5b2b679a4ccb40b5d4e4a5027197db33_JaffaCakes118

resource	yara_rule
static1/unpack001/docs/PCSX2_FAQ_0.9.8.pdf	pdf_with_link_action
static1/unpack001/docs/PCSX2_Readme_0.9.8.pdf	pdf_with_link_action

resource
5b2b679a4ccb40b5d4e4a5027197db33_JaffaCakes118
unpack001/$PLUGINSDIR/InstallOptions.dll
unpack001/$PLUGINSDIR/nsDialogs.dll
unpack003/$PLUGINSDIR/ButtonEvent.dll
unpack003/$PLUGINSDIR/ExecCmd.dll
unpack003/$PLUGINSDIR/ExecDos.dll
unpack003/$PLUGINSDIR/FindProcDLL.dll
unpack003/$PLUGINSDIR/InstallOptions.dll
unpack003/$PLUGINSDIR/KillProcDLL.dll
unpack003/$PLUGINSDIR/NSISArray.dll
unpack003/$PLUGINSDIR/NSISdl.dll
unpack003/$PLUGINSDIR/SelfDel.dll
unpack003/$PLUGINSDIR/ShellLink.dll
unpack003/$PLUGINSDIR/System.dll
unpack003/$PLUGINSDIR/md5dll.dll
unpack003/$PLUGINSDIR/nsisXML.dll
unpack003/$PLUGINSDIR/time.dll
unpack003/$SYSDIR/$SYSDIR/Funshion.scr
unpack003/$TEMP/$SYSDIR/Funshion.scr
unpack003/CoreAAC.ax
unpack003/atrc.dll
unpack003/cook.dll
unpack003/coreavc.ax
unpack003/drvc.dll
unpack003/pncrt.dll
unpack003/pndx5032.dll
unpack003/ttv.dll
unpack001/SDL.dll
unpack001/cg.dll
unpack001/cgGL.dll
unpack001/glew32.dll
unpack001/glut32.dll
unpack001/pcsx2-wx.exe
unpack001/plugins/CDVDiso.dll
unpack001/plugins/CDVDnull.dll
unpack001/plugins/CDVDolio.dll
unpack001/plugins/DEV9null.dll
unpack001/plugins/FWnull.dll
unpack001/plugins/GSdx32-AVX.dll
unpack001/plugins/GSdx32-SSE2.dll
unpack001/plugins/GSdx32-SSE4.dll
unpack001/plugins/GSdx32-SSSE3.dll
unpack001/plugins/GSdx32_Shade-AVX.dll
unpack001/plugins/GSdx32_Shade-SSE2.dll
unpack001/plugins/GSdx32_Shade-SSE4.dll
unpack001/plugins/GSdx32_Shade-SSSE3.dll
unpack001/plugins/GSdx_CUDA.dll
unpack001/plugins/GSdxv.dll
unpack001/plugins/GSnull.dll
unpack001/plugins/LilyPad.dll
unpack001/plugins/MegaPad.dll
unpack001/plugins/PadSSSPSX.dll
unpack001/plugins/Padnull.dll
unpack001/plugins/SPU2-X.dll
unpack001/plugins/SPU2null.dll
unpack001/plugins/USBnull.dll
unpack001/plugins/USBqemu.dll
unpack001/plugins/ZZOgl.dll
unpack001/plugins/ZeroGS.dll
unpack001/plugins/ZeroSPU2.dll
unpack001/plugins/cdvdGigaherz.dll
unpack001/plugins/cdvdPeops.dll
unpack001/plugins/spu2PeopsSound.dll
unpack001/uninst.exe
unpack001/w32pthreads.v4.dll

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2
static1/unpack001/Baidu-Toolbar.exe	nsis_installer_1
static1/unpack001/FunshionInstall_C139918.exe	nsis_installer_1
static1/unpack001/FunshionInstall_C139918.exe	nsis_installer_2
static1/unpack001/uninst.exe	nsis_installer_1
static1/unpack001/uninst.exe	nsis_installer_2

IMPHASH 7fa974366048f9c551ef45714595665e
SHA256 0729e0eb92d932d70e280fbb187fa0ed913d8ca2b7064d29573cec52f73d61c1
MD5 5b2b679a4ccb40b5d4e4a5027197db33
SHA1 f26e82d6c5d9713f82c6cf72dd229009d1570aa0
SHA512 744f12c1f6997c57650918d99e037862475573f64c399b74f174dbd6fc4c8d2d762e6dde528fc30120a5b674c92dc6aa8fbf44fcfd67c213da200d556fd0941b
SSDEEP 393216:bxF6Eeib2BDlGs3smI/rH9VbzX3NydzHQC4UjTcNSUejwdEppXxjEfWFItQDEZ:l4Ehb21lGpTz3IdzHNdvtRkEpjPIO2
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

12624

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA Sleep GetTickCount GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess GetWindowsDirectoryA SetFileTime GetCommandLineA SetErrorMode LoadLibraryA lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA CreateFileA GetTempFileNameA lstrlenA lstrcatA GetSystemDirectoryA GetVersion CloseHandle lstrcmpiA lstrcmpA ExpandEnvironmentStringsA GlobalFree GlobalAlloc WaitForSingleObject GetExitCodeProcess GetModuleHandleA LoadLibraryExA GetProcAddress FreeLibrary MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA WriteFile ReadFile MulDiv SetFilePointer FindClose FindNextFileA FindFirstFileA DeleteFileA GetTempPathA

user32

EndDialog ScreenToClient GetWindowRect EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard RegisterClassA TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA DestroyWindow CreateDialogParamA SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow wsprintfA SendMessageTimeoutA FindWindowExA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA OpenClipboard ExitWindowsEx IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint ShowWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor SelectObject

shell32

SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA SHGetSpecialFolderLocation

advapi32

RegQueryValueExA RegSetValueExA RegEnumKeyA RegEnumValueA RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegCloseKey RegCreateKeyExA

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

$PLUGINSDIR/InstallOptions.dll

IMPHASH b1cd0d78f652ce5fc63f0879371af012
SHA256 8e287326f1cdd5ef2dcd7a72537c68cbe4299ceb1f820707c5820f3aa6d8206c
MD5 0dc0cc7a6d9db685bf05a7e5f3ea4781
SHA1 5d8b6268eeec9d8d904bc9d988a4b588b392213f
SHA512 814dd17ebb434f4a3356f716c783ab7f569f9ee34ce5274fa50392526925f044798f8006198ac7afe3d1c2ca83a2ca8c472ca53fec5f12bbfbbe0707abacd6b0
SSDEEP 192:n6d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jPK72dwF7dBEnbok:n6UdHXcIiY535zBt2jP+BEnbo
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10696

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

SetCurrentDirectoryA GetCurrentDirectoryA MultiByteToWideChar GetPrivateProfileIntA GlobalLock GetModuleHandleA lstrcmpiA GetPrivateProfileStringA lstrcatA lstrcpynA WritePrivateProfileStringA lstrlenA lstrcpyA GlobalFree GlobalUnlock GlobalAlloc

user32

MapWindowPoints GetDlgCtrlID CloseClipboard GetClipboardData OpenClipboard PtInRect SetWindowRgn LoadIconA LoadImageA SetWindowLongA CreateWindowExA MapDialogRect SetWindowPos GetWindowRect CreateDialogParamA ShowWindow EnableMenuItem GetSystemMenu EnableWindow GetDlgItem DestroyIcon DestroyWindow DispatchMessageA TranslateMessage GetMessageA IsDialogMessageA LoadCursorA SetCursor DrawTextA GetWindowLongA DrawFocusRect CallWindowProcA PostMessageA MessageBoxA CharNextA wsprintfA GetWindowTextA SetWindowTextA SendMessageA GetClientRect

gdi32

SetTextColor CreateCompatibleDC GetObjectA GetDIBits CreateRectRgn CombineRgn DeleteObject SelectObject

shell32

SHBrowseForFolderA SHGetDesktopFolder SHGetPathFromIDListA ShellExecuteA

comdlg32

GetOpenFileNameA GetSaveFileNameA CommDlgExtendedError

ole32

CoTaskMemFree

$PLUGINSDIR/ioSpecial.ini

SHA256 d95aed234f932a1c48a2b1b0d98c60ca31f962310c03158e2884ab4ddd3ea1e0
MD5 e2d5070bc28db1ac745613689ff86067
SHA1 282e080b4cf847174c5c11e4f9157b8c338ecb19
SHA512 a50ca2014869629135b54e848f03cb4983ad8029cd811300d02b0fc54de0436185f418fea4d3db888eb0f3170e33a59d486aa885f024ab29e630e9bc0ae1a2de
MD5 SHA1 SHA512

NSIS installer

installer

$PLUGINSDIR/modern-wizard.bmp

SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
MD5 cbe40fd2b1ec96daedc65da172d90022
SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/nsDialogs.dll

IMPHASH 1e2884056e655f2b7bc5a904e352fc80
SHA256 3d0060c5c9400a487dbefe4ac132dd96b07d3a4ba3badab46a7410a667c93457
MD5 ab73c0c2a23f913eabdc4cb24b75cbad
SHA1 6569d2863d54c88dcf57c843fc310f6d9571a41e
SHA512 99d287b5152944f64edc7ce8f3ebcd294699e54a5b42ac7a88e27dff8a68278a5429f4d299802ee7ddbe290f1e3b6a372a5f3bb4ecb1a3c32e384bca3ccdb2b8
SSDEEP 96:EBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4MndY7ndS27gA:E6n+0SAfRE+/8ZYxldqn420
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

7410

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Baidu-Toolbar.exe

IMPHASH 73b73e00f465fa1a2a3bf6377a40219b
SHA256 7e820a3ada595e36d8a7aa2ead221e4b2c01c94373da3f124187f737f26d407d
MD5 431f0248ae5fb41cabd1414bcfdc4db7
SHA1 5aaa02739966150c2b1874f05315bac87328ab47
SHA512 a18bc8ca65a62cc6b2514ea46fcdbf20493dd2207c8118a090ce34e34db062081847f165c6023f9936ace982c37472732831891fd4880061564c46ef167e8b2a
SSDEEP 24576:7I8annBgN7uOmcd91KEblRD5GJ8AIljY9SB7Kv5FZJNgA:7xanKw/QyYsJ8FlsQBGvTHGA
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

N/A

Digest Algorithm

N/A

PE Digests Matches

Not matched

Trusted

Not trusted

Minor OS version

0

Major OS version

4

Entry point

13011

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFileTime CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA Sleep CreateFileA GetFileSize GetModuleFileNameA GetTickCount GetCurrentProcess CopyFileA ExitProcess lstrcpynA CloseHandle GetWindowsDirectoryA GetTempPathA GetUserDefaultLangID GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA GetTempFileNameA SetEndOfFile UnmapViewOfFile MapViewOfFile CreateFileMappingA lstrcpyA lstrlenA lstrcatA GetSystemDirectoryA lstrcmpiA GetEnvironmentVariableA ExpandEnvironmentStringsA GlobalFree GlobalAlloc WaitForSingleObject GetExitCodeProcess SetErrorMode GetModuleHandleA LoadLibraryA GetProcAddress FreeLibrary MultiByteToWideChar WritePrivateProfileStringA MulDiv GetPrivateProfileStringA WriteFile ReadFile SetFilePointer FindClose FindNextFileA FindFirstFileA DeleteFileA GetCommandLineA

user32

ScreenToClient GetWindowRect SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA LoadCursorA SetCursor CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard EndDialog AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxA CharPrevA DispatchMessageA PeekMessageA CreateDialogParamA DestroyWindow SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow ShowWindow wsprintfA SendMessageTimeoutA RegisterClassA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA TrackPopupMenu ExitWindowsEx IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint FindWindowExA

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor SelectObject

shell32

SHGetMalloc SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA SHGetSpecialFolderLocation

advapi32

RegQueryValueExA RegSetValueExA RegEnumKeyA RegEnumValueA RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegCloseKey RegCreateKeyExA

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

$PROGRAM_FILES/Baidu/Toolbar/BaiduBarX_Tmp/BaiduBarX.dll

IMPHASH 8468b88eb97c7ed8e903637ad8f51134
SHA256 3fa7b750c18fbc761feaf3c738c0804ea8f02969b73764082b94ff7f60ce13b5
MD5 3c2b8a41a1706ca9aa5efc33defaf7cc
SHA1 d9f8608170901445f69585dbc7d07d3d205e987e
SHA512 9704f399f9beb80d3e91cb8f0bd018351ff031c0fb390ef3d4fdb7b90faf9f0993d49579f8ccafa7e3480f502c1594021f72e1d990327e72e6aa01ecbbd9277c
SSDEEP 49152:KY470bLUv62Xa2mXExRCZfETFPSHAnUWTOeKDF7ssT9F:f470bLUv62Xa2jxR2cXq
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

N/A

Digest Algorithm

N/A

PE Digests Matches

Not matched

Trusted

Not trusted

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Serial Number

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

May 21, 2009 - May 20, 2019

Subject

CN=Baidu Online Network Technology (Beijing) Co.\, Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Baidu Online Network Technology (Beijing) Co.\, Ltd.,L=Beijing,ST=Beijing,C=CN

Serial Number

65:16:5e:50:24:9f:f6:ad:03:9d:77:06:ec:59:bf:8d

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 31, 2009 - Jul 30, 2012

Minor OS version

0

Major OS version

4

Entry point

1081640

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\cygwin\home\scmpf\compiler_src\lizhengwei_253236_win32\app\gensoft\bar\toolbar\chinese_unicode_release\BaiduBarX.pdb

setupapi

SetupIterateCabinetW

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

imm32

ImmReleaseContext ImmGetContext ImmGetCompositionStringW

shlwapi

PathFindFileNameW SHDeleteKeyW SHSetValueW SHGetValueW PathRemoveExtensionW PathFileExistsW SHDeleteValueW UrlCombineW StrCpyW PathIsDirectoryA PathRemoveFileSpecA StrCmpIW StrStrIW UrlUnescapeA UrlCanonicalizeW StrRetToStrW StrRetToStrA UrlEscapeW SHCopyKeyW UrlUnescapeW PathIsDirectoryW PathRemoveFileSpecW

wininet

InternetQueryOptionW InternetCrackUrlW FindFirstUrlCacheGroup DeleteUrlCacheGroup FindNextUrlCacheGroup FindCloseUrlCache FindFirstUrlCacheEntryW FindNextUrlCacheEntryW InternetOpenUrlW InternetGetCookieW HttpSendRequestExW HttpEndRequestW InternetGetConnectedState InternetOpenA InternetSetOptionA InternetQueryDataAvailable HttpOpenRequestA HttpAddRequestHeadersA HttpSendRequestExA InternetWriteFile HttpEndRequestA InternetSetCookieW DeleteUrlCacheEntryW HttpQueryInfoW InternetOpenW InternetSetOptionW InternetConnectW HttpOpenRequestW HttpAddRequestHeadersW HttpSendRequestW InternetReadFile InternetCloseHandle GetUrlCacheEntryInfoW InternetCanonicalizeUrlW InternetConnectA

urlmon

URLDownloadToFileW CoInternetGetSession

rpcrt4

UuidCreate

iphlpapi

GetNetworkParams GetAdaptersInfo

ws2_32

gethostbyname gethostname

kernel32

InterlockedDecrement lstrlenW lstrlenA DebugBreak OutputDebugStringW GetModuleHandleA GetModuleHandleW GetProcAddress GetFileAttributesW GetVersion RaiseException EnterCriticalSection LeaveCriticalSection InitializeCriticalSection DeleteCriticalSection LoadLibraryW GetLastError SetLastError GetModuleFileNameW OutputDebugStringA GetCurrentThreadId InterlockedIncrement CreateProcessW WideCharToMultiByte CreateDirectoryW GetTempPathW CreateFileW CloseHandle WriteFile GlobalReAlloc GlobalUnlock GlobalLock GlobalAlloc WaitForSingleObject CreateMutexW ReleaseMutex DeleteFileW ResumeThread SetThreadPriority SizeofResource LockResource LoadResource FindResourceW LocalFree FreeLibrary lstrcmpiW TryEnterCriticalSection LoadLibraryExW MultiByteToWideChar IsProcessorFeaturePresent GetVersionExW LoadLibraryA CopyFileW DeviceIoControl GetSystemDirectoryW GetPrivateProfileStringW GetTickCount GetACP CompareStringW GetCurrentProcessId FindClose FindNextFileW FindFirstFileW TerminateThread GetExitCodeThread OpenMutexW GetFullPathNameW GlobalFree MulDiv RemoveDirectoryW Sleep ReadFile GetFileSize Thread32Next SuspendThread OpenThread Thread32First CreateToolhelp32Snapshot UnmapViewOfFile SetUnhandledExceptionFilter MapViewOfFile CreateFileMappingW TerminateProcess OpenProcess SwitchToThread GetCommandLineW GetCurrentProcess GetPrivateProfileIntW Process32NextW Process32FirstW WritePrivateProfileStringW TlsAlloc TlsFree TlsGetValue TlsSetValue SetFileAttributesW lstrcmpW HeapFree HeapAlloc GetProcessHeap GetEnvironmentVariableW GlobalSize MoveFileExW SetErrorMode FreeResource GetShortPathNameW InterlockedExchange ReadProcessMemory SetFilePointer lstrcatW lstrcpyW GetTempFileNameW GetSystemTime VirtualFree VirtualAlloc RtlUnwind UnhandledExceptionFilter IsDebuggerPresent HeapReAlloc GetSystemTimeAsFileTime ExitThread CreateThread FileTimeToSystemTime FileTimeToLocalFileTime GetDriveTypeW GetFileAttributesA GetCommandLineA GetCPInfo GetOEMCP IsValidCodePage GetCurrentThread GetStdHandle GetModuleFileNameA FatalAppExitA HeapDestroy HeapCreate HeapSize ExitProcess GetConsoleCP GetConsoleMode GetCurrentDirectoryA SetCurrentDirectoryA GetTimeZoneInformation LCMapStringA LCMapStringW SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter FlushFileBuffers GetStringTypeA GetStringTypeW GetTimeFormatA GetDateFormatA GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale SetConsoleCtrlHandler GetLocaleInfoW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA SetEndOfFile GetDriveTypeA GetFullPathNameA CompareStringA FlushInstructionCache InterlockedCompareExchange ExpandEnvironmentStringsW GetVersionExA SetEnvironmentVariableA DisableThreadLibraryCalls

user32

SetWindowRgn GetMenuItemRect RemovePropW GetPropW SetPropW SetMenuItemInfoW DrawStateW TrackPopupMenuEx ModifyMenuW MessageBeep FrameRect GetMessagePos GetSystemMetrics LoadBitmapW PeekMessageW GetSubMenu CharLowerBuffA WaitForInputIdle CreateIconFromResourceEx CharNextA EqualRect SetActiveWindow ScrollWindow OpenClipboard EmptyClipboard SetClipboardData CloseClipboard CharUpperW CreateMenu InsertMenuW TrackPopupMenu MonitorFromPoint RemoveMenu AppendMenuW CreatePopupMenu SetWindowsHookExW UnhookWindowsHookEx CallNextHookEx ReleaseCapture GetSysColor SetCursor GetDlgCtrlID SetFocus SetCapture IsWindowEnabled UpdateWindow DrawFocusRect SetRectEmpty OffsetRect EnableWindow RedrawWindow GetWindowTextLengthW DrawTextW DestroyIcon GetClassLongW SetClassLongW MonitorFromRect GetMonitorInfoW CopyRect GetScrollInfo WindowFromPoint IsChild FindWindowW CharLowerBuffW ScreenToClient AdjustWindowRectEx GetCursorPos GetWindowThreadProcessId GetGUIThreadInfo GetClassNameW PtInRect MessageBoxW MoveWindow FillRect GetFocus ReleaseDC TranslateMessage DispatchMessageW InvalidateRect GetWindowTextW SetRect GetActiveWindow LoadIconW IsWindowVisible GetParent GetWindow GetWindowRect SystemParametersInfoW GetClientRect MapWindowPoints SendMessageW DialogBoxParamW DestroyMenu IsMenu GetKeyState CharLowerW CreateWindowExW GetClassInfoExW RegisterClassExW DestroyWindow LoadCursorW SetScrollInfo SetScrollPos GetSysColorBrush InsertMenuItemW GetMenuItemInfoW GetMenuItemCount EnableMenuItem DeleteMenu UpdateLayeredWindow SetForegroundWindow GetForegroundWindow AttachThreadInput CharUpperBuffW UnregisterClassA DrawIconEx GetMessageW IsIconic PostThreadMessageW FindWindowExW EnumChildWindows SendMessageA GetUpdateRect ClientToScreen GetTopWindow MenuItemFromPoint GetMenuItemID RegisterWindowMessageW IsRectEmpty GetDlgItemTextW AdjustWindowRect GetWindowDC KillTimer SetTimer PostMessageW CharNextW EndPaint BeginPaint DefWindowProcW LoadStringW SetWindowPos IsWindow GetDlgItem ShowWindow GetDC SetWindowTextW GetWindowLongW SetWindowLongW CallWindowProcW EndDialog CreateDialogParamW SetDlgItemTextW EnumWindows IsDialogMessageW InflateRect LoadImageW GetCapture

gdi32

PatBlt GetTextColor Rectangle CreateRoundRectRgn FillRgn CreateRectRgn CreateFontW CreateBitmap ExcludeClipRect GetDeviceCaps DPtoLP GetObjectW CreatePen LineTo MoveToEx SelectObject CreateCompatibleBitmap SetViewportOrgEx ExtTextOutW RestoreDC SaveDC GetCurrentObject CreateSolidBrush CreateFontIndirectW GetTextExtentPoint32W TextOutW GetPixel SetTextColor ExtCreateRegion CombineRgn SetStretchBltMode StretchBlt BitBlt CreateCompatibleDC GetClipBox GetDIBits DeleteObject GetStockObject CreateDIBSection SetBkColor SetBkMode DeleteDC

advapi32

RegQueryValueExW GetSecurityDescriptorSacl SetSecurityInfo EqualSid GetUserNameW RegSetKeySecurity RegEnumKeyW AllocateAndInitializeSid InitializeAcl AddAce InitializeSecurityDescriptor SetSecurityDescriptorDacl FreeSid RegGetKeySecurity GetTokenInformation CopySid RegCreateKeyW ConvertStringSecurityDescriptorToSecurityDescriptorW RegCloseKey RegDeleteKeyW RegDeleteValueW RegCreateKeyExW RegOpenKeyExW RegSetValueExW RegQueryInfoKeyW RegEnumKeyExW RegEnumValueW CreateProcessAsUserW SetTokenInformation GetLengthSid ConvertStringSidToSidW DuplicateTokenEx OpenProcessToken RegOpenKeyW

shell32

ShellExecuteW DuplicateIcon SHGetSpecialFolderPathW SHFileOperationW ShellExecuteExW ExtractIconW SHGetMalloc SHGetFileInfoW SHGetDesktopFolder SHGetSpecialFolderLocation SHGetFolderPathW DragQueryFileA

ole32

OleInitialize OleUninitialize GetHGlobalFromStream CreateStreamOnHGlobal OleDraw RegisterDragDrop CLSIDFromProgID RevokeDragDrop CoCreateGuid StringFromGUID2 CoTaskMemFree CoTaskMemRealloc CoTaskMemAlloc CoCreateInstance CoInitialize CoUninitialize ReleaseStgMedium

oleaut32

VariantInit VariantClear SysAllocString SysAllocStringByteLen SysStringByteLen SysAllocStringLen VarBstrCmp VariantCopy LoadTypeLi SysFreeString RegisterTypeLi VarUI4FromStr LoadRegTypeLi CreateErrorInfo VarBstrCat SafeArrayDestroy SafeArrayUnaccessData SafeArrayAccessData SafeArrayCreate UnRegisterTypeLi SysStringLen SetErrorInfo VariantChangeType GetErrorInfo

msimg32

AlphaBlend

Name

.text

Size

1.3MB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

287KB

Virtual Size

287KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

16KB

Virtual Size

29KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.Shared

Size

512B

Virtual Size

4B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

638KB

Virtual Size

638KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

86KB

Virtual Size

86KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$PROGRAM_FILES/Baidu/Toolbar/BaiduBarX_Tmp/BarBroker.exe

IMPHASH 5b79acdd9738a352787f0a927feb114d
SHA256 86eeaecc3ef104471423d3e280b26d03d95b80122e8178ab98d582115b403a06
MD5 12541c0a098a1ed1756be6d54d5fbc2c
SHA1 5ad9876ddf91ef9992a1ec83bf70becab5c3be23
SHA512 0f5d9292f3548b69d65688002554cc957b9b6b3e7179b1f0fa31fc4c134b9536378b74b6295223437d02827d97696952abac9566a8904edb2fb8cab577593c5b
SSDEEP 3072:KrOYrp3K7YIRMNaPvN1FtZb5SZiSPyuQrTBfVKWYCtvtocHxJz9WlD:cA3BXdPb5Si/uQrTBdbBt+cmD
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

N/A

Digest Algorithm

N/A

PE Digests Matches

Not matched

Trusted

Not trusted

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Serial Number

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

May 21, 2009 - May 20, 2019

Subject

CN=Baidu Online Network Technology (Beijing) Co.\, Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Baidu Online Network Technology (Beijing) Co.\, Ltd.,L=Beijing,ST=Beijing,C=CN

Serial Number

65:16:5e:50:24:9f:f6:ad:03:9d:77:06:ec:59:bf:8d

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 31, 2009 - Jul 30, 2012

Minor OS version

0

Major OS version

4

Entry point

69209

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

psapi

GetModuleFileNameExW

dbghelp

SymGetOptions SymSetOptions StackWalk SymGetModuleInfo SymFunctionTableAccess SymInitialize SymLoadModule

wininet

InternetCrackUrlW InternetCloseHandle InternetOpenA InternetSetOptionA InternetConnectA HttpOpenRequestA HttpAddRequestHeadersA HttpSendRequestExA InternetWriteFile HttpEndRequestA

kernel32

GetStringTypeW GetStringTypeA FlushFileBuffers GetSystemTimeAsFileTime GetTickCount QueryPerformanceCounter GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA LCMapStringW LCMapStringA GetStartupInfoA GetFileType SetHandleCount LocalFree InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection FreeLibrary GetProcAddress LoadLibraryW CloseHandle WaitForSingleObject WideCharToMultiByte lstrlenW RaiseException GetLastError InterlockedDecrement lstrcmpiW SetEvent CreateThread CreateEventW GetModuleFileNameW InterlockedIncrement lstrlenA DebugBreak OutputDebugStringW MultiByteToWideChar SizeofResource LoadResource FindResourceW LoadLibraryExW GetModuleHandleW Sleep GetCurrentThreadId GetCommandLineW VirtualFreeEx CreateRemoteThread WriteProcessMemory VirtualAllocEx OpenProcess GetModuleFileNameA VirtualQueryEx UnmapViewOfFile FlushInstructionCache GetCurrentProcess MapViewOfFile CreateFileMappingW OpenThread CreateFileW DeleteFileW GetTempPathW ReadFile GetFileSize InterlockedExchange WriteFile GlobalFree GlobalAlloc GetCurrentProcessId GetVersionExW SetFilePointer GetShortPathNameW FindClose FindFirstFileW ExitProcess TlsFree TlsSetValue TlsAlloc TlsGetValue GetModuleHandleA GetStartupInfoW GetFileAttributesA GetDriveTypeW FileTimeToLocalFileTime FileTimeToSystemTime IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess HeapReAlloc RtlUnwind VirtualAlloc VirtualFree IsProcessorFeaturePresent LoadLibraryA HeapAlloc GetProcessHeap HeapFree InterlockedCompareExchange GetVersionExA GetStdHandle GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle HeapDestroy GetTimeZoneInformation CreateFileA SetEndOfFile GetDriveTypeA CompareStringA CompareStringW SetEnvironmentVariableA HeapCreate SetLastError GetConsoleCP GetConsoleMode GetFullPathNameW GetCurrentDirectoryA

user32

CharLowerBuffW LoadImageW GetParent GetWindow GetWindowRect SystemParametersInfoW GetClientRect MapWindowPoints SetWindowPos SendMessageW GetDlgItem ShowWindow GetWindowLongW GetActiveWindow DestroyWindow EndDialog DialogBoxParamW LoadStringW SetWindowLongW GetMessageW TranslateMessage DispatchMessageW CharNextW PostThreadMessageW GetSystemMetrics UnregisterClassA

advapi32

RegOpenKeyW RegQueryValueExW RegCreateKeyW OpenProcessToken GetTokenInformation AllocateAndInitializeSid EqualSid FreeSid RegEnumKeyExW RegQueryInfoKeyW RegSetValueExW RegOpenKeyExW RegCreateKeyExW RegDeleteValueW RegDeleteKeyW RegCloseKey ConvertStringSecurityDescriptorToSecurityDescriptorW

shell32

SHGetFolderPathW ShellExecuteExW

ole32

CoInitialize CoUninitialize StringFromGUID2 CoTaskMemFree CoRegisterClassObject CoRevokeClassObject CoTaskMemRealloc CoCreateInstance CoTaskMemAlloc

oleaut32

RegisterTypeLi UnRegisterTypeLi LoadTypeLi SysAllocString SysFreeString SysStringLen VarUI4FromStr

shlwapi

PathFileExistsW StrCmpNIW

$PROGRAM_FILES/Baidu/Toolbar/BaiduBarX_Tmp/rc.dll

IMPHASH d811d71710ad58776155b7a8da1fa9db
SHA256 b0b1f00b4cfebbed6772af28a7b89edd6c1786f671672cf0e476499e34dfbe33
MD5 a75aab3e55d19694dc896a17e4fe5cb4
SHA1 1d5bcdaf5bf213d22eb865f2ac90c4059c5c3e23
SHA512 da41da1bbb97548dee9aa07b0a7cbdc11804dd770b46f94f4ed15637e4f9622c3987ea04ffc0e0a54b5272524197d4fb96251a74e390cb5c1a46bfdb1343e4b1
SSDEEP 3072:MekGhjt6n+DWOWfJe7Tqu4Xg4bZdOpFRcwJIpJ4f26LTTSIxt0j27dcliVs1UGui:taj5g4bZdOpFNJ8R27dVGbdoAT
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

N/A

Digest Algorithm

N/A

PE Digests Matches

Not matched

Trusted

Not trusted

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Serial Number

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

May 21, 2009 - May 20, 2019

Subject

CN=Baidu Online Network Technology (Beijing) Co.\, Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Baidu Online Network Technology (Beijing) Co.\, Ltd.,L=Beijing,ST=Beijing,C=CN

Serial Number

65:16:5e:50:24:9f:f6:ad:03:9d:77:06:ec:59:bf:8d

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 31, 2009 - Jul 30, 2012

Minor OS version

0

Major OS version

4

Entry point

4823

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

FunshionInstall_C139918.exe

IMPHASH 099c0646ea7282d232219f8807883be0
SHA256 08e585eeb2f0526a119118891576f6a1f096592daee1bf1c7591438dfa1fc587
MD5 00bce0d1a6586b1f95d0062c6220f905
SHA1 09ca9fdb2683a4c606ed8e85b97e2e790f06e096
SHA512 6f04d0541d278e00ef708927d3644f283165aeb4110e90df3004c8e897cfc866830f42dc1719533ff04d191cc93b6c19ac393872c24bf81c5e283aa9bd6eff7f
SSDEEP 196608:g8GDgGXIVBCKRC8rIfv4VQVzwMs2sz4akPLImf+ZKD7AKv:HBVFRSfg40hF0Imf/MKv
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

b4:f3:6c:00:75:aa:bd:cf:95:d7:3a:07:f0:d8:46:50:7d:c6:a8:9b

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Beijing Funshion Online Technologies Ltd.,OU=SECURE APPLICATION DEVELOPMENT,O=Beijing Funshion Online Technologies Ltd.,L=Beijing,ST=Beijing,C=CN

Chains

Aug 9, 2012

Minor OS version

0

Major OS version

4

Entry point

12860

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA Sleep GetTickCount CreateFileA GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess SetFileTime GetTempPathA GetCommandLineA SetErrorMode LoadLibraryA lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA GetTempFileNameA lstrlenA lstrcatA GetSystemDirectoryA GetVersion CloseHandle lstrcmpiA lstrcmpA ExpandEnvironmentStringsA GlobalFree GlobalAlloc WaitForSingleObject GetExitCodeProcess GetModuleHandleA LoadLibraryExA GetProcAddress FreeLibrary MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA WriteFile ReadFile MulDiv SetFilePointer FindClose FindNextFileA FindFirstFileA DeleteFileA GetWindowsDirectoryA

user32

EndDialog ScreenToClient GetWindowRect EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard RegisterClassA TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA DestroyWindow CreateDialogParamA SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow wsprintfA SendMessageTimeoutA FindWindowExA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA OpenClipboard ExitWindowsEx IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint ShowWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor SelectObject

shell32

SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA SHGetSpecialFolderLocation

advapi32

RegQueryValueExA RegSetValueExA RegEnumKeyA RegEnumValueA RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegCloseKey RegCreateKeyExA

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

$PLUGINSDIR/ButtonEvent.dll

IMPHASH 0ece15e7d9bb35972aec701f46192460
SHA256 5d913c6be9c9e13801acc5d78b11d9f3cd42c1b3b3cad8272eb6e1bfb06730c2
MD5 fad9d09fc0267e8513b8628e767b2604
SHA1 bea76a7621c07b30ed90bedef4d608a5b9e15300
SHA512 b39c5ea8aea0640f5a32a1fc03e8c8382a621c168980b3bc5e2897932878003b2b8ef75b3ad68149c35420d652143e2ef763b6a47d84ec73621017f0273e2805
MD5 SHA1 SHA512

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

5170

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/ExecCmd.dll

IMPHASH bf44c9fb48bb8c36b3e2527e7252350d
SHA256 1f4bd9c9376fe1b6913baeca7fb6df6467126f27c9c2fe038206567232a0e244
MD5 b9380b0bea8854fd9f93cc1fda0dfeac
SHA1 edb8d58074e098f7b5f0d158abedc7fc53638618
SHA512 45c3ab0f2bce53b75e72e43bac747dc0618342a3f498be8e2eb62a6db0b137fcdb1735da83051b14824996b5287109aa831e5859d6f21f0ed21b76b3d335418c
SSDEEP 48:ifXNtGNjFizsU35iej7luiwa28mDJmDKUOMQH0glay/Aa4r/:5Fef5iej5txKJKenlV4r/
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

5433

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/ExecDos.dll

IMPHASH 2dfc6a992d004b736e85c64219a88b4a
SHA256 69ac56d2fdf3c71b766d3cc49b33b36f1287cc2503310811017467dfcb455926
MD5 a7cd6206240484c8436c66afb12bdfbf
SHA1 0bb3e24a7eb0a9e5a8eae06b1c6e7551a7ec9919
SHA512 b9ee7803301e50a8ec20ab3f87eb9e509ea24d11a69e90005f30c1666acc4ed0a208bd56e372e2e5c6a6d901d45f04a12427303d74761983593d10b344c79904
SSDEEP 48:6jOBtU/BXN8kUByyy/Aklkcrkyg7Vg5RibGoTCTo0gqVeeaeQqzM5rv774YRljmB:y/DMy4ncrkyg7tbpQFLUEYRxe
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

6470

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/FindProcDLL.dll

IMPHASH c480ee4d2a64d4a16edee43fdfe35079
SHA256 a6122e80f1c51dc72770b4f56c7c482f7a9571143fbf83b19c4d141d0cb19294
MD5 83cd62eab980e3d64c131799608c8371
SHA1 5b57a6842a154997e31fab573c5754b358f5dd1c
SHA512 91cfbcc125600ec341f5571dcf1e4a814cf7673f82cf42f32155bd54791bbf32619f2bb14ae871d7996e9ddecdfcc5db40caa0979d6dfba3e73cfe8e69c163c9
SSDEEP 384:1NWlNdqdAnhTKMLE2oIM05fnqCiWg3Yy9kflIinokN:1NWtqdihTKCldkYwkdpnoy
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

6469

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/InstPath.ini

SHA256 ac50b5508c489b7cfe60ffa5ece04217ef983e015cc5d5394f855538e9d8c667
MD5 82fd59ef24e7f03117ecc6e6e1ff39ff
SHA1 f8bd428c7194c2848df2c3073632eeacd9352d36
SHA512 6d4a1a295efa01304b704d11813fb8af4ffd900cb3cf9c1f757b67a545d96c39b984053d3b97356c5130f50a3e681bd6be13371cf95f42c6efb787c1cc24cd04
MD5 SHA1 SHA512

NSIS installer

installer

$PLUGINSDIR/InstallOptions.dll

IMPHASH b1cd0d78f652ce5fc63f0879371af012
SHA256 c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b
MD5 325b008aec81e5aaa57096f05d4212b5
SHA1 27a2d89747a20305b6518438eff5b9f57f7df5c3
SHA512 18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf
SSDEEP 192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10696

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

SetCurrentDirectoryA GetCurrentDirectoryA MultiByteToWideChar GetPrivateProfileIntA GlobalLock GetModuleHandleA lstrcmpiA GetPrivateProfileStringA lstrcatA lstrcpynA WritePrivateProfileStringA lstrlenA lstrcpyA GlobalFree GlobalUnlock GlobalAlloc

user32

MapWindowPoints GetDlgCtrlID CloseClipboard GetClipboardData OpenClipboard PtInRect SetWindowRgn LoadIconA LoadImageA SetWindowLongA CreateWindowExA MapDialogRect SetWindowPos GetWindowRect CreateDialogParamA ShowWindow EnableMenuItem GetSystemMenu EnableWindow GetDlgItem DestroyIcon DestroyWindow DispatchMessageA TranslateMessage GetMessageA IsDialogMessageA LoadCursorA SetCursor DrawTextA GetWindowLongA DrawFocusRect CallWindowProcA PostMessageA MessageBoxA CharNextA wsprintfA GetWindowTextA SetWindowTextA SendMessageA GetClientRect

gdi32

SetTextColor CreateCompatibleDC GetObjectA GetDIBits CreateRectRgn CombineRgn DeleteObject SelectObject

shell32

SHBrowseForFolderA SHGetDesktopFolder SHGetPathFromIDListA ShellExecuteA

comdlg32

GetOpenFileNameA GetSaveFileNameA CommDlgExtendedError

ole32

CoTaskMemFree

$PLUGINSDIR/KillProcDLL.dll

IMPHASH 815c88741b87a0210c457b00b57bf9c6
SHA256 ae2f1658656e554f37e6eac896475a3862841a18ffc6fad2754e2d3525770729
MD5 83142eac84475f4ca889c73f10d9c179
SHA1 dbe43c0de8ef881466bd74861b2e5b17598b5ce8
SHA512 1c66eab21f0c9e0b99ecc3844516a6978f52e0c7f489405a427532ecbe78947c37dac5b4c8b722cc8bc1edfb74ba4824519d56099e587e754e5c668701e83bd1
SSDEEP 384:3rYz6grZodORNWATt4TBmlk5ooyzFh7BukAUdJoUtSOSR:3QggDWATWNCFh7BNddJoxO+
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

6871

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/NSISArray.dll

IMPHASH 812688d08c0d4a81ed86daeebcf15c55
SHA256 a8c486730810c55c337c7d6863243fad25c212b4d11ceeceb420c4b2c131a605
MD5 5ae0c62802120e2fa971959795581daf
SHA1 e0c2d66ba75b41f8e22ff31c90986e572735429f
SHA512 e09b14c1eef4c3962f18307df4abf4fbb62710dbf3cde80346069861b4db63e72b0441e0136921290725632f6c21b3916920e928f4df63b3f5c0e78b8e750101
SSDEEP 384:Z9fln0eNNe1AT+i1RSHKrsc+fDA9rFC7amgKFR1qjMzyJ:zCyg1AT+KRSHKrHrkJg81qd
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

5

Entry point

4851

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/NSISdl.dll

IMPHASH 9cce555dd3ff1b6c7dc92d64c794c51a
SHA256 dacc88a12d3ba438fdae3535dc7a5a1d389bce13adc993706424874a782e51c9
MD5 a5f8399a743ab7f9c88c645c35b1ebb5
SHA1 168f3c158913b0367bf79fa413357fbe97018191
SHA512 824e567f5211bf09c7912537c7836d761b0934207612808e9a191f980375c6a97383dbc6b4a7121c6b5f508cbfd7542a781d6b6b196ca24841f73892eec5e977
SSDEEP 192:tUZTobBDJ68r67wmsvJI5ad9cXzFOVu+mZ/P3p+57CvpVqDxVp01Dwn2GRPgsfA:6Bo/680dCI5adOjFOg9//p27uNw2Go
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

8903

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/SelfDel.dll

IMPHASH 7b20d7ddf67d32ef46980776247198a1
SHA256 7cb51ccf21655e9590a6c3232920b16a3dfef15ffe9df7b8e71f487ca8c24da9
MD5 5e14f6774c43bdff6ffe0afb0d51c47f
SHA1 fb1e7b6e63afa6db6aa2033b5e7e90f1f4ba5e27
SHA512 6ac533c0485156a68bd1460d8219acf7539b766590910cd646f4d7d4572c072f45369712d88d4e698f4e94aead8082abcbfacc3d6fe890046898f6c6d85274e3
MD5 SHA1 SHA512

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

4905

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/ShellLink.dll

IMPHASH 50112fdd20200a51dbedeae8f1f33cdb
SHA256 d1d1642f3e70386af125ec32f41734896427811770d617729d8d5ebdf18f8aa7
MD5 aad75be0bdd1f1bac758b521c9f1d022
SHA1 5d444b8432c8834f5b5cd29225101856cebb8ecf
SHA512 4c6e155cdf62cc8b65f3d0699c73c9032accefaa0f51e8b9a5c2f340ec8c6f5fab0ea02aad0abed476b3537292ba22d898589812850968e105ac83680d2f87d0
SSDEEP 96:Lno1dF1kBjthIjDfCnke7+bzYz3Cl6nfkfLGO:LU+h8
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

5

Entry point

4976

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH 2017f2acbdaa42ab3e4adeb8b4c37e7b
SHA256 dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
MD5 c17103ae9072a06da581dec998343fc1
SHA1 b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
SHA512 d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10544

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/WelcomePage.ini

SHA256 3d93f201eb79587a771448b2ba80c235b10589a4f1038ead9480e2c47e2ec874
MD5 10225758d20422a5ff0eecef1e8224c0
SHA1 9e122f4b265a80379bc13d2f16caa97a58dfcb31
SHA512 b64f6347856fd31e28dd015c7820991fb604647f4b4eb3042f73b2747e42192c2606e4cf526bff3c464e63549fa1f11ca8965036ffa69e294e2cb285949cc0a1
MD5 SHA1 SHA512

NSIS installer

installer

$PLUGINSDIR/ioSpecial.ini

SHA256 d95aed234f932a1c48a2b1b0d98c60ca31f962310c03158e2884ab4ddd3ea1e0
MD5 e2d5070bc28db1ac745613689ff86067
SHA1 282e080b4cf847174c5c11e4f9157b8c338ecb19
SHA512 a50ca2014869629135b54e848f03cb4983ad8029cd811300d02b0fc54de0436185f418fea4d3db888eb0f3170e33a59d486aa885f024ab29e630e9bc0ae1a2de
MD5 SHA1 SHA512

NSIS installer

installer

$PLUGINSDIR/md5dll.dll

IMPHASH e57536e0d3500471d52df7cea0d65a39
SHA256 9b05dd603f13c196f3f21c43f48834208fed2294f7090fcd1334931014611fb2
MD5 a7d710e78711d5ab90e4792763241754
SHA1 f31cecd926c5d497aba163a17b75975ec34beb13
SHA512 f0ca2d6f9a8aeac84ef8b051154a041adffc46e3e9aced142e9c7bf5f7272b047e1db421d38cb2d9182d7442bee3dd806618b019ec042a23ae0e71671d2943c0
SSDEEP 96:YV2qpbvYSflug0Dvxn6GuKM9sh1gdrN9+oB7FT9WibOoBZcko5N/:Yt5lugRK8hlvbwkKV
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

4508

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/modern-wizard.bmp

SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
MD5 cbe40fd2b1ec96daedc65da172d90022
SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/nsisXML.dll

IMPHASH d9ee494a2a7b0d46616d9537ef3d8431
SHA256 c40ef0b41c035b6d29656616ddc113a717bfd1bb78c9fcac75d7b6eefdc7bf83
MD5 13deb9a0f4e4286df01abc85e1895e09
SHA1 3174853b32407fd85220de844b390a18a8a76c97
SHA512 604aa82a9c4818d2f63fb11bbde561afc137a77e9f3108dfd7f4596524e46ce71b6dc31606bce534b600b250c3b4092a311fd1eced83da01156d5bcfaad7aade
SSDEEP 192:GRTSl/ex70OJp3U5WtRqRLnOyhb6hz801Sux3ulXhDQR:GRTSl/kfzWIRqRLnOy3mxaX1E
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10017

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/time.dll

IMPHASH 52d8e191fc300dee721dd8473cf053f5
SHA256 700cf2c2ae144ad688a33d2df320b415425749e1ee87b9ae61edcb42650a1390
MD5 8676721a04a174016e5d3f3c554302f1
SHA1 5f230d048560e70bfcb05aace39ad349bc8ff0aa
SHA512 aa54460dbfe691ece82080df64af98eaf66374060bbf85d8e48e17ec0ab296489a9822c6e8020d5809481e90b1fec9f0558559a0f096ab0452502f7a404a2d0e
SSDEEP 192:FMGPLjEMXjEMY6X+o5lo2kCK2nKhgOezjEVLmupUH0YBMfVkKlm:FBvBz/Y6Pls2Khx7pm080Q
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

8012

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PROFILE/funshion.ini

SHA256 e540c47328d77fc6cffa2be6f5ecd867e6c09e27cec760488430a3cd983fadee
MD5 295b54123b37fe17986c23aaca96aaa9
SHA1 621afc94167d8a16b1a2417a4ef6c411645301ca
SHA512 01ca553db663bf4784703af781c270c167a6170f7a0538f7a73846faebcd93b147cc3b1d0eb2427f3ac8c4d4caed21acbc273e5a3c38dc105bcc5edbf4e14862
MD5 SHA1 SHA512

NSIS installer

installer

$PROFILE/funshion/cache/Cacheflash/blankFs.swf

SHA256 48355f0786bbb792ec3960f68e7eb85fb020eab0fa6fa34bf8f8457278878208
MD5 75318d2faa995c4b486187b5d7ca7dc1
SHA1 b49858e430cbc21c458cf781d225416ace5b090b
SHA512 1ee9a33f2df6e64aaaef46402ded442e7cca97bd81485d1b4153d2b2c37fe17e6a2cad9bbac5037a87056c18f5aeb7fbcf86c20df2d74b81ddfa9c364f5fe8fe
MD5 SHA1 SHA512

NSIS installer

installer

$PROFILE/funshion/cache/Cacheflash/donghuanew_18.swf

SHA256 a76d1d230b2be0a8227cfc840f5fa311712f46435b0ea6ac0c7595cd029dcd0b
MD5 9f875533dd7d0d219a55c7f357a26ef5
SHA1 9b23dd2db3cb8faff47ad43e8c8edd36f51581e8
SHA512 2b2999dc812aacfbe3c323863661e4dcdf29d399c5cfab53cc453b03a510d94236fc9ae1532ae02d07c7d47cc1691879382b4c05a61e054f2fcaf960dd5233e5
MD5 SHA1 SHA512

NSIS installer

installer

$SYSDIR/$SYSDIR/Funshion.scr

IMPHASH 4bc47b1b60a84bd791e872571ef947cb
SHA256 062b0fd4f244c56d1b2361990ca2ac40c77bf4443a6b9926e3a72a5b9446431d
MD5 b78532ca47438419d829b2aafd88da1c
SHA1 0a1c3eea4181e4b6771952d20cd04ebe36889541
SHA512 f20a2e80021027665b017d9a2562ba3666db9c51bb52829674052f50658e38f352c6bf8672df3b5d9681e391bb713c29efc0cd2754d4a487481f212974c0ae38
SSDEEP 6144:at0A9LPijpgbHZPyWSGBoeRowX+Ty/ai2Ro3nEBE1QLJkQRdjJExPGyp:bA9rijpgNfSHPTy/aE3E21ckQ3tAR
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

85212

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\workspace\Fun Player\Rel2.6.4\src\plugin\FunScr\FunScr\Release\FunScr.pdb

wininet

InternetGetConnectedState InternetOpenA InternetReadFile InternetOpenUrlW HttpQueryInfoA InternetSetOptionA HttpQueryInfoW InternetCloseHandle

kernel32

GlobalAlloc DeleteFileW GetCurrentThreadId lstrlenW GetLastError InterlockedIncrement InterlockedDecrement lstrcmpiW GlobalUnlock GlobalLock SetLastError GlobalFree GlobalHandle lstrcmpW MulDiv GetModuleFileNameW FreeLibrary LoadLibraryExW GetModuleHandleW FreeResource CloseHandle WriteFile CreateFileW WaitForSingleObject GetPrivateProfileStringW GetTimeZoneInformation WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle LCMapStringW LCMapStringA GetStringTypeW GetStringTypeA IsValidLocale EnumSystemLocalesA GetUserDefaultLCID GetDateFormatA GetTimeFormatA GetConsoleMode GetConsoleCP GetCurrentProcess WideCharToMultiByte GetLocaleInfoW IsValidCodePage GetOEMCP GetCPInfo SetConsoleCtrlHandler EnterCriticalSection GetCurrentProcessId GetTickCount QueryPerformanceCounter GetStartupInfoA GetFileType SetHandleCount GetCommandLineW GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA Sleep ExitProcess GetCurrentThread TlsFree TlsSetValue TlsAlloc TlsGetValue GetModuleHandleA GetModuleFileNameA GetStdHandle FatalAppExitA HeapCreate GetStartupInfoW RtlUnwind IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess CreateThread ExitThread HeapSize HeapReAlloc HeapDestroy VirtualAlloc FlushInstructionCache MultiByteToWideChar FindResourceExW FindResourceW LoadResource LockResource SizeofResource DeleteCriticalSection InitializeCriticalSection SetFilePointer LeaveCriticalSection RaiseException CreateFileA FlushFileBuffers CompareStringA InterlockedExchange CompareStringW SetEnvironmentVariableA GetACP GetLocaleInfoA VirtualFree IsProcessorFeaturePresent LoadLibraryA GetProcAddress HeapAlloc GetProcessHeap HeapFree InterlockedCompareExchange GetVersionExA GetThreadLocale GetSystemTimeAsFileTime

user32

DefWindowProcW UnregisterClassA SetWindowTextW GetWindowTextW CharNextW DestroyWindow RegisterClassExW SetWindowLongW GetWindowLongW ShowWindow DispatchMessageW TranslateMessage PeekMessageW GetWindowTextLengthW ReleaseCapture GetSystemMetrics LoadImageW GetCursorPos CreateAcceleratorTableW PostQuitMessage GetWindowRect SystemParametersInfoW MapWindowPoints IsDialogMessageW SetWindowContextHelpId PostMessageW CreateWindowExW MapDialogRect IsWindow SendMessageW GetFocus GetWindow SetFocus DestroyAcceleratorTable GetDesktopWindow BeginPaint EndPaint CallWindowProcW FillRect LoadCursorW GetClassNameW GetDlgItem GetParent IsChild SetCapture RedrawWindow InvalidateRgn InvalidateRect ReleaseDC GetDC ScreenToClient ClientToScreen GetClientRect SetWindowPos MoveWindow GetSysColor CreateDialogIndirectParamW RegisterWindowMessageW GetClassInfoExW GetMessageW

gdi32

GetObjectW CreateSolidBrush GetDeviceCaps BitBlt CreateCompatibleDC CreateCompatibleBitmap SelectObject DeleteObject DeleteDC GetStockObject

advapi32

RegOpenKeyExW RegDeleteValueW RegEnumKeyExW RegQueryInfoKeyW RegSetValueExW RegCreateKeyExW RegCloseKey RegDeleteKeyW

shell32

SHGetSpecialFolderPathW SHCreateDirectoryExW

ole32

CoTaskMemAlloc CoTaskMemRealloc CoCreateInstance CoTaskMemFree CreateStreamOnHGlobal OleInitialize OleUninitialize StringFromGUID2 OleLockRunning CoGetClassObject CLSIDFromProgID CLSIDFromString CoUninitialize CoInitialize

oleaut32

CreateErrorInfo SetErrorInfo GetErrorInfo VariantChangeType DispCallFunc LoadTypeLi SysStringLen SysFreeString SysAllocStringLen SysAllocString VarUI4FromStr SysStringByteLen VariantInit VariantClear OleCreateFontIndirect LoadRegTypeLi

shlwapi

PathFileExistsW

comctl32

InitCommonControlsEx

$SYSDIR/funshion.ini

SHA256 e540c47328d77fc6cffa2be6f5ecd867e6c09e27cec760488430a3cd983fadee
MD5 295b54123b37fe17986c23aaca96aaa9
SHA1 621afc94167d8a16b1a2417a4ef6c411645301ca
SHA512 01ca553db663bf4784703af781c270c167a6170f7a0538f7a73846faebcd93b147cc3b1d0eb2427f3ac8c4d4caed21acbc273e5a3c38dc105bcc5edbf4e14862
MD5 SHA1 SHA512

NSIS installer

installer

$TEMP/$SYSDIR/Funshion.scr

IMPHASH 4bc47b1b60a84bd791e872571ef947cb
SHA256 062b0fd4f244c56d1b2361990ca2ac40c77bf4443a6b9926e3a72a5b9446431d
MD5 b78532ca47438419d829b2aafd88da1c
SHA1 0a1c3eea4181e4b6771952d20cd04ebe36889541
SHA512 f20a2e80021027665b017d9a2562ba3666db9c51bb52829674052f50658e38f352c6bf8672df3b5d9681e391bb713c29efc0cd2754d4a487481f212974c0ae38
SSDEEP 6144:at0A9LPijpgbHZPyWSGBoeRowX+Ty/ai2Ro3nEBE1QLJkQRdjJExPGyp:bA9rijpgNfSHPTy/aE3E21ckQ3tAR
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

85212

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\workspace\Fun Player\Rel2.6.4\src\plugin\FunScr\FunScr\Release\FunScr.pdb

wininet

InternetGetConnectedState InternetOpenA InternetReadFile InternetOpenUrlW HttpQueryInfoA InternetSetOptionA HttpQueryInfoW InternetCloseHandle

kernel32

GlobalAlloc DeleteFileW GetCurrentThreadId lstrlenW GetLastError InterlockedIncrement InterlockedDecrement lstrcmpiW GlobalUnlock GlobalLock SetLastError GlobalFree GlobalHandle lstrcmpW MulDiv GetModuleFileNameW FreeLibrary LoadLibraryExW GetModuleHandleW FreeResource CloseHandle WriteFile CreateFileW WaitForSingleObject GetPrivateProfileStringW GetTimeZoneInformation WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle LCMapStringW LCMapStringA GetStringTypeW GetStringTypeA IsValidLocale EnumSystemLocalesA GetUserDefaultLCID GetDateFormatA GetTimeFormatA GetConsoleMode GetConsoleCP GetCurrentProcess WideCharToMultiByte GetLocaleInfoW IsValidCodePage GetOEMCP GetCPInfo SetConsoleCtrlHandler EnterCriticalSection GetCurrentProcessId GetTickCount QueryPerformanceCounter GetStartupInfoA GetFileType SetHandleCount GetCommandLineW GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA Sleep ExitProcess GetCurrentThread TlsFree TlsSetValue TlsAlloc TlsGetValue GetModuleHandleA GetModuleFileNameA GetStdHandle FatalAppExitA HeapCreate GetStartupInfoW RtlUnwind IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess CreateThread ExitThread HeapSize HeapReAlloc HeapDestroy VirtualAlloc FlushInstructionCache MultiByteToWideChar FindResourceExW FindResourceW LoadResource LockResource SizeofResource DeleteCriticalSection InitializeCriticalSection SetFilePointer LeaveCriticalSection RaiseException CreateFileA FlushFileBuffers CompareStringA InterlockedExchange CompareStringW SetEnvironmentVariableA GetACP GetLocaleInfoA VirtualFree IsProcessorFeaturePresent LoadLibraryA GetProcAddress HeapAlloc GetProcessHeap HeapFree InterlockedCompareExchange GetVersionExA GetThreadLocale GetSystemTimeAsFileTime

user32

DefWindowProcW UnregisterClassA SetWindowTextW GetWindowTextW CharNextW DestroyWindow RegisterClassExW SetWindowLongW GetWindowLongW ShowWindow DispatchMessageW TranslateMessage PeekMessageW GetWindowTextLengthW ReleaseCapture GetSystemMetrics LoadImageW GetCursorPos CreateAcceleratorTableW PostQuitMessage GetWindowRect SystemParametersInfoW MapWindowPoints IsDialogMessageW SetWindowContextHelpId PostMessageW CreateWindowExW MapDialogRect IsWindow SendMessageW GetFocus GetWindow SetFocus DestroyAcceleratorTable GetDesktopWindow BeginPaint EndPaint CallWindowProcW FillRect LoadCursorW GetClassNameW GetDlgItem GetParent IsChild SetCapture RedrawWindow InvalidateRgn InvalidateRect ReleaseDC GetDC ScreenToClient ClientToScreen GetClientRect SetWindowPos MoveWindow GetSysColor CreateDialogIndirectParamW RegisterWindowMessageW GetClassInfoExW GetMessageW

gdi32

GetObjectW CreateSolidBrush GetDeviceCaps BitBlt CreateCompatibleDC CreateCompatibleBitmap SelectObject DeleteObject DeleteDC GetStockObject

advapi32

RegOpenKeyExW RegDeleteValueW RegEnumKeyExW RegQueryInfoKeyW RegSetValueExW RegCreateKeyExW RegCloseKey RegDeleteKeyW

shell32

SHGetSpecialFolderPathW SHCreateDirectoryExW

ole32

CoTaskMemAlloc CoTaskMemRealloc CoCreateInstance CoTaskMemFree CreateStreamOnHGlobal OleInitialize OleUninitialize StringFromGUID2 OleLockRunning CoGetClassObject CLSIDFromProgID CLSIDFromString CoUninitialize CoInitialize

oleaut32

CreateErrorInfo SetErrorInfo GetErrorInfo VariantChangeType DispCallFunc LoadTypeLi SysStringLen SysFreeString SysAllocStringLen SysAllocString VarUI4FromStr SysStringByteLen VariantInit VariantClear OleCreateFontIndirect LoadRegTypeLi

shlwapi

PathFileExistsW

comctl32

InitCommonControlsEx

$TEMP/dump.dll

IMPHASH e4a6d9649d7242f22c20ed532443f3e4
SHA256 91cce2f5b0830868fecd7df0e09434c081bd9fe094adb32e9c0e11bc95588524
MD5 bcfdef690439677ab63214faec016f61
SHA1 c1e5d5350a4800ae59caae36e6d241483ae6060a
SHA512 19c722ec60de249a6f41b5a259af8c768cf399876cb8bffc86ef1c3b8129e67319c42c52ae289c25cb1671e2c982b1f11f1096970b8dd6377c7f7b6763e3282a
SSDEEP 3072:f4jP6DRV9PgGuzlBGLpu2xrCL6jspw4HnqyNwOkcSEgKrjBAJ0nYdah:f4jPYdALGzlCPtnp3k4j6qfh
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

9c:86:42:67:df:17:cb:26:64:fa:c7:55:75:fb:70:7c:e4:4c:44:e4

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Beijing Funshion Online Technologies Ltd.,OU=SECURE APPLICATION DEVELOPMENT,O=Beijing Funshion Online Technologies Ltd.,L=Beijing,ST=Beijing,C=CN

Chains

Aug 8, 2012

Minor OS version

1

Major OS version

5

Entry point

127393

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\build2.6.8\Funshion\Rel\symbols\dump.pdb

kernel32

CloseHandle GetTickCount TerminateThread Sleep GetPrivateProfileIntW GetLastError ResetEvent GetPrivateProfileSectionW CreateEventW OutputDebugStringW GetPrivateProfileStringW WritePrivateProfileStringW lstrcpyW GetModuleFileNameW CreateFileW GetProcAddress WideCharToMultiByte MultiByteToWideChar GetModuleFileNameA FindResourceExW FindResourceW LoadResource WriteFile SizeofResource LockResource DeleteFileW InterlockedIncrement InterlockedDecrement InterlockedCompareExchange InterlockedExchange GetStringTypeW EncodePointer DecodePointer InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree GetSystemTimeAsFileTime ExitThread CreateThread GetCommandLineA GetFileAttributesW GetLocalTime GetCPInfo RaiseException RtlUnwind GetCurrentThreadId LCMapStringW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent HeapCreate HeapDestroy SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType GetStartupInfoW GetModuleHandleW ExitProcess TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError HeapSize GetLocaleInfoW GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetConsoleCP GetConsoleMode FlushFileBuffers ReadFile SetFilePointer HeapReAlloc LoadLibraryW SetStdHandle CreateFileA WriteConsoleW SetEndOfFile GetProcessHeap OpenEventA SetEvent WaitForSingleObject HeapAlloc CreateEventA

shell32

SHGetSpecialFolderPathW SHCreateDirectoryExW ShellExecuteW

urlmon

UrlMkGetSessionOption

shlwapi

PathRemoveFileSpecW PathFileExistsW

wininet

InternetCloseHandle InternetOpenA InternetGetConnectedState HttpQueryInfoW InternetSetOptionA InternetReadFile InternetOpenUrlW HttpQueryInfoA

Name

.text

Size

215KB

Virtual Size

214KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

49KB

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

10KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

2B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

696B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

17KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$TEMP/funshion.ini

SHA256 e540c47328d77fc6cffa2be6f5ecd867e6c09e27cec760488430a3cd983fadee
MD5 295b54123b37fe17986c23aaca96aaa9
SHA1 621afc94167d8a16b1a2417a4ef6c411645301ca
SHA512 01ca553db663bf4784703af781c270c167a6170f7a0538f7a73846faebcd93b147cc3b1d0eb2427f3ac8c4d4caed21acbc273e5a3c38dc105bcc5edbf4e14862
MD5 SHA1 SHA512

NSIS installer

installer

$TEMP/gma.dll

IMPHASH 8596d45da9d4f8d0913c58f9221801ef
SHA256 d8b8d6d392ceeaad11da5ba72711e2453f488a9603f49bd22aeddd271602db99
MD5 ed3ca2d23c358a81b98bbe58ca7e9ab9
SHA1 1cce3b0f1f22b798d09772d82972cee0100bb525
SHA512 5df76439fadaffbc4a6123681dcb6522fbb8c3dfeffcd9b3368e24a91dcaf4cd0fbdc3c585a81131e398d5d1f54592b9c451a77b20d46c793968d373dc541512
SSDEEP 12288:Mdeo9rwLQ+nTdtMfL9gzcgsGaM4xLXxpRH8fpBEEA+s5Ni:MdeoymfLAcgstxbRHuBEEA+F
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

c5:56:b6:e7:3b:da:d5:37:35:41:6a:3a:08:05:1e:e1:66:b0:83:09

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Beijing Funshion Online Technologies Ltd.,OU=SECURE APPLICATION DEVELOPMENT,O=Beijing Funshion Online Technologies Ltd.,L=Beijing,ST=Beijing,C=CN

Chains

Aug 8, 2012

Minor OS version

1

Major OS version

5

Entry point

169486

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\build2.6.8\Funshion\Rel\symbols\gma.pdb

iphlpapi

GetIpAddrTable GetBestInterface GetBestRoute SendARP

ws2_32

gethostname getservbyname getservbyport htons WSAGetLastError htonl ntohs inet_ntoa WSASetLastError gethostbyaddr gethostbyname inet_addr

advapi32

RegOpenKeyExW RegOpenKeyW RegQueryValueExW RegCloseKey RegEnumKeyExW

wininet

HttpQueryInfoW InternetOpenA InternetCloseHandle InternetSetOptionA InternetReadFile InternetOpenUrlW HttpQueryInfoA InternetGetConnectedState

kernel32

SystemTimeToFileTime WaitForMultipleObjects ResumeThread ResetEvent OpenEventA GetSystemInfo FlushFileBuffers WriteConsoleW SetStdHandle LoadLibraryW GetConsoleMode InterlockedDecrement GetPrivateProfileStringW WritePrivateProfileStringW GetLastError ExpandEnvironmentStringsW CreateEventA WaitForSingleObject SetEvent GetModuleFileNameW CreateFileW DeviceIoControl GetCurrentThreadId CloseHandle GetSystemTime GetTickCount GetVersionExW MultiByteToWideChar lstrlenA WideCharToMultiByte LocalFree lstrlenW FreeLibrary CreateProcessW GetSystemDirectoryW GetSystemDirectoryA GetCurrentDirectoryW GetProcAddress LoadLibraryA lstrcmpiW SetWaitableTimer FindResourceW LoadResource WriteFile SizeofResource LockResource DeleteFileW GetModuleFileNameA GetConsoleCP SetFilePointer SetConsoleCtrlHandler IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID FatalAppExitA GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetStartupInfoW GetFileType SetHandleCount ExitProcess HeapCreate GetLocaleInfoW GetStdHandle GetCurrentThread SetLastError GetModuleHandleW TlsFree TlsSetValue TlsGetValue TlsAlloc IsValidCodePage GetOEMCP CreateWaitableTimerA GetACP IsProcessorFeaturePresent LCMapStringW GetCPInfo GetCurrentProcess TerminateProcess IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetLocalTime GetFileAttributesW CreateThread FindResourceExW InterlockedIncrement InterlockedCompareExchange InterlockedExchange GetStringTypeW EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapDestroy HeapAlloc HeapFree HeapReAlloc HeapSize GetProcessHeap RaiseException InitializeCriticalSectionAndSpinCount GetCommandLineA RtlUnwind ExitThread

shell32

SHGetSpecialFolderPathW ord51 SHGetFolderPathW SHGetSpecialFolderPathA SHCreateDirectoryExW

ole32

CoSetProxyBlanket CoUninitialize CoInitializeSecurity CoInitialize CoCreateInstance

oleaut32

VariantClear GetErrorInfo VariantChangeType SetErrorInfo CreateErrorInfo SafeArrayUnaccessData VariantInit SafeArrayAccessData SysAllocString SysFreeString

urlmon

UrlMkGetSessionOption

shlwapi

PathFileExistsW PathIsRelativeW PathRemoveFileSpecA PathAppendW PathRemoveBackslashW PathRemoveFileSpecW

Name

.text

Size

360KB

Virtual Size

360KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

55KB

Virtual Size

54KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

10KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

2B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

436B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

17KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$TEMP/installfilescn.bmp

SHA256 aa0872d4b884fc022b23b127e7f09cac989f50bc1f3c99754bb164340a37118c
MD5 63d8375b8795485d9a8ba3205ba2ffa1
SHA1 5419a11dc2ee0d6277d3701b521909d24513a1ee
SHA512 0224745a8f23566b117eaf7e055ace213ed1ef19e2a3cf42741a5ccc87bdef225e9d6979bfb6c40d9f8b6ac9dc83422d59cea9c84aa3591a5917b8d8c7cbc8a7
SSDEEP 384:pliLGJmyPFLdgpeQOi9F6kqQRkbI2JrMRT3xlOOEzqKexrahgJh:+LG/gpeQOi9F6kPkM2Jrcqu4h0
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$TEMP/installfilesen.bmp

SHA256 3d59afdfed367d9daf1ba1c6af486fff89e0c44bc0e6bc9b1b48d7daff4f80a3
MD5 8b47cc0b09630902376fcd812adcb65d
SHA1 ece99584bbf4f4364af78b31b47d7ae82df913bf
SHA512 004516e55c10ec967a2bee64938abecfa407e7b66c0b10f29657b15713250a4ffac0c005a0cc05f9822e1d412ea5950214018540c82f12c3473c0772d59a9bb5
SSDEEP 384:8l9U+oCSn+5qeJw9KPW/Zs/SxJ43E16WIZhy6pA0y62N3+6u9Vb9:Q41n+5qf9KOq/STgEAi6+0eNE
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$TEMP/installpathcn.bmp

SHA256 15421cbbb3b7487d43be4cfd09ba25f1c542bf859c2a97dd277b3a3ef2f2ff36
MD5 abe542b4708f53e79a2b6ff0b2d163da
SHA1 81a15e541a855564562a36823f7d1f7b0b68e1a2
SHA512 36f4e993b3dd64d07cd5918b853030c3b3ded88b4d82eb80f4768dad762e77e7dd3138ce7f11f1cd05d2260e49d45b95fdd5f13b753868d0ba18fe08061077eb
SSDEEP 384:BVnHObhDi8s8XybRekSZxgWL5NO7xfj5w:nHObhDiH8XIgkemw4xfjW
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$TEMP/installpathen.bmp

SHA256 5e9a2388d12caa976c67ae6b20d64ebaeaae057d0a04b348ce053649edb0cd65
MD5 9385fb56d5c88655af4750a0dc9463eb
SHA1 fa35889cfe1ae6a5e264cfd761370c576339fed2
SHA512 2f5fc398af6708c9ee238f310d280beb38d55af965d9a3ca13340aeee7f6f5e10934c7e3628ad6d444c5719432fe6455d58fabe3378cea944d1ebd5005da2ae1
SSDEEP 384:GkcAMtyJS+FNahrnUr73RJwOb0BiMGjIOYmAINdZmHEmVLTQLREr52HC53Ygn:9nNah4BJ9b0BhOYmAINdZqfVLTwYFx9
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$TEMP/instpath.ini

SHA256 ac50b5508c489b7cfe60ffa5ece04217ef983e015cc5d5394f855538e9d8c667
MD5 82fd59ef24e7f03117ecc6e6e1ff39ff
SHA1 f8bd428c7194c2848df2c3073632eeacd9352d36
SHA512 6d4a1a295efa01304b704d11813fb8af4ffd900cb3cf9c1f757b67a545d96c39b984053d3b97356c5130f50a3e681bd6be13371cf95f42c6efb787c1cc24cd04
MD5 SHA1 SHA512

NSIS installer

installer

$TEMP/licensecn.bmp

SHA256 a5d4d55aaf109d1fab8eda25aeb68df83188207290c42591f50ab0feeab14478
MD5 2e7102ed32473fa794f607f4d6b7c20c
SHA1 f8a3e845ba7d71eaefce583d907642a9f947d780
SHA512 25b19076c5874036ddd9297a19362fa3dcfc8d8955482cc81fcfc7f2a40d950ad0c20e56168e234236d406fab12e2935d03a980aee2151260f4c5b03f3540ef0
SSDEEP 384:BtnRJpY9D+rY1bu6Bw4xhWLGWj8w83eREaQH4J0:jpY9AW5w4GGaVqaQH80
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$TEMP/licenseen.bmp

SHA256 026f7dee491c042e69ff7be89d9132d1b3b074305606400ea11266c96185f90a
MD5 d9a278d1bc894cbe06d42ac2225c8aaa
SHA1 dbdbd0ade98cf6b9ca85404c01663778fb822f7d
SHA512 e5fc9288b1465c8a0de174f5bffcee8727045878817e44a11861e939bd06c800e8dacb702f187af6b5812e913d1a82049dc2b462ca4cc56ff93176e5d03274a5
SSDEEP 384:x/geM3C9irwhEDl1eSDuruWZNchGyMqU3ap27W8r7PHlkP:kYiaeeRrlW/U3apC7dY
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$TEMP/nicdescr.dat

SHA256 52348ac96775f546a3d057edf50aaf69e0aeb03edc7972055496c014c31dc738
MD5 0fb9927e7a9ca8c5f5af8bb4fd7857df
SHA1 40b512129c1d3de5b11c81300e0cbeb781f06873
SHA512 331228608c543b66e04e6d9960b51ed1b26bbaad4d48a9254121618cfca31e2a68d194aa1bde071b1a4e3d03d27174dbc5efcc5a7e0cb5a5064c9cee270609ab
MD5 SHA1 SHA512

NSIS installer

installer

$TEMP/partner.ini

SHA256 4c1007a5b8de210332abfaffe8456cff873ee511149cf48013703253b3c4b438
MD5 58a2179e4580862846086658ec6e9c80
SHA1 e0fdcc0ce0d568e6c8f92f72f89302b95ca05b26
SHA512 7c0cfefa72337a85520c677310845c01845bc5a98e6bcf7168aa50c9264f946a7436f22b5bb3804a7f89c747836469982961cceea6a6a250ed5b8e85b0fd14ee
MD5 SHA1 SHA512

NSIS installer

installer

$TEMP/showfinishcn.bmp

SHA256 3a9c4dec89d6f87cb36de652c0cc24149cf0c74ee9014dda60fb95495eead58f
MD5 111993c5d122de09938b36a705df1374
SHA1 1b4d68bacf0785f3011fb2b02411570d170cbe49
SHA512 088d79f3eb3f934061d81896e486cde9229396984ccf2b1c27c65b632f8e0565ba8dd85b2b5bd11df744b03234aaef764209a598cbd72b7f98ab7349130bb84a
SSDEEP 384:JGHJBOGWvYskMLjBsTjrLp+VieFWMVRLWPSn3Fhw63SZw/FRyi//5ZVHW:4Hz6PBswseoDSn3FK63VhI
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$TEMP/showfinishen.bmp

SHA256 1863c43eca3a163577544b05e92f30b2460360a0fec02c0ec597078280ae236a
MD5 b0394aef48059dafe34916b745cf7c21
SHA1 271ba613910c8eb6648229bd8f73da0195b7f13a
SHA512 af5020c16c565531a245ccde71e47334b3aa5679d131ce6142f50f98511e86b8b331cca430b05b21dbe4f7d4481621bbaaf1ad73258151d58c6444178096a9a7
SSDEEP 384:hPHTwZ3wf0rP3V8/cs7e3YTJmBXBbdT3Gu8DG4yqZj/IvO0fjjS+9gzUzz5YF2P:RHy3rV8klYd6XBRrX8ZD6IUzl3P
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$TEMP/welcome.bmp

SHA256 69819620103dec887efafb8f11c2bd01a4ef319e0df3ba39b33060e08e9cdd17
MD5 19794b9a90ae453ca33c6181e36b51fe
SHA1 fd5fc94741d1a0cfe2ffb9a7bc900b004c2f50ad
SHA512 a008b514d6b536d47ff356401204a6b5ff86e577a92c8b504eb63d05c8157971299320171edbc005bf1181f3f8e8cf2c4118368839f9d73a5ee09a22ae8bcfb5
SSDEEP 1536:8q6/R5JSadTtE9vk3FCekyIvv5/mWpvFi3SGQYGyqBwFgTXrl:8755J4+CsOvIKFi3SGQYYXl
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$TEMP/welcomekugou.bmp

SHA256 1ce296a2a1521bf9b2f42db943874cfb8bb0c2754c81da01c86d3942b4de0b55
MD5 182954165b1bc8f9f52e76f3e4644143
SHA1 b2a4a1048a86a47ab70803947a5446b7cd212ddf
SHA512 25b5d0e386e88d215df12c69c737f05ec21e570071d0ee1b357bc25ffc9512d236548feb3c642062a0c8bba39b63d1bd41faba19991643c18ac031d6e35b4242
SSDEEP 1536:z6d2fRVmEOfpWQbDmb0cbXvkHGmoky5j47bkgVQYrKVMkB/lJPt:I+VmEOfAQevTc3M4bkgV3KrB/9
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$TEMP/welcomepage.ini

SHA256 3d93f201eb79587a771448b2ba80c235b10589a4f1038ead9480e2c47e2ec874
MD5 10225758d20422a5ff0eecef1e8224c0
SHA1 9e122f4b265a80379bc13d2f16caa97a58dfcb31
SHA512 b64f6347856fd31e28dd015c7820991fb604647f4b4eb3042f73b2747e42192c2606e4cf526bff3c464e63549fa1f11ca8965036ffa69e294e2cb285949cc0a1
MD5 SHA1 SHA512

NSIS installer

installer

$TEMP/xml2fspdata.exe

IMPHASH 87d7ff083b0bdf1af3c3bf0315b95f36
SHA256 bc9beff14fef6543c55929eec26d5bc57f0554e6015b6e646ec0e339776e71c7
MD5 6b6d82dd162e06645abf3e6692193d1f
SHA1 861421b3f37345c3cc4abeb5a74d96887c5cc5c5
SHA512 6d6e73866551dc6a6fa7ec25d13095dba21c105604d50e36e6da55432632c8017c7fe5a5fcea7c6ca8e4b765f9d810447cad8f706f4fe79cf89261c2232549a8
SSDEEP 1536:qQQo+EdIRJ1iEAs3mnRoHribzg15wzRSbTQlN6oz7LiuMUsQvW5u0Y:qQQo+E+FQs3mJbzqXbT30IVQvW5u9
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

38:43:d3:e7:2b:e4:54:23:4f:cb:dc:0f:0b:f6:cf:cd:9f:5c:36:56

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Beijing Funshion Online Technologies Ltd.,OU=SECURE APPLICATION DEVELOPMENT,O=Beijing Funshion Online Technologies Ltd.,L=Beijing,ST=Beijing,C=CN

Chains

Aug 8, 2012

Minor OS version

0

Major OS version

4

Entry point

40501

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\build2.6.8\Funshion\Rel\symbols\xml2fspdata.pdb

shlwapi

PathRemoveExtensionW

ws2_32

htonl htons ntohl ntohs

kernel32

SetEndOfFile MultiByteToWideChar FindNextFileW FindFirstFileW FindClose WideCharToMultiByte TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError DeleteFileW HeapFree HeapAlloc HeapReAlloc GetVersionExA GetProcessHeap RaiseException RtlUnwind GetModuleHandleA GetProcAddress TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement WriteFile GetConsoleCP GetConsoleMode EnterCriticalSection LeaveCriticalSection SetFilePointer ReadFile CloseHandle FlushFileBuffers DeleteCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage HeapDestroy HeapCreate VirtualFree VirtualAlloc SetHandleCount GetStdHandle GetFileType GetStartupInfoA ExitProcess GetModuleFileNameA HeapSize Sleep GetModuleFileNameW FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetCommandLineW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle LCMapStringA LCMapStringW InitializeCriticalSection CreateFileW GetStringTypeA GetStringTypeW GetLocaleInfoA LoadLibraryA CreateFileA

advapi32

IsTextUnicode

CoreAAC.ax

IMPHASH d52e386cb07e1e13a6b9de526bbe1d78
SHA256 e85c1802ae3c7af9b7967ceadaf0504823f092abba04ba912576edbfd421e76a
MD5 6636fd123e77073c1a07d1ec0831334c
SHA1 39ea6f28d5b30675760f29df68160a81d5df349e
SHA512 3ac59d1ad36eb1c052c272a11c6dd78dbebb5061b8b79a2a1f0108f8208be7fb9cc8e6208124b12c779e2bdc845882cfd432a84427e2c5c312c4d3275b054849
SSDEEP 12288:8rXUXLyZqsQoK2AyPaGJuVpk+v9LybKslc9OyGs2+eD:SUX4K2kGJMpkwLyllA7l2
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

48235

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

msvcrt

free _onexit _adjust_fdiv _initterm malloc __dllonexit memcmp __CxxFrameHandler _purecall memset memcpy ??3@YAXPAX@Z ??2@YAPAXI@Z _errno fputs _iob qsort pow memmove _except_handler3

winmm

timeGetTime timeSetEvent

kernel32

SetEvent GetSystemInfo VirtualAlloc CreateSemaphoreA ReleaseSemaphore SetErrorMode GetModuleFileNameA InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InterlockedIncrement FreeLibrary InterlockedDecrement LoadLibraryA CloseHandle CreateEventA ResetEvent DuplicateHandle GetCurrentProcess GetCurrentThreadId MultiByteToWideChar WaitForMultipleObjects WaitForSingleObject GetTickCount lstrcmpiA InterlockedExchange CreateThread VirtualFree GetVersionExA DisableThreadLibraryCalls lstrlenA GetModuleHandleA GetLastError WideCharToMultiByte GetProcAddress GetThreadPriority SetThreadPriority GetACP GetCurrentThread

advapi32

RegQueryValueExA RegCloseKey RegDeleteKeyA RegCreateKeyExA RegSetValueExA RegOpenKeyExA RegEnumKeyExA RegSetValueA RegCreateKeyA

version

GetFileVersionInfoA VerQueryValueA GetFileVersionInfoSizeA

user32

KillTimer CheckDlgButton GetWindowLongA SetTimer IsDlgButtonChecked CreateDialogParamA MoveWindow SetWindowLongA ShowWindow DestroyWindow DefWindowProcA SetDlgItemTextA MsgWaitForMultipleObjects wvsprintfA PostThreadMessageA wsprintfA GetQueueStatus DispatchMessageA LoadStringA LoadStringW GetWindowRect GetDesktopWindow PeekMessageA InvalidateRect RegisterWindowMessageA

ole32

StringFromGUID2 CoTaskMemFree CoInitialize CoUninitialize CoCreateInstance CoFreeUnusedLibraries CoTaskMemAlloc

oleaut32

SysAllocString SysFreeString

Name

.text

Size

272KB

Virtual Size

271KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

24KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

116KB

Virtual Size

115KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data1

Size

144KB

Virtual Size

143KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

16KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

16KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

CrashReport.exe

IMPHASH e0773e8ad86951a01ab0e4c659e7c2a8
SHA256 dba06801ebefc367dc2b69e30b6cbbf2d82e4f738630321780736e41d6bbf5ea
MD5 70b83a6d5ef5ce5db1f4e44deea8480d
SHA1 4ad8dddbf83e03f62e032119d5afe0702b2644f8
SHA512 50e6b72bf69cda96444a269881181a18c895fb5e202a06088f5f6c520538c4a67e41158a3a57cada8de5b0b92344a0a3c9fbe55113bc99e300cbad1dbc3d24ec
SSDEEP 3072:/8acUiD4DViq+hdE99iFW5EP7LvrTd8DTBfb3H7MVpS1kkUa:/QD4DF++gWKTLvWDTBj3wHla
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

27:64:4c:1e:1e:d4:87:da:e6:df:63:bc:66:fe:59:56:b7:c8:cd:f2

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Beijing Funshion Online Technologies Ltd.,OU=SECURE APPLICATION DEVELOPMENT,O=Beijing Funshion Online Technologies Ltd.,L=Beijing,ST=Beijing,C=CN

Chains

Aug 8, 2012

Minor OS version

1

Major OS version

5

Entry point

56735

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

wininet

InternetConnectA FtpSetCurrentDirectoryA InternetOpenA InternetCloseHandle FtpPutFileA

kernel32

GetPrivateProfileIntA InitializeCriticalSectionAndSpinCount SizeofResource Sleep LeaveCriticalSection GetModuleFileNameW MultiByteToWideChar lstrlenW WritePrivateProfileStringW FlushInstructionCache RaiseException SetThreadLocale GetLastError SetLastError GetThreadLocale GetProcAddress EnterCriticalSection lstrcmpiW DeleteCriticalSection GetCurrentThreadId DeleteFileA CreateFileA ReadFile CloseHandle LoadLibraryW GetPrivateProfileStringA GetSystemTime GetModuleFileNameA GetPrivateProfileStringW LCMapStringW WriteConsoleW SetStdHandle IsValidCodePage GetOEMCP GetACP GetCPInfo FlushFileBuffers SetFilePointer GetConsoleMode InterlockedIncrement GetCurrentProcessId GetTickCount QueryPerformanceCounter GetEnvironmentStringsW WideCharToMultiByte FreeEnvironmentStringsW HeapReAlloc HeapSize IsProcessorFeaturePresent TlsFree TlsSetValue TlsGetValue TlsAlloc GetModuleHandleW GetCurrentProcess InterlockedDecrement LoadLibraryExW LoadResource FreeLibrary FindResourceW GetStringTypeW InterlockedCompareExchange InterlockedPushEntrySList VirtualFree VirtualAlloc RtlUnwind GetFileType SetHandleCount GetStdHandle WriteFile CreateFileW GetProcessHeap SetEndOfFile HeapCreate IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess GetSystemTimeAsFileTime GetStartupInfoW HeapSetInformation GetCommandLineA InterlockedPopEntrySList GetConsoleCP HeapFree HeapAlloc ExitProcess DecodePointer EncodePointer

user32

DestroyWindow GetWindowRect GetMessageW PostQuitMessage UnregisterClassA LoadImageW GetParent GetClientRect TranslateMessage IsDialogMessageW LoadIconW GetWindowLongW PeekMessageW MonitorFromWindow GetDlgItem SetWindowLongW SetWindowPos ShowWindow CreateDialogParamW GetSystemMetrics SendMessageW MapWindowPoints GetMonitorInfoW DefWindowProcW GetWindow DispatchMessageW CharNextW

gdi32

CreateFontW GetStockObject DeleteObject

advapi32

RegOpenKeyExW RegQueryInfoKeyW RegSetValueExW RegCloseKey RegEnumKeyExW RegDeleteValueW RegDeleteKeyW RegCreateKeyExW

shell32

SHGetSpecialFolderPathA ShellExecuteA

ole32

CoTaskMemRealloc CoInitialize CoTaskMemFree CoTaskMemAlloc CoCreateInstance CoUninitialize

oleaut32

VarUI4FromStr

shlwapi

PathFindFileNameA PathRemoveFileSpecW PathRemoveFileSpecA PathFileExistsW

comctl32

InitCommonControlsEx

Funshion-install.ico

SHA256 7f1994bd8a19a048d4a99e938ac7f5670189fe996a5b255ef35ef7c988779e0b
MD5 ce7af2ed1b9e198450948f84e90f978b
SHA1 159e1a5964869847be75f9941e5bc27bc3e47346
SHA512 2abc24f93bcd286774139bdacb0df449419efedd452563468f8d3a44c7d3da84916d1d3de509254d3e0df07fe7b43771288b32732d86078a1c3e6ea90f6de462
SSDEEP 384:AOr3+hEpSin21DCGnon+bsLhmM7Zpj2bxjSwYsQWSL0e:mE4y21DCGnokjMZgbxjSIQr4e
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Funshion.exe

IMPHASH 268645574165c8b102aacda3b39c4bc4
SHA256 08c5e8e1ca648f66389dc3af52a3b42073f121aa9ce2fda9937e955de42ac645
MD5 05cc738466c654354c98e4ebe1c3bd60
SHA1 d42c34c205bc7a5eafc40f2853c27192771cde8e
SHA512 5976945f008e33d6827d59f675a9af0fdaa7f62e2aad4154dded798beebc23702db8dff4df9462039cfed75f6e773e9fa0737d5d982347a2121cf9b5d34265cd
SSDEEP 49152:zpoeND1JddXJJJUEEEiJ+D8Us4CgHE9jxiSyDmUVjmJdsZ18MwTtf9lGbJSwenyJ:zp1sJfUs4CgHoiSBUVjS+4lG5
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

f7:e2:61:f2:96:da:9b:19:95:83:25:09:11:71:7d:d5:9e:37:72:bc

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Beijing Funshion Online Technologies Ltd.,OU=SECURE APPLICATION DEVELOPMENT,O=Beijing Funshion Online Technologies Ltd.,L=Beijing,ST=Beijing,C=CN

Chains

Aug 8, 2012

Minor OS version

1

Major OS version

5

Entry point

1370568

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\build2.6.8\Funshion\Rel\symbols\Funshion.pdb

dbghelp

MiniDumpWriteDump MakeSureDirectoryPathExists

shlwapi

PathRemoveArgsW StrCatW PathRemoveExtensionW PathAddExtensionW PathRenameExtensionW PathAppendW PathRemoveFileSpecW PathRemoveFileSpecA PathFileExistsA PathFileExistsW PathRemoveBackslashW PathIsRelativeW

ws2_32

gethostbyaddr WSASetLastError inet_addr getservbyname getservbyport ntohs ntohl htonl WSAGetLastError htons WSACleanup gethostname gethostbyname inet_ntoa WSAStartup

wininet

InternetQueryDataAvailable InternetReadFile HttpQueryInfoA FindFirstUrlCacheEntryA FindCloseUrlCache FindNextUrlCacheEntryA HttpAddRequestHeadersA InternetSetCookieW InternetCloseHandle InternetGetCookieW InternetOpenA InternetQueryOptionW InternetSetOptionW HttpEndRequestW HttpSendRequestExW DeleteUrlCacheEntryA HttpOpenRequestA InternetConnectA HttpOpenRequestW InternetGetCookieExW HttpSendRequestW HttpQueryInfoW InternetGetConnectedState InternetSetOptionA InternetOpenUrlW

iphlpapi

GetAdaptersInfo GetBestInterface GetIfEntry

winmm

mixerClose waveOutGetVolume waveOutSetVolume mixerGetLineInfoW mixerGetLineControlsW mixerGetControlDetailsW mixerOpen

kernel32

GetCurrentDirectoryW WritePrivateProfileStringW GetPrivateProfileIntW GetPrivateProfileStringW GetPrivateProfileStringA CreateFileA DeviceIoControl CloseHandle HeapAlloc GetProcessHeap HeapFree lstrcpyW lstrcatW FindFirstFileW FindNextFileW FindClose Sleep WaitForSingleObject TerminateThread lstrcpynW GetVersionExW CompareStringW GetSystemDirectoryW GetDriveTypeW CreateDirectoryW GetFileAttributesExW GetDiskFreeSpaceExW GetProcAddress GetModuleHandleW LoadLibraryW FreeLibrary GetLocalTime CopyFileW GetExitCodeThread InterlockedExchange CreateFileW GetFileSize ReadFile GetModuleFileNameA SetFileAttributesW RemoveDirectoryW MoveFileW GetWindowsDirectoryW SetFilePointer WriteFile lstrcmpiW LoadLibraryExW MoveFileExW FindFirstFileA CreateDirectoryA FindNextFileA CopyFileA MoveFileA CreateEventW lstrcpynA FileTimeToSystemTime FileTimeToLocalFileTime MultiByteToWideChar SetThreadPriority DeleteFileA ExitProcess CreateToolhelp32Snapshot Process32FirstW Process32NextW OpenProcess TerminateProcess GetTempPathA GetTempFileNameA GetSystemInfo FreeResource LockFile UnlockFile SetThreadExecutionState GetLogicalDriveStringsW CompareFileTime OutputDebugStringW QueryPerformanceFrequency QueryPerformanceCounter CreatePipe CreateProcessW GetThreadLocale SetThreadLocale SetEvent GetTickCount GetSystemDirectoryA LoadLibraryA ExpandEnvironmentStringsW InterlockedCompareExchange SetUnhandledExceptionFilter GetCurrentProcessId HeapValidate DebugBreak CreateEventA HeapDestroy HeapCreate ResetEvent CreateMutexW MapViewOfFile UnmapViewOfFile GetSystemTimeAsFileTime CreateFileMappingW ReleaseMutex InitializeCriticalSection HeapReAlloc HeapSize InterlockedPushEntrySList IsProcessorFeaturePresent VirtualFree VirtualAlloc InterlockedPopEntrySList GetStringTypeW EncodePointer DecodePointer TlsAlloc TlsFree TlsGetValue lstrlenA GlobalFree GlobalHandle lstrcmpW MulDiv GlobalAlloc GlobalLock GlobalUnlock FlushInstructionCache GetCurrentProcess SetLastError RaiseException GetCurrentThreadId InitializeCriticalSectionAndSpinCount lstrlenW GetModuleFileNameW GetLastError InterlockedIncrement InterlockedDecrement LeaveCriticalSection EnterCriticalSection DeleteCriticalSection FindResourceExW FindResourceW LoadResource LockResource SizeofResource HeapSetInformation GetStartupInfoW FindFirstFileExW OpenEventA TlsSetValue ResumeThread SystemTimeToFileTime WaitForMultipleObjects SetWaitableTimer CreateWaitableTimerA LocalFree ExitThread GetFullPathNameW VirtualProtect VirtualQuery GetTimeFormatW GetDateFormatW GetFileAttributesA RtlUnwind GetCommandLineW UnhandledExceptionFilter IsDebuggerPresent LCMapStringW GetCPInfo GetStdHandle DeleteFileW CreateThread WideCharToMultiByte GetLocaleInfoW GetCurrentThread GetACP GetOEMCP IsValidCodePage SetHandleCount GetFileType FatalAppExitA GetConsoleCP GetConsoleMode FlushFileBuffers GetTimeZoneInformation FreeEnvironmentStringsW GetEnvironmentStringsW GetFileInformationByHandle PeekNamedPipe SetCurrentDirectoryW GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale SetConsoleCtrlHandler GetFullPathNameA WriteConsoleW SetStdHandle SetEndOfFile SetEnvironmentVariableA GetFileAttributesW

user32

WindowFromPoint GetWindowThreadProcessId DrawFocusRect GetMenuItemID ExitWindowsEx LoadBitmapW ScrollWindow DestroyIcon GetWindowDC GetScrollPos GetScrollRange PostThreadMessageW SetDlgItemInt GetDlgItemInt MonitorFromRect EnumDisplayMonitors MessageBeep SetLayeredWindowAttributes IsWindowEnabled SetRect EnumChildWindows SendMessageA UpdateWindow SetCursor SetParent IntersectRect EqualRect IsRectEmpty CheckMenuRadioItem GetMenuStringW GetMenuState CheckMenuItem LoadMenuW TrackPopupMenu ModifyMenuW DeleteMenu InsertMenuW GetSubMenu EnableMenuItem DrawIcon LoadIconW RemoveMenu AppendMenuW CreatePopupMenu TrackPopupMenuEx GetMenuItemInfoW GetMenuItemCount DestroyMenu PostQuitMessage LoadStringA LoadStringW GetWindowPlacement GetDoubleClickTime CreateDialogParamW FrameRect SetDlgItemTextW LoadImageW MessageBoxA ShowCursor wsprintfW IsZoomed SetRectEmpty GetSysColorBrush CloseClipboard SetClipboardData EmptyClipboard OpenClipboard MessageBoxW DdeNameService DdeConnect DdeCreateStringHandleW DdeInitializeW DdeDisconnect DdeGetData SetScrollPos EnableWindow PeekMessageW GetMessageW TranslateMessage DispatchMessageW SystemParametersInfoW SetWindowRgn SetForegroundWindow IsIconic GetForegroundWindow UnhookWindowsHookEx SetWindowsHookExW CallNextHookEx IsDialogMessageW GetActiveWindow FindWindowW GetSystemMetrics BringWindowToTop GetKeyState GetCursorPos CopyRect GetCapture InflateRect DialogBoxParamW OffsetRect MonitorFromWindow GetMonitorInfoW GetWindowRect MapWindowPoints SetScrollInfo GetScrollInfo EndDialog SendDlgItemMessageW MapDialogRect CreateDialogIndirectParamW SetWindowContextHelpId RegisterWindowMessageW GetWindowTextLengthW GetWindowTextW SetWindowTextW IsChild GetFocus GetWindow GetDlgItem GetClassNameW GetSysColor CharNextW SetWindowPos RedrawWindow GetClassInfoExW CreateWindowExW DestroyWindow CreateAcceleratorTableW ClientToScreen SetCapture ReleaseCapture FillRect InvalidateRgn CallWindowProcW GetDesktopWindow DestroyAcceleratorTable GetWindowLongW SetWindowLongW LoadCursorW RegisterClassExW ReleaseDC GetDC InvalidateRect GetDlgCtrlID IsWindowVisible PostMessageW KillTimer EndPaint BeginPaint SetTimer DefWindowProcW GetClientRect MoveWindow ScreenToClient IsWindow ShowWindow GetParent SendMessageW SetFocus PtInRect UnregisterClassA DrawTextW

gdi32

ExcludeClipRect Rectangle SetBkMode SetTextColor TextOutW CreateCompatibleDC CreateBitmap GetTextMetricsW SetStretchBltMode PtInRegion DPtoLP OffsetRgn GetCurrentObject SetPixel Arc SetTextAlign SetBrushOrgEx StrokePath EndPath BeginPath GetDIBColorTable StretchBlt GetPixel RestoreDC SaveDC CreateDIBSection SetDIBColorTable CreateFontIndirectW CreatePatternBrush CombineRgn CreateRoundRectRgn CreateRectRgn RoundRect LineTo CreateCompatibleBitmap BitBlt GetStockObject GetObjectW GetDeviceCaps SelectObject CreatePen CreateSolidBrush DeleteObject MoveToEx GetTextExtentPoint32W ExtTextOutW SetBkColor DeleteDC

comdlg32

GetSaveFileNameW GetOpenFileNameW

advapi32

RegOpenKeyExA RegDeleteValueA RegEnumKeyExW RegQueryInfoKeyW RegDeleteKeyW RegDeleteValueW RegSetValueExW RegCreateKeyExW RegQueryValueExW RegOpenKeyExW RegEnumKeyW RegSetValueExA AdjustTokenPrivileges OpenProcessToken LookupPrivilegeValueW RegQueryValueExA RegCloseKey RegOpenKeyW RegCreateKeyExA

shell32

ord165 ord51 SHGetFolderPathW SHGetSpecialFolderPathA SHCreateDirectoryExW SHAppBarMessage DragQueryFileW Shell_NotifyIconW SHChangeNotify SHGetMalloc SHGetPathFromIDListW ShellExecuteW SHBrowseForFolderW SHGetSpecialFolderPathW

ole32

OleUninitialize CoTaskMemAlloc StringFromGUID2 OleLockRunning CreateStreamOnHGlobal CoCreateInstance CoGetClassObject CLSIDFromProgID CLSIDFromString OleInitialize CoInitialize CoUninitialize CoTaskMemFree CoCreateGuid StgOpenStorageEx CoTaskMemRealloc

oleaut32

GetErrorInfo VariantChangeType SetErrorInfo VarBstrCmp SysAllocStringByteLen SysStringByteLen OleLoadPicture VarUI4FromStr CreateErrorInfo DispCallFunc SysAllocStringLen SysFreeString SysAllocString OleCreateFontIndirect SysStringLen LoadRegTypeLi LoadTypeLi VariantClear VariantInit

comctl32

_TrackMouseEvent ImageList_Create ImageList_AddMasked ImageList_GetImageInfo ImageList_Draw InitCommonControlsEx ImageList_GetIconSize ImageList_GetImageCount ImageList_Destroy

msimg32

TransparentBlt GradientFill AlphaBlend

urlmon

URLDownloadToFileA UrlMkGetSessionOption

gdiplus

GdipGetImageWidth GdiplusShutdown GdipDrawImageI GdipDeleteGraphics GdipDisposeImage GdipFree GdipAlloc GdipCloneImage GdipCreateBitmapFromScan0 GdipBitmapUnlockBits GdipBitmapLockBits GdipGetImagePalette GdipGetImagePaletteSize GdipCreateBitmapFromFileICM GdipCreateBitmapFromFile GdipDrawImagePointRectI GdipLoadImageFromFileICM GdipLoadImageFromFile GdipLoadImageFromStreamICM GdipLoadImageFromStream GdipDrawImageRectRect GdipRotateWorldTransform GdipTranslateWorldTransform GdipCreateFromHDC GdiplusStartup GdipCreateBitmapFromStreamICM GdipCreateBitmapFromStream GdipGetImagePixelFormat GdipGetImageHeight GdipGetImageGraphicsContext

version

GetFileVersionInfoW GetFileVersionInfoSizeW VerQueryValueW

Name

.text

Size

2.8MB

Virtual Size

2.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

518KB

Virtual Size

518KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

53KB

Virtual Size

97KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

2B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

114KB

Virtual Size

113KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

151KB

Virtual Size

150KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

FunshionDoctor.exe

IMPHASH 123cf2254efc28072e942cddb2640c24
SHA256 56e7f25c8039a5c09deb0334cce0df1079ab931fccf814b5c29e505d9cd0ad55
MD5 cb4a92a9273c2c185120a5a62f57f743
SHA1 cc72672bca4ba113c32c22632b9325bd5cd7a44b
SHA512 b392a82d1adc433b4aa30a0ae11cf9bba25c4c7bca85695ab514feea2486da1e6f7500989ad03194b698f02d3655596d1ce2e5ef8d5e82db8e89095f64b8bef4
SSDEEP 12288:ovEMHytW0NeZTAmB3+R9GY5Rg/8L1vAMuzSocz3TNLGl:ovEMHSW0NeZTAmJY9GF/8L1IM3Al
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

72:97:d2:06:f6:e6:6b:f2:96:83:46:24:0f:c3:57:93:2e:eb:26:95

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Beijing Funshion Online Technologies Ltd.,OU=SECURE APPLICATION DEVELOPMENT,O=Beijing Funshion Online Technologies Ltd.,L=Beijing,ST=Beijing,C=CN

Chains

Aug 8, 2012

Minor OS version

1

Major OS version

5

Entry point

250148

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetCurrentProcessId QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetTimeZoneInformation IsValidCodePage GetOEMCP GetACP FlushFileBuffers GetConsoleMode GetConsoleCP SetFilePointer GetFileType SetHandleCount ReadFile GetStdHandle WriteFile ExitProcess TlsFree TlsSetValue TlsGetValue TlsAlloc HeapCreate CompareStringW GetDateFormatA FindResourceW LCMapStringW GetStartupInfoW HeapSetInformation GetCommandLineW IsDebuggerPresent SetStdHandle UnhandledExceptionFilter GetDateFormatW GetTimeFormatW GetSystemTimeAsFileTime GetCPInfo CreateThread ExitThread RtlUnwind GetLocaleInfoW DecodePointer EncodePointer InitializeCriticalSection GetStringTypeW InterlockedExchange HeapSize HeapReAlloc HeapDestroy InterlockedPopEntrySList VirtualAlloc VirtualFree IsProcessorFeaturePresent HeapAlloc GetProcessHeap HeapFree CreateFileW WriteConsoleW CreateFileA SetEndOfFile SetEnvironmentVariableA GetTickCount TerminateThread lstrlenA GetPrivateProfileIntA GetModuleFileNameA Sleep CreateToolhelp32Snapshot Process32FirstW Process32NextW GetVersionExW WideCharToMultiByte OpenProcess TerminateProcess GlobalLock GlobalUnlock MulDiv GlobalFree CreateEventW ResumeThread GlobalAlloc SetEvent LoadResource SizeofResource RaiseException MultiByteToWideChar SetLastError lstrcmpiW InterlockedDecrement InterlockedIncrement GetModuleHandleW lstrlenW GetCurrentThreadId LoadLibraryW GetProcAddress InterlockedPushEntrySList InterlockedCompareExchange WaitForSingleObject CloseHandle ResetEvent CreateMutexW lstrcpynW FindResourceExW LockResource GetModuleFileNameW SetUnhandledExceptionFilter LoadLibraryExW FreeLibrary GetCurrentProcess FlushInstructionCache DeleteCriticalSection InitializeCriticalSectionAndSpinCount GetLastError LeaveCriticalSection EnterCriticalSection GetTimeFormatA

user32

GetClientRect ShowWindow GetDlgCtrlID DrawTextW BeginPaint EndPaint MoveWindow DialogBoxParamW DestroyWindow CharNextW DefWindowProcW CreateDialogParamW GetActiveWindow RegisterClassW GetClassInfoW FindWindowA FillRect CopyRect SetWindowPos GetUpdateRect InvalidateRect GetSysColor ReleaseDC GetDC SetRect PtInRect SetRectEmpty PostMessageW GetWindowTextW GetWindowTextLengthW GetWindowRect CallWindowProcW GetWindowLongW SetWindowLongW SendMessageW GetSystemMetrics CreateWindowExW RegisterClassExW SendDlgItemMessageW EndDialog LoadCursorW GetClassInfoExW SetScrollInfo GetWindow MonitorFromWindow GetMonitorInfoW MapWindowPoints EnableWindow RedrawWindow IsWindowVisible SetWindowTextW MessageBoxW GetCapture ReleaseCapture LoadImageW GetScrollInfo GetScrollPos FindWindowW SetWindowRgn GetParent GetKeyState GetCursorPos SetFocus SetCapture KillTimer SetTimer ScreenToClient UnregisterClassA

gdi32

SetTextColor Rectangle SetBkMode SelectObject CreateCompatibleDC RoundRect LineTo MoveToEx GetStockObject CreateRoundRectRgn CreatePatternBrush StretchBlt GetObjectW SetStretchBltMode SetBrushOrgEx GetDeviceCaps BitBlt DeleteDC GetCurrentObject DeleteObject CreatePen CreateFontIndirectW CreateSolidBrush CreateCompatibleBitmap TextOutW

advapi32

RegDeleteKeyW RegCreateKeyExW RegDeleteValueW RegCloseKey RegSetValueExW RegQueryInfoKeyW RegEnumKeyExW RegOpenKeyExA RegQueryValueExW RegQueryValueExA RegOpenKeyExW

shell32

SHGetSpecialFolderPathA ShellExecuteW

ole32

CreateStreamOnHGlobal CoUninitialize CoTaskMemFree CoCreateInstance CoTaskMemRealloc CoTaskMemAlloc CoInitialize

oleaut32

OleLoadPicture VarUI4FromStr

shlwapi

PathFileExistsA PathRemoveArgsW PathFileExistsW

comctl32

_TrackMouseEvent ImageList_Draw ImageList_AddMasked ImageList_Destroy ImageList_Create ImageList_GetImageInfo ImageList_GetImageCount InitCommonControlsEx

urlmon

UrlMkGetSessionOption

wininet

InternetOpenUrlW InternetGetConnectedState InternetOpenA InternetSetOptionA

iphlpapi

GetPerAdapterInfo GetAdaptersInfo GetNetworkParams

psapi

GetProcessMemoryInfo

dnsapi

DnsQuery_A DnsFree

ws2_32

__WSAFDIsSet ntohl htonl ntohs socket htons select closesocket gethostbyname inet_ntoa WSACleanup WSAStartup inet_addr send recv WSAGetLastError ioctlsocket connect

netapi32

Netbios

FunshionGame3.ico

SHA256 85a31e213e5fac9d95c67bce982048ed0642715bb5e96cc9ca4bf30db6e5d974
MD5 b0dff3763ee5a4a809b3e77269dbb18e
SHA1 fb15e9a5a9b98f32e34fb8347d31d175fbf522f8
SHA512 4160fa526c9a3a7339c47c89624fd5943e83ccc008527d02bd9505c7e9b62fbba826b61889c593feedc77fe6363df9af8328dea396fe9d015567bb67bbbc41a0
SSDEEP 768:aybTS+XIrkSNgpo5CT71Ygn39VRhs7H5kEHD:ayb2Y4AYgnNVRqRD
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

FunshionService.exe

IMPHASH d363c89f5eed1523dda13771759e10c7
SHA256 9e5f5887cb0be2137bffd0bac66dd1f5ed30b3837027aa3e0ac663aaa42b8d58
MD5 b17b6c65ab9685ce391c1ee6e8d7c61f
SHA1 a2bea3e4cd2ab9d5bdf356987a6d3146a1b7fcb5
SHA512 6a0e5e998a85991be0a9f9132aed8d683aec6eefedf7e7904c7f607a3cea05cb77c7ab45661f5f53255dd70d21290340b4dc870e753d5b96783235e46843d4c3
SSDEEP 49152:w00o3QVkegHGhE09OE260EVUM43f3iEYKW1mpqcYIGLAa:wHo3QSGh7OEl0EVUMfEYKWEqUG/
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

15:ed:5e:f5:af:d2:76:e2:88:0e:5d:30:a6:e1:10:67:93:b3:df:32

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Beijing Funshion Online Technologies Ltd.,OU=SECURE APPLICATION DEVELOPMENT,O=Beijing Funshion Online Technologies Ltd.,L=Beijing,ST=Beijing,C=CN

Chains

Aug 8, 2012

Minor OS version

1

Major OS version

5

Entry point

776231

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\build2.6.8\Funshion\Rel\symbols\FunshionService.pdb

advapi32

OpenProcessToken LookupPrivilegeValueW AdjustTokenPrivileges RegQueryValueExW RegOpenKeyExW RegCloseKey

user32

LoadCursorW PostMessageW DestroyWindow TranslateMessage FindWindowW wsprintfW RegisterClassExW LoadIconW DefWindowProcW DispatchMessageW PeekMessageW ShowWindow UpdateWindow CreateWindowExW

ws2_32

WSAGetOverlappedResult bind WSASend WSARecv WSASendTo WSARecvFrom WSASocketW __WSAFDIsSet WSAIoctl getsockname setsockopt socket closesocket getsockopt listen inet_ntoa WSAGetLastError WSASetLastError inet_addr htonl htons select send recv connect ioctlsocket gethostbyname ntohs ntohl WSAStartup WSACleanup

quality

report_uninitialize set_run_mode report_udpt report_tcp report_initialize report_task_state report_playing_pausing report_something report_mem_info report_task_detail report_ms_flow

iphlpapi

GetNetworkParams

dnsapi

DnsFree DnsQuery_A

gma

get_time_cost_mac_main get_and_update_mac get_time_cost_mac get_mac_info get_nic_description GetCurrUsedIPUL GetMACAddress

dump

upload_log disable_output_log_to_file enable_output_log_to_file dump_initialize init_config_center dump_log remove_log lvalue destroy_config_center ?dump_info@dump@@YAHABV?$basic_format@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@boost@@@Z if_dump dump ulvalue_of record_log_interface lvalue_of svalue svalue_of

agentd

ord1 ord2 ord3

lsv

ord1 ord2

ptv

?get_ptvisitor@nsptv@@YAPAVi_ptvisitor@1@XZ ?release_ptvisitor@nsptv@@YAXXZ

ttv

ord1 ord2

kernel32

SetStdHandle HeapReAlloc IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetTimeZoneInformation LoadLibraryW GetConsoleMode GetConsoleCP IsValidCodePage GetOEMCP GetACP HeapSize GetLocaleInfoW CompareStringW HeapDestroy HeapCreate SetLastError InitializeCriticalSectionAndSpinCount SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW ExitProcess GetModuleHandleW LCMapStringW RtlUnwind GetCPInfo RaiseException GetStdHandle GetFileType WriteConsoleW GetLocalTime IsProcessorFeaturePresent HeapValidate DebugBreak SetEnvironmentVariableA CreateThread ExitThread TerminateProcess IsDebuggerPresent UnhandledExceptionFilter GetStartupInfoW HeapSetInformation GetCommandLineW CreateWaitableTimerA SetWaitableTimer WaitForMultipleObjects SystemTimeToFileTime TlsSetValue OpenEventA TlsGetValue TlsFree TlsAlloc LeaveCriticalSection EnterCriticalSection DeleteCriticalSection InitializeCriticalSection DecodePointer EncodePointer GetStringTypeW GetModuleHandleA SetEndOfFile GetFileAttributesExW RemoveDirectoryW FlushFileBuffers GetFileAttributesW SetFilePointerEx GlobalMemoryStatus lstrcpyA lstrcpyW ReleaseMutex CreateFileMappingW UnmapViewOfFile MapViewOfFile CreateMutexW ReadFile SetFilePointer GetFileSize GetDiskFreeSpaceExW FindNextFileW FindClose MoveFileW FindFirstFileW ResetEvent ResumeThread CreateIoCompletionPort PostQueuedCompletionStatus GetTickCount GetProcessHeap GetCurrentThreadId HeapAlloc CreateEventA CloseHandle HeapFree WaitForSingleObject SetEvent GetSystemTimeAsFileTime Sleep GetCurrentProcess GetLastError GetPrivateProfileIntW InterlockedExchange InterlockedExchangeAdd ExpandEnvironmentStringsW QueueUserWorkItem GetPrivateProfileStringW QueryPerformanceCounter QueryPerformanceFrequency CreateEventW WideCharToMultiByte MultiByteToWideChar InterlockedIncrement InterlockedDecrement InterlockedCompareExchange CreateProcessW GetVersionExW GetModuleFileNameW CreateFileW GetProcAddress lstrcmpiW SetUnhandledExceptionFilter GetCurrentProcessId FindResourceExW FindResourceW LoadResource WriteFile SizeofResource LockResource DeleteFileW GlobalAlloc GlobalFree GetQueuedCompletionStatus

urlmon

UrlMkGetSessionOption

dbghelp

MiniDumpWriteDump

shell32

SHFileOperationW ord165 SHGetSpecialFolderPathW ord51 SHGetFolderPathW SHCreateDirectoryExW ShellExecuteW

shlwapi

PathRemoveFileSpecW PathIsRelativeW PathAppendW PathRemoveBackslashW PathCombineW PathAddBackslashW PathFileExistsW

wininet

HttpQueryInfoA InternetOpenUrlW InternetReadFile InternetSetOptionA HttpQueryInfoW InternetGetConnectedState InternetOpenA InternetCloseHandle

Name

.text

Size

1.7MB

Virtual Size

1.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

336KB

Virtual Size

336KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

22KB

Virtual Size

802KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

2B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

27KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

79KB

Virtual Size

79KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

FunshionUpgrade.exe

IMPHASH 49fef21c7b2965ef5571962fa8e196ef
SHA256 ff1d62169b8c17346042b03c2b8f6441d1471c9ec5960145da6b1a6e5ae0157f
MD5 00116272b8a0638595cb0e4a1e7dc9e9
SHA1 5a4467e58059e9cb2504ebcc6c718949d78dff51
SHA512 fb581d37b918e3269a7f1cf99cbb2c2a959f7fb989f737a3a757f48881156ea4654d95be7dccb81184b2cd800593ebfb85f8227b937f38866157255cf4a0d49e
SSDEEP 24576:Fqe5ikbYEns3eFm5nETLuvyhaLAYs7eoqPH18QOZaZglNO2zTj3KzeK0FdE:F9pIzC/huHs7eoqPH18QOZaZglNO2zTy
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

22:36:a9:f7:f1:02:a6:0f:43:17:a7:da:7d:c4:e7:59:02:fb:f1:60

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Beijing Funshion Online Technologies Ltd.,OU=SECURE APPLICATION DEVELOPMENT,O=Beijing Funshion Online Technologies Ltd.,L=Beijing,ST=Beijing,C=CN

Chains

Aug 8, 2012

Minor OS version

0

Major OS version

4

Entry point

443646

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\build2.6.8\updater\client\0.1.4\bin\release\FunshionUpgrade.pdb

wldap32

ord200 ord33 ord301 ord27 ord41 ord46 ord79 ord35 ord32 ord26 ord50 ord60 ord143 ord211 ord22 ord30

ws2_32

WSASetLastError sendto gethostbyaddr getservbyname htonl inet_ntoa gethostbyname inet_addr socket connect setsockopt getsockopt htons bind ntohs getsockname send recv WSAGetLastError closesocket WSAStartup WSACleanup recvfrom accept listen __WSAFDIsSet select ioctlsocket getservbyport

dbghelp

MakeSureDirectoryPathExists

wininet

InternetCloseHandle InternetGetConnectedState InternetOpenA InternetSetStatusCallbackW InternetConnectA HttpOpenRequestA HttpSendRequestA InternetReadFileExA HttpQueryInfoW InternetSetOptionA

kernel32

VirtualFree IsProcessorFeaturePresent InterlockedCompareExchange HeapSize HeapReAlloc HeapDestroy GetVersionExA GetLocaleInfoA DeleteFileW WideCharToMultiByte FindResourceW SizeofResource CreateEventW LockResource LoadResource SetEvent FindResourceExW RaiseException InitializeCriticalSection CloseHandle EnterCriticalSection LeaveCriticalSection GetLastError WaitForSingleObject WriteFile SetLastError GetCurrentThreadId lstrlenW lstrcpynW GetModuleFileNameW GetCurrentProcess FlushInstructionCache GetThreadLocale lstrcmpiW lstrcpyW CompareStringW LoadLibraryW GetProcAddress FreeLibrary CreateToolhelp32Snapshot Process32FirstW OpenProcess TerminateProcess Process32NextW CreateFileW GetSystemInfo GetVersionExW GetPrivateProfileIntW SetThreadLocale WritePrivateProfileStringW MultiByteToWideChar GetModuleHandleW GetModuleFileNameA CreateFileA SetFilePointer GetPrivateProfileIntA GetPrivateProfileStringW LoadLibraryExW InterlockedIncrement DeleteCriticalSection InterlockedDecrement HeapFree GetProcessHeap GetTickCount VirtualAlloc HeapAlloc CreateEventA Sleep ReleaseMutex TlsAlloc TlsFree TlsGetValue CreateMutexA GetCurrentProcessId ResetEvent TlsSetValue ResumeThread SystemTimeToFileTime WaitForMultipleObjects SetWaitableTimer CreateWaitableTimerA LocalFree FormatMessageA GetFileAttributesA GetFileAttributesW GetFileAttributesExW GetCurrentDirectoryW SetCurrentDirectoryW GetFileAttributesExA GetCurrentDirectoryA SetCurrentDirectoryA FindClose GetFileTime SetFileTime GetDiskFreeSpaceExW GetFullPathNameW RemoveDirectoryW CreateDirectoryW CreateHardLinkW GetDiskFreeSpaceExA GetFullPathNameA RemoveDirectoryA DeleteFileA CreateDirectoryA CreateHardLinkA MoveFileW CopyFileW MoveFileA CopyFileA GetFileInformationByHandle GetShortPathNameW FindFirstFileW FindNextFileW FindFirstFileA FindNextFileA SleepEx LoadLibraryA GetSystemDirectoryA DuplicateHandle GetExitCodeThread TerminateThread ReadFile PeekNamedPipe GetFileType GetStdHandle ExpandEnvironmentStringsA UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent ExitThread CreateThread GetStartupInfoW RtlUnwind InterlockedExchange GetACP GetTimeFormatA GetDateFormatA FileTimeToSystemTime FileTimeToLocalFileTime GetDriveTypeW GetModuleHandleA ExitProcess GetDriveTypeA LCMapStringA LCMapStringW GetCPInfo GetStringTypeA GetStringTypeW GetCurrentThread FatalAppExitA HeapCreate GetOEMCP IsValidCodePage FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetCommandLineW SetHandleCount GetStartupInfoA QueryPerformanceCounter GetConsoleCP GetConsoleMode FlushFileBuffers GetTimeZoneInformation SetConsoleCtrlHandler SetStdHandle GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetLocaleInfoW WriteConsoleA GetConsoleOutputCP WriteConsoleW CompareStringA SetEnvironmentVariableA SetEndOfFile GetSystemTimeAsFileTime

user32

InflateRect PostQuitMessage DispatchMessageW TranslateMessage GetMessageW PeekMessageW MessageBoxA MapWindowPoints SystemParametersInfoW SetRect ScreenToClient GetCursorPos OffsetRect SetFocus CharNextW GetSysColor SetWindowTextW UpdateWindow GetClassNameW SetCursor PtInRect GetWindowTextW LoadCursorW ReleaseCapture GetCapture EnableWindow SetLayeredWindowAttributes GetClassInfoExW SetCapture KillTimer RegisterClassExW SetRectEmpty InvalidateRect GetSysColorBrush CopyRect LoadBitmapW ReleaseDC IsWindowEnabled CreateWindowExW GetDC IsWindow SendMessageW LoadImageW SetWindowPos UnregisterClassA GetWindowTextLengthW SetWindowLongW GetClientRect DefWindowProcW GetWindowLongW EndPaint FindWindowW SetTimer wsprintfW DestroyWindow CallWindowProcW FillRect ShowWindow GetActiveWindow GetSystemMetrics BeginPaint EndDialog LoadIconW GetDlgItem DialogBoxParamW BringWindowToTop DrawIcon GetParent GetWindow PostMessageW GetWindowRect MoveWindow SetWindowRgn DrawTextW GetDlgCtrlID

gdi32

DPtoLP GetObjectW TextOutW CreateSolidBrush GetDeviceCaps CreateCompatibleBitmap GetPixel CreateCompatibleDC Arc GetTextExtentPoint32W CreatePen CreateBitmap BitBlt CreateDIBSection DeleteDC CreatePatternBrush SetBrushOrgEx CreateFontIndirectW ExtTextOutW SetBkColor RoundRect LineTo MoveToEx SetBkMode GetStockObject DeleteObject SetTextColor CreateRoundRectRgn StretchBlt SelectObject

advapi32

RegEnumKeyExW RegOpenKeyExW RegQueryValueExW RegCreateKeyExW RegSetValueExW RegQueryValueExA RegOpenKeyExA IsTextUnicode RegDeleteValueW RegCloseKey RegQueryInfoKeyW RegDeleteKeyW

shell32

SHGetSpecialFolderPathW ShellExecuteW SHGetSpecialFolderPathA

ole32

CoCreateInstance CoTaskMemAlloc CoUninitialize CoTaskMemFree CoInitialize CoTaskMemRealloc

oleaut32

VarUI4FromStr SysFreeString

shlwapi

PathFileExistsA PathFileExistsW PathRemoveFileSpecA

comctl32

InitCommonControlsEx ImageList_Create ImageList_AddMasked ImageList_GetImageCount _TrackMouseEvent ImageList_Draw ImageList_GetImageInfo

msimg32

TransparentBlt GradientFill

Funshop3.ico

SHA256 087a554c93cce1beee989d7f8e9ef9a2f891b8b5ed81098f6c25057b3afea5c4
MD5 66c9525ff1ff95e5dc088374ed423aee
SHA1 e830473e2629398707e065a6d547d02f1b034a61
SHA512 65011c9679a81a0c7926045bbd26f8214a50b4267365727bac5840a5eb63dae160f3c8405a006de1648876173c0a30f2741e35944c3ca3a0ce52ba633c1b6e0c
SSDEEP 192:3QXvdpEc/gUmEWn077jlOkGmrTFA57qdBx2V1y/hHLvwNhdMK8urKW6qO/fM:3kdzPmNn038knW57eHhTwNhaIpWM
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

LangResEnAmerican.dll

IMPHASH 2e168f9fee36c65804acc85d4752ed9f
SHA256 0d5cafb882c77bc3a37f4e87ec804859eedb99db7d2c3a64fbe9e5474addfd05
MD5 d06790ef7cd090e8c53afafa9a85b98a
SHA1 53a5a0281c41148e9aad9a3fc2b4eb895a6712df
SHA512 563ca950c4c6fbfe54e37234b340ee18e98c99ea7dbd12f2355880fdb4c2b59cd6fa384fb84d815dedafaab45f959654ef1941b45590cf18795c08eb32caee00
SSDEEP 1536:3XQsN4IugFfapt86T+e1zw6zCPJRA3llvnhAPmx4xIo:3B4I1YO6Kizw62PfAVlvO+x4xF
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

73:9b:9e:65:a4:01:97:23:6d:db:b3:4e:8e:4a:0b:8d:3e:a0:81:9d

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Beijing Funshion Online Technologies Ltd.,OU=SECURE APPLICATION DEVELOPMENT,O=Beijing Funshion Online Technologies Ltd.,L=Beijing,ST=Beijing,C=CN

Chains

Aug 8, 2012

Minor OS version

1

Major OS version

5

Entry point

4719

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\build2.6.8\Funshion\Rel\symbols\LangResEnAmerican.pdb

Uninstall.exe.nsis

SHA256 e414c76a3090e9e9273e747e95916517c8fa4f6bf0bfb4c411c1a14dfd00e474
MD5 7f70cb7176f3e68404835dc44f57732b
SHA1 a555e861448b7566d84bb42725c9f1ca4d34562b
SHA512 9b09fbafef0423ad693947103cdf6ab5c0c3889b57fc1ea797ad9894a2bd8b852b403672de87e1db3d166cf83be3f77cf25c23c939fa45e0a38cebaa0203b74e
SSDEEP 6144:9UM24fLnrN5wyDEodLnajjwK/LjxYmaP/A266IPE5UG7/sQpwSSFb8VkF36Teat:95tLnh5wyDXLsjwKD18XAHEy+UGGoqtQ
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

agentd.dll

IMPHASH d3373049f7ad2325b0dd8079ca329127
SHA256 b94f12a7284c4d2f93766b0b9a6fb9080ed5f97ea38203a7bb470a0d0d4c8e88
MD5 7137c57c2321261a76979c1d3fe291ca
SHA1 45ff5052a9663027c6b8658deca2b0548e93671a
SHA512 689b52b5a88d141a421d19bbbfa361c46f86dd6d46158575c09aa9f14c41c261b19a0a23604d927de2698076bc30724b62ffc3da2d16bbf0d5cc28e3dc73b727
SSDEEP 3072:2sswYvjVC/VxLWtTjDILtvrEsvyvXPGFghTOebx6o6xnTIFyv9xIo1+2Z1hi6MFd:lswY4+jDOQs2GyhTOebx6o6xTt+Nwk
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

85:84:63:11:92:e4:b5:d8:9d:9d:f9:d7:0b:bb:69:6f:11:6b:29:a3

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Beijing Funshion Online Technologies Ltd.,OU=SECURE APPLICATION DEVELOPMENT,O=Beijing Funshion Online Technologies Ltd.,L=Beijing,ST=Beijing,C=CN

Chains

Aug 8, 2012

Minor OS version

1

Major OS version

5

Entry point

123345

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\build2.6.8\Funshion\Rel\symbols\agentd.pdb

ws2_32

__WSAFDIsSet ntohl ioctlsocket connect select WSAGetLastError sendto recv bind ntohs closesocket socket inet_addr gethostbyname htonl htons

dump

dump if_dump

quality

report_something

kernel32

SetStdHandle LoadLibraryW GetConsoleMode GetConsoleCP SetFilePointer WriteConsoleW HeapReAlloc IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID IsValidCodePage GetOEMCP FlushFileBuffers SystemTimeToFileTime GetACP GetTickCount GetCurrentThreadId CreateEventA CloseHandle WaitForSingleObject SetEvent GetProcessHeap HeapAlloc HeapFree Sleep WideCharToMultiByte InterlockedIncrement InterlockedDecrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar GetStringTypeW EncodePointer DecodePointer InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetSystemTimeAsFileTime TlsAlloc TlsFree TlsGetValue GetCurrentProcessId OpenEventA ResetEvent TlsSetValue ResumeThread CreateFileW WaitForMultipleObjects SetWaitableTimer CreateWaitableTimerA GetLastError GetCommandLineA GetCPInfo RaiseException RtlUnwind LCMapStringW ExitThread CreateThread TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent HeapCreate HeapDestroy GetModuleHandleW SetLastError GetProcAddress WriteFile GetStdHandle GetModuleFileNameW GetLocaleInfoW ExitProcess SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType GetStartupInfoW GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter HeapSize

Name

.text

Size

215KB

Virtual Size

215KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

39KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

10KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

2B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

436B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

15KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

atrc.dll

IMPHASH 2f5ab2eb4b4ccc26411c35c942298cd3
SHA256 261db31a167ca9555767a8cfe17c955abafd52da48a0b0f826d3200f4528e902
MD5 1fd9fda1866abf44601c66997c1bf2a4
SHA1 12053fafc29f3e0398ecbacb528a306850d8e806
SHA512 bb9e745ce72a4d4a24625005b463b6d33f00bcbabe2c83ab0dc82511b83d88c4bb715bf5619f296e7f43a7788768590a79bc954064990f3d72868fb4a2c69ab8
SSDEEP 1536:qAaDigVCSkFXNojEEsoR7rmYDUY+unZlQ9G7:XlgVCvFX6EEsK+YwlIZ29G7
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

59614

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\src\datatype_rn\rm\audio\codec\ra8hbr\atrc.pdb

cook.dll

IMPHASH 7186ef18b8145b9efacd73914d40cee0
SHA256 f8b5898569a508e370eb25db27c1cba440c9d559529850c05589e56a93659835
MD5 fa220dae3898b8578c34791648321a38
SHA1 12bdd5396e996d071368980d36ef6f6c7b39f936
SHA512 9c2ad73fd43de7ca16a1d75b2974a737dfe1478d094783861ff5e3f994e17bc9e36e31f130296b497bb8955849be31db526018c0621cf5b09496fc6e5c3d6f34
SSDEEP 768:79rczOVJc8avUhcRxV6Sz+b2G90YnGZosMwCJtVSk7K+t6tj6tVDWVp3Ghv+Xb:7uqc8/aUSz62G9LnOnMK+t6tR
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

31536

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

coreavc.ax

IMPHASH a51dab6f4a70c7f5108331c3fee35df0
SHA256 779768aa0bf2270422e1686547ae622238e7b7cf37ce212a1d75caf8628c1508
MD5 a45cfb1f058297ae981f8afeef056b8d
SHA1 e454ed585a0f19d3119cef725958ea19c93cd7cf
SHA512 efa87c97e4f76d5fbd73d2e0c5c580c719518d4e3e7e16efdb1355b659c9584956bc7df944f0d637f069f359a046fe65bfd178e4cbaf97fbb5921ebd29e09aa0
SSDEEP 6144:/+x+B++xX1f3uZINBKD5wlA9amB38sDFe9E23XbFDZ:Wi+A1fJ2wlhmKsg22nbNZ
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

5

Entry point

1110252

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

drvc.dll

IMPHASH 5d841dc9603dda4e7058b842c1dedbfc
SHA256 ef8d7d81cb460db57f2e737ca0de3e0c6c06f78273e49a47b24f0a1eeaa2909f
MD5 e9ad4c6feede8ce70a1a21ed1dc0e2ad
SHA1 ec6b32969e43328a177456be63864d004d501fce
SHA512 ccd0a54e989b882db33e932fd95d29922dcc3e8608f32beef5882182be0534d809f67ce4d54ac894165f51e237ad39402ca97cf05e933fdd3c01c4f6ae50643c
SSDEEP 6144:hsNg+cXo8ZJI54BxrFPpH5Dtf5DNWoEaeglljEz:hsNg+Qo8ZJPWoEillYz
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

7952

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

192KB

Virtual Size

189KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

44KB

Virtual Size

42KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data1

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

4KB

Virtual Size

984B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

dump.dll

IMPHASH e4a6d9649d7242f22c20ed532443f3e4
SHA256 91cce2f5b0830868fecd7df0e09434c081bd9fe094adb32e9c0e11bc95588524
MD5 bcfdef690439677ab63214faec016f61
SHA1 c1e5d5350a4800ae59caae36e6d241483ae6060a
SHA512 19c722ec60de249a6f41b5a259af8c768cf399876cb8bffc86ef1c3b8129e67319c42c52ae289c25cb1671e2c982b1f11f1096970b8dd6377c7f7b6763e3282a
SSDEEP 3072:f4jP6DRV9PgGuzlBGLpu2xrCL6jspw4HnqyNwOkcSEgKrjBAJ0nYdah:f4jPYdALGzlCPtnp3k4j6qfh
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

9c:86:42:67:df:17:cb:26:64:fa:c7:55:75:fb:70:7c:e4:4c:44:e4

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Beijing Funshion Online Technologies Ltd.,OU=SECURE APPLICATION DEVELOPMENT,O=Beijing Funshion Online Technologies Ltd.,L=Beijing,ST=Beijing,C=CN

Chains

Aug 8, 2012

Minor OS version

1

Major OS version

5

Entry point

127393

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\build2.6.8\Funshion\Rel\symbols\dump.pdb

kernel32

CloseHandle GetTickCount TerminateThread Sleep GetPrivateProfileIntW GetLastError ResetEvent GetPrivateProfileSectionW CreateEventW OutputDebugStringW GetPrivateProfileStringW WritePrivateProfileStringW lstrcpyW GetModuleFileNameW CreateFileW GetProcAddress WideCharToMultiByte MultiByteToWideChar GetModuleFileNameA FindResourceExW FindResourceW LoadResource WriteFile SizeofResource LockResource DeleteFileW InterlockedIncrement InterlockedDecrement InterlockedCompareExchange InterlockedExchange GetStringTypeW EncodePointer DecodePointer InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapFree GetSystemTimeAsFileTime ExitThread CreateThread GetCommandLineA GetFileAttributesW GetLocalTime GetCPInfo RaiseException RtlUnwind GetCurrentThreadId LCMapStringW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent HeapCreate HeapDestroy SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType GetStartupInfoW GetModuleHandleW ExitProcess TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError HeapSize GetLocaleInfoW GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetConsoleCP GetConsoleMode FlushFileBuffers ReadFile SetFilePointer HeapReAlloc LoadLibraryW SetStdHandle CreateFileA WriteConsoleW SetEndOfFile GetProcessHeap OpenEventA SetEvent WaitForSingleObject HeapAlloc CreateEventA

shell32

SHGetSpecialFolderPathW SHCreateDirectoryExW ShellExecuteW

urlmon

UrlMkGetSessionOption

shlwapi

PathRemoveFileSpecW PathFileExistsW

wininet

InternetCloseHandle InternetOpenA InternetGetConnectedState HttpQueryInfoW InternetSetOptionA InternetReadFile InternetOpenUrlW HttpQueryInfoA

Name

.text

Size

215KB

Virtual Size

214KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

49KB

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

10KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

2B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

696B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

17KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

fptassrv.dll

IMPHASH 14c2e37d1ddc895ef788dad646cd0ea0
SHA256 b81785573af80a829157cdee5186b004a65d846ae32bd0cff376499152a7e600
MD5 a8436dfa63dce9b6cb6d8f747c395400
SHA1 3a0e7c0b47ce6e220a1a6dda3c2c833817a2e9be
SHA512 f5bd2dc3c66c537ce033bca28936a59795fbda2e862517e97b30de8e9c94429f359b34f39654d80e72df6435b8007dcc849a32b1a142664f907623ccaf0cf62b
SSDEEP 3072:WelPjKT3Pa5/CixqJ01N1ZOZngX4E7nYAZQbur258QZo9TBf/d9RQL8RSPWg:We1mDLq34VgXH7n6y288o9TB9Av
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

ef:82:10:1a:d3:91:d7:04:83:cd:37:59:b2:dc:64:12:18:19:1f:46

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Beijing Funshion Online Technologies Ltd.,OU=SECURE APPLICATION DEVELOPMENT,O=Beijing Funshion Online Technologies Ltd.,L=Beijing,ST=Beijing,C=CN

Chains

Jan 13, 2012

Minor OS version

1

Major OS version

5

Entry point

99624

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\build2.6.3\Funshion\Rel\symbols\fp_tas_visitor.pdb

ws2_32

gethostbyname ntohl ntohs htonl htons select __WSAFDIsSet ioctlsocket connect WSAGetLastError recv socket closesocket send

kernel32

GetProcAddress ExitThread CreateWaitableTimerA SetWaitableTimer WaitForMultipleObjects SystemTimeToFileTime ResumeThread ResetEvent OpenEventA SetEnvironmentVariableA CompareStringW CreateFileW WideCharToMultiByte GetTickCount GetProcessHeap GetCurrentThreadId HeapAlloc CreateEventA CloseHandle HeapFree WaitForSingleObject SetEvent GetSystemTimeAsFileTime DecodePointer EncodePointer UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess EnterCriticalSection LeaveCriticalSection GetTimeFormatA GetDateFormatA GetCommandLineA GetLastError WriteFile GetStdHandle GetModuleFileNameW RaiseException IsProcessorFeaturePresent TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetModuleHandleW SetLastError InterlockedDecrement CreateThread Sleep HeapSize ExitProcess SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType GetStartupInfoW DeleteCriticalSection GetConsoleCP GetConsoleMode FlushFileBuffers GetCPInfo GetACP GetOEMCP IsValidCodePage GetTimeZoneInformation GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate HeapDestroy QueryPerformanceCounter GetCurrentProcessId LoadLibraryW RtlUnwind HeapReAlloc WriteConsoleW MultiByteToWideChar SetFilePointer SetStdHandle LCMapStringW GetStringTypeW

Name

.text

Size

167KB

Virtual Size

167KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

41KB

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

7KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

2B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

436B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

13KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

funoictl.dll

IMPHASH 0377933456373156a124246c9d7f0976
SHA256 e8aca1ea94a6a8233b75d29c6c7df0adb0a7c6ae1db3b9fa06b7adc43b8f8940
MD5 bbca1085dd30af06850e3f9bb6a23d21
SHA1 f6edffa83fa6c6001e915917a9eb671f87ee83fb
SHA512 46371bd3679cbd78b121b3f7ef6f874fcee6b2dc8809aa6cc98c07659dba421c5c2a79da6782ed737c539adfdd3ce0727581186f390d8fd436bf59e1c3f9a8f9
SSDEEP 3072:30TbxUTR15NGTxbsF0XJsU3I7h4i4dpeFmg9u+1qTcHNrw2UGP3FOd16+d+q:30X293s27U3IN4ikpPTGw2UGP3FCYq
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

23:26:f9:db:8b:f8:cc:8f:9d:74:35:18:b8:bd:8c:71:59:0f:db:d8

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Beijing Funshion Online Technologies Ltd.,OU=SECURE APPLICATION DEVELOPMENT,O=Beijing Funshion Online Technologies Ltd.,L=Beijing,ST=Beijing,C=CN

Chains

Aug 8, 2012

Minor OS version

1

Major OS version

5

Entry point

105035

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\build2.6.8\Funshion\Rel\src\plugin\FunOICtrl_ActiveX\bin\release\funoictl.pdb

wininet

InternetCloseHandle HttpQueryInfoW InternetSetOptionA HttpQueryInfoA InternetOpenA InternetGetConnectedState InternetOpenUrlW InternetReadFile

kernel32

GetFileType SetHandleCount IsValidCodePage GetOEMCP GetACP GetCPInfo HeapCreate GetStdHandle TlsFree TlsSetValue TlsGetValue TlsAlloc IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter ExitProcess GetCommandLineA VirtualQuery GetStartupInfoW VirtualProtect MoveFileW RtlUnwind CreateThread ExitThread DecodePointer EncodePointer InterlockedPopEntrySList VirtualAlloc VirtualFree IsProcessorFeaturePresent InterlockedPushEntrySList InterlockedCompareExchange GetProcessHeap HeapSize HeapReAlloc HeapFree HeapAlloc HeapDestroy GetSystemInfo InterlockedDecrement FlushFileBuffers WriteConsoleW SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetStringTypeW LCMapStringW GetConsoleMode RaiseException GetLastError InitializeCriticalSectionAndSpinCount DeleteCriticalSection GetTempPathW GlobalAlloc GlobalLock GlobalUnlock MulDiv lstrcmpW SetThreadLocale LoadLibraryExW lstrcmpiW SetEvent MultiByteToWideChar TerminateProcess LoadLibraryW FreeLibrary WideCharToMultiByte CreateEventW GetModuleHandleW GetProcAddress Sleep GetTickCount InterlockedIncrement GetModuleFileNameW SetLastError GetThreadLocale GetCurrentThreadId lstrcpynW GetCurrentProcess FlushInstructionCache lstrlenW LeaveCriticalSection EnterCriticalSection WriteFile DeleteFileW CreateFileW WaitForSingleObject CloseHandle FindResourceExW FindResourceW LoadResource LockResource SizeofResource GetModuleFileNameA

user32

CharNextW DestroyWindow GetSystemMetrics GetActiveWindow SetTimer MonitorFromWindow GetMonitorInfoW MapWindowPoints CreateDialogParamW UnionRect EqualRect GetDlgItem ShowWindow IntersectRect SetFocus PostQuitMessage BringWindowToTop GetWindow DialogBoxParamW IsChild GetFocus GetKeyState DefWindowProcW GetClientRect FillRect UnregisterClassA SetWindowTextW InflateRect EndDialog RegisterClassExW CreateWindowExW GetDC ReleaseDC GetCapture ReleaseCapture DrawTextW OffsetRect SetRectEmpty PtInRect CopyRect LoadCursorW GetClassInfoExW SetWindowPos IsWindow SetWindowRgn GetDlgCtrlID GetParent SetCapture IsWindowEnabled KillTimer InvalidateRect GetWindowRect MoveWindow PostMessageW SendMessageW LoadBitmapW CallWindowProcW GetWindowLongW SetWindowLongW EndPaint BeginPaint

gdi32

GetClipRgn CreateRectRgn SelectClipRgn Rectangle SetTextAlign LPtoDP SetMapMode SetViewportOrgEx CreateDCW CreateMetaFileW SaveDC SetWindowOrgEx SetWindowExtEx RestoreDC CloseMetaFile DeleteMetaFile CreateRectRgnIndirect ExtTextOutW GetDeviceCaps DPtoLP CreateCompatibleBitmap BitBlt SetBkColor CreateCompatibleDC CreateFontIndirectW SetTextColor CreatePen CreateRoundRectRgn TextOutW GetObjectW GetTextExtentPoint32W StretchBlt Arc LineTo MoveToEx SetBkMode SelectObject DeleteDC DeleteObject CreatePatternBrush SetBrushOrgEx

advapi32

RegEnumKeyExW RegCloseKey RegQueryValueExW RegCreateKeyExW RegDeleteKeyW RegDeleteValueW RegSetValueExW RegQueryInfoKeyW RegOpenKeyExW

shell32

SHCreateDirectoryExW SHGetSpecialFolderPathW ShellExecuteW

ole32

CoCreateInstance CoTaskMemAlloc CoTaskMemRealloc CoTaskMemFree StringFromGUID2 OleRegEnumVerbs OleRegGetUserType OleRegGetMiscStatus CreateDataAdviseHolder CreateOleAdviseHolder

oleaut32

LoadRegTypeLi VariantClear VariantInit VarUI4FromStr RegisterTypeLi OleCreatePropertyFrame LoadTypeLi SysAllocString SysStringLen SysFreeString LPSAFEARRAY_UserSize LPSAFEARRAY_UserFree UnRegisterTypeLi LPSAFEARRAY_UserMarshal BSTR_UserSize BSTR_UserMarshal BSTR_UserUnmarshal BSTR_UserFree LPSAFEARRAY_UserUnmarshal

shlwapi

PathIsDirectoryW PathFileExistsW

comctl32

ImageList_GetImageCount ImageList_GetImageInfo ImageList_Create ImageList_AddMasked ImageList_Draw _TrackMouseEvent

msimg32

GradientFill

iphlpapi

GetAdaptersInfo

rpcrt4

NdrStubForwardingFunction IUnknown_Release_Proxy IUnknown_AddRef_Proxy IUnknown_QueryInterface_Proxy NdrOleFree NdrOleAllocate NdrDllGetClassObject NdrDllCanUnloadNow NdrCStdStubBuffer2_Release NdrDllRegisterProxy NdrDllUnregisterProxy NdrStubCall2

Name

.text

Size

153KB

Virtual Size

152KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.orpc

Size

512B

Virtual Size

190B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

41KB

Virtual Size

41KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

11KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

33KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

funshionplugin2.dll

IMPHASH 44962e95a5b7b87ec520ee4feeb5fa36
SHA256 0e72e2181884ce091359b2b27e852b9b52847503a903a313b27fee30d7e92d94
MD5 6c79bfc339954fd2c10238dbc3c26bdc
SHA1 a818b17a1f35a0f33e158613bcbe86964a0de811
SHA512 a19bc9598090ed482cbf0958705ec9548a4ddbfba4ef9b0aa87c8765ed30c31d32576d9e62aae9f07b851f1990d214a77c82b74d8596b7b44c2445af4326a817
SSDEEP 98304:1lSO/HwJQ6/0WyhCMHTlQSK8q0tooWtUWklAarICbGKvZa4tYPZPS1scLjUSu45r:1lSO/8UWmCMzlQSK8q0tooWtUWk/MNSN
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

8d:e1:f7:4b:f3:62:59:1c:e2:a3:3f:12:1c:52:4f:a3:a0:d7:d4:e6

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Beijing Funshion Online Technologies Ltd.,OU=SECURE APPLICATION DEVELOPMENT,O=Beijing Funshion Online Technologies Ltd.,L=Beijing,ST=Beijing,C=CN

Chains

Aug 8, 2012

Minor OS version

1

Major OS version

5

Entry point

3237351

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\build2.6.8\Funshion\Rel\symbols\funshionplugin2.pdb

version

VerQueryValueW GetFileVersionInfoSizeW GetFileVersionInfoW

winmm

timeEndPeriod timeBeginPeriod timeGetDevCaps timeGetTime waveOutSetVolume waveOutGetVolume PlaySoundW

dsound

ord3

kernel32

GetCurrentProcess DuplicateHandle VirtualFree GetSystemInfo ReleaseSemaphore lstrcmpW CreateSemaphoreW GetCurrentThread GetTempPathW GetTempFileNameW DeleteFileW InterlockedExchange GetTickCount DisableThreadLibraryCalls DeleteFileA GetPrivateProfileIntA WritePrivateProfileStringA GetModuleFileNameA lstrlenW GetVersionExW ReleaseMutex CreateFileMappingW GetLastError CreateMutexW UnmapViewOfFile MapViewOfFile WritePrivateProfileStringW GetPrivateProfileStringW GetProcessHeap OutputDebugStringW CreateFileW GetFileSize SetEnvironmentVariableA WriteConsoleW GetTimeZoneInformation VirtualAlloc SetFilePointer ReadFile GetCurrentProcessId GetModuleFileNameW GetModuleHandleW QueryPerformanceFrequency QueryPerformanceCounter GetVersion VirtualProtect ResetEvent InterlockedDecrement InterlockedIncrement MulDiv GetCurrentThreadId FreeLibrary CreateEventW CreateThread SetThreadPriority WaitForMultipleObjects Sleep IsBadReadPtr IsBadWritePtr DeleteCriticalSection InitializeCriticalSection WideCharToMultiByte MultiByteToWideChar SetEvent CloseHandle WaitForSingleObject TerminateThread LoadLibraryW GetProcAddress LeaveCriticalSection EnterCriticalSection FormatMessageW LocalFree FindResourceW LoadResource LockResource SizeofResource RaiseException lstrlenA CreateSemaphoreA LocalAlloc LoadLibraryA SetLastError GlobalUnlock GlobalLock GlobalAlloc GlobalSize CopyFileW GlobalFree ResumeThread SuspendThread lstrcmpA DeactivateActCtx CreateActCtxW ReleaseActCtx ActivateActCtx InitializeCriticalSectionAndSpinCount CompareStringW GlobalDeleteAtom GlobalFindAtomW GlobalAddAtomW FreeResource GlobalGetAtomNameW LoadLibraryExW GetLocaleInfoW GetSystemDefaultUILanguage ConvertDefaultLocale GetUserDefaultUILanguage GetPrivateProfileIntW GetThreadLocale lstrcmpiW WriteFile FlushFileBuffers LockFile UnlockFile SetEndOfFile FindClose FindFirstFileW GetVolumeInformationW GetFullPathNameW GetFileAttributesExW FileTimeToSystemTime FileTimeToLocalFileTime GetFileAttributesW GetFileSizeEx GetFileTime TlsGetValue GlobalReAlloc GlobalHandle TlsAlloc TlsSetValue LocalReAlloc TlsFree SetErrorMode GlobalFlags GetSystemDirectoryW lstrcpyW GetCurrentDirectoryW GetWindowsDirectoryW GetNumberFormatW GetProfileIntW SearchPathW GetUserDefaultLCID FindResourceExW RtlUnwind HeapFree HeapAlloc GetSystemTimeAsFileTime EncodePointer DecodePointer GetCommandLineA HeapReAlloc ExitThread ExitProcess VirtualQuery SetStdHandle GetFileType HeapSize HeapQueryInformation UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess IsProcessorFeaturePresent GetCPInfo GetACP GetOEMCP IsValidCodePage HeapCreate HeapDestroy GetStdHandle GetStringTypeW LCMapStringW SetHandleCount GetStartupInfoW GetConsoleCP GetConsoleMode GetLocaleInfoA EnumSystemLocalesA IsValidLocale FreeEnvironmentStringsW GetEnvironmentStringsW CreateFileA

user32

SetPropW GetClassLongW GetCapture IsChild WinHelpW SendDlgItemMessageA SendDlgItemMessageW LoadIconW ReleaseDC GetDC FillRect TabbedTextOutW DrawTextW DrawTextExW GrayStringW ClientToScreen GetWindowDC BeginPaint EndPaint CheckMenuItem EnableMenuItem ModifyMenuW LoadBitmapW GetMenuCheckMarkDimensions SetMenuItemBitmaps CheckDlgButton IsDialogMessageW SetWindowTextW MoveWindow ShowWindow IsWindowEnabled TranslateAcceleratorW GetDesktopWindow BringWindowToTop CreatePopupMenu InsertMenuItemW IsIconic InvalidateRect LoadAcceleratorsW ReleaseCapture SetCursor DestroyIcon LoadImageW DestroyMenu LoadMenuW ReuseDDElParam UnpackDDElParam MapDialogRect SetWindowContextHelpId ShowOwnedPopups CharNextW GetSystemMetrics CharUpperW WaitMessage KillTimer SetTimer UnregisterClassW GetSysColorBrush GetMenuItemInfoW SystemParametersInfoW RealChildWindowFromPoint CopyImage EnumDisplayMonitors SetLayeredWindowAttributes GetKeyNameTextW MapVirtualKeyW DeleteMenu GetSystemMenu CopyAcceleratorTableW InvalidateRgn SetCapture GetPropW GetNextDlgTabItem MessageBeep IsZoomed EndDeferWindowPos DestroyAcceleratorTable GetDlgItem NotifyWinEvent GetAsyncKeyState SetClassLongW DrawStateW DrawIconEx DrawEdge DrawFrameControl DrawFocusRect ToUnicodeEx GetKeyboardLayout GetKeyboardState CreateAcceleratorTableW SetCursorPos LockWindowUpdate GetMenuDefaultItem InvertRect HideCaret EnableScrollBar GetIconInfo RegisterClipboardFormatW EndDialog CreateDialogIndirectParamW DefFrameProcW DefMDIChildProcW DrawMenuBar TranslateMDISysAccel MonitorFromPoint UpdateLayeredWindow IsMenu CreateMenu SetMenuDefaultItem IsClipboardFormatAvailable FrameRect GetUpdateRect OpenClipboard SetClipboardData CloseClipboard EmptyClipboard CopyIcon CharUpperBuffW GetDoubleClickTime IsCharLowerW MapVirtualKeyExW SubtractRect DrawIcon DestroyCursor GetWindowRgn GetTopWindow DestroyWindow GetMessageTime GetMessagePos GetMonitorInfoW ScrollWindow TrackPopupMenu SetScrollRange GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow ShowScrollBar RedrawWindow UpdateWindow CreateWindowExW GetClassInfoExW GetClassInfoW RemovePropW GetFocus SetFocus GetWindowTextLengthW GetWindowTextW GetForegroundWindow GetLastActivePopup SetActiveWindow GetNextDlgGroupItem BeginDeferWindowPos RegisterClassW GetSysColor AdjustWindowRectEx ScreenToClient DeferWindowPos GetScrollInfo SetScrollInfo SetWindowPlacement GetWindowPlacement GetDlgCtrlID DefWindowProcW CallWindowProcW GetMenu GetWindowLongW SetWindowLongW SetWindowPos PtInRect UnhookWindowsHookEx SetWindowsHookExW CallNextHookEx GetMessageW TranslateMessage GetActiveWindow GetKeyState EnumWindows GetWindowThreadProcessId GetClassNameW IntersectRect MessageBoxW InflateRect DispatchMessageW RegisterWindowMessageW PeekMessageW SetRect PostQuitMessage PostThreadMessageW SetMenu SetParent GetWindowRect UnionRect OffsetRect EqualRect SendMessageW EnableWindow GetParent IsWindowVisible GetClientRect GetWindow IsWindow LoadCursorW MonitorFromWindow SetRectEmpty CopyRect MapWindowPoints IsRectEmpty PostMessageW GetCursorPos ValidateRect GetMenuState GetMenuStringW AppendMenuW GetMenuItemID InsertMenuW GetMenuItemCount GetSubMenu RemoveMenu WindowFromPoint SetWindowRgn

gdi32

GetBoundsRect ExtFloodFill SetPaletteEntries GetTextFaceW SetPixelV TranslateCharsetInfo FrameRgn FillRgn GetWindowOrgEx LPtoDP EnumFontFamiliesExW Rectangle GetDeviceCaps CopyMetaFileW CreateDCW SetTextColor SetBkColor ExtTextOutW CreateFontIndirectW CreateRectRgnIndirect SetRectRgn CombineRgn GetMapMode PatBlt CreatePatternBrush CreateBitmap DPtoLP SaveDC RestoreDC SetBkMode SetPolyFillMode SetROP2 PtInRegion SetMapMode GetClipBox ExcludeClipRect IntersectClipRect SetPixel StretchBlt SetDIBColorTable OffsetRgn GetSystemPaletteEntries GetTextCharsetInfo EnumFontFamiliesW GetTextMetricsW CreateDIBitmap GetTextExtentPoint32W GetTextColor GetBkColor CreateCompatibleBitmap CreateHatchBrush CreateSolidBrush CreatePen GetObjectType SelectPalette GetStockObject CreateCompatibleDC DeleteDC ExtSelectClipRgn ScaleWindowExtEx SetWindowExtEx OffsetWindowOrgEx SetWindowOrgEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx DeleteObject GetRegionData CreateRectRgn GetObjectW GetCurrentObject RealizePalette GetViewportOrgEx GetRgnBox CreateDIBSection CreateRoundRectRgn CreatePolygonRgn CreateEllipticRgn Polyline SetViewportOrgEx SelectObject Escape TextOutW RectVisible PtVisible GetPixel BitBlt GetWindowExtEx GetViewportExtEx SelectClipRgn SetLayout GetLayout SetTextAlign MoveToEx LineTo Ellipse Polygon CreatePalette GetPaletteEntries GetNearestPaletteIndex

advapi32

RegCloseKey RegEnumKeyW RegQueryValueW RegCreateKeyExW RegSetValueExW RegDeleteKeyW RegEnumValueW RegQueryValueExW RegEnumKeyExW RegDeleteValueW RegOpenKeyExW

shell32

SHGetFileInfoW SHGetFolderPathW SHBrowseForFolderW SHAppBarMessage ShellExecuteW SHGetSpecialFolderLocation SHGetPathFromIDListW SHGetDesktopFolder DragQueryFileW DragFinish

ole32

OleCreateMenuDescriptor OleDestroyMenuDescriptor OleTranslateAccelerator IsAccelerator OleLockRunning CreateStreamOnHGlobal OleIsCurrentClipboard OleFlushClipboard DoDragDrop CoRevokeClassObject CoRegisterMessageFilter OleInitialize OleGetClipboard RegisterDragDrop CoLockObjectExternal RevokeDragDrop OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromProgID CoCreateGuid OleDuplicateData CoFreeUnusedLibraries CoTaskMemAlloc CoUninitialize CoInitialize StringFromCLSID GetRunningObjectTable CreateItemMoniker CLSIDFromString CoTaskMemFree CoCreateInstance StringFromGUID2 ReleaseStgMedium CoInitializeEx

oleaut32

VarBstrFromDate VariantChangeType SysStringLen SystemTimeToVariantTime VariantTimeToSystemTime OleCreateFontIndirect SafeArrayDestroy VariantCopy SysFreeString VariantInit VariantClear SysAllocString SafeArrayUnaccessData SafeArrayAccessData SysAllocStringLen

comctl32

ImageList_GetIconSize

shlwapi

PathRemoveFileSpecW PathRemoveFileSpecA PathAddBackslashA PathFindFileNameW PathStripToRootW PathIsUNCW PathFindExtensionW

oledlg

OleUIBusyW

oleacc

LresultFromObject AccessibleObjectFromWindow CreateStdAccessibleObject

imm32

ImmGetContext ImmGetOpenStatus ImmReleaseContext

winspool.drv

OpenPrinterW DocumentPropertiesW ClosePrinter

comdlg32

GetFileTitleW

Name

.text

Size

3.3MB

Virtual Size

3.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

_TEXT64

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.text.un

Size

42KB

Virtual Size

42KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

881KB

Virtual Size

881KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

74KB

Virtual Size

2.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rodata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.debug_a

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.debug_i

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.debug_l

Size

1024B

Virtual Size

987B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.debug_f

Size

512B

Virtual Size

224B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.debug_l

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.debug_p

Size

512B

Virtual Size

126B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.debug_a

Size

512B

Virtual Size

160B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.debug_r

Size

512B

Virtual Size

416B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

18KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

280KB

Virtual Size

279KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=2, id=152, version=20115,

count=1, id=132, productName=VS2008 SP1 build 30729, version=30729,

count=3, id=171, productName=VS2010 build 30319, version=30319,

count=2, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,

count=153, productName=Unmarked objects (old),

count=3, id=175, version=40219,

count=7, id=109, productName=VS2005 build 50727, version=50727,

count=231, id=170, productName=VS2010 SP1 build 40219, version=40219,

count=37, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=865, id=1, productName=Unmarked objects,

count=17, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=62, id=158, productName=VS2010 SP1 build 40219, version=40219,

count=1, id=28, version=9178,

count=12, id=110, productName=VS2005 build 50727, version=50727,

count=539, id=171, productName=VS2010 SP1 build 40219, version=40219,

count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,

count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,

count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,

gma.dll

IMPHASH 8596d45da9d4f8d0913c58f9221801ef
SHA256 d8b8d6d392ceeaad11da5ba72711e2453f488a9603f49bd22aeddd271602db99
MD5 ed3ca2d23c358a81b98bbe58ca7e9ab9
SHA1 1cce3b0f1f22b798d09772d82972cee0100bb525
SHA512 5df76439fadaffbc4a6123681dcb6522fbb8c3dfeffcd9b3368e24a91dcaf4cd0fbdc3c585a81131e398d5d1f54592b9c451a77b20d46c793968d373dc541512
SSDEEP 12288:Mdeo9rwLQ+nTdtMfL9gzcgsGaM4xLXxpRH8fpBEEA+s5Ni:MdeoymfLAcgstxbRHuBEEA+F
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

c5:56:b6:e7:3b:da:d5:37:35:41:6a:3a:08:05:1e:e1:66:b0:83:09

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Beijing Funshion Online Technologies Ltd.,OU=SECURE APPLICATION DEVELOPMENT,O=Beijing Funshion Online Technologies Ltd.,L=Beijing,ST=Beijing,C=CN

Chains

Aug 8, 2012

Minor OS version

1

Major OS version

5

Entry point

169486

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\build2.6.8\Funshion\Rel\symbols\gma.pdb

iphlpapi

GetIpAddrTable GetBestInterface GetBestRoute SendARP

ws2_32

gethostname getservbyname getservbyport htons WSAGetLastError htonl ntohs inet_ntoa WSASetLastError gethostbyaddr gethostbyname inet_addr

advapi32

RegOpenKeyExW RegOpenKeyW RegQueryValueExW RegCloseKey RegEnumKeyExW

wininet

HttpQueryInfoW InternetOpenA InternetCloseHandle InternetSetOptionA InternetReadFile InternetOpenUrlW HttpQueryInfoA InternetGetConnectedState

kernel32

SystemTimeToFileTime WaitForMultipleObjects ResumeThread ResetEvent OpenEventA GetSystemInfo FlushFileBuffers WriteConsoleW SetStdHandle LoadLibraryW GetConsoleMode InterlockedDecrement GetPrivateProfileStringW WritePrivateProfileStringW GetLastError ExpandEnvironmentStringsW CreateEventA WaitForSingleObject SetEvent GetModuleFileNameW CreateFileW DeviceIoControl GetCurrentThreadId CloseHandle GetSystemTime GetTickCount GetVersionExW MultiByteToWideChar lstrlenA WideCharToMultiByte LocalFree lstrlenW FreeLibrary CreateProcessW GetSystemDirectoryW GetSystemDirectoryA GetCurrentDirectoryW GetProcAddress LoadLibraryA lstrcmpiW SetWaitableTimer FindResourceW LoadResource WriteFile SizeofResource LockResource DeleteFileW GetModuleFileNameA GetConsoleCP SetFilePointer SetConsoleCtrlHandler IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID FatalAppExitA GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetStartupInfoW GetFileType SetHandleCount ExitProcess HeapCreate GetLocaleInfoW GetStdHandle GetCurrentThread SetLastError GetModuleHandleW TlsFree TlsSetValue TlsGetValue TlsAlloc IsValidCodePage GetOEMCP CreateWaitableTimerA GetACP IsProcessorFeaturePresent LCMapStringW GetCPInfo GetCurrentProcess TerminateProcess IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetLocalTime GetFileAttributesW CreateThread FindResourceExW InterlockedIncrement InterlockedCompareExchange InterlockedExchange GetStringTypeW EncodePointer DecodePointer Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection HeapDestroy HeapAlloc HeapFree HeapReAlloc HeapSize GetProcessHeap RaiseException InitializeCriticalSectionAndSpinCount GetCommandLineA RtlUnwind ExitThread

shell32

SHGetSpecialFolderPathW ord51 SHGetFolderPathW SHGetSpecialFolderPathA SHCreateDirectoryExW

ole32

CoSetProxyBlanket CoUninitialize CoInitializeSecurity CoInitialize CoCreateInstance

oleaut32

VariantClear GetErrorInfo VariantChangeType SetErrorInfo CreateErrorInfo SafeArrayUnaccessData VariantInit SafeArrayAccessData SysAllocString SysFreeString

urlmon

UrlMkGetSessionOption

shlwapi

PathFileExistsW PathIsRelativeW PathRemoveFileSpecA PathAppendW PathRemoveBackslashW PathRemoveFileSpecW

Name

.text

Size

360KB

Virtual Size

360KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

55KB

Virtual Size

54KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

10KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

2B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

436B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

17KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

icon/MP4.ico

SHA256 bcab63a60a31eac115ffd8834b18df814bc933ac0285e7437491defe6200939d
MD5 070a8e9b8d584b99167b6624faf2c0d0
SHA1 fecb83db5196b84bdb9cf814f23b1546e5d54b63
SHA512 b80839326a43d74358c0b79b6f3a46e66a3cc957562f038d6cb6a3b9547f6538a012e65d35a57e9db61436538a75647cca14fd5fe6cf0b37455e57ca8de0777e
SSDEEP 1536:/BScHQIEJ7dUSXHK0a9vIAWV4TbwdHG22eUm8i01oX:/BvQtJ7mSaF6ZikP23i0G
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

icon/RMVB.ico

SHA256 16a95eecaea17ff393a5f59da5c8c601347bea3302861f739524a0f8fea02076
MD5 22426328a6b83f98f94d8110a2c65658
SHA1 b1437d67bb6c48778fa495f5bdfc8366a5447773
SHA512 020c86f990ab9b87453dbf9e8bdc9e698b1b9c61e2559402260e40742209b26bbff6866369190c2dfef25109e12182d05b3ce0bc96ba70cb39966698c39f64da
SSDEEP 1536:5bMRK/qJJUgXG53yOm7RkEu172IRY+eUmCsB3Wdeos:RMgybUgXGIbRkEu11Fbskdm
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

lsv.dll

IMPHASH 1d183571eb130dad375e602618d02f9d
SHA256 cab0aa2911ad2e40ce8715ed8c35c45418304605719c9f3e02ef1a0a5cf838a1
MD5 a86b77ea6a6e26af4fbe3cbffad3ed5f
SHA1 45e2f84fcdd63966ad5f09f19d67cfcd49a8bbe8
SHA512 dd10803c50ca6c138ad9f7e421633b4a3b00a565fe463646eddd17deb94452b1d69a0f0eece144f77c44a97ff85d5ce139f47bdbe3811237111137b4eb7a991b
SSDEEP 3072:SMwRM9lVwCM3ByV/I6nRWH4OxZGol5PbeuvH7496DzNWK4UJM9Cb+WXQovBlgH:SMwR0M3BPqmvGoHeuvc96DB5J+mv8
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

36:ef:44:e5:09:af:db:df:4c:a8:86:16:86:df:47:bd:be:e4:3b:22

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Beijing Funshion Online Technologies Ltd.,OU=SECURE APPLICATION DEVELOPMENT,O=Beijing Funshion Online Technologies Ltd.,L=Beijing,ST=Beijing,C=CN

Chains

Aug 8, 2012

Minor OS version

1

Major OS version

5

Entry point

127905

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\build2.6.8\Funshion\Rel\symbols\lsv.pdb

ws2_32

bind ntohl ioctlsocket connect select WSAGetLastError sendto recv ntohs __WSAFDIsSet closesocket socket inet_addr gethostbyname htonl htons

dump

dump if_dump

quality

report_something

kernel32

SetStdHandle LoadLibraryW GetConsoleMode GetConsoleCP SetFilePointer WriteConsoleW HeapReAlloc IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID IsValidCodePage GetOEMCP FlushFileBuffers SystemTimeToFileTime GetACP GetTickCount GetCurrentThreadId CreateEventA CloseHandle WaitForSingleObject SetEvent GetProcessHeap HeapAlloc HeapFree Sleep WideCharToMultiByte InterlockedIncrement InterlockedDecrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar GetStringTypeW EncodePointer DecodePointer InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetSystemTimeAsFileTime TlsAlloc TlsFree TlsGetValue GetCurrentProcessId OpenEventA ResetEvent TlsSetValue ResumeThread CreateFileW WaitForMultipleObjects SetWaitableTimer CreateWaitableTimerA GetLastError GetCommandLineA GetCPInfo RaiseException RtlUnwind LCMapStringW ExitThread CreateThread TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent HeapCreate HeapDestroy GetModuleHandleW SetLastError GetProcAddress HeapSize ExitProcess WriteFile GetStdHandle GetModuleFileNameW GetLocaleInfoW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType GetStartupInfoW GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter

Name

.text

Size

219KB

Virtual Size

219KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

39KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

10KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

2B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

436B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

15KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

nicdescr.dat

SHA256 52348ac96775f546a3d057edf50aaf69e0aeb03edc7972055496c014c31dc738
MD5 0fb9927e7a9ca8c5f5af8bb4fd7857df
SHA1 40b512129c1d3de5b11c81300e0cbeb781f06873
SHA512 331228608c543b66e04e6d9960b51ed1b26bbaad4d48a9254121618cfca31e2a68d194aa1bde071b1a4e3d03d27174dbc5efcc5a7e0cb5a5064c9cee270609ab
MD5 SHA1 SHA512

NSIS installer

installer

pncrt.dll

IMPHASH 828907b7a8ec04c9c4031e40ef2f76ec
SHA256 e983aa97fe1ce6af92f06433a71e03f54d3fc78392e26691cace927094bab8d7
MD5 13001eb0a58b4de96126b16ab15fd8cc
SHA1 4dfe6d2d02e9fa194f4af3d054b458b5a4bafbe6
SHA512 1a7c052bc1e7c824a3aff5e27c5cbd0720893e341dfb93062021b82c3a6d940c4ea23cbcdfaaeb174d90f51c36f0d8c62f693766f42172f894b6b689d26f49b2
SSDEEP 6144:3m7wHLiH0k6OgfjvQ0mvlxZ/PeT8Ah8EoHiIKaGo5RpTufufVvtr+dj7GcuT1JOy:3m7KLiHl6OgfjvQ0m93/5q+iIKaGo5Rr
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

36880

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

SetFilePointer RtlUnwind IsBadReadPtr IsBadWritePtr IsBadCodePtr SetUnhandledExceptionFilter GetModuleFileNameA GetModuleFileNameW ExitProcess TerminateProcess GetCurrentProcess WriteFile GetStdHandle GetCommandLineA GetVersion InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetLastError ResumeThread CreateThread TlsSetValue ExitThread CloseHandle GetCurrentThreadId TlsAlloc TlsFree SetLastError TlsGetValue GetCurrentThread FindNextFileA FindFirstFileA FindClose FindNextFileW FindFirstFileW HeapFree HeapAlloc HeapReAlloc HeapValidate HeapSize HeapDestroy HeapCreate VirtualFree VirtualAlloc SetHandleCount GetFileType GetStartupInfoA GetCPInfo GetACP GetOEMCP GetProcAddress LoadLibraryA MultiByteToWideChar GetCommandLineW FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW WideCharToMultiByte UnhandledExceptionFilter LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW SetConsoleCtrlHandler SetEnvironmentVariableW InterlockedDecrement InterlockedIncrement FlushFileBuffers RaiseException SetStdHandle Sleep CompareStringA CompareStringW GetLocaleInfoA GetLocaleInfoW IsValidLocale IsValidCodePage EnumSystemLocalesA GetUserDefaultLCID GetVersionExA GetTimeZoneInformation SetEnvironmentVariableA Beep FileTimeToSystemTime FileTimeToLocalFileTime GetDiskFreeSpaceA GetLogicalDrives SetErrorMode GetFileAttributesA GetCurrentDirectoryA SetCurrentDirectoryA SetFileAttributesA GetFullPathNameA GetDriveTypeA GetCurrentProcessId CreateDirectoryA RemoveDirectoryA DeleteFileA GetFileAttributesW GetCurrentDirectoryW SetCurrentDirectoryW SetFileAttributesW GetFullPathNameW CreateDirectoryW DeleteFileW MoveFileW RemoveDirectoryW GetDriveTypeW MoveFileA GetExitCodeProcess WaitForSingleObject FreeLibrary CreateProcessA CreateProcessW HeapCompact HeapWalk ReadConsoleA SetConsoleMode GetConsoleMode SetEndOfFile WriteConsoleA DuplicateHandle GetFileInformationByHandle PeekNamedPipe ReadConsoleInputA PeekConsoleInputA GetNumberOfConsoleInputEvents LockFile UnlockFile CreateFileA CreatePipe ReadFile CreateFileW GetLocalTime SetFileTime LocalFileTimeToFileTime SystemTimeToFileTime SetLocalTime GetSystemTime GetModuleHandleA

$I10_OUTPUT ??0__non_rtti_object@@QAE@ABV0@@Z ??0__non_rtti_object@@QAE@PBD@Z ??0bad_cast@@QAE@ABQBD@Z ??0bad_cast@@QAE@ABV0@@Z ??0bad_typeid@@QAE@ABV0@@Z ??0bad_typeid@@QAE@PBD@Z ??0exception@@QAE@ABQBD@Z ??0exception@@QAE@ABV0@@Z ??0exception@@QAE@XZ ??1__non_rtti_object@@UAE@XZ ??1bad_cast@@UAE@XZ ??1bad_typeid@@UAE@XZ ??1exception@@UAE@XZ ??1type_info@@UAE@XZ ??2@YAPAXI@Z ??3@YAXPAX@Z ??4__non_rtti_object@@QAEAAV0@ABV0@@Z ??4bad_cast@@QAEAAV0@ABV0@@Z ??4bad_typeid@@QAEAAV0@ABV0@@Z ??4exception@@QAEAAV0@ABV0@@Z ??8type_info@@QBEHABV0@@Z ??9type_info@@QBEHABV0@@Z ??_7__non_rtti_object@@6B@ ??_7bad_cast@@6B@ ??_7bad_typeid@@6B@ ??_7exception@@6B@ ??_E__non_rtti_object@@UAEPAXI@Z ??_Ebad_cast@@UAEPAXI@Z ??_Ebad_typeid@@UAEPAXI@Z ??_Eexception@@UAEPAXI@Z ??_G__non_rtti_object@@UAEPAXI@Z ??_Gbad_cast@@UAEPAXI@Z ??_Gbad_typeid@@UAEPAXI@Z ??_Gexception@@UAEPAXI@Z ?_query_new_handler@@YAP6AHI@ZXZ ?_query_new_mode@@YAHXZ ?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z ?_set_new_mode@@YAHH@Z ?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z ?before@type_info@@QBEHABV1@@Z ?name@type_info@@QBEPBDXZ ?raw_name@type_info@@QBEPBDXZ ?set_new_handler@@YAP6AXXZP6AXXZ@Z ?set_terminate@@YAP6AXXZP6AXXZ@Z ?set_unexpected@@YAP6AXXZP6AXXZ@Z ?terminate@@YAXXZ ?unexpected@@YAXXZ ?what@exception@@UBEPBDXZ SetUserHeapAlloc SetUserHeapCalloc SetUserHeapFree SetUserHeapReAlloc SetUserHeapSize SetUserHeapValidate _CIacos _CIasin _CIatan _CIatan2 _CIcos _CIcosh _CIexp _CIfmod _CIlog _CIlog10 _CIpow _CIsin _CIsinh _CIsqrt _CItan _CItanh _CrtHeapAlloc _CrtHeapCalloc _CrtHeapFree _CrtHeapReAlloc _CrtHeapSize _CrtHeapValidate _CxxThrowException _EH_prolog _Getdays _Getmonths _Gettnames _HUGE _Strftime _XcptFilter __CxxFrameHandler __CxxLongjmpUnwind __RTCastToVoid __RTDynamicCast __RTtypeid __STRINGTOLD __argc __argv __badioinfo __crtCompareStringA __crtGetLocaleInfoW __crtLCMapStringA __dllonexit __doserrno __fpecode __getmainargs __initenv __isascii __iscsym __iscsymf __lc_codepage __lc_handle __lconv_init __mb_cur_max __p___argc __p___argv __p___initenv __p___mb_cur_max __p___wargv __p___winitenv __p__acmdln __p__amblksiz __p__commode __p__daylight __p__dstbias __p__environ __p__fileinfo __p__fmode __p__iob __p__mbcasemap __p__mbctype __p__osver __p__pctype __p__pgmptr __p__pwctype __p__timezone __p__tzname __p__wcmdln __p__wenviron __p__winmajor __p__winminor __p__winver __p__wpgmptr __pioinfo __pxcptinfoptrs __set_app_type __setlc_active __setusermatherr __threadhandle __threadid __toascii __unDName __unguarded_readlc_active __wargv __wgetmainargs __winitenv _abnormal_termination _access _acmdln _adj_fdiv_m16i _adj_fdiv_m32 _adj_fdiv_m32i _adj_fdiv_m64 _adj_fdiv_r _adj_fdivr_m16i _adj_fdivr_m32 _adj_fdivr_m32i _adj_fdivr_m64 _adj_fpatan _adj_fprem _adj_fprem1 _adj_fptan _adjust_fdiv _aexit_rtn _amsg_exit _assert _atodbl _atoi64 _atoldbl _beep _beginthread _beginthreadex _c_exit _cabs _callnewh _cexit _cgets _chdir _chdrive _chgsign _chmod _chsize _clearfp _close _commit _commode _control87 _controlfp _copysign _cprintf _cputs _creat _cscanf _ctype _cwait _daylight _dstbias _dup _dup2 _ecvt _endthread _endthreadex _environ _eof _errno _except_handler2 _except_handler3 _execl _execle _execlp _execlpe _execv _execve _execvp _execvpe _exit _expand _fcloseall _fcvt _fdopen _fgetchar _fgetwchar _filbuf _fileinfo _filelength _filelengthi64 _fileno _findclose _findfirst _findfirsti64 _findnext _findnexti64 _finite _flsbuf _flushall _fmode _fpclass _fpieee_flt _fpreset _fputchar _fputwchar _fsopen _fstat _fstati64 _ftime _ftol _fullpath _futime _gcvt _get_osfhandle _get_sbh_threshold _getch _getche _getcwd _getdcwd _getdiskfree _getdllprocaddr _getdrive _getdrives _getmaxstdio _getmbcp _getpid _getsystime _getw _getws _global_unwind2 _heapadd _heapchk _heapmin _heapset _heapused _heapwalk _hypot _i64toa _i64tow _initterm _inp _inpd _inpw _iob _isatty _isctype _ismbbalnum _ismbbalpha _ismbbgraph _ismbbkalnum _ismbbkana _ismbbkprint _ismbbkpunct _ismbblead _ismbbprint _ismbbpunct _ismbbtrail _ismbcalnum _ismbcalpha _ismbcdigit _ismbcgraph _ismbchira _ismbckata _ismbcl0 _ismbcl1 _ismbcl2 _ismbclegal _ismbclower _ismbcprint _ismbcpunct _ismbcspace _ismbcsymbol _ismbcupper _ismbslead _ismbstrail _isnan _itoa _itow _j0 _j1 _jn _kbhit _lfind _loaddll _local_unwind2 _lock _locking _logb _longjmpex _lrotl _lrotr _lsearch _lseek _lseeki64 _ltoa _ltow _makepath _mbbtombc _mbbtype _mbcasemap _mbccpy _mbcjistojms _mbcjmstojis _mbclen _mbctohira _mbctokata _mbctolower _mbctombb _mbctoupper _mbctype _mbsbtype _mbscat _mbschr _mbscmp _mbscoll _mbscpy _mbscspn _mbsdec _mbsdup _mbsicmp _mbsicoll _mbsinc _mbslen _mbslwr _mbsnbcat _mbsnbcmp _mbsnbcnt _mbsnbcoll _mbsnbcpy _mbsnbicmp _mbsnbicoll _mbsnbset _mbsncat _mbsnccnt _mbsncmp _mbsncoll _mbsncpy _mbsnextc _mbsnicmp _mbsnicoll _mbsninc _mbsnset _mbspbrk _mbsrchr _mbsrev _mbsset _mbsspn _mbsspnp _mbsstr _mbstok _mbstrlen _mbsupr _memccpy _memicmp _mkdir _mktemp _msize _nextafter _onexit _open _open_osfhandle _osver _outp _outpd _outpw _pclose _pctype _pgmptr _pipe _popen _purecall _putch _putenv _putw _putws _pwctype _read _rmdir _rmtmp _rotl _rotr _safe_fdiv _safe_fdivr _safe_fprem _safe_fprem1 _scalb _searchenv _seh_longjmp_unwind _set_error_mode _set_sbh_threshold _seterrormode _setjmp _setjmp3 _setmaxstdio _setmbcp _setmode _setsystime _sleep _snprintf _snwprintf _sopen _spawnl _spawnle _spawnlp _spawnlpe _spawnv _spawnve _spawnvp _spawnvpe _splitpath _stat _stati64 _statusfp _strcmpi _strdate _strdup _strerror _stricmp _stricoll _strlwr _strncoll _strnicmp _strnicoll _strnset _strrev _strset _strtime _strupr _swab _sys_errlist _sys_nerr _tell _telli64 _tempnam _timezone _tolower _toupper _tzname _tzset _ui64toa _ui64tow _ultoa _ultow _umask _ungetch _unlink _unloaddll _unlock _utime _vsnprintf _vsnwprintf _waccess _wasctime _wchdir _wchmod _wcmdln _wcreat _wcsdup _wcsicmp _wcsicoll _wcslwr _wcsncoll _wcsnicmp _wcsnicoll _wcsnset _wcsrev _wcsset _wcsupr _wctime _wenviron _wexecl _wexecle _wexeclp _wexeclpe _wexecv _wexecve _wexecvp _wexecvpe _wfdopen _wfindfirst _wfindfirsti64 _wfindnext _wfindnexti64 _wfopen _wfreopen _wfsopen _wfullpath _wgetcwd _wgetdcwd _wgetenv _winmajor _winminor _winver _wmakepath _wmkdir _wmktemp _wopen _wperror _wpgmptr _wpopen _wputenv _wremove _wrename _write _wrmdir _wsearchenv _wsetlocale _wsopen _wspawnl _wspawnle _wspawnlp _wspawnlpe _wspawnv _wspawnve _wspawnvp _wspawnvpe _wsplitpath _wstat _wstati64 _wstrdate _wstrtime _wsystem _wtempnam _wtmpnam _wtoi _wtoi64 _wtol _wunlink _wutime _y0 _y1 _yn abort abs acos asctime asin atan atan2 atexit atof atoi atol bsearch calloc ceil clearerr clock cos cosh ctime difftime div exit exp fabs fclose feof ferror fflush fgetc fgetpos fgets fgetwc fgetws floor fmod fopen fprintf fputc fputs fputwc fputws fread free freopen frexp fscanf fseek fsetpos ftell fwprintf fwrite fwscanf getc getchar getenv gets getwc getwchar gmtime is_wctype isalnum isalpha iscntrl isdigit isgraph isleadbyte islower isprint ispunct isspace isupper iswalnum iswalpha iswascii iswcntrl iswctype iswdigit iswgraph iswlower iswprint iswpunct iswspace iswupper iswxdigit isxdigit labs ldexp ldiv localeconv localtime log log10 longjmp malloc mblen mbstowcs mbtowc memchr memcmp memcpy memmove memset mktime modf perror pow printf putc putchar puts putwc putwchar qsort raise rand realloc remove rename rewind scanf setbuf setlocale setvbuf signal sin sinh sprintf sqrt srand sscanf strcat strchr strcmp strcoll strcpy strcspn strerror strftime strlen strncat strncmp strncpy strpbrk strrchr strspn strstr strtod strtok strtol strtoul strxfrm swprintf swscanf system tan tanh time tmpfile tmpnam tolower toupper towlower towupper ungetc ungetwc vfprintf vfwprintf vprintf vsprintf vswprintf vwprintf wcscat wcschr wcscmp wcscoll wcscpy wcscspn wcsftime wcslen wcsncat wcsncmp wcsncpy wcspbrk wcsrchr wcsspn wcsstr wcstod wcstok wcstol wcstombs wcstoul wcsxfrm wctomb wprintf wscanf

pndx5016.dll

SHA256 ac0e3c3b7337096a08a133365630ade3a5cadb391dced904d016eb3740c903f2
MD5 33833b3eda1b07ebd367fa9b38b23e60
SHA1 d4693566e54f53fcf72bbe0a00477b3fece0b496
SHA512 d936f77a2b4be300a75ca0d323120cf24c00a426605434f30c8c9c99c9e525df629146cf93e1477786ca6c51893ed7c0e2db6129f32bca892f853697bec9ea16
SSDEEP 96:0BngvLWo04uNwrdXG3oJe59n9jNtzW9uaX8ACaNczh:3ipz4cRrzW3rG
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

pndx5032.dll

IMPHASH 3dff24d172f5031d837d000fcf3a81f8
SHA256 ef85f9fb83f86c0bb29727dd3fcc33db3c1068a3c2074b590bf52baa607d43df
MD5 b74e422bc81236042529dc8a42a18423
SHA1 26427efbad0f9bc7883de443483f34e99827556e
SHA512 f5ac4c1661bbc420fbe0cef08f996dbb269b327afeb2d58b7d77a7741bc90efe14cb614c1e80df05cd43a1de77669aeb399038393cac8782ba1b98b33206eb9f
SSDEEP 48:60d7OFQe3k/nFFYTF3k5dn4JsmCXdADpNIR9F8wqH7PCHlGfTcFHEgUk0Ucs:gkf/R4JZAR9Ffg7KdkI
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

4688

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

1024B

Virtual Size

790B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

512B

Virtual Size

176B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

176B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

512B

Virtual Size

494B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

194B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

pos.ini

SHA256 5da670e2ba3581b2467e3aa309f41d5f605ac58a192c4a99f9ccbacb1978ae05
MD5 35df771ed539d28401d81a93ad9161c6
SHA1 32c9afe8ee1891408536cfc21e9d492a1e134d5f
SHA512 cbbff803e9bbedfdb8b2808216ae05408d236920183ae002d83f6224244e6651172ecb5fd9f1c6abb7ba788d0128fdafd4a83654b513ce3a5cffce437495488a
MD5 SHA1 SHA512

NSIS installer

installer

ptv.dll

IMPHASH a43af8599199c87c3c792739e18fbbf6
SHA256 723a181fadefa58185da30edf043a5a598ffb9664be1118e8eebb9a82e9cd3e8
MD5 0aa5fac17b88d32f038c23f25f187520
SHA1 0dd56ec730f92411a7c8f37e3281b10d02fb139e
SHA512 5b613e6c2fa780b2138091dbc6a366e345bd15db7355f166f467b641f45b96e8d5a1c2c77798ee64f1bea85b29ecdc4df7d3a7bc18cc04727a290ab32672f67b
SSDEEP 3072:DGbl//k021PhdX0bh26HrK8wnhn9IDoTZ7rz:DG5/k0QdogeOlThrz
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

8b:93:32:c9:29:e1:0f:b5:c9:c0:b0:f6:e8:fc:93:6b:89:0a:52:46

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Beijing Funshion Online Technologies Ltd.,OU=SECURE APPLICATION DEVELOPMENT,O=Beijing Funshion Online Technologies Ltd.,L=Beijing,ST=Beijing,C=CN

Chains

Aug 8, 2012

Minor OS version

1

Major OS version

5

Entry point

91530

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\build2.6.8\Funshion\Rel\symbols\ptv.pdb

ws2_32

WSASend WSARecv send ioctlsocket WSAGetLastError WSAConnect sendto socket closesocket WSASocketA gethostbyname inet_ntoa ntohl htonl htons ntohs select __WSAFDIsSet

kernel32

GetCPInfo FlushFileBuffers CreateFileW WriteConsoleW SetStdHandle GetConsoleMode GetConsoleCP SetFilePointer IsValidCodePage GetOEMCP WaitForSingleObject InitializeCriticalSection Sleep LeaveCriticalSection EnterCriticalSection DeleteCriticalSection CloseHandle GetTickCount GetCurrentThreadId GetQueuedCompletionStatus CreateIoCompletionPort GetACP WideCharToMultiByte InterlockedIncrement InterlockedDecrement InterlockedExchange MultiByteToWideChar GetStringTypeW EncodePointer DecodePointer ExitThread GetLastError CreateThread GetSystemTimeAsFileTime HeapFree HeapReAlloc FreeLibrary GetProcAddress LoadLibraryW GetCommandLineA RaiseException RtlUnwind HeapAlloc LCMapStringW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW SetLastError ExitProcess HeapSize WriteFile GetStdHandle GetModuleFileNameW HeapCreate HeapDestroy SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType GetStartupInfoW GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId

quality.dll

IMPHASH eaf891f6239016d8780c70c9a643a1d0
SHA256 5631d98e05ef797f32087833d375ea9ed4e21c0ac8f042ec743e7467b3e3d7d3
MD5 c9f4e88473d546212c4b7e6529b9bebf
SHA1 1016dc0d6fda99928dc286f63485b9a77a26706c
SHA512 88003cbab83722d7650408e52ac534ba4647f0d001dcbfc6ecb2fab4538d244645ebf9d01daabecce7991af1a654c662c3c548704dc002939a1852f9667afc1c
SSDEEP 3072:oyXaUU0X8x3yWr9cXFIPGtfL3Bu4uZwS3eaORfO4Km0+0peluhixxxxx9Dk:o9AMx3yWeygL+wS3B0fOF+0ZH
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

85:87:a4:82:f2:0e:18:69:f4:e7:6a:63:58:f9:f9:65:0c:fe:67:2e

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Beijing Funshion Online Technologies Ltd.,OU=SECURE APPLICATION DEVELOPMENT,O=Beijing Funshion Online Technologies Ltd.,L=Beijing,ST=Beijing,C=CN

Chains

Aug 8, 2012

Minor OS version

1

Major OS version

5

Entry point

115339

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\build2.6.8\Funshion\Rel\symbols\reporter.pdb

ws2_32

inet_ntoa gethostname gethostbyname ioctlsocket connect select recv socket closesocket send inet_addr ntohl htonl htons

psapi

GetProcessMemoryInfo

dump

ulvalue_of svalue_of svalue lvalue_of

kernel32

LoadLibraryW GetConsoleMode GetConsoleCP SetFilePointer HeapReAlloc IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID ResetEvent GlobalMemoryStatus CreateEventA GetCurrentProcess SetEvent InterlockedExchange InterlockedExchangeAdd CloseHandle GetTickCount WaitForSingleObject InitializeCriticalSection Sleep SetStdHandle EnterCriticalSection DeleteCriticalSection GetVersionExW GetModuleFileNameW CreateFileW GetProcAddress lstrcmpiW WideCharToMultiByte MultiByteToWideChar FindResourceExW FindResourceW LoadResource WriteFile SizeofResource GetLastError LockResource DeleteFileW GetModuleFileNameA WriteConsoleW FlushFileBuffers LeaveCriticalSection IsValidCodePage GetOEMCP GetACP GetCurrentProcessId QueryPerformanceCounter GetEnvironmentStringsW OpenEventA FreeEnvironmentStringsW GetStartupInfoW GetFileType InitializeCriticalSectionAndSpinCount SetHandleCount GetLocaleInfoW GetStdHandle ExitProcess GetProcessHeap HeapSize HeapDestroy HeapCreate SetLastError GetModuleHandleW TlsFree TlsSetValue TlsGetValue TlsAlloc IsProcessorFeaturePresent LCMapStringW HeapAlloc RtlUnwind GetCPInfo InterlockedIncrement InterlockedDecrement InterlockedCompareExchange GetStringTypeW EncodePointer DecodePointer HeapFree ExitThread GetCurrentThreadId CreateThread GetSystemTimeAsFileTime GetCommandLineA UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess RaiseException

advapi32

RegOpenKeyExW RegQueryValueExW RegCloseKey

shell32

SHCreateDirectoryExW

urlmon

UrlMkGetSessionOption

wininet

InternetCloseHandle InternetOpenA InternetGetConnectedState HttpQueryInfoW InternetSetOptionA InternetReadFile InternetOpenUrlW HttpQueryInfoA

shlwapi

PathFileExistsW

Name

.text

Size

198KB

Virtual Size

197KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

38KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

8KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

2B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

15KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

rmoc3260.dll

IMPHASH 856609e709a6cabc2acd456e10aed0e4
SHA256 eb8925e8f56c8ba77542b99ab023e7a54012a70f04869f35e221f2329c938853
MD5 e4ca4ae71a12198ca9a13835b1ff8a27
SHA1 2a1e82de70f74d8a259201e3be3ace820be5dc8d
SHA512 511da87e2bff649c0cb00ac3796456f54f09b2b0f47630cb2808ca14898daa6be83f5f3f0bcbdaa9c34e8fb1fde13bfbc34f7aeb2c0f7b71676923704dc8c43d
SSDEEP 3072:ida+QHqgrl741WDqXYiSTlHNiifnTf4qCWaQQXm9CH2nt:BPFjJHNtfQWaQQXp
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

f0:21:3e:b1:a9:b6:37:1f:ff:1c:dd:ce:74:f4:d0:f5:35:ad:7d:9b

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=RealNetworks\, Inc.,OU=Software Product Development,O=RealNetworks\, Inc.,L=Seattle,ST=Washington,C=US

Chains

May 16, 2024

Subject

CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6d

Serial Number

01

Issuer

CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6d

Timespan

Aug 1, 1996 - Dec 31, 2020

Subject

CN=Thawte Code Signing CA,O=Thawte Consulting (Pty) Ltd.,C=ZA

Serial Number

0a

Issuer

CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6d

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Aug 6, 2003 - Aug 5, 2013

Subject

CN=RealNetworks\, Inc.,OU=Software Product Development,O=RealNetworks\, Inc.,L=Seattle,ST=Washington,C=US

Serial Number

12:ee:97:f7:6b:56:99:e3:2b:08:af:5d:f8:3a:20:30

Issuer

CN=Thawte Code Signing CA,O=Thawte Consulting (Pty) Ltd.,C=ZA

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageMicrosoftCommercialCodeSigning

Timespan

Aug 30, 2006 - Sep 15, 2007

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Serial Number

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2008

Minor OS version

0

Major OS version

4

Entry point

104464

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

pncrt

_initterm _adjust_fdiv _ismbcspace _open _chsize _fstat _onexit _read _unlink _putenv _write _sopen _tell _lseek __dllonexit malloc _errno _telli64 _lseeki64 memmove _vsnprintf strchr isdigit _stricmp strncmp printf getenv realloc strstr _snprintf atol atoi sprintf strncat _purecall ??2@YAPAXI@Z wcslen wcsncpy strncpy strrchr ??3@YAXPAX@Z free _strnicmp _strcmpi _close _creat

ole32

CoTaskMemAlloc CreateBindCtx CreateOleAdviseHolder CoTaskMemFree CoCreateInstance CoGetMalloc

kernel32

CreateThread InitializeCriticalSection GetModuleFileNameA GetTempPathA GetTempFileNameA CloseHandle CreateFileA GetFileSize CreateFileMappingA MapViewOfFile UnmapViewOfFile GetVersionExA GetSystemInfo InterlockedIncrement InterlockedDecrement lstrcatA GetEnvironmentVariableA LeaveCriticalSection EnterCriticalSection WideCharToMultiByte lstrlenW lstrcpyA lstrlenA lstrcmpA MultiByteToWideChar DeleteFileA WinExec GetProcAddress LoadLibraryA FreeLibrary SetErrorMode DeleteCriticalSection GetLocaleInfoA GetVersion GetLastError

user32

CreateDialogParamA wsprintfA CharNextA CharPrevA IsDialogMessageA ReleaseDC GetDC PtInRect SendMessageA SetFocus BeginPaint EndPaint SetParent IsWindowVisible GetParent DefWindowProcA UnregisterClassA WinHelpA GetWindowLongA ShowWindow EqualRect OffsetRect SetWindowRgn SetWindowLongA DestroyWindow GetWindowRect MapWindowPoints SetWindowPos GetSystemMetrics GetActiveWindow LoadStringA GetDlgItemTextA SetDlgItemTextA GetSysColor FillRect IntersectRect CopyRect GetClientRect EnumChildWindows UpdateWindow LoadCursorA RegisterClassA CreateWindowExA GetKeyState InvalidateRect GetClipboardFormatNameA

advapi32

RegSetValueExA RegDeleteValueA RegCreateKeyExA RegOpenKeyExA RegOpenKeyA RegDeleteKeyA RegQueryValueExA RegCreateKeyA RegEnumKeyExA RegQueryValueA RegSetValueA RegEnumKeyA RegCloseKey

gdi32

LPtoDP CreateSolidBrush CreateRectRgnIndirect DeleteDC SetMapMode SetWindowOrgEx DeleteObject SetViewportOrgEx GetDeviceCaps CreateDCA

oleaut32

VariantClear VariantInit SysAllocString LoadTypeLi LoadRegTypeLi SysFreeString OleCreatePropertyFrame SetErrorInfo SysAllocStringLen RegisterTypeLi VariantChangeType

urlmon

URLDownloadToCacheFileA HlinkSimpleNavigateToString CreateURLMoniker RegisterBindStatusCallback

skin/AbnormalPopWndCloseBtn.bmp

SHA256 150d93e603c886aef9738e1d9662a133dbfd15321f84d1a4189b99caa10db5cb
MD5 c646701695c4e3c72b544edf3138665b
SHA1 966cfe3f1963b6f512defa0b772693bd2d105d3b
SHA512 6bfa68229ae3a9bc01a20c76f11cfdda4d56c11d59606c6ba5b19f0c0523831dc4dfcf1d22cd281483c5691d4d739636ce8b5df5de187fee494201aff53c5b4b
MD5 SHA1 SHA512

NSIS installer

installer

skin/AdPackUpBtn.bmp

SHA256 45c8ca3ea94355382f819a2432f7e6229f40dc0d5f472751e065c5bd241964be
MD5 968a6d91905c483cf16bf0378452298e
SHA1 e82fb908625d57c9c4cb05bfa0d75c46d632f8cb
SHA512 8430ffc6c504693d0e5ae5968c160e57a0fd1d1847f422d42451bd26764955e34f7a9e0702b209ac6f48b0ab53ee5506686e0276c31044b81b2292fd1e51c231
SSDEEP 96:W222QjTnjTnjTnjTgpfpfp2LrULaLaL4rr+8YYgwwwTem7Dem7Dem7Dem7K666i:NBBKrr+8YYK
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/AdTimer.png

SHA256 0cd2820d22cb0dc7e29f81756d8551c519e03f605e7f75a84fa4b1ecb9b87552
MD5 3eb602b1f2afdb7d0b4abaa81cbadfd1
SHA1 0499bd3fef28b8898443ba149c4ffa5daa79bfd7
SHA512 7243be325731ae8321b81e77c706187c514aef6c1bdeece39d2d365ae369631806d8f699fadb84fc57a46b10e612e008edd14192377d78ad7918361160de70cd
MD5 SHA1 SHA512

NSIS installer

installer

skin/AddListFile.bmp

SHA256 6b245541ad600e95497c45a684c581eb6616f34a2b40b614704b8c689d1157dc
MD5 9d86df468d96df67a84adc94569f20e3
SHA1 1c81c651ab41e8c31a69f616f4cd261c7569b429
SHA512 cb946b7df3be0d6eefe39a5e863d7ee0c2dfbb0da35c2a379dcbd0b57424ff3fcca7d2a817cb33b57308647c3146e8922d9bf6a2102be15322f1bd5bbd8a6cc0
SSDEEP 96:qsg/M6kPje9/sc5Li8c2roUqNUc2K3vdXXXXXX8or:fgF2j45c3D31XXXXXX8or
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/AddMore.bmp

SHA256 c82260c1b4de2d4889aee8644a4bf8fd1eb7f781181bf63ea74a4ea6e8e3d991
MD5 d1fbc82ae72a2b6e3ef9293d6334e9c3
SHA1 361f9aca87783e9cd6932558084c81822d1fc2d0
SHA512 9febc692a663243edac7e608e4e0469bb367d9e1a5f009855d49cfde5f1cef41a36a57e6939bf14bd4763a95a9055cb5c4aa0c9b83c6bd6192621e59728732e2
SSDEEP 24:6HndKnoGtB4ftigS+5w3jrmJTWVUBzYR/:6HndKno1igD5Wjrm1WVX/
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/Buffering.gif

SHA256 eb9a5e502aaadff88eb29858ed66f866c4a6379a134d521c056bc2076087dce1
MD5 8dac5746f41221702a36c340ec5f804b
SHA1 b01c83994ed6f5cb00b25d677002cf2ae644bde9
SHA512 5d082d5d4f1bfd866e46f5a26c54c5cc104ae26784b620d0c162db7cbaf160e8f353ce1a4f6ccb7d1c3c035fc5897e59bf04c4cfe7d6b57e4f860cc4ce198cea
SSDEEP 96:fj1hlmkMYpAZkN6xubuarA1NxvDty7Yjv4l:rLXAZiCHaUG7K4l
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/CaptionText.bmp

SHA256 697943d026b7e4686b49c19698c27ed19f790b0445f6fe66baca65e0c84b5766
MD5 fd638109d3b44c95d521a0be82591fc9
SHA1 198e6226547df906df9118a576225693ae7d1e88
SHA512 ef89117579cf55d59edf9d51f2a75f4134de5ea468de2736db1feceed64582132867cfac95b6956f948dcf76e5df66824dc575ed1582f60fa42a0f110d087e57
SSDEEP 48:PkgOLBVkXSJhSzxCOMhFwYFwmz9IyZRmDNqLnLekE8:PkgOLXkXcieBvz9VANqLnLnr
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/CaptionTextEn.bmp

SHA256 7cb754ba28f72fbe3e1dfd4710f6d3010041a48f504aac3db32f4126c2083eb9
MD5 4c08bc8b4c92327a2b1301699618976c
SHA1 5aedf8eadcb9d81f9b619ce66323973e03ab3447
SHA512 f472b124bfc7896ecbe10ac7bb0f9d44ce76783367257183a12d5f6eaf5a54b64172cfc04fe967a45e49efb2ca0b7e432aa46025262479aee75928ce17b60b2a
SSDEEP 48:pKg8LjV2Xugbgp4x1wgHghWpzgcgk6ysg5zgH1Yg5zgaXKFKpgig37WyqiuqFnLq:pKg8L52XN1J3ab6r37yjqFnLCL
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/CheckBox_Box.bmp

SHA256 06382c845fa30efb597a24a70523be2dc4aae10f1be1fd642f2d80a8cb70cce1
MD5 256139df7d613458440302e3d497c24a
SHA1 31a97ffed086725e8bdb288caed4b1af6066dfc9
SHA512 0bfb41750dcc318e66cbe03643967b89a010385b1dc8a0064fc7e5af386511763a92f79ae6833222cf3c6a532f25b552b1ca618ab7f9c91dabe17d656028a581
MD5 SHA1 SHA512

NSIS installer

installer

skin/CheckBox_Check.bmp

SHA256 bee466ac91d354d09522ac6255c10ca550cb8044f5b78a4a2831a456c8f295de
MD5 8e5d5bda8cc33fb668ed18ad4a3d8eea
SHA1 59e21da5e490da0cf9f24e15ee21e39ba528c9ba
SHA512 806df7b9fed00a9c3c63104510a1c8aa544365d45ff6dcaed623906a31f5c7e7517d5576d55025f47e11b0324606bea1b052c460fdbe64c8dc38b4c5ad4a8aa1
MD5 SHA1 SHA512

NSIS installer

installer

skin/ClearFile.bmp

SHA256 4285fc548ede0064e9eac07d48be4fdc431a837b54208b9813330c7a2e551572
MD5 6099d94bfe20c1a969ccb9a00869fd91
SHA1 2181a49f292c9ccbb0e117460d88538b49023dd3
SHA512 a515851ddf5abd3dc1f1ea254c90d34b41f1f93b6aa499533946fb821e8eb2d034ae786af66c782a262cd7ecbe7eed9e1d9c33e2aa551b91045ad4ed9e2e20ad
SSDEEP 24:wwfHHKVKR4UKfv6Xk0ge0oijTIMZBr9VKPMA5Ra7638LMgCkJJG:wwPKVKR9KaXpP0hNBUM88LMiJJG
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/Default.fskin

SHA256 e9b30f48d388a0002b1b63176a1e8e1674bdc07e58484fecf6830567f9ce6932
MD5 2852759c019ed20baf6f512cb0604d5e
SHA1 a3d636fd8d057df266066847928e765161871e1b
SHA512 013c8cc7233a242bd13b889ef1c09cbd279fef4a2588be1ea6950848eb321cb8b2f8e3338f6eaf378a8e87bc87103d61ec21dd79b2d9a327470b9f60ec7cc897
SSDEEP 768:Rqw7hj7Avl9/cyDtjSJWu6HcI9oAHd2Fbvyt9YB5cHPk5rqOZYXBAp:Rhj7AvlbxjSJI8I9o22Fbvyt9Ab5r900
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

VoiceBtn.bmp

SHA256 3dd2e22b11e03130e0868d78fe332321580499bcbebe64e133ed39dd3b3779d4
MD5 c06e280a8eb782bf4e29019170274b96
SHA1 3d615c28a28684a7bc4ca8d9e4d2b6c6b7db3a52
SHA512 472c20b4d337b07787cbb88849de49293aab099d62a65be3033149e14f198843aa4f92fefd803457d32492fc7c50182824793d191c0cd41b3f2dbbc88eb3f06d
MD5 SHA1 SHA512

NSIS installer

installer

bk.bmp

SHA256 b7685d0c22d510a305039df83ceb4e70e285ac2f511edbe0b1800ca131edc054
MD5 cde36eff7be797cebab5573b7fcaaf2e
SHA1 e03b3fa640743d3bc2fbdf463292efb4fc44d449
SHA512 eab553c154d13fd603d509ccecc9e3f5d248870e9c9d94aef70f4373e14665519420927a59be4401edf698affacda07a9bc2cde9d58820d87b29cc20c3dce3bb
SSDEEP 96:eLRMcU2mENm34simivfVfVfVfVfVfVfVfVfVfVfVfb:eLRMcbsimiV
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_back.bmp

SHA256 942e4ad1f0b67fdde06f7df4b637d2621d88008d279e9691d0f47ca0ea7c7349
MD5 1b28791e09b97435280fabb74ecfa6ae
SHA1 fe3a8601acbf0dfc4876700b55106997acbe44dd
SHA512 6621afc2f99e8ce5abdde7c0d5a47334fd1fb7c0f50b56386d20fa90138c758cd7515f4297fd597c77f9b7bdac391fc0350b19ac414529c8bc075795cc01aa3c
SSDEEP 48:cytDrHcf/QOmq0W5X47+DAQIigp05CasiiKNqZ3RLW2GmWqM4HmHFg2akwi:c+rHcnQdy947mAQIixqPLW2vDug2a7i
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_backEn.bmp

SHA256 5166935fe3a87230aba5e11b2bc218a8b11bd8a7c5b5c0340bb5d8c2543043db
MD5 f1df8506697e6fd527b7bc9ce528cc62
SHA1 4491cab1d719b12176b4ffe3936d13cface06a1f
SHA512 217ab1661705ad13862a76826ecb18731e88a10f90e46ab67660af0100ee9f27dd13bc2edd145a348a703d6a0a37be83ec4e1a3f6724e3417f13415dfc3ea7d6
SSDEEP 96:HrZ6CUqQ23QuD3ssssQs25BbrY3fV6my+:LZnUqfQuQ3brY3wy
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_close.bmp

SHA256 85b60fbedf25fbe14e5b3530ed99742f24c3bd4c1b4fdac5b34d3a29182d0ffe
MD5 027cc4f1f88073c912238c697ab1d421
SHA1 ccf5eb1e6ca312c9bc3d1665afbc384f863c4620
SHA512 262d0b6710ce9d1d45d002f0f6fdfd4ef278679d884c47ecee6216fdaf1261dcb33ddb6c501352a7f3aa40d6ec123e09b2e265e804b1ef4778ba58315e8fd7fd
SSDEEP 192:LkAJ3333333333333Z3333333333333338W0:LW
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_forward.bmp

SHA256 b7b1ad2b01e07165c652c9447266b08d4374ac26c6b4136c453fd47d2b8fc3ae
MD5 b0173e6c73412a59c34ad04ceda2f99f
SHA1 8a4dba6366aa1ba5ffe99117aa9fdfb8b70e4b10
SHA512 6a6d4c6913ca7e1ba3489e193db7418ae68d8dc1090b1fe8181c7de42ed3f151d1a25321b495b6c9016240a2744aaf324e437c6b6ff5cc3d4796532f641c81be
SSDEEP 96:cwZ2lcpFU7PakLjAUssdczXZPgwiU0QEti:cwZt6PakLdcZPgH9QEti
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_forwardEn.bmp

SHA256 d28d2cb0e16ee0bd78f681d44c5ba801113f18b80f732bdc190cbdb47e81f15c
MD5 21b11658bff7ae9f51393e912a8ef9fa
SHA1 5ed227b7b503586ed8bd84f5f289f19058cd461a
SHA512 e13f21a478713299da2dd0c693c8d72cfae4f494dea34ad4bdc3e456dabc10b21ec2938c37299a7f8670d887d952daecfebdf284c6be487ebc8fc59f23978740
SSDEEP 96:cWmdg/wGvOQssQAIssQsdYQaub1GV1GgTge95sPm:cWmdQwGvKYQZb1GV1GgTgefv
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_game.bmp

SHA256 88165a889d28f296c0e7f4fc3a1867982e2416d1fe1c5b17b14edea876d917ba
MD5 95a5232c23a53364e8ac95775808e7e2
SHA1 8ee972c697ea6037b70180551a12c7fc5671daf7
SHA512 dae013526f5029a8705e6a0906a3d87d51698a82d27ee448e94dd4ad8d241dedabd4144113a11eeb0ab132baa3229c106be7c8d91ae3be7eb592eba5487c8905
SSDEEP 48:TVK/6oKse0tz9aNNFxbIKbD/IqwaQaw+7y:8ioKseIz+xbdbDAf+7y
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_gameEn.bmp

SHA256 3b879aa731b7ede7284bf2526c0035190ba22645043f2ed70236f3b92a9125d2
MD5 ba61eefda368601dd7f26f4b518a88df
SHA1 418b16382353035d7421489391320ea68beae979
SHA512 3fc1ea44d1e21ec1ef3fc9214a90e456cb32dc4f910c0a823f6c656b979769b155220835ab04dbc8d4d6787f0a078b1fd91aec3c88f68321ae851c74b383b742
SSDEEP 48:irxQuyffffffWo03UEe5iN59btC6ZZ2JbtI5D571Lq1xAjK8gn:i9QPffffffWo03UEe8biJb071Lq1C8
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_home.bmp

SHA256 167bed4bbd75085208d880aaa6786c826c87c8f78e5a630d30a5a9388327d12f
MD5 cb88caeab5c2fd710e20a589630b151f
SHA1 f74ee6295ec0442d9c8d8b41e3c67d75ec3a7751
SHA512 0b033929a0b0d989d4b461732452e720876f5649a93ce3a244e1168dd658377d674981cbf5d64a67c0388d87f96f21b59d70ef413ce868d1fcb71304794524b6
SSDEEP 48:6yVK9GN4EfLfEosRiiiq2iiXOML22Sucl8VN0IzNkc7y:6f9GN4EfLfQACuZ1Nkc7y
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_homeEn.bmp

SHA256 71ddbd57ed03304d1fc8611e195d116d4b8f0d27e0fa37cbc37120b8d78f47e7
MD5 e0e8e5237a755eae4e9f0279a57ed2b0
SHA1 c3c263ca40bce92e6c8a5697747f9876eb4e9580
SHA512 64739b954c42a8e3b5f44e4f3c0352eed87dd2999601c4ac33351b43457c9cef77806c5c85e8b25d3d3886b43575b3f2cb509968fac9de2e59e685aea8080c19
SSDEEP 48:1M9Efm6fmpc6fLfQDFRZZ65ZZesgvZZ6ZZZZZZZZZZsIs5D5DD5dA1L1LrVwcay4:1wEfm6fmpc6fLfQDFjVA1L1LrVw17xz
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_library.bmp

SHA256 5ec08a8afec4e1a95495eea0df7846878dc61a14f316840c634b317c1c9f7cfe
MD5 3a89c06198eb3394ef974c7308d43364
SHA1 cca0246d84658c9287357db6e54470893d0ac3fe
SHA512 9ac4328bb1099a2419cf416fbe99c4e16a051c02ccfa6ba9327370ef35c98118051efd2d59b8bbec239c4fdb1c9300ca97cc463d871698f948cfe6b1e9e681cf
SSDEEP 96:ZO6jagtSMdY+KDc9nD4eJRsNhWTBT6FeSX7pblDw1Cwp49SmrEVJlHzj1v:ZOG/Xj9D4VNwTBGISDDwJvvp3t
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_libraryEn.bmp

SHA256 a7f9831389873966e548a189ec930f16f0f719c6f9b6e221b46fb23df6628038
MD5 f672bef838602bb667a6d0aee4d19339
SHA1 5968d71631152fc958875dbf1949c4698c473f9c
SHA512 32ab126b86caad186d96be5339cc8aa35c529614dda3673afef33cc6e5556d79339bf314f2c1a27feaf27e20b7ed965ebac95028e5be77d9853a5147708cdeb5
SSDEEP 96:ZO6jagtgMdRzDh+Kf5i2S5dVVplXbReTDTdf9icJMIvOmuqmrEVJlHzj1a:ZOG9r7f5dSLVvtReTDTt9LMxmXvp3U
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_max.bmp

SHA256 cbbd1a5136f8f0f3f19aee56e23ab4db75e826cbe709a6524b4e639c5a7219fc
MD5 34f29d9cd67e5fee7500a83e3d05956b
SHA1 7d58ae86f39e0dd59bbba9e116240c1bc838fef8
SHA512 252e73c3399a1779ac255098eb59537b0ba5cd116ac20954aabe5fdc2fb367b859a1aa5554021bb36066fd0eb8a0d4da62da07d8cddc6b2c9366a5724a1a7d0a
SSDEEP 24:oMTRcpj96+MQu83UAnHdPYMJgbzbjZ4YMJRFNYjZ4YMRxA6jZ+w+j7j2yW+j7jES:LTDwn95gavATGBkBwNI
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_menu.bmp

SHA256 34a38ba67eafa8089c53155375d050a0d3ff9e83d0be03d87cabb00e73ea8213
MD5 9ae0588271512c58155db397898fdb37
SHA1 d3154586350ed4e7afc5cbe6abd04aaff400003b
SHA512 4d5a888eafd45b3c3099793c7e36e1e221902492664bb5cc805d954589761ff0367db8ee641b817096506a48b0a4461c15bcb90b22fee6f2d2a4bb809aca82ea
SSDEEP 24:oMTdaQaFjLgrYsjl062q9erK77K5kDdCkDdaJQF:LTFcj0rzuKqQF
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_min.bmp

SHA256 ba8174df5eace77eee79c87d6569e7d033d8d85d1937821507c69d41b9552196
MD5 b05ddb1672d00a852ca771791e7b21cb
SHA1 14dfc43ce1570d6578449b28d9187dcc8059071c
SHA512 479046c9b1f16b515085e496410c845823f8e754d8e7dfb54cb2dbcb9985f9aa08159a428dfb73e1a5dddec017a5cdb72c1bfd7e56a4f971ef0392c22b9e27a7
SSDEEP 24:oMTRcpVCadUXs47VssQpyVFupyJJYANOAQ0+BpBkNI:LTyUXn5s2R+BpBkNI
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_normal.bmp

SHA256 d7962dbc34ac9445757f0a6dfa32a0ce40993ca8b0bc1792e01d9d74e7704044
MD5 e98ab8dd859137ae30c8f1574acc0b0f
SHA1 9410668ceea949537530411bb3c55992e729d61c
SHA512 ad0799864d28695bd082df56072bc3d36cd360129b14f87243144b08618fab96a5ce66591948738faa639b01bd6a212bdb0c59a9a2a92d29c03cd07956378bed
SSDEEP 24:oMTRcpVqsKQugnaiH/JPBAb3PjpIRhNajbbbq5+xjbbbQQ+jH8dkw+MPqk59BbBE:LTnsCiHhpA6IHhBPBgONI
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_player.bmp

SHA256 a03180b2c8d0813e084fa23141836b7eb6e90323e13703d3da5f3f77d9678de0
MD5 559fd0e4f14b071d4412a66de2a8a0d9
SHA1 26be4caf2690029575d9f674e83a69795baa0289
SHA512 2e7c1944641adb8177f88cb56a18051a84c9967836ad386b017f36d16de4abb382066cd051ab60be91904fa55f91168fc0d51f034fd91026a977797c213aace9
SSDEEP 192:ZQt1QPItTz8s6buG9kFO3Ox2XC6v6V8rumlY6RMOS:ZiR8s6yG9kFx2gOS
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_playerEn.bmp

SHA256 b0574688bea7a51a64b27478a4c5ee09713e9952d91e968901ce22d3baa56ebb
MD5 5cd6a9ecf615388277069b4402a00769
SHA1 ae36d142c82803b943b2e08f82d254b14b667fcc
SHA512 60b92edb54f36966354aaa0432067439fa19e7c199803594089156efd27162c92f9eeacdb5ae3d581ccf5801340fa6561d08db6a3807c601980681c58da874c6
SSDEEP 192:Z5tKLnwYh624bUEj/CgkBuE1T+ArLUrzflY6RMOS:Z6nwyxqagCuE5EgOS
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_refresh.bmp

SHA256 f116e0531bfef0ebf4803a5e5d600741ee35993782dd2bdc7b8eccd3e116192e
MD5 df3ed132e35759d3dee8fc720aba545e
SHA1 ae869f67ce7adcf7721dde8ff165e05d66ded0c5
SHA512 5547d0ea64c7799f7f3f9dc669037168ae81285141ac351af629e75ad42af90cd5f813dcd454378644f9b4660a0e7b3c4fc7d415c0aaf854f9cf755b0feeb330
SSDEEP 48:6yVK38iGr8H03sAQoxbrR2uLtZUAOpzjdJ50DVy/M0x6TV7y:6f38iGrF3sAbCzjsgkTV7y
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_refreshEn.bmp

SHA256 14f0beda56eca3cf6bf6601023017ce55216db55a9076bad5a2eac4ef7a95a79
MD5 6857edf5cf30de66ba06ebd8ffd37d33
SHA1 05d346aa3a8e1b2090e798bc37bf8a72d70c1be8
SHA512 1edc6b62fc7cfcce2ff908d3266c0540212e7ec8ac5b4700985697139bac7ff7dd8a01b44a14381b74eac5922268820d96d74b8575feba46f25a441d84f94fba
SSDEEP 48:HryRvL8HDdZ5irOsiZ6uiZiDrZZoZ3JLyD6sgZBbgmGggVYsUGocw8JPpmDHh1y:HrCDIwjJ3bgmGggVegWy
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_shop.bmp

SHA256 e082aadd54c3c1669b1e919b0596b4a0ef39f726586276722f1c0cb554ca6420
MD5 f5adaa93f8dc3344a6c0da6da996d409
SHA1 b0fb9047ed05e69297500af43961982d40924951
SHA512 9429ce5d9b9633baa9b86061024ac37869302b93e7d5a9433c32d081431a74ab3ead31fe5cb9388441910ef82d5be2198aa7531ebb050b7e6d5a426bc0339ae1
SSDEEP 48:6yVKKdWkmjAEAFiARa8Ifs/osFz6GOhHqEaHaOX7y:6fKdWkmYoG2xp4X7y
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_shopEn.bmp

SHA256 3eb9c981b5d927fa1837aa3ae15c24c640efff5c505c380c1df1a267054768fc
MD5 2ebefa1bc72d040b41f4edf3a738d50b
SHA1 9ddf6b6eb2b190b2e8dbd1a44788c53a896969ee
SHA512 2ce3302434dc47879e0f86b17b895fdb89e3d777aaeb351b78769e7d771d6d743c923bf5953392a8ce9d6e089405b984240c60e34a7966211d1e800c2dd9e458
SSDEEP 48:Qh/FR2Tg0YMv9wxZZZZZZFiZZZZZVrD5Zrb14TNtDPdfJmwNTOT9:Qtr280YMqirb14Tl2
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_skin.bmp

SHA256 2dd151210ec94597ead3e42e85e006a9c4cb55797211e4405339b13c221a89b2
MD5 5875005ef1f466053f37a49713be4d4a
SHA1 0c03bc3b25c04fbb7e83260f31375d5229dd0dc3
SHA512 243936ce9279de3d3f3523a4a959f1af8ab6e8448e67e545c5a5e5f16b47c42c4e8e7200dd30a966ddd211a61e6dda3ae60bc174d780645efb29ca1b5b2a51a4
SSDEEP 12:s8WV/3q953NPDOecUY3z+DILWYaK9bOyOqKylOQh0i2LaSkVmMRAu:kV/6pSecR3z+DD3ejpUJi2ut6u
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DelListFile.bmp

SHA256 563a1a0ada6e326fd8bebb5bdce0dec00de9486e7a41d4099935077fd6d149c9
MD5 04e865a8ed4429c92d2cc8b2b6659c39
SHA1 b87e40cea582a91bb842fb023aa8eccb47d90a13
SHA512 52f4e350e19e4b69c5b417a2e24cb52a2d5ff793b4fbc31fbef38e13b691a193555ec578b3a7090f0ab6167629272b297e7fc8068e5321430c6299a45631e04d
SSDEEP 96:g+7wsWpVgnVkJkP5OOnbXXXXXXXXXXXXXXSXBDMsa:QSns1obXXXXXXXXXXXXXXSXqb
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/DiskWarnning.bmp

SHA256 11f1f0acb40944154096d7405a41ef545c1aae39597c455bc4221c4e1e79ebc7
MD5 e90051ca66498fd89d54e3202894f622
SHA1 1c2862a358a4998f785e19cc48ca4ea78fdf7461
SHA512 04c3b1f8c770df77887f15ae0bc82713bae108625df918d3c0a6d2451323196ae867dc688c324bd1f680cb4087f9b65c1b68fe34bf670d29b54c4f133a1b18bf
MD5 SHA1 SHA512

NSIS installer

installer

skin/DownloadJsonClose.bmp

SHA256 cd237beb04bd01697db21d6cdc6775cf0dc88ba21ac3f1ce5051f1a7f255d6fc
MD5 50c0ea06d19e95467538ee6e8dfc1d71
SHA1 7ea22a506c48e37124c38b6c809112d1df6d969b
SHA512 66ca274038b29b18e4733c3b6bcf46134caa97d589d3d72acf38582a60a631cb77e7de165d6165d0bd9ed1c7482261cb691d2932dc441b4e71bac6e3c4ca2815
MD5 SHA1 SHA512

NSIS installer

installer

skin/Family.fskin

SHA256 81c738c33c274b54ddc42b6839853d38ad617181246288b3e0bbe684474d8dc1
MD5 daec4e76db7597aa7fdc520e78986fa7
SHA1 abf79dd835e72cba9a1f7b1fd8723fc35b1e48b5
SHA512 492e62ab250ca17bf13171c1ff43db1cc01501998c4094f2bfb6a59a3be102c00c27d74aa01c8ee6b27d8c1266f674f33ca9cf64cdc49a95025dc744b4d70f20
SSDEEP 3072:VwV85AzOa4Vq+plS0NuSnRg2GY5HNEacRjNvu+goz:VwVcP9plLlnm2GYcZjluoz
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

VoiceBtn.bmp

SHA256 fb96b64e8fa011150a74ab1e83f48e7c649bb770a1bc28e9bc2890b4d84260a0
MD5 9d1ffe51acec10c9b030200d3fa1c93f
SHA1 1a54e4f13dacd7141bbcdf41ca18ff29a65c538b
SHA512 96b89744fdf008ad8165959875c2d1f8490f876b09d9821ad6d7ebcb2a1e9f1ce447cf0757724a3485ed3cd9f12c9bf6e133c16bb97017d3797709bad754b8eb
SSDEEP 96:IVggEO4+vmRnhX2oXvsykhaBRhhg6yNx/fWxKxKx4005GeGGGGGcGeGGGGGcGeGC:IwkhAhhONhWxKxKxM
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

bk.bmp

SHA256 159b52f89a312453448c9a481506365bd4073a261c8d14f505619798d094f04e
MD5 d519609d3c59aeca5c9f5741a5fb0f87
SHA1 aa172e6037389fd5b0c8273efbd41982667cef15
SHA512 97ec6a7b6198c3ac6e6ff7e8108a9390f3ec56091d33face6ced076fd3b9fec99f1f73e6705275560ad872a5890a3699479b303cd4551606feb7e4d678a0ffcd
SSDEEP 1536:7SG2mtDxHzWVOOox+E/b487yuG52iW9f0VDtsUKSs6:/lHzWVOOox+Ej7yuGYiW9f0VDtsVSs6
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_back.bmp

SHA256 378e72ae6daa66a77d381382f229e76c5694a71708b7950b525a147f76b44955
MD5 cef43360f17384e5b114511dbc991ae4
SHA1 8ecadbb58d995c953b25949536ee95bacdc92c14
SHA512 b6646cf7f5d861e3064cfa9751f84191ab19532ed6b146cc5e00535f55317a186fa52d752b183df4e9f1b0bcbecf06c469c4c46b8b545abc3151ebd4e1dcd6a9
SSDEEP 384:cY789/nWcPxxd3O7NbtciOM+CmBcsy/J25CRUSOct+:Z789/rfd3OpbtcC+/cscrRVOct+
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_backEn.bmp

SHA256 5ad895f999a47f3286ae59863edd1fe838d12f06f4105990760191c5b4feee17
MD5 ff9a0f06f47368335b4773f62eb325b7
SHA1 b2a2ec6f6e6a18ca35aa16c0de4cf820fb68119f
SHA512 5eaa337ab5503efc5ec75bcf699e3692d8542d0ed058a7557d35b131da1fa4872df0f4bdfbf53300ed33877e812852687db6849b08c0ee0ff4290542cef4270f
SSDEEP 192:s3nRCKX+WzNATaACFu0lKpbHH72NKfKLBnSNtk3yUiTXiT/6SSSSSSSSSSSSSSSr:sTpPVNKuSNtkCdWddWW
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_close.bmp

SHA256 c85e71166e7fe39a32516658c38a932393eefba77b5188c58fcf92b5384b1666
MD5 695f27a7d0fae3ed9847c4236303eea6
SHA1 535da0216e67b99f965c6c15964c698f20406ca3
SHA512 e1ae39641348b36961f4623171de0621fe8f11a7f5537a70428174e22e970116ac241f379110439b00719e692a0b07deed3bf45bc637152c9acb43227be1b06f
SSDEEP 192:nX222NjIwLp2RuRiRQPJ0/+7y2ZntaH65kw6:nI1p20YR+2/+7y2ij
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_forward.bmp

SHA256 ab3417026d09f9d80642725e6224ce08056235d6450c89243dfa049d29be79ed
MD5 7c0a7f5821d47b8c59d0f50065349d12
SHA1 8b9e32589ec495ada8954f3dc59b8e401847bc4f
SHA512 c89f35312685f1c4a2b7ef396bfeb4dd082a9a1952116e8e44bcf2d34692a93cdb5d1e621708c396ad61b5bb83f2c216f77a6adbe731c9ceb6c3d6f81f411c29
SSDEEP 384:ckTo/IrMqqqqqIOd9lJ7KEr6F6J08rVzf1Gohg:HTo/Ir8Od9lgJ8Bw
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_forwardEn.bmp

SHA256 456c49293424e87ae9eef19194f3669ed2987ec01ad97d44aeb2f21f1193ce5c
MD5 edb8fa18380bdc33231525ac00c80474
SHA1 6cf5c171695781f1259b05626ae2afaa9648e569
SHA512 a095c0bff62470b06ff4357bb54b83203d4f2037f961fe25e330a308053d72bfe29e6136505cf92cd4dae173aadc19afcd63ebe79c10af183aad04f02a0f4b0b
SSDEEP 192:gr9L9BI9ZjSwFSSwFHvkwSOoCLH/Mxq6l7zgsHd3eVcC/fGANXaj3RpS4RpShs0R:gyLCDM0m3eVc2bNXabdG
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_game.bmp

SHA256 1af2f598849890e62c9ba5edf1052911bb6edc7e6f7bfa36e6a9123c6b41e333
MD5 a5fade9460e158c6c032ae601f608cbe
SHA1 4e1828fbfa6dba728e17e0800d5a1027c83a5362
SHA512 9560684eaa0e892497515727b925d0a503c886b6ce27206d99ab7651bdabd27cae0c931563e1595fa5244fd07aa48cedc6f81384670b83b18ddd512dba0bad4d
SSDEEP 192:677Y+yphUccccc84qIYcLOY71OOm+qhgv8qMAoCu2FSm+nt/Tos1kMhXbrhdp9WS:67b7b9cOwYOOFsomSm4osNhRNWybvbwk
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_gameEn.bmp

SHA256 1bdaa3bac6c7305b4105c956c88fbcc30900f54bb1a597b020e745b2e1259292
MD5 6642641e5f2990a7b25e337b4580eeca
SHA1 fbb2f6bd682ddc764d13307b8f3facd62b0f0c5d
SHA512 601ee6abda5c298341cd78b4d6d9f0ad1d53f2fa22e1a27e85a69777c8d72e9c30ebcd207bfc6c72572260ae9812a58573f34a6fc545212a104603687cb2291f
SSDEEP 192:x1NyLmzPz+SEnJQF2WHg22qEFBaNwurI/x45hg:x1NyLmzPz+SKQASg22qEFYNwu+x4Dg
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_home.bmp

SHA256 1cc79c7de5a062e2ef1a820ec5d214e445a44f553923e044e098be113ce440d8
MD5 f249b68710bdf5217320c4afbe917ce5
SHA1 1669290e5c4fde484039adeadfaa9bb3e9ff7973
SHA512 0aa0f9344b86c43cd6e55e654292fcaaa88b488ecc52d803e16bb1cf78a0221d8fe6f7d36ea91a9d259db2042f8644ad83fd341cc69ec9724bba34c049720054
SSDEEP 192:6LQ53cbw51fjmM5H3hGSA4mEKBlW/ZQKyRKC1u3noTWNf9yn3nRpeMCBZlTJx:6VwTmMxo1FE3WWN1yn3nRpS3nx
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_homeEn.bmp

SHA256 41c3bc757eb2227de3db20bfeb17153ea3bc2837a60296d1ab4680ce85446942
MD5 2a522f22aa8c1b8a3caef62faf04cd23
SHA1 dd460731772c655b4c502f4472cd9bcc1afa5d47
SHA512 c13aea6a1199ec945eac3bca6f531b6e9920e4cf4b5d5e209e788f3fd130ced0a4bfc19a526fad6cca33033a3bb403286f513ba0f2ff1c4527d774c119718ef7
SSDEEP 192:CMUUYPWTogRZIIf5qKFBwZUyyail9bll1NVkzcPDsoUaAQ06XGNtE:CMUAToOZIIfEKbwZUaAbxNuQDsoUdQ/
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_library.bmp

SHA256 fa9e809fa8219478428a83690df856de27fdb1e38ff7a23ad4d2cc5ab9430dbf
MD5 07dd0cc2b719a10c151dcba2c7deb80c
SHA1 9ea5650ce22d088eca57631c6b3439f5dac9ad1c
SHA512 6b980a22bffb51674950aa0376f308f7f48ee3cb23e7cb624f41ae5c11f03e394d0fc0d4c6c8fb174477ad72c1a5b89dfbf42a215497878d89ed55277180eb76
SSDEEP 384:NUoKmFFFFFFFFFFFTFFFpFpFFFbFFFFFFFFFFFFFFFJxKXbjiFDcKHMyiguMyigh:2oKIxo8DcKQ
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_libraryEn.bmp

SHA256 f70e24bd49284bbf39467ff51e62585657fdcd3e24d722294169501ad60d4871
MD5 dc0c087ab6bf6c59b50bcb398b53af5f
SHA1 8122d28e1bdaf5153501007871360abd37ead80b
SHA512 0177269a2de654101a7894de8b41c993e17309c5447d963325b9d10ed3fe80a0d072d9c6d5fbf4af2cc3c48ecf85660599107d6530bed063bb0cde358401281f
SSDEEP 384:N2oK8FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFUFFFFFFFFFP:UoKIkPSrcKQ
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_max.bmp

SHA256 6be170b190be17303b09df00f08ce1675fa8a0ecb68a8917aa8707100f6dd6cd
MD5 246feaea8ea75810de53383db991abbf
SHA1 403192765c6fdf122618ee62f4d20218d90a5b43
SHA512 0c7e7c7c0869ef2c2fdb211e0dcb7e924fd00c3a093d2e26391bab777ed4a758e73915fc5cd61c5a250523da5657b35205a30d190d3cae52f88c09d7981e162c
SSDEEP 192:wJe3O04zpgpan3zcGVlXdZFdoJs3hck6vUP+Wuu:wY3Wzpgpan3zcGVlXdZFdoJs3+k6vUPl
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_menu.bmp

SHA256 10d64172e1e43a2acac43ee334fe3c886d07e243476bd9130e13195d69aa288b
MD5 5baaeca6c0d33e854e38fefb6bbfe126
SHA1 b38e0d27bb01e3f7f71d28675d12cce561c3ea42
SHA512 57ef92c0c97723db82e1f4c470dc5efc0e9886565e1fae96ee0e524065af2309e36c07b29e21ca6aceba7b35f33ffeae5e2e30d3b8cc532a0a3f3bb0f7e4b98a
SSDEEP 96:wK5HxKroDroIHA95oQZ/7D17s2LuRE6pepzEmamkbCc5RD:wezA9SQZ/7D17s28E6pepzEzmkbCG
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_min.bmp

SHA256 e4b203b64fba9975c2b7f185fca6a6aeea818727e6c3e5ae51b892b9ad034c4a
MD5 9b52f5b179865847238d393d1a4def25
SHA1 9eb9336846bb7789fc03b3264dd1d905f3347941
SHA512 a44a1d6dda500f35b72c98e6a19e051bda75c33987ba86e4007c59cfb1dcc742d59c56f4e0e97f620fbe115d584f1c253cea6fdc4bfcd4175dd2d44f44ead9cd
SSDEEP 192:wJe3O04zpgpLWu151dIdtp1QXux5iLP+Wuu:wY3WzpgpLWu151dIdtp1QXux5iLP+Wuu
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_normal.bmp

SHA256 83c431a1da379585f686ac137d9650cc905b37ce738afb137b9b91618d551c7a
MD5 7ac2f928b325415a9994b8563c8494db
SHA1 6d5143b04f942f163873269abd5417aea9e4c969
SHA512 8c08bdf42009ec0ab3391b5f0f21397a488b2668ad23310b68532f7eece13bfa2d3153ae30ea29d492eb480b5c79d30e13a4f3d20720a58628273580ea6388c4
SSDEEP 192:wqYXulY/YYAumKxK/Y6oMdddRMddd47x0nBlox+V+q:wvulY/YDumKxK/xoMdddRMdddVny+V+q
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_player.bmp

SHA256 bcf24c9d5a5e9e21583d1458092e4d4118449fc5fb2e3743aecd464a3b6533e7
MD5 a02db5aa687fbd79b2a2aaa5ada56543
SHA1 cef60cbc0e103e6140395f647c69353446e17006
SHA512 b714ad2378bed7e1fc3070852e52bb27dc2e6131a122c17ba60f59d9bf17a5887bf44049d95445820aa25b9a8df6d8d72004af25f4a3535e6769a4b6e69177a9
SSDEEP 384:Ng7vqBFFFFFFFFFFpFaFHFFFFFFFFFFFFFvJ3Q2JMIS86:67vqiM7
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_playerEn.bmp

SHA256 01b9e35fe40f88ca042ea3d7031f2c6aedb825c15726da3177c9dda48c8a27df
MD5 c709eeba736e4d00a8a58a27e76e0706
SHA1 46ccddf3ca54ee02f35c5e0c371bbf6eb04adc39
SHA512 acc868339521c38685eb32d5f7d4259410924bed6564dd776d1e796dac75ac9bfe7bc5c11362a4e3c81a699dbc700a56ab4b57b2820bacaa357c97f23f9cc157
SSDEEP 384:Ng7vqeFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFr:67vqMhEjzQ7
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_refresh.bmp

SHA256 b398efdb4a393a4bb78725926c7d1f460aba02e164d0f1c3489c1dd78ac920f2
MD5 ba94cf48612cbf379806b1fcd8633e12
SHA1 d8be9d69ea2fca8bc428d56a68d37c5843255b00
SHA512 b7fdafb2ff54d14329dda5e8239de4b82d72adff56f58dd8014e4d9702f0f61e2efec6acd7b9559030161ef279e4f4af90c9b7812fdf66fe3e06b25d8f5e8c26
SSDEEP 192:6M3rKLrejBDkCp6Ivp0JF9P5KXAHWkofahZB7x9q5eJj9Kuor7STSASd+lvZbt:6nLalDkCpFp0ThcXYWk5hffqIJRGr7At
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_refreshEn.bmp

SHA256 700761f11c6482f7758292974308b19a2ae8a54f863175aaa5d3f1d6a4b84204
MD5 5883e36e5226a4ddfb678e89d22a98c3
SHA1 c0dd25d2406af3ac09c5048a6ba21c312e6441fc
SHA512 d2f4e1954af210a47eac68ddfd6d01dad4c0acbaa3c0b635a75cb1ce9728683160d6f7bececc340a8d87e5ff4041efa7fb56d00919e085172a9537106e9e9c6c
SSDEEP 192:shdfkcCN/ZfHYxU9cZ2VnZhb9rYHNHtTgZasZui6:sOaZoZl9EHNHtTgc
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_shop.bmp

SHA256 8ea1e2755438d7f6d8bda371829a6670190cb50c607d64366221a9aef7cc87f7
MD5 eaac95f4fee68aade3cae4105843178a
SHA1 26d9fbfaff06431f0ac31c63140293fdcd5a10e8
SHA512 0fee52b51a889d067d2072d14523f9125bfd534fce0d73aeb773cbbd3a255ea46279f4c113f1b5f517a331bf8105d6a6b19c87400b4f37338eb3e96824a61a83
SSDEEP 192:6WH1aiAYzI4OWaphkkOIh3JrItpEf6ukyEqOIRJxB2Ocq7W:6W8iAqxOWECkOuIDO3kxbIRBhF7W
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_shopEn.bmp

SHA256 279a4a24d54b20aa36912af09f4cd94367b08ae827032015393d8c3543988b9d
MD5 1f73a9dc1493ea11af08feb24dd720aa
SHA1 11630e439ea4b2a1688e24715a5d69310ceadca4
SHA512 c9ef4fd0aa43de6caf5c7832e3b240e313ee8b72409bd0824e002c69f07e4e778005ad74c45eb4198a521f88c5bc9e90c8aca5aea421dc73dc15b29c7a8d6045
SSDEEP 192:P1nFjlCnrSww3NK6x8DiF+NxXNo3ker7WfCq:P1nFBxwwlGDiUxXNor7WF
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_skin.bmp

SHA256 c27717614cf0bd5879b5cc6da25c095a25809cd48764c690714bed787217f542
MD5 09276233d23a1569f163f402409016f5
SHA1 f874128012b81f08801952d05e4503312c059591
SHA512 8b97d4cb85b0a9e35708ea178d57a1795b6524d3066cd5f4b84d1096adf0d02e388d17b07ce953d64c0f684dc782dc02ec5b2e9f8aa1a091a95d0a3c85de7efc
SSDEEP 96:0Yv8Iv81vPncnf0vlgdlgHK2MfdtyvvnbVNSSLSZf3SSSA40QlU0p0PavmOpCucw:0YRgvPcyE0duXViDvmO72YviYpBKsnDp
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/IErrorReshBtn.bmp

SHA256 e4b4220305523efd520baff13e81bb0597a1a65d6c0925531a9ae13b1f710852
MD5 1973357fbbdf717a3a0bb6eccb51d1d7
SHA1 7b1bfc905d0fd598645ca2fd77ef10f87c6252c5
SHA512 14bc3a12a41d0cfb573d006c8c640cf4ecaaed8f62c641af7fa01bcc9a73e64012fab8894386d505cb00e7b159c2bfd2d56cdb25697024f9ecf452b9cea66ed6
MD5 SHA1 SHA512

NSIS installer

installer

skin/IErrorWndBk.bmp

SHA256 83e72d6a31b2043f9fa92a46ce76a742b2e421d1ce869d1cfc3854a03947c1e0
MD5 f46484733e7958bf177c01038399623c
SHA1 03a82220d846587f60825176df6f20839fc2c04c
SHA512 05b2a4a51c54e5cff80f0008cc71acda8060a2d130003cb95a6e5b5530595ff7b352716f1dc89fb5b5d6290c567eaa379d71c97ecb0007105e41445d32a993b0
SSDEEP 1536:UBPQf98T6OJnIZsQ35vcTFAp7B4ATCZ1FZby1y:s
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/LogoMini.bmp

SHA256 37f44eda04eba998ce67b51100775df9099c991ccab0f06b74ac8c53c4d1759e
MD5 c1628f4ecb0de59795b4674f60543f64
SHA1 febf360a16a0276345ea81fb60c19647c99532ff
SHA512 3fddf204fe928eeee0f533e47648dd6d8ead0e8d2198b677f6cd4ff2dd6994dee124311cc4957ee076dbfde51c8c512bc17a35b15a89dcbe0076d05d03846e36
SSDEEP 24:BNC9wZ06Mi/7JdgltAbcEy4DJ/BAtlSXFSAaW9/+a1aJEYhDnDkc4:/C2Z06Mh6ZjFLaWxH4xzgc4
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/LogoMiniEn.bmp

SHA256 ccae652a431a695cb98c54e727dd94d802c27ee802d0debe7eba09659fca28b4
MD5 48418510d7078182f010db687f1dc72b
SHA1 51f9bd7a54b73a090c43e3e40ae4b16580b0acc3
SHA512 b6e2f0a6fadb539dcb725aedfc5e7077d36eda899332df4cc572ad99af1c1b9e7549adc6e7a3f36d8240ef4897bd25c745cf9b1b801e633f3664c051c3d8b49b
SSDEEP 48:/ChIBIYQXm3l3DKoVfRsPU2C9TM2PjAK5AqPz:/4LYKm3ZDKoVJsPFC1M2PFCqPz
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/OptionBtnArrow.bmp

SHA256 9cbac6188207a98a32612e299578bb6e84a99f227d6cfb998aa9b915a868824f
MD5 173bc82a9e63f6f2fd56a06d2865086c
SHA1 d81be3f55eef3b72826d25f7155b42bcfa494c3d
SHA512 33fc9fb836d5a405351f6ba7024539f03c17170919f885d781fd03cbac52934afba625f0a1b042a987d06f22cbaeafa113f5c13ca0466adaf09413930468287b
MD5 SHA1 SHA512

NSIS installer

installer

skin/OptionBtnBk.bmp

SHA256 5d4b3dba2e0b6514f8c19e031b78616e699c1b13e7be118d8b01ac6cf0535daa
MD5 075b9d8103c8abc7400964370029ba2d
SHA1 879f30d376bc28f76ba6a5462f9c3b24ff35aac5
SHA512 1b0d32bdde79af47df75b56b0b81846469612ab83cc7672fe2be98da78f06f85808edeaf7fcecec925a405858e43d140aa6db5ee7f461885952095ff9851e083
SSDEEP 48:8nvXcccccccccccccccccccccccccccccccccccccccccccccccccccccccccccE:eEYKaDaD0QeeAhhr38RPMPMPJfO
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/OptionBtnDownArrow.bmp

SHA256 48ae2c56fe1f609f07a21ced04ae007c69f58ee65e59443b6dd963b8f41ad71d
MD5 8b11a21c04ac59c8dac243c10adfd864
SHA1 7af66dcf93cd71b0c2d159823ed9a136851f37bb
SHA512 ca5e7305399d5dc752b95c9af0b1aabd0d097b66322cd2a33f5c1ea7d2e1921dd4f499bf7a266aa874534a0515537aadf1127de7492a16e521acffe989c9ab1f
MD5 SHA1 SHA512

NSIS installer

installer

skin/OptionBtnUpArrow.bmp

SHA256 059d41630d0d31e5dd2480a97514d9a81425a7f050a9fa182b805351d8e94c99
MD5 e36056335a0f6cfae4864e969cbbb3e5
SHA1 6b07f7e8f1ca88f6b137be68114e310ad1b3126b
SHA512 0c02db9e79f197cc770e6f9ce3b5e61a4edaaaa9db4f3e83308e1ff30ce032551003e2aabc5f4048800eff63f7981089dbe04bfbbbdeff313c9662b644b4321c
MD5 SHA1 SHA512

NSIS installer

installer

skin/OptionSplidBarHead.bmp

SHA256 3c80c941434d67325365e074fc20a34527bf4424f49257937640460e88fbdc0e
MD5 cd55ba2c5811d0d8571d568097ca3e87
SHA1 653aa6269347a184402ae7293995f75222aabbcd
SHA512 35ae0ded1073173d09672b1af9670f960c39acba67ed2edc6f632470749ca6cc1554f8d98dcd91cdc99391ffbd3ccea30ca6485c74f0cf3f10f58019bb5af9c2
MD5 SHA1 SHA512

NSIS installer

installer

skin/OptionSplidBarTrail.bmp

SHA256 8498610d2c3ea53e50debc2b3c71b1e45786049e5828b247459f44689d817939
MD5 8e81e84b35739a65068ccc5f4e49378f
SHA1 11f3abfa0f5aa152ede659a5cc87bdf73293dd39
SHA512 f74ee000c96f02ea5c3f9ea30cf600b3c8c97aaf9c959028aed943135a08f36b8ea394a75ea8d60d46ed8524c07084bfd5d5caeef03ea30e38a8b0ecff172f3f
MD5 SHA1 SHA512

NSIS installer

installer

skin/OptionSplideBarBkgnd.bmp

SHA256 b194e9dc07ed9ff574b7574725a6e102a6d0189df4f364f4a10a091559639b0a
MD5 294c5bb6cf23501b7e63a8bd6625b80f
SHA1 7b20bad99e159e535f18d19e698ec17f367e3095
SHA512 b2384bea7957b146d90fb8bcfc746d69417b1c2fa45ad85b2b0702d3c9b053a50ee5c80ad250af89e90d5800bfcd4f5e38e2206cdebc77fc5038cb387a4ad77d
MD5 SHA1 SHA512

NSIS installer

installer

skin/OptionSplideBarThumb.bmp

SHA256 80ef5aab6b8748e10b5d5eb2e088147c78d81c9cae825aeadfe27791d8ebc7f2
MD5 58e6028c5a2c2e1a244876d864c9ab0f
SHA1 1a1603c1391c37ce458b223c9574b1a0ffda4875
SHA512 8df229e1879b24bf8c8fe34ec148447de380719a74c0cfa130d38e5748e07fec50b567b5804b6a47cf8444606748e18b5fc96e5ca38828beef8f7c46f64c337a
MD5 SHA1 SHA512

NSIS installer

installer

skin/OptionText.bmp

SHA256 8b33251d64f42dcb146a77823bb6ffd5c9268fbc7650dd3ae5d6cef14e77d8e0
MD5 cf570a191610b4c01d8e89f952200bd5
SHA1 4b92981898b780e9773a85c6d4447a0fd5d5d205
SHA512 05088f351610eca58db35ce06af56c4de77ea042dd5b36d1dfee4ca8a0c13736838d48f13faf6b8be1d2fcc4edc38878ec8c92134df01d451a917bad88921a11
MD5 SHA1 SHA512

NSIS installer

installer

skin/OptionTextEn.bmp

SHA256 6ea1e84fb5fcfbf01638f0f9fa7d16e41811af24c54c491d84bc33111961d336
MD5 d9af4c13cd0752828e5b9507d2aee607
SHA1 526c6aa7bbe58f63beea8d00a66d698a9c9fcede
SHA512 50c4f65b7306612777d35c5051561bab5e88bb15529d9ebc80da740e5689685a7c4d5c819623ae2487c14607b2df98eaadbace3472ae384cd7873e90f939fe4f
MD5 SHA1 SHA512

NSIS installer

installer

skin/PauseAdCloseBtn.bmp

SHA256 e4e01c2ed9d54f5945b41f2ff4f143e02c110418e4da6c7b43077466c7a30f6e
MD5 239e6b3d101206a5524947d55f34512c
SHA1 e42ccfd12e92b87e7556e485bc03d60e4dff1431
SHA512 d4f5a98c3b223c78ad197e51100197dd6c2bf0df1ca7b911aa07fc79116615f8519e2eb11771123ef4184f3664d2aed6a4671b402700c0936c25e2b178af7a8a
MD5 SHA1 SHA512

NSIS installer

installer

skin/PauseFlickerBtn.bmp

SHA256 d7bdb0ba4be4e4ed9ba59494c697ce7057be5d942132105527684fb9136ec016
MD5 75ece0fba17c94ba2dabffffcf6d14e6
SHA1 45f988e64448e6924aad10b8405ca5a6fad81db5
SHA512 66e5102c8202433f95bb52508aa9931ac115e5aa7f2579f29ffbb051adaae7c0b371e1a02ecee2b1ee038f9f0cf37a19926a974509dc193298c686dd77e90aca
SSDEEP 96:Fm13vCYv4Tc5pMX+1B9n3WqxTpPr7l0a9hmS/dGcNokq6/kkISxCDqRhf:FejgopMX+1nFTzkkLCSAqRhf
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/PlayInfoCurPlay.bmp

SHA256 259a00c255fae8252307e63c85d75aaa2a7186d7506164fdb4bc51b07c7db263
MD5 8a442896aa2b312d06127bb3d084d1c0
SHA1 a08d3cade730115d7e762b398bc028a40e02c065
SHA512 3bda9d7ba4babda566fd629960113a8fc0e45274dc10038d540f9cb454f7a44855902759858c0fc25cbd0fee7f38a2132cda84fb998060740cb9ac86c793dff6
MD5 SHA1 SHA512

NSIS installer

installer

skin/PlayList.bmp

SHA256 a104b48ccde868a4c52b201378b6272318c5c05989d6985e82e5733af5ad189a
MD5 adba1cae2e2163627f901df67c577635
SHA1 2843cee60e1bb24c29111e83c53f3d678fc69c39
SHA512 7af53be9cc9a43985596e0069b73709ff489d03ee8761dc32f021d0fa50a01cc4b034b0c02c99781d5cb8b3aaa15fa0ca9cd174b6db20c9ca969bb33a5bed849
SSDEEP 192:wQIAPZSrXZ2igoQiOdDwJldwL6wWNI8tuD7puTZze5GwSixvOI:wQIAPZSrXZ2iPC23NPtYlSyvR
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/PlayListEn.bmp

SHA256 05d5242aceb3f2f73096e76e1ec405edafdb0b2887d644ca887a563b45704ce7
MD5 7476828983a240187f4985b22fb2e117
SHA1 031f394efc4d77e1eb59d99be616b91c8d1a4c48
SHA512 dc33824421de40f1e36e199d9278b075d61999f2d84644f4d03ee73e578508e175185f803ebca5cd0e70c6cc606a957e5e9320b11061db8448cd16419842bac8
SSDEEP 96:hPYyobxVIR4njA8Dw0bZX++FV2bozumHi0l128iKGcnG3GCoTscv1NUNUNc8McKo:hwyWzIuL006AumHi0lEMnZt0Ph81
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/PlayTrackBarThumb.bmp

SHA256 e815b45ba4ddc4e268de0f1463f53a6b41e321c555a8b7eed0cee80c6b10871f
MD5 aa53637106421622518e14cf89dca389
SHA1 d56406319df4b766b1d99a22ff18752e2a3c5eb4
SHA512 180590c70290f877fe2979e9f8dc41aec797a8450c740c0d9afeb66f71f58e9d1363aef0377bd373c634c19b3fcee22f8c1f7dbf018e42d3555ddf7c1203ac72
SSDEEP 24:eoO/m1fNvP1NtZvR/hFKDzLTzrv/PvBLm:vP1NtZvR/mDzLTzNLm
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/PlayTrackBarThumbSel.bmp

SHA256 f290d210b4cbb7c91dc53efaddbca35b652df5350841eb157b35500742d058c9
MD5 d9776535a761f216996b2be24afa4407
SHA1 a62dd51f3e2611759d2ca4cf6263fb670bf20a51
SHA512 d48316ac552b33a13bcfdc545cb9049860a2fcd37baae6a0bb5fc45c5856e1997cf3b7cfbe3faaeeb78294b826d6893ae6e7e2a2d64e0dc176d70b77fcadb918
SSDEEP 48:iKd+SESQS0SESGF77b8BZjFPo0oPqyvOmmYAUbYJKOaKfV8:2NrVNnF77b0FPboPqyWKOaKfV8
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/PlayerBarBtnFullView.bmp

SHA256 78c7768b493e9bf5d323e613bef0adc9af978b639492a393d91bb2c37d77fb7c
MD5 ed6bb9bb70d4e2f49ba49408eb710ab3
SHA1 c61636a7315373bf1a624f4fe65f060a644e9a33
SHA512 9cbc5abc2c89c49e1b94a3e7d9285afd95b8c26268bde731815bcd8f0e2ff5f35d64f05d1e130648a1b7ad335f605d6fcfbfed2f6c668e7587e1c500c7045156
SSDEEP 24:ahFXUOCiEKdxg+B5esbAR1BNF8TXTOfY7BfNfgD0ziiDWgBLUElfkJBT:anULLGxFdAN8s2FNIDZCWgBLUHjT
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/PlayerBarBtnNext.bmp

SHA256 085433cb4bbf68b5d4d115a6009e692decd46744a7af7c98f968d329ae41998c
MD5 a3294941e08108c2cae666d9cb81a186
SHA1 116f2057bca07d2dbf364205375dc67a88bc0b03
SHA512 b9642bb7496140947b4eb1704bae6d67fb2b62db646c6269265adf24c2bdec7df293be14d74f430126f148e1051f485ed763eebcf597c39fe940390a4025d4d0
MD5 SHA1 SHA512

NSIS installer

installer

skin/PlayerBarBtnNextMini.bmp

SHA256 588d8c0e2344b8fc3054ac735e9afd23af070ccf460c17781007202a0052282f
MD5 8c0d7880967d76320693b9a570982ad1
SHA1 a1d6224c980dc54ee3bc3d3f80d26c2bbac4a85c
SHA512 454ec3e97c42abb4b30e024cd6ab9cc5c54c7ee7ea1cc323d79b0fa08311dab6afc3c8d130d8f48bc08822fd9bbcb4fd5bfeac8a328e7bf35b5f5ee8ecd286bf
SSDEEP 96:8lHLFqCoII1WIJqXkL6g2zURPMUwFcOPVxWs1WgEkSR7In3siI9RHt:ALtkOqUbPUHt
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/PlayerBarBtnNonTop.bmp

SHA256 169644d80649dc70a2bded665747d6fda550bcc6b9d21a83cce6647645f43856
MD5 e4ec5e24e8417c1208ea4e7239551b3f
SHA1 b69a9fa5d98f971fb122a9f960c6976fe3205d2f
SHA512 a06ee7397cac84a9d1a7070dcce49996a1ce1b8c60b9734999bc6edb74006a0f58282556c76b475f28807117d864b318cb754847548e263476da0879512cbd27
SSDEEP 24:/TGqBe2n70RUb8uYhY6LvhffZ59KVRmoXeWwje+RNQlcih6:L/B/nAR/bLVIRmogje+3wph
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/PlayerBarBtnNormal.bmp

SHA256 7cf76ac4b059c4a1dac5b78fb7f2e05681732b8e1840b13c84196f96491370b7
MD5 3f165536f1221d2390ad1239f29f6e16
SHA1 f289fa8d7debad33301528158094611fe4e90daa
SHA512 63f2d7b220651c4f45a6a7f336587fb1abfc992016f57ce2f1e08a0b6bc84b7ba9ecaa636118cdf90e054beb70cefcb00c44cee96792319bba19b494734ac594
SSDEEP 24:uI5fUeGCIMaYYlJC+5VKVV8VVOApXDofkoTwBqYPVS0Alz4clQj9Dj7g5haZH:hGeqFYVVTAlDo9aqYPCMPe
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/PlayerBarBtnPause.bmp

SHA256 665af6a8d872ef9390e7f479f526f7b3da64d51801aa4c2f0490a200af6362cd
MD5 c53d377af3c314431509e39b01292e5f
SHA1 2b4d1067a6e4c1c6a6450cb8d843ca0a66034836
SHA512 d8e3d69350f8dcc798c06254ce13062c2b1bd9a1159d9fe8c11e1179156f68521b181cf62729808f0a54b2e27f9aa7688f9a764f2031be0b1cea808c4b7d686d
SSDEEP 96:XwahOgfYW2IxD+LeiYPA02hiUfStjnCcDl819J0R1Dv1hoodWxyWZ:Xxtff7xD++uiptDZB81azztWZ
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/PlayerBarBtnPauseMini.bmp

SHA256 b9a4d2d87955cf4014bbdefa1e69fbc3996304033b9e78f7639bf181013701e6
MD5 cdf9b0ea62fc7c96252e20e88669758f
SHA1 30cd0b83d4f6ea88025e7c2cd193d0706304fb1a
SHA512 6a4fdf2e94c8f09add0ddfa38dd58246c75b5fbe045b6e6ea152c3e5fc084b3b51e0f573f891570e615aaf7152d15d3473045da092266974e5ab742898f699e8
SSDEEP 96:3QZgzMo6o2qCFnGnbkjbYmq7ML2P2WVsZxgjk+wCuND:3Kgzwo2qCFgbkjDJL2u4jkuud
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/PlayerBarBtnPlay.bmp

SHA256 997ae2f1edb8cc533ec1b82a4960e6b9c74857f01d14d4a165abbf85dfa4d5b7
MD5 52f51267385723bd0a298add4e761fd0
SHA1 9f6ca3caedb47c95bcdb4c19b037ea0b313b965a
SHA512 24f6e7a0b8100b5e38af6054b157e4a36a254336ac5cc2825d45885162cd2936954c9d97d8165aa3d1deef4e1d1587f79120de4d279a213f6eca10e75722ddc6
SSDEEP 96:xgoRJTxEHKRL75LJ6rwV31OiVIFQQiEEyLWrB:xgiqHA5LJ6rwZhVj8Y
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/PlayerBarBtnPlayList.bmp

SHA256 1e4689f8b027c2f19dc817e578632150a1ccc316d61afb101fdeb68d85c4f553
MD5 75a95217e727717e1caad697dbb09a30
SHA1 03a93af8d7f7f1b53e38337a878a7dea4a4d6118
SHA512 d1da4b770ece44721a88ca4e718d00be2a6537211810f70e23df8052048f7ccb115827dcd2b10e99bf9c6b643db592f3e91f0d22365536c2d038378855d4fe5e
SSDEEP 48:qePlBJxkjQqkHVf9rDV3EW1v8DlIJXEPzhMxKI6Ibknlohnhx6Vuh5dR8Y71:lPV7lZ4fcbkYOu78+
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/PlayerBarBtnPlayMini.bmp

SHA256 2bcf991840375b74880a24746e1163792d8b1ba8194430574dc9b60e6c34c998
MD5 97d9728e788e81e34b82e710827514e5
SHA1 8eafda9c54c537b0fdeb5c65d3e14d4daa551059
SHA512 319b3b4a786ff1b4d3df6cd777475064bc59bff70ede5a2947323fd22b3d4946a6a3376e42729e44f0270c13ad2545983b31b2d6c23c21f15cffa1973a331c5c
SSDEEP 96:P9qgRFCZYC8o/RosYkg0y+SfktzMjI/oZIP93bKv42lbZ3giejz8InC:FqGFI8o/jYkg0yrktwFaAAqsze
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/PlayerBarBtnPre.bmp

SHA256 c045f11b6ed3d775aebeb63d15b65bf152f51ededb75f18e9acd2f4f6d4945c8
MD5 ca772f5b45a6414b7da37947733d7f41
SHA1 805872cf80e8c48459fff8c03c74c37f8b28b0b6
SHA512 b0853e5c22bc03dc54dbdb36def5dead1ca0b3452e916ff8cdbb7aad03533593046df336a480b07be95c8a2cf58a9d8c0d69527072a7a26c60f2cf0df0389197
MD5 SHA1 SHA512

NSIS installer

installer

skin/PlayerBarBtnPreMini.bmp

SHA256 caf8f8c9ef9ec6094655ca8921ccc20e8238b4a7479abc3c78843c130a149a50
MD5 bcb650d00a9640ac35688ac8cee6a12a
SHA1 2046fdae86650dc7d9adee456ef7735a486e0f46
SHA512 22a861c8ca8f84c814689ae8f8cd299861e3627905b016a6cf46949cf94680ecb45ccbe8e3109158674b1e8ccfba1e38b7dfc9e014e3855dcc028006199eda38
SSDEEP 96:slsmmM2Vqtw6IsoxUTKrTP0MWUq/OlZM/7twltEs1znjvoo3:lmmM252oxMKrotp/OgyVZ86
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/PlayerBarBtnSimple.bmp

SHA256 b8e9a24a97429a3c43d75ff432fc29fb8c85cd7ed49b265abaa39988aac19368
MD5 2212d7f48e6fca0abb3efda73b7f2f59
SHA1 3f3fb7fd8f4fede0f28b52426ef5cb94c46190a7
SHA512 55a29bb99955d47bd0118f71087c8841fe0074b01e88c804053eca0ce3d20a5751e0e1d3b81b60a6815a1e8bc5c44e38145bfbcc2aa63d19fab755ad95b7f8e5
SSDEEP 48:aPRjDW+wQJz1kSFP10KSzfcbP1v6ZNE+VSjTL7xqu:a5PW+ft1kSx1/SzAtv63E+wNX
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/PlayerBarBtnSimpleEn.bmp

SHA256 a3f007b2b4abce7f7aadf27e6a58699e46ded463dc48f00cbe8e8005b63a72fc
MD5 ce26852c23d3f950f5f8da1abfe2671d
SHA1 5450c449304d57db7c6d48a24c540020e08808f3
SHA512 0cc11d6ffccf973c617f8d17bc6733e19ee444d467407f3c02ce47ea7adb59811341d8526929b27f676d7526e67ce33c6bcf1b8a8b8f16708d4f5534a8f7d3be
SSDEEP 96:xzhBVx8ZgyqReaIdcv3Y1HMgxSEgUegyMTGITKxPtPCRPLK+4nQBZNGXI4WIKf5J:xFuZgjIr1tSEgUgMTGI+fWUY4Wv
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/PlayerBarBtnStop.bmp

SHA256 44b9ce1c4407f1f95481e69411270490b6833d0771ce9990960822f5c2e36dda
MD5 c460dae7e6442949c1bd81b0fa05c17b
SHA1 33863d2eb41092caa7f90b02fa7d0deffe846e28
SHA512 95b7482e7d4167e2d21cde039b73dd3c0b7110b20be01e20d27d81fe9933a680a1366d8a5eb5acb8541c1103a415cbbc6560eec85af5ed16ac548fd877b98eae
MD5 SHA1 SHA512

NSIS installer

installer

skin/PlayerBarBtnStopMini.bmp

SHA256 582485292776abc7f4965e90b1009a4634a685036372c1a9ace269cf38022424
MD5 2fbb1e74caaf8df9e2c52b8879ebcc06
SHA1 a0b8b514da2134518f1d1e0eb3f5a04ac20fba18
SHA512 d01e0b65619a13fdb78b2b8f006e79040b77e375da8a097796931102bced9e264ff8df811e07832edbdf2b9ae8211030c92a8acba323df60e321aa7549120133
SSDEEP 96:KJbmtnLaImIqTpiUtkMZktWUkUjtkwX5YKhpgD9SakU2e5I1LYQx2jE9o5b:KNmtnGdztk4ktWUkmtkwX5Yyw9q1VC5b
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/PlayerBarBtnTop.bmp

SHA256 e4533e8a84c2928deabbbf702fac07168b4eff13e6f11beb1e763cc259b7c6e1
MD5 8f5f689a7dfd37d36d311459d3cb872a
SHA1 06249c90fc4647f7c0e90a43eab2afd205d9d840
SHA512 0c97faa6465f9b3e775aadd2c1ee2788d3122f4ca1a19f431da5a555346e30cbf3ecd2e90aa33e9c44533eb07c9094abc24bfd48121b1d62a0006f848a18ba1f
SSDEEP 48:7AOv3FaLxLPD8M3Hn1K7Unc8kd7C5g5um/:71v63RQWcQoum
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/PlayerBarBtnVolMute.bmp

SHA256 55ebaa2ec9797730c47ae4a9cd1edf94661fb3836a990adb954dfa692c39a3fe
MD5 5422a97cf50c02e57d113c094454a11d
SHA1 40f3d63c6503db427efe2a3a0b2d500405912c9b
SHA512 007b69d4956d125bb6fdef45d8a86b98c98638d6fbfd480732efae7bd9f4f9bbc41d51f3c59a9b84a85448af23e461fcfd1dfaabe0d7eb2db536c1ec7e223c1f
SSDEEP 48:QRjc5Ma2r0kuvD0wSa5/0ABBMT/la0R1TeUtH7MMMMSJNl/q1J/+Ax2T/wG:Qi5Ar0HLR/06makeUli82Ua/z
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/PlayerBarBtnVolume.bmp

SHA256 d6459595b09bb795ce6ab54b55766f2032632ffa694498d07b9907748aaba3d3
MD5 e35172d93957f3b736f8c373ce6a9598
SHA1 b2e6dd313a473bfbacac8ab6cf3a94afeddee4b7
SHA512 88145d75dc5faec4204d595e719ef8f13f6ac80758c1827950e19a20b2fcc34d77b7549aa35dc6d425fa7b613f8690798dbf80d3939a04cf053c74ff28508a3c
SSDEEP 48:QVD40CMHukHNw/mn763qBU58KRROg7OA/47EVFz:QVD40zO7mnOcfKaAw7EV1
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/PlayerBarBtnVolumeMini.bmp

SHA256 7dbd262242669a96e607dda60eeeb96df60ceaf2abbc05d4548638fab44a93f7
MD5 3f32670b3060bd93bab31fce29e8fe35
SHA1 3900c7b4f0506aacdaf47fbdc1d7cafb61a0a890
SHA512 5c0651378f7ebece8fd098a646387782963f04731e9604972e32fd515b53940b0e17a5fc1c6bc7f8dcdb056d660736618d34e0f85a6a95fcd9a4f5828ba04c51
SSDEEP 48:lmmmmmmmmmmmmmmmmmmmmmmmmmmmmmvFmmmmmmmmmmmmmmmmmmmmmmmmmmmme2+G:qDsgxCVfxfnkXAi6NIMqC2rkyU9UF
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/PlayerBarOpenFile.bmp

SHA256 3dc8b46a18a2e618b0022dfdfe54f5bbfb1568c972bc88896a56e6b7d3737a28
MD5 32ec3cf8663a08a878952360eb2c4a9a
SHA1 812755cb46745e48892305fe030e091f3b43fe25
SHA512 6e3221ec171bcafd9b842301d974435908c2ab1a33963b28bf59edb006d9b3a0be2c3e69eaccfc97a109e174b419c88f18bb58a4434f500db26e58cfa0adcddd
SSDEEP 48:OwcQsuihhYPwmwsc9+RInMMMMMMMiRBBhwp7ADvElzncA0n:OwcZuhPwmwN+RQRBBh47ADvEF6n
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/PlayerTipCloseBtn.bmp

SHA256 f2346b39cbc31b4a417a137f34fdbcdc7a4b106cf3949ff1b41629d9324a2be4
MD5 c7beffc2243a0a37681305fcc055291d
SHA1 f7e547ee69d4077f17adecf574c8151ad7d5f10b
SHA512 f5de544f8e8f3ec3e5d6c121ad1143c01ca0301cea4bfb15692c1e6dfda50bff4f6d13a07e10faf64a922ddcba426c2dd620c966f9dbb7ccf5c6f5ddb03f6d5c
MD5 SHA1 SHA512

NSIS installer

installer

skin/PopUrlCheckBtn.bmp

SHA256 f2c06130b74dce6d93ffb8dd3c1a13c16e94b3f409d2f38f28900632e18f88e3
MD5 ed82680453526b0d6f53325bb5c1ac59
SHA1 8058eb1df5050034179d37fb41fac72676465999
SHA512 8d141d40b15ee63df24aff191ca43b5da71e3f19a23f2803dd04fce43e9e17097350696746b268053e32b0a5c29f0dca14cd7a2a6775ce148974670c8546d44f
MD5 SHA1 SHA512

NSIS installer

installer

skin/PopUrlCheckBtnCheck.bmp

SHA256 bee466ac91d354d09522ac6255c10ca550cb8044f5b78a4a2831a456c8f295de
MD5 8e5d5bda8cc33fb668ed18ad4a3d8eea
SHA1 59e21da5e490da0cf9f24e15ee21e39ba528c9ba
SHA512 806df7b9fed00a9c3c63104510a1c8aa544365d45ff6dcaed623906a31f5c7e7517d5576d55025f47e11b0324606bea1b052c460fdbe64c8dc38b4c5ad4a8aa1
MD5 SHA1 SHA512

NSIS installer

installer

skin/PopUrlCloseBtn.bmp

SHA256 62542649208cdcfc5f39a76682c5206cfc6db2e8903210bc1ea3a76080d90002
MD5 ca76e5c418bd94f47a1a73eb1bc68e5a
SHA1 29ab9295bc06981c964ae208ad2320fe7d2a0794
SHA512 06e1ed58803e27e3bc42c88d1d81187cf3efc066780f64a7287766575ae96f22672e5799a8acb0c428b742db7404b3c40e32629fab80e2be012974f495f72d99
SSDEEP 96:OxDE7ZwqekfXg5IzQtXdg62aoOzGS6D8KcqxZL:OxqZJFfg5IMQolzGS6D8rqD
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/PopUrlCloseBtnAbnormal.bmp

SHA256 150d93e603c886aef9738e1d9662a133dbfd15321f84d1a4189b99caa10db5cb
MD5 c646701695c4e3c72b544edf3138665b
SHA1 966cfe3f1963b6f512defa0b772693bd2d105d3b
SHA512 6bfa68229ae3a9bc01a20c76f11cfdda4d56c11d59606c6ba5b19f0c0523831dc4dfcf1d22cd281483c5691d4d739636ce8b5df5de187fee494201aff53c5b4b
MD5 SHA1 SHA512

NSIS installer

installer

skin/PopUrlIcon.bmp

SHA256 8f3f8ac30883decb4c7d916b1e70c709c1f920cce95e02d3cb6dd977a721f9ef
MD5 340a554d42299e20b147fb13faf39e12
SHA1 3d586e526bb7f3b9064ae4bae146266c720a0244
SHA512 03797b357f2031d954ffa5c049e4d3b9626dd581d615d8ed8603ee7685c02569e1ff822cd2007103bf663e93bdec1aaf257b8ea9d4c1e56f6bc42b0b0fbd16d9
MD5 SHA1 SHA512

NSIS installer

installer

skin/PopUrlMiniBtn.bmp

SHA256 4196af4a2b30a2647b09d583c792da09728271c749f7f4eb8d6d99d04a24bfa2
MD5 9bc48403a8b87bdee8eb7c8a70ee0d48
SHA1 bac0f017cba1e89143f74e71b992197a944582e0
SHA512 56bbd852f49a426163f57752e8b19ad0aa2244c2dff279025622a7295f198a98fdd86c928c1548d6efcbf4577f2336b1185aa855b79c779544584a9909703639
SSDEEP 48:02gSPy9qcsXTp5ULqYvNTKV10FM7+4b7xypXlBdqqAqXnquMHX/ndnsi+C/:02zPy9Rs95wNTKz0+xqIInqBn/+C/
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/Popular.fskin

SHA256 4a7c9323bb6dbdea2f256c6226505b5c907cf6df779708ede1f202b22934720b
MD5 e2a9693bc1eb6befdbd8bda62ae18c6a
SHA1 2de8774408e6c95323483702d1e65eb799c96c4e
SHA512 4a4d7622bb3b2504fb5b54e357138b7388dcefbe6bd5d711367c8462880a72609df575c2e431484ec32a6fb781a9f21a94cd8617d5ff9f214e0f7485931762cf
SSDEEP 1536:Rhj7Avlbxjdyt9Ab5eLq6UZsdJpHQ2k/gofAG3fdDAs:H3A5vYileLMWBwv4G3VDAs
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

VoiceBtn.bmp

SHA256 762843490af0c736f902973d2eaccfc94821504d0713ab4ff7fbf813d88b413b
MD5 e97268a3f2ba86fa9ec6c96c2100df9f
SHA1 39dc0fadf6a500dc1b5365136343c5a91447c307
SHA512 df988f61ff1ba2bae96c2a743ccd9da7383d4e0afc821e3d3f30a920120c09ee3482a83593fb587c29d850ec3f4a2053a33b80dc8ffef3875e5d07b1756828ad
MD5 SHA1 SHA512

NSIS installer

installer

bk.bmp

SHA256 3034cff33a7f38cc0323be42eeb62f973213aac31c79520dadb7dc4a59ffc0ae
MD5 3bd0d5901503fafd43be39779114f853
SHA1 0e47788aa709cb77109927253911617b45c1d37f
SHA512 738a6dfe52e4712ea585d066e264572e34c2cbe0dd46b79f87e7e03d887506b1923e6b09ca39200abc9bdf4baaad321cd0b2b9db70d1edcf537a4fa805e658bf
SSDEEP 96:eLRMcU2mENm34simivfVfVfVfVfVfVfVfVfVfVfVfeU:eLRMcbsimiQU
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_back.bmp

SHA256 942e4ad1f0b67fdde06f7df4b637d2621d88008d279e9691d0f47ca0ea7c7349
MD5 1b28791e09b97435280fabb74ecfa6ae
SHA1 fe3a8601acbf0dfc4876700b55106997acbe44dd
SHA512 6621afc2f99e8ce5abdde7c0d5a47334fd1fb7c0f50b56386d20fa90138c758cd7515f4297fd597c77f9b7bdac391fc0350b19ac414529c8bc075795cc01aa3c
SSDEEP 48:cytDrHcf/QOmq0W5X47+DAQIigp05CasiiKNqZ3RLW2GmWqM4HmHFg2akwi:c+rHcnQdy947mAQIixqPLW2vDug2a7i
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_backEn.bmp

SHA256 5166935fe3a87230aba5e11b2bc218a8b11bd8a7c5b5c0340bb5d8c2543043db
MD5 f1df8506697e6fd527b7bc9ce528cc62
SHA1 4491cab1d719b12176b4ffe3936d13cface06a1f
SHA512 217ab1661705ad13862a76826ecb18731e88a10f90e46ab67660af0100ee9f27dd13bc2edd145a348a703d6a0a37be83ec4e1a3f6724e3417f13415dfc3ea7d6
SSDEEP 96:HrZ6CUqQ23QuD3ssssQs25BbrY3fV6my+:LZnUqfQuQ3brY3wy
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_close.bmp

SHA256 85b60fbedf25fbe14e5b3530ed99742f24c3bd4c1b4fdac5b34d3a29182d0ffe
MD5 027cc4f1f88073c912238c697ab1d421
SHA1 ccf5eb1e6ca312c9bc3d1665afbc384f863c4620
SHA512 262d0b6710ce9d1d45d002f0f6fdfd4ef278679d884c47ecee6216fdaf1261dcb33ddb6c501352a7f3aa40d6ec123e09b2e265e804b1ef4778ba58315e8fd7fd
SSDEEP 192:LkAJ3333333333333Z3333333333333338W0:LW
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_forward.bmp

SHA256 b7b1ad2b01e07165c652c9447266b08d4374ac26c6b4136c453fd47d2b8fc3ae
MD5 b0173e6c73412a59c34ad04ceda2f99f
SHA1 8a4dba6366aa1ba5ffe99117aa9fdfb8b70e4b10
SHA512 6a6d4c6913ca7e1ba3489e193db7418ae68d8dc1090b1fe8181c7de42ed3f151d1a25321b495b6c9016240a2744aaf324e437c6b6ff5cc3d4796532f641c81be
SSDEEP 96:cwZ2lcpFU7PakLjAUssdczXZPgwiU0QEti:cwZt6PakLdcZPgH9QEti
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_forwardEn.bmp

SHA256 d28d2cb0e16ee0bd78f681d44c5ba801113f18b80f732bdc190cbdb47e81f15c
MD5 21b11658bff7ae9f51393e912a8ef9fa
SHA1 5ed227b7b503586ed8bd84f5f289f19058cd461a
SHA512 e13f21a478713299da2dd0c693c8d72cfae4f494dea34ad4bdc3e456dabc10b21ec2938c37299a7f8670d887d952daecfebdf284c6be487ebc8fc59f23978740
SSDEEP 96:cWmdg/wGvOQssQAIssQsdYQaub1GV1GgTge95sPm:cWmdQwGvKYQZb1GV1GgTgefv
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_game.bmp

SHA256 88165a889d28f296c0e7f4fc3a1867982e2416d1fe1c5b17b14edea876d917ba
MD5 95a5232c23a53364e8ac95775808e7e2
SHA1 8ee972c697ea6037b70180551a12c7fc5671daf7
SHA512 dae013526f5029a8705e6a0906a3d87d51698a82d27ee448e94dd4ad8d241dedabd4144113a11eeb0ab132baa3229c106be7c8d91ae3be7eb592eba5487c8905
SSDEEP 48:TVK/6oKse0tz9aNNFxbIKbD/IqwaQaw+7y:8ioKseIz+xbdbDAf+7y
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_gameEn.bmp

SHA256 3b879aa731b7ede7284bf2526c0035190ba22645043f2ed70236f3b92a9125d2
MD5 ba61eefda368601dd7f26f4b518a88df
SHA1 418b16382353035d7421489391320ea68beae979
SHA512 3fc1ea44d1e21ec1ef3fc9214a90e456cb32dc4f910c0a823f6c656b979769b155220835ab04dbc8d4d6787f0a078b1fd91aec3c88f68321ae851c74b383b742
SSDEEP 48:irxQuyffffffWo03UEe5iN59btC6ZZ2JbtI5D571Lq1xAjK8gn:i9QPffffffWo03UEe8biJb071Lq1C8
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_home.bmp

SHA256 167bed4bbd75085208d880aaa6786c826c87c8f78e5a630d30a5a9388327d12f
MD5 cb88caeab5c2fd710e20a589630b151f
SHA1 f74ee6295ec0442d9c8d8b41e3c67d75ec3a7751
SHA512 0b033929a0b0d989d4b461732452e720876f5649a93ce3a244e1168dd658377d674981cbf5d64a67c0388d87f96f21b59d70ef413ce868d1fcb71304794524b6
SSDEEP 48:6yVK9GN4EfLfEosRiiiq2iiXOML22Sucl8VN0IzNkc7y:6f9GN4EfLfQACuZ1Nkc7y
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_homeEn.bmp

SHA256 71ddbd57ed03304d1fc8611e195d116d4b8f0d27e0fa37cbc37120b8d78f47e7
MD5 e0e8e5237a755eae4e9f0279a57ed2b0
SHA1 c3c263ca40bce92e6c8a5697747f9876eb4e9580
SHA512 64739b954c42a8e3b5f44e4f3c0352eed87dd2999601c4ac33351b43457c9cef77806c5c85e8b25d3d3886b43575b3f2cb509968fac9de2e59e685aea8080c19
SSDEEP 48:1M9Efm6fmpc6fLfQDFRZZ65ZZesgvZZ6ZZZZZZZZZZsIs5D5DD5dA1L1LrVwcay4:1wEfm6fmpc6fLfQDFjVA1L1LrVw17xz
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_library.bmp

SHA256 31de27b7d6654e37baa89cbf87b7334765fb623a54b13997d15a92394dd99ca8
MD5 4a55d9539e9746d4683d8d2972687d9a
SHA1 d04b6d072a9b624da1274d93763b50edb2937c75
SHA512 af5047ca4ec7ab2a60673e4039a33bd29e1b4a91a944397b582b91e88c947024dab952f43cd894fd0d316043ec4d6670e756a25009c3c9eafc358e95707baf00
SSDEEP 384:Y7pppppppppppppppppppppmpOppppppppppppppppppppppmII1HB28987QX585:86IPtNbRdXeeEE
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_libraryEn.bmp

SHA256 8211b26514d4a324809bd90d55c22d35c9e6db26b192446abf2dfa9d38c83fe9
MD5 53af55df62651fb67b5a19a33a5d4ff0
SHA1 0d81a9e5155f668335c946403cda0076239fb48b
SHA512 234778e0ddb6b6a2d936a4407b99a74af1dc7d5430bd5ac524c6df9415e81fb6733f87c83164c18ac77b14dc100195800be8b4f714a651485577e1ac8241d312
SSDEEP 384:3i1c003u8sovG4jzCVsWZkBiM4vJMe3b2j:3i1zCsiJn0szBgJMeo
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_max.bmp

SHA256 cbbd1a5136f8f0f3f19aee56e23ab4db75e826cbe709a6524b4e639c5a7219fc
MD5 34f29d9cd67e5fee7500a83e3d05956b
SHA1 7d58ae86f39e0dd59bbba9e116240c1bc838fef8
SHA512 252e73c3399a1779ac255098eb59537b0ba5cd116ac20954aabe5fdc2fb367b859a1aa5554021bb36066fd0eb8a0d4da62da07d8cddc6b2c9366a5724a1a7d0a
SSDEEP 24:oMTRcpj96+MQu83UAnHdPYMJgbzbjZ4YMJRFNYjZ4YMRxA6jZ+w+j7j2yW+j7jES:LTDwn95gavATGBkBwNI
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_menu.bmp

SHA256 34a38ba67eafa8089c53155375d050a0d3ff9e83d0be03d87cabb00e73ea8213
MD5 9ae0588271512c58155db397898fdb37
SHA1 d3154586350ed4e7afc5cbe6abd04aaff400003b
SHA512 4d5a888eafd45b3c3099793c7e36e1e221902492664bb5cc805d954589761ff0367db8ee641b817096506a48b0a4461c15bcb90b22fee6f2d2a4bb809aca82ea
SSDEEP 24:oMTdaQaFjLgrYsjl062q9erK77K5kDdCkDdaJQF:LTFcj0rzuKqQF
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_min.bmp

SHA256 ba8174df5eace77eee79c87d6569e7d033d8d85d1937821507c69d41b9552196
MD5 b05ddb1672d00a852ca771791e7b21cb
SHA1 14dfc43ce1570d6578449b28d9187dcc8059071c
SHA512 479046c9b1f16b515085e496410c845823f8e754d8e7dfb54cb2dbcb9985f9aa08159a428dfb73e1a5dddec017a5cdb72c1bfd7e56a4f971ef0392c22b9e27a7
SSDEEP 24:oMTRcpVCadUXs47VssQpyVFupyJJYANOAQ0+BpBkNI:LTyUXn5s2R+BpBkNI
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_normal.bmp

SHA256 d7962dbc34ac9445757f0a6dfa32a0ce40993ca8b0bc1792e01d9d74e7704044
MD5 e98ab8dd859137ae30c8f1574acc0b0f
SHA1 9410668ceea949537530411bb3c55992e729d61c
SHA512 ad0799864d28695bd082df56072bc3d36cd360129b14f87243144b08618fab96a5ce66591948738faa639b01bd6a212bdb0c59a9a2a92d29c03cd07956378bed
SSDEEP 24:oMTRcpVqsKQugnaiH/JPBAb3PjpIRhNajbbbq5+xjbbbQQ+jH8dkw+MPqk59BbBE:LTnsCiHhpA6IHhBPBgONI
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_player.bmp

SHA256 a2ab1779093cb97a6a30436d83c74a01221d386fecfd04782041dd4a3d9a9b3e
MD5 2388557d8a49586c4e559766895b320e
SHA1 e46bfda340932f5b7976f75b3b2af3f4e8172b43
SHA512 af5eae6fc68f8ecde9fb611878241438fadeea90dd4f436e4f70231bbf8f4eda2b6ced186cbd61d4873c42a9b4f58592dda2e2784b28fb59433e78a4183be710
SSDEEP 384:8I4zppppppppppppnzpppppppppppppppppku0chm0mEX+giOUHf5SCVwYsBW7YG:8I4xFkf5BwYf7c+z5UCEnNp8gZK00
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_playerEn.bmp

SHA256 82c9a8569be45997137dd7b56843362aa1a5d2086c7396895b09bd1439149353
MD5 2673742fb0e8f5b0efff795b18d2dd5c
SHA1 41a2b2423302b63415534a80b5c26cbca1cc3c05
SHA512 5d93a3ec50791ccf710a8995218fc621b4cc3b53b3b61978a004656105a9b928627254fca63d3e39876fde3b458f3ad8278e46ae254ea86880a3e82a0e3357f1
SSDEEP 192:ZCViuEynVPa3ABrZcnXfJaKNpZZmgJAykys/o1pFoEMsVQbtI1zqgR:oViqnVxHs3ZggSUfoEguzqgR
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_refresh.bmp

SHA256 f116e0531bfef0ebf4803a5e5d600741ee35993782dd2bdc7b8eccd3e116192e
MD5 df3ed132e35759d3dee8fc720aba545e
SHA1 ae869f67ce7adcf7721dde8ff165e05d66ded0c5
SHA512 5547d0ea64c7799f7f3f9dc669037168ae81285141ac351af629e75ad42af90cd5f813dcd454378644f9b4660a0e7b3c4fc7d415c0aaf854f9cf755b0feeb330
SSDEEP 48:6yVK38iGr8H03sAQoxbrR2uLtZUAOpzjdJ50DVy/M0x6TV7y:6f38iGrF3sAbCzjsgkTV7y
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_refreshEn.bmp

SHA256 14f0beda56eca3cf6bf6601023017ce55216db55a9076bad5a2eac4ef7a95a79
MD5 6857edf5cf30de66ba06ebd8ffd37d33
SHA1 05d346aa3a8e1b2090e798bc37bf8a72d70c1be8
SHA512 1edc6b62fc7cfcce2ff908d3266c0540212e7ec8ac5b4700985697139bac7ff7dd8a01b44a14381b74eac5922268820d96d74b8575feba46f25a441d84f94fba
SSDEEP 48:HryRvL8HDdZ5irOsiZ6uiZiDrZZoZ3JLyD6sgZBbgmGggVYsUGocw8JPpmDHh1y:HrCDIwjJ3bgmGggVegWy
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_shop.bmp

SHA256 e082aadd54c3c1669b1e919b0596b4a0ef39f726586276722f1c0cb554ca6420
MD5 f5adaa93f8dc3344a6c0da6da996d409
SHA1 b0fb9047ed05e69297500af43961982d40924951
SHA512 9429ce5d9b9633baa9b86061024ac37869302b93e7d5a9433c32d081431a74ab3ead31fe5cb9388441910ef82d5be2198aa7531ebb050b7e6d5a426bc0339ae1
SSDEEP 48:6yVKKdWkmjAEAFiARa8Ifs/osFz6GOhHqEaHaOX7y:6fKdWkmYoG2xp4X7y
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_shopEn.bmp

SHA256 3eb9c981b5d927fa1837aa3ae15c24c640efff5c505c380c1df1a267054768fc
MD5 2ebefa1bc72d040b41f4edf3a738d50b
SHA1 9ddf6b6eb2b190b2e8dbd1a44788c53a896969ee
SHA512 2ce3302434dc47879e0f86b17b895fdb89e3d777aaeb351b78769e7d771d6d743c923bf5953392a8ce9d6e089405b984240c60e34a7966211d1e800c2dd9e458
SSDEEP 48:Qh/FR2Tg0YMv9wxZZZZZZFiZZZZZVrD5Zrb14TNtDPdfJmwNTOT9:Qtr280YMqirb14Tl2
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

btn_skin.bmp

SHA256 2dd151210ec94597ead3e42e85e006a9c4cb55797211e4405339b13c221a89b2
MD5 5875005ef1f466053f37a49713be4d4a
SHA1 0c03bc3b25c04fbb7e83260f31375d5229dd0dc3
SHA512 243936ce9279de3d3f3523a4a959f1af8ab6e8448e67e545c5a5e5f16b47c42c4e8e7200dd30a966ddd211a61e6dda3ae60bc174d780645efb29ca1b5b2a51a4
SSDEEP 12:s8WV/3q953NPDOecUY3z+DILWYaK9bOyOqKylOQh0i2LaSkVmMRAu:kV/6pSecR3z+DD3ejpUJi2ut6u
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/RadioBtnBox.bmp

SHA256 577a05fcb3830d4342d643feb1afc3ea4f493de1ccba1bf9bb51ac2eedbf148d
MD5 64899ecb2ee858193a46f2aaa7e5ac0b
SHA1 c045dc23978f256791f4d02236bae2c9de801ab7
SHA512 fd1d0c0dfcf12e6d8087d46d7a2f3d9bb3e2351f2bad935c018b6e760c294156c667fa5dddc13cc58d451893890bd7d359dec35eb8efa59a16d90d233bc65be7
MD5 SHA1 SHA512

NSIS installer

installer

skin/RadioBtnPt.bmp

SHA256 4a4daba41b7478291a9fad54e4c1cf14ee29411afba38378315d600345c668d4
MD5 245cd621e0233ced1d92eeb96e78f000
SHA1 6ca8164d14f786522c98299d93a5a335ffb95c20
SHA512 0865eb5e6434740f4a055d39b591e3cde62eb35d3dc22a8a356725b7c4554728244e51eaa48ee02775a1d6bcaf327022a5d83d9d4eecdc0115844602dae1b96a
MD5 SHA1 SHA512

NSIS installer

installer

skin/RpcLoading.gif

SHA256 4e4d10d216de479949dfcf0e632cea94fbb80ee543d49b8bb7837bd629407522
MD5 9ec1ac5714965e8f4b4728287bef6ad0
SHA1 92209f097a00194fdb48cd9c448475bda48ed695
SHA512 b6bf523c7a7b369e44b7cb3e4b5e52a5ea23f631448623db2d15cb21903ec407abcb84eb45415f715c0f11c38772e761f47c87a882ffc5e35b4eab4665927558
SSDEEP 192:H2VHuLQFYRmogj1onU5+y8x+Avm8ok5ZD0F3NDzXg12k0zdG5uxHgomcBqbXD:HoHuL6YRm5YUADJTvD0/DzXgyzdGYPmh
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/RpcStartDlgBk.bmp

SHA256 169f7b8d31be31bab2b8a25a30aeafe513fe171ce3618f9671d0c948f92d42c1
MD5 c01b978491a99c494eabbfe661ea68ef
SHA1 fde3515e303c063a5a5e10ccaae7c3cafff79a71
SHA512 974789962edd204544f412bf04959035ca57a0264e8d0435253201c0384ae8ff6ce0eeb6dfbc8d19bd04d9ef05b863b2645d3e246b6e68b15c1c03662c82a6bc
SSDEEP 12:JM0WgwADs7tnicMgeMxAMSxMzMEIljIlclelswhA2ChBDnb5iSld2YLzsFabBCuB:K+wADsCAPSKgloqwhqBcyd3fBIuB
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/Scroll.gif

SHA256 27e5acfcd3028fa3a89653a156042482394a74ba3896f128bb683939e3e566b4
MD5 f18ee6cdc1c22e513d79bdd34ca6004f
SHA1 8d18405170dbff1df0a04d641b60d71667522b06
SHA512 b59de9d06098ecac0dd0f5d0262fb74866e59e684016f5b550efffdc240d6b30eb199ba8a434b22214ca63d74c0e68eef8e75b8477c8c24a8428359275524b6e
SSDEEP 384:qoUkUj94+iU/C+OWqEZW+4AECl0q0nfT8+cdpj/RsqxzT1fw+fOj9CC:qFkUj94+l/C+OPEZW+4NCl0ffQvpjJne
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/ScrollBarDownArrow.bmp

SHA256 27aa515a0aa1af5ee3433d3b6dbf92a8e4184766ea18d94ccb5a8452490de035
MD5 75bb8d7a49e64586464094aff0bd02d3
SHA1 40cd07b53ee8c1bcae37938286c5a87479e5a477
SHA512 875223f3d54fe55e6a2e0956baabeef687d8b6fdbc2b3319564be8e7d16eb9148361a54d90845233657da84414c8e1bf9e6dda1227db2f4b790fe64801f0698b
MD5 SHA1 SHA512

NSIS installer

installer

skin/ScrollBarDownArrowOption.bmp

SHA256 63e26fcbdf4a0f9201151f95a6fad6f271785a4f45c02cf8bb89429fedb86463
MD5 fd595de7eb8ee28a3f4a41d5e07b8863
SHA1 24c2120903d42fa59e900450d5908b55ec7dab26
SHA512 e8c2a945118c9cff783cfb6555c8a0ed5ef49beede7a163cb00a05abd9d7f7fee70fc0367b720cc98c046f88908c257c0fe48ba333b711bd9b934fc49d0b9ab2
MD5 SHA1 SHA512

NSIS installer

installer

skin/ScrollBarUpArrow.bmp

SHA256 80a6e6408a5c796abda2d8e9f9831a606072836724dde532ae922b6ee663494b
MD5 2e75ecec341598957fc8aff9522514e4
SHA1 a51d1d600bbb9043bd90d5194fd6a9b9a8c415d2
SHA512 04eadd794ae6b6163bf901a2764e0b7b0f3d239ecea2e084bef76749c036755fafb010055e3f1746b1d6b9b8b448c94a97df613e6f89a0c0182f5dfa2254b5c4
MD5 SHA1 SHA512

NSIS installer

installer

skin/ScrollBarUpArrowOption.bmp

SHA256 04f635e07f42b7021e52ae364ceb11443455247b553625d99693e9ef838c53c4
MD5 8d3af935ad466cd8f5c2520264114b80
SHA1 9ae16d89e417ed3f3d167c70548517d15fe4b1f5
SHA512 76d8f69e21eb980199bbe4bc4bf4af120a5bb5571bfbcbbdcd0687de1c680334e0baab94a63b870291a06a7ea1bc6f5654c1baf566a739efcf137767d8e734c5
MD5 SHA1 SHA512

NSIS installer

installer

skin/ScrollBarVerBkgnd.bmp

SHA256 0e9d4b55f15d68b4e9805ff3ff13d4a7d62328ee7c83c8e78686658da8a10e47
MD5 f91ef0fea5f7df41e396b9fea3fb752d
SHA1 fcc79de3b25ef7069ee95d616a875c7cec0d2dc5
SHA512 bb90bf860096699cdf68c822012b6857547e920b5191321cb5c8be157831a1df620a6193454a09ae47749c230a36b7f3ed869244363f2678515ce772ffc2345d
MD5 SHA1 SHA512

NSIS installer

installer

skin/ScrollBarVerBkgndOption.bmp

SHA256 f46522ef3f5be54d9cdd9480e68cc154583e4b84e10b31200379e2337dc425d2
MD5 cf411719b3ae45d1a70cf88a84649af7
SHA1 3601c13fd9baa5544f85d2ac995c021364f095c9
SHA512 f2a68d6c3c770cef135aab07b9947c45813825a39905c8daddfdffd44822c55a71fbff8f12215da4065a834d9f4bd6d5f3fb7c84df80fae969dbc9fd4b6bf8e6
MD5 SHA1 SHA512

NSIS installer

installer

skin/ScrollBarVerWidgetBkgnd.bmp

SHA256 0007337a38eae09fbaac807d2ff448cc9c81fa00e68da1823f15422c31628ca8
MD5 491c1eb719c301d1b4b248689d558774
SHA1 6e255415b2c5f5909b4c8110147285daf3a3dc3f
SHA512 3dbb3c307372c984035af78e8b4ab245e10575f9ae3ef089948b20e96ff05ee8f20fa29f7f4219996e31b6683c94503107b9a2bc848cf253a072666123db9b2f
MD5 SHA1 SHA512

NSIS installer

installer

skin/ScrollBarVerWidgetBkgndOption.bmp

SHA256 ffb237a6e9058022785106fdf6c92fbb25181e9db3a87ec3c1faa03399c94777
MD5 698ce57bae28b80776210694bdcc5e11
SHA1 da5514203eaa0609d311141d2eebdb28ae0eaa16
SHA512 f739415f61785cbdc408626aac1bfed14235132a64ebe784b564299457e23581422e40b44815f5ee9a3388d6d5e192d2130b70521493403885e3d114dd626f6c
MD5 SHA1 SHA512

NSIS installer

installer

skin/ScrollBarVerWidgetHead.bmp

SHA256 88c1ed958dffa6ab7e73fd7b96f7027ac8503bd27629b0efedd58ccdf8d20342
MD5 79ce224585847b929459465655435bf8
SHA1 6fd5ca8e6d8054b0c1b9088970a585a8c7781604
SHA512 ca2e7759cdf85ee0a6758ecdf9d908cd200325b36f876978b658161e44748ea04fcd7064c2b66a91c8efb3bb753ec1e3e3c9614627e12a3dc742684ef9a2c68c
MD5 SHA1 SHA512

NSIS installer

installer

skin/ScrollBarVerWidgetHeadOption.bmp

SHA256 970a3342b226f179d0e010f66ecb96f366abd4c323e4a02d999151188f53165d
MD5 6f2dc2fc31569137044122cbf4be02f4
SHA1 776b5e5be3e1062ec19203afe2bb4bc7b192e210
SHA512 d219e010a7d05b8790dfb9cedeb56028aeef394e2dafe1669498205a30c93386be9b1b26bfc9a4dcb7f98db6ffa2af42f37dd8fb2ceae04c54dbc601bf40aa2b
MD5 SHA1 SHA512

NSIS installer

installer

skin/ScrollBarVerWidgetMid.bmp

SHA256 c5f5328c9497a0fc2795a3da427990ba1f38117f47be54db3105d152f78dddde
MD5 f32585e003aaaed4105ca2058341a253
SHA1 73a30950fe429b55ad9b37f6c5a34f05b1632e31
SHA512 368b9de183dfecd175e40829ebe0634794886e521ec047ca3f670dbb9415b6bebb7b49efc8848858220c28ffb85c08212dfa97e0f2505299611cd719daff45ae
MD5 SHA1 SHA512

NSIS installer

installer

skin/ScrollBarVerWidgetMidOption.bmp

SHA256 cb0dabf617f16d5122a22a821e7320f6f321734625bb1ba7e85090844d753db7
MD5 87e1dec4d76155a819b72560b7f32022
SHA1 4b72dde24c232d618d2eab4a88efdb49dc683ae6
SHA512 c5347ca33297d7c061d898372677bfce957b6be1d09c32f9b3caa5b98a0b9cc5da849210bb2eb7d3edd515aea73318edd1a20699dca02eb37c4b653a32a49532
MD5 SHA1 SHA512

NSIS installer

installer

skin/ScrollBarVerWidgetTrail.bmp

SHA256 de7d9bd822e4c23c799abc9db0a7b95ec16e310c17fb4560865d468bda2710d8
MD5 a1428b265439b34426a231423b8fd5ce
SHA1 fd37e8d7f9d3d215904ccfce0aeefb7960de9d5d
SHA512 b61fd7bf89eba74f45a5f8ead5e74586ab9f1ec27a943be996c096db2255139c87f415171dc50f0aa12f08f116a4c6687dc734d47a2143227919121e98bfd237
MD5 SHA1 SHA512

NSIS installer

installer

skin/ScrollBarVerWidgetTrailOption.bmp

SHA256 4025451ffb269a87c1044cd1551fb0fbbdc4dab864012223c6c1b05252f61dd5
MD5 b053355f86183f8fc4f8ff54663fb34a
SHA1 6d88252ca39a11849125a7b61849bb85bb893643
SHA512 29d67196829239a15bb9ddc03444c25a9be3ea650a9a1c56057c689c932af520268ada914b746ce73dee2412f6fddab569c6217d5946c77f0ce47cf109329389
MD5 SHA1 SHA512

NSIS installer

installer

skin/ScrollLinkBkgnd.bmp

SHA256 69355c78d8f3d7d00b56f1b318918e76c229cae9b129142975759d3a2d8845bd
MD5 3e463b36f9b37eca469984761a333db3
SHA1 5748e17013d83690df894f7bdb98e598c557b1fc
SHA512 e540990fff15ef0533498aaf856f29c11129a1ed13fb516138f055ac66397e60ddd6261a6f1a73689a71876f34dd9d1a4fc838b2e110338f285d402bd722ba1a
MD5 SHA1 SHA512

NSIS installer

installer

skin/ShowPlayInfoBtn.bmp

SHA256 dac1cdea0bc26c9d9dae8b4b5db342497367babbdcf6142844a44148739b1767
MD5 1a4ab916825bdd8c5a7a04c4ffe4a8f1
SHA1 02ea9fb3c205d212c930e9562c508648040e85c0
SHA512 01d1bdad7f71883786405aa6fee9a54fe124cf0ea1291e12f7f3045e9dccef5a1fcfe8726578627683cb3e79a65605b35b6dbca508315e1d91460f1e2e8715b2
MD5 SHA1 SHA512

NSIS installer

installer

skin/TaskDelete.bmp

SHA256 1ce0b23838e9715ab829b40a1afdae13d706f29995d8deac59cacd7c035d9e6b
MD5 c07045208245be4105634e3c009cae3a
SHA1 64059d86733ae1a396aeb625036f228e23035a89
SHA512 537be6913e1a91ef0d77b841930481c04d1c3c5b427bbded1148b3c065b21bb2378a2ad303a319d6564949a353ef7406509532423bbc4f42c281c9f78fb4b64f
SSDEEP 24:wbaghO7XyiLSR9p2USYfM5VQbaXxBcOIq9/m3KeR:wb5hO7XHezAUz86baX+qeR
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/TaskDownLoad.bmp

SHA256 334956b301c5d1b2bb65eb5dfb4fdd339e1ca997f6d124e3e9a22fd95375d439
MD5 97ff79ac51a59ea9e2d479cdcc536d9f
SHA1 32d79c9ceb3ff6c03f21e1f3620cde3de40c59c5
SHA512 ced8ff7cc97f516b5313aa58962e3f89921ec818a423a108ec91f6cabf3b107716e088158570a4c64d0412588386a11c092575660ac4977125704faea32438c3
SSDEEP 24:wxlqPbaWflYbhxVbNWLye98jaCqRVE565+D6/fM:wxlmbsxVAyRH8+8U
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/TaskList.bmp

SHA256 31001578661ac1868d0e4e55454b9b3975de91c662759820c73343c408164cc7
MD5 c49aa215d0010eafc6089a0e87a73727
SHA1 d6934e1518eb3884273f1e3d6d41cf0ad37884cf
SHA512 0bcdd366851eff64b8a0aa543e9f5d598f815bc7e337ab7f77c8ca6ab27bd395eb975c70de0aaebe4929564285d6aa0550fb365dfc618492b35f48b96dcc7ef9
SSDEEP 384:WE8aJp6zcLoRk6Ij/kfsjJq0ypdXkvCkRktBtXxwVZkpRXktatk1vXtj5vqM:6zcLoRk6IDkfUJq0ypdXkvCkRktBtXxM
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/TaskListAdTitle.bmp

SHA256 129c97ddd0f419c8fef30f32277206fc049d5cbc00bd7ef3ec20b4db4febacb2
MD5 87f7c9ac0510c0c0a397964b361617d0
SHA1 6b96c535808fa07243eb9075774730d96dbc96ca
SHA512 af8797c258ddb37268ba171b81df70595fa8115c4794057f90aa6fc3769f55e80276583c7c5df929de306f646a10853043ccdbf11a22b93f5d6a91d86bd7106d
SSDEEP 96:4eCDDrwkiA+AD0iJt4WyYMdMLDWLADJM0dKHDDndpJB9QHwBqq9PhRKX6hqEwvBW:iSRmMRKqhqEwJXvMEQMR5x/ZO42OOtrT
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/TaskListEn.bmp

SHA256 e1d318eab9e924034493b52d3f1f58fe02e80838509af83d8a7c6121ff0d6af2
MD5 486535d9b532b7374139292536f4af7b
SHA1 2668f8b847c98567745e5a9c6c854d53e9cbd3ae
SHA512 142fcccd475558ddb964484c86af1aa082345564bd087ca38a263b66bbe7621e2b15e69983e54a971bcf4d3e46d885cdc8695fbb21b0a2999537358de4b78ff8
SSDEEP 96:m4rgfb5hZwAqoZYiItG1Xz+KQYhbcwfLcQ8wvcNcMohcJ:m4rgfb5hOAqS2G1D+KQYh7f/kCMohcJ
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/TaskListStatIcons.bmp

SHA256 1009f389251cbae12fe273bd174a48df2a68e8af3fb869a4f66d8b152f2c6641
MD5 efd675958a0bb3264ced0a133277db22
SHA1 8feff7705b0591762cec3c2ec27b9b68f7b67e2f
SHA512 525283f05d7244106feb48e133fa28fd335689bf880e174d893db4bd957a47ba2af2e843a90a1f8571556632b2e7bf47441063f9e517f2c6d7fbd0b07a1516b1
MD5 SHA1 SHA512

NSIS installer

installer

skin/TaskListStatSelIcon.bmp

SHA256 ccefca4e8dcbe0b0ca8609b3eb3f045c9a004f604e122b7ef38325e24f28c0e1
MD5 862ef7ef98b90dbcca32be031f7dcc32
SHA1 0010ce161b97298c4a7761ed7b07ad4189eb333f
SHA512 b7bc596823863c6a88a9a768eb3006ac21e4d989836738c8f8882e405ab7e0f6090435b999827340123cbc3b3bbc6456eae6ae3d6177aa5b6c5ea8d7b6f1b709
MD5 SHA1 SHA512

NSIS installer

installer

skin/TaskManagerCloseBtn.bmp

SHA256 13400f43b1a6d98ce8fe387d7a9a4b71a65813f6d9ff596fda5d264a61a1a73f
MD5 711ecbf94a9ee706679fc214eaedfde3
SHA1 2861aa7dbe08cc8a6c95b91d36f8bdfcd830fefa
SHA512 f82bd5f040f97f5fdc305db7800d5f225acd5a747864d9e8496f2b291f345fdf5fd6479219cf4c3450d4dee1daa84b5ab3e867629164004f1d48babb1950bb01
SSDEEP 192:XyWq2bm33333333U33333bQileusUGGGGGVGGGGGGSrhjlLG:CWq6lgctI
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/TaskManagerCloseTxtBtn.bmp

SHA256 36a41e8bd0ac5905551ea42c5c0ed91ee50e546e90317ef235cec9a3a5703089
MD5 7385ce181eb1f88f56c615c16deef989
SHA1 38f38fcade0df77779440a21d78bcdb65368198c
SHA512 77914b7736ffcb22f1f37982ee1f9c681c46f5b7f98850c68f0403774289ea7dd7bf4a78d43ca7d35813ce3f2622b67c73a503d882e51512e0d1f6abbf4beb39
SSDEEP 96:OI+qDD7Ct0000000000000000000000000000000000000dPHchzdkI//abezxpi:Oq7PPHchGI/oebgPP7v
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/TaskPaused.bmp

SHA256 8c2b153d174a41595936d69fcba67ffc970b0468e1b94891d748e5487096d909
MD5 e6b6c9adc4d01d2a09cd0a92d01a1d1c
SHA1 059a598c7527ad366fbce15032d3533a905db47d
SHA512 0a0f24c6a7a2dea4a84e55f2002599e579d1646cabee2950360dc7c6bf647910cb3da23e8e26c0ac85ab578ad26a863c2f02381c47e61ac57643b8eb981f7895
SSDEEP 24:wbkVoZAK8V8XwMLkVK2J69Jgk6c2lZBgqNYdKeR:wbv8V8XwMLAJ6zgk6ZgqSnR
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/TextBtnBk.bmp

SHA256 743e83469e89326588ab9219c80d185eb6dbb92456c0a404320086bdb35fa487
MD5 8c7cfbc7e3757fba29b75ec3b9f1a19b
SHA1 f3cb0a4c05cf8c394e3b4ddb2c06a76a6ee40dd0
SHA512 942527cce52ea23b261cdc12715be976f5866e47480fafcfde53ac5f376ab99b50a117bdd85a654d4db75848f38e63cda646d42e2ae927a60453ea547f3af1db
MD5 SHA1 SHA512

NSIS installer

installer

skin/TipTopArrow.bmp

SHA256 a39c338227f45ffd522052c62121213e1f1a3c48ada1ea4ac23cfd90918a1d0a
MD5 0367a23303b8a6c9dff72bee596def6c
SHA1 bb8c931b22ab35ddb26a687818b0a48894dbc53a
SHA512 54b921497bdc2d074bf61adea0fbf2f3837b7d0267fb6e89ee7faf6ce08997253b875fef794cc780387d064f62243f0968e2c7f7085c2abf9db90847f5564681
MD5 SHA1 SHA512

NSIS installer

installer

skin/Tools_skin/BmpDetect.bmp

SHA256 db1a82dbd7ae2d5d1bfe1bf0cda7877a8423c3ddfa2b7559f96262e84a3e2433
MD5 7024dff0dbd949450e057159930ab129
SHA1 67ca29d889b8c555e9e7b3035d18b80417a97db1
SHA512 3f9efedaa5e5ec0f6d322280a8d71c6b38386522155c3d3a915a6e45880da3c61c72329bb1af662712486605d64986092666649aaaf94e50ebbac9fd9ce7bc1e
SSDEEP 48:gi/l4bxE18GH6I1aA3qA+h4qOwwzJoy+UQVx1n56f2B5BHZpQBsMuKBuN1CgQsGX:UxGH6Y8HhIg8f2B5BHZpQBsZ1C9sGX
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/Tools_skin/CaptionCloseBtn.bmp

SHA256 3d777b3724cf5b25b554467d128518d83070f89bdaebb5967021282c85a38609
MD5 54ebc240c792035c927ad0a34d32cfe7
SHA1 d1e7ad885bb332f01939c500acc36c07b893744e
SHA512 21ae5883e9ded0b14765ab84b0677873706c4fc2b3746d33c61f56acf0ec36e1ea9c6de3c52702efad573aa360caa80f23794529a61b2294079c959e7c887487
SSDEEP 192:xLbWhFb/33333333U33333bfokwRujFGGGGGVGGGGGGcrhhXyK:NWhVkz1LD
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/Tools_skin/CaptionMinBtn.bmp

SHA256 910253b0285702113f4f9b001eac1ef3fed389abdf71680cc0e2450a3447b25d
MD5 b7bed1284993c960b8ea6da57cdc1ae3
SHA1 4d3fc7d1deccef0e5d3cbce65d51b6ca571a7282
SHA512 f2a34856f0d1813feb3b1904474c76b8910139bec39c1b4721cb62870a8e9f5ba9975b90a9476bce61b03bd83a0c7177b5d41b4808f203edc006f02dfa1a57e4
SSDEEP 48:2zuJ083kGEHkdyapVkMnOGJCSqcDyExMYrLLGV8Cbv3K76Y9I:wuMEoa/kMnOGJvxxM2yzv61I
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/Tools_skin/ProblemHelpBtnBk.bmp

SHA256 b6d39f4c399a82fe6bcbc26f2db5474d9aec2dbaa5aec71f7c74557182db34e8
MD5 60125563ef8ab76ba29e2fc2bd9f9de1
SHA1 55d91f71e62e679598287c4f604f4597f12f8c6a
SHA512 5f6f4310920c3cbd5aec0a0abab6a7882adb1bac75b3d1efc0e307d027cb88f18c3b15f1ec78974c1244c35cc5522dc1d66d773f6cdbcd7ac535103f6c203a0d
SSDEEP 12:QUqRZZZZ+ZZZZ+ZZZZwnxxWQnxxW1fjLLLLLLLGddM:wPoo0xxW6xxW1bLLLLLLLv
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/Tools_skin/ProgressBarBK.bmp

SHA256 89c0472a0aaf402dda91f4999618365d878a2c63f7fd04a7cff4f398cb10bb86
MD5 e85df93e0bc68db289ff809d0d30e81b
SHA1 f034a4a958b74f3643de27437ab3ab0ea368ebe1
SHA512 7e137efdfab6e61003f515bdc99da3ffe71bf4f4dfbf59a0f850170f468926626331eef25706f8baa89ec659669b5ef34bfc561fb700eb01bfb92d7fbc8a9115
MD5 SHA1 SHA512

NSIS installer

installer

skin/Tools_skin/ProgressBarFG.bmp

SHA256 444fcfb6d43f5a27cf1a08f1bd257fee81ba6a2df13f114663351013ab0b2a0d
MD5 0f62c850ccbee860ee4d8426c959d675
SHA1 bd954e91c183f8c5a18a6cea07f11c1c01417153
SHA512 a9b2731bd050fabee0f732398b0d43fa99680adb0cf2a36c2ab373759a533b5d357e258a713346eee9dd81025162831a9d815f67ac368b700bdaab29bb6ed7c3
SSDEEP 6:+JkltcRQxKM4kxPBqGnH9UOh7mi5nSjcBSB+h0AGLotELJpoJyhKaEnCq:tCSx9RBqdOh70wSB+h0AGE1JIECq
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/Tools_skin/PromptDlgbtnBk.bmp

SHA256 f2c09ceb34c873c25bceb6b4216e05049ca1e126403c857e81d408df12ab3ce3
MD5 9e8c3b4f78b700b71ae301154eda06e3
SHA1 7f908c3bdf2909b9c4b6c17b8fa6ed86145309f0
SHA512 10c1225e35b9728c44b9ae14cbc95e158fcd58bec8e134f74c13e0ce731a9f97166d6d5aa94dfcf105b08b57438b188a5ac8572fbd5c44eb2df3005b669fb3b9
SSDEEP 48:9+U/U/U/UFscCDcCDcCDcCJ7AFAFAFATzzzae1JQe1JQe1JQe1JVVVVhaaapcBc9:91RRRF+++DenQenQenQenVVVVheeeP
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/Tools_skin/ReRepairBtnBk.bmp

SHA256 6ebca6c1ee06a4a08bb1947a33998a7b80e77606ab0520b0fab850facb615b25
MD5 daa7028f4a33e890ef8da47495afd2ce
SHA1 82d428fe5377dfbdd8a872dde740a29b4c859a73
SHA512 749c99037f94e3eb2fbd47862a7170ea260297cceb5fbf7985962d143c9d75da50debdcb72888672e7844cf56b3e854a141ac0fdd1ad2a726cbc506fb98b22db
SSDEEP 96:FtQjeIs5QBjq7XbSkwvOdBZ6xJBCY6Fhv3Y4327lrbBP+k0sd8+zYXbrsU1/:mefgjqf6xJDM3YYglrbBDx8+ET1/
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/Tools_skin/ScrollBarDownArrowOption.bmp

SHA256 63e26fcbdf4a0f9201151f95a6fad6f271785a4f45c02cf8bb89429fedb86463
MD5 fd595de7eb8ee28a3f4a41d5e07b8863
SHA1 24c2120903d42fa59e900450d5908b55ec7dab26
SHA512 e8c2a945118c9cff783cfb6555c8a0ed5ef49beede7a163cb00a05abd9d7f7fee70fc0367b720cc98c046f88908c257c0fe48ba333b711bd9b934fc49d0b9ab2
MD5 SHA1 SHA512

NSIS installer

installer

skin/Tools_skin/ScrollBarUpArrowOption.bmp

SHA256 04f635e07f42b7021e52ae364ceb11443455247b553625d99693e9ef838c53c4
MD5 8d3af935ad466cd8f5c2520264114b80
SHA1 9ae16d89e417ed3f3d167c70548517d15fe4b1f5
SHA512 76d8f69e21eb980199bbe4bc4bf4af120a5bb5571bfbcbbdcd0687de1c680334e0baab94a63b870291a06a7ea1bc6f5654c1baf566a739efcf137767d8e734c5
MD5 SHA1 SHA512

NSIS installer

installer

skin/Tools_skin/ScrollBarVerBkgndOption.bmp

SHA256 f46522ef3f5be54d9cdd9480e68cc154583e4b84e10b31200379e2337dc425d2
MD5 cf411719b3ae45d1a70cf88a84649af7
SHA1 3601c13fd9baa5544f85d2ac995c021364f095c9
SHA512 f2a68d6c3c770cef135aab07b9947c45813825a39905c8daddfdffd44822c55a71fbff8f12215da4065a834d9f4bd6d5f3fb7c84df80fae969dbc9fd4b6bf8e6
MD5 SHA1 SHA512

NSIS installer

installer

skin/Tools_skin/ScrollBarVerWidgetBkgndOption.bmp

SHA256 ffb237a6e9058022785106fdf6c92fbb25181e9db3a87ec3c1faa03399c94777
MD5 698ce57bae28b80776210694bdcc5e11
SHA1 da5514203eaa0609d311141d2eebdb28ae0eaa16
SHA512 f739415f61785cbdc408626aac1bfed14235132a64ebe784b564299457e23581422e40b44815f5ee9a3388d6d5e192d2130b70521493403885e3d114dd626f6c
MD5 SHA1 SHA512

NSIS installer

installer

skin/Tools_skin/ScrollBarVerWidgetHeadOption.bmp

SHA256 970a3342b226f179d0e010f66ecb96f366abd4c323e4a02d999151188f53165d
MD5 6f2dc2fc31569137044122cbf4be02f4
SHA1 776b5e5be3e1062ec19203afe2bb4bc7b192e210
SHA512 d219e010a7d05b8790dfb9cedeb56028aeef394e2dafe1669498205a30c93386be9b1b26bfc9a4dcb7f98db6ffa2af42f37dd8fb2ceae04c54dbc601bf40aa2b
MD5 SHA1 SHA512

NSIS installer

installer

skin/Tools_skin/ScrollBarVerWidgetMidOption.bmp

SHA256 cb0dabf617f16d5122a22a821e7320f6f321734625bb1ba7e85090844d753db7
MD5 87e1dec4d76155a819b72560b7f32022
SHA1 4b72dde24c232d618d2eab4a88efdb49dc683ae6
SHA512 c5347ca33297d7c061d898372677bfce957b6be1d09c32f9b3caa5b98a0b9cc5da849210bb2eb7d3edd515aea73318edd1a20699dca02eb37c4b653a32a49532
MD5 SHA1 SHA512

NSIS installer

installer

skin/Tools_skin/ScrollBarVerWidgetTrailOption.bmp

SHA256 4025451ffb269a87c1044cd1551fb0fbbdc4dab864012223c6c1b05252f61dd5
MD5 b053355f86183f8fc4f8ff54663fb34a
SHA1 6d88252ca39a11849125a7b61849bb85bb893643
SHA512 29d67196829239a15bb9ddc03444c25a9be3ea650a9a1c56057c689c932af520268ada914b746ce73dee2412f6fddab569c6217d5946c77f0ce47cf109329389
MD5 SHA1 SHA512

NSIS installer

installer

skin/Tools_skin/bmpNormal.bmp

SHA256 17b8d46d1607a795469b7a6ff50f8b91847603a8b3e45f8d99e1b31709b71536
MD5 bcb0abd4361b1df663cb5c8c9f875911
SHA1 0206e9b8e6d03aa7a494380fdd48a7762a003c2c
SHA512 be1564767a9ffe9a424a66ebcaf1e205c8ca63e0e8e11dc33f856ae311220e071803b8cc76cd3d18b6d36ab663564d92709aa37ee63eeeb8d695cc9ca0d01b28
MD5 SHA1 SHA512

NSIS installer

installer

skin/Tools_skin/bmpOK.bmp

SHA256 d8c70ff8b714646999b374058e2c23a66abddf1dcd33b01e5aa8dd815cdba544
MD5 927a15a8e10e6cc090ad54d830b7c68d
SHA1 dabed011ee817df745c0c0e3c78855e96d626857
SHA512 48bc366b9fd42df6db03dd60900978bf6316e28086c75b2a63d09bd558434e222c46db0a2e31209d9c0c66576abb498b872c2dd9dd936a9c52133a379abb189b
SSDEEP 192:xYInDX3hKhLRL2RxjXwhHFxE8QXz7Q7FI:xlnDnhKOR0lf4z7Q7FI
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/Tools_skin/bmpRepairFailed.bmp

SHA256 9ebf56d590b0727d4d138fcc9a18840c16d6fbdb293a0bf07d136e0e743eb91c
MD5 b58e05bc0297a5b2b567a19a0f326608
SHA1 61094d058408866501ce3bdd7a4f85e8f374825f
SHA512 32121781b6b0d9a1e47682bb4a631d3504aa0799b59507ab6d6dbfbeacd517651b192614ae2ba41ecca2c64213da49bbbf9131ab525fdd8f75c13afdfffd0f26
MD5 SHA1 SHA512

NSIS installer

installer

skin/Tools_skin/bmpRepairedSuccess.bmp

SHA256 0ee64e717bcf352334f10087d2ba027dff67ddc3e170304b44ea712ffa88f999
MD5 668a019d90c2b666f963b728feb4e6b1
SHA1 4d9adf7c4c312993972c2a5c65fc6d4be094736c
SHA512 798679bdc55e3904d4d78dfdb5757ba6009728bbef0c5df1da8aa7e6df57358f8a719eb45877a538e441249170e3ac5575fd9cd89e9ebda891b4d681a25213f7
MD5 SHA1 SHA512

NSIS installer

installer

skin/Tools_skin/bmpRepairing.bmp

SHA256 070a19ac1c25eda8ecbc72bd5c3b8fbdca78409292f52da15ccee17ecd0b06e0
MD5 57cbf961715952b956437dedbcbe62e2
SHA1 b95fe9340bedb7b0a2a24e8f1978eafb446a97ee
SHA512 f8e46e1eccd27023c57ca4c6e2b38292ca841ab6ff1e4a17e484f2d4f30a10706980bf77a9b602f16a61e0ac64e61fcfcb4899ddff4f171b18e4bf5d5f2ff62c
MD5 SHA1 SHA512

NSIS installer

installer

skin/Tools_skin/bmpdetection.bmp

SHA256 1259d61f405ce14fef22b924343dae18b6de3b188d236cd6174f982b7e3a49de
MD5 8d38f363ba188999aa57dd9ff6f2929a
SHA1 d994cda697d80523978e0acaf667e8da50c79702
SHA512 7877e6cac89f84ddcc58c77d8b02e82ca170c2e0d600e9280eadfd67c2ac8071ee4ff2cb1059e7530191e29f9a146194c91a52f44f1d9d2811c997eb4039a085
MD5 SHA1 SHA512

NSIS installer

installer

skin/Tools_skin/bmpexception.bmp

SHA256 eb3bc626de38af862d9b71ff1de58e56a730a94c277ffc7edf17acd2953137a9
MD5 72c552b2d94316d6de8386405b4b5bb8
SHA1 060fbbb4f28195d021816792e5f73d984fe89aef
SHA512 9db0fa18d420ad9935cb8fb7d9aa34be9dc21e6ef3471d1b4cd64e76955c7f01ca9af7a5efa849801dcbb80d23866c00cf05eb0de08b59a11f668f46134aec67
MD5 SHA1 SHA512

NSIS installer

installer

skin/Tools_skin/feedbackbtnbk.bmp

SHA256 730961724f253de48d2f142496ab95e12b9ae8dbc15893df35398c8124ea2e4c
MD5 1e6a9196ea97bb50ff3b6a0c677349a1
SHA1 6d5fae298448d3eb89558ef210b4af2915becd18
SHA512 3388a2bfe305f618231cfd6bec489025600d458af342c5922f7ce530b2035e0753e3f000440b983550db1d4910ab8d6cf7c2cfbb5002fccc3d20732c5ef9d42c
SSDEEP 24:ydjdjdjdQHOHOHOHBDiDiDiDkXVXVXVX+aaaXpapapapbNRCENRCENRCENRCqtty:SFFFoNkENkENkENkqtttzpppYFFF1
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/Tools_skin/funshionmark.bmp

SHA256 63c3658767134c8843885a3c55f81b11e8fadd601ecfd6e2603fa6acd249c457
MD5 53a27b17e0cec47a1caa5b732936f5e6
SHA1 a66aefc7ec500d44931c5a32d4e5ad706a8373af
SHA512 7abb5fa83a86eb72afb3171576fb7cfc80b08b4a8f634031920246a66b26a81beb8cda1e1158723506bf6989dec3e47036754c03128f248800180f7306e7d8b0
MD5 SHA1 SHA512

NSIS installer

installer

skin/Tools_skin/gifChecking.gif

SHA256 919f8c760dcbd6c690616f2a725cd1035829c68b42fcf5fe1cb5d631cccb3300
MD5 1437c540c036ec9e5e6e26d60968132f
SHA1 cc20a1dded5a7b18951e16e21a6f243f7d7aa4ac
SHA512 299f29281af07518c74c4a9a9b317baa53d19ca52f9f16708cb102e23b62e6fb1fc990b3d2deec8b9e8eeac38162e2aeb25ada43a1cfbb477fd44cfcd54e0ea9
MD5 SHA1 SHA512

NSIS installer

installer

skin/Tools_skin/gifRepairing.gif

SHA256 9172b70c1c9b9a1502cf69f5ef0ba0ae77c595fe3124854de89f907b6072c449
MD5 7e85096ffb6620c7642339293c1a7c2a
SHA1 c4c02ab0765aaf6daa84c4c4b461625f3b35e139
SHA512 04b298c61506862cfb58fcbd59b1c65d4a21033f70cb01dc13c26f83bf88b2d2cef6434e77d77322d9d12b70dc447b777d1b293732057efc656f98b344a1923a
SSDEEP 96:n7rISNoAf93MvJSXRQInoIzA2tY9xivDwFDM3QtmjWg4DCmu/4tCOZn0PEb5:HISNSwto6rvDwK3TWZu/4tCGn0M
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/Tools_skin/gifScanning.gif

SHA256 7a4cbe05972b22467bb343fa74d2968d031a8bf9f8ddfcc07252a44e3f6968e7
MD5 3ff753469253c82965ae0c369d43f1aa
SHA1 4675ba33911c58579db75bc4dca7aff8b84abb36
SHA512 854ac17c43646225384c1a4b49aa77c25fd1f7ba88f8989d1f6abfd5c4f3815a339f2c022a1c0e7120abb2f4b397f746b4af4ad263b960a40a7e47b102ece262
SSDEEP 96:GWdS9EmLAtSVsDIuTRan6lrEXTyTRaKI4AnOWxRa+lnGBSQnIJ8ULHUnnHMl+:GWimSyD4PTjKfB+xunjUHUnns0
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/Tools_skin/ignorebtnbk.bmp

SHA256 3d8211ec4bcbc717f27a9c96cbefbc365238390fbf445ef2815b8450e1da0b85
MD5 029a16cca0b6200533df9630440e5382
SHA1 533f558382072a8b38781bf146eaca6772ecaf87
SHA512 0ca57356c49e298b448911ac28ccefc12c9a5bbe4b8c0811ec7840f53eb74fae5429bca042166a4ef084f513dc3f375db3f9da0390eb8bebee8f8e36ac27c013
SSDEEP 48:oMiYmE4Wuuk1Zg+g/e27uT+I9ZTBCZZEIm46n37FdH2plZ/77k5e:oRRE+uI64ouTTgZZEh537HWld7T
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/Tools_skin/maindlgbk.bmp

SHA256 5932d6c2d3d20fa294deb8d5a738831dc6efb9ef31351941e851ea8ea70c20e0
MD5 aa35a11db12a1623583a79f09eced818
SHA1 4df29f003ea1b4d959f535b042d1f0dd2e6743ed
SHA512 d940ea74f0de2fa4d1c265e1b97a0e072a4705f318efadf40cb9533136280104fe2cb3cab065459e28062f457a5ee194af4266f2ea28fac1f43e51caa66f5afb
SSDEEP 192:s/OtOwwwwwww555555550TTTTTTCSe+6v:sGJn
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/Tools_skin/problemtabbk.bmp

SHA256 9e32cb59b9f87e684aecef505e5579f77874d76d3b935dbba335627f8e11d859
MD5 aab0ac31113be5521e03de1a395ea32c
SHA1 6a9aacdccd3d20708698e0e20365ee1ab72c1259
SHA512 04b5ba565a85e01377242ce622772bb741dd340921f772c3ba371215efa181f91efcb2fa474d56e087f481d2e45598763f398728f967e30647d1200cd406f079
SSDEEP 24:T8oGN+Ub7PqoVoRaLbr9L0QLyLbpLLQLFG7aLZmL7LcG31LdwCCGYCW1HwHR8mog:EK
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/Tools_skin/promptdlgBk.bmp

SHA256 981caf49bf90a7282c53647ce7bd8a09a9cdaa74a051c60d0d0bac91983b7d55
MD5 32ceae0544bdcce1743553cd8e9314e1
SHA1 97ac7253ddf72937aad2911cc7e5e6a7bb0e8f29
SHA512 4b5498107aecbbb1d1d22be53c4cb2f7bc0a52f2dd07534a3e10701dae865296a4d54baeed8e25d89791309aebf6ae72c4424077fb583f706432b2696d90d2d0
SSDEEP 48:V9fyqdJcZ/zrrrrrrrrrrrrrrrr+Oaqr+OaWOkn9Ee6WhyW0Q:HK/N
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/Tools_skin/question.bmp

SHA256 21a987a8df6ec51154e1426e3e79b92bb1ebb9095f6c759b590ab4e30bfcd294
MD5 52ef039476a43ae374a6927c7c58ddd5
SHA1 1196c18d32ab32e86b246072bf0ae74b32eee43b
SHA512 24f87479a3f4b4598596bdb911cebbcce625c50077eb0456204687a3f2cae137b192e850af9547ca4e9384fbaaa66a7684bb2572a66a3601e0967d704b1c84d2
SSDEEP 96:kLirgTGFwN74BTNHLhfZ8tUuso3bwCHnz:kOrgS6NorNusoL/nz
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/Tools_skin/recheck.bmp

SHA256 63b97ecc9b966430aab33db81ce2f0bbac342de6dca947fdc1f16cf8674c71c1
MD5 55edf714f2ccf3a6d636a29f45c6cc0b
SHA1 cd25b88ac4874a70c1d7912cfdba20ff3c21f25c
SHA512 1e77454475a7aaacdbc3f481f4038628b1ca2f0908f2d2102321ff0984834ef9808b004565758b294a7d02a43fc9256552e6476c7bec02102f14695a2797074f
SSDEEP 384:lKTTLvzzWwtwtwqm77zpCCR84V4V40aktpXktpXktpiWd:qzzWGG4I22gktpXktpXktpiWd
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/Tools_skin/repairBtnBk.bmp

SHA256 1f96738807d477260fe0ea27e6123e75b30801e5e596cfacdd12d217825021ff
MD5 57a4f4d3146763d728846e3b7d84d69a
SHA1 00e62cb9380269ce33fbc9526a340e66cb7c90c1
SHA512 0ca591afe3547f541d22e9f31cf639f15c81cb04d918565a91043923b8bd4da4f62094d9d0b3de34c16fc8bec87e1ecc24efea4ac37bb643894e1907ce98adef
SSDEEP 192:mefgj6M8h1QjXjQsGRrjNEyZe5KxicgAWQPwYlYrMXFOSlNLd2mSw2r8+f+9R1/:mug7i1AjZGJNEy4wTVYYWoXrhSPd+z1/
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/Tools_skin/test.bmp

SHA256 6ebca6c1ee06a4a08bb1947a33998a7b80e77606ab0520b0fab850facb615b25
MD5 daa7028f4a33e890ef8da47495afd2ce
SHA1 82d428fe5377dfbdd8a872dde740a29b4c859a73
SHA512 749c99037f94e3eb2fbd47862a7170ea260297cceb5fbf7985962d143c9d75da50debdcb72888672e7844cf56b3e854a141ac0fdd1ad2a726cbc506fb98b22db
SSDEEP 96:FtQjeIs5QBjq7XbSkwvOdBZ6xJBCY6Fhv3Y4327lrbBP+k0sd8+zYXbrsU1/:mefgjqf6xJDM3YYglrbBDx8+ET1/
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/TopLeftCornor.bmp

SHA256 1ae329f6865a3c2a4a151583eb487a21b39c95204ffab084547c95c9432d0359
MD5 add98f7f6b1644c65aada58541687260
SHA1 98004ee52c80f676d90411f8098c53d2be8de74f
SHA512 a73122ca7f4becf4c81e936ccdeb108602e487397e96d5eb66a44c19bde03645a44b82f09464415baa3b1282b4b45af63f1ef058ff1aa9a044d783e90c21237d
MD5 SHA1 SHA512

NSIS installer

installer

skin/TopRightCornor.bmp

SHA256 fffe2c91b9fefa69235711115fcd31b59dc01c0a94c6dfcc37b3583f4921611e
MD5 f8f5497d7c4052d06ad5b5dbb45f661f
SHA1 2665ea8e78039be464ea4753f4618d2f0aca5143
SHA512 9fda26f2a9e847a182f9c5989a435c11888f0609c8f7018eca9ef13df7cc9460b252b7ee4993e2ac709d4dde5fa5db63d1a20ea34ce18535ae0b66957772f047
MD5 SHA1 SHA512

NSIS installer

installer

skin/UpdateBtmBkgnd.bmp

SHA256 39baf78818039ad82b5e49917f7ebf2e36f8fee0b3e9f725fc0a2994909b7c7c
MD5 4d185ef0f0709b5e2eec77cc0ffaa6f4
SHA1 b115c56adb0fa0fe2d4809976029cce8d56ae579
SHA512 d8cee5844334d2e3982c439dc5d2e712805d1348aa2a48e4cf14c9c1ed5f06406eb6a063d5d5d7dd94d10a02cdef6b525b4a256800a046c1c5f87c29db7bf713
MD5 SHA1 SHA512

NSIS installer

installer

skin/UpdateBtmCloseBtn.bmp

SHA256 e7c416a7e2242de46a915a5b22db0f3154f0d6b6f0ed066ea8f6c1e8705cc971
MD5 7bdf201423c999863055414fd100da47
SHA1 536b9278c9837b1eaec9b8b0cf68c402fbcabd07
SHA512 934a33f9c1c36e5bc3bcdfb9484c6d8bc6e3a04fdc95b39501ffe2a9af633919e028019ebf9c9a245debb9495ab65693e7427a70c2d00a49410ccfb14aadc495
SSDEEP 96:q4H2Yp0GGtwAcdo1Ne1GyXyyXjbN+8vKm/Bz9+qBIIOk6k4D6k4ui0jMvbvnx3:XqoDGyXjjKm/Bz0g6dEZ3
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/UpdateBtmIgoreBtn.bmp

SHA256 8b8d50a2cbb078b883cd672747dda2554394ffb1d03416ba227451ae08a76b78
MD5 0285976b288e1e7a0a56af89518f8d73
SHA1 09065731c2969b7f6689c83c7ea817154cd66613
SHA512 24c1322172fecc7038226e6692736eaa4038328c4e6ba0773d24bd67360a7a1fad0e2cde0de7e1d05113045f443bac22ff4cdd5ce20d0c41d343fda131a4de45
SSDEEP 192:xCHWMKGAes2WS6tHI08dEIZ/c3wndNnnbi:xC2MsIZnnbi
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/UpdateBtmUpdateBtn.bmp

SHA256 1d70d4a82f0ee5c775cc0d2452cf92e02f885286672020f37add8bcd3638c5a4
MD5 15be69b0f9924c18a0de327251272fe7
SHA1 68f19192a27503245bee39314e17b0cd880a61fb
SHA512 1971af1eecb2320eaffa95b6dad7e7ecc12c4984a56b76b2398a9b189f21977c87e492c4bc296e9c86e38f93ff12a964b73efc138a3592b5a66d7bbee390c235
SSDEEP 96:q+mZSW9XL1sXI+DadhY/M09/i/4KaL+UzzMziFp6ce/QtB5yIIr4Xsw1LRq:9KS/LbqAL+UzzMzce/QlxVq
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/UpdateCapBkgnd.bmp

SHA256 1a38cc017743d8d51345321faa6f0ac4421300adaba9eed498cc4237798af07d
MD5 8bb49c2c39afe7801d4144f3e66de3aa
SHA1 747157c07b70e4c53f6a71686d7dea2acdf3ffcf
SHA512 22be5140690a7bec6bbb6ead81a2313717bb46c765c7a638292c56282fd169becc78838d5de3c808e6d087eb0d3e5752bcc4edad517a8c274b98c2e0283727fc
MD5 SHA1 SHA512

NSIS installer

installer

skin/UpdateCaption.bmp

SHA256 0ed2e81ceee32a7ee41668ff8101fba87a1cd9f052aa9d49be186ae16b82864a
MD5 4091e349653b1f8cdcd849473776d869
SHA1 a360bdba27bbcdb0f71828d669f895f463ffead0
SHA512 75414a24fb4cc6c4d83e3e148f09f00a5cb4e992e4c78dd11660f91d65c78cf109c34bee70a19a761c619999881742e7e15fbe29f6af0fab8dd0301cf1c20884
MD5 SHA1 SHA512

NSIS installer

installer

skin/UpdateIconFail.bmp

SHA256 92fa2e862fddf5a1de65566215e3c923063af9b50b9d0d599045825b91bfb9ef
MD5 50213faf145df71406d71253b028ae62
SHA1 15660450c54f8dc46f9db03162d79702c49f6582
SHA512 7bf503909cb7777b839c4c5fc0b8060ef5380cd7f1a2746df7917a13f6eaad5ca0f7f60928c3723bc5255c37b9da92f325a184cbd5371986edfa88052dcfe800
MD5 SHA1 SHA512

NSIS installer

installer

skin/UpdateIconInit.bmp

SHA256 666dd0b04fc5c537cf88de7b4444e2a4dad622ab81ebaff95bb88d405a716af5
MD5 14aec3c5d30a25d3184c234ba023f31c
SHA1 1bf802b3194a244a75c47c2e3f9cd17bdbcf21e6
SHA512 05af6278b28c32ffa194f5a3d4b54d27fdff5d9abc3ebf793929fb89767e9d495dd0ea01e947576e0c06d41b1a11b9d528da9b024d9cd034488a6a24447dee31
MD5 SHA1 SHA512

NSIS installer

installer

skin/UpdateIconSuc.bmp

SHA256 bcb3078ccd6abf9193820bb77e8968e24b078c5f6c872797561ca43b5083f1ea
MD5 a15e4c1585cabc24fdafb61ea07a3794
SHA1 33a34452de04fb2078e044ed3355c2637a617810
SHA512 ab2cb68b65fb2d2ec3a598e3d8fc61e654116afb567f51a47ed2a9d05055c55f5e8605355ac0ef680b81820c7b98cd8d4e8de181ea40912ede26dfa3893e0746
MD5 SHA1 SHA512

NSIS installer

installer

skin/VolumeMute.bmp

SHA256 9f3133518a3cc0f46e2d31626c51ba5c5c9b33cf762719b5d7cbcd419f3bff21
MD5 7b73459b34b32dc9fa181e4a55a89278
SHA1 c344b61040bea7ea46fae985f6f75d568a61a905
SHA512 9b0cac9632b0d4967a710a629807f7c90175cf1083b0d3314521fdd950fce7345816e9a1eff65dd6b1ecfc46e6e9b1e7a97d78a9dde2e25d54c736a40d4b65c1
SSDEEP 96:PNzP9SuJ7zZ9tXpWEABdynxeUKcHQ445f:VAutPWtUnKcw4g
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/VolumeNoMute.bmp

SHA256 d16e14498704129b126cdd1faa0d53b3c821754ee7561fdaf5486d3226da9a58
MD5 954499ad339c042244e508a5bae39338
SHA1 5ecc202415d69158976148dfaae289b7b7c144e0
SHA512 1b06d5f9122b5fe7e1ee0dfbe873dffb65e734304688794bd501ca09725168fa039ec1b028226e1035a47fe6cc89472ee4eb6234a8a4b4f394df06cd814b8205
SSDEEP 48:3rTyeA7gsfumB2nVgoifnPP/MoMvbrqGP9hcEp0R/r9whIayiBfNiNAOeu:yMgsnVGvG1X26hIayiVASOeu
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/WaveSR.bmp

SHA256 087862e07c4e8f77546dab631de4e81e3f6c5d7283144c4f924e346f3af11b03
MD5 96e378b3279545f4200b6fedb8d82a98
SHA1 30a1035bf0fb8c8d70e2aa4796dc4d3c09a2e37a
SHA512 54dae23ccc800d23a9d70ec21eb1b3f06eba1af6460953d7cd9c4afd1288d38406814fdbe6a80c4cf7d47515fb402c8543151ae1d6234eff109b952341664a51
SSDEEP 96:F3hrljAXtPNGPnP57KUjx5GXgIrcd+pxe:F3hr0PNGp7VoXgIrcd6e
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/WebCloseBtn.bmp

SHA256 61ff09561c239b6be28951f36b70eba19eb3bd494c6d47ab2d376ffa777fe15f
MD5 bcd39557694922e1f1cbc690a1057ecb
SHA1 96b5172f6d88adb901385d8cba7e1e1008453b42
SHA512 b3b48f26f36533e9faf41531629c6e86f00c1229255f2d82ac425b073aedb53c8ea36fd10e3931caa1bd1b4e3bcfccf39d04267e9b96f1a7d80101b16a091582
SSDEEP 192:dGaaaGKKKe777+IIIzNNNutUtUtUtuNNBxxgIII9DKDKDKg333iiiiz:dGaaaO777+III8ggguNNBxxgIII1qqoA
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/WebCloseBtnRgn.bmp

SHA256 26359c5fe7e08e2798262c9cba639c623e245bd4ca80009d785251ccb2c7c637
MD5 4b459729eac5bf060faf1dedb14d2905
SHA1 3587ca7e0b5a78853ddfe519e404d9ad9bd39e11
SHA512 a9c0d619a845a104e1ea7a33ff5c61b9132852b5801d3c1f20177c106e5b2dd527e51cc3a15696c7f2c04704039573156b806123a4fa1459ffd1d0f56f1e15e3
MD5 SHA1 SHA512

NSIS installer

installer

skin/WndCloseBtn.bmp

SHA256 e277a8afe69ab9e6a5b55bb16dd48f9833c27d933bb2202854840b450c4853d5
MD5 e139076aa9aaa47f5790ab3081a2fe37
SHA1 a65fbe6fcc5b83492b29fb30a7876366ab2e7d67
SHA512 12950fe235ed28b84ea230e3c841c44d527d8b7b1ff736e86db189a8c868b467b5e390103a045bcd18f824c797599e4272fb4a2b4e7a6511f5cf6399a0bcb297
SSDEEP 96:8VK2E/jmVk+++++jg+++++RDckELEIZTH0Qg3x/psjK:8VujmVk+++++jg+++++eqIZ3g3dpB
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/bmpCleanFile.bmp

SHA256 f4e1985961064be2034a9b055d18bb506d55b389e561a20d29c22a77e4244705
MD5 de99866933307bd277e3d59c87ca1b15
SHA1 7aeb2a7062c75a7a38579699a47e0080a9aef57d
SHA512 4a4335030fc57237db056874d4b74118df101e607bad1256703621aac11051644ac012fd4e65c715b90a9f4064167e0ae0e8ca440c7af38f18834521d92977be
SSDEEP 96:4BGmRWG3FjMQbdzRHZ30fGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGb:gR1t/xbi
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/bmpClearDisk.bmp

SHA256 e78a368d3cb58294e327e5e44e7d192980fc761717be5840dd3dc72a422eddd6
MD5 691c7e8527ed44967f28e73e514c8833
SHA1 2d2f867928807b3af03d0f3cd5551941155cedda
SHA512 6466311c41e9a52c07734da4f341729fdacf206ae8562ddf2e28fb46094a07867a2bf6347bc8057bd05bc813e07ecd80f96f84e5f0fb4d3f7c7cc886f6fbc324
SSDEEP 24:pmvZDvee4bjJPGCzv8eqlfZBJBqo6AH76IihLZjiZS0T:pyZDajJPGCL0PBqoIJhBGB
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/bmpError.bmp

SHA256 7a45abcd0748db283ac84c0f35ca0b0760accee0ed364b89a0335982d87cfd55
MD5 5f97afc83b390a79b3826c90469d2084
SHA1 fa0be149ca64a172f270ead7f1a1c0dc268b2392
SHA512 7e379495fd617fce9de330b0a017761c251184d8675f68174d5b22d7bc28533885137b88992dc0c8f04882ce256910abf4a04fc7c3714710b79748f261f02622
SSDEEP 96:RfCrM322GE9zKBKzJph3qqDdmDponJS/cjdVyUChksO95xpDKe:RarM32cmBKdpdqppmQ/cjdczksOzrDB
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/bmpError_IE.bmp

SHA256 5083262288beb86d2aab3e77de745bdeeeeec1299071c163f9b774363167016f
MD5 2a9f1996532960f345f470ceeb1659aa
SHA1 c7bd4c0b1d45501e4173a26a5b69293f6de81a92
SHA512 4ae3c3a4a4b90097df1b7c3744b51d808cf8c0cd48d3131da8db6175088b6479df2980c25e66586d2662fdc2905d72e44ad55a3d4d65102b2281e80866745bab
SSDEEP 1536:5LJto7zecilqMlb2eLOUPOguDr+Wv2VWgqRdfoG//ZIDRnFtLFa/PpVe:Ffo7zecilqIb2eLOUPOguDr+Y2IgqRd8
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/bmpPlayBarTip.bmp

SHA256 64d7b09e843605571836abc87b6f88da71768235d79b108ed720a86c2df4536c
MD5 55eb3f44bbe5c4cb13493cbe43d4ceb0
SHA1 f3a2ad4d352385e6d2b8e377894d9198be094cd9
SHA512 a2d3f7282f8f88c1af5dfff56b68972d7d6ec317cc765e499d9642addbe7e7189859a929f7d56f9883ad2a037eb691129d805393a1d4c830b00abe5ce317cad2
MD5 SHA1 SHA512

NSIS installer

installer

skin/bmpPrompt.bmp

SHA256 a6557d3f492ea89ac4d138a010d98c27862fa12af2ed9c97327c174f40b86a96
MD5 8ec702c3438fccd0a417390f6634024a
SHA1 571036ef5122063a8b7815f3fff54fae5ac633e7
SHA512 42fdc1a9fede2dc676e24d1939e7c6821aa3b2ce338913fd6021d41dce031b84e6f568ee729a84f1e8304ebadba3a69d95e5c1b3d0f49bb786f67cc853a171c2
SSDEEP 96:RaPQy4sttjlpmMp44ErJcWuTR9YV2yuRG/ENLcWXl0D1l:RaPF4ol7nWsR9YV9GARl
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/bmpQuestion.bmp

SHA256 0c14fcc5edcd498b2a0e07a5943e57ecde4333ddd9aecbafa37afe3c2ee0b0bc
MD5 93627ab582c58c25b20d656f20ef4312
SHA1 9051710b30c8214167ee542a7dd39a39973a40d7
SHA512 07bccf93792d1d731a3dfba204608e83f2d3efb5dada7989e403076545a2894544969601daf45e3269b26351cfa4f74e34eb41ce5a20dde35e831b4db997378d
SSDEEP 96:RmZGYl88NqQzNI2VAkqspY9q3w/1M9qr5EgEtGU:RmZGYTVDqsp9361H5rE5
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/bmpTimerClose.bmp

SHA256 5a95863e65b34ec883d7e3e81290766cb97c2e49edbec56a36cf06455e6ca1ea
MD5 1d2a917b17c315f9e92eab02e6b15b88
SHA1 41a03ff5b2d637180d301c8ee25aea2f72354a72
SHA512 d52e0440c8540e4a07ce3a12e0f88ef5e946ac3768741b27b6fb809401bb323a1ed1a043ed06e7be8bc09a4ca1c0c510e5aa8cd999f8748d85134cf5cc5bf85e
SSDEEP 384:nTb9nRNApObg0C1g2lLYauI/12jdMAUAbQ:nTNfApObNC11lLoId2jdMAUAE
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/bmpYellowQuestion.bmp

SHA256 32a47d9bd194f893488cb30465d63475d6f7a289c114684fdc97f122c5a53f74
MD5 d4d56ced17f8ae0f9306cd86c1b28344
SHA1 beaa4e43469ecc5c46aea37e04b366fb8c3cb898
SHA512 44a9aa98ec819a4fc37e3ee8929fa28f08b2b557dad65f4ff772a18b2744c28aceb7b99f7aa83ac50c2a4cd1bf2687df2f91a8f477f64697a460461478dee314
SSDEEP 96:OuaiyUHharmLVqJP5EarJcQdcK1tjDGeGWtRcRgz+qNylx28tAga:DaiyUHEAVeP5pcsX4INUx28yp
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/captionSR.bmp

SHA256 762843490af0c736f902973d2eaccfc94821504d0713ab4ff7fbf813d88b413b
MD5 e97268a3f2ba86fa9ec6c96c2100df9f
SHA1 39dc0fadf6a500dc1b5365136343c5a91447c307
SHA512 df988f61ff1ba2bae96c2a743ccd9da7383d4e0afc821e3d3f30a920120c09ee3482a83593fb587c29d850ec3f4a2053a33b80dc8ffef3875e5d07b1756828ad
MD5 SHA1 SHA512

NSIS installer

installer

skin/checkSkin.bmp

SHA256 99424408a8064b2c73b6dc697a9412d2edd60ec9400d4869a1ac97f3f4b6d8fd
MD5 0c0f8be104a4764dcec8edb703f5b705
SHA1 261a5dd6e206290e222ccf80e0dab3ddde883f38
SHA512 16dffdf4a2f3bc7a950ea2c17cf4470f0d271c56d7a847c7ef30f48504454163d1882e538c10d7b48844d2faafe9baa8c2005420123c0adc6fc3b48e53694762
MD5 SHA1 SHA512

NSIS installer

installer

skin/cycle.png

SHA256 7cb7a2c5c6ffe02e89c2503244b9acf5a92900455ac51ae94f896e76abd21385
MD5 627589d8317a2eea148feca83b8914e1
SHA1 049861f6a5c7f8e2b39bef33d19863b97ab5494c
SHA512 0b5f74081f12a6dc9a4100de8c558fa16289c8a4f2ec4dbb059e0992b768ce80050875bd214dd62d3b5bc60559ce2e48ea07f2c3b6d26acd4a74a4e2a6cf5a4b
MD5 SHA1 SHA512

NSIS installer

installer

skin/imgCleanFileBtn.bmp

SHA256 40d5dc212f34dd5a40fe5150f92b4e841c1e08e7e10f81a172cd2cdcaee74255
MD5 8dbf3f166396c4d3ce6cd4bc50865ab8
SHA1 4eb67291920291bfb9061f76442a26e8c9a636ac
SHA512 c30678b2c2d8b800f7447fd1b02194f468c0795d33746c9f60103bed8f17c12b95eddb88001705c0110401cdb81b795fbbeb2ca4d28ecd82cdccd37c72efc01c
SSDEEP 96:bOITFOkQheiWG3FQWG3FXWG3FabUtNpoGL5+tsgqdcdGKd0ReRL3RLFZjg4HA00d:bZQhei161x1IbUT+q+MKtJzg4HA0m7P
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/imgCloseMini.bmp

SHA256 eaee7233259738ae1dd5e3808ba1ca39b106a1c4e89391265bafa459cefda4dc
MD5 6575d3122fc938b19087824e49ff87fe
SHA1 9036edbab1ecc19c3ac174217c6e68adc883bc48
SHA512 c52c2c2ea487177e2b9ea97e371909de3b4071be397276e2baa77fb551668f7ba67069598295ccba0f66312166f62975f0bb05df84a5da95e7ca7addb1b07327
SSDEEP 24:f4O+ugDJ5YjfXBg5U4BDPTBgQ2B+hlM7E0wO7HS74wjMrprTHJ0LlwX/dFQmzKHS:ksjBKP1QwAtrTglwX/dFQmEJzMl
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/imgFullViewMini.bmp

SHA256 12adfe9ddf65acd059c353d229f05f98e3eb40b4851714dd21c2dcb2ce480e5a
MD5 6eb4e303e4ab53a2e543b8e8e33f379b
SHA1 beb3dd326338ed0622abcc3d91653198194641e7
SHA512 95e05dcd404e6ef3a648fb2c8222884bfaf1bce239e42cbb4e0795f9dc7c2bd85595c1c7b089e57c0e47b0227b975bb4d08f60d71cdfd87e8c03171af521c282
SSDEEP 48:LNwZueXmZWmC0zUb5+jdSx4Jq9HemiJHi/bRVIs6CGqhOvS:CZuU0zUASxeXmGHi3D8S
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/imgMinViewMini.bmp

SHA256 1937e6cb35a80a4659d45d9935689f923fc24d080a7b279e04574eef46efd06e
MD5 1969392ba7e2d017fb1d3af215468ec3
SHA1 49d323a125a3172ac8073cf064b3e013f64e5149
SHA512 8c1f259b4a150ce8387227071b9b0a6489a0eb28ae8ea1084d5bfed4386dfae3e54f3fda6a7d7447590cec5b90a273ba54f7709a72ac1cbca7b78775c00fedfc
SSDEEP 24:YxMzC1UIlhBiIyfAOa2CTCtczN7JBcBEU3WuHuweKGAOCVgH:YGU97iiCt0N7JBcBEUGOXTDgH
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/imgNonTopViewMini.bmp

SHA256 07224026171a51571e7f46a55dabd0948b86846ee5d1703d8658ec430aa3ae13
MD5 9461a2da56044bd9e9c95dd523e1d28e
SHA1 b4c45377bba57bd3f757c190d2f893094301fcf4
SHA512 48b6161aa4661461d1218d604129975682fb6d269b7fbfeeeafa1c7bc568d0fe6ebd78d5329d6951f91a6fed2cc3ec6aa6d230eb2650d58b4d3ecc8e9d11c574
SSDEEP 24:MNJypIzOODPAp6ZZIPFzl80k41Q/DmIT0yoH4Wjke7L57zj+SdS6EVNtGIaKqUOX:MN5zVF4Nzm//dI4MczaZUOA2ZUds
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/imgNormalViewMini.bmp

SHA256 96b9fd46a3fb9ec223fc5af6fb9a9b1fab9ed5e3f1c2ba6c17b18be166708054
MD5 de60256b8ba7344b484a8e8c7b623b7d
SHA1 0db74de422e0f998e7f6f82957b6be5d7b6040c4
SHA512 e5e143eed52fdf2d9f187f614ad37c3a92f1e4ce6979aad466bb5a77823cbd3ffdeb1106bbbc701bccf1e7be186a6093bfefd51641ca3f3c65560dae16f1735f
SSDEEP 48:wEOj5qMeDIqGPa2eXARk2BS3JRgIgQo5Hd7B8FneaUNZeYI:POjI5IqMk5JRO97BMfUNDI
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/imgStandardMini.bmp

SHA256 b2d32280165982c89dc1f0ab1465a558ea9bd73630da2b4c55086dda62d3dfca
MD5 f0565474fb081abcb28c2b9d181d06cb
SHA1 cb5d148d7adc1810ea3132a3cd69581c6097b1ba
SHA512 88434d2cdc7b21b3f3885837ea6293b7e9f074726541032fabc1d268149a4ca91a10613a1e0247072fd6faffa6ecf49b71361c7c4ff3731408f73b086cfbdf3c
SSDEEP 96:xirX322xa2L4Xmp8MT6qsrLgOlepGVEmp5tdWAZLm6YJUtv9ja8KFNDlN:xizdgJWHTnsrLpleZK5tdn6u9SFtlN
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/imgStandardMiniEn.bmp

SHA256 2f6a0d0bd00a150b1b50796f8c9e5ac8676dcd1e963c4c67312afa60d2c71905
MD5 5ce74fdf70d6c1f4ce9d14f251838f13
SHA1 60ee3af906152aca87e5115e418bf0a5f161a987
SHA512 19c9fbb44f8b002c993b600219841d5524e754186eb317c89fabb8d8350d36e43c7d315f5c408f6eb1f960a17ed0710e7f449bab3d39e3db90ecf2386d3292eb
SSDEEP 96:KXh3J6fuJPI/nwLvilMu+/5lsPZp0u9iPgrPtLY6stBHVPccootWJ4pDKrp3:W3zwIriKB/HsPZpH9/rPNnlqM4pDKrp3
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/imgTopViewMini.bmp

SHA256 06ac6d500ed4938933baa36026dc405e6253e8bb8a6bcf2e6826297d8f97403c
MD5 27fafbc985cb10f5293373949f7834c0
SHA1 7964bb501fe067e29d3e294de3f94b39b2d16d53
SHA512 b2c3afea547d52b8e28e3bc73164b906944ace372e36914911d745e7f68ab19484652d0c32ae979b07dc6ae0ad74308ae9b4ab63aaaee49cba125594037514a2
SSDEEP 24:MNZBNhCWZnvk+L5owfgIjK0zEvsRV74gEq7ksl6gZGnrvfxUsS0pCBs:MNhhCmbf3UsRKuNGn7fx8nBs
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/imgVolCtrlBarThumb.bmp

SHA256 2d444b9adf0d2a9ea0e8800fc46d0b4a9a89cdc54ffe1e6645a3e92b928b4fbd
MD5 d78982507b2168626accb6746fc2d2d4
SHA1 d4b0057a4099d5fa7ee2e847734979f0861710e2
SHA512 da69227d6014a07fe66a85e8a71dbf77ca6eea571b7016a9ed9a375ad878da7c548c2665558d427086ae8d33fc4cdfe5afbdf443d4be0df4e087b8f46af96820
MD5 SHA1 SHA512

NSIS installer

installer

skin/imgVolCtrlBarThumbSel.bmp

SHA256 0165d30d3e1cc307c3379e9e3acb583b13e9ae7470c4847d47d58df19a396d79
MD5 b416135a1378abc390b7d5c93f7d7ff0
SHA1 ee551472d8a8d32b73c5ea7671fb4033d1515bc9
SHA512 fda5393b4fcf712217a3abbf486accaeaccf343e1d556485893349e70678f3bc90bd32abf9f65ff19998c0e34672a84a6b8fa5ecd8de9f10ceb4ff31ad7d688c
MD5 SHA1 SHA512

NSIS installer

installer

skin/imgVolCtrlBarThumbSel.png

SHA256 27cd75646147f98cfa9e03470b43bbec1ec50eb02bbd9e8887cff5bd2f230cff
MD5 6ae5cc7dc6c1104ed3993f60ddd142e1
SHA1 e8e410f5a2f147bbdf8c097ff2ea322a6ad66940
SHA512 98d072a455ae6610dc0963b78dbd16d01d42601d21a530e0ee142c5c4cfe65c71275baee7b599f8556d613a9cd84ba878ac26195a454054cc9ad283d5fc4b68b
MD5 SHA1 SHA512

NSIS installer

installer

skin/list_expend.bmp

SHA256 b47517232ed28856d227ac2211549862dcc43416f673ab5f1783030fcdcc58a1
MD5 6fbd78f52d5f392ea51dbfed9c8a669a
SHA1 6556560b7286c8ade8f879f15d64c89596ad2435
SHA512 4f6fcccf469eb11a7ba9229730a1a0426f4a97e174a7982033c0531a969f1160c3c907e4250b19e16e46ae56cc70ca1d3813ac50fabe3579a7da35d3ce2742c3
MD5 SHA1 SHA512

NSIS installer

installer

skin/pauseSR.bmp

SHA256 f258540324c1d0da7ea9f9bbf062217bba5f45b4a9ce9023213f50cb68f37564
MD5 a00ecc349250c5eb1ddec1d274610416
SHA1 befc2eb38e98f89c0584ba58699c6c87406aa7d9
SHA512 99b05544f04e9ec450dc3af57e95011036ee52423b12b4b862a1ee924d44cfeefa71f8e55b13770df6d31c0cd9d7c193f2495dc62991b7e6221cc733139add72
SSDEEP 192:Wnyh8wdA7yE2h1/Btr7t0OPzIJ4l9Xp0sXXwJp:7h8jyN1J1t5uqp0sXXKp
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/selected.png

SHA256 f76030f5f5ad0979870be1a0501393fd45338dcd7aea47d14cc5b1eced628368
MD5 6fcd5618ca7b1429f0ceed3d74412d64
SHA1 efd2d6f3e55034cff69f8a57d3849a80c6180e06
SHA512 b1b3400c32f4065672a85adcaba1e08391d4ec837cefdea11d18cd0a177c810c51b7cc482541220782dedaaa00cf53331a93aedaf800d9fa999f19b01a83e78c
MD5 SHA1 SHA512

NSIS installer

installer

skin/small.zip

SHA256 ac7e62d6d3d1f9e5f82563c8e422eea424fbe64ca62bcd31a6d0b8d2611d7807
MD5 863bfd4539f3c673ac9c62c6a252dc3e
SHA1 3af24d54dd7591ad50e9f58f6d93c62a42af507d
SHA512 dc35648edb8d90b4216fe416c87ac4e58376df6fdaa07744b1cbf289a687a2995bec955d72e796e511537337d229ec1b97403f3896f4eae0fd6d741550bb16bc
SSDEEP 384:SiDjyQh8JxerC/hynTxr1MucAk7hxkWYxE2SznAbEZtNN4xyK5Y+OzC9l:P/yQh8JxoC/Axr1dkt7wErnKEZtNN4j7
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Black.jpg

SHA256 0e72ffbf135eea76bc960b86b5ed535a6ca1f57f0d03dd5c6614adf433de2348
MD5 6e2bf96ebd78879ab3ed962c97593e1e
SHA1 b9caa85f9216ceb18d399e475bb40831992d4074
SHA512 4fc3a975460a5d37d00e0ac3cff03f07289a0604f6c8be32c0e6d7081100505f6e903d58eaf7289042fbe0e56761fa10616336eff51cd4a263d0db8a7c23484e
MD5 SHA1 SHA512

NSIS installer

installer

Blue.jpg

SHA256 c9fe877056246c740746aef976f7f3be0ba299839a3e6a8ab4853a8d0b77002d
MD5 3537308e139d6d99ea30dfba5b1b005e
SHA1 12b0525c277cda07b7862194f3db38317a785b1f
SHA512 0b8a72778041dd05aa0a8750a333c5cf896b415b40cafdbcf11f3a164951e8f0eb1ef24c9d6a9d12c19369d4ad680cf0428dab22345dbba2901830ec58f6cd8c
MD5 SHA1 SHA512

NSIS installer

installer

Default.jpg

SHA256 0c89db55d184977e9aaf5e5c8f1f81abf87c557ed01c8f7fe57b92e00938129d
MD5 cf7cb61c40a0b6cf2f94d88a12f56ead
SHA1 a16369c0ca1ce2da45ebc1b4bbbb191f1b1ffe0d
SHA512 d6e484b0b193221145b9da2ceed9bdd455e7faeac36d8fff0069758eb3abad690910cb6c3960204e99a750a8d0712b706977ec37edce819d81a15ace595853af
MD5 SHA1 SHA512

NSIS installer

installer

Default2.jpg

SHA256 77ea65c10776cbef9d096574ac16fd76f3275fe844bc0420fca0518c629a6e92
MD5 a7cfa04e9d7bf79bcabcc861862c785a
SHA1 3d0771b5813817a011cd2beaa40adc7c7122958f
SHA512 da2382aed80d4268144536c5f55dccd53657f8c780c539c929f171888ca808c48a173376197769df35a55b49d805f8da7a890ee7efc27766768213e908b4af5c
MD5 SHA1 SHA512

NSIS installer

installer

Family.jpg

SHA256 c982cce3c4bd93c2bae762016a920d8d2dad8d2c20340da0bd619ac7ecd65000
MD5 140b0ec4f169706af0ae4d0cabcb79df
SHA1 5d85bd65ca21b4d2a6265d3b7b6e25b7570b6e03
SHA512 5f61f5a768f86370a43c34f7e44100dc41891f3eb0f43b9dd6ec0b46315f4df648deffb92e634717518747664882ce4ea35f9e453631037c61f0b22ef7962fcf
MD5 SHA1 SHA512

NSIS installer

installer

Green.jpg

SHA256 eb581935658c6e96ab0a21ef6935807feccabbd4381adca5f5f58a4b08e1233f
MD5 f41cb54bf40a47b2ed839edcf1cbd36c
SHA1 880e6e3264abd6ad27ee7d226f7a8fa9b571abd0
SHA512 2a9b34a571ad18f27db10fa81dac84f21ef7120ef9050468fb3367388a7f98decd3e967c550b86107d4e8aea5bdddd8c418966433776d98fe07c33d58011987b
MD5 SHA1 SHA512

NSIS installer

installer

KuWo.jpg

SHA256 3b001a308569b57e7f78bea5861d30c050e6c9c7643722fcb3eec73e14ae6db6
MD5 e73b831d36928c246136a5a160d9a91b
SHA1 da52ce71608f57c58771ac654663faec83a8dc5b
SHA512 59db04683fd3aa30491271396bad9831a5390e5a53312c26929b53475ae2a5427e390768534cc05017499876916385bed0316859866dba78560618ad37b21d0d
MD5 SHA1 SHA512

NSIS installer

installer

Universe.jpg

SHA256 5ae6d710fbaa302e07fe94c07a65d0e5bd1f7d3c65dbedea0d75db38d1d4454d
MD5 2a01cde548d43f324f59a03060de6abb
SHA1 7678ede87a7646da50e7c8ab5de042701f433981
SHA512 ebae927777e86a769efe9f0c8938ca13f8e6eb0f26bf75abe3d06ee8cbb17d184429aa5ef6d65a4cde6fc448007edc63751f6a500886d90a3e48ce7db82d9267
MD5 SHA1 SHA512

NSIS installer

installer

Water.jpg

SHA256 0543f390b64654017c780c46b6170b750869f30fbdef4beb1d058ee4d7093dc7
MD5 420e9bee855dffca910257a02f96599b
SHA1 e56012bbe537e9319f10948c9c2a592ea7cb15dd
SHA512 3a81f1f90a941dae3d0d5c3a452e83c4dd893224ee136c859d4053bb2e9390acfb391e8c2e776a351f96edd740fb0c8c7b88242f9d27b88ebde5194854a344c3
MD5 SHA1 SHA512

NSIS installer

installer

pink.jpg

SHA256 b05f7f37f792cb7e7003774cf5c3c8b3955d538af782b3422cd6ef86d6725e87
MD5 4d578e8be40062eb60f8698984f4b6b5
SHA1 d68f04ba47ec2456cf5d50930abe4b440dffb699
SHA512 0092fb15ba11258213bc7432a82729158fbc175907850dea872a2d907e21786d3fa1fdac953ee54d5111c13e9d211771731638c36c68646c8b8f5def0b70a9a3
MD5 SHA1 SHA512

NSIS installer

installer

skin/smallerror.bmp

SHA256 c8362fb0574cb0a11ed305e55f2874d77b6677fa758c3eb6bf6bba4bfe5e74a9
MD5 00f05b94cc180a6ec43da7b33046bf5d
SHA1 8f37dc65247abd6b75a172d2040a56327331895a
SHA512 ecc9416046ee35e9017470bd32addfc959688f375934b5ddeac28e487cb4d1b9176187cf546a895611fe3a18854f0e6680c5e12b7d9c952e6e726efbb2272c56
SSDEEP 96:lk6EZvskP1gn6byzVW+rm7m1EgMp4eMyEDfCFQ3q0nnOJ+PmGrW4ZpDnTH/A:lcEYmmGMpVYDDnCGi4r4
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/smallerror.png

SHA256 82dde71512338eafca0337a61fc66db43177685abdb4cb64c2a1a2377b0b8104
MD5 7cb2badc48f8fd8e0c38a0bf52b4f5e5
SHA1 58dd4dac39bd891599a8fab3195e8672ed60d272
SHA512 72dd3bdf8c38be497a780e26a5cadced2c0269f5f62fbaf2d35878d82031bd8483c5b5bfcc2f98892daeeb836c082b4dfead411c05f2d3cb50a573a498e74000
SSDEEP 96:9E0wl59cGCScPt6FenXFAJcL7YVjeDPE8+1harnBsxkAXKwCiWLNjrO:7wyGCScPt6FIXDLcVj8s8+wBsxKwCnE
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/startSR.bmp

SHA256 0ef01fa43b2c7084a0dcf1092e13b0e727a6c34ff43c5ad7ca12f216ec6e48ea
MD5 4dcd901ead5e931f20fd0af7007819d3
SHA1 840a4832c6cdb21997bc47603da762782112dc3d
SHA512 a83ce679658ea1c59962ab6596cf09976f43d4a10d899e76b01978ce9332f958cc697d049543316759a59f95315ea9f8111bbd1b293ddcdb4b5c4c2abfa63e02
SSDEEP 192:DGHHKESE2I+xmTZWia4mZPIOWqm77v4J3FCXXMbH9O:CHC/mTZW7pEUJ3kXXMU
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/switchToLibrary.bmp

SHA256 5ec08a8afec4e1a95495eea0df7846878dc61a14f316840c634b317c1c9f7cfe
MD5 3a89c06198eb3394ef974c7308d43364
SHA1 cca0246d84658c9287357db6e54470893d0ac3fe
SHA512 9ac4328bb1099a2419cf416fbe99c4e16a051c02ccfa6ba9327370ef35c98118051efd2d59b8bbec239c4fdb1c9300ca97cc463d871698f948cfe6b1e9e681cf
SSDEEP 96:ZO6jagtSMdY+KDc9nD4eJRsNhWTBT6FeSX7pblDw1Cwp49SmrEVJlHzj1v:ZOG/Xj9D4VNwTBGISDDwJvvp3t
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

skin/switchToPlayer.bmp

SHA256 cb49b91dca88a8f327562ca965a6201ce931316d00605bcedc25deeb79c29ac3
MD5 52ed01b51697156bcca4df36eca1161e
SHA1 8346447e4c05ccf18b7e1531685094a4cf1fa7c2
SHA512 678847f20c970835f3f090259bb6ea77b26eaebba81df4b75a84b12368cd0c74b2b277b9427a26b1a66ee873e34cdec236ffd90812e38e3bcaf69077a99a33e0
SSDEEP 384:ZG/jBhhhaymwhhh7hhhYh1hhhhhhhhhiChhhhh4pzF1:Mr1
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

ttv.dll

IMPHASH 8ec2fcf98a5536afa27dcaa967255093
SHA256 63ca35f53191ef1b74df8829d44c07fcf6a6afe5a351c0affe25bb3494e77636
MD5 36d6cea5e6c970008c9f243ec69361cc
SHA1 002f43659e9b5139c8886435a398a24fb17d689b
SHA512 9bcc8a2e3cd79e155d7e511c6185b65fb54950f7c21cbd214a947b03df4cb66c538a4b9b1b92ae1573a528b449d37b5ebe645410b2e1f6476aa22a0e766fa2d3
SSDEEP 3072:wp/NpJ3KyZxbE5vWPMcpvDNhf/2Rzp74Voo9TBf5x1sCmYXrQPwWF:wpj51PolwtZxhX2RtMyo9TBz1HEwi
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

114808

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\build2.6.8\Funshion\Rel\symbols\ttv_1.3.1.pdb

ws2_32

ioctlsocket gethostbyname ntohl ntohs select __WSAFDIsSet connect htonl WSAGetLastError htons recv socket closesocket send

kernel32

GetProcAddress ExitThread CreateWaitableTimerA SetWaitableTimer WaitForMultipleObjects SystemTimeToFileTime ResumeThread ResetEvent OpenEventA SetEnvironmentVariableA CompareStringW CreateFileW GetTickCount GetProcessHeap GetCurrentThreadId HeapAlloc CreateEventA CloseHandle HeapFree WaitForSingleObject SetEvent GetSystemTimeAsFileTime DecodePointer EncodePointer EnterCriticalSection LeaveCriticalSection GetTimeFormatA GetDateFormatA GetCommandLineA GetLastError TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent WriteFile GetStdHandle GetModuleFileNameW RaiseException IsProcessorFeaturePresent TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetModuleHandleW SetLastError InterlockedDecrement CreateThread Sleep HeapSize ExitProcess SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType GetStartupInfoW DeleteCriticalSection WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers GetCPInfo GetACP GetOEMCP IsValidCodePage GetTimeZoneInformation GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate HeapDestroy QueryPerformanceCounter GetCurrentProcessId LoadLibraryW RtlUnwind HeapReAlloc WriteConsoleW MultiByteToWideChar SetFilePointer SetStdHandle LCMapStringW GetStringTypeW

Name

.text

Size

169KB

Virtual Size

169KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

41KB

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

8KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

2B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

436B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

13KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

GameIndex.dbf

SHA256 45e9b64ba3dc16e66f5e24379efaa21ded67baa3b0f411982391d9e43a8863e1
MD5 f6af50b6786b915aa69cbf9b5d25d154
SHA1 5708759080245e4d7887aa4384ed76d300186a60
SHA512 4f4939e469a9746a0433d5e072c63c4792a4c9ec85ffdc3b07d501a200532bafc2c37257ffaa8ae1d49f74bda68b585b466c3f8ef390b89c8287d314fd9245d5
SSDEEP 6144:lqUN2P4OIGTEKwS777YfnK7O7S4VSl2Wn0nQ:lqU2EeJO78l2M
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Langs/sh_SH/LC_MESSAGES/pcsx2.mo

SHA256 7612f4deae4b7fab507118b8bec9a53ae1dedbbfffd89041d7027c2245813e14
MD5 39625ed9ca850c7dd8f23045f26752c6
SHA1 75b1b9c7289e464c96dc2cc4a63bd4a0968e06ef
SHA512 5c6103f0e763f452a981641d952413d7e56eeca6832c88ea83ca3f79ae04c2044a9331066856af90852774a509e9d9ab59b26cadd0c0ba8b8863144edcb52e51
SSDEEP 384:A91dHx+p2FObBGL6stUFtV3XK96R/2GszoZgproL:A9vR+p2KBGL6stUFhmoZUC
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

SDL.dll

IMPHASH ec9fe62eb86b21417a6e0762396e2b6d
SHA256 fa4375c7e49c02f2c6f109ca1bc3cd0f8bd15ba1c20c69b63f8d590974bcb0bc
MD5 555a800c952be7793623b994320ee231
SHA1 943fcc480876bad2ba2d5b94335161ee53227a24
SHA512 262f6ab8e12bed448fc62fe31eeb3b1432bd260f11dc1a70f5e9a823882c5abad7d3c0dfcd6cedb5bf06d115ae63416f46131ed5c1c6587002c826a347b8e042
SSDEEP 12288:qu0eE7UKZPK8bmX1brsr6WTYARz39hremoIT4H+GQcyrfeJY:vZE7UKZPK8bmX1bkRz3sZXCo
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

109280

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

winmm

timeBeginPeriod timeGetTime waveOutOpen waveOutPrepareHeader waveOutClose waveOutUnprepareHeader waveOutWrite waveOutGetErrorTextW

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

imm32

ImmReleaseContext ImmSetCompositionStringW ImmNotifyIME ImmGetCompositionStringW ImmGetCandidateListW ImmAssociateContext ImmGetIMEFileNameA ImmGetContext

kernel32

CloseHandle CreateSemaphoreW GetVersionExW GetModuleHandleW SetEnvironmentVariableA GetEnvironmentVariableA VirtualAlloc GetLastError VirtualFree CreateFileW SetErrorMode SetFilePointer ReadFile WriteFile LoadLibraryW GetProcAddress FreeLibrary WaitForSingleObject DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetSystemPowerStatus InterlockedDecrement InterlockedIncrement CreateThread GetCurrentThreadId QueryPerformanceCounter Sleep GlobalUnlock GlobalLock GlobalAlloc CompareStringA GetVersionExA GetCurrentThread FormatMessageW SetThreadPriority WideCharToMultiByte ReleaseSemaphore GetSystemInfo InterlockedExchange ExitProcess InitializeCriticalSectionAndSpinCount OutputDebugStringW VirtualQuery

user32

SetClipboardData EmptyClipboard OpenClipboard GetClipboardData IsClipboardFormatAvailable SetCursor ClipCursor ClientToScreen GetClientRect AdjustWindowRectEx GetMenu GetWindowLongW GetWindowRect GetKeyState ValidateRect GetUpdateRect IsZoomed CallWindowProcW GetPropW PeekMessageW LoadImageW GetClassInfoW MapVirtualKeyW GetKeyboardLayout EnumDisplaySettingsW EnumDisplayDevicesW ChangeDisplaySettingsExW ReleaseDC GetDC SetWindowRgn GetFocus SetWindowLongW SetPropW GetWindowTextW GetWindowTextLengthW SetWindowTextW SendMessageW CreateIconFromResource SetWindowPos ShowWindow GetClipboardSequenceNumber CloseClipboard GetDesktopWindow GetSysColorBrush LoadCursorW RegisterClassW GetMessageW DispatchMessageW TranslateMessage DestroyWindow UnregisterClassW CreateWindowExW DefWindowProcW

gdi32

CreateDIBSection CreateRectRgn CombineRgn SwapBuffers ChoosePixelFormat SetPixelFormat DescribePixelFormat CreateDCW CreateCompatibleDC GetDIBits CreateCompatibleBitmap DeleteObject DeleteDC BitBlt SelectObject

ole32

CoInitializeEx CoCreateInstance CoUninitialize CoInitialize

oleaut32

SysFreeString

SDL_AddEventWatch SDL_AddTimer SDL_AllocFormat SDL_AllocPalette SDL_AllocRW SDL_AtomicCASPtr_ SDL_AtomicCAS_ SDL_AtomicLock SDL_AtomicTryLock SDL_AtomicUnlock SDL_AudioDriverName SDL_AudioInit SDL_AudioQuit SDL_BlitScaled SDL_BuildAudioCVT SDL_ClearError SDL_ClearHints SDL_CloseAudio SDL_CloseAudioDevice SDL_ConvertAudio SDL_ConvertPixels SDL_ConvertSurface SDL_ConvertSurfaceFormat SDL_CreateCursor SDL_CreateMutex SDL_CreateRGBSurface SDL_CreateRGBSurfaceFrom SDL_CreateRenderer SDL_CreateSemaphore SDL_CreateShapedWindow SDL_CreateSoftwareRenderer SDL_CreateTexture SDL_CreateTextureFromSurface SDL_CreateThread SDL_CreateWindow SDL_CreateWindowFrom SDL_CreateYUVOverlay SDL_DelEventWatch SDL_Delay SDL_DestroyMutex SDL_DestroyRenderer SDL_DestroySemaphore SDL_DestroyTexture SDL_DestroyWindow SDL_DisableScreenSaver SDL_DisplayFormat SDL_DisplayFormatAlpha SDL_DisplayYUVOverlay SDL_EnableKeyRepeat SDL_EnableScreenSaver SDL_EnableUNICODE SDL_EnclosePoints SDL_Error SDL_EventState SDL_FillRect SDL_FillRects SDL_FilterEvents SDL_Flip SDL_FlushEvent SDL_FlushEvents SDL_FreeCursor SDL_FreeFormat SDL_FreePalette SDL_FreeRW SDL_FreeSurface SDL_FreeWAV SDL_FreeYUVOverlay SDL_GL_CreateContext SDL_GL_DeleteContext SDL_GL_ExtensionSupported SDL_GL_GetAttribute SDL_GL_GetProcAddress SDL_GL_GetSwapInterval SDL_GL_LoadLibrary SDL_GL_MakeCurrent SDL_GL_SetAttribute SDL_GL_SetSwapInterval SDL_GL_SwapBuffers SDL_GL_SwapWindow SDL_GL_UnloadLibrary SDL_GetAppState SDL_GetAssertionReport SDL_GetAudioDeviceName SDL_GetAudioDeviceStatus SDL_GetAudioDriver SDL_GetAudioStatus SDL_GetCPUCacheLineSize SDL_GetCPUCount SDL_GetClipRect SDL_GetClipboardText SDL_GetClosestDisplayMode SDL_GetColorKey SDL_GetCurrentAudioDriver SDL_GetCurrentDisplayMode SDL_GetCurrentVideoDriver SDL_GetCursor SDL_GetDesktopDisplayMode SDL_GetDisplayBounds SDL_GetDisplayMode SDL_GetError SDL_GetEventFilter SDL_GetFinger SDL_GetGammaRamp SDL_GetHint SDL_GetKeyFromScancode SDL_GetKeyName SDL_GetKeyRepeat SDL_GetKeyboardFocus SDL_GetKeyboardState SDL_GetModState SDL_GetMouseFocus SDL_GetMouseState SDL_GetNumAudioDevices SDL_GetNumAudioDrivers SDL_GetNumDisplayModes SDL_GetNumRenderDrivers SDL_GetNumVideoDisplays SDL_GetNumVideoDrivers SDL_GetPixelFormatName SDL_GetPlatform SDL_GetPowerInfo SDL_GetRGB SDL_GetRGBA SDL_GetRelativeMouseMode SDL_GetRelativeMouseState SDL_GetRenderDrawBlendMode SDL_GetRenderDrawColor SDL_GetRenderDriverInfo SDL_GetRendererInfo SDL_GetRevision SDL_GetRevisionNumber SDL_GetScancodeFromKey SDL_GetScancodeName SDL_GetShapedWindowMode SDL_GetSurfaceAlphaMod SDL_GetSurfaceBlendMode SDL_GetSurfaceColorMod SDL_GetTextureAlphaMod SDL_GetTextureBlendMode SDL_GetTextureColorMod SDL_GetThreadID SDL_GetTicks SDL_GetTouch SDL_GetVersion SDL_GetVideoDriver SDL_GetVideoInfo SDL_GetVideoSurface SDL_GetWMInfo SDL_GetWindowData SDL_GetWindowDisplay SDL_GetWindowDisplayMode SDL_GetWindowFlags SDL_GetWindowFromID SDL_GetWindowGrab SDL_GetWindowID SDL_GetWindowPixelFormat SDL_GetWindowPosition SDL_GetWindowSize SDL_GetWindowSurface SDL_GetWindowTitle SDL_GetWindowWMInfo SDL_HapticClose SDL_HapticDestroyEffect SDL_HapticEffectSupported SDL_HapticGetEffectStatus SDL_HapticIndex SDL_HapticName SDL_HapticNewEffect SDL_HapticNumAxes SDL_HapticNumEffects SDL_HapticNumEffectsPlaying SDL_HapticOpen SDL_HapticOpenFromJoystick SDL_HapticOpenFromMouse SDL_HapticOpened SDL_HapticPause SDL_HapticQuery SDL_HapticRumbleInit SDL_HapticRumblePlay SDL_HapticRumbleStop SDL_HapticRumbleSupported SDL_HapticRunEffect SDL_HapticSetAutocenter SDL_HapticSetGain SDL_HapticStopAll SDL_HapticStopEffect SDL_HapticUnpause SDL_HapticUpdateEffect SDL_HasClipboardText SDL_HasEvent SDL_HasEvents SDL_HasIntersection SDL_HasMMX SDL_HasRDTSC SDL_HasSSE SDL_HasSSE2 SDL_HasSSE3 SDL_HasSSE41 SDL_HasSSE42 SDL_HideWindow SDL_Init SDL_InitSubSystem SDL_IntersectRect SDL_IntersectRectAndLine SDL_IsScreenSaverEnabled SDL_IsShapedWindow SDL_JoystickClose SDL_JoystickEventState SDL_JoystickGetAxis SDL_JoystickGetBall SDL_JoystickGetButton SDL_JoystickGetHat SDL_JoystickIndex SDL_JoystickIsHaptic SDL_JoystickName SDL_JoystickNumAxes SDL_JoystickNumBalls SDL_JoystickNumButtons SDL_JoystickNumHats SDL_JoystickOpen SDL_JoystickOpened SDL_JoystickUpdate SDL_Linked_Version SDL_ListModes SDL_LoadBMP_RW SDL_LoadDollarTemplates SDL_LoadFunction SDL_LoadObject SDL_LoadWAV_RW SDL_LockAudio SDL_LockAudioDevice SDL_LockSurface SDL_LockTexture SDL_LockYUVOverlay SDL_Log SDL_LogCritical SDL_LogDebug SDL_LogError SDL_LogGetOutputFunction SDL_LogGetPriority SDL_LogInfo SDL_LogMessage SDL_LogMessageV SDL_LogResetPriorities SDL_LogSetAllPriority SDL_LogSetOutputFunction SDL_LogSetPriority SDL_LogVerbose SDL_LogWarn SDL_LowerBlit SDL_MapRGB SDL_MapRGBA SDL_MasksToPixelFormatEnum SDL_MaximizeWindow SDL_MinimizeWindow SDL_MixAudio SDL_MixAudioFormat SDL_MouseIsHaptic SDL_NumHaptics SDL_NumJoysticks SDL_OpenAudio SDL_OpenAudioDevice SDL_PauseAudio SDL_PauseAudioDevice SDL_PeepEvents SDL_PixelFormatEnumToMasks SDL_PollEvent SDL_PumpEvents SDL_PushEvent SDL_QueryTexture SDL_Quit SDL_QuitSubSystem SDL_RWFromConstMem SDL_RWFromFP SDL_RWFromFile SDL_RWFromMem SDL_RaiseWindow SDL_ReadBE16 SDL_ReadBE32 SDL_ReadBE64 SDL_ReadLE16 SDL_ReadLE32 SDL_ReadLE64 SDL_RecordGesture SDL_RegisterEvents SDL_RemoveTimer SDL_RenderClear SDL_RenderCopy SDL_RenderDrawLine SDL_RenderDrawLines SDL_RenderDrawPoint SDL_RenderDrawPoints SDL_RenderDrawRect SDL_RenderDrawRects SDL_RenderFillRect SDL_RenderFillRects SDL_RenderGetViewport SDL_RenderPresent SDL_RenderReadPixels SDL_RenderSetViewport SDL_ReportAssertion SDL_ResetAssertionReport SDL_RestoreWindow SDL_SaveAllDollarTemplates SDL_SaveBMP_RW SDL_SaveDollarTemplate SDL_SemPost SDL_SemTryWait SDL_SemValue SDL_SemWait SDL_SemWaitTimeout SDL_SetAlpha SDL_SetAssertionHandler SDL_SetClipRect SDL_SetClipboardText SDL_SetColorKey SDL_SetColors SDL_SetCursor SDL_SetError SDL_SetEventFilter SDL_SetGamma SDL_SetGammaRamp SDL_SetHint SDL_SetHintWithPriority SDL_SetModState SDL_SetPalette SDL_SetPaletteColors SDL_SetPixelFormatPalette SDL_SetRelativeMouseMode SDL_SetRenderDrawBlendMode SDL_SetRenderDrawColor SDL_SetSurfaceAlphaMod SDL_SetSurfaceBlendMode SDL_SetSurfaceColorMod SDL_SetSurfacePalette SDL_SetSurfaceRLE SDL_SetTextInputRect SDL_SetTextureAlphaMod SDL_SetTextureBlendMode SDL_SetTextureColorMod SDL_SetTimer SDL_SetVideoMode SDL_SetWindowData SDL_SetWindowDisplayMode SDL_SetWindowFullscreen SDL_SetWindowGrab SDL_SetWindowIcon SDL_SetWindowPosition SDL_SetWindowShape SDL_SetWindowSize SDL_SetWindowTitle SDL_ShowCursor SDL_ShowWindow SDL_SoftStretch SDL_StartTextInput SDL_StopTextInput SDL_ThreadID SDL_UnionRect SDL_UnloadObject SDL_UnlockAudio SDL_UnlockAudioDevice SDL_UnlockSurface SDL_UnlockTexture SDL_UnlockYUVOverlay SDL_UpdateRect SDL_UpdateRects SDL_UpdateTexture SDL_UpdateWindowSurface SDL_UpdateWindowSurfaceRects SDL_UpperBlit SDL_VideoDriverName SDL_VideoInit SDL_VideoModeOK SDL_VideoQuit SDL_WM_GetCaption SDL_WM_GrabInput SDL_WM_IconifyWindow SDL_WM_SetCaption SDL_WM_SetIcon SDL_WM_ToggleFullScreen SDL_WaitEvent SDL_WaitEventTimeout SDL_WaitThread SDL_WarpMouse SDL_WarpMouseInWindow SDL_WasInit SDL_WriteBE16 SDL_WriteBE32 SDL_WriteBE64 SDL_WriteLE16 SDL_WriteLE32 SDL_WriteLE64 SDL_atan SDL_atan2 SDL_calloc SDL_copysign SDL_cos SDL_fabs SDL_floor SDL_free SDL_getenv SDL_iconv SDL_iconv_close SDL_iconv_open SDL_iconv_string SDL_lltoa SDL_log SDL_ltoa SDL_malloc SDL_memcmp SDL_memcpy SDL_memmove SDL_memset SDL_mutexP SDL_mutexV SDL_pow SDL_putenv SDL_qsort SDL_realloc SDL_scalbn SDL_setenv SDL_sin SDL_snprintf SDL_sqrt SDL_sscanf SDL_strcasecmp SDL_strchr SDL_strcmp SDL_strdup SDL_strlcat SDL_strlcpy SDL_strlen SDL_strlwr SDL_strncasecmp SDL_strncmp SDL_strrchr SDL_strrev SDL_strstr SDL_strtod SDL_strtol SDL_strtoll SDL_strtoul SDL_strtoull SDL_strupr SDL_ulltoa SDL_ultoa SDL_utf8strlcpy SDL_vsnprintf SDL_wcslcat SDL_wcslcpy SDL_wcslen

bios/scph10000.MEC

SHA256 fbbfc6c156266ac7e9afb37f0cc53fb78fadf2f09f580e56b2da57e6539e463b
MD5 3faf7c064a4984f53e2ef5e80ed543bc
SHA1 3f8affbe07024ccd2f5b8374072d0928c583a862
SHA512 d19a596c9b64033e2735ac7138771d53d02625849a58d88db75d7afcce410f756f4c5e33a61f939e09701fa2b6a7c2a7b3dccdef6843e03b4b9136b71e41bf17
MD5 SHA1 SHA512

NSIS installer

installer

bios/scph10000.NVM

SHA256 5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef
MD5 0f343b0931126a20f133d67c2b018a3b
SHA1 60cacbf3d72e1e7834203da608037b1bf83b40e8
SHA512 8efb4f73c5655351c444eb109230c556d39e2c7624e9c11abc9e3fb4b9b9254218cc5085b454a9698d085cfa92198491f07a723be4574adc70617b73eb0b6461
MD5 SHA1 SHA512

NSIS installer

installer

bios/scph10000.bin

SHA256 c4dad3b5c6ad58bce70a47fc332602880f041c0338ac6be89061c928f6919ab1
MD5 acf4730ceb38ac9d8c7d8e21f2614600
SHA1 aea061e6e263fdcc1c4fdbd68553ef78dae74263
SHA512 1ef01ab94d6c75b788ac7fc37f965b3db6c69003faca2a955784fd65c64d898a151d8129367fa42dff22da3377aa376c21c0f28318927998425fcdf74a81d0a1
SSDEEP 49152:F0aOLlQM5NJucyhh5ETm8tXP/D4S7Z3540ze2TIMQfV6E:F0aYu/hh5x0V35xihBVV
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

cg.dll

IMPHASH 8a2ea5949b548e3b10fcced80cb81f2b
SHA256 e8a7f88b2726b13917ba575985f754ab541a294a7d793d810bcea1e8b7a6a313
MD5 ed6eaaf23a5999db8695d7295841bf66
SHA1 4bde5739165e643bea06c2ef9e850f2b68040c58
SHA512 41ae54d01545c89bba5258115ef7404a53ae43b5aa58998155cd67119efb08044a884f8ebbf3538e5f2593e9542ba32045b7e55d2a1a58e09ef074fa57b8aafa
SSDEEP 49152:GTeb0GtMaUIENJqAN0liMx24BxUMwOUVP:G6b0QMAENJr6liMx2gw
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

1697811

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

d:\bld\cg\rel2.2\src\cglang\runtime\bin\Windows_vc8_release\cg.pdb

kernel32

EnterCriticalSection DeleteCriticalSection InitializeCriticalSection LeaveCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter GetLastError HeapFree HeapAlloc GetProcAddress GetModuleHandleA ExitProcess HeapReAlloc GetCurrentThreadId GetCommandLineA GetVersionExA GetProcessHeap RtlUnwind TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement Sleep HeapSize WriteFile GetStdHandle GetModuleFileNameA HeapDestroy HeapCreate VirtualFree VirtualAlloc SetHandleCount GetFileType GetStartupInfoA TerminateProcess GetCurrentProcess IsDebuggerPresent LoadLibraryA MultiByteToWideChar ReadFile SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringA LCMapStringW CloseHandle FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException GetLocaleInfoA CreateFileA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW GetStringTypeA GetStringTypeW SetEndOfFile VirtualQuery

??0cgiArgs@@QAE@ABU0@@Z ??0cgiArgs@@QAE@PAPBD@Z ??0cgiRefCount@@QAE@ABU0@@Z ??0cgiRefCount@@QAE@XZ ??0cgiStringSet@@QAE@PBDD@Z ??1cgiArgs@@QAE@XZ ??1cgiRefCount@@MAE@XZ ??1cgiStringSet@@QAE@XZ ??2cgiBinding@@SAPAXI@Z ??2cgiBindingList@@SAPAXI@Z ??3cgiBinding@@SAXPAX@Z ??3cgiBindingList@@SAXPAX@Z ??4cgiArgs@@QAEAAU0@ABU0@@Z ??4cgiRefCount@@QAEAAU0@ABU0@@Z ??AcgiStringSet@@QBEPBDI@Z ??_7cgiRefCount@@6B@ ??_FcgiArgs@@QAEXXZ ??_FcgiStringSet@@QAEXXZ ?Ref@cgiRefCount@@QAEXXZ ?UnRef@cgiRefCount@@QAEXXZ ?at@cgiStringSet@@QBEPBDI@Z ?begin@cgiStringSet@@QBEPAPBDXZ ?c_array@cgiArgs@@QBEPAPBDXZ ?clear@cgiArgs@@QAEXXZ ?end@cgiStringSet@@QBEPAPBDXZ ?find@cgiStringSet@@QBEPAPBDPBD@Z ?getProgramInput@cgiProgram@@QAE?AW4CGenum@@XZ ?getProgramOutput@cgiProgram@@QAE?AW4CGenum@@XZ ?getProgramOutputVertices@cgiProgram@@QAEHXZ ?null@cgiArgs@@2U1@B ?onProgramLoad@cgiProgram@@QAEXXZ ?printf@cgiArgs@@QAAXPBDZZ ?push_back@cgiArgs@@QAEXABU1@@Z ?push_back@cgiArgs@@QAEXABVstring@nvstd@@@Z ?push_back@cgiArgs@@QAEXPBD@Z ?reset@cgiStringSet@@QAEXPBDD@Z ?size@cgiArgs@@QBEIXZ ?size@cgiStringSet@@QBEIXZ cgAddStateEnumerant cgCallStateResetCallback cgCallStateSetCallback cgCallStateValidateCallback cgCombinePrograms cgCombinePrograms2 cgCombinePrograms3 cgCompileProgram cgConnectParameter cgCopyEffect cgCopyProgram cgCreateArraySamplerState cgCreateArrayState cgCreateBuffer cgCreateContext cgCreateEffect cgCreateEffectAnnotation cgCreateEffectFromFile cgCreateEffectParameter cgCreateEffectParameterArray cgCreateEffectParameterMultiDimArray cgCreateObj cgCreateObjFromFile cgCreateParameter cgCreateParameterAnnotation cgCreateParameterArray cgCreateParameterMultiDimArray cgCreatePass cgCreatePassAnnotation cgCreateProgram cgCreateProgramAnnotation cgCreateProgramFromEffect cgCreateProgramFromFile cgCreateSamplerState cgCreateSamplerStateAssignment cgCreateState cgCreateStateAssignment cgCreateStateAssignmentIndex cgCreateTechnique cgCreateTechniqueAnnotation cgDestroyBuffer cgDestroyContext cgDestroyEffect cgDestroyObj cgDestroyParameter cgDestroyProgram cgDisconnectParameter cgEvaluateProgram cgGetAnnotationName cgGetAnnotationType cgGetArrayDimension cgGetArrayParameter cgGetArraySize cgGetArrayTotalSize cgGetArrayType cgGetAutoCompile cgGetBoolAnnotationValues cgGetBoolStateAssignmentValues cgGetBooleanAnnotationValues cgGetBufferSize cgGetCompilerIncludeCallback cgGetConnectedParameter cgGetConnectedStateAssignmentParameter cgGetConnectedToParameter cgGetDependentAnnotationParameter cgGetDependentStateAssignmentParameter cgGetDomain cgGetDomainString cgGetEffectContext cgGetEffectName cgGetEffectParameterBySemantic cgGetEnum cgGetEnumString cgGetError cgGetErrorCallback cgGetErrorHandler cgGetErrorString cgGetFirstDependentParameter cgGetFirstEffect cgGetFirstEffectAnnotation cgGetFirstEffectParameter cgGetFirstError cgGetFirstLeafEffectParameter cgGetFirstLeafParameter cgGetFirstParameter cgGetFirstParameterAnnotation cgGetFirstPass cgGetFirstPassAnnotation cgGetFirstProgram cgGetFirstProgramAnnotation cgGetFirstSamplerState cgGetFirstSamplerStateAssignment cgGetFirstState cgGetFirstStateAssignment cgGetFirstStructParameter cgGetFirstTechnique cgGetFirstTechniqueAnnotation cgGetFloatAnnotationValues cgGetFloatStateAssignmentValues cgGetIntAnnotationValues cgGetIntStateAssignmentValues cgGetLastErrorString cgGetLastListing cgGetLockingPolicy cgGetMatrixParameterOrder cgGetMatrixParameterdc cgGetMatrixParameterdr cgGetMatrixParameterfc cgGetMatrixParameterfr cgGetMatrixParameteric cgGetMatrixParameterir cgGetMatrixSize cgGetNamedEffect cgGetNamedEffectAnnotation cgGetNamedEffectParameter cgGetNamedParameter cgGetNamedParameterAnnotation cgGetNamedPass cgGetNamedPassAnnotation cgGetNamedProgramAnnotation cgGetNamedProgramParameter cgGetNamedSamplerState cgGetNamedSamplerStateAssignment cgGetNamedState cgGetNamedStateAssignment cgGetNamedStructParameter cgGetNamedSubParameter cgGetNamedTechnique cgGetNamedTechniqueAnnotation cgGetNamedUserType cgGetNextAnnotation cgGetNextEffect cgGetNextLeafParameter cgGetNextParameter cgGetNextPass cgGetNextProgram cgGetNextState cgGetNextStateAssignment cgGetNextTechnique cgGetNumConnectedToParameters cgGetNumDependentAnnotationParameters cgGetNumDependentStateAssignmentParameters cgGetNumParentTypes cgGetNumProgramDomains cgGetNumStateEnumerants cgGetNumSupportedProfiles cgGetNumUserTypes cgGetParameterBaseResource cgGetParameterBaseType cgGetParameterBufferIndex cgGetParameterBufferOffset cgGetParameterClass cgGetParameterClassEnum cgGetParameterClassString cgGetParameterColumns cgGetParameterContext cgGetParameterDefaultValuedc cgGetParameterDefaultValuedr cgGetParameterDefaultValuefc cgGetParameterDefaultValuefr cgGetParameterDefaultValueic cgGetParameterDefaultValueir cgGetParameterDirection cgGetParameterEffect cgGetParameterIndex cgGetParameterName cgGetParameterNamedType cgGetParameterOrdinalNumber cgGetParameterProgram cgGetParameterResource cgGetParameterResourceIndex cgGetParameterResourceName cgGetParameterResourceSize cgGetParameterResourceType cgGetParameterRows cgGetParameterSemantic cgGetParameterSettingMode cgGetParameterType cgGetParameterValuedc cgGetParameterValuedr cgGetParameterValuefc cgGetParameterValuefr cgGetParameterValueic cgGetParameterValueir cgGetParameterValues cgGetParameterVariability cgGetParentType cgGetPassName cgGetPassProgram cgGetPassTechnique cgGetProfile cgGetProfileDomain cgGetProfileProperty cgGetProfileString cgGetProgramBuffer cgGetProgramBufferMaxIndex cgGetProgramBufferMaxSize cgGetProgramContext cgGetProgramDomain cgGetProgramDomainProfile cgGetProgramDomainProgram cgGetProgramInput cgGetProgramOptions cgGetProgramOutput cgGetProgramProfile cgGetProgramStateAssignmentValue cgGetProgramString cgGetResource cgGetResourceString cgGetSamplerStateAssignmentParameter cgGetSamplerStateAssignmentState cgGetSamplerStateAssignmentValue cgGetSemanticCasePolicy cgGetStateAssignmentIndex cgGetStateAssignmentPass cgGetStateAssignmentState cgGetStateContext cgGetStateEnumerant cgGetStateEnumerantName cgGetStateEnumerantValue cgGetStateLatestProfile cgGetStateName cgGetStateResetCallback cgGetStateSetCallback cgGetStateType cgGetStateValidateCallback cgGetString cgGetStringAnnotationValue cgGetStringAnnotationValues cgGetStringParameterValue cgGetStringStateAssignmentValue cgGetSupportedProfile cgGetTechniqueEffect cgGetTechniqueName cgGetTextureStateAssignmentValue cgGetType cgGetTypeBase cgGetTypeClass cgGetTypeSizes cgGetTypeString cgGetUserType cgIsAnnotation cgIsContext cgIsEffect cgIsInterfaceType cgIsParameter cgIsParameterGlobal cgIsParameterReferenced cgIsParameterUsed cgIsParentType cgIsPass cgIsProfileSupported cgIsProgram cgIsProgramCompiled cgIsState cgIsStateAssignment cgIsTechnique cgIsTechniqueValidated cgMapBuffer cgResetPassState cgSetArraySize cgSetAutoCompile cgSetBoolAnnotation cgSetBoolArrayStateAssignment cgSetBoolStateAssignment cgSetBufferData cgSetBufferSubData cgSetCompilerIncludeCallback cgSetCompilerIncludeFile cgSetCompilerIncludeString cgSetEffectName cgSetErrorCallback cgSetErrorHandler cgSetFloatAnnotation cgSetFloatArrayStateAssignment cgSetFloatStateAssignment cgSetIntAnnotation cgSetIntArrayStateAssignment cgSetIntStateAssignment cgSetLastListing cgSetLockingPolicy cgSetMatrixParameterdc cgSetMatrixParameterdr cgSetMatrixParameterfc cgSetMatrixParameterfr cgSetMatrixParameteric cgSetMatrixParameterir cgSetMultiDimArraySize cgSetParameter1d cgSetParameter1dv cgSetParameter1f cgSetParameter1fv cgSetParameter1i cgSetParameter1iv cgSetParameter2d cgSetParameter2dv cgSetParameter2f cgSetParameter2fv cgSetParameter2i cgSetParameter2iv cgSetParameter3d cgSetParameter3dv cgSetParameter3f cgSetParameter3fv cgSetParameter3i cgSetParameter3iv cgSetParameter4d cgSetParameter4dv cgSetParameter4f cgSetParameter4fv cgSetParameter4i cgSetParameter4iv cgSetParameterSemantic cgSetParameterSettingMode cgSetParameterValuedc cgSetParameterValuedr cgSetParameterValuefc cgSetParameterValuefr cgSetParameterValueic cgSetParameterValueir cgSetParameterVariability cgSetPassProgramParameters cgSetPassState cgSetProgramBuffer cgSetProgramProfile cgSetProgramStateAssignment cgSetSamplerState cgSetSamplerStateAssignment cgSetSemanticCasePolicy cgSetStateCallbacks cgSetStateLatestProfile cgSetStringAnnotation cgSetStringParameterValue cgSetStringStateAssignment cgSetTextureStateAssignment cgUnmapBuffer cgUpdatePassParameters cgUpdateProgramParameters cgValidateTechnique cgiAcquireWriteLock cgiAddCleanupCallback cgiAssignGLSLProgramTextureResources cgiCheckForInvalidProfileProgram cgiChopStringArrayReference cgiClearLastError cgiCreateBuffer cgiDispatchResetSamplerStates cgiDispatchSetSamplerStates cgiGetArrayDim cgiGetArrayParameter cgiGetArraySize cgiGetBoolStateAssignmentValues cgiGetBuffer cgiGetConnectedParameter cgiGetConnectedToParameter cgiGetErrorCallback cgiGetFirstDependentParameter cgiGetFirstLeafParameter cgiGetFirstSamplerStateAssignment cgiGetFirstStructParameter cgiGetFloatStateAssignmentValues cgiGetIntStateAssignmentValues cgiGetLeafParameterValues cgiGetLinkedParams cgiGetMatrixParameterArrayd cgiGetMatrixParameterArrayf cgiGetMatrixSize cgiGetNamedEffectParameter cgiGetNextLeafParameter cgiGetNextParameter cgiGetNextStateAssignment cgiGetNumConnectedToParameters cgiGetNumParentTypes cgiGetNumStateAssignmentValues cgiGetParamById cgiGetParameterArrayd cgiGetParameterArrayf cgiGetParameterBaseResource cgiGetParameterBaseType cgiGetParameterBufferIndex cgiGetParameterBufferOffset cgiGetParameterCachedValues cgiGetParameterClass cgiGetParameterDefaultValues cgiGetParameterDefaultValuesf cgiGetParameterDefaultValuesi cgiGetParameterDirection cgiGetParameterEffect cgiGetParameterName cgiGetParameterProfile cgiGetParameterProgram cgiGetParameterResource cgiGetParameterResourceIndex cgiGetParameterType cgiGetParameterValues cgiGetParameterValuesf cgiGetParameterValuesi cgiGetParameterVariability cgiGetParentType cgiGetPassById cgiGetPassProgram cgiGetProfile cgiGetProfileCallbacks cgiGetProfileDomain cgiGetProfileName cgiGetProfileString cgiGetProgramBuffer cgiGetProgramById cgiGetProgramCachedParameters cgiGetProgramContext cgiGetProgramEntry cgiGetProgramProfile cgiGetProgramProfileObject cgiGetProgramStateAssignmentValue cgiGetProgramString cgiGetResourceName cgiGetSamplerStateAssignmentParameter cgiGetSamplerStateAssignmentValue cgiGetStateAssignment cgiGetStateAssignmentByName cgiGetStateAssignmentDependentParameters cgiGetStateAssignmentIndex cgiGetStringStateAssignmentValue cgiGetTextureStateAssignmentValue cgiGetType cgiGetTypeBase cgiGetTypeClass cgiGetTypeName cgiGetTypeSizes cgiGetTypeString cgiHandleToContext cgiHandleToLeafParam cgiHandleToParam cgiHandleToProgram cgiInitialize cgiInvalidateTechnique cgiIsInterfaceType cgiIsParameterReferenced cgiIsParameterUsed cgiIsParameterUsedInProgram cgiIsParentType cgiIsProgramCompiled cgiIsTextureType cgiMarkProgramAsUncompiled cgiPopBoundProgram cgiPushBoundProgram cgiRegisterState cgiRegisterStateEnum cgiReleaseWriteLock cgiRemoveProgramProfileObject cgiResourceToStr cgiSetContextDispatcher cgiSetError cgiSetErrorCallback cgiSetMatrixParameterArrayd cgiSetMatrixParameterArrayf cgiSetParamProfileCallbacks cgiSetParameterArrayd cgiSetParameterArrayf cgiSetParameterError cgiSetProfileCallbacks cgiSetProfileOptions cgiSetProgramError cgiSetProgramProfileObject cgiSetProgramVMParameters cgiSetUnloadProgramCallback cgiToStateId cgiUpdateProgramParameters cgihCompileProgram cgihConnectParameter cgihCreateArraySamplerState cgihGetAutoCompile cgihGetFirstParameter cgihGetFirstPass cgihGetFirstStateAssignment cgihGetFirstStructParameter cgihGetLastListing cgihGetNamedEffectParameter cgihGetNextParameter cgihGetNextPass cgihGetNextStateAssignment cgihGetParameterDirection cgihGetParameterName cgihGetParameterOrdinalNumber cgihGetParameterType cgihGetParameterVariability cgihGetProgramContext cgihGetProgramProfile cgihSetAutoCompile

cgGL.dll

IMPHASH 07ff71c561fe13265cc75f2ba57d54b6
SHA256 628464c7c978b900e49d7f44ea816546677544b75353f1dc3f9385b91ec77d87
MD5 620523a171500a4553e3212554cd3708
SHA1 8467b04488116f1e23d441492b94a34e47b772e1
SHA512 fc3963a0c7f034fbf8d5066fc52a43d1fbccfa6137dd7e2a91e84ca49d4e8322ff0b592353f29599e0618272285f2b7ccadc58a758fbc187169c401912a8044b
SSDEEP 3072:4GNjy+JlHgizNiCgHHFKkYExfBnbZrNp/xZ30FqUtGP9N9vtG+RCQ4IHe9rt8VQ2:jNjy+JvNidl5p/xDAY9Pvth4Z4
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

149623

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

d:\bld\cg\rel2.2\src\cglang\runtime\bin\Windows_vc8_release\cgGL.pdb

cg

cgGetProfileDomain cgiGetParameterBaseType ?getProgramInput@cgiProgram@@QAE?AW4CGenum@@XZ ?getProgramOutput@cgiProgram@@QAE?AW4CGenum@@XZ ?getProgramOutputVertices@cgiProgram@@QAEHXZ cgiGetParameterName cgihGetNextParameter cgGetFirstDependentParameter cgiGetParameterValuesf cgiGetParameterDefaultValuesf cgiGetTypeBase ??4cgiArgs@@QAEAAU0@ABU0@@Z cgiGetProgramString cgiSetProgramError cgiRemoveProgramProfileObject ??1cgiArgs@@QAE@XZ ?clear@cgiArgs@@QAEXXZ cgiSetProgramProfileObject ?printf@cgiArgs@@QAAXPBDZZ ?c_array@cgiArgs@@QBEPAPBDXZ cgiGetProgramProfile cgiGetParameterValuesi cgiGetParameterCachedValues cgiSetProfileOptions cgiGetProgramProfileObject ??0cgiArgs@@QAE@PAPBD@Z cgiAssignGLSLProgramTextureResources cgiGetConnectedParameter cgiGetSamplerStateAssignmentValue cgihCompileProgram cgSetStateLatestProfile cgiSetErrorCallback cgiRegisterStateEnum cgiSetContextDispatcher cgSetLastListing cgiSetProgramVMParameters cgiGetProfileString cgiGetProgramStateAssignmentValue cgiGetSamplerStateAssignmentParameter cgiIsProgramCompiled cgiGetNumStateAssignmentValues cgiToStateId cgiGetFloatStateAssignmentValues cgiGetIntStateAssignmentValues cgGetError cgiGetErrorCallback cgiGetBoolStateAssignmentValues cgiRegisterState cgiCheckForInvalidProfileProgram cgiCreateBuffer cgiGetParameterResource ??0cgiStringSet@@QAE@PBDD@Z ??1cgiStringSet@@QAE@XZ ?find@cgiStringSet@@QBEPAPBDPBD@Z cgiSetError cgGetMatrixParameterfc ??_7cgiRefCount@@6B@ cgiAddCleanupCallback cgSetParameter4dv cgGetProfile cgSetParameter2dv cgiSetUnloadProgramCallback cgSetMatrixParameterdr cgiGetProfileCallbacks cgSetParameter2d cgiGetMatrixParameterArrayf cgSetMatrixParameterfc cgiSetParameterArrayd cgiAcquireWriteLock cgiSetMatrixParameterArrayd cgiGetParameterBaseResource cgSetParameter4fv cgSetParameter2fv cgiGetProgramCachedParameters cgGetMatrixParameterdr cgiUpdateProgramParameters cgiSetParameterError cgiGetParameterDirection cgGetMatrixParameterdc cgiGetProgramContext cgiHandleToLeafParam cgiGetParameterType ?UnRef@cgiRefCount@@QAEXXZ cgiPopBoundProgram cgSetParameter3fv cgSetMatrixParameterdc cgSetSamplerState cgiPushBoundProgram cgiHandleToParam cgiGetParameterVariability cgiIsTextureType cgiGetParameterArrayd cgiInvalidateTechnique cgGetParameterValuefr cgiSetParameterArrayf cgiSetMatrixParameterArrayf cgiGetBuffer cgGetParameterValuedr cgSetParameter1f cgiGetParameterArrayf cgSetParameter3f cgSetParameter1d cgiGetLinkedParams cgSetParameter3dv cgSetParameter4f cgiGetArraySize cgGetMatrixParameterfr cgiIsParameterReferenced cgSetParameter1fv cgihGetParameterType cgiGetParameterProgram cgSetParameter4d cgiHandleToProgram cgSetMatrixParameterfr cgiReleaseWriteLock cgSetParameter3d cgiSetProfileCallbacks cgiGetMatrixSize ?onProgramLoad@cgiProgram@@QAEXXZ cgiGetMatrixParameterArrayd cgSetParameter2f cgiGetParameterResourceIndex cgSetParameter1dv

opengl32

glTexEnvf glColor4fv glDisableClientState glVertex2f glEnableClientState glVertex3fv glColor3fv glVertex4fv glNormal3f glColor3f glNormal3fv glVertex2fv glLineStipple glPolygonMode glLightModeliv glMaterialf glFrontFace glLogicOp glClearColor glTexEnvfv glTexGeni glTexParameterfv glStencilFunc glClipPlane glPolygonOffset glDepthFunc glEnable glAlphaFunc glStencilOp glLightfv glMaterialfv glClearStencil glClearDepth glTexParameteri glLoadMatrixf glFogf glLineWidth glPointSize glFogfv glGetIntegerv glBindTexture glGetDoublev glGetFloatv wglGetCurrentDC wglGetProcAddress glGetString glVertexPointer wglGetCurrentContext glTexCoordPointer glGetError glDisable glColorPointer glNormalPointer glBlendFunc glTexGenfv glStencilMask glLightf glCullFace glLoadIdentity glColorMaterial glLightModelfv glShadeModel glTexParameterf glFogi glDepthRange glLightModeli glColorMask glScissor glDepthMask glMatrixMode glTexEnvi

kernel32

SetEndOfFile GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA WriteConsoleW GetConsoleOutputCP WriteConsoleA CreateFileA FlushFileBuffers SetStdHandle SetEnvironmentVariableA CompareStringW CompareStringA GetLocaleInfoA GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA IsValidCodePage GetOEMCP GetACP GetCPInfo GetConsoleMode GetConsoleCP ReadFile MultiByteToWideChar RtlUnwind CloseHandle SetFilePointer InitializeCriticalSection LoadLibraryA VirtualAlloc VirtualFree HeapCreate HeapDestroy WideCharToMultiByte HeapSize Sleep IsDebuggerPresent GetCurrentProcess TerminateProcess DeleteCriticalSection GetStartupInfoA GetFileType SetHandleCount InterlockedDecrement SetLastError InterlockedIncrement TlsFree TlsSetValue TlsAlloc TlsGetValue GetModuleFileNameA GetStdHandle WriteFile GetProcessHeap GetVersionExA GetCommandLineA GetCurrentThreadId LeaveCriticalSection EnterCriticalSection HeapReAlloc ExitProcess GetModuleHandleA GetProcAddress SetUnhandledExceptionFilter UnhandledExceptionFilter HeapAlloc HeapFree GetLastError

cgGLBindProgram cgGLCreateBuffer cgGLDisableClientState cgGLDisableProfile cgGLDisableProgramProfiles cgGLDisableTextureParameter cgGLEnableClientState cgGLEnableProfile cgGLEnableProgramProfiles cgGLEnableTextureParameter cgGLGetBufferObject cgGLGetLatestProfile cgGLGetManageTextureParameters cgGLGetMatrixParameterArraydc cgGLGetMatrixParameterArraydr cgGLGetMatrixParameterArrayfc cgGLGetMatrixParameterArrayfr cgGLGetMatrixParameterdc cgGLGetMatrixParameterdr cgGLGetMatrixParameterfc cgGLGetMatrixParameterfr cgGLGetOptimalOptions cgGLGetParameter1d cgGLGetParameter1f cgGLGetParameter2d cgGLGetParameter2f cgGLGetParameter3d cgGLGetParameter3f cgGLGetParameter4d cgGLGetParameter4f cgGLGetParameterArray1d cgGLGetParameterArray1f cgGLGetParameterArray2d cgGLGetParameterArray2f cgGLGetParameterArray3d cgGLGetParameterArray3f cgGLGetParameterArray4d cgGLGetParameterArray4f cgGLGetProgramID cgGLGetTextureEnum cgGLGetTextureParameter cgGLIsProfileSupported cgGLIsProgramLoaded cgGLLoadProgram cgGLRegisterStates cgGLSetDebugMode cgGLSetManageTextureParameters cgGLSetMatrixParameterArraydc cgGLSetMatrixParameterArraydr cgGLSetMatrixParameterArrayfc cgGLSetMatrixParameterArrayfr cgGLSetMatrixParameterdc cgGLSetMatrixParameterdr cgGLSetMatrixParameterfc cgGLSetMatrixParameterfr cgGLSetOptimalOptions cgGLSetParameter1d cgGLSetParameter1dv cgGLSetParameter1f cgGLSetParameter1fv cgGLSetParameter2d cgGLSetParameter2dv cgGLSetParameter2f cgGLSetParameter2fv cgGLSetParameter3d cgGLSetParameter3dv cgGLSetParameter3f cgGLSetParameter3fv cgGLSetParameter4d cgGLSetParameter4dv cgGLSetParameter4f cgGLSetParameter4fv cgGLSetParameterArray1d cgGLSetParameterArray1f cgGLSetParameterArray2d cgGLSetParameterArray2f cgGLSetParameterArray3d cgGLSetParameterArray3f cgGLSetParameterArray4d cgGLSetParameterArray4f cgGLSetParameterPointer cgGLSetStateMatrixParameter cgGLSetTextureParameter cgGLSetupSampler cgGLUnbindProgram cgGLUnloadProgram

cheats/DE37E046.pnach

SHA256 e36b04a997f4b6e966f2f4f14c5a6c552a19144a952a0e0649daea9df1fae2b2
MD5 bfc91a02e0a6c7ec2c15d6fcbf43a779
SHA1 c9428c42b92096f2b532423ab2304f0a809d1a15
SHA512 6511670b2fd44311511c2b1e345efc75e4da572d7b3721752dd6f869f80428b4407bfa6b1b572a6666463349e26cfb64b3f34bea1d2ebb8db7ce70cc2242e50a
MD5 SHA1 SHA512

NSIS installer

installer

cudart32_32_16.dll

IMPHASH 3e6ca81b0bcaf7ca480b51552c56c07a
SHA256 7028aaf429735a060f40070ccf639011ed8adc5849587076e411b241b21c0c3c
MD5 fc2e03aa5442624ad53665aaf8960c8c
SHA1 28942b81b7517d1ce14d855ee7a1a52397bcad8a
SHA512 22eba1bb9fc489351714b26c7f926217333a0f4047a7eaa1b69e3f228845575fdbc251fd7d9e806042ea37f20dd07b3d83bdb8ffbec4e928923e023629cf3a89
SSDEEP 6144:qBNRO7+u8BhAi4+Bmg5iv5cIXHHXyDA+6LnF3c+ls+s5j0o:qBNRO7+u8BhAi4+75i9nXyDAzzkj0o
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

7f:74:d7:c7:26:9d:62:c5:7f:ad:c9:1a:8c:ff:d2:ae:a0:ef:c3:5e

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=NVIDIA Corporation,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Software,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US

Chains

Nov 6, 2010

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Serial Number

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

May 21, 2009 - May 20, 2019

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Serial Number

61:0c:12:06:00:00:00:00:00:1b

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

May 23, 2006 - May 23, 2016

Subject

CN=NVIDIA Corporation,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Software,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US

Serial Number

53:4a:be:d0:be:56:d9:84:0d:d1:2d:db:84:f8:b0:31

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 31, 2009 - Sep 1, 2011

Minor OS version

0

Major OS version

5

Entry point

202563

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

__cudaMutexOperation __cudaRegisterFatBinary __cudaRegisterFunction __cudaRegisterShared __cudaRegisterSharedVar __cudaRegisterSurface __cudaRegisterTexture __cudaRegisterVar __cudaSynchronizeThreads __cudaTextureFetch __cudaUnregisterFatBinary cudaBindSurfaceToArray cudaBindTexture cudaBindTexture2D cudaBindTextureToArray cudaChooseDevice cudaConfigureCall cudaCreateChannelDesc cudaD3D10GetDevice cudaD3D10GetDevices cudaD3D10GetDirect3DDevice cudaD3D10MapResources cudaD3D10RegisterResource cudaD3D10ResourceGetMappedArray cudaD3D10ResourceGetMappedPitch cudaD3D10ResourceGetMappedPointer cudaD3D10ResourceGetMappedSize cudaD3D10ResourceGetSurfaceDimensions cudaD3D10ResourceSetMapFlags cudaD3D10SetDirect3DDevice cudaD3D10UnmapResources cudaD3D10UnregisterResource cudaD3D11GetDevice cudaD3D11GetDevices cudaD3D11GetDirect3DDevice cudaD3D11SetDirect3DDevice cudaD3D9Begin cudaD3D9End cudaD3D9GetDevice cudaD3D9GetDevices cudaD3D9GetDirect3DDevice cudaD3D9MapResources cudaD3D9MapVertexBuffer cudaD3D9RegisterResource cudaD3D9RegisterVertexBuffer cudaD3D9ResourceGetMappedArray cudaD3D9ResourceGetMappedPitch cudaD3D9ResourceGetMappedPointer cudaD3D9ResourceGetMappedSize cudaD3D9ResourceGetSurfaceDimensions cudaD3D9ResourceSetMapFlags cudaD3D9SetDirect3DDevice cudaD3D9UnmapResources cudaD3D9UnmapVertexBuffer cudaD3D9UnregisterResource cudaD3D9UnregisterVertexBuffer cudaDriverGetVersion cudaEventCreate cudaEventCreateWithFlags cudaEventDestroy cudaEventElapsedTime cudaEventQuery cudaEventRecord cudaEventSynchronize cudaFree cudaFreeArray cudaFreeHost cudaFuncGetAttributes cudaFuncSetCacheConfig cudaGLMapBufferObject cudaGLMapBufferObjectAsync cudaGLRegisterBufferObject cudaGLSetBufferObjectMapFlags cudaGLSetGLDevice cudaGLUnmapBufferObject cudaGLUnmapBufferObjectAsync cudaGLUnregisterBufferObject cudaGetChannelDesc cudaGetDevice cudaGetDeviceCount cudaGetDeviceProperties cudaGetErrorString cudaGetExportTable cudaGetLastError cudaGetSurfaceReference cudaGetSymbolAddress cudaGetSymbolSize cudaGetTextureAlignmentOffset cudaGetTextureReference cudaGraphicsD3D10RegisterResource cudaGraphicsD3D11RegisterResource cudaGraphicsD3D9RegisterResource cudaGraphicsGLRegisterBuffer cudaGraphicsGLRegisterImage cudaGraphicsMapResources cudaGraphicsResourceGetMappedPointer cudaGraphicsResourceSetMapFlags cudaGraphicsSubResourceGetMappedArray cudaGraphicsUnmapResources cudaGraphicsUnregisterResource cudaHostAlloc cudaHostGetDevicePointer cudaHostGetFlags cudaLaunch cudaMalloc cudaMalloc3D cudaMalloc3DArray cudaMallocArray cudaMallocHost cudaMallocPitch cudaMemGetInfo cudaMemcpy cudaMemcpy2D cudaMemcpy2DArrayToArray cudaMemcpy2DAsync cudaMemcpy2DFromArray cudaMemcpy2DFromArrayAsync cudaMemcpy2DToArray cudaMemcpy2DToArrayAsync cudaMemcpy3D cudaMemcpy3DAsync cudaMemcpyArrayToArray cudaMemcpyAsync cudaMemcpyFromArray cudaMemcpyFromArrayAsync cudaMemcpyFromSymbol cudaMemcpyFromSymbolAsync cudaMemcpyToArray cudaMemcpyToArrayAsync cudaMemcpyToSymbol cudaMemcpyToSymbolAsync cudaMemset cudaMemset2D cudaMemset2DAsync cudaMemset3D cudaMemset3DAsync cudaMemsetAsync cudaPeekAtLastError cudaRuntimeGetVersion cudaSetDevice cudaSetDeviceFlags cudaSetDoubleForDevice cudaSetDoubleForHost cudaSetValidDevices cudaSetupArgument cudaStreamCreate cudaStreamDestroy cudaStreamQuery cudaStreamSynchronize cudaStreamWaitEvent cudaThreadExit cudaThreadGetCacheConfig cudaThreadGetLimit cudaThreadSetCacheConfig cudaThreadSetLimit cudaThreadSynchronize cudaUnbindTexture cudaWGLGetDevice

docs/GPL.html

SHA256 94bf87cc8a19d5b358196dcbb36bd5572f46c098cba69e4a7a13299e6aa2e5db
MD5 085f24c621ac06d62b2962dab53b7530
SHA1 5de17f62ada1851d0d4e1fa0ec84566d66138c36
SHA512 72d73973c043c80a9f833e2c50a409661ade6644778c02225cec84919a7302906f0b856417c7d46437c29641118c4ab39b8d782bd20283e51051b62f74ff5ab5
SSDEEP 768:qBRIcAfDTckZjHhrioy3m0WCrseBLD7k4rqIuJrvuATIv5pqaC1fS8Pq0EA:q4cAJZjM209rDWIu1TSqaC1D1h
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

docs/PCSX2_FAQ_0.9.8.pdf

SHA256 a3ac9114a4ab7413e644a962e6124055be4ef6c49db4ff4cfb5f730a82a7d58e
MD5 a492c3288822c8099bec9dc078bf6384
SHA1 7db33a35142b3f84dad36d66091986125de92132
SHA512 d0ae574433f178dbe58dd689b3eab4a2ed3d047f6c56169b9dd6f8cffc09e0c9f63a1654a3750ccd302bbb15b19ab0d06be43d2d1f7fcad0cf43b69f1e668a1e
SSDEEP 1536:U9IwMcKRsbGTqJ+bxa8YNGIuW85tyj2uU+TNamWUYStF:UFMdxbxg7L86NUKamrz
MD5 SHA1 SHA512 SSDEEP

HTTP links in PDF interactive object

Detects HTTP links in interactive objects within PDF files.

pdf link
NSIS installer

installer

Extracted URLs

file http://forums.pcsx2.net/Forum-Configuration-Guide
file http://forums.pcsx2.net/Thread-Compile-Guide
file http://forums.pcsx2.net/Thread-Guide-to-Dumping-Your-PS2-Bios-over-LAN
file http://forums.pcsx2.net/Thread-How-To-Play-Online-Guide
file http://forums.pcsx2.net/Thread-How-pnach-files-work
file http://forums.pcsx2.net/Thread-How-to-use-the-myMC-tool-to-import-export-saves-from-PCSX2
file http://forums.pcsx2.net/Thread-Howto-PCSX2-on-AMD64-Ubuntu
file http://forums.pcsx2.net/Thread-PS3-Controller-on-64-bit-windows-2-0
file http://forums.pcsx2.net/Thread-Want-to-help-the-PCSX2-project-Read-here
file http://forums.pcsx2.net/Thread-Why-is-PCSX2-slow
file http://forums.pcsx2.net/Thread-Will-PCSX2-run-fast-on-my-computer
file http://pcsx2.net/compat.php?c=key
file http://pcsx2.net/downloads.php?p=tool
file http://www.microsoft.com/downloads/details.aspx?FamilyId=2DA43D38-DB71-4C1B-BC6A-9B6652CD92A3&displaylang=en
Show all

docs/PCSX2_Readme_0.9.8.pdf

SHA256 91f3a4aae2c97012fad71d01bda3fe0859bd5b39abeae2385364afd1df0a2f99
MD5 075b95f5bfac88358d8b7843b82fb770
SHA1 09921b1259c36e2c49a6c1143709e1bb5329edd7
SHA512 8bec15c7ea78d12301618866a3ffce678514b0bc92d4f38e2fbc4535791c97fdc6c6c8d3c607b0c74fefb069cbe9f8a2cb3783fcf7231141cbbbb75dbbfd8432
SSDEEP 3072:niwDCiGTm9VyJdPh4I43+my9O5gPc2Lkx2nIe96G6bkbJ+rVJi3m+uw78VA6BdZ+:nxDNDOd54tShUWkMIe96vk0rVDK8uMcx
MD5 SHA1 SHA512 SSDEEP

HTTP links in PDF interactive object

Detects HTTP links in interactive objects within PDF files.

pdf link
NSIS installer

installer

Extracted URLs

file http://code.google.com/p/pcsx2/
file http://forums.pcsx2.net/Thread-blog-New-versioning-release-pattern
file http://forums.pcsx2.net/forum-23.html
file http://forums.pcsx2.net/index.php
file http://pcsx2.net/
file http://www.gnu.org/licenses/gpl.html
file http://www.pcsx.net/
file http://www.wxwidgets.org/

docs/pcsx2.man

SHA256 5a4c19143a5ba0f3c39f869f69832db3aa0b6cd85bd0e2f004d9d8047b12bfcf
MD5 25586e98bfa69103dc996a44a9e6d6ea
SHA1 dbe4e38d55c635b8d3c33fe68e84dea1c5f66751
SHA512 2bc8dc0669ec0743a6c1c96dd14604a6deba75d6f77ab29686707a03b7056b457e007b0cf61eeb033e67104a2ce453c35529fdf2130fc668ced9770501e158ab
MD5 SHA1 SHA512

NSIS installer

installer

filedown_228321.exe

IMPHASH 127023d18fc7df4cbf5c4293254b1a4a
SHA256 3fd818f9eb377e8e9368f635a934d8ecf3de49cc0f67659a193ed05d32ac82be
MD5 67971dd6948e346a9d5b13bc9df66bc8
SHA1 54615f2b8670b3ab444f72371f9e8082b101543f
SHA512 d91f019aeb3ad9431a61997828a7931428e21956bc5ba1c34ef48521f11f28fa8515eda868ab6dcdd296710a75e2c387771fba439e9cf65dd0827e35bac0fa5e
SSDEEP 1536:q631xX/1ELJpDPJEf9ODWkU39+LAQbO3mqHWkHRS4qdnhrXnT7Bur+/lvsCTaF2c:3EjDPA6UQbhqvGdn5vsr+/97aFJfiq
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

c3:e5:bf:44:1d:da:e9:de:7d:f3:80:97:35:46:9f:1b:23:5a:b3:de

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=上海瑞创网络科技股份有限公司,OU=Provided by TrustAsia,O=上海瑞创网络科技股份有限公司,L=上海,ST=上海,C=CN

Chains

Jul 16, 2012

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Serial Number

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 1, 2012 - Dec 31, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

Serial Number

33:65:50:08:79:ad:73:e2:30:b9:e0:1d:0d:7f:ac:91

Issuer

CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6d

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Nov 17, 2006 - Dec 30, 2020

Subject

CN=上海瑞创网络科技股份有限公司,OU=Provided by TrustAsia,O=上海瑞创网络科技股份有限公司,L=上海,ST=上海,C=CN

Serial Number

22:f2:40:24:c2:80:0b:ad:37:11:bc:a7:be:4e:1f:7b

Issuer

CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US

Ext Key Usages

ExtKeyUsageCodeSigning, ExtKeyUsageMicrosoftCommercialCodeSigning

Timespan

Jun 20, 2012 - Jun 20, 2014

Subject

CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US

Serial Number

47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5e

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

0

Major OS version

4

Entry point

35930

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

wininet

InternetCloseHandle InternetReadFile InternetOpenUrlW InternetOpenW HttpQueryInfoW InternetSetOptionW

kernel32

FlushInstructionCache InitializeCriticalSection SetLastError InterlockedIncrement RaiseException EnterCriticalSection LeaveCriticalSection LoadResource SizeofResource GetFileAttributesW DeleteCriticalSection GetModuleHandleW GetProcAddress GetVersionExW GetTempPathW WriteFile GetExitCodeProcess CloseHandle WaitForSingleObject DeleteFileW GetLongPathNameW CreateFileW GetTempFileNameW GetTickCount Sleep GetCurrentProcessId QueryPerformanceCounter GetStartupInfoA GetFileType SetHandleCount GetCommandLineW GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA LCMapStringW WideCharToMultiByte LCMapStringA IsValidCodePage GetOEMCP GetCPInfo HeapSize lstrlenW TlsFree TlsSetValue TlsAlloc TlsGetValue GetModuleFileNameA GetStdHandle ExitProcess GetModuleHandleA HeapCreate HeapDestroy RtlUnwind GetStartupInfoW CreateThread ExitThread IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess GetSystemTimeAsFileTime HeapReAlloc VirtualAlloc VirtualFree IsProcessorFeaturePresent LoadLibraryA HeapAlloc GetProcessHeap HeapFree InterlockedCompareExchange SetFilePointer GetThreadLocale GetLocaleInfoA GetACP InterlockedExchange GetCurrentProcess FreeLibrary GetCurrentThreadId lstrcmpiW GetLastError GetModuleFileNameW GetVersionExA InterlockedDecrement MultiByteToWideChar LoadLibraryExW FindResourceW WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA FlushFileBuffers GetConsoleCP GetConsoleMode SetStdHandle GetStringTypeW GetStringTypeA

user32

UnregisterClassA SetWindowPos SetWindowTextW SetDlgItemTextW GetClientRect GetDlgItem MessageBoxW GetParent MapWindowPoints GetWindow EnableWindow BringWindowToTop SystemParametersInfoW GetWindowRect DestroyMenu DestroyIcon SendMessageW RegisterWindowMessageW KillTimer GetWindowLongW CreateWindowExW GetCursorPos IsWindow GetSystemMetrics LoadMenuW IsMenu LoadCursorW SetForegroundWindow GetSubMenu RegisterClassExW SetMenuDefaultItem TrackPopupMenu CallWindowProcW SetTimer LoadImageW PostMessageW GetMenuDefaultItem GetClassInfoExW PeekMessageW GetDesktopWindow GetMessageW ShowWindow DestroyWindow CreateDialogParamW DefWindowProcW SetWindowLongW DispatchMessageW CharNextW TranslateMessage PostQuitMessage

gdi32

CreateFontIndirectW DeleteObject

advapi32

RegQueryValueExW RegCloseKey RegDeleteValueW RegCreateKeyExW RegSetValueExW RegOpenKeyExW RegDeleteKeyW RegEnumKeyExW RegQueryInfoKeyW

shell32

ShellExecuteExW Shell_NotifyIconW

ole32

CoInitialize CoCreateInstance CoUninitialize CoTaskMemRealloc CoTaskMemFree CoTaskMemAlloc

oleaut32

VarUI4FromStr

comctl32

InitCommonControlsEx

glew32.dll

IMPHASH d22525fbe0e905eaf2a552442260d1fe
SHA256 6e4eb44b028c70931e62e6d6eddc56b285dac54d265a56876993e0b1100515da
MD5 d18436bff3cb08d8ace2ddce9c725a9b
SHA1 2d8df3387031b85e607609e525fbe9d066d40e56
SHA512 4ad964c99927f9384d456530254d0f98e94b11591794e5967a4edbdda4602a71e792a86bf5986e066074a004d3232838cc92f94897a3a2ed33d1402c64ce6391
SSDEEP 3072:s1sZQtAIDJwllWoHwTDon8UwdaO07XPvJkAOVjOfkGGE8YBJOL:5Z0NUsaOCPhkAOVXGGE8YXOL
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

69464

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

__GLEW_3DFX_multisample __GLEW_3DFX_tbuffer __GLEW_3DFX_texture_compression_FXT1 __GLEW_APPLE_client_storage __GLEW_APPLE_element_array __GLEW_APPLE_fence __GLEW_APPLE_float_pixels __GLEW_APPLE_flush_buffer_range __GLEW_APPLE_pixel_buffer __GLEW_APPLE_specular_vector __GLEW_APPLE_texture_range __GLEW_APPLE_transform_hint __GLEW_APPLE_vertex_array_object __GLEW_APPLE_vertex_array_range __GLEW_APPLE_ycbcr_422 __GLEW_ARB_color_buffer_float __GLEW_ARB_depth_buffer_float __GLEW_ARB_depth_texture __GLEW_ARB_draw_buffers __GLEW_ARB_draw_instanced __GLEW_ARB_fragment_program __GLEW_ARB_fragment_program_shadow __GLEW_ARB_fragment_shader __GLEW_ARB_framebuffer_object __GLEW_ARB_framebuffer_sRGB __GLEW_ARB_geometry_shader4 __GLEW_ARB_half_float_pixel __GLEW_ARB_half_float_vertex __GLEW_ARB_imaging __GLEW_ARB_instanced_arrays __GLEW_ARB_map_buffer_range __GLEW_ARB_matrix_palette __GLEW_ARB_multisample __GLEW_ARB_multitexture __GLEW_ARB_occlusion_query __GLEW_ARB_pixel_buffer_object __GLEW_ARB_point_parameters __GLEW_ARB_point_sprite __GLEW_ARB_shader_objects __GLEW_ARB_shading_language_100 __GLEW_ARB_shadow __GLEW_ARB_shadow_ambient __GLEW_ARB_texture_border_clamp __GLEW_ARB_texture_buffer_object __GLEW_ARB_texture_compression __GLEW_ARB_texture_compression_rgtc __GLEW_ARB_texture_cube_map __GLEW_ARB_texture_env_add __GLEW_ARB_texture_env_combine __GLEW_ARB_texture_env_crossbar __GLEW_ARB_texture_env_dot3 __GLEW_ARB_texture_float __GLEW_ARB_texture_mirrored_repeat __GLEW_ARB_texture_non_power_of_two __GLEW_ARB_texture_rectangle __GLEW_ARB_texture_rg __GLEW_ARB_transpose_matrix __GLEW_ARB_vertex_array_object __GLEW_ARB_vertex_blend __GLEW_ARB_vertex_buffer_object __GLEW_ARB_vertex_program __GLEW_ARB_vertex_shader __GLEW_ARB_window_pos __GLEW_ATIX_point_sprites __GLEW_ATIX_texture_env_combine3 __GLEW_ATIX_texture_env_route __GLEW_ATIX_vertex_shader_output_point_size __GLEW_ATI_draw_buffers __GLEW_ATI_element_array __GLEW_ATI_envmap_bumpmap __GLEW_ATI_fragment_shader __GLEW_ATI_map_object_buffer __GLEW_ATI_pn_triangles __GLEW_ATI_separate_stencil __GLEW_ATI_shader_texture_lod __GLEW_ATI_text_fragment_shader __GLEW_ATI_texture_compression_3dc __GLEW_ATI_texture_env_combine3 __GLEW_ATI_texture_float __GLEW_ATI_texture_mirror_once __GLEW_ATI_vertex_array_object __GLEW_ATI_vertex_attrib_array_object __GLEW_ATI_vertex_streams __GLEW_EXT_422_pixels __GLEW_EXT_Cg_shader __GLEW_EXT_abgr __GLEW_EXT_bgra __GLEW_EXT_bindable_uniform __GLEW_EXT_blend_color __GLEW_EXT_blend_equation_separate __GLEW_EXT_blend_func_separate __GLEW_EXT_blend_logic_op __GLEW_EXT_blend_minmax __GLEW_EXT_blend_subtract __GLEW_EXT_clip_volume_hint __GLEW_EXT_cmyka __GLEW_EXT_color_subtable __GLEW_EXT_compiled_vertex_array __GLEW_EXT_convolution __GLEW_EXT_coordinate_frame __GLEW_EXT_copy_texture __GLEW_EXT_cull_vertex __GLEW_EXT_depth_bounds_test __GLEW_EXT_direct_state_access __GLEW_EXT_draw_buffers2 __GLEW_EXT_draw_instanced __GLEW_EXT_draw_range_elements __GLEW_EXT_fog_coord __GLEW_EXT_fragment_lighting __GLEW_EXT_framebuffer_blit __GLEW_EXT_framebuffer_multisample __GLEW_EXT_framebuffer_object __GLEW_EXT_framebuffer_sRGB __GLEW_EXT_geometry_shader4 __GLEW_EXT_gpu_program_parameters __GLEW_EXT_gpu_shader4 __GLEW_EXT_histogram __GLEW_EXT_index_array_formats __GLEW_EXT_index_func __GLEW_EXT_index_material __GLEW_EXT_index_texture __GLEW_EXT_light_texture __GLEW_EXT_misc_attribute __GLEW_EXT_multi_draw_arrays __GLEW_EXT_multisample __GLEW_EXT_packed_depth_stencil __GLEW_EXT_packed_float __GLEW_EXT_packed_pixels __GLEW_EXT_paletted_texture __GLEW_EXT_pixel_buffer_object __GLEW_EXT_pixel_transform __GLEW_EXT_pixel_transform_color_table __GLEW_EXT_point_parameters __GLEW_EXT_polygon_offset __GLEW_EXT_rescale_normal __GLEW_EXT_scene_marker __GLEW_EXT_secondary_color __GLEW_EXT_separate_specular_color __GLEW_EXT_shadow_funcs __GLEW_EXT_shared_texture_palette __GLEW_EXT_stencil_clear_tag __GLEW_EXT_stencil_two_side __GLEW_EXT_stencil_wrap __GLEW_EXT_subtexture __GLEW_EXT_texture __GLEW_EXT_texture3D __GLEW_EXT_texture_array __GLEW_EXT_texture_buffer_object __GLEW_EXT_texture_compression_dxt1 __GLEW_EXT_texture_compression_latc __GLEW_EXT_texture_compression_rgtc __GLEW_EXT_texture_compression_s3tc __GLEW_EXT_texture_cube_map __GLEW_EXT_texture_edge_clamp __GLEW_EXT_texture_env __GLEW_EXT_texture_env_add __GLEW_EXT_texture_env_combine __GLEW_EXT_texture_env_dot3 __GLEW_EXT_texture_filter_anisotropic __GLEW_EXT_texture_integer __GLEW_EXT_texture_lod_bias __GLEW_EXT_texture_mirror_clamp __GLEW_EXT_texture_object __GLEW_EXT_texture_perturb_normal __GLEW_EXT_texture_rectangle __GLEW_EXT_texture_sRGB __GLEW_EXT_texture_shared_exponent __GLEW_EXT_texture_swizzle __GLEW_EXT_timer_query __GLEW_EXT_transform_feedback __GLEW_EXT_vertex_array __GLEW_EXT_vertex_array_bgra __GLEW_EXT_vertex_shader __GLEW_EXT_vertex_weighting __GLEW_GREMEDY_frame_terminator __GLEW_GREMEDY_string_marker __GLEW_HP_convolution_border_modes __GLEW_HP_image_transform __GLEW_HP_occlusion_test __GLEW_HP_texture_lighting __GLEW_IBM_cull_vertex __GLEW_IBM_multimode_draw_arrays __GLEW_IBM_rasterpos_clip __GLEW_IBM_static_data __GLEW_IBM_texture_mirrored_repeat __GLEW_IBM_vertex_array_lists __GLEW_INGR_color_clamp __GLEW_INGR_interlace_read __GLEW_INTEL_parallel_arrays __GLEW_INTEL_texture_scissor __GLEW_KTX_buffer_region __GLEW_MESAX_texture_stack __GLEW_MESA_pack_invert __GLEW_MESA_resize_buffers __GLEW_MESA_window_pos __GLEW_MESA_ycbcr_texture __GLEW_NV_blend_square __GLEW_NV_conditional_render __GLEW_NV_copy_depth_to_color __GLEW_NV_depth_buffer_float __GLEW_NV_depth_clamp __GLEW_NV_depth_range_unclamped __GLEW_NV_evaluators __GLEW_NV_explicit_multisample __GLEW_NV_fence __GLEW_NV_float_buffer __GLEW_NV_fog_distance __GLEW_NV_fragment_program __GLEW_NV_fragment_program2 __GLEW_NV_fragment_program4 __GLEW_NV_fragment_program_option __GLEW_NV_framebuffer_multisample_coverage __GLEW_NV_geometry_program4 __GLEW_NV_geometry_shader4 __GLEW_NV_gpu_program4 __GLEW_NV_half_float __GLEW_NV_light_max_exponent __GLEW_NV_multisample_filter_hint __GLEW_NV_occlusion_query __GLEW_NV_packed_depth_stencil __GLEW_NV_parameter_buffer_object __GLEW_NV_pixel_data_range __GLEW_NV_point_sprite __GLEW_NV_present_video __GLEW_NV_primitive_restart __GLEW_NV_register_combiners __GLEW_NV_register_combiners2 __GLEW_NV_texgen_emboss __GLEW_NV_texgen_reflection __GLEW_NV_texture_compression_vtc __GLEW_NV_texture_env_combine4 __GLEW_NV_texture_expand_normal __GLEW_NV_texture_rectangle __GLEW_NV_texture_shader __GLEW_NV_texture_shader2 __GLEW_NV_texture_shader3 __GLEW_NV_transform_feedback __GLEW_NV_vertex_array_range __GLEW_NV_vertex_array_range2 __GLEW_NV_vertex_program __GLEW_NV_vertex_program1_1 __GLEW_NV_vertex_program2 __GLEW_NV_vertex_program2_option __GLEW_NV_vertex_program3 __GLEW_NV_vertex_program4 __GLEW_OES_byte_coordinates __GLEW_OES_compressed_paletted_texture __GLEW_OES_read_format __GLEW_OES_single_precision __GLEW_OML_interlace __GLEW_OML_resample __GLEW_OML_subsample __GLEW_PGI_misc_hints __GLEW_PGI_vertex_hints __GLEW_REND_screen_coordinates __GLEW_S3_s3tc __GLEW_SGIS_color_range __GLEW_SGIS_detail_texture __GLEW_SGIS_fog_function __GLEW_SGIS_generate_mipmap __GLEW_SGIS_multisample __GLEW_SGIS_pixel_texture __GLEW_SGIS_point_line_texgen __GLEW_SGIS_sharpen_texture __GLEW_SGIS_texture4D __GLEW_SGIS_texture_border_clamp __GLEW_SGIS_texture_edge_clamp __GLEW_SGIS_texture_filter4 __GLEW_SGIS_texture_lod __GLEW_SGIS_texture_select __GLEW_SGIX_async __GLEW_SGIX_async_histogram __GLEW_SGIX_async_pixel __GLEW_SGIX_blend_alpha_minmax __GLEW_SGIX_clipmap __GLEW_SGIX_convolution_accuracy __GLEW_SGIX_depth_texture __GLEW_SGIX_flush_raster __GLEW_SGIX_fog_offset __GLEW_SGIX_fog_texture __GLEW_SGIX_fragment_specular_lighting __GLEW_SGIX_framezoom __GLEW_SGIX_interlace __GLEW_SGIX_ir_instrument1 __GLEW_SGIX_list_priority __GLEW_SGIX_pixel_texture __GLEW_SGIX_pixel_texture_bits __GLEW_SGIX_reference_plane __GLEW_SGIX_resample __GLEW_SGIX_shadow __GLEW_SGIX_shadow_ambient __GLEW_SGIX_sprite __GLEW_SGIX_tag_sample_buffer __GLEW_SGIX_texture_add_env __GLEW_SGIX_texture_coordinate_clamp __GLEW_SGIX_texture_lod_bias __GLEW_SGIX_texture_multi_buffer __GLEW_SGIX_texture_range __GLEW_SGIX_texture_scale_bias __GLEW_SGIX_vertex_preclip __GLEW_SGIX_vertex_preclip_hint __GLEW_SGIX_ycrcb __GLEW_SGI_color_matrix __GLEW_SGI_color_table __GLEW_SGI_texture_color_table __GLEW_SUNX_constant_data __GLEW_SUN_convolution_border_modes __GLEW_SUN_global_alpha __GLEW_SUN_mesh_array __GLEW_SUN_read_video_pixels __GLEW_SUN_slice_accum __GLEW_SUN_triangle_list __GLEW_SUN_vertex __GLEW_VERSION_1_1 __GLEW_VERSION_1_2 __GLEW_VERSION_1_3 __GLEW_VERSION_1_4 __GLEW_VERSION_1_5 __GLEW_VERSION_2_0 __GLEW_VERSION_2_1 __GLEW_VERSION_3_0 __GLEW_WIN_phong_shading __GLEW_WIN_specular_fog __GLEW_WIN_swap_hint __WGLEW_3DFX_multisample __WGLEW_3DL_stereo_control __WGLEW_ARB_buffer_region __WGLEW_ARB_create_context __WGLEW_ARB_extensions_string __WGLEW_ARB_framebuffer_sRGB __WGLEW_ARB_make_current_read __WGLEW_ARB_multisample __WGLEW_ARB_pbuffer __WGLEW_ARB_pixel_format __WGLEW_ARB_pixel_format_float __WGLEW_ARB_render_texture __WGLEW_ATI_pixel_format_float __WGLEW_ATI_render_texture_rectangle __WGLEW_EXT_depth_float __WGLEW_EXT_display_color_table __WGLEW_EXT_extensions_string __WGLEW_EXT_framebuffer_sRGB __WGLEW_EXT_make_current_read __WGLEW_EXT_multisample __WGLEW_EXT_pbuffer __WGLEW_EXT_pixel_format __WGLEW_EXT_pixel_format_packed_float __WGLEW_EXT_swap_control __WGLEW_I3D_digital_video_control __WGLEW_I3D_gamma __WGLEW_I3D_genlock __WGLEW_I3D_image_buffer __WGLEW_I3D_swap_frame_lock __WGLEW_I3D_swap_frame_usage __WGLEW_NV_float_buffer __WGLEW_NV_gpu_affinity __WGLEW_NV_present_video __WGLEW_NV_render_depth_texture __WGLEW_NV_render_texture_rectangle __WGLEW_NV_swap_group __WGLEW_NV_vertex_array_range __WGLEW_NV_video_output __WGLEW_OML_sync_control __glPNTrianglewesfATI __glPNTrianglewesiATI __glewActiveStencilFaceEXT __glewActiveTexture __glewActiveTextureARB __glewActiveVaryingNV __glewAddSwapHintRectWIN __glewAlphaFragmentOp1ATI __glewAlphaFragmentOp2ATI __glewAlphaFragmentOp3ATI __glewApplyTextureEXT __glewAreProgramsResidentNV __glewAreTexturesResidentEXT __glewArrayElementEXT __glewArrayObjectATI __glewAsyncMarkerSGIX __glewAttachObjectARB __glewAttachShader __glewBeginConditionalRender __glewBeginConditionalRenderNV __glewBeginFragmentShaderATI __glewBeginOcclusionQueryNV __glewBeginQuery __glewBeginQueryARB __glewBeginSceneEXT __glewBeginTransformFeedback __glewBeginTransformFeedbackEXT __glewBeginTransformFeedbackNV __glewBeginVertexShaderEXT __glewBindAttribLocation __glewBindAttribLocationARB __glewBindBuffer __glewBindBufferARB __glewBindBufferBase __glewBindBufferBaseEXT __glewBindBufferBaseNV __glewBindBufferOffsetEXT __glewBindBufferOffsetNV __glewBindBufferRange __glewBindBufferRangeEXT __glewBindBufferRangeNV __glewBindFragDataLocation __glewBindFragDataLocationEXT __glewBindFragmentShaderATI __glewBindFramebuffer __glewBindFramebufferEXT __glewBindLightParameterEXT __glewBindMaterialParameterEXT __glewBindMultiTextureEXT __glewBindParameterEXT __glewBindProgramARB __glewBindProgramNV __glewBindRenderbuffer __glewBindRenderbufferEXT __glewBindTexGenParameterEXT __glewBindTextureEXT __glewBindTextureUnitParameterEXT __glewBindVertexArray __glewBindVertexArrayAPPLE __glewBindVertexShaderEXT __glewBinormalPointerEXT __glewBlendColor __glewBlendColorEXT __glewBlendEquation __glewBlendEquationEXT __glewBlendEquationSeparate __glewBlendEquationSeparateEXT __glewBlendFuncSeparate __glewBlendFuncSeparateEXT __glewBlitFramebuffer __glewBlitFramebufferEXT __glewBufferData __glewBufferDataARB __glewBufferParameteriAPPLE __glewBufferRegionEnabledEXT __glewBufferSubData __glewBufferSubDataARB __glewCheckFramebufferStatus __glewCheckFramebufferStatusEXT __glewCheckNamedFramebufferStatusEXT __glewClampColor __glewClampColorARB __glewClearBufferfi __glewClearBufferfv __glewClearBufferiv __glewClearBufferuiv __glewClearColorIiEXT __glewClearColorIuiEXT __glewClearDepthdNV __glewClearDepthfOES __glewClientActiveTexture __glewClientActiveTextureARB __glewClientActiveVertexStreamATI __glewClientAttribDefaultEXT __glewClipPlanefOES __glewColor3fVertex3fSUN __glewColor3fVertex3fvSUN __glewColor3hNV __glewColor3hvNV __glewColor4fNormal3fVertex3fSUN __glewColor4fNormal3fVertex3fvSUN __glewColor4hNV __glewColor4hvNV __glewColor4ubVertex2fSUN __glewColor4ubVertex2fvSUN __glewColor4ubVertex3fSUN __glewColor4ubVertex3fvSUN __glewColorFragmentOp1ATI __glewColorFragmentOp2ATI __glewColorFragmentOp3ATI __glewColorMaskIndexedEXT __glewColorMaski __glewColorPointerEXT __glewColorPointerListIBM __glewColorPointervINTEL __glewColorSubTable __glewColorSubTableEXT __glewColorTable __glewColorTableEXT __glewColorTableParameterfv __glewColorTableParameterfvSGI __glewColorTableParameteriv __glewColorTableParameterivSGI __glewColorTableSGI __glewCombinerInputNV __glewCombinerOutputNV __glewCombinerParameterfNV __glewCombinerParameterfvNV __glewCombinerParameteriNV __glewCombinerParameterivNV __glewCombinerStageParameterfvNV __glewCompileShader __glewCompileShaderARB __glewCompressedMultiTexImage1DEXT __glewCompressedMultiTexImage2DEXT __glewCompressedMultiTexImage3DEXT __glewCompressedMultiTexSubImage1DEXT __glewCompressedMultiTexSubImage2DEXT __glewCompressedMultiTexSubImage3DEXT __glewCompressedTexImage1D __glewCompressedTexImage1DARB __glewCompressedTexImage2D __glewCompressedTexImage2DARB __glewCompressedTexImage3D __glewCompressedTexImage3DARB __glewCompressedTexSubImage1D __glewCompressedTexSubImage1DARB __glewCompressedTexSubImage2D __glewCompressedTexSubImage2DARB __glewCompressedTexSubImage3D __glewCompressedTexSubImage3DARB __glewCompressedTextureImage1DEXT __glewCompressedTextureImage2DEXT __glewCompressedTextureImage3DEXT __glewCompressedTextureSubImage1DEXT __glewCompressedTextureSubImage2DEXT __glewCompressedTextureSubImage3DEXT __glewConvolutionFilter1D __glewConvolutionFilter1DEXT __glewConvolutionFilter2D __glewConvolutionFilter2DEXT __glewConvolutionParameterf __glewConvolutionParameterfEXT __glewConvolutionParameterfv __glewConvolutionParameterfvEXT __glewConvolutionParameteri __glewConvolutionParameteriEXT __glewConvolutionParameteriv __glewConvolutionParameterivEXT __glewCopyColorSubTable __glewCopyColorSubTableEXT __glewCopyColorTable __glewCopyColorTableSGI __glewCopyConvolutionFilter1D __glewCopyConvolutionFilter1DEXT __glewCopyConvolutionFilter2D __glewCopyConvolutionFilter2DEXT __glewCopyMultiTexImage1DEXT __glewCopyMultiTexImage2DEXT __glewCopyMultiTexSubImage1DEXT __glewCopyMultiTexSubImage2DEXT __glewCopyMultiTexSubImage3DEXT __glewCopyTexImage1DEXT __glewCopyTexImage2DEXT __glewCopyTexSubImage1DEXT __glewCopyTexSubImage2DEXT __glewCopyTexSubImage3D __glewCopyTexSubImage3DEXT __glewCopyTextureImage1DEXT __glewCopyTextureImage2DEXT __glewCopyTextureSubImage1DEXT __glewCopyTextureSubImage2DEXT __glewCopyTextureSubImage3DEXT __glewCreateProgram __glewCreateProgramObjectARB __glewCreateShader __glewCreateShaderObjectARB __glewCullParameterdvEXT __glewCullParameterfvEXT __glewCurrentPaletteMatrixARB __glewDeleteAsyncMarkersSGIX __glewDeleteBufferRegionEXT __glewDeleteBuffers __glewDeleteBuffersARB __glewDeleteFencesAPPLE __glewDeleteFencesNV __glewDeleteFragmentShaderATI __glewDeleteFramebuffers __glewDeleteFramebuffersEXT __glewDeleteObjectARB __glewDeleteOcclusionQueriesNV __glewDeleteProgram __glewDeleteProgramsARB __glewDeleteProgramsNV __glewDeleteQueries __glewDeleteQueriesARB __glewDeleteRenderbuffers __glewDeleteRenderbuffersEXT __glewDeleteShader __glewDeleteTexturesEXT __glewDeleteVertexArrays __glewDeleteVertexArraysAPPLE __glewDeleteVertexShaderEXT __glewDepthBoundsEXT __glewDepthBoundsdNV __glewDepthRangedNV __glewDepthRangefOES __glewDetachObjectARB __glewDetachShader __glewDetailTexFuncSGIS __glewDisableClientStateIndexedEXT __glewDisableIndexedEXT __glewDisableVariantClientStateEXT __glewDisableVertexAttribArray __glewDisableVertexAttribArrayARB __glewDisablei __glewDrawArraysEXT __glewDrawArraysInstancedARB __glewDrawArraysInstancedEXT __glewDrawBufferRegionEXT __glewDrawBuffers __glewDrawBuffersARB __glewDrawBuffersATI __glewDrawElementArrayAPPLE __glewDrawElementArrayATI __glewDrawElementsInstancedARB __glewDrawElementsInstancedEXT __glewDrawRangeElementArrayAPPLE __glewDrawRangeElementArrayATI __glewDrawRangeElements __glewDrawRangeElementsEXT __glewEdgeFlagPointerEXT __glewEdgeFlagPointerListIBM __glewElementPointerAPPLE __glewElementPointerATI __glewEnableClientStateIndexedEXT __glewEnableIndexedEXT __glewEnableVariantClientStateEXT __glewEnableVertexAttribArray __glewEnableVertexAttribArrayARB __glewEnablei __glewEndConditionalRender __glewEndConditionalRenderNV __glewEndFragmentShaderATI __glewEndOcclusionQueryNV __glewEndQuery __glewEndQueryARB __glewEndSceneEXT __glewEndTransformFeedback __glewEndTransformFeedbackEXT __glewEndTransformFeedbackNV __glewEndVertexShaderEXT __glewEvalMapsNV __glewExecuteProgramNV __glewExtractComponentEXT __glewFinalCombinerInputNV __glewFinishAsyncSGIX __glewFinishFenceAPPLE __glewFinishFenceNV __glewFinishObjectAPPLE __glewFinishTextureSUNX __glewFlushMappedBufferRange __glewFlushMappedBufferRangeAPPLE __glewFlushPixelDataRangeNV __glewFlushRasterSGIX __glewFlushVertexArrayRangeAPPLE __glewFlushVertexArrayRangeNV __glewFogCoordPointer __glewFogCoordPointerEXT __glewFogCoordPointerListIBM __glewFogCoordd __glewFogCoorddEXT __glewFogCoorddv __glewFogCoorddvEXT __glewFogCoordf __glewFogCoordfEXT __glewFogCoordfv __glewFogCoordfvEXT __glewFogCoordhNV __glewFogCoordhvNV __glewFogFuncSGIS __glewFragmentColorMaterialEXT __glewFragmentColorMaterialSGIX __glewFragmentLightModelfEXT __glewFragmentLightModelfSGIX __glewFragmentLightModelfvEXT __glewFragmentLightModelfvSGIX __glewFragmentLightModeliEXT __glewFragmentLightModeliSGIX __glewFragmentLightModelivEXT __glewFragmentLightModelivSGIX __glewFragmentLightfEXT __glewFragmentLightfSGIX __glewFragmentLightfvEXT __glewFragmentLightfvSGIX __glewFragmentLightiEXT __glewFragmentLightiSGIX __glewFragmentLightivEXT __glewFragmentLightivSGIX __glewFragmentMaterialfEXT __glewFragmentMaterialfSGIX __glewFragmentMaterialfvEXT __glewFragmentMaterialfvSGIX __glewFragmentMaterialiEXT __glewFragmentMaterialiSGIX __glewFragmentMaterialivEXT __glewFragmentMaterialivSGIX __glewFrameTerminatorGREMEDY __glewFrameZoomSGIX __glewFramebufferDrawBufferEXT __glewFramebufferDrawBuffersEXT __glewFramebufferReadBufferEXT __glewFramebufferRenderbuffer __glewFramebufferRenderbufferEXT __glewFramebufferTexturLayer __glewFramebufferTexture1D __glewFramebufferTexture1DEXT __glewFramebufferTexture2D __glewFramebufferTexture2DEXT __glewFramebufferTexture3D __glewFramebufferTexture3DEXT __glewFramebufferTextureARB __glewFramebufferTextureEXT __glewFramebufferTextureFaceARB __glewFramebufferTextureFaceEXT __glewFramebufferTextureLayerARB __glewFramebufferTextureLayerEXT __glewFreeObjectBufferATI __glewFrustumfOES __glewGenAsyncMarkersSGIX __glewGenBuffers __glewGenBuffersARB __glewGenFencesAPPLE __glewGenFencesNV __glewGenFragmentShadersATI __glewGenFramebuffers __glewGenFramebuffersEXT __glewGenOcclusionQueriesNV __glewGenProgramsARB __glewGenProgramsNV __glewGenQueries __glewGenQueriesARB __glewGenRenderbuffers __glewGenRenderbuffersEXT __glewGenSymbolsEXT __glewGenTexturesEXT __glewGenVertexArrays __glewGenVertexArraysAPPLE __glewGenVertexShadersEXT __glewGenerateMipmap __glewGenerateMipmapEXT __glewGenerateMultiTexMipmapEXT __glewGenerateTextureMipmapEXT __glewGetActiveAttrib __glewGetActiveAttribARB __glewGetActiveUniform __glewGetActiveUniformARB __glewGetActiveVaryingNV __glewGetArrayObjectfvATI __glewGetArrayObjectivATI __glewGetAttachedObjectsARB __glewGetAttachedShaders __glewGetAttribLocation __glewGetAttribLocationARB __glewGetBooleanIndexedvEXT __glewGetBooleani_v __glewGetBufferParameteriv __glewGetBufferParameterivARB __glewGetBufferPointerv __glewGetBufferPointervARB __glewGetBufferSubData __glewGetBufferSubDataARB __glewGetClipPlanefOES __glewGetColorTable __glewGetColorTableEXT __glewGetColorTableParameterfv __glewGetColorTableParameterfvEXT __glewGetColorTableParameterfvSGI __glewGetColorTableParameteriv __glewGetColorTableParameterivEXT __glewGetColorTableParameterivSGI __glewGetColorTableSGI __glewGetCombinerInputParameterfvNV __glewGetCombinerInputParameterivNV __glewGetCombinerOutputParameterfvNV __glewGetCombinerOutputParameterivNV __glewGetCombinerStageParameterfvNV __glewGetCompressedMultiTexImageEXT __glewGetCompressedTexImage __glewGetCompressedTexImageARB __glewGetCompressedTextureImageEXT __glewGetConvolutionFilter __glewGetConvolutionFilterEXT __glewGetConvolutionParameterfv __glewGetConvolutionParameterfvEXT __glewGetConvolutionParameteriv __glewGetConvolutionParameterivEXT __glewGetDetailTexFuncSGIS __glewGetDoubleIndexedvEXT __glewGetFenceivNV __glewGetFinalCombinerInputParameterfvNV __glewGetFinalCombinerInputParameterivNV __glewGetFloatIndexedvEXT __glewGetFogFuncSGIS __glewGetFragDataLocation __glewGetFragDataLocationEXT __glewGetFragmentLightfvEXT __glewGetFragmentLightfvSGIX __glewGetFragmentLightivEXT __glewGetFragmentLightivSGIX __glewGetFragmentMaterialfvEXT __glewGetFragmentMaterialfvSGIX __glewGetFragmentMaterialivEXT __glewGetFragmentMaterialivSGIX __glewGetFramebufferAttachmentParameteriv __glewGetFramebufferAttachmentParameterivEXT __glewGetFramebufferParameterivEXT __glewGetHandleARB __glewGetHistogram __glewGetHistogramEXT __glewGetHistogramParameterfv __glewGetHistogramParameterfvEXT __glewGetHistogramParameteriv __glewGetHistogramParameterivEXT __glewGetImageTransformParameterfvHP __glewGetImageTransformParameterivHP __glewGetInfoLogARB __glewGetIntegerIndexedvEXT __glewGetIntegeri_v __glewGetInvariantBooleanvEXT __glewGetInvariantFloatvEXT __glewGetInvariantIntegervEXT __glewGetLocalConstantBooleanvEXT __glewGetLocalConstantFloatvEXT __glewGetLocalConstantIntegervEXT __glewGetMapAttribParameterfvNV __glewGetMapAttribParameterivNV __glewGetMapControlPointsNV __glewGetMapParameterfvNV __glewGetMapParameterivNV __glewGetMinmax __glewGetMinmaxEXT __glewGetMinmaxParameterfv __glewGetMinmaxParameterfvEXT __glewGetMinmaxParameteriv __glewGetMinmaxParameterivEXT __glewGetMultiTexEnvfvEXT __glewGetMultiTexEnvivEXT __glewGetMultiTexGendvEXT __glewGetMultiTexGenfvEXT __glewGetMultiTexGenivEXT __glewGetMultiTexImageEXT __glewGetMultiTexLevelParameterfvEXT __glewGetMultiTexLevelParameterivEXT __glewGetMultiTexParameterIivEXT __glewGetMultiTexParameterIuivEXT __glewGetMultiTexParameterfvEXT __glewGetMultiTexParameterivEXT __glewGetMultisamplefvNV __glewGetNamedBufferParameterivEXT __glewGetNamedBufferPointervEXT __glewGetNamedBufferSubDataEXT __glewGetNamedFramebufferAttachmentParameterivEXT __glewGetNamedProgramLocalParameterIivEXT __glewGetNamedProgramLocalParameterIuivEXT __glewGetNamedProgramLocalParameterdvEXT __glewGetNamedProgramLocalParameterfvEXT __glewGetNamedProgramStringEXT __glewGetNamedProgramivEXT __glewGetNamedRenderbufferParameterivEXT __glewGetObjectBufferfvATI __glewGetObjectBufferivATI __glewGetObjectParameterfvARB __glewGetObjectParameterivARB __glewGetOcclusionQueryivNV __glewGetOcclusionQueryuivNV __glewGetPixelTransformParameterfvEXT __glewGetPixelTransformParameterivEXT __glewGetPointerIndexedvEXT __glewGetPointervEXT __glewGetProgramEnvParameterdvARB __glewGetProgramEnvParameterfvARB __glewGetProgramInfoLog __glewGetProgramLocalParameterdvARB __glewGetProgramLocalParameterfvARB __glewGetProgramNamedParameterdvNV __glewGetProgramNamedParameterfvNV __glewGetProgramParameterdvNV __glewGetProgramParameterfvNV __glewGetProgramStringARB __glewGetProgramStringNV __glewGetProgramiv __glewGetProgramivARB __glewGetProgramivNV __glewGetQueryObjecti64vEXT __glewGetQueryObjectiv __glewGetQueryObjectivARB __glewGetQueryObjectui64vEXT __glewGetQueryObjectuiv __glewGetQueryObjectuivARB __glewGetQueryiv __glewGetQueryivARB __glewGetRenderbufferParameteriv __glewGetRenderbufferParameterivEXT __glewGetSeparableFilter __glewGetSeparableFilterEXT __glewGetShaderInfoLog __glewGetShaderSource __glewGetShaderSourceARB __glewGetShaderiv __glewGetSharpenTexFuncSGIS __glewGetStringi __glewGetTexBumpParameterfvATI __glewGetTexBumpParameterivATI __glewGetTexFilterFuncSGIS __glewGetTexParameterIiv __glewGetTexParameterIivEXT __glewGetTexParameterIuiv __glewGetTexParameterIuivEXT __glewGetTexParameterPointervAPPLE __glewGetTextureImageEXT __glewGetTextureLevelParameterfvEXT __glewGetTextureLevelParameterivEXT __glewGetTextureParameterIivEXT __glewGetTextureParameterIuivEXT __glewGetTextureParameterfvEXT __glewGetTextureParameterivEXT __glewGetTrackMatrixivNV __glewGetTransformFeedbackVarying __glewGetTransformFeedbackVaryingEXT __glewGetTransformFeedbackVaryingNV __glewGetUniformBufferSizeEXT __glewGetUniformLocation __glewGetUniformLocationARB __glewGetUniformOffsetEXT __glewGetUniformfv __glewGetUniformfvARB __glewGetUniformiv __glewGetUniformivARB __glewGetUniformuiv __glewGetUniformuivEXT __glewGetVariantArrayObjectfvATI __glewGetVariantArrayObjectivATI __glewGetVariantBooleanvEXT __glewGetVariantFloatvEXT __glewGetVariantIntegervEXT __glewGetVariantPointervEXT __glewGetVaryingLocationNV __glewGetVertexAttribArrayObjectfvATI __glewGetVertexAttribArrayObjectivATI __glewGetVertexAttribIiv __glewGetVertexAttribIivEXT __glewGetVertexAttribIuiv __glewGetVertexAttribIuivEXT __glewGetVertexAttribPointerv __glewGetVertexAttribPointervARB __glewGetVertexAttribPointervNV __glewGetVertexAttribdv __glewGetVertexAttribdvARB __glewGetVertexAttribdvNV __glewGetVertexAttribfv __glewGetVertexAttribfvARB __glewGetVertexAttribfvNV __glewGetVertexAttribiv __glewGetVertexAttribivARB __glewGetVertexAttribivNV __glewGetVideoi64vNV __glewGetVideoivNV __glewGetVideoui64vNV __glewGetVideouivNV __glewGlobalAlphaFactorbSUN __glewGlobalAlphaFactordSUN __glewGlobalAlphaFactorfSUN __glewGlobalAlphaFactoriSUN __glewGlobalAlphaFactorsSUN __glewGlobalAlphaFactorubSUN __glewGlobalAlphaFactoruiSUN __glewGlobalAlphaFactorusSUN __glewHistogram __glewHistogramEXT __glewImageTransformParameterfHP __glewImageTransformParameterfvHP __glewImageTransformParameteriHP __glewImageTransformParameterivHP __glewIndexFuncEXT __glewIndexMaterialEXT __glewIndexPointerEXT __glewIndexPointerListIBM __glewInsertComponentEXT __glewIsAsyncMarkerSGIX __glewIsBuffer __glewIsBufferARB __glewIsEnabledIndexedEXT __glewIsEnabledi __glewIsFenceAPPLE __glewIsFenceNV __glewIsFramebuffer __glewIsFramebufferEXT __glewIsObjectBufferATI __glewIsOcclusionQueryNV __glewIsProgram __glewIsProgramARB __glewIsProgramNV __glewIsQuery __glewIsQueryARB __glewIsRenderbuffer __glewIsRenderbufferEXT __glewIsShader __glewIsTextureEXT __glewIsVariantEnabledEXT __glewIsVertexArray __glewIsVertexArrayAPPLE __glewLightEnviEXT __glewLinkProgram __glewLinkProgramARB __glewLoadProgramNV __glewLoadTransposeMatrixd __glewLoadTransposeMatrixdARB __glewLoadTransposeMatrixf __glewLoadTransposeMatrixfARB __glewLockArraysEXT __glewMapBuffer __glewMapBufferARB __glewMapBufferRange __glewMapControlPointsNV __glewMapNamedBufferEXT __glewMapObjectBufferATI __glewMapParameterfvNV __glewMapParameterivNV __glewMatrixFrustumEXT __glewMatrixIndexPointerARB __glewMatrixIndexubvARB __glewMatrixIndexuivARB __glewMatrixIndexusvARB __glewMatrixLoadIdentityEXT __glewMatrixLoadTransposedEXT __glewMatrixLoadTransposefEXT __glewMatrixLoaddEXT __glewMatrixLoadfEXT __glewMatrixMultTransposedEXT __glewMatrixMultTransposefEXT __glewMatrixMultdEXT __glewMatrixMultfEXT __glewMatrixOrthoEXT __glewMatrixPopEXT __glewMatrixPushEXT __glewMatrixRotatedEXT __glewMatrixRotatefEXT __glewMatrixScaledEXT __glewMatrixScalefEXT __glewMatrixTranslatedEXT __glewMatrixTranslatefEXT __glewMinmax __glewMinmaxEXT __glewMultTransposeMatrixd __glewMultTransposeMatrixdARB __glewMultTransposeMatrixf __glewMultTransposeMatrixfARB __glewMultiDrawArrays __glewMultiDrawArraysEXT __glewMultiDrawElementArrayAPPLE __glewMultiDrawElements __glewMultiDrawElementsEXT __glewMultiDrawRangeElementArrayAPPLE __glewMultiModeDrawArraysIBM __glewMultiModeDrawElementsIBM __glewMultiTexBufferEXT __glewMultiTexCoord1d __glewMultiTexCoord1dARB __glewMultiTexCoord1dv __glewMultiTexCoord1dvARB __glewMultiTexCoord1f __glewMultiTexCoord1fARB __glewMultiTexCoord1fv __glewMultiTexCoord1fvARB __glewMultiTexCoord1hNV __glewMultiTexCoord1hvNV __glewMultiTexCoord1i __glewMultiTexCoord1iARB __glewMultiTexCoord1iv __glewMultiTexCoord1ivARB __glewMultiTexCoord1s __glewMultiTexCoord1sARB __glewMultiTexCoord1sv __glewMultiTexCoord1svARB __glewMultiTexCoord2d __glewMultiTexCoord2dARB __glewMultiTexCoord2dv __glewMultiTexCoord2dvARB __glewMultiTexCoord2f __glewMultiTexCoord2fARB __glewMultiTexCoord2fv __glewMultiTexCoord2fvARB __glewMultiTexCoord2hNV __glewMultiTexCoord2hvNV __glewMultiTexCoord2i __glewMultiTexCoord2iARB __glewMultiTexCoord2iv __glewMultiTexCoord2ivARB __glewMultiTexCoord2s __glewMultiTexCoord2sARB __glewMultiTexCoord2sv __glewMultiTexCoord2svARB __glewMultiTexCoord3d __glewMultiTexCoord3dARB __glewMultiTexCoord3dv __glewMultiTexCoord3dvARB __glewMultiTexCoord3f __glewMultiTexCoord3fARB __glewMultiTexCoord3fv __glewMultiTexCoord3fvARB __glewMultiTexCoord3hNV __glewMultiTexCoord3hvNV __glewMultiTexCoord3i __glewMultiTexCoord3iARB __glewMultiTexCoord3iv __glewMultiTexCoord3ivARB __glewMultiTexCoord3s __glewMultiTexCoord3sARB __glewMultiTexCoord3sv __glewMultiTexCoord3svARB __glewMultiTexCoord4d __glewMultiTexCoord4dARB __glewMultiTexCoord4dv __glewMultiTexCoord4dvARB __glewMultiTexCoord4f __glewMultiTexCoord4fARB __glewMultiTexCoord4fv __glewMultiTexCoord4fvARB __glewMultiTexCoord4hNV __glewMultiTexCoord4hvNV __glewMultiTexCoord4i __glewMultiTexCoord4iARB __glewMultiTexCoord4iv __glewMultiTexCoord4ivARB __glewMultiTexCoord4s __glewMultiTexCoord4sARB __glewMultiTexCoord4sv __glewMultiTexCoord4svARB __glewMultiTexCoordPointerEXT __glewMultiTexEnvfEXT __glewMultiTexEnvfvEXT __glewMultiTexEnviEXT __glewMultiTexEnvivEXT __glewMultiTexGendEXT __glewMultiTexGendvEXT __glewMultiTexGenfEXT __glewMultiTexGenfvEXT __glewMultiTexGeniEXT __glewMultiTexGenivEXT __glewMultiTexImage1DEXT __glewMultiTexImage2DEXT __glewMultiTexImage3DEXT __glewMultiTexParameterIivEXT __glewMultiTexParameterIuivEXT __glewMultiTexParameterfEXT __glewMultiTexParameterfvEXT __glewMultiTexParameteriEXT __glewMultiTexParameterivEXT __glewMultiTexRenderbufferEXT __glewMultiTexSubImage1DEXT __glewMultiTexSubImage2DEXT __glewMultiTexSubImage3DEXT __glewNamedBufferDataEXT __glewNamedBufferSubDataEXT __glewNamedFramebufferRenderbufferEXT __glewNamedFramebufferTexture1DEXT __glewNamedFramebufferTexture2DEXT __glewNamedFramebufferTexture3DEXT __glewNamedFramebufferTextureEXT __glewNamedFramebufferTextureFaceEXT __glewNamedFramebufferTextureLayerEXT __glewNamedProgramLocalParameter4dEXT __glewNamedProgramLocalParameter4dvEXT __glewNamedProgramLocalParameter4fEXT __glewNamedProgramLocalParameter4fvEXT __glewNamedProgramLocalParameterI4iEXT __glewNamedProgramLocalParameterI4ivEXT __glewNamedProgramLocalParameterI4uiEXT __glewNamedProgramLocalParameterI4uivEXT __glewNamedProgramLocalParameters4fvEXT __glewNamedProgramLocalParametersI4ivEXT __glewNamedProgramLocalParametersI4uivEXT __glewNamedProgramStringEXT __glewNamedRenderbufferStorageEXT __glewNamedRenderbufferStorageMultisampleCoverageEXT __glewNamedRenderbufferStorageMultisampleEXT __glewNewBufferRegionEXT __glewNewObjectBufferATI __glewNormal3fVertex3fSUN __glewNormal3fVertex3fvSUN __glewNormal3hNV __glewNormal3hvNV __glewNormalPointerEXT __glewNormalPointerListIBM __glewNormalPointervINTEL __glewNormalStream3bATI __glewNormalStream3bvATI __glewNormalStream3dATI __glewNormalStream3dvATI __glewNormalStream3fATI __glewNormalStream3fvATI __glewNormalStream3iATI __glewNormalStream3ivATI __glewNormalStream3sATI __glewNormalStream3svATI __glewOrthofOES __glewPassTexCoordATI __glewPixelDataRangeNV __glewPixelTexGenSGIX __glewPixelTransformParameterfEXT __glewPixelTransformParameterfvEXT __glewPixelTransformParameteriEXT __glewPixelTransformParameterivEXT __glewPointParameterf __glewPointParameterfARB __glewPointParameterfEXT __glewPointParameterfv __glewPointParameterfvARB __glewPointParameterfvEXT __glewPointParameteri __glewPointParameteriNV __glewPointParameteriv __glewPointParameterivNV __glewPollAsyncSGIX __glewPolygonOffsetEXT __glewPresentFrameDualFillNV __glewPresentFrameKeyedNV __glewPrimitiveRestartIndexNV __glewPrimitiveRestartNV __glewPrioritizeTexturesEXT __glewProgramBufferParametersIivNV __glewProgramBufferParametersIuivNV __glewProgramBufferParametersfvNV __glewProgramEnvParameter4dARB __glewProgramEnvParameter4dvARB __glewProgramEnvParameter4fARB __glewProgramEnvParameter4fvARB __glewProgramEnvParameterI4iNV __glewProgramEnvParameterI4ivNV __glewProgramEnvParameterI4uiNV __glewProgramEnvParameterI4uivNV __glewProgramEnvParameters4fvEXT __glewProgramEnvParametersI4ivNV __glewProgramEnvParametersI4uivNV __glewProgramLocalParameter4dARB __glewProgramLocalParameter4dvARB __glewProgramLocalParameter4fARB __glewProgramLocalParameter4fvARB __glewProgramLocalParameterI4iNV __glewProgramLocalParameterI4ivNV __glewProgramLocalParameterI4uiNV __glewProgramLocalParameterI4uivNV __glewProgramLocalParameters4fvEXT __glewProgramLocalParametersI4ivNV __glewProgramLocalParametersI4uivNV __glewProgramNamedParameter4dNV __glewProgramNamedParameter4dvNV __glewProgramNamedParameter4fNV __glewProgramNamedParameter4fvNV __glewProgramParameter4dNV __glewProgramParameter4dvNV __glewProgramParameter4fNV __glewProgramParameter4fvNV __glewProgramParameteriARB __glewProgramParameteriEXT __glewProgramParameters4dvNV __glewProgramParameters4fvNV __glewProgramStringARB __glewProgramUniform1fEXT __glewProgramUniform1fvEXT __glewProgramUniform1iEXT __glewProgramUniform1ivEXT __glewProgramUniform1uiEXT __glewProgramUniform1uivEXT __glewProgramUniform2fEXT __glewProgramUniform2fvEXT __glewProgramUniform2iEXT __glewProgramUniform2ivEXT __glewProgramUniform2uiEXT __glewProgramUniform2uivEXT __glewProgramUniform3fEXT __glewProgramUniform3fvEXT __glewProgramUniform3iEXT __glewProgramUniform3ivEXT __glewProgramUniform3uiEXT __glewProgramUniform3uivEXT __glewProgramUniform4fEXT __glewProgramUniform4fvEXT __glewProgramUniform4iEXT __glewProgramUniform4ivEXT __glewProgramUniform4uiEXT __glewProgramUniform4uivEXT __glewProgramUniformMatrix2fvEXT __glewProgramUniformMatrix2x3fvEXT __glewProgramUniformMatrix2x4fvEXT __glewProgramUniformMatrix3fvEXT __glewProgramUniformMatrix3x2fvEXT __glewProgramUniformMatrix3x4fvEXT __glewProgramUniformMatrix4fvEXT __glewProgramUniformMatrix4x2fvEXT __glewProgramUniformMatrix4x3fvEXT __glewProgramVertexLimitNV __glewPushClientAttribDefaultEXT __glewReadBufferRegionEXT __glewReadVideoPixelsSUN __glewReferencePlaneSGIX __glewRenderbufferStorage __glewRenderbufferStorageEXT __glewRenderbufferStorageMultisample __glewRenderbufferStorageMultisampleCoverageNV __glewRenderbufferStorageMultisampleEXT __glewReplacementCodePointerSUN __glewReplacementCodeubSUN __glewReplacementCodeubvSUN __glewReplacementCodeuiColor3fVertex3fSUN __glewReplacementCodeuiColor3fVertex3fvSUN __glewReplacementCodeuiColor4fNormal3fVertex3fSUN __glewReplacementCodeuiColor4fNormal3fVertex3fvSUN __glewReplacementCodeuiColor4ubVertex3fSUN __glewReplacementCodeuiColor4ubVertex3fvSUN __glewReplacementCodeuiNormal3fVertex3fSUN __glewReplacementCodeuiNormal3fVertex3fvSUN __glewReplacementCodeuiSUN __glewReplacementCodeuiTexCoord2fColor4fNormal3fVertex3fSUN __glewReplacementCodeuiTexCoord2fColor4fNormal3fVertex3fvSUN __glewReplacementCodeuiTexCoord2fNormal3fVertex3fSUN __glewReplacementCodeuiTexCoord2fNormal3fVertex3fvSUN __glewReplacementCodeuiTexCoord2fVertex3fSUN __glewReplacementCodeuiTexCoord2fVertex3fvSUN __glewReplacementCodeuiVertex3fSUN __glewReplacementCodeuiVertex3fvSUN __glewReplacementCodeuivSUN __glewReplacementCodeusSUN __glewReplacementCodeusvSUN __glewRequestResidentProgramsNV __glewResetHistogram __glewResetHistogramEXT __glewResetMinmax __glewResetMinmaxEXT __glewResizeBuffersMESA __glewSampleCoverage __glewSampleCoverageARB __glewSampleMapATI __glewSampleMaskEXT __glewSampleMaskIndexedNV __glewSampleMaskSGIS __glewSamplePatternEXT __glewSamplePatternSGIS __glewSecondaryColor3b __glewSecondaryColor3bEXT __glewSecondaryColor3bv __glewSecondaryColor3bvEXT __glewSecondaryColor3d __glewSecondaryColor3dEXT __glewSecondaryColor3dv __glewSecondaryColor3dvEXT __glewSecondaryColor3f __glewSecondaryColor3fEXT __glewSecondaryColor3fv __glewSecondaryColor3fvEXT __glewSecondaryColor3hNV __glewSecondaryColor3hvNV __glewSecondaryColor3i __glewSecondaryColor3iEXT __glewSecondaryColor3iv __glewSecondaryColor3ivEXT __glewSecondaryColor3s __glewSecondaryColor3sEXT __glewSecondaryColor3sv __glewSecondaryColor3svEXT __glewSecondaryColor3ub __glewSecondaryColor3ubEXT __glewSecondaryColor3ubv __glewSecondaryColor3ubvEXT __glewSecondaryColor3ui __glewSecondaryColor3uiEXT __glewSecondaryColor3uiv __glewSecondaryColor3uivEXT __glewSecondaryColor3us __glewSecondaryColor3usEXT __glewSecondaryColor3usv __glewSecondaryColor3usvEXT __glewSecondaryColorPointer __glewSecondaryColorPointerEXT __glewSecondaryColorPointerListIBM __glewSeparableFilter2D __glewSeparableFilter2DEXT __glewSetFenceAPPLE __glewSetFenceNV __glewSetFragmentShaderConstantATI __glewSetInvariantEXT __glewSetLocalConstantEXT __glewShaderOp1EXT __glewShaderOp2EXT __glewShaderOp3EXT __glewShaderSource __glewShaderSourceARB __glewSharpenTexFuncSGIS __glewSpriteParameterfSGIX __glewSpriteParameterfvSGIX __glewSpriteParameteriSGIX __glewSpriteParameterivSGIX __glewStencilFuncSeparate __glewStencilFuncSeparateATI __glewStencilMaskSeparate __glewStencilOpSeparate __glewStencilOpSeparateATI __glewStringMarkerGREMEDY __glewSwizzleEXT __glewTagSampleBufferSGIX __glewTangentPointerEXT __glewTbufferMask3DFX __glewTestFenceAPPLE __glewTestFenceNV __glewTestObjectAPPLE __glewTexBufferARB __glewTexBufferEXT __glewTexBumpParameterfvATI __glewTexBumpParameterivATI __glewTexCoord1hNV __glewTexCoord1hvNV __glewTexCoord2fColor3fVertex3fSUN __glewTexCoord2fColor3fVertex3fvSUN __glewTexCoord2fColor4fNormal3fVertex3fSUN __glewTexCoord2fColor4fNormal3fVertex3fvSUN __glewTexCoord2fColor4ubVertex3fSUN __glewTexCoord2fColor4ubVertex3fvSUN __glewTexCoord2fNormal3fVertex3fSUN __glewTexCoord2fNormal3fVertex3fvSUN __glewTexCoord2fVertex3fSUN __glewTexCoord2fVertex3fvSUN __glewTexCoord2hNV __glewTexCoord2hvNV __glewTexCoord3hNV __glewTexCoord3hvNV __glewTexCoord4fColor4fNormal3fVertex4fSUN __glewTexCoord4fColor4fNormal3fVertex4fvSUN __glewTexCoord4fVertex4fSUN __glewTexCoord4fVertex4fvSUN __glewTexCoord4hNV __glewTexCoord4hvNV __glewTexCoordPointerEXT __glewTexCoordPointerListIBM __glewTexCoordPointervINTEL __glewTexFilterFuncSGIS __glewTexImage3D __glewTexImage3DEXT __glewTexImage4DSGIS __glewTexParameterIiv __glewTexParameterIivEXT __glewTexParameterIuiv __glewTexParameterIuivEXT __glewTexRenderbufferNV __glewTexScissorFuncINTEL __glewTexScissorINTEL __glewTexSubImage1DEXT __glewTexSubImage2DEXT __glewTexSubImage3D __glewTexSubImage3DEXT __glewTexSubImage4DSGIS __glewTextureBufferEXT __glewTextureFogSGIX __glewTextureImage1DEXT __glewTextureImage2DEXT __glewTextureImage3DEXT __glewTextureLightEXT __glewTextureMaterialEXT __glewTextureNormalEXT __glewTextureParameterIivEXT __glewTextureParameterIuivEXT __glewTextureParameterfEXT __glewTextureParameterfvEXT __glewTextureParameteriEXT __glewTextureParameterivEXT __glewTextureRangeAPPLE __glewTextureRenderbufferEXT __glewTextureSubImage1DEXT __glewTextureSubImage2DEXT __glewTextureSubImage3DEXT __glewTrackMatrixNV __glewTransformFeedbackAttribsNV __glewTransformFeedbackVaryings __glewTransformFeedbackVaryingsEXT __glewTransformFeedbackVaryingsNV __glewUniform1f __glewUniform1fARB __glewUniform1fv __glewUniform1fvARB __glewUniform1i __glewUniform1iARB __glewUniform1iv __glewUniform1ivARB __glewUniform1ui __glewUniform1uiEXT __glewUniform1uiv __glewUniform1uivEXT __glewUniform2f __glewUniform2fARB __glewUniform2fv __glewUniform2fvARB __glewUniform2i __glewUniform2iARB __glewUniform2iv __glewUniform2ivARB __glewUniform2ui __glewUniform2uiEXT __glewUniform2uiv __glewUniform2uivEXT __glewUniform3f __glewUniform3fARB __glewUniform3fv __glewUniform3fvARB __glewUniform3i __glewUniform3iARB __glewUniform3iv __glewUniform3ivARB __glewUniform3ui __glewUniform3uiEXT __glewUniform3uiv __glewUniform3uivEXT __glewUniform4f __glewUniform4fARB __glewUniform4fv __glewUniform4fvARB __glewUniform4i __glewUniform4iARB __glewUniform4iv __glewUniform4ivARB __glewUniform4ui __glewUniform4uiEXT __glewUniform4uiv __glewUniform4uivEXT __glewUniformBufferEXT __glewUniformMatrix2fv __glewUniformMatrix2fvARB __glewUniformMatrix2x3fv __glewUniformMatrix2x4fv __glewUniformMatrix3fv __glewUniformMatrix3fvARB __glewUniformMatrix3x2fv __glewUniformMatrix3x4fv __glewUniformMatrix4fv __glewUniformMatrix4fvARB __glewUniformMatrix4x2fv __glewUniformMatrix4x3fv __glewUnlockArraysEXT __glewUnmapBuffer __glewUnmapBufferARB __glewUnmapNamedBufferEXT __glewUnmapObjectBufferATI __glewUpdateObjectBufferATI __glewUseProgram __glewUseProgramObjectARB __glewValidateProgram __glewValidateProgramARB __glewVariantArrayObjectATI __glewVariantPointerEXT __glewVariantbvEXT __glewVariantdvEXT __glewVariantfvEXT __glewVariantivEXT __glewVariantsvEXT __glewVariantubvEXT __glewVariantuivEXT __glewVariantusvEXT __glewVertex2hNV __glewVertex2hvNV __glewVertex3hNV __glewVertex3hvNV __glewVertex4hNV __glewVertex4hvNV __glewVertexArrayParameteriAPPLE __glewVertexArrayRangeAPPLE __glewVertexArrayRangeNV __glewVertexAttrib1d __glewVertexAttrib1dARB __glewVertexAttrib1dNV __glewVertexAttrib1dv __glewVertexAttrib1dvARB __glewVertexAttrib1dvNV __glewVertexAttrib1f __glewVertexAttrib1fARB __glewVertexAttrib1fNV __glewVertexAttrib1fv __glewVertexAttrib1fvARB __glewVertexAttrib1fvNV __glewVertexAttrib1hNV __glewVertexAttrib1hvNV __glewVertexAttrib1s __glewVertexAttrib1sARB __glewVertexAttrib1sNV __glewVertexAttrib1sv __glewVertexAttrib1svARB __glewVertexAttrib1svNV __glewVertexAttrib2d __glewVertexAttrib2dARB __glewVertexAttrib2dNV __glewVertexAttrib2dv __glewVertexAttrib2dvARB __glewVertexAttrib2dvNV __glewVertexAttrib2f __glewVertexAttrib2fARB __glewVertexAttrib2fNV __glewVertexAttrib2fv __glewVertexAttrib2fvARB __glewVertexAttrib2fvNV __glewVertexAttrib2hNV __glewVertexAttrib2hvNV __glewVertexAttrib2s __glewVertexAttrib2sARB __glewVertexAttrib2sNV __glewVertexAttrib2sv __glewVertexAttrib2svARB __glewVertexAttrib2svNV __glewVertexAttrib3d __glewVertexAttrib3dARB __glewVertexAttrib3dNV __glewVertexAttrib3dv __glewVertexAttrib3dvARB __glewVertexAttrib3dvNV __glewVertexAttrib3f __glewVertexAttrib3fARB __glewVertexAttrib3fNV __glewVertexAttrib3fv __glewVertexAttrib3fvARB __glewVertexAttrib3fvNV __glewVertexAttrib3hNV __glewVertexAttrib3hvNV __glewVertexAttrib3s __glewVertexAttrib3sARB __glewVertexAttrib3sNV __glewVertexAttrib3sv __glewVertexAttrib3svARB __glewVertexAttrib3svNV __glewVertexAttrib4Nbv __glewVertexAttrib4NbvARB __glewVertexAttrib4Niv __glewVertexAttrib4NivARB __glewVertexAttrib4Nsv __glewVertexAttrib4NsvARB __glewVertexAttrib4Nub __glewVertexAttrib4NubARB __glewVertexAttrib4Nubv __glewVertexAttrib4NubvARB __glewVertexAttrib4Nuiv __glewVertexAttrib4NuivARB __glewVertexAttrib4Nusv __glewVertexAttrib4NusvARB __glewVertexAttrib4bv __glewVertexAttrib4bvARB __glewVertexAttrib4d __glewVertexAttrib4dARB __glewVertexAttrib4dNV __glewVertexAttrib4dv __glewVertexAttrib4dvARB __glewVertexAttrib4dvNV __glewVertexAttrib4f __glewVertexAttrib4fARB __glewVertexAttrib4fNV __glewVertexAttrib4fv __glewVertexAttrib4fvARB __glewVertexAttrib4fvNV __glewVertexAttrib4hNV __glewVertexAttrib4hvNV __glewVertexAttrib4iv __glewVertexAttrib4ivARB __glewVertexAttrib4s __glewVertexAttrib4sARB __glewVertexAttrib4sNV __glewVertexAttrib4sv __glewVertexAttrib4svARB __glewVertexAttrib4svNV __glewVertexAttrib4ubNV __glewVertexAttrib4ubv __glewVertexAttrib4ubvARB __glewVertexAttrib4ubvNV __glewVertexAttrib4uiv __glewVertexAttrib4uivARB __glewVertexAttrib4usv __glewVertexAttrib4usvARB __glewVertexAttribArrayObjectATI __glewVertexAttribDivisorARB __glewVertexAttribI1i __glewVertexAttribI1iEXT __glewVertexAttribI1iv __glewVertexAttribI1ivEXT __glewVertexAttribI1ui __glewVertexAttribI1uiEXT __glewVertexAttribI1uiv __glewVertexAttribI1uivEXT __glewVertexAttribI2i __glewVertexAttribI2iEXT __glewVertexAttribI2iv __glewVertexAttribI2ivEXT __glewVertexAttribI2ui __glewVertexAttribI2uiEXT __glewVertexAttribI2uiv __glewVertexAttribI2uivEXT __glewVertexAttribI3i __glewVertexAttribI3iEXT __glewVertexAttribI3iv __glewVertexAttribI3ivEXT __glewVertexAttribI3ui __glewVertexAttribI3uiEXT __glewVertexAttribI3uiv __glewVertexAttribI3uivEXT __glewVertexAttribI4bv __glewVertexAttribI4bvEXT __glewVertexAttribI4i __glewVertexAttribI4iEXT __glewVertexAttribI4iv __glewVertexAttribI4ivEXT __glewVertexAttribI4sv __glewVertexAttribI4svEXT __glewVertexAttribI4ubv __glewVertexAttribI4ubvEXT __glewVertexAttribI4ui __glewVertexAttribI4uiEXT __glewVertexAttribI4uiv __glewVertexAttribI4uivEXT __glewVertexAttribI4usv __glewVertexAttribI4usvEXT __glewVertexAttribIPointer __glewVertexAttribIPointerEXT __glewVertexAttribPointer __glewVertexAttribPointerARB __glewVertexAttribPointerNV __glewVertexAttribs1dvNV __glewVertexAttribs1fvNV __glewVertexAttribs1hvNV __glewVertexAttribs1svNV __glewVertexAttribs2dvNV __glewVertexAttribs2fvNV __glewVertexAttribs2hvNV __glewVertexAttribs2svNV __glewVertexAttribs3dvNV __glewVertexAttribs3fvNV __glewVertexAttribs3hvNV __glewVertexAttribs3svNV __glewVertexAttribs4dvNV __glewVertexAttribs4fvNV __glewVertexAttribs4hvNV __glewVertexAttribs4svNV __glewVertexAttribs4ubvNV __glewVertexBlendARB __glewVertexBlendEnvfATI __glewVertexBlendEnviATI __glewVertexPointerEXT __glewVertexPointerListIBM __glewVertexPointervINTEL __glewVertexStream2dATI __glewVertexStream2dvATI __glewVertexStream2fATI __glewVertexStream2fvATI __glewVertexStream2iATI __glewVertexStream2ivATI __glewVertexStream2sATI __glewVertexStream2svATI __glewVertexStream3dATI __glewVertexStream3dvATI __glewVertexStream3fATI __glewVertexStream3fvATI __glewVertexStream3iATI __glewVertexStream3ivATI __glewVertexStream3sATI __glewVertexStream3svATI __glewVertexStream4dATI __glewVertexStream4dvATI __glewVertexStream4fATI __glewVertexStream4fvATI __glewVertexStream4iATI __glewVertexStream4ivATI __glewVertexStream4sATI __glewVertexStream4svATI __glewVertexWeightPointerEXT __glewVertexWeightfEXT __glewVertexWeightfvEXT __glewVertexWeighthNV __glewVertexWeighthvNV __glewVideoParameterivNV __glewWeightPointerARB __glewWeightbvARB __glewWeightdvARB __glewWeightfvARB __glewWeightivARB __glewWeightsvARB __glewWeightubvARB __glewWeightuivARB __glewWeightusvARB __glewWindowPos2d __glewWindowPos2dARB __glewWindowPos2dMESA __glewWindowPos2dv __glewWindowPos2dvARB __glewWindowPos2dvMESA __glewWindowPos2f __glewWindowPos2fARB __glewWindowPos2fMESA __glewWindowPos2fv __glewWindowPos2fvARB __glewWindowPos2fvMESA __glewWindowPos2i __glewWindowPos2iARB __glewWindowPos2iMESA __glewWindowPos2iv __glewWindowPos2ivARB __glewWindowPos2ivMESA __glewWindowPos2s __glewWindowPos2sARB __glewWindowPos2sMESA __glewWindowPos2sv __glewWindowPos2svARB __glewWindowPos2svMESA __glewWindowPos3d __glewWindowPos3dARB __glewWindowPos3dMESA __glewWindowPos3dv __glewWindowPos3dvARB __glewWindowPos3dvMESA __glewWindowPos3f __glewWindowPos3fARB __glewWindowPos3fMESA __glewWindowPos3fv __glewWindowPos3fvARB __glewWindowPos3fvMESA __glewWindowPos3i __glewWindowPos3iARB __glewWindowPos3iMESA __glewWindowPos3iv __glewWindowPos3ivARB __glewWindowPos3ivMESA __glewWindowPos3s __glewWindowPos3sARB __glewWindowPos3sMESA __glewWindowPos3sv __glewWindowPos3svARB __glewWindowPos3svMESA __glewWindowPos4dMESA __glewWindowPos4dvMESA __glewWindowPos4fMESA __glewWindowPos4fvMESA __glewWindowPos4iMESA __glewWindowPos4ivMESA __glewWindowPos4sMESA __glewWindowPos4svMESA __glewWriteMaskEXT __wglewAllocateMemoryNV __wglewAssociateImageBufferEventsI3D __wglewBeginFrameTrackingI3D __wglewBindDisplayColorTableEXT __wglewBindSwapBarrierNV __wglewBindTexImageARB __wglewBindVideoDeviceNV __wglewBindVideoImageNV __wglewChoosePixelFormatARB __wglewChoosePixelFormatEXT __wglewCreateAffinityDCNV __wglewCreateBufferRegionARB __wglewCreateContextAttribsARB __wglewCreateDisplayColorTableEXT __wglewCreateImageBufferI3D __wglewCreatePbufferARB __wglewCreatePbufferEXT __wglewDeleteBufferRegionARB __wglewDeleteDCNV __wglewDestroyDisplayColorTableEXT __wglewDestroyImageBufferI3D __wglewDestroyPbufferARB __wglewDestroyPbufferEXT __wglewDisableFrameLockI3D __wglewDisableGenlockI3D __wglewEnableFrameLockI3D __wglewEnableGenlockI3D __wglewEndFrameTrackingI3D __wglewEnumGpuDevicesNV __wglewEnumGpusFromAffinityDCNV __wglewEnumGpusNV __wglewEnumerateVideoDevicesNV __wglewFreeMemoryNV __wglewGenlockSampleRateI3D __wglewGenlockSourceDelayI3D __wglewGenlockSourceEdgeI3D __wglewGenlockSourceI3D __wglewGetCurrentReadDCARB __wglewGetCurrentReadDCEXT __wglewGetDigitalVideoParametersI3D __wglewGetExtensionsStringARB __wglewGetExtensionsStringEXT __wglewGetFrameUsageI3D __wglewGetGammaTableI3D __wglewGetGammaTableParametersI3D __wglewGetGenlockSampleRateI3D __wglewGetGenlockSourceDelayI3D __wglewGetGenlockSourceEdgeI3D __wglewGetGenlockSourceI3D __wglewGetMscRateOML __wglewGetPbufferDCARB __wglewGetPbufferDCEXT __wglewGetPixelFormatAttribfvARB __wglewGetPixelFormatAttribfvEXT __wglewGetPixelFormatAttribivARB __wglewGetPixelFormatAttribivEXT __wglewGetSwapIntervalEXT __wglewGetSyncValuesOML __wglewGetVideoDeviceNV __wglewGetVideoInfoNV __wglewIsEnabledFrameLockI3D __wglewIsEnabledGenlockI3D __wglewJoinSwapGroupNV __wglewLoadDisplayColorTableEXT __wglewMakeContextCurrentARB __wglewMakeContextCurrentEXT __wglewQueryCurrentContextNV __wglewQueryFrameCountNV __wglewQueryFrameLockMasterI3D __wglewQueryFrameTrackingI3D __wglewQueryGenlockMaxSourceDelayI3D __wglewQueryMaxSwapGroupsNV __wglewQueryPbufferARB __wglewQueryPbufferEXT __wglewQuerySwapGroupNV __wglewReleaseImageBufferEventsI3D __wglewReleasePbufferDCARB __wglewReleasePbufferDCEXT __wglewReleaseTexImageARB __wglewReleaseVideoDeviceNV __wglewReleaseVideoImageNV __wglewResetFrameCountNV __wglewRestoreBufferRegionARB __wglewSaveBufferRegionARB __wglewSendPbufferToVideoNV __wglewSetDigitalVideoParametersI3D __wglewSetGammaTableI3D __wglewSetGammaTableParametersI3D __wglewSetPbufferAttribARB __wglewSetStereoEmitterState3DL __wglewSwapBuffersMscOML __wglewSwapIntervalEXT __wglewSwapLayerBuffersMscOML __wglewWaitForMscOML __wglewWaitForSbcOML glewExperimental glewGetErrorString glewGetExtension glewGetString glewInit glewIsSupported wglewGetExtension wglewIsSupported

glut32.dll

IMPHASH 63e781ab0f9a2e32774b85aaad841da8
SHA256 9b82bcac771427ce3e5898c9a1fa2bd77e485e1ff907c384f28fcfcc9b7e5444
MD5 4641afbdf0701eea35fef6513060ef91
SHA1 1849f042523322575b6970e26ef8ec5ef3f013c6
SHA512 75a47984b598f053b9ea15f5d6a4779068f4343b4feb5f03952b757020376c13b7d636a1428526f4bebe89078dcd371ae00857b3a60532330a5f404c89b2d065
SSDEEP 1536:oeH7lb/T7/LAUsqjBY9ajwmI7fJZQlWid9WrwKl51apLeuta4Dkc1T9apzNMcdBE:oebhT7TDDdVBITjQArD47udBv90V
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

47007

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

opengl32

glBitmap glPixelStorei glGetIntegerv glFinish glGetString glViewport glDrawBuffer glReadBuffer wglGetCurrentDC glGetError glEnable glPushMatrix glRotatef glScalef glMap2f glMapGrid2f glEvalMesh2 glPopMatrix glVertex2f glTranslatef glNormal3f glVertex3f wglDeleteContext wglGetProcAddress wglMakeCurrent wglCreateContext glEnd glNormal3fv glBegin glVertex3fv glPopAttrib glPolygonMode glPushAttrib wglGetCurrentContext

glu32

gluCylinder gluNewQuadric gluQuadricDrawStyle gluQuadricNormals gluErrorString gluSphere

winmm

joyReleaseCapture joySetThreshold joySetCapture joyGetPosEx

msvcrt

tolower abort _iob fprintf _initterm putc getenv strncmp strrchr _ftime _adjust_fdiv __dllonexit vfprintf _strdup _onexit strchr strstr exit strpbrk strtol _ftol malloc free realloc strtok

kernel32

GetModuleHandleA DisableThreadLibraryCalls GetTickCount

user32

DispatchMessageA TranslateMessage GetMessageA MsgWaitForMultipleObjects ChangeDisplaySettingsA GetSystemMetrics EnumDisplaySettingsA GetClientRect ReleaseDC DestroyWindow CreateWindowExA RegisterClassA LoadIconA DefWindowProcA PostQuitMessage PostMessageA SetWindowTextA TrackPopupMenu CreatePopupMenu DestroyMenu RemoveMenu AppendMenuA ModifyMenuA KillTimer SetTimer ReleaseCapture SetCapture GetSubMenu MapVirtualKeyA GetKeyState ChildWindowFromPoint ScreenToClient EndPaint BeginPaint SetCursorPos PeekMessageA ClientToScreen AdjustWindowRect SetWindowPos ShowWindow GetDesktopWindow GetDC GetCursorPos WindowFromPoint SetCursor LoadCursorA IsWindowVisible GetClassInfoA

gdi32

RealizePalette SwapBuffers SetPaletteEntries GetSystemPaletteEntries CreatePalette UnrealizeObject SelectPalette DeleteObject GdiFlush DescribePixelFormat ChoosePixelFormat SetPixelFormat GetPixelFormat GetDeviceCaps

__glutCreateMenuWithExit __glutCreateWindowWithExit __glutGetFCB __glutInitWithExit __glutSetFCB glutAddMenuEntry glutAddSubMenu glutAttachMenu glutBitmapCharacter glutBitmapLength glutBitmapWidth glutButtonBoxFunc glutChangeToMenuEntry glutChangeToSubMenu glutCopyColormap glutCreateMenu glutCreateSubWindow glutCreateWindow glutDestroyMenu glutDestroyWindow glutDetachMenu glutDeviceGet glutDialsFunc glutDisplayFunc glutEnterGameMode glutEntryFunc glutEstablishOverlay glutExtensionSupported glutForceJoystickFunc glutFullScreen glutGameModeGet glutGameModeString glutGet glutGetColor glutGetMenu glutGetModifiers glutGetWindow glutHideOverlay glutHideWindow glutIconifyWindow glutIdleFunc glutIgnoreKeyRepeat glutInit glutInitDisplayMode glutInitDisplayString glutInitWindowPosition glutInitWindowSize glutJoystickFunc glutKeyboardFunc glutKeyboardUpFunc glutLayerGet glutLeaveGameMode glutMainLoop glutMenuStateFunc glutMenuStatusFunc glutMotionFunc glutMouseFunc glutOverlayDisplayFunc glutPassiveMotionFunc glutPopWindow glutPositionWindow glutPostOverlayRedisplay glutPostRedisplay glutPostWindowOverlayRedisplay glutPostWindowRedisplay glutPushWindow glutRemoveMenuItem glutRemoveOverlay glutReportErrors glutReshapeFunc glutReshapeWindow glutSetColor glutSetCursor glutSetIconTitle glutSetKeyRepeat glutSetMenu glutSetWindow glutSetWindowTitle glutSetupVideoResizing glutShowOverlay glutShowWindow glutSolidCone glutSolidCube glutSolidDodecahedron glutSolidIcosahedron glutSolidOctahedron glutSolidSphere glutSolidTeapot glutSolidTetrahedron glutSolidTorus glutSpaceballButtonFunc glutSpaceballMotionFunc glutSpaceballRotateFunc glutSpecialFunc glutSpecialUpFunc glutStopVideoResizing glutStrokeCharacter glutStrokeLength glutStrokeLengthf glutStrokeWidth glutStrokeWidthf glutSwapBuffers glutTabletButtonFunc glutTabletMotionFunc glutTimerFunc glutUseLayer glutVideoPan glutVideoResize glutVideoResizeGet glutVisibilityFunc glutWarpPointer glutWindowStatusFunc glutWireCone glutWireCube glutWireDodecahedron glutWireIcosahedron glutWireOctahedron glutWireSphere glutWireTeapot glutWireTetrahedron glutWireTorus

inis/GSdx.ini

SHA256 d66432745c1e9c181f3de4c89acbf32249a0a73d911a7735f32384a819046d5c
MD5 225f2f134acc77d60b96d71b70b70f77
SHA1 a82acde12f2150196a0f569896c94778b39ad723
SHA512 b251146681a37988bbcbc63f9ffe1c9100f5fc1917fa80b7fb0fe88da2807b45e82cb63108fca8d4e10cdbffe2bf9e4188cb4eb14d56a8f64adc8d8ccf297d1b
MD5 SHA1 SHA512

NSIS installer

installer

inis/PCSX2_vm.ini

SHA256 4a811ca2c31b444710cba66afc1978f4da85f42739351bfd0881e7789f71c2e0
MD5 9d44e3a1cb1df940f4ddb006956ed368
SHA1 c05a3fbba7ce9b98aed685e8abd3318a812f94d3
SHA512 bb38137bb8a99e27b713b5617f87ecd649e20a3f521719cbbb4a063c2438464cf05dee941e7a06866a88da87d7c8b26eb0924509733196409b5d513c51b81b77
MD5 SHA1 SHA512

NSIS installer

installer

memcards/Mcd001.ps2

SHA256 47ebe237a3987f843fc19b0f801ce1edc1690768ef6b18e4b03a12ca6b298358
MD5 914e26ce1e2661e14d39d87310d3cdd3
SHA1 eac18874c24d1018b5244074b0a6d11468b390ad
SHA512 c861daa27718b379ce397756b3fb3a99cc6ea73ef15336371baa702683acfdd8cffba1b91f19d13dd625a2cbc5393dd1d1d15c9c5c1b792fefd2084362c8ce6a
SSDEEP 3:RRD:LD
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

memcards/Mcd002.ps2

SHA256 47ebe237a3987f843fc19b0f801ce1edc1690768ef6b18e4b03a12ca6b298358
MD5 914e26ce1e2661e14d39d87310d3cdd3
SHA1 eac18874c24d1018b5244074b0a6d11468b390ad
SHA512 c861daa27718b379ce397756b3fb3a99cc6ea73ef15336371baa702683acfdd8cffba1b91f19d13dd625a2cbc5393dd1d1d15c9c5c1b792fefd2084362c8ce6a
SSDEEP 3:RRD:LD
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

pcsx2-wx.exe

IMPHASH 6f7f35b268c01efeac1d302436c6a105
SHA256 3a228552832e7d1e91d1e874136eaf916f0fce580fffa7e043362b0b6f59eb79
MD5 344a8f103f71c3c5b92c1c7a91d73a57
SHA1 b61eb18cb4e09fac2c9201cb228bb5efd2f7c82f
SHA512 80f88aea6deba7d4a0e807deeb1d45696e430b370036a0fe737f217bef27dec858fdb9c83cbed0ca759c148c8d607d6de1abe4ff855982b96d52c5ec5e78e762
SSDEEP 98304:/57+Npiq07vAp167SbmMKzWATmKuHPNqWlZ5cwvfX+V+VowMPSiK6dxBtARKvSG5:h7+FS4znbmMKqATmKuHPNqWlZ5cwvfXR
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

427805

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

H:\Share\pcsx2src\bin\pcsx2.pdb

comctl32

ImageList_BeginDrag ImageList_SetDragCursorImage ImageList_EndDrag CreateStatusWindowW ImageList_DragEnter ImageList_DragLeave ord16 ImageList_ReplaceIcon ImageList_Add ImageList_Destroy ImageList_Create ord17 ImageList_GetIconSize ImageList_Draw ImageList_DragMove ImageList_GetImageCount

kernel32

InitializeCriticalSection IsDebuggerPresent UnhandledExceptionFilter GetSystemTimeAsFileTime GetTickCount SetUnhandledExceptionFilter GetStartupInfoW HeapSetInformation InterlockedCompareExchange InterlockedExchange DecodePointer EncodePointer SetThreadAffinityMask VirtualProtect VirtualFree VirtualAlloc OpenThread GetThreadTimes GlobalMemoryStatusEx QueryPerformanceCounter QueryPerformanceFrequency VirtualQuery GetModuleFileNameW EnterCriticalSection LeaveCriticalSection Sleep GetThreadContext GetCurrentProcess GetCurrentThread IsProcessorFeaturePresent SetThreadPriority WaitForSingleObject CloseHandle DeleteCriticalSection GetLastError GetFileAttributesW CreateFileW DeviceIoControl ReadFile PeekNamedPipe CreatePipe SetStdHandle HeapCreate HeapAlloc HeapReAlloc HeapFree OutputDebugStringA MultiByteToWideChar OutputDebugStringW FileTimeToLocalFileTime FileTimeToSystemTime GetTempFileNameW GetTempPathW FindFirstFileW FindClose GetFileTime GetFileSize CopyFileW MoveFileExW SetCurrentDirectoryW GetWindowsDirectoryW GetFileType GetTimeZoneInformation GetThreadLocale GetLocaleInfoW WideCharToMultiByte GetVersionExW GetModuleHandleW LoadLibraryW FreeLibrary GetProcAddress FormatMessageW LocalFree CreateMutexW ReleaseMutex InterlockedDecrement TlsSetValue GetCurrentThreadId GetSystemInfo GetProcessAffinityMask TlsAlloc TlsFree RaiseException GetStdHandle SetThreadLocale GetUserDefaultLCID GetACP GetEnvironmentVariableW TerminateProcess GetExitCodeProcess GetCurrentProcessId IsValidCodePage GetCPInfo FindNextFileW ExpandEnvironmentStringsW IsBadReadPtr IsBadStringPtrA WriteFile SetLastError SetErrorMode GetCommandLineW LocalAlloc GlobalAlloc GlobalFree GlobalLock GlobalSize GlobalUnlock HeapSize GetProcessHeap ResetEvent SetEvent

user32

PostThreadMessageW GetWindowThreadProcessId MessageBoxW SendMessageW GetFocus EnableWindow ShowWindow SetCapture ReleaseCapture GetCapture GetCursorPos PtInRect SetCursor SetCursorPos GetScrollInfo SetScrollInfo ScrollWindow IsWindow WindowFromPoint GetParent SetParent RedrawWindow UpdateWindow GetClientRect ScreenToClient ClientToScreen DeferWindowPos MoveWindow GetDC ReleaseDC PostQuitMessage TranslateMessage DispatchMessageW TrackPopupMenu CallWindowProcW GetKeyState IsDialogMessageW IsWindowEnabled IsWindowVisible InflateRect SetWindowTextW InvalidateRect GetUpdateRgn FillRect GetWindow BeginDeferWindowPos EndDeferWindowPos GetMessageTime SystemParametersInfoW GetMenuItemCount GetMenuItemInfoW VkKeyScanW GetAsyncKeyState GetActiveWindow SetWindowsHookExW UnhookWindowsHookEx CallNextHookEx RegisterHotKey UnregisterHotKey CreateDialogParamW GetDlgItem GetWindowTextLengthW keybd_event OpenClipboard IsClipboardFormatAvailable CloseClipboard HideCaret GetForegroundWindow SetForegroundWindow CreateDialogIndirectParamW BringWindowToTop IsZoomed IsIconic GetDesktopWindow GetSystemMenu EnableMenuItem DrawMenuBar SetWindowRgn AdjustWindowRectEx FlashWindow UnregisterClassW DrawTextW DrawFocusRect CopyRect OffsetRect LoadCursorW SetTimer KillTimer SetMenuItemInfoW CreatePopupMenu DestroyMenu InsertMenuItemW InsertMenuW RemoveMenu ModifyMenuW GetMenuState CreateMenu AppendMenuW GetSubMenu CheckMenuRadioItem CheckMenuItem DestroyIcon GetIconInfo CreateIconIndirect LoadBitmapW LoadImageW LoadIconW SetMenu GetUpdateRect BeginPaint DrawIcon EndPaint DestroyCursor GetWindowDC DrawFrameControl DrawIconEx GetWindowTextW GetClassNameW ChildWindowFromPoint RegisterClipboardFormatW ShowCursor EnumDisplaySettingsW ChangeDisplaySettingsW SetClipboardData DrawEdge DrawStateW TranslateAcceleratorW CreateAcceleratorTableW DestroyAcceleratorTable GetMessageW ValidateRect MapWindowPoints GetMessagePos UnionRect PostMessageW SetFocus SetWindowLongW GetWindowLongW GetWindowRect GetSysColor GetSystemMetrics DefWindowProcW DestroyWindow PeekMessageW CreateWindowExW RegisterClassW SetWindowPos

gdi32

SetWinMetaFileBits GetMetaFileBitsEx SetMetaFileBitsEx GetWinMetaFileBits GetEnhMetaFileHeader DeleteEnhMetaFile CopyEnhMetaFileW GetEnhMetaFileW EnumFontFamiliesExW CreateDIBitmap GetDIBColorTable GetDIBits CreateDIBSection PtInRegion EqualRgn GetRgnBox SetTextAlign CreateRectRgnIndirect RectInRegion CombineRgn CreateICW LineTo MoveToEx ExtCreatePen GetNearestPaletteIndex CreatePalette StretchBlt StretchDIBits GetTextExtentExPointW GetCharABCWidthsW SetROP2 SetBrushOrgEx TextOutW MaskBlt PolyBezier Ellipse RoundRect Rectangle Polyline PolyPolygon Polygon SetPolyFillMode SetPixel Arc Pie GetPixel ExtFloodFill SetWindowOrgEx SetViewportOrgEx SetWindowExtEx SetViewportExtEx SetMapMode SelectClipRgn ExtSelectClipRgn GetClipBox GetBkColor GetTextColor SetStretchBltMode RestoreDC SaveDC CreateHatchBrush CreatePatternBrush GetStockObject PatBlt GetPaletteEntries BitBlt DeleteDC CreateCompatibleDC CreateCompatibleBitmap CreateBitmap GetObjectW CreatePen CreateSolidBrush OffsetRgn ExtCreateRegion GetRegionData GetDeviceCaps DeleteObject CreateFontIndirectW CreateRectRgn RealizePalette SelectPalette ExcludeClipRect GetTextMetricsW GetTextExtentPoint32W SelectObject GdiFlush SetBkMode SetBkColor SetTextColor

comdlg32

ChooseFontW ChooseColorW CommDlgExtendedError GetOpenFileNameW GetSaveFileNameW

advapi32

RegOpenKeyExW RegCreateKeyW RegCloseKey RegDeleteKeyW RegDeleteValueW RegQueryValueExW RegSetValueExW RegEnumValueW RegEnumKeyW

shell32

DragQueryFileW SHGetSpecialFolderLocation SHGetPathFromIDListW DragAcceptFiles ShellExecuteExW SHBrowseForFolderW ExtractIconW ExtractIconExW DragFinish DragQueryPoint SHGetMalloc

ole32

CoCreateInstance OleUninitialize CoLockObjectExternal RegisterDragDrop RevokeDragDrop ReleaseStgMedium DoDragDrop OleIsCurrentClipboard OleSetClipboard OleFlushClipboard OleGetClipboard OleInitialize

w32pthreads.v4

pthread_create pthread_detach pthread_setspecific sem_init sem_destroy pthread_key_delete sem_timedwait sem_getvalue pthread_kill ptw32_PrepCancel pthreadCancelableWait pthread_getspecific ptw32_testcancel_enable pthread_setcancelstate pthread_key_create pthread_mutex_timedlock pthread_mutexattr_destroy pthread_mutexattr_settype pthread_mutexattr_init pthread_mutex_destroy pthread_mutex_init ptw32_selfThreadKey ptw32_throw pthread_self pthread_equal sem_post

msvcp100

?max@?$numeric_limits@I@std@@SAIXZ ?_Xout_of_range@std@@YAXPBD@Z ?_Orphan_all@_Container_base0@std@@QAEXXZ ??1_Container_base12@std@@QAE@XZ ??1_Lockit@std@@QAE@XZ ??0_Lockit@std@@QAE@H@Z ?_Xlength_error@std@@YAXPBD@Z

msvcr100

_configthreadlocale _initterm_e _initterm _acmdln _ismbblead _XcptFilter _exit _cexit __getmainargs _amsg_exit _onexit _lock __dllonexit _unlock ?terminate@@YAXXZ modf tmpfile getenv sscanf strtod _snprintf longjmp _wtol _wcsnicmp toupper atoi swscanf bsearch qsort _ftime64 wcsspn atof wcstombs mbstowcs _wsetlocale isalnum isdigit isspace exit fprintf wcsncpy _swprintf fputwc fputws abort ftell clearerr calloc _wcsdup _telli64 _lseeki64 _commit _write _read setlocale _mktime64 wcsftime _gmtime64 _localtime64 _wcsicmp _fileno _get_osfhandle _getcwd _wgetcwd _wmkdir __setusermatherr wcsncmp iswalnum wcschr ferror feof _wgetenv ?_wopen@@YAHPB_WHH@Z wcsstr wcspbrk _vswprintf_p wcstod _wcstoui64 wcstol iswspace towupper iswdigit iswalpha _close setvbuf _fdopen _open_osfhandle __iob_func strstr fwrite fputc _wfopen strncpy strspn isalpha strchr strrchr _aligned_realloc sprintf strtol towlower _errno strncmp fclose fread fseek fopen _time64 fflush fputs vsprintf ??_V@YAXPAX@Z _wtoi wcstoul _aligned_free ??0exception@std@@QAE@ABV01@@Z ??0exception@std@@QAE@ABQBD@Z ?what@exception@std@@UBEPBDXZ realloc malloc free ??1exception@std@@UAE@XZ ??2@YAPAXI@Z ??3@YAXPAX@Z _purecall memmove _commode _fmode __CxxLongjmpUnwind _CIcos _setjmp3 _CIexp _CIatan _CIsin _CIatan2 _CIsqrt _CxxThrowException _CIpow memcpy __CxxFrameHandler3 memset __set_app_type _vsnprintf _except_handler3 _lseek _open ?_type_info_dtor_internal_method@type_info@@QAEXXZ _except_handler4_common _invoke_watson _controlfp_s _wremove _aligned_malloc _crt_debugger_hook

winmm

timeEndPeriod timeBeginPeriod

Name

.text

Size

4.1MB

Virtual Size

4.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

997KB

Virtual Size

997KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

47KB

Virtual Size

26.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

321B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

43KB

Virtual Size

43KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

557KB

Virtual Size

557KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

pcsx2hostfs_ldr.elf

SHA256 4e51b2f9b17f4382e3d46ba768ecb5344f9bc411c78cdd11807cfa4241169d88
MD5 f704094e89c46e4e6c0fce6ae483587c
SHA1 4724f9af1a94124ae2688bdd1ecfe687b67deebf
SHA512 ea295060b663a822d69a95b3b74cdc17b23e1a85628fc609068564f0c1134a5d3ed2e891c0f2a98709d8ae67f203e1c60cd2a4b3b812effff6bef719b836cd9d
SSDEEP 768:y5hraTAybxhc/4fF+iofBz5/Uj/6fxtKJgaZlqMu91JLZGxgRQULOdAuDjAyragE:0aEybxhcwf0isQgaZRYLZZJ4RAdXw
MD5 SHA1 SHA512 SSDEEP

linux mipsel

NSIS installer

installer

plugins/CDVDiso.dll

IMPHASH 9dc9c37954b5eac4d6e26c88214dce05
SHA256 0332eb11aed6f089c28fef5536074846c9f69ad821ad15208ba9d33b183ab4d3
MD5 81f0c695b2e8acab57debc27b96463a7
SHA1 07bbff28c0409aab5f2438060dedb81fe33e58db
SHA512 5b3f2a455f9d6569b7e423b1cc4a678d52b37b88b14088d4b4f974e941cd7d68e6b1a25df9b424fd98c4049930796edee6fca04580b031e1f3414ec0ae4963da
SSDEEP 1536:tKAUWpGdd54UYwgXutdBgZA+yX5q3nToIfVIOFWnZ8sJ:0AjpoGutdeATX5q3TBffFWn2sJ
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

4974

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

H:\Share\pcsx2src\bin\plugins\CDVDiso.pdb

plugins/CDVDnull.dll

IMPHASH b15cd2399d10ddc192bdd8d5acd6075a
SHA256 b9e3d944978d9819b51f0063426ef1f3062894750a65a22b655137ae2337adff
MD5 2bc7a92664584555615343e40ddaf3ed
SHA1 5815e952198b44e1a127e06ff1630db0be5f6587
SHA512 12dcf484a3638afbd8b4f194cc0587ba27299deaa3a2e2fa21c4aaf646adf6ed7426eb80cca5295584c0607b84eadda26132660935a377630f81c46bc64f8c1a
SSDEEP 96:R41vlhChiFDWIFSe8VgH7HZKcRsZKk0YoF3X7PVAAD6ExzCtE:R4lqjUQgHjhRsHs3X7PVlD6pE
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

4974

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

H:\Share\pcsx2src\bin\plugins\CDVDnull.pdb

plugins/CDVDolio.dll

IMPHASH af377097f6a75fb268c3bc608af7185e
SHA256 07cc4dbe8a4f6fc3662873fbfda0b1786a58f53a3525de172f9211469584bc54
MD5 b288bb51eed7666f8afc5031bb31b428
SHA1 2925da601e50259f141b55e98986b34a10fa5b45
SHA512 1a8d65464430a7c3551f42b9ea7875eb858889b80103fe59a9a3df185a0fb50622f1559dc928b30fce7ed56466489bedcd168b4f223085076e62873997541942
SSDEEP 384:Q8qAaYOspTgkAjo56sWFgog9guwnIyhu1icLo6lZOtCVTlwPu7B9UTJQA:hqfqpyFWmIyhuMCo8ZOtsTl1oT2A
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

5

Entry point

12761

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

h:\Share\pcsx2src\bin\plugins\CDVDolio.pdb

kernel32

GetPrivateProfileIntA CreateEventA CloseHandle CreateFileA GetFileSizeEx DeviceIoControl CancelIo ResetEvent ReadFile GetLastError GetOverlappedResult GetDriveTypeA WritePrivateProfileStringA IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId GetTickCount QueryPerformanceCounter InterlockedCompareExchange Sleep InterlockedExchange GetPrivateProfileStringA

user32

GetDlgItemTextA EndDialog GetWindowLongA SetWindowPos GetWindowRect MonitorFromWindow GetMonitorInfoA SetWindowLongA DialogBoxParamA GetDlgItem SendMessageA SetDlgItemTextA

comdlg32

GetOpenFileNameA

msvcp90

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z ?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z ?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z ?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z ?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDI@Z ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z ??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z ??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z ??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z

msvcr90

??3@YAXPAX@Z ??_V@YAXPAX@Z ??2@YAPAXI@Z ??0exception@std@@QAE@ABV01@@Z ?what@exception@std@@UBEPBDXZ ??1exception@std@@UAE@XZ ??0exception@std@@QAE@ABQBD@Z ??0exception@std@@QAE@XZ _vsnprintf _unlock __dllonexit _encode_pointer _lock _onexit _decode_pointer _malloc_crt free _encoded_null _initterm _initterm_e _amsg_exit _adjust_fdiv __CppXcptFilter _except_handler4_common ?terminate@@YAXXZ ?_type_info_dtor_internal_method@type_info@@QAEXXZ __clean_type_info_names_internal _crt_debugger_hook __CxxFrameHandler3 memset _itoa _CxxThrowException

plugins/DEV9null.dll

IMPHASH 1235a5674d080e57d46e802cb4cf4ca4
SHA256 0c3cf35f52248c071b299af3b9f4eda27e92cc6ba8fae3b3f681d20ae40447dc
MD5 c0b1bf4ccb3c78e48c545fd12b2ac04d
SHA1 cac0d78d46aa45648b94899ec2fde51fcfe4139f
SHA512 50ded292c52faea49e6d96f8a0884fa25cd1522b1c90672acf67b8a03126b63e5e078a5d46e8b694c8e610a7c41e046f0e02642a33123b2d628f09e0416e92d1
SSDEEP 384:77Q5bjltqYxguDa4PldtFIhOZyPVZwVG:7ErqY04PEOZydOVG
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

7922

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

H:\Share\pcsx2src\bin\plugins\DEV9null.pdb

plugins/FWnull.dll

IMPHASH b400add615c1e718b3135b84a110317f
SHA256 e33d24815431a0957eeead372b3220b8b27db45b70a5e7402c6971faefd3b046
MD5 3f778a389e9df7b4337d93a1d2ab6b9f
SHA1 79223136c913153d987f2800414057c9be7f75a6
SHA512 2b145f93c5acda16ca5a078ad3d605cc0ef908017fe75cb26858a662cf095227ef2c77b34c54f22ab3b9b29522306c37820497f948e93d407ff768773d4d2408
SSDEEP 192:RRSbimn8TOAiD3Vkc+AnyTJT+SPfDss8cFyGYoTTitNxOf3XiPVlD6ei0s2k:/SbWriDOSeISDVfYoTTitNxOfyPVlg3
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

7984

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

H:\Share\pcsx2src\bin\plugins\FWnull.pdb

plugins/GSdx32-AVX.dll

IMPHASH 98991da85f38fe62d1578763b1d893e5
SHA256 1704bd318c84aa1a40693fdc343b3d902dafa06e2cd72e03ef6e8eb4766ae3e8
MD5 2da4170b4ab03362a41ca18c78e04f17
SHA1 e5511ab4b5e76a790024645c8f9bab8647858059
SHA512 2f4e9bc299b2a25252d6af171f714aafa7c5f2186a0dc5235dcebca7805edfca0ce66e71faa9ff2a6544a83935524da8dafb8ef01733868c2db6cec51f9a0217
SSDEEP 24576:4jVgSNZp4oO8Pq/haNmVIQlebMRK3YtKZp+jxe/C8Dv:4jGSN8eNmVIQlebMRK3YtKZp+B
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

473280

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

H:\Share\pcsx2src\bin\plugins\GSdx32-AVX.pdb

kernel32

InterlockedCompareExchange DecodePointer EncodePointer VirtualProtect EnterCriticalSection LeaveCriticalSection AllocConsole SetConsoleTitleA GetStdHandle SetConsoleScreenBufferSize GetConsoleScreenBufferInfo SetConsoleWindowInfo FreeConsole SetPriorityClass GetCurrentProcess InitializeCriticalSection DeleteCriticalSection MultiByteToWideChar Sleep GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA CreateEventA CloseHandle SetEvent WaitForSingleObject CreateThread TerminateThread GetVersionExA LoadLibraryA FreeLibrary QueryPerformanceCounter VirtualFree VirtualAlloc InterlockedIncrement InterlockedDecrement GetCurrentThreadId GetLastError InterlockedExchange GetTickCount RaiseException LocalAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcessId GetSystemTimeAsFileTime GetProcAddress IsProcessorFeaturePresent

user32

CallWindowProcA CheckDlgButton SendMessageA SetWindowLongA GetDlgItem IsDlgButtonChecked ShowWindow EnableWindow PeekMessageA SetMenu UpdateWindow SetForegroundWindow SetWindowTextA GetClientRect DestroyWindow CreateWindowExA AdjustWindowRect GetSystemMetrics GetDesktopWindow RegisterClassA GetClassInfoA LoadCursorA DefWindowProcA GetAsyncKeyState SetDlgItemTextA GetDlgItemTextA EndDialog SetWindowPos GetWindowRect MonitorFromWindow GetMonitorInfoA GetActiveWindow DialogBoxParamA MessageBoxA PostQuitMessage IsWindowVisible DispatchMessageA IsWindow GetWindowLongA TranslateMessage

gdi32

GetStockObject

comdlg32

GetSaveFileNameA

shell32

ShellExecuteA

ole32

CoTaskMemAlloc CoFreeUnusedLibraries CoInitialize CoCreateInstance CoInitializeEx CoUninitialize CoTaskMemFree

oleaut32

SysFreeString SysAllocString VariantInit VariantClear SysAllocStringByteLen SysAllocStringLen OleCreatePropertyFrame SysStringByteLen

sdl

SDL_RenderClear SDL_CreateRenderer SDL_CreateWindowFrom SDL_RenderPresent SDL_DestroyRenderer SDL_DestroyTexture SDL_Quit SDL_Init SDL_WasInit SDL_GetRendererInfo SDL_QueryTexture SDL_CreateTexture SDL_RenderCopy SDL_UnlockTexture SDL_DestroyWindow SDL_LockTexture

msvcp100

?_Xlength_error@std@@YAXPBD@Z ?_Orphan_all@_Container_base0@std@@QAEXXZ ?_Xout_of_range@std@@YAXPBD@Z

msvcr100

__CppXcptFilter _amsg_exit _initterm_e _initterm _encoded_null _malloc_crt ?terminate@@YAXXZ _onexit _lock __dllonexit _unlock _vsnprintf ldexp strncpy sprintf fputc fwrite atoi memchr tolower free wcsstr fflush clock fclose fseek fgetc fread fopen _localtime64 strtol _CxxThrowException __CxxFrameHandler3 memset memcpy setvbuf _itoa _open_osfhandle _fdopen __iob_func fprintf strftime _time64 _vsnprintf_s ??_V@YAXPAX@Z _purecall ldiv printf _aligned_free _aligned_malloc memmove ??2@YAPAXI@Z ??0exception@std@@QAE@ABQBD@Z ??1exception@std@@UAE@XZ ?what@exception@std@@UBEPBDXZ ??0exception@std@@QAE@ABV01@@Z ??3@YAXPAX@Z ?_type_info_dtor_internal_method@type_info@@QAEXXZ _except_handler4_common __clean_type_info_names_internal _crt_debugger_hook ftell

plugins/GSdx32-SSE2.dll

IMPHASH 98991da85f38fe62d1578763b1d893e5
SHA256 23bf8a9ba1cf93aa79e8f57d35311500c9432d4108dde6883f2766639ffb8272
MD5 e23e5ea75c95084183cf47b8501d9262
SHA1 c7d62de1f993e0605a6558777bbabdbc09aed19e
SHA512 950b6ca166851af2d7200b7064dfafdb64b05205d3e0f6953df6ae95a2931e6d4441510cc2ac6f7f2d934fee4c3445f962337e7a272d3555376f186ebf70ce4b
SSDEEP 24576:XgL2jmw0R7z+rQGQNYrAmnNGDicTcCsXUL/C8DvIzE:Xa40R7z+rQGQNYrAmnNGjTcCohE
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

480256

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

H:\Share\pcsx2src\bin\plugins\GSdx32-SSE2.pdb

kernel32

InterlockedCompareExchange DecodePointer EncodePointer VirtualProtect EnterCriticalSection LeaveCriticalSection AllocConsole SetConsoleTitleA GetStdHandle SetConsoleScreenBufferSize GetConsoleScreenBufferInfo SetConsoleWindowInfo FreeConsole SetPriorityClass GetCurrentProcess InitializeCriticalSection DeleteCriticalSection MultiByteToWideChar Sleep GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA CreateEventA CloseHandle SetEvent WaitForSingleObject CreateThread TerminateThread GetVersionExA LoadLibraryA FreeLibrary QueryPerformanceCounter VirtualFree VirtualAlloc InterlockedIncrement InterlockedDecrement GetCurrentThreadId GetLastError InterlockedExchange GetTickCount RaiseException LocalAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcessId GetSystemTimeAsFileTime GetProcAddress IsProcessorFeaturePresent

user32

CallWindowProcA CheckDlgButton SendMessageA SetWindowLongA GetDlgItem IsDlgButtonChecked ShowWindow EnableWindow PeekMessageA SetMenu UpdateWindow SetForegroundWindow SetWindowTextA GetClientRect DestroyWindow CreateWindowExA AdjustWindowRect GetSystemMetrics GetDesktopWindow RegisterClassA GetClassInfoA LoadCursorA DefWindowProcA GetAsyncKeyState SetDlgItemTextA GetDlgItemTextA EndDialog SetWindowPos GetWindowRect MonitorFromWindow GetMonitorInfoA GetActiveWindow DialogBoxParamA MessageBoxA PostQuitMessage IsWindowVisible DispatchMessageA IsWindow GetWindowLongA TranslateMessage

gdi32

GetStockObject

comdlg32

GetSaveFileNameA

shell32

ShellExecuteA

ole32

CoTaskMemAlloc CoFreeUnusedLibraries CoInitialize CoCreateInstance CoInitializeEx CoUninitialize CoTaskMemFree

oleaut32

SysFreeString SysAllocString VariantInit VariantClear SysAllocStringByteLen SysAllocStringLen OleCreatePropertyFrame SysStringByteLen

sdl

SDL_RenderClear SDL_CreateRenderer SDL_CreateWindowFrom SDL_RenderPresent SDL_DestroyRenderer SDL_DestroyTexture SDL_Quit SDL_Init SDL_WasInit SDL_GetRendererInfo SDL_QueryTexture SDL_CreateTexture SDL_RenderCopy SDL_UnlockTexture SDL_DestroyWindow SDL_LockTexture

msvcp100

?_Xlength_error@std@@YAXPBD@Z ?_Orphan_all@_Container_base0@std@@QAEXXZ ?_Xout_of_range@std@@YAXPBD@Z

msvcr100

__CppXcptFilter _amsg_exit _initterm_e _initterm _encoded_null _malloc_crt ?terminate@@YAXXZ _onexit _lock __dllonexit _unlock _vsnprintf ldexp strncpy sprintf fputc fwrite atoi memchr tolower free wcsstr fflush clock fclose fseek fgetc fread fopen _localtime64 strtol _CxxThrowException __CxxFrameHandler3 memset memcpy setvbuf _itoa _open_osfhandle _fdopen __iob_func fprintf strftime _time64 _vsnprintf_s ??_V@YAXPAX@Z _purecall ldiv printf _aligned_free _aligned_malloc memmove ??2@YAPAXI@Z ??0exception@std@@QAE@ABQBD@Z ??1exception@std@@UAE@XZ ?what@exception@std@@UBEPBDXZ ??0exception@std@@QAE@ABV01@@Z ??3@YAXPAX@Z ?_type_info_dtor_internal_method@type_info@@QAEXXZ _except_handler4_common __clean_type_info_names_internal _crt_debugger_hook ftell

plugins/GSdx32-SSE4.dll

IMPHASH 98991da85f38fe62d1578763b1d893e5
SHA256 64d60d4c1d31401a435d669f4b5fb6156f08fde54107105b4da4c9f8ac794951
MD5 9b6f436499151409508aabf09be4f9b3
SHA1 f5cdbefed2c8f319b984424ae23615cd1d2a07f3
SHA512 b735aad667f350f66ff180b3797dbc000ef04b675977be60d8c2cee8962a4640f74afcdf6e42348bf142d3b8524f6910f1371e9680f043fe7f0d44ecced3276e
SSDEEP 24576:YHxi3AZJTdQB7kqNf+7dKD8ztUVr6TN7pQRnlvE/13FZ/C8Dv1U:YRi3AZJTdQB7kqNf+7dKD8ztUVr6TN7s
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

476288

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

H:\Share\pcsx2src\bin\plugins\GSdx32-SSE4.pdb

kernel32

InterlockedCompareExchange DecodePointer EncodePointer VirtualProtect EnterCriticalSection LeaveCriticalSection AllocConsole SetConsoleTitleA GetStdHandle SetConsoleScreenBufferSize GetConsoleScreenBufferInfo SetConsoleWindowInfo FreeConsole SetPriorityClass GetCurrentProcess InitializeCriticalSection DeleteCriticalSection MultiByteToWideChar Sleep GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA CreateEventA CloseHandle SetEvent WaitForSingleObject CreateThread TerminateThread GetVersionExA LoadLibraryA FreeLibrary QueryPerformanceCounter VirtualFree VirtualAlloc InterlockedIncrement InterlockedDecrement GetCurrentThreadId GetLastError InterlockedExchange GetTickCount RaiseException LocalAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcessId GetSystemTimeAsFileTime GetProcAddress IsProcessorFeaturePresent

user32

CallWindowProcA CheckDlgButton SendMessageA SetWindowLongA GetDlgItem IsDlgButtonChecked ShowWindow EnableWindow PeekMessageA SetMenu UpdateWindow SetForegroundWindow SetWindowTextA GetClientRect DestroyWindow CreateWindowExA AdjustWindowRect GetSystemMetrics GetDesktopWindow RegisterClassA GetClassInfoA LoadCursorA DefWindowProcA GetAsyncKeyState SetDlgItemTextA GetDlgItemTextA EndDialog SetWindowPos GetWindowRect MonitorFromWindow GetMonitorInfoA GetActiveWindow DialogBoxParamA MessageBoxA PostQuitMessage IsWindowVisible DispatchMessageA IsWindow GetWindowLongA TranslateMessage

gdi32

GetStockObject

comdlg32

GetSaveFileNameA

shell32

ShellExecuteA

ole32

CoTaskMemAlloc CoFreeUnusedLibraries CoInitialize CoCreateInstance CoInitializeEx CoUninitialize CoTaskMemFree

oleaut32

SysFreeString SysAllocString VariantInit VariantClear SysAllocStringByteLen SysAllocStringLen OleCreatePropertyFrame SysStringByteLen

sdl

SDL_RenderClear SDL_CreateRenderer SDL_CreateWindowFrom SDL_RenderPresent SDL_DestroyRenderer SDL_DestroyTexture SDL_Quit SDL_Init SDL_WasInit SDL_GetRendererInfo SDL_QueryTexture SDL_CreateTexture SDL_RenderCopy SDL_UnlockTexture SDL_DestroyWindow SDL_LockTexture

msvcp100

?_Xlength_error@std@@YAXPBD@Z ?_Orphan_all@_Container_base0@std@@QAEXXZ ?_Xout_of_range@std@@YAXPBD@Z

msvcr100

__CppXcptFilter _amsg_exit _initterm_e _initterm _encoded_null _malloc_crt ?terminate@@YAXXZ _onexit _lock __dllonexit _unlock _vsnprintf ldexp strncpy sprintf fputc fwrite atoi memchr tolower free wcsstr fflush clock fclose fseek fgetc fread fopen _localtime64 strtol _CxxThrowException __CxxFrameHandler3 memset memcpy setvbuf _itoa _open_osfhandle _fdopen __iob_func fprintf strftime _time64 _vsnprintf_s ??_V@YAXPAX@Z _purecall ldiv printf _aligned_free _aligned_malloc memmove ??2@YAPAXI@Z ??0exception@std@@QAE@ABQBD@Z ??1exception@std@@UAE@XZ ?what@exception@std@@UBEPBDXZ ??0exception@std@@QAE@ABV01@@Z ??3@YAXPAX@Z ?_type_info_dtor_internal_method@type_info@@QAEXXZ _except_handler4_common __clean_type_info_names_internal _crt_debugger_hook ftell

plugins/GSdx32-SSSE3.dll

IMPHASH 98991da85f38fe62d1578763b1d893e5
SHA256 7e7ffe8f0e48c104ddaef7046f093b161edd8955df9b99ac3f1f6511a6b60def
MD5 dc7c657db59d6f2dde7a864a9ee5e8e8
SHA1 eebd32da67e704714e92abc66144bf2db2204787
SHA512 4dbe470ac4af176dfe8866e420dce58a24699a222fab7753c374718ef92b7370d7c0c22469d198034a1542023459187c96e78ecef5428c0a7b75da227f05ba4a
SSDEEP 24576:3On7xRNR7z+rQGQNYrAmnFmKaFIkKt0lM/C8Dv9:3IzNR7z+rQGQNYrAmnFmOkKtow
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

478608

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

H:\Share\pcsx2src\bin\plugins\GSdx32-SSSE3.pdb

kernel32

InterlockedCompareExchange DecodePointer EncodePointer VirtualProtect EnterCriticalSection LeaveCriticalSection AllocConsole SetConsoleTitleA GetStdHandle SetConsoleScreenBufferSize GetConsoleScreenBufferInfo SetConsoleWindowInfo FreeConsole SetPriorityClass GetCurrentProcess InitializeCriticalSection DeleteCriticalSection MultiByteToWideChar Sleep GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA CreateEventA CloseHandle SetEvent WaitForSingleObject CreateThread TerminateThread GetVersionExA LoadLibraryA FreeLibrary QueryPerformanceCounter VirtualFree VirtualAlloc InterlockedIncrement InterlockedDecrement GetCurrentThreadId GetLastError InterlockedExchange GetTickCount RaiseException LocalAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcessId GetSystemTimeAsFileTime GetProcAddress IsProcessorFeaturePresent

user32

CallWindowProcA CheckDlgButton SendMessageA SetWindowLongA GetDlgItem IsDlgButtonChecked ShowWindow EnableWindow PeekMessageA SetMenu UpdateWindow SetForegroundWindow SetWindowTextA GetClientRect DestroyWindow CreateWindowExA AdjustWindowRect GetSystemMetrics GetDesktopWindow RegisterClassA GetClassInfoA LoadCursorA DefWindowProcA GetAsyncKeyState SetDlgItemTextA GetDlgItemTextA EndDialog SetWindowPos GetWindowRect MonitorFromWindow GetMonitorInfoA GetActiveWindow DialogBoxParamA MessageBoxA PostQuitMessage IsWindowVisible DispatchMessageA IsWindow GetWindowLongA TranslateMessage

gdi32

GetStockObject

comdlg32

GetSaveFileNameA

shell32

ShellExecuteA

ole32

CoTaskMemAlloc CoFreeUnusedLibraries CoInitialize CoCreateInstance CoInitializeEx CoUninitialize CoTaskMemFree

oleaut32

SysFreeString SysAllocString VariantInit VariantClear SysAllocStringByteLen SysAllocStringLen OleCreatePropertyFrame SysStringByteLen

sdl

SDL_RenderClear SDL_CreateRenderer SDL_CreateWindowFrom SDL_RenderPresent SDL_DestroyRenderer SDL_DestroyTexture SDL_Quit SDL_Init SDL_WasInit SDL_GetRendererInfo SDL_QueryTexture SDL_CreateTexture SDL_RenderCopy SDL_UnlockTexture SDL_DestroyWindow SDL_LockTexture

msvcp100

?_Xlength_error@std@@YAXPBD@Z ?_Orphan_all@_Container_base0@std@@QAEXXZ ?_Xout_of_range@std@@YAXPBD@Z

msvcr100

__CppXcptFilter _amsg_exit _initterm_e _initterm _encoded_null _malloc_crt ?terminate@@YAXXZ _onexit _lock __dllonexit _unlock _vsnprintf ldexp strncpy sprintf fputc fwrite atoi memchr tolower free wcsstr fflush clock fclose fseek fgetc fread fopen _localtime64 strtol _CxxThrowException __CxxFrameHandler3 memset memcpy setvbuf _itoa _open_osfhandle _fdopen __iob_func fprintf strftime _time64 _vsnprintf_s ??_V@YAXPAX@Z _purecall ldiv printf _aligned_free _aligned_malloc memmove ??2@YAPAXI@Z ??0exception@std@@QAE@ABQBD@Z ??1exception@std@@UAE@XZ ?what@exception@std@@UBEPBDXZ ??0exception@std@@QAE@ABV01@@Z ??3@YAXPAX@Z ?_type_info_dtor_internal_method@type_info@@QAEXXZ _except_handler4_common __clean_type_info_names_internal _crt_debugger_hook ftell

plugins/GSdx32_Shade-AVX.dll

IMPHASH f9ab7e6e4f5354466087200c756a5791
SHA256 f280c34fa9107d7fad197d4f9f5073697cf65bdd8d63c2837afe5e85ccc5cb54
MD5 d4a71e67ec456c2f5f216489dcbb1763
SHA1 8a120eae7391858378c42dd6d32d4567c6a07fef
SHA512 3bdf2d0e32d60e88028c77ac30827538f675f5076f2fa8bd016158d5ae8003493f56e84790e02b3c8cb1e567fa7e7a1713b1fb4ab55193055c6201c150fd0ad5
SSDEEP 24576:kfvqSRDFv5VOg9VceFWzkpanoduLcBd1fp1DLFfiVFE2c8Dv:kfyWFhdFWzkpanoduLcBd1fl7
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

474608

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

H:\Share\pcsx2pure\bin\plugins\GSdx32-AVX.pdb

kernel32

InterlockedCompareExchange DecodePointer EncodePointer VirtualProtect EnterCriticalSection LeaveCriticalSection AllocConsole SetConsoleTitleA GetStdHandle SetConsoleScreenBufferSize GetConsoleScreenBufferInfo SetConsoleWindowInfo FreeConsole SetPriorityClass GetCurrentProcess InitializeCriticalSection DeleteCriticalSection MultiByteToWideChar Sleep GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA CreateEventA CloseHandle SetEvent WaitForSingleObject CreateThread TerminateThread GetVersionExA LoadLibraryA FreeLibrary QueryPerformanceCounter VirtualFree VirtualAlloc InterlockedIncrement InterlockedDecrement GetCurrentThreadId GetLastError InterlockedExchange GetTickCount RaiseException LocalAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcessId GetSystemTimeAsFileTime GetProcAddress IsProcessorFeaturePresent

user32

CallWindowProcA CheckDlgButton SendMessageA SetWindowLongA GetDlgItem IsDlgButtonChecked ShowWindow EnableWindow PeekMessageA SetMenu UpdateWindow SetForegroundWindow SetWindowTextA GetClientRect DestroyWindow CreateWindowExA AdjustWindowRect GetSystemMetrics GetDesktopWindow RegisterClassA GetClassInfoA LoadCursorA DefWindowProcA SendDlgItemMessageA GetAsyncKeyState SetDlgItemTextA GetDlgItemTextA EndDialog SetWindowPos GetWindowRect MonitorFromWindow GetMonitorInfoA GetActiveWindow DialogBoxParamA MessageBoxA PostQuitMessage IsWindowVisible DispatchMessageA IsWindow GetWindowLongA TranslateMessage

gdi32

GetStockObject

comdlg32

GetSaveFileNameA

shell32

ShellExecuteA

ole32

CoTaskMemAlloc CoFreeUnusedLibraries CoTaskMemFree CoCreateInstance CoInitializeEx CoUninitialize CoInitialize

oleaut32

SysStringByteLen SysAllocString VariantInit VariantClear SysAllocStringLen SysFreeString OleCreatePropertyFrame SysAllocStringByteLen

sdl

SDL_CreateRenderer SDL_CreateWindowFrom SDL_DestroyWindow SDL_RenderClear SDL_DestroyTexture SDL_Quit SDL_Init SDL_WasInit SDL_RenderPresent SDL_GetRendererInfo SDL_RenderCopy SDL_UnlockTexture SDL_LockTexture SDL_CreateTexture SDL_DestroyRenderer SDL_QueryTexture

msvcp100

?_Xlength_error@std@@YAXPBD@Z ?_Orphan_all@_Container_base0@std@@QAEXXZ ?_Xout_of_range@std@@YAXPBD@Z

msvcr100

__CppXcptFilter _amsg_exit _initterm_e _initterm _encoded_null _malloc_crt ?terminate@@YAXXZ _onexit _lock __dllonexit _unlock _vsnprintf ldexp strncpy sprintf fputc fwrite atoi memchr tolower free wcsstr fflush clock fclose fseek fgetc fread fopen strtol strftime setvbuf _CxxThrowException __CxxFrameHandler3 memset _open_osfhandle memcpy _itoa _fdopen __iob_func fprintf _time64 _vsnprintf_s ??_V@YAXPAX@Z _purecall ldiv printf _aligned_free _aligned_malloc memmove ??2@YAPAXI@Z ??0exception@std@@QAE@ABQBD@Z ??1exception@std@@UAE@XZ ?what@exception@std@@UBEPBDXZ ??0exception@std@@QAE@ABV01@@Z ??3@YAXPAX@Z ?_type_info_dtor_internal_method@type_info@@QAEXXZ _except_handler4_common __clean_type_info_names_internal _crt_debugger_hook ftell _localtime64

plugins/GSdx32_Shade-SSE2.dll

IMPHASH f9ab7e6e4f5354466087200c756a5791
SHA256 8ba39657503557c176f5573f1fcf4da7fca46fe55366808324cecba70af57cb2
MD5 f8963cac638c2222f1eeae77d8b7c7bf
SHA1 641ceb2f8bf7213322f92fa0262dffb3a5c9855f
SHA512 a040719b2fdbbff22a82cf20e20d6af84dec0af25d6d288eac84fb74f16986f9f18bf3cfb9fcbecf3f358344926ae7551d45d6b358db1bdbc2fbda2a0cf5c9b2
SSDEEP 24576:dX0Kr5z2haR7z+rQGQNYrAmnKGfEY+ewO8LFfiVFE2c8DvM:dXHrwaR7z+rQGQNYrAmnKGh+em7N
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

481696

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

H:\Share\pcsx2pure\bin\plugins\GSdx32-SSE2.pdb

kernel32

InterlockedCompareExchange DecodePointer EncodePointer VirtualProtect EnterCriticalSection LeaveCriticalSection AllocConsole SetConsoleTitleA GetStdHandle SetConsoleScreenBufferSize GetConsoleScreenBufferInfo SetConsoleWindowInfo FreeConsole SetPriorityClass GetCurrentProcess InitializeCriticalSection DeleteCriticalSection MultiByteToWideChar Sleep GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA CreateEventA CloseHandle SetEvent WaitForSingleObject CreateThread TerminateThread GetVersionExA LoadLibraryA FreeLibrary QueryPerformanceCounter VirtualFree VirtualAlloc InterlockedIncrement InterlockedDecrement GetCurrentThreadId GetLastError InterlockedExchange GetTickCount RaiseException LocalAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcessId GetSystemTimeAsFileTime GetProcAddress IsProcessorFeaturePresent

user32

CallWindowProcA CheckDlgButton SendMessageA SetWindowLongA GetDlgItem IsDlgButtonChecked ShowWindow EnableWindow PeekMessageA SetMenu UpdateWindow SetForegroundWindow SetWindowTextA GetClientRect DestroyWindow CreateWindowExA AdjustWindowRect GetSystemMetrics GetDesktopWindow RegisterClassA GetClassInfoA LoadCursorA DefWindowProcA SendDlgItemMessageA GetAsyncKeyState SetDlgItemTextA GetDlgItemTextA EndDialog SetWindowPos GetWindowRect MonitorFromWindow GetMonitorInfoA GetActiveWindow DialogBoxParamA MessageBoxA PostQuitMessage IsWindowVisible DispatchMessageA IsWindow GetWindowLongA TranslateMessage

gdi32

GetStockObject

comdlg32

GetSaveFileNameA

shell32

ShellExecuteA

ole32

CoTaskMemAlloc CoFreeUnusedLibraries CoTaskMemFree CoCreateInstance CoInitializeEx CoUninitialize CoInitialize

oleaut32

SysStringByteLen SysAllocString VariantInit VariantClear SysAllocStringLen SysFreeString OleCreatePropertyFrame SysAllocStringByteLen

sdl

SDL_CreateRenderer SDL_CreateWindowFrom SDL_DestroyWindow SDL_RenderClear SDL_DestroyTexture SDL_Quit SDL_Init SDL_WasInit SDL_RenderPresent SDL_GetRendererInfo SDL_RenderCopy SDL_UnlockTexture SDL_LockTexture SDL_CreateTexture SDL_DestroyRenderer SDL_QueryTexture

msvcp100

?_Xlength_error@std@@YAXPBD@Z ?_Orphan_all@_Container_base0@std@@QAEXXZ ?_Xout_of_range@std@@YAXPBD@Z

msvcr100

__CppXcptFilter _amsg_exit _initterm_e _initterm _encoded_null _malloc_crt ?terminate@@YAXXZ _onexit _lock __dllonexit _unlock _vsnprintf ldexp strncpy sprintf fputc fwrite atoi memchr tolower free wcsstr fflush clock fclose fseek fgetc fread fopen strtol strftime setvbuf _CxxThrowException __CxxFrameHandler3 memset _open_osfhandle memcpy _itoa _fdopen __iob_func fprintf _time64 _vsnprintf_s ??_V@YAXPAX@Z _purecall ldiv printf _aligned_free _aligned_malloc memmove ??2@YAPAXI@Z ??0exception@std@@QAE@ABQBD@Z ??1exception@std@@UAE@XZ ?what@exception@std@@UBEPBDXZ ??0exception@std@@QAE@ABV01@@Z ??3@YAXPAX@Z ?_type_info_dtor_internal_method@type_info@@QAEXXZ _except_handler4_common __clean_type_info_names_internal _crt_debugger_hook ftell _localtime64

plugins/GSdx32_Shade-SSE4.dll

IMPHASH f9ab7e6e4f5354466087200c756a5791
SHA256 85c31b291d65deb3641d4f59a365748eb578096c252f19e1fac9904198b1bde5
MD5 2beb59566743ce579aab55013593c647
SHA1 ddc78c4f4262f6443960294ccc985697fd51df4f
SHA512 4cc95676719f9ca79226c2d3b1b0d2234f268027923f6e9f35e43244700adc6d837de1b3cc6aee6f64f5cb5632d0414f4d185e9d4e12ba8d4429e2afe875de0d
SSDEEP 24576:AdHF3gITdQB7kqNf+7dKD8rlMdjSLFDpQR8FU7qlSvqLFziVFE2c8Dvirl:AJRgITdQB7kqNf+7dKD8rlMdjSLFDpQi
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

477680

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

H:\Share\pcsx2pure\bin\plugins\GSdx32-SSE4.pdb

kernel32

InterlockedCompareExchange DecodePointer EncodePointer VirtualProtect EnterCriticalSection LeaveCriticalSection AllocConsole SetConsoleTitleA GetStdHandle SetConsoleScreenBufferSize GetConsoleScreenBufferInfo SetConsoleWindowInfo FreeConsole SetPriorityClass GetCurrentProcess InitializeCriticalSection DeleteCriticalSection MultiByteToWideChar Sleep GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA CreateEventA CloseHandle SetEvent WaitForSingleObject CreateThread TerminateThread GetVersionExA LoadLibraryA FreeLibrary QueryPerformanceCounter VirtualFree VirtualAlloc InterlockedIncrement InterlockedDecrement GetCurrentThreadId GetLastError InterlockedExchange GetTickCount RaiseException LocalAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcessId GetSystemTimeAsFileTime GetProcAddress IsProcessorFeaturePresent

user32

CallWindowProcA CheckDlgButton SendMessageA SetWindowLongA GetDlgItem IsDlgButtonChecked ShowWindow EnableWindow PeekMessageA SetMenu UpdateWindow SetForegroundWindow SetWindowTextA GetClientRect DestroyWindow CreateWindowExA AdjustWindowRect GetSystemMetrics GetDesktopWindow RegisterClassA GetClassInfoA LoadCursorA DefWindowProcA SendDlgItemMessageA GetAsyncKeyState SetDlgItemTextA GetDlgItemTextA EndDialog SetWindowPos GetWindowRect MonitorFromWindow GetMonitorInfoA GetActiveWindow DialogBoxParamA MessageBoxA PostQuitMessage IsWindowVisible DispatchMessageA IsWindow GetWindowLongA TranslateMessage

gdi32

GetStockObject

comdlg32

GetSaveFileNameA

shell32

ShellExecuteA

ole32

CoTaskMemAlloc CoFreeUnusedLibraries CoTaskMemFree CoCreateInstance CoInitializeEx CoUninitialize CoInitialize

oleaut32

SysStringByteLen SysAllocString VariantInit VariantClear SysAllocStringLen SysFreeString OleCreatePropertyFrame SysAllocStringByteLen

sdl

SDL_CreateRenderer SDL_CreateWindowFrom SDL_DestroyWindow SDL_RenderClear SDL_DestroyTexture SDL_Quit SDL_Init SDL_WasInit SDL_RenderPresent SDL_GetRendererInfo SDL_RenderCopy SDL_UnlockTexture SDL_LockTexture SDL_CreateTexture SDL_DestroyRenderer SDL_QueryTexture

msvcp100

?_Xlength_error@std@@YAXPBD@Z ?_Orphan_all@_Container_base0@std@@QAEXXZ ?_Xout_of_range@std@@YAXPBD@Z

msvcr100

__CppXcptFilter _amsg_exit _initterm_e _initterm _encoded_null _malloc_crt ?terminate@@YAXXZ _onexit _lock __dllonexit _unlock _vsnprintf ldexp strncpy sprintf fputc fwrite atoi memchr tolower free wcsstr fflush clock fclose fseek fgetc fread fopen strtol strftime setvbuf _CxxThrowException __CxxFrameHandler3 memset _open_osfhandle memcpy _itoa _fdopen __iob_func fprintf _time64 _vsnprintf_s ??_V@YAXPAX@Z _purecall ldiv printf _aligned_free _aligned_malloc memmove ??2@YAPAXI@Z ??0exception@std@@QAE@ABQBD@Z ??1exception@std@@UAE@XZ ?what@exception@std@@UBEPBDXZ ??0exception@std@@QAE@ABV01@@Z ??3@YAXPAX@Z ?_type_info_dtor_internal_method@type_info@@QAEXXZ _except_handler4_common __clean_type_info_names_internal _crt_debugger_hook ftell _localtime64

plugins/GSdx32_Shade-SSSE3.dll

IMPHASH f9ab7e6e4f5354466087200c756a5791
SHA256 61d9da1bc328fe0267572f8e6054000aaa69314bd10d51f1591f4efb43e2b0e7
MD5 22a91b3ea22f98e7103bd416840bfe6b
SHA1 4081f5c8c2197ca5bad32c25c8b5a2d361fd1481
SHA512 9d49a4815e1e21bbd0eec7295bf642f71561dad845704096ecd689802e8e86dc3ff7782961f7f24a1f3ad7bcfd67cbd8591c09c3c63b9d69cdc23b93a460ec19
SSDEEP 24576:xxR6/BcvcuR7z+rQGQNYrAmn1GBgSJIe7NLFziVFE2c8Dv4:xuEcuR7z+rQGQNYrAmn1GpJI+X1
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

480016

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

H:\Share\pcsx2pure\bin\plugins\GSdx32-SSSE3.pdb

kernel32

InterlockedCompareExchange DecodePointer EncodePointer VirtualProtect EnterCriticalSection LeaveCriticalSection AllocConsole SetConsoleTitleA GetStdHandle SetConsoleScreenBufferSize GetConsoleScreenBufferInfo SetConsoleWindowInfo FreeConsole SetPriorityClass GetCurrentProcess InitializeCriticalSection DeleteCriticalSection MultiByteToWideChar Sleep GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA CreateEventA CloseHandle SetEvent WaitForSingleObject CreateThread TerminateThread GetVersionExA LoadLibraryA FreeLibrary QueryPerformanceCounter VirtualFree VirtualAlloc InterlockedIncrement InterlockedDecrement GetCurrentThreadId GetLastError InterlockedExchange GetTickCount RaiseException LocalAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcessId GetSystemTimeAsFileTime GetProcAddress IsProcessorFeaturePresent

user32

CallWindowProcA CheckDlgButton SendMessageA SetWindowLongA GetDlgItem IsDlgButtonChecked ShowWindow EnableWindow PeekMessageA SetMenu UpdateWindow SetForegroundWindow SetWindowTextA GetClientRect DestroyWindow CreateWindowExA AdjustWindowRect GetSystemMetrics GetDesktopWindow RegisterClassA GetClassInfoA LoadCursorA DefWindowProcA SendDlgItemMessageA GetAsyncKeyState SetDlgItemTextA GetDlgItemTextA EndDialog SetWindowPos GetWindowRect MonitorFromWindow GetMonitorInfoA GetActiveWindow DialogBoxParamA MessageBoxA PostQuitMessage IsWindowVisible DispatchMessageA IsWindow GetWindowLongA TranslateMessage

gdi32

GetStockObject

comdlg32

GetSaveFileNameA

shell32

ShellExecuteA

ole32

CoTaskMemAlloc CoFreeUnusedLibraries CoTaskMemFree CoCreateInstance CoInitializeEx CoUninitialize CoInitialize

oleaut32

SysStringByteLen SysAllocString VariantInit VariantClear SysAllocStringLen SysFreeString OleCreatePropertyFrame SysAllocStringByteLen

sdl

SDL_CreateRenderer SDL_CreateWindowFrom SDL_DestroyWindow SDL_RenderClear SDL_DestroyTexture SDL_Quit SDL_Init SDL_WasInit SDL_RenderPresent SDL_GetRendererInfo SDL_RenderCopy SDL_UnlockTexture SDL_LockTexture SDL_CreateTexture SDL_DestroyRenderer SDL_QueryTexture

msvcp100

?_Xlength_error@std@@YAXPBD@Z ?_Orphan_all@_Container_base0@std@@QAEXXZ ?_Xout_of_range@std@@YAXPBD@Z

msvcr100

__CppXcptFilter _amsg_exit _initterm_e _initterm _encoded_null _malloc_crt ?terminate@@YAXXZ _onexit _lock __dllonexit _unlock _vsnprintf ldexp strncpy sprintf fputc fwrite atoi memchr tolower free wcsstr fflush clock fclose fseek fgetc fread fopen strtol strftime setvbuf _CxxThrowException __CxxFrameHandler3 memset _open_osfhandle memcpy _itoa _fdopen __iob_func fprintf _time64 _vsnprintf_s ??_V@YAXPAX@Z _purecall ldiv printf _aligned_free _aligned_malloc memmove ??2@YAPAXI@Z ??0exception@std@@QAE@ABQBD@Z ??1exception@std@@UAE@XZ ?what@exception@std@@UBEPBDXZ ??0exception@std@@QAE@ABV01@@Z ??3@YAXPAX@Z ?_type_info_dtor_internal_method@type_info@@QAEXXZ _except_handler4_common __clean_type_info_names_internal _crt_debugger_hook ftell _localtime64

plugins/GSdx_CUDA.dll

IMPHASH 2c97f19d94f0bdb3ff06cbcf8980d942
SHA256 c55ce646ceb17c6a42d4e25321413d39c4a8cae1ba0bc18e704c7cf0eeaf362d
MD5 9278c7802617d526c932525734eb59c1
SHA1 e3cffa966cd96ea79a3a63beb81202a9df017a63
SHA512 837c4d598acc1cd9df613c0f95aefe813a0ff7f67a2e453129338ce0b0737d5ad105800e3a48d8eb21d569764d77c2f447253afc4c7cc350f648e029dfd91371
SSDEEP 12288:ZtC3pXOJBCye7kTtTue1vT8ILpC/8DcLKQiybA:3C3pXOTCBgxTuOwIc/w
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

5

Entry point

365348

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

H:\Share\valdanx\bin\plugins\GSdx_CUDA.pdb

cudart32_32_16

cudaGetDeviceCount cudaGetDeviceProperties cudaLaunch cudaSetupArgument __cudaRegisterFunction __cudaRegisterFatBinary cudaMemcpy cudaConfigureCall cudaMalloc __cudaUnregisterFatBinary

kernel32

IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter InterlockedCompareExchange RaiseException LocalAlloc GetEnvironmentVariableA VirtualProtect EnterCriticalSection LeaveCriticalSection SetPriorityClass GetCurrentProcess InitializeCriticalSection DeleteCriticalSection MultiByteToWideChar VirtualAlloc VirtualFree LoadLibraryA GetProcAddress FreeLibrary Sleep MulDiv GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA CreateThread WaitForSingleObject TerminateThread CloseHandle GetVersionExA InterlockedIncrement InterlockedDecrement SetEvent ResetEvent GetCurrentThreadId GetLastError InterlockedExchange GetTickCount TlsSetValue TlsGetValue TlsAlloc

user32

TranslateMessage IsWindowVisible PostQuitMessage MessageBoxA DialogBoxParamA GetActiveWindow SetWindowLongA PeekMessageA DispatchMessageA SetMenu UpdateWindow SetForegroundWindow SetWindowTextA GetClientRect DestroyWindow CreateWindowExA AdjustWindowRect GetSystemMetrics GetDesktopWindow RegisterClassA GetClassInfoA LoadCursorA DefWindowProcA EnableWindow ShowWindow IsDlgButtonChecked CheckDlgButton GetAsyncKeyState SendMessageA GetDlgItem SetDlgItemTextA GetDlgItemTextA EndDialog GetWindowLongA SetWindowPos GetWindowRect MonitorFromWindow GetMonitorInfoA

gdi32

GetStockObject

comdlg32

GetSaveFileNameA

shell32

ShellExecuteA

ole32

CoInitializeEx CoTaskMemAlloc CoFreeUnusedLibraries CoTaskMemFree CoInitialize CoCreateInstance CoUninitialize

oleaut32

OleCreatePropertyFrame VariantClear SysAllocString SysAllocStringLen SysStringLen SysFreeString

msvcp90

??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z ??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z ??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z ??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z ??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z ??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z ??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z ??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z ??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@PB_W@Z ??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ ?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ ?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ ?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ ?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ ?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z ?reserve@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z ?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z ?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@I_W@Z ?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEX_NI@Z ??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z ?_Tidy@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEX_NI@Z ??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z ??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z ??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z ??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z ?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z

msvcr90

_aligned_free ??0exception@std@@QAE@XZ _purecall fflush clock _aligned_malloc fclose ftell fopen strtol fread fseek fgetc _snprintf fprintf memmove_s ??0exception@std@@QAE@ABQBD@Z ??1exception@std@@UAE@XZ ?what@exception@std@@UBEPBDXZ ??0exception@std@@QAE@ABV01@@Z ??2@YAPAXI@Z wcsstr free ldiv __iob_func _except_handler3 atoi _vsnprintf_s fwrite fputc strncpy _time64 strftime _localtime64 ldexp _aligned_realloc _vsnprintf exit calloc malloc _itoa _unlock __dllonexit _encode_pointer _lock _onexit _decode_pointer ?terminate@@YAXXZ _malloc_crt _encoded_null _initterm _initterm_e _amsg_exit _adjust_fdiv __CppXcptFilter _except_handler4_common ?_type_info_dtor_internal_method@type_info@@QAEXXZ __clean_type_info_names_internal _crt_debugger_hook memcpy memset __CxxFrameHandler3 __libm_sse2_log _CxxThrowException _errno ??_V@YAXPAX@Z ??3@YAXPAX@Z printf

w32pthreads.v4

ptw32_throw pthread_getspecific ptw32_testcancel_enable pthread_equal pthread_self pthreadCancelableWait sem_destroy sem_post sem_init ptw32_selfThreadKey

Name

.text

Size

375KB

Virtual Size

375KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

77KB

Virtual Size

76KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

12KB

Virtual Size

5.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.nvFatBi

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

186KB

Virtual Size

185KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

48KB

Virtual Size

47KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

plugins/GSdxv.dll

IMPHASH 581fa4ce388fc12af0b5b68fd35bd04e
SHA256 e428d4214864e9c1420c6cf6e561c55a5196507e8fe97176aaa7850635456de9
MD5 c88129c586b6775cf564473343e3b4e7
SHA1 5ebb3303d723c99a7fd6fc3d85690063a16da12a
SHA512 8c946aea30d2eab6a72734b6946c5342b0be4f08761a542e93623ac3c60e76fbad3644e080c380b35776f6e30afb674217ba0eb0688230ae34190d902e21844a
SSDEEP 6144:BuavSd6SHmUr90rSn16SbiMTRi2SthFvL6nWc/Z9zQPKc5P0lOKTtRgjzbdCZ98c:UagDrpgIWthFvCWKoKuPYGpC/8DcLKQ
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

5

Entry point

364523

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

H:\Share\valdanx\plugins\GSdx\bin\plugins\GSdx.pdb

kernel32

LocalAlloc RaiseException VirtualProtect EnterCriticalSection LeaveCriticalSection SetPriorityClass GetCurrentProcess InitializeCriticalSection DeleteCriticalSection MultiByteToWideChar VirtualAlloc VirtualFree LoadLibraryA GetProcAddress FreeLibrary Sleep MulDiv GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA CreateThread WaitForSingleObject TerminateThread CloseHandle GetVersionExA InterlockedIncrement InterlockedDecrement SetEvent ResetEvent GetCurrentThreadId GetLastError InterlockedExchange GetTickCount TlsSetValue TlsGetValue TlsAlloc GetEnvironmentVariableA IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter InterlockedCompareExchange

user32

TranslateMessage IsWindowVisible PostQuitMessage MessageBoxA DialogBoxParamA GetActiveWindow SetWindowLongA PeekMessageA DispatchMessageA SetMenu UpdateWindow SetForegroundWindow SetWindowTextA GetClientRect DestroyWindow CreateWindowExA AdjustWindowRect GetSystemMetrics GetDesktopWindow RegisterClassA GetClassInfoA LoadCursorA DefWindowProcA EnableWindow ShowWindow IsDlgButtonChecked CheckDlgButton GetAsyncKeyState SendMessageA GetDlgItem SetDlgItemTextA GetDlgItemTextA EndDialog GetWindowLongA SetWindowPos GetWindowRect GetMonitorInfoA MonitorFromWindow

gdi32

GetStockObject

comdlg32

GetSaveFileNameA

shell32

ShellExecuteA

ole32

CoTaskMemAlloc CoFreeUnusedLibraries CoTaskMemFree CoInitializeEx CoUninitialize CoCreateInstance CoInitialize

oleaut32

OleCreatePropertyFrame VariantClear SysAllocString SysAllocStringLen SysStringLen SysFreeString

msvcp90

??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z ??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z ??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z ??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z ??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z ??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z ??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z ??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z ??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@PB_W@Z ??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ ?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ ?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ ?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ ?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ ?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z ?reserve@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z ?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z ?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@I_W@Z ?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEX_NI@Z ??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z ?_Tidy@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEX_NI@Z ??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ ??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z ??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z ?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z ??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z

msvcr90

_purecall ??0exception@std@@QAE@XZ _aligned_free fflush clock _aligned_malloc fclose ftell fopen strtol wcsstr free ldiv __iob_func atoi _vsnprintf_s fwrite fputc strncpy _except_handler3 _time64 strftime _localtime64 ldexp _aligned_realloc _vsnprintf _errno exit calloc malloc ?terminate@@YAXXZ _unlock _encode_pointer _lock _onexit _decode_pointer _malloc_crt _encoded_null _initterm _initterm_e _amsg_exit _adjust_fdiv __CppXcptFilter ?_type_info_dtor_internal_method@type_info@@QAEXXZ _except_handler4_common __clean_type_info_names_internal _crt_debugger_hook _itoa memcpy memset __CxxFrameHandler3 __libm_sse2_log _CxxThrowException __dllonexit ??3@YAXPAX@Z ??_V@YAXPAX@Z printf ??2@YAPAXI@Z ??0exception@std@@QAE@ABV01@@Z ?what@exception@std@@UBEPBDXZ ??1exception@std@@UAE@XZ ??0exception@std@@QAE@ABQBD@Z memmove_s fprintf _snprintf fgetc fseek fread

w32pthreads.v4

sem_init sem_post ptw32_throw ptw32_selfThreadKey pthread_getspecific ptw32_testcancel_enable pthread_equal pthread_self pthreadCancelableWait sem_destroy

plugins/GSnull.dll

IMPHASH 2eaf29c525f02df5011afa6242ace1a6
SHA256 db667603556ece331ef1204046017188e803409fa216307ebebae6f99a67cf8d
MD5 f7670f0e5d8c897e939aa3ddb832caea
SHA1 1145c98b8528a99b74a8287725d3f52a338a457e
SHA512 35e14f718c365dbc36a8f87d52a71625f6b6ccee29263ec3ec910bdb86d0bf0afcaaf43b48da437551bec94a775af44e4e7eab210f6cbb6b59ff8d230d7899de
SSDEEP 384:TIgZZgGLWUAX/Wun8CCoSqhB3333333333333333333Y3w3333S33weCRA3fPO3w:ThZZggW3OD7opeEAPMQfOZydwXZh3
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

9734

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

H:\Share\pcsx2src\bin\plugins\GSnull.pdb

kernel32

CreateDirectoryA GetPrivateProfileStringA WritePrivateProfileStringA GetModuleFileNameA GetModuleHandleA Sleep InterlockedExchange IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId GetTickCount QueryPerformanceCounter DecodePointer EncodePointer InterlockedCompareExchange

user32

EndDialog CheckDlgButton IsDlgButtonChecked DialogBoxParamA DestroyWindow RegisterClassExA PostQuitMessage CreateWindowExA DefWindowProcA MessageBoxA GetActiveWindow

msvcp100

?_Xout_of_range@std@@YAXPBD@Z ?_Xlength_error@std@@YAXPBD@Z

msvcr100

strtoul fclose vsprintf ?what@exception@std@@UBEPBDXZ ??1exception@std@@UAE@XZ ??0exception@std@@QAE@ABQBD@Z strrchr memmove ??3@YAXPAX@Z ??2@YAPAXI@Z __iob_func setvbuf fprintf vfprintf fopen __dllonexit _lock _onexit _malloc_crt free _encoded_null _initterm _initterm_e _amsg_exit __CppXcptFilter _except_handler4_common ?terminate@@YAXXZ ?_type_info_dtor_internal_method@type_info@@QAEXXZ __clean_type_info_names_internal _crt_debugger_hook _unlock sprintf memcpy _CxxThrowException ??0exception@std@@QAE@ABV01@@Z __CxxFrameHandler3

plugins/LilyPad.dll

IMPHASH 81ec0434422da8b4d3275589046a6c91
SHA256 035316cebb02cd47ded92b5b1e06ac4736ab20fc718ea4c39ed8dccc0855e9fb
MD5 7ed968ea5b954911e15dff7f74cf23d1
SHA1 88a515f5d193b553cb3939817004612b7646def7
SHA512 453f5005ef68f60f58c5a0ebf90f79843ff1c813f59140cde265f728026f37f3f32f37ed80d835db50cfd85fef4851d861e438bf5aa3adc9e2948d91fb268e0f
SSDEEP 1536:TDX+k0DBjlUc3tvQvVOTFDcoTuW/V2WKgHk7V5Zpu2mPOrwleEo:TDOjlUSto9CPKJu2mWrwlho
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

14590

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

H:\Share\pcsx2src\bin\plugins\LilyPad.pdb

setupapi

SetupDiGetClassDevsW SetupDiEnumDeviceInterfaces SetupDiGetDeviceInterfaceDetailW SetupDiDestroyDeviceInfoList

winmm

waveOutSetVolume timeGetTime waveOutGetNumDevs

advapi32

RegOpenKeyExW RegQueryValueExW RegCloseKey

user32

SendMessageW ClipCursor GetDlgItem IsDlgButtonChecked EnableWindow CheckDlgButton wsprintfW SetWindowTextW GetWindowTextW ShowWindow SetDlgItemTextW MessageBoxA KillTimer SetWindowLongW GetDlgCtrlID SetTimer CheckRadioButton MessageBoxW CreatePopupMenu GetMenuItemCount InsertMenuItemW GetCursorPos TrackPopupMenuEx DestroyMenu GetActiveWindow EndDialog DialogBoxParamW GetWindowRect MonitorFromPoint GetMonitorInfoW PostMessageW IsWindowUnicode ShowCursor keybd_event MapVirtualKeyW IsWindow GetWindowLongW GetParent GetWindowThreadProcessId UnhookWindowsHookEx SetCapture ReleaseCapture GetKeyNameTextW RemovePropW CallWindowProcW DefWindowProcW GetPropW SetPropW SetWindowsHookExW CallNextHookEx GetAsyncKeyState SetCursorPos

kernel32

InterlockedCompareExchange QueryPerformanceCounter GetCurrentProcessId DecodePointer TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter GetSystemTimeAsFileTime InterlockedExchange IsDebuggerPresent EncodePointer GetCurrentThreadId WaitForSingleObject ReleaseMutex CreateMutexW LoadLibraryW CancelIo WaitForMultipleObjects CreateFileW CreateEventW GetTickCount GetLastError ReadFile GetProcAddress LoadLibraryA FreeLibrary IsBadReadPtr CreateThread ExitProcess IsProcessorFeaturePresent LeaveCriticalSection EnterCriticalSection DeleteCriticalSection DisableThreadLibraryCalls InitializeCriticalSection CloseHandle WriteFile CreateFileA Sleep GetVersionExW GetPrivateProfileStringW CreateDirectoryW GetPrivateProfileIntW DeleteFileW WritePrivateProfileStringW MultiByteToWideChar

comdlg32

GetOpenFileNameW GetSaveFileNameW

dinput8

DirectInput8Create

comctl32

PropertySheetW CreatePropertySheetPageW

msvcr100

malloc _CIsin _CIcos _CIpow _CIlog floor memset memcpy _wcsdup _wcsicmp free wcschr _itow wcsrchr _crt_debugger_hook __clean_type_info_names_internal _except_handler4_common __CppXcptFilter _amsg_exit _initterm_e _initterm _encoded_null _malloc_crt _onexit _lock __dllonexit _unlock __iob_func fprintf printf wcsstr sprintf wcscat_s ??3@YAXPAX@Z calloc realloc memmove atoi strchr sscanf ??2@YAPAXI@Z iswspace

plugins/MegaPad.dll

IMPHASH c6ec86f5921da91db8b36f258e1e0136
SHA256 3e2337ebc4740d3c7ef68cdfa634af1598359d2eeae628004e4c5b0bb0211b6e
MD5 465ff0a1df2aead3e579fd867e00ec9e
SHA1 a71a2270260e975b0f888fba9f52b7593d8df2ad
SHA512 50218aab31c68b4b36a0280e3c09d2d0139e04dbe312416cc9e814280875ca6e3eb30808c96a605a34e2cd38ee7e1a81215bc64e73299d292140ca7caced731f
SSDEEP 384:mm1OJ/yb5iJc2b9dEE8rYfz2/bD/eglHtEBq/+uTCkXppqYuFTeundHzO5PFsfDN:t1Pr2bjy+z8eecjuTCkXjhuTEIhw5
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

5

Entry point

18016

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\Users\Aurélien\Documents\sources\MegaPad\Release\MegaPad.pdb

plugins/PadSSSPSX.dll

IMPHASH 8cd56103b7d5776b2f9ef0ad722be6cc
SHA256 0db2e8f56f49f0c5b221e36b51497b6c3420f7f6146884b74e92568a4f71a558
MD5 6e2118ba7ede7b4ea26744f0772084e9
SHA1 e1e01f7e673ea7f412aab44f15f7ad19cac9449b
SHA512 3f6713091bae435a4da25ef3ef0a3cb078296e215b7914123362c4e70fa868e813c644415858dd7252a84b072bf6976ff147277a71fe541c791a576511a0de82
SSDEEP 768:6uPnEAExZG8501sKoh8CxMBCkkZ7RoHsLC+9zK1R0dxAyIxz2FEDtnLWJ1lpM+f3:6enEt501WJzkE7re1yLklLAM+fL
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

8688

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

H:\Share\pcsx2src\bin\plugins\PadSSSPSX.pdb

dinput8

DirectInput8Create

kernel32

CreateFileA GetTickCount IsBadReadPtr WriteFile InitializeCriticalSection LeaveCriticalSection ReadFile CreateDirectoryA EnterCriticalSection DeleteCriticalSection CloseHandle GetStringTypeW MultiByteToWideChar LCMapStringW IsValidCodePage GetOEMCP GetACP GetCPInfo RtlUnwind LoadLibraryW EncodePointer DecodePointer GetCurrentThreadId GetCommandLineA RaiseException HeapAlloc GetLastError HeapFree IsProcessorFeaturePresent Sleep HeapSize GetProcAddress GetModuleHandleW ExitProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType GetStartupInfoW GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate HeapDestroy QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetModuleFileNameW HeapReAlloc

user32

SetTimer GetKeyNameTextA GetParent wsprintfA SendMessageA MapVirtualKeyA MessageBoxA GetWindowLongA GetDlgItem EndDialog GetActiveWindow IsWindow SetWindowTextA EnableWindow DialogBoxParamA

plugins/Padnull.dll

IMPHASH 1e341eac2369981ed17a9ec599efcfd3
SHA256 70b32a120eb836372fdb9dfb246e3534009debdcf872a8a62dc4645990838128
MD5 bc31f0b68ae083419ab85ca0f5a9c191
SHA1 f73fb0e79f96bbd9058def15cf6f67dd8c4b6010
SHA512 98dddc078c5593a5c0c9c1f66bf11490aa2c857afcc9e4536f60b64f904d484bf48ca969e1bccc390d0f6c068793ed541807d900f8440e3b7abb20d050e0cf4c
SSDEEP 1536:b2yJqFxv76JVp9N/GO0uRw294fq6AOKhLjtwye:vqFxeJ99vUqsKh3twye
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

10631

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

H:\Share\pcsx2src\bin\plugins\Padnull.pdb

kernel32

CreateDirectoryA GetPrivateProfileStringA WritePrivateProfileStringA GetModuleFileNameA GetModuleHandleA ReadFile GetProcessHeap SetEndOfFile WriteConsoleW LoadLibraryW HeapReAlloc EncodePointer DecodePointer GetCurrentThreadId GetCommandLineA RaiseException UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount RtlUnwind GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW SetLastError GetLastError GetProcAddress HeapFree CloseHandle HeapAlloc IsProcessorFeaturePresent Sleep HeapSize ExitProcess SetHandleCount GetStdHandle GetFileType GetStartupInfoW DeleteCriticalSection FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate HeapDestroy QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WriteFile GetConsoleCP GetConsoleMode CreateFileA LCMapStringW MultiByteToWideChar GetStringTypeW SetStdHandle FlushFileBuffers GetModuleFileNameW CreateFileW

user32

EndDialog CheckDlgButton IsDlgButtonChecked DialogBoxParamA SetWindowLongA GetWindowLongA MessageBoxA GetActiveWindow

plugins/SPU2-X.dll

IMPHASH 13c9ad84ac9cdedc08229291f7d4c84d
SHA256 3a078b14dfec403276d21779d1b28028dbdf60427108d98846673772eefc2f59
MD5 23a74ccf745df119105f3d71cf99aa6a
SHA1 3f112f84dca35f16dd86ced9cbdde34e260d83aa
SHA512 6c9ae7f005416c583affea4c7e9fc787244b8b0b75f74e0d45da3f528986de528f598e1a1eb65e95f1e2f10ba042407c7f6e32d08bb8e5f6dc51afd67bcf67d0
SSDEEP 49152:tvyQoioHbWEY3n3i0gapB/Fzulqsd8Z/FmNcEX1RT66OsLkAJbwJCD:t6QoioHb3Y3nywFClqsd8Z/FmNcEX76
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

168303

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

H:\Share\pcsx2src\bin\plugins\SPU2-X.pdb

winmm

timeGetDevCaps timeGetTime timeEndPeriod timeBeginPeriod waveOutGetErrorTextW waveOutPrepareHeader waveOutReset waveOutUnprepareHeader waveOutClose waveOutGetNumDevs waveOutWrite waveOutOpen

dsound

ord11 ord3

kernel32

OpenFile DeviceIoControl SetPriorityClass CreateFileA CreateWaitableTimerA EncodePointer GetEnvironmentVariableA WaitForSingleObjectEx CancelWaitableTimer SetWaitableTimer GetModuleHandleA GetThreadPriority lstrcmpW GetPriorityClass SignalObjectAndWait LoadLibraryA CreateEventA FormatMessageA DecodePointer InterlockedExchange InterlockedCompareExchange GetTickCount GetProcessHeap HeapSize GlobalSize GlobalFree SetErrorMode GlobalUnlock GlobalLock GlobalAlloc SetLastError LocalAlloc ExpandEnvironmentStringsW WriteFile ReadFile PeekNamedPipe GetFileType GetWindowsDirectoryW SetCurrentDirectoryW MoveFileExW GetFileAttributesW LocalFree FormatMessageW GetCPInfo IsValidCodePage GetCurrentProcessId GetExitCodeProcess TerminateProcess GetModuleHandleW GetModuleFileNameW GetEnvironmentVariableW GetACP GetUserDefaultLCID TlsFree TlsAlloc GetCurrentProcess TlsSetValue InterlockedDecrement InterlockedIncrement CreateMutexW GetLastError FindClose FindFirstFileW GetTempPathW GetTempFileNameW CreateFileW GetVersionExW IsProcessorFeaturePresent WideCharToMultiByte MultiByteToWideChar GetLocaleInfoW GetThreadLocale GetTimeZoneInformation HeapFree HeapReAlloc HeapAlloc HeapCreate ResetEvent SetEvent RaiseException OpenThread GetCurrentThreadId GetCurrentThread OutputDebugStringW GetPrivateProfileStringW WritePrivateProfileStringW TerminateThread FreeLibrary GetProcAddress LoadLibraryW InitializeCriticalSection DeleteCriticalSection LeaveCriticalSection EnterCriticalSection Sleep WaitForMultipleObjects CloseHandle WaitForSingleObject SetThreadPriority CreateThread CreateEventW FreeConsole SetConsoleCtrlHandler AllocConsole SleepEx QueryPerformanceCounter QueryPerformanceFrequency FlushFileBuffers WriteConsoleA GetStdHandle GetSystemTimeAsFileTime UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetVersionExA

user32

SetWindowLongW ReleaseCapture GetPropW CallWindowProcW SetDlgItemTextW EnableWindow GetActiveWindow ShowWindow DispatchMessageW TranslateMessage PostThreadMessageW SendMessageA MessageBoxW DialogBoxParamW EndDialog SetWindowTextW GetDlgItem SendMessageW GetDesktopWindow CharLowerBuffA ClientToScreen SetCursor RemovePropW GetWindowRect RegisterClipboardFormatW SetCapture GetParent LoadCursorW PtInRect SetPropW GetCapture GetMessageW InvalidateRect GetDC ReleaseDC SystemParametersInfoW GetSysColor GetSystemMetrics LoadBitmapW DestroyIcon LoadImageW LoadIconW GetIconInfo CreateIconIndirect GetClientRect FillRect DrawFrameControl DrawIconEx GetCursorPos GetWindowTextLengthW GetWindowTextW GetClassNameW SetWindowPos SetFocus GetFocus SetCursorPos GetScrollInfo SetScrollInfo ScrollWindow IsWindow WindowFromPoint SetParent RedrawWindow UpdateWindow ScreenToClient DeferWindowPos MoveWindow PostQuitMessage TrackPopupMenu GetKeyState IsDialogMessageW IsWindowEnabled IsWindowVisible InflateRect GetUpdateRgn GetWindow BeginDeferWindowPos EndDeferWindowPos GetMessageTime GetMenuItemCount GetMenuItemInfoW VkKeyScanW GetAsyncKeyState SetWindowsHookExW UnhookWindowsHookEx CallNextHookEx RegisterHotKey UnregisterHotKey DrawTextW CreateDialogParamW DestroyAcceleratorTable CreateAcceleratorTableW TranslateAcceleratorW GetWindowDC BeginPaint EndPaint GetForegroundWindow SetForegroundWindow CreateDialogIndirectParamW BringWindowToTop IsZoomed IsIconic GetSystemMenu EnableMenuItem DrawMenuBar SetWindowRgn AdjustWindowRectEx FlashWindow UnregisterClassW ValidateRect CopyRect DrawFocusRect OffsetRect keybd_event OpenClipboard IsClipboardFormatAvailable CloseClipboard HideCaret GetMenuState CheckMenuRadioItem CheckMenuItem ModifyMenuW SetMenuItemInfoW CreatePopupMenu DestroyMenu InsertMenuItemW InsertMenuW RemoveMenu CreateMenu AppendMenuW GetSubMenu UnionRect ChangeDisplaySettingsW EnumDisplaySettingsW GetMessagePos MapWindowPoints ChildWindowFromPoint SetMenu GetUpdateRect DrawIcon DrawStateW DrawEdge ShowCursor SetClipboardData GetWindowLongW GetWindowThreadProcessId PostMessageW DestroyCursor DefWindowProcW DestroyWindow PeekMessageW CreateWindowExW RegisterClassW

gdi32

Ellipse PolyBezier RealizePalette MaskBlt TextOutW SetBrushOrgEx SetROP2 GetTextMetricsW GetTextExtentPoint32W GetTextExtentExPointW StretchDIBits StretchBlt CreatePatternBrush CreateHatchBrush CreatePen ExtCreatePen CreatePalette GetNearestPaletteIndex MoveToEx LineTo GdiFlush ExcludeClipRect CombineRgn RectInRegion SetPixel SetTextAlign OffsetRgn GetRegionData ExtCreateRegion GetRgnBox EqualRgn PtInRegion SaveDC RestoreDC CreateDIBSection GetDIBits GetDIBColorTable CreateDIBitmap EnumFontFamiliesExW PatBlt RoundRect GetEnhMetaFileW CopyEnhMetaFileW DeleteEnhMetaFile GetEnhMetaFileHeader GetWinMetaFileBits SetMetaFileBitsEx GetMetaFileBitsEx SetWinMetaFileBits Rectangle Polyline PolyPolygon Arc Pie GetPixel ExtFloodFill SetWindowOrgEx SetViewportOrgEx SetWindowExtEx SetViewportExtEx CreateSolidBrush SetMapMode SelectClipRgn CreateRectRgn ExtSelectClipRgn GetClipBox SelectPalette SetBkMode GetBkColor GetTextColor SetStretchBltMode GetPaletteEntries SetBkColor BitBlt SelectObject DeleteDC CreateCompatibleDC CreateCompatibleBitmap CreateBitmap GetStockObject Polygon CreateICW SetPolyFillMode GetDeviceCaps SetTextColor CreateFontIndirectW DeleteObject CreateRectRgnIndirect GetCharABCWidthsW GetObjectW

comdlg32

ChooseColorW ChooseFontW

advapi32

RegEnumKeyA RegOpenKeyA RegOpenKeyExA RegQueryValueExA RegOpenKeyExW RegCreateKeyW RegCloseKey RegDeleteKeyW RegDeleteValueW RegQueryValueExW RegSetValueExW RegEnumValueW RegEnumKeyW

shell32

ShellExecuteW SHGetMalloc SHGetPathFromIDListW SHGetSpecialFolderLocation ExtractIconExW ExtractIconW DragAcceptFiles DragQueryFileW DragQueryPoint DragFinish ShellExecuteExW

ole32

CoInitializeEx CoCreateInstance OleInitialize OleUninitialize CoLockObjectExternal RegisterDragDrop RevokeDragDrop OleIsCurrentClipboard OleSetClipboard CLSIDFromString CoInitialize CoGetInterfaceAndReleaseStream CoTaskMemFree CoMarshalInterThreadInterfaceInStream PropVariantClear OleFlushClipboard CoUninitialize OleGetClipboard ReleaseStgMedium

w32pthreads.v4

pthread_mutex_init pthread_mutex_destroy pthread_mutexattr_destroy ptw32_testcancel_enable ptw32_selfThreadKey ptw32_throw pthread_mutex_timedlock pthread_kill ptw32_PrepCancel pthreadCancelableWait pthread_key_create pthread_key_delete pthread_getspecific pthread_create pthread_detach pthread_self pthread_setspecific sem_init sem_destroy sem_post sem_timedwait pthread_equal

msvcp100

?max@?$numeric_limits@I@std@@SAIXZ ?_Xlength_error@std@@YAXPBD@Z ?_Xout_of_range@std@@YAXPBD@Z ?_Orphan_all@_Container_base0@std@@QAEXXZ ??1_Container_base12@std@@QAE@XZ ??0_Lockit@std@@QAE@H@Z ??1_Lockit@std@@QAE@XZ

msvcr100

_except_handler4_common _vsnprintf __CppXcptFilter _amsg_exit _initterm_e _initterm _encoded_null _malloc_crt _onexit _lock __dllonexit _unlock ?terminate@@YAXXZ atoi _snprintf strncmp strncpy strstr _wcsnicmp _wtol toupper ftell clearerr ferror _fileno _get_osfhandle _wgetcwd wcsncmp iswalnum swscanf bsearch qsort atof wcstombs mbstowcs _ftime64 _swprintf fputwc fputws abort _wcsicmp _wsetlocale wcsncpy _wremove _telli64 _lseeki64 _commit _write _read _close exit _endthreadex _beginthreadex _fdopen ?_wopen@@YAHPB_WHH@Z _open_osfhandle _wcsdup wcstod wcstoul wcstol iswspace setlocale wcschr wcsstr _mktime64 iswalpha iswdigit wcsftime _gmtime64 _localtime64 _errno realloc towlower towupper _vswprintf_p _aligned_realloc _aligned_free _aligned_malloc fseek free calloc malloc _time64 srand sscanf_s _wfopen fwprintf _wtoi _itow swprintf_s vswprintf_s vsprintf_s memmove ??0exception@std@@QAE@ABV01@@Z ??0exception@std@@QAE@ABQBD@Z ??1exception@std@@UAE@XZ ?what@exception@std@@UBEPBDXZ _purecall ??2@YAPAXI@Z feof fread fclose __libm_sse2_pow floor _CIsin _CIcos _CIsqrt _except_handler3 __CxxFrameHandler3 _CxxThrowException memcpy memset fopen fwrite sprintf fprintf ?_type_info_dtor_internal_method@type_info@@QAEXXZ __clean_type_info_names_internal _crt_debugger_hook fflush __iob_func fputs vsprintf ??3@YAXPAX@Z ??_V@YAXPAX@Z _wgetenv printf

setupapi

SetupDiOpenDeviceInterfaceRegKey SetupDiGetDeviceInterfaceAlias SetupDiGetDeviceInterfaceDetailA SetupDiEnumDeviceInterfaces SetupDiDestroyDeviceInfoList SetupDiGetClassDevsA

comctl32

ImageList_Destroy ord16 ImageList_GetIconSize ImageList_Draw ImageList_GetImageCount ord17 ImageList_Create ImageList_Add ImageList_ReplaceIcon ImageList_BeginDrag ImageList_SetDragCursorImage ImageList_EndDrag ImageList_DragMove ImageList_DragEnter ImageList_DragLeave CreateStatusWindowW

Name

.text

Size

1.3MB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

312KB

Virtual Size

312KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

13KB

Virtual Size

2.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

17B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

144KB

Virtual Size

144KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

174KB

Virtual Size

173KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

plugins/SPU2null.dll

IMPHASH 3f6c25f094f2cc9a028410d8e9946f49
SHA256 fc20b122bcbc63b48ea08b26cea9a4f905b59ffd6410fa148a8ece202a8b892a
MD5 1529b4f8050e72deb771d71f55093657
SHA1 1adc0777208a10e90dae8c2bf70b0e6a06e4e762
SHA512 f393bca86a78ad0b97ba592cae8ad3d7f7e119e3b5062376d729520eb2f1984cd13f0ddbc2de6c229e0716759dfa445bccbd56de3c3a4f2c330efc5857c49c45
SSDEEP 384:3FnhAYI5pCtjFdqbJz+nXdZA0XOZTXvxvQOjNAJ5X3XS6swId0cL+/YAC/HB9ib+:3FnNI50WJynNcTXpdIX3XS6sw0yCpsb+
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

5

Entry point

5754

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\src\pcsx2\windows\VCprojects\Release\SPU2null.pdb

plugins/USBnull.dll

IMPHASH 378de4ba3eab19b176936e9fdcbe8eda
SHA256 21711ccbad932229310b1a1ca546ab97860e9fc4378e6adf109b89328efc51be
MD5 a7a696da77b7601bf9d7563310242179
SHA1 1fc92ff3b94dc44016e647873095e21f3e2ca592
SHA512 5a33c437b389b2302bb44e42cc00f88bbb65ef6fcbfc3d8133fa31011f579a979625cb33d7fe5b462d8fb8532979b7cd99470a4d750ffcf258c39c5b497aad99
SSDEEP 192:F9m1lxMBPH68/hgyC13l5AEioU8TTitNxOf3XiPVT6e6dEIK0:FoY9aShgrmTx8TTitNxOfyPVEd
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

7984

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

H:\Share\pcsx2src\bin\plugins\USBnull.pdb

plugins/USBqemu.dll

IMPHASH ec0cb5d51f8cb7d510ed2c7bae0934d0
SHA256 46c413f2bbd1887629b174edac54400c53e5fe5f64944033b8c730ac9364f565
MD5 bb8954648371f1bf065fba388d6a0bba
SHA1 d4db3ec736e445d0f74c3143a12ed8b4e7a98204
SHA512 f0efeaf37a0f9de5334756c00a8192c0007172dee43099bad276211de69f6f1d3a02e85192de44bcb8522dba7f790a52e3057006f76f5bd08c0ff0c7f680691e
SSDEEP 384:06QChAz/Hly8Pv4sBPqGgxhFr2Zgei4dmjtudB5jiYtQBrPV73f84r2:sCa4y4sRqG+B2VbTd3jMrdDH
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

5000

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

H:\Share\pcsx2src\bin\plugins\USBqemu.pdb

plugins/ZZOgl.dll

IMPHASH 59a980af58e987e112207869a76bacb6
SHA256 6ec65b258fa9136d4619d328a5efd9af3eb33b73822a52c1e33696f06ebffe50
MD5 62605e0da346348ec6580bc762b41c1e
SHA1 1249ada6b9b67acf245214fd2987c680f1e308a5
SHA512 1c8064c4de608f185d687e3f5b2ca9292e52efac1b275f38b79e6162f115c34e269f30a0746b2672a535bfc3a99c1b983922c41cc9f8873eb60c15ef2b1b9bf2
SSDEEP 24576:F+VnAZCbJBzRL4QWY1aKvlG7+DAOUVZgx7O5yXZJ7IpwTR0HAYlzcKNMgomlvI:QdHWnBOxO5yXZJ7ICTRMlYaMgomlvI
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

249479

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

H:\Share\pcsx2src\bin\plugins\ZZOgl.pdb

winmm

timeGetTime

avifil32

AVIMakeCompressedStream AVIStreamWrite AVIStreamSetFormat AVIFileCreateStreamW AVIFileInit AVISaveOptions AVIStreamRelease AVIFileExit AVIFileOpenW AVIFileRelease

msvfw32

ord2

cg

cgGetNamedParameter cgIsProgram cgIsParameterUsed cgGetLastListing cgCreateContext cgGetErrorString cgGetError cgCreateProgram cgCreateParameter cgSetErrorHandler cgConnectParameter cgDestroyProgram

cggl

cgGLDisableProfile cgGLBindProgram cgGLLoadProgram cgGLSetTextureParameter cgGLEnableTextureParameter cgGLSetManageTextureParameters cgGLSetOptimalOptions cgGLEnableProfile cgGLSetParameter4fv cgGLIsProfileSupported

opengl32

glDrawArrays wglGetProcAddress wglCreateContext glGetError wglMakeCurrent wglDeleteContext glColorMask glColorPointer glDisable glTexImage2D glDepthFunc glAlphaFunc glDeleteTextures glGenLists glNewList glEndList glPushAttrib glListBase glPopAttrib glRasterPos3d glBitmap glPixelStorei glCallLists glBindTexture glGetTexImage glDepthMask glTexParameteri glStencilFunc glPolygonMode glStencilMask glViewport glVertexPointer glTexCoordPointer glDeleteLists glStencilOp glEnable glGenTextures glPointSize glClearDepth glGetIntegerv glEnableClientState glClear glClearColor glPolygonOffset glGetString glShadeModel glPrioritizeTextures glBlendFunc glMatrixMode glHint glLoadIdentity glColor3f glScissor glReadPixels

kernel32

ResetEvent SetEvent LocalAlloc SetLastError GlobalAlloc SetErrorMode GlobalFree GlobalSize HeapSize GetProcessHeap GlobalUnlock GlobalLock LockResource LoadResource FindResourceW GetProcAddress LoadLibraryW FreeLibrary QueryPerformanceCounter GetModuleHandleW WritePrivateProfileStringW GetPrivateProfileStringW CreateDirectoryW IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetSystemTimeAsFileTime GetTickCount InterlockedCompareExchange InterlockedExchange DecodePointer EncodePointer RaiseException OpenThread ExpandEnvironmentStringsW FindClose FindFirstFileW GetTempPathW GetTempFileNameW IsProcessorFeaturePresent GetStdHandle GetThreadLocale GetTimeZoneInformation TlsFree TlsAlloc GetCurrentThreadId TlsSetValue InterlockedDecrement CreateMutexW LeaveCriticalSection EnterCriticalSection DeleteCriticalSection InitializeCriticalSection WriteFile ReadFile PeekNamedPipe GetFileType CreateFileW GetWindowsDirectoryW SetCurrentDirectoryW MoveFileExW GetFileAttributesW GetACP GetUserDefaultLCID GetLocaleInfoW LocalFree FormatMessageW GetCPInfo IsValidCodePage Sleep GetCurrentProcessId GetCurrentProcess GetExitCodeProcess WaitForSingleObject TerminateProcess CloseHandle GetLastError GetModuleFileNameW GetEnvironmentVariableW GetVersionExW WideCharToMultiByte OutputDebugStringW MultiByteToWideChar HeapFree HeapReAlloc HeapAlloc HeapCreate

user32

ReleaseCapture GetCapture PtInRect SetCursorPos GetScrollInfo SetScrollInfo ScrollWindow IsWindow WindowFromPoint GetParent SetParent RedrawWindow ScreenToClient ClientToScreen DeferWindowPos MoveWindow TrackPopupMenu CallWindowProcW IsDialogMessageW IsWindowEnabled IsWindowVisible InflateRect InvalidateRect GetUpdateRgn GetWindow BeginDeferWindowPos EndDeferWindowPos GetMessageTime GetMenuItemCount GetMenuItemInfoW VkKeyScanW SetWindowsHookExW UnhookWindowsHookEx CallNextHookEx RegisterHotKey UnregisterHotKey DrawTextW CreateDialogParamW DestroyAcceleratorTable CreateAcceleratorTableW TranslateAcceleratorW GetWindowDC BeginPaint EndPaint GetForegroundWindow SetForegroundWindow CreateDialogIndirectParamW BringWindowToTop IsZoomed IsIconic GetSystemMenu EnableMenuItem DrawMenuBar SetWindowRgn FlashWindow UnregisterClassW ValidateRect GetMessageW CopyRect DrawFocusRect OffsetRect keybd_event OpenClipboard IsClipboardFormatAvailable CloseClipboard HideCaret GetMenuState CheckMenuRadioItem CheckMenuItem SetCapture SetMenuItemInfoW CreatePopupMenu DestroyMenu InsertMenuItemW InsertMenuW RemoveMenu CreateMenu AppendMenuW GetSubMenu UnionRect EnumDisplaySettingsW GetMessagePos MapWindowPoints ChildWindowFromPoint SetMenu GetUpdateRect DrawIcon DrawStateW DrawEdge SetClipboardData RegisterClipboardFormatW GetAsyncKeyState PeekMessageW ReleaseDC SetWindowLongW GetDesktopWindow SetWindowPos ShowWindow CreateWindowExW AdjustWindowRectEx MessageBoxW GetSystemMetrics SendMessageW UpdateWindow SetWindowTextW DefWindowProcW DispatchMessageW GetClientRect CreateIconIndirect GetIconInfo LoadIconW LoadImageW DestroyIcon LoadBitmapW GetSysColor SystemParametersInfoW DestroyCursor RegisterClassExW ShowCursor TranslateMessage GetDC SetFocus LoadCursorW GetKeyState ChangeDisplaySettingsW PostQuitMessage GetWindowRect DestroyWindow GetActiveWindow IsDlgButtonChecked CheckDlgButton EndDialog GetDlgItem DialogBoxParamW SetRect EnableWindow GetFocus GetWindowLongW GetClassNameW GetWindowTextW GetWindowTextLengthW GetCursorPos DrawIconEx DrawFrameControl ModifyMenuW FillRect PostThreadMessageW RegisterClassW PostMessageW GetWindowThreadProcessId SetCursor

gdi32

MoveToEx GetNearestPaletteIndex CreatePalette ExtCreatePen CreatePen CreateHatchBrush CreatePatternBrush StretchBlt StretchDIBits GetTextExtentExPointW GetCharABCWidthsW GetTextExtentPoint32W GetTextMetricsW SetROP2 SetBrushOrgEx TextOutW MaskBlt RealizePalette PolyBezier Ellipse RoundRect Rectangle Polyline PolyPolygon CombineRgn SetPolyFillMode SetPixel Arc Pie GetPixel ExtFloodFill SetWindowOrgEx SetViewportOrgEx SetWindowExtEx SetViewportExtEx CreateSolidBrush SetMapMode SelectClipRgn CreateRectRgn ExtSelectClipRgn GetClipBox SelectPalette SetBkMode RectInRegion CreateRectRgnIndirect LineTo OffsetRgn GetRegionData ExtCreateRegion GetRgnBox EqualRgn PtInRegion SaveDC RestoreDC CreateDIBSection GetDIBits GetDIBColorTable SetTextColor GetBkColor GetTextColor SetStretchBltMode GetPaletteEntries SetBkColor BitBlt SelectObject DeleteDC CreateCompatibleDC CreateCompatibleBitmap CreateBitmap GetObjectW GetDeviceCaps DeleteObject CreateFontIndirectW CreateDIBitmap EnumFontFamiliesExW PatBlt CreateICW GetEnhMetaFileW CopyEnhMetaFileW DeleteEnhMetaFile GetEnhMetaFileHeader GetWinMetaFileBits SetMetaFileBitsEx GetMetaFileBitsEx SetWinMetaFileBits GdiFlush SetTextAlign ExcludeClipRect SwapBuffers GetStockObject SetPixelFormat ChoosePixelFormat Polygon

msvcp100

?_Xout_of_range@std@@YAXPBD@Z ??0_Lockit@std@@QAE@H@Z ??1_Lockit@std@@QAE@XZ ??1_Container_base12@std@@QAE@XZ ?_Xlength_error@std@@YAXPBD@Z

msvcr100

__clean_type_info_names_internal _crt_debugger_hook _CIsqrt _CIcos _lock __dllonexit _unlock ?terminate@@YAXXZ _aligned_realloc feof ftell clearerr _ftime64 _fdopen _open_osfhandle _telli64 _lseeki64 _commit _write _read _close ?_wopen@@YAHPB_WHH@Z setlocale _mktime64 _gmtime64 _localtime64 realloc _fileno _get_osfhandle _wgetcwd _wremove wcsncmp iswalnum _wcsicmp _wtoi _wsetlocale wcschr fputwc fputws wcsftime abort _time64 swscanf bsearch qsort _wgetenv ?_type_info_dtor_internal_method@type_info@@QAEXXZ atof wcstombs mbstowcs calloc _wcsdup _purecall wcsstr _vswprintf_p wcstod _errno wcstol iswspace towupper iswdigit iswalpha towlower fseek fread free tmpfile getenv sscanf fflush fwrite _snwprintf sprintf_s _stricmp malloc strncmp modf strchr vfprintf setvbuf ferror __iob_func exit vsprintf rand fprintf strncpy _except_handler4_common _vsnprintf __CppXcptFilter _amsg_exit _initterm_e _initterm _encoded_null ??2@YAPAXI@Z ??0exception@std@@QAE@ABV01@@Z ??0exception@std@@QAE@ABQBD@Z ??1exception@std@@UAE@XZ ?what@exception@std@@UBEPBDXZ fopen _access sprintf fclose _wfopen _swprintf wcstoul memmove _aligned_malloc _aligned_free _malloc_crt wcsncpy ??_V@YAXPAX@Z ??3@YAXPAX@Z strstr _CIsin _CIlog floor _except_handler3 __CxxFrameHandler3 _CxxThrowException memset memcpy _wcsnicmp _wtol toupper _onexit

advapi32

RegOpenKeyExW RegCreateKeyW RegCloseKey RegDeleteKeyW RegDeleteValueW RegQueryValueExW RegSetValueExW RegEnumValueW RegEnumKeyW

shell32

ShellExecuteExW SHGetPathFromIDListW SHGetSpecialFolderLocation DragFinish DragQueryPoint DragQueryFileW DragAcceptFiles ExtractIconW ExtractIconExW SHGetMalloc

ole32

CoCreateInstance ReleaseStgMedium OleGetClipboard OleFlushClipboard OleSetClipboard OleIsCurrentClipboard RevokeDragDrop RegisterDragDrop CoLockObjectExternal OleInitialize OleUninitialize

w32pthreads.v4

pthread_mutex_destroy pthread_mutex_timedlock sem_init sem_timedwait sem_destroy sem_post pthread_mutex_init pthread_self pthread_detach ptw32_testcancel_enable ptw32_selfThreadKey ptw32_throw pthread_kill pthread_equal ptw32_PrepCancel pthreadCancelableWait pthread_create pthread_key_create pthread_key_delete pthread_setspecific pthread_getspecific pthread_mutexattr_destroy

comctl32

ImageList_Destroy CreateStatusWindowW ord16 ImageList_Create ImageList_Draw ImageList_GetImageCount ord17 ImageList_Add ImageList_DragLeave ImageList_BeginDrag ImageList_SetDragCursorImage ImageList_DragEnter ImageList_GetIconSize ImageList_DragMove ImageList_ReplaceIcon ImageList_EndDrag

comdlg32

ChooseFontW ChooseColorW

Name

.text

Size

1.3MB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

333KB

Virtual Size

333KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

38KB

Virtual Size

366KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

17B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1019KB

Virtual Size

1019KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

164KB

Virtual Size

164KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

plugins/ZeroGS.dll

IMPHASH 75854816b8f1f4cbebaaec479546ba91
SHA256 5dcc065940724c72df63a613acf206281e96b368fb4d8d08c4800860e7357fa5
MD5 f784889e0c416b9ac9c5116118336c18
SHA1 f9681f8078e1d169ecfa9c212f7db9d3818aa4d0
SHA512 6a8ed41fdd126eefd9447f16dc334b90627392fd6a615c59857e85467031a21ca220317763db04b88bf35866e2a6c6cb3f87e49447bf49effb908a6d657bebc4
SSDEEP 6144:S05B6puMJtJWYWVFf+XMiAr0MZcSa0Of7R7B2Mrfq8WzL4aZdP3r4fHqgmttaKvH:/ck/YSiMiArrtaDlrfDcLjLz4AoCPD
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

29846

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

H:\Share\pcsx2src\bin\plugins\ZeroGS.pdb

d3dx9_43

D3DXSaveSurfaceToFileA D3DXCreateFontA D3DXCreateSprite D3DXCreateTextureFromResourceA D3DXSaveTextureToFileA

d3d9

Direct3DCreate9

winmm

timeGetTime

avifil32

AVIFileRelease AVIFileCreateStreamA AVIFileExit AVIStreamRelease AVISaveOptions AVIFileInit AVIStreamSetFormat AVIFileOpenA AVIStreamWrite AVIMakeCompressedStream

msvfw32

ord2

kernel32

UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent QueryPerformanceCounter InterlockedCompareExchange GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess IsProcessorFeaturePresent Sleep CreateDirectoryA GetPrivateProfileStringA WritePrivateProfileStringA GetModuleHandleA QueryPerformanceFrequency FindResourceA LoadResource LockResource InterlockedExchange DecodePointer EncodePointer GetCurrentProcess

user32

SetWindowPos ChangeDisplaySettingsA SendDlgItemMessageA GetDlgItem EndDialog SetWindowTextA IsDlgButtonChecked CheckRadioButton DestroyWindow SetCursor GetWindowRect RegisterClassExA SetRect GetKeyState SetFocus SendMessageA TranslateMessage GetAsyncKeyState SetWindowLongA MessageBoxA GetWindowLongA CreateWindowExA PeekMessageA UpdateWindow AdjustWindowRect DialogBoxParamA PostQuitMessage DefWindowProcA GetDesktopWindow ShowWindow GetActiveWindow DispatchMessageA GetSystemMetrics CheckDlgButton

msvcp100

?_Xlength_error@std@@YAXPBD@Z ?_Xout_of_range@std@@YAXPBD@Z

msvcr100

floor memset _crt_debugger_hook __clean_type_info_names_internal _except_handler4_common ?_type_info_dtor_internal_method@type_info@@QAEXXZ __CppXcptFilter _amsg_exit _initterm_e _initterm _encoded_null free _CIlog ?terminate@@YAXXZ _onexit _lock __dllonexit _unlock exit modf strncmp _stricmp _aligned_malloc _aligned_free rand vfprintf memcpy _CxxThrowException _malloc_crt fclose sprintf ?what@exception@std@@UBEPBDXZ ??1exception@std@@UAE@XZ ??0exception@std@@QAE@ABQBD@Z ??0exception@std@@QAE@ABV01@@Z memmove fopen ??3@YAXPAX@Z strtoul setvbuf ??2@YAPAXI@Z vprintf _snprintf printf __CxxFrameHandler3

plugins/ZeroSPU2.dll

IMPHASH 67e104a8aa4676575e1a97dd0ea5d2fd
SHA256 9917a5f3a95873178c67cea86fcfeb39c5faae4cd7023f31418e835d89c06151
MD5 c7e32831c0f34b81d528f29caad182f9
SHA1 3ebdff49182cfd6618e16325922ebb0886d056e8
SHA512 6497265ccefc7bcb1b138349a5a51ec062db2b7f4a75bb37bfdb5e41be068a6ff9a9a94b69bcf17db607e1ff9e404778a646edb7760552b619f2b3971a206f27
SSDEEP 1536:9Te0CP3QA6PEtrZBjxCfl11qyCoOcrT7+jUpOfLVNqg:pe0CP3P6PA3lCd11qy3Ocj+jUOfLVN3
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

8658

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

H:\Share\pcsx2src\bin\plugins\ZeroSPU2.pdb

dsound

ord1

winmm

timeGetTime

kernel32

IsDebuggerPresent SetUnhandledExceptionFilter CreateDirectoryA GetPrivateProfileStringA WritePrivateProfileStringA WaitForSingleObject Sleep InterlockedExchangeAdd QueryPerformanceFrequency CloseHandle CreateThread QueryPerformanceCounter UnhandledExceptionFilter GetCurrentProcess TerminateProcess GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId GetTickCount InterlockedCompareExchange InterlockedExchange DecodePointer EncodePointer IsProcessorFeaturePresent

user32

IsWindow DialogBoxParamA GetActiveWindow IsDlgButtonChecked CheckDlgButton EndDialog MessageBoxA

msvcp100

?_Xout_of_range@std@@YAXPBD@Z ?_Xlength_error@std@@YAXPBD@Z

msvcr100

memmove fopen_s vsprintf_s ??3@YAXPAX@Z strtoul fclose ??2@YAPAXI@Z printf free malloc fopen setvbuf _aligned_free ??0exception@std@@QAE@ABV01@@Z _aligned_malloc _purecall ??0exception@std@@QAE@ABQBD@Z fwrite fseek _unlock __dllonexit _lock _onexit _malloc_crt _encoded_null _initterm _initterm_e _amsg_exit __CppXcptFilter ?terminate@@YAXXZ ?_type_info_dtor_internal_method@type_info@@QAEXXZ _except_handler4_common __clean_type_info_names_internal _crt_debugger_hook ??1exception@std@@UAE@XZ ??_V@YAXPAX@Z ?what@exception@std@@UBEPBDXZ __CxxFrameHandler3 _CxxThrowException memset _CIsin _CIcos memcpy _CIsqrt vfprintf

plugins/cdvdGigaherz.dll

IMPHASH 5fc15f0769083c00ec11d6f71798630f
SHA256 ffbb91796eab887c92300e3525525ecf0f2ed95c6ae51f6e6c1af86a0ec95fd1
MD5 7e47fb2d628a355c0478183e3051816d
SHA1 7b12143b28dc96581fbb786aac271a895ff52ee7
SHA512 1107635376b4dbce04ed62a709281a984a894d23dd50352ceb78e8dd766d00e18a3b7a0c41e243464b8bfa441f86ab242c2c376feb4e04c7ad18ea880ff8c40d
SSDEEP 768:K9mmfw4hc4jubxlficPfTRJRWrj5OZjO+sZ:8mqwfvlfic316rNOZU
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

7574

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

H:\Share\pcsx2src\bin\plugins\cdvdGigaherz.pdb

kernel32

GetDriveTypeA GetPrivateProfileStringA WritePrivateProfileStringA CreateFileA SetFilePointer ReadFile GetFileSizeEx GetLastError DeviceIoControl CloseHandle PulseEvent WaitForSingleObject InitializeCriticalSection TerminateThread Sleep CreateEventA LeaveCriticalSection SetThreadPriority EnterCriticalSection ResetEvent DeleteCriticalSection CreateThread GetCurrentThreadId GetTickCount QueryPerformanceCounter IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess GetSystemTimeAsFileTime InterlockedCompareExchange InterlockedExchange DecodePointer EncodePointer GetCurrentProcessId

user32

SendMessageA GetDlgItem EndDialog GetActiveWindow GetDlgItemTextA DialogBoxParamA MessageBoxExA MessageBoxA

msvcr100

strncpy strcpy_s fprintf _ftelli64 feof ?what@exception@std@@UBEPBDXZ ??1exception@std@@UAE@XZ ??0exception@std@@QAE@ABQBD@Z ??0exception@std@@QAE@ABV01@@Z memmove _stat64 _fseeki64 fgetc fopen fread fclose _malloc_crt free _encoded_null _initterm _initterm_e _amsg_exit __CppXcptFilter ?terminate@@YAXXZ ?_type_info_dtor_internal_method@type_info@@QAEXXZ __clean_type_info_names_internal _unlock __dllonexit _lock _onexit _except_handler4_common _crt_debugger_hook ??2@YAPAXI@Z _purecall ??3@YAXPAX@Z printf __iob_func vsprintf sprintf memcpy memset _CxxThrowException strcat_s __CxxFrameHandler3

msvcp100

?_Xout_of_range@std@@YAXPBD@Z ?_Xlength_error@std@@YAXPBD@Z

plugins/cdvdPeops.dll

IMPHASH e5aaccbbea7b597ae48ea83a6cb62c77
SHA256 15954ac2d353fc9146554a77886c89d08e352029b0c000325496f11c3c5e3a55
MD5 0683d7c5c2d3b371470ba7d8a1fc5e20
SHA1 b1fe4a43a2e1f7df4e650cc147640d94b95431b2
SHA512 5b97f702896f54b38b21d196a60afbfa39174a43838b517b191a746e5f96c08fae9ba6ff70f2e0d4d545bc0a1929b6cdd81096d395b04ee71c23ef1bd426ae74
SSDEEP 1536:6WDekNsoS4LMwwYGGbuILUelWy99mBMl4PV7cn8ctZ+Xx:JxsXzYGGamBWyzY7O5tk
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

39815

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GetProcAddress LoadLibraryA FreeLibrary CreateFileA GetVersionExA DeviceIoControl GetLastError ResetEvent GetDriveTypeA SetFilePointer ReadFile WriteFile SetEvent WaitForMultipleObjects CreateThread CreateMutexA Sleep WriteConsoleW GetConsoleOutputCP WriteConsoleA HeapSize SetStdHandle GetLocaleInfoA GetStringTypeW GetStringTypeA FlushFileBuffers ReleaseMutex WaitForSingleObject GetOverlappedResult CloseHandle CreateEventA GetSystemTimeAsFileTime EnterCriticalSection LeaveCriticalSection HeapFree HeapAlloc GetCurrentThreadId GetCommandLineA GetProcessHeap TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetModuleHandleA ExitProcess HeapDestroy HeapCreate VirtualFree VirtualAlloc HeapReAlloc GetModuleFileNameA GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError LCMapStringA WideCharToMultiByte MultiByteToWideChar LCMapStringW RtlUnwind FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId InitializeCriticalSection GetConsoleCP GetConsoleMode

user32

DialogBoxParamA GetActiveWindow IsDlgButtonChecked GetDlgItemInt EndDialog CheckDlgButton SetDlgItemInt ShowWindow MessageBoxA GetDlgItem SendMessageA wsprintfA GetDlgItemTextA SetDlgItemTextA MessageBeep

comdlg32

GetOpenFileNameA GetSaveFileNameA

advapi32

RegSetValueExA RegOpenKeyExA RegQueryValueExA RegCloseKey RegCreateKeyExA

plugins/spu2PeopsSound.dll

IMPHASH 0edd3c0eb60e850d41cd0131bea6b342
SHA256 da0c9f3872c64d3157b2b6b85cc89ace13cee958ec675e4ae3276385de998308
MD5 7ea5fd802422318e333e0d04d1491bf6
SHA1 4afefae47cf231c170c8cfa9aaa0e9308890b94f
SHA512 70b0e9d19f4a9b1e5c8195ed2fc365f618a9ff3e953515ce33a1a5c1f13b83422c8faec807feebddf599e5c93be5d87a801e0e32ee829ce1d6627b09108b5040
SSDEEP 3072:rPLSFYiN0W5hfNzjAMUsfI3/Sj9G1WBuYICY5MVJL1/CxYC:rPLSZNPtzkeLBq
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

5

Entry point

44562

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

dsound

ord1

winmm

mmioClose mmioOpenA mmioCreateChunk mmioWrite mmioAscend timeGetTime

kernel32

SetEndOfFile SetStdHandle HeapSize SetFilePointer GetLocaleInfoA GetStringTypeW GetStringTypeA LCMapStringW MultiByteToWideChar WriteConsoleA GetProcessHeap GetConsoleMode GetConsoleCP CreateFileA CloseHandle IsValidCodePage GetOEMCP GetACP GetCPInfo InitializeCriticalSectionAndSpinCount GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter GetEnvironmentStringsW FreeLibrary CreateThread SetThreadPriority LoadLibraryA Sleep IsBadReadPtr FlushFileBuffers ReadFile GetConsoleOutputCP WriteConsoleW LCMapStringA HeapAlloc GetLastError HeapFree GetCurrentThreadId GetCommandLineA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate HeapDestroy GetModuleHandleW GetProcAddress ExitProcess WriteFile GetModuleFileNameA RtlUnwind TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte

user32

DialogBoxParamA GetActiveWindow IsWindowEnabled GetDlgItemTextA EnableWindow MessageBeep DestroyWindow CreateDialogParamA SetWindowPos MessageBoxA IsWindow LoadCursorA SetCursor SetFocus KillTimer ShowCursor CheckRadioButton GetSysColor SetTimer InvalidateRect UpdateWindow SetDlgItemInt wsprintfA SetDlgItemTextA GetClientRect GetDC ScrollDC ReleaseDC IsDlgButtonChecked GetDlgItem SendMessageA CheckDlgButton EndDialog

gdi32

CreateSolidBrush CreatePen MoveToEx LineTo SelectObject PatBlt SetPixel DeleteObject

advapi32

RegCloseKey RegCreateKeyExA RegSetValueExA RegOpenKeyExA RegQueryValueExA

uninst.exe

IMPHASH 7fa974366048f9c551ef45714595665e
SHA256 0a7b52b90eaf6ab20362e32ff4e308490ffcea92ce94fde61f3582f9c0bf935a
MD5 3300e5736086106d01a9cf935786bd6f
SHA1 1c3a10ba2b5a85431d8d96e904001a9cb2d3b7a6
SHA512 31bdf3e95aa43377c9c6bf6d74345579510ee7529e14c3c6130e35fa9a9b09ac86660f187c685afa8f069f26443f325f3e05ac6fcaeec997dc6d7cb13e8424ad
SSDEEP 1536:Uf4exGDkeZ4mOoSgJEAJJQiU4MMMMMMMMMMMMgdsf5hJ4KKE29bMM:C4eYZ4+1JXJJQNndevCXEAN
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

12624

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA Sleep GetTickCount GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess GetWindowsDirectoryA SetFileTime GetCommandLineA SetErrorMode LoadLibraryA lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA CreateFileA GetTempFileNameA lstrlenA lstrcatA GetSystemDirectoryA GetVersion CloseHandle lstrcmpiA lstrcmpA ExpandEnvironmentStringsA GlobalFree GlobalAlloc WaitForSingleObject GetExitCodeProcess GetModuleHandleA LoadLibraryExA GetProcAddress FreeLibrary MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA WriteFile ReadFile MulDiv SetFilePointer FindClose FindNextFileA FindFirstFileA DeleteFileA GetTempPathA

user32

EndDialog ScreenToClient GetWindowRect EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard RegisterClassA TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA DestroyWindow CreateDialogParamA SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow wsprintfA SendMessageTimeoutA FindWindowExA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA OpenClipboard ExitWindowsEx IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint ShowWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor SelectObject

shell32

SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA SHGetSpecialFolderLocation

advapi32

RegQueryValueExA RegSetValueExA RegEnumKeyA RegEnumValueA RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegCloseKey RegCreateKeyExA

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

w32pthreads.v4.dll

IMPHASH 406ddb00c5dcff953a3da1fa86a9c263
SHA256 0e8984e964b8476d5a20012ac7793cc6aecd13e9adbd2cc1ace62f119c574469
MD5 4f425b5b0aac008cdab81537d5a3a0f7
SHA1 6a462eeda76f75382e20673d58e9a71e6ebf6aa2
SHA512 f2edbededa538d668b7673015ef2f8f2e8d664a9996ac6e708a14f6edf68a0d7f7933b05daca9bbd126fc20e05c2014f937968a3cb7573948aead5ed97025f25
SSDEEP 384:fh1JOwo7csi6tp1tOQPqL83tCtO7ztM8mSZIDT04A3GYLLWw2f9+fQrIvtl5hZpQ:fh1JphOY304AWn90tLWr+W+riE5YS
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

1

Major OS version

5

Entry point

4974

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

H:\Share\pcsx2src\bin\w32pthreads.v4.pdb

ws2_32

WSASetLastError WSAGetLastError

kernel32

OpenProcess UnhandledExceptionFilter IsDebuggerPresent ResumeThread GetThreadContext SetThreadContext SuspendThread WaitForSingleObject WaitForMultipleObjects ResetEvent InterlockedDecrement SetEvent Sleep EnterCriticalSection LeaveCriticalSection GetLastError TlsGetValue SetLastError TlsAlloc TlsFree InterlockedExchangeAdd GetCurrentThreadId DuplicateHandle GetCurrentProcess GetCurrentThread GetThreadPriority SetThreadPriority TlsSetValue LoadLibraryA GetProcAddress FreeLibrary GetProcessAffinityMask CreateEventA CloseHandle InitializeCriticalSection DeleteCriticalSection RaiseException GetCurrentProcessId TerminateProcess CreateSemaphoreA ReleaseSemaphore GetSystemTimeAsFileTime GetTickCount QueryPerformanceCounter InterlockedCompareExchange InterlockedExchange DecodePointer EncodePointer SetUnhandledExceptionFilter

msvcr100

_malloc_crt _encoded_null _initterm _initterm_e _amsg_exit __CppXcptFilter __clean_type_info_names_internal _unlock __dllonexit _lock _onexit _except_handler4_common _crt_debugger_hook _errno _ftime64_s _endthreadex calloc free _beginthreadex malloc _except_handler3 memset exit

pthreadCancelableTimedWait pthreadCancelableWait pthread_attr_destroy pthread_attr_getdetachstate pthread_attr_getinheritsched pthread_attr_getschedparam pthread_attr_getschedpolicy pthread_attr_getscope pthread_attr_getstackaddr pthread_attr_getstacksize pthread_attr_init pthread_attr_setdetachstate pthread_attr_setinheritsched pthread_attr_setschedparam pthread_attr_setschedpolicy pthread_attr_setscope pthread_attr_setstackaddr pthread_attr_setstacksize pthread_barrier_destroy pthread_barrier_init pthread_barrier_wait pthread_barrierattr_destroy pthread_barrierattr_getpshared pthread_barrierattr_init pthread_barrierattr_setpshared pthread_cond_broadcast pthread_cond_destroy pthread_cond_init pthread_cond_signal pthread_cond_timedwait pthread_cond_wait pthread_condattr_destroy pthread_condattr_getpshared pthread_condattr_init pthread_condattr_setpshared pthread_create pthread_delay_np pthread_detach pthread_equal pthread_exit pthread_getconcurrency pthread_getschedparam pthread_getspecific pthread_getw32threadhandle_np pthread_join pthread_key_create pthread_key_delete pthread_kill pthread_mutex_destroy pthread_mutex_init pthread_mutex_timedlock pthread_mutexattr_destroy pthread_mutexattr_getkind_np pthread_mutexattr_getpshared pthread_mutexattr_gettype pthread_mutexattr_init pthread_mutexattr_setkind_np pthread_mutexattr_setpshared pthread_mutexattr_settype pthread_num_processors_np pthread_once pthread_rwlock_destroy pthread_rwlock_init pthread_rwlock_rdlock pthread_rwlock_timedrdlock pthread_rwlock_timedwrlock pthread_rwlock_tryrdlock pthread_rwlock_trywrlock pthread_rwlock_unlock pthread_rwlock_wrlock pthread_rwlockattr_destroy pthread_rwlockattr_getpshared pthread_rwlockattr_init pthread_rwlockattr_setpshared pthread_self pthread_setcancelstate pthread_setcanceltype pthread_setconcurrency pthread_setschedparam pthread_setspecific pthread_timechange_handler_np pthread_win32_process_attach_np pthread_win32_process_detach_np pthread_win32_test_features_np pthread_win32_thread_attach_np pthread_win32_thread_detach_np ptw32_PrepCancel ptw32_get_exception_services_code ptw32_mutex_check_need_init ptw32_selfThreadKey ptw32_testcancel_enable ptw32_throw sched_get_priority_max sched_get_priority_min sched_getscheduler sched_setscheduler sched_yield sem_close sem_destroy sem_getvalue sem_init sem_open sem_post sem_post_multiple sem_timedwait sem_unlink

wisestudio.nfo

SHA256 4415b5c34fd977db00167923ac9e3d6393e8fe75ad013f8c0022203c4008bf83
MD5 1c7f5ba7d5c69c7e10a77d2639e0a1ec
SHA1 ebf2ffd95f4f99c36c953bdf79266ee6bb62581e
SHA512 f34a8075bb46b275012068b361bed0855fcdf0e74e2ec9067b97ae7c352a6497ef796b02aeea3150fdc72ce644592267a0d52221c0b96e45e1ccacb2565a8023
SSDEEP 48:rDy8hVXKYDMudF5vn9oXhQDoIHJb8OUFbc+Wvu8vrTdub01vrh4Iewg8wdDIBOhm:JpvqxcDjvv4IewkIBoEjIY
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Sharing

General

Malware Config

Signatures

File Explorer