9187b6df8a4f35729afaf4756430d152_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

9187b6df8a4f35729afaf4756430d152_JaffaCakes118
Size

23.2MB
MD5

9187b6df8a4f35729afaf4756430d152
SHA1

9ee50c2d7b7f7044d71688a93e9a3553525c288f
SHA256

758b4ea71cd4703c9dd1ea6b150881bfc4325dc2b30add303e9a9656b1f54b5f
SHA512

df88d0fdddc386d36f4e82736e0c1f26ef9e32597ba0c600539e0ea7c9b9e16676ee0faa5ba53d8a127120a4b03318bcd4fad809457faa2c9981f2511cc9fffe
SSDEEP

393216:T6ItjBqHX+BnldW6fOMlI9xe+9NqmfYMy/5PUkJrs6rvE70gV6m6TPGO8afbVq04:DFBq3+hldzO1xe+94eDy/5PeF6LTe8m

Score

3^/10

Malware Config

Signatures

Unsigned PE 49 IoCs

Checks for missing Authenticode signature.

resource
9187b6df8a4f35729afaf4756430d152_JaffaCakes118
unpack001/$PLUGINSDIR/Banner.dll
unpack001/$PLUGINSDIR/ExecCmd.dll
unpack001/$PLUGINSDIR/JpgToBmp.exe
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/inetc.dll
unpack001/$PLUGINSDIR/nsDialogs.dll
unpack001/$PLUGINSDIR/nsExec.dll
unpack001/$PLUGINSDIR/xml.dll
unpack001/$PROGRAMFILES/Angry Birds Space Skin Pack/$PROGRAMFILES/Angry Birds Space Skin Pack/uninst.exe
unpack002/$PLUGINSDIR/ExecCmd.dll
unpack002/$PLUGINSDIR/System.dll
unpack002/$PLUGINSDIR/nsDialogs.dll
unpack002/$PLUGINSDIR/nsExec.dll
unpack002/$PLUGINSDIR/registry.dll
unpack002/7boot.exe
unpack002/RIC.exe
unpack001/$PROGRAMFILES/Angry Birds Space Skin Pack/Reloader.exe
unpack003/$PLUGINSDIR/ExecCmd.dll
unpack003/$PLUGINSDIR/InstallOptions.dll
unpack003/$PLUGINSDIR/System.dll
unpack003/$PLUGINSDIR/nsExec.dll
unpack001/$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Docklets/RocketClock/RocketClock.dll
unpack001/$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/RocketDock.dll
unpack001/$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/RocketDock.exe
unpack001/$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Tools/Debug.exe
unpack001/$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Tools/LanguageID Finder.exe
unpack001/$PROGRAMFILES/Angry Birds Space Skin Pack/Tools/7boot.exe
unpack001/$PROGRAMFILES/Angry Birds Space Skin Pack/Tools/MoveEx.exe
unpack001/$PROGRAMFILES/Angry Birds Space Skin Pack/Tools/ResHacker.exe
unpack001/$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Plugins/Blur/fx.dll
unpack001/$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Plugins/Break/fx.dll
unpack001/$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Plugins/FlatOut/fx.dll
unpack001/$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Plugins/Fly/fx.dll
unpack001/$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Plugins/Ripple/fx.dll
unpack001/$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Plugins/Roll/fx.dll
unpack001/$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Plugins/Runaway/fx.dll
unpack001/$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Plugins/iBounce/fx.dll
unpack001/$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Plugins/iZoom/fx.dll
unpack001/$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/UberIcon.dll
unpack001/$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/UberIcon.exe
unpack001/$RESOURCES/Themes/angry/Shell/NormalColor/en-US/shellstyle.dll.mui
unpack001/$RESOURCES/Themes/angry/Shell/NormalColor/shellstyle.dll
unpack001/$RESOURCES/Themes/angry/angry.msstyles
unpack001/$RESOURCES/Themes/angry/en-US/ANGRY-BIRDS.msstyles.mui
unpack001/$RESOURCES/Themes/angry/en-US/osituro.msstyles.mui
unpack001/RIC.exe
unpack001/SP.exe
unpack001/boot.exe

NSIS installer 6 IoCs

installer

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2
static1/unpack001/$PROGRAMFILES/Angry Birds Space Skin Pack/$PROGRAMFILES/Angry Birds Space Skin Pack/uninst.exe	nsis_installer_1
static1/unpack001/$PROGRAMFILES/Angry Birds Space Skin Pack/$PROGRAMFILES/Angry Birds Space Skin Pack/uninst.exe	nsis_installer_2
static1/unpack001/$PROGRAMFILES/Angry Birds Space Skin Pack/Reloader.exe	nsis_installer_1
static1/unpack001/$PROGRAMFILES/Angry Birds Space Skin Pack/Reloader.exe	nsis_installer_2

Files

9187b6df8a4f35729afaf4756430d152_JaffaCakes118
.exe windows:4 windows x86 arch:x86

099c0646ea7282d232219f8807883be0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
CreateFileA
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
SetFileTime
GetTempPathA
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetWindowsDirectoryA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 104KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/Banner.dll
.dll windows:4 windows x86 arch:x86

7a3709b093081d5614be1eaa2fe7fe76

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleA
CloseHandle
Sleep
CreateThread
GetCurrentThreadId
GlobalFree
lstrcpyA
lstrcpynA
GlobalAlloc

user32

DestroyWindow
SetWindowLongA
GetWindowLongA
SetWindowTextA
SetDlgItemTextA
DispatchMessageA
PeekMessageA
WaitMessage
IsWindow
CreateDialogParamA
ShowWindow
AttachThreadInput
IsWindowVisible
wsprintfA
PostMessageA

Exports

Exports

destroy
getWindow
show

Sections

.text
Size: 1024B - Virtual size: 862B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/ExecCmd.dll
.dll windows:4 windows x86 arch:x86

446b3baefb02586ec09e438a07186f7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalFree
CloseHandle
TerminateProcess
GetExitCodeProcess
WaitForSingleObject
Sleep
CreateProcessA
GlobalAlloc
GetExitCodeThread
lstrcpyA
lstrcpynA
CreateThread
lstrcmpiA

user32

MapVirtualKeyA
SendMessageA
EnumWindows
WaitForInputIdle
wsprintfA
GetWindowThreadProcessId

Exports

Exports

exec
wait

Sections

.text
Size: 1024B - Virtual size: 977B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 658B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 154B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/JpgToBmp.exe
.exe windows:4 windows x86 arch:x86

e5069441b0758ba7946e6a2626af9ea1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
lstrcpyA
MultiByteToWideChar
OutputDebugStringA
LoadLibraryA
GetProcAddress
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
WriteFile
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
RtlUnwind
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
GetCPInfo
GetACP
GetOEMCP
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte

user32

MessageBoxA

oleaut32

SysAllocStringLen

gdiplus

GdipGetImageEncoders
GdipSaveImageToFile
GdipAlloc
GdiplusStartup
GdipGetImageEncodersSize
GdipDisposeImage
GdipFree
GdipCloneImage
GdipLoadImageFromFile

shlwapi

StrTrimA

Sections

.text
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:4 windows x86 arch:x86

2017f2acbdaa42ab3e4adeb8b4c37e7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyA
lstrcpynA
FreeLibrary
lstrcatA
GetProcAddress
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
VirtualAlloc
VirtualProtect

user32

wsprintfA

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/UXTheme Patcher.exe
.exe windows:5 windows x86 arch:x86

315a1b02d7617389cdbdf1e1faba5302

Code Sign

18:23:2a:ce:52:10:a6:b0:4d:86:17:a5:00:40:af:4c
Certificate

Issuer

CN=deepxw Software,O=deepxw Software,1.2.840.113549.1.9.1=#1306646565707877

Not Before

18/01/2008, 16:00

Not After

31/12/2011, 16:00

Subject

CN=deepxw Software,O=deepxw Software,1.2.840.113549.1.9.1=#1306646565707877

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

63:21:92:f9:d0:34:fb:ef:08:ff:6e:e2:8b:fb:26:de:9b:0e:4f:b4
Signer

Actual PE Digest

63:21:92:f9:d0:34:fb:ef:08:ff:6e:e2:8b:fb:26:de:9b:0e:4f:b4

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

b:\universalthemepatcher\universalthemepatcher\x86\objfre_wnet_x86\i386\UniversalThemePatcher-x86.pdb

Imports

mfc42u

ord815
ord641
ord2506
ord3948
ord2858
ord2371
ord1143
ord861
ord6237
ord5261
ord4370
ord4847
ord4992
ord6048
ord1767
ord5237
ord5276
ord4419
ord3592
ord324
ord4229
ord755
ord470
ord3087
ord5949
ord1197
ord4219
ord942
ord940
ord2810
ord540
ord561
ord4155
ord4704
ord3568
ord1634
ord1808
ord1761
ord5871
ord3792
ord4470
ord535
ord823
ord858
ord5798
ord5446
ord6390
ord5706
ord4124
ord5679
ord2855
ord3397
ord3716
ord567
ord538
ord1921
ord4270
ord3871
ord2036
ord2440
ord1569
ord3733
ord4616
ord5710
ord5285
ord5303
ord4692
ord4074
ord2717
ord5830
ord5298
ord5296
ord3341
ord2388
ord5193
ord1089
ord3917
ord5727
ord2504
ord2546
ord4480
ord6371
ord4269
ord825
ord795
ord4418
ord4621
ord4075
ord3074
ord3820
ord3826
ord3825
ord2971
ord3076
ord2980
ord3257
ord3131
ord4459
ord3254
ord3142
ord2977
ord5273
ord2116
ord2438
ord5257
ord1720
ord5059
ord3744
ord6372
ord2047
ord2640
ord4435
ord4831
ord3793
ord5286
ord4347
ord6370
ord5157
ord2377
ord4401
ord1768
ord4073
ord6051
ord800
ord3614
ord2406
ord3621
ord1165
ord3658
ord6195
ord4667

msvcrt

__p__commode
__p__fmode
__set_app_type
_except_handler3
__wgetmainargs
_adjust_fdiv
_onexit
_wcmdln
exit
_cexit
__setusermatherr
__dllonexit
_initterm
__argc
__wargv
_XcptFilter
_exit
_wcsicmp
malloc
free
wcsrchr
wcstoul
??1type_info@@UAE@XZ
_controlfp
?terminate@@YAXXZ
wcslen
_wcslwr
wcsstr
__CxxFrameHandler
_c_exit

advapi32

GetUserNameW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken

kernel32

DeleteFileW
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetVersion
GetEnvironmentVariableW
FindFirstFileW
GetLocaleInfoW
GetPrivateProfileStringW
IsValidLocale
FindNextFileW
lstrcmpiW
GetModuleFileNameW
GetVersionExW
GetModuleHandleW
GetProcAddress
GetSystemInfo
CopyFileW
lstrcpyW
lstrcmpW
GetWindowsDirectoryW
CreateMutexW
GetLastError
MoveFileExW
FreeLibrary
LoadLibraryW
UnmapViewOfFile
IsBadReadPtr
GetFileSize
CreateFileW
WriteFile
SetFilePointer
Sleep
ReadFile
lstrcpynW
LockResource
LoadResource
FindResourceExW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetTempFileNameW
CloseHandle
GetExitCodeProcess
GetCurrentProcess
WaitForSingleObject
lstrcatW
CreateFileMappingW
MapViewOfFile

gdi32

GetObjectW
CreateSolidBrush
GetStockObject
CreateFontIndirectW

user32

CharNextW
MessageBeep
LoadCursorW
SetCursor
InvalidateRect
ExitWindowsEx
GetClassNameW
wsprintfW
GetSystemMetrics
LoadIconW
GetClientRect
IsIconic
GetSystemMenu
PostMessageW
EnableWindow
MessageBoxW
DrawIcon
AppendMenuW
SendMessageW
SetWindowPos

shell32

DragQueryFileW
ShellExecuteExW
ShellExecuteW
DragFinish

shlwapi

PathFileExistsW

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

imagehlp

CheckSumMappedFile
MapFileAndCheckSumW

comctl32

CreateStatusWindowW

wintrust

CryptCATAdminEnumCatalogFromHash
CryptCATAdminReleaseContext
CryptCATAdminAcquireContext
CryptCATAdminCalcHashFromFileHandle
WinVerifyTrust
CryptCATAdminReleaseCatalogContext
CryptCATCatalogInfoFromContext

netapi32

NetUserGetInfo
NetApiBufferFree

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/UXTheme Patcher64.exe
.exe windows:5 windows x64 arch:x64

f631ae8ca1c7afaeec16b2938253cd05

Code Sign

18:23:2a:ce:52:10:a6:b0:4d:86:17:a5:00:40:af:4c
Certificate

Issuer

CN=deepxw Software,O=deepxw Software,1.2.840.113549.1.9.1=#1306646565707877

Not Before

18/01/2008, 16:00

Not After

31/12/2011, 16:00

Subject

CN=deepxw Software,O=deepxw Software,1.2.840.113549.1.9.1=#1306646565707877

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

90:79:83:6f:36:cc:71:14:ac:50:87:4e:aa:5e:24:0e:5b:46:07:ef
Signer

Actual PE Digest

90:79:83:6f:36:cc:71:14:ac:50:87:4e:aa:5e:24:0e:5b:46:07:ef

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

b:\universalthemepatcher\universalthemepatcher\x64\objfre_wnet_AMD64\amd64\UniversalThemePatcher-x64.pdb

Imports

mfc42u

ord3783
ord2903
ord2393
ord1441
ord1126
ord6660
ord5687
ord4721
ord5245
ord5406
ord6437
ord1777
ord5663
ord5702
ord4771
ord3761
ord337
ord4557
ord984
ord525
ord3177
ord6328
ord1499
ord4548
ord1287
ord1284
ord2846
ord626
ord6614
ord4214
ord5077
ord3742
ord1647
ord1812
ord1771
ord6243
ord4014
ord4826
ord620
ord2459
ord2049
ord6886
ord1122
ord6147
ord6184
ord5815
ord6832
ord6050
ord4436
ord6021
ord2900
ord665
ord624
ord1930
ord4599
ord4131
ord2517
ord852
ord1063
ord659
ord3916
ord4983
ord6053
ord5711
ord5730
ord1584
ord5065
ord4368
ord2752
ord5724
ord5722
ord3468
ord2412
ord5615
ord1388
ord4191
ord6071
ord2515
ord2559
ord4836
ord6813
ord4598
ord1035
ord4770
ord4988
ord4371
ord3164
ord4077
ord4083
ord4082
ord3046
ord3166
ord3052
ord3366
ord3231
ord4815
ord3362
ord3243
ord3049
ord5699
ord2140
ord2457
ord5683
ord1736
ord5484
ord3933
ord6814
ord2060
ord2670
ord4789
ord5229
ord4017
ord5712
ord4694
ord6812
ord5586
ord2399
ord4752
ord1778
ord4365
ord6440
ord1040
ord2427
ord3790
ord1463
ord6887
ord3830
ord4473
ord5039

msvcrt

_wcmdln
__wgetmainargs
_initterm
__setusermatherr
_commode
_c_exit
exit
??1type_info@@UEAA@XZ
__dllonexit
_XcptFilter
__C_specific_handler
_wcsicmp
_cexit
__set_app_type
_exit
memset
__CxxFrameHandler
malloc
wcsrchr
wcstoul
__argc
__wargv
_wcslwr
wcsstr
_fmode
_onexit
?terminate@@YAXXZ
memcpy
free

advapi32

GetUserNameW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken

kernel32

MoveFileExW
DeleteFileW
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetVersion
GetEnvironmentVariableW
FindFirstFileW
GetPrivateProfileStringW
IsValidLocale
GetLocaleInfoW
FindNextFileW
lstrcmpiW
GetModuleFileNameW
GetVersionExW
GetModuleHandleW
GetProcAddress
GetSystemInfo
CopyFileW
lstrcpyW
lstrcmpW
lstrcatW
GetCurrentProcess
GetLastError
GetTempFileNameW
LoadLibraryW
UnmapViewOfFile
IsBadReadPtr
MapViewOfFile
CreateFileW
WriteFile
SetFilePointer
Sleep
ReadFile
lstrcpynW
LockResource
LoadResource
FindResourceExW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetStartupInfoW
CloseHandle
GetExitCodeProcess
WaitForSingleObject
FreeLibrary
GetWindowsDirectoryW
CreateMutexW
GetFileSize
CreateFileMappingW

gdi32

GetObjectW
CreateSolidBrush
GetStockObject
CreateFontIndirectW

user32

CharNextW
MessageBeep
LoadCursorW
SetCursor
InvalidateRect
ExitWindowsEx
SetWindowPos
GetClassNameW
GetSystemMetrics
LoadIconW
GetClientRect
IsIconic
GetSystemMenu
PostMessageW
SendMessageW
AppendMenuW
EnableWindow
MessageBoxW
DrawIcon
wsprintfW

shell32

DragQueryFileW
ShellExecuteExW
ShellExecuteW
DragFinish

shlwapi

PathFileExistsW

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

imagehlp

CheckSumMappedFile
MapFileAndCheckSumW

comctl32

CreateStatusWindowW

wintrust

CryptCATAdminEnumCatalogFromHash
CryptCATAdminReleaseContext
CryptCATAdminAcquireContext
CryptCATAdminCalcHashFromFileHandle
WinVerifyTrust
CryptCATAdminReleaseCatalogContext
CryptCATCatalogInfoFromContext

netapi32

NetUserGetInfo
NetApiBufferFree

Sections

.text
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/angry.jpg
.jpg
$PLUGINSDIR/inetc.dll
.dll windows:4 windows x86 arch:x86

5bdcdde5acd7b395f3f3d19ebbb8c6cd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_mbschr
_adjust_fdiv
malloc
_initterm
free
strlen
strchr
strrchr
_mbsrchr
strtoul
memset
_mbsstr
strtol

kernel32

GlobalFree
CreateThread
WaitForSingleObject
TerminateThread
GetModuleHandleA
MulDiv
lstrcpyA
GlobalAlloc
LoadLibraryA
GetProcAddress
lstrcmpiA
CreateFileA
GetFileSize
lstrlenA
WriteFile
ReadFile
lstrcmpA
lstrcpynA
lstrcatA
GetLastError
DeleteFileA
CloseHandle
SleepEx
SetFilePointer
GetTickCount

user32

MessageBoxA
GetParent
ShowWindow
SetWindowLongA
IsWindow
SetWindowTextA
SendDlgItemMessageA
GetDlgItem
PostMessageA
GetWindowTextA
SendMessageA
SetDlgItemTextA
SetWindowPos
SystemParametersInfoA
GetClientRect
GetWindowRect
SetTimer
LoadIconA
UpdateWindow
DestroyWindow
KillTimer
RedrawWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
IsWindowVisible
EnableWindow
CreateDialogParamA
FindWindowExA
wsprintfA
GetWindowLongA

wininet

HttpSendRequestA
HttpSendRequestExA
HttpQueryInfoA
FtpCreateDirectoryA
FtpOpenFileA
InternetGetLastResponseInfoA
InternetSetFilePointer
InternetSetOptionA
InternetQueryOptionA
InternetCloseHandle
InternetErrorDlg
HttpOpenRequestA
HttpAddRequestHeadersA
HttpEndRequestA
InternetConnectA
InternetCrackUrlA
InternetOpenA
InternetReadFile
InternetWriteFile

comctl32

ord17

Exports

Exports

get
head
post
put

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/modern-header.bmp
$PLUGINSDIR/modern-wizard.bmp
$PLUGINSDIR/nsDialogs.dll
.dll windows:4 windows x86 arch:x86

1e2884056e655f2b7bc5a904e352fc80

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpyA
GetFileAttributesA
lstrcmpiA
MulDiv
lstrlenA
HeapFree
GetCurrentDirectoryA
HeapAlloc
HeapReAlloc
GlobalFree
lstrcpynA
GlobalAlloc
GetProcessHeap
SetCurrentDirectoryA

user32

GetPropA
DestroyWindow
CallWindowProcA
SetCursor
LoadCursorA
RemovePropA
CharPrevA
GetWindowLongA
DrawTextA
GetWindowTextA
GetDlgItem
SetWindowLongA
SetWindowPos
CreateDialogParamA
MapWindowPoints
GetWindowRect
SetPropA
CreateWindowExA
IsWindow
SetTimer
KillTimer
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
ShowWindow
wsprintfA
MapDialogRect
GetClientRect
CharNextA
SendMessageA
DrawFocusRect

gdi32

SetTextColor

shell32

SHBrowseForFolderA
SHGetPathFromIDListA

comdlg32

GetSaveFileNameA
GetOpenFileNameA
CommDlgExtendedError

ole32

CoTaskMemFree

Exports

Exports

Create
CreateControl
CreateItem
CreateTimer
GetUserData
KillTimer
OnBack
OnChange
OnClick
OnNotify
SelectFileDialog
SelectFolderDialog
SetRTL
SetUserData
Show

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 572B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/nsExec.dll
.dll windows:4 windows x86 arch:x86

d83f71e61ee459ee63ca3e829966a9dc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetExitCodeProcess
WaitForSingleObject
Sleep
TerminateProcess
lstrcpyA
lstrcpynA
GlobalReAlloc
GlobalUnlock
GlobalSize
ReadFile
PeekNamedPipe
GetTickCount
CreateProcessA
GetStartupInfoA
CreatePipe
GetVersionExA
GetModuleHandleA
DeleteFileA
lstrcmpiA
lstrlenA
lstrcatA
CloseHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
CreateFileA
CopyFileA
GetTempFileNameA
GlobalFree
GlobalAlloc
GetModuleFileNameA
ExitProcess
GetCommandLineA
GetProcAddress
GlobalLock
GetCurrentProcess

user32

SendMessageA
OemToCharBuffA
CharNextA
wsprintfA
CharPrevA
FindWindowExA

advapi32

InitializeSecurityDescriptor
SetSecurityDescriptorDacl

Exports

Exports

Exec
ExecToLog
ExecToStack

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 410B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/xml.dll
.dll windows:4 windows x86 arch:x86

b5ed5b3a951d4443ce56e5453702d536

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
lstrcpynA
lstrcmpA
lstrcmpiA
lstrcpyA
RtlUnwind
GetModuleFileNameA
RaiseException
GetCommandLineA
GetVersionExA
HeapFree
HeapAlloc
HeapReAlloc
ExitProcess
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
HeapSize
GetLastError
LoadLibraryA
ReadFile
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetFilePointer
CloseHandle
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
VirtualFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
WriteFile
VirtualAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
GetACP
GetOEMCP
GetCPInfo
FlushFileBuffers
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
CreateFileA
VirtualProtect
GetSystemInfo
VirtualQuery
SetStdHandle
GetLocaleInfoA
InterlockedExchange
SetEndOfFile

Exports

Exports

_CloneNode
_Coordinate
_CreateNode
_CreateText
_CurrentAttribute
_DeclarationEncoding
_DeclarationStandalone
_DeclarationVersion
_ElementPath
_FindCloseElement
_FindNextElement
_FirstAttribute
_FirstChild
_FirstChildElement
_FreeNode
_GetAttribute
_GetNodeValue
_GetText
_GotoHandle
_GotoPath
_InsertAfterNode
_InsertBeforeNode
_InsertEndChild
_IsCDATA
_LastAttribute
_LastChild
_LoadFile
_NextAttribute
_NextSibling
_NextSiblingElement
_NoChildren
_NodeHandle
_NodeType
_Parent
_PreviousAttribute
_PreviousSibling
_RemoveAllChild
_RemoveAttribute
_RemoveNode
_ReplaceNode
_RootElement
_SaveFile
_SetAttribute
_SetAttributeName
_SetAttributeValue
_SetCDATA
_SetCondenseWhiteSpace
_SetEncoding
_SetNodeValue
_SetText
_Unload
_XPathAttribute
_XPathNode
_XPathString

Sections

.text
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAMFILES/Angry Birds Space Skin Pack/$PROGRAMFILES/Angry Birds Space Skin Pack/uninst.exe
.exe windows:4 windows x86 arch:x86

099c0646ea7282d232219f8807883be0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
CreateFileA
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
SetFileTime
GetTempPathA
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetWindowsDirectoryA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 104KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/ExecCmd.dll
.dll windows:4 windows x86 arch:x86

446b3baefb02586ec09e438a07186f7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalFree
CloseHandle
TerminateProcess
GetExitCodeProcess
WaitForSingleObject
Sleep
CreateProcessA
GlobalAlloc
GetExitCodeThread
lstrcpyA
lstrcpynA
CreateThread
lstrcmpiA

user32

MapVirtualKeyA
SendMessageA
EnumWindows
WaitForInputIdle
wsprintfA
GetWindowThreadProcessId

Exports

Exports

exec
wait

Sections

.text
Size: 1024B - Virtual size: 977B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 658B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 154B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:4 windows x86 arch:x86

2017f2acbdaa42ab3e4adeb8b4c37e7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyA
lstrcpynA
FreeLibrary
lstrcatA
GetProcAddress
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
VirtualAlloc
VirtualProtect

user32

wsprintfA

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/modern-header.bmp
$PLUGINSDIR/modern-wizard.bmp
$PLUGINSDIR/nsDialogs.dll
.dll windows:4 windows x86 arch:x86

1e2884056e655f2b7bc5a904e352fc80

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpyA
GetFileAttributesA
lstrcmpiA
MulDiv
lstrlenA
HeapFree
GetCurrentDirectoryA
HeapAlloc
HeapReAlloc
GlobalFree
lstrcpynA
GlobalAlloc
GetProcessHeap
SetCurrentDirectoryA

user32

GetPropA
DestroyWindow
CallWindowProcA
SetCursor
LoadCursorA
RemovePropA
CharPrevA
GetWindowLongA
DrawTextA
GetWindowTextA
GetDlgItem
SetWindowLongA
SetWindowPos
CreateDialogParamA
MapWindowPoints
GetWindowRect
SetPropA
CreateWindowExA
IsWindow
SetTimer
KillTimer
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
ShowWindow
wsprintfA
MapDialogRect
GetClientRect
CharNextA
SendMessageA
DrawFocusRect

gdi32

SetTextColor

shell32

SHBrowseForFolderA
SHGetPathFromIDListA

comdlg32

GetSaveFileNameA
GetOpenFileNameA
CommDlgExtendedError

ole32

CoTaskMemFree

Exports

Exports

Create
CreateControl
CreateItem
CreateTimer
GetUserData
KillTimer
OnBack
OnChange
OnClick
OnNotify
SelectFileDialog
SelectFolderDialog
SetRTL
SetUserData
Show

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 572B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/nsExec.dll
.dll windows:4 windows x86 arch:x86

d83f71e61ee459ee63ca3e829966a9dc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetExitCodeProcess
WaitForSingleObject
Sleep
TerminateProcess
lstrcpyA
lstrcpynA
GlobalReAlloc
GlobalUnlock
GlobalSize
ReadFile
PeekNamedPipe
GetTickCount
CreateProcessA
GetStartupInfoA
CreatePipe
GetVersionExA
GetModuleHandleA
DeleteFileA
lstrcmpiA
lstrlenA
lstrcatA
CloseHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
CreateFileA
CopyFileA
GetTempFileNameA
GlobalFree
GlobalAlloc
GetModuleFileNameA
ExitProcess
GetCommandLineA
GetProcAddress
GlobalLock
GetCurrentProcess

user32

SendMessageA
OemToCharBuffA
CharNextA
wsprintfA
CharPrevA
FindWindowExA

advapi32

InitializeSecurityDescriptor
SetSecurityDescriptorDacl

Exports

Exports

Exec
ExecToLog
ExecToStack

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 410B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/registry.dll
.dll windows:4 windows x86 arch:x86

e55c6a670d3768703ed33f1b28fbdd96

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetStartupInfoA
SearchPathA
WriteFile
CreateProcessA
CreateFileA
lstrcatA
lstrcmpA
lstrcpyA
FindFirstFileA
FindClose
lstrcpynA
lstrlenA
lstrcmpiA
GlobalFree
GlobalAlloc
CloseHandle

user32

FindWindowExA
GetDlgItem
wsprintfA
SendMessageA
CharUpperA

advapi32

RegOpenKeyExA
RegEnumKeyA
RegDeleteKeyA
RegCloseKey
RegEnumValueA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegDeleteValueA
RegEnumKeyExA

Exports

Exports

Close
CopyKey
CopyValue
CreateKey
DeleteKey
DeleteKeyEmpty
DeleteValue
Find
HexToStr
KeyExists
MoveKey
MoveValue
Open
Read
ReadExtra
RestoreKey
SaveKey
StrToHex
Write
WriteExtra

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 258KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
7boot.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RIC.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PROGRAMFILES/Angry Birds Space Skin Pack/About.jpg
.jpg
$PROGRAMFILES/Angry Birds Space Skin Pack/Install.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Reloader.exe
.exe windows:4 windows x86 arch:x86

099c0646ea7282d232219f8807883be0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
CreateFileA
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
SetFileTime
GetTempPathA
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetWindowsDirectoryA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/ExecCmd.dll
.dll windows:4 windows x86 arch:x86

446b3baefb02586ec09e438a07186f7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalFree
CloseHandle
TerminateProcess
GetExitCodeProcess
WaitForSingleObject
Sleep
CreateProcessA
GlobalAlloc
GetExitCodeThread
lstrcpyA
lstrcpynA
CreateThread
lstrcmpiA

user32

MapVirtualKeyA
SendMessageA
EnumWindows
WaitForInputIdle
wsprintfA
GetWindowThreadProcessId

Exports

Exports

exec
wait

Sections

.text
Size: 1024B - Virtual size: 977B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 658B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 154B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/InstallOptions.dll
.dll windows:4 windows x86 arch:x86

b1cd0d78f652ce5fc63f0879371af012

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetCurrentDirectoryA
GetCurrentDirectoryA
MultiByteToWideChar
GetPrivateProfileIntA
GlobalLock
GetModuleHandleA
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
GlobalUnlock
GlobalAlloc

user32

MapWindowPoints
GetDlgCtrlID
CloseClipboard
GetClipboardData
OpenClipboard
PtInRect
SetWindowRgn
LoadIconA
LoadImageA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableMenuItem
GetSystemMenu
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
GetClientRect

gdi32

SetTextColor
CreateCompatibleDC
GetObjectA
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
SelectObject

shell32

SHBrowseForFolderA
SHGetDesktopFolder
SHGetPathFromIDListA
ShellExecuteA

comdlg32

GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError

ole32

CoTaskMemFree

Exports

Exports

dialog
initDialog
show

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:4 windows x86 arch:x86

2017f2acbdaa42ab3e4adeb8b4c37e7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyA
lstrcpynA
FreeLibrary
lstrcatA
GetProcAddress
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
VirtualAlloc
VirtualProtect

user32

wsprintfA

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/ioSpecial.ini
$PLUGINSDIR/modern-header.bmp
$PLUGINSDIR/modern-wizard.bmp
$PLUGINSDIR/nsExec.dll
.dll windows:4 windows x86 arch:x86

d83f71e61ee459ee63ca3e829966a9dc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetExitCodeProcess
WaitForSingleObject
Sleep
TerminateProcess
lstrcpyA
lstrcpynA
GlobalReAlloc
GlobalUnlock
GlobalSize
ReadFile
PeekNamedPipe
GetTickCount
CreateProcessA
GetStartupInfoA
CreatePipe
GetVersionExA
GetModuleHandleA
DeleteFileA
lstrcmpiA
lstrlenA
lstrcatA
CloseHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
CreateFileA
CopyFileA
GetTempFileNameA
GlobalFree
GlobalAlloc
GetModuleFileNameA
ExitProcess
GetCommandLineA
GetProcAddress
GlobalLock
GetCurrentProcess

user32

SendMessageA
OemToCharBuffA
CharNextA
wsprintfA
CharPrevA
FindWindowExA

advapi32

InitializeSecurityDescriptor
SetSecurityDescriptorDacl

Exports

Exports

Exec
ExecToLog
ExecToStack

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 410B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/Explorer.exe/6801.bmp
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/Explorer.exe/6805.bmp
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/Explorer.exe/6809.bmp
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/Explorer.exe/7013.bmp
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/Explorer.exe/Explorer.exe.txt
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/Explorer.exe/ICO_MYCOMPUTER.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/ExplorerFrame.dll/280.bmp
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/ExplorerFrame.dll/281.bmp
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/ExplorerFrame.dll/288.bmp
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/ExplorerFrame.dll/291.bmp
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/ExplorerFrame.dll/294.bmp
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/ExplorerFrame.dll/34560.bmp
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/ExplorerFrame.dll/34561.bmp
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/ExplorerFrame.dll/34562.bmp
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/ExplorerFrame.dll/34569.bmp
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/ExplorerFrame.dll/34570.bmp
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/ExplorerFrame.dll/34571.bmp
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/ExplorerFrame.dll/34575.bmp
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/ExplorerFrame.dll/34576.bmp
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/ExplorerFrame.dll/34577.bmp
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/ExplorerFrame.dll/34581.bmp
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/ExplorerFrame.dll/34582.bmp
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/ExplorerFrame.dll/34583.bmp
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/ExplorerFrame.dll/577.bmp
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/ExplorerFrame.dll/578.bmp
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/ExplorerFrame.dll/579.bmp
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/ExplorerFrame.dll/581.bmp
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/ExplorerFrame.dll/ExplorerFrame.dll.txt
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/basebrd.dll/120.bmp
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/basebrd.dll/basebrd.dll.txt
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/iexplore.exe/7.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/iexplore.exe/iexplore.exe.txt
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/100.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/1001.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/1002.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/1003.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/1004.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/1005.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/1010.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/1013.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/1014.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/102.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/1020.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/1023.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/1024.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/1025.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/108.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/109.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/110.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/112.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/113.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/114.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/115.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/117.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/120.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/121.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/122.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/123.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/124.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/125.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/126.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/127.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/128.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/129.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/131.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/132.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/133.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/134.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/137.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/14.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/143.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/15.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/151.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/152.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/158.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/159.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/160.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/161.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/162.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/163.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/164.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/166.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/174.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/177.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/178.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/179.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/18.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/181.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/183.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/184.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/185.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/186.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/189.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/19.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/190.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/196.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/197.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/2.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/20.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/21.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/22.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/23.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/24.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/25.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/26.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/27.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/28.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/29.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/3.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/30.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/31.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/32.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/33.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/34.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/35.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/36.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/37.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/4.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/5.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/5000.bmp
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/5001.bmp
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/5002.bmp
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/5003.bmp
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/5010.bmp
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/5011.bmp
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/5012.bmp
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/5013.bmp
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/5021.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/5022.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/5023.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/5024.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/5031.jpg
.jpg
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/5032.jpg
.jpg
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/5033.jpg
.jpg
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/5034.jpg
.jpg
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/5035.jpg
.jpg
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/5036.jpg
.jpg
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/5037.jpg
.jpg
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/5038.jpg
.jpg
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/5080.wav
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/51.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/54.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/55.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/57.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/6.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/61.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/66.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/67.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/68.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/69.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/70.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/71.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/72.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/73.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/74.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/77.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/79.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/80.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/83.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/85.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/87.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/88.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/90.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/93.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/99.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/imageres.dll/imageres.dll.txt
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/wmplayer.exe/IDR_MAINFRAME.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/Resources/wmplayer.exe/wmplayer.exe.txt
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Data/About.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Data/Behavior.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Data/General.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Data/Icons.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Data/Position.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Data/Style.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Data/Warnings.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Defaults/DefaultIcons/Unknown.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Defaults/DefaultIndicator/Indicator.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Defaults/DefaultPoof/Poof.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Defaults/DefaultSkin/background.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Defaults/DefaultSkin/bg.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Defaults/DefaultSkin/sep.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Defaults/DefaultSkin/separator.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Docklets/Defaults.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Docklets/RocketClock/Images/Hour.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Docklets/RocketClock/Images/Minute.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Docklets/RocketClock/Images/Second.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Docklets/RocketClock/RocketClock.dll
.dll windows:4 windows x86 arch:x86

05a4060d1a3421e9b09c148c7db25807

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

\\mini\work\Visual Studio Projects\FutureDock\FutureDock\Release\Docklets\RocketClock\RocketClock.pdb

Imports

kernel32

WritePrivateProfileStringA
GetPrivateProfileStringA
GetProcAddress
GetModuleHandleA
CompareStringW
CompareStringA
InitializeCriticalSection
LoadLibraryA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
HeapSize
WriteFile
HeapReAlloc
VirtualAlloc
GetSystemTimeAsFileTime
RaiseException
RtlUnwind
GetTimeFormatA
GetDateFormatA
GetLastError
MultiByteToWideChar
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WideCharToMultiByte
GetTimeZoneInformation
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetCPInfo
GetACP
GetOEMCP
Sleep
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
LeaveCriticalSection
EnterCriticalSection
SetEnvironmentVariableA

user32

SetTimer
KillTimer

shell32

ShellExecuteA

gdiplus

GdipGetImageGraphicsContext
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromFile
GdipSetSmoothingMode
GdipGetImageWidth
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipTranslateWorldTransform
GdipRotateWorldTransform
GdipDrawImageRectI
GdipCloneImage
GdipGetImageHeight

Exports

Exports

OnAcceptDropFiles
OnConfigure
OnCreate
OnDestroy
OnDoubleClick
OnDropFiles
OnGetInformation
OnLeftButtonClick
OnProcessMessage
OnSave

Sections

.text
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Docklets/Settings.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/1024.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/108.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/109.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/110.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/112.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/113.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/123.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/14.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/181.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/184.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/185.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/186.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/189.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/27.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/30.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/32.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/35.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/36.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/54.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/55.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/7.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/Clock.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/Columbia Blue.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/Control Panel.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/DefaultLibrary.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/Folder.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/Hammer.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/Hard Drive.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/HardDrive.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/Help.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/IDR_MAINFRAME.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/INGAME_PLANET_BASES_2.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/INGAME_PLANET_BASES_3.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/Internet Shortcut.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/LibDocument.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/LibMusic.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/LibPictures.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/LibVideos.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/Libraries.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/MainHardDrive.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/Media Player.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/My Computer.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/My Documents.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/My Music.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/My Network Places.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/My Pictures.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/My RocketDock.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/My Video.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/MyComputer.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/Notepad.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/Options.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/Recycle Bin (full).png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/Recycle Bin.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/Removable.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/RocketDock Options.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/RocketDock.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/Shirt.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/Untitled-1.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/Untitled-10.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/Untitled-12.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/Untitled-13.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/Untitled-14.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/Untitled-15.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/Untitled-16.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/Untitled-17.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/Untitled-18.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/Untitled-19.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/Untitled-2.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/Untitled-20.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/Untitled-21.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/Untitled-22.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/Untitled-23.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/Untitled-24.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/Untitled-25.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/Untitled-26.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/Untitled-3.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/Untitled-4.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/Untitled-5.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/Untitled-6.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/Untitled-7.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/Untitled-8.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/Wrench.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Icons/king.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Languages/1025.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Languages/1026.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Languages/1027.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Languages/1028.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Languages/1029.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Languages/1030.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Languages/1031.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Languages/1032.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Languages/1033.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Languages/1034.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Languages/1035.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Languages/1036.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Languages/1037.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Languages/1038.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Languages/1040.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Languages/1041.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Languages/1042.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Languages/1043.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Languages/1044.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Languages/1045.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Languages/1046.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Languages/1048.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Languages/10480.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Languages/1049.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Languages/1050.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Languages/1051.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Languages/1052.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Languages/1053.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Languages/1054.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Languages/1055.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Languages/1057.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Languages/1058.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Languages/1060.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Languages/1061.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Languages/1063.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Languages/1065.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Languages/1066.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Languages/1069.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Languages/1071.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Languages/1078.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Languages/1079.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Languages/1110.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Languages/1115.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Languages/2052.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Languages/2070.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Languages/2074.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Languages/2117.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Languages/3098.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Languages/31337.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Languages/Instructions.html
.html
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Languages/Language IDs.URL
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/RocketDock.dll
.dll windows:4 windows x86 arch:x86

88e0dfe6cfb2df3cd27ff5c934cc869b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentProcessId
CloseHandle
SetEvent
OpenEventW
OpenProcess
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
GetLocaleInfoA
RaiseException
RtlUnwind
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
ExitProcess
Sleep
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
WriteFile
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryA
InitializeCriticalSection

user32

IsWindowVisible
IsIconic
GetWindowThreadProcessId
GetClassNameW
GetPropW
GetCursorPos
CallNextHookEx
FindWindowW
PostMessageW
GetAsyncKeyState

psapi

GetModuleBaseNameW

Exports

Exports

GetVer
MouseProc
RestoreLostWindowsProc
WindowProc

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/RocketDock.exe
.exe windows:4 windows x86 arch:x86

82ae0481630ff9ec634379e44a0665b5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedDecrement
GlobalFree
GetVersionExW
SizeofResource
LockResource
LoadResource
SetCurrentDirectoryW
CreateMutexW
FindResourceW
WritePrivateProfileSectionW
GetPrivateProfileStringW
WritePrivateProfileStringA
WritePrivateProfileStringW
MultiByteToWideChar
WideCharToMultiByte
WaitForSingleObject
ReleaseMutex
CreateEventW
ResetEvent
GetUserDefaultUILanguage
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CreateFileW
SetFilePointer
CreateFileA
FlushFileBuffers
SetStdHandle
InitializeCriticalSection
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
LocalAlloc
GetEnvironmentStrings
FreeEnvironmentStringsA
GetConsoleMode
EnumResourceNamesW
GlobalReAlloc
GetStartupInfoA
GetFileType
SetHandleCount
LCMapStringW
LCMapStringA
GetStdHandle
WriteFile
VirtualAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
VirtualFree
HeapCreate
HeapDestroy
ExitProcess
HeapSize
Sleep
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetStartupInfoW
GetProcessHeap
GetVersionExA
HeapReAlloc
HeapAlloc
HeapFree
RtlUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RaiseException
LoadLibraryA
InterlockedExchange
GetProcAddress
LoadLibraryW
FreeLibrary
DeleteFileW
CopyFileW
OpenProcess
GetLongPathNameW
ExpandEnvironmentStringsW
FindFirstFileW
FindNextFileW
FindClose
GlobalAlloc
GlobalLock
GlobalUnlock
InterlockedIncrement
GetModuleFileNameA
MulDiv
TerminateThread
GetFileAttributesW
ReadFile
LoadLibraryExW
GetTempPathW
GetTempFileNameW
GetSystemTime
GetLastError
GetConsoleCP
LocalFree
GetModuleFileNameW
CloseHandle
GetTickCount
FreeEnvironmentStringsW
CreateThread

user32

CreatePopupMenu
DispatchMessageW
LoadIconW
LoadCursorW
RemovePropW
SetWindowPlacement
IsZoomed
GetWindowPlacement
IsIconic
SetPropW
GetPropW
ShowWindow
SetForegroundWindow
GetForegroundWindow
ShowOwnedPopups
PostMessageW
SetTimer
MoveWindow
MapWindowPoints
GetWindowRect
PtInRect
GetWindowLongW
GetAncestor
EnumChildWindows
UpdateLayeredWindow
SetActiveWindow
DestroyMenu
KillTimer
GetCursorPos
EnableWindow
GetDlgItem
SetRect
GetClassNameW
GetClientRect
GetWindowTextW
SetWindowTextW
SendMessageW
WindowFromPoint
GetAsyncKeyState
DialogBoxParamW
RedrawWindow
BringWindowToTop
GetTopWindow
MessageBoxW
RegisterHotKey
UnregisterHotKey
EndDialog
DefWindowProcW
IsWindow
GetWindowThreadProcessId
TrackPopupMenu
CheckMenuItem
EnableMenuItem
AppendMenuW
ReleaseCapture
SetCapture
SetWindowLongW
UnhookWindowsHookEx
DestroyWindow
RegisterShellHookWindow
SetWindowsHookExW
PostQuitMessage
RegisterClipboardFormatW
CreateWindowExW
RegisterWindowMessageW
GetDC
ReleaseDC
GetWindowRgn
GetDesktopWindow
GetIconInfo
LookupIconIdFromDirectoryEx
DestroyIcon
CreateIconFromResourceEx
FindWindowW
SystemParametersInfoW
EnumWindows
GetWindow
GetParent
SendDlgItemMessageW
IsWindowVisible
TranslateMessage
TranslateAcceleratorW
GetMessageW
LoadAcceleratorsW
LoadImageW
GetSystemMetrics
EnumDisplayMonitors
SetWindowPos
RegisterClassExW

gdi32

CreateRectRgn
GetDeviceCaps
BitBlt
CreateCompatibleDC
CreateDIBSection
DeleteDC
SelectObject
DeleteObject
GetObjectW

comdlg32

GetSaveFileNameW
ChooseColorW
ChooseFontW
GetOpenFileNameW
CommDlgExtendedError

advapi32

RegQueryValueExW
RegCreateKeyW
RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegDeleteValueW
SetSecurityDescriptorSacl
GetSecurityDescriptorSacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor

shell32

SHFileOperationW
DragFinish
ord25
ShellExecuteW
ord4
SHGetPathFromIDListW
ord2
SHGetSpecialFolderLocation
SHBindToParent
ord162
SHGetDataFromIDListW
SHGetMalloc
SHGetSpecialFolderPathW
SHGetFileInfoW
ShellExecuteExW
ord155
SHBrowseForFolderW

ole32

OleInitialize
OleUninitialize
CreateStreamOnHGlobal
RegisterDragDrop
CoLockObjectExternal
ReleaseStgMedium
CoCreateInstance

oleaut32

SysAllocStringLen
SysFreeString

comctl32

ImageList_Create
ImageList_Add

gdiplus

GdipDrawImageI
GdiplusStartup
GdiplusShutdown
GdipCreateBitmapFromHICON
GdipCreateBitmapFromStream
GdipCreateBitmapFromFile
GdipImageRotateFlip
GdipMeasureString
GdipFillPath
GdipDrawPath
GdipSetSmoothingMode
GdipGetInterpolationMode
GdipTransformPath
GdipAddPathString
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipCreateSolidFill
GdipTranslateMatrix
GdipSetMatrixElements
GdipCreateMatrix
GdipBitmapGetPixel
GdipDeleteFont
GdipCreateFont
GdipDeleteFontFamily
GdipGetGenericFontFamilySansSerif
GdipCreateFontFamilyFromName
GdipDeletePath
GdipCreatePath
GdipDeleteStringFormat
GdipCreateStringFormat
GdipDeletePen
GdipCreatePen1
GdipDeleteMatrix
GdipCloneBitmapAreaI
GdipSetImageAttributesColorMatrix
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipGetImagePixelFormat
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipCloneImage
GdipCloneBrush
GdipDrawImageRectRectI
GdipDrawImageRectI
GdipFillRectangleI
GdipSetInterpolationMode
GdipSetCompositingQuality
GdipSetCompositingMode
GdipReleaseDC
GdipGetDC
GdipGetImageGraphicsContext
GdipCreateFromHDC
GdipCreateTextureIAI
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromScan0
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipDeleteGraphics
GdipSetTextureWrapMode
GdipScaleTextureTransform
GdipTranslateTextureTransform
GdipDeleteBrush
GdipAlloc
GdipFree

shlwapi

PathRemoveFileSpecW
PathRemoveFileSpecA
PathIsDirectoryW
PathSearchAndQualifyW
PathFileExistsW
StrRetToBufW

psapi

EnumProcesses
GetModuleBaseNameW
GetModuleFileNameExW

setupapi

SetupDiEnumDeviceInfo
SetupDiGetClassDevsW
SetupDiGetDeviceRegistryPropertyW
SetupDiDestroyDeviceInfoList

Exports

Exports

DockletBrowseForImage
DockletDefaultConfigDialog
DockletDoAttentionAnimation
DockletGetLabel
DockletGetRect
DockletGetRelativeFolder
DockletGetRootFolder
DockletIsVisible
DockletLoadGDIPlusImage
DockletLockMouseEffect
DockletQueryDockAlign
DockletQueryDockEdge
DockletSetDockAlign
DockletSetDockEdge
DockletSetImage
DockletSetImageFile
DockletSetImageOverlay
DockletSetLabel
WritePrivateProfileInt

Sections

.text
Size: 280KB - Virtual size: 278KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 144KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Settings.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/Aero Milk/Aeroglass.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/Aero Milk/Background.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/Aero Milk/Separator.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/Aero Milk/Separator.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/AstroGlass/background.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/AstroGlass/bg.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/AstroGlass/sep.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/AstroGlass/separator.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/AstroGrey/background.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/AstroGrey/bg.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/AstroGrey/sep.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/AstroGrey/separator.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/AstroIron/background.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/AstroIron/bg.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/AstroIron/sep.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/AstroIron/separator.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/AstroLife/background.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/AstroLife/bg.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/AstroLife/sep.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/AstroLife/separator.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/AstroOrange/background.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/AstroOrange/bg.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/AstroOrange/sep.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/AstroOrange/separator.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/AstroSteel/background.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/AstroSteel/bg.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/AstroSteel/sep.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/AstroSteel/separator.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/Blank/Background.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/Blank/Blank.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/Blank/Separator.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/Blank/Separator.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/Brushed/Background.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/Brushed/Brushed.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/Brushed/Separator.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/Brushed/Separator.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/CrystalXP.net/background.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/CrystalXP.net/bg.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/CrystalXP.net/sep.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/CrystalXP.net/separator.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/Inspirat/Background.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/Inspirat/Inspirat.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/Inspirat/Separator.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/Inspirat/Separator.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/Luminous/Background.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/Luminous/Luminous.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/Luminous/Separator.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/Luminous/Separator.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/Luminous/Thumbs.db
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/Milk1/Background.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/Milk1/Milk1.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/Milk1/Separator.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/Milk1/Separator.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/Milk2/Background.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/Milk2/Milk2.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/Milk2/Separator.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/Milk2/Separator.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/Minired/Background.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/Minired/Minired.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/Minired/Separator.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/Minired/Separator.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/Painting/Background.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/Painting/Painting.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/Painting/Separator.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/Painting/Separator.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/ProtoClay/background.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/ProtoClay/bg.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/ProtoClay/sep.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/ProtoClay/separator.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/ProtoGlass/background.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/ProtoGlass/bg.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/ProtoGlass/sep.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/ProtoGlass/separator.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/ProtoIron/background.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/ProtoIron/bg.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/ProtoIron/sep.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/ProtoIron/separator.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/ProtoSea/background.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/ProtoSea/bg.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/ProtoSea/sep.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/ProtoSea/separator.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/ProtoSky/background.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/ProtoSky/bg.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/ProtoSky/sep.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/ProtoSky/separator.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/ProtoSteel/background.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/ProtoSteel/bg.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/ProtoSteel/sep.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/ProtoSteel/separator.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/ProtoTree/background.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/ProtoTree/bg.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/ProtoTree/sep.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/ProtoTree/separator.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/Simply/Background.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/Simply/Separator.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/Simply/Separator.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/Simply/Simply.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/Special-RD/Background.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/Special-RD/Separator.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/Special-RD/Separator.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/Special-RD/Special-RD.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/ToonBLue/Background.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/ToonBLue/Separator.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/ToonBLue/Separator.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/ToonBLue/Toonblue.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/Vista/Background.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/Vista/Separator.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/Vista/Separator.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/Vista/Vista.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/VistaBlack/Thumbs.db
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/VistaBlack/background.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/VistaBlack/bg.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/VistaBlack/sep.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/VistaBlack/separator.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/WhiteCristal/Background.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/WhiteCristal/Separator.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/WhiteCristal/Separator.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/WhiteCristal/Whitecristal.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/ZaKtoon/Background.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/ZaKtoon/Separator.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/ZaKtoon/Separator.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Skins/ZaKtoon/ZaKtoon.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Tools/Debug.exe
.exe windows:4 windows x86 arch:x86

62495d68bffd37b066d1a3bc7c1b369e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

\\.psf\.home\work\visual studio projects\futuredock\futuredock\release\tools\Debug.pdb

Imports

user32

EndDialog
SendDlgItemMessageW
LoadStringW
EndPaint
DestroyWindow
DefWindowProcW
PostQuitMessage
DialogBoxParamW
LoadCursorW
BeginPaint
RegisterClassExW
LoadIconW

kernel32

GetEnvironmentStringsW
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
WideCharToMultiByte
GetLastError
HeapFree
HeapAlloc
GetVersionExA
GetProcessHeap
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSection
Sleep
RtlUnwind
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetLocaleInfoA

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/Tools/LanguageID Finder.exe
.exe windows:4 windows x86 arch:x86

aa0674fafcc325f3489d1686cdfc57e6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

crtdll

memset

kernel32

GetModuleHandleA
GetCommandLineA
ExitProcess
HeapCreate
GetModuleFileNameA
HeapAlloc
HeapDestroy
HeapFree
SetCurrentDirectoryA
HeapReAlloc
FreeLibrary
GetProcAddress
LoadLibraryA
IsBadReadPtr
GetCurrentThreadId
GetCurrentProcessId

user32

wsprintfA
wvsprintfA
MessageBoxA
GetWindowThreadProcessId
IsWindowVisible
IsWindowEnabled
EnableWindow
EnumWindows
GetForegroundWindow

comctl32

InitCommonControls

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
$PROGRAMFILES/Angry Birds Space Skin Pack/RocketDock/gdiplus.dll
.dll windows:5 windows x86 arch:x86

2a1ab6b72adad6b03d0746b0a5fa55d6

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04/12/2003, 00:00

Not After

03/12/2008, 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:9d:aa:11:d3:30:a8:95:60:ac:fa
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

01/07/1999, 07:00

Not After

15/10/2005, 07:00

Subject

CN=Microsoft Windows Verification Intermediate PCA,OU=Copyright (c) 1999 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=WA,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:06:51:3f:00:00:00:00:00:35
Certificate

Issuer

CN=Microsoft Windows Verification Intermediate PCA,OU=Copyright (c) 1999 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=WA,C=US

Not Before

30/06/2003, 23:22

Not After

30/08/2004, 23:32

Subject

CN=Microsoft Windows XP Publisher,OU=Copyright (c) 2003 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

4f:11:fb:cd:c0:44:ea:be:51:45:c5:b8:65:ea:1c:b3:ee:fd:20:31
Signer

Actual PE Digest

4f:11:fb:cd:c0:44:ea:be:51:45:c5:b8:65:ea:1c:b3:ee:fd:20:31

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SearchPathA
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
InterlockedExchange
GetCurrentThreadId
InitializeCriticalSection
DeleteCriticalSection
DisableThreadLibraryCalls
RaiseException
Sleep
CloseHandle
WriteFile
CreateFileA
WaitForSingleObject
SetEvent
lstrcmpiA
CreateThread
CreateEventA
WideCharToMultiByte
MultiByteToWideChar
GetTickCount
GetSystemDefaultLCID
GetProcAddress
GetModuleHandleW
GetACP
GetVersionExA
LoadLibraryA
VirtualQuery
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
ExitProcess
GetCommandLineA
GetSystemInfo
HeapReAlloc
HeapFree
VirtualAlloc
IsValidLocale
ConvertDefaultLocale
GetLocaleInfoW
GetModuleFileNameW
GetModuleFileNameA
FindResourceA
LoadResource
LockResource
GetProfileIntA
GetProfileStringA
lstrcmpiW
IsDBCSLeadByteEx
LocalReAlloc
MulDiv
SetLastError
LocalAlloc
LocalFree
GetFileTime
SearchPathW
InterlockedIncrement
GetOEMCP
CreateSemaphoreA
lstrcpyW
lstrcatW
LoadLibraryW
lstrcpyA
lstrcatA
GetSystemDirectoryA
CreateFileMappingW
ReleaseSemaphore
GetProfileSectionA
CreateFileW
SetEndOfFile
SetFilePointer
ReadFile
UnlockFile
GetFileInformationByHandle
LockFile
FlushFileBuffers
GetLastError
VirtualFree
GlobalAlloc
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
GlobalLock
GlobalSize
GlobalUnlock
GlobalFree
HeapCreate
GetModuleHandleA
GetSystemDirectoryW
GetWindowsDirectoryA
FreeLibrary
HeapDestroy

user32

ReleaseDC
GetDC
LoadBitmapW
LoadBitmapA
wsprintfW
SystemParametersInfoA
wsprintfA
GetSysColor
UnregisterClassA
DestroyWindow
GetSystemMetrics
DefWindowProcA
CreateWindowExA
RegisterWindowMessageA
RegisterClassA
DispatchMessageA
TranslateMessage
MsgWaitForMultipleObjects
PeekMessageA
GetClientRect
GetDesktopWindow
GetWindowRect
WindowFromDC
CreateIconIndirect
GetIconInfo
ClientToScreen
wvsprintfA
GetDCEx
GetWindowLongA
GetClassLongA

gdi32

GetNearestPaletteIndex
GetDIBColorTable
FillRgn
SetMiterLimit
CreateSolidBrush
StrokePath
GetGraphicsMode
SetPolyFillMode
FillPath
StrokeAndFillPath
GetWindowExtEx
ExtTextOutA
GetTextCharsetInfo
TranslateCharsetInfo
PolylineTo
Polyline
LineTo
GetCurrentPositionEx
ArcTo
SetArcDirection
SelectClipPath
GetPath
CloseFigure
AbortPath
FlattenPath
WidenPath
BeginPath
Ellipse
AngleArc
PolyBezierTo
PolyBezier
RoundRect
PolyDraw
Pie
Chord
Arc
EndPath
OffsetClipRgn
GetRgnBox
CombineRgn
SetPaletteEntries
ResizePalette
ExcludeClipRect
MoveToEx
PlayEnhMetaFile
GetWinMetaFileBits
PlgBlt
BitBlt
OffsetViewportOrgEx
StretchBlt
ScaleViewportExtEx
ScaleWindowExtEx
CombineTransform
SetMapperFlags
CreatePen
CreateDIBitmap
CreatePatternBrush
ExtSelectClipRgn
GetBkMode
GetTextAlign
ModifyWorldTransform
ExtCreateRegion
CreateCompatibleBitmap
GetNearestColor
SetStretchBltMode
StretchDIBits
SetTextAlign
SetTextJustification
PolyPolygon
PlayMetaFileRecord
ExtCreatePen
GetWorldTransform
GetROP2
SetROP2
Rectangle
Polygon
IntersectClipRect
SetBrushOrgEx
GetClipRgn
SelectClipRgn
GetBkColor
GetTextColor
CreatePenIndirect
GetObjectW
DPtoLP
CreateDIBPatternBrushPt
ExtTextOutW
SetBitmapBits
CreateEnhMetaFileW
GdiComment
GetMetaFileW
GetMetaFileA
SaveDC
SetWindowOrgEx
SetViewportOrgEx
SetGraphicsMode
SetWorldTransform
GetEnhMetaFileW
GetEnhMetaFileA
GetEnhMetaFileBits
CopyEnhMetaFileA
CopyMetaFileA
DeleteMetaFile
GetEnhMetaFileHeader
SetMetaFileBitsEx
SetEnhMetaFileBits
CreateEnhMetaFileA
SetMapMode
SetViewportExtEx
SetWindowExtEx
PlayMetaFile
CloseEnhMetaFile
DeleteEnhMetaFile
SetMetaRgn
GetMetaFileBitsEx
EnumMetaFile
EnumEnhMetaFile
PlayEnhMetaFileRecord
RestoreDC
GetStockObject
CreateBitmap
SetTextColor
SetBkColor
SetBkMode
SetDIBits
CreateBrushIndirect
CreatePalette
GetSystemPaletteEntries
GetSystemPaletteUse
GetDeviceCaps
ExtEscape
GetObjectType
GetPixel
SetDIBColorTable
DeleteObject
SelectPalette
GetTextFaceA
GetTextMetricsA
GetTextFaceW
GetTextMetricsW
EnumFontFamiliesExA
EnumFontFamiliesExW
SelectObject
CreateFontIndirectW
CreateFontIndirectA
GetRegionData
DeleteDC
CreateDCA
CreateICA
CreateRectRgn
GetRandomRgn
LPtoDP
PolyPolyline
GetViewportExtEx
GetWindowOrgEx
GetViewportOrgEx
GetMapMode
SetICMMode
Escape
GetDCOrgEx
GetObjectA
GetCurrentObject
GetDIBits
CreateCompatibleDC
CreateDIBSection
RealizePalette
GetPaletteEntries
GdiFlush
PatBlt

ole32

CoTaskMemAlloc
CoTaskMemFree
CreateStreamOnHGlobal

advapi32

RegSetValueExA
RegCloseKey
RegEnumValueW
RegQueryInfoKeyA
RegOpenKeyExA
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExA
RegEnumKeyExA
RegEnumKeyExW
RegCreateKeyExA
RegQueryValueExW
RegSetValueExW
RegEnumValueA
RegDeleteKeyW
RegDeleteKeyA
RegCreateKeyExW

Exports

Exports

GdipAddPathArc
GdipAddPathArcI
GdipAddPathBezier
GdipAddPathBezierI
GdipAddPathBeziers
GdipAddPathBeziersI
GdipAddPathClosedCurve
GdipAddPathClosedCurve2
GdipAddPathClosedCurve2I
GdipAddPathClosedCurveI
GdipAddPathCurve
GdipAddPathCurve2
GdipAddPathCurve2I
GdipAddPathCurve3
GdipAddPathCurve3I
GdipAddPathCurveI
GdipAddPathEllipse
GdipAddPathEllipseI
GdipAddPathLine
GdipAddPathLine2
GdipAddPathLine2I
GdipAddPathLineI
GdipAddPathPath
GdipAddPathPie
GdipAddPathPieI
GdipAddPathPolygon
GdipAddPathPolygonI
GdipAddPathRectangle
GdipAddPathRectangleI
GdipAddPathRectangles
GdipAddPathRectanglesI
GdipAddPathString
GdipAddPathStringI
GdipAlloc
GdipBeginContainer
GdipBeginContainer2
GdipBeginContainerI
GdipBitmapGetPixel
GdipBitmapLockBits
GdipBitmapSetPixel
GdipBitmapSetResolution
GdipBitmapUnlockBits
GdipClearPathMarkers
GdipCloneBitmapArea
GdipCloneBitmapAreaI
GdipCloneBrush
GdipCloneCustomLineCap
GdipCloneFont
GdipCloneFontFamily
GdipCloneImage
GdipCloneImageAttributes
GdipCloneMatrix
GdipClonePath
GdipClonePen
GdipCloneRegion
GdipCloneStringFormat
GdipClosePathFigure
GdipClosePathFigures
GdipCombineRegionPath
GdipCombineRegionRect
GdipCombineRegionRectI
GdipCombineRegionRegion
GdipComment
GdipCreateAdjustableArrowCap
GdipCreateBitmapFromDirectDrawSurface
GdipCreateBitmapFromFile
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromGdiDib
GdipCreateBitmapFromGraphics
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromHICON
GdipCreateBitmapFromResource
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipCreateCachedBitmap
GdipCreateCustomLineCap
GdipCreateFont
GdipCreateFontFamilyFromName
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipCreateFontFromLogfontW
GdipCreateFromHDC
GdipCreateFromHDC2
GdipCreateFromHWND
GdipCreateFromHWNDICM
GdipCreateHBITMAPFromBitmap
GdipCreateHICONFromBitmap
GdipCreateHalftonePalette
GdipCreateHatchBrush
GdipCreateImageAttributes
GdipCreateLineBrush
GdipCreateLineBrushFromRect
GdipCreateLineBrushFromRectI
GdipCreateLineBrushFromRectWithAngle
GdipCreateLineBrushFromRectWithAngleI
GdipCreateLineBrushI
GdipCreateMatrix
GdipCreateMatrix2
GdipCreateMatrix3
GdipCreateMatrix3I
GdipCreateMetafileFromEmf
GdipCreateMetafileFromFile
GdipCreateMetafileFromStream
GdipCreateMetafileFromWmf
GdipCreateMetafileFromWmfFile
GdipCreatePath
GdipCreatePath2
GdipCreatePath2I
GdipCreatePathGradient
GdipCreatePathGradientFromPath
GdipCreatePathGradientI
GdipCreatePathIter
GdipCreatePen1
GdipCreatePen2
GdipCreateRegion
GdipCreateRegionHrgn
GdipCreateRegionPath
GdipCreateRegionRect
GdipCreateRegionRectI
GdipCreateRegionRgnData
GdipCreateSolidFill
GdipCreateStreamOnFile
GdipCreateStringFormat
GdipCreateTexture
GdipCreateTexture2
GdipCreateTexture2I
GdipCreateTextureIA
GdipCreateTextureIAI
GdipDeleteBrush
GdipDeleteCachedBitmap
GdipDeleteCustomLineCap
GdipDeleteFont
GdipDeleteFontFamily
GdipDeleteGraphics
GdipDeleteMatrix
GdipDeletePath
GdipDeletePathIter
GdipDeletePen
GdipDeletePrivateFontCollection
GdipDeleteRegion
GdipDeleteStringFormat
GdipDisposeImage
GdipDisposeImageAttributes
GdipDrawArc
GdipDrawArcI
GdipDrawBezier
GdipDrawBezierI
GdipDrawBeziers
GdipDrawBeziersI
GdipDrawCachedBitmap
GdipDrawClosedCurve
GdipDrawClosedCurve2
GdipDrawClosedCurve2I
GdipDrawClosedCurveI
GdipDrawCurve
GdipDrawCurve2
GdipDrawCurve2I
GdipDrawCurve3
GdipDrawCurve3I
GdipDrawCurveI
GdipDrawDriverString
GdipDrawEllipse
GdipDrawEllipseI
GdipDrawImage
GdipDrawImageI
GdipDrawImagePointRect
GdipDrawImagePointRectI
GdipDrawImagePoints
GdipDrawImagePointsI
GdipDrawImagePointsRect
GdipDrawImagePointsRectI
GdipDrawImageRect
GdipDrawImageRectI
GdipDrawImageRectRect
GdipDrawImageRectRectI
GdipDrawLine
GdipDrawLineI
GdipDrawLines
GdipDrawLinesI
GdipDrawPath
GdipDrawPie
GdipDrawPieI
GdipDrawPolygon
GdipDrawPolygonI
GdipDrawRectangle
GdipDrawRectangleI
GdipDrawRectangles
GdipDrawRectanglesI
GdipDrawString
GdipEmfToWmfBits
GdipEndContainer
GdipEnumerateMetafileDestPoint
GdipEnumerateMetafileDestPointI
GdipEnumerateMetafileDestPoints
GdipEnumerateMetafileDestPointsI
GdipEnumerateMetafileDestRect
GdipEnumerateMetafileDestRectI
GdipEnumerateMetafileSrcRectDestPoint
GdipEnumerateMetafileSrcRectDestPointI
GdipEnumerateMetafileSrcRectDestPoints
GdipEnumerateMetafileSrcRectDestPointsI
GdipEnumerateMetafileSrcRectDestRect
GdipEnumerateMetafileSrcRectDestRectI
GdipFillClosedCurve
GdipFillClosedCurve2
GdipFillClosedCurve2I
GdipFillClosedCurveI
GdipFillEllipse
GdipFillEllipseI
GdipFillPath
GdipFillPie
GdipFillPieI
GdipFillPolygon
GdipFillPolygon2
GdipFillPolygon2I
GdipFillPolygonI
GdipFillRectangle
GdipFillRectangleI
GdipFillRectangles
GdipFillRectanglesI
GdipFillRegion
GdipFlattenPath
GdipFlush
GdipFree
GdipGetAdjustableArrowCapFillState
GdipGetAdjustableArrowCapHeight
GdipGetAdjustableArrowCapMiddleInset
GdipGetAdjustableArrowCapWidth
GdipGetAllPropertyItems
GdipGetBrushType
GdipGetCellAscent
GdipGetCellDescent
GdipGetClip
GdipGetClipBounds
GdipGetClipBoundsI
GdipGetCompositingMode
GdipGetCompositingQuality
GdipGetCustomLineCapBaseCap
GdipGetCustomLineCapBaseInset
GdipGetCustomLineCapStrokeCaps
GdipGetCustomLineCapStrokeJoin
GdipGetCustomLineCapType
GdipGetCustomLineCapWidthScale
GdipGetDC
GdipGetDpiX
GdipGetDpiY
GdipGetEmHeight
GdipGetEncoderParameterList
GdipGetEncoderParameterListSize
GdipGetFamily
GdipGetFamilyName
GdipGetFontCollectionFamilyCount
GdipGetFontCollectionFamilyList
GdipGetFontHeight
GdipGetFontHeightGivenDPI
GdipGetFontSize
GdipGetFontStyle
GdipGetFontUnit
GdipGetGenericFontFamilyMonospace
GdipGetGenericFontFamilySansSerif
GdipGetGenericFontFamilySerif
GdipGetHatchBackgroundColor
GdipGetHatchForegroundColor
GdipGetHatchStyle
GdipGetHemfFromMetafile
GdipGetImageAttributesAdjustedPalette
GdipGetImageBounds
GdipGetImageDecoders
GdipGetImageDecodersSize
GdipGetImageDimension
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipGetImageFlags
GdipGetImageGraphicsContext
GdipGetImageHeight
GdipGetImageHorizontalResolution
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageRawFormat
GdipGetImageThumbnail
GdipGetImageType
GdipGetImageVerticalResolution
GdipGetImageWidth
GdipGetInterpolationMode
GdipGetLineBlend
GdipGetLineBlendCount
GdipGetLineColors
GdipGetLineGammaCorrection
GdipGetLinePresetBlend
GdipGetLinePresetBlendCount
GdipGetLineRect
GdipGetLineRectI
GdipGetLineSpacing
GdipGetLineTransform
GdipGetLineWrapMode
GdipGetLogFontA
GdipGetLogFontW
GdipGetMatrixElements
GdipGetMetafileDownLevelRasterizationLimit
GdipGetMetafileHeaderFromEmf
GdipGetMetafileHeaderFromFile
GdipGetMetafileHeaderFromMetafile
GdipGetMetafileHeaderFromStream
GdipGetMetafileHeaderFromWmf
GdipGetNearestColor
GdipGetPageScale
GdipGetPageUnit
GdipGetPathData
GdipGetPathFillMode
GdipGetPathGradientBlend
GdipGetPathGradientBlendCount
GdipGetPathGradientCenterColor
GdipGetPathGradientCenterPoint
GdipGetPathGradientCenterPointI
GdipGetPathGradientFocusScales
GdipGetPathGradientGammaCorrection
GdipGetPathGradientPath
GdipGetPathGradientPointCount
GdipGetPathGradientPresetBlend
GdipGetPathGradientPresetBlendCount
GdipGetPathGradientRect
GdipGetPathGradientRectI
GdipGetPathGradientSurroundColorCount
GdipGetPathGradientSurroundColorsWithCount
GdipGetPathGradientTransform
GdipGetPathGradientWrapMode
GdipGetPathLastPoint
GdipGetPathPoints
GdipGetPathPointsI
GdipGetPathTypes
GdipGetPathWorldBounds
GdipGetPathWorldBoundsI
GdipGetPenBrushFill
GdipGetPenColor
GdipGetPenCompoundArray
GdipGetPenCompoundCount
GdipGetPenCustomEndCap
GdipGetPenCustomStartCap
GdipGetPenDashArray
GdipGetPenDashCap197819
GdipGetPenDashCount
GdipGetPenDashOffset
GdipGetPenDashStyle
GdipGetPenEndCap
GdipGetPenFillType
GdipGetPenLineJoin
GdipGetPenMiterLimit
GdipGetPenMode
GdipGetPenStartCap
GdipGetPenTransform
GdipGetPenUnit
GdipGetPenWidth
GdipGetPixelOffsetMode
GdipGetPointCount
GdipGetPropertyCount
GdipGetPropertyIdList
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipGetPropertySize
GdipGetRegionBounds
GdipGetRegionBoundsI
GdipGetRegionData
GdipGetRegionDataSize
GdipGetRegionHRgn
GdipGetRegionScans
GdipGetRegionScansCount
GdipGetRegionScansI
GdipGetRenderingOrigin
GdipGetSmoothingMode
GdipGetSolidFillColor
GdipGetStringFormatAlign
GdipGetStringFormatDigitSubstitution
GdipGetStringFormatFlags
GdipGetStringFormatHotkeyPrefix
GdipGetStringFormatLineAlign
GdipGetStringFormatMeasurableCharacterRangeCount
GdipGetStringFormatTabStopCount
GdipGetStringFormatTabStops
GdipGetStringFormatTrimming
GdipGetTextContrast
GdipGetTextRenderingHint
GdipGetTextureImage
GdipGetTextureTransform
GdipGetTextureWrapMode
GdipGetVisibleClipBounds
GdipGetVisibleClipBoundsI
GdipGetWorldTransform
GdipGraphicsClear
GdipImageForceValidation
GdipImageGetFrameCount
GdipImageGetFrameDimensionsCount
GdipImageGetFrameDimensionsList
GdipImageRotateFlip
GdipImageSelectActiveFrame
GdipInvertMatrix
GdipIsClipEmpty
GdipIsEmptyRegion
GdipIsEqualRegion
GdipIsInfiniteRegion
GdipIsMatrixEqual
GdipIsMatrixIdentity
GdipIsMatrixInvertible
GdipIsOutlineVisiblePathPoint
GdipIsOutlineVisiblePathPointI
GdipIsStyleAvailable
GdipIsVisibleClipEmpty
GdipIsVisiblePathPoint
GdipIsVisiblePathPointI
GdipIsVisiblePoint
GdipIsVisiblePointI
GdipIsVisibleRect
GdipIsVisibleRectI
GdipIsVisibleRegionPoint
GdipIsVisibleRegionPointI
GdipIsVisibleRegionRect
GdipIsVisibleRegionRectI
GdipLoadImageFromFile
GdipLoadImageFromFileICM
GdipLoadImageFromStream
GdipLoadImageFromStreamICM
GdipMeasureCharacterRanges
GdipMeasureDriverString
GdipMeasureString
GdipMultiplyLineTransform
GdipMultiplyMatrix
GdipMultiplyPathGradientTransform
GdipMultiplyPenTransform
GdipMultiplyTextureTransform
GdipMultiplyWorldTransform
GdipNewInstalledFontCollection
GdipNewPrivateFontCollection
GdipPathIterCopyData
GdipPathIterEnumerate
GdipPathIterGetCount
GdipPathIterGetSubpathCount
GdipPathIterHasCurve
GdipPathIterIsValid
GdipPathIterNextMarker
GdipPathIterNextMarkerPath
GdipPathIterNextPathType
GdipPathIterNextSubpath
GdipPathIterNextSubpathPath
GdipPathIterRewind
GdipPlayMetafileRecord
GdipPrivateAddFontFile
GdipPrivateAddMemoryFont
GdipRecordMetafile
GdipRecordMetafileFileName
GdipRecordMetafileFileNameI
GdipRecordMetafileI
GdipRecordMetafileStream
GdipRecordMetafileStreamI
GdipReleaseDC
GdipRemovePropertyItem
GdipResetClip
GdipResetImageAttributes
GdipResetLineTransform
GdipResetPageTransform
GdipResetPath
GdipResetPathGradientTransform
GdipResetPenTransform
GdipResetTextureTransform
GdipResetWorldTransform
GdipRestoreGraphics
GdipReversePath
GdipRotateLineTransform
GdipRotateMatrix
GdipRotatePathGradientTransform
GdipRotatePenTransform
GdipRotateTextureTransform
GdipRotateWorldTransform
GdipSaveAdd
GdipSaveAddImage
GdipSaveGraphics
GdipSaveImageToFile
GdipSaveImageToStream
GdipScaleLineTransform
GdipScaleMatrix
GdipScalePathGradientTransform
GdipScalePenTransform
GdipScaleTextureTransform
GdipScaleWorldTransform
GdipSetAdjustableArrowCapFillState
GdipSetAdjustableArrowCapHeight
GdipSetAdjustableArrowCapMiddleInset
GdipSetAdjustableArrowCapWidth
GdipSetClipGraphics
GdipSetClipHrgn
GdipSetClipPath
GdipSetClipRect
GdipSetClipRectI
GdipSetClipRegion
GdipSetCompositingMode
GdipSetCompositingQuality
GdipSetCustomLineCapBaseCap
GdipSetCustomLineCapBaseInset
GdipSetCustomLineCapStrokeCaps
GdipSetCustomLineCapStrokeJoin

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Shared
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAMFILES/Angry Birds Space Skin Pack/Tools/7boot.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PROGRAMFILES/Angry Birds Space Skin Pack/Tools/MoveEx.exe
.exe windows:4 windows x64 arch:x64

d6ae06eb30d49d2fbc01b4756df69e8b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
MoveFileExA
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery

msvcrt

__dllonexit
__getmainargs
__initenv
__iob_func
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_errno
_fmode
_initterm
_lock
_onexit
_stat64
_unlock
abort
calloc
exit
fprintf
free
fwrite
malloc
memcpy
printf
signal
strlen
strncmp
vfprintf

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
$PROGRAMFILES/Angry Birds Space Skin Pack/Tools/ResHacker.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 736KB - Virtual size: 736KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 9KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 201KB - Virtual size: 201KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Changelog.html
.html
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Data/About/._About.png
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Data/About/About.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Data/About/About.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Help/English/images/Snap1.gif
.gif
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Help/English/images/Snap2.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Help/English/index.html
.html
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Help/German/images/Snap1.gif
.gif
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Help/German/images/Snap2.png
.png
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Help/German/index.html
.html
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Help/shared/Help.ico
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Help/shared/flags/english.gif
.gif
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Help/shared/flags/german.gif
.gif
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Help/shared/languages.html
.html
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Help/shared/style.css
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Languages/1025.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Languages/1026.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Languages/1027.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Languages/1028.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Languages/1029.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Languages/1030.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Languages/1031.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Languages/1032.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Languages/1033.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Languages/1034.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Languages/1035.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Languages/1036.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Languages/1037.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Languages/1038.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Languages/1040.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Languages/1041.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Languages/1042.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Languages/1043.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Languages/1044.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Languages/1045.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Languages/1046.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Languages/1048.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Languages/1049.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Languages/1050.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Languages/1051.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Languages/1052.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Languages/1053.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Languages/1054.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Languages/1055.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Languages/1057.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Languages/1058.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Languages/1060.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Languages/1063.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Languages/1065.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Languages/1066.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Languages/1078.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Languages/1093.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Languages/1115.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Languages/2027.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Languages/2052.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Languages/2074.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Languages/3098.ini
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/License.rtf
.rtf
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Plugins/Blur/fx.dll
.dll windows:4 windows x86 arch:x86

45874ed09cf888ea249b3daaf3f140c1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapSize
LCMapStringW
LCMapStringA
GetStringTypeW
GetLocaleInfoA
GetStringTypeA
HeapReAlloc
VirtualAlloc
GetCPInfo
VirtualProtect
GetTickCount
GetModuleHandleW
MultiByteToWideChar
GetProcAddress
GetOEMCP
GetACP
HeapAlloc
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
SetUnhandledExceptionFilter
VirtualQuery
InterlockedExchange
LoadLibraryA
WriteFile
UnhandledExceptionFilter
GetEnvironmentStringsW
GetLastError
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
ExitProcess
RtlUnwind
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetModuleHandleA
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
GetSystemInfo

user32

DefWindowProcW
RegisterClassExW
DestroyWindow
ShowWindow
KillTimer
UpdateLayeredWindow
SetPropW
GetPropW
SetTimer
CreateWindowExW
MessageBoxW

gdi32

CreateDIBSection
SelectObject
DeleteDC
DeleteObject
CreateCompatibleDC

gdiplus

GdipGetImageWidth
GdipDisposeImage
GdipGetImageHeight
GdipAlloc
GdipFree
GdipBitmapGetPixel
GdipBitmapSetPixel
GdiplusShutdown
GdiplusStartup
GdipCreateFromHDC
GdipSetCompositingMode
GdipSetCompositingQuality
GdipSetInterpolationMode
GdipDrawImageRectRectI
GdipCloneBitmapAreaI
GdipCloneImage
GdipDeleteGraphics

Exports

Exports

ActivateIcon
OptionSelected

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Plugins/Break/fx.dll
.dll windows:4 windows x86 arch:x86

98728a302c56c0eac724961a953d842c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapSize
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetLocaleInfoA
HeapReAlloc
VirtualAlloc
GetCPInfo
GetOEMCP
GetACP
VirtualProtect
GetTickCount
GetModuleHandleW
GetStringTypeA
GetProcAddress
HeapAlloc
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
SetUnhandledExceptionFilter
VirtualQuery
InterlockedExchange
LoadLibraryA
WriteFile
UnhandledExceptionFilter
GetEnvironmentStringsW
GetLastError
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapFree
VirtualFree
HeapCreate
ExitProcess
RtlUnwind
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetModuleHandleA
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
GetSystemInfo

user32

DefWindowProcW
RegisterClassExW
DestroyWindow
ShowWindow
KillTimer
UpdateLayeredWindow
SetPropW
GetPropW
IsWindow
SetTimer
GetSystemMetrics
CreateWindowExW
MessageBoxW

gdi32

CreateDIBSection
SelectObject
DeleteDC
DeleteObject
CreateCompatibleDC

gdiplus

GdipDisposeImage
GdipGetImageWidth
GdipAlloc
GdipFree
GdipGetImageHeight
GdipCreateBitmapFromScan0
GdipBitmapGetPixel
GdipBitmapSetPixel
GdiplusShutdown
GdiplusStartup
GdipCreateFromHDC
GdipSetCompositingMode
GdipSetCompositingQuality
GdipSetInterpolationMode
GdipDrawImageRectRectI
GdipCloneBitmapAreaI
GdipCloneImage
GdipDeleteGraphics

Exports

Exports

ActivateIcon
OptionSelected

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Plugins/FlatOut/fx.dll
.dll windows:4 windows x86 arch:x86

022641d9f2dbfe3377347537363000b1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetSystemInfo
VirtualProtect
HeapSize
GetStringTypeA
GetLocaleInfoA
GetTickCount
GetModuleHandleW
GetStringTypeW
GetProcAddress
LCMapStringW
MultiByteToWideChar
LCMapStringA
InitializeCriticalSection
HeapReAlloc
VirtualAlloc
GetCPInfo
GetOEMCP
GetACP
EnterCriticalSection
LeaveCriticalSection
IsBadCodePtr
ExitProcess
RtlUnwind
GetCurrentThreadId
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetModuleHandleA
TlsAlloc
SetLastError
GetLastError
TlsFree
TlsSetValue
TlsGetValue
TerminateProcess
GetCurrentProcess
HeapFree
HeapAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
UnhandledExceptionFilter
WriteFile
LoadLibraryA
InterlockedExchange
VirtualQuery
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr

user32

DefWindowProcW
RegisterClassExW
DestroyWindow
ShowWindow
KillTimer
UpdateLayeredWindow
SetPropW
GetPropW
IsWindow
SetTimer
GetSystemMetrics
CreateWindowExW
MessageBoxW

gdi32

CreateDIBSection
SelectObject
DeleteDC
DeleteObject
CreateCompatibleDC

gdiplus

GdipAlloc
GdipDeleteGraphics
GdipDisposeImage
GdipGetImageWidth
GdipGetImageHeight
GdiplusShutdown
GdiplusStartup
GdipCreateFromHDC
GdipSetCompositingMode
GdipSetCompositingQuality
GdipSetInterpolationMode
GdipDrawImageRectRectI
GdipCloneBitmapAreaI
GdipCloneImage
GdipFree

Exports

Exports

ActivateIcon
OptionSelected

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Plugins/Fly/fx.dll
.dll windows:4 windows x86 arch:x86

54d849b2fd1afb2fcfbb52b4d3294050

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapSize
LCMapStringW
LCMapStringA
GetStringTypeW
GetLocaleInfoA
GetStringTypeA
HeapReAlloc
VirtualAlloc
GetCPInfo
GetOEMCP
GetACP
VirtualProtect
GetTickCount
GetModuleHandleW
MultiByteToWideChar
GetProcAddress
HeapAlloc
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
SetUnhandledExceptionFilter
VirtualQuery
InterlockedExchange
LoadLibraryA
WriteFile
UnhandledExceptionFilter
GetEnvironmentStringsW
GetLastError
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapFree
VirtualFree
HeapCreate
ExitProcess
RtlUnwind
GetCommandLineA
GetVersionExA
GetModuleHandleA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
GetSystemInfo

user32

DefWindowProcW
RegisterClassExW
DestroyWindow
ShowWindow
KillTimer
UpdateLayeredWindow
SetPropW
GetPropW
IsWindow
SetTimer
GetSystemMetrics
CreateWindowExW
MessageBoxW

gdi32

CreateDIBSection
SelectObject
DeleteDC
DeleteObject
CreateCompatibleDC

gdiplus

GdipDisposeImage
GdipGetImageWidth
GdipAlloc
GdipFree
GdipGetImageHeight
GdipCreateBitmapFromScan0
GdipBitmapGetPixel
GdipBitmapSetPixel
GdiplusShutdown
GdiplusStartup
GdipCreateFromHDC
GdipSetCompositingMode
GdipSetCompositingQuality
GdipSetInterpolationMode
GdipDrawImageRectRectI
GdipCloneBitmapAreaI
GdipCloneImage
GdipDeleteGraphics

Exports

Exports

ActivateIcon
OptionSelected

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Plugins/Ripple/fx.dll
.dll windows:4 windows x86 arch:x86

de3587f2f3afb9b90bc5b33ff5ca50ae

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapSize
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetLocaleInfoA
HeapReAlloc
VirtualAlloc
GetCPInfo
GetOEMCP
VirtualProtect
GetTickCount
GetModuleHandleW
GetStringTypeA
GetProcAddress
GetACP
HeapAlloc
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
SetUnhandledExceptionFilter
VirtualQuery
InterlockedExchange
LoadLibraryA
WriteFile
UnhandledExceptionFilter
GetEnvironmentStringsW
GetLastError
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
ExitProcess
RtlUnwind
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetModuleHandleA
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
FreeEnvironmentStringsA
GetSystemInfo

user32

DefWindowProcW
RegisterClassExW
DestroyWindow
ShowWindow
KillTimer
UpdateLayeredWindow
SetPropW
GetPropW
IsWindow
SetTimer
CreateWindowExW
MessageBoxW

gdi32

CreateDIBSection
SelectObject
DeleteDC
DeleteObject
CreateCompatibleDC

gdiplus

GdipDeleteGraphics
GdipFree
GdipDisposeImage
GdipGetImageWidth
GdipGetImageHeight
GdiplusShutdown
GdiplusStartup
GdipCreateFromHDC
GdipSetCompositingMode
GdipSetCompositingQuality
GdipSetInterpolationMode
GdipDrawImageRectRectI
GdipCloneBitmapAreaI
GdipCloneImage
GdipAlloc

Exports

Exports

ActivateIcon
OptionSelected

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Plugins/Roll/fx.dll
.dll windows:4 windows x86 arch:x86

39f5e3c8216dc00759043fc0650928d7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapSize
LCMapStringW
LCMapStringA
GetStringTypeW
GetLocaleInfoA
GetStringTypeA
HeapReAlloc
VirtualAlloc
GetCPInfo
GetOEMCP
GetACP
VirtualProtect
GetTickCount
GetModuleHandleW
MultiByteToWideChar
GetProcAddress
HeapAlloc
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
SetUnhandledExceptionFilter
VirtualQuery
InterlockedExchange
LoadLibraryA
WriteFile
UnhandledExceptionFilter
GetEnvironmentStringsW
GetLastError
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapFree
VirtualFree
HeapCreate
HeapDestroy
ExitProcess
RtlUnwind
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetModuleHandleA
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetSystemInfo

user32

DefWindowProcW
RegisterClassExW
DestroyWindow
ShowWindow
KillTimer
UpdateLayeredWindow
SetPropW
GetPropW
IsWindow
SetTimer
GetSystemMetrics
CreateWindowExW
MessageBoxW

gdi32

CreateDIBSection
SelectObject
DeleteDC
DeleteObject
CreateCompatibleDC

gdiplus

GdipGetImageWidth
GdipDisposeImage
GdipGetImageHeight
GdipAlloc
GdipFree
GdipCreateBitmapFromScan0
GdipBitmapGetPixel
GdipBitmapSetPixel
GdiplusShutdown
GdiplusStartup
GdipCreateFromHDC
GdipSetCompositingMode
GdipSetCompositingQuality
GdipSetInterpolationMode
GdipRotateWorldTransform
GdipDrawImageRectRectI
GdipCloneBitmapAreaI
GdipCloneImage
GdipDeleteGraphics

Exports

Exports

ActivateIcon
OptionSelected

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Plugins/Runaway/fx.dll
.dll windows:4 windows x86 arch:x86

5c2de21f87f99ac10a09da0cf1d01a24

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapSize
LCMapStringW
LCMapStringA
GetStringTypeW
GetLocaleInfoA
GetStringTypeA
HeapReAlloc
VirtualAlloc
GetCPInfo
GetOEMCP
VirtualProtect
GetTickCount
GetModuleHandleW
MultiByteToWideChar
GetProcAddress
GetACP
HeapAlloc
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
SetUnhandledExceptionFilter
VirtualQuery
InterlockedExchange
LoadLibraryA
WriteFile
UnhandledExceptionFilter
GetEnvironmentStringsW
GetLastError
WideCharToMultiByte
FreeEnvironmentStringsW
ExitProcess
RtlUnwind
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetModuleHandleA
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
FreeEnvironmentStringsA
GetEnvironmentStrings
GetSystemInfo

user32

DefWindowProcW
RegisterClassExW
DestroyWindow
ShowWindow
KillTimer
UpdateLayeredWindow
SetPropW
GetPropW
SetTimer
GetSystemMetrics
CreateWindowExW
MessageBoxW

gdi32

CreateDIBSection
SelectObject
DeleteDC
DeleteObject
CreateCompatibleDC

gdiplus

GdipAlloc
GdipDeleteGraphics
GdipDisposeImage
GdipGetImageWidth
GdipGetImageHeight
GdiplusShutdown
GdiplusStartup
GdipCreateFromHDC
GdipSetCompositingMode
GdipSetCompositingQuality
GdipDrawImageRectRectI
GdipCloneBitmapAreaI
GdipCloneImage
GdipFree

Exports

Exports

ActivateIcon
OptionSelected

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Plugins/iBounce/fx.dll
.dll windows:4 windows x86 arch:x86

022641d9f2dbfe3377347537363000b1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetSystemInfo
VirtualProtect
HeapSize
GetStringTypeA
GetLocaleInfoA
GetTickCount
GetModuleHandleW
GetStringTypeW
GetProcAddress
LCMapStringW
MultiByteToWideChar
LCMapStringA
InitializeCriticalSection
HeapReAlloc
VirtualAlloc
GetCPInfo
GetOEMCP
GetACP
EnterCriticalSection
LeaveCriticalSection
IsBadCodePtr
ExitProcess
RtlUnwind
GetCurrentThreadId
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetModuleHandleA
TlsAlloc
SetLastError
GetLastError
TlsFree
TlsSetValue
TlsGetValue
TerminateProcess
GetCurrentProcess
HeapFree
HeapAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
UnhandledExceptionFilter
WriteFile
LoadLibraryA
InterlockedExchange
VirtualQuery
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr

user32

DefWindowProcW
RegisterClassExW
DestroyWindow
ShowWindow
KillTimer
UpdateLayeredWindow
SetPropW
GetPropW
IsWindow
SetTimer
GetSystemMetrics
CreateWindowExW
MessageBoxW

gdi32

CreateDIBSection
SelectObject
DeleteDC
DeleteObject
CreateCompatibleDC

gdiplus

GdipAlloc
GdipDeleteGraphics
GdipDisposeImage
GdipGetImageWidth
GdipGetImageHeight
GdiplusShutdown
GdiplusStartup
GdipCreateFromHDC
GdipSetCompositingMode
GdipSetCompositingQuality
GdipSetInterpolationMode
GdipDrawImageRectRectI
GdipCloneBitmapAreaI
GdipCloneImage
GdipFree

Exports

Exports

ActivateIcon
OptionSelected

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/Plugins/iZoom/fx.dll
.dll windows:4 windows x86 arch:x86

8aa4e2ac1b3a081230d8aacf322d7178

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetSystemInfo
VirtualProtect
HeapSize
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
GetTickCount
GetModuleHandleW
GetProcAddress
GetLocaleInfoA
InitializeCriticalSection
HeapReAlloc
VirtualAlloc
GetCPInfo
GetOEMCP
GetACP
EnterCriticalSection
LeaveCriticalSection
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
SetUnhandledExceptionFilter
ExitProcess
RtlUnwind
GetCurrentThreadId
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
TlsAlloc
SetLastError
GetLastError
TlsFree
TlsSetValue
TlsGetValue
GetModuleHandleA
TerminateProcess
GetCurrentProcess
HeapFree
HeapAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
UnhandledExceptionFilter
WriteFile
LoadLibraryA
InterlockedExchange
VirtualQuery

user32

DefWindowProcW
RegisterClassExW
DestroyWindow
ShowWindow
KillTimer
UpdateLayeredWindow
SetPropW
GetPropW
IsWindow
SetTimer
GetSystemMetrics
CreateWindowExW
MessageBoxW

gdi32

CreateDIBSection
SelectObject
DeleteDC
DeleteObject
CreateCompatibleDC

gdiplus

GdipDisposeImage
GdipGetImageWidth
GdipAlloc
GdipFree
GdipGetImageHeight
GdipCreateBitmapFromScan0
GdipBitmapGetPixel
GdipBitmapSetPixel
GdiplusShutdown
GdiplusStartup
GdipCreateFromHDC
GdipSetCompositingMode
GdipSetCompositingQuality
GdipSetInterpolationMode
GdipDrawImageRectRectI
GdipCloneBitmapAreaI
GdipCloneImage
GdipDeleteGraphics

Exports

Exports

ActivateIcon
OptionSelected

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/PunkSoftware.com.url
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/UberAPI/UberAPI.h
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/UberAPI/exports.def
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/UberIcon.dll
.dll windows:4 windows x86 arch:x86

c5dfa5774e739b942740e60a56328ffb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

\\mini\work\Visual Studio Projects\UberIcon Manager\Release\UberIcon.pdb

Imports

kernel32

GetLocaleInfoA
GetCurrentProcessId
RaiseException
RtlUnwind
GetLastError
HeapFree
HeapAlloc
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
Sleep
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
HeapSize
InitializeCriticalSection
LoadLibraryA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW

user32

CallNextHookEx
GetWindowThreadProcessId
GetClassNameW
GetParent
IsWindow
GetIconInfo
DestroyIcon
FindWindowW
SendMessageW
MapWindowPoints

gdi32

DeleteObject
GetObjectW
CreateDIBSection
CreateCompatibleDC
SelectObject
BitBlt
DeleteDC

comctl32

ImageList_GetIcon
ImageList_GetIconSize

Exports

Exports

HookProc

Sections

.text
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/UberIcon.exe
.exe windows:4 windows x86 arch:x86

051bfb50bac12d3432e8320e6170171a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

\\.psf\.home\work\visual studio projects\ubericon manager\release\UberIcon Manager.pdb

Imports

kernel32

GetUserDefaultUILanguage
GetProcAddress
GetModuleFileNameW
LoadLibraryW
FreeLibrary
FindClose
FindNextFileW
FindFirstFileW
SetPriorityClass
GetCurrentProcess
SetCurrentDirectoryW
GetLastError
LoadLibraryA
GetLocaleInfoA
GetStringTypeA
InitializeCriticalSection
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetFilePointer
FlushFileBuffers
SetStdHandle
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapSize
Sleep
GetModuleFileNameA
GetStdHandle
ExitProcess
HeapReAlloc
VirtualAlloc
ReleaseMutex
CloseHandle
WaitForSingleObject
CreateMutexW
GetFileAttributesW
GetPrivateProfileStringW
GetStringTypeW
DeleteCriticalSection
VirtualFree
HeapCreate
HeapDestroy
LCMapStringW
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleA
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
WriteFile
LeaveCriticalSection
EnterCriticalSection
GetStartupInfoW
GetProcessHeap
GetVersionExA
HeapAlloc
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
MultiByteToWideChar
HeapFree

user32

UnhookWindowsHookEx
PostQuitMessage
UpdateLayeredWindow
GetMonitorInfoW
MonitorFromPoint
GetCursorPos
SetWindowLongW
GetWindowLongW
SetRect
DestroyCursor
SetClassLongW
SetWindowsHookExW
SetWindowPos
GetPropW
ReleaseCapture
GetCapture
EndDialog
SetCapture
SetPropW
GetWindowRect
PtInRect
MapWindowPoints
DestroyMenu
DialogBoxParamW
LoadIconW
LoadCursorW
DispatchMessageW
LoadStringW
LoadAcceleratorsW
RegisterWindowMessageW
MessageBoxW
GetMessageW
TranslateAcceleratorW
TranslateMessage
CreateWindowExW
RegisterClassExW
BeginPaint
EndPaint
DefWindowProcW
CreatePopupMenu
AppendMenuW
CheckMenuItem
SetForegroundWindow
TrackPopupMenu
PostMessageW

gdi32

SelectObject
DeleteDC
DeleteObject
CreateCompatibleDC

advapi32

RegOpenKeyExW
RegDeleteValueW
RegCreateKeyW
RegSetValueExW
RegCloseKey
RegQueryValueExW

shell32

Shell_NotifyIconW
ShellExecuteW

gdiplus

GdipFree
GdipAlloc
GdipDeleteBrush
GdipCreateStringFormat
GdipDeleteStringFormat
GdipDeleteGraphics
GdipCreateFontFamilyFromName
GdipDeleteFontFamily
GdipDeleteFont
GdipDisposeImage
GdipGetImageWidth
GdipGetImageHeight
GdipCreateBitmapFromScan0
GdipCreateHBITMAPFromBitmap
GdipBitmapSetPixel
GdipCreateSolidFill
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipGetImageGraphicsContext
GdipDrawString
GdipCreateFont
GdipCloneImage
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromFile

Exports

Exports

AddOption
GetIconRect
GetOption
GetOptionFromGroup
GetOptionString
SetOption
SetOptionGroupMode
SetOptionString
Translate

Sections

.text
Size: 112KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PROGRAMFILES/Angry Birds Space Skin Pack/UberIcon/gdiplus.dll
.dll windows:5 windows x86 arch:x86

2a1ab6b72adad6b03d0746b0a5fa55d6

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04/12/2003, 00:00

Not After

03/12/2008, 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:9d:aa:11:d3:30:a8:95:60:ac:fa
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

01/07/1999, 07:00

Not After

15/10/2005, 07:00

Subject

CN=Microsoft Windows Verification Intermediate PCA,OU=Copyright (c) 1999 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=WA,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:06:51:3f:00:00:00:00:00:35
Certificate

Issuer

CN=Microsoft Windows Verification Intermediate PCA,OU=Copyright (c) 1999 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=WA,C=US

Not Before

30/06/2003, 23:22

Not After

30/08/2004, 23:32

Subject

CN=Microsoft Windows XP Publisher,OU=Copyright (c) 2003 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

4f:11:fb:cd:c0:44:ea:be:51:45:c5:b8:65:ea:1c:b3:ee:fd:20:31
Signer

Actual PE Digest

4f:11:fb:cd:c0:44:ea:be:51:45:c5:b8:65:ea:1c:b3:ee:fd:20:31

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SearchPathA
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
InterlockedExchange
GetCurrentThreadId
InitializeCriticalSection
DeleteCriticalSection
DisableThreadLibraryCalls
RaiseException
Sleep
CloseHandle
WriteFile
CreateFileA
WaitForSingleObject
SetEvent
lstrcmpiA
CreateThread
CreateEventA
WideCharToMultiByte
MultiByteToWideChar
GetTickCount
GetSystemDefaultLCID
GetProcAddress
GetModuleHandleW
GetACP
GetVersionExA
LoadLibraryA
VirtualQuery
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
ExitProcess
GetCommandLineA
GetSystemInfo
HeapReAlloc
HeapFree
VirtualAlloc
IsValidLocale
ConvertDefaultLocale
GetLocaleInfoW
GetModuleFileNameW
GetModuleFileNameA
FindResourceA
LoadResource
LockResource
GetProfileIntA
GetProfileStringA
lstrcmpiW
IsDBCSLeadByteEx
LocalReAlloc
MulDiv
SetLastError
LocalAlloc
LocalFree
GetFileTime
SearchPathW
InterlockedIncrement
GetOEMCP
CreateSemaphoreA
lstrcpyW
lstrcatW
LoadLibraryW
lstrcpyA
lstrcatA
GetSystemDirectoryA
CreateFileMappingW
ReleaseSemaphore
GetProfileSectionA
CreateFileW
SetEndOfFile
SetFilePointer
ReadFile
UnlockFile
GetFileInformationByHandle
LockFile
FlushFileBuffers
GetLastError
VirtualFree
GlobalAlloc
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
GlobalLock
GlobalSize
GlobalUnlock
GlobalFree
HeapCreate
GetModuleHandleA
GetSystemDirectoryW
GetWindowsDirectoryA
FreeLibrary
HeapDestroy

user32

ReleaseDC
GetDC
LoadBitmapW
LoadBitmapA
wsprintfW
SystemParametersInfoA
wsprintfA
GetSysColor
UnregisterClassA
DestroyWindow
GetSystemMetrics
DefWindowProcA
CreateWindowExA
RegisterWindowMessageA
RegisterClassA
DispatchMessageA
TranslateMessage
MsgWaitForMultipleObjects
PeekMessageA
GetClientRect
GetDesktopWindow
GetWindowRect
WindowFromDC
CreateIconIndirect
GetIconInfo
ClientToScreen
wvsprintfA
GetDCEx
GetWindowLongA
GetClassLongA

gdi32

GetNearestPaletteIndex
GetDIBColorTable
FillRgn
SetMiterLimit
CreateSolidBrush
StrokePath
GetGraphicsMode
SetPolyFillMode
FillPath
StrokeAndFillPath
GetWindowExtEx
ExtTextOutA
GetTextCharsetInfo
TranslateCharsetInfo
PolylineTo
Polyline
LineTo
GetCurrentPositionEx
ArcTo
SetArcDirection
SelectClipPath
GetPath
CloseFigure
AbortPath
FlattenPath
WidenPath
BeginPath
Ellipse
AngleArc
PolyBezierTo
PolyBezier
RoundRect
PolyDraw
Pie
Chord
Arc
EndPath
OffsetClipRgn
GetRgnBox
CombineRgn
SetPaletteEntries
ResizePalette
ExcludeClipRect
MoveToEx
PlayEnhMetaFile
GetWinMetaFileBits
PlgBlt
BitBlt
OffsetViewportOrgEx
StretchBlt
ScaleViewportExtEx
ScaleWindowExtEx
CombineTransform
SetMapperFlags
CreatePen
CreateDIBitmap
CreatePatternBrush
ExtSelectClipRgn
GetBkMode
GetTextAlign
ModifyWorldTransform
ExtCreateRegion
CreateCompatibleBitmap
GetNearestColor
SetStretchBltMode
StretchDIBits
SetTextAlign
SetTextJustification
PolyPolygon
PlayMetaFileRecord
ExtCreatePen
GetWorldTransform
GetROP2
SetROP2
Rectangle
Polygon
IntersectClipRect
SetBrushOrgEx
GetClipRgn
SelectClipRgn
GetBkColor
GetTextColor
CreatePenIndirect
GetObjectW
DPtoLP
CreateDIBPatternBrushPt
ExtTextOutW
SetBitmapBits
CreateEnhMetaFileW
GdiComment
GetMetaFileW
GetMetaFileA
SaveDC
SetWindowOrgEx
SetViewportOrgEx
SetGraphicsMode
SetWorldTransform
GetEnhMetaFileW
GetEnhMetaFileA
GetEnhMetaFileBits
CopyEnhMetaFileA
CopyMetaFileA
DeleteMetaFile
GetEnhMetaFileHeader
SetMetaFileBitsEx
SetEnhMetaFileBits
CreateEnhMetaFileA
SetMapMode
SetViewportExtEx
SetWindowExtEx
PlayMetaFile
CloseEnhMetaFile
DeleteEnhMetaFile
SetMetaRgn
GetMetaFileBitsEx
EnumMetaFile
EnumEnhMetaFile
PlayEnhMetaFileRecord
RestoreDC
GetStockObject
CreateBitmap
SetTextColor
SetBkColor
SetBkMode
SetDIBits
CreateBrushIndirect
CreatePalette
GetSystemPaletteEntries
GetSystemPaletteUse
GetDeviceCaps
ExtEscape
GetObjectType
GetPixel
SetDIBColorTable
DeleteObject
SelectPalette
GetTextFaceA
GetTextMetricsA
GetTextFaceW
GetTextMetricsW
EnumFontFamiliesExA
EnumFontFamiliesExW
SelectObject
CreateFontIndirectW
CreateFontIndirectA
GetRegionData
DeleteDC
CreateDCA
CreateICA
CreateRectRgn
GetRandomRgn
LPtoDP
PolyPolyline
GetViewportExtEx
GetWindowOrgEx
GetViewportOrgEx
GetMapMode
SetICMMode
Escape
GetDCOrgEx
GetObjectA
GetCurrentObject
GetDIBits
CreateCompatibleDC
CreateDIBSection
RealizePalette
GetPaletteEntries
GdiFlush
PatBlt

ole32

CoTaskMemAlloc
CoTaskMemFree
CreateStreamOnHGlobal

advapi32

RegSetValueExA
RegCloseKey
RegEnumValueW
RegQueryInfoKeyA
RegOpenKeyExA
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExA
RegEnumKeyExA
RegEnumKeyExW
RegCreateKeyExA
RegQueryValueExW
RegSetValueExW
RegEnumValueA
RegDeleteKeyW
RegDeleteKeyA
RegCreateKeyExW

Exports

Exports

GdipAddPathArc
GdipAddPathArcI
GdipAddPathBezier
GdipAddPathBezierI
GdipAddPathBeziers
GdipAddPathBeziersI
GdipAddPathClosedCurve
GdipAddPathClosedCurve2
GdipAddPathClosedCurve2I
GdipAddPathClosedCurveI
GdipAddPathCurve
GdipAddPathCurve2
GdipAddPathCurve2I
GdipAddPathCurve3
GdipAddPathCurve3I
GdipAddPathCurveI
GdipAddPathEllipse
GdipAddPathEllipseI
GdipAddPathLine
GdipAddPathLine2
GdipAddPathLine2I
GdipAddPathLineI
GdipAddPathPath
GdipAddPathPie
GdipAddPathPieI
GdipAddPathPolygon
GdipAddPathPolygonI
GdipAddPathRectangle
GdipAddPathRectangleI
GdipAddPathRectangles
GdipAddPathRectanglesI
GdipAddPathString
GdipAddPathStringI
GdipAlloc
GdipBeginContainer
GdipBeginContainer2
GdipBeginContainerI
GdipBitmapGetPixel
GdipBitmapLockBits
GdipBitmapSetPixel
GdipBitmapSetResolution
GdipBitmapUnlockBits
GdipClearPathMarkers
GdipCloneBitmapArea
GdipCloneBitmapAreaI
GdipCloneBrush
GdipCloneCustomLineCap
GdipCloneFont
GdipCloneFontFamily
GdipCloneImage
GdipCloneImageAttributes
GdipCloneMatrix
GdipClonePath
GdipClonePen
GdipCloneRegion
GdipCloneStringFormat
GdipClosePathFigure
GdipClosePathFigures
GdipCombineRegionPath
GdipCombineRegionRect
GdipCombineRegionRectI
GdipCombineRegionRegion
GdipComment
GdipCreateAdjustableArrowCap
GdipCreateBitmapFromDirectDrawSurface
GdipCreateBitmapFromFile
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromGdiDib
GdipCreateBitmapFromGraphics
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromHICON
GdipCreateBitmapFromResource
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipCreateCachedBitmap
GdipCreateCustomLineCap
GdipCreateFont
GdipCreateFontFamilyFromName
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipCreateFontFromLogfontW
GdipCreateFromHDC
GdipCreateFromHDC2
GdipCreateFromHWND
GdipCreateFromHWNDICM
GdipCreateHBITMAPFromBitmap
GdipCreateHICONFromBitmap
GdipCreateHalftonePalette
GdipCreateHatchBrush
GdipCreateImageAttributes
GdipCreateLineBrush
GdipCreateLineBrushFromRect
GdipCreateLineBrushFromRectI
GdipCreateLineBrushFromRectWithAngle
GdipCreateLineBrushFromRectWithAngleI
GdipCreateLineBrushI
GdipCreateMatrix
GdipCreateMatrix2
GdipCreateMatrix3
GdipCreateMatrix3I
GdipCreateMetafileFromEmf
GdipCreateMetafileFromFile
GdipCreateMetafileFromStream
GdipCreateMetafileFromWmf
GdipCreateMetafileFromWmfFile
GdipCreatePath
GdipCreatePath2
GdipCreatePath2I
GdipCreatePathGradient
GdipCreatePathGradientFromPath
GdipCreatePathGradientI
GdipCreatePathIter
GdipCreatePen1
GdipCreatePen2
GdipCreateRegion
GdipCreateRegionHrgn
GdipCreateRegionPath
GdipCreateRegionRect
GdipCreateRegionRectI
GdipCreateRegionRgnData
GdipCreateSolidFill
GdipCreateStreamOnFile
GdipCreateStringFormat
GdipCreateTexture
GdipCreateTexture2
GdipCreateTexture2I
GdipCreateTextureIA
GdipCreateTextureIAI
GdipDeleteBrush
GdipDeleteCachedBitmap
GdipDeleteCustomLineCap
GdipDeleteFont
GdipDeleteFontFamily
GdipDeleteGraphics
GdipDeleteMatrix
GdipDeletePath
GdipDeletePathIter
GdipDeletePen
GdipDeletePrivateFontCollection
GdipDeleteRegion
GdipDeleteStringFormat
GdipDisposeImage
GdipDisposeImageAttributes
GdipDrawArc
GdipDrawArcI
GdipDrawBezier
GdipDrawBezierI
GdipDrawBeziers
GdipDrawBeziersI
GdipDrawCachedBitmap
GdipDrawClosedCurve
GdipDrawClosedCurve2
GdipDrawClosedCurve2I
GdipDrawClosedCurveI
GdipDrawCurve
GdipDrawCurve2
GdipDrawCurve2I
GdipDrawCurve3
GdipDrawCurve3I
GdipDrawCurveI
GdipDrawDriverString
GdipDrawEllipse
GdipDrawEllipseI
GdipDrawImage
GdipDrawImageI
GdipDrawImagePointRect
GdipDrawImagePointRectI
GdipDrawImagePoints
GdipDrawImagePointsI
GdipDrawImagePointsRect
GdipDrawImagePointsRectI
GdipDrawImageRect
GdipDrawImageRectI
GdipDrawImageRectRect
GdipDrawImageRectRectI
GdipDrawLine
GdipDrawLineI
GdipDrawLines
GdipDrawLinesI
GdipDrawPath
GdipDrawPie
GdipDrawPieI
GdipDrawPolygon
GdipDrawPolygonI
GdipDrawRectangle
GdipDrawRectangleI
GdipDrawRectangles
GdipDrawRectanglesI
GdipDrawString
GdipEmfToWmfBits
GdipEndContainer
GdipEnumerateMetafileDestPoint
GdipEnumerateMetafileDestPointI
GdipEnumerateMetafileDestPoints
GdipEnumerateMetafileDestPointsI
GdipEnumerateMetafileDestRect
GdipEnumerateMetafileDestRectI
GdipEnumerateMetafileSrcRectDestPoint
GdipEnumerateMetafileSrcRectDestPointI
GdipEnumerateMetafileSrcRectDestPoints
GdipEnumerateMetafileSrcRectDestPointsI
GdipEnumerateMetafileSrcRectDestRect
GdipEnumerateMetafileSrcRectDestRectI
GdipFillClosedCurve
GdipFillClosedCurve2
GdipFillClosedCurve2I
GdipFillClosedCurveI
GdipFillEllipse
GdipFillEllipseI
GdipFillPath
GdipFillPie
GdipFillPieI
GdipFillPolygon
GdipFillPolygon2
GdipFillPolygon2I
GdipFillPolygonI
GdipFillRectangle
GdipFillRectangleI
GdipFillRectangles
GdipFillRectanglesI
GdipFillRegion
GdipFlattenPath
GdipFlush
GdipFree
GdipGetAdjustableArrowCapFillState
GdipGetAdjustableArrowCapHeight
GdipGetAdjustableArrowCapMiddleInset
GdipGetAdjustableArrowCapWidth
GdipGetAllPropertyItems
GdipGetBrushType
GdipGetCellAscent
GdipGetCellDescent
GdipGetClip
GdipGetClipBounds
GdipGetClipBoundsI
GdipGetCompositingMode
GdipGetCompositingQuality
GdipGetCustomLineCapBaseCap
GdipGetCustomLineCapBaseInset
GdipGetCustomLineCapStrokeCaps
GdipGetCustomLineCapStrokeJoin
GdipGetCustomLineCapType
GdipGetCustomLineCapWidthScale
GdipGetDC
GdipGetDpiX
GdipGetDpiY
GdipGetEmHeight
GdipGetEncoderParameterList
GdipGetEncoderParameterListSize
GdipGetFamily
GdipGetFamilyName
GdipGetFontCollectionFamilyCount
GdipGetFontCollectionFamilyList
GdipGetFontHeight
GdipGetFontHeightGivenDPI
GdipGetFontSize
GdipGetFontStyle
GdipGetFontUnit
GdipGetGenericFontFamilyMonospace
GdipGetGenericFontFamilySansSerif
GdipGetGenericFontFamilySerif
GdipGetHatchBackgroundColor
GdipGetHatchForegroundColor
GdipGetHatchStyle
GdipGetHemfFromMetafile
GdipGetImageAttributesAdjustedPalette
GdipGetImageBounds
GdipGetImageDecoders
GdipGetImageDecodersSize
GdipGetImageDimension
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipGetImageFlags
GdipGetImageGraphicsContext
GdipGetImageHeight
GdipGetImageHorizontalResolution
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageRawFormat
GdipGetImageThumbnail
GdipGetImageType
GdipGetImageVerticalResolution
GdipGetImageWidth
GdipGetInterpolationMode
GdipGetLineBlend
GdipGetLineBlendCount
GdipGetLineColors
GdipGetLineGammaCorrection
GdipGetLinePresetBlend
GdipGetLinePresetBlendCount
GdipGetLineRect
GdipGetLineRectI
GdipGetLineSpacing
GdipGetLineTransform
GdipGetLineWrapMode
GdipGetLogFontA
GdipGetLogFontW
GdipGetMatrixElements
GdipGetMetafileDownLevelRasterizationLimit
GdipGetMetafileHeaderFromEmf
GdipGetMetafileHeaderFromFile
GdipGetMetafileHeaderFromMetafile
GdipGetMetafileHeaderFromStream
GdipGetMetafileHeaderFromWmf
GdipGetNearestColor
GdipGetPageScale
GdipGetPageUnit
GdipGetPathData
GdipGetPathFillMode
GdipGetPathGradientBlend
GdipGetPathGradientBlendCount
GdipGetPathGradientCenterColor
GdipGetPathGradientCenterPoint
GdipGetPathGradientCenterPointI
GdipGetPathGradientFocusScales
GdipGetPathGradientGammaCorrection
GdipGetPathGradientPath
GdipGetPathGradientPointCount
GdipGetPathGradientPresetBlend
GdipGetPathGradientPresetBlendCount
GdipGetPathGradientRect
GdipGetPathGradientRectI
GdipGetPathGradientSurroundColorCount
GdipGetPathGradientSurroundColorsWithCount
GdipGetPathGradientTransform
GdipGetPathGradientWrapMode
GdipGetPathLastPoint
GdipGetPathPoints
GdipGetPathPointsI
GdipGetPathTypes
GdipGetPathWorldBounds
GdipGetPathWorldBoundsI
GdipGetPenBrushFill
GdipGetPenColor
GdipGetPenCompoundArray
GdipGetPenCompoundCount
GdipGetPenCustomEndCap
GdipGetPenCustomStartCap
GdipGetPenDashArray
GdipGetPenDashCap197819
GdipGetPenDashCount
GdipGetPenDashOffset
GdipGetPenDashStyle
GdipGetPenEndCap
GdipGetPenFillType
GdipGetPenLineJoin
GdipGetPenMiterLimit
GdipGetPenMode
GdipGetPenStartCap
GdipGetPenTransform
GdipGetPenUnit
GdipGetPenWidth
GdipGetPixelOffsetMode
GdipGetPointCount
GdipGetPropertyCount
GdipGetPropertyIdList
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipGetPropertySize
GdipGetRegionBounds
GdipGetRegionBoundsI
GdipGetRegionData
GdipGetRegionDataSize
GdipGetRegionHRgn
GdipGetRegionScans
GdipGetRegionScansCount
GdipGetRegionScansI
GdipGetRenderingOrigin
GdipGetSmoothingMode
GdipGetSolidFillColor
GdipGetStringFormatAlign
GdipGetStringFormatDigitSubstitution
GdipGetStringFormatFlags
GdipGetStringFormatHotkeyPrefix
GdipGetStringFormatLineAlign
GdipGetStringFormatMeasurableCharacterRangeCount
GdipGetStringFormatTabStopCount
GdipGetStringFormatTabStops
GdipGetStringFormatTrimming
GdipGetTextContrast
GdipGetTextRenderingHint
GdipGetTextureImage
GdipGetTextureTransform
GdipGetTextureWrapMode
GdipGetVisibleClipBounds
GdipGetVisibleClipBoundsI
GdipGetWorldTransform
GdipGraphicsClear
GdipImageForceValidation
GdipImageGetFrameCount
GdipImageGetFrameDimensionsCount
GdipImageGetFrameDimensionsList
GdipImageRotateFlip
GdipImageSelectActiveFrame
GdipInvertMatrix
GdipIsClipEmpty
GdipIsEmptyRegion
GdipIsEqualRegion
GdipIsInfiniteRegion
GdipIsMatrixEqual
GdipIsMatrixIdentity
GdipIsMatrixInvertible
GdipIsOutlineVisiblePathPoint
GdipIsOutlineVisiblePathPointI
GdipIsStyleAvailable
GdipIsVisibleClipEmpty
GdipIsVisiblePathPoint
GdipIsVisiblePathPointI
GdipIsVisiblePoint
GdipIsVisiblePointI
GdipIsVisibleRect
GdipIsVisibleRectI
GdipIsVisibleRegionPoint
GdipIsVisibleRegionPointI
GdipIsVisibleRegionRect
GdipIsVisibleRegionRectI
GdipLoadImageFromFile
GdipLoadImageFromFileICM
GdipLoadImageFromStream
GdipLoadImageFromStreamICM
GdipMeasureCharacterRanges
GdipMeasureDriverString
GdipMeasureString
GdipMultiplyLineTransform
GdipMultiplyMatrix
GdipMultiplyPathGradientTransform
GdipMultiplyPenTransform
GdipMultiplyTextureTransform
GdipMultiplyWorldTransform
GdipNewInstalledFontCollection
GdipNewPrivateFontCollection
GdipPathIterCopyData
GdipPathIterEnumerate
GdipPathIterGetCount
GdipPathIterGetSubpathCount
GdipPathIterHasCurve
GdipPathIterIsValid
GdipPathIterNextMarker
GdipPathIterNextMarkerPath
GdipPathIterNextPathType
GdipPathIterNextSubpath
GdipPathIterNextSubpathPath
GdipPathIterRewind
GdipPlayMetafileRecord
GdipPrivateAddFontFile
GdipPrivateAddMemoryFont
GdipRecordMetafile
GdipRecordMetafileFileName
GdipRecordMetafileFileNameI
GdipRecordMetafileI
GdipRecordMetafileStream
GdipRecordMetafileStreamI
GdipReleaseDC
GdipRemovePropertyItem
GdipResetClip
GdipResetImageAttributes
GdipResetLineTransform
GdipResetPageTransform
GdipResetPath
GdipResetPathGradientTransform
GdipResetPenTransform
GdipResetTextureTransform
GdipResetWorldTransform
GdipRestoreGraphics
GdipReversePath
GdipRotateLineTransform
GdipRotateMatrix
GdipRotatePathGradientTransform
GdipRotatePenTransform
GdipRotateTextureTransform
GdipRotateWorldTransform
GdipSaveAdd
GdipSaveAddImage
GdipSaveGraphics
GdipSaveImageToFile
GdipSaveImageToStream
GdipScaleLineTransform
GdipScaleMatrix
GdipScalePathGradientTransform
GdipScalePenTransform
GdipScaleTextureTransform
GdipScaleWorldTransform
GdipSetAdjustableArrowCapFillState
GdipSetAdjustableArrowCapHeight
GdipSetAdjustableArrowCapMiddleInset
GdipSetAdjustableArrowCapWidth
GdipSetClipGraphics
GdipSetClipHrgn
GdipSetClipPath
GdipSetClipRect
GdipSetClipRectI
GdipSetClipRegion
GdipSetCompositingMode
GdipSetCompositingQuality
GdipSetCustomLineCapBaseCap
GdipSetCustomLineCapBaseInset
GdipSetCustomLineCapStrokeCaps
GdipSetCustomLineCapStrokeJoin

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Shared
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PROGRAMFILES/Angry Birds Space Skin Pack/license.txt
$RESOURCES/Themes/angry.theme
$RESOURCES/Themes/angry/Shell/NormalColor/en-US/shellstyle.dll.mui
.dll windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$RESOURCES/Themes/angry/Shell/NormalColor/shellstyle.dll
.dll windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 342KB - Virtual size: 341KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$RESOURCES/Themes/angry/angry.msstyles
.dll windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 110B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$RESOURCES/Themes/angry/en-US/ANGRY-BIRDS.msstyles.mui
.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$RESOURCES/Themes/angry/en-US/osituro.msstyles.mui
.dll windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$WINDIR/Cursors/angry/Alternate Select.cur
$WINDIR/Cursors/angry/Cross.cur
$WINDIR/Cursors/angry/Diagonal Resize 1.cur
$WINDIR/Cursors/angry/Diagonal Resize 2.cur
$WINDIR/Cursors/angry/Handwriting.cur
$WINDIR/Cursors/angry/Help Select.cur
$WINDIR/Cursors/angry/Horizontal Resize.cur
$WINDIR/Cursors/angry/Link Select.cur
$WINDIR/Cursors/angry/Move.cur
$WINDIR/Cursors/angry/Normal Select.cur
$WINDIR/Cursors/angry/Precision Select.cur
$WINDIR/Cursors/angry/Text Select.cur
$WINDIR/Cursors/angry/Unavailable.cur
$WINDIR/Cursors/angry/Vertical Resize.cur
$WINDIR/Cursors/angry/Working In Background.ani
$WINDIR/Cursors/angry/busy.ani
$WINDIR/Media/angry/Windows Balloon.wav
$WINDIR/Media/angry/Windows Battery Critical.wav
$WINDIR/Media/angry/Windows Battery Low.wav
$WINDIR/Media/angry/Windows Change Theme.wav
$WINDIR/Media/angry/Windows Critical Stop.wav
$WINDIR/Media/angry/Windows Error.wav
$WINDIR/Media/angry/Windows Exclamation.wav
$WINDIR/Media/angry/Windows Feed Discovered.wav
$WINDIR/Media/angry/Windows Hardware Fail.wav
$WINDIR/Media/angry/Windows Hardware Insert 2.wav
$WINDIR/Media/angry/Windows Hardware Insert.wav
$WINDIR/Media/angry/Windows Hardware Remove.wav
$WINDIR/Media/angry/Windows Information Bar.wav
$WINDIR/Media/angry/Windows Logoff Sound.wav
$WINDIR/Media/angry/Windows Logon Sound.wav
$WINDIR/Media/angry/Windows Logon.wav
$WINDIR/Media/angry/Windows Menu Command.wav
$WINDIR/Media/angry/Windows Minimize.wav
$WINDIR/Media/angry/Windows Navigation Start.wav
$WINDIR/Media/angry/Windows Notify.wav
$WINDIR/Media/angry/Windows Pop-up Blocked.wav
$WINDIR/Media/angry/Windows Pop_up Blocked.wav
$WINDIR/Media/angry/Windows Print complete.wav
$WINDIR/Media/angry/Windows Recycle.wav
$WINDIR/Media/angry/Windows Restore.wav
$WINDIR/Media/angry/Windows Ringin.wav
$WINDIR/Media/angry/Windows Ringout.wav
$WINDIR/Media/angry/Windows Shutdown.wav
$WINDIR/Media/angry/Windows Start.wav
$WINDIR/Media/angry/Windows Startup.wav
$WINDIR/Media/angry/Windows User Account Control.wav
$WINDIR/Web/Wallpaper/angry.jpg
.jpg
RIC.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
SP.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 156KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 261KB - Virtual size: 261KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
boot.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

099c0646ea7282d232219f8807883be0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

Sections

.text Size: 23KB - Virtual size: 22KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 1024B - Virtual size: 107KB

.ndata Size: - Virtual size: 104KB

.rsrc Size: 73KB - Virtual size: 73KB

7a3709b093081d5614be1eaa2fe7fe76

Headers

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 1024B - Virtual size: 862B

.rdata Size: 1024B - Virtual size: 792B

.data Size: 512B - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 224B

446b3baefb02586ec09e438a07186f7b

Headers

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 1024B - Virtual size: 977B

.rdata Size: 1024B - Virtual size: 658B

.data Size: 512B - Virtual size: 40B

.reloc Size: 512B - Virtual size: 154B

e5069441b0758ba7946e6a2626af9ea1

Headers

File Characteristics

Imports

kernel32

user32

oleaut32

gdiplus

shlwapi

Sections

.text Size: 20KB - Virtual size: 18KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 12KB - Virtual size: 10KB

.rsrc Size: 4KB - Virtual size: 2KB

2017f2acbdaa42ab3e4adeb8b4c37e7b

Headers

File Characteristics

Imports

kernel32

user32

ole32

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 7KB

.rdata Size: 1024B - Virtual size: 784B

.data Size: 512B - Virtual size: 100B

.reloc Size: 1024B - Virtual size: 520B

315a1b02d7617389cdbdf1e1faba5302

Code Sign

.text
Size: 23KB - Virtual size: 22KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 107KB

.ndata
Size: - Virtual size: 104KB

.rsrc
Size: 73KB - Virtual size: 73KB

.text
Size: 1024B - Virtual size: 862B

.rdata
Size: 1024B - Virtual size: 792B

.data
Size: 512B - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 224B

.text
Size: 1024B - Virtual size: 977B

.rdata
Size: 1024B - Virtual size: 658B

.data
Size: 512B - Virtual size: 40B

.reloc
Size: 512B - Virtual size: 154B

.text
Size: 20KB - Virtual size: 18KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 12KB - Virtual size: 10KB

.rsrc
Size: 4KB - Virtual size: 2KB

.text
Size: 7KB - Virtual size: 7KB

.rdata
Size: 1024B - Virtual size: 784B

.data
Size: 512B - Virtual size: 100B

.reloc
Size: 1024B - Virtual size: 520B

18:23:2a:ce:52:10:a6:b0:4d:86:17:a5:00:40:af:4c
Certificate

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

63:21:92:f9:d0:34:fb:ef:08:ff:6e:e2:8b:fb:26:de:9b:0e:4f:b4
Signer

.text
Size: 41KB - Virtual size: 41KB

.data
Size: 1024B - Virtual size: 2KB

.rsrc
Size: 25KB - Virtual size: 25KB

18:23:2a:ce:52:10:a6:b0:4d:86:17:a5:00:40:af:4c
Certificate

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

90:79:83:6f:36:cc:71:14:ac:50:87:4e:aa:5e:24:0e:5b:46:07:ef
Signer

.text
Size: 59KB - Virtual size: 59KB

.data
Size: 1024B - Virtual size: 3KB

.pdata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 25KB - Virtual size: 25KB