| filename | LonelyScreen.exe | |
|---|---|---|
| size | 23353856 (0x1645a00) | |
| md5 | a3ff7e328f41f4a6af82266bfe12036f | |
| type | PE32 executable (GUI) Intel 80386, for MS Windows | |
| mimetype | application/x-dosexec | |
| clamav | OK | |
| virustotal | → scan with virustotal.com | |
| histogram | ||
MZ Header
| signature | MZ |
| bytes_in_last_block | 0x90 |
| blocks_in_file | 3 |
| num_relocs | 0 |
| header_paragraphs | 4 |
| min_extra_paragraphs | 0 |
| max_extra_paragraphs | 0xffff |
| ss | 0 |
| sp | 0xb8 |
| checksum | 0 |
| ip | 0 |
| cs | 0 |
| reloc_table_offset | 0x40 |
| overlay_number | 0 |
| reserved0 | 0 |
| oem_id | 0 |
| oem_info | 0 |
| reserved2 | 0 |
| reserved3 | 0 |
| reserved4 | 0 |
| reserved5 | 0 |
| reserved6 | 0 |
| lfanew | 0x128 |
Rich Header
| lib id | version | times used |
|---|---|---|
| 110 | 50727 | 1 |
| 0 | 0 | 112 |
| 224 | 21005 | 855 |
| 225 | 21005 | 699 |
| 131 | 30729 | 9 |
| 147 | 30729 | 23 |
| 1 | 0 | 499 |
| 199 | 41118 | 17 |
| 225 | 20806 | 138 |
| 223 | 20806 | 95 |
| 224 | 20806 | 274 |
| 229 | 21005 | 77 |
| 220 | 21005 | 1 |
| 219 | 21005 | 1 |
| 222 | 21005 | 1 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Sections
Data Directory
| type | name | size | cp | |
|---|---|---|---|---|
| ICON | #1 | 270376 | 0 | |
| ICON | #2 | 1128 | 0 | |
| ICON | #3 | 9640 | 0 | |
| ICON | #4 | 4264 | 0 | |
| ICON | #5 | 67624 | 0 | |
| ICON | #6 | 16936 | 0 | |
| GROUP_ICON | IDI_ICON1 | 90 | 0 |
| module_name | hint | ord | function_name |
|---|---|---|---|
| KERNEL32.dll | 617 | GetStringTypeW | |
| KERNEL32.dll | 1159 | SetStdHandle | |
| KERNEL32.dll | 343 | FlushFileBuffers | |
| KERNEL32.dll | 1316 | WriteConsoleW | |
| KERNEL32.dll | 143 | CreateFileW | |
| KERNEL32.dll | 1107 | SetEndOfFile | |
| KERNEL32.dll | 306 | FindFirstFileA | |
| KERNEL32.dll | 623 | GetSystemDirectoryA | |
| KERNEL32.dll | 675 | GetVersionExA | |
| KERNEL32.dll | 155 | CreateMutexA | |
| KERNEL32.dll | 1213 | SystemTimeToFileTime | |
| KERNEL32.dll | 456 | GetDateFormatW | |
| KERNEL32.dll | 1252 | VerSetConditionMask | |
| KERNEL32.dll | 840 | LocalFree | |
| KERNEL32.dll | 350 | FormatMessageW | |
| KERNEL32.dll | 676 | GetVersionExW | |
| KERNEL32.dll | 1256 | VerifyVersionInfoW | |
| KERNEL32.dll | 391 | GetCommandLineW | |
| KERNEL32.dll | 1113 | SetEvent | |
| KERNEL32.dll | 1273 | WaitForSingleObject | |
| KERNEL32.dll | 1022 | ReleaseSemaphore | |
| KERNEL32.dll | 905 | OutputDebugStringA | |
| KERNEL32.dll | 439 | GetConsoleWindow | |
| KERNEL32.dll | 1212 | SwitchToThread | |
| KERNEL32.dll | 181 | CreateThread | |
| KERNEL32.dll | 1177 | SetThreadPriority | |
| KERNEL32.dll | 654 | GetThreadPriority | |
| KERNEL32.dll | 1217 | TerminateThread | |
| KERNEL32.dll | 1043 | ResumeThread | |
| KERNEL32.dll | 1271 | WaitForMultipleObjects | |
| KERNEL32.dll | 232 | DuplicateHandle | |
| KERNEL32.dll | 627 | GetSystemInfo | |
| KERNEL32.dll | 936 | QueryPerformanceFrequency | |
| KERNEL32.dll | 1274 | WaitForSingleObjectEx | |
| KERNEL32.dll | 631 | GetSystemTime | |
| KERNEL32.dll | 515 | GetLocalTime | |
| KERNEL32.dll | 1265 | VirtualQuery | |
| KERNEL32.dll | 855 | MapViewOfFile | |
| KERNEL32.dll | 1238 | UnmapViewOfFile | |
| KERNEL32.dll | 140 | CreateFileMappingW | |
| KERNEL32.dll | 889 | OpenFileMappingW | |
| KERNEL32.dll | 490 | GetFileAttributesW | |
| KERNEL32.dll | 831 | LoadLibraryW | |
| KERNEL32.dll | 624 | GetSystemDirectoryW | |
| KERNEL32.dll | 1257 | VirtualAlloc | |
| KERNEL32.dll | 1260 | VirtualFree | |
| KERNEL32.dll | 1018 | ReleaseMutex | |
| KERNEL32.dll | 158 | CreateMutexW | |
| KERNEL32.dll | 1039 | ResetEvent | |
| KERNEL32.dll | 442 | GetCurrencyFormatW | |
| KERNEL32.dll | 670 | GetUserDefaultUILanguage | |
| KERNEL32.dll | 521 | GetLogicalDrives | |
| KERNEL32.dll | 864 | MoveFileExW | |
| KERNEL32.dll | 527 | GetLongPathNameW | |
| KERNEL32.dll | 1112 | SetErrorMode | |
| KERNEL32.dll | 492 | GetFileInformationByHandle | |
| KERNEL32.dll | 221 | DeviceIoControl | |
| KERNEL32.dll | 302 | FindClose | |
| KERNEL32.dll | 1214 | SystemTimeToTzSpecificLocalTime | |
| KERNEL32.dll | 293 | FileTimeToSystemTime | |
| KERNEL32.dll | 645 | GetTempPathW | |
| KERNEL32.dll | 1101 | SetCurrentDirectoryW | |
| KERNEL32.dll | 447 | GetCurrentDirectoryW | |
| KERNEL32.dll | 129 | CreateDirectoryW | |
| KERNEL32.dll | 1027 | RemoveDirectoryW | |
| KERNEL32.dll | 507 | GetFullPathNameW | |
| KERNEL32.dll | 487 | GetFileAttributesExW | |
| KERNEL32.dll | 214 | DeleteFileW | |
| KERNEL32.dll | 313 | FindFirstFileW | |
| KERNEL32.dll | 117 | CopyFileW | |
| KERNEL32.dll | 867 | MoveFileW | |
| KERNEL32.dll | 308 | FindFirstFileExW | |
| KERNEL32.dll | 325 | FindNextFileW | |
| KERNEL32.dll | 664 | GetTimeZoneInformation | |
| KERNEL32.dll | 722 | HeapReAlloc | |
| KERNEL32.dll | 671 | GetUserGeoID | |
| KERNEL32.dll | 679 | GetVolumeInformationW | |
| KERNEL32.dll | 906 | OutputDebugStringW | |
| KERNEL32.dll | 1261 | VirtualFreeEx | |
| KERNEL32.dll | 896 | OpenProcess | |
| KERNEL32.dll | 963 | ReadProcessMemory | |
| KERNEL32.dll | 467 | GetDriveTypeW | |
| KERNEL32.dll | 1346 | lstrcmpW | |
| KERNEL32.dll | 1357 | lstrlenA | |
| KERNEL32.dll | 779 | IsValidLanguageGroup | |
| KERNEL32.dll | 285 | ExpandEnvironmentStringsW | |
| KERNEL32.dll | 668 | GetUserDefaultLangID | |
| KERNEL32.dll | 78 | CheckRemoteDebuggerPresent | |
| KERNEL32.dll | 691 | GlobalAlloc | |
| KERNEL32.dll | 702 | GlobalLock | |
| KERNEL32.dll | 709 | GlobalUnlock | |
| KERNEL32.dll | 706 | GlobalSize | |
| KERNEL32.dll | 751 | InterlockedIncrement | |
| KERNEL32.dll | 747 | InterlockedDecrement | |
| KERNEL32.dll | 98 | CompareStringEx | |
| KERNEL32.dll | 643 | GetTempFileNameW | |
| KERNEL32.dll | 1358 | lstrlenW | |
| KERNEL32.dll | 282 | ExitThread | |
| KERNEL32.dll | 1121 | SetFileAttributesW | |
| KERNEL32.dll | 1230 | TryEnterCriticalSection | |
| KERNEL32.dll | 188 | CreateTimerQueue | |
| KERNEL32.dll | 1045 | RtlCaptureStackBackTrace | |
| KERNEL32.dll | 1200 | SignalObjectAndWait | |
| KERNEL32.dll | 522 | GetLogicalProcessorInformation | |
| KERNEL32.dll | 189 | CreateTimerQueueTimer | |
| KERNEL32.dll | 72 | ChangeTimerQueueTimer | |
| KERNEL32.dll | 218 | DeleteTimerQueueTimer | |
| KERNEL32.dll | 553 | GetNumaHighestNodeNumber | |
| KERNEL32.dll | 582 | GetProcessAffinityMask | |
| KERNEL32.dll | 1168 | SetThreadAffinityMask | |
| KERNEL32.dll | 1013 | RegisterWaitForSingleObject | |
| KERNEL32.dll | 1242 | UnregisterWait | |
| KERNEL32.dll | 1110 | SetEnvironmentVariableA | |
| KERNEL32.dll | 1111 | SetEnvironmentVariableW | |
| KERNEL32.dll | 504 | GetFullPathNameA | |
| KERNEL32.dll | 657 | GetThreadTimes | |
| KERNEL32.dll | 355 | FreeLibraryAndExitThread | |
| KERNEL32.dll | 533 | GetModuleHandleA | |
| KERNEL32.dll | 1263 | VirtualProtect | |
| KERNEL32.dll | 1150 | SetProcessAffinityMask | |
| KERNEL32.dll | 743 | InitializeSListHead | |
| KERNEL32.dll | 752 | InterlockedPopEntrySList | |
| KERNEL32.dll | 753 | InterlockedPushEntrySList | |
| KERNEL32.dll | 750 | InterlockedFlushSList | |
| KERNEL32.dll | 926 | QueryDepthSList | |
| KERNEL32.dll | 1243 | UnregisterWaitEx | |
| KERNEL32.dll | 1272 | WaitForMultipleObjectsEx | |
| KERNEL32.dll | 1127 | SetFilePointerEx | |
| KERNEL32.dll | 410 | GetConsoleCP | |
| KERNEL32.dll | 353 | FreeEnvironmentStringsW | |
| KERNEL32.dll | 474 | GetEnvironmentStringsW | |
| KERNEL32.dll | 633 | GetSystemTimeAsFileTime | |
| KERNEL32.dll | 449 | GetCurrentProcessId | |
| KERNEL32.dll | 721 | HeapQueryInformation | |
| KERNEL32.dll | 909 | PeekNamedPipe | |
| KERNEL32.dll | 292 | FileTimeToLocalFileTime | |
| KERNEL32.dll | 1085 | SetConsoleMode | |
| KERNEL32.dll | 949 | ReadConsoleInputA | |
| KERNEL32.dll | 907 | PeekConsoleInputA | |
| KERNEL32.dll | 565 | GetNumberOfConsoleInputEvents | |
| KERNEL32.dll | 1280 | WaitNamedPipeW | |
| KERNEL32.dll | 171 | CreateSemaphoreA | |
| KERNEL32.dll | 130 | CreateEventA | |
| KERNEL32.dll | 745 | InterlockedCompareExchange | |
| KERNEL32.dll | 738 | InitializeCriticalSection | |
| KERNEL32.dll | 749 | InterlockedExchangeAdd | |
| KERNEL32.dll | 1094 | SetConsoleTextAttribute | |
| KERNEL32.dll | 434 | GetConsoleScreenBufferInfo | |
| KERNEL32.dll | 342 | FlushConsoleInputBuffer | |
| KERNEL32.dll | 828 | LoadLibraryA | |
| KERNEL32.dll | 703 | GlobalMemoryStatus | |
| KERNEL32.dll | 1136 | SetHandleInformation | |
| KERNEL32.dll | 698 | GlobalFree | |
| KERNEL32.dll | 303 | FindCloseChangeNotification | |
| KERNEL32.dll | 322 | FindNextChangeNotification | |
| KERNEL32.dll | 305 | FindFirstChangeNotificationW | |
| KERNEL32.dll | 271 | EnumSystemLocalesW | |
| KERNEL32.dll | 667 | GetUserDefaultLCID | |
| KERNEL32.dll | 780 | IsValidLocale | |
| KERNEL32.dll | 518 | GetLocaleInfoW | |
| KERNEL32.dll | 813 | LCMapStringW | |
| KERNEL32.dll | 100 | CompareStringW | |
| KERNEL32.dll | 1258 | VirtualAllocEx | |
| KERNEL32.dll | 663 | GetTimeFormatW | |
| KERNEL32.dll | 935 | QueryPerformanceCounter | |
| KERNEL32.dll | 531 | GetModuleFileNameA | |
| KERNEL32.dll | 499 | GetFileType | |
| KERNEL32.dll | 586 | GetProcessHeap | |
| KERNEL32.dll | 453 | GetCurrentThreadId | |
| KERNEL32.dll | 452 | GetCurrentThread | |
| KERNEL32.dll | 82 | CloseHandle | |
| KERNEL32.dll | 958 | ReadConsoleW | |
| KERNEL32.dll | 428 | GetConsoleMode | |
| KERNEL32.dll | 960 | ReadFile | |
| KERNEL32.dll | 1048 | RtlUnwind | |
| KERNEL32.dll | 370 | GetCPInfo | |
| KERNEL32.dll | 567 | GetOEMCP | |
| KERNEL32.dll | 360 | GetACP | |
| KERNEL32.dll | 778 | IsValidCodePage | |
| KERNEL32.dll | 830 | LoadLibraryExW | |
| KERNEL32.dll | 323 | FindNextFileA | |
| KERNEL32.dll | 354 | FreeLibrary | |
| KERNEL32.dll | 1069 | SetConsoleCtrlHandler | |
| KERNEL32.dll | 1317 | WriteFile | |
| KERNEL32.dll | 612 | GetStdHandle | |
| KERNEL32.dll | 174 | CreateSemaphoreW | |
| KERNEL32.dll | 536 | GetModuleHandleW | |
| KERNEL32.dll | 659 | GetTickCount | |
| KERNEL32.dll | 611 | GetStartupInfoW | |
| KERNEL32.dll | 1222 | TlsFree | |
| KERNEL32.dll | 1224 | TlsSetValue | |
| KERNEL32.dll | 1223 | TlsGetValue | |
| KERNEL32.dll | 1221 | TlsAlloc | |
| KERNEL32.dll | 1216 | TerminateProcess | |
| KERNEL32.dll | 448 | GetCurrentProcess | |
| KERNEL32.dll | 1202 | Sleep | |
| KERNEL32.dll | 133 | CreateEventW | |
| KERNEL32.dll | 739 | InitializeCriticalSectionAndSpinCount | |
| KERNEL32.dll | 1139 | SetLastError | |
| KERNEL32.dll | 1189 | SetUnhandledExceptionFilter | |
| KERNEL32.dll | 1235 | UnhandledExceptionFilter | |
| KERNEL32.dll | 288 | FatalAppExitA | |
| KERNEL32.dll | 209 | DeleteCriticalSection | |
| KERNEL32.dll | 825 | LeaveCriticalSection | |
| KERNEL32.dll | 238 | EnterCriticalSection | |
| KERNEL32.dll | 715 | HeapAlloc | |
| KERNEL32.dll | 945 | RaiseException | |
| KERNEL32.dll | 719 | HeapFree | |
| KERNEL32.dll | 724 | HeapSize | |
| KERNEL32.dll | 390 | GetCommandLineA | |
| KERNEL32.dll | 772 | IsProcessorFeaturePresent | |
| KERNEL32.dll | 768 | IsDebuggerPresent | |
| KERNEL32.dll | 1297 | WideCharToMultiByte | |
| KERNEL32.dll | 871 | MultiByteToWideChar | |
| KERNEL32.dll | 21 | AreFileApisANSI | |
| KERNEL32.dll | 581 | GetProcAddress | |
| KERNEL32.dll | 535 | GetModuleHandleExW | |
| KERNEL32.dll | 281 | ExitProcess | |
| KERNEL32.dll | 514 | GetLastError | |
| KERNEL32.dll | 202 | DecodePointer | |
| KERNEL32.dll | 234 | EncodePointer | |
| KERNEL32.dll | 532 | GetModuleFileNameW | |
| KERNEL32.dll | 509 | GetGeoInfoW | |
| KERNEL32.dll | 168 | CreateProcessW | |
| SHELL32.dll | 225 | SHGetSpecialFolderPathW | |
| SHELL32.dll | 205 | SHGetKnownFolderPath | |
| SHELL32.dll | 123 | SHBrowseForFolderW | |
| SHELL32.dll | 215 | SHGetPathFromIDListW | |
| SHELL32.dll | 207 | SHGetMalloc | |
| SHELL32.dll | 290 | ShellExecuteW | |
| SHELL32.dll | 189 | SHGetFileInfoW | |
| SHELL32.dll | 302 | Shell_NotifyIconW | |
| SHELL32.dll | 289 | ShellExecuteExW | |
| ole32.dll | 345 | RevokeDragDrop | |
| ole32.dll | 306 | OleInitialize | |
| ole32.dll | 329 | OleUninitialize | |
| ole32.dll | 325 | OleSetClipboard | |
| ole32.dll | 303 | OleGetClipboard | |
| ole32.dll | 301 | OleFlushClipboard | |
| ole32.dll | 308 | OleIsCurrentClipboard | |
| ole32.dll | 343 | RegisterDragDrop | |
| ole32.dll | 104 | CoTaskMemFree | |
| ole32.dll | 344 | ReleaseStgMedium | |
| ole32.dll | 50 | CoGetMalloc | |
| ole32.dll | 103 | CoTaskMemAlloc | |
| ole32.dll | 62 | CoInitialize | |
| ole32.dll | 108 | CoUninitialize | |
| ole32.dll | 63 | CoInitializeEx | |
| ole32.dll | 140 | DoDragDrop | |
| ole32.dll | 16 | CoCreateInstance | |
| ole32.dll | 15 | CoCreateGuid | |
| ole32.dll | 71 | CoLockObjectExternal | |
| WINMM.dll | 9 | PlaySoundW | |
| USER32.dll | 425 | HideCaret | |
| USER32.dll | 161 | DestroyCaret | |
| USER32.dll | 89 | CreateCaret | |
| USER32.dll | 162 | DestroyCursor | |
| USER32.dll | 263 | GetAsyncKeyState | |
| USER32.dll | 592 | RegisterClipboardFormatW | |
| USER32.dll | 34 | ChangeClipboardChain | |
| USER32.dll | 647 | SetClipboardViewer | |
| USER32.dll | 493 | LoadIconW | |
| USER32.dll | 230 | EnumDisplayMonitors | |
| USER32.dll | 351 | GetMonitorInfoW | |
| USER32.dll | 495 | LoadImageW | |
| USER32.dll | 380 | GetSysColorBrush | |
| USER32.dll | 68 | ChildWindowFromPointEx | |
| USER32.dll | 276 | GetClientRect | |
| USER32.dll | 300 | GetFocus | |
| USER32.dll | 589 | RegisterClassExW | |
| USER32.dll | 270 | GetClassInfoW | |
| USER32.dll | 319 | GetKeyboardLayoutList | |
| USER32.dll | 260 | GetAncestor | |
| USER32.dll | 678 | SetParent | |
| USER32.dll | 356 | GetParent | |
| USER32.dll | 291 | GetDesktopWindow | |
| USER32.dll | 621 | ScreenToClient | |
| USER32.dll | 642 | SetCaretPos | |
| USER32.dll | 648 | SetCursor | |
| USER32.dll | 3 | AdjustWindowRectEx | |
| USER32.dll | 412 | GetWindowRect | |
| USER32.dll | 715 | SetWindowTextW | |
| USER32.dll | 446 | InvalidateRect | |
| USER32.dll | 391 | GetUpdateRect | |
| USER32.dll | 220 | EndPaint | |
| USER32.dll | 14 | BeginPaint | |
| USER32.dll | 246 | FillRect | |
| USER32.dll | 640 | SetCapture | |
| USER32.dll | 264 | GetCapture | |
| USER32.dll | 256 | GetActiveWindow | |
| USER32.dll | 658 | SetFocus | |
| USER32.dll | 465 | IsIconic | |
| USER32.dll | 480 | IsWindowVisible | |
| USER32.dll | 411 | GetWindowPlacement | |
| USER32.dll | 710 | SetWindowPos | |
| USER32.dll | 539 | MoveWindow | |
| USER32.dll | 252 | FlashWindowEx | |
| USER32.dll | 735 | ShowWindow | |
| USER32.dll | 457 | IsChild | |
| USER32.dll | 265 | GetCaretBlinkTime | |
| USER32.dll | 525 | MessageBeep | |
| USER32.dll | 299 | GetDoubleClickTime | |
| USER32.dll | 307 | GetIconInfo | |
| USER32.dll | 318 | GetKeyboardLayout | |
| USER32.dll | 482 | IsZoomed | |
| USER32.dll | 317 | GetKeyState | |
| USER32.dll | 322 | GetKeyboardState | |
| USER32.dll | 753 | ToAscii | |
| USER32.dll | 755 | ToUnicode | |
| USER32.dll | 520 | MapVirtualKeyW | |
| USER32.dll | 331 | GetMenu | |
| USER32.dll | 71 | ClientToScreen | |
| USER32.dll | 764 | TranslateMessage | |
| USER32.dll | 175 | DispatchMessageW | |
| USER32.dll | 563 | PeekMessageW | |
| USER32.dll | 566 | PostMessageW | |
| USER32.dll | 156 | DefWindowProcW | |
| USER32.dll | 590 | RegisterClassW | |
| USER32.dll | 526 | MessageBoxA | |
| USER32.dll | 395 | GetUserObjectInformationW | |
| USER32.dll | 360 | GetProcessWindowStation | |
| USER32.dll | 774 | UnregisterClassW | |
| USER32.dll | 110 | CreateWindowExW | |
| USER32.dll | 166 | DestroyWindow | |
| USER32.dll | 364 | GetQueueStatus | |
| USER32.dll | 541 | MsgWaitForMultipleObjectsEx | |
| USER32.dll | 699 | SetTimer | |
| USER32.dll | 483 | KillTimer | |
| USER32.dll | 582 | RealGetWindowClassW | |
| USER32.dll | 242 | EnumWindows | |
| USER32.dll | 419 | GetWindowTextW | |
| USER32.dll | 280 | GetClipboardFormatNameW | |
| USER32.dll | 346 | GetMessageExtraInfo | |
| USER32.dll | 757 | TrackMouseEvent | |
| USER32.dll | 759 | TrackPopupMenuEx | |
| USER32.dll | 90 | CreateCursor | |
| USER32.dll | 288 | GetCursorPos | |
| USER32.dll | 650 | SetCursorPos | |
| USER32.dll | 543 | NotifyWinEvent | |
| USER32.dll | 674 | SetMenuItemInfoW | |
| USER32.dll | 659 | SetForegroundWindow | |
| USER32.dll | 406 | GetWindowLongW | |
| USER32.dll | 708 | SetWindowLongW | |
| USER32.dll | 719 | SetWindowsHookExW | |
| USER32.dll | 768 | UnhookWindowsHookEx | |
| USER32.dll | 28 | CallNextHookEx | |
| USER32.dll | 48 | CharNextExA | |
| USER32.dll | 381 | GetSystemMenu | |
| USER32.dll | 214 | EnableMenuItem | |
| USER32.dll | 289 | GetDC | |
| USER32.dll | 613 | ReleaseDC | |
| USER32.dll | 611 | RegisterWindowMessageW | |
| USER32.dll | 636 | SendMessageW | |
| USER32.dll | 382 | GetSystemMetrics | |
| USER32.dll | 521 | MapWindowPoints | |
| USER32.dll | 250 | FindWindowW | |
| USER32.dll | 249 | FindWindowExW | |
| USER32.dll | 420 | GetWindowThreadProcessId | |
| USER32.dll | 163 | DestroyIcon | |
| USER32.dll | 379 | GetSysColor | |
| USER32.dll | 748 | SystemParametersInfoW | |
| USER32.dll | 711 | SetWindowRgn | |
| USER32.dll | 103 | CreateIconIndirect | |
| USER32.dll | 200 | DrawIconEx | |
| USER32.dll | 533 | MessageBoxW | |
| USER32.dll | 612 | ReleaseCapture | |
| GDI32.dll | 2 | AddFontMemResourceEx | |
| GDI32.dll | 608 | RemoveFontMemResourceEx | |
| GDI32.dll | 550 | GetTextMetricsW | |
| GDI32.dll | 437 | GetCharABCWidthsW | |
| GDI32.dll | 435 | GetCharABCWidthsFloatW | |
| GDI32.dll | 484 | GetGlyphOutlineW | |
| GDI32.dll | 511 | GetOutlineTextMetricsW | |
| GDI32.dll | 542 | GetTextExtentPoint32W | |
| GDI32.dll | 436 | GetCharABCWidthsI | |
| GDI32.dll | 611 | RemoveFontResourceExW | |
| GDI32.dll | 653 | SetGraphicsMode | |
| GDI32.dll | 678 | SetTextColor | |
| GDI32.dll | 676 | SetTextAlign | |
| GDI32.dll | 686 | SetWorldTransform | |
| GDI32.dll | 312 | ExtTextOutW | |
| GDI32.dll | 548 | GetTextFaceW | |
| GDI32.dll | 84 | CreateSolidBrush | |
| GDI32.dll | 5 | AddFontResourceExW | |
| GDI32.dll | 473 | GetFontData | |
| GDI32.dll | 64 | CreateFontIndirectW | |
| GDI32.dll | 525 | GetStockObject | |
| GDI32.dll | 293 | EnumFontFamiliesExW | |
| GDI32.dll | 50 | CreateDCW | |
| GDI32.dll | 47 | CreateCompatibleBitmap | |
| GDI32.dll | 459 | GetDeviceCaps | |
| GDI32.dll | 573 | OffsetRgn | |
| GDI32.dll | 19 | BitBlt | |
| GDI32.dll | 509 | GetObjectW | |
| GDI32.dll | 458 | GetDIBits | |
| GDI32.dll | 41 | CreateBitmap | |
| GDI32.dll | 373 | GdiFlush | |
| GDI32.dll | 53 | CreateDIBSection | |
| GDI32.dll | 631 | SelectObject | |
| GDI32.dll | 629 | SelectClipRgn | |
| GDI32.dll | 507 | GetObjectA | |
| GDI32.dll | 522 | GetRegionData | |
| GDI32.dll | 230 | DeleteObject | |
| GDI32.dll | 227 | DeleteDC | |
| GDI32.dll | 79 | CreateRectRgn | |
| GDI32.dll | 639 | SetBkMode | |
| GDI32.dll | 48 | CreateCompatibleDC | |
| GDI32.dll | 34 | CombineRgn | |
| ADVAPI32.dll | 193 | CryptGenRandom | |
| ADVAPI32.dll | 176 | CryptAcquireContextA | |
| ADVAPI32.dll | 654 | ReportEventA | |
| ADVAPI32.dll | 642 | RegisterEventSourceA | |
| ADVAPI32.dll | 219 | DeregisterEventSource | |
| ADVAPI32.dll | 118 | CopySid | |
| ADVAPI32.dll | 310 | GetLengthSid | |
| ADVAPI32.dll | 288 | FreeSid | |
| ADVAPI32.dll | 346 | GetTokenInformation | |
| ADVAPI32.dll | 503 | OpenProcessToken | |
| ADVAPI32.dll | 638 | RegSetValueExW | |
| ADVAPI32.dll | 622 | RegQueryValueExW | |
| ADVAPI32.dll | 616 | RegQueryInfoKeyW | |
| ADVAPI32.dll | 609 | RegOpenKeyExW | |
| ADVAPI32.dll | 595 | RegFlushKey | |
| ADVAPI32.dll | 594 | RegEnumValueW | |
| ADVAPI32.dll | 591 | RegEnumKeyExW | |
| ADVAPI32.dll | 584 | RegDeleteValueW | |
| ADVAPI32.dll | 580 | RegDeleteKeyW | |
| ADVAPI32.dll | 569 | RegCreateKeyExW | |
| ADVAPI32.dll | 560 | RegCloseKey | |
| ADVAPI32.dll | 203 | CryptReleaseContext | |
| OLEAUT32.dll | 184 | ||
| OLEAUT32.dll | 202 | ||
| OLEAUT32.dll | 201 | ||
| OLEAUT32.dll | 200 | ||
| OLEAUT32.dll | 25 | ||
| OLEAUT32.dll | 9 | ||
| OLEAUT32.dll | 12 | ||
| OLEAUT32.dll | 8 | ||
| OLEAUT32.dll | 7 | ||
| OLEAUT32.dll | 6 | ||
| OLEAUT32.dll | 4 | ||
| OLEAUT32.dll | 2 | ||
| WS2_32.dll | 111 | ||
| WS2_32.dll | 15 | ||
| WS2_32.dll | 55 | ||
| WS2_32.dll | 56 | ||
| WS2_32.dll | 6 | ||
| WS2_32.dll | 116 | ||
| WS2_32.dll | 2 | ||
| WS2_32.dll | 23 | ||
| WS2_32.dll | 136 | freeaddrinfo | |
| WS2_32.dll | 112 | ||
| WS2_32.dll | 17 | ||
| WS2_32.dll | 18 | ||
| WS2_32.dll | 20 | ||
| WS2_32.dll | 16 | ||
| WS2_32.dll | 151 | ||
| WS2_32.dll | 3 | ||
| WS2_32.dll | 13 | ||
| WS2_32.dll | 137 | getaddrinfo | |
| WS2_32.dll | 9 | ||
| WS2_32.dll | 101 | ||
| WS2_32.dll | 12 | ||
| WS2_32.dll | 115 | ||
| WS2_32.dll | 10 | ||
| WS2_32.dll | 22 | ||
| WS2_32.dll | 141 | getnameinfo | |
| WS2_32.dll | 19 | ||
| WS2_32.dll | 4 | ||
| WS2_32.dll | 83 | WSASocketW | |
| WS2_32.dll | 76 | WSASendTo | |
| WS2_32.dll | 73 | WSASend | |
| WS2_32.dll | 70 | WSARecvFrom | |
| WS2_32.dll | 68 | WSARecv | |
| WS2_32.dll | 64 | WSANtohs | |
| WS2_32.dll | 63 | WSANtohl | |
| WS2_32.dll | 54 | WSAIoctl | |
| WS2_32.dll | 1 | ||
| WS2_32.dll | 8 | ||
| WS2_32.dll | 7 | ||
| WS2_32.dll | 11 | ||
| WS2_32.dll | 14 | ||
| WS2_32.dll | 51 | ||
| WS2_32.dll | 52 | ||
| WS2_32.dll | 57 | ||
| WS2_32.dll | 5 | ||
| WS2_32.dll | 21 | ||
| WS2_32.dll | 13 | WSAAccept | |
| WS2_32.dll | 28 | WSAConnect | |
| WS2_32.dll | 50 | WSAHtonl | |
| WS2_32.dll | 51 | WSAHtons | |
| IMM32.dll | 60 | ImmGetDefaultIMEWnd | |
| IMM32.dll | 104 | ImmReleaseContext | |
| IMM32.dll | 54 | ImmGetCompositionStringW | |
| IMM32.dll | 97 | ImmNotifyIME | |
| IMM32.dll | 116 | ImmSetCompositionWindow | |
| IMM32.dll | 111 | ImmSetCandidateWindow | |
| IMM32.dll | 56 | ImmGetContext | |
| d3d9.dll | 9 | Direct3DCreate9 |
| ord | entry_va | function_name | |
|---|---|---|---|
| 1 | 0x574740 | z_adler32 | |
| 2 | 0x5749b0 | z_adler32_combine | |
| 3 | 0x5749c0 | z_adler32_combine64 | |
| 4 | 0x49c180 | z_compress | |
| 5 | 0x49c1a0 | z_compress2 | |
| 6 | 0x49c250 | z_compressBound | |
| 7 | 0x5751d0 | z_crc32 | |
| 8 | 0x5751f0 | z_crc32_combine | |
| 9 | 0x575200 | z_crc32_combine64 | |
| 10 | 0x5471d0 | z_deflate | |
| 11 | 0x547a10 | z_deflateBound | |
| 12 | 0x547af0 | z_deflateCopy | |
| 13 | 0x547ca0 | z_deflateEnd | |
| 14 | 0x547d70 | z_deflateInit2_ | |
| 15 | 0x547fa0 | z_deflateInit_ | |
| 16 | 0x547fd0 | z_deflateParams | |
| 17 | 0x5480c0 | z_deflatePrime | |
| 18 | 0x548100 | z_deflateReset | |
| 19 | 0x5481c0 | z_deflateSetDictionary | |
| 20 | 0x5482b0 | z_deflateSetHeader | |
| 21 | 0x5482e0 | z_deflateTune | |
| 22 | 0x575210 | z_get_crc_table | |
| 23 | 0x5484b0 | z_inflate | |
| 24 | 0x549b60 | z_inflateCopy | |
| 25 | 0x549cc0 | z_inflateEnd | |
| 26 | 0x549d10 | z_inflateGetHeader | |
| 27 | 0x549d40 | z_inflateInit2_ | |
| 28 | 0x549e00 | z_inflateInit_ | |
| 29 | 0x549e20 | z_inflateMark | |
| 30 | 0x549e80 | z_inflatePrime | |
| 31 | 0x549ef0 | z_inflateReset | |
| 32 | 0x549fa0 | z_inflateReset2 | |
| 33 | 0x54a030 | z_inflateSetDictionary | |
| 34 | 0x54a110 | z_inflateSync | |
| 35 | 0x54a1f0 | z_inflateSyncPoint | |
| 36 | 0x54a220 | z_inflateUndermine | |
| 37 | 0x49c270 | z_uncompress | |
| 38 | 0x575220 | z_zError | |
| 39 | 0x575270 | z_zlibCompileFlags | |
| 40 | 0x575280 | z_zlibVersion |
| offset | size | type | comment | |
|---|---|---|---|---|
| 15c1 | 15 | HTM | # | |
| 115118c | 11250 | PNG | (128 x 128) | # |
| 1153d82 | 4743 | PNG | (128 x 128) | # |
| 115500d | 1445 | PNG | (32 x 29) | # |
| 11555b6 | 549 | PNG | (32 x 32) | # |
| 11557df | 8093 | PNG | (128 x 128) | # |
| 1157780 | 1092 | PNG | (32 x 32) | # |
| 1157bc8 | 1820 | PNG | (32 x 32) | # |
| 11582e8 | 5155 | PNG | (128 x 128) | # |
| 115970f | 1192 | PNG | (32 x 32) | # |
| 1159bbb | 9550 | PNG | (128 x 128) | # |
| 115c10d | 1878 | PNG | (32 x 32) | # |
| 115c867 | 1386 | PNG | (128 x 128) | # |
| 115cdd5 | 713 | PNG | (32 x 32) | # |
| 115d0a2 | 629 | PNG | (16 x 16) | # |
| 115d31b | 8109 | PNG | (128 x 128) | # |
| 115f2cc | 1019 | PNG | (32 x 32) | # |
| 115f6cb | 766 | PNG | (16 x 16) | # |
| 115f9cd | 760 | PNG | (16 x 16) | # |
| 115fcc9 | 231 | PNG | (16 x 16) | # |
| 115fdb4 | 938 | PNG | (16 x 16) | # |
| 1160162 | 442 | PNG | (16 x 16) | # |
| 1160320 | 262 | PNG | (16 x 16) | # |
| 116042a | 845 | PNG | (16 x 16) | # |
| 116077b | 16418 | PNG | (128 x 128) | # |
| 11647a1 | 1541 | PNG | (32 x 32) | # |
| 1164daa | 883 | PNG | (32 x 32) | # |
| 1165121 | 2245 | PNG | (32 x 32) | # |
| 11659ea | 456 | PNG | (16 x 16) | # |
| 1165bb6 | 2066 | PNG | (32 x 32) | # |
| 11663cc | 2431 | PNG | (32 x 32) | # |
| 1166d4f | 689 | PNG | (16 x 16) | # |
| 1167004 | 687 | PNG | (16 x 14) | # |
| 11672b7 | 366 | PNG | (16 x 16) | # |
| 1167429 | 802 | PNG | (16 x 16) | # |
| 116774f | 5415 | PNG | (128 x 128) | # |
| 1168c7a | 1154 | PNG | (32 x 32) | # |
| 1169100 | 5395 | PNG | (121 x 128) | # |
| 116a617 | 1712 | PNG | (32 x 32) | # |
| 116accb | 474 | PNG | (32 x 32) | # |
| 116aea9 | 1603 | PNG | (32 x 32) | # |
| 116b4f0 | 849 | PNG | (16 x 16) | # |
| 116b845 | 6520 | PNG | (128 x 117) | # |
| 116d1c1 | 384 | PNG | (16 x 16) | # |
| 116d345 | 9367 | PNG | (128 x 128) | # |
| 116f7e0 | 413 | PNG | (32 x 32) | # |
| 116f981 | 2016 | PNG | (32 x 32) | # |
| 1170165 | 892 | PNG | (16 x 16) | # |
| 11704e5 | 248 | PNG | (16 x 16) | # |
| 11705e1 | 866 | PNG | (32 x 32) | # |
| 1170947 | 782 | PNG | (16 x 16) | # |
| 1170c59 | 1573 | PNG | (32 x 32) | # |
| 1171282 | 1504 | PNG | (32 x 29) | # |
| 1171866 | 780 | PNG | (32 x 32) | # |
| 1171b76 | 1751 | PNG | (32 x 32) | # |
| 1172251 | 14941 | PNG | (128 x 128) | # |
| 1175cb2 | 870 | PNG | (16 x 16) | # |
| 117601c | 499 | PNG | (16 x 16) | # |
| 1176213 | 5414 | PNG | (128 x 128) | # |
| 117773d | 668 | PNG | (16 x 14) | # |
| 11779dd | 481 | PNG | (16 x 16) | # |
| 1177bc2 | 3094 | PNG | (128 x 128) | # |
| 11787dc | 826 | PNG | (16 x 16) | # |
| 1178b1a | 12002 | PNG | (128 x 128) | # |
| 117ba00 | 2010 | PNG | (32 x 32) | # |
| 117c1de | 548 | PNG | (32 x 32) | # |
| 117c406 | 485 | PNG | (98 x 38) | # |
| 117c5ef | 406 | PNG | (16 x 16) | # |
| 117c789 | 633 | PNG | (32 x 32) | # |
| 117ca06 | 773 | PNG | (16 x 16) | # |
| 117cd0f | 4512 | PNG | (128 x 128) | # |
| 117deb3 | 1267 | PNG | (24 x 24) | # |
| 117e3aa | 416 | PNG | (16 x 16) | # |
| 117e54e | 1807 | PNG | (32 x 32) | # |
| 117ec61 | 7039 | PNG | (128 x 128) | # |
| 11807e4 | 811 | PNG | (16 x 16) | # |
| 1180b13 | 5074 | PNG | (128 x 128) | # |
| 1181ee9 | 9363 | PNG | (128 x 128) | # |
| 1184380 | 814 | PNG | (16 x 16) | # |
| 11846b2 | 1590 | PNG | (32 x 32) | # |
| 1184cec | 1092 | PNG | (32 x 32) | # |
| 1185134 | 9432 | PNG | (128 x 128) | # |
| 1187610 | 2205 | PNG | (32 x 32) | # |
| 1187eb1 | 6554 | PNG | (128 x 116) | # |
| 118984f | 584 | PNG | (16 x 16) | # |
| 1189a9b | 1799 | PNG | (32 x 32) | # |
| 118a1a6 | 4069 | PNG | (128 x 128) | # |
| 118b18f | 1654 | PNG | (24 x 24) | # |
| 118b809 | 18075 | PNG | (128 x 128) | # |
| 118fea8 | 1103 | PNG | (35 x 34) | # |
| 11902fb | 3296 | PNG | (128 x 128) | # |
| 1190fdf | 1046 | PNG | (32 x 32) | # |
| 11913f9 | 4232 | PNG | (128 x 126) | # |
| 1192485 | 1804 | PNG | (32 x 32) | # |
| 1192b95 | 229 | PNG | (16 x 16) | # |
| 1192c7e | 799 | PNG | (16 x 14) | # |
| 1192fa1 | 295 | PNG | (15 x 9) | # |
| 11930cc | 2075 | PNG | (128 x 128) | # |
| 11938eb | 4398 | PNG | (128 x 128) | # |
| 1194a1d | 1798 | PNG | (32 x 32) | # |
| 1195127 | 396 | PNG | (16 x 16) | # |
| 11952b7 | 3997 | PNG | (128 x 128) | # |
| 1196258 | 1246 | PNG | (32 x 32) | # |
| 119673a | 611 | PNG | (15 x 16) | # |
| 11969a1 | 490 | PNG | (16 x 16) | # |
| 1196b8f | 370 | PNG | (16 x 16) | # |
| 1196d05 | 570 | PNG | (16 x 16) | # |
| 1196f43 | 10765 | PNG | (128 x 128) | # |
| 1199954 | 5601 | PNG | (128 x 128) | # |
| 119af39 | 166 | PNG | (16 x 16) | # |
| 119afe3 | 185 | PNG | (32 x 32) | # |
| 119b0a0 | 701 | PNG | (16 x 15) | # |
| 119b361 | 384 | PNG | (16 x 16) | # |
| 119b4e5 | 583 | PNG | (16 x 16) | # |
| 119b730 | 566 | PNG | (16 x 16) | # |
| 119b96a | 817 | PNG | (16 x 16) | # |
| 119bc9f | 570 | PNG | (32 x 32) | # |
| 119bedd | 423 | PNG | (16 x 16) | # |
| 119c088 | 537 | PNG | (16 x 16) | # |
| 119c2a5 | 1279 | PNG | (30 x 32) | # |
| 119c7a8 | 1006 | PNG | (32 x 32) | # |
| 119cb9a | 602 | PNG | (16 x 16) | # |
| 119cdf8 | 524 | PNG | (32 x 32) | # |
| 119d008 | 176 | PNG | (32 x 32) | # |
| 119d0bc | 722 | PNG | (16 x 16) | # |
| 119d392 | 419 | PNG | (16 x 16) | # |
| 119d539 | 7503 | PNG | (128 x 128) | # |
| 119f28c | 885 | PNG | (16 x 16) | # |
| 119f605 | 840 | PNG | (16 x 16) | # |
| 119f951 | 578 | PNG | (16 x 16) | # |
| 119fb97 | 516 | PNG | (14 x 10) | # |
| 119fd9f | 505 | PNG | (13 x 10) | # |
| 119ff9c | 406 | PNG | (16 x 16) | # |
| 11a0136 | 438 | PNG | (16 x 16) | # |
| 11a02f0 | 516 | PNG | (16 x 16) | # |
| 11a2424 | 2991 | PNG | (64 x 64) | # |
| 11cbdf7 | 331 | HTM | # | |
| 11ddad8 | 21669 | GIF | (0 x 18759) | # |
| 13630cc | 412 | PNG | (33 x 28) | # |
| 136326c | 4481 | GIF | (64 x 64) | # |
| 13643f1 | 246 | PNG | (16 x 16) | # |
| 13644eb | 241 | PNG | (16 x 16) | # |
| 13645e0 | 799 | PNG | (34 x 28) | # |
| 1364903 | 490 | PNG | (33 x 28) | # |
| 1364af1 | 2531 | PNG | (640 x 450) | # |
| 13654d8 | 4484 | PNG | (64 x 64) | # |
| 1366660 | 322 | PNG | (20 x 20) | # |
| 13696e9 | 314 | PNG | (20 x 20) | # |
| 1369827 | 843 | PNG | (34 x 28) | # |
| 1369b76 | 1135 | PNG | (32 x 32) | # |
| 1369fe9 | 914 | PNG | (22 x 22) | # |
| 136a37f | 777 | PNG | (22 x 22) | # |
| 136a68c | 918 | PNG | (24 x 24) | # |
| 136aa26 | 3210 | PNG | (64 x 64) | # |
| 136bf29 | 5121 | PNG | (48 x 48) | # |
| 136d32e | 3010 | PNG | (64 x 64) | # |
| 136def4 | 7861 | PNG | (64 x 64) | # |
| 136fdad | 728 | PNG | (22 x 22) | # |
| 1370089 | 1268 | GIF | (12 x 12) | # |
| 1370581 | 605 | PNG | (22 x 22) | # |
| 13707e2 | 3146 | PNG | (128 x 128) | # |
| 1371430 | 648 | PNG | (128 x 128) | # |
| 13716bc | 317 | PNG | (32 x 32) | # |
| 13717f9 | 2966023 | BIN | overlay data past EOF | # |
![]() |
| Please donate some bucks to keep this site up and running: | |
| Ko-fi | |
|---|---|
| Yandex.Money | |
| Thank you! | |
everything is OK
offset:( 0x )