Luxor The King's Collection.iso
- SHA256 83b0d953919c629e6e063f6d393c79e69aa2453453671200aaa15b0451e66524
-
NSIS installer
General
- Target Luxor The King's Collection.iso
- Size 190.6MB
- Sample260925-vt49zssamf
- SHA256 83b0d953919c629e6e063f6d393c79e69aa2453453671200aaa15b0451e66524
- MD5 e4da67d2349f1fce4ed08d34d42db86b
- SHA1 38f7470bec5ca0117de5c020cb4d9ae607684fbe
- SHA512 e47063adfaafc9cfb32c714e8b3c6ed1e1d75d3eb1c7670ea7e3aa2dccfb53afb9025a851a677f8dced76c4ce0c22af1b1312c4ea043014d01e980ac86e840d3
- SSDEEP 3145728:+PPeRrO18XWd6fNo2kWQ+zq8K+8KUOTbmjFbEgIXuHe1ug0+YpDCdNz:+PP+OLvWQ+bd8K6EgI++I3pD4
- TLSH T14E983363F313CA05D6C606369A81DAD41B60F80CEDA4572F35896F4FEEB37807A563A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule static1/unpack004/fmod.dll acprotect -
resource yara_rule static1/unpack004/fmod.dll upx - Unsigned PE 29 IoCs
Checks for missing Authenticode signature.
resource unpack002/Bin/demo32.exe unpack002/LuxorAdventures.exe unpack003/$PLUGINSDIR/InstallOptions.dll unpack003/$PLUGINSDIR/StartMenu.dll unpack003/$PLUGINSDIR/System.dll unpack003/$PLUGINSDIR/UserInfo.dll unpack003/$_5_ unpack003/aminstall.dll unpack004/$PLUGINSDIR/InstallOptions.dll unpack004/$PLUGINSDIR/System.dll unpack004/Luxor AR.exe unpack004/Luxor.exe unpack004/core.dll unpack004/crash.dll unpack004/dsetup.dll unpack004/file.dll unpack004/fmod.dll unpack004/gfx2d.dll unpack004/gfx2d_dd7.dll unpack004/gfx2d_dx8.dll unpack004/gfx2d_ogl.dll unpack004/imglib.dll unpack004/jpeg.dll unpack004/logger.dll unpack004/net.dll unpack004/snd3d.dll unpack004/snd3d_fmod.dll unpack004/ui2.dll unpack002/Setup.exe - Untrusted Codesign Signers 2 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack003/$PLUGINSDIR/GameuxInstallHelper.dll unpack002/LuxorCollection_Setup.exe - NSIS installer 6 IoCs
resource yara_rule sample nsis_installer_2 static1/unpack001/out.iso nsis_installer_2 static1/unpack002/LuxorAdventures.exe nsis_installer_1 static1/unpack002/LuxorAdventures.exe nsis_installer_2 static1/unpack002/LuxorCollection_Setup.exe nsis_installer_1 static1/unpack002/LuxorCollection_Setup.exe nsis_installer_2
File Explorer
-
Luxor The King's Collection.iso.iso 190.6MB
-
out.iso.iso 190.6MB
-
Bin/Kingscollectionpop.dbd4.7MB
-
Bin/Launcher_Data.dbd23.3MB
-
Bin/Luxor2.ico42KB
-
Bin/demo32.exe.exe 492KB
-
Bin/demo32.exe.manifest.xml 648B
-
EULA.txt9KB
-
LuxorAdventures.exe.exe 115.6MB
-
$PLUGINSDIR/GameuxInstallHelper.dll.dll 73KB
-
$PLUGINSDIR/InstallOptions.dll.dll 14KB
-
$PLUGINSDIR/StartMenu.dll.dll 7KB
-
$PLUGINSDIR/System.dll.dll 11KB
-
$PLUGINSDIR/UserInfo.dll.dll 4KB
-
$PLUGINSDIR/ioSpecial.ini211B
-
$PLUGINSDIR/modern-header.bmp9KB
-
$PLUGINSDIR/modern-wizard.bmp25KB
-
$_5_.dll 91KB
-
aminstall.dll.dll 157KB
-
LuxorCollection_Setup.exe.exe 45.8MB
-
$PLUGINSDIR/InstallOptions.dll.dll 14KB
-
$PLUGINSDIR/System.dll.dll 10KB
-
$PLUGINSDIR/ioSpecial.ini211B
-
$PLUGINSDIR/modern-header.bmp25KB
-
$PLUGINSDIR/modern-wizard.bmp150KB
-
EULA.txt9KB
-
Luxor AR.exe.exe 204KB
-
Luxor.exe.exe 192KB
-
Read_Me.htm.html 48KB
-
assets/MJ.ico23KB
-
assets/Thumbs.db15KB
-
assets/button_moregames.jpg.jpg 53KB
-
assets/button_moregames.spr83B
-
assets/splashscreen.jpg.jpg 187KB
-
core.dll.dll 56KB
-
crash.dll.dll 88KB
-
data/data.mjz13.4MB
-
data/english.mjz2.6MB
-
dsetup.dll.dll 34KB
-
file.dll.dll 28KB
-
fmod.dll.dll 157KB
-
gfx2d.dll.dll 108KB
-
gfx2d_dd7.dll.dll 60KB
-
gfx2d_dx8.dll.dll 36KB
-
gfx2d_ogl.dll.dll 28KB
-
imglib.dll.dll 28KB
-
jpeg.dll.dll 96KB
-
logger.dll.dll 48KB
-
luxor.ini635B
-
luxorAR.ini635B
-
net.dll.dll 76KB
-
snd3d.dll.dll 48KB
-
snd3d_fmod.dll.dll 32KB
-
ui2.dll.dll 180KB
-
Readme.htm.html 176KB
-
Setup.exe.exe 124KB
-
Setup.exe.manifest.xml 648B
-
Setup.ini391B
-
autorun.inf50B
out.iso
- SHA256 83b0d953919c629e6e063f6d393c79e69aa2453453671200aaa15b0451e66524
- MD5 e4da67d2349f1fce4ed08d34d42db86b
- SHA1 38f7470bec5ca0117de5c020cb4d9ae607684fbe
- SHA512 e47063adfaafc9cfb32c714e8b3c6ed1e1d75d3eb1c7670ea7e3aa2dccfb53afb9025a851a677f8dced76c4ce0c22af1b1312c4ea043014d01e980ac86e840d3
- SSDEEP 3145728:+PPeRrO18XWd6fNo2kWQ+zq8K+8KUOTbmjFbEgIXuHe1ug0+YpDCdNz:+PP+OLvWQ+bd8K6EgI++I3pD4
- TLSH T14E983363F313CA05D6C606369A81DAD41B60F80CEDA4572F35896F4FEEB37807A563A4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
NSIS installer
Bin/Kingscollectionpop.dbd
- SHA256 ba48bdd04693a4d0fa8bb4603707588c6e6fcb6702cc02d5537aa91eef34a441
- MD5 6683e3fd382387ffffc447138b5a6d42
- SHA1 def8d6f8d946e5329458f70feabd04e420051ee8
- SHA512 007fcaf87630218a81296c50e6d7459c8fc9e1f9768ed935e6bf9f82b1d0102b7ae18d2e986ce9b9bf8b72496f3b7274fbae0d3a771dde6649ce32683d98ba28
- SSDEEP 98304:xy6SBc6XbC/F7K5mMqkU+ppfCj0hZydc1OxGo6XbCymk/IGHXl:xy6Sc7wrUTSxMcoWhIIXl
- TLSH T1D636332925FE6D1D2A0D11370ABE47C1B5B7F2EA1E116AC0BF5360D8249DEAC3ED6314
- MD5 SHA1 SHA512 SSDEEP TLSH
-
NSIS installer
Bin/Launcher_Data.dbd
- SHA256 bb5cb84ebddc3273b6516093307b5a15736c1740767bf55bb2365f7f368acafa
- MD5 27d9a13e0b5b822eadaecf333e3499e1
- SHA1 5b746355adff94f815704d39821264bd57d5bb88
- SHA512 93b2d7f877263951ad0daf7ca49f15d1f02fc0ffbad6904db0cb91e2ed9b96c00568acb987b001f8da5037bdbc7d4a821c48e4484a70ae75b2ac2ac64ab91df2
- SSDEEP 393216:WEvGXlfo5cUOVdRUOXFkGGr9S6vXyaJevOcdmiHDkObeOIhm+XSjQLxWbjNlsrJ:WXmCQHs6/yq6keFovcQLxWbhlY
- TLSH T15937BFA3F303CA14D6C646369A81EAD81FA0F80CFD65171F35896F4EEEA37407A553A4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
NSIS installer
Bin/Luxor2.ico
- SHA256 bccb6b5caadbe5e92dd0502bd21aa361a78034f8d801b78af4b62306157f1e59
- MD5 d06e5a4533bd277d66f64fa97d83e576
- SHA1 b10729b3a9c830e8943fad60f1a1126755dd0890
- SHA512 f74ed9ae31cc05cd4ee0771e5016ea195b271fc30b26d169bfdb79a55a4bbef19618f3894f1603895709071c1a7740d5a932a0472e7ce4d16bb058cabacdb1b0
- SSDEEP 768:tZcR4dJfBb84j3vOG9UcGSgjDXs5b8mb8CwJNLE2oLC:QydDowUcZSrqAAwnFom
- TLSH T129136C163B43FC48C90504788E53CBDC4B65BF21AC3396972E627E9F2E341E5B942E56
- MD5 SHA1 SHA512 SSDEEP TLSH
-
NSIS installer
Bin/demo32.exe
- IMPHASH e7c121416c27adf2ce9233e4929b3ca0
- SHA256 d493bfd33b7a7fe456fffab09ebc704a62e1f6f228546810e7dbdc83ccf590dd
- MD5 42c0593e5373404680a08e89f4de30ae
- SHA1 e9da8ee92f8947661f3f520b4f32174e3ccfe9f0
- SHA512 a4a5f811b5f53ad280d06bb12e785ea4337a3c45a15c435d9eceb4ab86c55fbcc172f1d81ca771ee82cc7c61e38667c0ad4ee79c187ff7a571a7a15006b928f4
- SSDEEP 6144:LDk8HSmgGcn1enVgUD6EQhbphFfBrTJpf/CpRLtGuxIQM5kHeXTrlzYdYCaDV+6Z:pSmrr6EMBXE+3uJcV9sEIQA27NQPru
- TLSH T1BDB48C02F2A1807AC4E181719AB5E771D7F9AD304DE98D83B7D4BE093A768C6B791313
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
NSIS installer
Minor OS version
0
Major OS version
4
Entry point
311006
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
GetCurrentThreadId
LocalAlloc
InterlockedExchange
RaiseException
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
SystemTimeToFileTime
QueryPerformanceCounter
ResetEvent
SetEvent
WaitForSingleObject
SearchPathA
VirtualProtect
VirtualQuery
SetEnvironmentVariableA
CompareStringW
FlushFileBuffers
SetStdHandle
LCMapStringW
LCMapStringA
IsBadCodePtr
GetEnvironmentVariableA
SetUnhandledExceptionFilter
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
IsBadWritePtr
VirtualAlloc
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
HeapSize
HeapReAlloc
VirtualFree
TlsGetValue
TlsAlloc
TlsSetValue
DeleteCriticalSection
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
TerminateProcess
GetSystemTime
GetTimeZoneInformation
RtlUnwind
ExitProcess
GetCommandLineA
GetStartupInfoA
CreateThread
GetDriveTypeA
SetCurrentDirectoryA
GetCurrentDirectoryA
CreateEventA
QueryPerformanceFrequency
DeleteFileA
CopyFileA
SetFilePointer
SetEndOfFile
CompareStringA
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
GetFileAttributesA
GetModuleFileNameA
lstrcmpA
IsDBCSLeadByte
InterlockedDecrement
InterlockedIncrement
CreateProcessA
Sleep
WriteFile
SetLastError
FindResourceExA
WideCharToMultiByte
VerLanguageNameA
MultiByteToWideChar
WritePrivateProfileStringA
CreateDirectoryA
GetModuleHandleA
GetProcAddress
GetCurrentProcess
CreateFileA
GetLocalTime
GetVersion
GetVersionExA
GetSystemInfo
FindFirstFileA
GetSystemDirectoryA
FindClose
GetLastError
lstrcmpiA
GetTickCount
GetUserDefaultLCID
SizeofResource
GlobalSize
lstrcpynA
GetWindowsDirectoryA
lstrcatA
GetPrivateProfileStringA
lstrcpyA
lstrlenA
FindResourceA
LoadResource
LockResource
FreeResource
GetFileSize
GlobalAlloc
CloseHandle
GlobalLock
ReadFile
GlobalUnlock
GlobalFree
LoadLibraryA
SetErrorMode
IsBadReadPtr
FreeLibrary
user32
VkKeyScanA
MapVirtualKeyA
MessageBeep
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
SystemParametersInfoA
CharNextA
ClientToScreen
GetCursorPos
SetCursorPos
InvalidateRect
DrawFocusRect
EnumChildWindows
IsIconic
IsWindowVisible
ShowWindow
GetScrollPos
SetCaretPos
CharUpperBuffA
CharLowerBuffA
CreateCaret
SetCaretBlinkTime
ShowCaret
DestroyCaret
DispatchMessageA
TranslateMessage
IsCharAlphaNumericA
IsCharAlphaA
DrawFrameControl
DrawTextA
InflateRect
SetParent
GetClassInfoExA
GetMessageA
DestroyWindow
IsWindow
ValidateRect
WindowFromPoint
SetScrollRange
GetScrollRange
SetScrollPos
GetForegroundWindow
GetWindow
SetRectEmpty
TrackPopupMenu
UnregisterClassA
GetSystemMenu
ShowScrollBar
RegisterClassExA
WaitForInputIdle
UpdateWindow
GetMessagePos
GetMessageTime
GetDesktopWindow
ScreenToClient
LoadCursorFromFileA
SetClassLongA
DestroyCursor
SetCapture
LoadCursorA
SetCursor
ReleaseCapture
LoadStringA
LoadIconA
SetWindowTextA
SendDlgItemMessageA
GetParent
PtInRect
UnionRect
CopyRect
IntersectRect
EqualRect
SubtractRect
IsRectEmpty
SetFocus
GetKeyState
DialogBoxIndirectParamA
PeekMessageA
GetWindowLongA
GetClassInfoA
SetWindowLongA
CharUpperA
RegisterWindowMessageA
EndDialog
LoadBitmapA
SetTimer
FillRect
KillTimer
DialogBoxParamA
GetSysColor
GetClientRect
GetWindowRect
SetDlgItemTextA
GetSystemMetrics
MoveWindow
GetDlgItem
SetWindowPos
BeginPaint
EndPaint
PostMessageA
wsprintfA
MessageBoxA
PostQuitMessage
DefWindowProcA
CreateDialogParamA
GetDC
ReleaseDC
FindWindowA
SendMessageA
RegisterClassA
CreateWindowExA
MsgWaitForMultipleObjects
CharLowerA
EnableWindow
GetDlgItemTextA
SetForegroundWindow
GetFocus
IsDlgButtonChecked
CheckRadioButton
GetWindowTextA
DestroyMenu
CreatePopupMenu
AppendMenuA
SetRect
gdi32
SelectClipRgn
RestoreDC
AddFontResourceA
RemoveFontResourceA
GetObjectA
GetStockObject
SetBkMode
SetTextColor
CreateSolidBrush
CreateCompatibleDC
UnrealizeObject
SelectObject
BitBlt
DeleteDC
DeleteObject
GetSystemPaletteEntries
CreatePalette
GetDeviceCaps
SelectPalette
RealizePalette
CreateDIBitmap
DeleteEnhMetaFile
SetEnhMetaFileBits
CombineRgn
CreatePen
LineTo
MoveToEx
SetPixel
GetPixel
ExtTextOutA
SetTextAlign
TextOutA
SetTextCharacterExtra
Arc
Ellipse
CreateEllipticRgn
CreateRoundRectRgn
CreatePolygonRgn
RoundRect
Polygon
Polyline
StretchDIBits
GetTextMetricsA
GetTextExtentPoint32A
EnumFontsA
EnumFontFamiliesExA
CreateFontIndirectA
CreateRectRgnIndirect
CreateRectRgn
SaveDC
Rectangle
SetBkColor
SetWinMetaFileBits
PlayEnhMetaFile
StretchBlt
CreateBitmap
CreateCompatibleBitmap
CreateHatchBrush
CreatePatternBrush
CreateEllipticRgnIndirect
PatBlt
CreateDCA
SetStretchBltMode
comdlg32
GetOpenFileNameA
advapi32
RegQueryValueExA
RegOpenKeyExA
RegQueryValueA
RegCloseKey
RegOpenKeyA
RegCreateKeyExA
ole32
CoUninitialize
CoInitialize
CoCreateInstance
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
winmm
timeGetTime
timeKillEvent
timeSetEvent
timeBeginPeriod
timeGetDevCaps
mciSendCommandA
oleaut32
SysAllocStringLen
SysFreeString
shell32
ShellExecuteA
AppEnumWindows
CaptureHookProc
DemoClosingDialog
DemoMenuDialog
DemoSplashDialog
EnumFontExProc
EventProcDll
JournalPlayHookProc
JournalRecordHookProc
KeyboardHookProc
LaunchAppProc
MouseHookProc
PlayerAbout
ServerWndProc
WinSupBackWndProc
WinSupWndProc
Name
.text
Size
368KB
Virtual Size
366KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
24KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
32KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
64KB
Virtual Size
62KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=12, version=7291,
count=15, id=11, version=8047,
count=39, id=14, version=7299,
count=131, id=10, version=8047,
count=12, id=10, version=8966,
count=21, id=93, version=2179,
count=3, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=364, id=1, productName=Unmarked objects,
count=4, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=3, productName=Unmarked objects (old),
count=79, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Bin/demo32.exe.manifest
- SHA256 d9bf0fbfe1219ec99e3cb9832aa275bed3d3c66104c3d9e90bf58750a83c7fda
- MD5 d75812b70082db3d3cbe78a12e9c568f
- SHA1 a09a382878b1578237bdc438dd7f9324459c1336
- SHA512 5078c2d4714daf438cb089617e8d9a3005563d45f451ce6e27ed91bb3040ba50eb29bd0303ed0fdd1e1fbeff87caefd4d97a1762ae4ce34e1534cda0c782074b
- TLSH T165F04602C485BD666A3609B23EA6F514D66C0323098C024A78DDA96B5F765EB8A8306E
- MD5 SHA1 SHA512 TLSH
-
NSIS installer
EULA.txt
- SHA256 f70a05539a667328872188f5331cd6dd6c430f65220bca02b9994e3378ad8d0d
- MD5 ef04d93d318627a80db7304dd1fbe30d
- SHA1 93f82e2e3aecbeb6cc93e9092b714a36e69c0008
- SHA512 b2bb1ff2dc03071632d83385a2bb2a097a963c59cafc62ce96b47fed5c9732c8361bc8e6f6d5ea8e027229bfe7abf51b4b2e59e07a9f06f03cbfdd1c09f25b5c
- SSDEEP 192:qWxThKpOMi4tTJizeqMn19TL3nxr3tprkKbyAKQWC0FB+RoUSIWf:qcOVszQ19TDxDPkdUWl0oUnw
- TLSH T10B22C86BB7C613A206C213A06E066DC5F328D478722E89543069905E3366FB783FFE65
- MD5 SHA1 SHA512 SSDEEP TLSH
-
NSIS installer
LuxorAdventures.exe
- IMPHASH 7fa974366048f9c551ef45714595665e
- SHA256 bda99502b447e36d1adcc34edc7241262cdb7a43b298e0b581fb484938cab60c
- MD5 4643ed1db4ebbb159aef16756bb6f83d
- SHA1 4472f25da9e7ec109700c7d29344758616329ed3
- SHA512 4d8758657afa8e87205387f06cabadb44255c487f123d7e0d3e058014c7631743a1737ce4865a7cb4154e6c157b0e1aecce06ccb7f85f8e8b9b7e8993dde4d84
- SSDEEP 3145728:SPPeRrO18XWd6fNo2kWQ+zq8K+8KUOTbmjFb6:SPP+OLvWQ+bd8K66
- TLSH T12A4833A3C5BC5A57EC9E7236803A1B6B910669B1C400FD35B3077696D3F36EBB05B902
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
NSIS installer
Minor OS version
0
Major OS version
4
Entry point
12529
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
GetWindowsDirectoryA
SetFileTime
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetTempPathA
user32
EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow
gdi32
SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject
shell32
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation
advapi32
RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
comctl32
ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create
ole32
CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Name
.text
Size
23KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
151KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.ndata
Size
Virtual Size
40KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
$PLUGINSDIR/GameuxInstallHelper.dll
- IMPHASH c044a03479a0bf13759a4b9b7e23900d
- SHA256 9ce7213567d8310e69c82f88586fcd38b5dd26a21c851b5d6f9c73bf46ff1429
- MD5 b225e2a7fa0c597b68cd7b06bfcd7fa2
- SHA1 fd3df3532c38b8fc750248a91839f8653498084f
- SHA512 0c14370373472113a57804097490acc6c490bf3db1c4a41dc0421dcfbdc79156397e6eaf60fd33e12809bbd4e8b87538546a7d5373eeeaa8573a8a871c5d7f32
- SSDEEP 1536:IOY/mBRLy0VN5sFAjNsLKapmxQZfjCGOOc1ztWhiFhsHaevt:IOY/30r5sFAJsjkr1ztWsFnEt
- TLSH T1FB734B6176D05031E4E39A7806ECA260693F78721B71D8CBE7046ADE9E337D1B63871B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
-
NSIS installer
PE Signature issue
Digest
4c:fc:e0:0c:e1:a7:87:6f:5d:be:e1:34:b7:07:b9:23:1d:f9:24:45
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Dec 8, 2006
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US
Serial Number
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2008
Subject
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Serial Number
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Timespan
Jan 10, 1997 - Dec 31, 2020
Subject
CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 4, 2006 - Apr 26, 2012
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:46:9e:cb:00:04:00:00:00:65
Issuer
CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 4, 2006 - Oct 4, 2007
Minor OS version
2
Major OS version
5
Entry point
27054
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
GameuxInstallHelper.pdb
ntdll
RtlUnwind
kernel32
GetFileAttributesW
GetWindowsDirectoryW
DeleteFileW
MultiByteToWideChar
CloseHandle
CreateFileW
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
SizeofResource
LockResource
LoadResource
FindResourceW
LoadLibraryW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
ExitProcess
GetProcAddress
GetModuleHandleA
TlsAlloc
SetLastError
GetLastError
TlsFree
TlsSetValue
TlsGetValue
Sleep
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
LeaveCriticalSection
EnterCriticalSection
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
LoadLibraryA
SetFilePointer
GetStringTypeA
GetStringTypeW
InterlockedExchange
VirtualQuery
GetLocaleInfoA
LCMapStringA
LCMapStringW
SetStdHandle
VirtualProtect
GetSystemInfo
FlushFileBuffers
ReadFile
GetCurrentProcessId
GetFullPathNameW
GetVersionExW
WriteFile
DeleteCriticalSection
ole32
StringFromGUID2
CoInitialize
CoCreateInstance
CoUninitialize
CoCreateGuid
CreateStreamOnHGlobal
CoSetProxyBlanket
msi
ord70
ord74
ord145
oleaut32
SysFreeString
VariantClear
SysAllocString
shell32
SHGetFolderPathW
ShellExecuteW
SHCreateDirectoryExW
SHFileOperationW
shlwapi
SHDeleteKeyW
PathAddBackslashW
advapi32
RegSetValueExW
RegQueryValueExW
RegCreateKeyExW
RegEnumKeyW
RegCloseKey
AddToGameExplorerA
AddToGameExplorerUsingMSI
AddToGameExplorerW
CreateTaskA
CreateTaskW
GenerateGUID
RegisterWithMediaCenterA
RegisterWithMediaCenterW
RemoveFromGameExplorer
RemoveFromGameExplorerUsingMSI
RemoveRichSavedGamesA
RemoveRichSavedGamesW
RemoveTasks
RetrieveGUIDForApplicationA
RetrieveGUIDForApplicationW
SetMSIGameExplorerProperties
SetupRichSavedGamesA
SetupRichSavedGamesW
UnRegisterWithMediaCenterA
UnRegisterWithMediaCenterW
Name
.text
Size
56KB
Virtual Size
56KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=123, id=1, productName=Unmarked objects,
count=19, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=15, id=15, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=112, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=92, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=5, id=96, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=94, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=90, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
$PLUGINSDIR/InstallOptions.dll
- IMPHASH b1cd0d78f652ce5fc63f0879371af012
- SHA256 44c822afaa4cc7cb95390eaa0ada076d280d3455870569f0cde03637257d9899
- MD5 0285eac59530ff5cc91fe2634b4ed78e
- SHA1 241c12aefca0740e776362f30aa1edffd66d6bdc
- SHA512 1007fbfb82d4e6c04bd5fefb32cd81f4406022ceef4d409eda0f0ddeb8b1f124a2baec86498bc119778e0c241fc41b0c2440d8a8f6731a63ede936be94f81297
- SSDEEP 192:8nK6d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+MTgK72dwF7dBEnbok:8K6UdHXcIiY535zBtMTg+BEnbo
- TLSH T172622A11778888F3DB92013EB4533707AF9D5126B4929ED2CA271FCA6D2B19D3EB1306
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
NSIS installer
Minor OS version
0
Major OS version
4
Entry point
10696
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
SetCurrentDirectoryA
GetCurrentDirectoryA
MultiByteToWideChar
GetPrivateProfileIntA
GlobalLock
GetModuleHandleA
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
GlobalUnlock
GlobalAlloc
user32
MapWindowPoints
GetDlgCtrlID
CloseClipboard
GetClipboardData
OpenClipboard
PtInRect
SetWindowRgn
LoadIconA
LoadImageA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableMenuItem
GetSystemMenu
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
GetClientRect
gdi32
SetTextColor
CreateCompatibleDC
GetObjectA
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
SelectObject
shell32
SHBrowseForFolderA
SHGetDesktopFolder
SHGetPathFromIDListA
ShellExecuteA
comdlg32
GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError
ole32
CoTaskMemFree
dialog
initDialog
show
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
152B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=72, id=1, productName=Unmarked objects,
count=13, id=93, version=2179,
count=1, id=48, version=9044,
count=1, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
$PLUGINSDIR/StartMenu.dll
- IMPHASH a648aeaa164b592c1e8892a10400b5ae
- SHA256 76067f5d1e3df7fc72d6f0253a0bd0e1aa1b444c8a6953c10cd78f3a7cd3944e
- MD5 d7d5e1ae69a5108aad96eae3634394db
- SHA1 68c27b7ad530bdbb39b7f3cecea63b8b2708cb1c
- SHA512 217884d79c896c1b4383184096964c1d559a2c906a3ec50d6715015f1981d3fdee5ed35803118bdc83354dc923e3e2e22b868b03236019185190daeaffbdd899
- SSDEEP 96:iiqA7bDe2xHkR1C41EhvSE+6nNtMn0iGd8Cqp5tfRhElfL:iiqA7/ZH0uQMtcfCqbtpgf
- TLSH T14DF1E6BAF7C108F3CA5B46306C077B179B66E521472561A3CA6706CA75C19F3EC29712
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
NSIS installer
Minor OS version
0
Major OS version
4
Entry point
6382
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetModuleHandleA
lstrcatA
FindClose
FindNextFileA
MulDiv
GlobalFree
lstrcpynA
GlobalAlloc
lstrcmpiA
FindFirstFileA
lstrcpyA
user32
TranslateMessage
GetMessageA
IsDialogMessageA
PostMessageA
DispatchMessageA
GetWindowLongA
CheckDlgButton
ShowWindow
LoadIconA
GetClientRect
MoveWindow
ScreenToClient
GetWindowRect
ReleaseDC
GetDC
EnableWindow
SetWindowTextA
SendMessageA
IsDlgButtonChecked
GetWindowTextA
DestroyWindow
GetDlgItem
CreateDialogParamA
SetWindowLongA
wsprintfA
CallWindowProcA
gdi32
GetTextMetricsA
SelectObject
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListA
ole32
CoTaskMemFree
Init
Select
Show
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
296B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
518B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=42, id=1, productName=Unmarked objects,
count=11, id=93, version=2179,
count=2, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
$PLUGINSDIR/System.dll
- IMPHASH 2017f2acbdaa42ab3e4adeb8b4c37e7b
- SHA256 7d8ce82f2b89f544ed90cc8febfcfa57b32d2c8600bb77f79bc8d8980f0f7477
- MD5 68edaafef887c72f0d85d4d64b6cbf52
- SHA1 77c1fb3301d6eea2e882bc387af1a017678c58da
- SHA512 e1e6b45fd47553d8e72cf15faa8572d6cf3f0a5495a34f7cb63a2307502282e69d482db42f8a760feaa890a0dc9539e9661fea8179e4d6e18e1c90092b06d4b9
- SSDEEP 192:GDKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQbHSF:GViJrtFRdbmXK8+WHw
- TLSH T14A324C5893A0C1F3D6A0823C1DA73A7B1379762016B24F93CFA35841AF196D7AC7D227
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
NSIS installer
Minor OS version
0
Major OS version
4
Entry point
10544
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyA
lstrcpynA
FreeLibrary
lstrcatA
GetProcAddress
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
VirtualAlloc
VirtualProtect
user32
wsprintfA
ole32
StringFromGUID2
CLSIDFromString
Alloc
Call
Copy
Free
Get
Int64Op
Store
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
784B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
100B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
520B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=14, version=7299,
count=19, id=1, productName=Unmarked objects,
count=7, id=93, version=2179,
count=1, id=42, version=8803,
count=4, id=48, version=9044,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
$PLUGINSDIR/UserInfo.dll
- IMPHASH afa8e526425f3585465337467d0b5909
- SHA256 e3a5ddc9a085af0b964960dbd67362319bc0582a6e972185536822934d6833c7
- MD5 6e19727f285dc3cf837e3ac855163c91
- SHA1 bdcd7132f6530818ff899002dc2c1dbaebcef9c3
- SHA512 b66c90490123e7dea9afcb157150d9d7278b67a6371a4cb203b319871627bc31a38b503308bf061201d85abbe52d469b7debc31e33f3b7875256637177450591
- TLSH T10981837BD3E909F3D080577B40A70DE71273C8701756411F4A5B2A8924E9B2BFE6E706
- MD5 SHA1 SHA512 TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
NSIS installer
Minor OS version
0
Major OS version
4
Entry point
4762
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetVersion
GetCurrentThread
lstrcpynA
GetCurrentProcess
GetModuleHandleA
GetProcAddress
GetLastError
GlobalFree
CloseHandle
GlobalAlloc
advapi32
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
EqualSid
FreeSid
GetUserNameA
OpenThreadToken
GetAccountType
GetName
GetOriginalAccountType
Name
.text
Size
1024B
Virtual Size
741B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
673B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
190B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=19, id=1, productName=Unmarked objects,
count=7, id=93, version=2179,
count=2, id=48, version=9044,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
$PLUGINSDIR/ioSpecial.ini
- SHA256 d95aed234f932a1c48a2b1b0d98c60ca31f962310c03158e2884ab4ddd3ea1e0
- MD5 e2d5070bc28db1ac745613689ff86067
- SHA1 282e080b4cf847174c5c11e4f9157b8c338ecb19
- SHA512 a50ca2014869629135b54e848f03cb4983ad8029cd811300d02b0fc54de0436185f418fea4d3db888eb0f3170e33a59d486aa885f024ab29e630e9bc0ae1a2de
- TLSH T1D3D0C9C9501A802944208642A97A2FA263E03E210B1725FAF5724C87EB4CDE79C9D682
- MD5 SHA1 SHA512 TLSH
-
NSIS installer
$PLUGINSDIR/modern-header.bmp
- SHA256 766a893fe962aefd27c574cb05f25cf895d3fc70a00db5a6fa73d573f571aefc
- MD5 940c56737bf9bb69ce7a31c623d4e87a
- SHA1 f2f3b4e7b9c28df6687ceeaed300a793e3bac445
- SHA512 81c60431619d7eb826b8da997c227c4f7077cc754caa15df6e0e7ae0e33690432bc2a27a7e295998f15e33a17b3d80e492d7cc09fd70dc43daf1cfe86b8746ff
- SSDEEP 192:TYw3C/LSnMoejFXnknIHbGoijTr3dBZ9KPPsnY/T0x9j:TY3LSnlepnknIHKoUrdBZ9uPsY/Ix9j
- TLSH T1D312A8869D83DC42EC4F7F71E3E6A05320E0690A052FBAD56F3634D6E65F88B672410B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
NSIS installer
$PLUGINSDIR/modern-wizard.bmp
- SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
- MD5 cbe40fd2b1ec96daedc65da172d90022
- SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
- SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
- SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
- TLSH T139C29757DE6B6EA4BE0804EF1A0694931C71FE211AB0CD0561D2B767B4FC93B19A0B3C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
NSIS installer
$_5_
- SHA256 0bd42c13dd0a5c881e80f161f7548b093c4fd99a747c13568af983e2c76cd71a
- MD5 26295a0baf87955f2e37735af135ca45
- SHA1 97f468d3ebaca4774ce69f6f55c998b93a912540
- SHA512 6760c5fe3621b1d9c84a5c974c28d796cfba83dba4ff0e9f9eb0ed19cb47a6fc6a1322f58193eb4d638e214f7e61e9543f6f9235c2be8888bcd075fa7650b20a
- SSDEEP 1536:h2MO8WtzIzNcuLo/hVeiXSwhEoMx3xO1wthPd+4kXQ6oYuvLP6CbuVr2vzQWyNOj:cMORtScwiXpEoexzt9dSb1uv7394Oj
- TLSH T174930195B5D00E06D97B1D3E571386A2E0B43EEE9D2EDFCA6E082D7023FA5A91490F44
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
NSIS installer
Minor OS version
0
Major OS version
4
Entry point
262198
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
BASS_Apply3D
BASS_ChannelBytes2Seconds
BASS_ChannelGet3DAttributes
BASS_ChannelGet3DPosition
BASS_ChannelGetAttributes
BASS_ChannelGetData
BASS_ChannelGetDevice
BASS_ChannelGetEAXMix
BASS_ChannelGetInfo
BASS_ChannelGetLength
BASS_ChannelGetLevel
BASS_ChannelGetPosition
BASS_ChannelGetTags
BASS_ChannelIsActive
BASS_ChannelIsSliding
BASS_ChannelPause
BASS_ChannelPlay
BASS_ChannelPreBuf
BASS_ChannelRemoveDSP
BASS_ChannelRemoveFX
BASS_ChannelRemoveLink
BASS_ChannelRemoveSync
BASS_ChannelSeconds2Bytes
BASS_ChannelSet3DAttributes
BASS_ChannelSet3DPosition
BASS_ChannelSetAttributes
BASS_ChannelSetDSP
BASS_ChannelSetDevice
BASS_ChannelSetEAXMix
BASS_ChannelSetFX
BASS_ChannelSetFlags
BASS_ChannelSetLink
BASS_ChannelSetPosition
BASS_ChannelSetSync
BASS_ChannelSlideAttributes
BASS_ChannelStop
BASS_ErrorGetCode
BASS_FXGetParameters
BASS_FXReset
BASS_FXSetParameters
BASS_Free
BASS_Get3DFactors
BASS_Get3DPosition
BASS_GetCPU
BASS_GetConfig
BASS_GetDSoundObject
BASS_GetDevice
BASS_GetDeviceDescription
BASS_GetEAXParameters
BASS_GetInfo
BASS_GetVersion
BASS_GetVolume
BASS_Init
BASS_MusicFree
BASS_MusicGetAttribute
BASS_MusicGetOrderPosition
BASS_MusicGetOrders
BASS_MusicLoad
BASS_MusicSetAttribute
BASS_Pause
BASS_PluginFree
BASS_PluginGetInfo
BASS_PluginLoad
BASS_RecordFree
BASS_RecordGetDevice
BASS_RecordGetDeviceDescription
BASS_RecordGetInfo
BASS_RecordGetInput
BASS_RecordGetInputName
BASS_RecordInit
BASS_RecordSetDevice
BASS_RecordSetInput
BASS_RecordStart
BASS_SampleCreate
BASS_SampleCreateDone
BASS_SampleFree
BASS_SampleGetChannel
BASS_SampleGetChannels
BASS_SampleGetInfo
BASS_SampleLoad
BASS_SampleSetInfo
BASS_SampleStop
BASS_Set3DFactors
BASS_Set3DPosition
BASS_SetConfig
BASS_SetDevice
BASS_SetEAXParameters
BASS_SetVolume
BASS_Start
BASS_Stop
BASS_StreamCreate
BASS_StreamCreateFile
BASS_StreamCreateFileUser
BASS_StreamCreateURL
BASS_StreamFree
BASS_StreamGetFilePosition
BASS_Update
_
Name
Size
86KB
Virtual Size
244KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
568B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
aminstall.dll
- IMPHASH c70bd01b6674ac7a6333f53641687d7e
- SHA256 2a7ee893990dc65bdd4865e0ff3295fe331c82981a5cc40751c8fdfe90d1190b
- MD5 cec88cfc2853cf5490d23af767f3aae4
- SHA1 642b38211d1c18def13b9d6b76b622f7b36779a2
- SHA512 9dc4ed2fcbdf1f01f0a873a7607a705d80f8621b08aa18ef56ea8b8b5cce29c304507bed6096a28bfdde4a15dd76a57ffcdd20b175157682add98d05db354b52
- SSDEEP 3072:8oy/SJZ1bsvb7EX3jUzrK9TBffJqteZDXwtep6+:8aosXmK9TBZFK
- TLSH T183F39E1131D0C8B2E579017E48D2C729DB67B5F09AB58AC73FD81B896E36291DB363C2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
NSIS installer
Minor OS version
0
Major OS version
4
Entry point
21017
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
advapi32
RegSetValueExA
RegCreateKeyExA
RegCloseKey
kernel32
GetCurrentProcessId
RaiseException
RtlUnwind
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
FlushFileBuffers
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
Sleep
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
WriteFile
SetStdHandle
GetCPInfo
GetACP
GetOEMCP
GetConsoleCP
GetConsoleMode
LoadLibraryA
InitializeCriticalSection
MultiByteToWideChar
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
HeapSize
GetCurrentThreadId
GetLastError
GetSystemTime
CreateFileA
SetFilePointer
ReadFile
CloseHandle
GetModuleFileNameA
FreeEnvironmentStringsW
SetEndOfFile
user32
MessageBoxA
ActiveMARKReadInstaller
Name
.text
Size
80KB
Virtual Size
80KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
38KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
20KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=126, version=50327,
count=27, id=125, productName=VS2005 build 50727, version=50727,
count=135, id=109, productName=VS2005 build 50727, version=50727,
count=8, id=96, productName=VS2003 (.NET) build 3077, version=3077,
count=3, id=95, productName=VS2003 (.NET) build 3077, version=3077,
count=11, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=123, id=1, productName=Unmarked objects,
count=67, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
LuxorCollection_Setup.exe
- IMPHASH 7fa974366048f9c551ef45714595665e
- SHA256 9395ca35b93062b1dbf32eb94adc4fa8ccd1bbad8f63aad36f9f2073e39d2d10
- MD5 9dd4c9a955872c6b80eeeeb5930e656b
- SHA1 2e6ee847bfaaa7d2162882878e2b47e0095c3c57
- SHA512 92554363540d79f42ae5f32e6d712534dc772c9f9c13676597a27cdc1a9471d0ac5f3ac3f94af8ff5cb4f285a6bfde4de0286edaa5353fa21733ea409184a990
- SSDEEP 786432:O5l6pBJFhEbCYFvH6XneM6Lj3HqHVgbuNX9Q4/W72EoA+5JxWoCdNXUkaJenLuvs:gUhEbHM8+HVgbB4p5CdNXUkdfx
- TLSH T195B733533E34414FE9577838160ED2B2AF32BD68862B1E7A5960BA63F0D17E0D46D7C8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
-
NSIS installer
PE Signature issue
Digest
d3:49:61:1c:31:69:1e:83:d7:35:78:91:56:12:7d:9c:66:16:2d:f2
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=MumboJumbo,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=MumboJumbo,L=Dallas,ST=Texas,C=US
Chains
Sep 25, 2026
CN=MumboJumbo,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=MumboJumbo,L=Dallas,ST=Texas,C=US
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=MumboJumbo,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=MumboJumbo,L=Dallas,ST=Texas,C=US
Serial Number
4e:15:bf:47:18:15:7a:1b:16:38:4b:24:51:7c:fb:e0
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 10, 2006 - Nov 10, 2009
Minor OS version
0
Major OS version
4
Entry point
12478
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
GetWindowsDirectoryA
SetFileTime
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetTempPathA
user32
EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow
gdi32
SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject
shell32
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation
advapi32
RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
comctl32
ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create
ole32
CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Name
.text
Size
22KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
107KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.ndata
Size
Virtual Size
48KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
49KB
Virtual Size
48KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=95, version=2190,
count=155, id=1, productName=Unmarked objects,
count=17, id=93, version=2179,
count=9, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
$PLUGINSDIR/InstallOptions.dll
- IMPHASH b1cd0d78f652ce5fc63f0879371af012
- SHA256 17e2f205af12d5a86638dc83c95fc69199c41af2fa6daeb1e91ec330f68c5372
- MD5 f62d03fcb1473110e920a9bb2c701006
- SHA1 c48444ef2daa60dcdf91f1645cd4ecd8e66545f7
- SHA512 701d531d405d08054d53298141d5bbd56e74df7b22bcea5f9f0e5c4407421ea0ca9617aa84e740dc1dc44e6d14e58852c1ca2087213cc2319f2da44eaed0bc05
- SSDEEP 192:g6JaVGQ+xI5EeuyvMmGpeWH2J5xprN+AxTxK72dwF7dBdcQOz:g6JaVh4I5rpPbTx+BdhO
- TLSH T1F1523951378888F3E792053EB45237079F9D5226B8929ED1CA331FC62D2B19E2FB1302
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
NSIS installer
Minor OS version
0
Major OS version
4
Entry point
10795
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
SetCurrentDirectoryA
GetCurrentDirectoryA
MultiByteToWideChar
GetPrivateProfileIntA
GlobalLock
GetModuleHandleA
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
GlobalUnlock
GlobalAlloc
user32
MapWindowPoints
GetDlgCtrlID
CloseClipboard
GetClipboardData
OpenClipboard
PtInRect
SetWindowRgn
LoadIconA
LoadImageA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableMenuItem
GetSystemMenu
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
GetClientRect
gdi32
SetTextColor
CreateCompatibleDC
GetObjectA
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
SelectObject
shell32
SHBrowseForFolderA
SHGetDesktopFolder
SHGetPathFromIDListA
ShellExecuteA
comdlg32
GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError
ole32
CoTaskMemFree
dialog
initDialog
show
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
152B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
1012B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=72, id=1, productName=Unmarked objects,
count=13, id=93, version=2179,
count=1, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
$PLUGINSDIR/System.dll
- IMPHASH 4ec328f99bdd944fc98d8a5cf11f7a62
- SHA256 e67277ecc4f6c7beb3c7e586ce508677269db056c7541eacfecf6c719f559da6
- MD5 0bbcbaee7b703ebd55cd8658a0e8dcd3
- SHA1 6ed448b8b67cea36eb45bfbc67fed9a6da9623e4
- SHA512 604c524bd00313f6411cc9878d5c9a1db77588049feeb5bb02c971df44f8becbd18d251cc20e551b878173eb2a78be61f31352769597c6334cffc0bc2326b008
- SSDEEP 192:WO6dJA/ruAFEiUdWWE6hE5RYUdJfbub1azgMO:TKAFERdlxhGRYUzqZaz
- TLSH T16B226D5547A041F3DD60823C08973D276BA837148EA54EC3CF9314429E296A6BCBC336
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
NSIS installer
Minor OS version
0
Major OS version
4
Entry point
10425
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GlobalAlloc
GlobalFree
GlobalSize
lstrcpyA
lstrcpynA
FreeLibrary
lstrcatA
GetProcAddress
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
GetLastError
VirtualAlloc
VirtualProtect
user32
wsprintfA
ole32
StringFromGUID2
CLSIDFromString
Alloc
Call
Copy
Free
Get
Int64Op
Store
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
784B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
92B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
496B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=14, version=7299,
count=19, id=1, productName=Unmarked objects,
count=7, id=93, version=2179,
count=3, id=48, version=9044,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
$PLUGINSDIR/ioSpecial.ini
- SHA256 d95aed234f932a1c48a2b1b0d98c60ca31f962310c03158e2884ab4ddd3ea1e0
- MD5 e2d5070bc28db1ac745613689ff86067
- SHA1 282e080b4cf847174c5c11e4f9157b8c338ecb19
- SHA512 a50ca2014869629135b54e848f03cb4983ad8029cd811300d02b0fc54de0436185f418fea4d3db888eb0f3170e33a59d486aa885f024ab29e630e9bc0ae1a2de
- TLSH T1D3D0C9C9501A802944208642A97A2FA263E03E210B1725FAF5724C87EB4CDE79C9D682
- MD5 SHA1 SHA512 TLSH
-
NSIS installer
$PLUGINSDIR/modern-header.bmp
- SHA256 a37443c1066b21cf81c175a47280c50b5c79841d0126bbb7c722a6b9b37defce
- MD5 f8835e9df08fc6dcd9cf2bdd99687115
- SHA1 dafad0e3343a07c3d149587f4e995c12a6a655d5
- SHA512 efbef02667db69356756abbf72335ccfca438780bf5a8eb013baf73bccfb1c7554d0df21f1159de8f5652c02009dde34902f0edb2f8b922c7df2de490ababc91
- SSDEEP 192:efLg+iXG1Av9LzCNF4hCvn6CfxWUYspSkpjlyLM8S:efk+iXgAvBcF4hqxW2plh2M7
- TLSH T133C219D26541D06AC87A22E4FDB9D0ACB5772D5CBC331A47FE5772CE7B326992808600
- MD5 SHA1 SHA512 SSDEEP TLSH
-
NSIS installer
$PLUGINSDIR/modern-wizard.bmp
- SHA256 2009dae1528c7c4ab0d40b57df7653df1f4a2fe475592f41283318d51496f7fb
- MD5 a8ca066368abf2ecd6d41c0f71c17610
- SHA1 ba0891129c91ce83d4259f94a9aaaf43527d7baa
- SHA512 37c18c87bbb7008a71ac4f717da790cc420826e6f6121ba93d923a1060e57429cf73a20b585f2dc2d8b50b62d067db72e7a8d534f6a1768bfa4039144acabd87
- SSDEEP 3072:UQnOYifVp4FxRkTbLqlF8U5ofjP35T1C7Ou/E5In93IxUQarsXN8uL:LnZiE8XZTk5E22iQQs9X
- TLSH T106E3F10CC89608A4E2EC5A3464E5998E6BA43F76EDFCB6BE5F3878D016F36DD3015049
- MD5 SHA1 SHA512 SSDEEP TLSH
-
NSIS installer
EULA.txt
- SHA256 f70a05539a667328872188f5331cd6dd6c430f65220bca02b9994e3378ad8d0d
- MD5 ef04d93d318627a80db7304dd1fbe30d
- SHA1 93f82e2e3aecbeb6cc93e9092b714a36e69c0008
- SHA512 b2bb1ff2dc03071632d83385a2bb2a097a963c59cafc62ce96b47fed5c9732c8361bc8e6f6d5ea8e027229bfe7abf51b4b2e59e07a9f06f03cbfdd1c09f25b5c
- SSDEEP 192:qWxThKpOMi4tTJizeqMn19TL3nxr3tprkKbyAKQWC0FB+RoUSIWf:qcOVszQ19TDxDPkdUWl0oUnw
- TLSH T10B22C86BB7C613A206C213A06E066DC5F328D478722E89543069905E3366FB783FFE65
- MD5 SHA1 SHA512 SSDEEP TLSH
-
NSIS installer
Luxor AR.exe
- IMPHASH 97b43dd62735d7f12aeb72bce1bfe018
- SHA256 33eece90c2012ef71ff84e61670b742fc07eaa0cb2a1edfeb0abda6024c93c1f
- MD5 c668cb3ae12e7b1ec4cbbf016d6f7c7f
- SHA1 fd01f6f46cc128f0f435d8210151819c119f8cce
- SHA512 f44d413e401859fdf9fc0307ffcf666b7aaccb7ed711bddb1a104ef32cfbed23708a1d553819a5f5be586aef67370272afbffbdb01231fc81afe01c826e19e3f
- SSDEEP 3072:zaeUNiIRXRc1jNTvmsQVKb+V2cqBYZ+oFAcF/rWp7De59TY01qX2Mz9:Oe1smcq1/cFOvelqX2M
- TLSH T1AB147C3064F901F1D64B227414ADEBB1BE78EF391B294687B764FE473D33260A426276
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
NSIS installer
Minor OS version
0
Major OS version
4
Entry point
119658
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
user32
SetWindowsHookExA
CallNextHookEx
SetForegroundWindow
GetDesktopWindow
GetAsyncKeyState
DefWindowProcA
RegisterWindowMessageA
UnhookWindowsHookEx
MessageBoxA
core
?free@MemoryMgr@@QAEHHPAX@Z
?g_MemoryPtr@@3PAVMemoryMgr@@A
?GetString@Parser@@QAEPADXZ
?GetWindowWidth@Platform@@YAHXZ
?ParamEqualsInt32_2@Parser@@QAE_NPBD0PAH1@Z
?GetInt@Parser@@QAE_NPAH@Z
?GetFloat2@Parser@@QAE_NPAM0@Z
?GetEqualsToken@Parser@@QAE_NXZ
?MessageBoxA@Platform@@YAXPBD0ZZ
??0CommandLine@@QAE@XZ
?initialize@MemoryMgr@@QAEHXZ
??1CommandLine@@UAE@XZ
?addCommand@CommandLine@@QAEXPBDHH@Z
?init@CommandLine@@QAEXHPAPAD@Z
?SystemCheck@Platform@@YA_NXZ
?SetMinimized@Platform@@YAX_N@Z
?SetActive@Platform@@YAX_N@Z
?GetActive@Platform@@YA_NXZ
?RawKeyToLocalKey@Platform@@YAHH@Z
?GetAppFilePrefix@Platform@@YAPBDXZ
?SetApp@Platform@@YAXPAUHINSTANCE__@@@Z
?GetCPUInfo@@YAHXZ
?BeginTimePeriod@Platform@@YAXXZ
?EndTimePeriod@Platform@@YAXXZ
?touchMemory@MemoryMgr@@QAEXXZ
?checkMemory@MemoryMgr@@QAEHHPAI_N@Z
??0MemoryMgr@@QAE@XZ
?defineBank@MemoryMgr@@QAEHW4e_MemoryLocation@@W4e_MemoryBankType@@PBDI@Z
??1MemoryMgr@@UAE@XZ
?CreateDir@Platform@@YAHPBD@Z
?s_setLocalePath@StringTable@@SAXPBD@Z
?setLanguage@StringTable@@QAE_NPBD@Z
?SetAppState@Platform@@YAXW4e_AppState@@@Z
?Load3dSoundAPI@@YA_NPBD@Z
?sndCreateSnd3dSubsystem@@3P6GPAVsnd3dSubsystem@@XZA
?LoadGraphicsAPI@@YA_NPBD@Z
?gfxCreateGfxSubsystem@@3P6GPAVgfxSubsystem@@XZA
?GetPlatformOS@Platform@@YA?AW4e_OperatingSystem@@XZ
?LoadIconA@Platform@@YAPAUHICON__@@H@Z
?GetApp@Platform@@YAPAUHINSTANCE__@@XZ
?InitWindow@Platform@@YAPAUHWND__@@PAUHINSTANCE__@@PAU2@PBDPAUHICON__@@3HHHH_N4P6GJ1IIJ@Z@Z
?SetWindow@Platform@@YAXPAUHWND__@@@Z
?MessagePump@Platform@@YAHXZ
?GetWindow@Platform@@YAPAUHWND__@@XZ
?UnloadGraphicsAPI@@YA_NXZ
?Unload3dSoundAPI@@YA_NXZ
??1StringTable@@UAE@XZ
??0StringTable@@QAE@XZ
?mt_srand@@YAXI@Z
?GetTime@Platform@@YAIXZ
?mt_rand@@YAIXZ
?ParseLine@Parser@@QAE_NXZ
??0Parser@@QAE@PAD@Z
?alloc@MemoryMgr@@QAEPAXHIPBDI@Z
??1Parser@@UAE@XZ
?ParamEqualsBoolean@Parser@@QAE_NPBD0PA_N@Z
?ParamEqualsFloat32_2@Parser@@QAE_NPBD0PAM1@Z
?ParamEqualsFloat32@Parser@@QAE_NPBD0PAM@Z
?ParamEqualsInt32@Parser@@QAE_NPBD0PAH@Z
?ParamEqualsString@Parser@@QAE_NPBD0PADI@Z
?GetToken@Parser@@QAEPADPAD@Z
?GetAppDataDir@Platform@@YAPBDPBD@Z
?cmdExists@CommandLine@@QAE_NPBD@Z
?GetCommandLineA@Platform@@YAPAVCommandLine@@XZ
?SpawnWebBrowser@Platform@@YAXPBD@Z
?getArgs@CommandLine@@QAE_NPBDPAHPAPAPAD@Z
?Sleep@Platform@@YAXI@Z
?GetAppVersion@Platform@@YAPBDXZ
?ReportCPUInfo@@YAXXZ
?GetAppTitle@Platform@@YAPBDXZ
?CreateAppFilename@Platform@@YAPBDPBD0@Z
?SetCommandLine@Platform@@YAXPAVCommandLine@@@Z
file
?initialize@File@@YA_N_N@Z
?loadArchive@File@@YAHPBD@Z
?registerThread@File@@YAXXZ
?unregisterThread@File@@YAXXZ
?seek@File@@YAHPAU_MjzFileType_s@@HH@Z
?open@File@@YAPAU_MjzFileType_s@@PBD0@Z
?getLength@File@@YAHPAU_MjzFileType_s@@@Z
?read@File@@YAIPAXIIPAU_MjzFileType_s@@@Z
?close@File@@YAHPAU_MjzFileType_s@@@Z
?write@File@@YAIPBXIIPAU_MjzFileType_s@@@Z
?setLocalePath@File@@YAXPBD@Z
ui2
?getType@uiVisualWidget@@UAEPBDXZ
?isType@uiVisualWidget@@UAE_NPBD@Z
?_update@uiVisualWidget@@MAEXHH@Z
?getType@uiRadioGroup@@UAEPBDXZ
?isType@uiRadioGroup@@UAE_NPBD@Z
?_render@uiProgressBar@@MAEXHH@Z
?_update@uiProgressBar@@MAEXHH@Z
?_parseParams@uiProgressBar@@MAEXPAVParser@@PAD@Z
??1uiProgressBar@@UAE@XZ
??0uiProgressBar@@QAE@XZ
?_inputEvent@uiVisualWidget@@MAE_NW4e_uiEvent@@HHH_N1@Z
?_deactivate@uiVisualWidget@@MAEXXZ
?setValue@uiProgressBar@@UAEXH_N@Z
?setValue@uiRadioGroup@@QAEXH@Z
?_parseParams@uiRadioGroup@@MAEXPAVParser@@PAD@Z
??1uiRadioGroup@@UAE@XZ
??0uiRadioGroup@@QAE@XZ
?_setValue@uiRadioGroup@@MAEXPBVuiWidget@@H@Z
??_7uiNonVisualWidget@@6B@
?_render@uiVisualWidget@@MAEXHH@Z
?detachFromParent@uiWidget@@QAEXXZ
?_releaseSprite@uiWidget@@KAXH@Z
??0uiVisualWidget@@QAE@XZ
??1uiVisualWidget@@UAE@XZ
?testBounds@uiVisualWidget@@UAE_NHH@Z
?_inputEvent@uiRadioButton@@MAE_NW4e_uiEvent@@HHH_N1@Z
??1uiRadioButton@@UAE@XZ
??0uiRadioButton@@QAE@XZ
?_parseParams@uiRadioButton@@MAEXPAVParser@@PAD@Z
?_parseSingleFlag@uiButton@@MAEXPBD@Z
?testBounds@uiButton@@UAE_NHH@Z
?_render@uiRadioButton@@MAEXHH@Z
?_update@uiButton@@MAEXHH@Z
?_activate@uiVisualWidget@@MAEXXZ
?_deactivate@uiButton@@MAEXXZ
?_loseFocus@uiButton@@MAEXXZ
?setAlpha@uiVisualWidget@@UAEXEII_N@Z
?releaseSprite@uiVisualWidget@@UAEXXZ
?setSprite@uiVisualWidget@@UAE_NPBDHH_N@Z
?setAnim@uiVisualWidget@@UAEXH@Z
?setFrame@uiVisualWidget@@UAEXH@Z
?getFrame@uiVisualWidget@@UAEHXZ
?setWidgetStates@uiWidget@@QAEX_N000@Z
?g_ui@@3PAVuiSubsystem@@A
?getWidget@uiWidget@@QAEPAV1@PBDH@Z
?getSpriteId@uiVisualWidget@@UAEHXZ
?getAlpha@uiVisualWidget@@UAEEXZ
?_parseHotkey@uiButton@@MAEXPBD@Z
?_getButtonAnim@uiButton@@MAEHXZ
?_resetHover@uiButton@@MAEX_N@Z
?s_fDeltaTime@uiWidget@@2MA
?isType@uiWidget@@UAE_NPBD@Z
??1uiWidget@@UAE@XZ
?_inputEvent@uiWidget@@MAE_NW4e_uiEvent@@HHH_N1@Z
?s_getDepthValue@uiWidget@@SAHPBD@Z
??1uiTextWidget@@UAE@XZ
??1uiNonVisualWidget@@UAE@XZ
??0uiWidget@@QAE@XZ
?_getDepthValue@uiWidget@@IAEHPBD@Z
??0uiTextWidget@@QAE@XZ
?applyScriptlet@uiWidget@@UAEXPBD@Z
?_parseBoolean@uiWidget@@MAE_NPAVParser@@@Z
?_parseParams@uiTextWidget@@MAEXPAVParser@@PAD@Z
?_parseFlags@uiWidget@@MAEXPAVParser@@@Z
?_parseSingleFlag@uiWidget@@MAEXPBD@Z
?update@uiWidget@@UAEXHH@Z
?render@uiWidget@@UAEXHH@Z
?inputEvent@uiWidget@@UAE_NW4e_uiEvent@@HHH_N1@Z
?initialize@uiWidget@@UAEXXZ
?getType@uiTextWidget@@UAEPBDXZ
?isType@uiTextWidget@@UAE_NPBD@Z
?testBounds@uiWidget@@UAE_NHH@Z
?setVisible@uiWidget@@UAEX_N0@Z
?setInputFocus@uiWidget@@UAEX_N0@Z
?setActive@uiWidget@@UBE_NXZ
?setActive@uiWidget@@UAEX_N0@Z
?overrideVisible@uiWidget@@UAEX_N@Z
?overrideInputFocus@uiWidget@@UAEX_N@Z
?overrideActive@uiWidget@@UAEX_N@Z
?getVisible@uiWidget@@UBE_NXZ
?getInputFocus@uiWidget@@UBE_NXZ
?getOverrideVisible@uiWidget@@UBE_NXZ
?getOverrideInputFocus@uiWidget@@UBE_NXZ
?getOverrideActive@uiWidget@@UBE_NXZ
?getWidth@uiTextWidget@@MBEHXZ
?getHeight@uiTextWidget@@MBEHXZ
?setWidth@uiWidget@@UAEXH@Z
?setHeight@uiWidget@@UAEXH@Z
?trace@uiWidget@@UAEPAU_uiTrace_s@@HHHPBD@Z
?_playWithPan@uiWidget@@UAEPAVsnd3dHandle@@PBDIMH@Z
?_initialize@uiWidget@@MAEXXZ
?_render@uiTextWidget@@MAEXHH@Z
?_update@uiTextWidget@@MAEXHH@Z
?_inputEvent@uiTextWidget@@MAE_NW4e_uiEvent@@HHH_N1@Z
?_trace@uiWidget@@MAEPAU_uiTrace_s@@HHHPBD@Z
?_showWidget@uiWidget@@MAEXXZ
?_hideWidget@uiWidget@@MAEXXZ
?_activate@uiWidget@@MAEXXZ
?_deactivate@uiWidget@@MAEXXZ
?_gainFocus@uiWidget@@MAEXXZ
?_loseFocus@uiWidget@@MAEXXZ
?setAlpha@uiTextWidget@@UAEXEII_N@Z
?setFont@uiTextWidget@@UAE_NH@Z
?setFont@uiTextWidget@@UAE_NPBD@Z
?setJustify@uiTextWidget@@UAEXI@Z
?_print@uiTextWidget@@MAEXHPBI@Z
?_lerpToTargetAlpha@uiTextWidget@@MAEXXZ
?_parseParams@uiWidget@@MAEXPAVParser@@PAD@Z
?getType@uiNonVisualWidget@@UAEPBDXZ
?isType@uiNonVisualWidget@@UAE_NPBD@Z
?getWidth@uiWidget@@UBEHXZ
?getHeight@uiWidget@@UBEHXZ
?_render@uiNonVisualWidget@@MAEXHH@Z
?_update@uiNonVisualWidget@@MAEXHH@Z
?_inputEvent@uiNonVisualWidget@@MAE_NW4e_uiEvent@@HHH_N1@Z
?setAlpha@uiWidget@@UAEXEII_N@Z
?registerProgCb@uiWidget@@SAXP6AXPAV1@PAXW4e_uiProgressEvent@@@Z1@Z
?gfxStatistics@uiSubsystem@@QAEX_NPBD@Z
?setTopLevelWidget@uiSubsystem@@QAEXPAVuiWidget@@@Z
?assignCallbacks@uiWidget@@QAEXPAU_WidgetMap_s@@PAX@Z
?setValue@uiSliderButton@@QAEXM@Z
?getValue@uiSliderButton@@QBEMXZ
?step@uiProgressBar@@QAEXXZ
?getTextRect@uiTextWidget@@QBEXPAU_uiRect_s@@@Z
?reset@uiParticleSystem@@QAEXXZ
?setRange@uiProgressBar@@QAEXHH@Z
?setInputFocusWidget@uiSubsystem@@QAEXPAVuiWidget@@@Z
?stop@uiParticleSystem@@QAEXXZ
?initialize@uiSubsystem@@QAEHPAVPreferences@@@Z
??0uiSubsystem@@QAE@XZ
??1uiSubsystem@@UAE@XZ
?shutdown@uiSubsystem@@QAEHXZ
?forceTerminate@uiSubsystem@@QAEXXZ
?render@uiSubsystem@@QAEHI@Z
?defineDepth@uiWidget@@SAXPBDI@Z
?inputEvent@uiSubsystem@@QAEXW4e_uiEvent@@HHH@Z
?topDialog@uiSubsystem@@QAEPAVuiDialog@@XZ
?isDialogPushed@uiSubsystem@@QAE_NPAVuiDialog@@@Z
?pushDialog@uiSubsystem@@QAEXPAVuiDialog@@_N@Z
?topDialogIsIdle@uiSubsystem@@QAE_NPAVuiDialog@@@Z
?disable@uiButton@@QAEXXZ
?getText@uiTextWidget@@QAEPBIXZ
?getValue@uiRadioGroup@@QBEHXZ
?reportDialogStack@uiSubsystem@@QAEXXZ
?popDialog@uiSubsystem@@QAEXPAVuiDialog@@_N@Z
?s_registerWidget@uiSubsystem@@SAXPBDP6APAVuiWidget@@XZ@Z
?s_dynamicLoading@uiWidget@@2_NA
?print@uiTextWidget@@QAAXHPBDZZ
?loadUI@uiSubsystem@@QAEPAVuiWidget@@PBD@Z
?addChild@uiWidget@@QAEXPAV1@_N@Z
?_parseParams@uiVisualWidget@@MAEXPAVParser@@PAD@Z
snd3d
?initialize@snd3dSubsystem@@QAEHPAVPreferences@@PAUHWND__@@_N@Z
?setCoopLevel@snd3dSubsystem@@QAEXPAUHWND__@@_N@Z
?shutdown@snd3dSubsystem@@QAEHXZ
?update@snd3dSubsystem@@QAEXM@Z
?loadSoundLibrary@snd3dSubsystem@@QAEHPBD@Z
?setMute@snd3dSubsystem@@QAEXW4e_snd3dSoundTypes@@_N@Z
?getMasterVolume@snd3dSubsystem@@QAEMW4e_snd3dSoundTypes@@@Z
?setMasterVolume@snd3dSubsystem@@QAEXW4e_snd3dSoundTypes@@M@Z
?suspend@snd3dSubsystem@@QAEX_N@Z
?setFrequencyScale@snd3dHandle@@QAEXM@Z
?stopPlaylist@snd3dSubsystem@@QAEX_N@Z
?startPlaylist@snd3dSubsystem@@QAEXPBD0_N@Z
?stop@snd3dHandle@@QAEXXZ
?g_snd3d@@3PAVsnd3dSubsystem@@A
?playSound@snd3dSubsystem@@QAEPAVsnd3dHandle@@W4e_snd3dSoundTypes@@PBD_N2@Z
?setLoop@snd3dHandle@@QAEX_N@Z
gfx2d
?moveWindow@gfxSubsystem@@QAEXXZ
?displayChanged@gfxSubsystem@@QAEXPAUHWND__@@HHH@Z
?suspendRenderer@gfxSubsystem@@QAEX_N@Z
?defineDepthNode@gfxSubsystem@@QAEXPBDI@Z
?update@gfxSubsystem@@QAEHI@Z
?getSpriteFrameCount@gfxSubsystem@@QBEHHH@Z
?createParticleSystem@gfxSubsystem@@QAEHPBD@Z
?registerThread@gfxSubsystem@@QAEXPBD@Z
?unregisterThread@gfxSubsystem@@QAEXPBD@Z
?line@gfxSubsystem@@QAEXHHHHHMQBE@Z
?createSprite@gfxSubsystem@@QAEHPBD@Z
?getSpriteHeight@gfxSubsystem@@QBEHH@Z
?getSpriteWidth@gfxSubsystem@@QBEHH@Z
?g_gfx@@3PAVgfxSubsystem@@A
?createParticleSystemInstance@gfxSubsystem@@QAEHPBDHP6AXPAXW4e_ParticleEvents@@PAVgfxParticleSystemInstance@@H@Z1@Z
?psemit@gfxSubsystem@@QAEXHHM@Z
?blt@gfxSubsystem@@QAEXHHHHHHE@Z
?particleSystemInstanceIsDead@gfxSubsystem@@QAE_NH@Z
?particleSystemInstanceStopEmitters@gfxSubsystem@@QAEXH@Z
?blt@gfxSubsystem@@QAEXHHHHHHHHHHE@Z
?g_whiteColor@@3PAEA
?bltx_f@gfxSubsystem@@QAEXHHHMMHHQAEEM_NM1@Z
?isHardwareAccelerated@gfxSubsystem@@QBE_NXZ
?releaseParticleSystem@gfxSubsystem@@QAEXPBD@Z
?createFont@gfxSubsystem@@QAEHPBD@Z
?releaseParticleSystemInstance@gfxSubsystem@@QAEXH@Z
?updateParticleSystem@gfxSubsystem@@QAEXHHHM@Z
logger
?log@udLogger@@SAXHPBDZZ
?registerClient@udLogger@@SAHPBD@Z
?terminate@udLogger@@SAXXZ
?isVisible@udLogger@@SA_NXZ
?start@udLogger@@SAXPBD@Z
?ReportLastError@@YAXXZ
?showWindow@udLogger@@SAX_N@Z
msvcrt
sprintf
_purecall
_CIacos
strncpy
sscanf
_beginthreadex
atoi
__CxxFrameHandler
_snprintf
_stricmp
_controlfp
_onexit
__dllonexit
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
__p___argv
__p___argc
_wcslwr
fopen
fclose
_ftol
kernel32
WaitForSingleObject
ReleaseMutex
Sleep
CreateMutexA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetVersionExA
GetModuleHandleA
CloseHandle
GetStartupInfoA
crash
?InitCrashHandler@@YA_NPBD0@Z
dsetup
ord11
Name
.text
Size
116KB
Virtual Size
115KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
24KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
32KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.mydata
Size
4KB
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
24KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=12, version=7291,
count=3, id=14, version=7299,
count=11, id=10, version=8047,
count=2, id=4, version=8047,
count=2, id=25, version=9210,
count=14, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
count=5, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=338, id=1, productName=Unmarked objects,
count=42, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
Luxor.exe
- IMPHASH ac171bffaa1bef5806315fe785b88d5d
- SHA256 75ddbf5f23aecb475c1adff13fb90326699f399e895d0ed30fc1c63f6bae001e
- MD5 5ef0660847b31fe959ad1e1487913a4e
- SHA1 7201ba4fbcb1e86c20c71799845335788cd66991
- SHA512 6fbb8d7bcc9c3632b39e3cc1d3b736b5bd71b4f48e35d31a78e3cd2cef66423f6945f0d4769317c1e9e31506c46032a242d6b4bd77d30bd52f714660f8002247
- SSDEEP 3072:EW/cdQqHbvRflsxscJnxx2X0A29v68RhzZuEwQIWBq7lpQrfj5zwxh4sh4knFuuW:t/ciqHbvRxqZ77qRDIJlU4
- TLSH T153147C3134DA00F1D2822170219AE732E670EE7517790B8B7365FE3BBCB65A4A527277
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
NSIS installer
Minor OS version
0
Major OS version
4
Entry point
115626
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
user32
SetWindowsHookExA
CallNextHookEx
SetForegroundWindow
GetDesktopWindow
GetAsyncKeyState
DefWindowProcA
RegisterWindowMessageA
UnhookWindowsHookEx
MessageBoxA
core
?free@MemoryMgr@@QAEHHPAX@Z
?g_MemoryPtr@@3PAVMemoryMgr@@A
?GetString@Parser@@QAEPADXZ
?GetWindowWidth@Platform@@YAHXZ
?ParamEqualsInt32_2@Parser@@QAE_NPBD0PAH1@Z
?GetInt@Parser@@QAE_NPAH@Z
?GetFloat2@Parser@@QAE_NPAM0@Z
?GetEqualsToken@Parser@@QAE_NXZ
?MessageBoxA@Platform@@YAXPBD0ZZ
??0CommandLine@@QAE@XZ
?initialize@MemoryMgr@@QAEHXZ
??1CommandLine@@UAE@XZ
?addCommand@CommandLine@@QAEXPBDHH@Z
?init@CommandLine@@QAEXHPAPAD@Z
?SystemCheck@Platform@@YA_NXZ
?SetMinimized@Platform@@YAX_N@Z
?SetActive@Platform@@YAX_N@Z
?GetActive@Platform@@YA_NXZ
?RawKeyToLocalKey@Platform@@YAHH@Z
?GetAppFilePrefix@Platform@@YAPBDXZ
?SetApp@Platform@@YAXPAUHINSTANCE__@@@Z
?GetCPUInfo@@YAHXZ
?BeginTimePeriod@Platform@@YAXXZ
?EndTimePeriod@Platform@@YAXXZ
?touchMemory@MemoryMgr@@QAEXXZ
?checkMemory@MemoryMgr@@QAEHHPAI_N@Z
??0MemoryMgr@@QAE@XZ
?defineBank@MemoryMgr@@QAEHW4e_MemoryLocation@@W4e_MemoryBankType@@PBDI@Z
??1MemoryMgr@@UAE@XZ
?CreateDir@Platform@@YAHPBD@Z
?s_setLocalePath@StringTable@@SAXPBD@Z
?setLanguage@StringTable@@QAE_NPBD@Z
?SetAppState@Platform@@YAXW4e_AppState@@@Z
?Load3dSoundAPI@@YA_NPBD@Z
?sndCreateSnd3dSubsystem@@3P6GPAVsnd3dSubsystem@@XZA
?LoadGraphicsAPI@@YA_NPBD@Z
?gfxCreateGfxSubsystem@@3P6GPAVgfxSubsystem@@XZA
?GetPlatformOS@Platform@@YA?AW4e_OperatingSystem@@XZ
?LoadIconA@Platform@@YAPAUHICON__@@H@Z
?GetApp@Platform@@YAPAUHINSTANCE__@@XZ
?InitWindow@Platform@@YAPAUHWND__@@PAUHINSTANCE__@@PAU2@PBDPAUHICON__@@3HHHH_N4P6GJ1IIJ@Z@Z
?SetWindow@Platform@@YAXPAUHWND__@@@Z
?MessagePump@Platform@@YAHXZ
?GetWindow@Platform@@YAPAUHWND__@@XZ
?UnloadGraphicsAPI@@YA_NXZ
?Unload3dSoundAPI@@YA_NXZ
??1StringTable@@UAE@XZ
??0StringTable@@QAE@XZ
?mt_srand@@YAXI@Z
?GetTime@Platform@@YAIXZ
?mt_rand@@YAIXZ
?ParseLine@Parser@@QAE_NXZ
??0Parser@@QAE@PAD@Z
?alloc@MemoryMgr@@QAEPAXHIPBDI@Z
??1Parser@@UAE@XZ
?ParamEqualsBoolean@Parser@@QAE_NPBD0PA_N@Z
?ParamEqualsFloat32_2@Parser@@QAE_NPBD0PAM1@Z
?ParamEqualsFloat32@Parser@@QAE_NPBD0PAM@Z
?ParamEqualsInt32@Parser@@QAE_NPBD0PAH@Z
?ParamEqualsString@Parser@@QAE_NPBD0PADI@Z
?GetToken@Parser@@QAEPADPAD@Z
?cmdExists@CommandLine@@QAE_NPBD@Z
?GetCommandLineA@Platform@@YAPAVCommandLine@@XZ
?SpawnWebBrowser@Platform@@YAXPBD@Z
?getArgs@CommandLine@@QAE_NPBDPAHPAPAPAD@Z
?Sleep@Platform@@YAXI@Z
?GetAppVersion@Platform@@YAPBDXZ
?ReportCPUInfo@@YAXXZ
?GetAppTitle@Platform@@YAPBDXZ
?CreateAppFilename@Platform@@YAPBDPBD0@Z
?SetCommandLine@Platform@@YAXPAVCommandLine@@@Z
file
?initialize@File@@YA_N_N@Z
?loadArchive@File@@YAHPBD@Z
?registerThread@File@@YAXXZ
?unregisterThread@File@@YAXXZ
?seek@File@@YAHPAU_MjzFileType_s@@HH@Z
?open@File@@YAPAU_MjzFileType_s@@PBD0@Z
?getLength@File@@YAHPAU_MjzFileType_s@@@Z
?read@File@@YAIPAXIIPAU_MjzFileType_s@@@Z
?close@File@@YAHPAU_MjzFileType_s@@@Z
?write@File@@YAIPBXIIPAU_MjzFileType_s@@@Z
?setLocalePath@File@@YAXPBD@Z
ui2
?getType@uiVisualWidget@@UAEPBDXZ
?isType@uiVisualWidget@@UAE_NPBD@Z
?_update@uiVisualWidget@@MAEXHH@Z
?getType@uiRadioGroup@@UAEPBDXZ
?isType@uiRadioGroup@@UAE_NPBD@Z
?_render@uiProgressBar@@MAEXHH@Z
?_update@uiProgressBar@@MAEXHH@Z
?_parseParams@uiProgressBar@@MAEXPAVParser@@PAD@Z
??1uiProgressBar@@UAE@XZ
??0uiProgressBar@@QAE@XZ
?_inputEvent@uiVisualWidget@@MAE_NW4e_uiEvent@@HHH_N1@Z
?_deactivate@uiVisualWidget@@MAEXXZ
?setValue@uiProgressBar@@UAEXH_N@Z
?setValue@uiRadioGroup@@QAEXH@Z
?_parseParams@uiRadioGroup@@MAEXPAVParser@@PAD@Z
??1uiRadioGroup@@UAE@XZ
??0uiRadioGroup@@QAE@XZ
??_7uiNonVisualWidget@@6B@
?addChild@uiWidget@@QAEXPAV1@_N@Z
?_parseParams@uiVisualWidget@@MAEXPAVParser@@PAD@Z
?_releaseSprite@uiWidget@@IAEXH@Z
??0uiVisualWidget@@QAE@XZ
??1uiVisualWidget@@UAE@XZ
?testBounds@uiVisualWidget@@UAE_NHH@Z
?_inputEvent@uiRadioButton@@MAE_NW4e_uiEvent@@HHH_N1@Z
??1uiRadioButton@@UAE@XZ
??0uiRadioButton@@QAE@XZ
?_parseParams@uiRadioButton@@MAEXPAVParser@@PAD@Z
?_parseSingleFlag@uiButton@@MAEXPBD@Z
?testBounds@uiButton@@UAE_NHH@Z
?_render@uiRadioButton@@MAEXHH@Z
?_update@uiButton@@MAEXHH@Z
?_activate@uiVisualWidget@@MAEXXZ
?_deactivate@uiButton@@MAEXXZ
?_loseFocus@uiButton@@MAEXXZ
?setAlpha@uiVisualWidget@@UAEXEII_N@Z
?releaseSprite@uiVisualWidget@@UAEXXZ
?setSprite@uiVisualWidget@@UAE_NPBDHH_N@Z
?setAnim@uiVisualWidget@@UAEXH@Z
?detachFromParent@uiWidget@@QAEXXZ
?setWidgetStates@uiWidget@@QAEX_N000@Z
?g_ui@@3PAVuiSubsystem@@A
?getWidget@uiWidget@@QAEPAV1@PBDH@Z
?setFrame@uiVisualWidget@@UAEXH@Z
?getFrame@uiVisualWidget@@UAEHXZ
?getSpriteId@uiVisualWidget@@UAEHXZ
?_parseHotkey@uiButton@@MAEXPBD@Z
?_getButtonAnim@uiButton@@MBEHXZ
?_resetHover@uiButton@@MAEX_N@Z
?s_fDeltaTime@uiWidget@@2MA
?isType@uiWidget@@UAE_NPBD@Z
??1uiWidget@@UAE@XZ
?_inputEvent@uiWidget@@MAE_NW4e_uiEvent@@HHH_N1@Z
?s_getDepthValue@uiWidget@@SAHPBD@Z
??1uiTextWidget@@UAE@XZ
??1uiNonVisualWidget@@UAE@XZ
??0uiWidget@@QAE@XZ
?_getDepthValue@uiWidget@@IAEHPBD@Z
??0uiTextWidget@@QAE@XZ
?applyScriptlet@uiWidget@@UAEXPBD@Z
?_parseBoolean@uiWidget@@MAE_NPAVParser@@@Z
?_parseParams@uiTextWidget@@MAEXPAVParser@@PAD@Z
?_parseFlags@uiWidget@@MAEXPAVParser@@@Z
?_parseSingleFlag@uiWidget@@MAEXPBD@Z
?update@uiWidget@@UAEXHH@Z
?render@uiWidget@@UAEXHH@Z
?inputEvent@uiWidget@@UAE_NW4e_uiEvent@@HHH_N1@Z
?initialize@uiWidget@@UAEXXZ
?getType@uiTextWidget@@UAEPBDXZ
?isType@uiTextWidget@@UAE_NPBD@Z
?testBounds@uiWidget@@UAE_NHH@Z
?setVisible@uiWidget@@UAEX_N0@Z
?setInputFocus@uiWidget@@UAEX_N0@Z
?setActive@uiWidget@@UBE_NXZ
?setActive@uiWidget@@UAEX_N0@Z
?overrideVisible@uiWidget@@UAEX_N@Z
?overrideInputFocus@uiWidget@@UAEX_N@Z
?overrideActive@uiWidget@@UAEX_N@Z
?getVisible@uiWidget@@UBE_NXZ
?getInputFocus@uiWidget@@UBE_NXZ
?getOverrideVisible@uiWidget@@UBE_NXZ
?getOverrideInputFocus@uiWidget@@UBE_NXZ
?getOverrideActive@uiWidget@@UBE_NXZ
?getWidth@uiTextWidget@@MBEHXZ
?getHeight@uiTextWidget@@MBEHXZ
?setWidth@uiWidget@@UAEXH@Z
?setHeight@uiWidget@@UAEXH@Z
?trace@uiWidget@@UAEPAU_uiTrace_s@@HHHPBD@Z
?_playWithPan@uiWidget@@UAEPAVsnd3dHandle@@PBDIMH@Z
?_initialize@uiWidget@@MAEXXZ
?_render@uiTextWidget@@MAEXHH@Z
?_update@uiTextWidget@@MAEXHH@Z
?_inputEvent@uiTextWidget@@MAE_NW4e_uiEvent@@HHH_N1@Z
?_trace@uiWidget@@MAEPAU_uiTrace_s@@HHHPBD@Z
?_showWidget@uiWidget@@MAEXXZ
?_hideWidget@uiWidget@@MAEXXZ
?_activate@uiWidget@@MAEXXZ
?_deactivate@uiWidget@@MAEXXZ
?_gainFocus@uiWidget@@MAEXXZ
?_loseFocus@uiWidget@@MAEXXZ
?setAlpha@uiTextWidget@@UAEXEII_N@Z
?setFont@uiTextWidget@@UAE_NPBD@Z
?setJustify@uiTextWidget@@UAEXI@Z
?_print@uiTextWidget@@MAEXHPBI@Z
?_lerpToTargetAlpha@uiTextWidget@@MAEXXZ
?_parseParams@uiWidget@@MAEXPAVParser@@PAD@Z
?getType@uiNonVisualWidget@@UAEPBDXZ
?isType@uiNonVisualWidget@@UAE_NPBD@Z
?getWidth@uiWidget@@UBEHXZ
?getHeight@uiWidget@@UBEHXZ
?_render@uiNonVisualWidget@@MAEXHH@Z
?_update@uiNonVisualWidget@@MAEXHH@Z
?_inputEvent@uiNonVisualWidget@@MAE_NW4e_uiEvent@@HHH_N1@Z
?setAlpha@uiWidget@@UAEXEII_N@Z
?registerProgCb@uiWidget@@SAXP6AXPAV1@PAXW4e_uiProgressEvent@@@Z1@Z
?gfxStatistics@uiSubsystem@@QAEX_NPBD@Z
?setTopLevelWidget@uiSubsystem@@QAEXPAVuiWidget@@@Z
?assignCallbacks@uiWidget@@QAEXPAU_WidgetMap_s@@PAX@Z
?setValue@uiSliderButton@@QAEXM@Z
?getValue@uiSliderButton@@QBEMXZ
?step@uiProgressBar@@QAEXXZ
?getTextRect@uiTextWidget@@QBEXPAU_uiRect_s@@@Z
?reset@uiParticleSystem@@QAEXXZ
?setRange@uiProgressBar@@QAEXHH@Z
?setInputFocusWidget@uiSubsystem@@QAEXPAVuiWidget@@@Z
?initialize@uiSubsystem@@QAEHPAVPreferences@@@Z
??0uiSubsystem@@QAE@XZ
??1uiSubsystem@@UAE@XZ
?shutdown@uiSubsystem@@QAEHXZ
?forceTerminate@uiSubsystem@@QAEXXZ
?render@uiSubsystem@@QAEHI@Z
?defineDepth@uiWidget@@SAXPBDI@Z
?inputEvent@uiSubsystem@@QAEXW4e_uiEvent@@HHH@Z
?stop@uiParticleSystem@@QAEXXZ
?topDialog@uiSubsystem@@QAEPAVuiDialog@@XZ
?isDialogPushed@uiSubsystem@@QAE_NPAVuiDialog@@@Z
?pushDialog@uiSubsystem@@QAEXPAVuiDialog@@_N@Z
?topDialogIsIdle@uiSubsystem@@QAE_NPAVuiDialog@@@Z
?disable@uiButton@@QAEXXZ
?getText@uiTextWidget@@QAEPBIXZ
?getValue@uiRadioGroup@@QBEHXZ
?reportDialogStack@uiSubsystem@@QAEXXZ
?popDialog@uiSubsystem@@QAEXPAVuiDialog@@_N@Z
?s_registerWidget@uiSubsystem@@SAXPBDP6APAVuiWidget@@XZ@Z
?s_dynamicLoading@uiWidget@@2_NA
?print@uiTextWidget@@QAAXHPBDZZ
?loadUI@uiSubsystem@@QAEPAVuiWidget@@PBD@Z
?_render@uiVisualWidget@@MAEXHH@Z
snd3d
?initialize@snd3dSubsystem@@QAEHPAVPreferences@@PAUHWND__@@_N@Z
?setCoopLevel@snd3dSubsystem@@QAEXPAUHWND__@@_N@Z
?shutdown@snd3dSubsystem@@QAEHXZ
?update@snd3dSubsystem@@QAEXM@Z
?loadSoundLibrary@snd3dSubsystem@@QAEHPBD@Z
?setMute@snd3dSubsystem@@QAEXW4e_snd3dSoundTypes@@_N@Z
?getMasterVolume@snd3dSubsystem@@QAEMW4e_snd3dSoundTypes@@@Z
?setMasterVolume@snd3dSubsystem@@QAEXW4e_snd3dSoundTypes@@M@Z
?suspend@snd3dSubsystem@@QAEX_N@Z
?setFrequencyScale@snd3dHandle@@QAEXM@Z
?playSound@snd3dSubsystem@@QAEPAVsnd3dHandle@@W4e_snd3dSoundTypes@@PBD_N2@Z
?setLoop@snd3dHandle@@QAEX_N@Z
?stop@snd3dHandle@@QAEXXZ
?startPlaylist@snd3dSubsystem@@QAEXPBD0_N@Z
?stopPlaylist@snd3dSubsystem@@QAEX_N@Z
?g_snd3d@@3PAVsnd3dSubsystem@@A
gfx2d
?moveWindow@gfxSubsystem@@QAEXXZ
?displayChanged@gfxSubsystem@@QAEXPAUHWND__@@HHH@Z
?suspendRenderer@gfxSubsystem@@QAEX_N@Z
?defineDepthNode@gfxSubsystem@@QAEXPBDI@Z
?update@gfxSubsystem@@QAEHI@Z
?getSpriteFrameCount@gfxSubsystem@@QBEHHH@Z
?createParticleSystem@gfxSubsystem@@QAEHPBD@Z
?registerThread@gfxSubsystem@@QAEXPBD@Z
?unregisterThread@gfxSubsystem@@QAEXPBD@Z
?line@gfxSubsystem@@QAEXHHHHHMQBE@Z
?createSprite@gfxSubsystem@@QAEHPBD@Z
?getSpriteHeight@gfxSubsystem@@QBEHH@Z
?getSpriteWidth@gfxSubsystem@@QBEHH@Z
?g_gfx@@3PAVgfxSubsystem@@A
?createParticleSystemInstance@gfxSubsystem@@QAEHPBDHP6AXPAXW4e_ParticleEvents@@PAVgfxParticleSystemInstance@@H@Z1@Z
?psemit@gfxSubsystem@@QAEXHHM@Z
?blt@gfxSubsystem@@QAEXHHHHHHE@Z
?particleSystemInstanceIsDead@gfxSubsystem@@QAE_NH@Z
?particleSystemInstanceStopEmitters@gfxSubsystem@@QAEXH@Z
?blt@gfxSubsystem@@QAEXHHHHHHHHHHE@Z
?g_whiteColor@@3PAEA
?bltx_f@gfxSubsystem@@QAEXHHHMMHHQAEEM_NM1@Z
?isHardwareAccelerated@gfxSubsystem@@QBE_NXZ
?releaseParticleSystem@gfxSubsystem@@QAEXPBD@Z
?createFont@gfxSubsystem@@QAEHPBD@Z
?releaseParticleSystemInstance@gfxSubsystem@@QAEXH@Z
?updateParticleSystem@gfxSubsystem@@QAEXHHHM@Z
logger
?log@udLogger@@SAXHPBDZZ
?registerClient@udLogger@@SAHPBD@Z
?terminate@udLogger@@SAXXZ
?isVisible@udLogger@@SA_NXZ
?start@udLogger@@SAXPBD@Z
?ReportLastError@@YAXXZ
?showWindow@udLogger@@SAX_N@Z
msvcrt
sprintf
_purecall
_CIacos
strncpy
sscanf
_beginthreadex
atoi
__CxxFrameHandler
_snprintf
_stricmp
_controlfp
_onexit
__dllonexit
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
__p___argv
__p___argc
_wcslwr
fopen
fclose
_ftol
kernel32
WaitForSingleObject
ReleaseMutex
Sleep
CreateMutexA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetVersionExA
GetModuleHandleA
CloseHandle
GetStartupInfoA
crash
?InitCrashHandler@@YA_NPBD0@Z
dsetup
ord11
Name
.text
Size
112KB
Virtual Size
111KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
20KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
28KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.mydata
Size
4KB
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
24KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=12, version=7291,
count=3, id=14, version=7299,
count=11, id=10, version=8047,
count=2, id=4, version=8047,
count=2, id=25, version=9210,
count=14, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
count=5, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=334, id=1, productName=Unmarked objects,
count=42, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
Read_Me.htm
- SHA256 2270f3a30d5581796f57d3ab471cff906bcdd1b1d486893078f27f47658874f6
- MD5 88a0de08687270a020130c34d2f2458e
- SHA1 c4ebf7e9be900402ca7b02ba8fd87573ae47a0a9
- SHA512 79fc8acbac0c7f29d9ee812ad4756fc1297694d19fb6fdd11e839b491c35aae80828081a3d624edf3fffcd4e64c68a1a97b6698dabd465f12aecc1d0a430367a
- SSDEEP 1536:tPCWC6mBdeKg93UhEnTY3ZscEm/SBtu0ev:lqX
- TLSH T110233100E7512403907B85CDF06B178E248096649393EE65F13B697FBDCAAAD36872FC
- MD5 SHA1 SHA512 SSDEEP TLSH
-
NSIS installer
assets/MJ.ico
- SHA256 5719ebe5a613a83b4d29131ed9b8b7176129258a8e8045021297c5708b92d1f4
- MD5 22fc9d32923708b0b4c96985b810ebc7
- SHA1 5e25506d299829842f6533e0dfae11989b4bab10
- SHA512 d66b98fafad2dd3107b920ee953fc2b71dd4bb6ba0b9de5ccecbf42cf1de02943762af158d787f1e364d2af13aaf45b8ce693ffe03dbc79b356b2bc3228b1df1
- SSDEEP 384:7fXDyObtKN4N384WuVd+zZLCMjgWVsTjg0YO51fpXNBxOI8W/GE:77ybKN384WsIZLHgWV0YAxdYE
- TLSH T197B2E7772A66A581D1619A349143C82C4D24DFA339D0AF231F817FDFBDB0BB8A081997
- MD5 SHA1 SHA512 SSDEEP TLSH
-
NSIS installer
assets/Thumbs.db
- SHA256 eb628d19916534f6129051bf10eb4586814350ebeee30baa04ece37f970ccd88
- MD5 dbfa27d89ce919ee8f679b9b953ff5d9
- SHA1 f210a91cddaf39069b467cfe8ee3ef3e8b3d85e9
- SHA512 02d5a8d6e6a9d5904ba18e3acb4ba0c4f6b520c1527944fa402c0d719c79c669bbc8767da0780346e9a0c23dde3f5b1130907a2fe217e3301b8baca7842ff8a5
- SSDEEP 192:+bTlQyd6dMakxnu+d7ye7qKLsvOOquWbdcogS47UhW9V1w/Uv3nfKLGy:ETSy2rkxTT7OvOO2dX4nw/Ss
- TLSH T198629D86765297F4FC2AAB744F108E21A5E4BD00AAC0234BBCE47BA5D672FC01D48D4C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
NSIS installer
assets/button_moregames.jpg
- SHA256 3d678047b4b1d676cddca01fb6c9987fadbcbc4ad2af946f6dd6a64ce5b94c55
- MD5 49d337db5882df3a40f8963f0696876f
- SHA1 f8e7f8b1ebfc61b5cbf59758a853dae53170688d
- SHA512 1e1ad45993b39c111440d4aa6374568043a03f290b04e2096af299593f9e6d778d2b85779c7c9845a3b56081c17c730480bffa68a7334bf7a29aaf82956d8974
- SSDEEP 1536:QE2BEkSUdE2BEkSUqNyT6droKd4C6K97Oq:QV+UdV+Uum6pd4Cn
- TLSH T10D33D0238353AE13EDC2573120A7F3DCA373E60692476587721D29843769B928F7836A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
NSIS installer
assets/button_moregames.spr
- SHA256 33b0eca9ace2763fe02a9f9f1bcbbbfae4076fdc825fe915d76866daf9af0a56
- MD5 9f168afa593a156a819fd5ccc126089e
- SHA1 450ad211e3e73556e41fa3cdba0790b96b9d98a8
- SHA512 6ef369003eabf0df27273d0967dd246cf354b74e1d46c8adeca4716090f8688e16b43716949f98a472c3448983f35b7413da29b9da10a770c85691acabef1e48
- TLSH T12EA011C008A00C0FAB3C0AAF0B2B20C03A8C3C8AE000A0B02A828CA00220C23B20A832
- MD5 SHA1 SHA512 TLSH
-
NSIS installer
assets/splashscreen.jpg
- SHA256 0be44d6bc7d8ec7965f94489bb121170de1b174aa15068efaafbd8ce13b6cd0f
- MD5 5b4c7655fae06b8d2e56f01706b5064e
- SHA1 39cc517fd463ef48b24e76a4d64f2e582b5ff55d
- SHA512 31987808115a0d936218e2c4d2136febd2613a9482e6843ec4ceeb0091bb87ac72462c4683805083601b8523be945a6fa9b302cc8d4b53db80fee8fdb2b54295
- SSDEEP 3072:JZEpMD2XfMQAwNonQf4IHyquy8mCd4az8n+fNNUDXZkdY0ozY/:UfMQxoQf4MyquHmy4az8nNyek
- TLSH T14914128102E27C80E6E11D74B8C0E3D7BD60899776F3EED7743C69A27F26B22855D294
- MD5 SHA1 SHA512 SSDEEP TLSH
-
NSIS installer
core.dll
- IMPHASH ee9cfde202729211ebf320daaebc0478
- SHA256 86360b86275d25b2668e640a7d46611d4397ed0348d57bbb4637a1a7a805207e
- MD5 7ecd611d0af701520ed1ce10047a8553
- SHA1 d7673f5ce5917c8220c78f0024be58566f65522f
- SHA512 e42744530abede52427e1cb012e05aea667bebe35094c3df54cc79e3db2d1ace90e4cbd1ea03d9622af18c3f8e3719413d5e0b1470ce1221d70962e9389a058e
- SSDEEP 768:9aFF+Oq9pXiK/maHeyJVgDPSkqEA5hSo0Da/4q:9a2Oq9RiKOa+yJVaLqEA5eDa/p
- TLSH T1AB435B0299B425F7C280C0363BDCA73BFD76D48585A28D5B0F37CD687E65227B42B662
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
NSIS installer
Minor OS version
0
Major OS version
4
Entry point
29581
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
gdi32
GetDeviceCaps
GetStockObject
user32
SetForegroundWindow
SetActiveWindow
ShowWindow
BringWindowToTop
AdjustWindowRect
RegisterClassExA
LoadCursorA
UnregisterClassA
PostQuitMessage
MessageBoxA
CreateWindowExA
DestroyWindow
ChangeDisplaySettingsA
SetWindowPos
SetWindowLongA
GetCursorPos
SetCursorPos
ClipCursor
ReleaseCapture
GetClientRect
GetWindowLongA
SetCapture
ShowCursor
PeekMessageA
TranslateMessage
DispatchMessageA
LoadIconA
GetDesktopWindow
GetDC
ReleaseDC
GetWindowRect
winmm
timeEndPeriod
timeBeginPeriod
timeGetTime
shell32
SHGetSpecialFolderPathA
ShellExecuteA
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
file
?close@File@@YAHPAU_MjzFileType_s@@@Z
?read@File@@YAIPAXIIPAU_MjzFileType_s@@@Z
?getLength@File@@YAHPAU_MjzFileType_s@@@Z
?open@File@@YAPAU_MjzFileType_s@@PBD0@Z
logger
?ReportLastError@@YAXXZ
?log@udLogger@@SAXHPBDZZ
msvcrt
_adjust_fdiv
_initterm
_onexit
__dllonexit
?terminate@@YAXXZ
_except_handler3
qsort
sprintf
_vsnprintf
strncat
tolower
__CxxFrameHandler
strtok
exit
_ftol
fprintf
fopen
fread
strncmp
sscanf
fclose
malloc
realloc
free
_purecall
strncpy
_snprintf
_stricmp
kernel32
DisableThreadLibraryCalls
GetPrivateProfileStringA
GetPrivateProfileIntA
WritePrivateProfileStringA
SetFileAttributesA
GetWindowsDirectoryA
GetPrivateProfileSectionNamesA
WritePrivateProfileSectionA
GetFileAttributesA
FindFirstFileA
FindNextFileA
GetLastError
FindClose
CreateDirectoryA
Sleep
GetModuleHandleA
GetModuleFileNameA
GetVersionExA
LoadLibraryA
GetProcAddress
FreeLibrary
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
??0CommandLine@@QAE@ABV0@@Z
??0CommandLine@@QAE@XZ
??0MemoryMgr@@QAE@ABV0@@Z
??0MemoryMgr@@QAE@XZ
??0Parser@@QAE@ABV0@@Z
??0Parser@@QAE@PAD@Z
??0StringTable@@QAE@ABV0@@Z
??0StringTable@@QAE@XZ
??1CommandLine@@UAE@XZ
??1MemoryMgr@@UAE@XZ
??1Parser@@UAE@XZ
??1StringTable@@UAE@XZ
??4CommandLine@@QAEAAV0@ABV0@@Z
??4MemoryMgr@@QAEAAV0@ABV0@@Z
??4Parser@@QAEAAV0@ABV0@@Z
??4StringTable@@QAEAAV0@ABV0@@Z
??_7CommandLine@@6B@
??_7MemoryMgr@@6B@
??_7Parser@@6B@
??_7StringTable@@6B@
?BeginTimePeriod@Platform@@YAXXZ
?CaptureMouse@Platform@@YAX_N@Z
?CreateAppFilename@Platform@@YAPBDPBD0@Z
?CreateDir@Platform@@YAHPBD@Z
?DestructWindow@Platform@@YAXPAUHWND__@@@Z
?EndTimePeriod@Platform@@YAXXZ
?ForceHideWindow@Platform@@YAXXZ
?GetActive@Platform@@YA_NXZ
?GetApp@Platform@@YAPAUHINSTANCE__@@XZ
?GetAppDataDir@Platform@@YAPBDPBD@Z
?GetAppFilePrefix@Platform@@YAPBDXZ
?GetAppTitle@Platform@@YAPBDXZ
?GetAppVersion@Platform@@YAPBDXZ
?GetBoolean@Parser@@QAE_NXZ
?GetCPUInfo@@YAHXZ
?GetCloseBrace@Parser@@QAE_NXZ
?GetCommandLineA@Platform@@YAPAVCommandLine@@XZ
?GetCurrentLine@Parser@@QBEPBDXZ
?GetCursorPos@Platform@@YAXAAH0@Z
?GetDesktopInfo@Platform@@YAXAAH00@Z
?GetEqualsToken@Parser@@QAE_NXZ
?GetFloat2@Parser@@QAE_NPAM0@Z
?GetFloat@Parser@@QAE_NPAM@Z
?GetInt2@Parser@@QAE_NPAH0@Z
?GetInt3@Parser@@QAE_NPAH00@Z
?GetInt@Parser@@QAE_NPAH@Z
?GetLine@Parser@@QBEIXZ
?GetMinimized@Platform@@YA_NXZ
?GetOpenBrace@Parser@@QAE_NXZ
?GetPlatformOS@Platform@@YA?AW4e_OperatingSystem@@XZ
?GetString@Parser@@QAEPADXZ
?GetTime@Platform@@YAIXZ
?GetToken@Parser@@QAEPADPAD@Z
?GetVideoInfo@Platform@@YAXPAPBDPAH11PA_N@Z
?GetWindow@Platform@@YAPAUHWND__@@XZ
?GetWindowHeight@Platform@@YAHXZ
?GetWindowPos@Platform@@YAXAAH0@Z
?GetWindowWidth@Platform@@YAHXZ
?InitWindow@Platform@@YAPAUHWND__@@PAUHINSTANCE__@@PAU2@PBDPAUHICON__@@3HHHH_N4P6GJ1IIJ@Z@Z
?Load3dSoundAPI@@YA_NPBD@Z
?LoadCursorA@Platform@@YAPAUHICON__@@H@Z
?LoadGraphicsAPI@@YA_NPBD@Z
?LoadIconA@Platform@@YAPAUHICON__@@H@Z
?LoadSoundAPI@@YA_NPBD@Z
?MessageBoxA@Platform@@YAXPBD0ZZ
?MessagePump@Platform@@YAHXZ
?ParamEqualsBoolean@Parser@@QAE_NPBD0PA_N@Z
?ParamEqualsFloat32@Parser@@QAE_NPBD0PAM@Z
?ParamEqualsFloat32_2@Parser@@QAE_NPBD0PAM1@Z
?ParamEqualsFloat32_2x@Parser@@QAE_NPBD0PAM1@Z
?ParamEqualsInt16@Parser@@QAE_NPBD0PAF@Z
?ParamEqualsInt32@Parser@@QAE_NPBD0PAH@Z
?ParamEqualsInt32_2@Parser@@QAE_NPBD0PAH1@Z
?ParamEqualsInt32_2x@Parser@@QAE_NPBD0PAH1@Z
?ParamEqualsInt64@Parser@@QAE_NPBD0PA_J@Z
?ParamEqualsInt8@Parser@@QAE_NPBD0PAC@Z
?ParamEqualsString@Parser@@QAE_NPBD0PADI@Z
?ParamEqualsUInt32@Parser@@QAE_NPBD0PAI@Z
?ParseChar@Parser@@QAE_NPAD@Z
?ParseFloat2@Parser@@QAE_NPAM0@Z
?ParseFloat2x@Parser@@QAE_NPAM0@Z
?ParseFloat@Parser@@QAE_NPAM@Z
?ParseInteger2@Parser@@QAE_NPAH0@Z
?ParseInteger2x@Parser@@QAE_NPAH0@Z
?ParseInteger3@Parser@@QAE_NPAH00@Z
?ParseInteger@Parser@@QAE_NPAH@Z
?ParseLine@Parser@@QAE_NXZ
?ParseString@Parser@@QAE_NPAD@Z
?ParseUTF8@Parser@@QAE_NPAE@Z
?RawKeyToLocalKey@Platform@@YAHH@Z
?RegGetInt32@Platform@@YAHPBD0H@Z
?RegGetString@Platform@@YAXPBD0PAD1@Z
?RegInit@Platform@@YA_NPBDAA_N@Z
?RegInitSecureKey@Platform@@YA_NPBDAA_N@Z
?RegSetInt32@Platform@@YA_NPBD0H@Z
?RegSetString@Platform@@YA_NPBD0PAD@Z
?ReportCPUInfo@@YAXXZ
?ScanDir@Platform@@YAHPBDPAPAY0BAE@DP6AH0@ZP6AHPBX3@Z@Z
?ScanDirFree@Platform@@YAXPAY0BAE@D@Z
?SetActive@Platform@@YAX_N@Z
?SetApp@Platform@@YAXPAUHINSTANCE__@@@Z
?SetAppState@Platform@@YAXW4e_AppState@@@Z
?SetCommandLine@Platform@@YAXPAVCommandLine@@@Z
?SetCursorPos@Platform@@YAXHH@Z
?SetFullscreenWindow@Platform@@YAXPAUHWND__@@_NHH@Z
?SetMinimized@Platform@@YAX_N@Z
?SetRenderAPI@Platform@@YAXPBD@Z
?SetVideoInfo@Platform@@YAXHHH_N@Z
?SetWindow@Platform@@YAXPAUHWND__@@@Z
?SetWindowPos@Platform@@YAXXZ
?ShowCursor@Platform@@YAX_N@Z
?Sleep@Platform@@YAXI@Z
?SpawnWebBrowser@Platform@@YAXPBD@Z
?SystemCheck@Platform@@YA_NXZ
?Unload3dSoundAPI@@YA_NXZ
?UnloadGraphicsAPI@@YA_NXZ
?UnloadSoundAPI@@YA_NXZ
?_allocExtNode@MemoryMgr@@AAEPAXPAUMemoryBank_s@@IPBDI@Z
?_calcMemorySize@MemoryMgr@@AAEIW4e_MemoryLocation@@@Z
?_compactHeapNode@MemoryMgr@@AAE_NPAUMemoryBank_s@@PAUMemoryHeapNode_s@@@Z
?_createMemoryBanks@MemoryMgr@@AAEHXZ
?_exportStringTable@StringTable@@IAEXXZ
?_freeAllMemory@MemoryMgr@@AAEXXZ
?_heapAddFreeNode@MemoryMgr@@AAEXPAUMemoryBank_s@@PAUMemoryHeapNode_s@@@Z
?_heapBestFit@MemoryMgr@@AAEPAXPAUMemoryBank_s@@AAIPBDI@Z
?_heapExtFree@MemoryMgr@@AAEHPAUMemoryBank_s@@PAUMemoryHeapNode_s@@PAI@Z
?_heapFindBestFit@MemoryMgr@@AAEPAUMemoryHeapNode_s@@PAUMemoryBank_s@@I@Z
?_heapFree@MemoryMgr@@AAEHPAUMemoryBank_s@@PAXPAI@Z
?_insertString@StringTable@@IAEXPBDPBE@Z
?_parseCmdLine@CommandLine@@IAEXXZ
?_parseStringTableEntry@StringTable@@IAEXPAVParser@@@Z
?_preparseLine@Parser@@IAEPADPAD@Z
?_preparseLineAllowSpaces@Parser@@IAEPADPAD@Z
?_processCmd@CommandLine@@IAEHHH@Z
?_readBankSizes@MemoryMgr@@AAEXXZ
?_stringTableFilename@StringTable@@IAEPBDXZ
?_writeBankSizes@MemoryMgr@@AAEXXZ
?addCommand@CommandLine@@QAEXPBDHH@Z
?alloc@MemoryMgr@@QAEPAXHIPBDI@Z
?checkMemory@MemoryMgr@@QAEHHPAI_N@Z
?cmdExists@CommandLine@@QAE_NPBD@Z
?defineBank@MemoryMgr@@QAEHW4e_MemoryLocation@@W4e_MemoryBankType@@PBDI@Z
?defineLocAllocCb@MemoryMgr@@QAEHW4e_MemoryLocation@@P6APAXI@Z@Z
?defineLocFreeCb@MemoryMgr@@QAEHW4e_MemoryLocation@@P6AXPAX@Z@Z
?defineLocReallocCb@MemoryMgr@@QAEHW4e_MemoryLocation@@P6APAXPAXI@Z@Z
?fileIsReadOnly@Platform@@YA_NPBD@Z
?free@MemoryMgr@@QAEHHPAX@Z
?g_CPUInfo@@3UCPUInfo_s@@A
?g_MemoryPtr@@3PAVMemoryMgr@@A
?g_stringTblPtr@@3PAVStringTable@@A
?getArgs@CommandLine@@QAE_NPBDPAHPAPAPAD@Z
?getMemoryBankSize@MemoryMgr@@QBEHH@Z
?getSize@MemoryMgr@@QAEIHPAX@Z
?gfxCreateGfxSubsystem@@3P6GPAVgfxSubsystem@@XZA
?init@CommandLine@@QAEXHPAPAD@Z
?initialize@MemoryMgr@@QAEHXZ
?mt_rand@@YAIXZ
?mt_srand@@YAXI@Z
?reset@Parser@@QAEXXZ
?s_localePath@StringTable@@0PADA
?s_setLocalePath@StringTable@@SAXPBD@Z
?sc_stringFileName@StringTable@@0PBDB
?setLanguage@StringTable@@QAE_NPBD@Z
?sndCreateSnd3dSubsystem@@3P6GPAVsnd3dSubsystem@@XZA
?sndCreateSndSubsystem@@3P6GPAVsndSubsystem@@XZA
?touchMemory@MemoryMgr@@QAEXXZ
?translate@StringTable@@QAEPBEPBD@Z
Name
.text
Size
28KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
12KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=12, version=7291,
count=2, id=11, version=8047,
count=2, id=14, version=7299,
count=5, id=10, version=8047,
count=2, id=4, version=8047,
count=100, id=1, productName=Unmarked objects,
count=13, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=10, id=49, version=9044,
count=5, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
crash.dll
- IMPHASH 1d87952ff2cb87aa3004567d0c2e9525
- SHA256 64ef7a1414d02ac6e65a6588097b9b5ad87f12072c9fdfda20f6b49eae4bf307
- MD5 db527de6ae97908ba772f4e1abbeab31
- SHA1 4c8ea2bd0c13f0714b0c4b2ab9138166a2f3d13f
- SHA512 4f0e47397ebed8179718010f82e8fd3cb2df41c526fb12f66980cc83f1ee07a1290cbc9c836656414ee66974993c596d63bedbb5b8924763ba7ca13e0a75a22f
- SSDEEP 1536:iMoVm4jFmop00m7WR6VTTQcSEB1I5BoLbwGjrbXsw4DAv:iMoVdmoQ7WwFQjFUVrjsbDAv
- TLSH T1F4938D2167F340F2D196157624B58F3BAB7D6E10CEF28D8B8B93D8591E30992D636307
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
NSIS installer
Minor OS version
0
Major OS version
4
Entry point
16066
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
dsetup
ord11
core
?CreateAppFilename@Platform@@YAPBDPBD0@Z
?g_MemoryPtr@@3PAVMemoryMgr@@A
?MessageBoxA@Platform@@YAXPBD0ZZ
?GetVideoInfo@Platform@@YAXPAPBDPAH11PA_N@Z
?GetAppTitle@Platform@@YAPBDXZ
?GetAppVersion@Platform@@YAPBDXZ
?free@MemoryMgr@@QAEHHPAX@Z
?ForceHideWindow@Platform@@YAXXZ
?CaptureMouse@Platform@@YAX_N@Z
?SystemCheck@Platform@@YA_NXZ
user32
SendDlgItemMessageA
DialogBoxParamA
EnableWindow
GetClientRect
PeekMessageA
TranslateMessage
DispatchMessageA
DestroyWindow
CreateWindowExA
ShowWindow
DefWindowProcA
RegisterClassExA
GetDesktopWindow
GetDlgItem
SetWindowPos
GetWindowRect
EndDialog
ole32
OleUninitialize
CoCreateInstance
OleInitialize
oleaut32
SafeArrayCreateVector
SafeArrayDestroy
kernel32
SetEndOfFile
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
IsBadCodePtr
IsBadReadPtr
CreateFileA
SetStdHandle
VirtualAlloc
InterlockedIncrement
InterlockedDecrement
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
SetFilePointer
GetStartupInfoA
GetFileType
SetErrorMode
GetModuleHandleA
GetModuleFileNameA
SetUnhandledExceptionFilter
GetCurrentProcess
FormatMessageA
VirtualQuery
IsBadWritePtr
GetCurrentThread
GetLastError
GetProcAddress
LoadLibraryA
GlobalMemoryStatus
GetSystemInfo
GetVersionExA
Sleep
MultiByteToWideChar
RtlUnwind
ExitProcess
TerminateProcess
GetCommandLineA
GetVersion
EnterCriticalSection
LeaveCriticalSection
HeapFree
CloseHandle
InitializeCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
HeapReAlloc
HeapAlloc
HeapSize
DeleteCriticalSection
GetCPInfo
GetACP
GetOEMCP
FlushFileBuffers
WriteFile
ReadFile
SetHandleCount
GetStdHandle
??0HTTPPost@@QAE@XZ
??1HTTPPost@@UAE@XZ
?InitCrashHandler@@YA_NPBD0@Z
?ReportBug@@YA_NXZ
?post@HTTPPost@@QAEHPBD0@Z
Name
.text
Size
48KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
16KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=7, id=11, version=8047,
count=22, id=14, version=7299,
count=109, id=10, version=8047,
count=4, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=8, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=115, id=1, productName=Unmarked objects,
count=3, id=25, version=9210,
count=4, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=3, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
data/data.mjz
- SHA256 14496cdf0b121a6eb475e8696ed28164b39a1a91de788de9aa23d93e5c0ef4f1
- MD5 0558b1e946583d246352dac1fd6119b1
- SHA1 151cd7a3768a66fcc9d9b865d86d0a44c5f2f620
- SHA512 b4fcecb906a415797854a3b0b44374f9c127c34768c87a6c43f5ad9675d9a0da731d18a7efdabb615920d3d82ec15a12fb3c56fcba3da03c689f2190935761db
- SSDEEP 196608:sFrp6yomiA+VmauPSAjBpjEXtY3PshOXRW0JVh26IUc2ls:szF+VIHpctY0hOj25Ucd
- TLSH T152E6E0617A119E61F5E916302CB5F385A3B27F1A7ED3AA82718C7B0D3F71B805D99203
- MD5 SHA1 SHA512 SSDEEP TLSH
-
NSIS installer
data/english.mjz
- SHA256 f18a9c357f1934b98415b5f32887504f9d12c32880468b86e69d8ddce3d3a1fa
- MD5 e44b1ad6e14e9f04adfda9ac32501f0d
- SHA1 b2b3c37b39018724020a3f27a3d98af7ba972c98
- SHA512 d5e14bb6845a3e5b9a1fc02a9ef7fd7d45ecd78e604a62affbf59556d2e060ec2d79ffadeabcf1133d6e01212b86961ff7c7cbd28385b5e830ba9ca3a547ccbc
- SSDEEP 49152:6CPfCrfCAY3siuiBVsRpKlxQIW8KvuA91mxTmxDy:BPfCrfCAY3siuifszKlxQIW8OB1mFmNy
- TLSH T129C5F1317B05EF62EAD542309DA6D789D221BF06A6936A43305C7B1F3FB0BC15E5E206
- MD5 SHA1 SHA512 SSDEEP TLSH
-
NSIS installer
dsetup.dll
- IMPHASH d4a6ad81669c70ab6cd1669f58cfcb28
- SHA256 0fdfff9a5db0bd4b16a9663a6616308c511a21e3bec0bbed60ddfa2597c73acf
- MD5 4f5f399a970a921f883975a2228a1c8c
- SHA1 f2c39bde79a6d91f8e35dd4eee5ebed4573c5615
- SHA512 7a03587c77eaad433fb49694b9cabbc0bda8e8554a97ee3ec63ca09dd7df37cae0031c1b9b52ab4d76d45fd847adf5a7680bb0dc803166ce4fb4cfc12aa017ef
- SSDEEP 768:7M0v0mWosSeNwRQy1E5MYDgZBC7Q3+jPJmEDUWe:7PdRzeNwp25MY8nC83+LJmEDTe
- TLSH T192F25C1279A180B3D151463529E9A702A3BF802456FE8D87CF1857999E733D7BB3E307
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
NSIS installer
Minor OS version
1
Major OS version
5
Entry point
13657
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetSystemDirectoryA
GetCurrentDirectoryA
lstrlenA
GetModuleFileNameA
LocalFree
LocalAlloc
lstrcmpiA
GetDiskFreeSpaceA
GetWindowsDirectoryA
MultiByteToWideChar
lstrcmpA
WideCharToMultiByte
GetSystemDefaultLCID
IsBadStringPtrA
IsBadReadPtr
IsBadStringPtrW
lstrlenW
GetCurrentThreadId
TlsSetValue
GetCommandLineA
HeapFree
HeapAlloc
ExitProcess
GetModuleHandleA
TlsFree
SetLastError
TlsGetValue
TlsAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
SetCurrentDirectoryA
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
WriteFile
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetACP
GetOEMCP
GetCPInfo
InitializeCriticalSection
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
LCMapStringA
LCMapStringW
VirtualProtect
GetSystemInfo
VirtualQuery
RtlUnwind
GetVersionExA
lstrcpyA
lstrcatA
LoadLibraryA
GetProcAddress
OutputDebugStringA
CreateMutexA
GetLastError
CloseHandle
FreeEnvironmentStringsW
FreeLibrary
user32
wsprintfW
wsprintfA
GetKeyboardType
DestroyWindow
SetFocus
CreateDialogParamA
SetDlgItemTextA
MessageBoxA
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
advapi32
RegCloseKey
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegCreateKeyExA
RegSetValueExW
RegCreateKeyExW
RegQueryValueExA
winmm
mmioRead
mmioDescend
mmioOpenA
mmioClose
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
ole32
StringFromGUID2
DirectXDeviceDriverSetupA
DirectXDeviceDriverSetupW
DirectXLoadString
DirectXRegisterApplicationA
DirectXRegisterApplicationW
DirectXSetupA
DirectXSetupCallback
DirectXSetupGetFileVersion
DirectXSetupGetVersion
DirectXSetupIsEng
DirectXSetupIsJapan
DirectXSetupIsJapanNec
DirectXSetupSetCallback
DirectXSetupShowEULA
DirectXSetupW
DirectXUnRegisterApplication
Name
.text
Size
26KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
960B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=128, productName=Unmarked objects (old),
count=14, id=64, version=9210,
count=1, id=29, version=9178,
count=1, id=63, version=9210,
count=1, id=69, version=9111,
count=62, id=28, version=9178,
count=1, id=61, version=9210,
file.dll
- IMPHASH 04baaf9cf52d488178d354e5a7198f48
- SHA256 c59cccf662344e978f3ddcd8c080b807f79a84c001aefd49ddb80f7aaec8832f
- MD5 671cc1e11d5721fc5c07284c17ee5903
- SHA1 6b8a521ed2109a559f0cc70fa460e88c8351d943
- SHA512 3eb987e0873536ac47a86a5364e31c64937651f957b221e02b7cd5197a9095b1bd6ce734be861fbdcaf91c57cc0eeab221aba915d55b369831930801a5c77242
- SSDEEP 384:JyxFATdh8tkiy8o4BsiZuZfhHNMS7Czk31MDob3:YxShYyvSUhyQCzw1Mc
- TLSH T121D229173A3210F2D18A167132DA733BAA35DFA5564517A3D3E3ED30953B623F026B64
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
NSIS installer
Minor OS version
0
Major OS version
4
Entry point
13537
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
msvcrt
sprintf
fprintf
_iob
tolower
strstr
strncmp
malloc
_except_handler3
?terminate@@YAXXZ
_initterm
_adjust_fdiv
qsort
fwrite
fseek
ftell
fread
fclose
_snprintf
fopen
strncpy
strrchr
__CxxFrameHandler
??3@YAXPAX@Z
free
??2@YAPAXI@Z
_strnicmp
_stricmp
kernel32
FindFirstFileA
FindNextFileA
GetLastError
FindClose
TlsFree
TlsAlloc
TlsGetValue
TlsSetValue
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
??0mjzFile@@QAE@XZ
??1mjzFile@@UAE@XZ
?IsDirectory@File@@YAHPBD@Z
?ScanDir@File@@YAHPBDPAPAY0BAE@DP6AH0@ZP6AHPBX3@Z@Z
?ScanDirFree@File@@YAXPAY0BAE@D@Z
?close@File@@YAHPAU_MjzFileType_s@@@Z
?compressArchive@mjzFile@@QAEHPBD@Z
?getLength@File@@YAHPAU_MjzFileType_s@@@Z
?initialize@File@@YA_N_N@Z
?loadArchive@File@@YAHPBD@Z
?loadArchives@File@@YAHPBD@Z
?open@File@@YAPAU_MjzFileType_s@@PBD0@Z
?read@File@@YAIPAXIIPAU_MjzFileType_s@@@Z
?readBytes@File@@YAIPAXIPAU_MjzFileType_s@@@Z
?registerThread@File@@YAXXZ
?seek@File@@YAHPAU_MjzFileType_s@@HH@Z
?setLocalePath@File@@YAXPBD@Z
?shutdown@File@@YAXXZ
?tell@File@@YAHPAU_MjzFileType_s@@@Z
?unregisterThread@File@@YAXXZ
?write@File@@YAIPBXIIPAU_MjzFileType_s@@@Z
Name
.text
Size
12KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
760B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
4KB
Virtual Size
746B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=2, id=12, version=7291,
count=1, id=14, version=7299,
count=2, id=11, version=8047,
count=5, id=10, version=8047,
count=3, id=4, version=8047,
count=42, id=1, productName=Unmarked objects,
count=3, id=49, version=9044,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
fmod.dll
- SHA256 7c6f7495d0a981f646bc23fdb39c0e349c598f5d6f4ef0ee58311338ae760194
- MD5 f51a7dd4d040a9c079cf64d36f569673
- SHA1 430cff3cd81c0cec45207caa98ecf1ccc2b4971c
- SHA512 79ff5a3522559e6dc0f971cbceb07be0a39a5d538590cb9a9f3d52970c0cda1a12da1d8055de923097a7485b1dcfa54dc56709520073c9395607624c0a1a6df2
- SSDEEP 3072:66COMOtCkffbueK5QlfQxHTaR2mfm+G95QLOZRnFMFsE9JTjaZsKEb:jcB0bBfWHTaR2mfm+G95nZxFMyy52Zs9
- TLSH T10CF301B571ED603EDBFB04F617C9DF718859B53707F22A94114AA28A089C10F6E82F97
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Unsigned PE
Checks for missing Authenticode signature.
-
NSIS installer
Minor OS version
0
Major OS version
4
Entry point
600112
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
_FMUSIC_FreeSong@4
_FMUSIC_GetBPM@4
_FMUSIC_GetGlobalVolume@4
_FMUSIC_GetMasterVolume@4
_FMUSIC_GetName@4
_FMUSIC_GetNumChannels@4
_FMUSIC_GetNumInstruments@4
_FMUSIC_GetNumOrders@4
_FMUSIC_GetNumPatterns@4
_FMUSIC_GetNumSamples@4
_FMUSIC_GetOpenState@4
_FMUSIC_GetOrder@4
_FMUSIC_GetPattern@4
_FMUSIC_GetPatternLength@8
_FMUSIC_GetPaused@4
_FMUSIC_GetRealChannel@8
_FMUSIC_GetRow@4
_FMUSIC_GetSample@8
_FMUSIC_GetSpeed@4
_FMUSIC_GetTime@4
_FMUSIC_GetType@4
_FMUSIC_GetUserData@4
_FMUSIC_IsFinished@4
_FMUSIC_IsPlaying@4
_FMUSIC_LoadSong@4
_FMUSIC_LoadSongEx@24
_FMUSIC_OptimizeChannels@12
_FMUSIC_PlaySong@4
_FMUSIC_SetInstCallback@12
_FMUSIC_SetLooping@8
_FMUSIC_SetMasterSpeed@8
_FMUSIC_SetMasterVolume@8
_FMUSIC_SetOrder@8
_FMUSIC_SetOrderCallback@12
_FMUSIC_SetPanSeperation@8
_FMUSIC_SetPaused@8
_FMUSIC_SetReverb@4
_FMUSIC_SetRowCallback@12
_FMUSIC_SetSample@12
_FMUSIC_SetUserData@8
_FMUSIC_SetZxxCallback@8
_FMUSIC_StopAllSongs@0
_FMUSIC_StopSong@4
_FSOUND_3D_GetAttributes@12
_FSOUND_3D_GetMinMaxDistance@12
_FSOUND_3D_Listener_GetAttributes@32
_FSOUND_3D_Listener_SetAttributes@32
_FSOUND_3D_Listener_SetCurrent@8
_FSOUND_3D_SetAttributes@12
_FSOUND_3D_SetDistanceFactor@4
_FSOUND_3D_SetDopplerFactor@4
_FSOUND_3D_SetMinMaxDistance@12
_FSOUND_3D_SetRolloffFactor@4
_FSOUND_CD_Eject@4
_FSOUND_CD_GetNumTracks@4
_FSOUND_CD_GetPaused@4
_FSOUND_CD_GetTrack@4
_FSOUND_CD_GetTrackLength@8
_FSOUND_CD_GetTrackTime@4
_FSOUND_CD_GetVolume@4
_FSOUND_CD_OpenTray@8
_FSOUND_CD_Play@8
_FSOUND_CD_SetPaused@8
_FSOUND_CD_SetPlayMode@8
_FSOUND_CD_SetTrackTime@8
_FSOUND_CD_SetVolume@8
_FSOUND_CD_Stop@4
_FSOUND_Close@0
_FSOUND_DSP_ClearMixBuffer@0
_FSOUND_DSP_Create@12
_FSOUND_DSP_Free@4
_FSOUND_DSP_GetActive@4
_FSOUND_DSP_GetBufferLength@0
_FSOUND_DSP_GetBufferLengthTotal@0
_FSOUND_DSP_GetClearUnit@0
_FSOUND_DSP_GetClipAndCopyUnit@0
_FSOUND_DSP_GetFFTUnit@0
_FSOUND_DSP_GetMusicUnit@0
_FSOUND_DSP_GetPriority@4
_FSOUND_DSP_GetSFXUnit@0
_FSOUND_DSP_GetSpectrum@0
_FSOUND_DSP_MixBuffers@28
_FSOUND_DSP_SetActive@8
_FSOUND_DSP_SetPriority@8
_FSOUND_FX_Disable@4
_FSOUND_FX_Enable@8
_FSOUND_FX_SetChorus@32
_FSOUND_FX_SetCompressor@28
_FSOUND_FX_SetDistortion@24
_FSOUND_FX_SetEcho@24
_FSOUND_FX_SetFlanger@32
_FSOUND_FX_SetGargle@12
_FSOUND_FX_SetI3DL2Reverb@52
_FSOUND_FX_SetParamEQ@16
_FSOUND_FX_SetWavesReverb@20
_FSOUND_File_SetCallbacks@20
_FSOUND_GetAmplitude@4
_FSOUND_GetCPUUsage@0
_FSOUND_GetChannelsPlaying@0
_FSOUND_GetCurrentLevels@12
_FSOUND_GetCurrentPosition@4
_FSOUND_GetCurrentSample@4
_FSOUND_GetDriver@0
_FSOUND_GetDriverCaps@8
_FSOUND_GetDriverName@4
_FSOUND_GetError@0
_FSOUND_GetFrequency@4
_FSOUND_GetLoopMode@4
_FSOUND_GetMaxChannels@0
_FSOUND_GetMaxSamples@0
_FSOUND_GetMemoryStats@8
_FSOUND_GetMixer@0
_FSOUND_GetMute@4
_FSOUND_GetNumDrivers@0
_FSOUND_GetNumHWChannels@12
_FSOUND_GetNumHardwareChannels@0
_FSOUND_GetNumSubChannels@4
_FSOUND_GetOutput@0
_FSOUND_GetOutputHandle@0
_FSOUND_GetOutputRate@0
_FSOUND_GetPan@4
_FSOUND_GetPaused@4
_FSOUND_GetPriority@4
_FSOUND_GetReserved@4
_FSOUND_GetSFXMasterVolume@0
_FSOUND_GetSubChannel@8
_FSOUND_GetSurround@4
_FSOUND_GetVersion@0
_FSOUND_GetVolume@4
_FSOUND_Init@12
_FSOUND_IsPlaying@4
_FSOUND_PlaySound@8
_FSOUND_PlaySoundEx@16
_FSOUND_Record_GetDriver@0
_FSOUND_Record_GetDriverName@4
_FSOUND_Record_GetNumDrivers@0
_FSOUND_Record_GetPosition@0
_FSOUND_Record_SetDriver@4
_FSOUND_Record_StartSample@8
_FSOUND_Record_Stop@0
_FSOUND_Reverb_GetChannelProperties@8
_FSOUND_Reverb_GetProperties@4
_FSOUND_Reverb_SetChannelProperties@8
_FSOUND_Reverb_SetProperties@4
_FSOUND_Sample_Alloc@28
_FSOUND_Sample_Free@4
_FSOUND_Sample_Get@4
_FSOUND_Sample_GetDefaults@20
_FSOUND_Sample_GetDefaultsEx@32
_FSOUND_Sample_GetLength@4
_FSOUND_Sample_GetLoopPoints@12
_FSOUND_Sample_GetMinMaxDistance@12
_FSOUND_Sample_GetMode@4
_FSOUND_Sample_GetName@4
_FSOUND_Sample_Load@20
_FSOUND_Sample_Lock@28
_FSOUND_Sample_SetDefaults@20
_FSOUND_Sample_SetDefaultsEx@32
_FSOUND_Sample_SetLoopPoints@12
_FSOUND_Sample_SetMaxPlaybacks@8
_FSOUND_Sample_SetMinMaxDistance@12
_FSOUND_Sample_SetMode@8
_FSOUND_Sample_Unlock@20
_FSOUND_Sample_Upload@12
_FSOUND_SetBufferSize@4
_FSOUND_SetCurrentPosition@8
_FSOUND_SetDriver@4
_FSOUND_SetFrequency@8
_FSOUND_SetFrequencyEx@8
_FSOUND_SetHWND@4
_FSOUND_SetLoopMode@8
_FSOUND_SetMaxHardwareChannels@4
_FSOUND_SetMemorySystem@20
_FSOUND_SetMinHardwareChannels@4
_FSOUND_SetMixer@4
_FSOUND_SetMute@8
_FSOUND_SetOutput@4
_FSOUND_SetPan@8
_FSOUND_SetPanSeperation@4
_FSOUND_SetPaused@8
_FSOUND_SetPriority@8
_FSOUND_SetReserved@8
_FSOUND_SetSFXMasterVolume@4
_FSOUND_SetSpeakerMode@4
_FSOUND_SetSurround@8
_FSOUND_SetVolume@8
_FSOUND_SetVolumeAbsolute@8
_FSOUND_StopSound@4
_FSOUND_Stream_AddSyncPoint@12
_FSOUND_Stream_Close@4
_FSOUND_Stream_Create@20
_FSOUND_Stream_CreateDSP@16
_FSOUND_Stream_DeleteSyncPoint@4
_FSOUND_Stream_FindTagField@20
_FSOUND_Stream_GetLength@4
_FSOUND_Stream_GetLengthMs@4
_FSOUND_Stream_GetMode@4
_FSOUND_Stream_GetNumSubStreams@4
_FSOUND_Stream_GetNumSyncPoints@4
_FSOUND_Stream_GetNumTagFields@8
_FSOUND_Stream_GetOpenState@4
_FSOUND_Stream_GetPosition@4
_FSOUND_Stream_GetSample@4
_FSOUND_Stream_GetSyncPoint@8
_FSOUND_Stream_GetSyncPointInfo@8
_FSOUND_Stream_GetTagField@24
_FSOUND_Stream_GetTime@4
_FSOUND_Stream_Net_GetBufferProperties@12
_FSOUND_Stream_Net_GetLastServerStatus@0
_FSOUND_Stream_Net_GetStatus@20
_FSOUND_Stream_Net_SetBufferProperties@12
_FSOUND_Stream_Net_SetMetadataCallback@12
_FSOUND_Stream_Net_SetNetDataCallback@8
_FSOUND_Stream_Net_SetProxy@4
_FSOUND_Stream_Open@16
_FSOUND_Stream_Play@8
_FSOUND_Stream_PlayEx@16
_FSOUND_Stream_SetBufferSize@4
_FSOUND_Stream_SetEndCallback@12
_FSOUND_Stream_SetLoopCount@8
_FSOUND_Stream_SetLoopPoints@12
_FSOUND_Stream_SetMode@8
_FSOUND_Stream_SetPCM@8
_FSOUND_Stream_SetPosition@8
_FSOUND_Stream_SetSubStream@8
_FSOUND_Stream_SetSubStreamSentence@12
_FSOUND_Stream_SetSyncCallback@12
_FSOUND_Stream_SetTime@8
_FSOUND_Stream_Stop@4
_FSOUND_Update@0
Name
UPX0
Size
Virtual Size
436KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
146KB
Virtual Size
148KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
10KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=8, id=14, version=7299,
count=5, id=10, version=8047,
count=2, id=4, version=8047,
count=157, id=1, productName=Unmarked objects,
count=15, id=19, version=8034,
count=6, id=49, version=9044,
count=80, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=10, productName=Unmarked objects (old),
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
gfx2d.dll
- IMPHASH d910d8e1d80183825148367a41a7e054
- SHA256 d571db41d3c174a67ad91b69f0c5bbfb876104d90c54853bc47a1b905a08131e
- MD5 d36484cb65719dd28956e22cfeceffd0
- SHA1 33e0415d36c3b291996e3cf7665a726b40e98672
- SHA512 282558b585d28609aca9a592c4495c4d8e19a788a3a65818561304941eea569a287de0df9084fa1ac3b38490bfcc157cc5bc18d75c525f1c99c630ec97eab111
- SSDEEP 3072:ud/LpNYDAhhhCvTBQPf8OFKnxkQhw2oqWpr9ZQ/o72OJW6sHq/FG:OTcTj5ydT3c
- TLSH T19CB37D0A795B21A4E21152BCDD547A7BF83FA9F179886F875B38D9304036520BB3323B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
NSIS installer
Minor OS version
0
Major OS version
4
Entry point
72679
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
core
?touchMemory@MemoryMgr@@QAEXXZ
?MessagePump@Platform@@YAHXZ
?GetActive@Platform@@YA_NXZ
?GetMinimized@Platform@@YA_NXZ
?DestructWindow@Platform@@YAXPAUHWND__@@@Z
?GetWindowHeight@Platform@@YAHXZ
?GetWindowWidth@Platform@@YAHXZ
?free@MemoryMgr@@QAEHHPAX@Z
?GetInt@Parser@@QAE_NPAH@Z
?mt_rand@@YAIXZ
?GetEqualsToken@Parser@@QAE_NXZ
?GetFloat2@Parser@@QAE_NPAM0@Z
?GetFloat@Parser@@QAE_NPAM@Z
?GetToken@Parser@@QAEPADPAD@Z
?ParseLine@Parser@@QAE_NXZ
??0Parser@@QAE@PAD@Z
?ParseString@Parser@@QAE_NPAD@Z
?ParseInteger@Parser@@QAE_NPAH@Z
??1Parser@@UAE@XZ
?ParseInteger2@Parser@@QAE_NPAH0@Z
?ParseUTF8@Parser@@QAE_NPAE@Z
?ParseInteger3@Parser@@QAE_NPAH00@Z
?alloc@MemoryMgr@@QAEPAXHIPBDI@Z
?g_MemoryPtr@@3PAVMemoryMgr@@A
imglib
??1Image@@UAE@XZ
?allocateData@Image@@QAEHHHH@Z
?_flipImage@Image@@IAEHXZ
?saveToJpeg@Image@@QAEHPBDI@Z
??0Image@@QAE@XZ
?loadImage@Image@@QAEHPBD@Z
?getAlphaMask@Image@@QAEPAEH@Z
?getAlphaMaskWidth@Image@@QBEHXZ
?getAlphaMaskHeight@Image@@QBEHXZ
logger
?log@udLogger@@SAXHPBDZZ
file
?open@File@@YAPAU_MjzFileType_s@@PBD0@Z
?getLength@File@@YAHPAU_MjzFileType_s@@@Z
?read@File@@YAIPAXIIPAU_MjzFileType_s@@@Z
?close@File@@YAHPAU_MjzFileType_s@@@Z
msvcrt
__CxxFrameHandler
strncpy
_purecall
?terminate@@YAXXZ
free
_ftol
malloc
_adjust_fdiv
tolower
strncat
strncmp
sscanf
fprintf
sprintf
_initterm
_stricmp
_except_handler3
kernel32
DisableThreadLibraryCalls
WritePrivateProfileStringA
GetPrivateProfileIntA
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
??0gfxBitmap@@QAE@XZ
??0gfxFont@@QAE@ABV0@@Z
??0gfxFont@@QAE@XZ
??0gfxPalette@@QAE@ABV0@@Z
??0gfxPalette@@QAE@XZ
??0gfxParticleSystem@@QAE@XZ
??0gfxRenderer@@QAE@ABV0@@Z
??0gfxRenderer@@QAE@XZ
??0gfxSprite@@QAE@ABV0@@Z
??0gfxSprite@@QAE@XZ
??0gfxSubsystem@@QAE@PAVgfxRenderer@@@Z
??1gfxBitmap@@UAE@XZ
??1gfxFont@@UAE@XZ
??1gfxPalette@@UAE@XZ
??1gfxParticleSystem@@UAE@XZ
??1gfxRenderer@@UAE@XZ
??1gfxSprite@@UAE@XZ
??1gfxSubsystem@@UAE@XZ
??4gfxFont@@QAEAAV0@ABV0@@Z
??4gfxPalette@@QAEAAV0@ABV0@@Z
??4gfxRenderer@@QAEAAV0@ABV0@@Z
??4gfxSprite@@QAEAAV0@ABV0@@Z
??_7gfxFont@@6B@
??_7gfxPalette@@6B@
??_7gfxRenderer@@6B@
??_7gfxSprite@@6B@
?_getChar@gfxFont@@IAEPAUFontChar_s@@HI@Z
?_parseFont@gfxFont@@IAEHPAPAD@Z
?_parseSprite@gfxSprite@@IAEHPAPAD@Z
?_testImageDimensions@gfxBitmap@@IAEXHH@Z
?activate@gfxFont@@UAEHPAVgfxBitmapFactory@@@Z
?activate@gfxSprite@@UAEHPAVgfxBitmapFactory@@@Z
?activate@gfxSubsystem@@UAEXXZ
?addEvent@gfxSubsystem@@QAEXHHHHMPAX@Z
?alphaTest@gfxBitmap@@UAE_NHHHHHH@Z
?alphaTest@gfxSprite@@UAE_NHHHH@Z
?alphaTestSprite@gfxSubsystem@@QAE_NHHHHH@Z
?blt@gfxSprite@@UAEXHHHHHHHHQAEE@Z
?blt@gfxSprite@@UAEXHHHHHHQAEE@Z
?blt@gfxSprite@@UAEXHHHHQAEE@Z
?blt@gfxSubsystem@@QAEXHHHHHHE@Z
?blt@gfxSubsystem@@QAEXHHHHHHHHE@Z
?blt@gfxSubsystem@@QAEXHHHHHHHHHHE@Z
?bltPsys@gfxParticleSystemInstance@@QAEHM@Z
?bltSort@gfxSubsystem@@QAEXHHHHHHHE@Z
?bltText@gfxFont@@UAEHHHHHHEPBI@Z
?bltXFormFloat@gfxBitmap@@UAEXMMHHHHQAEEMM@Z
?bltx@gfxSprite@@UAEXHHHHQAEEMM@Z
?bltx@gfxSubsystem@@QAEXHHHHHHHQAEEM_NM1@Z
?bltx_f@gfxSprite@@UAEXMMHHQAEEMM@Z
?bltx_f@gfxSubsystem@@QAEXHHHMMHHQAEEM_NM1@Z
?clone@gfxBitmap@@UAEXPAV1@@Z
?createFont@gfxSubsystem@@QAEHPBD@Z
?createPalette@gfxSubsystem@@QAEHPBD@Z
?createParticleSystem@gfxSubsystem@@QAEHPBD@Z
?createParticleSystemInstance@gfxSubsystem@@QAEHPBD0@Z
?createParticleSystemInstance@gfxSubsystem@@QAEHPBDHP6AXPAXW4e_ParticleEvents@@PAVgfxParticleSystemInstance@@H@Z1@Z
?createSpline@gfxSubsystem@@QAEHPBD@Z
?createSprite@gfxSubsystem@@QAEHPBD@Z
?deactivate@gfxFont@@UAEXPAVgfxBitmapFactory@@@Z
?deactivate@gfxSprite@@UAEXPAVgfxBitmapFactory@@@Z
?deactivate@gfxSubsystem@@UAEXXZ
?defineDepthNode@gfxSubsystem@@QAEXPBDI@Z
?displayChanged@gfxSubsystem@@QAEXPAUHWND__@@HHH@Z
?g_blackColor@@3PAEA
?g_blueColor@@3PAEA
?g_cyanColor@@3PAEA
?g_gfx@@3PAVgfxSubsystem@@A
?g_greenColor@@3PAEA
?g_magentaColor@@3PAEA
?g_redColor@@3PAEA
?g_whiteColor@@3PAEA
?g_yellowColor@@3PAEA
?garbageCollect@gfxSubsystem@@QAEXXZ
?getAnimCount@gfxSprite@@UBEHXZ
?getApproxCurrentMemory@gfxRenderer@@UBEIXZ
?getApproxTotalMemory@gfxRenderer@@UBEIXZ
?getCharDimensions@gfxFont@@UAE_NHIPAH0@Z
?getCharDimensions@gfxSubsystem@@QBE_NHHIPAH0@Z
?getColor_RGB@gfxPalette@@QAEXMQAE@Z
?getEmitterCount@gfxParticleSystem@@QBEEXZ
?getEmitterData@gfxParticleSystem@@QAEPBU_EmitterData_s@@H@Z
?getEmitterId@gfxParticleSystem@@QAEHPBD@Z
?getEmitterName@gfxParticleSystem@@QAEPBDH@Z
?getEntryCount@gfxPalette@@QBEHXZ
?getFontDimensions@gfxFont@@UAEXPAH0@Z
?getFontDimensions@gfxSubsystem@@QBEXHPAH0@Z
?getFontHeight@gfxSubsystem@@QBEHH@Z
?getFrameCount@gfxSprite@@UBEHH@Z
?getFullscreen@gfxSubsystem@@QBE_NXZ
?getFullscreen@gfxSubsystem@@UAE_NXZ
?getGraphicsDetail@gfxSubsystem@@UAEHXZ
?getHeight@gfxSprite@@UBEHXZ
?getMaxDepthNode@gfxSubsystem@@QBEHXZ
?getParticleSystem@gfxParticleSystemInstance@@QBEPBVgfxParticleSystem@@XZ
?getParticleSystemInstance@gfxSubsystem@@QAEPBVgfxParticleSystemInstance@@H@Z
?getRenderStats@gfxSubsystem@@QAEPBU_GfxStats_s@@XZ
?getScreenHeight@gfxSubsystem@@QBEHXZ
?getScreenWidth@gfxSubsystem@@QBEHXZ
?getSpriteAnimCount@gfxSubsystem@@QBEHH@Z
?getSpriteFrameCount@gfxSubsystem@@QBEHHH@Z
?getSpriteHeight@gfxSubsystem@@QBEHH@Z
?getSpriteName@gfxSprite@@UBEPBDXZ
?getSpriteName@gfxSubsystem@@QAEPBDH@Z
?getSpriteWidth@gfxSubsystem@@QBEHH@Z
?getTextRect@gfxFont@@UAEXHHHPBIPAH111@Z
?getTextRect@gfxSubsystem@@QAEXHHHHPBIPAH111@Z
?getWidth@gfxSprite@@UBEHXZ
?init@gfxParticleSystemInstance@@QAEHPAVgfxParticleSystem@@PAVgfxSpriteFactory@@PAVgfxPaletteFactory@@PAVgfxSplineFactory@@P6AXPAXW4e_ParticleEvents@@PAV1@H@Z4@Z
?initialize@gfxSubsystem@@UAEHPAVPreferences@@PAUHWND__@@@Z
?isDead@gfxParticleSystemInstance@@QAE_NXZ
?isHardwareAccelerated@gfxSubsystem@@QBE_NXZ
?line@gfxSubsystem@@QAEXHHHHHMQBE@Z
?line_f@gfxSubsystem@@QAEXHMMMMMQBE@Z
?load@gfxFont@@UAEHPBD@Z
?load@gfxPalette@@UAEHPAVImage@@PBD@Z
?load@gfxParticleSystem@@QAEHPBD@Z
?load@gfxSprite@@UAEHPBD@Z
?moveWindow@gfxSubsystem@@QAEXXZ
?offsetParticles@gfxParticleSystemInstance@@QAEXHH@Z
?particleSystemInstanceIsDead@gfxSubsystem@@QAE_NH@Z
?particleSystemInstanceOffsetParticles@gfxSubsystem@@QAEXHHH@Z
?particleSystemInstanceStartEmitters@gfxSubsystem@@QAEXH@Z
?particleSystemInstanceStopEmitters@gfxSubsystem@@QAEXH@Z
?point@gfxSubsystem@@QAEXHHHMQBE@Z
?print@gfxSubsystem@@QAEXHHHHHHHEPBD@Z
?print@gfxSubsystem@@QAEXHHHHHHHEPBI@Z
?psemit@gfxSubsystem@@QAEXHHM@Z
?registerThread@gfxRenderer@@UAEXPBD@Z
?registerThread@gfxSubsystem@@QAEXPBD@Z
?reinitialize@gfxBitmapFactory@@QAEHXZ
?releasePalette@gfxSubsystem@@QAEXPBD@Z
?releaseParticleSystem@gfxSubsystem@@QAEXPBD@Z
?releaseParticleSystemInstance@gfxSubsystem@@QAEXH@Z
?releaseParticleSystemInstance@gfxSubsystem@@QAEXPBD0@Z
?releaseParticleSystemInstance@gfxSubsystem@@QAEXPBD@Z
?releaseSpline@gfxSubsystem@@QAEXPBD@Z
?releaseSprite@gfxSubsystem@@QAEXPBD@Z
?reset@gfxBitmap@@UAEXXZ
?reset@gfxPalette@@QAEXXZ
?reset@gfxParticleSystem@@QAEXXZ
?reset@gfxParticleSystemInstance@@QAEXXZ
?reset@gfxSprite@@UAEXXZ
?resetBitmaps@gfxBitmapFactory@@QAEHXZ
?resetParticleSystemInstance@gfxSubsystem@@QAEXH@Z
?setClearColor@gfxSubsystem@@QAEXQBE@Z
?setFullscreen@gfxSubsystem@@UAE_N_N@Z
?setGraphicsDetail@gfxSubsystem@@UAEHH@Z
?setupAlphaTest@gfxBitmap@@UAEXXZ
?setupAlphaTest@gfxSprite@@UAEXXZ
?setupAlphaTestSprite@gfxSubsystem@@QAEXH@Z
?showSpline@gfxParticleSystemInstance@@QAEXH_N@Z
?shutdown@gfxSubsystem@@UAEHXZ
?startEmitters@gfxParticleSystemInstance@@QAEXXZ
?stopEmitters@gfxParticleSystemInstance@@QAEXXZ
?suspend@gfxRenderer@@UAEX_N@Z
?suspendRenderer@gfxRenderer@@UAEX_N@Z
?suspendRenderer@gfxSubsystem@@QAEX_N@Z
?takeScreenshot@gfxSubsystem@@QAEXPBD@Z
?unregisterThread@gfxRenderer@@UAEXPBD@Z
?unregisterThread@gfxSubsystem@@QAEXPBD@Z
?update@gfxParticleSystemInstance@@QAEXMHHPAVgfxSpriteFactory@@PAVgfxPaletteFactory@@PAVgfxSplineFactory@@@Z
?update@gfxSubsystem@@QAEHI@Z
?updateBitmap@gfxFont@@UAEXPAVgfxBitmapFactory@@@Z
?updateBitmap@gfxSprite@@UAEXPAVgfxBitmapFactory@@@Z
?updateParticleSystem@gfxSubsystem@@QAEXHHHM@Z
?validBlt@gfxSprite@@QAE_NHH@Z
Name
.text
Size
72KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
16KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=12, version=7291,
count=1, id=14, version=7299,
count=2, id=11, version=8047,
count=5, id=10, version=8047,
count=2, id=4, version=8047,
count=64, id=1, productName=Unmarked objects,
count=17, id=49, version=9044,
count=10, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
gfx2d_dd7.dll
- IMPHASH 9322edf8b70ce4b8df21a3c82244e419
- SHA256 0bd1e468018b8261f38e114f5976ec84033a755adc55463f1c108edae8601a56
- MD5 ea990e17b826722eabe0a0632ab9d026
- SHA1 95a518a80dab6e5eaa1f84f930e0e62e39cab63b
- SHA512 2f93ac4dc7ee0aeaf05e67f743ffc64e001d6b294a33420118154d56865b764092c8a3a424d4b4611937a6406c2d5f6dfad23ab22b6102713022c83af5fa4379
- SSDEEP 768:8hH0pyctUuB+/x92iaG/gSOJ6yEA/SmodU7qZ6mheGz7v4AZCTLNYzO:81o+kdJ6oGv0TqK
- TLSH T146533A10678225E6D247BB70743E177B8F77487800EC87CDAB2AEBE97466134933E642
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
NSIS installer
Minor OS version
0
Major OS version
4
Entry point
30571
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
user32
ClientToScreen
ShowWindow
GetClientRect
core
?SetFullscreenWindow@Platform@@YAXPAUHWND__@@_NHH@Z
?free@MemoryMgr@@QAEHHPAX@Z
?g_MemoryPtr@@3PAVMemoryMgr@@A
?alloc@MemoryMgr@@QAEPAXHIPBDI@Z
?SetWindowPos@Platform@@YAXXZ
?MessagePump@Platform@@YAHXZ
?g_CPUInfo@@3UCPUInfo_s@@A
?GetTime@Platform@@YAIXZ
?SetVideoInfo@Platform@@YAXHHH_N@Z
?GetWindowHeight@Platform@@YAHXZ
?GetWindowWidth@Platform@@YAHXZ
?GetDesktopInfo@Platform@@YAXAAH00@Z
logger
?log@udLogger@@SAXHPBDZZ
ddraw
DirectDrawEnumerateExA
DirectDrawCreateEx
imglib
?copyTo16Bit@Image@@QAEXPAEIGGG@Z
?loadImage@Image@@QAEHPBD@Z
?copyTo32Bit@Image@@QAEXPAEI@Z
?convertToD3DByteOrdering@Image@@QAEHXZ
?copyTo24Bit@Image@@QAEXPAEI@Z
gfx2d
?alphaTest@gfxBitmap@@UAE_NHHHHHH@Z
?setupAlphaTest@gfxBitmap@@UAEXXZ
?clone@gfxBitmap@@UAEXPAV1@@Z
?bltXFormFloat@gfxBitmap@@UAEXMMHHHHQAEEMM@Z
??1gfxBitmap@@UAE@XZ
?reset@gfxBitmap@@UAEXXZ
?_testImageDimensions@gfxBitmap@@IAEXHH@Z
?unregisterThread@gfxRenderer@@UAEXPBD@Z
??1gfxRenderer@@UAE@XZ
?resetBitmaps@gfxBitmapFactory@@QAEHXZ
??0gfxSubsystem@@QAE@PAVgfxRenderer@@@Z
??_7gfxRenderer@@6B@
?registerThread@gfxRenderer@@UAEXPBD@Z
?suspend@gfxRenderer@@UAEX_N@Z
?suspendRenderer@gfxRenderer@@UAEX_N@Z
?getApproxTotalMemory@gfxRenderer@@UBEIXZ
?getApproxCurrentMemory@gfxRenderer@@UBEIXZ
??0gfxBitmap@@QAE@XZ
??0gfxRenderer@@QAE@XZ
msvcrt
_adjust_fdiv
malloc
_initterm
free
?terminate@@YAXXZ
_except_handler3
sprintf
strncpy
__CxxFrameHandler
_purecall
kernel32
DisableThreadLibraryCalls
WritePrivateProfileStringA
GetPrivateProfileIntA
??0gfxDirectDraw7@@QAE@ABV0@@Z
??0gfxDirectDraw7@@QAE@XZ
??0gfxRendererDD7@@QAE@ABV0@@Z
??0gfxRendererDD7@@QAE@XZ
??1gfxDirectDraw7@@UAE@XZ
??1gfxRendererDD7@@UAE@XZ
??4gfxDirectDraw7@@QAEAAV0@ABV0@@Z
??4gfxRendererDD7@@QAEAAV0@ABV0@@Z
??_7gfxDirectDraw7@@6B@
??_7gfxRendererDD7@@6BgfxDirectDraw7@@@
??_7gfxRendererDD7@@6BgfxRenderer@@@
?_backbuffer@gfxDirectDraw7@@1PAUIDirectDrawSurface7@@A
?_backbufferPitch@gfxDirectDraw7@@1IA
?_bitsPerPixel@gfxDirectDraw7@@1HA
?_bluBitMask@gfxDirectDraw7@@1IA
?_bluBits@gfxDirectDraw7@@1HA
?_bluShift@gfxDirectDraw7@@1HA
?_chooseMode@gfxRendererDD7@@IAE_NXZ
?_clipper@gfxDirectDraw7@@1PAUIDirectDrawClipper@@A
?_coopFlags@gfxDirectDraw7@@1HA
?_ddraw@gfxDirectDraw7@@1PAUIDirectDraw7@@A
?_displayModeCount@gfxDirectDraw7@@1IA
?_displayModes@gfxDirectDraw7@@1PAU_displayModeInfo_s@@A
?_driverCaps@gfxDirectDraw7@@1U_DDCAPS_DX7@@A
?_grnBitMask@gfxDirectDraw7@@1IA
?_grnBits@gfxDirectDraw7@@1HA
?_grnShift@gfxDirectDraw7@@1HA
?_helCaps@gfxDirectDraw7@@1U_DDCAPS_DX7@@A
?_modeSwitch@gfxRendererDD7@@IAEHPAUHWND__@@@Z
?_monitorCount@gfxDirectDraw7@@1IA
?_monitors@gfxDirectDraw7@@1PAU_monitorInfo_s@@A
?_primary@gfxDirectDraw7@@1PAUIDirectDrawSurface7@@A
?_primaryBack@gfxDirectDraw7@@1PAUIDirectDrawSurface7@@A
?_redBitMask@gfxDirectDraw7@@1IA
?_redBits@gfxDirectDraw7@@1HA
?_redShift@gfxDirectDraw7@@1HA
?_reportError@gfxDirectDraw7@@KAHHPBD@Z
?_sysSurfaceMemory@gfxDirectDraw7@@1IA
?_testFullscreenSwitch@gfxRendererDD7@@IAEHXZ
?_testMode@gfxRendererDD7@@IAE_NHHH_N@Z
?_winHeight@gfxDirectDraw7@@1IA
?_winWidth@gfxDirectDraw7@@1IA
?_wndRect@gfxDirectDraw7@@1UtagRECT@@A
?beginFrame@gfxRendererDD7@@UAEXXZ
?clearFrame@gfxRendererDD7@@UAEXQAE@Z
?createBitmap@gfxRendererDD7@@UAEPAVgfxBitmap@@XZ
?displayChanged@gfxRendererDD7@@UAE_NPAUHWND__@@HHH@Z
?drawLine@gfxRendererDD7@@UAEXMMMMMQBE@Z
?drawPoint@gfxRendererDD7@@UAEXHHMQBE@Z
?endFrame@gfxRendererDD7@@UAEXXZ
?extDisplayChanged@gfxRendererDD7@@UAE_NPAVgfxBitmapFactory@@@Z
?getScreen@gfxRendererDD7@@UAEXPAE@Z
?initialize@gfxRendererDD7@@UAEHPAVgfxPreferences@@PAUHWND__@@@Z
?isHWRenderer@gfxRendererDD7@@UBE_NXZ
?moveWindow@gfxRendererDD7@@UAEXPAUHWND__@@@Z
?renderFrame@gfxRendererDD7@@UAEHXZ
?s_adjustFlippingRect@gfxDirectDraw7@@SAXPAUHWND__@@@Z
?s_createClipper@gfxDirectDraw7@@SA_NPAUHWND__@@@Z
?s_createDirectDraw7@gfxDirectDraw7@@SA_NI@Z
?s_createFlippingSurfaces@gfxDirectDraw7@@SA_NPAUHWND__@@H@Z
?s_createPrimarySurface@gfxDirectDraw7@@SA_NXZ
?s_createPrimaryWithBackbuffers@gfxDirectDraw7@@SA_NH@Z
?s_createSurface@gfxDirectDraw7@@SAPAUIDirectDrawSurface7@@HH_N@Z
?s_enumDirectDrawEnumCb@gfxDirectDraw7@@KGHPAU_GUID@@PAD1PAXPAUHMONITOR__@@@Z
?s_enumDirectDrawEnumCountCb@gfxDirectDraw7@@KGHPAU_GUID@@PAD1PAXPAUHMONITOR__@@@Z
?s_enumDisplayModes@gfxDirectDraw7@@SA_NXZ
?s_enumDisplayModesCb@gfxDirectDraw7@@KGJPAU_DDSURFACEDESC2@@PAX@Z
?s_enumDisplayModesCountCb@gfxDirectDraw7@@KGJPAU_DDSURFACEDESC2@@PAX@Z
?s_enumMonitors@gfxDirectDraw7@@SA_NXZ
?s_flipBackbuffer@gfxDirectDraw7@@SA_NXZ
?s_fullscreenShutdown@gfxDirectDraw7@@SA_NXZ
?s_getCaps@gfxDirectDraw7@@SA_NXZ
?s_getCount@gfxDirectDraw7@@SAHPAUIUnknown@@@Z
?s_queryPixelFormat@gfxDirectDraw7@@SA_NXZ
?s_restoreDisplayMode@gfxDirectDraw7@@SA_NXZ
?s_setCooperativeLevel@gfxDirectDraw7@@SA_NPAUHWND__@@_N@Z
?s_setDisplayMode@gfxDirectDraw7@@SA_NHHH@Z
?s_terminate@gfxDirectDraw7@@SA_NXZ
?s_testMode@gfxDirectDraw7@@SA_NHHH@Z
?setFullscreen@gfxRendererDD7@@UAEHPAUHWND__@@PAVgfxBitmapFactory@@@Z
?shutdown@gfxRendererDD7@@UAEHXZ
CreateGfxSubsystem
Name
.text
Size
28KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=11, version=8047,
count=1, id=14, version=7299,
count=5, id=10, version=8047,
count=2, id=4, version=8047,
count=1, id=29, version=9178,
count=2, id=25, version=9210,
count=57, id=1, productName=Unmarked objects,
count=5, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=9, id=49, version=9044,
count=9, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
gfx2d_dx8.dll
- IMPHASH 04314a9e23ce9522f8c347d2f022de91
- SHA256 21f8e46a5e21c38f75dba7051b4886df8df79985265057a93211290b166f9c43
- MD5 49469eb567d3ee916f13bb9921253cdb
- SHA1 170b87f907adbe47f9f4a2cda6238701da2a32f7
- SHA512 c469b36b2d4f8b0a8329ff9c39a3c0f5fbaab803c2e4595814a5af5a31a1138d6f0bac54966d10ba03eb2528da9af8e953b8676d1c0757a213543efba18d4ac5
- SSDEEP 384:m8eXo95Xx4Ec2AqQ0a+UpMlhnduw4IEErj5mGreYuRf:rXxBc2A30avOhW+5mGri
- TLSH T113F24B02664376F1E71325703859BF37EFAC06E52254EF69D727DAE15867022B23BA03
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
NSIS installer
Minor OS version
0
Major OS version
4
Entry point
17707
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
user32
ShowWindow
GetClientRect
core
?alloc@MemoryMgr@@QAEPAXHIPBDI@Z
?SetVideoInfo@Platform@@YAXHHH_N@Z
?GetDesktopInfo@Platform@@YAXAAH00@Z
?Sleep@Platform@@YAXI@Z
?SetFullscreenWindow@Platform@@YAXPAUHWND__@@_NHH@Z
?GetWindowWidth@Platform@@YAHXZ
?GetWindowHeight@Platform@@YAHXZ
?MessagePump@Platform@@YAHXZ
?free@MemoryMgr@@QAEHHPAX@Z
?g_MemoryPtr@@3PAVMemoryMgr@@A
gfx2d
??0gfxBitmap@@QAE@XZ
?resetBitmaps@gfxBitmapFactory@@QAEHXZ
??1gfxRenderer@@UAE@XZ
??0gfxRenderer@@QAE@XZ
?registerThread@gfxRenderer@@UAEXPBD@Z
?clone@gfxBitmap@@UAEXPAV1@@Z
?setupAlphaTest@gfxBitmap@@UAEXXZ
?alphaTest@gfxBitmap@@UAE_NHHHHHH@Z
??0gfxSubsystem@@QAE@PAVgfxRenderer@@@Z
?unregisterThread@gfxRenderer@@UAEXPBD@Z
?_testImageDimensions@gfxBitmap@@IAEXHH@Z
?reset@gfxBitmap@@UAEXXZ
??1gfxBitmap@@UAE@XZ
logger
?log@udLogger@@SAXHPBDZZ
d3d8
Direct3DCreate8
imglib
?convertToD3DByteOrdering@Image@@QAEHXZ
?copyTo32Bit@Image@@QAEXPAEI@Z
?copyTo16BitAlpha@Image@@QAEXPAEIGGGG@Z
?loadImage@Image@@QAEHPBD@Z
?promoteToTexture@Image@@QAEHPAV1@PBD1@Z
msvcrt
sprintf
strncpy
_adjust_fdiv
malloc
_initterm
free
__CxxFrameHandler
kernel32
GetPrivateProfileIntA
WritePrivateProfileStringA
DisableThreadLibraryCalls
CreateGfxSubsystem
Name
.text
Size
16KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=14, version=7299,
count=1, id=11, version=8047,
count=5, id=10, version=8047,
count=2, id=4, version=8047,
count=2, id=25, version=9210,
count=46, id=1, productName=Unmarked objects,
count=5, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=4, id=49, version=9044,
count=9, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
gfx2d_ogl.dll
- IMPHASH d34c8c9b71f0fe4eae9c39865206b0dc
- SHA256 c014f6a2b67d05a8de3d1beb53c12880fd8d7ab738837613f788cff3ee339709
- MD5 b6c2c6668df8fc75f84dd8c2221396c7
- SHA1 cda97813a240a58aca8f9d5028f2519517bdc500
- SHA512 0142a1f9fd48114ee39768520e3ed9532872c81051f4a25bff38828f6ae5aee477b6bb6bbdf3cbf891fe9281d7df38ca54e7e360202bfe1aed5b0aa25cb8b515
- SSDEEP 384:fGKyR4lSXE9+eNP1p5/gEhprtoCYS4Tssggn8qOJeiu4a58HLHfEBW4TN5r5GVLC:xyR49+ar5/gEXrtH5g8qOo8HLHftVWh
- TLSH T1A3D26D43CE1639F6D104603078A977336F217DA612E681179BA3DD76EC3A233B329396
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
NSIS installer
Minor OS version
0
Major OS version
4
Entry point
14193
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
opengl32
glShadeModel
glFrontFace
glClear
glClearColor
glLineWidth
glColor4ubv
glPointSize
glReadPixels
glGetString
glGetIntegerv
wglShareLists
wglCreateContext
wglMakeCurrent
wglDeleteContext
wglSwapBuffers
glFlush
glViewport
glMatrixMode
glLoadIdentity
glOrtho
glTexSubImage2D
glTexImage2D
glTexParameteri
glBindTexture
glGenTextures
glEnd
glVertex2i
glTexCoord2f
glBegin
glPopMatrix
glVertex2f
glPixelStorei
glGetError
glScalef
glRotatef
glTranslatef
glPushMatrix
glColor4ub
glDisable
glBlendFunc
glEnable
glDeleteTextures
gdi32
ChoosePixelFormat
DescribePixelFormat
SetPixelFormat
user32
ShowWindow
ChangeDisplaySettingsA
SetWindowLongA
SetWindowPos
AdjustWindowRect
ReleaseDC
GetDC
DefWindowProcA
EnumDisplaySettingsA
ChangeDisplaySettingsExA
ddraw
DirectDrawEnumerateExA
core
?MessagePump@Platform@@YAHXZ
?GetDesktopInfo@Platform@@YAXAAH00@Z
?GetWindowPos@Platform@@YAXAAH0@Z
?SetVideoInfo@Platform@@YAXHHH_N@Z
?free@MemoryMgr@@QAEHHPAX@Z
?g_MemoryPtr@@3PAVMemoryMgr@@A
?alloc@MemoryMgr@@QAEPAXHIPBDI@Z
?DestructWindow@Platform@@YAXPAUHWND__@@@Z
?InitWindow@Platform@@YAPAUHWND__@@PAUHINSTANCE__@@PAU2@PBDPAUHICON__@@3HHHH_N4P6GJ1IIJ@Z@Z
?GetApp@Platform@@YAPAUHINSTANCE__@@XZ
?GetWindowWidth@Platform@@YAHXZ
?SetWindowPos@Platform@@YAXXZ
?GetWindowHeight@Platform@@YAHXZ
logger
?log@udLogger@@SAXHPBDZZ
?LogLastError@@YAXXZ
imglib
?promoteToTexture@Image@@QAEHPAV1@PBD1@Z
gfx2d
??1gfxRenderer@@UAE@XZ
??0gfxRenderer@@QAE@XZ
?unregisterThread@gfxRenderer@@UAEXPBD@Z
?suspend@gfxRenderer@@UAEX_N@Z
?suspendRenderer@gfxRenderer@@UAEX_N@Z
?getApproxTotalMemory@gfxRenderer@@UBEIXZ
?getApproxCurrentMemory@gfxRenderer@@UBEIXZ
?clone@gfxBitmap@@UAEXPAV1@@Z
?_testImageDimensions@gfxBitmap@@IAEXHH@Z
?reset@gfxBitmap@@UAEXXZ
??1gfxBitmap@@UAE@XZ
??0gfxBitmap@@QAE@XZ
?setupAlphaTest@gfxBitmap@@UAEXXZ
?alphaTest@gfxBitmap@@UAE_NHHHHHH@Z
??0gfxSubsystem@@QAE@PAVgfxRenderer@@@Z
?registerThread@gfxRenderer@@UAEXPBD@Z
msvcrt
malloc
_initterm
free
_adjust_fdiv
atoi
strstr
_purecall
strncpy
__CxxFrameHandler
_stricmp
strtok
_strlwr
sprintf
kernel32
WritePrivateProfileStringA
DisableThreadLibraryCalls
GetPrivateProfileIntA
CreateGfxSubsystem
Name
.text
Size
12KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=12, version=7291,
count=1, id=14, version=7299,
count=5, id=10, version=8047,
count=2, id=4, version=8047,
count=2, id=25, version=9210,
count=106, id=1, productName=Unmarked objects,
count=9, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=6, id=49, version=9044,
count=9, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
imglib.dll
- IMPHASH 82867c343eb0d6c8e9f278e2dae3e343
- SHA256 9a46b1b447ddd241651f4df924eaa1ff83338702915859984cf716d2abe4afb6
- MD5 7d02c9bf2ba850341448ed094d3793a5
- SHA1 f0de9225cce96ba7f9ca0c274dd37262bacdc1a2
- SHA512 76aa550abdcea3757428c5bfb23e791ad14330c335a921f578b0f575ce340b56e5b0a9f467f2a22451cc5dc5eeb45f6d399482448277387d48b023bb0849f20b
- SSDEEP 384:5xWWKvNXRT+uLtSRNzHA3JfH76ywAZI5eK5XxH:5zKvHT+KtS/H4JfH7sreK5X
- TLSH T15AD23B96F3EB95E2C7074D313996A233A134EA68516C87537FD9D6A39C33632383A710
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
NSIS installer
Minor OS version
0
Major OS version
4
Entry point
14810
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
core
?g_MemoryPtr@@3PAVMemoryMgr@@A
?alloc@MemoryMgr@@QAEPAXHIPBDI@Z
?free@MemoryMgr@@QAEHHPAX@Z
logger
?log@udLogger@@SAXHPBDZZ
jpeg
ord109
ord8
ord7
ord6
ord4
ord3
ord2
ord1
ord110
ord5
file
?getLength@File@@YAHPAU_MjzFileType_s@@@Z
?open@File@@YAPAU_MjzFileType_s@@PBD0@Z
?close@File@@YAHPAU_MjzFileType_s@@@Z
?read@File@@YAIPAXIIPAU_MjzFileType_s@@@Z
msvcrt
strncpy
strtok
tolower
_adjust_fdiv
malloc
_initterm
free
?terminate@@YAXXZ
_except_handler3
sprintf
kernel32
DisableThreadLibraryCalls
??0Image@@QAE@ABV0@@Z
??0Image@@QAE@XZ
??1Image@@UAE@XZ
??4Image@@QAEAAV0@ABV0@@Z
??_7Image@@6B@
?_allocateData@Image@@IAEPAEI@Z
?_allocateFlippedData@Image@@IAEPAEI@Z
?_allocateSecondaryData@Image@@IAEPAEI@Z
?_computePowerOf2@Image@@IAEHH@Z
?_decodeDualJPG@Image@@IAEHPAEI0I@Z
?_decodeJPG@Image@@IAEHPAEIPBD1@Z
?_decodeTGA@Image@@IAEHPBE@Z
?_flipImage@Image@@IAEHXZ
?_loadImage@Image@@IAEHPBD@Z
?_mipmapAverage24@Image@@IAEXEPAEGG@Z
?_mipmapAverage32@Image@@IAEXEPAEGG@Z
?allocateData@Image@@QAEHHHH@Z
?convertToD3DByteOrdering@Image@@QAEHXZ
?copyMipTo32Bit@Image@@QAEXIPAEI@Z
?copyTo16Bit@Image@@QAEXPAEIGGG@Z
?copyTo16BitAlpha@Image@@QAEXPAEIGGGG@Z
?copyTo24Bit@Image@@QAEXPAEI@Z
?copyTo32Bit@Image@@QAEXPAEI@Z
?duplicateMipLevel@Image@@QAEPAEE@Z
?flipImage@Image@@QAEHXZ
?forceARGB@Image@@2_NA
?freeDuplicateData@Image@@SAXPAE@Z
?generateMipmaps@Image@@QAEHXZ
?getAlphaMask@Image@@QAEPAEH@Z
?getAlphaMaskHeight@Image@@QBEHXZ
?getAlphaMaskWidth@Image@@QBEHXZ
?getData@Image@@QAEPAEXZ
?getFlippedData@Image@@QAEPAEXZ
?getHeight@Image@@QBEGXZ
?getMipData@Image@@QAEPAEI@Z
?getMipHeight@Image@@QBEGI@Z
?getMipLevels@Image@@QBEIXZ
?getMipWidth@Image@@QBEGI@Z
?getPitch@Image@@QBEIXZ
?getType@Image@@QBEEXZ
?getWidth@Image@@QBEGXZ
?loadImage@Image@@QAEHPBD@Z
?promoteToTexture@Image@@QAEHPAV1@PBD1@Z
?saveToJpeg@Image@@QAEHPBDI@Z
Name
.text
Size
12KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
4KB
Virtual Size
478B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=11, version=8047,
count=2, id=14, version=7299,
count=5, id=10, version=8047,
count=2, id=4, version=8047,
count=31, id=1, productName=Unmarked objects,
count=1, id=49, version=9044,
count=10, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
jpeg.dll
- IMPHASH c706b027ff6bf73e17127f8f7178144d
- SHA256 ded028a137b762436c4693a8a59632296cd37e2eca5500aefea585416ff969c0
- MD5 a5269bd4a772b7fbf9230491304d3033
- SHA1 dbb8acb189ba4d50c64581ca2aab67a32759a3c6
- SHA512 497b3065a1a406481b4c26643f71d24bf5a3292056f81f9cc5caae34e04bc0c3bd1faa13da8d00b3e728ea18770e1d65c0716d212c07ef87cbec391c1b2dd2cf
- SSDEEP 1536:1jxV8tZCff8E3+SEEuTxcMolDxVWdeyaHvmmPtivzxJbZIqqnV4:10tZC3LhEEUxcVeeZHvXdV4
- TLSH T176A37BC1BA8640F0D9852B70609BB7779F39174B148FDB93CB34EDA15923632FD252A8
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
NSIS installer
Minor OS version
0
Major OS version
4
Entry point
79585
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
msvcrt
_iob
_ftol
exit
fprintf
sprintf
malloc
free
strncpy
tmpfile
fseek
fwrite
fclose
sscanf
getenv
fopen
_initterm
_adjust_fdiv
fread
kernel32
DisableThreadLibraryCalls
CreateBuffer
SaveJPGFile
jpeg_CreateDecompress
jpeg_destroy_decompress
jpeg_finish_decompress
jpeg_read_header
jpeg_read_scanlines
jpeg_start_decompress
jpeg_std_error
jpeg_stdio_src
Name
.text
Size
76KB
Virtual Size
73KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=12, version=7291,
count=1, id=14, version=7299,
count=5, id=10, version=8047,
count=3, id=4, version=8047,
count=27, id=1, productName=Unmarked objects,
count=2, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=48, id=48, version=9044,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
logger.dll
- IMPHASH 64f28742006b6f5c2eef8825b5f1e2da
- SHA256 927efee976abc7b9c37b77f1de3510443b9c1c3ebd019285d3f8a5cdaa49222e
- MD5 da359b9d335e92861eeee620ad613476
- SHA1 b36d9ed3902d237278784cc0204d54f2dfef6c03
- SHA512 9d5a84179201766491daf74d8f9db7ee7b875937f438575e1d61b2d842f1290cccd2f8f9f19633fe4639ba34495d73357bea23291da3887d09d78341782139db
- SSDEEP 384:BK8RfRO7MZEx/FpxpO6K1qBKkAUc07xgUy+VEy2CMzUL69:fO78StMO9hMzf9
- TLSH T136234E022620B8A6D195253710FFAA7A731AAD004F4D5FC7F276B96A9D392C35D37703
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
NSIS installer
Minor OS version
0
Major OS version
4
Entry point
9825
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
user32
GetClassNameA
SendMessageA
GetDlgItem
LoadIconA
SetClassLongA
SendDlgItemMessageA
GetClientRect
PostThreadMessageA
GetWindowRect
EnumWindows
GetSystemMetrics
SetWindowPos
ShowWindow
DestroyWindow
CreateDialogParamA
GetWindowThreadProcessId
DispatchMessageA
GetMessageA
TranslateMessage
IsWindowVisible
MessageBoxA
msvcrt
_adjust_fdiv
malloc
_initterm
??3@YAXPAX@Z
sprintf
_vsnprintf
strncpy
_snprintf
_beginthreadex
fprintf
fopen
fclose
sscanf
fflush
??2@YAPAXI@Z
__dllonexit
_onexit
_except_handler3
?terminate@@YAXXZ
free
kernel32
FreeLibrary
LoadLibraryA
GetLocalTime
Sleep
EnterCriticalSection
LeaveCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetLastError
FormatMessageA
LocalFree
WaitForSingleObject
CloseHandle
DeleteCriticalSection
InitializeCriticalSection
??0udLogger@@QAE@XZ
??1udLogger@@QAE@XZ
??4udLogger@@QAEAAV0@ABV0@@Z
?LogLastError@@YAXXZ
?ReportLastError@@YAXXZ
?_flushMessageStream@udLogger@@IAEXXZ
?_processBuffer@udLogger@@IAEXHPAD@Z
?getInstance@udLogger@@SAPAUHINSTANCE__@@XZ
?isActive@udLogger@@SA_NXZ
?isVisible@udLogger@@SA_NXZ
?log@udLogger@@SAXHPBDZZ
?registerClient@udLogger@@SAHPBD@Z
?showWindow@udLogger@@SAX_N@Z
?start@udLogger@@SAXPBD@Z
?terminate@udLogger@@SAXXZ
Name
.text
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
258KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
24KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=11, version=8047,
count=2, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=58, id=1, productName=Unmarked objects,
count=5, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=2, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
luxor.ini
- SHA256 9e38c02b5c84bb08f35f383f5fff539df7b708bdbe4f1f0c621bb8a8ff1fbe9f
- MD5 50561737de7b5d57e86e81eb17ee667b
- SHA1 472badce6cf9c561a83e3926b64fd4d61b1f50dd
- SHA512 e59c44f68a3a134e0cbde1b55284b642d3e94a70a57b4e75c314097926bb24e72c569f91675f377cab12ce8858893d2c0780f2aaea05ed5fb3db675ba012c0e7
- TLSH T164F0D3DCE54A8D9C083FCC585FBC7CAD560141A848525BCC72C06C852E9731B27D85BC
- MD5 SHA1 SHA512 TLSH
-
NSIS installer
luxorAR.ini
- SHA256 9e38c02b5c84bb08f35f383f5fff539df7b708bdbe4f1f0c621bb8a8ff1fbe9f
- MD5 50561737de7b5d57e86e81eb17ee667b
- SHA1 472badce6cf9c561a83e3926b64fd4d61b1f50dd
- SHA512 e59c44f68a3a134e0cbde1b55284b642d3e94a70a57b4e75c314097926bb24e72c569f91675f377cab12ce8858893d2c0780f2aaea05ed5fb3db675ba012c0e7
- TLSH T164F0D3DCE54A8D9C083FCC585FBC7CAD560141A848525BCC72C06C852E9731B27D85BC
- MD5 SHA1 SHA512 TLSH
-
NSIS installer
net.dll
- IMPHASH 8dec7bb63e82322b7f5ea6fc3795a13d
- SHA256 ddb66c16612adb75997728de8150871a83cf270757c620f39df3e4b17e56e856
- MD5 83c4a86decc9b14e4dbdbaad3fe5f7cb
- SHA1 6dbb2307019b93b8199011a76ae269e92d9bd335
- SHA512 07f5b75a1f3ccc3f5393c5fa06edf8e35bfd18c140208e19d82e2c8bef8e7ae5f93f71dd631001a20bf02be3b3dfe10632fc586a79c864a97b569b849e085347
- SSDEEP 768:PQV5ootkFko9P1hX15gTbgxMWzL8lhNS0c12iKwseCrCyUBhjEiAMoXECsRuJcvZ:PQnoMkZ315gTIEhT0+rCyGbgs8OiVk
- TLSH T1E373AF5075E681B2C1CC513728462B37AFBDAD200EE744B3CF69CE697E71991A63B107
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
NSIS installer
Minor OS version
0
Major OS version
4
Entry point
14916
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
ws2_32
WSAGetLastError
recv
send
getsockname
getservbyport
getservbyname
gethostbyaddr
gethostbyname
inet_ntoa
inet_addr
ioctlsocket
select
setsockopt
closesocket
connect
accept
listen
bind
socket
WSACleanup
WSAStartup
htonl
htons
kernel32
GetCurrentProcess
LCMapStringW
LCMapStringA
SetEndOfFile
GetStringTypeW
GetStringTypeA
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
RtlUnwind
GetCommandLineA
GetVersion
HeapFree
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
EnterCriticalSection
LeaveCriticalSection
CloseHandle
ReadFile
HeapAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
SetFilePointer
InitializeCriticalSection
ExitProcess
TerminateProcess
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
HeapReAlloc
IsBadWritePtr
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
SetStdHandle
FlushFileBuffers
CreateFileA
SetUnhandledExceptionFilter
IsBadReadPtr
??0Network@@QAE@ABV0@@Z
??0Network@@QAE@XZ
??0ProtocolHTTP@@QAE@XZ
??0ProtocolSMTP@@QAE@XZ
??0Tcp@@QAE@ABV0@@Z
??0Tcp@@QAE@I@Z
??1Network@@UAE@XZ
??1ProtocolHTTP@@UAE@XZ
??1ProtocolSMTP@@UAE@XZ
??1Tcp@@UAE@XZ
??4Network@@QAEAAV0@ABV0@@Z
??4Tcp@@QAEAAV0@ABV0@@Z
??_7Network@@6B@
??_7Tcp@@6B@
??_FTcp@@QAEXXZ
?Accept@Network@@IAEHPAIIPAUsockaddr@@PAH@Z
?Bind@Network@@IAEHIPBUsockaddr@@H@Z
?Close@Network@@IAEHI@Z
?Connect@Network@@IAEHIPBUsockaddr@@H@Z
?Error@Network@@IAAXPBDZZ
?GetError@Network@@IAEHXZ
?GetHostByAddr@Network@@IAEHPAPAUhostent@@PBDIH@Z
?GetHostByName@Network@@IAEHPAPAUhostent@@PBD@Z
?GetServByName@Network@@IAEHPAPAUservent@@PBD1@Z
?GetServByPort@Network@@IAEHPAPAUservent@@FPBD@Z
?GetSockName@Network@@IAEHIPAUsockaddr@@PAH@Z
?Inet_Addr@Network@@IAEHPAHPBD@Z
?Inet_Ntoa@Network@@IAEPBDUin_addr@@@Z
?Init@Network@@KAHXZ
?Listen@Network@@IAEHIH@Z
?Recv@Network@@IAEHPAHIPAXIH@Z
?ReportError@Network@@IAEXXZ
?ResetError@Network@@IAEXXZ
?Select@Network@@IAEHPAHHPAUfd_set@@11PBUtimeval@@@Z
?Send@Network@@IAEHPAHIPBDIH@Z
?SetErrorCallback@Network@@QAEXP6A_NPBD@Z@Z
?SetNonBlocking@Network@@IAEHI@Z
?SetSockOpt@Network@@IAEHPAHIHHPBXH@Z
?Shutdown@Network@@KAHXZ
?Socket@Network@@IAEHPAIHHH@Z
?__singleRead@Tcp@@AAEIPAD@Z
?__singleReadSocket@Tcp@@AAEIIPAD@Z
?_cliConnect@Tcp@@IAEHPAUin_addr@@F@Z
?_closeSocket@Tcp@@IAEXXZ
?_readline@Tcp@@IAEIPAXI@Z
?_readlineSocket@Tcp@@IAEIIPAXI@Z
?_write@Tcp@@IAAIPBDZZ
?_writeSocket@Tcp@@IAAIIPBDZZ
?beginData@ProtocolSMTP@@QAEHXZ
?cliConnect@Tcp@@QAEHPBDG@Z
?cliConnectToService@Tcp@@QAEHPBD0@Z
?endData@ProtocolSMTP@@QAEHXZ
?getPage@ProtocolHTTP@@QAEHPBDPAD@Z
?getPageLength@ProtocolHTTP@@QAEIPBD@Z
?protocolConnect@ProtocolHTTP@@QAEHPBD@Z
?protocolConnect@ProtocolSMTP@@QAEHPBD@Z
?protocolDisconnect@ProtocolHTTP@@QAEHXZ
?protocolDisconnect@ProtocolSMTP@@QAEHXZ
?reset@ProtocolHTTP@@QAEHXZ
?reset@ProtocolSMTP@@QAEHXZ
?sendFile@ProtocolSMTP@@QAEHPBD@Z
?sendMessage@ProtocolSMTP@@QAAHPBDZZ
?setRecipient@ProtocolSMTP@@QAEHPBD@Z
?setSender@ProtocolSMTP@@QAEHPBD@Z
?svrAcceptClient@Tcp@@QAEHPAIPAUsockaddr_in@@@Z
?svrListen@Tcp@@QAEHGH@Z
Name
.text
Size
40KB
Virtual Size
39KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
16KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=9, id=11, version=8047,
count=22, id=14, version=7299,
count=97, id=10, version=8047,
count=99, id=1, productName=Unmarked objects,
count=5, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=4, id=49, version=9044,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
snd3d.dll
- IMPHASH 843c65c377b830677de74391a8f640f8
- SHA256 e90bc2baa38235ec0f5174d2dd5dd05445578e4ffcb9e5c5e5669e4d5ac3bd56
- MD5 3208ab46a1cc2ff6c16deae0791f3c62
- SHA1 5a568e0d0debf6c45304124c8a08b79059978c37
- SHA512 db6c2f9141cf746953c962b9212d1f4cc0e212b2d5965944038f980a5e0cc1bb6877b0ab0d9a0c7887689cf0b7aae42fec9561e01b13c95560fe07a6e0e218ae
- SSDEEP 768:ZFy/l2vMkgP3DRHD38IakFEJDPe/F1YDkq:ZellkM3DRjMIakFEJDPe/F1YDk
- TLSH T1F3232A26116310FCD381E37999BD323B7AB5C98919C273C34F37EA723975171AE1622A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
NSIS installer
Minor OS version
0
Major OS version
4
Entry point
26483
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
core
?ParseInteger@Parser@@QAE_NPAH@Z
?g_MemoryPtr@@3PAVMemoryMgr@@A
?alloc@MemoryMgr@@QAEPAXHIPBDI@Z
?mt_rand@@YAIXZ
?GetToken@Parser@@QAEPADPAD@Z
?GetBoolean@Parser@@QAE_NXZ
?GetFloat2@Parser@@QAE_NPAM0@Z
?ParseLine@Parser@@QAE_NXZ
?GetEqualsToken@Parser@@QAE_NXZ
??1Parser@@UAE@XZ
??0Parser@@QAE@PAD@Z
?free@MemoryMgr@@QAEHHPAX@Z
?GetString@Parser@@QAEPADXZ
?GetInt2@Parser@@QAE_NPAH0@Z
?GetFloat@Parser@@QAE_NPAM@Z
?GetInt@Parser@@QAE_NPAH@Z
logger
?log@udLogger@@SAXHPBDZZ
file
?open@File@@YAPAU_MjzFileType_s@@PBD0@Z
?close@File@@YAHPAU_MjzFileType_s@@@Z
?read@File@@YAIPAXIIPAU_MjzFileType_s@@@Z
?getLength@File@@YAHPAU_MjzFileType_s@@@Z
msvcrt
_purecall
_adjust_fdiv
malloc
_initterm
free
?terminate@@YAXXZ
_except_handler3
strtok
sprintf
atof
tolower
__CxxFrameHandler
strncpy
_stricmp
kernel32
GetPrivateProfileStringA
DisableThreadLibraryCalls
WritePrivateProfileStringA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
??0snd3dDriver@@QAE@ABV0@@Z
??0snd3dDriver@@QAE@XZ
??0snd3dHandle@@QAE@ABV0@@Z
??0snd3dHandle@@QAE@W4e_snd3dSoundTypes@@PAVsnd3dSound@@@Z
??0snd3dHandleManager@@QAE@ABV0@@Z
??0snd3dHandleManager@@QAE@PAVsnd3dDriver@@PAVsnd3dSampleFactory@@@Z
??0snd3dSample@@QAE@ABV0@@Z
??0snd3dSample@@QAE@XZ
??0snd3dScriptObject@@QAE@ABV0@@Z
??0snd3dScriptObject@@QAE@H@Z
??0snd3dSound@@QAE@ABV0@@Z
??0snd3dSound@@QAE@XZ
??0snd3dSoundMusic@@QAE@ABV0@@Z
??0snd3dSoundMusic@@QAE@XZ
??0snd3dSoundSample@@QAE@ABV0@@Z
??0snd3dSoundSample@@QAE@XZ
??0snd3dSoundStream@@QAE@ABV0@@Z
??0snd3dSoundStream@@QAE@XZ
??0snd3dSubSong@@QAE@ABV0@@Z
??0snd3dSubSong@@QAE@XZ
??0snd3dSubsystem@@QAE@ABV0@@Z
??0snd3dSubsystem@@QAE@PAVsnd3dDriver@@@Z
??1snd3dDriver@@UAE@XZ
??1snd3dHandle@@UAE@XZ
??1snd3dHandleManager@@UAE@XZ
??1snd3dSample@@UAE@XZ
??1snd3dSound@@UAE@XZ
??1snd3dSoundMusic@@UAE@XZ
??1snd3dSoundSample@@UAE@XZ
??1snd3dSoundStream@@UAE@XZ
??1snd3dSubSong@@UAE@XZ
??1snd3dSubsystem@@UAE@XZ
??4snd3dDriver@@QAEAAV0@ABV0@@Z
??4snd3dHandle@@QAEAAV0@ABV0@@Z
??4snd3dHandleManager@@QAEAAV0@ABV0@@Z
??4snd3dSample@@QAEAAV0@ABV0@@Z
??4snd3dScriptObject@@QAEAAV0@ABV0@@Z
??4snd3dSound@@QAEAAV0@ABV0@@Z
??4snd3dSoundMusic@@QAEAAV0@ABV0@@Z
??4snd3dSoundSample@@QAEAAV0@ABV0@@Z
??4snd3dSoundStream@@QAEAAV0@ABV0@@Z
??4snd3dSubSong@@QAEAAV0@ABV0@@Z
??4snd3dSubsystem@@QAEAAV0@ABV0@@Z
??_7snd3dDriver@@6B@
??_7snd3dHandle@@6B@
??_7snd3dHandleManager@@6B@
??_7snd3dSample@@6B@
??_7snd3dScriptObject@@6B@
??_7snd3dSound@@6B@
??_7snd3dSoundMusic@@6B@
??_7snd3dSoundSample@@6B@
??_7snd3dSoundStream@@6B@
??_7snd3dSubSong@@6B@
??_7snd3dSubsystem@@6B@
??_C@_0BC@IBLE@snd3dsoundmusic?4h?$AA@
??_C@_0BC@OOFB@snd3dSoundMusic?4h?$AA@
??_C@_0BD@IAOJ@snd3dSoundStream?4h?$AA@
??_C@_0BD@KIIG@snd3dsoundstream?4h?$AA@
??_C@_0BD@MKMJ@snd3dSoundSample?4h?$AA@
??_C@_0BD@OCKG@snd3dsoundsample?4h?$AA@
?_addToList@snd3dSoundMusic@@IAEHPAVsnd3dSubSong@@@Z
?_clear@snd3dSoundMusic@@IAEXXZ
?_garbageCollect@snd3dSubsystem@@IAEX_N@Z
?_parse@snd3dSubsystem@@IAEHPAVParser@@PAVsnd3dScriptContext@@@Z
?_releaseAllHandles@snd3dHandleManager@@IAEXXZ
?allocHandle@snd3dSoundMusic@@UAEPAVsnd3dHandle@@W4e_snd3dSoundTypes@@PAVsnd3dDriver@@PAVsnd3dSampleFactory@@@Z
?allocHandle@snd3dSoundSample@@UAEPAVsnd3dHandle@@W4e_snd3dSoundTypes@@PAVsnd3dDriver@@PAVsnd3dSampleFactory@@@Z
?allocHandle@snd3dSoundStream@@UAEPAVsnd3dHandle@@W4e_snd3dSoundTypes@@PAVsnd3dDriver@@PAVsnd3dSampleFactory@@@Z
?allocSound@snd3dSound@@SAPAV1@PBD00@Z
?allocSubSong@snd3dSubSong@@SAPAV1@PBD@Z
?create@snd3dHandleManager@@QAEPAVsnd3dHandle@@W4e_snd3dSoundTypes@@PAVsnd3dSound@@@Z
?createSamples@snd3dSound@@UAEXPAVsnd3dSampleFactory@@@Z
?createSamples@snd3dSoundSample@@UAEXPAVsnd3dSampleFactory@@@Z
?finalizeObject@snd3dScriptObject@@UAEXPAV1@@Z
?finalizeObject@snd3dSubsystem@@MAEXPAVsnd3dScriptObject@@@Z
?g_snd3d@@3PAVsnd3dSubsystem@@A
?getMasterVolume@snd3dSubsystem@@QAEMW4e_snd3dSoundTypes@@@Z
?getScriptType@snd3dScriptObject@@QBEHXZ
?getState@snd3dHandle@@QBEHXZ
?getSubSong@snd3dSoundMusic@@QAEPAVsnd3dSubSong@@PBD@Z
?getType@snd3dHandle@@QBEHXZ
?getTypeId@snd3dSound@@SAHPBD@Z
?initialize@snd3dSubsystem@@QAEHPAVPreferences@@PAUHWND__@@_N@Z
?loadSoundLibrary@snd3dSubsystem@@QAEHPBD@Z
?parseCommand@snd3dSound@@UAEPAVsnd3dScriptObject@@PAVParser@@PBD@Z
?parseCommand@snd3dSoundMusic@@UAEPAVsnd3dScriptObject@@PAVParser@@PBD@Z
?parseCommand@snd3dSoundSample@@UAEPAVsnd3dScriptObject@@PAVParser@@PBD@Z
?parseCommand@snd3dSubSong@@UAEPAVsnd3dScriptObject@@PAVParser@@PBD@Z
?parseCommand@snd3dSubsystem@@MAEPAVsnd3dScriptObject@@PAVParser@@PBD@Z
?playSound@snd3dSubsystem@@QAEPAVsnd3dHandle@@PBD_N@Z
?playSound@snd3dSubsystem@@QAEPAVsnd3dHandle@@W4e_snd3dSoundTypes@@PBD_N2@Z
?releaseSamples@snd3dSound@@UAEXPAVsnd3dSampleFactory@@@Z
?releaseSamples@snd3dSoundSample@@UAEXPAVsnd3dSampleFactory@@@Z
?resetFrequency@snd3dHandle@@QAEXXZ
?resetFrequency@snd3dHandleManager@@QAEXW4e_snd3dSoundTypes@@@Z
?resetVolume@snd3dHandle@@QAEXXZ
?resetVolume@snd3dHandleManager@@QAEXW4e_snd3dSoundTypes@@@Z
?s_allocator@snd3dSoundMusic@@SAPAVsnd3dSound@@XZ
?s_allocator@snd3dSoundSample@@SAPAVsnd3dSound@@XZ
?s_allocator@snd3dSoundStream@@SAPAVsnd3dSound@@XZ
?set3d@snd3dHandle@@QAEXQAM0@Z
?setAttenuation@snd3dHandle@@QAEXMM@Z
?setCoopLevel@snd3dDriver@@UAEXPAUHWND__@@_N@Z
?setCoopLevel@snd3dSubsystem@@QAEXPAUHWND__@@_N@Z
?setEventCb@snd3dHandle@@QAEXHP6A_NHPAXPAV1@0H@Z0@Z
?setFrequencyScale@snd3dHandle@@QAEXM@Z
?setLoop@snd3dHandle@@QAEX_N@Z
?setMasterFrequency@snd3dSubsystem@@QAEXW4e_snd3dSoundTypes@@M@Z
?setMasterVolume@snd3dSubsystem@@QAEXW4e_snd3dSoundTypes@@M@Z
?setMute@snd3dHandle@@QAEX_N@Z
?setMute@snd3dHandleManager@@QAEXW4e_snd3dSoundTypes@@_N@Z
?setMute@snd3dSubsystem@@QAEXW4e_snd3dSoundTypes@@_N@Z
?setPan@snd3dHandle@@QAEXM@Z
?setPause@snd3dHandle@@QAEX_N@Z
?setPause@snd3dHandleManager@@QAEXW4e_snd3dSoundTypes@@_N@Z
?setPause@snd3dSubsystem@@QAEXW4e_snd3dSoundTypes@@_N@Z
?setPriority@snd3dHandle@@QAEXH@Z
?setSubSong@snd3dHandle@@UAEXPBD_N@Z
?setVolume@snd3dHandle@@QAEXM@Z
?shutdown@snd3dSubsystem@@QAEHXZ
?startPlaylist@snd3dSubsystem@@QAEXPBD0_N@Z
?stop@snd3dHandle@@QAEXXZ
?stopPlaylist@snd3dSubsystem@@QAEX_N@Z
?suspend@snd3dSubsystem@@QAEX_N@Z
?update@snd3dHandleManager@@QAEXXZ
?update@snd3dSubsystem@@QAEXM@Z
Name
.text
Size
24KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
12KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=12, version=7291,
count=1, id=14, version=7299,
count=2, id=11, version=8047,
count=5, id=10, version=8047,
count=2, id=4, version=8047,
count=44, id=1, productName=Unmarked objects,
count=16, id=49, version=9044,
count=8, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
snd3d_fmod.dll
- IMPHASH 36dc2021365786f120708a6da019f900
- SHA256 1ec55f349ec7b8dfca364ddf689f158d7d1e55e540d91d8bb2029b1a3eb6bbef
- MD5 18068f2278294c8b578485a7b22e4aa2
- SHA1 9593d10364c52ea6ee6f9a38a1d8bbbfa34df6fd
- SHA512 785e93a72baa01a584eae21f9b4dadcda1782b3463753e0d617129315f81bf4ccb47c3476294addefffdc567f3f44dcb970381fa8b097fffcee5827e84fdb491
- SSDEEP 384:0nAcE6dhZMjAxAii+2JiyLPVJDndck/nPzMLyZE:0Ad6Z6AxAi2PPVRdjP
- TLSH T10BE23B25387700F4CB78843024ABBA37DE35EC6607F4B5D387A5D99A6D1C293B962E43
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
NSIS installer
Minor OS version
0
Major OS version
4
Entry point
13447
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
core
?g_MemoryPtr@@3PAVMemoryMgr@@A
?alloc@MemoryMgr@@QAEPAXHIPBDI@Z
?free@MemoryMgr@@QAEHHPAX@Z
logger
?log@udLogger@@SAXHPBDZZ
fmod
_FSOUND_SetPriority@8
_FSOUND_3D_SetMinMaxDistance@12
_FSOUND_3D_SetAttributes@12
_FSOUND_SetLoopMode@8
_FSOUND_SetPaused@8
_FSOUND_GetPaused@4
_FSOUND_SetMute@8
_FSOUND_StopSound@4
_FMUSIC_IsPlaying@4
_FMUSIC_SetOrderCallback@12
_FMUSIC_SetUserData@8
_FMUSIC_PlaySong@4
_FMUSIC_GetOpenState@4
_FMUSIC_LoadSongEx@24
_FMUSIC_FreeSong@4
_FMUSIC_StopSong@4
_FMUSIC_SetLooping@8
_FMUSIC_SetPanSeperation@8
_FMUSIC_SetMasterVolume@8
_FMUSIC_GetType@4
_FMUSIC_GetMasterVolume@4
_FMUSIC_SetPaused@8
_FSOUND_SetPan@8
_FMUSIC_GetNumOrders@4
_FMUSIC_GetOrder@4
_FMUSIC_GetUserData@4
_FMUSIC_SetOrder@8
_FMUSIC_GetRealChannel@8
_FMUSIC_GetNumChannels@4
_FSOUND_GetVersion@0
_FSOUND_Stream_SetSyncCallback@12
_FSOUND_Stream_SetEndCallback@12
_FSOUND_Stream_PlayEx@16
_FSOUND_Stream_GetOpenState@4
_FSOUND_Stream_Open@16
_FSOUND_Stream_Close@4
_FSOUND_Stream_SetMode@8
_FSOUND_Sample_Load@20
_FSOUND_Sample_Free@4
_FSOUND_PlaySoundEx@16
_FSOUND_Sample_SetMaxPlaybacks@8
_FSOUND_Sample_SetMinMaxDistance@12
_FSOUND_Sample_SetDefaultsEx@32
_FSOUND_Sample_GetDefaults@20
_FSOUND_Sample_GetLength@4
_FSOUND_SetFrequency@8
_FSOUND_SetVolume@8
_FSOUND_GetFrequency@4
_FSOUND_GetVolume@4
_FSOUND_Update@0
_FSOUND_GetMemoryStats@8
_FMUSIC_SetMasterSpeed@8
_FSOUND_Close@0
_FSOUND_GetOutputHandle@0
_FSOUND_GetError@0
_FSOUND_Init@12
_FSOUND_File_SetCallbacks@20
_FSOUND_SetMinHardwareChannels@4
_FSOUND_SetMemorySystem@20
_FSOUND_SetMixer@4
_FSOUND_GetDriverName@4
_FSOUND_GetDriver@0
_FSOUND_SetDriver@4
_FSOUND_SetOutput@4
_FSOUND_IsPlaying@4
file
?close@File@@YAHPAU_MjzFileType_s@@@Z
?unregisterThread@File@@YAXXZ
?seek@File@@YAHPAU_MjzFileType_s@@HH@Z
?readBytes@File@@YAIPAXIPAU_MjzFileType_s@@@Z
?registerThread@File@@YAXXZ
?open@File@@YAPAU_MjzFileType_s@@PBD0@Z
?tell@File@@YAHPAU_MjzFileType_s@@@Z
snd3d
??1snd3dSample@@UAE@XZ
?setMute@snd3dHandle@@QAEX_N@Z
?setPause@snd3dHandle@@QAEX_N@Z
??1snd3dHandle@@UAE@XZ
??0snd3dHandle@@QAE@W4e_snd3dSoundTypes@@PAVsnd3dSound@@@Z
??0snd3dSample@@QAE@XZ
??0snd3dDriver@@QAE@XZ
??1snd3dSubsystem@@UAE@XZ
??0snd3dSubsystem@@QAE@PAVsnd3dDriver@@@Z
?parseCommand@snd3dSubsystem@@MAEPAVsnd3dScriptObject@@PAVParser@@PBD@Z
?finalizeObject@snd3dSubsystem@@MAEXPAVsnd3dScriptObject@@@Z
?setCoopLevel@snd3dDriver@@UAEXPAUHWND__@@_N@Z
?setSubSong@snd3dHandle@@UAEXPBD_N@Z
??1snd3dDriver@@UAE@XZ
?getSubSong@snd3dSoundMusic@@QAEPAVsnd3dSubSong@@PBD@Z
msvcrt
__CxxFrameHandler
realloc
free
_adjust_fdiv
_initterm
?terminate@@YAXXZ
_except_handler3
_ftol
malloc
kernel32
DisableThreadLibraryCalls
??0snd3dBase_fmod@@QAE@ABV0@@Z
??0snd3dBase_fmod@@QAE@XZ
??0snd3dDriver_fmod@@QAE@ABV0@@Z
??0snd3dDriver_fmod@@QAE@XZ
??1snd3dBase_fmod@@UAE@XZ
??1snd3dDriver_fmod@@UAE@XZ
??4snd3dBase_fmod@@QAEAAV0@ABV0@@Z
??4snd3dDriver_fmod@@QAEAAV0@ABV0@@Z
??_7snd3dBase_fmod@@6B@
??_7snd3dDriver_fmod@@6Bsnd3dBase_fmod@@@
??_7snd3dDriver_fmod@@6Bsnd3dDriver@@@
?FMOD_GetErrorString@snd3dBase_fmod@@SAPADH@Z
?allocHandleMusic@snd3dDriver_fmod@@UAEPAVsnd3dHandle@@W4e_snd3dSoundTypes@@PAVsnd3dSound@@@Z
?allocHandleSample@snd3dDriver_fmod@@UAEPAVsnd3dHandle@@W4e_snd3dSoundTypes@@PAVsnd3dSound@@PAVsnd3dSample@@@Z
?allocHandleStream@snd3dDriver_fmod@@UAEPAVsnd3dHandle@@W4e_snd3dSoundTypes@@PAVsnd3dSound@@@Z
?allocSample@snd3dDriver_fmod@@UAEPAVsnd3dSample@@XZ
?getMasterVolume@snd3dDriver_fmod@@UAEMH@Z
?initialize@snd3dDriver_fmod@@UAEHPAVsnd3dPreferences@@PAUHWND__@@_N@Z
?s_frequencyLimit@snd3dBase_fmod@@1PAHA
?s_getMasterVolume@snd3dBase_fmod@@SAMH@Z
?s_initialize@snd3dBase_fmod@@SAHPAUHWND__@@@Z
?s_initialized@snd3dBase_fmod@@1_NA
?s_masterFrequency@snd3dBase_fmod@@1PAMA
?s_masterMute@snd3dBase_fmod@@1PA_NA
?s_masterPause@snd3dBase_fmod@@1PA_NA
?s_masterVolume@snd3dBase_fmod@@1PAMA
?s_memoryStats@snd3dBase_fmod@@SAXXZ
?s_setMasterFrequency@snd3dBase_fmod@@SAXHM@Z
?s_setMasterMute@snd3dBase_fmod@@SAXH_N@Z
?s_setMasterPause@snd3dBase_fmod@@SAXH_N@Z
?s_setMasterVolume@snd3dBase_fmod@@SAXHM@Z
?s_shutdown@snd3dBase_fmod@@SAXXZ
?s_snd3dMemory@snd3dBase_fmod@@1PAXA
?s_snd3dMemorySize@snd3dBase_fmod@@1IA
?s_sndPrefs@snd3dBase_fmod@@1PAVsnd3dPreferences@@A
?s_speedLimit@snd3dBase_fmod@@1PAMA
?setMasterFrequency@snd3dDriver_fmod@@UAEXHM@Z
?setMasterMute@snd3dDriver_fmod@@UAEXH_N@Z
?setMasterPause@snd3dDriver_fmod@@UAEXH_N@Z
?setMasterVolume@snd3dDriver_fmod@@UAEXHM@Z
?shutdown@snd3dDriver_fmod@@UAEHXZ
?update@snd3dDriver_fmod@@UAEXM@Z
CreateSnd3dSubsystem
Name
.text
Size
12KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=11, version=8047,
count=1, id=14, version=7299,
count=5, id=10, version=8047,
count=2, id=4, version=8047,
count=103, id=1, productName=Unmarked objects,
count=8, id=49, version=9044,
count=12, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
ui2.dll
- IMPHASH 6b279a910cd5403516342087ea2dd612
- SHA256 7bc2f53c7f2cb0fead9ed0ab013c74fbfed930b6394968dc4bc758d24b695803
- MD5 3c39d7793a3deb4c6c5f5d18b4c20105
- SHA1 2a5859c45eff649c5142714f3ab6dd8258c815c2
- SHA512 5b608c435aa95301af771998f34f0f74fd89eb51679b8b6005ddbc81536cf65453227e3c07f3b2234b16e357f12ee9342db9f652cf0cf597e11a33144cca94e6
- SSDEEP 3072:Tu9dW1fERscEXAX7X1YDmVUeBX2FT1Csh8+kz1Elmh:FERfmALX1Y8UyGdx8+kz1El
- TLSH T121047C423DAD02BEC34D997C2C562BB7EA3FE6A493E25F835F7CDD8119251B40926312
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
NSIS installer
Minor OS version
0
Major OS version
4
Entry point
67418
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
core
?free@MemoryMgr@@QAEHHPAX@Z
?g_MemoryPtr@@3PAVMemoryMgr@@A
?alloc@MemoryMgr@@QAEPAXHIPBDI@Z
?ParamEqualsInt32@Parser@@QAE_NPBD0PAH@Z
?GetToken@Parser@@QAEPADPAD@Z
?ParamEqualsInt32_2@Parser@@QAE_NPBD0PAH1@Z
?ParamEqualsFloat32_2@Parser@@QAE_NPBD0PAM1@Z
?ParamEqualsUInt32@Parser@@QAE_NPBD0PAI@Z
?GetEqualsToken@Parser@@QAE_NXZ
?Sleep@Platform@@YAXI@Z
?ParamEqualsBoolean@Parser@@QAE_NPBD0PA_N@Z
?ParamEqualsFloat32@Parser@@QAE_NPBD0PAM@Z
?ShowCursor@Platform@@YAX_N@Z
?GetCursorPos@Platform@@YAXAAH0@Z
?translate@StringTable@@QAEPBEPBD@Z
?g_stringTblPtr@@3PAVStringTable@@A
?GetString@Parser@@QAEPADXZ
?ParseLine@Parser@@QAE_NXZ
??1Parser@@UAE@XZ
??0Parser@@QAE@PAD@Z
logger
?registerClient@udLogger@@SAHPBD@Z
?log@udLogger@@SAXHPBDZZ
snd3d
?setPan@snd3dHandle@@QAEXM@Z
?setFrequencyScale@snd3dHandle@@QAEXM@Z
?g_snd3d@@3PAVsnd3dSubsystem@@A
?playSound@snd3dSubsystem@@QAEPAVsnd3dHandle@@W4e_snd3dSoundTypes@@PBD_N2@Z
file
?unregisterThread@File@@YAXXZ
?registerThread@File@@YAXXZ
?close@File@@YAHPAU_MjzFileType_s@@@Z
?read@File@@YAIPAXIIPAU_MjzFileType_s@@@Z
?getLength@File@@YAHPAU_MjzFileType_s@@@Z
?open@File@@YAPAU_MjzFileType_s@@PBD0@Z
gfx2d
?g_gfx@@3PAVgfxSubsystem@@A
?getSpriteWidth@gfxSubsystem@@QBEHH@Z
?getSpriteHeight@gfxSubsystem@@QBEHH@Z
?blt@gfxSubsystem@@QAEXHHHHHHE@Z
?createSprite@gfxSubsystem@@QAEHPBD@Z
?unregisterThread@gfxSubsystem@@QAEXPBD@Z
?registerThread@gfxSubsystem@@QAEXPBD@Z
?addEvent@gfxSubsystem@@QAEXHHHHMPAX@Z
?createParticleSystemInstance@gfxSubsystem@@QAEHPBD0@Z
?releaseParticleSystemInstance@gfxSubsystem@@QAEXPBD@Z
?particleSystemInstanceIsDead@gfxSubsystem@@QAE_NH@Z
?getScreenWidth@gfxSubsystem@@QBEHXZ
?releaseParticleSystemInstance@gfxSubsystem@@QAEXH@Z
?getSpriteName@gfxSubsystem@@QAEPBDH@Z
?releaseSprite@gfxSubsystem@@QAEXPBD@Z
?setupAlphaTestSprite@gfxSubsystem@@QAEXH@Z
?getCharDimensions@gfxSubsystem@@QBE_NHHIPAH0@Z
?getFontHeight@gfxSubsystem@@QBEHH@Z
?getMaxDepthNode@gfxSubsystem@@QBEHXZ
?updateParticleSystem@gfxSubsystem@@QAEXHHHM@Z
?psemit@gfxSubsystem@@QAEXHHM@Z
?alphaTestSprite@gfxSubsystem@@QAE_NHHHHH@Z
?getFontDimensions@gfxSubsystem@@QBEXHPAH0@Z
?createFont@gfxSubsystem@@QAEHPBD@Z
?print@gfxSubsystem@@QAEXHHHHHHHEPBD@Z
?getSpriteFrameCount@gfxSubsystem@@QBEHHH@Z
?getTextRect@gfxSubsystem@@QAEXHHHHPBIPAH111@Z
?particleSystemInstanceStopEmitters@gfxSubsystem@@QAEXH@Z
?blt@gfxSubsystem@@QAEXHHHHHHHHHHE@Z
?blt@gfxSubsystem@@QAEXHHHHHHHHE@Z
?print@gfxSubsystem@@QAEXHHHHHHHEPBI@Z
kernel32
EnterCriticalSection
FlushFileBuffers
SetStdHandle
ReadFile
GetStringTypeW
GetStringTypeA
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
SetFilePointer
VirtualAlloc
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
SetUnhandledExceptionFilter
WriteFile
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
HeapSize
HeapReAlloc
LCMapStringW
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
ExitProcess
HeapAlloc
HeapFree
GetModuleHandleA
GetProcAddress
TlsGetValue
SetLastError
TlsFree
TlsAlloc
GetVersion
GetCommandLineA
InterlockedIncrement
InterlockedDecrement
ExitThread
InitializeCriticalSection
CloseHandle
WaitForSingleObject
DeleteCriticalSection
LeaveCriticalSection
RtlUnwind
GetLastError
CreateThread
GetCurrentThreadId
TlsSetValue
??0uiBackgroundLoader@@QAE@ABV0@@Z
??0uiBackgroundLoader@@QAE@XZ
??0uiButton@@QAE@ABV0@@Z
??0uiButton@@QAE@XZ
??0uiDialog@@QAE@ABV0@@Z
??0uiDialog@@QAE@XZ
??0uiDigitalBanner@@QAE@ABV0@@Z
??0uiDigitalBanner@@QAE@XZ
??0uiEntryWidget@@QAE@ABV0@@Z
??0uiEntryWidget@@QAE@XZ
??0uiFlowLayout@@QAE@ABV0@@Z
??0uiFlowLayout@@QAE@XZ
??0uiGameContainer@@QAE@ABV0@@Z
??0uiGameContainer@@QAE@XZ
??0uiNonVisualWidget@@QAE@ABV0@@Z
??0uiNonVisualWidget@@QAE@XZ
??0uiParticleSystem@@QAE@ABV0@@Z
??0uiParticleSystem@@QAE@XZ
??0uiProgressBar@@QAE@ABV0@@Z
??0uiProgressBar@@QAE@XZ
??0uiRadioButton@@QAE@ABV0@@Z
??0uiRadioButton@@QAE@XZ
??0uiRadioGroup@@QAE@ABV0@@Z
??0uiRadioGroup@@QAE@XZ
??0uiSliderButton@@QAE@ABV0@@Z
??0uiSliderButton@@QAE@XZ
??0uiSprite@@QAE@ABV0@@Z
??0uiSprite@@QAE@XZ
??0uiSubsystem@@QAE@ABV0@@Z
??0uiSubsystem@@QAE@XZ
??0uiTextWidget@@QAE@ABV0@@Z
??0uiTextWidget@@QAE@XZ
??0uiToggleButton@@QAE@ABV0@@Z
??0uiToggleButton@@QAE@XZ
??0uiVisualWidget@@QAE@ABV0@@Z
??0uiVisualWidget@@QAE@XZ
??0uiWidget@@QAE@ABV0@@Z
??0uiWidget@@QAE@XZ
??1uiBackgroundLoader@@UAE@XZ
??1uiButton@@UAE@XZ
??1uiDialog@@UAE@XZ
??1uiDigitalBanner@@UAE@XZ
??1uiEntryWidget@@UAE@XZ
??1uiFlowLayout@@UAE@XZ
??1uiGameContainer@@UAE@XZ
??1uiNonVisualWidget@@UAE@XZ
??1uiParticleSystem@@UAE@XZ
??1uiProgressBar@@UAE@XZ
??1uiRadioButton@@UAE@XZ
??1uiRadioGroup@@UAE@XZ
??1uiSliderButton@@UAE@XZ
??1uiSprite@@UAE@XZ
??1uiSubsystem@@UAE@XZ
??1uiTextWidget@@UAE@XZ
??1uiToggleButton@@UAE@XZ
??1uiVisualWidget@@UAE@XZ
??1uiWidget@@UAE@XZ
??4uiBackgroundLoader@@QAEAAV0@ABV0@@Z
??4uiButton@@QAEAAV0@ABV0@@Z
??4uiDialog@@QAEAAV0@ABV0@@Z
??4uiDigitalBanner@@QAEAAV0@ABV0@@Z
??4uiEntryWidget@@QAEAAV0@ABV0@@Z
??4uiFlowLayout@@QAEAAV0@ABV0@@Z
??4uiGameContainer@@QAEAAV0@ABV0@@Z
??4uiNonVisualWidget@@QAEAAV0@ABV0@@Z
??4uiParticleSystem@@QAEAAV0@ABV0@@Z
??4uiProgressBar@@QAEAAV0@ABV0@@Z
??4uiRadioButton@@QAEAAV0@ABV0@@Z
??4uiRadioGroup@@QAEAAV0@ABV0@@Z
??4uiSliderButton@@QAEAAV0@ABV0@@Z
??4uiSprite@@QAEAAV0@ABV0@@Z
??4uiSubsystem@@QAEAAV0@ABV0@@Z
??4uiTextWidget@@QAEAAV0@ABV0@@Z
??4uiToggleButton@@QAEAAV0@ABV0@@Z
??4uiVisualWidget@@QAEAAV0@ABV0@@Z
??4uiWidget@@QAEAAV0@ABV0@@Z
??_7uiBackgroundLoader@@6B@
??_7uiButton@@6B@
??_7uiDialog@@6B@
??_7uiDigitalBanner@@6B@
??_7uiEntryWidget@@6B@
??_7uiFlowLayout@@6B@
??_7uiGameContainer@@6B@
??_7uiNonVisualWidget@@6B@
??_7uiParticleSystem@@6B@
??_7uiProgressBar@@6B@
??_7uiRadioButton@@6B@
??_7uiRadioGroup@@6B@
??_7uiSliderButton@@6B@
??_7uiSprite@@6B@
??_7uiSubsystem@@6B@
??_7uiTextWidget@@6B@
??_7uiToggleButton@@6B@
??_7uiVisualWidget@@6B@
??_7uiWidget@@6B@
??_C@_08BGCP@uiSprite?$AA@
??_C@_08JGKA@uiDialog?$AA@
??_C@_08MCEB@uiButton?$AA@
??_C@_0BA@DDFD@uiGameContainer?$AA@
??_C@_0BA@DMBN@uiprogressbar?4h?$AA@
??_C@_0BA@HCM@uiradiobutton?4h?$AA@
??_C@_0BA@IIHE@uiDigitalBanner?$AA@
??_C@_0BA@NKKO@uientrywidget?4h?$AA@
??_C@_0BB@BKKD@uitogglebutton?4h?$AA@
??_C@_0BB@COLC@uisliderbutton?4h?$AA@
??_C@_0BB@LHHO@uivisualwidget?4h?$AA@
??_C@_0BB@ONMO@uiParticleSystem?$AA@
??_C@_0BC@EDOO@uigamecontainer?4h?$AA@
??_C@_0BC@FANP@uiNonVisualWidget?$AA@
??_C@_0BC@MKPN@uidigitalbanner?4h?$AA@
??_C@_0BD@NCED@uiparticlesystem?4h?$AA@
??_C@_0L@GKGA@uidialog?4h?$AA@
??_C@_0L@KFNI@uibutton?4h?$AA@
??_C@_0L@KFPK@uiwidget?4h?$AA@
??_C@_0L@NDBK@uisprite?4h?$AA@
??_C@_0N@HJJL@uiRadioGroup?$AA@
??_C@_0N@KBLJ@uiFlowLayout?$AA@
??_C@_0N@OGPA@uiTextWidget?$AA@
??_C@_0O@IJKK@uiEntryWidget?$AA@
??_C@_0O@JFAB@uiProgressBar?$AA@
??_C@_0O@PMLA@uiRadioButton?$AA@
??_C@_0P@BMHB@uitextwidget?4h?$AA@
??_C@_0P@BOOP@uiVisualWidget?$AA@
??_C@_0P@CKC@uiToggleButton?$AA@
??_C@_0P@LNCF@uiflowlayout?4h?$AA@
??_C@_0P@NAI@uiSliderButton?$AA@
??_C@_0P@PBHL@uiradiogroup?4h?$AA@
?_activate@uiFlowLayout@@MAEXXZ
?_activate@uiToggleButton@@MAEXXZ
?_activate@uiVisualWidget@@MAEXXZ
?_activate@uiWidget@@MAEXXZ
?_addDialogStackCmd@uiSubsystem@@IAEXHPAVuiDialog@@@Z
?_addGlobalInputFocusWidget@uiWidget@@IAEXPAU_WidgetNameList_s@@@Z
?_addMessage@uiDigitalBanner@@IAEPAUdbMessage_t@@I@Z
?_calcLeadingSpace@uiDigitalBanner@@IAEII@Z
?_deactivate@uiButton@@MAEXXZ
?_deactivate@uiToggleButton@@MAEXXZ
?_deactivate@uiVisualWidget@@MAEXXZ
?_deactivate@uiWidget@@MAEXXZ
?_extractMessage@uiDigitalBanner@@IAEXPADPAUdbMessage_t@@@Z
?_gainFocus@uiEntryWidget@@MAEXXZ
?_gainFocus@uiWidget@@MAEXXZ
?_getAction@uiDigitalBanner@@IAE?AW4pieceAction_t@@PBD@Z
?_getButtonAnim@uiButton@@MBEHXZ
?_getDepthValue@uiWidget@@IAEHPBD@Z
?_getValue@uiRadioGroup@@IBEHPBVuiWidget@@@Z
?_hideWidget@uiWidget@@MAEXXZ
?_initPiece@uiDigitalBanner@@IAEXPAUdbMessagePiece_t@@M@Z
?_initialize@uiWidget@@MAEXXZ
?_inputEvent@uiButton@@MAE_NW4e_uiEvent@@HHH_N1@Z
?_inputEvent@uiDialog@@MAE_NW4e_uiEvent@@HHH_N1@Z
?_inputEvent@uiEntryWidget@@MAE_NW4e_uiEvent@@HHH_N1@Z
?_inputEvent@uiNonVisualWidget@@MAE_NW4e_uiEvent@@HHH_N1@Z
?_inputEvent@uiParticleSystem@@MAE_NW4e_uiEvent@@HHH_N1@Z
?_inputEvent@uiRadioButton@@MAE_NW4e_uiEvent@@HHH_N1@Z
?_inputEvent@uiSliderButton@@MAE_NW4e_uiEvent@@HHH_N1@Z
?_inputEvent@uiSprite@@MAE_NW4e_uiEvent@@HHH_N1@Z
?_inputEvent@uiTextWidget@@MAE_NW4e_uiEvent@@HHH_N1@Z
?_inputEvent@uiToggleButton@@MAE_NW4e_uiEvent@@HHH_N1@Z
?_inputEvent@uiVisualWidget@@MAE_NW4e_uiEvent@@HHH_N1@Z
?_inputEvent@uiWidget@@MAE_NW4e_uiEvent@@HHH_N1@Z
?_layoutChild@uiFlowLayout@@MAE_NPAVuiWidget@@@Z
?_lerpToTargetAlpha@uiTextWidget@@MAEXXZ
?_lerpToTargetAlpha@uiVisualWidget@@IAEXI@Z
?_loadCachedScriptlet@uiWidget@@IAEPAEPBDPAI@Z
?_loseFocus@uiButton@@MAEXXZ
?_loseFocus@uiWidget@@MAEXXZ
?_parseBoolean@uiWidget@@MAE_NPAVParser@@@Z
?_parseChildHeader@uiWidget@@KAPAV1@PAVParser@@PAV1@@Z
?_parseError@uiWidget@@KAXPBD@Z
?_parseFlags@uiWidget@@MAEXPAVParser@@@Z
?_parseHotkey@uiButton@@MAEXPBD@Z
?_parseParams@uiButton@@MAEXPAVParser@@PAD@Z
?_parseParams@uiDialog@@MAEXPAVParser@@PAD@Z
?_parseParams@uiDigitalBanner@@MAEXPAVParser@@PAD@Z
?_parseParams@uiEntryWidget@@MAEXPAVParser@@PAD@Z
?_parseParams@uiFlowLayout@@MAEXPAVParser@@PAD@Z
?_parseParams@uiParticleSystem@@MAEXPAVParser@@PAD@Z
?_parseParams@uiProgressBar@@MAEXPAVParser@@PAD@Z
?_parseParams@uiRadioButton@@MAEXPAVParser@@PAD@Z
?_parseParams@uiRadioGroup@@MAEXPAVParser@@PAD@Z
?_parseParams@uiSliderButton@@MAEXPAVParser@@PAD@Z
?_parseParams@uiSprite@@MAEXPAVParser@@PAD@Z
?_parseParams@uiTextWidget@@MAEXPAVParser@@PAD@Z
?_parseParams@uiToggleButton@@MAEXPAVParser@@PAD@Z
?_parseParams@uiVisualWidget@@MAEXPAVParser@@PAD@Z
?_parseParams@uiWidget@@MAEXPAVParser@@PAD@Z
?_parseScriptlet@uiWidget@@IAEXPBD@Z
?_parseSingleFlag@uiButton@@MAEXPBD@Z
?_parseSingleFlag@uiParticleSystem@@MAEXPBD@Z
?_parseSingleFlag@uiWidget@@MAEXPBD@Z
?_parseUI@uiWidget@@KAPAV1@PAEHPAV1@@Z
?_playWithPan@uiWidget@@UAEPAVsnd3dHandle@@PBDIMH@Z
?_popDialog@uiSubsystem@@IAEXXZ
?_print@uiEntryWidget@@MAEXHPBI@Z
?_print@uiTextWidget@@MAEXHPBI@Z
?_progCb@uiWidget@@1P6AXPAV1@PAXW4e_uiProgressEvent@@@ZA
?_progClient@uiWidget@@1PAXA
?_progressReport@uiWidget@@KAXPAV1@W4e_uiProgressEvent@@@Z
?_pushDialog@uiSubsystem@@IAEXPAVuiDialog@@@Z
?_releaseParticleSystemInstance@uiWidget@@IAEXH@Z
?_releaseSprite@uiWidget@@IAEXH@Z
?_removeAllMessages@uiDigitalBanner@@IAEXXZ
?_removeDialogStackCmd@uiSubsystem@@IAEXXZ
?_removeMessage@uiDigitalBanner@@IAEXPAUdbMessage_t@@@Z
?_render@uiButton@@MAEXHH@Z
?_render@uiDigitalBanner@@MAEXHH@Z
?_render@uiEntryWidget@@MAEXHH@Z
?_render@uiNonVisualWidget@@MAEXHH@Z
?_render@uiParticleSystem@@MAEXHH@Z
?_render@uiProgressBar@@MAEXHH@Z
?_render@uiRadioButton@@MAEXHH@Z
?_render@uiSprite@@MAEXHH@Z
?_render@uiTextWidget@@MAEXHH@Z
?_render@uiToggleButton@@MAEXHH@Z
?_render@uiVisualWidget@@MAEXHH@Z
?_renderGfxStatistics@uiSubsystem@@IAEXXZ
?_resetHover@uiButton@@MAEX_N@Z
?_resetParticleSystems@uiDialog@@IAEXPAVuiWidget@@@Z
?_setValue@uiRadioGroup@@IAEXPBVuiWidget@@H@Z
?_showWidget@uiWidget@@MAEXXZ
?_start@uiBackgroundLoader@@KGIPAX@Z
?_strlen@uiDigitalBanner@@IAEHPBD@Z
?_trace@uiWidget@@MAEPAU_uiTrace_s@@HHHPBD@Z
?_update@uiButton@@MAEXHH@Z
?_update@uiDigitalBanner@@MAEXHH@Z
?_update@uiNonVisualWidget@@MAEXHH@Z
?_update@uiParticleSystem@@MAEXHH@Z
?_update@uiProgressBar@@MAEXHH@Z
?_update@uiSliderButton@@MAEXHH@Z
?_update@uiSprite@@MAEXHH@Z
?_update@uiTextWidget@@MAEXHH@Z
?_update@uiVisualWidget@@MAEXHH@Z
?_updateAlpha@uiDigitalBanner@@IAEMPAUdbPieceAction_t@@H@Z
?_updateDialogs@uiSubsystem@@IAEXXZ
?_updatePosition@uiDigitalBanner@@IAEMMMHH@Z
?activate@uiDialog@@QAEX_N@Z
?addChild@uiWidget@@QAEXPAV1@_N@Z
?addGlobalInputFocusWidget@uiWidget@@QAEXPBD@Z
?addTabEntry@uiDialog@@QAEXPAVuiWidget@@@Z
?allocWidget@uiWidget@@SAPAV1@PBD0@Z
?altKeyDown@uiSubsystem@@QBE_NXZ
?applyScriptlet@uiWidget@@UAEXPBD@Z
?assignCallbacks@uiWidget@@QAEXPAU_WidgetMap_s@@PAX@Z
?clearDialogStack@uiSubsystem@@QAEX_N@Z
?clearPendingDialogs@uiSubsystem@@QAEXXZ
?ctrlKeyDown@uiSubsystem@@QBE_NXZ
?defineDepth@uiWidget@@SAXPBDI@Z
?delta@uiProgressBar@@QAEXH@Z
?detachFromParent@uiWidget@@QAEXXZ
?disable@uiButton@@QAEXXZ
?disable@uiSprite@@QAEX_N0@Z
?enable@uiButton@@QAEXXZ
?enter@uiDialog@@UAEXXZ
?exit@uiDialog@@UAEXXZ
?forceTerminate@uiSubsystem@@QAEXXZ
?g_ui@@3PAVuiSubsystem@@A
?getBasisCoords@uiWidget@@QAEXPAH0@Z
?getButtonHeight@uiButton@@QBEHXZ
?getButtonWidth@uiButton@@QBEHXZ
?getChildWidget@uiWidget@@QAEPAV1@PBDH@Z
?getChildren@uiWidget@@QBEPBU_WidgetList_s@@XZ
?getDepth@uiWidget@@QBEIXZ
?getFlowType@uiFlowLayout@@QBE?AW4flowType_e@1@XZ
?getFrame@uiVisualWidget@@UAEHXZ
?getHeight@uiEntryWidget@@UBEHXZ
?getHeight@uiTextWidget@@MBEHXZ
?getHeight@uiWidget@@UBEHXZ
?getId@uiParticleSystem@@QBEHXZ
?getInputFocus@uiWidget@@UBE_NXZ
?getInputFocusWidget@uiSubsystem@@QAEPAVuiWidget@@XZ
?getLastState@uiDialog@@UBEHXZ
?getMousePositionX@uiSubsystem@@QBEHXZ
?getMousePositionY@uiSubsystem@@QBEHXZ
?getOverrideActive@uiWidget@@UBE_NXZ
?getOverrideInputFocus@uiWidget@@UBE_NXZ
?getOverrideVisible@uiWidget@@UBE_NXZ
?getParent@uiWidget@@QAEPAV1@XZ
?getPaused@uiGameContainer@@QBE_NXZ
?getRootWidget@uiWidget@@QAEPAV1@XZ
?getSpriteId@uiVisualWidget@@UAEHXZ
?getState@uiBackgroundLoader@@QBEHXZ
?getState@uiDialog@@UBEHXZ
?getText@uiTextWidget@@QAEPBIXZ
?getTextRect@uiTextWidget@@QBEXPAU_uiRect_s@@@Z
?getToggle@uiToggleButton@@UBE_NXZ
?getTopLevelWidget@uiSubsystem@@QAEPAVuiWidget@@XZ
?getType@uiButton@@UAEPBDXZ
?getType@uiDialog@@UAEPBDXZ
?getType@uiDigitalBanner@@UAEPBDXZ
?getType@uiEntryWidget@@UAEPBDXZ
?getType@uiFlowLayout@@UAEPBDXZ
?getType@uiGameContainer@@UAEPBDXZ
?getType@uiNonVisualWidget@@UAEPBDXZ
?getType@uiParticleSystem@@UAEPBDXZ
?getType@uiProgressBar@@UAEPBDXZ
?getType@uiRadioButton@@UAEPBDXZ
?getType@uiRadioGroup@@UAEPBDXZ
?getType@uiSliderButton@@UAEPBDXZ
?getType@uiSprite@@UAEPBDXZ
?getType@uiTextWidget@@UAEPBDXZ
?getType@uiToggleButton@@UAEPBDXZ
?getType@uiVisualWidget@@UAEPBDXZ
?getTypeId@uiWidget@@SAHPBD@Z
?getUserValue@uiDialog@@QBEHXZ
?getValue@uiRadioButton@@QBEHXZ
?getValue@uiRadioGroup@@QBEHXZ
?getValue@uiSliderButton@@QBEMXZ
?getVisible@uiWidget@@UBE_NXZ
?getWidget@uiBackgroundLoader@@QAEPAVuiWidget@@PAV2@@Z
?getWidget@uiWidget@@QAEPAV1@PBDH@Z
?getWidgetFlags@uiWidget@@QBEIXZ
?getWidth@uiEntryWidget@@UBEHXZ
?getWidth@uiTextWidget@@MBEHXZ
?getWidth@uiWidget@@UBEHXZ
?gfxStatistics@uiSubsystem@@QAEX_NPBD@Z
?hide@uiDialog@@UAEXXZ
?idle@uiDialog@@UAEXXZ
?initialize@uiSubsystem@@QAEHPAVPreferences@@@Z
?initialize@uiWidget@@UAEXXZ
?inputEvent@uiSubsystem@@QAEXW4e_uiEvent@@HHH@Z
?inputEvent@uiWidget@@UAE_NW4e_uiEvent@@HHH_N1@Z
?inputFocusCb@uiWidget@@QAEXP6A_NPAV1@PAX@Z1@Z
?isAccepted@uiEntryWidget@@UBE_NXZ
?isDialogPushed@uiSubsystem@@QAE_NPAVuiDialog@@@Z
?isEmpty@uiDigitalBanner@@QAE_NXZ
?isFull@uiProgressBar@@QBE_NXZ
?isHovering@uiButton@@QBE_NXZ
?isSelected@uiRadioButton@@QBE_NXZ
?isType@uiButton@@UAE_NPBD@Z
?isType@uiDialog@@UAE_NPBD@Z
?isType@uiDigitalBanner@@UAE_NPBD@Z
?isType@uiEntryWidget@@UAE_NPBD@Z
?isType@uiFlowLayout@@UAE_NPBD@Z
?isType@uiGameContainer@@UAE_NPBD@Z
?isType@uiNonVisualWidget@@UAE_NPBD@Z
?isType@uiParticleSystem@@UAE_NPBD@Z
?isType@uiProgressBar@@UAE_NPBD@Z
?isType@uiRadioButton@@UAE_NPBD@Z
?isType@uiRadioGroup@@UAE_NPBD@Z
?isType@uiSliderButton@@UAE_NPBD@Z
?isType@uiSprite@@UAE_NPBD@Z
?isType@uiTextWidget@@UAE_NPBD@Z
?isType@uiToggleButton@@UAE_NPBD@Z
?isType@uiVisualWidget@@UAE_NPBD@Z
?isType@uiWidget@@UAE_NPBD@Z
?loadPsys@uiParticleSystem@@QAEXPBD@Z
?loadUI@uiSubsystem@@QAEPAVuiWidget@@PBD@Z
?loadUI@uiWidget@@SAPAV1@PBDPAV1@@Z
?loadWidget@uiBackgroundLoader@@QAEXPBD@Z
?loop@uiSprite@@QAEX_N@Z
?overrideActive@uiWidget@@UAEX_N@Z
?overrideInputFocus@uiWidget@@UAEX_N@Z
?overrideVisible@uiWidget@@UAEX_N@Z
?parse@uiWidget@@QAEXPAVParser@@_N@Z
?parseObjHeader@uiWidget@@SAPAV1@PAVParser@@PAV1@@Z
?popDialog@uiSubsystem@@QAEXPAVuiDialog@@_N@Z
?popInputFocusWidget@uiSubsystem@@QAEXXZ
?print@uiDigitalBanner@@QAAXPBDZZ
?print@uiDigitalBanner@@UAAXIPBDZZ
?print@uiTextWidget@@QAAXHPBDZZ
?pushDialog@uiSubsystem@@QAEXPAVuiDialog@@_N@Z
?pushInputFocusWidget@uiSubsystem@@QAEXPAVuiWidget@@@Z
?registerProgCb@uiWidget@@SAXP6AXPAV1@PAXW4e_uiProgressEvent@@@Z1@Z
?releaseInstance@uiParticleSystem@@QAEXXZ
?releaseSprite@uiVisualWidget@@UAEXXZ
?render@uiSubsystem@@QAEHI@Z
?render@uiWidget@@UAEXHH@Z
?reportDialogStack@uiSubsystem@@QAEXXZ
?reset@uiDialog@@UAEXXZ
?reset@uiEntryWidget@@UAEXXZ
?reset@uiParticleSystem@@QAEXXZ
?reset@uiSprite@@QAEX_NHI@Z
?resetPsys@uiButton@@QAEXXZ
?resetTabFocus@uiDialog@@QAEXXZ
?s_allocator@uiButton@@SAPAVuiWidget@@XZ
?s_allocator@uiDialog@@SAPAVuiWidget@@XZ
?s_allocator@uiDigitalBanner@@SAPAVuiWidget@@XZ
?s_allocator@uiEntryWidget@@SAPAVuiWidget@@XZ
?s_allocator@uiFlowLayout@@SAPAVuiWidget@@XZ
?s_allocator@uiGameContainer@@SAPAVuiWidget@@XZ
?s_allocator@uiNonVisualWidget@@SAPAVuiWidget@@XZ
?s_allocator@uiParticleSystem@@SAPAVuiWidget@@XZ
?s_allocator@uiProgressBar@@SAPAVuiWidget@@XZ
?s_allocator@uiRadioButton@@SAPAVuiWidget@@XZ
?s_allocator@uiRadioGroup@@SAPAVuiWidget@@XZ
?s_allocator@uiSliderButton@@SAPAVuiWidget@@XZ
?s_allocator@uiSprite@@SAPAVuiWidget@@XZ
?s_allocator@uiTextWidget@@SAPAVuiWidget@@XZ
?s_allocator@uiToggleButton@@SAPAVuiWidget@@XZ
?s_allocator@uiVisualWidget@@SAPAVuiWidget@@XZ
?s_clickDefault@uiButton@@1PBDB
?s_dynamicLoading@uiWidget@@2_NA
?s_fDeltaTime@uiWidget@@2MA
?s_freeScripletCache@uiWidget@@SAXXZ
?s_getDepthName@uiWidget@@SAPBDI@Z
?s_getDepthValue@uiWidget@@SAHPBD@Z
?s_highlightDefault@uiButton@@1PBDB
?s_iDeltaTime@uiWidget@@2IA
?s_registerWidget@uiSubsystem@@SAXPBDP6APAVuiWidget@@XZ@Z
?s_scriptletCacheCount@uiWidget@@1IA
?s_scriptletCacheHead@uiWidget@@1PAU_ScriptletCache_s@@A
?s_scriptletCacheTail@uiWidget@@1PAU_ScriptletCache_s@@A
?s_terminate@uiWidget@@2_NA
?select@uiRadioButton@@QAEX_N@Z
?setActive@uiFlowLayout@@UAEX_N0@Z
?setActive@uiWidget@@UAEX_N0@Z
?setActive@uiWidget@@UBE_NXZ
?setActiveWidget@uiSubsystem@@QAEXPAVuiWidget@@@Z
?setAlpha@uiGameContainer@@UAEXEII_N@Z
?setAlpha@uiParticleSystem@@UAEXEII_N@Z
?setAlpha@uiTextWidget@@UAEXEII_N@Z
?setAlpha@uiVisualWidget@@UAEXEII_N@Z
?setAlpha@uiWidget@@UAEXEII_N@Z
?setAnim@uiSprite@@QAEXH_N0I@Z
?setAnim@uiVisualWidget@@UAEXH@Z
?setClickSound@uiButton@@QAEXPBD@Z
?setCursor@uiEntryWidget@@UAE_NPBD@Z
?setCustomCursor@uiSubsystem@@QAEXPAVuiWidget@@@Z
?setDefaultSounds@uiButton@@SAXPBD0@Z
?setDepth@uiWidget@@QAEXI@Z
?setDepth@uiWidget@@QAEXPBD@Z
?setFlowType@uiFlowLayout@@QAEXW4flowType_e@1@@Z
?setFont@uiDigitalBanner@@QAE_NPBD@Z
?setFont@uiTextWidget@@UAE_NPBD@Z
?setFrame@uiVisualWidget@@UAEXH@Z
?setHeight@uiWidget@@UAEXH@Z
?setHighlightSound@uiButton@@QAEXPBD@Z
?setInputFocus@uiWidget@@UAEX_N0@Z
?setInputFocusWidget@uiSubsystem@@QAEXPAVuiWidget@@@Z
?setJustify@uiTextWidget@@UAEXI@Z
?setParticleSystem@uiButton@@QAEXPBD@Z
?setPause@uiDigitalBanner@@QAEX_N@Z
?setPaused@uiGameContainer@@QAEX_N@Z
?setRange@uiProgressBar@@QAEXHH@Z
?setSprite2@uiToggleButton@@UAE_NPBD@Z
?setSprite@uiVisualWidget@@UAE_NPBDHH_N@Z
?setStep@uiProgressBar@@QAEXH@Z
?setTimeScale@uiDigitalBanner@@QAEXM@Z
?setToggle@uiToggleButton@@UAEX_N@Z
?setTopLevelWidget@uiSubsystem@@QAEXPAVuiWidget@@@Z
?setUserValue@uiDialog@@QAEXH@Z
?setValue@uiProgressBar@@UAEXH_N@Z
?setValue@uiRadioButton@@QAEXH@Z
?setValue@uiRadioGroup@@QAEXH@Z
?setValue@uiSliderButton@@QAEXM@Z
?setVisible@uiWidget@@UAEX_N0@Z
?setVisibleWidget@uiSubsystem@@QAEXPAVuiWidget@@@Z
?setWidgetFlags@uiWidget@@QAEXI@Z
?setWidgetStates@uiWidget@@QAEX_N000@Z
?setWidth@uiWidget@@UAEXH@Z
?shiftKeyDown@uiSubsystem@@QBE_NXZ
?shutdown@uiSubsystem@@QAEHXZ
?step@uiProgressBar@@QAEXXZ
?stop@uiParticleSystem@@QAEXXZ
?terminate@uiBackgroundLoader@@QAEXXZ
?testBounds@uiButton@@UAE_NHH@Z
?testBounds@uiEntryWidget@@UAE_NHH@Z
?testBounds@uiVisualWidget@@UAE_NHH@Z
?testBounds@uiWidget@@UAE_NHH@Z
?toggle@uiToggleButton@@UAEXXZ
?topDialog@uiSubsystem@@QAEPAVuiDialog@@XZ
?topDialogIsIdle@uiSubsystem@@QAE_NPAVuiDialog@@@Z
?trace@uiSubsystem@@QAEPAU_uiTrace_s@@HHHPBD@Z
?trace@uiWidget@@UAEPAU_uiTrace_s@@HHHPBD@Z
?update@uiGameContainer@@UAEXHH@Z
?update@uiSubsystem@@QAEHI@Z
?update@uiWidget@@UAEXHH@Z
?updateLock@uiSubsystem@@QAEX_N@Z
Name
.text
Size
100KB
Virtual Size
98KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
36KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
28KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
12KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=12, version=7291,
count=7, id=11, version=8047,
count=23, id=14, version=7299,
count=106, id=10, version=8047,
count=141, id=1, productName=Unmarked objects,
count=22, id=49, version=9044,
count=12, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Readme.htm
- SHA256 d4407c8a5c9c14ee110382b207721016b922b5020186c963fdba75ba48700701
- MD5 0e05cc062d20992fc24d0116a0247908
- SHA1 448c415a891ee9f23386753a38c090b4cc229965
- SHA512 5156429d9b0951c7cc41a2c50b564fc5f9827ef6e90518b86c9b1fc54c73062aae3a1d28abcc85220a3540ebcc8f4ef5f39547d4ef2a93101d3c40a9a14b22a2
- SSDEEP 1536:5xBOTEO18ZuPJ7J1JEVp9JoF3N6uKJJpECrfPSpnoA30VZTuifoEzDpHmDe/FtXH:gZUj5duq3
- TLSH T183047D00A7512402807B85CDF05B17CE588096A49397EF65F23B697FBECA9AD35932FC
- MD5 SHA1 SHA512 SSDEEP TLSH
-
NSIS installer
Setup.exe
- IMPHASH aac2cba515ea70fe0d1eecabb915a205
- SHA256 c97325d34d81d201049c0121253ba17ad86f9390f4ae8497193d52646012344d
- MD5 122b3bceb7bbb43816839151fb20a048
- SHA1 b8e2c426507fef79248559f10f2d06a94b7c667e
- SHA512 bdf3070b8e45aa2da21c650dd30d43e4eb30d71e23cb56990ceb7b361f65b0df308c442d67764d8f0d5c20ad2d83738a63cf4a06522e70c742063829775191c0
- SSDEEP 1536:LWC2yhIFoidzATbxplUwPD77DOsU+kw9xV//OQl5s:LqFRQ3lhPDrOCWQl5s
- TLSH T12CC339167AE5D8B6D8C20171C9668EB1876BFC23C9E09647F7847E0E3E309D1DD26287
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
-
NSIS installer
Minor OS version
0
Major OS version
4
Entry point
13183
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
CloseHandle
WaitForSingleObject
CreateProcessA
lstrlenA
LocalFree
FormatMessageA
GetPrivateProfileStringA
CreateThread
WriteFile
SizeofResource
CreateFileA
LockResource
LoadResource
FindResourceA
GetWindowsDirectoryA
Sleep
DeleteFileA
FindClose
FindNextFileA
FindFirstFileA
CreateDirectoryA
GetTempPathA
GetFileSize
CopyFileA
GetPrivateProfileIntA
FreeLibrary
GetDiskFreeSpaceA
GetProcAddress
LoadLibraryA
GetTempFileNameA
SetFileAttributesA
RemoveDirectoryA
GetModuleHandleA
GetVersion
GetCommandLineA
ExitProcess
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
GetSystemDirectoryA
lstrcatA
lstrcpyA
GetLastError
lstrcpynA
OpenFile
GetModuleFileNameA
lstrcmpA
GetStartupInfoA
GetUserDefaultLCID
user32
GetMessageA
UpdateWindow
ShowWindow
CreateWindowExA
RegisterClassA
LoadCursorA
LoadIconA
DefWindowProcA
PostQuitMessage
DialogBoxParamA
wsprintfA
LoadStringA
SetDlgItemTextA
SetWindowTextA
EnableWindow
GetDlgItem
SendMessageA
EndDialog
PostMessageA
SetWindowLongA
GetWindowLongA
InvalidateRect
ReleaseDC
GetDC
CallWindowProcA
EndPaint
BeginPaint
DrawTextA
FillRect
GetSysColor
GetClientRect
DispatchMessageA
MessageBoxA
GetWindowRect
GetSystemMetrics
SetWindowPos
FindWindowA
IsWindow
RegisterWindowMessageA
TranslateMessage
gdi32
DeleteObject
CreateSolidBrush
SaveDC
SetBkMode
SetTextColor
RestoreDC
comctl32
ord17
Name
.text
Size
32KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
68KB
Virtual Size
65KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=123, id=1, productName=Unmarked objects,
count=9, id=93, version=2179,
count=2, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=2, id=11, version=8047,
count=13, id=14, version=7299,
count=42, id=10, version=8047,
count=8, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
Setup.exe.manifest
- SHA256 d9bf0fbfe1219ec99e3cb9832aa275bed3d3c66104c3d9e90bf58750a83c7fda
- MD5 d75812b70082db3d3cbe78a12e9c568f
- SHA1 a09a382878b1578237bdc438dd7f9324459c1336
- SHA512 5078c2d4714daf438cb089617e8d9a3005563d45f451ce6e27ed91bb3040ba50eb29bd0303ed0fdd1e1fbeff87caefd4d97a1762ae4ce34e1534cda0c782074b
- TLSH T165F04602C485BD666A3609B23EA6F514D66C0323098C024A78DDA96B5F765EB8A8306E
- MD5 SHA1 SHA512 TLSH
-
NSIS installer
Setup.ini
- SHA256 388c496835b5b15a6b56427aab384d92e88763c028c2d02285264563405c59ac
- MD5 d6d221ed864189361ad0de038fe0a574
- SHA1 9c09ac56af620c6f0129840ebfaf566feb351adf
- SHA512 ac9d4a0c37b4cad6cbf36a18df716dae5fedc4073195d139744277edd8c278081440f8f7215c02c6b0e0a7228b1da58e90af6c5e658395eab30624f982adf877
- TLSH T11DE0F1878377047404C016616F72B0FE8B35C1A94A103513C4B59BDF0FD425C1C49AC1
- MD5 SHA1 SHA512 TLSH
-
NSIS installer
autorun.inf
- SHA256 4dd632cc502b78e15dfd2ddd1d89d2ed152902f8887bec5860a638740bd23a8e
- MD5 6c0bcaf8646af93fe5a6dd30882828b9
- SHA1 1b836ab4d84847a1272f08fdd61ef62e008af923
- SHA512 d20d38f510149890e66088efdb0217834b7dc93c03ddefb411f0786e990bd6ef9c010d9b1ebaf590aa0726721fe6d881905d749b519616f0b4697c66bfb98ac8
- TLSH T166900207C9578048534921B1052D1830C186B09C9D0145511AD51059091925C4F29811
- MD5 SHA1 SHA512 TLSH
-
NSIS installer