TSR 11451 Forgotten Realms Interactive Atlas CD-ROM[.]zip

Resubmissions

29/08/2024, 05:13

240829-fwed1sxcmj 7

Sharing

Copy URL Twitter E-mail

General

Target

TSR 11451 Forgotten Realms Interactive Atlas CD-ROM.zip
Size

245.6MB
MD5

378624dc4b1c771d75b8e33e95a46434
SHA1

3c95acfc7ab308171c097ea6fb8a0299963750f5
SHA256

79890e729f7ef289a4d8b33a450f6a3ec31924ecec9937f2d2d2b3e99126ba43
SHA512

4f00959f143def5d317e25a23fc7984db78f8c2bb485c01f55a3f4e870897b5267cf5ece1823ec3d34fce66d3ed1332aab98cda28dbfd62a7fc264c80cd2274b
SSDEEP

6291456:dS8eBk3kbgNAA/oKaDfnlZQLMMK15FYXHhkUg+FpA+C:A8eOU4lUfPQLghYXHhkv+0+C

Score

3^/10

Malware Config

Signatures

Unsigned PE 12 IoCs

Checks for missing Authenticode signature.

resource
unpack002/Launcher.exe
unpack002/Patches/Update1/Setup.exe
unpack002/Patches/Update1/_ISDel.exe
unpack002/Patches/Update1/_Setup.dll
unpack002/Patches/Update2/Setup.exe
unpack002/Patches/Update2/_ISDel.exe
unpack002/Patches/Update2/_Setup.dll
unpack002/Patches/Update3/Setup.exe
unpack002/Patches/fra-cc3-symbols.exe
unpack002/SETUP.EXE
unpack002/_ISDEL.EXE
unpack002/_SETUP.DLL

Files

TSR 11451 Forgotten Realms Interactive Atlas CD-ROM.zip
.zip
FR Interactive Atlas - Box Back.jpg
.jpg
FR Interactive Atlas - Box Cover.jpg
.jpg
FR Interactive Atlas - CD-ROM.JPG
.jpg
FR Interactive Atlas - Jewel Case Back.JPG
.jpg
FR Interactive Atlas - Jewel Case Front.JPG
.jpg
FR Interactive Atlas CD-ROM.txt
TSR 11451 Forgotten Realms Interactive Atlas CD-ROM.iso
.iso
ANIMATIONS/Atlascomplete.bik
Astdion.pfi
Autorun.inf
DATA.TAG
DATA1.CAB
DATA1.HDR
LAYOUT.BIN
Launcher.exe
.exe windows:4 windows x86 arch:x86

e0881072ca7fb928b42114cb616fa66a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapSize
GetCPInfo
HeapReAlloc
RaiseException
GetACP
UnhandledExceptionFilter
GetOEMCP
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
GetEnvironmentStrings
LCMapStringA
HeapAlloc
lstrcpynA
IsBadWritePtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetLocaleInfoW
SetStdHandle
lstrlenA
InterlockedDecrement
InterlockedIncrement
GlobalUnlock
GlobalFree
LockResource
FindResourceA
HeapFree
TerminateProcess
ExitProcess
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
RtlUnwind
SetErrorMode
GlobalGetAtomNameA
GlobalAddAtomA
GetVersionExA
SizeofResource
GetModuleFileNameA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
LoadLibraryA
GetProcAddress
FreeLibrary
FlushFileBuffers
SetFilePointer
WriteFile
GetCurrentProcess
GetProcessVersion
GetLastError
SetLastError
WritePrivateProfileStringA
lstrcpyA
LoadResource
GlobalFlags
LCMapStringW
SetUnhandledExceptionFilter
TlsGetValue
WinExec
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalFree
LocalAlloc
MulDiv
GetVersion
lstrcatA
MultiByteToWideChar
WideCharToMultiByte
IsBadReadPtr
VirtualAlloc
GlobalAlloc
lstrcmpA
GetCurrentThreadId
GetCurrentThread
lstrcmpiA
GlobalDeleteAtom
GetProfileStringA
GlobalLock
CloseHandle

user32

GrayStringA
IsDialogMessageA
SetWindowTextA
ShowWindow
LoadStringA
DestroyMenu
GetDC
ReleaseDC
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
LoadCursorA
ReleaseCapture
GetDesktopWindow
WindowFromPoint
ClientToScreen
GetClassNameA
PtInRect
GetSysColorBrush
DrawTextA
CharUpperA
FindWindowA
InvalidateRect
OffsetRect
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
LoadMenuA
SetMenu
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
IntersectRect
InflateRect
EndDeferWindowPos
ScreenToClient
ScrollWindow
SetScrollInfo
ShowScrollBar
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetCapture
WinHelpA
wsprintfA
GetMenuItemCount
GetSubMenu
CopyRect
GetMenu
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
CreateWindowExA
UnhookWindowsHookEx
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetWindow
GetWindowRect
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
EndDialog
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetParent
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
SetCursor
ShowOwnedPopups
PostQuitMessage
PostMessageA
EnableWindow
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
UpdateWindow
SendDlgItemMessageA
SystemParametersInfoA
MapWindowPoints
GetSysColor
SetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
GetWindowTextLengthA
GetClassInfoA
RegisterClassA
GetMenuItemID
GetSystemMenu
AppendMenuA
SendMessageA
LoadIconA
MessageBoxA
SetPropA
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode
CharNextA
UnregisterClassA
DrawFocusRect
ShowCaret
HideCaret

gdi32

CreateBitmap
SetBkColor
GetObjectA
DeleteDC
SaveDC
RestoreDC
SelectObject
GetStockObject
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
IntersectClipRect
DeleteObject
GetDeviceCaps
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetTextExtentPointA
PatBlt
CreateDIBitmap
CreateCompatibleDC
BitBlt
SetTextColor

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCloseKey
RegOpenKeyExA
RegCreateKeyA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA

shell32

DragQueryFileA
DragFinish

comctl32

ord17
ImageList_Destroy

Sections

.text
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
MAPS/0030 Temple of Selune.FCW
MAPS/0040 Manor of the Sea King.FCW
MAPS/0050 Catacombs Below the Sea King's Manor.FCW
MAPS/0060 Volkumburgh.fcw
MAPS/0070 Amelior's Workshop.fcw
MAPS/0090 College of Rune Magics.FCW
MAPS/0100 College of Shaping Magics.FCW
MAPS/0260 Ilefarn Area A Workshops.FCW
MAPS/0280 Ilefarn Area B Social Areas, Workshops.FCW
MAPS/0290 Ilefarn Area C Living Quarters.FCW
MAPS/0300 Ilefarn Area D General Living.FCW
MAPS/0310 Ilefarn Area E Temple.fcw
MAPS/0320 Ilefarn Area F Refuge.fcw
MAPS/0330 Ilefarn Area G Workshops.FCW
MAPS/0340 Ilefarn Area H Living Quarters.FCW
MAPS/0350 Ilefarn Area J Living Quarters.FCW
MAPS/0360 Ilefarn Area L Quarry Worker's Living Area.FCW
MAPS/0370 Ilefarn Area K Storage.fcw
MAPS/0380 Darkhold Vale.FCW
MAPS/0400a Castle Darkhold Main Level.FCW
MAPS/0400b Castle Darkhold Gallery Level.FCW
MAPS/0400c Castle Darkhold Storage Level.FCW
MAPS/0400d Castle Darkhold Guest Level.FCW
MAPS/0400e Castle Darkhold Tower Level.FCW
MAPS/0400f Castle Darkhold Basement.FCW
MAPS/0510 Mictlapec.FCW
MAPS/0560 Crystal Labyrinth.FCW
MAPS/0580 Stardock Asteroid.fcw
MAPS/0580 Stardock.FCW
MAPS/0590 Lost Level.FCW
MAPS/0610 Lost Level - Maddgoth's Castle.FCW
MAPS/0610 Maddgoth's Castle.fcw
MAPS/0770 Garrison Headquarters.FCW
MAPS/0860 Ways Unknown.FCW
MAPS/0870 Guard Stable.FCW
MAPS/0880 Guard Barracks.FCW
MAPS/0890 The Happy Stein.FCW
MAPS/0900 Shod Talon.FCW
MAPS/0910 Pig in a Poke.FCW
MAPS/0930 Ye Who Dare.FCW
MAPS/0940 Narwhal Manor.FCW
MAPS/1000 Seaside Salvage Company.fcw
MAPS/10001 Tasselheart.FCW
MAPS/10008 Edge Wood.FCW
MAPS/10009 Oaknoll.FCW
MAPS/10010 Teshmere.FCW
MAPS/10011 White Chalk Hollow.fcw
MAPS/10012 Hadreth's Glen.FCW
MAPS/10014 Bristar.FCW
MAPS/10015 Moonrise Hill.fcw
MAPS/10017 Landaw.fcw
MAPS/10018 Hallow Creek.fcw
MAPS/10020 Blackfeather Bridge.fcw
MAPS/10031 Mistletarn.FCW
MAPS/10032 Mistlebrook.FCW
MAPS/10041 UMLevel05.FCW
MAPS/1020 Davy Jones' Lock-Up.fcw
MAPS/1030 Zorba's Fish Market.fcw
MAPS/1060 The Shark Fin.FCW
MAPS/1080 The Far Guardians' Traveler's Mission.FCW
MAPS/1100 Sharkey's Bar & Grill.FCW
MAPS/1110 Tolbara's Mansion.FCW
MAPS/1120 Chambers of Twin Burnings.fcw
MAPS/1130 Devouring Chambers.fcw
MAPS/1140 Macoley Farm.fcw
MAPS/1150 Red Scourge.fcw
MAPS/1210 Dragonspear Labyrinth.fcw
MAPS/1290 The Way Inn.fcw
MAPS/1300 Way Inn Village.fcw
MAPS/1340 Tower of Ashaba.FCW
MAPS/1360 Blackstaff Tower.fcw
MAPS/1370 The Roosting Griffon Inn.FCW
MAPS/1390 Lonesome Tankard Inn.FCW
MAPS/1400 Waterdeep Extras Warehouse.fcw
MAPS/1410 Waterdeep Extras Bldg with Courtyard.fcw
MAPS/1420 Waterdeep Extras Strange Shaped Rooms.fcw
MAPS/1450 Waterdeep Extras Big Room Inn A.fcw
MAPS/1460 Waterdeep Extras Small Rooms.fcw
MAPS/1570 Outer Fort.fcw
MAPS/1600 Deepwater Wall Fort.FCW
MAPS/1620 Mirt's Mansion.FCW
MAPS/1650 Chain Gates.FCW
MAPS/1670 Palace Warehouse.fcw
MAPS/1700 The Map House.FCW
MAPS/1710 Dragon's Head Tavern.fcw
MAPS/1730 Palace Stables.FCW
MAPS/1760 Mother Tathlorn's.FCW
MAPS/1760 New Mother Tathlorn's.FCW
MAPS/1770 Barracks.fcw
MAPS/1790 Spires of the Morning Main Floor.fcw
MAPS/1800 Spires of the Morning Upper Floor.fcw
MAPS/1810 Spires of the Morning Tower Level.fcw
MAPS/1820 Eagleshield Family Villa.FCW
MAPS/1840 Armory.fcw
MAPS/1870 Tessalar's Tower.FCW
MAPS/1890 Gelfuril the Trader.fcw
MAPS/1900 Athals Stables.FCW
MAPS/1920 Bellisters House.fcw
MAPS/1940 Pelauvir's Counter.fcw
MAPS/1950 Stone House.fcw
MAPS/1960 Arnagus the Shipwright.FCW
MAPS/1980 Yawning Portal.FCW
MAPS/1990 House of the Homeless.FCW
MAPS/2010 Merchant's Rest.fcw
MAPS/2040 Ulbrinter Family Villa.FCW
MAPS/2060 Roaringhorn Family Villa.FCW
MAPS/2080 Amcathra Family Villa.fcw
MAPS/2120 North Gate.FCW
MAPS/2190 Typical Khan's Camp.fcw
MAPS/2380 Selected Buildings of Waterdeep.fcw
MAPS/2390 Castle Spulzeer Levels 1-3.FCW
MAPS/2390 Castle Spulzeer Lower Levels.FCW
MAPS/2390 Castle Spulzeer.FCW
MAPS/2570 Illutian Snowhouses.fcw
MAPS/2720 High Horn.fcw
MAPS/2750 Corellon's Grove.fcw
MAPS/2760 Towers of the Sun and Moon.fcw
MAPS/3010 Old Skull Inn.fcw
MAPS/3020 Elminster's Tower.FCW
MAPS/3040 Tower of Ashaba Dungeon.fcw
MAPS/3050 Twisted Tower Large Map - Part 1.FCW
MAPS/3060 Twisted Tower Inset 4A.FCW
MAPS/3070-80 Twisted Tower Large Map Part 2.FCW
MAPS/3090 Drow Grave Cavern.fcw
MAPS/3100 Twisted Tower - Lake Skum.FCW
MAPS/3110 Twisted Tower - Sliding Walls and Drawbridge.FCW
MAPS/3120 Twisted Tower - Drow Treasure Room.FCW
MAPS/3180 House of the Moon.FCW
MAPS/3210 Flaming Brazier 1st Level.FCW
MAPS/3210 Flaming Brazier 2nd Level.FCW
MAPS/3210 Flaming Brazier 3rd Level.FCW
MAPS/3210 Flaming Brazier.FCW
MAPS/3260 Inn of the Dripping Dagger.FCW
MAPS/3320 Blue Alley.fcw
MAPS/3500 Madame Garah's Boarding House.FCW
MAPS/3530 Safehaven Inn and Beer Golem Tavern.fcw
MAPS/3590 Zhentil Keep post 1368.FCW
MAPS/3660 Arabel.FCW
MAPS/3670 Almorel.FCW
MAPS/3700 Aithelar.fcw
MAPS/3710 Alaghon.FCW
MAPS/3720 Amphail.FCW
MAPS/3730 Almraiven.fcw
MAPS/3740 Ankhapur.fcw
MAPS/3760 Archenbridge.FCW
MAPS/3770 Arrabar.fcw
MAPS/3780 Ascore.FCW
MAPS/3800 Ashabenford.fcw
MAPS/3810 Athkatla.FCW
MAPS/3820 Azatl.FCW
MAPS/3830 Baldur's Gate.FCW
MAPS/3860 Berdusk.FCW
MAPS/3870 Bezantur.FCW
MAPS/3880 Bryn Shander.FCW
MAPS/3890 Calaunt.FCW
MAPS/3900 Calimport.FCW
MAPS/3910 Caer Callidyrr.FCW
MAPS/3910 Callidyrr.FCW
MAPS/3920 Carradoon.fcw
MAPS/3930 Chrysalis.FCW
MAPS/3940 Cordotl.FCW
MAPS/3950 Corwell Town.FCW
MAPS/3960 Crimmor.FCW
MAPS/3970 Daerlun.FCW
MAPS/3981 Dagger Falls.FCW
MAPS/3990 Daggerford.FCW
MAPS/4000 Darromar.FCW
MAPS/4030 Doncastle.FCW
MAPS/4040 Dragonspear Castle.FCW
MAPS/4050 Drelagara.FCW
MAPS/4070 Easthaven.fcw
MAPS/4080 Elmwood.FCW
MAPS/4090 Elion.FCW
MAPS/4101 Eltabbar.FCW
MAPS/4110 Elturel.fcw
MAPS/4120 Elversult.FCW
MAPS/4130 Eshpurta.fcw
MAPS/4140 Esmeltaran.FCW
MAPS/4150 Essembra.FCW
MAPS/4160 Eveningstar.FCW
MAPS/4180 Halfhap.FCW
MAPS/4190 Harrowdale.FCW
MAPS/4220 Helmsport.FCW
MAPS/4240 Highcastle.fcw
MAPS/4250 Highmoon.FCW
MAPS/4260 Hillsfar.FCW
MAPS/4270 Hulburg.FCW
MAPS/4280 Barbarians Camp.FCW
MAPS/4290 Immilmar.FCW
MAPS/4300 Immersea.FCW
MAPS/4310 Innarlith.FCW
MAPS/4320 Iriaebor.fcw
MAPS/4350 Keczulla.FCW
MAPS/4360 Kuo Meilan.FCW
MAPS/4370 Leuthilspar.FCW
MAPS/4380 Llorbauth.FCW
MAPS/4390 Lonelywood.fcw
MAPS/4400 Longsaddle.fcw
MAPS/4411 Luskan.FCW
MAPS/4420 Luthcheq.fcw
MAPS/4450 Marsember.FCW
MAPS/4460 Melvaunt.FCW
MAPS/4470 Memnon.FCW
MAPS/4520 Mezro.FCW
MAPS/4530 Michaca.FCW
MAPS/4540 Mintar.fcw
MAPS/4550 Mulmaster.FCW
MAPS/4560 Murann.FCW
MAPS/4570 Myratma.FCW
MAPS/4650 Nexal.FCW
MAPS/4660 Nimlith.FCW
MAPS/4670 Nimpeth.fcw
MAPS/4680 Ordulin.FCW
MAPS/4690 Procampur.FCW
MAPS/4700 Ormpetarr.FCW
MAPS/4710 Ostrav.FCW
MAPS/4730 Phlan 1368.FCW
MAPS/4740 Port Castigliar.fcw
MAPS/4750 Raven's Bluff.FCW
MAPS/4760 Riatavin.FCW
MAPS/4770 Ruith.FCW
MAPS/4780 Saelmur.fcw
MAPS/4790 Saerloon.FCW
MAPS/4800 Saradush.FCW
MAPS/4810 Scardale.FCW
MAPS/4820 Scornubel.FCW
MAPS/4830 Selgaunt.FCW
MAPS/4840 Settlestone.FCW
MAPS/4850 Shadowdale.FCW
MAPS/4870 Silverymoon.fcw
MAPS/4880 Skaug.FCW
MAPS/4890 Skuld.FCW
MAPS/4900 Snowmantle.FCW
MAPS/4920 Stormpenhauder.fcw
MAPS/4930 Sulasspryn.fcw
MAPS/4940 Suldolphor.FCW
MAPS/4950 Suzail.FCW
MAPS/4960 Taltempla.FCW
MAPS/4970 Tantras.FCW
MAPS/4971 Tantras 3D.FCW
MAPS/4980 Targos.FCW
MAPS/4990 Teziir.FCW
MAPS/5000 Tegal's Mark.FCW
MAPS/5010 Termlaine.FCW
MAPS/5030 Thentia.FCW
MAPS/5040 Tilverton.fcw
MAPS/5050 Trenahess.fcw
MAPS/5060 Tukan.fcw
MAPS/5070 Tulom-Itzi.FCW
MAPS/5080 Ty'athalael.FCW
MAPS/5100 Urml.FCW
MAPS/5110 Urmlaspyr.FCW
MAPS/5120 Vaelen.FCW
MAPS/5130 Vekkak.FCW
MAPS/5140 Velen.fcw
MAPS/5150 Velprintaler.fcw
MAPS/5170 Volothamp.fcw
MAPS/5180 Voonlar.fcw
MAPS/5390 Westgate.FCW
MAPS/5403 Wheloon.FCW
MAPS/5410 Whitebranch.FCW
MAPS/5440 Yhaunn.FCW
MAPS/5450 Yulash.FCW
MAPS/5460 Zazesspur.FCW
MAPS/5560 Mermaid Sword.FCW
MAPS/5580 Darkhorn Castle - The Undertomb.FCW
MAPS/5590 The Cellars of Darkhorn Castle.FCW
MAPS/5600 The House of the Black Hand.FCW
MAPS/5610 Windlord's Rest.FCW
MAPS/5700 Wyllowwood.fcw
MAPS/5710 Murial's Gauntlet.FCW
MAPS/5720 Trobriand's Graveyard.fcw
MAPS/5730 Undermountain Level 1.FCW
MAPS/5740-UMLevel02.fcw
MAPS/5750-UMLevel03N.fcw
MAPS/5760-UMLevel03S.FCW
MAPS/5770 Undermountain Level 3 (later changes).fcw
MAPS/5890 The Big Cave (Lower Level).FCW
MAPS/5890 The Big Cave.FCW
MAPS/5900 Caer Allisynn.FCW
MAPS/5940 Fionas House.fcw
MAPS/5950 Caer Callidyrr Wizards' Tower.FCW
MAPS/5980 The Black Oak.fcw
MAPS/5990 Annuwynns Manor.FCW
MAPS/5990 Cleric's Chapel.fcw
MAPS/6140 Pooks Palace.FCW
MAPS/6190 The Rising Moon.FCW
MAPS/6300 Hill of Fangs.FCW
MAPS/6300 The Citadel.FCW
MAPS/6310 Redstone Castle.FCW
MAPS/6320 Giogi's Townhouse.FCW
MAPS/6610 Orc's Camp.FCW
MAPS/6630 Sauros Island Overview.FCW
MAPS/6640 Sauros Island Central Keep.FCW
MAPS/6650 Sauros Island Underground Complex.FCW
MAPS/7020 Thirsty Throat Cellar.FCW
MAPS/7020 Thirsty Throat Ground Floor.FCW
MAPS/7020 Thirsty Throat Second Floor.FCW
MAPS/7030 Castle Waterdeep 3D.FCW
MAPS/7030 Castle Waterdeep Eighth Floor.fcw
MAPS/7030 Castle Waterdeep Fifth Floor.fcw
MAPS/7030 Castle Waterdeep First Floor.FCW
MAPS/7030 Castle Waterdeep Fourth Floor.fcw
MAPS/7030 Castle Waterdeep Ninth Floor.fcw
MAPS/7030 Castle Waterdeep Second Floor.FCW
MAPS/7030 Castle Waterdeep Seventh Floor.fcw
MAPS/7030 Castle Waterdeep Sixth Floor.fcw
MAPS/7030 Castle Waterdeep Tenth Floor.fcw
MAPS/7030 Castle Waterdeep Third Floor.FCW
MAPS/A1.FCW
MAPS/A2.FCW
MAPS/Adventurers' Quarter.FCW
MAPS/Alphabetical list.bkm
MAPS/Amarune Island.FCW
MAPS/Archendale.FCW
MAPS/B1aSElc.FCW
MAPS/B1aSWlc.FCW
MAPS/B1alc.FCW
MAPS/B1blc.FCW
MAPS/B1cNElc.FCW
MAPS/B1cNWlc.FCW
MAPS/B1cNorth.FCW
MAPS/B1cSElc.FCW
MAPS/B1cSWlc.FCW
MAPS/B1cSouth.FCW
MAPS/B1clc.FCW
MAPS/B1dNElc.FCW
MAPS/B1dNWlc.FCW
MAPS/B1dSElc.FCW
MAPS/B1dSWlc.FCW
MAPS/B1dlc.FCW
MAPS/B2aNElc.FCW
MAPS/B2aNWlc.FCW
MAPS/B2alc.FCW
MAPS/B2bNElc.FCW
MAPS/B2bNWlc.FCW
MAPS/B2bSElc.FCW
MAPS/B2bSWlc.FCW
MAPS/B2clc.FCW
MAPS/B2dNElc.FCW
MAPS/B2dNWlc.FCW
MAPS/Battledale.FCW
MAPS/Bawa.FCW
MAPS/Bawalc.FCW
MAPS/C1aSElc.FCW
MAPS/C1aSWlc.FCW
MAPS/C1alc.FCW
MAPS/C1cNElc.FCW
MAPS/C1cNWlc.FCW
MAPS/C1cSElc.FCW
MAPS/C1cSWlc.FCW
MAPS/C1clc.FCW
MAPS/C2aNElc.FCW
MAPS/C2aNWlc.FCW
MAPS/C2aSElc.FCW
MAPS/C2aSWlc.FCW
MAPS/C2alc.FCW
MAPS/Castle Ward.FCW
MAPS/Cormyr.FCW
MAPS/D.FCW
MAPS/D1.FCW
MAPS/Daggerdale.FCW
MAPS/Dead Trades Ward.FCW
MAPS/Deep Realms.FCW
MAPS/Deepingdale.FCW
MAPS/Dock South Ward.FCW
MAPS/Evermeetlc.FCW
MAPS/Featherdale.FCW
MAPS/Harrowdale.FCW
MAPS/High Dale.fcw
MAPS/INDEX.IDX
MAPS/Ilighon.fcw
MAPS/Kings Forest.FCW
MAPS/Lantan.FCW
MAPS/Mazticalc.FCW
MAPS/Mistledale.FCW
MAPS/Mithril Hall.FCW
MAPS/Moonsea.FCW
MAPS/Moonshae Island.fcw
MAPS/Moonshaeslc.FCW
MAPS/Myth Drannor Ruins.FCW
MAPS/Nelantherlc.FCW
MAPS/Nexal.FCW
MAPS/Nimbral.FCW
MAPS/North Ward.FCW
MAPS/Overland maps.BKM
MAPS/Phlan LAM.FCW
MAPS/Sea Ward.FCW
MAPS/Sembia.FCW
MAPS/Sewers of Waterdeep.FCW
MAPS/Spiderhaunt Woods.FCW
MAPS/Tasseldale.FCW
MAPS/Ten Townslc.FCW
MAPS/Toril.fcw
MAPS/Volo 5260.FCW
MAPS/Volo 5261.FCW
MAPS/Volo 5262.FCW
MAPS/Volo 5263.FCW
MAPS/Volo 5264.FCW
MAPS/Volo 5265.FCW
MAPS/Volo 5266.FCW
MAPS/Volo 5267.FCW
MAPS/Volo 5268.FCW
MAPS/Volo 5269a.FCW
MAPS/Volo 5269b.FCW
MAPS/Volo 5270.FCW
MAPS/Volo 5271.FCW
MAPS/Volo 5272.FCW
MAPS/Volo 5273.FCW
MAPS/Volo 5274a.FCW
MAPS/Volo 5274b.FCW
MAPS/Volo 5275.FCW
MAPS/Volo 5276.FCW
MAPS/Volo 5277a.FCW
MAPS/Volo 5277b.FCW
MAPS/Volo 5278a.FCW
MAPS/Volo 5278b.FCW
MAPS/Volo 5279a.FCW
MAPS/Volo 5279b.FCW
MAPS/Volo 5280a.FCW
MAPS/Volo 5280b.FCW
MAPS/Volo 5281.FCW
MAPS/Volo 5282a.FCW
MAPS/Volo 5282b.FCW
MAPS/Volo 5283a.FCW
MAPS/Volo 5283b.FCW
MAPS/Volo 5284a.FCW
MAPS/Volo 5284b.FCW
MAPS/Volo 5285a.FCW
MAPS/Volo 5285b.FCW
MAPS/Volo 5286.FCW
MAPS/Volo 5287.FCW
MAPS/Volo 5288.FCW
MAPS/Volo 5289.FCW
MAPS/Volo 5290.FCW
MAPS/Volo 5291.FCW
MAPS/Volo 5292.FCW
MAPS/Volo 5293.FCW
MAPS/Volo 5294a.FCW
MAPS/Volo 5294b.FCW
MAPS/Volo 5295.FCW
MAPS/Volo 5296.FCW
MAPS/Volo 5297.FCW
MAPS/Volo 5298.FCW
MAPS/Volo 5299.FCW
MAPS/Volo 5300.FCW
MAPS/Volo 5301.FCW
MAPS/Volo 5302.FCW
MAPS/Volo 5303.FCW
MAPS/Volo 5304.FCW
MAPS/Volo 5305.FCW
MAPS/Volo 5306.FCW
MAPS/Volo 5307.FCW
MAPS/Volo 5308a.FCW
MAPS/Volo 5308b.FCW
MAPS/Volo 5309.FCW
MAPS/Volo 5310.FCW
MAPS/Volo 5311.FCW
MAPS/WD Ward Minimap.FCW
MAPS/Waterdeep maps.BKM
MAPS/Waterdeep.FCW
MAPS/Zakhara.FCW
MAPS/Zult Moneylender.FCW
OS.DAT
Patches/Update1/DATA.TAG
Patches/Update1/SETUP.INI
Patches/Update1/Setup.exe
.exe windows:4 windows x86 arch:x86

1042f249352088f5c8d4f8a3b1728f12

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerLanguageNameA

kernel32

WinExec
GetDriveTypeA
DeleteFileA
GetVersionExA
GetModuleHandleA
GetSystemInfo
FindFirstFileA
IsDBCSLeadByte
GlobalFree
lstrlenA
lstrcpyA
FlushFileBuffers
GetModuleFileNameA
GetWindowsDirectoryA
SetFilePointer
WriteFile
GetLastError
GetTickCount
MulDiv
GetPrivateProfileIntA
GetPrivateProfileStringA
lstrcatA
lstrcmpiA
GlobalHandle
GetUserDefaultLCID
FindResourceA
GetProfileStringA
SetErrorMode
LoadLibraryA
FreeLibrary
CreateFileA
GetFileSize
GlobalAlloc
CloseHandle
GlobalLock
ReadFile
GlobalUnlock
FindClose
GetDiskFreeSpaceA
WritePrivateProfileStringA
LCMapStringW
HeapReAlloc
GetProcAddress
HeapAlloc
SetEnvironmentVariableA
VirtualAlloc
GetACP
CompareStringW
GetOEMCP
GetCPInfo
GetStringTypeW
CompareStringA
LCMapStringA
GetStringTypeA
SetStdHandle
MultiByteToWideChar
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
WideCharToMultiByte
GetVersion
GetCommandLineA
GetStartupInfoA
GetCurrentProcess
TerminateProcess
ExitProcess
CreateDirectoryA

user32

DestroyWindow
EndDialog
DrawIcon
DialogBoxParamA
GetWindowPlacement
LoadIconA
DestroyIcon
SetRectEmpty
FillRect
LoadStringA
wsprintfA
PostQuitMessage
SetWindowTextA
GetDlgItem
InflateRect
SendMessageA
SetWindowLongA
InvalidateRect
BeginPaint
EndPaint
DefWindowProcA
GetWindowLongA
GetDC
ReleaseDC
LoadCursorA
GetClassInfoA
RegisterClassA
MoveWindow
GetWindowRect
GetWindowTextA
GetWindowTextLengthA
CharUpperA
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
PeekMessageA
MessageBoxA
PostMessageA
FindWindowA
SubtractRect
SetWindowPos
GetClassNameA
IntersectRect
EqualRect
GetWindow
ScreenToClient
GetClientRect
UpdateWindow
SetTimer
ShowWindow
IsWindow
RegisterWindowMessageA
CreateDialogParamA
GetParent
SendDlgItemMessageA
CharNextA
SetRect
GetSystemMetrics
GetSysColor
CreateWindowExA
DrawTextA

gdi32

RestoreDC
DeleteObject
CreateFontIndirectA
GetObjectA
SaveDC
LineTo
MoveToEx
CreatePen
ExtTextOutA
SetBkColor
SetTextColor
GetTextMetricsA
CreateSolidBrush
CreateDIBitmap
RealizePalette
SelectPalette
GetDeviceCaps
CreatePalette
GetSystemPaletteEntries
UnrealizeObject
DeleteDC
BitBlt
CreateCompatibleDC
SelectClipRgn
CreateRectRgn
GetStockObject
GetTextExtentPointA
SelectObject

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA

Sections

.text
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Patches/Update1/Update1.txt
Patches/Update1/_ISDel.exe
.exe windows:4 windows x86 arch:x86

af417a432744d25669a269c31c292485

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RemoveDirectoryA
DeleteFileA
GetWindowsDirectoryA
GetTickCount
CloseHandle
CreateFileA
SetErrorMode
GetPrivateProfileIntA
lstrcmpiA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetModuleHandleA
lstrcatA
lstrcpyA
UnhandledExceptionFilter
GetModuleFileNameA
GetProcAddress
VirtualAlloc
LoadLibraryA
GetStringTypeA
HeapAlloc
GetStringTypeW
LCMapStringW
LCMapStringA
HeapFree
RtlUnwind
VirtualFree
WriteFile
HeapDestroy
GetFileType
HeapCreate
GetLastError
SetCurrentDirectoryA
Sleep
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
SetHandleCount
GetCPInfo
GetACP
GetOEMCP
GetStdHandle

user32

CharNextA
DefWindowProcA
wsprintfA
IsWindow
RegisterWindowMessageA
SetTimer
PostQuitMessage
RegisterClassA
LoadIconA
LoadCursorA
GetMessageA
GetSystemMetrics
CreateWindowExA
SendMessageA
TranslateMessage
DispatchMessageA

Exports

Exports

WndProc

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Patches/Update1/_Setup.dll
.dll windows:4 windows x86 arch:x86

211a1ac2159862c6038f1d798175f2be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetEnvironmentStrings
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetCommandLineA
GetEnvironmentStringsW
WideCharToMultiByte
HeapDestroy
HeapCreate
VirtualFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
HeapFree
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualAlloc
GetProcAddress
LoadLibraryA
FlushFileBuffers
CloseHandle
SetStdHandle
SetFilePointer

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Patches/Update1/_inst32i.ex_
Patches/Update1/_sys1.cab
Patches/Update1/_sys1.hdr
Patches/Update1/_user1.cab
Patches/Update1/_user1.hdr
Patches/Update1/data1.cab
Patches/Update1/data1.hdr
Patches/Update1/data2.cab
Patches/Update1/data3.cab
Patches/Update1/data4.cab
Patches/Update1/data5.cab
Patches/Update1/data6.cab
Patches/Update1/data7.cab
Patches/Update1/data8.cab
Patches/Update1/lang.dat
Patches/Update1/layout.bin
Patches/Update1/os.dat
Patches/Update1/setup.ins
Patches/Update1/setup.lid
Patches/Update2/DATA.TAG
Patches/Update2/SETUP.INI
Patches/Update2/Setup.exe
.exe windows:4 windows x86 arch:x86

1042f249352088f5c8d4f8a3b1728f12

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerLanguageNameA

kernel32

WinExec
GetDriveTypeA
DeleteFileA
GetVersionExA
GetModuleHandleA
GetSystemInfo
FindFirstFileA
IsDBCSLeadByte
GlobalFree
lstrlenA
lstrcpyA
FlushFileBuffers
GetModuleFileNameA
GetWindowsDirectoryA
SetFilePointer
WriteFile
GetLastError
GetTickCount
MulDiv
GetPrivateProfileIntA
GetPrivateProfileStringA
lstrcatA
lstrcmpiA
GlobalHandle
GetUserDefaultLCID
FindResourceA
GetProfileStringA
SetErrorMode
LoadLibraryA
FreeLibrary
CreateFileA
GetFileSize
GlobalAlloc
CloseHandle
GlobalLock
ReadFile
GlobalUnlock
FindClose
GetDiskFreeSpaceA
WritePrivateProfileStringA
LCMapStringW
HeapReAlloc
GetProcAddress
HeapAlloc
SetEnvironmentVariableA
VirtualAlloc
GetACP
CompareStringW
GetOEMCP
GetCPInfo
GetStringTypeW
CompareStringA
LCMapStringA
GetStringTypeA
SetStdHandle
MultiByteToWideChar
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
WideCharToMultiByte
GetVersion
GetCommandLineA
GetStartupInfoA
GetCurrentProcess
TerminateProcess
ExitProcess
CreateDirectoryA

user32

DestroyWindow
EndDialog
DrawIcon
DialogBoxParamA
GetWindowPlacement
LoadIconA
DestroyIcon
SetRectEmpty
FillRect
LoadStringA
wsprintfA
PostQuitMessage
SetWindowTextA
GetDlgItem
InflateRect
SendMessageA
SetWindowLongA
InvalidateRect
BeginPaint
EndPaint
DefWindowProcA
GetWindowLongA
GetDC
ReleaseDC
LoadCursorA
GetClassInfoA
RegisterClassA
MoveWindow
GetWindowRect
GetWindowTextA
GetWindowTextLengthA
CharUpperA
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
PeekMessageA
MessageBoxA
PostMessageA
FindWindowA
SubtractRect
SetWindowPos
GetClassNameA
IntersectRect
EqualRect
GetWindow
ScreenToClient
GetClientRect
UpdateWindow
SetTimer
ShowWindow
IsWindow
RegisterWindowMessageA
CreateDialogParamA
GetParent
SendDlgItemMessageA
CharNextA
SetRect
GetSystemMetrics
GetSysColor
CreateWindowExA
DrawTextA

gdi32

RestoreDC
DeleteObject
CreateFontIndirectA
GetObjectA
SaveDC
LineTo
MoveToEx
CreatePen
ExtTextOutA
SetBkColor
SetTextColor
GetTextMetricsA
CreateSolidBrush
CreateDIBitmap
RealizePalette
SelectPalette
GetDeviceCaps
CreatePalette
GetSystemPaletteEntries
UnrealizeObject
DeleteDC
BitBlt
CreateCompatibleDC
SelectClipRgn
CreateRectRgn
GetStockObject
GetTextExtentPointA
SelectObject

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA

Sections

.text
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Patches/Update2/_ISDel.exe
.exe windows:4 windows x86 arch:x86

af417a432744d25669a269c31c292485

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RemoveDirectoryA
DeleteFileA
GetWindowsDirectoryA
GetTickCount
CloseHandle
CreateFileA
SetErrorMode
GetPrivateProfileIntA
lstrcmpiA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetModuleHandleA
lstrcatA
lstrcpyA
UnhandledExceptionFilter
GetModuleFileNameA
GetProcAddress
VirtualAlloc
LoadLibraryA
GetStringTypeA
HeapAlloc
GetStringTypeW
LCMapStringW
LCMapStringA
HeapFree
RtlUnwind
VirtualFree
WriteFile
HeapDestroy
GetFileType
HeapCreate
GetLastError
SetCurrentDirectoryA
Sleep
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
SetHandleCount
GetCPInfo
GetACP
GetOEMCP
GetStdHandle

user32

CharNextA
DefWindowProcA
wsprintfA
IsWindow
RegisterWindowMessageA
SetTimer
PostQuitMessage
RegisterClassA
LoadIconA
LoadCursorA
GetMessageA
GetSystemMetrics
CreateWindowExA
SendMessageA
TranslateMessage
DispatchMessageA

Exports

Exports

WndProc

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Patches/Update2/_Setup.dll
.dll windows:4 windows x86 arch:x86

211a1ac2159862c6038f1d798175f2be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetEnvironmentStrings
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetCommandLineA
GetEnvironmentStringsW
WideCharToMultiByte
HeapDestroy
HeapCreate
VirtualFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
HeapFree
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualAlloc
GetProcAddress
LoadLibraryA
FlushFileBuffers
CloseHandle
SetStdHandle
SetFilePointer

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Patches/Update2/_inst32i.ex_
Patches/Update2/_sys1.cab
Patches/Update2/_sys1.hdr
Patches/Update2/_user1.cab
Patches/Update2/_user1.hdr
Patches/Update2/data1.cab
Patches/Update2/data1.hdr
Patches/Update2/data2.cab
Patches/Update2/data3.cab
Patches/Update2/data4.cab
Patches/Update2/data5.cab
Patches/Update2/lang.dat
Patches/Update2/layout.bin
Patches/Update2/os.dat
Patches/Update2/setup.ins
Patches/Update2/setup.lid
Patches/Update2/update2.txt
Patches/Update3/Setup.exe
.exe windows:4 windows x86 arch:x86

e58263e3d76981c7bc11645789a2638f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17

version

VerInstallFileA

kernel32

GetStartupInfoA
ExitProcess
GetCommandLineA
GetModuleHandleA
AddAtomA
LockResource
lstrcpyA
FindResourceExA
SetErrorMode
LocalFree
FormatMessageA
OpenEventA
FindResourceA
SetEvent
LoadResource
RemoveDirectoryA
GetAtomNameA
GetShortPathNameA
CreateDirectoryA
lstrcpynA
lstrlenA
lstrcatA
GetLastError
GetFileAttributesA
SetFileAttributesA
GlobalLock
GlobalAlloc
GetPrivateProfileIntA
GetPrivateProfileStringA
CopyFileA
DeleteFileA
GetUserDefaultLangID
GlobalUnlock
GlobalFree
GetModuleFileNameA
RtlUnwind
Sleep
CloseHandle
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
GetTempPathA
WaitForSingleObject
CreateProcessA
CreateFileA
GetTempFileNameA

user32

GetDC
ReleaseDC
PeekMessageA
CreateDialogParamA
EndPaint
MessageBoxA
GetWindowLongA
EndDialog
BeginPaint
DispatchMessageA
SetWindowLongA
DialogBoxIndirectParamA
DestroyWindow
CreateDialogIndirectParamA
SetDlgItemTextA
GetClientRect
GetWindowRect
MoveWindow
CharLowerA
wsprintfA
IsDialogMessageA
TranslateMessage
GetDlgItem
LoadImageA
SendMessageA
CharUpperA
CharNextA
GetDesktopWindow

gdi32

BitBlt
UnrealizeObject
GetObjectA
GetDeviceCaps
CreateHalftonePalette
CreatePalette
GetSystemPaletteEntries
GetDIBColorTable
SelectPalette
RealizePalette
DeleteDC
CreateCompatibleDC
SelectObject

advapi32

RegOpenKeyA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA

ole32

CoInitialize
CoFreeAllLibraries
CoUninitialize
CoCreateInstance

oleaut32

SysAllocString
SysAllocStringLen
SysFreeString
VariantClear
SafeArrayGetElement
SysStringLen
SafeArrayGetLBound
SafeArrayGetUBound

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Patches/Update3/Setup.ini
Patches/Update3/data1.cab
Patches/Update3/data1.hdr
Patches/Update3/data2.cab
Patches/Update3/ikernel.ex_
Patches/Update3/layout.bin
Patches/Update3/setup.inx
Patches/fra-cc3-symbols.exe
.exe windows:4 windows x86 arch:x86

29f777a4c1af9bae1c88e78b8844b0f5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17

kernel32

WaitForSingleObject
SetEvent
ResetEvent
WaitForMultipleObjects
CompareStringA
GetLastError
WideCharToMultiByte
MultiByteToWideChar
CompareStringW
lstrlenA
LoadLibraryA
AreFileApisANSI
GetModuleFileNameA
GetModuleFileNameW
FormatMessageA
LocalFree
FormatMessageW
SetFileAttributesA
RemoveDirectoryA
SetCurrentDirectoryA
GetWindowsDirectoryA
SetFileAttributesW
RemoveDirectoryW
CreateDirectoryA
CreateDirectoryW
DeleteFileA
DeleteFileW
GetShortPathNameW
GetShortPathNameA
GetFullPathNameA
GetFullPathNameW
GetCurrentDirectoryA
GetTempPathA
GetTempFileNameA
FindClose
FindFirstFileA
SetLastError
FindFirstFileW
FindNextFileA
CreateThread
CreateFileA
CreateFileW
GetFileSize
SetFilePointer
ReadFile
SetFileTime
WriteFile
SetEndOfFile
CreateEventA
EnterCriticalSection
LeaveCriticalSection
Sleep
GetVersionExA
GetCommandLineW
CreateProcessA
GetExitCodeProcess
IsBadReadPtr
SetUnhandledExceptionFilter
RaiseException
GetSystemInfo
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
IsBadCodePtr
LCMapStringW
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetCPInfo
GetOEMCP
GetACP
VirtualQuery
InterlockedExchange
RtlUnwind
IsBadWritePtr
VirtualAlloc
VirtualFree
CloseHandle
DeleteCriticalSection
InitializeCriticalSection
HeapCreate
HeapDestroy
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
TlsAlloc
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
HeapSize
GetCurrentProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
HeapFree
HeapAlloc
HeapReAlloc
ExitProcess
GetProcAddress
TerminateProcess

user32

PostMessageA
ShowWindow
DestroyWindow
KillTimer
SetTimer
SetDlgItemTextA
EndDialog
IsDlgButtonChecked
GetDlgItem
MessageBoxW
DialogBoxParamA
GetDesktopWindow
SetForegroundWindow
SetWindowLongA
SetWindowTextW
GetWindowTextA
GetWindowTextLengthA
SetWindowTextA
SendMessageA
LoadStringW
LoadStringA
CharPrevA
GetWindowLongA

advapi32

RegCreateKeyExA
RegCloseKey
RegSetValueExA

ole32

CoCreateInstance
CoInitialize

oleaut32

VariantClear
SysAllocString
SysFreeString

Sections

.text
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Patches/readme.txt
SETUP.BMP
SETUP.EXE
.exe windows:4 windows x86 arch:x86

1042f249352088f5c8d4f8a3b1728f12

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerLanguageNameA

kernel32

WinExec
GetDriveTypeA
DeleteFileA
GetVersionExA
GetModuleHandleA
GetSystemInfo
FindFirstFileA
IsDBCSLeadByte
GlobalFree
lstrlenA
lstrcpyA
FlushFileBuffers
GetModuleFileNameA
GetWindowsDirectoryA
SetFilePointer
WriteFile
GetLastError
GetTickCount
MulDiv
GetPrivateProfileIntA
GetPrivateProfileStringA
lstrcatA
lstrcmpiA
GlobalHandle
GetUserDefaultLCID
FindResourceA
GetProfileStringA
SetErrorMode
LoadLibraryA
FreeLibrary
CreateFileA
GetFileSize
GlobalAlloc
CloseHandle
GlobalLock
ReadFile
GlobalUnlock
FindClose
GetDiskFreeSpaceA
WritePrivateProfileStringA
LCMapStringW
HeapReAlloc
GetProcAddress
HeapAlloc
SetEnvironmentVariableA
VirtualAlloc
GetACP
CompareStringW
GetOEMCP
GetCPInfo
GetStringTypeW
CompareStringA
LCMapStringA
GetStringTypeA
SetStdHandle
MultiByteToWideChar
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
WideCharToMultiByte
GetVersion
GetCommandLineA
GetStartupInfoA
GetCurrentProcess
TerminateProcess
ExitProcess
CreateDirectoryA

user32

DestroyWindow
EndDialog
DrawIcon
DialogBoxParamA
GetWindowPlacement
LoadIconA
DestroyIcon
SetRectEmpty
FillRect
LoadStringA
wsprintfA
PostQuitMessage
SetWindowTextA
GetDlgItem
InflateRect
SendMessageA
SetWindowLongA
InvalidateRect
BeginPaint
EndPaint
DefWindowProcA
GetWindowLongA
GetDC
ReleaseDC
LoadCursorA
GetClassInfoA
RegisterClassA
MoveWindow
GetWindowRect
GetWindowTextA
GetWindowTextLengthA
CharUpperA
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
PeekMessageA
MessageBoxA
PostMessageA
FindWindowA
SubtractRect
SetWindowPos
GetClassNameA
IntersectRect
EqualRect
GetWindow
ScreenToClient
GetClientRect
UpdateWindow
SetTimer
ShowWindow
IsWindow
RegisterWindowMessageA
CreateDialogParamA
GetParent
SendDlgItemMessageA
CharNextA
SetRect
GetSystemMetrics
GetSysColor
CreateWindowExA
DrawTextA

gdi32

RestoreDC
DeleteObject
CreateFontIndirectA
GetObjectA
SaveDC
LineTo
MoveToEx
CreatePen
ExtTextOutA
SetBkColor
SetTextColor
GetTextMetricsA
CreateSolidBrush
CreateDIBitmap
RealizePalette
SelectPalette
GetDeviceCaps
CreatePalette
GetSystemPaletteEntries
UnrealizeObject
DeleteDC
BitBlt
CreateCompatibleDC
SelectClipRgn
CreateRectRgn
GetStockObject
GetTextExtentPointA
SelectObject

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA

Sections

.text
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
SETUP.INI
SETUP.INS
SETUP.LID
_INST32I.EX_
_ISDEL.EXE
.exe windows:4 windows x86 arch:x86

af417a432744d25669a269c31c292485

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RemoveDirectoryA
DeleteFileA
GetWindowsDirectoryA
GetTickCount
CloseHandle
CreateFileA
SetErrorMode
GetPrivateProfileIntA
lstrcmpiA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetModuleHandleA
lstrcatA
lstrcpyA
UnhandledExceptionFilter
GetModuleFileNameA
GetProcAddress
VirtualAlloc
LoadLibraryA
GetStringTypeA
HeapAlloc
GetStringTypeW
LCMapStringW
LCMapStringA
HeapFree
RtlUnwind
VirtualFree
WriteFile
HeapDestroy
GetFileType
HeapCreate
GetLastError
SetCurrentDirectoryA
Sleep
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
SetHandleCount
GetCPInfo
GetACP
GetOEMCP
GetStdHandle

user32

CharNextA
DefWindowProcA
wsprintfA
IsWindow
RegisterWindowMessageA
SetTimer
PostQuitMessage
RegisterClassA
LoadIconA
LoadCursorA
GetMessageA
GetSystemMetrics
CreateWindowExA
SendMessageA
TranslateMessage
DispatchMessageA

Exports

Exports

WndProc

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_SETUP.DLL
.dll windows:4 windows x86 arch:x86

211a1ac2159862c6038f1d798175f2be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetEnvironmentStrings
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetCommandLineA
GetEnvironmentStringsW
WideCharToMultiByte
HeapDestroy
HeapCreate
VirtualFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
HeapFree
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualAlloc
GetProcAddress
LoadLibraryA
FlushFileBuffers
CloseHandle
SetStdHandle
SetFilePointer

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
_SYS1.CAB
_SYS1.HDR
_USER1.CAB
_USER1.HDR
lang.dat
readme.txt

Resubmissions

Sharing

General

Malware Config

Signatures

Files

e0881072ca7fb928b42114cb616fa66a

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

comctl32

Sections

.text Size: 91KB - Virtual size: 91KB

.rdata Size: 17KB - Virtual size: 17KB

.data Size: 15KB - Virtual size: 31KB

.idata Size: 7KB - Virtual size: 6KB

.rsrc Size: 12KB - Virtual size: 12KB

1042f249352088f5c8d4f8a3b1728f12

Headers

File Characteristics

Imports

version

kernel32

user32

gdi32

advapi32

Sections

.text Size: 48KB - Virtual size: 45KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 8KB - Virtual size: 13KB

.rsrc Size: 4KB - Virtual size: 3KB

af417a432744d25669a269c31c292485

Headers

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 12KB - Virtual size: 11KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 10KB - Virtual size: 12KB

.rsrc Size: 1024B - Virtual size: 1000B

211a1ac2159862c6038f1d798175f2be

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 13KB - Virtual size: 12KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 10KB - Virtual size: 15KB

.rsrc Size: 6KB - Virtual size: 5KB

.reloc Size: 1KB - Virtual size: 1KB

1042f249352088f5c8d4f8a3b1728f12

Headers

File Characteristics

Imports

version

kernel32

user32

gdi32

advapi32

Sections

.text Size: 48KB - Virtual size: 45KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 8KB - Virtual size: 13KB

.rsrc Size: 4KB - Virtual size: 3KB

af417a432744d25669a269c31c292485

Headers

File Characteristics

Imports

kernel32

.text
Size: 91KB - Virtual size: 91KB

.rdata
Size: 17KB - Virtual size: 17KB

.data
Size: 15KB - Virtual size: 31KB

.idata
Size: 7KB - Virtual size: 6KB

.rsrc
Size: 12KB - Virtual size: 12KB

.text
Size: 48KB - Virtual size: 45KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 8KB - Virtual size: 13KB

.rsrc
Size: 4KB - Virtual size: 3KB

.text
Size: 12KB - Virtual size: 11KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 10KB - Virtual size: 12KB

.rsrc
Size: 1024B - Virtual size: 1000B

.text
Size: 13KB - Virtual size: 12KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 10KB - Virtual size: 15KB

.rsrc
Size: 6KB - Virtual size: 5KB

.reloc
Size: 1KB - Virtual size: 1KB

.text
Size: 48KB - Virtual size: 45KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 8KB - Virtual size: 13KB

.rsrc
Size: 4KB - Virtual size: 3KB

.text
Size: 12KB - Virtual size: 11KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 10KB - Virtual size: 12KB

.rsrc
Size: 1024B - Virtual size: 1000B

.text
Size: 13KB - Virtual size: 12KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 10KB - Virtual size: 15KB

.rsrc
Size: 6KB - Virtual size: 5KB

.reloc
Size: 1KB - Virtual size: 1KB

.text
Size: 17KB - Virtual size: 16KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 21KB - Virtual size: 21KB

.text
Size: 96KB - Virtual size: 96KB

.rdata
Size: 20KB - Virtual size: 20KB

.data
Size: 3KB - Virtual size: 26KB

.rsrc
Size: 87KB - Virtual size: 86KB

.text
Size: 48KB - Virtual size: 45KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 8KB - Virtual size: 13KB

.rsrc
Size: 4KB - Virtual size: 3KB