Manalyze report for 9e785c9c97c11ca64a0691c30484aa15

Summary

Architecture	`IMAGE_FILE_MACHINE_I386`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
Compilation Date	2019-May-27 07:10:09
Detected languages	Chinese - PRC English - United States
Debug artifacts	F:\xrz\VS11K09A\S_盛尊\盛尊MK14R-中文版\code\Output\FwCustom.pdb
Comments	Firmware Customize
CompanyName	0
FileDescription	MK14RGB Keyboard Driver
FileVersion	`1, 0, 0, 0`
InternalName	MK14RGB Keyboard Driver
LegalCopyright	Copyright (C) @2019
OriginalFilename	MK14RGB Keyboard Driver.exe
ProductName	MK14RGB Keyboard Driver
ProductVersion	`1, 0, 0, 0`

Plugin Output

Info	Matching compiler(s):	`Microsoft Visual C++ v6.0 DLL` `Microsoft Visual C++ 6.0 - 8.0` `MASM/TASM - sig1(h)`
Info	Interesting strings found in the binary:	`Contains domain names: cnszdz.com facebook.com https://twitter.com https://www.facebook.com https://www.facebook.com/sadesesports microsoft.com qlzsz.com twitter.com www.cnszdz.com www.facebook.com www.microsoft.com www.qlzsz.com`
Malicious	The PE contains functions mostly used by malware.	`[!] The program may be hiding some of its imports: LoadLibraryW GetProcAddress` `Functions which can be used for anti-debugging purposes: CreateToolhelp32Snapshot` `Can access the registry: RegQueryValueExW RegOpenKeyExW RegCreateKeyExW RegQueryValueW RegSetValueExW RegSetValueW RegDeleteValueW RegDeleteKeyW RegEnumKeyW RegCloseKey RegEnumKeyExW RegEnumValueW` `Possibly launches other programs: WinExec ShellExecuteW` `Can create temporary files: CreateFileA GetTempPathW CreateFileW` `Uses functions commonly found in keyloggers: GetAsyncKeyState GetForegroundWindow CallNextHookEx MapVirtualKeyW` `Memory manipulation functions often used by packers: VirtualAlloc VirtualProtect` `Enumerates local disk drives: GetDriveTypeW GetVolumeInformationW` `Manipulates other processes: Process32FirstW Process32NextW` `Changes object ACLs: SetFileSecurityW` `Can take screenshots: GetDCEx GetDC BitBlt CreateCompatibleDC` `Reads the contents of the clipboard: GetClipboardData`
Safe	VirusTotal score: 0/70 (Scanned on 2020-12-26 17:40:10)	`All the AVs think this file is safe.`

Hashes

MD5	`9e785c9c97c11ca64a0691c30484aa15`
SHA1	`a02ccee5e7b166076b1c7e8077733a9e7fd75b4a`
SHA256	`7a0a791db8a1a6b504c132e0b4c4c9ad20f6eed02e00040d5fab470322878a54`
SHA3	`ed9e83d31e709a05e53f70ea68f69a4a28a78335b38b89f408b85c666ce58993`
SSDeep	`98304:c1OLPLTbWhVrUkcovtDGr995DKkzgia2ybDt5h66An7ZcGSNqF/Hk+eaFF4kbe:DPL5JrTgWytnBAn7ZcBU/Hk+eaFF4k`
Imports Hash	`cc20bac6233bf1c1675b1513fbf352a1`

DOS Header

e_magic	`MZ`
e_cblp	`0x90`
e_cp	`0x3`
e_crlc	`0`
e_cparhdr	`0x4`
e_minalloc	`0`
e_maxalloc	`0xffff`
e_ss	`0`
e_sp	`0xb8`
e_csum	`0`
e_ip	`0`
e_cs	`0`
e_ovno	`0`
e_oemid	`0`
e_oeminfo	`0`
e_lfanew	`0xf8`

PE Header

Signature	`PE`
Machine	`IMAGE_FILE_MACHINE_I386`
NumberofSections	`5`
TimeDateStamp	2019-May-27 07:10:09
PointerToSymbolTable	`0`
NumberOfSymbols	`0`
SizeOfOptionalHeader	`0xe0`
Characteristics	`IMAGE_FILE_32BIT_MACHINE` `IMAGE_FILE_EXECUTABLE_IMAGE`

Image Optional Header

Magic	`PE32`
LinkerVersion	`10.0`
SizeOfCode	`0x245200`
SizeOfInitializedData	`0xd9a00`
SizeOfUninitializedData	`0`
AddressOfEntryPoint	`0x001EB411 (Section: .text)`
BaseOfCode	`0x1000`
BaseOfData	`0x247000`
ImageBase	`0x400000`
SectionAlignment	`0x1000`
FileAlignment	`0x200`
OperatingSystemVersion	`5.1`
ImageVersion	`0.0`
SubsystemVersion	`5.1`
Win32VersionValue	`0`
SizeOfImage	`0x331000`
SizeOfHeaders	`0x400`
Checksum	`0x32a296`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
DllCharacteristics	`IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE` `IMAGE_DLLCHARACTERISTICS_NX_COMPAT` `IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE`
SizeofStackReserve	`0x100000`
SizeofStackCommit	`0x1000`
SizeofHeapReserve	`0x100000`
SizeofHeapCommit	`0x1000`
LoaderFlags	`0`
NumberOfRvaAndSizes	`16`

.text

MD5	`4ebc652c1669cd0b391cafe71858fad6`
SHA1	`242dea9eda7c89b05a8e8c0bba053e35d4f9c085`
SHA256	`0de86c892fed50b0c9bd6248c647074e15270b36d0a0a0bb15f9da5ba8e54b32`
SHA3	`3960f90e82247a89322ef93952c5a4b4aa01f379de50159bd41dc0752b18343f`
VirtualSize	`0x24515f`
VirtualAddress	`0x1000`
SizeOfRawData	`0x245200`
PointerToRawData	`0x400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`6.58778`

.rdata

MD5	`c88f47807c39bb6d27431115646ca269`
SHA1	`ba91d0586581c5525514789e9a2492b17ae1af64`
SHA256	`65e3d637334ac7a73fb66348f693bc11edab80f4cbf2782b2c899a51df05c22d`
SHA3	`30a33a640d164cefbf11f47cc799ca55580838993f0e45604052f7ba3649a499`
VirtualSize	`0x8e8d6`
VirtualAddress	`0x247000`
SizeOfRawData	`0x8ea00`
PointerToRawData	`0x245600`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`4.96973`

.data

MD5	`77693f6ed770045cd8d65d5d952dc090`
SHA1	`50531bd10fabca4cfe35314f1654b51bb171e721`
SHA256	`f3c436b67ff3002533dd4878870a2074e4225a17807b14be972e9e7212281cbe`
SHA3	`86f52536b6b9720b24888f45c1c737c4b0d9c665d911eb7d1256e56cb24d6a9a`
VirtualSize	`0x1856c`
VirtualAddress	`0x2d6000`
SizeOfRawData	`0x9400`
PointerToRawData	`0x2d4000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`4.88742`

.rsrc

MD5	`51a720e60632589ce3804c4a30ab9bc4`
SHA1	`71b00f5d7e57fe9150af1dce7b54013caee4984f`
SHA256	`362bcfd3bc6cdb09fda9ccd275080c75461d8722d1817785bacbc8aa3b5f2dd7`
SHA3	`db7ca5b55a558cc54728f59b2291f03728eea51c9014a681115a26ce29c215bf`
VirtualSize	`0x10d44`
VirtualAddress	`0x2ef000`
SizeOfRawData	`0x10e00`
PointerToRawData	`0x2dd400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`4.48765`

.reloc

MD5	`1d2c6bc1f3fbd9b1f9bb2e39d3b6ee74`
SHA1	`ed13f2621e79f70711894416a8ec3ac4c6644b61`
SHA256	`682f70726a55e41b5ebb7a5578fc700fa7bc8582fec10b7c30dd2d83c52f833c`
SHA3	`21212598bef1d54797e55c4179e5781684c8f9b079ea5003eddcc2d979ff7728`
VirtualSize	`0x30d2c`
VirtualAddress	`0x300000`
SizeOfRawData	`0x30e00`
PointerToRawData	`0x2ee200`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`6.53138`

Imports

SHLWAPI.dll	`PathFindExtensionW` `PathRemoveExtensionW` `PathFindFileNameW` `PathRemoveFileSpecW` `PathStripToRootW` `PathIsUNCW` `PathFileExistsW` `StrCmpIW` `StrCatW` `StrCpyW`
gdiplus.dll	`GdipAlloc` `GdipFree` `GdipDeleteGraphics` `GdipDisposeImage` `GdipCreateBitmapFromFile` `GdipCreateBitmapFromFileICM` `GdipCreateFromHDC` `GdipDrawImageRectRect` `GdipGetImagePixelFormat` `GdipGetImagePaletteSize` `GdipCloneImage` `GdiplusStartup` `GdiplusShutdown` `GdipGetImagePalette` `GdipDeletePen` `GdipLoadImageFromFile` `GdipLoadImageFromFileICM` `GdipGetImageWidth` `GdipBitmapUnlockBits` `GdipGetImageGraphicsContext` `GdipGetImageHeight` `GdipCreateBitmapFromHBITMAP` `GdipSetSmoothingMode` `GdipDrawLineI` `GdipDrawImageI` `GdipDrawImageRectI` `GdipLoadImageFromStream` `GdipLoadImageFromStreamICM` `GdipCreateBitmapFromStream` `GdipCreateBitmapFromStreamICM` `GdipCreateBitmapFromScan0` `GdipCreatePen1` `GdipSetInterpolationMode` `GdipBitmapLockBits`
KERNEL32.dll	`GetCommandLineW` `HeapSetInformation` `GetStartupInfoW` `RtlUnwind` `HeapFree` `HeapAlloc` `EncodePointer` `DecodePointer` `GetSystemTimeAsFileTime` `RaiseException` `HeapReAlloc` `HeapSize` `HeapQueryInformation` `VirtualAlloc` `VirtualQuery` `SetStdHandle` `GetFileType` `SetUnhandledExceptionFilter` `GetStdHandle` `FreeEnvironmentStringsW` `GetEnvironmentStringsW` `SetHandleCount` `HeapCreate` `FindResourceExW` `UnhandledExceptionFilter` `IsDebuggerPresent` `TerminateProcess` `GetACP` `GetOEMCP` `IsValidCodePage` `IsProcessorFeaturePresent` `LCMapStringW` `GetStringTypeW` `FatalAppExitA` `GetConsoleCP` `ReplaceFileW` `SetConsoleCtrlHandler` `GetTimeZoneInformation` `GetLocaleInfoA` `EnumSystemLocalesA` `IsValidLocale` `CreateFileA` `WriteConsoleW` `GetDriveTypeW` `GetFullPathNameA` `GetProcessHeap` `SetEnvironmentVariableA` `LocalLock` `LocalUnlock` `HeapDestroy` `GetDiskFreeSpaceW` `SizeofResource` `LockResource` `LoadResource` `FindResourceW` `GetVersionExW` `GetVersion` `MultiByteToWideChar` `lstrcmpiW` `lstrlenW` `lstrlenA` `GetCPInfo` `FreeResource` `LoadLibraryW` `GetModuleHandleW` `GetProcAddress` `SetLastError` `DeactivateActCtx` `GetLastError` `ActivateActCtx` `GlobalUnlock` `GlobalSize` `GlobalLock` `GlobalAlloc` `LeaveCriticalSection` `EnterCriticalSection` `GetUserDefaultLCID` `VirtualProtect` `SearchPathW` `GetProfileIntW` `GetNumberFormatW` `GetFileTime` `GetFileSizeEx` `SetFileTime` `LocalFileTimeToFileTime` `SetFileAttributesW` `GetFileAttributesExW` `SetErrorMode` `GetTempPathW` `GetTempFileNameW` `GetFileAttributesW` `InitializeCriticalSectionAndSpinCount` `GetCurrentDirectoryW` `GlobalFlags` `SystemTimeToFileTime` `GetAtomNameW` `GlobalGetAtomNameW` `InterlockedIncrement` `TlsFree` `LocalReAlloc` `TlsSetValue` `TlsAlloc` `GlobalHandle` `TlsGetValue` `LocalAlloc` `GetShortPathNameW` `GetFullPathNameW` `GetVolumeInformationW` `GetCurrentProcess` `DuplicateHandle` `SetEndOfFile` `UnlockFile` `LockFile` `SetFilePointer` `MoveFileW` `DeleteFileW` `GetThreadLocale` `GetStringTypeExW` `GlobalFree` `GetConsoleMode` `GetPrivateProfileStringW` `GetModuleFileNameW` `DeleteCriticalSection` `FileTimeToLocalFileTime` `FileTimeToSystemTime` `InitializeCriticalSection` `GetSystemInfo` `GetLocalTime` `FindNextFileW` `GetPrivateProfileIntW` `GetCurrentThread` `GetUserDefaultUILanguage` `ConvertDefaultLocale` `GetSystemDefaultUILanguage` `GetLocaleInfoW` `CompareStringA` `InterlockedExchange` `lstrcmpA` `SuspendThread` `ResumeThread` `SetThreadPriority` `InterlockedDecrement` `ReleaseActCtx` `CreateActCtxW` `GlobalAddAtomW` `GlobalFindAtomW` `GlobalDeleteAtom` `CompareStringW` `lstrcmpW` `CopyFileW` `FormatMessageW` `LocalFree` `WriteFile` `FlushFileBuffers` `GetCurrentProcessId` `GetFileSize` `ReadFile` `GlobalReAlloc` `CreateToolhelp32Snapshot` `Process32FirstW` `Process32NextW` `GetSystemDefaultLangID` `GetWindowsDirectoryW` `lstrcatW` `WinExec` `WideCharToMultiByte` `lstrcpyW` `ResetEvent` `SetCurrentDirectoryW` `CreateDirectoryW` `FindFirstFileW` `FindClose` `SetEvent` `WaitForMultipleObjects` `MulDiv` `GetCurrentThreadId` `FreeLibrary` `OpenMutexW` `CreateMutexW` `CreateThread` `WritePrivateProfileStringW` `TerminateThread` `ExitThread` `CreateEventW` `DeviceIoControl` `WaitForSingleObject` `OutputDebugStringW` `QueryPerformanceCounter` `ExitProcess` `GetTickCount` `Sleep` `CloseHandle` `CreateFileW`
USER32.dll	`GetDCEx` `RegisterClipboardFormatW` `DefFrameProcW` `DefMDIChildProcW` `DrawMenuBar` `TranslateMDISysAccel` `InSendMessage` `IsClipboardFormatAvailable` `SendNotifyMessageW` `GetUpdateRect` `CharUpperBuffW` `IsCharLowerW` `MapVirtualKeyExW` `SubtractRect` `GetWindowRgn` `EnumChildWindows` `GetTabbedTextExtentW` `HideCaret` `InvertRect` `GetMenuDefaultItem` `SetCursorPos` `CreateAcceleratorTableW` `GetKeyboardState` `GetKeyboardLayout` `ToUnicodeEx` `SetClassLongW` `NotifyWinEvent` `DestroyAcceleratorTable` `IsZoomed` `GetAsyncKeyState` `MonitorFromPoint` `UpdateLayeredWindow` `EnableScrollBar` `InvalidateRgn` `CopyAcceleratorTableW` `CharNextW` `GetDialogBaseUnits` `WaitMessage` `SetParent` `UnpackDDElParam` `ReuseDDElParam` `GetMenuBarInfo` `LoadAcceleratorsW` `InsertMenuItemW` `BringWindowToTop` `TranslateAcceleratorW` `RealChildWindowFromPoint` `CharUpperW` `SetLayeredWindowAttributes` `EnumDisplayMonitors` `CopyImage` `GetNextDlgGroupItem` `IsRectEmpty` `SetWindowContextHelpId` `MapDialogRect` `CreateDialogIndirectParamW` `EndDialog` `ShowOwnedPopups` `PostQuitMessage` `IntersectRect` `GetKeyNameTextW` `EndPaint` `BeginPaint` `GetWindowDC` `TranslateMessage` `ValidateRect` `ScrollWindowEx` `IsWindowEnabled` `MoveWindow` `SetWindowTextW` `IsDialogMessageW` `IsDlgButtonChecked` `SetDlgItemTextW` `SetDlgItemInt` `GetDlgItemTextW` `GetDlgItemInt` `CheckRadioButton` `CheckDlgButton` `SendDlgItemMessageW` `SendDlgItemMessageA` `WinHelpW` `IsChild` `GetCapture` `GetClassLongW` `SetPropW` `GetPropW` `RemovePropW` `SetFocus` `GetWindowTextLengthW` `GetForegroundWindow` `GetLastActivePopup` `SetActiveWindow` `DispatchMessageW` `BeginDeferWindowPos` `EndDeferWindowPos` `GetMessageTime` `MonitorFromWindow` `GetMonitorInfoW` `MapWindowPoints` `ScrollWindow` `TrackPopupMenuEx` `SetMenu` `SetScrollRange` `GetScrollRange` `SetScrollPos` `GetScrollPos` `ShowScrollBar` `GetClassInfoExW` `GetClassInfoW` `RegisterClassW` `AdjustWindowRectEx` `DeferWindowPos` `GetScrollInfo` `SetScrollInfo` `SetWindowPlacement` `GetWindowPlacement` `GetMenu` `SetMenuItemBitmaps` `EnableMenuItem` `SetRectEmpty` `DestroyMenu` `GetMenuStringW` `GetDlgCtrlID` `UnionRect` `DefWindowProcW` `RegisterClassExW` `CreateWindowExW` `DestroyWindow` `UnregisterClassW` `UpdateWindow` `SetWindowRgn` `RegisterWindowMessageW` `SetMenuDefaultItem` `GetDoubleClickTime` `GetDlgItem` `CallWindowProcW` `LockWindowUpdate` `GetTopWindow` `GetWindowThreadProcessId` `GetWindow` `EnumThreadWindows` `GetWindowTextW` `GetClassNameW` `LoadCursorW` `CopyIcon` `MessageBeep` `IsWindow` `GetMessagePos` `ScreenToClient` `PtInRect` `CheckMenuItem` `DrawFrameControl` `SetWindowsHookExW` `UnhookWindowsHookEx` `CallNextHookEx` `SetWindowLongW` `TrackPopupMenu` `PostThreadMessageW` `GetCursorPos` `PeekMessageW` `GetMessageW` `LoadIconW` `SetForegroundWindow` `GetFocus` `KillTimer` `SetTimer` `IsIconic` `GetSystemMenu` `LoadMenuW` `DrawIcon` `WindowFromDC` `EqualRect` `IsWindowVisible` `ShowWindow` `SetWindowPos` `MessageBoxW` `RedrawWindow` `EmptyClipboard` `SetClipboardData` `OpenClipboard` `GetClipboardData` `CloseClipboard` `DestroyCursor` `LoadImageW` `SetCursor` `GetWindowLongW` `WindowFromPoint` `GetNextDlgTabItem` `GetActiveWindow` `InvalidateRect` `ClientToScreen` `GetWindowRect` `FrameRect` `OffsetRect` `InflateRect` `GetIconInfo` `CreateIconIndirect` `DrawStateW` `IsMenu` `ReleaseCapture` `GetParent` `SetCapture` `GetClientRect` `DrawFocusRect` `GetMenuItemInfoW` `GetSystemMetrics` `SystemParametersInfoW` `DrawIconEx` `DestroyIcon` `GrayStringW` `DrawTextExW` `DrawTextW` `TabbedTextOutW` `GetSysColorBrush` `GetSysColor` `EnableWindow` `GetDesktopWindow` `ReleaseDC` `GetDC` `RemoveMenu` `ModifyMenuW` `InsertMenuW` `GetSubMenu` `GetMenuState` `GetMenuItemID` `GetMenuItemCount` `AppendMenuW` `DeleteMenu` `CreatePopupMenu` `CreateMenu` `DrawEdge` `FillRect` `LoadBitmapW` `CopyRect` `SetRect` `MapVirtualKeyW` `keybd_event` `PostMessageW` `SendMessageW` `GetKeyState` `GetMenuCheckMarkDimensions`
GDI32.dll	`SetPolyFillMode` `SetROP2` `SetStretchBltMode` `SetGraphicsMode` `SetWorldTransform` `ModifyWorldTransform` `SetMapMode` `GetClipBox` `ExcludeClipRect` `IntersectClipRect` `OffsetClipRgn` `LineTo` `MoveToEx` `SetTextAlign` `SetTextJustification` `SetTextCharacterExtra` `SetMapperFlags` `GetLayout` `SetLayout` `SetArcDirection` `SetColorAdjustment` `SelectClipRgn` `GetClipRgn` `CreateRectRgn` `SelectClipPath` `GetViewportExtEx` `GetWindowExtEx` `StartDocW` `SetViewportOrgEx` `OffsetViewportOrgEx` `SetViewportExtEx` `ScaleViewportExtEx` `SetWindowOrgEx` `OffsetWindowOrgEx` `SetWindowExtEx` `ScaleWindowExtEx` `GetCurrentPositionEx` `ArcTo` `PolyDraw` `PolylineTo` `PolyBezierTo` `ExtSelectClipRgn` `CreateDIBPatternBrushPt` `CreatePatternBrush` `SelectPalette` `PlayMetaFileRecord` `GetObjectType` `EnumMetaFile` `SetBkMode` `ExtCreatePen` `CreateRectRgnIndirect` `SetRectRgn` `GetMapMode` `DPtoLP` `CreatePalette` `SetTextColor` `SaveDC` `GetSystemPaletteEntries` `CreateDIBitmap` `EnumFontFamiliesW` `GetTextCharsetInfo` `GetTextColor` `GetRgnBox` `CreateEllipticRgn` `CreatePolygonRgn` `Polyline` `SetDIBColorTable` `GetDIBits` `CreateRoundRectRgn` `OffsetRgn` `RoundRect` `EnumFontFamiliesExW` `PtInRegion` `FrameRgn` `SetPixelV` `LPtoDP` `GetWindowOrgEx` `GetViewportOrgEx` `FillRgn` `GetBoundsRect` `ExtFloodFill` `SetPaletteEntries` `StartPage` `EndPage` `SetAbortProc` `AbortDoc` `EndDoc` `GetNearestColor` `GetPolyFillMode` `GetROP2` `GetStretchBltMode` `GetTextAlign` `GetTextFaceW` `CreateMetaFileW` `CloseMetaFile` `DeleteMetaFile` `PlayMetaFile` `RestoreDC` `GetBkColor` `StretchDIBits` `GetCharWidthW` `CreateDCW` `CopyMetaFileW` `StretchBlt` `GetTextMetricsW` `GetCurrentObject` `ExtCreateRegion` `CombineRgn` `Polygon` `RealizePalette` `GetNearestPaletteIndex` `CreateFontW` `Rectangle` `GetStockObject` `CreateBitmap` `Escape` `ExtTextOutW` `TextOutW` `RectVisible` `PtVisible` `CreateDIBSection` `SelectObject` `DeleteObject` `DeleteDC` `GetTextExtentPoint32W` `SetPixel` `GetPixel` `BitBlt` `PatBlt` `Ellipse` `GetBkMode` `GetDeviceCaps` `CreateCompatibleDC` `GetObjectW` `CreateCompatibleBitmap` `CreateFontIndirectW` `CreateHatchBrush` `CreateSolidBrush` `GetPaletteEntries` `CreatePen` `SetBkColor`
MSIMG32.dll	`TransparentBlt` `AlphaBlend`
COMDLG32.dll	`GetFileTitleW`
WINSPOOL.DRV	`ClosePrinter` `GetJobW` `DocumentPropertiesW` `OpenPrinterW`
ADVAPI32.dll	`SetFileSecurityW` `RegQueryValueExW` `RegOpenKeyExW` `RegCreateKeyExW` `RegQueryValueW` `RegSetValueExW` `RegSetValueW` `RegDeleteValueW` `RegDeleteKeyW` `RegEnumKeyW` `GetFileSecurityW` `RegCloseKey` `RegEnumKeyExW` `RegEnumValueW`
SHELL32.dll	`ShellExecuteExW` `SHGetSpecialFolderPathW` `ShellExecuteW` `Shell_NotifyIconW` `SHGetFileInfoW` `DragFinish` `DragQueryFileW` `SHAddToRecentDocs` `ExtractIconW` `SHGetDesktopFolder` `SHGetPathFromIDListW` `SHGetSpecialFolderLocation` `SHAppBarMessage` `SHGetMalloc` `SHBrowseForFolderW`
COMCTL32.dll	`ImageList_GetIconSize` `_TrackMouseEvent` `ImageList_ReplaceIcon` `ImageList_GetIcon` `ImageList_Create` `ImageList_GetImageCount` `ImageList_Destroy` `ImageList_AddMasked` `ImageList_Remove` `ImageList_DrawEx`
ole32.dll	`OleIsRunning` `GetRunningObjectTable` `CoGetMalloc` `CreateOleAdviseHolder` `CreateDataAdviseHolder` `CoFreeUnusedLibraries` `OleUninitialize` `OleRun` `CreateILockBytesOnHGlobal` `StgCreateDocfileOnILockBytes` `StgOpenStorageOnILockBytes` `CoGetClassObject` `StringFromGUID2` `CoDisconnectObject` `CoInitialize` `CoInitializeEx` `OleQueryLinkFromData` `CoUninitialize` `CLSIDFromString` `CLSIDFromProgID` `CoCreateGuid` `OleDuplicateData` `CoTreatAsClass` `StringFromCLSID` `CoTaskMemAlloc` `ReleaseStgMedium` `CreateBindCtx` `ReadClassStg` `ReadFmtUserTypeStg` `OleRegGetUserType` `WriteClassStg` `WriteFmtUserTypeStg` `SetConvertStg` `CoTaskMemFree` `CreateStreamOnHGlobal` `OleQueryCreateFromData` `OleRegGetMiscStatus` `OleRegEnumVerbs` `CreateGenericComposite` `CreateItemMoniker` `OleGetIconOfClass` `OleCreateLinkToFile` `OleCreateFromFile` `OleSetContainedObject` `GetHGlobalFromILockBytes` `OleLoad` `OleCreate` `OleCreateStaticFromData` `OleCreateLinkFromData` `OleCreateFromData` `OleSaveToStream` `WriteClassStm` `OleSave` `PropVariantCopy` `OleGetClipboard` `RevokeDragDrop` `CoLockObjectExternal` `RegisterDragDrop` `CoRegisterMessageFilter` `CoRevokeClassObject` `CoRegisterClassObject` `DoDragDrop` `OleFlushClipboard` `OleIsCurrentClipboard` `OleSetClipboard` `OleSetMenuDescriptor` `OleLockRunning` `IsAccelerator` `OleTranslateAccelerator` `OleDestroyMenuDescriptor` `OleCreateMenuDescriptor` `StgIsStorageFile` `StgOpenStorage` `CreateFileMoniker` `StgCreateDocfile` `CoCreateInstance` `OleInitialize`
OLEAUT32.dll	`#26` `#148` `#25` `#27` `#36` `#37` `#10` `#40` `#15` `#17` `#18` `#20` `#19` `#23` `#24` `#21` `#161` `#163` `#7` `#2` `#8` `#12` `#9` `#4` `#149` `#185` `#184` `#5` `#104` `#113` `#232` `#197` `#420` `#16` `#39` `#38` `#162` `#150` `#418` `#114` `#94` `#22` `#6`
oledlg.dll	`OleUIBusyW`
OLEACC.dll	`LresultFromObject` `AccessibleObjectFromWindow` `CreateStdAccessibleObject`
IMM32.dll	`ImmReleaseContext` `ImmGetContext` `ImmGetOpenStatus`
WINMM.dll	`PlaySoundW`

Delayed Imports

7

Type	`RT_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x134`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.02695`
MD5	`cab67e9ca149fb79ab4473998412b951`
SHA1	`2e793d35537bfb5d3f042ed0626d3b119d50519a`
SHA256	`fbeb3be87e80cb8e1d2af3d8140796c1bb80c6c7056f60897088ff9e355c3867`
SHA3	`0e72f5537421764effb2ed98e536358bb7e86eed7b0936e606e8d45559685684`

8

Type	`RT_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0xb4`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.74274`
MD5	`9fa8a914823ac7e5370652146901f4f1`
SHA1	`eb3224109abb341b6e464d2606fdbed1a7160bc6`
SHA256	`f64ccc0582bc7c66af8b40049e485e8e241335261ec95ace909293ba50b2e4a3`
SHA3	`bb348af06514e27cd1fa21ad524dfd037edcd3b36ef4cc6ab24c4a8ec38995ff`

9

Type	`RT_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x134`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.34038`
MD5	`d78a341fa7444ba9ccb74ad0c943d0ac`
SHA1	`a3fdcb001587c47b72f06441087455e8027baca1`
SHA256	`652988945185cf5d604d9b48de66288d82d8ed0acdd134398e90d002d2d9fc72`
SHA3	`2ddf8193c735adcec9a83d3a9032dc70796778b1d0c967a43789f1a6bb3da15f`

10

Type	`RT_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x134`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.34004`
MD5	`07618c451f53db89991c3fb7c567a568`
SHA1	`0d5cd2bb85bb88024b832f68bdbadd1e69938138`
SHA256	`0b0e16c38a3d5a85566e67b1d9a7e720e4dee27e163b06099d3d7dfa5dbed9ee`
SHA3	`f4d98de638008ce348a7ef0cb3feb13207cf5b3eaea4f1ee1d71b3a22397fba4`

11

Type	`RT_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x134`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.51649`
MD5	`9936fbf67a1d9f755c37852015d09527`
SHA1	`426016ba6a10cc2634ab7357e4223793c51aa304`
SHA256	`368f9cb089d206a8b61251f0c85eeda97ee08a56b33be8579246e964d3af6169`
SHA3	`6bdb1e7d667efe7812e162384a6341edec73311ee7dfcb122adf0cc0f08e7a8f`

12

Type	`RT_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x134`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.45401`
MD5	`ffacff1dbee315221fd131e951d8e151`
SHA1	`d2eb9800a1f60d3ea7225fec706d809cf477885b`
SHA256	`6440c3a38dcfb81d45bc6be31b776fdae116dd7a2933b407b67132f6cfa0e6eb`
SHA3	`dbe125dd582d83c13a62c87798c900fdc43d97b581935e320c14f9cc761a3868`

13

Type	`RT_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x134`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.34864`
MD5	`fa681900dd51c997aa67a2c5a4704099`
SHA1	`b48ebfd25835cb260b5e4f8e7085ea3da102c48a`
SHA256	`9882a8462ce9de3cc9a5d0ca48c8c4f7ca97f1f846f0c10e6655e33c9734b152`
SHA3	`157fb750ffc808227ced340c81ed1c1c1e15b05dd0e831678b871515870e0a8b`

14

Type	`RT_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x134`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.34505`
MD5	`0a12283479aa8a8677dd27bb0f584a34`
SHA1	`63679153c4d14fc591d1286cc98ff5044a5b589d`
SHA256	`322e92d75b3fec9e16b81466f4cf111d298b80812d5b238f4ee032c025a02050`
SHA3	`d6fc5e08b9d51b2cc80c1a2a34ca495e28edd0ca1bc65f317958b773c675de7e`

15

Type	`RT_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x134`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.34864`
MD5	`d0293b6f84ea96f2662fa2f8e2fd44de`
SHA1	`240ad776d40208f067dda60701affa3d162cb3bb`
SHA256	`8db6df648274a0fc3d28430367216e1c17c364ca613066cbb0e133637e92ba62`
SHA3	`d92c1c2bfba803073152e14d6846474d13ccef3f04aa8670540389efa7c7d995`

16

Type	`RT_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x134`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.31114`
MD5	`49ca9d25ceb458297ddf84fff64c8d55`
SHA1	`fbd6d992b7e2a59c9e24372ea8d30a5dcdbd46f9`
SHA256	`f9c81ce9b4176b305c554a15f0ca2b98b11be76c1f13ef22169999aa07e9612f`
SHA3	`03f7002b636940864ef7d399ba60fb8de3f455da32f311ee39cdf6602c5d348b`

17

Type	`RT_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x134`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.33609`
MD5	`27fc5529ad790189bbf410c7e3a70fb7`
SHA1	`ea2456c9b26f884a7f7abb051f460ec98cb9451c`
SHA256	`601635482a9b1864ea0c61ce0282c5c9fe1d014aa95dbb4f60770f1c2b6df3da`
SHA3	`24ab306744896452b2a7f7055c97671ab0aad3965342b3d0cead7a6cb640238d`

18

Type	`RT_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x134`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.81313`
MD5	`858a63dc597812b0885e8a8f9689227c`
SHA1	`0a816cd0e6f10038f43bde278eb613f1c7281b33`
SHA256	`2bf742d2beb4c56dd6eb68347dd8ee28da85bed9e6d165b36c6edb91da01d5d6`
SHA3	`6974d714fd124f0de87b6f088039e52bcf3123b5e6ae24c7c61864b70b894963`

19

Type	`RT_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x134`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.81491`
MD5	`ff43eaab521694d0356618a92cd83b55`
SHA1	`f1ed8d456a5a3d87d1a8349e992c99e22bf3624e`
SHA256	`cfc4ff9e46fbb61f61b68f36adc6593b137233d1cbaa50fe37e5653f0cb20396`
SHA3	`7069692bfbe0c043b33390a40f8033c3d0aa3092c3b1ca1b01fc899dc760ec48`

20

Type	`RT_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x134`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.10016`
MD5	`4bfaa5ad112338fc90bf84b1ba21859d`
SHA1	`f175fb276720b4f98bc75dd3edc8c53ed563bdf4`
SHA256	`c4a6e3a7a346baecb09a0c49268eb44f388382a7866a4e912b53d48fa3b34c26`
SHA3	`eb1f5efadebebc4b756ef49661343ee08641f53184ad8ee83e33d6665028a00d`

21

Type	`RT_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x134`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`1.97052`
MD5	`654a61b5fd300aaf86c52a3c48035005`
SHA1	`e16bdc1b4309abd682e2d0b52aaf370a77ad6a86`
SHA256	`f273e554605a89aa0994c9d42bc2569be3db5b19b2900dacb30f3218ed1174a0`
SHA3	`50582dc2bd6d1a2632564b2d3c6fdc1877e401924754069bc2dfccf3e2896340`

22

Type	`RT_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x134`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.22699`
MD5	`b6946159ef4680b2b03d58bdf3dc83f6`
SHA1	`b949690a6e071a1fe43cb83a15d5104d1fa9fe0d`
SHA256	`ebaf4bcc0f0d7ca9a3458ea52520d2dd10811069241940b9b2e79ac1a4c3ca5c`
SHA3	`4b1152fe0fd4581cc8716682bff8f14d7c903ab6b5414d52876bd37fc58eb0c5`

146

Type	`RT_BITMAP`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x37da`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.69359`
MD5	`56b658efe60695b3700ecebe251349cb`
SHA1	`65be940152fa221f8d0809c7dbcbbf569f63375f`
SHA256	`51e4028492647068853975e8d83b46885b00342a8a8f6a25dbd18bc1df44d005`
SHA3	`ceaefade6b5e05b3d4ad119eddd4b804c326d94bb6611ca5ecf25a3463de9a05`
Preview

147

Type	`RT_BITMAP`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x2ca`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`5.74567`
MD5	`598615ddb568317e3c2e4526f7eea3f5`
SHA1	`0be30143c8088b832919fc3741b1051a28490dd5`
SHA256	`a364f36883d998fb6a90c04cda86862286da1285e2733186d68889ddc798bf31`
SHA3	`e0134bf61132acb90507734aa9b312400fc95cd59f8e3b00c80c2a019cda481c`
Preview

148

Type	`RT_BITMAP`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x554`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`1.83425`
MD5	`0a0c1541757231fd06e3e50ad6be3e04`
SHA1	`e4137451d2491f16d87b557e7280a451f76151ff`
SHA256	`42b9699aff3d339c4ffe9862677960281e5956a9308705ab07ab5a253a36847e`
SHA3	`b6de2e93490a07523a5b9e1bc98544bb7abb56042ebd2ff9173eeecbf791fc6d`
Preview

30994

Type	`RT_BITMAP`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0xb8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.23666`
MD5	`8cf65be17e506ff24c2177078f88b56e`
SHA1	`3e397dc7597caeb844df0ea760b64231c8ce3dbf`
SHA256	`e7c0005285d1ab59732d5f99f77a9bdd6342b01cf44437ebd7a07611a227e272`
SHA3	`7da4c7aab356574679f0f9107740f01647864c846c04f699deef67577fd6aded`
Preview

30996

Type	`RT_BITMAP`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x144`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.87621`
MD5	`5a9c81cdbf480cf01daa71ba0e233c5f`
SHA1	`28e04c01584654e1974347d1baa462b2784e9c47`
SHA256	`abdf36bde89a26349f5741c17c235dacea88d441d8662ba16a598dc50c3c4864`
SHA3	`99dec83590ac444359a5a6f8924dae5615d93f4df527e10a8a61319ce3a5beaf`
Preview

1

Type	`RT_ICON`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x25a8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.32081`
MD5	`bd16a06675687f40179bbcec320540c9`
SHA1	`1f200ad0b17bd911331ad6592ed996698b1d63c6`
SHA256	`68726c0a3eb70508016c286bda696861a6d519882053af092f6166128ddfb306`
SHA3	`f1f3a1c5e66a71dba587eba61efdedf75297f148aa6ebef73f1b35d343b514ca`

2

Type	`RT_ICON`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x10a8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.35099`
MD5	`1a87c82376035e95380c99fe60e4a9a2`
SHA1	`bad2ba541a8bb6f3864a2de3c3469b5f4bcd567f`
SHA256	`10d508a94f8bb0811e0388a400a104a22564be33ea0f7958f8de043357ad8b55`
SHA3	`68521f130adc00aec0696de890210a657b624fb3719826b03081331dca4604b3`

3

Type	`RT_ICON`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x988`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.33005`
MD5	`ba814ea7a8f1f7e48fe08b80f6e2f079`
SHA1	`a3b9775c465388a7e77b5d80180bba7ad1b3b271`
SHA256	`a3ec8e0eda59f10d18ade77ffeed9b89f1a4699a59e6fc5f9f1e16ef40919c83`
SHA3	`67bce97104785ac5c5ebbf9900787305c714561703585885ca8df6324b4ff3df`

4

Type	`RT_ICON`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x468`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.47791`
MD5	`344a2653672b8c3a00d1781c5f91a4f7`
SHA1	`1610b5eec4186e26b90ef541abe8ca2e0b48e9b6`
SHA256	`6a5245c42cab5bf676fd5f64a1f6ac8f3dba0a376a52f0e8b8074a9d67c3dbe3`
SHA3	`18553a59a6d57e283a169366f1a0ce9b17dd6633bacead3e12f0e187c1c63f93`

5

Type	`RT_ICON`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x468`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.15283`
MD5	`6ded58fda63b66e69c3f6fb87254344c`
SHA1	`3ec355d4e7ab5abcf4fb8b2412087930484e5b48`
SHA256	`2314398afdd3bd80734bd89a123deb2cff2b27eff40de9b067b07efb6121408b`
SHA3	`c5ccc425040978d1d968a1fc57264ea9cd4be5859b2384e718059afd952badaf`

6

Type	`RT_ICON`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x468`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`5.93642`
MD5	`803dd87a0ecbd38056e9f7777b90a0c2`
SHA1	`fe8711c499a4396ad29252823f8c80dd510dd43c`
SHA256	`7ed017337f626aba8ad809c0b89d6e1fc107542b746c2b63592cdd89eda8aae5`
SHA3	`73ed01f5696b6af4a5a8721769e82a517c6d044a8256c58bec2c474f5cebe72a`

140

Type	`RT_MENU`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x48`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.10028`
MD5	`564567df27cddb0d35b8209f565e0959`
SHA1	`f663dcdaad652a4d7b96c33c22c80eda272d5762`
SHA256	`3e7c92cf50b44d70864f31e1d9eeb742a5e51c3112b3f79fa1f49055f86115e3`
SHA3	`d91fcea4a23326510bc2f9f94643c507eea12cc80d2df586cc43e1a3e43ace77`

144

Type	`RT_MENU`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x28`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.99209`
MD5	`d110c020bbe948b14f6f24beb9163b25`
SHA1	`e4a7571385dab2e3e07df50e311d38af9cae4963`
SHA256	`c97e885bca14294e7f02392d39d201bdc9db02c2094c0e69137080e69c75d040`
SHA3	`3d601bc718d94501b587ea0c300fe5dd3e84730b04440ed482863c34039c8d20`

100

Type	`RT_DIALOG`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x146`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.41698`
MD5	`ba41cc42fc0443e6526ae8b1f96f380b`
SHA1	`2930ccb89eca06e80b0eead965dc755f4fb87723`
SHA256	`4817108a3ab41cdcf8a395a77f86d0091ba6afcc3605e5abe84186a880e8e8c6`
SHA3	`9ecee46dc6858cafd353fb66b4b1e64a39e2645a2c1a46c29a744603cb199883`

102

Type	`RT_DIALOG`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x215c`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.31907`
MD5	`bd6f76ecd7ccc89690afaff822aa1026`
SHA1	`0fcbfdce24d192905e4c97073eb5c0ddb0c86d6c`
SHA256	`6f66d5c76da453c4ecca01787d9485ba5b66529c5455a1eb88fc1b7e0ccfe012`
SHA3	`aea78a23592fa6c67887cba8325ad775934c90d934c02cd4a0a9fb39249f7380`

131

Type	`RT_DIALOG`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x184`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.14567`
MD5	`21a7c51345502c9c1be14126c544761a`
SHA1	`1b90c4b91775adfaad52ce0a0ee210d3a0d8159d`
SHA256	`a3788df7f451f4f6adb0b9668adbdf4c730f635827d34e4073e5ea872d48a706`
SHA3	`df8d0a514cdc2857cd6f268bd7e4b6b92fd44f0cfafc40eae06539dfb5b2e6c1`

132

Type	`RT_DIALOG`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x2b0`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.4844`
MD5	`ff6b6e13e15b7da6f69bb67729b4fc2d`
SHA1	`ab9c7f7709a3656a9f1f8782ea6f98cbaa1cade1`
SHA256	`ccbbd33729cbd912f29c1554071e470fd00f77689df0a19c41d729390083ae36`
SHA3	`4fb507b8ec55d0f118136396563d31cefc05e26952f4491cc54f635599e1e90b`

133

Type	`RT_DIALOG`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x2dc`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.53871`
MD5	`3e6b90d631d3505e109c0bd5b3f4df5b`
SHA1	`780f2195c7273b5c3eaea3bb4d0d0a216e9b6388`
SHA256	`a1cf5258961c634c7b3a0daffee077e9013782fc8f5b2df620fbf0ddc7fac9bb`
SHA3	`a3c0fe64a0efd2453524fead65ec403b82a122645cfa6e61048f93e58ecd3c63`

134

Type	`RT_DIALOG`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x680`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.71694`
MD5	`e1a3e04fa08a77a6b6ecfe26830bb166`
SHA1	`3b1a9ddd6d83f30ba09f43dad5bf6c0061b1ac85`
SHA256	`6d4dc4f2114fc5ab266eeac1a3eecf74f0c5032fd1856eabc5387f290d0953db`
SHA3	`d15fa5cc9c8ef130f8f8c666c6c70ce24bf6d0c26035fdb860d8a00cd774bbd9`

149

Type	`RT_DIALOG`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x118`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.13519`
MD5	`ddec5296cdf257b2c9a990ce14b98415`
SHA1	`fd7d1e2ff10b67d50f926d0b03ff30667fc06bdf`
SHA256	`99e12727c1c08e49a9117893c4f080496924291e70b2255834cd4a61cfedc5ae`
SHA3	`a9688a159c69ee32e5a7c6677baca7aaedb0b8794c3438545d826c041e9d95de`

30721

Type	`RT_DIALOG`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0xe8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.06676`
MD5	`ad7b15160c8bf80910606d417f40fef5`
SHA1	`9752acb8e012635c4356f7f2a20191d656b53faf`
SHA256	`6e113fd8e9f3156ae68251c6076beb9b59fe29e589d06398e7019802521f69d3`
SHA3	`50c74f1eeba91cb4ecc237c0b18cd2f6c0e2b6064e8d13ce1a779160c03b5d48`

30734

Type	`RT_DIALOG`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x34`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.41669`
MD5	`72723d63b211c60717138184c1675b66`
SHA1	`ecd2be6587bb32a080e51b5c3f3a816e8b637c85`
SHA256	`4cf716efaf68e0cb2ec45ec55d291050b5712b05653cae68edbb999f803d2a98`
SHA3	`6031fa1100e39d04c89ed42890fe9833adb0503fe1857940533b7356aec9d306`

7 (#2)

Type	`RT_STRING`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x32`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`1.29122`
MD5	`c950e48d1a7244f4f32c8c5df0abe828`
SHA1	`71b6f75096c2f4d58cfa221745453ad765535b54`
SHA256	`739e29173ba40b3e26d90daa02db3580d67044ee961a3d6e69f8d20fe800ee62`
SHA3	`3f197c9c3725ac4487bb6240fbeadee400209c9a1343924cdeb3ece8b5078de8`

3585

Type	`RT_STRING`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x4e`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.16337`
MD5	`69b6449365ee77dff8156b4afb8ba435`
SHA1	`28c0eda446ff473244c8f5feda883bbb59091d2c`
SHA256	`6438e50de8d149768e94c06b5973d9bdf3470a6d297255a8b2c60cc30de8bd74`
SHA3	`d54e8535b5e5d1da8d6860f53cbf77d130a110723d68368dea1fa44d88a4b497`

3841

Type	`RT_STRING`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x82`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.81705`
MD5	`8bb814f43734537868736a6df5dcc012`
SHA1	`3ae7a8f8678bc2aed76f745960730097032389b6`
SHA256	`d91dc4e26fd86def5ee907c72f32457bea07d21fa618012245f641d08501548d`
SHA3	`73fabbc3aad03738eda288b6d45b076e7f94f1ff8de37df5ac4d6e7dc7a48f98`

3842

Type	`RT_STRING`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x2a`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`0.960953`
MD5	`0131ce1c2237957b6926d5097b0af63d`
SHA1	`2ce37b98065cc4de92e99eb0777e0e1159102068`
SHA256	`05e0d5787611ed4f643733e3e6e62d00f426422b5d3e443ceebac22e9d294bc4`
SHA3	`9ee7bcb02f48332a4fac72465297312ef9c765b03edf2ab24a4b3de0840bda6c`

3843

Type	`RT_STRING`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x184`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.08634`
MD5	`58655591099de216feb4cc512012d318`
SHA1	`4001db00e1535b26b506e6d033e9759351ae6874`
SHA256	`9665348f07508c6c2a568fc90ec4c04736668adc3521e311a4c7659973d92313`
SHA3	`296c00546a67204c06806ff85a9e3e065559b2b85b22fec4166afc19cad4b6f9`

3857

Type	`RT_STRING`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x4e6`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.25779`
MD5	`3c0e880ffca8f519b51579c8c0825858`
SHA1	`24a521aba0485f373d4d8993d704c86e556bcbf1`
SHA256	`0519d7704cb64bab3aeca7c3b96affd55641099a2a162e88537cb1b8dbfcd540`
SHA3	`6d04d7acb581fbf887f75a077583ce66c949d3f197bfb8445aab6ff2ba93fc01`

3858

Type	`RT_STRING`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x264`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.11275`
MD5	`3dbecd982474b9072ecd4aefe7406857`
SHA1	`ee81b0d03aebe1cde90de59031771f416d29eef2`
SHA256	`eaa0b4fe4704e193dd2ed1f8de1cb20e1001034fdb30307ee44aa664966d4ffc`
SHA3	`9053da012393a18a8a9012e2ab17735c7c864f0463086c9439c3a74a37ed7ee7`

3859

Type	`RT_STRING`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x2da`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.16694`
MD5	`9e3221160c33e15054ff236daf2263d7`
SHA1	`cf41e0cdd3377698f819c4ef95ab56de40c57a5a`
SHA256	`cffcd4956911b3d50eef378cb051e598baba0db48246b07780af03b01c67c64d`
SHA3	`663e17de8922b049f83fdeca37a68d626bb83566bc377d85be42c653707a2b74`

3860

Type	`RT_STRING`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x8a`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.71087`
MD5	`5988b72b85cd1c121906b20e7526fdf2`
SHA1	`45efa4995e9c25a32e3f47a15b63a813cc6e8fc4`
SHA256	`35b5abb90316b4017d5531e031cbf15bae6e8dd46f6dd221701693a22a7795be`
SHA3	`afa115b83c9f9b2f16ce1e14424b4e2cf6216cbcee84835e0b5cec4a23510a93`

3865

Type	`RT_STRING`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0xac`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.63903`
MD5	`5fbbd2a5f564e043553889eec9147920`
SHA1	`2ddafabdf2bf5b62090419f07f731c4d02f0d987`
SHA256	`1b8660b0c53b94f3e029de58e56d08c8097a080244e9dc65d4155a9b603820d8`
SHA3	`1a90cf149f1fc5cfa9cd3f82f9a079ec48c7f7ce76dc4be601e538ae5c052ab9`

3866

Type	`RT_STRING`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0xde`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.87807`
MD5	`a0838b75a6ffc345212d18178663bb7d`
SHA1	`a90a0eccdf4cc4c50f430195695a3b65adefe5e8`
SHA256	`31bff9afbf08a8869318cd946a1d73a4425afefc5693c6e06671bde1e86de1dc`
SHA3	`ad576d2bedb8e173fb207310f244bee3ad8c898a2101cb67da930fadf80ec7d0`

3867

Type	`RT_STRING`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x4a8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.24671`
MD5	`7e0e2d984d6d743b4d90b04758507505`
SHA1	`bec6af6197b875caf3064c7e053b64044904c1bb`
SHA256	`2b5551644093e58a4af74928fb744bd735fa2ef5f99824e6918ff9f6a33a3803`
SHA3	`08f040ebd50cc1809f91378999331d0d19e7364612041db3805a0ff1d37050e5`

3868

Type	`RT_STRING`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x228`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.10695`
MD5	`cd11e247927c7360d3447bbb2e01d326`
SHA1	`0e6b76a1cf9824dac91fad3a346388589987cb9a`
SHA256	`e9212b16f2d3292d0b0eb67134a70778ff1b0aede4918831e5bdba3f950db2a7`
SHA3	`7a0a3e741ea89b752fca14451f1e9b9ac5600d99a7408d04c7835e30688f8fcf`

3869

Type	`RT_STRING`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x2c`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`1.07875`
MD5	`4b18eed800e2806db8e0aacb95fd54f2`
SHA1	`8b09634f818d6823f6466717f3863cbb466d97c1`
SHA256	`0714c554acd308b38c3d6319f7e470f76a16d712f696545eacac2bdc725dfb95`
SHA3	`067dea0fda55e331beab407da1e0e79a9d71fe8a8d0c965384d459ce0a8d499a`

3887

Type	`RT_STRING`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x53c`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.1767`
MD5	`cd0805e3f678d1d1724b84e06da333ba`
SHA1	`a7b6b955cd17037b33390496d03d63dd711dada2`
SHA256	`267abecc36a0c7b614732ee6bc26b05abdb3f53fe4d6e09691543c4ca0bc8f20`
SHA3	`fbeeb4f33a2d05328ae98cf762fd2b242c8251e95cc009d68c83f18604293e4c`

30977

Type	`RT_GROUP_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x22`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.25451`
Detected Filetype	Cursor file
MD5	`5654e2b14214927cc1442602e3a2da4a`
SHA1	`104e3f4a200d63e1a740afec01c2c86131ae81c6`
SHA256	`8da86e16c783fd7da06c1b57abcf523939f9df40dee03786cbb00e2bf63d1cd8`
SHA3	`2e2c44f70f92c06fe84b5f21d04a61cac6112ffc4703899fc14f510962bc6006`
Preview

30998

Type	`RT_GROUP_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.01924`
Detected Filetype	Cursor file
MD5	`446e8ff2a515c84d93ca4cbcf405d300`
SHA1	`98de0236185240e011430a5dd8e262ed8f991ec2`
SHA256	`ef309b720f166673cad840a88e7636e9161ad91415cc7c176010cebba07757e5`
SHA3	`d345fed6ee7f3afa40aba48106f47450bde6ac4c3d47db78cbfb11e4368be613`
Preview

30999

Type	`RT_GROUP_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.01924`
Detected Filetype	Cursor file
MD5	`ebb32ed08b06ab16f79c997b7963c57c`
SHA1	`c87e290caff3cf222d5ec678a51927ff22637949`
SHA256	`9c17b4621412d6ded24a76aed74d4425ae61f86b6d4092ca1e28ca66b7c71399`
SHA3	`fb70f94bf4a64a26f2d83b588fe2a233796083fd03aae7835387aeba2646b847`
Preview

31000

Type	`RT_GROUP_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.01924`
Detected Filetype	Cursor file
MD5	`22a9b94eda22d068a6823a72268fdada`
SHA1	`7923c0aa606f67498391ecdb828292fcc3bc3ed6`
SHA256	`a2f0549cca7170ae03ba042464efe62365fba38c20049e439871c9e5ce0f914f`
SHA3	`565227501bdf04ce5d2afeb14e48062d4cdd6de7b76c62d26a15f6e4a34ba5c1`
Preview

31001

Type	`RT_GROUP_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.01924`
Detected Filetype	Cursor file
MD5	`d1c93cf23f34157f8c97800528b9bb99`
SHA1	`ab9e40c42ad0de11e11fdde5de49bd0adaa9bc2b`
SHA256	`8a495f17bc472bfc5e6923d9efa687848fac027ad60694f9c3f10a4f7b194924`
SHA3	`10b44e07ad4f8d644f73b4d71370ae8c337e8bfdac89efebff20378ad61e0758`
Preview

31002

Type	`RT_GROUP_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.01924`
Detected Filetype	Cursor file
MD5	`8408eef234acfcac8a26e706cc35d85c`
SHA1	`5ecdc1e1be3f1e941b1ca11b45943aafe135c517`
SHA256	`3f02dcac38fffe306e1825846e2bc0458ee712696310d051e3a69ebda8330cc3`
SHA3	`0406ff4480e84661d58a225cdf84931c95f7ebf6fea388a3cb6bedbc0343b421`
Preview

31003

Type	`RT_GROUP_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.01924`
Detected Filetype	Cursor file
MD5	`5df05404b0dab444d7bc0fe0bee0d519`
SHA1	`ecbc2591eaf234bcc87df4731b5e26266728ff6d`
SHA256	`28b8110695851e5280ff55cb78507b03e8b74dd370b8e122179c82b56f7e5f37`
SHA3	`f18323f0f4e67af79d43a527df26273c9f7e53e73b1ba51cd426cff3412927d2`
Preview

31004

Type	`RT_GROUP_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.01924`
Detected Filetype	Cursor file
MD5	`1529a8ec9965ecf3256d6d4550712406`
SHA1	`9bd0fc7e667f3d49f5098ecc2bff01987f3e1503`
SHA256	`12a5b9052dd16bed260343bc4352d436167c991c54497c5af441304646549386`
SHA3	`0799f15ab0007d5497ea80dbae86635472c9d085ffbb6c095b71d1e8acebc81b`
Preview

31005

Type	`RT_GROUP_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.01924`
Detected Filetype	Cursor file
MD5	`e6a3323fcb21bc5b90ee077f41a24061`
SHA1	`91e468b891f8306afeb6ac33bc31d67efb2cbe9d`
SHA256	`a92f60b25322592e7ddd13d88e4006c097666f4d87c8cb0c21ffdccd53b31d78`
SHA3	`ffc4266780334ccca3790e5f703fab0a138d252e16d1ad1145c1929f51d31d38`
Preview

31006

Type	`RT_GROUP_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.01924`
Detected Filetype	Cursor file
MD5	`1cd71148c4a650e298e26668e22c3733`
SHA1	`5aeaabee3ae2ad999e9ed91c85119a42c83473c6`
SHA256	`4ecc7f2578fd7b137c04f85ffcbd67d6eab0bc8b1df4246cebd2a2aa517f3c60`
SHA3	`89ccb4ca5392e186b8eeb9848f78a12843e40792c3500e104225869bf9be1894`
Preview

31007

Type	`RT_GROUP_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.01924`
Detected Filetype	Cursor file
MD5	`8e242da1769c2307f276e393dec0e7d9`
SHA1	`da604259954e8cda5931a679e081bfad9a9fd772`
SHA256	`ee63d4681e7622067fd29005c6cc67b456031eb723c7239f05f1cb097af0ef98`
SHA3	`e6021bdef60731a607f9445b3c004fcdac812f44b42aeb8e32fee72204be4572`
Preview

31008

Type	`RT_GROUP_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.01924`
Detected Filetype	Cursor file
MD5	`87f676ebb80763bfd77a413c2fb00f0d`
SHA1	`23736a18a1d4330cb9ea762fb7deaef881b6ec2c`
SHA256	`da738753c27f2708bd2257f8cac3385a4ccb0df1341b76acfda07fa980cfb4bd`
SHA3	`d90e5655540ffc0671429e2c3ff78ba0f7a100727622de4185f897a4aa996c3b`
Preview

31009

Type	`RT_GROUP_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.01924`
Detected Filetype	Cursor file
MD5	`79bc23c45190436b2c51ff2941fa8720`
SHA1	`0a8234176fad8831709703a0a34337a08987a983`
SHA256	`b328fe22a904a2e7e1341a95dbf00e2fdffc9ab350bc64c5ee348d3007c2b479`
SHA3	`b897f30ec85dad865a74be84cd616e0066da486befd0983d87e2b6f5d66a6c6b`
Preview

31010

Type	`RT_GROUP_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.01924`
Detected Filetype	Cursor file
MD5	`1e219dd609ce399df95ba7af59ef113f`
SHA1	`436a16dd20d5e3ec42342a4d005a664cd227f517`
SHA256	`8f51832638675f16ec5f251ab59251b3f85d84e5129025d44c45b3191b331c58`
SHA3	`9e44adcf523bb484f416a99197d947211027feae6b6665b457883e548218befd`
Preview

31011

Type	`RT_GROUP_CURSOR`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.01924`
Detected Filetype	Cursor file
MD5	`690a20e696fc4e33ffb377a8ef54fb97`
SHA1	`972159605fa069921dbdee9b7a35879e6f1928a6`
SHA256	`6c2ef97bca5cdc6aa6de65b1f1ae8328bcb3494a16025eee870231d991e2cd56`
SHA3	`fd9d56519b5bf976a4ae748fe0c51dcd47ac27ce6a7c271fa2bbb3e00f473b22`
Preview

128

Type	`RT_GROUP_ICON`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x3e`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.62308`
Detected Filetype	Icon file
MD5	`5c84b5099ac46312565be1aa2e21eff0`
SHA1	`25f00759b0e6641f9b423e6a52556c2e4e2796c3`
SHA256	`816cc8c77a0adb35a7432b2bac047e9834bfd21b0ef96c612e5f8bc4f0986620`
SHA3	`17e6deff600599725f4cf3c95b7472cf6ca993cdc40907ae04b6209f5619547f`

141

Type	`RT_GROUP_ICON`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.0815`
Detected Filetype	Icon file
MD5	`9b2193af49fdb53892356f594e9f18b9`
SHA1	`448aa28721dd65475b37505de8140d88d5aa1501`
SHA256	`9b8ca9c6a330d0d17d1108ab5442d60ea574817a65caa860cceb24313cc4f0e4`
SHA3	`46527c3333b02958fd025cfdaa12d481f8505aa77c1cd0b5f15348e870530116`

142

Type	`RT_GROUP_ICON`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x14`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.0815`
Detected Filetype	Icon file
MD5	`5f51cbb6145d3a4c36cffa3b028b0199`
SHA1	`b2bbd2afcfa1c44725bf90df8948792d3bc7fb97`
SHA256	`fbb52a958caa73dce023ce27649d69f8886e86b5706e767153c41dde7b5eebf9`
SHA3	`93f253b05e0e42147b5a9000d421c3e105df42f9fafae5147c4e9a09958e3f79`

1 (#2)

Type	`RT_VERSION`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x358`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.45056`
MD5	`c6b517559f2b0753357982bfc2275853`
SHA1	`c7ad86671972f7107b8daf411c678c243bc4c055`
SHA256	`9a87ad5784a04c787fbd4c18c042e57d3457b93ac07a7d6c26fdf170e22bda39`
SHA3	`f0e4c00bdbac289fde08fc3116be9992555e446afd07873a0ae5926ca52179e8`

1 (#3)

Type	`RT_MANIFEST`
Language	English - United States
Codepage	Latin 1 / Western European
Size	`0x362`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`5.05194`
MD5	`9c8e219e1c1e1875d11477cda468c0c5`
SHA1	`e477c9c0393a31f3f1f5748371a23d62046fb696`
SHA256	`6fa19d63f64aa6ba1247c8e1aa8941eb68f4d0b60853c4cd6cfdd3cb57df37d1`
SHA3	`df550d6313bcba55c952aadf9ff2537cfcc8e4d48e3ae2e65b3df40677a51f68`

102 (#2)

Type	`UNKNOWN`
Language	Chinese - PRC
Codepage	Latin 1 / Western European
Size	`0x61b`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.49277`
MD5	`740d255784c847ca56d9e7e12a8fe21b`
SHA1	`394c611efdbcbcb2a14b6ae080d4f72f0e4e71fc`
SHA256	`0887ce218f37814f350a57d9d5d0e62482dafaa1c437165981b8366022b530a9`
SHA3	`3e890a8ff58a95ffadfbb9b3f3163ba90cb7498164970ea5225da8a1f0619211`

String Table contents

&About...
MK14RGB Keyboard Driver
Open
Save As
All Files (.)
Untitled
an unnamed file
&Hide
No error message is available.
Attempted an unsupported operation.
A required resource was unavailable.
Out of memory.
An unknown error has occurred.
Encountered an improper argument.
Incorrect filename.
Failed to open document.
Failed to save document.
Save changes to %1?
Failed to create empty document.
The file is too large to open.
Could not start print job.
Failed to launch help.
Internal application error.
Command failed.
Insufficient memory to perform operation.
System registry entries have been removed and the INI file (if any) was deleted.
Not all of the system registry entries (or INI file) were removed.
This program requires the file %s, which was not found on this system.
This program is linked to the missing export %s in the file %s. This machine may have an incompatible version of %s.
Enter an integer.
Enter a number.
Enter an integer between %1 and %2.
Enter a number between %1 and %2.
Enter no more than %1 characters.
Select a button.
Enter an integer between 0 and 255.
Enter a positive integer.
Enter a date and/or time.
Enter a currency.
Enter a GUID.
Enter a time.
Enter a date.
Unexpected file format.
%1
Cannot find this file.
Verify that the correct path and file name are given.
Destination disk drive is full.
Unable to read from %1, it is opened by someone else.
Unable to write to %1, it is read-only or opened by someone else.
Encountered an unexpected error while reading %1.
Encountered an unexpected error while writing %1.
%1: %2
Continue running script?
Dispatch exception: %1
Unable to read write-only property.
Unable to write read-only property.
Unable to load mail system support.
Mail system DLL is invalid.
Send Mail failed to send message.
No error occurred.
An unknown error occurred while accessing %1.
%1 was not found.
%1 contains an incorrect path.
Could not open %1 because there are too many open files.
Access to %1 was denied.
An incorrect file handle was associated with %1.
Could not remove %1 because it is the current directory.
Could not create %1 because the directory is full.
Seek failed on %1
Encountered a hardware I/O error while accessing %1.
Encountered a sharing violation while accessing %1.
Encountered a locking violation while accessing %1.
Disk full while accessing %1.
Attempted to access %1 past its end.
No error occurred.
An unknown error occurred while accessing %1.
Attempted to write to the reading %1.
Attempted to access %1 past its end.
Attempted to read from the writing %1.
%1 has a bad format.
%1 contained an unexpected object.
%1 contains an incorrect schema.
pixels
Uncheck
Check
Mixed
One or more auto-saved documents were found.
These are more recently saved than the currently open documents and contain changes that were made before the application closed.
Do you want to recover these auto-saved documents?
Note that if you choose to recover the auto-saved documents, you must explicitly save them to overwrite the original documents. If you choose to not recover the auto-saved versions, they will be deleted.
Recover the auto-saved documents
Open the auto-saved versions instead of the explicitly saved versions
Don't recover the auto-saved documents
Use the last explicitly saved versions of the documents
%s [Recovered]

Version Info

Signature	`0xfeef04bd`
StructVersion	`0x10000`
FileVersion	1.1.0.0
ProductVersion	1.1.0.0
FileFlags	`(EMPTY)`
FileOs	`VOS_DOS_WINDOWS32` `VOS_NT_WINDOWS32` `VOS__WINDOWS32`
FileType	`VFT_APP`
Language	English - United States
Comments	Firmware Customize
CompanyName	0
FileDescription	MK14RGB Keyboard Driver
FileVersion (#2)	1, 0, 0, 0
InternalName	MK14RGB Keyboard Driver
LegalCopyright	Copyright (C) @2019
OriginalFilename	MK14RGB Keyboard Driver.exe
ProductName	MK14RGB Keyboard Driver
ProductVersion (#2)	1, 0, 0, 0

Resource LangID	English - United States

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics	`0`
TimeDateStamp	2019-May-27 07:10:09
Version	`0.0`
SizeofData	`96`
AddressOfRawData	`0x298cc0`
PointerToRawData	`0x2972c0`
Referenced File	F:\xrz\VS11K09A\S_盛尊\盛尊MK14R-中文版\code\Output\FwCustom.pdb

TLS Callbacks

Load Configuration

Size	`0x48`
TimeDateStamp	`1970-Jan-01 00:00:00`
Version	`0.0`
GlobalFlagsClear	`(EMPTY)`
GlobalFlagsSet	`(EMPTY)`
CriticalSectionDefaultTimeout	`0`
DeCommitFreeBlockThreshold	`0`
DeCommitTotalFreeThreshold	`0`
LockPrefixTable	`0`
MaximumAllocationSize	`0`
VirtualMemoryThreshold	`0`
ProcessAffinityMask	`0`
ProcessHeapFlags	`(EMPTY)`
CSDVersion	`0`
Reserved1	`0`
EditList	`0`
SecurityCookie	`0x6ddad0`
SEHandlerTable	`0x6a6fc0`
SEHandlerCount	`2508`

RICH Header

XOR Key	`0x79f83281`
Unmarked objects	`0`
152 (20115)	`1`
C objects (VS2008 SP1 build 30729)	`15`
ASM objects (VS2010 build 30319)	`43`
C objects (VS2010 build 30319)	`217`
Imports (VS2008 SP1 build 30729)	`35`
Total imports	`793`
C++ objects (VS2010 build 30319)	`427`
Resource objects (VS2010 build 30319)	`1`
Linker (VS2010 build 30319)	`1`