?DepthRangef@gl@@YGXMM@Z

  ?DestroyContext@egl@@YGIPAX0@Z

  ?DestroySurface@egl@@YGIPAX0@Z

  ?DestroySync@egl@@YGIPAX0@Z

  ?DetachShader@gl@@YGXII@Z

  ?Disable@gl@@YGXI@Z

  ?DisableVertexAttribArray@gl@@YGXI@Z

  ?DrawArrays@gl@@YGXIHH@Z

  ?DrawArraysInstanced@gl@@YGXIHHH@Z

  ?DrawArraysInstancedANGLE@gl@@YGXIHHH@Z

  ?DrawBuffers@gl@@YGXHPBI@Z

  ?DrawBuffersEXT@gl@@YGXHPBI@Z

  ?DrawElements@gl@@YGXIHIPBX@Z

  ?DrawElementsInstanced@gl@@YGXIHIPBXH@Z

  ?DrawElementsInstancedANGLE@gl@@YGXIHIPBXH@Z

  ?DrawRangeElements@gl@@YGXIIIHIPBX@Z

  ?Enable@gl@@YGXI@Z

  ?EnableVertexAttribArray@gl@@YGXI@Z

  ?EndQuery@gl@@YGXI@Z

  ?EndQueryEXT@gl@@YGXI@Z

  ?EndTransformFeedback@gl@@YGXXZ

  ?FenceSync_@gl@@YGPAU__GLsync@@II@Z

  ?Finish@gl@@YGXXZ

  ?FinishFenceNV@gl@@YGXI@Z

  ?Flush@gl@@YGXXZ

  ?FlushMappedBufferRange@gl@@YGXIJJ@Z

  ?FlushMappedBufferRangeEXT@gl@@YGXIJJ@Z

  ?FramebufferRenderbuffer@gl@@YGXIIII@Z

  ?FramebufferTexture2D@gl@@YGXIIIIH@Z

  ?FramebufferTextureLayer@gl@@YGXIIIHH@Z

  ?FrontFace@gl@@YGXI@Z

  ?GenBuffers@gl@@YGXHPAI@Z

  ?GenFencesNV@gl@@YGXHPAI@Z

  ?GenFramebuffers@gl@@YGXHPAI@Z

  ?GenQueries@gl@@YGXHPAI@Z

  ?GenQueriesEXT@gl@@YGXHPAI@Z

  ?GenRenderbuffers@gl@@YGXHPAI@Z

  ?GenSamplers@gl@@YGXHPAI@Z

  ?GenTextures@gl@@YGXHPAI@Z

  ?GenTransformFeedbacks@gl@@YGXHPAI@Z

  ?GenVertexArrays@gl@@YGXHPAI@Z

  ?GenerateMipmap@gl@@YGXI@Z

  ?GetActiveAttrib@gl@@YGXIIHPAH0PAIPAD@Z

  ?GetActiveUniform@gl@@YGXIIHPAH0PAIPAD@Z

  ?GetActiveUniformBlockName@gl@@YGXIIHPAHPAD@Z

  ?GetActiveUniformBlockiv@gl@@YGXIIIPAH@Z

  ?GetActiveUniformsiv@gl@@YGXIHPBIIPAH@Z

  ?GetAttachedShaders@gl@@YGXIHPAHPAI@Z

  ?GetAttribLocation@gl@@YGHIPBD@Z

  ?GetBooleanv@gl@@YGXIPAE@Z

  ?GetBufferParameteri64v@gl@@YGXIIPA_J@Z

  ?GetBufferParameteriv@gl@@YGXIIPAH@Z

  ?GetBufferPointerv@gl@@YGXIIPAPAX@Z

  ?GetBufferPointervOES@gl@@YGXIIPAPAX@Z

  ?GetConfigAttrib@egl@@YGIPAX0HPAH@Z

  ?GetConfigs@egl@@YGIPAXPAPAXHPAH@Z

  ?GetCurrentContext@egl@@YGPAXXZ

  ?GetCurrentDisplay@egl@@YGPAXXZ

  ?GetCurrentSurface@egl@@YGPAXH@Z

  ?GetDisplay@egl@@YGPAXPAUHDC__@@@Z

  ?GetError@egl@@YGHXZ

  ?GetError@gl@@YGIXZ

  ?GetFenceivNV@gl@@YGXIIPAH@Z

  ?GetFloatv@gl@@YGXIPAM@Z

  ?GetFragDataLocation@gl@@YGHIPBD@Z

  ?GetFramebufferAttachmentParameteriv@gl@@YGXIIIPAH@Z

  ?GetGraphicsResetStatusEXT@gl@@YGIXZ

  ?GetInteger64i_v@gl@@YGXIIPA_J@Z

  ?GetInteger64v@gl@@YGXIPA_J@Z

  ?GetIntegeri_v@gl@@YGXIIPAH@Z

  ?GetIntegerv@gl@@YGXIPAH@Z

  ?GetInternalformativ@gl@@YGXIIIHPAH@Z

  ?GetPlatformDisplay@egl@@YGPAXIPAXPBH@Z

  ?GetPlatformDisplayEXT@egl@@YGPAXIPAXPBH@Z

  ?GetProcAddress@egl@@YGP6AXXZPBD@Z

  ?GetProgramBinary@gl@@YGXIHPAHPAIPAX@Z

  ?GetProgramBinaryOES@gl@@YGXIHPAHPAIPAX@Z

  ?GetProgramInfoLog@gl@@YGXIHPAHPAD@Z

  ?GetProgramiv@gl@@YGXIIPAH@Z

  ?GetQueryObjectuiv@gl@@YGXIIPAI@Z

  ?GetQueryObjectuivEXT@gl@@YGXIIPAI@Z

  ?GetQueryiv@gl@@YGXIIPAH@Z

  ?GetQueryivEXT@gl@@YGXIIPAH@Z

  ?GetRenderbufferParameteriv@gl@@YGXIIPAH@Z

  ?GetSamplerParameterfv@gl@@YGXIIPAM@Z

  ?GetSamplerParameteriv@gl@@YGXIIPAH@Z

  ?GetShaderInfoLog@gl@@YGXIHPAHPAD@Z

  ?GetShaderPrecisionFormat@gl@@YGXIIPAH0@Z

  ?GetShaderSource@gl@@YGXIHPAHPAD@Z

  ?GetShaderiv@gl@@YGXIIPAH@Z

  ?GetString@gl@@YGPBEI@Z

  ?GetStringi@gl@@YGPBEII@Z

  ?GetSyncAttrib@egl@@YGIPAX0HPAH@Z

  ?GetSynciv@gl@@YGXPAU__GLsync@@IHPAH1@Z

  ?GetTexParameterfv@gl@@YGXIIPAM@Z

  ?GetTexParameteriv@gl@@YGXIIPAH@Z

  ?GetTransformFeedbackVarying@gl@@YGXIIHPAH0PAIPAD@Z

  ?GetTranslatedShaderSourceANGLE@gl@@YGXIHPAHPAD@Z

  ?GetUniformBlockIndex@gl@@YGIIPBD@Z

  ?GetUniformIndices@gl@@YGXIHPBQBDPAI@Z

  ?GetUniformLocation@gl@@YGHIPBD@Z

  ?GetUniformfv@gl@@YGXIHPAM@Z

  ?GetUniformiv@gl@@YGXIHPAH@Z

  ?GetUniformuiv@gl@@YGXIHPAI@Z

  ?GetVertexAttribIiv@gl@@YGXIIPAH@Z

  ?GetVertexAttribIuiv@gl@@YGXIIPAI@Z

  ?GetVertexAttribPointerv@gl@@YGXIIPAPAX@Z

  ?GetVertexAttribfv@gl@@YGXIIPAM@Z

  ?GetVertexAttribiv@gl@@YGXIIPAH@Z

  ?GetnUniformfvEXT@gl@@YGXIHHPAM@Z

  ?GetnUniformivEXT@gl@@YGXIHHPAH@Z

  ?Hint@gl@@YGXII@Z

  ?Initialize@egl@@YGIPAXPAH1@Z

  ?InvalidateFramebuffer@gl@@YGXIHPBI@Z

  ?InvalidateSubFramebuffer@gl@@YGXIHPBIHHHH@Z

  ?IsBuffer@gl@@YGEI@Z

  ?IsEnabled@gl@@YGEI@Z

  ?IsFenceNV@gl@@YGEI@Z

  ?IsFramebuffer@gl@@YGEI@Z

  ?IsProgram@gl@@YGEI@Z

  ?IsQuery@gl@@YGEI@Z

  ?IsQueryEXT@gl@@YGEI@Z

  ?IsRenderbuffer@gl@@YGEI@Z

  ?IsSampler@gl@@YGEI@Z

  ?IsShader@gl@@YGEI@Z

  ?IsSync@gl@@YGEPAU__GLsync@@@Z

  ?IsTexture@gl@@YGEI@Z

  ?IsTransformFeedback@gl@@YGEI@Z

  ?IsVertexArray@gl@@YGEI@Z

  ?LineWidth@gl@@YGXM@Z

  ?LinkProgram@gl@@YGXI@Z

  ?MakeCurrent@egl@@YGIPAX000@Z

  ?MapBufferOES@gl@@YGPAXII@Z

  ?MapBufferRange@gl@@YGPAXIJJI@Z

  ?MapBufferRangeEXT@gl@@YGPAXIJJI@Z

  ?PauseTransformFeedback@gl@@YGXXZ

  ?PixelStorei@gl@@YGXIH@Z

  ?PolygonOffset@gl@@YGXMM@Z

  ?PostSubBufferNV@egl@@YGIPAX0HHHH@Z

  ?ProgramBinary@gl@@YGXIIPBXH@Z

  ?ProgramBinaryOES@gl@@YGXIIPBXH@Z

  ?ProgramParameteri@gl@@YGXIIH@Z

  ?QueryAPI@egl@@YGIXZ

  ?QueryContext@egl@@YGIPAX0HPAH@Z

  ?QueryString@egl@@YGPBDPAXH@Z

  ?QuerySurface@egl@@YGIPAX0HPAH@Z

  ?QuerySurfacePointerANGLE@egl@@YGIPAX0HPAPAX@Z

  ?ReadBuffer@gl@@YGXI@Z

  ?ReadPixels@gl@@YGXHHHHIIPAX@Z

  ?ReadnPixelsEXT@gl@@YGXHHHHIIHPAX@Z

  ?ReleaseShaderCompiler@gl@@YGXXZ

  ?ReleaseTexImage@egl@@YGIPAX0H@Z

  ?ReleaseThread@egl@@YGIXZ

  ?RenderbufferStorage@gl@@YGXIIHH@Z

  ?RenderbufferStorageMultisample@gl@@YGXIHIHH@Z

  ?RenderbufferStorageMultisampleANGLE@gl@@YGXIHIHH@Z

  ?ResumeTransformFeedback@gl@@YGXXZ

  ?SampleCoverage@gl@@YGXME@Z

  ?SamplerParameterf@gl@@YGXIIM@Z

  ?SamplerParameterfv@gl@@YGXIIPBM@Z

  ?SamplerParameteri@gl@@YGXIIH@Z

  ?SamplerParameteriv@gl@@YGXIIPBH@Z

  ?Scissor@gl@@YGXHHHH@Z

  ?SetFenceNV@gl@@YGXII@Z

  ?ShaderBinary@gl@@YGXHPBIIPBXH@Z

  ?ShaderSource@gl@@YGXIHPBQBDPBH@Z

  ?StencilFunc@gl@@YGXIHI@Z

  ?StencilFuncSeparate@gl@@YGXIIHI@Z

  ?StencilMask@gl@@YGXI@Z

  ?StencilMaskSeparate@gl@@YGXII@Z

  ?StencilOp@gl@@YGXIII@Z

  ?StencilOpSeparate@gl@@YGXIIII@Z

  ?SurfaceAttrib@egl@@YGIPAX0HH@Z

  ?SwapBuffers@egl@@YGIPAX0@Z

  ?SwapInterval@egl@@YGIPAXH@Z

  ?Terminate@egl@@YGIPAX@Z

  ?TestFenceNV@gl@@YGEI@Z

  ?TexImage2D@gl@@YGXIHHHHHIIPBX@Z

  ?TexImage3D@gl@@YGXIHHHHHHIIPBX@Z

  ?TexParameterf@gl@@YGXIIM@Z

  ?TexParameterfv@gl@@YGXIIPBM@Z

  ?TexParameteri@gl@@YGXIIH@Z

  ?TexParameteriv@gl@@YGXIIPBH@Z

  ?TexStorage2D@gl@@YGXIHIHH@Z

  ?TexStorage2DEXT@gl@@YGXIHIHH@Z

  ?TexStorage3D@gl@@YGXIHIHHH@Z

  ?TexSubImage2D@gl@@YGXIHHHHHIIPBX@Z

  ?TexSubImage3D@gl@@YGXIHHHHHHHIIPBX@Z

  ?TransformFeedbackVaryings@gl@@YGXIHPBQBDI@Z

  ?Uniform1f@gl@@YGXHM@Z

  ?Uniform1fv@gl@@YGXHHPBM@Z

  ?Uniform1i@gl@@YGXHH@Z

  ?Uniform1iv@gl@@YGXHHPBH@Z

  ?Uniform1ui@gl@@YGXHI@Z

  ?Uniform1uiv@gl@@YGXHHPBI@Z

  ?Uniform2f@gl@@YGXHMM@Z

  ?Uniform2fv@gl@@YGXHHPBM@Z

  ?Uniform2i@gl@@YGXHHH@Z

  ?Uniform2iv@gl@@YGXHHPBH@Z

  ?Uniform2ui@gl@@YGXHII@Z

  ?Uniform2uiv@gl@@YGXHHPBI@Z

  ?Uniform3f@gl@@YGXHMMM@Z

  ?Uniform3fv@gl@@YGXHHPBM@Z

  ?Uniform3i@gl@@YGXHHHH@Z

  ?Uniform3iv@gl@@YGXHHPBH@Z

  ?Uniform3ui@gl@@YGXHIII@Z

  ?Uniform3uiv@gl@@YGXHHPBI@Z

  ?Uniform4f@gl@@YGXHMMMM@Z

  ?Uniform4fv@gl@@YGXHHPBM@Z

  ?Uniform4i@gl@@YGXHHHHH@Z

  ?Uniform4iv@gl@@YGXHHPBH@Z

  ?Uniform4ui@gl@@YGXHIIII@Z

  ?Uniform4uiv@gl@@YGXHHPBI@Z

  ?UniformBlockBinding@gl@@YGXIII@Z

  ?UniformMatrix2fv@gl@@YGXHHEPBM@Z

  ?UniformMatrix2x3fv@gl@@YGXHHEPBM@Z

  ?UniformMatrix2x4fv@gl@@YGXHHEPBM@Z

  ?UniformMatrix3fv@gl@@YGXHHEPBM@Z

  ?UniformMatrix3x2fv@gl@@YGXHHEPBM@Z

  ?UniformMatrix3x4fv@gl@@YGXHHEPBM@Z

  ?UniformMatrix4fv@gl@@YGXHHEPBM@Z

  ?UniformMatrix4x2fv@gl@@YGXHHEPBM@Z

  ?UniformMatrix4x3fv@gl@@YGXHHEPBM@Z

  ?UnmapBuffer@gl@@YGEI@Z

  ?UnmapBufferOES@gl@@YGEI@Z

  ?UseProgram@gl@@YGXI@Z

  ?ValidateProgram@gl@@YGXI@Z

  ?VertexAttrib1f@gl@@YGXIM@Z

  ?VertexAttrib1fv@gl@@YGXIPBM@Z

  ?VertexAttrib2f@gl@@YGXIMM@Z

  ?VertexAttrib2fv@gl@@YGXIPBM@Z

  ?VertexAttrib3f@gl@@YGXIMMM@Z

  ?VertexAttrib3fv@gl@@YGXIPBM@Z

  ?VertexAttrib4f@gl@@YGXIMMMM@Z

  ?VertexAttrib4fv@gl@@YGXIPBM@Z

  ?VertexAttribDivisor@gl@@YGXII@Z

  ?VertexAttribDivisorANGLE@gl@@YGXII@Z

  ?VertexAttribI4i@gl@@YGXIHHHH@Z

  ?VertexAttribI4iv@gl@@YGXIPBH@Z

  ?VertexAttribI4ui@gl@@YGXIIIII@Z

  ?VertexAttribI4uiv@gl@@YGXIPBI@Z

  ?VertexAttribIPointer@gl@@YGXIHIHPBX@Z

  ?VertexAttribPointer@gl@@YGXIHIEHPBX@Z

  ?Viewport@gl@@YGXHHHH@Z

  ?WaitClient@egl@@YGIXZ

  ?WaitGL@egl@@YGIXZ

  ?WaitNative@egl@@YGIH@Z

  ?WaitSync@egl@@YGIPAX0H@Z

  ?WaitSync@gl@@YGXPAU__GLsync@@I_K@Z

  SetTraceFunctionPointers

  glActiveTexture

  glAttachShader

  glBeginQuery

  glBeginQueryEXT

  glBeginTransformFeedback

  glBindAttribLocation

  glBindBuffer

  glBindBufferBase

  glBindBufferRange

  glBindFramebuffer

  glBindRenderbuffer

  glBindSampler

  glBindTexture

  glBindTransformFeedback

  glBindVertexArray

  glBlendColor

  glBlendEquation

  glBlendEquationSeparate

  glBlendFunc

  glBlendFuncSeparate

  glBlitFramebuffer

  glBlitFramebufferANGLE

  glBufferData

  glBufferSubData

  glCheckFramebufferStatus

  glClear

  glClearBufferfi

  glClearBufferfv

  glClearBufferiv

  glClearBufferuiv

  glClearColor

  glClearDepthf

  glClearStencil

  glClientWaitSync

  glColorMask

  glCompileShader

  glCompressedTexImage2D

  glCompressedTexImage3D

  glCompressedTexSubImage2D

  glCompressedTexSubImage3D

  glCopyBufferSubData

  glCopyTexImage2D

  glCopyTexSubImage2D

  glCopyTexSubImage3D

  glCreateProgram

  glCreateShader

  glCullFace

  glDeleteBuffers

  glDeleteFencesNV

  glDeleteFramebuffers

  glDeleteProgram

  glDeleteQueries

  glDeleteQueriesEXT

  glDeleteRenderbuffers

  glDeleteSamplers

  glDeleteShader

  glDeleteSync

  glDeleteTextures

  glDeleteTransformFeedbacks

  glDeleteVertexArrays

  glDepthFunc

  glDepthMask

  glDepthRangef

  glDetachShader

  glDisable

  glDisableVertexAttribArray

  glDrawArrays

  glDrawArraysInstanced

  glDrawArraysInstancedANGLE

  glDrawBuffers

  glDrawBuffersEXT

  glDrawElements

  glDrawElementsInstanced

  glDrawElementsInstancedANGLE

  glDrawRangeElements

  glEnable

  glEnableVertexAttribArray

  glEndQuery

  glEndQueryEXT

  glEndTransformFeedback

  glFenceSync

  glFinish

  glFinishFenceNV

  glFlush

  glFlushMappedBufferRange

  glFlushMappedBufferRangeEXT

  glFramebufferRenderbuffer

  glFramebufferTexture2D

  glFramebufferTextureLayer

  glFrontFace

  glGenBuffers

  glGenFencesNV

  glGenFramebuffers

  glGenQueries

  glGenQueriesEXT

  glGenRenderbuffers

  glGenSamplers

  glGenTextures

  glGenTransformFeedbacks

  glGenVertexArrays

  glGenerateMipmap

  glGetActiveAttrib

  glGetActiveUniform

  glGetActiveUniformBlockName

  glGetActiveUniformBlockiv

  glGetActiveUniformsiv

  glGetAttachedShaders

  glGetAttribLocation

  glGetBooleanv

  glGetBufferParameteri64v

  glGetBufferParameteriv

  glGetBufferPointerv

  glGetBufferPointervOES

  glGetError

  glGetFenceivNV

  glGetFloatv

  glGetFragDataLocation

  glGetFramebufferAttachmentParameteriv

  glGetGraphicsResetStatusEXT

  glGetInteger64i_v

  glGetInteger64v

  glGetIntegeri_v

  glGetIntegerv

  glGetInternalformativ

  glGetProgramBinary

  glGetProgramBinaryOES

  glGetProgramInfoLog

  glGetProgramiv

  glGetQueryObjectuiv

  glGetQueryObjectuivEXT

  glGetQueryiv

  glGetQueryivEXT

  glGetRenderbufferParameteriv

  glGetSamplerParameterfv

  glGetSamplerParameteriv

  glGetShaderInfoLog

  glGetShaderPrecisionFormat

  glGetShaderSource

  glGetShaderiv

  glGetString

  glGetStringi

  glGetSynciv

  glGetTexParameterfv

  glGetTexParameteriv

  glGetTransformFeedbackVarying

  glGetTranslatedShaderSourceANGLE

  glGetUniformBlockIndex

  glGetUniformIndices

  glGetUniformLocation

  glGetUniformfv

  glGetUniformiv

  glGetUniformuiv

  glGetVertexAttribIiv

  glGetVertexAttribIuiv

  glGetVertexAttribPointerv

  glGetVertexAttribfv

  glGetVertexAttribiv

  glGetnUniformfvEXT

  glGetnUniformivEXT

  glHint

  glInvalidateFramebuffer

  glInvalidateSubFramebuffer

  glIsBuffer

  glIsEnabled

  glIsFenceNV

  glIsFramebuffer

  glIsProgram

  glIsQuery

  glIsQueryEXT

  glIsRenderbuffer

  glIsSampler

  glIsShader

  glIsSync

  glIsTexture

  glIsTransformFeedback

  Sections

  .text

  Size: 1.1MB - Virtual size: 1.1MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 226KB - Virtual size: 226KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 7KB - Virtual size: 17KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 35KB - Virtual size: 35KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• libcef.dll

  .dll windows:5 windows x86 arch:x86

  c03cda3eedc9dc42d380b349eae5bb84

  
  

  Code Sign

  5d:7a:02:7c:1f:94:59:11:f0:69:ea:90:c7:74:93:2b:09:77:70:e6

  Signer

  Actual PE Digest

  5d:7a:02:7c:1f:94:59:11:f0:69:ea:90:c7:74:93:2b:09:77:70:e6

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  E:\Win-2272\download\chromium\src\out\Release\libcef.dll.pdb

  Imports

  psapi

  QueryWorkingSet

  EnumProcessModules

  GetProcessMemoryInfo

  advapi32

  GetSecurityDescriptorSacl

  SetThreadToken

  ConvertStringSidToSidW

  CreateProcessAsUserW

  RegCloseKey

  RegCreateKeyExW

  RegDeleteKeyW

  RegDeleteValueW

  RegEnumKeyExW

  RegEnumValueW

  RegNotifyChangeKeyValue

  RegOpenKeyExW

  RegQueryInfoKeyW

  RegQueryValueExW

  RegSetValueExW

  OpenProcessToken

  GetTokenInformation

  InitializeAcl

  InitializeSecurityDescriptor

  SetSecurityDescriptorDacl

  SystemFunction036

  TraceEvent

  RegisterTraceGuidsW

  UnregisterTraceGuids

  GetTraceLoggerHandle

  GetTraceEnableLevel

  GetTraceEnableFlags

  RegOpenKeyExA

  RegQueryValueExA

  CryptReleaseContext

  CryptDestroyKey

  CryptGetKeyParam

  CryptSetHashParam

  CryptGetHashParam

  CryptGetUserKey

  CryptCreateHash

  CryptSignHashW

  OpenTraceW

  ProcessTrace

  CloseTrace

  RegDisablePredefinedCache

  ImpersonateAnonymousToken

  CryptGenKey

  SetEntriesInAclW

  LookupPrivilegeValueW

  EqualSid

  CreateRestrictedToken

  RevertToSelf

  DuplicateTokenEx

  CreateWellKnownSid

  CopySid

  GetSecurityInfo

  ConvertStringSecurityDescriptorToSecurityDescriptorW

  SetSecurityInfo

  SetTokenInformation

  ConvertSidToStringSidW

  StartTraceW

  ControlTraceW

  CryptAcquireContextW

  DuplicateToken

  GetLengthSid

  gdi32

  ExtTextOutW

  DeleteEnhMetaFile

  CreateEnhMetaFileW

  CloseEnhMetaFile

  GetTextFaceW

  SetMapMode

  GetTextExtentPoint32W

  DeleteDC

  CreateFontW

  ModifyWorldTransform

  StretchDIBits

  SetPolyFillMode

  SetROP2

  SetStretchBltMode

  AbortPath

  BeginPath

  EndPath

  SetRectRgn

  SetGraphicsMode

  PathToRegion

  PolyBezier

  SetBrushOrgEx

  SetDIBits

  GetICMProfileW

  ChoosePixelFormat

  SetPixelFormat

  SwapBuffers

  SetDIBitsToDevice

  CreateRectRgn

  CombineRgn

  GetStockObject

  GetTextMetricsW

  ExcludeClipRect

  EqualRgn

  CreateRectRgnIndirect

  GetBkColor

  SetTextColor

  EnumFontFamiliesExW

  SetBkColor

  CreateSolidBrush

  CreateCompatibleBitmap

  CreateBitmap

  GetDIBits

  GetRgnBox

  EndPage

  StartPage

  SaveDC

  RestoreDC

  SetAbortProc

  EndDoc

  StartDocW

  CreateDCW

  CancelDC

  CreateDIBSection

  SetWorldTransform

  GetWorldTransform

  SetEnhMetaFileBits

  PlayEnhMetaFileRecord

  PlayEnhMetaFile

  GetEnhMetaFileHeader

  GetEnhMetaFileBits

  EnumEnhMetaFile

  SelectObject

  GetDeviceCaps

  DeleteObject

  CreateFontIndirectW

  CreateDCA

  GetObjectW

  GetFontData

  GetCurrentObject

  GetCharABCWidthsW

  GetGlyphOutlineW

  ExtEscape

  SetArcDirection

  GetOutlineTextMetricsW

  GetFontUnicodeRanges

  GetGlyphIndicesW

  GetTextExtentPointI

  AddFontMemResourceEx

  RemoveFontMemResourceEx

  SetBkMode

  BitBlt

  CreateCompatibleDC

  SelectClipRgn

  SetDCBrushColor

  StretchBlt

  SetTextAlign

  GdiFlush

  GdiAlphaBlend

  SetDCPenColor

  kernel32

  GetExitCodeProcess

  GetDiskFreeSpaceExW

  GlobalMemoryStatusEx

  RtlCaptureStackBackTrace

  UnregisterWaitEx

  RegisterWaitForSingleObject

  QueueUserWorkItem

  GetModuleHandleExA

  CreateToolhelp32Snapshot

  Process32FirstW

  Process32NextW

  VirtualAlloc

  VirtualFree

  InitializeCriticalSection

  ReleaseSemaphore

  CreateSemaphoreW

  GetTimeZoneInformation

  GetLocaleInfoW

  GetLocaleInfoA

  GetNumberFormatW

  GetCurrencyFormatW

  GetDateFormatW

  GetTimeFormatW

  LoadLibraryA

  GetACP

  GetThreadLocale

  GetGeoInfoA

  GetUserGeoID

  UnlockFile

  OpenThread

  SuspendThread

  GetThreadContext

  DeleteFileA

  GetFileSize

  GetFileType

  GetThreadTimes

  GetSystemInfo

  GetTempPathA

  GetTempFileNameA

  WideCharToMultiByte

  CreateSemaphoreA

  MultiByteToWideChar

  GetSystemDirectoryA

  GetModuleFileNameA

  ConnectNamedPipe

  CreateNamedPipeW

  WaitNamedPipeW

  CancelIo

  GetNamedPipeInfo

  LoadLibraryExW

  SetUnhandledExceptionFilter

  CreateRemoteThread

  VirtualAllocEx

  VirtualFreeEx

  FormatMessageW

  RtlCaptureContext

  VirtualQueryEx

  SetNamedPipeHandleState

  TransactNamedPipe

  GlobalFree

  GetComputerNameExW

  lstrcmpiW

  ExitProcess

  DecodePointer

  LoadResource

  SizeofResource

  FindResourceW

  SetThreadExecutionState

  FlushInstructionCache

  DefineDosDeviceW

  DeviceIoControl

  GetSystemPowerStatus

  GlobalSize

  GlobalLock

  GlobalUnlock

  SetThreadAffinityMask

  GetSystemTime

  GetLocalTime

  GlobalAlloc

  InitializeSListHead

  InterlockedPopEntrySList

  InterlockedPushEntrySList

  GetUserDefaultLangID

  GetUserDefaultLCID

  EnumSystemLocalesW

  SetFileTime

  SetFilePointerEx

  SetEndOfFile

  LockFile

  GetFileSizeEx

  GetFileInformationByHandle

  FlushFileBuffers

  GetProcAddress

  GetModuleHandleA

  ExpandEnvironmentStringsW

  LoadLibraryW

  lstrcmpiA

  FreeLibrary

  VirtualQuery

  FindNextFileW

  FindFirstFileExW

  FindFirstFileW

  FindClose

  PostQueuedCompletionStatus

  GetQueuedCompletionStatus

  CreateIoCompletionPort

  GetNativeSystemInfo

  GetVersionExW

  GetModuleHandleExW

  OpenFileMappingW

  VirtualProtect

  SystemTimeToFileTime

  FileTimeToSystemTime

  TerminateProcess

  SystemTimeToTzSpecificLocalTime

  GetSystemTimeAsFileTime

  QueryPerformanceFrequency

  QueryPerformanceCounter

  AllocConsole

  AttachConsole

  SetInformationJobObject

  AssignProcessToJobObject

  CreateProcessW

  ResumeThread

  SetHandleInformation

  GetProcessAffinityMask

  CreateWaitableTimerW

  GetStdHandle

  GetPrivateProfileStringW

  QueryInformationJobObject

  IsProcessInJob

  lstrlenW

  DebugBreak

  DeleteCriticalSection

  TryEnterCriticalSection

  ReadProcessMemory

  ProcessIdToSessionId

  SearchPathW

  CreateJobObjectW

  SignalObjectAndWait

  GetProcessHandleCount

  TerminateJobObject

  WriteProcessMemory

  VirtualProtectEx

  lstrcmpW

  UnlockFileEx

  LockFileEx

  GetDiskFreeSpaceW

  GetDiskFreeSpaceA

  GetFileAttributesA

  SwitchToThread

  VerifyVersionInfoW

  VerSetConditionMask

  GetEnvironmentVariableA

  GetOverlappedResult

  GetProcessTimes

  LockResource

  GetUserDefaultUILanguage

  FindFirstChangeNotificationW

  FindCloseChangeNotification

  GetEnvironmentVariableW

  SetEnvironmentVariableW

  SetEnvironmentVariableA

  OutputDebugStringW

  GetFullPathNameA

  IsValidLocale

  LCMapStringW

  CompareStringW

  WriteConsoleW

  ReadConsoleW

  GetStringTypeW

  GetCPInfo

  GetOEMCP

  IsValidCodePage

  FreeEnvironmentStringsW

  GetEnvironmentStringsW

  GetStartupInfoW

  UnhandledExceptionFilter

  PeekNamedPipe

  FileTimeToLocalFileTime

  RtlUnwind

  GetDriveTypeW

  ExitThread

  SetConsoleCtrlHandler

  HeapSize

  AreFileApisANSI

  SetStdHandle

  GetFullPathNameW

  InitializeCriticalSectionAndSpinCount

  LeaveCriticalSection

  EnterCriticalSection

  WaitForMultipleObjects

  CreateEventW

  ResetEvent

  SetEvent

  ReplaceFileW

  MoveFileExW

  MoveFileW

  CopyFileW

  UnmapViewOfFile

  MapViewOfFile

  CreateFileMappingW

  GetTempPathW

  SetFileAttributesW

  RemoveDirectoryW

  ReadFile

  QueryDosDeviceW

  GetVolumePathNameW

  GetVolumeInformationW

  GetTempFileNameW

  GetLongPathNameW

  GetFileAttributesExW

  GetFileAttributesW

  CreateDirectoryW

  GetCurrentDirectoryW

  SetCurrentDirectoryW

  SetThreadPriority

  GetCurrentThread

  CreateThread

  GetWindowsDirectoryW

  TzSpecificLocalTimeToSystemTime

  GetSystemDirectoryW

  OpenProcess

  GetProcessId

  GetCurrentProcess

  Sleep

  RaiseException

  DuplicateHandle

  GetConsoleMode

  GetConsoleCP

  GetCommandLineA

  IsProcessorFeaturePresent

  EncodePointer

  LoadLibraryExA

  IsDebuggerPresent

  TlsFree

  TlsSetValue

  TlsGetValue

  TlsAlloc

  LocalFree

  FormatMessageA

  GetModuleFileNameW

  GetTickCount

  GetCurrentProcessId

  CreateMutexW

  WaitForSingleObject

  ReleaseMutex

  SetLastError

  GetLastError

  CloseHandle

  OutputDebugStringA

  WriteFile

  SetFilePointer

  DeleteFileW

  CreateFileW

  HeapSetInformation

  GetProcessHeap

  HeapFree

  HeapReAlloc

  HeapAlloc

  GetCurrentThreadId

  GetModuleHandleW

  SetErrorMode

  GetCommandLineW

  CreateFileA

  winspool.drv

  DeviceCapabilitiesW

  ord203

  DocumentPropertiesW

  GetPrinterW

  GetPrinterDriverW

  ClosePrinter

  OpenPrinterW

  EnumPrintersW

  comdlg32

  GetSaveFileNameW

  PrintDlgExW

  GetOpenFileNameW

  ole32

  DoDragDrop

  RevokeDragDrop

  GetHGlobalFromStream

  CreateStreamOnHGlobal

  CLSIDFromString

  CoTaskMemRealloc

  CoTaskMemAlloc

  CoCreateInstance

  CoInitializeEx

  OleInitialize

  CoTaskMemFree

  CoInitialize

  CoUninitialize

  RegisterDragDrop

  ReleaseStgMedium

  OleDuplicateData

  OleUninitialize

  CoCreateGuid

  PropVariantClear

  StringFromGUID2

  oleaut32

  VariantInit

  VariantClear

  LoadRegTypeLi

  LoadTypeLi

  SysStringLen

  SysAllocString

  VarUI4FromStr

  SysFreeString

  winhttp

  WinHttpGetIEProxyConfigForCurrentUser

  WinHttpGetProxyForUrl

  WinHttpSetTimeouts

  WinHttpCloseHandle

  WinHttpOpen

  userenv

  DestroyEnvironmentBlock

  CreateEnvironmentBlock

  GetProfileType

  urlmon

  CoInternetCreateSecurityManager

  dhcpcsvc

  DhcpCApiInitialize

  DhcpRequestParams

  wtsapi32

  WTSUnRegisterSessionNotification

  WTSRegisterSessionNotification

  comctl32

  InitCommonControlsEx

  winmm

  waveOutPrepareHeader

  waveInClose

  waveInOpen

  waveInGetDevCapsW

  waveOutGetDevCapsW

  waveInMessage

  waveInGetNumDevs

  waveOutGetNumDevs

  midiInReset

  midiInStop

  midiInStart

  midiInAddBuffer

  waveOutUnprepareHeader

  midiInPrepareHeader

  midiInClose

  midiInOpen

  midiInGetDevCapsW

  midiInGetNumDevs

  waveInUnprepareHeader

  midiOutLongMsg

  midiOutShortMsg

  midiOutUnprepareHeader

  midiOutPrepareHeader

  midiOutClose

  midiOutOpen

  midiOutGetDevCapsW

  midiOutGetNumDevs

  waveOutWrite

  waveOutPause

  timeKillEvent

  timeSetEvent

  timeEndPeriod

  timeBeginPeriod

  timeGetTime

  waveOutRestart

  waveOutReset

  waveInAddBuffer

  waveInStart

  waveInReset

  waveOutOpen

  midiOutReset

  waveOutClose

  midiInUnprepareHeader

  waveInPrepareHeader

  ws2_32

  listen

  WSASendTo

  WSARecvFrom

  getpeername

  __WSAFDIsSet

  closesocket

  connect

  ioctlsocket

  getsockopt

  htonl

  htons

  inet_addr

  inet_ntoa

  ntohs

  recv

  select

  send

  socket

  gethostbyaddr

  gethostbyname

  getservbyport

  getservbyname

  WSAStartup

  ntohl

  WSAGetLastError

  bind

  getsockname

  WSASetLastError

  gethostname

  accept

  setsockopt

  shutdown

  WSACloseEvent

  WSACreateEvent

  WSAEnumNetworkEvents

  WSAEventSelect

  WSAGetOverlappedResult

  WSAIoctl

  WSAResetEvent

  WSASend

  WSALookupServiceBeginW

  WSALookupServiceNextW

  WSALookupServiceEnd

  getaddrinfo

  freeaddrinfo

  WSASocketW

  WSCEnumProtocols

  recvfrom

  sendto

  WSASetEvent

  WSAWaitForMultipleEvents

  secur32

  AcquireCredentialsHandleW

  FreeContextBuffer

  DeleteSecurityContext

  AcquireCredentialsHandleA

  InitializeSecurityContextA

  CompleteAuthToken

  QuerySecurityPackageInfoW

  FreeCredentialsHandle

  InitializeSecurityContextW

  crypt32

  CryptExportPublicKeyInfoEx

  CryptEncodeObjectEx

  CryptDecodeObjectEx

  CryptFindOIDInfo

  CertOpenStore

  CertCloseStore

  CertDuplicateCertificateContext

  CertFreeCertificateContext

  CertAddEncodedCertificateToStore

  CertAddCertificateContextToStore

  CertAddSerializedElementToStore

  CertCompareCertificateName

  CertGetPublicKeyLength

  CryptHashCertificate

  CertFindExtension

  CertRDNValueToStrW

  CertSetCertificateContextProperty

  CertFreeCertificateChainEngine

  CertGetCertificateChain

  CertFreeCertificateChain

  CertVerifyCertificateChainPolicy

  CryptAcquireCertificatePrivateKey

  CertCreateCertificateChainEngine

  CryptSignAndEncodeCertificate

  iphlpapi

  NotifyAddrChange

  GetAdaptersAddresses

  CancelIPChangeNotify

  imm32

  ImmGetContext

  ImmDisableTextFrameService

  ImmGetIMEFileNameW

  ImmReleaseContext

  ImmAssociateContextEx

  ImmGetCompositionStringW

  ImmGetConversionStatus

  ImmSetConversionStatus

  ImmSetOpenStatus

  ImmNotifyIME

  ImmSetCompositionWindow

  ImmSetCandidateWindow

  oleacc

  CreateStdAccessibleObject

  LresultFromObject

  AccessibleObjectFromWindow

  version

  GetFileVersionInfoW

  GetFileVersionInfoSizeW

  VerQueryValueW

  usp10

  ScriptCPtoX

  ScriptXtoCP

  ScriptGetFontProperties

  ScriptFreeCache

  ScriptStringOut

  ScriptStringFree

  ScriptItemize

  ScriptShape

  ScriptLayout

  ScriptStringAnalyse

  ScriptPlace

  shlwapi

  PathFindExtensionW

  PathFindFileNameW

  PathRemoveExtensionW

  PathGetCharTypeW

  rpcrt4

  UuidCreateSequential

  UuidToStringW

  RpcStringFreeW

  Exports

  Exports

  ClearBreakpadPipeEnvironmentVariable

  ClearCrashKeyValueImpl

  CrashForException

  DumpProcess

  DumpProcessWithoutCrash

  InjectDumpForHangDebugging

  InjectDumpProcessWithoutCrash

  IsSandboxedProcess

  SetCrashKeyValueImpl

  cef_add_cross_origin_whitelist_entry

  cef_add_web_plugin_directory

  cef_add_web_plugin_path

  cef_api_hash

  cef_base64decode

  cef_base64encode

  cef_begin_tracing

  cef_binary_value_create

  cef_browser_host_create_browser

  cef_browser_host_create_browser_sync

  cef_clear_cross_origin_whitelist

  cef_clear_scheme_handler_factories

  cef_command_line_create

  cef_command_line_get_global

  cef_cookie_manager_create_manager

  cef_cookie_manager_get_global_manager

  cef_create_url

  cef_currently_on

  cef_dictionary_value_create

  cef_do_message_loop_work

  cef_drag_data_create

  cef_end_tracing

  cef_execute_process

  cef_force_web_plugin_shutdown

  cef_get_current_platform_thread_handle

  cef_get_current_platform_thread_id

  cef_get_extensions_for_mime_type

  cef_get_geolocation

  cef_get_mime_type

  cef_get_min_log_level

  cef_get_path

  cef_get_vlog_level

  cef_initialize

  cef_is_web_plugin_unstable

  cef_launch_process

  cef_list_value_create

  cef_log

  cef_now_from_system_trace_time

  cef_parse_url

  cef_post_data_create

  cef_post_data_element_create

  cef_post_delayed_task

  cef_post_task

  cef_print_settings_create

  cef_process_message_create

  cef_quit_message_loop

  cef_refresh_web_plugins

  cef_register_extension

  cef_register_scheme_handler_factory

  cef_register_web_plugin_crash

  cef_remove_cross_origin_whitelist_entry

  cef_remove_web_plugin_path

  cef_request_context_create_context

  cef_request_context_get_global_context

  cef_request_create

  cef_response_create

  cef_run_message_loop

  cef_set_osmodal_loop

  cef_shutdown

  cef_stream_reader_create_for_data

  cef_stream_reader_create_for_file

  cef_stream_reader_create_for_handler

  cef_stream_writer_create_for_file

  cef_stream_writer_create_for_handler

  cef_string_ascii_to_utf16

  cef_string_ascii_to_wide

  cef_string_list_alloc

  cef_string_list_append

  cef_string_list_clear

  cef_string_list_copy

  cef_string_list_free

  cef_string_list_size

  cef_string_list_value

  cef_string_map_alloc

  cef_string_map_append

  cef_string_map_clear

  cef_string_map_find

  cef_string_map_free

  cef_string_map_key

  cef_string_map_size

  cef_string_map_value

  cef_string_multimap_alloc

  cef_string_multimap_append

  cef_string_multimap_clear

  cef_string_multimap_enumerate

  cef_string_multimap_find_count

  cef_string_multimap_free

  cef_string_multimap_key

  cef_string_multimap_size

  cef_string_multimap_value

  cef_string_userfree_utf16_alloc

  cef_string_userfree_utf16_free

  cef_string_userfree_utf8_alloc

  cef_string_userfree_utf8_free

  cef_string_userfree_wide_alloc

  cef_string_userfree_wide_free

  cef_string_utf16_clear

  cef_string_utf16_cmp

  cef_string_utf16_set

  cef_string_utf16_to_utf8

  cef_string_utf16_to_wide

  cef_string_utf8_clear

  cef_string_utf8_cmp

  cef_string_utf8_set

  cef_string_utf8_to_utf16

  cef_string_utf8_to_wide

  cef_string_wide_clear

  cef_string_wide_cmp

  cef_string_wide_set

  cef_string_wide_to_utf16

  cef_string_wide_to_utf8

  cef_task_runner_get_for_current_thread

  cef_task_runner_get_for_thread

  cef_time_delta

  cef_time_from_doublet

  cef_time_from_timet

  cef_time_now

  cef_time_to_doublet

  cef_time_to_timet

  cef_trace_counter

  cef_trace_counter_id

  cef_trace_event_async_begin

  cef_trace_event_async_end

  cef_trace_event_async_step_into

  cef_trace_event_async_step_past

  cef_trace_event_begin

  cef_trace_event_end

  cef_trace_event_instant

  cef_unregister_internal_web_plugin

  cef_uridecode

  cef_uriencode

  cef_urlrequest_create

  cef_v8context_get_current_context

  cef_v8context_get_entered_context

  cef_v8context_in_context

  cef_v8stack_trace_get_current

  cef_v8value_create_array

  cef_v8value_create_bool

  cef_v8value_create_date

  cef_v8value_create_double

  cef_v8value_create_function

  cef_v8value_create_int

  cef_v8value_create_null

  cef_v8value_create_object

  cef_v8value_create_string

  cef_v8value_create_uint

  cef_v8value_create_undefined

  cef_version_info

  cef_visit_web_plugin_info

  cef_xml_reader_create

  cef_zip_reader_create

  Sections

  .text

  Size: 32.2MB - Virtual size: 32.2MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 5.6MB - Virtual size: 5.6MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 153KB - Virtual size: 578KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .tls

  Size: 512B - Virtual size: 2B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  _RDATA

  Size: 7KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rodata

  Size: 4KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 287KB - Virtual size: 287KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1.1MB - Virtual size: 1.1MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• locales/en-US.pak
• locales/zh-CN.pak
• locales/zh-TW.pak
• uninst.exe

  .exe windows:4 windows x86 arch:x86

  7fa974366048f9c551ef45714595665e

  
  

  Code Sign

  ba:63:51:76:be:a6:aa:a6:d8:97:38:27:04:20:99:9f:e5:15:5e:84

  Signer

  Actual PE Digest

  ba:63:51:76:be:a6:aa:a6:d8:97:38:27:04:20:99:9f:e5:15:5e:84

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  CompareFileTime

  SearchPathA

  GetShortPathNameA

  GetFullPathNameA

  MoveFileA

  SetCurrentDirectoryA

  GetFileAttributesA

  GetLastError

  CreateDirectoryA

  SetFileAttributesA

  Sleep

  GetTickCount

  GetFileSize

  GetModuleFileNameA

  GetCurrentProcess

  CopyFileA

  ExitProcess

  GetWindowsDirectoryA

  SetFileTime

  GetCommandLineA

  SetErrorMode

  LoadLibraryA

  lstrcpynA

  GetDiskFreeSpaceA

  GlobalUnlock

  GlobalLock

  CreateThread

  CreateProcessA

  RemoveDirectoryA

  CreateFileA

  GetTempFileNameA

  lstrlenA

  lstrcatA

  GetSystemDirectoryA

  GetVersion

  CloseHandle

  lstrcmpiA

  lstrcmpA

  ExpandEnvironmentStringsA

  GlobalFree

  GlobalAlloc

  WaitForSingleObject

  GetExitCodeProcess

  GetModuleHandleA

  LoadLibraryExA

  GetProcAddress

  FreeLibrary

  MultiByteToWideChar

  WritePrivateProfileStringA

  GetPrivateProfileStringA

  WriteFile

  ReadFile

  MulDiv

  SetFilePointer

  FindClose

  FindNextFileA

  FindFirstFileA

  DeleteFileA

  GetTempPathA

  user32

  EndDialog

  ScreenToClient

  GetWindowRect

  EnableMenuItem

  GetSystemMenu

  SetClassLongA

  IsWindowEnabled

  SetWindowPos

  GetSysColor

  GetWindowLongA

  SetCursor

  LoadCursorA

  CheckDlgButton

  GetMessagePos

  LoadBitmapA

  CallWindowProcA

  IsWindowVisible

  CloseClipboard

  SetClipboardData

  EmptyClipboard

  RegisterClassA

  TrackPopupMenu

  AppendMenuA

  CreatePopupMenu

  GetSystemMetrics

  SetDlgItemTextA

  GetDlgItemTextA

  MessageBoxIndirectA

  CharPrevA

  DispatchMessageA

  PeekMessageA

  DestroyWindow

  CreateDialogParamA

  SetTimer

  SetWindowTextA

  PostQuitMessage

  SetForegroundWindow

  wsprintfA

  SendMessageTimeoutA

  FindWindowExA

  SystemParametersInfoA

  CreateWindowExA

  GetClassInfoA

  DialogBoxParamA

  CharNextA

  OpenClipboard

  ExitWindowsEx

  IsWindow

  GetDlgItem

  SetWindowLongA

  LoadImageA

  GetDC

  EnableWindow

  InvalidateRect

  SendMessageA

  DefWindowProcA

  BeginPaint

  GetClientRect

  FillRect

  DrawTextA

  EndPaint

  ShowWindow

  gdi32

  SetBkColor

  GetDeviceCaps

  DeleteObject

  CreateBrushIndirect

  CreateFontIndirectA

  SetBkMode

  SetTextColor

  SelectObject

  shell32

  SHGetPathFromIDListA

  SHBrowseForFolderA

  SHGetFileInfoA

  ShellExecuteA

  SHFileOperationA

  SHGetSpecialFolderLocation

  advapi32

  RegQueryValueExA

  RegSetValueExA

  RegEnumKeyA

  RegEnumValueA

  RegOpenKeyExA

  RegDeleteKeyA

  RegDeleteValueA

  RegCloseKey

  RegCreateKeyExA

  comctl32

  ImageList_AddMasked

  ImageList_Destroy

  ord17

  ImageList_Create

  ole32

  CoTaskMemFree

  OleInitialize

  OleUninitialize

  CoCreateInstance

  version

  GetFileVersionInfoSizeA

  GetFileVersionInfoA

  VerQueryValueA

  Sections

  .text

  Size: 23KB - Virtual size: 23KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 5KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1024B - Virtual size: 151KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .ndata

  Size: - Virtual size: 104KB

  IMAGE_SCN_CNT_UNINITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 284KB - Virtual size: 283KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• $PLUGINSDIR/BgWorker.dll

  .dll windows:4 windows x86 arch:x86

  db2755f409b81c4dbfc04f648cfb80b9

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  kernel32

  lstrcmpiA

  GetModuleHandleA

  CloseHandle

  SetThreadPriority

  CreateThread

  user32

  IsWindowUnicode

  PostMessageA

  DispatchMessageA

  TranslateMessage

  PeekMessageA

  MsgWaitForMultipleObjects

  Exports

  Exports

  CallAndWait

  Sections

  .text

  Size: 1024B - Virtual size: 987B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 66B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• $PLUGINSDIR/FindProcDLL.dll

  .dll windows:4 windows x86 arch:x86

  8df26927f8978d4eb40ff179c0aa961b

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  kernel32

  GetProcAddress

  lstrcmpA

  OpenProcess

  lstrcpyA

  LoadLibraryA

  CloseHandle

  FreeLibrary

  GetVersionExA

  lstrlenA

  GlobalFree

  user32

  wsprintfA

  Exports

  Exports

  FindProc

  Sections

  .text

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .reloc

  Size: 512B - Virtual size: 104B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• $PLUGINSDIR/KillProcDLL.dll

  .dll windows:4 windows x86 arch:x86

  153027ec3b10bcea606b777657dd3402

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  kernel32

  GetVersionExA

  TerminateProcess

  OpenProcess

  LoadLibraryA

  CloseHandle

  GetProcAddress

  FreeLibrary

  GlobalFree

  lstrcpyA

  DisableThreadLibraryCalls

  msvcrt

  strcmp

  _strupr

  toupper

  strlen

  free

  _initterm

  malloc

  _adjust_fdiv

  strcpy

  _itoa

  Exports

  Exports

  KillProc

  Sections

  .text

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .reloc

  Size: 512B - Virtual size: 172B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• $PLUGINSDIR/SkinBtn.dll

  .dll windows:4 windows x86 arch:x86

  baf2d405231cd43dae48df474a521d01

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  kernel32

  lstrcmpiA

  GlobalAlloc

  lstrcpynA

  GetModuleHandleA

  GlobalFree

  user32

  InvalidateRect

  GetParent

  SetWindowLongA

  CallWindowProcA

  GetPropA

  SendMessageA

  DrawTextA

  DrawStateA

  LoadImageA

  RemovePropA

  GetWindowLongA

  SetPropA

  gdi32

  GetObjectA

  CreateCompatibleDC

  DeleteObject

  SelectObject

  DeleteDC

  SetBkMode

  msimg32

  TransparentBlt

  comctl32

  _TrackMouseEvent

  Exports

  Exports

  Init

  Set

  onClick

  Sections

  .text

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 1024B - Virtual size: 947B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 24B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .reloc

  Size: 512B - Virtual size: 284B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• $PLUGINSDIR/SkinProgress.dll

  .dll windows:4 windows x86 arch:x86

  df38729be926f91d3390389029adf53b

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  kernel32

  lstrcpyA

  GlobalAlloc

  GlobalFree

  GetModuleHandleA

  user32

  GetWindowRect

  BeginPaint

  GetWindowDC

  CallWindowProcA

  ReleaseDC

  EndPaint

  GetWindowLongA

  GetPropA

  SetPropA

  SetWindowLongA

  RemovePropA

  LoadImageA

  SendMessageA

  gdi32

  DeleteDC

  BitBlt

  CreateCompatibleBitmap

  StretchBlt

  SelectObject

  CreateCompatibleDC

  GetObjectA

  DeleteObject

  Exports

  Exports

  Set

  Sections

  .text

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 1024B - Virtual size: 797B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 16B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .reloc

  Size: 512B - Virtual size: 254B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• $PLUGINSDIR/System.dll

  .dll windows:4 windows x86 arch:x86

  2017f2acbdaa42ab3e4adeb8b4c37e7b

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  kernel32

  GlobalAlloc

  GlobalFree

  GlobalSize

  GetLastError

  lstrcpyA

  lstrcpynA

  FreeLibrary

  lstrcatA

  GetProcAddress

  LoadLibraryA

  GetModuleHandleA

  MultiByteToWideChar

  lstrlenA

  WideCharToMultiByte

  VirtualAlloc

  VirtualProtect

  user32

  wsprintfA

  ole32

  StringFromGUID2

  CLSIDFromString

  Exports

  Exports

  Alloc

  Call

  Copy

  Free

  Get

  Int64Op

  Store

  Sections

  .text

  Size: 7KB - Virtual size: 7KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 1024B - Virtual size: 784B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 100B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .reloc

  Size: 1024B - Virtual size: 520B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• $PLUGINSDIR/WndProc.dll

  .dll windows:4 windows x86 arch:x86

  b3f659d7637a91b4fec12ff9b930080d

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  kernel32

  GlobalFree

  lstrcpyA

  GlobalAlloc

  user32

  CallWindowProcA

  SetWindowLongA

  GetPropA

  SetPropA

  wsprintfA

  Exports

  Exports

  onCallback

  Sections

  .text

  Size: 1024B - Virtual size: 934B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 512B - Virtual size: 377B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 20B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .reloc

  Size: 512B - Virtual size: 284B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• $PLUGINSDIR/btn_cancel.bmp
• $PLUGINSDIR/btn_close.bmp
• $PLUGINSDIR/btn_keepon.bmp
• $PLUGINSDIR/btn_ok.bmp
• $PLUGINSDIR/inetc.dll

  .dll windows:4 windows x86 arch:x86

  7cf91a4dff621e722d277a0a1f47b189

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  msvcrt

  _mbschr

  _adjust_fdiv

  malloc

  _initterm

  free

  strlen

  strchr

  strrchr

  _mbsrchr

  strtoul

  memset

  _mbsstr

  strtol

  kernel32

  GlobalFree

  CreateThread

  WaitForSingleObject

  TerminateThread

  GetModuleHandleA

  MulDiv

  lstrcpyA

  GlobalAlloc

  LoadLibraryA

  GetProcAddress

  lstrcmpiA

  CreateFileA

  GetFileSize

  lstrlenA

  WriteFile

  ReadFile

  lstrcmpA

  lstrcpynA

  lstrcatA

  GetLastError

  DeleteFileA

  CloseHandle

  SleepEx

  SetFilePointer

  GetTickCount

  user32

  MessageBoxA

  GetParent

  ShowWindow

  SendMessageA

  IsWindow

  SetWindowLongA

  GetWindowLongA

  SetWindowTextA

  GetDlgItem

  PostMessageA

  GetWindowTextA

  SetDlgItemTextA

  SetWindowPos

  SystemParametersInfoA

  GetClientRect

  GetWindowRect

  SetTimer

  LoadIconA

  UpdateWindow

  DestroyWindow

  KillTimer

  RedrawWindow

  DispatchMessageA

  TranslateMessage

  GetMessageA

  IsDialogMessageA

  IsWindowVisible

  EnableWindow

  CreateDialogParamA

  FindWindowExA

  wsprintfA

  SendDlgItemMessageA

  wininet

  HttpSendRequestA

  HttpSendRequestExA

  HttpQueryInfoA

  FtpCreateDirectoryA

  FtpOpenFileA

  InternetGetLastResponseInfoA

  InternetSetFilePointer

  InternetSetOptionA

  InternetQueryOptionA

  InternetCloseHandle

  InternetErrorDlg

  HttpOpenRequestA

  HttpAddRequestHeadersA

  HttpEndRequestA

  InternetConnectA

  InternetCrackUrlA

  InternetOpenA

  InternetReadFile

  InternetWriteFile

  comctl32

  ord17

  Exports

  Exports

  get

  head

  post

  put

  Sections

  .text

  Size: 11KB - Virtual size: 11KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 2KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• $PLUGINSDIR/loading1.bmp
• $PLUGINSDIR/loading2.bmp
• $PLUGINSDIR/nsDialogs.dll

  .dll windows:4 windows x86 arch:x86

  1e2884056e655f2b7bc5a904e352fc80

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  kernel32

  lstrcpyA

  GetFileAttributesA

  lstrcmpiA

  MulDiv

  lstrlenA

  HeapFree

  GetCurrentDirectoryA

  HeapAlloc

  HeapReAlloc

  GlobalFree

  lstrcpynA

  GlobalAlloc

  GetProcessHeap

  SetCurrentDirectoryA

  user32

  GetPropA

  DestroyWindow

  CallWindowProcA

  SetCursor

  LoadCursorA

  RemovePropA

  CharPrevA

  GetWindowLongA

  DrawTextA

  GetWindowTextA

  GetDlgItem

  SetWindowLongA

  SetWindowPos

  CreateDialogParamA

  MapWindowPoints

  GetWindowRect

  SetPropA

  CreateWindowExA

  IsWindow

  SetTimer

  KillTimer

  DispatchMessageA

  TranslateMessage

  GetMessageA

  IsDialogMessageA

  ShowWindow

  wsprintfA

  MapDialogRect

  GetClientRect

  CharNextA

  SendMessageA

  DrawFocusRect

  gdi32

  SetTextColor

  shell32

  SHBrowseForFolderA

  SHGetPathFromIDListA

  comdlg32

  GetSaveFileNameA

  GetOpenFileNameA

  CommDlgExtendedError

  ole32

  CoTaskMemFree

  Exports

  Exports

  Create

  CreateControl

  CreateItem

  CreateTimer

  GetUserData

  KillTimer

  OnBack

  OnChange

  OnClick

  OnNotify

  SelectFileDialog

  SelectFolderDialog

  SetRTL

  SetUserData

  Show

  Sections

  .text

  Size: 4KB - Virtual size: 4KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 512B - Virtual size: 152B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1024B - Virtual size: 572B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• $PLUGINSDIR/unbg.bmp
• $PLUGINSDIR/uninstall1.bmp
• $PLUGINSDIR/uninstall2.bmp
• $PLUGINSDIR/uninstall3.bmp