Castle-Crashers-SteamRIP[.]com[.]rar

resource	yara_rule
static1/unpack001/Castle Crashers v2.8/steam_api.dll	upx

resource
unpack001/Castle Crashers v2.8/castle.exe
unpack001/Castle Crashers v2.8/steam_api.dll
unpack001/Castle Crashers v2.8/unins000.exe

Castle-Crashers-SteamRIP.com.rar

.rar

Castle Crashers v2.8/SteamConfig.ini

Castle Crashers v2.8/castle.exe

.exe windows:6 windows x86 arch:x86

7dc386366e0e45317c9d988f7b0898ae

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\projects\win32\CastleCrashers\Dev\Castle\gamecode\win32\ProjectFiles\Release\CastleWin32.pdb

Imports

dinput8

DirectInput8Create

winhttp

WinHttpReadData

WinHttpAddRequestHeaders

WinHttpReceiveResponse

WinHttpQueryDataAvailable

WinHttpConnect

WinHttpSetStatusCallback

WinHttpSetTimeouts

WinHttpSendRequest

WinHttpCloseHandle

WinHttpOpenRequest

WinHttpQueryHeaders

WinHttpOpen

d3d9

Direct3DCreate9

d3dx9_43

D3DXMatrixOrthoOffCenterLH

D3DXCreateTextureFromFileExA

steam_api

SteamAPI_GetHSteamUser

SteamAPI_RegisterCallResult

SteamAPI_UnregisterCallResult

SteamInternal_FindOrCreateUserInterface

SteamAPI_UnregisterCallback

SteamAPI_RegisterCallback

SteamAPI_Shutdown

SteamInternal_CreateInterface

SteamAPI_Init

SteamAPI_RunCallbacks

SteamAPI_SetMiniDumpComment

SteamAPI_WriteMiniDump

SteamInternal_ContextInit

kernel32

HeapReAlloc

HeapSize

WriteConsoleW

CreateFileW

SetStdHandle

GetProcessHeap

SetEnvironmentVariableA

FreeEnvironmentStringsW

GetEnvironmentStringsW

GetCommandLineW

GetCommandLineA

GetCPInfo

GetOEMCP

IsValidCodePage

FindNextFileW

FindFirstFileExW

FindClose

ReadConsoleW

SetFilePointerEx

GetStringTypeW

LCMapStringW

CompareStringW

GetTimeFormatW

GetDateFormatW

EnterCriticalSection

LeaveCriticalSection

InitializeCriticalSection

DeleteCriticalSection

GetCurrentThreadId

GetModuleHandleA

Sleep

GetLastError

LoadLibraryA

GetProcAddress

WaitForSingleObject

ResumeThread

CloseHandle

RaiseException

IsDebuggerPresent

GetTickCount

GetCurrentProcess

ReadFile

ReleaseSemaphore

SetEndOfFile

CreateFileA

SetEvent

GetOverlappedResult

CreateSemaphoreA

CreateEventA

GetUserDefaultLCID

OutputDebugStringA

GetFileSize

QueryPerformanceFrequency

QueryPerformanceCounter

GetLocalTime

GetModuleFileNameA

SetThreadPriority

CreateThread

LocalFree

GetTimeZoneInformation

GetFileType

GetConsoleMode

GetConsoleCP

FlushFileBuffers

HeapAlloc

HeapFree

GetACP

WriteFile

GetStdHandle

GetModuleFileNameW

ExitProcess

GetModuleHandleExW

FreeLibraryAndExitThread

ExitThread

WideCharToMultiByte

MultiByteToWideChar

RtlUnwind

SetLastError

LoadLibraryExW

FreeLibrary

TlsFree

TlsSetValue

DecodePointer

TlsGetValue

TlsAlloc

InitializeCriticalSectionAndSpinCount

InitializeSListHead

GetSystemTimeAsFileTime

GetCurrentProcessId

GetStartupInfoW

GetModuleHandleW

CreateEventW

WaitForSingleObjectEx

EncodePointer

SetFilePointer

ResetEvent

IsProcessorFeaturePresent

TerminateProcess

SetUnhandledExceptionFilter

UnhandledExceptionFilter

user32

DefWindowProcA

ScreenToClient

PeekMessageA

PostQuitMessage

GetCursorPos

TranslateMessage

SetRect

AdjustWindowRectEx

GetWindowRect

LoadCursorA

DestroyWindow

SetWindowPos

MessageBoxW

GetSystemMetrics

GetAsyncKeyState

SetWindowLongA

ClientToScreen

ChangeDisplaySettingsA

MessageBoxA

MoveWindow

AdjustWindowRect

RegisterClassA

CreateWindowExA

SetFocus

SetCursor

LoadIconA

GetClientRect

UnregisterClassA

GetDesktopWindow

UpdateWindow

SetForegroundWindow

ShowCursor

SetCursorPos

ShowWindow

DispatchMessageA

gdi32

GetStockObject

shell32

ShellExecuteA

CommandLineToArgvW

ole32

CoInitialize

CoInitializeEx

CoCreateInstance

CoUninitialize

CoSetProxyBlanket

oleaut32

SysFreeString

SysAllocString

Sections

.text
Size: 913KB - Virtual size: 912KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 372KB - Virtual size: 371KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 346KB - Virtual size: 345KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

.bind
Size: 138KB - Virtual size: 138KB

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

Castle Crashers v2.8/data/bsps/bsp1.pak

.zip

BSP1.PDAG.NREC

Castle Crashers v2.8/data/bsps/bsp10.pak

.zip

BSP10.PDAG.NREC

Castle Crashers v2.8/data/bsps/bsp11.pak

.zip

BSP11.PDAG.NREC

Castle Crashers v2.8/data/bsps/bsp12.pak

.zip

BSP12.PDAG.NREC

Castle Crashers v2.8/data/bsps/bsp13.pak

.zip

BSP13.PDAG.NREC

Castle Crashers v2.8/data/bsps/bsp14.pak

.zip

BSP14.PDAG.NREC

Castle Crashers v2.8/data/bsps/bsp15.pak

.zip

BSP15.PDAG.NREC

Castle Crashers v2.8/data/bsps/bsp16.pak

.zip

BSP16.PDAG.NREC

Castle Crashers v2.8/data/bsps/bsp17.pak

.zip

Castle Crashers v2.8/data/bsps/bsp18.pak

.zip

Castle Crashers v2.8/data/bsps/bsp19.pak

.zip

Castle Crashers v2.8/data/bsps/bsp2.pak

.zip

Castle Crashers v2.8/data/bsps/bsp20.pak

.zip

Castle Crashers v2.8/data/bsps/bsp21.pak

.zip

Castle Crashers v2.8/data/bsps/bsp22.pak

.zip

Castle Crashers v2.8/data/bsps/bsp23.pak

.zip

Castle Crashers v2.8/data/bsps/bsp24a.pak

.zip

Castle Crashers v2.8/data/bsps/bsp24b.pak

.zip

Castle Crashers v2.8/data/bsps/bsp24c.pak

.zip

Castle Crashers v2.8/data/bsps/bsp24d.pak

.zip

Castle Crashers v2.8/data/bsps/bsp25.pak

.zip

Castle Crashers v2.8/data/bsps/bsp26.pak

.zip

Castle Crashers v2.8/data/bsps/bsp27.pak

.zip

Castle Crashers v2.8/data/bsps/bsp28.pak

.zip

Castle Crashers v2.8/data/bsps/bsp29.pak

.zip

Castle Crashers v2.8/data/bsps/bsp3.pak

.zip

Castle Crashers v2.8/data/bsps/bsp30.pak

.zip

Castle Crashers v2.8/data/bsps/bsp31.pak

.zip

Castle Crashers v2.8/data/bsps/bsp32.pak

.zip

Castle Crashers v2.8/data/bsps/bsp33.pak

.zip

Castle Crashers v2.8/data/bsps/bsp34.pak

.zip

Castle Crashers v2.8/data/bsps/bsp35.pak

.zip

Castle Crashers v2.8/data/bsps/bsp36.pak

.zip

Castle Crashers v2.8/data/bsps/bsp37.pak

.zip

Castle Crashers v2.8/data/bsps/bsp38.pak

.zip

Castle Crashers v2.8/data/bsps/bsp39.pak

.zip

Castle Crashers v2.8/data/bsps/bsp4.pak

.zip

Castle Crashers v2.8/data/bsps/bsp40.pak

.zip

Castle Crashers v2.8/data/bsps/bsp41.pak

.zip

Castle Crashers v2.8/data/bsps/bsp42.pak

.zip

Castle Crashers v2.8/data/bsps/bsp43.pak

.zip

Castle Crashers v2.8/data/bsps/bsp44.pak

.zip

Castle Crashers v2.8/data/bsps/bsp45.pak

.zip

Castle Crashers v2.8/data/bsps/bsp46a.pak

.zip

Castle Crashers v2.8/data/bsps/bsp46b.pak

.zip

Castle Crashers v2.8/data/bsps/bsp46c.pak

.zip

Castle Crashers v2.8/data/bsps/bsp46d.pak

.zip

Castle Crashers v2.8/data/bsps/bsp47a.pak

.zip

Castle Crashers v2.8/data/bsps/bsp47b.pak

.zip

Castle Crashers v2.8/data/bsps/bsp47c.pak

.zip

Castle Crashers v2.8/data/bsps/bsp47d.pak

.zip

Castle Crashers v2.8/data/bsps/bsp48a.pak

.zip

Castle Crashers v2.8/data/bsps/bsp48b.pak

.zip

Castle Crashers v2.8/data/bsps/bsp48c.pak

.zip

Castle Crashers v2.8/data/bsps/bsp48d.pak

.zip

Castle Crashers v2.8/data/bsps/bsp49a.pak

.zip

Castle Crashers v2.8/data/bsps/bsp49b.pak

.zip

Castle Crashers v2.8/data/bsps/bsp49c.pak

.zip

Castle Crashers v2.8/data/bsps/bsp49d.pak

.zip

Castle Crashers v2.8/data/bsps/bsp5.pak

.zip

Castle Crashers v2.8/data/bsps/bsp50.pak

.zip

Castle Crashers v2.8/data/bsps/bsp51.pak

.zip

Castle Crashers v2.8/data/bsps/bsp53.pak

.zip

Castle Crashers v2.8/data/bsps/bsp54.pak

.zip

Castle Crashers v2.8/data/bsps/bsp55.pak

.zip

Castle Crashers v2.8/data/bsps/bsp56.pak

.zip

Castle Crashers v2.8/data/bsps/bsp57.pak

.zip

Castle Crashers v2.8/data/bsps/bsp58.pak

.zip

Castle Crashers v2.8/data/bsps/bsp59.pak

.zip

Castle Crashers v2.8/data/bsps/bsp6.pak

.zip

Castle Crashers v2.8/data/bsps/bsp60.pak

.zip

Castle Crashers v2.8/data/bsps/bsp7.pak

.zip

Castle Crashers v2.8/data/bsps/bsp8.pak

.zip

Castle Crashers v2.8/data/bsps/bsp9.pak

.zip

Castle Crashers v2.8/data/fonts/debugfont14.fnt

Castle Crashers v2.8/data/fonts/debugfont14_0.dds

Castle Crashers v2.8/data/fonts/synjUnicode_20.fnt

Castle Crashers v2.8/data/fonts/synjUnicode_20_0.dds

Castle Crashers v2.8/data/game/amenu.pak

.zip

Castle Crashers v2.8/data/game/animals.pak

.zip

Castle Crashers v2.8/data/game/attract.pak

.zip

Castle Crashers v2.8/data/game/backoffb.pak

.zip

Castle Crashers v2.8/data/game/chicken.pak

.zip

Castle Crashers v2.8/data/game/ebarboss.pak

.zip

Castle Crashers v2.8/data/game/ebat.pak

.zip

Castle Crashers v2.8/data/game/ebatboss.pak

.zip

Castle Crashers v2.8/data/game/ebee.pak

.zip

Castle Crashers v2.8/data/game/ebeetle.pak

.zip

Castle Crashers v2.8/data/game/ecorn.pak

.zip

Castle Crashers v2.8/data/game/ecyclops.pak

.zip

Castle Crashers v2.8/data/game/efish.pak

.zip

Castle Crashers v2.8/data/game/efrost.pak

.zip

Castle Crashers v2.8/data/game/eimp.pak

.zip

Castle Crashers v2.8/data/game/emedusa.pak

.zip

Castle Crashers v2.8/data/game/ending.pak

.zip

Castle Crashers v2.8/data/game/ending2.pak

.zip

Castle Crashers v2.8/data/game/ending3.pak

.zip

Castle Crashers v2.8/data/game/ending4.pak

.zip

Castle Crashers v2.8/data/game/ending5.pak

.zip

Castle Crashers v2.8/data/game/ending6.pak

.zip

Castle Crashers v2.8/data/game/ending7.pak

.zip

Castle Crashers v2.8/data/game/ending8.pak

.zip

Castle Crashers v2.8/data/game/endofdemo.pak

.zip

Castle Crashers v2.8/data/game/endrank.pak

.zip

Castle Crashers v2.8/data/game/epainter.pak

.zip

Castle Crashers v2.8/data/game/escorp.pak

.zip

Castle Crashers v2.8/data/game/eslime.pak

.zip

Castle Crashers v2.8/data/game/esnake.pak

.zip

Castle Crashers v2.8/data/game/etower.pak

.zip

Castle Crashers v2.8/data/game/etroll.pak

.zip

Castle Crashers v2.8/data/game/etrollx.pak

.zip

Castle Crashers v2.8/data/game/eundead.pak

.zip

Castle Crashers v2.8/data/game/ewarmach.pak

.zip

Castle Crashers v2.8/data/game/ewizard.pak

.zip

Castle Crashers v2.8/data/game/fx.pak

.zip

Castle Crashers v2.8/data/game/horse.pak

.zip

Castle Crashers v2.8/data/game/legal.pak

.zip

Castle Crashers v2.8/data/game/loading.pak

.zip

Castle Crashers v2.8/data/game/lobby.pak

.zip

Castle Crashers v2.8/data/game/logo.pak

.zip

Castle Crashers v2.8/data/game/main.pak

.zip

Castle Crashers v2.8/data/game/map.pak

.zip

Castle Crashers v2.8/data/game/menu.pak

.zip

Castle Crashers v2.8/data/game/mount2.pak

.zip

Castle Crashers v2.8/data/game/mount3.pak

.zip

Castle Crashers v2.8/data/game/mount4.pak

.zip

Castle Crashers v2.8/data/game/pause.pak

.zip

Castle Crashers v2.8/data/game/player.pak

.zip

Castle Crashers v2.8/data/game/presell.pak

.zip

Castle Crashers v2.8/data/game/quoff.pak

.zip

Castle Crashers v2.8/data/game/results.pak

.zip

Castle Crashers v2.8/data/game/select.pak

.zip

Castle Crashers v2.8/data/game/sky1.pak

.zip

Castle Crashers v2.8/data/game/sky2.pak

.zip

Castle Crashers v2.8/data/game/sky3.pak

.zip

Castle Crashers v2.8/data/game/sky4.pak

.zip

Castle Crashers v2.8/data/game/sky5.pak

.zip

Castle Crashers v2.8/data/game/sky6.pak

.zip

Castle Crashers v2.8/data/game/sounds.pak

.zip

Castle Crashers v2.8/data/game/test.pak

.zip

Castle Crashers v2.8/data/game/ufo.pak

.zip

Castle Crashers v2.8/data/game/ufodust.pak

.zip

Castle Crashers v2.8/data/game/upsell.pak

.zip

Castle Crashers v2.8/data/levels/level1.pak

.zip

Castle Crashers v2.8/data/levels/level10.pak

.zip

Castle Crashers v2.8/data/levels/level11.pak

.zip

Castle Crashers v2.8/data/levels/level12.pak

.zip

Castle Crashers v2.8/data/levels/level13.pak

.zip

Castle Crashers v2.8/data/levels/level14.pak

.zip

Castle Crashers v2.8/data/levels/level15.pak

.zip

Castle Crashers v2.8/data/levels/level16.pak

.zip

Castle Crashers v2.8/data/levels/level17.pak

.zip

Castle Crashers v2.8/data/levels/level18.pak

.zip

Castle Crashers v2.8/data/levels/level19.pak

.zip

Castle Crashers v2.8/data/levels/level2.pak

.zip

Castle Crashers v2.8/data/levels/level20.pak

.zip

Castle Crashers v2.8/data/levels/level21.pak

.zip

Castle Crashers v2.8/data/levels/level22.pak

.zip

Castle Crashers v2.8/data/levels/level23.pak

.zip

Castle Crashers v2.8/data/levels/level24.pak

.zip

Castle Crashers v2.8/data/levels/level25.pak

.zip

Castle Crashers v2.8/data/levels/level26.pak

.zip

Castle Crashers v2.8/data/levels/level27.pak

.zip

Castle Crashers v2.8/data/levels/level28.pak

.zip

Castle Crashers v2.8/data/levels/level29.pak

.zip

Castle Crashers v2.8/data/levels/level3.pak

.zip

Castle Crashers v2.8/data/levels/level30.pak

.zip

Castle Crashers v2.8/data/levels/level31.pak

.zip

Castle Crashers v2.8/data/levels/level32.pak

.zip

Castle Crashers v2.8/data/levels/level33.pak

.zip

Castle Crashers v2.8/data/levels/level34.pak

.zip

Castle Crashers v2.8/data/levels/level35.pak

.zip

Castle Crashers v2.8/data/levels/level36.pak

.zip

Castle Crashers v2.8/data/levels/level37.pak

.zip

Castle Crashers v2.8/data/levels/level38.pak

.zip

Castle Crashers v2.8/data/levels/level39.pak

.zip

Castle Crashers v2.8/data/levels/level4.pak

.zip

Castle Crashers v2.8/data/levels/level40.pak

.zip

Castle Crashers v2.8/data/levels/level41.pak

.zip

Castle Crashers v2.8/data/levels/level42.pak

.zip

Castle Crashers v2.8/data/levels/level43.pak

.zip

Castle Crashers v2.8/data/levels/level44.pak

.zip

Castle Crashers v2.8/data/levels/level45.pak

.zip

Castle Crashers v2.8/data/levels/level46.pak

.zip

Castle Crashers v2.8/data/levels/level47.pak

.zip

Castle Crashers v2.8/data/levels/level48.pak

.zip

Castle Crashers v2.8/data/levels/level49.pak

.zip

Castle Crashers v2.8/data/levels/level5.pak

.zip

Castle Crashers v2.8/data/levels/level50.pak

.zip

Castle Crashers v2.8/data/levels/level51.pak

.zip

Castle Crashers v2.8/data/levels/level53.pak

.zip

Castle Crashers v2.8/data/levels/level54.pak

.zip

Castle Crashers v2.8/data/levels/level55.pak

.zip

Castle Crashers v2.8/data/levels/level56.pak

.zip

Castle Crashers v2.8/data/levels/level57.pak

.zip

Castle Crashers v2.8/data/levels/level58.pak

.zip

Castle Crashers v2.8/data/levels/level59.pak

.zip

Castle Crashers v2.8/data/levels/level6.pak

.zip

Castle Crashers v2.8/data/levels/level60.pak

.zip

Castle Crashers v2.8/data/levels/level7.pak

.zip

Castle Crashers v2.8/data/levels/level8.pak

.zip

Castle Crashers v2.8/data/levels/level9.pak

.zip

Castle Crashers v2.8/data/music/006_FLOODED_CASTLE_INTRO.xma

Castle Crashers v2.8/data/music/007_FLOODED_CASTLE.xma

Castle Crashers v2.8/data/music/008_THE_RUINS.xma

Castle Crashers v2.8/data/music/011_SAND_CASTLE.xma

Castle Crashers v2.8/data/music/012_SAND.xma

Castle Crashers v2.8/data/music/013_ALIEN_SHIP.xma

Castle Crashers v2.8/data/music/015_CORN_BOSS.xma

Castle Crashers v2.8/data/music/017_BLACK_KNIGHT_INTRO.xma

Castle Crashers v2.8/data/music/018_BLACK_KNIGHT.xma

Castle Crashers v2.8/data/music/020_CREEPY_FROG.xma

Castle Crashers v2.8/data/music/DRUMLIFT.xma

Castle Crashers v2.8/data/music/DRUMLIFT_V2.xma

Castle Crashers v2.8/data/music/DavidOrr_FinalBoss.xma

Castle Crashers v2.8/data/music/FLUTEY.xma

Castle Crashers v2.8/data/music/INTRO.xma

Castle Crashers v2.8/data/music/MACHINER.xma

Castle Crashers v2.8/data/music/MEDUSA.xma

Castle Crashers v2.8/data/music/MUDHOLES.xma

Castle Crashers v2.8/data/music/NG105334.xma

Castle Crashers v2.8/data/music/NG112527.xma

Castle Crashers v2.8/data/music/NG117474.xma

Castle Crashers v2.8/data/music/NG120136.xma

Castle Crashers v2.8/data/music/NG123607.xma

Castle Crashers v2.8/data/music/NG21749.xma

Castle Crashers v2.8/data/music/NG36657.xma

Castle Crashers v2.8/data/music/NG37040.xma

Castle Crashers v2.8/data/music/NG57239.xma

Castle Crashers v2.8/data/music/NG64061.xma

Castle Crashers v2.8/data/music/NG70107.xma

Castle Crashers v2.8/data/music/NG86480.xma

Castle Crashers v2.8/data/music/NG90433.xma

Castle Crashers v2.8/data/music/NG90521.xma

Castle Crashers v2.8/data/music/NG90532.xma

Castle Crashers v2.8/data/music/NG91286.xma

Castle Crashers v2.8/data/music/WEAPONFROG.xma

Castle Crashers v2.8/data/music/Waterflame_Jumper.xma

Castle Crashers v2.8/data/music/Waterflame_RaceVictory.xma

Castle Crashers v2.8/data/music/Waterflame_Swamp.xma

Castle Crashers v2.8/data/music/Waterflame_TheShow.xma

Castle Crashers v2.8/data/music/backoffb1.xma

Castle Crashers v2.8/data/music/barrackssong.xma

Castle Crashers v2.8/data/music/goldgrab.xma

Castle Crashers v2.8/data/music/music_bob01.xma

Castle Crashers v2.8/data/music/trickyssong.xma

Castle Crashers v2.8/data/music/wedding1.xma

Castle Crashers v2.8/data/music/wedding2.xma

Castle Crashers v2.8/data/shaders/BlacknWhitePS.xpu

Castle Crashers v2.8/data/shaders/BloomPS.xpu

Castle Crashers v2.8/data/shaders/BlurPS.xpu

Castle Crashers v2.8/data/shaders/ExperimentPS.xpu

Castle Crashers v2.8/data/shaders/FontPS.xpu

Castle Crashers v2.8/data/shaders/GenericVS.xvu

Castle Crashers v2.8/data/shaders/GreyscalePS.xpu

Castle Crashers v2.8/data/shaders/HeatPS.xpu

Castle Crashers v2.8/data/shaders/InvertedPS.xpu

Castle Crashers v2.8/data/shaders/MaskPS.xpu

Castle Crashers v2.8/data/shaders/OutlinePS.xpu

Castle Crashers v2.8/data/shaders/OverlayVS.xvu

Castle Crashers v2.8/data/shaders/RasterHackPS.xpu

Castle Crashers v2.8/data/shaders/SobelEdgePS.xpu

Castle Crashers v2.8/data/shaders/SpritePS.xpu

Castle Crashers v2.8/data/shaders/VertexColorFillPS.xpu

Castle Crashers v2.8/data/shaders/WaterPS.xpu

Castle Crashers v2.8/data/sounds/sound_alarm.xma

Castle Crashers v2.8/data/sounds/sound_alarm2.xma

Castle Crashers v2.8/data/sounds/sound_alienshoot1.xma

Castle Crashers v2.8/data/sounds/sound_alienshoot2.xma

Castle Crashers v2.8/data/sounds/sound_animalstep1.xma

Castle Crashers v2.8/data/sounds/sound_animalstep2.xma

Castle Crashers v2.8/data/sounds/sound_antliondie.xma

Castle Crashers v2.8/data/sounds/sound_area_barb.xma

Castle Crashers v2.8/data/sounds/sound_area_barb1.xma

Castle Crashers v2.8/data/sounds/sound_area_barb2.xma

Castle Crashers v2.8/data/sounds/sound_area_barb3.xma

Castle Crashers v2.8/data/sounds/sound_area_barb4.xma

Castle Crashers v2.8/data/sounds/sound_area_dark.xma

Castle Crashers v2.8/data/sounds/sound_area_earth.xma

Castle Crashers v2.8/data/sounds/sound_area_fire.xma

Castle Crashers v2.8/data/sounds/sound_area_ice.xma

Castle Crashers v2.8/data/sounds/sound_area_king.xma

Castle Crashers v2.8/data/sounds/sound_area_lightning.xma

Castle Crashers v2.8/data/sounds/sound_area_necro.xma

Castle Crashers v2.8/data/sounds/sound_area_ninja.xma

Castle Crashers v2.8/data/sounds/sound_area_poison.xma

Castle Crashers v2.8/data/sounds/sound_area_sawblade.xma

Castle Crashers v2.8/data/sounds/sound_area_thief.xma

Castle Crashers v2.8/data/sounds/sound_area_wind.xma

Castle Crashers v2.8/data/sounds/sound_arrowhit.xma

Castle Crashers v2.8/data/sounds/sound_arrowhit1.xma

Castle Crashers v2.8/data/sounds/sound_arrowhit2.xma

Castle Crashers v2.8/data/sounds/sound_arrowhit3.xma

Castle Crashers v2.8/data/sounds/sound_arrowhit4.xma

Castle Crashers v2.8/data/sounds/sound_arrowshoot.xma

Castle Crashers v2.8/data/sounds/sound_arrowshot.xma

Castle Crashers v2.8/data/sounds/sound_batattack1.xma

Castle Crashers v2.8/data/sounds/sound_batattack2.xma

Castle Crashers v2.8/data/sounds/sound_batdeath2.xma

Castle Crashers v2.8/data/sounds/sound_batdeath3.xma

Castle Crashers v2.8/data/sounds/sound_batflap.xma

Castle Crashers v2.8/data/sounds/sound_batflapper.xma

Castle Crashers v2.8/data/sounds/sound_bats.xma

Castle Crashers v2.8/data/sounds/sound_batslurp.xma

Castle Crashers v2.8/data/sounds/sound_bee.xma

Castle Crashers v2.8/data/sounds/sound_bee_impact.xma

Castle Crashers v2.8/data/sounds/sound_beefydoorgrab.xma

Castle Crashers v2.8/data/sounds/sound_beefydoorrip.xma

Castle Crashers v2.8/data/sounds/sound_beefyscream.xma

Castle Crashers v2.8/data/sounds/sound_beefystep1.xma

Castle Crashers v2.8/data/sounds/sound_beefystep2.xma

Castle Crashers v2.8/data/sounds/sound_beetledie.xma

Castle Crashers v2.8/data/sounds/sound_beetledig.xma

Castle Crashers v2.8/data/sounds/sound_beetlefly.xma

Castle Crashers v2.8/data/sounds/sound_beetlelift.xma

Castle Crashers v2.8/data/sounds/sound_beetleroll.xma

Castle Crashers v2.8/data/sounds/sound_bigexplosion1.xma

Castle Crashers v2.8/data/sounds/sound_bigexplosion2.xma

Castle Crashers v2.8/data/sounds/sound_bigufo.xma

Castle Crashers v2.8/data/sounds/sound_blacksmith.xma

Castle Crashers v2.8/data/sounds/sound_bloopy_gurgle.xma

Castle Crashers v2.8/data/sounds/sound_bloopy_turn.xma

Castle Crashers v2.8/data/sounds/sound_bob_barbarian_spawn.xma

Castle Crashers v2.8/data/sounds/sound_bob_die.xma

Castle Crashers v2.8/data/sounds/sound_bob_move01.xma

Castle Crashers v2.8/data/sounds/sound_bob_move02.xma

Castle Crashers v2.8/data/sounds/sound_bob_move03.xma

Castle Crashers v2.8/data/sounds/sound_bob_move04.xma

Castle Crashers v2.8/data/sounds/sound_bob_move05.xma

Castle Crashers v2.8/data/sounds/sound_bob_move06.xma

Castle Crashers v2.8/data/sounds/sound_bob_move07.xma

Castle Crashers v2.8/data/sounds/sound_bob_move08.xma

Castle Crashers v2.8/data/sounds/sound_bob_potion.xma

Castle Crashers v2.8/data/sounds/sound_bodyfall1.xma

Castle Crashers v2.8/data/sounds/sound_bodyfall2.xma

Castle Crashers v2.8/data/sounds/sound_bodyfall3.xma

Castle Crashers v2.8/data/sounds/sound_bodyfall4.xma

Castle Crashers v2.8/data/sounds/sound_bodyfall5.xma

Castle Crashers v2.8/data/sounds/sound_bodyfall6.xma

Castle Crashers v2.8/data/sounds/sound_bone.xma

Castle Crashers v2.8/data/sounds/sound_boneexplode.xma

Castle Crashers v2.8/data/sounds/sound_bonus2.xma

Castle Crashers v2.8/data/sounds/sound_bubble1.xma

Castle Crashers v2.8/data/sounds/sound_bubble2.xma

Castle Crashers v2.8/data/sounds/sound_bubble3.xma

Castle Crashers v2.8/data/sounds/sound_bubble4.xma

Castle Crashers v2.8/data/sounds/sound_bubble5.xma

Castle Crashers v2.8/data/sounds/sound_castlelift.xma

Castle Crashers v2.8/data/sounds/sound_catburp.xma

Castle Crashers v2.8/data/sounds/sound_catdie.xma

Castle Crashers v2.8/data/sounds/sound_catgrowl.xma

Castle Crashers v2.8/data/sounds/sound_cathairball.xma

Castle Crashers v2.8/data/sounds/sound_cavedrip.xma

Castle Crashers v2.8/data/sounds/sound_characterunlock.xma

Castle Crashers v2.8/data/sounds/sound_chestland.xma

Castle Crashers v2.8/data/sounds/sound_clang1.xma

Castle Crashers v2.8/data/sounds/sound_clang2.xma

Castle Crashers v2.8/data/sounds/sound_clang3.xma

Castle Crashers v2.8/data/sounds/sound_clang4.xma

Castle Crashers v2.8/data/sounds/sound_clang5.xma

Castle Crashers v2.8/data/sounds/sound_clang6.xma

Castle Crashers v2.8/data/sounds/sound_clang7.xma

Castle Crashers v2.8/data/sounds/sound_clang8.xma

Castle Crashers v2.8/data/sounds/sound_cling1.xma

Castle Crashers v2.8/data/sounds/sound_cling2.xma

Castle Crashers v2.8/data/sounds/sound_cling3.xma

Castle Crashers v2.8/data/sounds/sound_cling4.xma

Castle Crashers v2.8/data/sounds/sound_cling5.xma

Castle Crashers v2.8/data/sounds/sound_cling6.xma

Castle Crashers v2.8/data/sounds/sound_cling7.xma

Castle Crashers v2.8/data/sounds/sound_cling8.xma

Castle Crashers v2.8/data/sounds/sound_clock.xma

Castle Crashers v2.8/data/sounds/sound_clownhorn.xma

Castle Crashers v2.8/data/sounds/sound_coffin_open.xma

Castle Crashers v2.8/data/sounds/sound_coffinshut.xma

Castle Crashers v2.8/data/sounds/sound_coin1.xma

Castle Crashers v2.8/data/sounds/sound_coin2.xma

Castle Crashers v2.8/data/sounds/sound_corn_die.xma

Castle Crashers v2.8/data/sounds/sound_cornbag.xma

Castle Crashers v2.8/data/sounds/sound_cornroar.xma

Castle Crashers v2.8/data/sounds/sound_cornwhip.xma

Castle Crashers v2.8/data/sounds/sound_countdown_pulse.xma

Castle Crashers v2.8/data/sounds/sound_crow.xma

Castle Crashers v2.8/data/sounds/sound_crowflap.xma

Castle Crashers v2.8/data/sounds/sound_cryptslide.xma

Castle Crashers v2.8/data/sounds/sound_cutgrass.xma

Castle Crashers v2.8/data/sounds/sound_cyclopscry.xma

Castle Crashers v2.8/data/sounds/sound_cyclopsdie.xma

Castle Crashers v2.8/data/sounds/sound_cyclopsflush.xma

Castle Crashers v2.8/data/sounds/sound_cyclopsgasp.xma

Castle Crashers v2.8/data/sounds/sound_cyclopshit.xma

Castle Crashers v2.8/data/sounds/sound_cyclopsknife.xma

Castle Crashers v2.8/data/sounds/sound_cyclopslavadie.xma

Castle Crashers v2.8/data/sounds/sound_cyclopsscream.xma

Castle Crashers v2.8/data/sounds/sound_cyclopsskid.xma

Castle Crashers v2.8/data/sounds/sound_cyclopssplash.xma

Castle Crashers v2.8/data/sounds/sound_cyclopsstep3.xma

Castle Crashers v2.8/data/sounds/sound_cyclopsstep4.xma

Castle Crashers v2.8/data/sounds/sound_cyclopsthrowknife.xma

Castle Crashers v2.8/data/sounds/sound_darkfly.xma

Castle Crashers v2.8/data/sounds/sound_darkforce.xma

Castle Crashers v2.8/data/sounds/sound_darkjet.xma

Castle Crashers v2.8/data/sounds/sound_darkmagic1.xma

Castle Crashers v2.8/data/sounds/sound_dead_puff.xma

Castle Crashers v2.8/data/sounds/sound_deerjump.xma

Castle Crashers v2.8/data/sounds/sound_dragonblast.xma

Castle Crashers v2.8/data/sounds/sound_dragonloop.xma

Castle Crashers v2.8/data/sounds/sound_dramatic.xma

Castle Crashers v2.8/data/sounds/sound_dramatic2.xma

Castle Crashers v2.8/data/sounds/sound_eat.xma

Castle Crashers v2.8/data/sounds/sound_eat1.xma

Castle Crashers v2.8/data/sounds/sound_elevator1.xma

Castle Crashers v2.8/data/sounds/sound_elevator2.xma

Castle Crashers v2.8/data/sounds/sound_elevator3.xma

Castle Crashers v2.8/data/sounds/sound_elevatorend.xma

Castle Crashers v2.8/data/sounds/sound_elevatorloop.xma

Castle Crashers v2.8/data/sounds/sound_elevatorstart.xma

Castle Crashers v2.8/data/sounds/sound_emotoad_attack1.xma

Castle Crashers v2.8/data/sounds/sound_emotoad_attack2.xma

Castle Crashers v2.8/data/sounds/sound_emotoad_attack3.xma

Castle Crashers v2.8/data/sounds/sound_emotoad_blah1.xma

Castle Crashers v2.8/data/sounds/sound_emotoad_blah2.xma

Castle Crashers v2.8/data/sounds/sound_emotoad_die1.xma

Castle Crashers v2.8/data/sounds/sound_emotoad_die2.xma

Castle Crashers v2.8/data/sounds/sound_explosion_1.xma

Castle Crashers v2.8/data/sounds/sound_explosion_3.xma

Castle Crashers v2.8/data/sounds/sound_explosionfar.xma

Castle Crashers v2.8/data/sounds/sound_fart1.xma

Castle Crashers v2.8/data/sounds/sound_fart2.xma

Castle Crashers v2.8/data/sounds/sound_fireblast.xma

Castle Crashers v2.8/data/sounds/sound_firehit.xma

Castle Crashers v2.8/data/sounds/sound_fireloop.xma

Castle Crashers v2.8/data/sounds/sound_firemagic.xma

Castle Crashers v2.8/data/sounds/sound_fishbubble.xma

Castle Crashers v2.8/data/sounds/sound_fishpuff.xma

Castle Crashers v2.8/data/sounds/sound_frost_crackle.xma

Castle Crashers v2.8/data/sounds/sound_frost_crunch.xma

Castle Crashers v2.8/data/sounds/sound_frost_die.xma

Castle Crashers v2.8/data/sounds/sound_frost_ice.xma

Castle Crashers v2.8/data/sounds/sound_frost_icepop.xma

Castle Crashers v2.8/data/sounds/sound_frost_laugh.xma

Castle Crashers v2.8/data/sounds/sound_frost_orb.xma

Castle Crashers v2.8/data/sounds/sound_frost_orbcharge.xma

Castle Crashers v2.8/data/sounds/sound_frost_warpin.xma

Castle Crashers v2.8/data/sounds/sound_frost_warpout.xma

Castle Crashers v2.8/data/sounds/sound_frost_woo.xma

Castle Crashers v2.8/data/sounds/sound_gatorchomp.xma

Castle Crashers v2.8/data/sounds/sound_gemappear.xma

Castle Crashers v2.8/data/sounds/sound_gemblink.xma

Castle Crashers v2.8/data/sounds/sound_gemdie.xma

Castle Crashers v2.8/data/sounds/sound_gemhitground.xma

Castle Crashers v2.8/data/sounds/sound_gemlight1.xma

Castle Crashers v2.8/data/sounds/sound_gemlight2.xma

Castle Crashers v2.8/data/sounds/sound_gemrush.xma

Castle Crashers v2.8/data/sounds/sound_gemshatter.xma

Castle Crashers v2.8/data/sounds/sound_gemspin.xma

Castle Crashers v2.8/data/sounds/sound_glass1.xma

Castle Crashers v2.8/data/sounds/sound_glass2.xma

Castle Crashers v2.8/data/sounds/sound_hatchslide.xma

Castle Crashers v2.8/data/sounds/sound_hatty_jump_magic.xma

Castle Crashers v2.8/data/sounds/sound_hatty_projectile_magic1.xma

Castle Crashers v2.8/data/sounds/sound_hatty_projectile_magic2.xma

Castle Crashers v2.8/data/sounds/sound_hatty_projectile_magic2_impact.xma

Castle Crashers v2.8/data/sounds/sound_hatty_splash_magic.xma

Castle Crashers v2.8/data/sounds/sound_heartbeat.xma

Castle Crashers v2.8/data/sounds/sound_horn1.xma

Castle Crashers v2.8/data/sounds/sound_horn2.xma

Castle Crashers v2.8/data/sounds/sound_horn3.xma

Castle Crashers v2.8/data/sounds/sound_horn4.xma

Castle Crashers v2.8/data/sounds/sound_horndoor.xma

Castle Crashers v2.8/data/sounds/sound_horndoorend.xma

Castle Crashers v2.8/data/sounds/sound_horses.xma

Castle Crashers v2.8/data/sounds/sound_iking_cocky.xma

Castle Crashers v2.8/data/sounds/sound_iking_ha1.xma

Castle Crashers v2.8/data/sounds/sound_iking_nyah.xma

Castle Crashers v2.8/data/sounds/sound_iking_panic.xma

Castle Crashers v2.8/data/sounds/sound_iking_panic2.xma

Castle Crashers v2.8/data/sounds/sound_ikingboss_devious.xma

Castle Crashers v2.8/data/sounds/sound_ikingboss_die.xma

Castle Crashers v2.8/data/sounds/sound_ikingboss_haha.xma

Castle Crashers v2.8/data/sounds/sound_ikingboss_intro.xma

Castle Crashers v2.8/data/sounds/sound_ikingboss_panic.xma

Castle Crashers v2.8/data/sounds/sound_imp_growl.xma

Castle Crashers v2.8/data/sounds/sound_imp_laugh.xma

Castle Crashers v2.8/data/sounds/sound_imp_panic.xma

Castle Crashers v2.8/data/sounds/sound_intro_controller.xma

Castle Crashers v2.8/data/sounds/sound_jump_barb.xma

Castle Crashers v2.8/data/sounds/sound_jump_dark.xma

Castle Crashers v2.8/data/sounds/sound_jump_earth.xma

Castle Crashers v2.8/data/sounds/sound_jump_fire.xma

Castle Crashers v2.8/data/sounds/sound_jump_ice.xma

Castle Crashers v2.8/data/sounds/sound_jump_industrial.xma

Castle Crashers v2.8/data/sounds/sound_jump_king.xma

Castle Crashers v2.8/data/sounds/sound_jump_lightning.xma

Castle Crashers v2.8/data/sounds/sound_jump_necro.xma

Castle Crashers v2.8/data/sounds/sound_jump_ninja.xma

Castle Crashers v2.8/data/sounds/sound_jump_poison.xma

Castle Crashers v2.8/data/sounds/sound_jump_saracen.xma

Castle Crashers v2.8/data/sounds/sound_jump_thief.xma

Castle Crashers v2.8/data/sounds/sound_jump_wind.xma

Castle Crashers v2.8/data/sounds/sound_lasergate.xma

Castle Crashers v2.8/data/sounds/sound_lavawall.xma

Castle Crashers v2.8/data/sounds/sound_levelup.xma

Castle Crashers v2.8/data/sounds/sound_lunchbox1.xma

Castle Crashers v2.8/data/sounds/sound_lunchbox2.xma

Castle Crashers v2.8/data/sounds/sound_lunchbox3.xma

Castle Crashers v2.8/data/sounds/sound_lunchbox4.xma

Castle Crashers v2.8/data/sounds/sound_lunchbox5.xma

Castle Crashers v2.8/data/sounds/sound_lunchbox6.xma

Castle Crashers v2.8/data/sounds/sound_lunchbox7.xma

Castle Crashers v2.8/data/sounds/sound_lunchbox8.xma

Castle Crashers v2.8/data/sounds/sound_lunchbox_drop.xma

Castle Crashers v2.8/data/sounds/sound_magic_barb.xma

Castle Crashers v2.8/data/sounds/sound_magic_bee.xma

Castle Crashers v2.8/data/sounds/sound_magic_dark.xma

Castle Crashers v2.8/data/sounds/sound_magic_earth.xma

Castle Crashers v2.8/data/sounds/sound_magic_fire.xma

Castle Crashers v2.8/data/sounds/sound_magic_ice.xma

Castle Crashers v2.8/data/sounds/sound_magic_king.xma

Castle Crashers v2.8/data/sounds/sound_magic_lightning.xma

Castle Crashers v2.8/data/sounds/sound_magic_necro.xma

Castle Crashers v2.8/data/sounds/sound_magic_ninja.xma

Castle Crashers v2.8/data/sounds/sound_magic_poison.xma

Castle Crashers v2.8/data/sounds/sound_magic_poison_hit.xma

Castle Crashers v2.8/data/sounds/sound_magic_saracen.xma

Castle Crashers v2.8/data/sounds/sound_magic_sawblade.xma

Castle Crashers v2.8/data/sounds/sound_magic_thief.xma

Castle Crashers v2.8/data/sounds/sound_magic_wind.xma

Castle Crashers v2.8/data/sounds/sound_magicboom5.xma

Castle Crashers v2.8/data/sounds/sound_magicboom6.xma

Castle Crashers v2.8/data/sounds/sound_magicwall.xma

Castle Crashers v2.8/data/sounds/sound_meatypunch4.xma

Castle Crashers v2.8/data/sounds/sound_meatypunch5.xma

Castle Crashers v2.8/data/sounds/sound_meatypunch6.xma

Castle Crashers v2.8/data/sounds/sound_meatypunch7.xma

Castle Crashers v2.8/data/sounds/sound_meatypunch8.xma

Castle Crashers v2.8/data/sounds/sound_meatypunch9.xma

Castle Crashers v2.8/data/sounds/sound_medusa_gasp.xma

Castle Crashers v2.8/data/sounds/sound_medusa_sing.xma

Castle Crashers v2.8/data/sounds/sound_medusabrush1.xma

Castle Crashers v2.8/data/sounds/sound_medusabrush2.xma

Castle Crashers v2.8/data/sounds/sound_medusadie.xma

Castle Crashers v2.8/data/sounds/sound_medusagaze2.xma

Castle Crashers v2.8/data/sounds/sound_medusagaze5.xma

Castle Crashers v2.8/data/sounds/sound_medusahit1.xma

Castle Crashers v2.8/data/sounds/sound_medusahit3.xma

Castle Crashers v2.8/data/sounds/sound_medusapunch.xma

Castle Crashers v2.8/data/sounds/sound_medusastare.xma

Castle Crashers v2.8/data/sounds/sound_medusayell.xma

Castle Crashers v2.8/data/sounds/sound_millmonster.xma

Castle Crashers v2.8/data/sounds/sound_millmonster2.xma

Castle Crashers v2.8/data/sounds/sound_minivolcano.xma

Castle Crashers v2.8/data/sounds/sound_minivolcanodie.xma

Castle Crashers v2.8/data/sounds/sound_minivolcanohit.xma

Castle Crashers v2.8/data/sounds/sound_necro_die.xma

Castle Crashers v2.8/data/sounds/sound_necrowingdown.xma

Castle Crashers v2.8/data/sounds/sound_necrowingup.xma

Castle Crashers v2.8/data/sounds/sound_necrozap.xma

Castle Crashers v2.8/data/sounds/sound_normalexplosion1.xma

Castle Crashers v2.8/data/sounds/sound_normalexplosion2.xma

Castle Crashers v2.8/data/sounds/sound_normalexplosion3.xma

Castle Crashers v2.8/data/sounds/sound_organ1.xma

Castle Crashers v2.8/data/sounds/sound_organ2.xma

Castle Crashers v2.8/data/sounds/sound_organ3.xma

Castle Crashers v2.8/data/sounds/sound_organ4.xma

Castle Crashers v2.8/data/sounds/sound_organ5.xma

Castle Crashers v2.8/data/sounds/sound_organ6.xma

Castle Crashers v2.8/data/sounds/sound_organ7.xma

Castle Crashers v2.8/data/sounds/sound_organ8.xma

Castle Crashers v2.8/data/sounds/sound_organdead1.xma

Castle Crashers v2.8/data/sounds/sound_organdead2.xma

Castle Crashers v2.8/data/sounds/sound_organdead3.xma

Castle Crashers v2.8/data/sounds/sound_organdead4.xma

Castle Crashers v2.8/data/sounds/sound_paintcrazy.xma

Castle Crashers v2.8/data/sounds/sound_paintstroke.xma

Castle Crashers v2.8/data/sounds/sound_photon.xma

Castle Crashers v2.8/data/sounds/sound_photonhit.xma

Castle Crashers v2.8/data/sounds/sound_pig1.xma

Castle Crashers v2.8/data/sounds/sound_pig2.xma

Castle Crashers v2.8/data/sounds/sound_pink_knight_jump_magic.xma

Castle Crashers v2.8/data/sounds/sound_pink_knight_projectile_magic.xma

Castle Crashers v2.8/data/sounds/sound_pink_knight_splash_magic.xma

Castle Crashers v2.8/data/sounds/sound_player_select.xma

Castle Crashers v2.8/data/sounds/sound_pnk_knight_proj_mag_impact.xma

Castle Crashers v2.8/data/sounds/sound_popcorn.xma

Castle Crashers v2.8/data/sounds/sound_princess_gasp.xma

Castle Crashers v2.8/data/sounds/sound_princess_help1.xma

Castle Crashers v2.8/data/sounds/sound_princess_help2.xma

Castle Crashers v2.8/data/sounds/sound_princess_helpme1.xma

Castle Crashers v2.8/data/sounds/sound_princess_helpme2.xma

Castle Crashers v2.8/data/sounds/sound_princess_scream1.xma

Castle Crashers v2.8/data/sounds/sound_princess_scream2.xma

Castle Crashers v2.8/data/sounds/sound_princess_scream3.xma

Castle Crashers v2.8/data/sounds/sound_puke.xma

Castle Crashers v2.8/data/sounds/sound_purchase.xma

Castle Crashers v2.8/data/sounds/sound_purple_knight_jump_magic.xma

Castle Crashers v2.8/data/sounds/sound_purple_knight_projectile_magic.xma

Castle Crashers v2.8/data/sounds/sound_purple_knight_splash_magic.xma

Castle Crashers v2.8/data/sounds/sound_quaff_bell.xma

Castle Crashers v2.8/data/sounds/sound_quaff_count.xma

Castle Crashers v2.8/data/sounds/sound_quaff_eat1.xma

Castle Crashers v2.8/data/sounds/sound_quaff_eat2.xma

Castle Crashers v2.8/data/sounds/sound_quaff_eat3.xma

Castle Crashers v2.8/data/sounds/sound_quaff_eat4.xma

Castle Crashers v2.8/data/sounds/sound_quaff_go.xma

Castle Crashers v2.8/data/sounds/sound_quaff_plate1.xma

Castle Crashers v2.8/data/sounds/sound_quaff_plate2.xma

Castle Crashers v2.8/data/sounds/sound_quaff_plate3.xma

Castle Crashers v2.8/data/sounds/sound_quaff_plate4.xma

Castle Crashers v2.8/data/sounds/sound_quaff_win.xma

Castle Crashers v2.8/data/sounds/sound_roar2.xma

Castle Crashers v2.8/data/sounds/sound_rocksmash1.xma

Castle Crashers v2.8/data/sounds/sound_rocksmash2.xma

Castle Crashers v2.8/data/sounds/sound_scoretally.xma

Castle Crashers v2.8/data/sounds/sound_scorpiondie.xma

Castle Crashers v2.8/data/sounds/sound_screen.xma

Castle Crashers v2.8/data/sounds/sound_shield1.xma

Castle Crashers v2.8/data/sounds/sound_shield2.xma

Castle Crashers v2.8/data/sounds/sound_shield3.xma

Castle Crashers v2.8/data/sounds/sound_shield4.xma

Castle Crashers v2.8/data/sounds/sound_skeletonrise.xma

Castle Crashers v2.8/data/sounds/sound_slime_hit1.xma

Castle Crashers v2.8/data/sounds/sound_slime_hit2.xma

Castle Crashers v2.8/data/sounds/sound_slime_hit3.xma

Castle Crashers v2.8/data/sounds/sound_slime_jump1.xma

Castle Crashers v2.8/data/sounds/sound_slime_jump2.xma

Castle Crashers v2.8/data/sounds/sound_slime_jump3.xma

Castle Crashers v2.8/data/sounds/sound_slimeface.xma

Castle Crashers v2.8/data/sounds/sound_slimeland.xma

Castle Crashers v2.8/data/sounds/sound_spiderclicks.xma

Castle Crashers v2.8/data/sounds/sound_spikes.xma

Castle Crashers v2.8/data/sounds/sound_splash1.xma

Castle Crashers v2.8/data/sounds/sound_splash2.xma

Castle Crashers v2.8/data/sounds/sound_splashout.xma

Castle Crashers v2.8/data/sounds/sound_steam.xma

Castle Crashers v2.8/data/sounds/sound_storm.xma

Castle Crashers v2.8/data/sounds/sound_swinger1.xma

Castle Crashers v2.8/data/sounds/sound_swinger2.xma

Castle Crashers v2.8/data/sounds/sound_swinger3.xma

Castle Crashers v2.8/data/sounds/sound_swinger4.xma

Castle Crashers v2.8/data/sounds/sound_swinger5.xma

Castle Crashers v2.8/data/sounds/sound_swinger6.xma

Castle Crashers v2.8/data/sounds/sound_thronecry.xma

Castle Crashers v2.8/data/sounds/sound_thunder.xma

Castle Crashers v2.8/data/sounds/sound_thunderp.xma

Castle Crashers v2.8/data/sounds/sound_timerclick.xma

Castle Crashers v2.8/data/sounds/sound_toggle_b.xma

Castle Crashers v2.8/data/sounds/sound_tornadoloop.xma

Castle Crashers v2.8/data/sounds/sound_treerustle.xma

Castle Crashers v2.8/data/sounds/sound_trollbirth.xma

Castle Crashers v2.8/data/sounds/sound_trolldie.xma

Castle Crashers v2.8/data/sounds/sound_trolllazer.xma

Castle Crashers v2.8/data/sounds/sound_twirl.xma

Castle Crashers v2.8/data/sounds/sound_ufoengine.xma

Castle Crashers v2.8/data/sounds/sound_ufofly.xma

Castle Crashers v2.8/data/sounds/sound_ufointro.xma

Castle Crashers v2.8/data/sounds/sound_undeadintro.xma

Castle Crashers v2.8/data/sounds/sound_volleyball.xma

Castle Crashers v2.8/data/sounds/sound_volleyfail.xma

Castle Crashers v2.8/data/sounds/sound_wind.xma

Castle Crashers v2.8/data/sounds/sound_wizard_die.xma

Castle Crashers v2.8/data/sounds/sound_wizard_fall.xma

Castle Crashers v2.8/data/sounds/sound_wizard_sword.xma

Castle Crashers v2.8/data/sounds/sound_zap.xma

Castle Crashers v2.8/directx/APR2007_XACT_x64.cab

.cab .ps1 polyglot

Castle Crashers v2.8/directx/APR2007_XACT_x86.cab

.cab

Castle Crashers v2.8/directx/APR2007_d3dx10_33_x64.cab

.cab

Castle Crashers v2.8/directx/APR2007_d3dx10_33_x86.cab

.cab

Castle Crashers v2.8/directx/APR2007_d3dx9_33_x64.cab

.cab

Castle Crashers v2.8/directx/APR2007_d3dx9_33_x86.cab

.cab

Castle Crashers v2.8/directx/APR2007_xinput_x64.cab

.cab

Castle Crashers v2.8/directx/APR2007_xinput_x86.cab

.cab

Castle Crashers v2.8/directx/AUG2006_XACT_x64.cab

.cab

Castle Crashers v2.8/directx/AUG2006_XACT_x86.cab

.cab

Castle Crashers v2.8/directx/AUG2006_xinput_x64.cab

.cab

Castle Crashers v2.8/directx/AUG2006_xinput_x86.cab

.cab

Castle Crashers v2.8/directx/AUG2007_XACT_x64.cab

.cab

Castle Crashers v2.8/directx/AUG2007_XACT_x86.cab

.cab

Castle Crashers v2.8/directx/AUG2007_d3dx10_35_x64.cab

.cab

Castle Crashers v2.8/directx/AUG2007_d3dx10_35_x86.cab

.cab

Castle Crashers v2.8/directx/AUG2007_d3dx9_35_x64.cab

.cab

Castle Crashers v2.8/directx/AUG2007_d3dx9_35_x86.cab

.cab

Castle Crashers v2.8/directx/Apr2005_d3dx9_25_x64.cab

.cab

Castle Crashers v2.8/directx/Apr2005_d3dx9_25_x86.cab

.cab

Castle Crashers v2.8/directx/Apr2006_MDX1_x86.cab

.cab

Castle Crashers v2.8/directx/Apr2006_MDX1_x86_Archive.cab

.cab

Castle Crashers v2.8/directx/Apr2006_XACT_x64.cab

.cab

Castle Crashers v2.8/directx/Apr2006_XACT_x86.cab

.cab

Castle Crashers v2.8/directx/Apr2006_d3dx9_30_x64.cab

.cab

Castle Crashers v2.8/directx/Apr2006_d3dx9_30_x86.cab

.cab

Castle Crashers v2.8/directx/Apr2006_xinput_x64.cab

.cab

Castle Crashers v2.8/directx/Apr2006_xinput_x86.cab

.cab

Castle Crashers v2.8/directx/Aug2005_d3dx9_27_x64.cab

.cab

Castle Crashers v2.8/directx/Aug2005_d3dx9_27_x86.cab

.cab

Castle Crashers v2.8/directx/Aug2008_XACT_x64.cab

.cab

Castle Crashers v2.8/directx/Aug2008_XACT_x86.cab

.cab

Castle Crashers v2.8/directx/Aug2008_XAudio_x64.cab

.cab

Castle Crashers v2.8/directx/Aug2008_XAudio_x86.cab

.cab

Castle Crashers v2.8/directx/Aug2008_d3dx10_39_x64.cab

.cab

Castle Crashers v2.8/directx/Aug2008_d3dx10_39_x86.cab

.cab

Castle Crashers v2.8/directx/Aug2008_d3dx9_39_x64.cab

.cab

Castle Crashers v2.8/directx/Aug2008_d3dx9_39_x86.cab

.cab

Castle Crashers v2.8/directx/Aug2009_D3DCompiler_42_x64.cab

.cab

Castle Crashers v2.8/directx/Aug2009_D3DCompiler_42_x86.cab

.cab

Castle Crashers v2.8/directx/Aug2009_XACT_x64.cab

.cab

Castle Crashers v2.8/directx/Aug2009_XACT_x86.cab

.cab

Castle Crashers v2.8/directx/Aug2009_XAudio_x64.cab

.cab

Castle Crashers v2.8/directx/Aug2009_XAudio_x86.cab

.cab

Castle Crashers v2.8/directx/Aug2009_d3dcsx_42_x64.cab

.cab

Castle Crashers v2.8/directx/Aug2009_d3dcsx_42_x86.cab

.cab

Castle Crashers v2.8/directx/Aug2009_d3dx10_42_x64.cab

.cab

Castle Crashers v2.8/directx/Aug2009_d3dx10_42_x86.cab

.cab

Castle Crashers v2.8/directx/Aug2009_d3dx11_42_x64.cab

.cab

Castle Crashers v2.8/directx/Aug2009_d3dx11_42_x86.cab

.cab

Castle Crashers v2.8/directx/Aug2009_d3dx9_42_x64.cab

.cab

Castle Crashers v2.8/directx/Aug2009_d3dx9_42_x86.cab

.cab

Castle Crashers v2.8/directx/BDANT.cab

.cab

Castle Crashers v2.8/directx/BDAXP.cab

.cab

Castle Crashers v2.8/directx/DEC2006_XACT_x64.cab

.cab

Castle Crashers v2.8/directx/DEC2006_XACT_x86.cab

.cab

Castle Crashers v2.8/directx/DEC2006_d3dx10_00_x64.cab

.cab

Castle Crashers v2.8/directx/DEC2006_d3dx10_00_x86.cab

.cab

Castle Crashers v2.8/directx/DEC2006_d3dx9_32_x64.cab

.cab

Castle Crashers v2.8/directx/DEC2006_d3dx9_32_x86.cab

.cab

Castle Crashers v2.8/directx/DSETUP.dll

.dll windows:6 windows x86 arch:x86

5ee93a27b334994f92812e79a2fb75bd

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:01:cf:3e:00:00:00:00:00:0f
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/12/2009, 22:40

Not After

07/03/2011, 22:40

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:05:a2:30:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:01

Not After

25/07/2013, 19:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageContentCommitment

e7:2c:0e:bb:86:1f:cb:57:4e:97:97:44:28:c3:0a:2d:07:1d:2d:27
Signer

Actual PE Digest

e7:2c:0e:bb:86:1f:cb:57:4e:97:97:44:28:c3:0a:2d:07:1d:2d:27

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

PDB Paths

DSETUP.pdb

Imports

kernel32

LocalFree

LocalAlloc

lstrcmpA

WideCharToMultiByte

GetSystemDefaultLCID

GetModuleFileNameA

SetLastError

MultiByteToWideChar

lstrlenA

lstrlenW

CompareStringA

CreateDirectoryA

GetWindowsDirectoryA

FormatMessageA

GetCurrentThreadId

DecodePointer

GetCommandLineA

HeapFree

HeapAlloc

HeapReAlloc

GetLocalTime

EncodePointer

TlsAlloc

TlsGetValue

TlsSetValue

TlsFree

InterlockedIncrement

GetModuleHandleW

InterlockedDecrement

Sleep

ExitProcess

SetHandleCount

GetStdHandle

InitializeCriticalSectionAndSpinCount

GetFileType

GetStartupInfoW

DeleteCriticalSection

FreeEnvironmentStringsW

GetEnvironmentStringsW

GetCurrentDirectoryA

HeapDestroy

QueryPerformanceCounter

GetTickCount

GetCurrentProcessId

GetSystemTimeAsFileTime

UnhandledExceptionFilter

SetUnhandledExceptionFilter

IsDebuggerPresent

TerminateProcess

GetCurrentProcess

IsProcessorFeaturePresent

WriteFile

GetModuleFileNameW

EnterCriticalSection

LeaveCriticalSection

RtlUnwind

GetCPInfo

GetACP

GetOEMCP

IsValidCodePage

LoadLibraryW

SetFilePointer

GetConsoleCP

GetConsoleMode

SetStdHandle

FlushFileBuffers

CreateFileA

LCMapStringW

GetStringTypeW

HeapSize

WriteConsoleW

SetEndOfFile

GetProcessHeap

ReadFile

CreateFileW

GetSystemDirectoryA

SetCurrentDirectoryA

GetVersionExA

LoadLibraryA

GetProcAddress

OutputDebugStringA

CreateMutexA

GetLastError

CloseHandle

HeapCreate

FreeLibrary

user32

GetKeyboardType

DestroyWindow

SetFocus

CreateDialogParamA

SetDlgItemTextA

MessageBoxA

PeekMessageA

GetMessageA

TranslateMessage

DispatchMessageA

advapi32

RegCloseKey

RegOpenKeyExA

RegDeleteKeyA

RegEnumKeyExA

RegQueryInfoKeyA

RegSetValueExA

RegCreateKeyExA

RegSetValueExW

RegCreateKeyExW

RegQueryValueExA

winmm

mmioRead

mmioDescend

mmioClose

mmioOpenA

version

VerQueryValueA

GetFileVersionInfoSizeA

GetFileVersionInfoA

ole32

StringFromGUID2

Exports

DirectXDeviceDriverSetupA

DirectXDeviceDriverSetupW

DirectXLoadString

DirectXRegisterApplicationA

DirectXRegisterApplicationW

DirectXSetupA

DirectXSetupCallback

DirectXSetupGetEULAA

DirectXSetupGetEULAW

DirectXSetupGetFileVersion

DirectXSetupGetVersion

DirectXSetupIsEng

DirectXSetupIsJapan

DirectXSetupIsJapanNec

DirectXSetupSetCallback

DirectXSetupShowEULA

DirectXSetupW

DirectXUnRegisterApplication

Sections

.text
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Castle Crashers v2.8/directx/DXSETUP.exe

.exe windows:6 windows x86 arch:x86

9f601d1261adacd540476661fd007bc3

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:01:cf:3e:00:00:00:00:00:0f
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/12/2009, 22:40

Not After

07/03/2011, 22:40

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:05:a2:30:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:01

Not After

25/07/2013, 19:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageContentCommitment

b1:da:04:49:85:85:98:e8:94:a8:22:25:b7:5b:70:bb:f9:f9:02:96
Signer

Actual PE Digest

b1:da:04:49:85:85:98:e8:94:a8:22:25:b7:5b:70:bb:f9:f9:02:96

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

PDB Paths

DXSETUP.pdb

Imports

advapi32

RegCloseKey

RegDeleteValueA

RegSetValueExA

RegCreateKeyExA

RegOpenKeyExA

AdjustTokenPrivileges

LookupPrivilegeValueA

OpenProcessToken

kernel32

FindClose

FindFirstFileA

lstrlenA

ReadFile

GetFileSize

CreateFileA

GetCurrentDirectoryA

GetCurrentProcess

GetModuleFileNameA

SetErrorMode

CreateMutexA

GetModuleHandleA

CreateThread

GetSystemDirectoryA

CloseHandle

GetVersionExA

LoadLibraryA

GetProcAddress

GetWindowsDirectoryA

FreeLibrary

CompareStringA

FormatMessageA

lstrcmpiA

GetProcessHeap

SetEndOfFile

WriteConsoleW

HeapReAlloc

GetStringTypeW

HeapSize

FlushFileBuffers

SetStdHandle

GetConsoleMode

GetConsoleCP

SetFilePointer

Sleep

LoadLibraryW

MultiByteToWideChar

LCMapStringW

IsValidCodePage

GetOEMCP

GetACP

GetCPInfo

IsProcessorFeaturePresent

RaiseException

HeapAlloc

RtlUnwind

CreateFileW

LeaveCriticalSection

EnterCriticalSection

OutputDebugStringA

CreateDirectoryA

GetLastError

LocalFree

GetCommandLineA

HeapSetInformation

GetStartupInfoW

GetLocalTime

SetUnhandledExceptionFilter

GetModuleHandleW

ExitProcess

DecodePointer

WriteFile

GetStdHandle

GetModuleFileNameW

FreeEnvironmentStringsW

WideCharToMultiByte

GetEnvironmentStringsW

SetHandleCount

InitializeCriticalSectionAndSpinCount

GetFileType

DeleteCriticalSection

EncodePointer

TlsAlloc

TlsGetValue

TlsSetValue

TlsFree

InterlockedIncrement

SetLastError

GetCurrentThreadId

InterlockedDecrement

HeapCreate

QueryPerformanceCounter

GetTickCount

GetCurrentProcessId

GetSystemTimeAsFileTime

UnhandledExceptionFilter

IsDebuggerPresent

TerminateProcess

HeapFree

gdi32

CreateCompatibleDC

GetObjectA

StretchBlt

DeleteDC

SelectObject

CreateFontIndirectA

DeleteObject

GetDeviceCaps

user32

ReleaseDC

GetDC

LoadImageA

SystemParametersInfoA

SendDlgItemMessageA

SetWindowTextA

GetWindowLongA

SetWindowLongA

PostMessageA

GetParent

SetDlgItemTextA

GetDlgItem

SendMessageA

ShowWindow

GetAsyncKeyState

ExitWindowsEx

EnumWindows

CharLowerA

LoadStringA

MessageBoxA

GetWindowTextA

GetClassNameA

SetForegroundWindow

SetFocus

version

VerQueryValueA

GetFileVersionInfoA

GetFileVersionInfoSizeA

comctl32

CreatePropertySheetPageA

PropertySheetA

ord17

Sections

.text
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 436KB - Virtual size: 435KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Castle Crashers v2.8/directx/Dec2005_d3dx9_28_x64.cab

.cab

Castle Crashers v2.8/directx/Dec2005_d3dx9_28_x86.cab

.cab

Castle Crashers v2.8/directx/FEB2007_XACT_x64.cab

.cab

Castle Crashers v2.8/directx/FEB2007_XACT_x86.cab

.cab

Castle Crashers v2.8/directx/Feb2005_d3dx9_24_x64.cab

.cab

Castle Crashers v2.8/directx/Feb2005_d3dx9_24_x86.cab

.cab

Castle Crashers v2.8/directx/Feb2006_XACT_x64.cab

.cab

Castle Crashers v2.8/directx/Feb2006_XACT_x86.cab

.cab

Castle Crashers v2.8/directx/Feb2006_d3dx9_29_x64.cab

.cab

Castle Crashers v2.8/directx/Feb2006_d3dx9_29_x86.cab

.cab

Castle Crashers v2.8/directx/Feb2010_X3DAudio_x64.cab

.cab

Castle Crashers v2.8/directx/Feb2010_X3DAudio_x86.cab

.cab

Castle Crashers v2.8/directx/Feb2010_XACT_x64.cab

.cab

Castle Crashers v2.8/directx/Feb2010_XACT_x86.cab

.cab

Castle Crashers v2.8/directx/Feb2010_XAudio_x64.cab

.cab

Castle Crashers v2.8/directx/Feb2010_XAudio_x86.cab

.cab

Castle Crashers v2.8/directx/JUN2006_XACT_x64.cab

.cab

Castle Crashers v2.8/directx/JUN2006_XACT_x86.cab

.cab

Castle Crashers v2.8/directx/JUN2007_XACT_x64.cab

.cab

Castle Crashers v2.8/directx/JUN2007_XACT_x86.cab

.cab

Castle Crashers v2.8/directx/JUN2007_d3dx10_34_x64.cab

.cab

Castle Crashers v2.8/directx/JUN2007_d3dx10_34_x86.cab

.cab

Castle Crashers v2.8/directx/JUN2007_d3dx9_34_x64.cab

.cab

Castle Crashers v2.8/directx/JUN2007_d3dx9_34_x86.cab

.cab

Castle Crashers v2.8/directx/JUN2008_X3DAudio_x64.cab

.cab

Castle Crashers v2.8/directx/JUN2008_X3DAudio_x86.cab

.cab

Castle Crashers v2.8/directx/JUN2008_XACT_x64.cab

.cab

Castle Crashers v2.8/directx/JUN2008_XACT_x86.cab

.cab

Castle Crashers v2.8/directx/JUN2008_XAudio_x64.cab

.cab

Castle Crashers v2.8/directx/JUN2008_XAudio_x86.cab

.cab

Castle Crashers v2.8/directx/JUN2008_d3dx10_38_x64.cab

.cab

Castle Crashers v2.8/directx/JUN2008_d3dx10_38_x86.cab

.cab

Castle Crashers v2.8/directx/JUN2008_d3dx9_38_x64.cab

.cab

Castle Crashers v2.8/directx/JUN2008_d3dx9_38_x86.cab

.cab

Castle Crashers v2.8/directx/Jun2005_d3dx9_26_x64.cab

.cab

Castle Crashers v2.8/directx/Jun2005_d3dx9_26_x86.cab

.cab

Castle Crashers v2.8/directx/Jun2010_D3DCompiler_43_x64.cab

.cab

Castle Crashers v2.8/directx/Jun2010_D3DCompiler_43_x86.cab

.cab

Castle Crashers v2.8/directx/Jun2010_XACT_x64.cab

.cab

Castle Crashers v2.8/directx/Jun2010_XACT_x86.cab

.cab

Castle Crashers v2.8/directx/Jun2010_XAudio_x64.cab

.cab

Castle Crashers v2.8/directx/Jun2010_XAudio_x86.cab

.cab

Castle Crashers v2.8/directx/Jun2010_d3dcsx_43_x64.cab

.cab

Castle Crashers v2.8/directx/Jun2010_d3dcsx_43_x86.cab

.cab

Castle Crashers v2.8/directx/Jun2010_d3dx10_43_x64.cab

.cab

Castle Crashers v2.8/directx/Jun2010_d3dx10_43_x86.cab

.cab

Castle Crashers v2.8/directx/Jun2010_d3dx11_43_x64.cab

.cab

Castle Crashers v2.8/directx/Jun2010_d3dx11_43_x86.cab

.cab

Castle Crashers v2.8/directx/Jun2010_d3dx9_43_x64.cab

.cab

Castle Crashers v2.8/directx/Jun2010_d3dx9_43_x86.cab

.cab

Castle Crashers v2.8/directx/Mar2008_X3DAudio_x64.cab

.cab

Castle Crashers v2.8/directx/Mar2008_X3DAudio_x86.cab

.cab

Castle Crashers v2.8/directx/Mar2008_XACT_x64.cab

.cab

Castle Crashers v2.8/directx/Mar2008_XACT_x86.cab

.cab

Castle Crashers v2.8/directx/Mar2008_XAudio_x64.cab

.cab

Castle Crashers v2.8/directx/Mar2008_XAudio_x86.cab

.cab

Castle Crashers v2.8/directx/Mar2008_d3dx10_37_x64.cab

.cab

Castle Crashers v2.8/directx/Mar2008_d3dx10_37_x86.cab

.cab

Castle Crashers v2.8/directx/Mar2008_d3dx9_37_x64.cab

.cab

Castle Crashers v2.8/directx/Mar2008_d3dx9_37_x86.cab

.cab

Castle Crashers v2.8/directx/Mar2009_X3DAudio_x64.cab

.cab

Castle Crashers v2.8/directx/Mar2009_X3DAudio_x86.cab

.cab

Castle Crashers v2.8/directx/Mar2009_XACT_x64.cab

.cab

Castle Crashers v2.8/directx/Mar2009_XACT_x86.cab

.cab

Castle Crashers v2.8/directx/Mar2009_XAudio_x64.cab

.cab

Castle Crashers v2.8/directx/Mar2009_XAudio_x86.cab

.cab

Castle Crashers v2.8/directx/Mar2009_d3dx10_41_x64.cab

.cab

Castle Crashers v2.8/directx/Mar2009_d3dx10_41_x86.cab

.cab

Castle Crashers v2.8/directx/Mar2009_d3dx9_41_x64.cab

.cab

Castle Crashers v2.8/directx/Mar2009_d3dx9_41_x86.cab

.cab

Castle Crashers v2.8/directx/NOV2007_X3DAudio_x64.cab

.cab

Castle Crashers v2.8/directx/NOV2007_X3DAudio_x86.cab

.cab

Castle Crashers v2.8/directx/NOV2007_XACT_x64.cab

.cab

Castle Crashers v2.8/directx/NOV2007_XACT_x86.cab

.cab

Castle Crashers v2.8/directx/Nov2007_d3dx10_36_x64.cab

.cab

Castle Crashers v2.8/directx/Nov2007_d3dx10_36_x86.cab

.cab

Castle Crashers v2.8/directx/Nov2007_d3dx9_36_x64.cab

.cab

Castle Crashers v2.8/directx/Nov2007_d3dx9_36_x86.cab

.cab

Castle Crashers v2.8/directx/Nov2008_X3DAudio_x64.cab

.cab

Castle Crashers v2.8/directx/Nov2008_X3DAudio_x86.cab

.cab

Castle Crashers v2.8/directx/Nov2008_XACT_x64.cab

.cab

Castle Crashers v2.8/directx/Nov2008_XACT_x86.cab

.cab

Castle Crashers v2.8/directx/Nov2008_XAudio_x64.cab

.cab

Castle Crashers v2.8/directx/Nov2008_XAudio_x86.cab

.cab

Castle Crashers v2.8/directx/Nov2008_d3dx10_40_x64.cab

.cab

Castle Crashers v2.8/directx/Nov2008_d3dx10_40_x86.cab

.cab

Castle Crashers v2.8/directx/Nov2008_d3dx9_40_x64.cab

.cab

Castle Crashers v2.8/directx/Nov2008_d3dx9_40_x86.cab

.cab

Castle Crashers v2.8/directx/OCT2006_XACT_x64.cab

.cab

Castle Crashers v2.8/directx/OCT2006_XACT_x86.cab

.cab

Castle Crashers v2.8/directx/OCT2006_d3dx9_31_x64.cab

.cab

Castle Crashers v2.8/directx/OCT2006_d3dx9_31_x86.cab

.cab

Castle Crashers v2.8/directx/Oct2005_xinput_x64.cab

.cab

Castle Crashers v2.8/directx/Oct2005_xinput_x86.cab

.cab

Castle Crashers v2.8/directx/dsetup32.dll

.dll windows:6 windows x86 arch:x86

d1671a2cd7c955bf9903489363b7585c

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:01:cf:3e:00:00:00:00:00:0f
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/12/2009, 22:40

Not After

07/03/2011, 22:40

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageContentCommitment

22:9d:3f:6c:9f:d6:3c:85:3d:d2:28:5b:3e:7b:4f:07:0b:5d:a1:86
Signer

Actual PE Digest

22:9d:3f:6c:9f:d6:3c:85:3d:d2:28:5b:3e:7b:4f:07:0b:5d:a1:86

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

PDB Paths

dsetup32.pdb

Imports

kernel32

FindClose

FindFirstFileA

GetSystemDirectoryA

CopyFileA

DeleteFileA

SetFileAttributesA

WideCharToMultiByte

LoadResource

FindResourceA

GetSystemDefaultLCID

GetModuleFileNameA

lstrcmpA

LockResource

SizeofResource

SetLastError

GetPrivateProfileStringA

MultiByteToWideChar

CloseHandle

GetFileSize

CreateFileA

GetPrivateProfileSectionA

lstrcmpiA

lstrlenA

FindNextFileA

GetShortPathNameA

GetExitCodeProcess

WaitForSingleObject

CreateProcessA

LoadLibraryExA

GetFileAttributesA

GetPrivateProfileSectionNamesA

GetSystemInfo

GetDiskFreeSpaceA

GetModuleHandleA

ReadFile

SystemTimeToTzSpecificLocalTime

FileTimeToSystemTime

LocalFileTimeToFileTime

SystemTimeToFileTime

GetTempFileNameA

GetDriveTypeA

GetCurrentDirectoryA

ExpandEnvironmentStringsA

GetTempPathA

MoveFileExA

SetFileTime

GetFileTime

Sleep

CreateMutexA

GetCurrentThreadId

DecodePointer

GetCommandLineA

GetLocalTime

HeapFree

HeapReAlloc

EncodePointer

TlsAlloc

TlsGetValue

GetVersionExA

TlsFree

InterlockedIncrement

GetModuleHandleW

InterlockedDecrement

ExitProcess

SetHandleCount

GetStdHandle

InitializeCriticalSectionAndSpinCount

GetFileType

GetStartupInfoW

DeleteCriticalSection

FreeEnvironmentStringsW

GetEnvironmentStringsW

HeapCreate

HeapDestroy

QueryPerformanceCounter

GetTickCount

GetCurrentProcessId

GetSystemTimeAsFileTime

UnhandledExceptionFilter

SetUnhandledExceptionFilter

IsDebuggerPresent

TerminateProcess

EnterCriticalSection

LeaveCriticalSection

RtlUnwind

HeapAlloc

RaiseException

IsProcessorFeaturePresent

GetCPInfo

GetACP

GetOEMCP

IsValidCodePage

LCMapStringW

WriteFile

GetConsoleCP

GetConsoleMode

LoadLibraryW

GetModuleFileNameW

SetFilePointer

SetStdHandle

FlushFileBuffers

HeapSize

GetStringTypeW

WriteConsoleW

SetEndOfFile

GetProcessHeap

CreateFileW

GetProcAddress

LoadLibraryA

GetCurrentProcess

FreeLibrary

CompareStringA

FormatMessageA

LocalFree

GetWindowsDirectoryA

OutputDebugStringA

CreateDirectoryA

TlsSetValue

GetLastError

gdi32

GetDeviceCaps

user32

PeekMessageA

ShowWindow

GetDlgItem

SendMessageA

CharLowerA

MessageBoxA

CreateDialogParamA

SetFocus

DestroyWindow

DialogBoxParamA

GetMessageA

CharNextA

EndDialog

SetDlgItemTextA

SendDlgItemMessageA

GetDesktopWindow

GetWindowRect

GetDC

ReleaseDC

SetWindowPos

LoadStringA

DispatchMessageA

TranslateMessage

GetKeyboardType

advapi32

RegCloseKey

RegOpenKeyExA

RegSetValueExA

RegCreateKeyExA

RegQueryInfoKeyA

RegEnumKeyExA

RegDeleteValueA

RegQueryValueExA

shlwapi

SHDeleteKeyA

winmm

mmioDescend

mmioOpenA

mmioClose

mmioRead

version

GetFileVersionInfoSizeA

GetFileVersionInfoA

VerQueryValueA

shell32

SHFileOperationA

ole32

StringFromGUID2

Exports

DirectXLoadString

DirectXSetupCallback

DirectXSetupSetCallback

DirectXSetupShowEULA

iDirectXSetup

iDirectXSetupGetEULA

Sections

.text
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

Castle Crashers v2.8/directx/dxdllreg_x86.cab

.cab

Castle Crashers v2.8/directx/dxnt.cab

.cab

Castle Crashers v2.8/directx/dxupdate.cab

.cab

Castle Crashers v2.8/installscript.vdf

Castle Crashers v2.8/steam_api.dll

.dll windows:5 windows x86 arch:x86

f1a38a7d28e3db92b1a98bc331c24164

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Imports

kernel32

GetModuleFileNameW

GetModuleHandleA

LoadLibraryA

LocalAlloc

LocalFree

GetModuleFileNameA

ExitProcess

user32

ShowWindow

advapi32

RegSetValueExW

shell32

SHGetSpecialFolderPathW

ole32

CoTaskMemAlloc

ws2_32

WSASetLastError

winhttp

WinHttpOpen

shlwapi

PathCombineW

psapi

GetModuleBaseNameW

bcrypt

BCryptDeriveKeyPBKDF2

Exports

Breakpad_SteamMiniDumpInit

Breakpad_SteamSetAppID

Breakpad_SteamSetSteamID

Breakpad_SteamWriteMiniDumpSetComment

Breakpad_SteamWriteMiniDumpUsingExceptionInfoWithBuildId

CAddAppDependencyResult_t_RemoveCallResult

CAddAppDependencyResult_t_SetCallResult

CAddUGCDependencyResult_t_RemoveCallResult

CAddUGCDependencyResult_t_SetCallResult

CAssociateWithClanResult_t_RemoveCallResult

CAssociateWithClanResult_t_SetCallResult

CChangeNumOpenSlotsCallback_t_RemoveCallResult

CChangeNumOpenSlotsCallback_t_SetCallResult

CCheckFileSignature_t_RemoveCallResult

CCheckFileSignature_t_SetCallResult

CClanOfficerListResponse_t_RemoveCallResult

CClanOfficerListResponse_t_SetCallResult

CComputeNewPlayerCompatibilityResult_t_RemoveCallResult

CComputeNewPlayerCompatibilityResult_t_SetCallResult

CCreateBeaconCallback_t_RemoveCallResult

CCreateBeaconCallback_t_SetCallResult

CCreateItemResult_t_RemoveCallResult

CCreateItemResult_t_SetCallResult

CDeleteItemResult_t_RemoveCallResult

CDeleteItemResult_t_SetCallResult

CEncryptedAppTicketResponse_t_RemoveCallResult

CEncryptedAppTicketResponse_t_SetCallResult

CFileDetailsResult_t_RemoveCallResult

CFileDetailsResult_t_SetCallResult

CFriendsEnumerateFollowingList_t_RemoveCallResult

CFriendsEnumerateFollowingList_t_SetCallResult

CFriendsGetFollowerCount_t_RemoveCallResult

CFriendsGetFollowerCount_t_SetCallResult

CFriendsIsFollowing_t_RemoveCallResult

CFriendsIsFollowing_t_SetCallResult

CGSReputation_t_RemoveCallResult

CGSReputation_t_SetCallResult

CGSStatsReceived_t_RemoveCallResult

CGSStatsReceived_t_SetCallResult

CGSStatsStored_t_RemoveCallResult

CGSStatsStored_t_SetCallResult

CGetAppDependenciesResult_t_RemoveCallResult

CGetAppDependenciesResult_t_SetCallResult

CGetOPFSettingsResult_t_RemoveCallback

CGetOPFSettingsResult_t_SetCallback

CGetUserItemVoteResult_t_RemoveCallResult

CGetUserItemVoteResult_t_SetCallResult

CGlobalAchievementPercentagesReady_t_RemoveCallResult

CGlobalAchievementPercentagesReady_t_SetCallResult

CGlobalStatsReceived_t_RemoveCallResult

CGlobalStatsReceived_t_SetCallResult

CHTML_BrowserReady_t_RemoveCallResult

CHTML_BrowserReady_t_SetCallResult

CJoinClanChatRoomCompletionResult_t_RemoveCallResult

CJoinClanChatRoomCompletionResult_t_SetCallResult

CJoinPartyCallback_t_RemoveCallResult

CJoinPartyCallback_t_SetCallResult

CLeaderboardFindResult_t_RemoveCallResult

CLeaderboardFindResult_t_SetCallResult

CLeaderboardScoreUploaded_t_RemoveCallResult

CLeaderboardScoreUploaded_t_SetCallResult

CLeaderboardScoresDownloaded_t_RemoveCallResult

CLeaderboardScoresDownloaded_t_SetCallResult

CLeaderboardUGCSet_t_RemoveCallResult

CLeaderboardUGCSet_t_SetCallResult

CLobbyCreated_t_RemoveCallResult

CLobbyCreated_t_SetCallResult

CLobbyEnter_t_RemoveCallResult

CLobbyEnter_t_SetCallResult

CLobbyMatchList_t_RemoveCallResult

CLobbyMatchList_t_SetCallResult

CMarketEligibilityResponse_t_RemoveCallResult

CMarketEligibilityResponse_t_SetCallResult

CNumberOfCurrentPlayers_t_RemoveCallResult

CNumberOfCurrentPlayers_t_SetCallResult

CRemoteStorageDeletePublishedFileResult_t_RemoveCallResult

CRemoteStorageDeletePublishedFileResult_t_SetCallResult

CRemoteStorageDownloadUGCResult_t_RemoveCallResult

CRemoteStorageDownloadUGCResult_t_SetCallResult

CRemoteStorageEnumeratePublishedFilesByUserActionResult_t_RemoveCallResult

CRemoteStorageEnumeratePublishedFilesByUserActionResult_t_SetCallResult

CRemoteStorageEnumerateUserPublishedFilesResult_t_RemoveCallResult

CRemoteStorageEnumerateUserPublishedFilesResult_t_SetCallResult

CRemoteStorageEnumerateUserSubscribedFilesResult_t_RemoveCallResult

CRemoteStorageEnumerateUserSubscribedFilesResult_t_SetCallResult

CRemoteStorageEnumerateWorkshopFilesResult_t_RemoveCallResult

CRemoteStorageEnumerateWorkshopFilesResult_t_SetCallResult

CRemoteStorageFileReadAsyncComplete_t_RemoveCallResult

CRemoteStorageFileReadAsyncComplete_t_SetCallResult

CRemoteStorageFileShareResult_t_RemoveCallResult

CRemoteStorageFileShareResult_t_SetCallResult

CRemoteStorageFileWriteAsyncComplete_t_RemoveCallResult

CRemoteStorageFileWriteAsyncComplete_t_SetCallResult

CRemoteStorageGetPublishedFileDetailsResult_t_RemoveCallResult

CRemoteStorageGetPublishedFileDetailsResult_t_SetCallResult

CRemoteStorageGetPublishedItemVoteDetailsResult_t_RemoveCallResult

CRemoteStorageGetPublishedItemVoteDetailsResult_t_SetCallResult

CRemoteStoragePublishFileProgress_t_RemoveCallResult

CRemoteStoragePublishFileProgress_t_SetCallResult

CRemoteStorageSetUserPublishedFileActionResult_t_RemoveCallResult

CRemoteStorageSetUserPublishedFileActionResult_t_SetCallResult

CRemoteStorageSubscribePublishedFileResult_t_RemoveCallResult

CRemoteStorageSubscribePublishedFileResult_t_SetCallResult

CRemoteStorageUnsubscribePublishedFileResult_t_RemoveCallResult

CRemoteStorageUnsubscribePublishedFileResult_t_SetCallResult

CRemoteStorageUpdatePublishedFileResult_t_RemoveCallResult

CRemoteStorageUpdatePublishedFileResult_t_SetCallResult

CRemoteStorageUpdateUserPublishedItemVoteResult_t_RemoveCallResult

CRemoteStorageUpdateUserPublishedItemVoteResult_t_SetCallResult

CRemoveAppDependencyResult_t_RemoveCallResult

CRemoveAppDependencyResult_t_SetCallResult

CRemoveUGCDependencyResult_t_RemoveCallResult

CRemoveUGCDependencyResult_t_SetCallResult

CSetPersonaNameResponse_t_RemoveCallResult

CSetPersonaNameResponse_t_SetCallResult

CSetUserItemVoteResult_t_RemoveCallResult

CSetUserItemVoteResult_t_SetCallResult

CStartPlaytimeTrackingResult_t_RemoveCallResult

CStartPlaytimeTrackingResult_t_SetCallResult

CSteamInventoryEligiblePromoItemDefIDs_t_RemoveCallResult

CSteamInventoryEligiblePromoItemDefIDs_t_SetCallResult

CSteamInventoryRequestPricesResult_t_RemoveCallResult

CSteamInventoryRequestPricesResult_t_SetCallResult

CSteamInventoryStartPurchaseResult_t_RemoveCallResult

CSteamInventoryStartPurchaseResult_t_SetCallResult

CSteamUGCQueryCompleted_t_RemoveCallResult

CSteamUGCQueryCompleted_t_SetCallResult

CStopPlaytimeTrackingResult_t_RemoveCallResult

CStopPlaytimeTrackingResult_t_SetCallResult

CStoreAuthURLResponse_t_RemoveCallResult

CStoreAuthURLResponse_t_SetCallResult

CSubmitItemUpdateResult_t_RemoveCallResult

CSubmitItemUpdateResult_t_SetCallResult

CUserFavoriteItemsListChanged_t_RemoveCallResult

CUserFavoriteItemsListChanged_t_SetCallResult

CUserStatsReceived_t_RemoveCallResult

CUserStatsReceived_t_RemoveCallback

CUserStatsReceived_t_SetCallResult

CUserStatsReceived_t_SetCallback

CreateInterface

GetHSteamPipe

GetHSteamUser

SteamAPI

SteamAPI_GetHSteamPipe

SteamAPI_GetHSteamUser

SteamAPI_GetSteamInstallPath

SteamAPI_ISteamAppList_GetAppBuildId

SteamAPI_ISteamAppList_GetAppInstallDir

SteamAPI_ISteamAppList_GetAppName

SteamAPI_ISteamAppList_GetInstalledApps

SteamAPI_ISteamAppList_GetNumInstalledApps

SteamAPI_ISteamApps_BGetDLCDataByIndex

SteamAPI_ISteamApps_BIsAppInstalled

SteamAPI_ISteamApps_BIsCybercafe

SteamAPI_ISteamApps_BIsDlcInstalled

SteamAPI_ISteamApps_BIsLowViolence

SteamAPI_ISteamApps_BIsSubscribed

SteamAPI_ISteamApps_BIsSubscribedApp

SteamAPI_ISteamApps_BIsSubscribedFromFamilySharing

SteamAPI_ISteamApps_BIsSubscribedFromFreeWeekend

SteamAPI_ISteamApps_BIsVACBanned

SteamAPI_ISteamApps_GetAppBuildId

SteamAPI_ISteamApps_GetAppInstallDir

SteamAPI_ISteamApps_GetAppOwner

SteamAPI_ISteamApps_GetAvailableGameLanguages

SteamAPI_ISteamApps_GetCurrentBetaName

SteamAPI_ISteamApps_GetCurrentGameLanguage

SteamAPI_ISteamApps_GetDLCCount

SteamAPI_ISteamApps_GetDlcDownloadProgress

SteamAPI_ISteamApps_GetEarliestPurchaseUnixTime

SteamAPI_ISteamApps_GetFileDetails

SteamAPI_ISteamApps_GetInstalledDepots

SteamAPI_ISteamApps_GetLaunchCommandLine

SteamAPI_ISteamApps_GetLaunchQueryParam

SteamAPI_ISteamApps_GetPublisherOwnedAppData

SteamAPI_ISteamApps_InstallDLC

SteamAPI_ISteamApps_MarkContentCorrupt

SteamAPI_ISteamApps_RequestAllProofOfPurchaseKeys

SteamAPI_ISteamApps_RequestAppProofOfPurchaseKey

SteamAPI_ISteamApps_RequestPublisherOwnedAppData

SteamAPI_ISteamApps_UninstallDLC

SteamAPI_ISteamClient_BReleaseSteamPipe

SteamAPI_ISteamClient_BShutdownIfAllPipesClosed

SteamAPI_ISteamClient_ConnectToGlobalUser

SteamAPI_ISteamClient_CreateLocalUser

SteamAPI_ISteamClient_CreateSteamPipe

SteamAPI_ISteamClient_GetIPCCallCount

SteamAPI_ISteamClient_GetISteamAppList

SteamAPI_ISteamClient_GetISteamApps

SteamAPI_ISteamClient_GetISteamController

SteamAPI_ISteamClient_GetISteamFriends

SteamAPI_ISteamClient_GetISteamGameSearch

SteamAPI_ISteamClient_GetISteamGameServer

SteamAPI_ISteamClient_GetISteamGameServerStats

SteamAPI_ISteamClient_GetISteamGenericInterface

SteamAPI_ISteamClient_GetISteamHTMLSurface

SteamAPI_ISteamClient_GetISteamHTTP

SteamAPI_ISteamClient_GetISteamInput

SteamAPI_ISteamClient_GetISteamInventory

SteamAPI_ISteamClient_GetISteamMatchmaking

SteamAPI_ISteamClient_GetISteamMatchmakingServers

SteamAPI_ISteamClient_GetISteamMusic

SteamAPI_ISteamClient_GetISteamMusicRemote

SteamAPI_ISteamClient_GetISteamNetworking

SteamAPI_ISteamClient_GetISteamParentalSettings

SteamAPI_ISteamClient_GetISteamParties

SteamAPI_ISteamClient_GetISteamRemoteStorage

SteamAPI_ISteamClient_GetISteamScreenshots

SteamAPI_ISteamClient_GetISteamUGC

SteamAPI_ISteamClient_GetISteamUnifiedMessages

SteamAPI_ISteamClient_GetISteamUser

SteamAPI_ISteamClient_GetISteamUserStats

SteamAPI_ISteamClient_GetISteamUtils

SteamAPI_ISteamClient_GetISteamVideo

SteamAPI_ISteamClient_ReleaseUser

SteamAPI_ISteamClient_Remove_SteamAPI_CPostAPIResultInProcess

SteamAPI_ISteamClient_RunFrame

SteamAPI_ISteamClient_SetLocalIPBinding

SteamAPI_ISteamClient_SetWarningMessageHook

SteamAPI_ISteamClient_Set_SteamAPI_CCheckCallbackRegisteredInProcess

SteamAPI_ISteamClient_Set_SteamAPI_CPostAPIResultInProcess

SteamAPI_ISteamController_ActivateActionSet

SteamAPI_ISteamController_ActivateActionSetLayer

SteamAPI_ISteamController_DeactivateActionSetLayer

SteamAPI_ISteamController_DeactivateAllActionSetLayers

SteamAPI_ISteamController_GetActionOriginFromXboxOrigin

SteamAPI_ISteamController_GetActionSetHandle

SteamAPI_ISteamController_GetActiveActionSetLayers

SteamAPI_ISteamController_GetAnalogActionData

SteamAPI_ISteamController_GetAnalogActionHandle

SteamAPI_ISteamController_GetAnalogActionOrigins

SteamAPI_ISteamController_GetConnectedControllers

SteamAPI_ISteamController_GetControllerForGamepadIndex

SteamAPI_ISteamController_GetControllerState

SteamAPI_ISteamController_GetCurrentActionSet

SteamAPI_ISteamController_GetDigitalActionData

SteamAPI_ISteamController_GetDigitalActionHandle

SteamAPI_ISteamController_GetDigitalActionOrigins

SteamAPI_ISteamController_GetGamepadIndexForController

SteamAPI_ISteamController_GetGlyphForActionOrigin

SteamAPI_ISteamController_GetInputTypeForHandle

SteamAPI_ISteamController_GetMotionData

SteamAPI_ISteamController_GetStringForActionOrigin

SteamAPI_ISteamController_Init

SteamAPI_ISteamController_RunFrame

SteamAPI_ISteamController_SetLEDColor

SteamAPI_ISteamController_SetOverrideMode

SteamAPI_ISteamController_ShowAnalogActionOrigins

SteamAPI_ISteamController_ShowBindingPanel

SteamAPI_ISteamController_ShowDigitalActionOrigins

SteamAPI_ISteamController_Shutdown

SteamAPI_ISteamController_StopAnalogActionMomentum

SteamAPI_ISteamController_TriggerHapticPulse

SteamAPI_ISteamController_TriggerRepeatedHapticPulse

SteamAPI_ISteamController_TriggerVibration

SteamAPI_ISteamFriends_ActivateGameOverlay

SteamAPI_ISteamFriends_ActivateGameOverlayInviteDialog

SteamAPI_ISteamFriends_ActivateGameOverlayToStore

SteamAPI_ISteamFriends_ActivateGameOverlayToUser

SteamAPI_ISteamFriends_ActivateGameOverlayToWebPage

SteamAPI_ISteamFriends_ClearRichPresence

SteamAPI_ISteamFriends_CloseClanChatWindowInSteam

SteamAPI_ISteamFriends_DownloadClanActivityCounts

SteamAPI_ISteamFriends_EnumerateFollowingList

SteamAPI_ISteamFriends_GetChatMemberByIndex

SteamAPI_ISteamFriends_GetClanActivityCounts

SteamAPI_ISteamFriends_GetClanByIndex

SteamAPI_ISteamFriends_GetClanChatMemberCount

SteamAPI_ISteamFriends_GetClanChatMessage

SteamAPI_ISteamFriends_GetClanCount

SteamAPI_ISteamFriends_GetClanName

SteamAPI_ISteamFriends_GetClanOfficerByIndex

SteamAPI_ISteamFriends_GetClanOfficerCount

SteamAPI_ISteamFriends_GetClanOwner

SteamAPI_ISteamFriends_GetClanTag

SteamAPI_ISteamFriends_GetCoplayFriend

SteamAPI_ISteamFriends_GetCoplayFriendCount

SteamAPI_ISteamFriends_GetFollowerCount

SteamAPI_ISteamFriends_GetFriendByIndex

SteamAPI_ISteamFriends_GetFriendCoplayGame

SteamAPI_ISteamFriends_GetFriendCoplayTime

SteamAPI_ISteamFriends_GetFriendCount

SteamAPI_ISteamFriends_GetFriendCountFromSource

SteamAPI_ISteamFriends_GetFriendFromSourceByIndex

SteamAPI_ISteamFriends_GetFriendGamePlayed

SteamAPI_ISteamFriends_GetFriendMessage

SteamAPI_ISteamFriends_GetFriendPersonaName

SteamAPI_ISteamFriends_GetFriendPersonaNameHistory

SteamAPI_ISteamFriends_GetFriendPersonaState

SteamAPI_ISteamFriends_GetFriendRelationship

SteamAPI_ISteamFriends_GetFriendRichPresence

SteamAPI_ISteamFriends_GetFriendRichPresenceKeyByIndex

SteamAPI_ISteamFriends_GetFriendRichPresenceKeyCount

SteamAPI_ISteamFriends_GetFriendSteamLevel

SteamAPI_ISteamFriends_GetFriendsGroupCount

SteamAPI_ISteamFriends_GetFriendsGroupIDByIndex

SteamAPI_ISteamFriends_GetFriendsGroupMembersCount

SteamAPI_ISteamFriends_GetFriendsGroupMembersList

SteamAPI_ISteamFriends_GetFriendsGroupName

SteamAPI_ISteamFriends_GetLargeFriendAvatar

SteamAPI_ISteamFriends_GetMediumFriendAvatar

SteamAPI_ISteamFriends_GetPersonaName

SteamAPI_ISteamFriends_GetPersonaState

SteamAPI_ISteamFriends_GetPlayerNickname

SteamAPI_ISteamFriends_GetSmallFriendAvatar

SteamAPI_ISteamFriends_GetUserRestrictions

SteamAPI_ISteamFriends_HasFriend

SteamAPI_ISteamFriends_InviteUserToGame

SteamAPI_ISteamFriends_IsClanChatAdmin

SteamAPI_ISteamFriends_IsClanChatWindowOpenInSteam

SteamAPI_ISteamFriends_IsClanOfficialGameGroup

SteamAPI_ISteamFriends_IsClanPublic

SteamAPI_ISteamFriends_IsFollowing

SteamAPI_ISteamFriends_IsUserInSource

SteamAPI_ISteamFriends_JoinClanChatRoom

SteamAPI_ISteamFriends_LeaveClanChatRoom

SteamAPI_ISteamFriends_OpenClanChatWindowInSteam

SteamAPI_ISteamFriends_ReplyToFriendMessage

SteamAPI_ISteamFriends_RequestClanOfficerList

SteamAPI_ISteamFriends_RequestFriendRichPresence

SteamAPI_ISteamFriends_RequestUserInformation

SteamAPI_ISteamFriends_SendClanChatMessage

SteamAPI_ISteamFriends_SetInGameVoiceSpeaking

SteamAPI_ISteamFriends_SetListenForFriendsMessages

SteamAPI_ISteamFriends_SetPersonaName

SteamAPI_ISteamFriends_SetPlayedWith

SteamAPI_ISteamFriends_SetRichPresence

SteamAPI_ISteamGameServerStats_ClearUserAchievement

SteamAPI_ISteamGameServerStats_GetUserAchievement

SteamAPI_ISteamGameServerStats_GetUserStat

SteamAPI_ISteamGameServerStats_GetUserStat0

SteamAPI_ISteamGameServerStats_RequestUserStats

SteamAPI_ISteamGameServerStats_SetUserAchievement

SteamAPI_ISteamGameServerStats_SetUserStat

SteamAPI_ISteamGameServerStats_SetUserStat0

SteamAPI_ISteamGameServerStats_StoreUserStats

SteamAPI_ISteamGameServerStats_UpdateUserAvgRateStat

SteamAPI_ISteamGameServer_AssociateWithClan

SteamAPI_ISteamGameServer_BLoggedOn

SteamAPI_ISteamGameServer_BSecure

SteamAPI_ISteamGameServer_BUpdateUserData

SteamAPI_ISteamGameServer_BeginAuthSession

SteamAPI_ISteamGameServer_CancelAuthTicket

SteamAPI_ISteamGameServer_ClearAllKeyValues

SteamAPI_ISteamGameServer_ComputeNewPlayerCompatibility

SteamAPI_ISteamGameServer_CreateUnauthenticatedUserConnection

SteamAPI_ISteamGameServer_EnableHeartbeats

SteamAPI_ISteamGameServer_EndAuthSession

SteamAPI_ISteamGameServer_ForceHeartbeat

SteamAPI_ISteamGameServer_GetAuthSessionTicket

SteamAPI_ISteamGameServer_GetGameplayStats

SteamAPI_ISteamGameServer_GetNextOutgoingPacket

SteamAPI_ISteamGameServer_GetPublicIP

SteamAPI_ISteamGameServer_GetServerReputation

SteamAPI_ISteamGameServer_GetSteamID

SteamAPI_ISteamGameServer_HandleIncomingPacket

SteamAPI_ISteamGameServer_InitGameServer

SteamAPI_ISteamGameServer_LogOff

SteamAPI_ISteamGameServer_LogOn

SteamAPI_ISteamGameServer_LogOnAnonymous

SteamAPI_ISteamGameServer_RequestUserGroupStatus

SteamAPI_ISteamGameServer_SendUserConnectAndAuthenticate

SteamAPI_ISteamGameServer_SendUserDisconnect

SteamAPI_ISteamGameServer_SetBotPlayerCount

SteamAPI_ISteamGameServer_SetDedicatedServer

SteamAPI_ISteamGameServer_SetGameData

SteamAPI_ISteamGameServer_SetGameDescription

SteamAPI_ISteamGameServer_SetGameTags

SteamAPI_ISteamGameServer_SetHeartbeatInterval

SteamAPI_ISteamGameServer_SetKeyValue

SteamAPI_ISteamGameServer_SetMapName

SteamAPI_ISteamGameServer_SetMaxPlayerCount

SteamAPI_ISteamGameServer_SetModDir

SteamAPI_ISteamGameServer_SetPasswordProtected

SteamAPI_ISteamGameServer_SetProduct

SteamAPI_ISteamGameServer_SetRegion

SteamAPI_ISteamGameServer_SetServerName

SteamAPI_ISteamGameServer_SetSpectatorPort

SteamAPI_ISteamGameServer_SetSpectatorServerName

SteamAPI_ISteamGameServer_UserHasLicenseForApp

SteamAPI_ISteamGameServer_WasRestartRequested

SteamAPI_ISteamHTMLSurface_AddHeader

SteamAPI_ISteamHTMLSurface_AllowStartRequest

SteamAPI_ISteamHTMLSurface_CopyToClipboard

SteamAPI_ISteamHTMLSurface_CreateBrowser

SteamAPI_ISteamHTMLSurface_DestructISteamHTMLSurface

SteamAPI_ISteamHTMLSurface_ExecuteJavascript

SteamAPI_ISteamHTMLSurface_FileLoadDialogResponse

SteamAPI_ISteamHTMLSurface_Find

SteamAPI_ISteamHTMLSurface_GetLinkAtPosition

SteamAPI_ISteamHTMLSurface_GoBack

SteamAPI_ISteamHTMLSurface_GoForward

SteamAPI_ISteamHTMLSurface_Init

SteamAPI_ISteamHTMLSurface_JSDialogResponse

SteamAPI_ISteamHTMLSurface_KeyChar

SteamAPI_ISteamHTMLSurface_KeyDown

SteamAPI_ISteamHTMLSurface_KeyUp

SteamAPI_ISteamHTMLSurface_LoadURL

SteamAPI_ISteamHTMLSurface_MouseDoubleClick

SteamAPI_ISteamHTMLSurface_MouseDown

SteamAPI_ISteamHTMLSurface_MouseMove

SteamAPI_ISteamHTMLSurface_MouseUp

SteamAPI_ISteamHTMLSurface_MouseWheel

SteamAPI_ISteamHTMLSurface_PasteFromClipboard

SteamAPI_ISteamHTMLSurface_Reload

SteamAPI_ISteamHTMLSurface_RemoveBrowser

SteamAPI_ISteamHTMLSurface_SetBackgroundMode

SteamAPI_ISteamHTMLSurface_SetCookie

SteamAPI_ISteamHTMLSurface_SetDPIScalingFactor

SteamAPI_ISteamHTMLSurface_SetHorizontalScroll

SteamAPI_ISteamHTMLSurface_SetKeyFocus

SteamAPI_ISteamHTMLSurface_SetPageScaleFactor

SteamAPI_ISteamHTMLSurface_SetSize

SteamAPI_ISteamHTMLSurface_SetVerticalScroll

SteamAPI_ISteamHTMLSurface_Shutdown

SteamAPI_ISteamHTMLSurface_StopFind

SteamAPI_ISteamHTMLSurface_StopLoad

SteamAPI_ISteamHTMLSurface_ViewSource

SteamAPI_ISteamHTTP_CreateCookieContainer

SteamAPI_ISteamHTTP_CreateHTTPRequest

SteamAPI_ISteamHTTP_DeferHTTPRequest

SteamAPI_ISteamHTTP_GetHTTPDownloadProgressPct

SteamAPI_ISteamHTTP_GetHTTPRequestWasTimedOut

SteamAPI_ISteamHTTP_GetHTTPResponseBodyData

SteamAPI_ISteamHTTP_GetHTTPResponseBodySize

SteamAPI_ISteamHTTP_GetHTTPResponseHeaderSize

SteamAPI_ISteamHTTP_GetHTTPResponseHeaderValue

SteamAPI_ISteamHTTP_GetHTTPStreamingResponseBodyData

SteamAPI_ISteamHTTP_PrioritizeHTTPRequest

SteamAPI_ISteamHTTP_ReleaseCookieContainer

SteamAPI_ISteamHTTP_ReleaseHTTPRequest

SteamAPI_ISteamHTTP_SendHTTPRequest

SteamAPI_ISteamHTTP_SendHTTPRequestAndStreamResponse

SteamAPI_ISteamHTTP_SetCookie

SteamAPI_ISteamHTTP_SetHTTPRequestAbsoluteTimeoutMS

SteamAPI_ISteamHTTP_SetHTTPRequestContextValue

SteamAPI_ISteamHTTP_SetHTTPRequestCookieContainer

SteamAPI_ISteamHTTP_SetHTTPRequestGetOrPostParameter

SteamAPI_ISteamHTTP_SetHTTPRequestHeaderValue

SteamAPI_ISteamHTTP_SetHTTPRequestNetworkActivityTimeout

SteamAPI_ISteamHTTP_SetHTTPRequestRawPostBody

SteamAPI_ISteamHTTP_SetHTTPRequestRequiresVerifiedCertificate

SteamAPI_ISteamHTTP_SetHTTPRequestUserAgentInfo

SteamAPI_ISteamInventory_AddPromoItem

SteamAPI_ISteamInventory_AddPromoItems

SteamAPI_ISteamInventory_CheckResultSteamID

SteamAPI_ISteamInventory_ConsumeItem

SteamAPI_ISteamInventory_DeserializeResult

SteamAPI_ISteamInventory_DestroyResult

SteamAPI_ISteamInventory_ExchangeItems

SteamAPI_ISteamInventory_GenerateItems

SteamAPI_ISteamInventory_GetAllItems

SteamAPI_ISteamInventory_GetEligiblePromoItemDefinitionIDs

SteamAPI_ISteamInventory_GetItemDefinitionIDs

SteamAPI_ISteamInventory_GetItemDefinitionProperty

SteamAPI_ISteamInventory_GetItemPrice

SteamAPI_ISteamInventory_GetItemsByID

SteamAPI_ISteamInventory_GetItemsWithPrices

SteamAPI_ISteamInventory_GetNumItemsWithPrices

SteamAPI_ISteamInventory_GetResultItemProperty

SteamAPI_ISteamInventory_GetResultItems

SteamAPI_ISteamInventory_GetResultStatus

SteamAPI_ISteamInventory_GetResultTimestamp

SteamAPI_ISteamInventory_GrantPromoItems

SteamAPI_ISteamInventory_LoadItemDefinitions

SteamAPI_ISteamInventory_RemoveProperty

SteamAPI_ISteamInventory_RequestEligiblePromoItemDefinitionsIDs

SteamAPI_ISteamInventory_RequestPrices

SteamAPI_ISteamInventory_SendItemDropHeartbeat

SteamAPI_ISteamInventory_SerializeResult

SteamAPI_ISteamInventory_SetProperty

SteamAPI_ISteamInventory_SetProperty0

SteamAPI_ISteamInventory_SetProperty1

SteamAPI_ISteamInventory_SetProperty2

SteamAPI_ISteamInventory_StartPurchase

SteamAPI_ISteamInventory_StartUpdateProperties

SteamAPI_ISteamInventory_SubmitUpdateProperties

SteamAPI_ISteamInventory_TradeItems

SteamAPI_ISteamInventory_TransferItemQuantity

SteamAPI_ISteamInventory_TriggerItemDrop

SteamAPI_ISteamMatchmakingPingResponse_ServerFailedToRespond

SteamAPI_ISteamMatchmakingPingResponse_ServerResponded

SteamAPI_ISteamMatchmakingPlayersResponse_AddPlayerToList

SteamAPI_ISteamMatchmakingPlayersResponse_PlayersFailedToRespond

SteamAPI_ISteamMatchmakingPlayersResponse_PlayersRefreshComplete

SteamAPI_ISteamMatchmakingRulesResponse_RulesFailedToRespond

SteamAPI_ISteamMatchmakingRulesResponse_RulesRefreshComplete

SteamAPI_ISteamMatchmakingRulesResponse_RulesResponded

SteamAPI_ISteamMatchmakingServerListResponse_RefreshComplete

SteamAPI_ISteamMatchmakingServerListResponse_ServerFailedToRespond

SteamAPI_ISteamMatchmakingServerListResponse_ServerResponded

SteamAPI_ISteamMatchmakingServers_CancelQuery

SteamAPI_ISteamMatchmakingServers_CancelServerQuery

SteamAPI_ISteamMatchmakingServers_GetServerCount

SteamAPI_ISteamMatchmakingServers_GetServerDetails

SteamAPI_ISteamMatchmakingServers_IsRefreshing

SteamAPI_ISteamMatchmakingServers_PingServer

SteamAPI_ISteamMatchmakingServers_PlayerDetails

SteamAPI_ISteamMatchmakingServers_RefreshQuery

SteamAPI_ISteamMatchmakingServers_RefreshServer

Sections

.text
Size: - Virtual size: 390KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 10.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.UPX0
Size: - Virtual size: 627KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.UPX1
Size: 768KB - Virtual size: 767KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

Castle Crashers v2.8/unins000.dat

Castle Crashers v2.8/unins000.exe

.exe windows:6 windows x86 arch:x86

86c94b49415ec41af9bc34155c313d23

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LINE_NUMS_STRIPPED

IMAGE_FILE_LOCAL_SYMS_STRIPPED

IMAGE_FILE_BYTES_REVERSED_LO

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_BYTES_REVERSED_HI

Imports

mpr

WNetEnumResourceW

WNetGetUniversalNameW

WNetGetConnectionW

WNetCloseEnum

WNetOpenEnumW

comdlg32

GetSaveFileNameW

GetOpenFileNameW

comctl32

FlatSB_SetScrollInfo

InitCommonControls

ImageList_DragMove

ImageList_Destroy

_TrackMouseEvent

ImageList_DragShowNolock

ImageList_Add

FlatSB_SetScrollProp

ImageList_GetDragImage

ImageList_Create

ImageList_EndDrag

ImageList_DrawEx

ImageList_SetImageCount

FlatSB_GetScrollPos

FlatSB_SetScrollPos

InitializeFlatSB

FlatSB_GetScrollInfo

ImageList_Write

ImageList_SetBkColor

ImageList_GetBkColor

ImageList_BeginDrag

ImageList_GetIcon

ImageList_GetImageCount

ImageList_DragEnter

ImageList_GetIconSize

ImageList_SetIconSize

ImageList_Read

ImageList_DragLeave

ImageList_Draw

ImageList_Remove

shell32

SHBrowseForFolderW

ExtractIconW

SHGetMalloc

SHGetFileInfoW

SHChangeNotify

Shell_NotifyIconW

ShellExecuteW

SHGetPathFromIDListW

ShellExecuteExW

user32

CopyImage

CreateWindowExW

GetMenuItemInfoW

SetMenuItemInfoW

DefFrameProcW

GetDCEx

GetMessageW

PeekMessageW

MonitorFromWindow

GetDlgCtrlID

ScrollWindowEx

SetTimer

WindowFromPoint

BeginPaint

RegisterClipboardFormatW

FrameRect

MapVirtualKeyW

OffsetRect

IsWindowUnicode

RegisterWindowMessageW

FillRect

GetMenuStringW

DispatchMessageW

SendMessageA

DefMDIChildProcW

EnumWindows

GetClassInfoW

GetSystemMenu

WaitForInputIdle

ShowOwnedPopups

GetScrollRange

GetScrollPos

SetScrollPos

GetActiveWindow

SetActiveWindow

DrawEdge

InflateRect

GetKeyboardLayoutList

OemToCharBuffA

LoadBitmapW

DrawFocusRect

EnumChildWindows

GetScrollBarInfo

SendNotifyMessageW

ReleaseCapture

UnhookWindowsHookEx

LoadCursorW

GetCapture

SetCapture

CreatePopupMenu

ScrollWindow

ShowCaret

GetMenuItemID

GetLastActivePopup

CharLowerBuffW

GetSystemMetrics

SetWindowLongW

PostMessageW

DrawMenuBar

SetParent

IsZoomed

CharUpperBuffW

GetClientRect

IsChild

ClientToScreen

SetWindowPlacement

IsIconic

CallNextHookEx

GetMonitorInfoW

ShowWindow

CheckMenuItem

CharUpperW

DefWindowProcW

GetForegroundWindow

SetForegroundWindow

GetWindowTextW

EnableWindow

DestroyWindow

IsDialogMessageW

EndMenu

RegisterClassW

CharNextW

GetWindowThreadProcessId

RedrawWindow

GetDC

GetFocus

SetFocus

EndPaint

ExitWindowsEx

ReleaseDC

MsgWaitForMultipleObjectsEx

LoadKeyboardLayoutW

GetClassLongW

ActivateKeyboardLayout

GetParent

CharToOemBuffA

DrawTextW

SetScrollRange

InsertMenuItemW

PeekMessageA

GetPropW

SetClassLongW

MessageBoxW

MessageBeep

SetPropW

SetRectEmpty

UpdateWindow

RemovePropW

GetSubMenu

MsgWaitForMultipleObjects

DestroyMenu

DestroyIcon

SetWindowsHookExW

IsWindowVisible

DispatchMessageA

UnregisterClassW

GetTopWindow

SendMessageW

AdjustWindowRectEx

DrawIcon

IsWindow

EnumThreadWindows

InvalidateRect

GetKeyboardState

DrawFrameControl

ScreenToClient

SendMessageTimeoutW

BringWindowToTop

SetCursor

CreateIcon

CreateMenu

LoadStringW

CharLowerW

SetWindowPos

SetWindowRgn

GetMenuItemCount

RemoveMenu

AppendMenuW

GetSysColorBrush

GetKeyboardLayoutNameW

GetWindowDC

TranslateMessage

DrawTextExW

MapWindowPoints

EnumDisplayMonitors

CallWindowProcW

DestroyCursor

ReplyMessage

GetScrollInfo

SetWindowTextW

GetMessageExtraInfo

EnableScrollBar

GetSysColor

TrackPopupMenu

DrawIconEx

PostQuitMessage

GetClassNameW

ShowScrollBar

EnableMenuItem

GetIconInfo

GetMessagePos

SetScrollInfo

GetKeyNameTextW

GetDesktopWindow

GetCursorPos

SetCursorPos

HideCaret

GetMenu

GetMenuState

SetMenu

SetRect

GetKeyState

FindWindowExW

MonitorFromPoint

SystemParametersInfoW

LoadIconW

GetCursor

GetWindow

GetWindowLongW

GetWindowRect

InsertMenuW

KillTimer

WaitMessage

IsWindowEnabled

IsDialogMessageA

TranslateMDISysAccel

GetWindowPlacement

FindWindowW

DeleteMenu

GetKeyboardLayout

version

GetFileVersionInfoSizeW

VerQueryValueW

GetFileVersionInfoW

oleaut32

SafeArrayPutElement

LoadTypeLib

GetErrorInfo

VariantInit

VariantClear

SysFreeString

SysReAllocStringLen

SafeArrayCreate

SafeArrayGetElement

GetActiveObject

SysAllocStringLen

SafeArrayPtrOfIndex

SafeArrayGetUBound

SafeArrayGetLBound

VariantCopy

RegisterTypeLib

VariantChangeType

VariantCopyInd

advapi32

RegSetValueExW

RegEnumKeyExW

AdjustTokenPrivileges

OpenThreadToken

GetUserNameW

RegDeleteKeyW

LookupPrivilegeValueW

OpenProcessToken

RegOpenKeyExW

RegQueryInfoKeyW

AllocateAndInitializeSid

FreeSid

EqualSid

RegDeleteValueW

RegFlushKey

RegQueryValueExW

RegEnumValueW

GetTokenInformation

InitializeSecurityDescriptor

RegCloseKey

RegCreateKeyExW

SetSecurityDescriptorDacl

netapi32

NetWkstaGetInfo

NetApiBufferFree

kernel32

SetFileAttributesW

SetFileTime

GetACP

GetExitCodeProcess

IsBadWritePtr

CloseHandle

LocalFree

GetCurrentProcessId

SizeofResource

VirtualProtect

QueryPerformanceFrequency

FindNextFileW

GetFullPathNameW

VirtualFree

ExitProcess

HeapAlloc

WriteProfileStringW

GetCPInfoExW

RtlUnwind

GetCPInfo

GetStdHandle

FileTimeToLocalFileTime

GetModuleHandleW

FreeLibrary

HeapDestroy

CompareFileTime

ReadFile

CreateProcessW

TransactNamedPipe

GetLastError

GetModuleFileNameW

SetLastError

FindResourceW

OpenMutexW

CreateThread

CompareStringW

CopyFileW

CreateMutexW

LoadLibraryA

ResetEvent

MulDiv

FreeResource

GetDriveTypeW

GetVersion

RaiseException

MoveFileW

GlobalAddAtomW

GetSystemTimeAsFileTime

FormatMessageW

OpenProcess

SwitchToThread

GetExitCodeThread

GetCurrentThread

GetLogicalDrives

LocalFileTimeToFileTime

SetNamedPipeHandleState

LoadLibraryExW

TerminateProcess

LockResource

FileTimeToSystemTime

GetShortPathNameW

GetCurrentThreadId

UnhandledExceptionFilter

MoveFileExW

VirtualQuery

GlobalFindAtomW

VirtualQueryEx

Sleep

EnterCriticalSection

SetFilePointer

ReleaseMutex

FlushFileBuffers

LoadResource

SuspendThread

GetTickCount

WritePrivateProfileStringW

GetFileSize

GetStartupInfoW

GlobalDeleteAtom

GetFileAttributesW

GetCurrentDirectoryW

SetCurrentDirectoryW

InitializeCriticalSection

GetThreadPriority

GetCurrentProcess

SetThreadPriority

VirtualAlloc

GetSystemInfo

GetCommandLineW

LeaveCriticalSection

GetProcAddress

ResumeThread

GetVersionExW

VerifyVersionInfoW

HeapCreate

GetWindowsDirectoryW

DeviceIoControl

GetDiskFreeSpaceW

VerSetConditionMask

FindFirstFileW

GetUserDefaultUILanguage

lstrlenW

QueryPerformanceCounter

SetEndOfFile

lstrcmpW

HeapFree

WideCharToMultiByte

FindClose

MultiByteToWideChar

LoadLibraryW

SetEvent

CreateFileW

GetLocaleInfoW

GetSystemDirectoryW

DeleteFileW

GetEnvironmentVariableW

GetLocalTime

WaitForSingleObject

WriteFile

CreateNamedPipeW

ExitThread

DeleteCriticalSection

GetDateFormatW

TlsGetValue

SetErrorMode

GetComputerNameW

IsValidLocale

TlsSetValue

CreateDirectoryW

GetOverlappedResult

GetSystemDefaultUILanguage

EnumCalendarInfoW

GetProfileStringW

LocalAlloc

GetUserDefaultLangID

RemoveDirectoryW

IsDBCSLeadByte

CreateEventW

GetPrivateProfileStringW

WaitForMultipleObjectsEx

GetThreadLocale

SetThreadLocale

ole32

CoCreateInstance

CLSIDFromString

CoUninitialize

IsEqualGUID

OleInitialize

CoFreeUnusedLibraries

CLSIDFromProgID

OleUninitialize

CoDisconnectObject

CoInitialize

CoTaskMemFree

CoTaskMemAlloc

StringFromCLSID

gdi32

Arc

Pie

SetBkMode

SelectPalette

CreateCompatibleBitmap

ExcludeClipRect

RectVisible

SetWindowOrgEx

MaskBlt

AngleArc

Chord

SetTextColor

StretchBlt

SetDIBits

SetViewportOrgEx

CreateRectRgn

RealizePalette

SetDIBColorTable

GetDIBColorTable

RoundRect

RestoreDC

SetRectRgn

GetTextMetricsW

RemoveFontResourceW

GetWindowOrgEx

CreatePalette

CreateBrushIndirect

PatBlt

LineDDA

PolyBezierTo

GetStockObject

CreateSolidBrush

Polygon

Rectangle

MoveToEx

DeleteDC

SaveDC

BitBlt

Ellipse

FrameRgn

GetDeviceCaps

GetBitmapBits

GetTextExtentPoint32W

GetClipBox

Polyline

IntersectClipRect

GetSystemPaletteEntries

CreateBitmap

AddFontResourceW

CreateDIBitmap

GetStretchBltMode

CreateDIBSection

CreatePenIndirect

SetStretchBltMode

GetDIBits

CreateFontIndirectW

PolyBezier

LineTo

GetRgnBox

EnumFontsW

CreateHalftonePalette

DeleteObject

SelectObject

ExtFloodFill

UnrealizeObject

SetBkColor

CreateCompatibleDC

GetObjectW

GetBrushOrgEx

GetCurrentPositionEx

SetROP2

GetTextExtentPointW

ExtTextOutW

SetBrushOrgEx

GetPixel

ArcTo

GdiFlush

SetPixel

EnumFontFamiliesExW

GetPaletteEntries

Exports

TMethodImplementationIntercept

__dbk_fcall_wrapper

dbkFCallWrapperAddr

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.itext
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 28KB

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.didata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 151B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 68B

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 93B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 340KB - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

Read_Me_Instructions.txt

STEAMRIP » Free Pre-installed Steam Games.url

_CommonRedist/dxwebsetup.exe

.exe windows:5 windows x86 arch:x86

1494de9b53e05fc1f40cb92afbdd6ce4

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:01:cf:3e:00:00:00:00:00:0f
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/12/2009, 22:40

Not After

07/03/2011, 22:40

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:05:a2:30:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:01

Not After

25/07/2013, 19:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageContentCommitment

47:b8:85:36:04:6e:46:6d:2f:58:b3:18:fd:18:43:f0:b8:4b:28:d3
Signer

Actual PE Digest

47:b8:85:36:04:6e:46:6d:2f:58:b3:18:fd:18:43:f0:b8:4b:28:d3

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LINE_NUMS_STRIPPED

IMAGE_FILE_LOCAL_SYMS_STRIPPED

IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

FreeSid

AllocateAndInitializeSid

EqualSid

GetTokenInformation

OpenProcessToken

AdjustTokenPrivileges

LookupPrivilegeValueA

RegCloseKey

RegDeleteValueA

RegOpenKeyExA

RegSetValueExA

RegQueryValueExA

RegCreateKeyExA

RegQueryInfoKeyA

kernel32

LocalFree

LocalAlloc

GetLastError

GetCurrentProcess

GetModuleFileNameA

lstrlenA

GetSystemDirectoryA

RemoveDirectoryA

FindClose

FindNextFileA

DeleteFileA

SetFileAttributesA

lstrcmpA

FindFirstFileA

lstrcatA

lstrcpyA

_lclose

_llseek

_lopen

WritePrivateProfileStringA

GetWindowsDirectoryA

CreateDirectoryA

GetFileAttributesA

ExpandEnvironmentStringsA

IsDBCSLeadByte

GetShortPathNameA

GetPrivateProfileStringA

GetPrivateProfileIntA

lstrcmpiA

GetProcAddress

GlobalUnlock

GlobalLock

GlobalAlloc

FreeResource

CloseHandle

LoadResource

SizeofResource

FindResourceA

ReadFile

WriteFile

SetFilePointer

SetFileTime

LocalFileTimeToFileTime

DosDateTimeToFileTime

SetCurrentDirectoryA

GetTempFileNameA

ExitProcess

CreateFileA

LoadLibraryExA

lstrcpynA

GetVolumeInformationA

FormatMessageA

GetCurrentDirectoryA

GetVersionExA

GetExitCodeProcess

WaitForSingleObject

CreateProcessA

GetTempPathA

GetSystemInfo

CreateMutexA

SetEvent

CreateEventA

CreateThread

ResetEvent

TerminateThread

GetDriveTypeA

GetModuleHandleA

GetStartupInfoA

GetCommandLineA

LockResource

LoadLibraryA

GetDiskFreeSpaceA

MulDiv

EnumResourceLanguagesA

FreeLibrary

GlobalFree

gdi32

GetDeviceCaps

user32

ExitWindowsEx

wsprintfA

CharNextA

CharUpperA

CharPrevA

SetWindowLongA

GetWindowLongA

CallWindowProcA

DispatchMessageA

MsgWaitForMultipleObjects

PeekMessageA

SendMessageA

SetWindowPos

ReleaseDC

GetDC

GetWindowRect

SendDlgItemMessageA

GetDlgItem

SetForegroundWindow

SetWindowTextA

MessageBoxA

DialogBoxIndirectParamA

ShowWindow

EnableWindow

GetDlgItemTextA

EndDialog

GetDesktopWindow

MessageBeep

SetDlgItemTextA

LoadStringA

GetSystemMetrics

comctl32

ord17

version

GetFileVersionInfoA

VerQueryValueA

GetFileVersionInfoSizeA

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 239KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

_CommonRedist/oalinst.exe

.exe windows:4 windows x86 arch:x86

1ff011c2e13ea492fe69b2fbfc802083

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

36:33:6d:83:6a:19:e2:44:ff:0e:52:88:2e:b5:b1:de
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

30/06/2006, 00:00

Not After

14/07/2009, 23:59

Subject

CN=Creative Labs Inc,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=CLI,O=Creative Labs Inc,L=Milpitas,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:0c:12:06:00:00:00:00:00:1b
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2006, 17:01

Not After

23/05/2016, 17:11

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

cb:34:e3:72:3d:d1:2b:57:d7:86:46:9b:d8:78:2f:92:cf:2d:5d:4f
Signer

Actual PE Digest

cb:34:e3:72:3d:d1:2b:57:d7:86:46:9b:d8:78:2f:92:cf:2d:5d:4f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\cbs\build\ec922632-90cb-1015-8202-b7f05167b5ef\in\CTSDK\AL_Installer\Release\oalinst.pdb

Imports

version

GetFileVersionInfoSizeA

GetFileVersionInfoA

VerQueryValueA

kernel32

GetFileAttributesA

GetProcAddress

LoadLibraryA

FreeResource

SizeofResource

LoadResource

FindResourceA

ReadFile

SetEndOfFile

GetLocaleInfoW

HeapSize

IsValidCodePage

IsValidLocale

DeleteFileA

GetLocaleInfoA

GetUserDefaultLCID

GetDateFormatA

GetTimeFormatA

GetStringTypeW

GetStringTypeA

CreateFileA

WriteConsoleW

GetConsoleOutputCP

WriteConsoleA

SetFilePointer

FlushFileBuffers

SetStdHandle

InterlockedExchange

RemoveDirectoryA

CreateDirectoryA

GetModuleFileNameA

GetSystemDirectoryA

CopyFileA

GetTempFileNameA

LockResource

MoveFileExA

GetTimeZoneInformation

CompareStringA

CompareStringW

EnumSystemLocalesA

VirtualAlloc

GetLastError

HeapFree

HeapAlloc

MoveFileA

GetCommandLineA

GetVersionExA

GetProcessHeap

GetStartupInfoA

HeapDestroy

HeapCreate

VirtualFree

DeleteCriticalSection

LeaveCriticalSection

FatalAppExitA

EnterCriticalSection

SetEnvironmentVariableA

HeapReAlloc

GetModuleHandleA

ExitProcess

WriteFile

GetStdHandle

CloseHandle

TerminateProcess

GetCurrentProcess

UnhandledExceptionFilter

SetUnhandledExceptionFilter

IsDebuggerPresent

WideCharToMultiByte

GetConsoleCP

GetConsoleMode

RtlUnwind

GetCPInfo

InterlockedIncrement

InterlockedDecrement

GetACP

GetOEMCP

TlsGetValue

TlsAlloc

TlsSetValue

TlsFree

SetLastError

GetCurrentThreadId

GetCurrentThread

LCMapStringA

MultiByteToWideChar

LCMapStringW

FreeEnvironmentStringsA

GetEnvironmentStrings

FreeEnvironmentStringsW

GetEnvironmentStringsW

SetHandleCount

GetFileType

QueryPerformanceCounter

GetTickCount

GetCurrentProcessId

GetSystemTimeAsFileTime

InitializeCriticalSection

Sleep

SetConsoleCtrlHandler

FreeLibrary

user32

LoadCursorA

RegisterClassExA

ShowWindow

UpdateWindow

GetMessageA

TranslateMessage

DispatchMessageA

MessageBoxA

PostQuitMessage

LoadIconA

SetClassLongA

LoadImageA

CreateWindowExA

SendMessageA

BeginPaint

GetClientRect

MoveWindow

DrawTextA

EndPaint

DefWindowProcA

gdi32

CreateCompatibleDC

SelectObject

BitBlt

DeleteDC

GetStockObject

advapi32

RegOpenKeyExA

RegCreateKeyExA

RegQueryValueExA

RegSetValueExA

RegCloseKey

RegDeleteKeyA

Sections

.text
Size: 116KB - Virtual size: 113KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 636KB - Virtual size: 633KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

_CommonRedist/vcredist_2015-2019_x64.exe

.exe windows:5 windows x86 arch:x86

1a5cdbf711fee14b077e599d13fddab2

Code Sign

33:00:00:01:34:22:1e:7e:49:2a:ac:da:6a:00:00:00:00:01:34
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/10/2019, 18:17

Not After

03/01/2021, 18:17

Subject

CN=Microsoft Time-Stamp service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:E041-4BEE-FA7E,O=Microsoft Corporation,L=Redmond,ST=WA,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/05/2019, 21:37

Not After

02/05/2020, 21:37

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/05/2019, 21:37

Not After

02/05/2020, 21:37

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

b4:cd:00:d9:81:97:db:3f:fb:fb:3f:54:d1:0a:0d:d4:f4:56:29:a6:03:63:86:3f:a0:b1:71:7e:4c:43:8a:da
Signer

Actual PE Digest

b4:cd:00:d9:81:97:db:3f:fb:fb:3f:54:d1:0a:0d:d4:f4:56:29:a6:03:63:86:3f:a0:b1:71:7e:4c:43:8a:da

Digest Algorithm

sha256

PE Digest Matches

true

77:97:6d:62:92:5a:37:44:2f:5d:c5:b0:8d:43:91:09:56:54:b2:48
Signer

Actual PE Digest

77:97:6d:62:92:5a:37:44:2f:5d:c5:b0:8d:43:91:09:56:54:b2:48

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP

IMAGE_FILE_NET_RUN_FROM_SWAP

PDB Paths

C:\agent\_work\8\s\build\ship\x86\burn.pdb

Imports

advapi32

RegCloseKey

RegOpenKeyExW

OpenProcessToken

AdjustTokenPrivileges

LookupPrivilegeValueW

InitiateSystemShutdownExW

GetUserNameW

RegQueryValueExW

RegDeleteValueW

ConvertStringSecurityDescriptorToSecurityDescriptorW

DecryptFileW

CreateWellKnownSid

InitializeAcl

SetEntriesInAclW

ChangeServiceConfigW

CloseServiceHandle

ControlService

OpenSCManagerW

OpenServiceW

QueryServiceStatus

SetNamedSecurityInfoW

CheckTokenMembership

AllocateAndInitializeSid

SetEntriesInAclA

SetSecurityDescriptorGroup

SetSecurityDescriptorOwner

SetSecurityDescriptorDacl

InitializeSecurityDescriptor

RegSetValueExW

RegQueryInfoKeyW

RegEnumValueW

RegEnumKeyExW

RegDeleteKeyW

RegCreateKeyExW

GetTokenInformation

CryptDestroyHash

CryptHashData

CryptCreateHash

CryptGetHashParam

CryptReleaseContext

CryptAcquireContextW

QueryServiceConfigW

user32

GetMessageW

PostMessageW

IsWindow

WaitForInputIdle

PostQuitMessage

PeekMessageW

MsgWaitForMultipleObjects

PostThreadMessageW

GetMonitorInfoW

MonitorFromPoint

IsDialogMessageW

LoadCursorW

LoadBitmapW

SetWindowLongW

GetWindowLongW

GetCursorPos

MessageBoxW

CreateWindowExW

UnregisterClassW

RegisterClassW

DefWindowProcW

DispatchMessageW

TranslateMessage

oleaut32

SysFreeString

SysAllocString

VariantInit

VariantClear

gdi32

CreateCompatibleDC

DeleteObject

SelectObject

StretchBlt

GetObjectW

DeleteDC

shell32

SHGetFolderPathW

CommandLineToArgvW

ShellExecuteExW

ole32

CoUninitialize

CoInitializeEx

CoInitialize

StringFromGUID2

CoCreateInstance

CoTaskMemFree

CoInitializeSecurity

CLSIDFromProgID

kernel32

GetCommandLineA

GetCPInfo

GetOEMCP

CloseHandle

CreateFileW

GetProcAddress

LocalFree

HeapSetInformation

GetLastError

GetModuleHandleW

FormatMessageW

lstrlenA

lstrlenW

MultiByteToWideChar

WideCharToMultiByte

LCMapStringW

Sleep

GetLocalTime

GetModuleFileNameW

ExpandEnvironmentStringsW

GetTempPathW

GetTempFileNameW

CreateDirectoryW

GetFullPathNameW

CompareStringW

GetCurrentProcessId

WriteFile

SetFilePointer

LoadLibraryW

GetSystemDirectoryW

CreateFileA

HeapAlloc

HeapReAlloc

HeapFree

HeapSize

GetProcessHeap

FindClose

GetCommandLineW

GetCurrentDirectoryW

RemoveDirectoryW

SetFileAttributesW

GetFileAttributesW

DeleteFileW

FindFirstFileW

FindNextFileW

MoveFileExW

GetCurrentProcess

GetCurrentThreadId

InitializeCriticalSection

DeleteCriticalSection

ReleaseMutex

GetEnvironmentStringsW

TlsGetValue

TlsSetValue

TlsFree

CreateProcessW

GetVersionExW

VerSetConditionMask

FreeLibrary

EnterCriticalSection

LeaveCriticalSection

GetSystemTime

GetNativeSystemInfo

GetModuleHandleExW

GetWindowsDirectoryW

GetSystemWow64DirectoryW

GetComputerNameW

VerifyVersionInfoW

GetVolumePathNameW

GetDateFormatW

GetSystemDefaultLangID

GetUserDefaultLangID

GetStringTypeW

ReadFile

SetFilePointerEx

DuplicateHandle

InterlockedExchange

InterlockedCompareExchange

CreateEventW

ProcessIdToSessionId

OpenProcess

GetProcessId

WaitForSingleObject

ConnectNamedPipe

SetNamedPipeHandleState

CreateNamedPipeW

CreateThread

GetExitCodeThread

SetEvent

WaitForMultipleObjects

InterlockedIncrement

InterlockedDecrement

ResetEvent

SetEndOfFile

SetFileTime

LocalFileTimeToFileTime

DosDateTimeToFileTime

CompareStringA

GetExitCodeProcess

SetThreadExecutionState

CopyFileExW

MapViewOfFile

UnmapViewOfFile

CreateMutexW

CreateFileMappingW

GetThreadLocale

IsValidCodePage

FreeEnvironmentStringsW

TlsAlloc

SetStdHandle

GetConsoleCP

GetConsoleMode

FlushFileBuffers

DecodePointer

WriteConsoleW

GetModuleHandleA

GlobalAlloc

GlobalFree

GetFileSizeEx

CopyFileW

VirtualAlloc

VirtualFree

SystemTimeToTzSpecificLocalTime

GetTimeZoneInformation

SystemTimeToFileTime

GetSystemInfo

VirtualProtect

VirtualQuery

SetCurrentDirectoryW

FindFirstFileExW

GetFileType

GetACP

ExitProcess

GetStdHandle

LoadLibraryExW

InitializeCriticalSectionAndSpinCount

UnhandledExceptionFilter

SetUnhandledExceptionFilter

TerminateProcess

IsProcessorFeaturePresent

QueryPerformanceCounter

GetSystemTimeAsFileTime

InitializeSListHead

IsDebuggerPresent

GetStartupInfoW

RaiseException

RtlUnwind

SetLastError

LoadLibraryExA

rpcrt4

UuidCreate

Sections

.text
Size: 294KB - Virtual size: 293KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.wixburn
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

_CommonRedist/vcredist_2015-2019_x86.exe

.exe windows:5 windows x86 arch:x86

1a5cdbf711fee14b077e599d13fddab2

Code Sign

33:00:00:01:2a:30:bf:85:c5:0e:b1:e2:8c:00:00:00:00:01:2a
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/09/2019, 20:40

Not After

04/12/2020, 20:40

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:7D2E-3782-B0F7,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/05/2019, 21:37

Not After

02/05/2020, 21:37

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/05/2019, 21:37

Not After

02/05/2020, 21:37

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

74:6d:60:08:04:c6:65:c7:f8:0a:78:74:29:9a:a4:ab:9d:42:b8:ba:0c:df:95:ee:75:8a:64:a4:2f:71:a6:46
Signer

Actual PE Digest

74:6d:60:08:04:c6:65:c7:f8:0a:78:74:29:9a:a4:ab:9d:42:b8:ba:0c:df:95:ee:75:8a:64:a4:2f:71:a6:46

Digest Algorithm

sha256

PE Digest Matches

true

0b:05:b3:51:e7:d2:3f:ce:ad:94:9d:75:ac:64:9a:ad:21:01:73:2c
Signer

Actual PE Digest

0b:05:b3:51:e7:d2:3f:ce:ad:94:9d:75:ac:64:9a:ad:21:01:73:2c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP

IMAGE_FILE_NET_RUN_FROM_SWAP

PDB Paths

C:\agent\_work\8\s\build\ship\x86\burn.pdb

Imports

advapi32

RegCloseKey

RegOpenKeyExW

OpenProcessToken

AdjustTokenPrivileges

LookupPrivilegeValueW

InitiateSystemShutdownExW

GetUserNameW

RegQueryValueExW

RegDeleteValueW

ConvertStringSecurityDescriptorToSecurityDescriptorW

DecryptFileW

CreateWellKnownSid

InitializeAcl

SetEntriesInAclW

ChangeServiceConfigW

CloseServiceHandle

ControlService

OpenSCManagerW

OpenServiceW

QueryServiceStatus

SetNamedSecurityInfoW

CheckTokenMembership

AllocateAndInitializeSid

SetEntriesInAclA

SetSecurityDescriptorGroup

SetSecurityDescriptorOwner

SetSecurityDescriptorDacl

InitializeSecurityDescriptor

RegSetValueExW

RegQueryInfoKeyW

RegEnumValueW

RegEnumKeyExW

RegDeleteKeyW

RegCreateKeyExW

GetTokenInformation

CryptDestroyHash

CryptHashData

CryptCreateHash

CryptGetHashParam

CryptReleaseContext

CryptAcquireContextW

QueryServiceConfigW

user32

GetMessageW

PostMessageW

IsWindow

WaitForInputIdle

PostQuitMessage

PeekMessageW

MsgWaitForMultipleObjects

PostThreadMessageW

GetMonitorInfoW

MonitorFromPoint

IsDialogMessageW

LoadCursorW

LoadBitmapW

SetWindowLongW

GetWindowLongW

GetCursorPos

MessageBoxW

CreateWindowExW

UnregisterClassW

RegisterClassW

DefWindowProcW

DispatchMessageW

TranslateMessage

oleaut32

SysFreeString

SysAllocString

VariantInit

VariantClear

gdi32

CreateCompatibleDC

DeleteObject

SelectObject

StretchBlt

GetObjectW

DeleteDC

shell32

SHGetFolderPathW

CommandLineToArgvW

ShellExecuteExW

ole32

CoUninitialize

CoInitializeEx

CoInitialize

StringFromGUID2

CoCreateInstance

CoTaskMemFree

CoInitializeSecurity

CLSIDFromProgID

kernel32

GetCommandLineA

GetCPInfo

GetOEMCP

CloseHandle

CreateFileW

GetProcAddress

LocalFree

HeapSetInformation

GetLastError

GetModuleHandleW

FormatMessageW

lstrlenA

lstrlenW

MultiByteToWideChar

WideCharToMultiByte

LCMapStringW

Sleep

GetLocalTime

GetModuleFileNameW

ExpandEnvironmentStringsW

GetTempPathW

GetTempFileNameW

CreateDirectoryW

GetFullPathNameW

CompareStringW

GetCurrentProcessId

WriteFile

SetFilePointer

LoadLibraryW

GetSystemDirectoryW

CreateFileA

HeapAlloc

HeapReAlloc

HeapFree

HeapSize

GetProcessHeap

FindClose

GetCommandLineW

GetCurrentDirectoryW

RemoveDirectoryW

SetFileAttributesW

GetFileAttributesW

DeleteFileW

FindFirstFileW

FindNextFileW

MoveFileExW

GetCurrentProcess

GetCurrentThreadId

InitializeCriticalSection

DeleteCriticalSection

ReleaseMutex

GetEnvironmentStringsW

TlsGetValue

TlsSetValue

TlsFree

CreateProcessW

GetVersionExW

VerSetConditionMask

FreeLibrary

EnterCriticalSection

LeaveCriticalSection

GetSystemTime

GetNativeSystemInfo

GetModuleHandleExW

GetWindowsDirectoryW

GetSystemWow64DirectoryW

GetComputerNameW

VerifyVersionInfoW

GetVolumePathNameW

GetDateFormatW

GetSystemDefaultLangID

GetUserDefaultLangID

GetStringTypeW

ReadFile

SetFilePointerEx

DuplicateHandle

InterlockedExchange

InterlockedCompareExchange

CreateEventW

ProcessIdToSessionId

OpenProcess

GetProcessId

WaitForSingleObject

ConnectNamedPipe

SetNamedPipeHandleState

CreateNamedPipeW

CreateThread

GetExitCodeThread

SetEvent

WaitForMultipleObjects

InterlockedIncrement

InterlockedDecrement

ResetEvent

SetEndOfFile

SetFileTime

LocalFileTimeToFileTime

DosDateTimeToFileTime

CompareStringA

GetExitCodeProcess

SetThreadExecutionState

CopyFileExW

MapViewOfFile

UnmapViewOfFile

CreateMutexW

CreateFileMappingW

GetThreadLocale

IsValidCodePage

FreeEnvironmentStringsW

TlsAlloc

SetStdHandle

GetConsoleCP

GetConsoleMode

FlushFileBuffers

DecodePointer

WriteConsoleW

GetModuleHandleA

GlobalAlloc

GlobalFree

GetFileSizeEx

CopyFileW

VirtualAlloc

VirtualFree

SystemTimeToTzSpecificLocalTime

GetTimeZoneInformation

SystemTimeToFileTime

GetSystemInfo

VirtualProtect

VirtualQuery

SetCurrentDirectoryW

FindFirstFileExW

GetFileType

GetACP

ExitProcess

GetStdHandle

LoadLibraryExW

InitializeCriticalSectionAndSpinCount

UnhandledExceptionFilter

SetUnhandledExceptionFilter

TerminateProcess

IsProcessorFeaturePresent

QueryPerformanceCounter

GetSystemTimeAsFileTime

InitializeSListHead

IsDebuggerPresent

GetStartupInfoW

RaiseException

RtlUnwind

SetLastError

LoadLibraryExA

rpcrt4

UuidCreate

Sections

.text
Size: 294KB - Virtual size: 293KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.wixburn
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

_CommonRedist/vcredist_x64.exe

.exe windows:5 windows x86 arch:x86

a1f6f100bff4507a3332f3f0cdfc24f5

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:01:cf:3e:00:00:00:00:00:0f
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/12/2009, 22:40

Not After

07/03/2011, 22:40

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:05:a2:30:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:01

Not After

25/07/2013, 19:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageContentCommitment

b7:67:e2:97:28:63:cf:54:51:e3:36:ce:0a:1f:4f:ce:6e:3a:bc:30
Signer

Actual PE Digest

b7:67:e2:97:28:63:cf:54:51:e3:36:ce:0a:1f:4f:ce:6e:3a:bc:30

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LINE_NUMS_STRIPPED

IMAGE_FILE_LOCAL_SYMS_STRIPPED

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP

IMAGE_FILE_NET_RUN_FROM_SWAP

PDB Paths

sfxcab.pdb

Imports

msvcrt

__setusermatherr

_initterm

__getmainargs

__initenv

exit

_cexit

_adjust_fdiv

_exit

_c_exit

strncpy

strstr

_strlwr

strrchr

_stricmp

__p__commode

__p__fmode

__set_app_type

_except_handler3

_controlfp

_XcptFilter

_snprintf

sprintf

strchr

_strnicmp

_vsnprintf

advapi32

InitializeAcl

AddAccessAllowedAce

SetSecurityDescriptorDacl

CryptAcquireContextA

CryptGenRandom

CryptReleaseContext

AllocateAndInitializeSid

OpenProcessToken

GetTokenInformation

GetLengthSid

InitiateSystemShutdownA

InitializeSecurityDescriptor

kernel32

CreateThread

GetFileSize

ExpandEnvironmentStringsA

CreateProcessA

GetExitCodeProcess

InitializeCriticalSectionAndSpinCount

LocalFileTimeToFileTime

SetFileTime

SetEndOfFile

CreateEventA

QueryDosDeviceA

GetDiskFreeSpaceA

GetSystemTime

QueryPerformanceCounter

GetCurrentThreadId

GetCurrentProcessId

GetSystemTimeAsFileTime

UnhandledExceptionFilter

SetUnhandledExceptionFilter

GetCurrentDirectoryA

GetProcessHeap

CopyFileA

SetFileAttributesA

DosDateTimeToFileTime

SetEvent

GetVersionExA

ReadFile

SetFilePointer

MoveFileExA

RemoveDirectoryA

GetLastError

CreateDirectoryA

GetTickCount

SetErrorMode

FreeLibrary

GetProcAddress

LoadLibraryA

GetSystemDirectoryA

CloseHandle

DeviceIoControl

CreateFileA

GetDriveTypeA

HeapFree

FormatMessageA

LeaveCriticalSection

DeleteFileA

EnterCriticalSection

TerminateProcess

WaitForMultipleObjects

CreateEventW

FindFirstFileA

Sleep

SetEnvironmentVariableA

GetEnvironmentVariableA

WideCharToMultiByte

HeapAlloc

SetLastError

WriteFile

MoveFileA

ExitProcess

DeleteCriticalSection

FlushFileBuffers

WaitForSingleObject

OpenEventA

GetCurrentProcess

GetFileAttributesA

GetCommandLineA

GetModuleFileNameA

FindClose

FindNextFileA

SystemTimeToFileTime

user32

SendDlgItemMessageA

SendMessageA

DialogBoxParamA

MessageBoxA

SetParent

EndDialog

LoadStringA

ShowWindow

ntdll

NtOpenProcessToken

NtAdjustPrivilegesToken

NtClose

NtShutdownSystem

comctl32

ord17

shell32

SHBrowseForFolderA

SHGetPathFromIDListA

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5.4MB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

_CommonRedist/vcredist_x86.exe

.exe windows:5 windows x86 arch:x86

a1f6f100bff4507a3332f3f0cdfc24f5

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:01:cf:3e:00:00:00:00:00:0f
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/12/2009, 22:40

Not After

07/03/2011, 22:40

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageContentCommitment

8a:19:aa:3a:87:7f:dd:23:dc:03:96:64:c9:5b:23:7c:35:b0:fd:3d
Signer

Actual PE Digest

8a:19:aa:3a:87:7f:dd:23:dc:03:96:64:c9:5b:23:7c:35:b0:fd:3d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LINE_NUMS_STRIPPED

IMAGE_FILE_LOCAL_SYMS_STRIPPED

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP

IMAGE_FILE_NET_RUN_FROM_SWAP

PDB Paths

sfxcab.pdb

Imports

msvcrt

__setusermatherr

_initterm

__getmainargs

__initenv

exit

_cexit

_adjust_fdiv

_exit

_c_exit

strncpy

strstr

_strlwr

strrchr

_stricmp

__p__commode

__p__fmode

__set_app_type

_except_handler3

_controlfp

_XcptFilter

_snprintf

sprintf

strchr

_strnicmp

_vsnprintf

advapi32

InitializeAcl

AddAccessAllowedAce

SetSecurityDescriptorDacl

CryptAcquireContextA

CryptGenRandom

CryptReleaseContext

AllocateAndInitializeSid

OpenProcessToken

GetTokenInformation

GetLengthSid

InitiateSystemShutdownA

InitializeSecurityDescriptor

kernel32

CreateThread

GetFileSize

ExpandEnvironmentStringsA

CreateProcessA

GetExitCodeProcess

InitializeCriticalSectionAndSpinCount

LocalFileTimeToFileTime

SetFileTime

SetEndOfFile

CreateEventA

QueryDosDeviceA

GetDiskFreeSpaceA

GetSystemTime

QueryPerformanceCounter

GetCurrentThreadId

GetCurrentProcessId

GetSystemTimeAsFileTime

UnhandledExceptionFilter

SetUnhandledExceptionFilter

GetCurrentDirectoryA

GetProcessHeap

CopyFileA

SetFileAttributesA

DosDateTimeToFileTime

SetEvent

GetVersionExA

ReadFile

SetFilePointer

MoveFileExA

RemoveDirectoryA

GetLastError

CreateDirectoryA

GetTickCount

SetErrorMode

FreeLibrary

GetProcAddress

LoadLibraryA

GetSystemDirectoryA

CloseHandle

DeviceIoControl

CreateFileA

GetDriveTypeA

HeapFree

FormatMessageA

LeaveCriticalSection

DeleteFileA

EnterCriticalSection

TerminateProcess

WaitForMultipleObjects

CreateEventW

FindFirstFileA

Sleep

SetEnvironmentVariableA

GetEnvironmentVariableA

WideCharToMultiByte

HeapAlloc

SetLastError

WriteFile

MoveFileA

ExitProcess

DeleteCriticalSection

FlushFileBuffers

WaitForSingleObject

OpenEventA

GetCurrentProcess

GetFileAttributesA

GetCommandLineA

GetModuleFileNameA

FindClose

FindNextFileA

SystemTimeToFileTime

user32

SendDlgItemMessageA

SendMessageA

DialogBoxParamA

MessageBoxA

SetParent

EndDialog

LoadStringA

ShowWindow

ntdll

NtOpenProcessToken

NtAdjustPrivilegesToken

NtClose

NtShutdownSystem

comctl32

ord17

shell32

SHBrowseForFolderA

SHGetPathFromIDListA

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.8MB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

_CommonRedist/xnafx40_redist.msi

.msi

Sharing

General

Malware Config

Signatures

Files

7dc386366e0e45317c9d988f7b0898ae

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

dinput8

winhttp

d3d9

d3dx9_43

steam_api

kernel32

user32

gdi32

shell32

ole32

oleaut32

Sections

.text Size: 913KB - Virtual size: 912KB

.rdata Size: 372KB - Virtual size: 371KB

.data Size: 13KB - Virtual size: 1.4MB

.gfids Size: 512B - Virtual size: 284B

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 346KB - Virtual size: 345KB

.reloc Size: 84KB - Virtual size: 83KB

.bind Size: 138KB - Virtual size: 138KB

5ee93a27b334994f92812e79a2fb75bd

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate

Extended Key Usages

Key Usages

61:01:cf:3e:00:00:00:00:00:0fCertificate

Extended Key Usages

Key Usages

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate

Extended Key Usages

Key Usages

61:05:a2:30:00:00:00:00:00:08Certificate

Extended Key Usages

Key Usages

e7:2c:0e:bb:86:1f:cb:57:4e:97:97:44:28:c3:0a:2d:07:1d:2d:27Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

advapi32

winmm

version

ole32

Exports

Exports

Sections

.text Size: 70KB - Virtual size: 69KB

.data Size: 4KB - Virtual size: 12KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 5KB - Virtual size: 4KB

9f601d1261adacd540476661fd007bc3

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate

Extended Key Usages

Key Usages

61:01:cf:3e:00:00:00:00:00:0fCertificate

Extended Key Usages

Key Usages

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate

Extended Key Usages

Key Usages

61:05:a2:30:00:00:00:00:00:08Certificate

Extended Key Usages

Key Usages

b1:da:04:49:85:85:98:e8:94:a8:22:25:b7:5b:70:bb:f9:f9:02:96Signer

Headers

.text
Size: 913KB - Virtual size: 912KB

.rdata
Size: 372KB - Virtual size: 371KB

.data
Size: 13KB - Virtual size: 1.4MB

.gfids
Size: 512B - Virtual size: 284B

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 346KB - Virtual size: 345KB

.reloc
Size: 84KB - Virtual size: 83KB

.bind
Size: 138KB - Virtual size: 138KB

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

61:01:cf:3e:00:00:00:00:00:0f
Certificate

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

61:05:a2:30:00:00:00:00:00:08
Certificate

e7:2c:0e:bb:86:1f:cb:57:4e:97:97:44:28:c3:0a:2d:07:1d:2d:27
Signer

.text
Size: 70KB - Virtual size: 69KB

.data
Size: 4KB - Virtual size: 12KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 5KB - Virtual size: 4KB

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

61:01:cf:3e:00:00:00:00:00:0f
Certificate

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

61:05:a2:30:00:00:00:00:00:08
Certificate

b1:da:04:49:85:85:98:e8:94:a8:22:25:b7:5b:70:bb:f9:f9:02:96
Signer

.text
Size: 71KB - Virtual size: 70KB

.data
Size: 4KB - Virtual size: 12KB

.rsrc
Size: 436KB - Virtual size: 435KB

.reloc
Size: 7KB - Virtual size: 6KB

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

61:01:cf:3e:00:00:00:00:00:0f
Certificate

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

61:06:94:2d:00:00:00:00:00:09
Certificate

22:9d:3f:6c:9f:d6:3c:85:3d:d2:28:5b:3e:7b:4f:07:0b:5d:a1:86
Signer

.text
Size: 152KB - Virtual size: 151KB

.data
Size: 4KB - Virtual size: 13KB

.rsrc
Size: 1.5MB - Virtual size: 1.5MB

.reloc
Size: 11KB - Virtual size: 11KB

.text
Size: - Virtual size: 390KB