GDHM_TASBOT_v32[.]92[.]rar

Sharing

Copy URL

Twitter E-mail

General

Target

GDHM_TASBOT_v32.92.rar
Size

13.6MB
MD5

9240543b0a9674dd005e5409e56b85a3
SHA1

de88bababe90ecc122d35371c1b92a325dc6678d
SHA256

5448446e04a7bf85835e06e8c594cf15be53a15731defba6d6d011f4dc0cac83
SHA512

ada8200d1b8969c67df8193cd2b728db28fcf2938f2cffd4f4fa5e585d4266aed028e9fc1f9246a5c8262ce3ce5ded7ddacb05298d99fbf58141494c7cf1d938
SSDEEP

393216:9aiIf3/eSxlzUbTtvrPHTzLErgKucsKMcq:HIv/PXz6ZfazucsLcq

Score

7^/10

themida

Malware Config

Signatures

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

themida

resource	yara_rule
static1/unpack001/GDHM_TASBOT_v32.92/tBot.dll	themida

Files

GDHM_TASBOT_v32.92.rar
.rar
GDHM_TASBOT_v32.92/.GDHM/licenses/LICENSE_CappucinoSDK.txt
GDHM_TASBOT_v32.92/.GDHM/licenses/LICENSE_Kazmath.txt
GDHM_TASBOT_v32.92/.GDHM/licenses/LICENSE_StackWalker.txt
GDHM_TASBOT_v32.92/.GDHM/licenses/LICENSE_bada_pthread.txt
GDHM_TASBOT_v32.92/.GDHM/licenses/LICENSE_cocos2d-x.txt
GDHM_TASBOT_v32.92/.GDHM/licenses/LICENSE_cocosdenshion.txt
GDHM_TASBOT_v32.92/.GDHM/licenses/LICENSE_cpp-httplib.txt
GDHM_TASBOT_v32.92/.GDHM/licenses/LICENSE_curl.txt
GDHM_TASBOT_v32.92/.GDHM/licenses/LICENSE_detours.txt
GDHM_TASBOT_v32.92/.GDHM/licenses/LICENSE_discord-rpc.txt
GDHM_TASBOT_v32.92/.GDHM/licenses/LICENSE_gdh.txt
GDHM_TASBOT_v32.92/.GDHM/licenses/LICENSE_gdrpc.txt
GDHM_TASBOT_v32.92/.GDHM/licenses/LICENSE_imgui.txt
GDHM_TASBOT_v32.92/.GDHM/licenses/LICENSE_jsoncpp.txt
GDHM_TASBOT_v32.92/.GDHM/licenses/LICENSE_jsonhpp.txt
GDHM_TASBOT_v32.92/.GDHM/licenses/LICENSE_kiero.txt
GDHM_TASBOT_v32.92/.GDHM/licenses/LICENSE_libmem.txt
GDHM_TASBOT_v32.92/.GDHM/licenses/LICENSE_minhook.txt
GDHM_TASBOT_v32.92/.GDHM/licenses/LICENSE_openssl.txt
GDHM_TASBOT_v32.92/.GDHM/licenses/LICENSE_spdlog.txt
GDHM_TASBOT_v32.92/.GDHM/licenses/LICENSE_toml11.txt
GDHM_TASBOT_v32.92/.GDHM/licenses/LICENSE_zlib.txt
GDHM_TASBOT_v32.92/.GDHM/mod/bypass.json
GDHM_TASBOT_v32.92/.GDHM/mod/core.json
GDHM_TASBOT_v32.92/.GDHM/mod/creator.json
GDHM_TASBOT_v32.92/.GDHM/mod/global.json
GDHM_TASBOT_v32.92/.GDHM/mod/player.json
GDHM_TASBOT_v32.92/.GDHM/tools/Geometrize2GD.py/gd_object.py
GDHM_TASBOT_v32.92/.GDHM/tools/Geometrize2GD.py/gd_object_dict.py
GDHM_TASBOT_v32.92/.GDHM/tools/Geometrize2GD.py/gd_pipe.py
GDHM_TASBOT_v32.92/.GDHM/tools/Geometrize2GD.py/main.py
GDHM_TASBOT_v32.92/.GDHM/tools/Geometrize2GD.py/pipe_name.config
GDHM_TASBOT_v32.92/.GDHM/tools/Geometrize2GD.py/requirements/install.bat
GDHM_TASBOT_v32.92/.GDHM/tools/Geometrize2GD.py/requirements/requirements.txt
GDHM_TASBOT_v32.92/.GDHM/tools/Geometrize2GD.py/sample.json
GDHM_TASBOT_v32.92/.GDHM/tools/backup/GDHM_CLIENT.exe
.exe windows x86

06ddf77692562574239d617140687265

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
CreateFileA
CloseHandle
GetModuleHandleW
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetCPInfoExW
GetLastError
IsDebuggerPresent

msvcp140

?_Gettrue@_Locinfo@std@@QBEPBDXZ
?_Getfalse@_Locinfo@std@@QBEPBDXZ
?_Getlconv@_Locinfo@std@@QBEPBUlconv@@XZ
?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ
??1_Locinfo@std@@QAE@XZ
??0_Locinfo@std@@QAE@PBD@Z
?_Incref@facet@locale@std@@UAEXXZ
??Bid@locale@std@@QAEIXZ
_Mbrtowc
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z
??1facet@locale@std@@MAE@XZ
?id@?$numpunct@D@std@@2V0locale@2@A
?_Xlength_error@std@@YAXPBD@Z
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
??0facet@locale@std@@IAE@I@Z

vcruntime140

_except_handler4_common
__current_exception_context
_CxxThrowException
memset
__std_terminate
memmove
__std_exception_copy
memcpy
memchr
__std_exception_destroy
__CxxFrameHandler3
__current_exception

api-ms-win-crt-heap-l1-1-0

malloc
_callnewh
calloc
free
_set_new_mode

api-ms-win-crt-string-l1-1-0

toupper

api-ms-win-crt-math-l1-1-0

_dsign
_fdclass
_dclass
_ldclass
_ldsign
__setusermatherr
_fdsign

api-ms-win-crt-runtime-l1-1-0

terminate
_crt_atexit
_invalid_parameter_noinfo_noreturn
_controlfp_s
_seh_filter_exe
_configure_narrow_argv
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_register_thread_local_exe_atexit_callback
_c_exit
_cexit
__p___argv
__p___argc
_get_initial_narrow_environment
_exit
exit
_initterm_e
_initterm
_set_app_type

api-ms-win-crt-stdio-l1-1-0

__p__commode
_set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Exports

Exports

??4_Init_locks@std@@QAEAAV01@ABV01@@Z

Sections

.text
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 127KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
GDHM_TASBOT_v32.92/.GDHM/tools/backup/msacm32.dll.bak
.dll windows x86

5633319c28d2514cae6bf0126c1da38d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DisableThreadLibraryCalls
CreateThread
GetModuleFileNameA
LoadLibraryW
GetSystemDirectoryW
GetProcAddress
CreateFileW
FormatMessageA
LocalFree
GetFileAttributesExW
AreFileApisANSI
CloseHandle
GetLastError
GetFileInformationByHandleEx
MultiByteToWideChar
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent

msvcp140

?always_noconv@codecvt_base@std@@QBE_NXZ
??Bid@locale@std@@QAEIXZ
?_Xlength_error@std@@YAXPBD@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Xout_of_range@std@@YAXPBD@Z
?_Winerror_map@std@@YAHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?_Syserror_map@std@@YAPBDH@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ

vcruntime140

_except_handler4_common
memset
memcpy
_CxxThrowException
__std_terminate
__std_exception_copy
__std_exception_destroy
__CxxFrameHandler3
__std_type_info_destroy_list
memmove

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_invalid_parameter_noinfo_noreturn
_cexit
terminate

api-ms-win-crt-stdio-l1-1-0

ungetc
setvbuf
fgetpos
fwrite
_fseeki64
fgetc
fclose
fflush
fread
fputc
_get_stream_buffer_pointers
fsetpos

api-ms-win-crt-heap-l1-1-0

malloc
_callnewh
free

api-ms-win-crt-filesystem-l1-1-0

_lock_file
_unlock_file

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func

Exports

Exports

acmDriverAddA
acmDriverAddW
acmDriverClose
acmDriverDetailsA
acmDriverDetailsW
acmDriverEnum
acmDriverID
acmDriverMessage
acmDriverOpen
acmDriverPriority
acmDriverRemove
acmFilterChooseA
acmFilterChooseW
acmFilterDetailsA
acmFilterDetailsW
acmFilterEnumA
acmFilterEnumW
acmFilterTagDetailsA
acmFilterTagDetailsW
acmFilterTagEnumA
acmFilterTagEnumW
acmFormatChooseA
acmFormatChooseW
acmFormatDetailsA
acmFormatDetailsW
acmFormatEnumA
acmFormatEnumW
acmFormatSuggest
acmFormatTagDetailsA
acmFormatTagDetailsW
acmFormatTagEnumA
acmFormatTagEnumW
acmGetVersion
acmMetrics
acmStreamClose
acmStreamConvert
acmStreamMessage
acmStreamOpen
acmStreamPrepareHeader
acmStreamReset
acmStreamSize
acmStreamUnprepareHeader

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
GDHM_TASBOT_v32.92/.GDHM/tools/backup/pthreadVCE2.dll.bak
.dll windows x86

3cb670276d26003b3e60cc547afc3c3e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

calloc
_onexit
__dllonexit
_adjust_fdiv
_initterm
??1type_info@@UAE@XZ
??3@YAXPAX@Z
_ftime
_beginthreadex
malloc
exit
_errno
_CxxThrowException
__CxxFrameHandler
_endthreadex
?set_terminate@@YAP6AXXZP6AXXZ@Z
?terminate@@YAXXZ
free

wsock32

WSAGetLastError
WSASetLastError

kernel32

TlsGetValue
CloseHandle
SetLastError
CreateSemaphoreA
GetCurrentProcessId
OpenProcess
SetThreadPriority
LoadLibraryA
WaitForMultipleObjects
GetCurrentThreadId
GetCurrentThread
DuplicateHandle
GetThreadPriority
InterlockedExchangeAdd
CreateEventA
FreeLibrary
GetProcAddress
SuspendThread
ResumeThread
TlsFree
ReleaseSemaphore
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
TlsAlloc
TlsSetValue
SetEvent
GetProcessAffinityMask
GetCurrentProcess
GetLastError
Sleep
WaitForSingleObject
SetThreadContext
InterlockedDecrement
ResetEvent
GetThreadContext

Exports

Exports

pthreadCancelableTimedWait
pthreadCancelableWait
pthread_attr_destroy
pthread_attr_getdetachstate
pthread_attr_getinheritsched
pthread_attr_getschedparam
pthread_attr_getschedpolicy
pthread_attr_getscope
pthread_attr_getstackaddr
pthread_attr_getstacksize
pthread_attr_init
pthread_attr_setdetachstate
pthread_attr_setinheritsched
pthread_attr_setschedparam
pthread_attr_setschedpolicy
pthread_attr_setscope
pthread_attr_setstackaddr
pthread_attr_setstacksize
pthread_barrier_destroy
pthread_barrier_init
pthread_barrier_wait
pthread_barrierattr_destroy
pthread_barrierattr_getpshared
pthread_barrierattr_init
pthread_barrierattr_setpshared
pthread_cancel
pthread_cond_broadcast
pthread_cond_destroy
pthread_cond_init
pthread_cond_signal
pthread_cond_timedwait
pthread_cond_wait
pthread_condattr_destroy
pthread_condattr_getpshared
pthread_condattr_init
pthread_condattr_setpshared
pthread_create
pthread_delay_np
pthread_detach
pthread_equal
pthread_exit
pthread_getconcurrency
pthread_getschedparam
pthread_getspecific
pthread_getw32threadhandle_np
pthread_join
pthread_key_create
pthread_key_delete
pthread_kill
pthread_mutex_destroy
pthread_mutex_init
pthread_mutex_lock
pthread_mutex_timedlock
pthread_mutex_trylock
pthread_mutex_unlock
pthread_mutexattr_destroy
pthread_mutexattr_getkind_np
pthread_mutexattr_getpshared
pthread_mutexattr_gettype
pthread_mutexattr_init
pthread_mutexattr_setkind_np
pthread_mutexattr_setpshared
pthread_mutexattr_settype
pthread_num_processors_np
pthread_once
pthread_rwlock_destroy
pthread_rwlock_init
pthread_rwlock_rdlock
pthread_rwlock_timedrdlock
pthread_rwlock_timedwrlock
pthread_rwlock_tryrdlock
pthread_rwlock_trywrlock
pthread_rwlock_unlock
pthread_rwlock_wrlock
pthread_rwlockattr_destroy
pthread_rwlockattr_getpshared
pthread_rwlockattr_init
pthread_rwlockattr_setpshared
pthread_self
pthread_setcancelstate
pthread_setcanceltype
pthread_setconcurrency
pthread_setschedparam
pthread_setspecific
pthread_spin_destroy
pthread_spin_init
pthread_spin_lock
pthread_spin_trylock
pthread_spin_unlock
pthread_testcancel
pthread_timechange_handler_np
pthread_win32_process_attach_np
pthread_win32_process_detach_np
pthread_win32_test_features_np
pthread_win32_thread_attach_np
pthread_win32_thread_detach_np
ptw32_get_exception_services_code
ptw32_pop_cleanup
ptw32_push_cleanup
sched_get_priority_max
sched_get_priority_min
sched_getscheduler
sched_setscheduler
sched_yield
sem_close
sem_destroy
sem_getvalue
sem_init
sem_open
sem_post
sem_post_multiple
sem_timedwait
sem_trywait
sem_unlink
sem_wait

Sections

.text
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
GDHM_TASBOT_v32.92/.GDHM_Geometrize2GD.bat
GDHM_TASBOT_v32.92/.GDHM_uninstall.bat
GDHM_TASBOT_v32.92/RoastedMarshmellow.dll
.dll windows x86

823440f5ee6148cb480f6f1197128ee1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentVariableW
GetLastError
CreateThread
MultiByteToWideChar
LocalFree
CreateDirectoryW
CreateFileW
FindClose
LoadLibraryW
FreeLibraryAndExitThread
GetModuleFileNameA
FindFirstFileExW
FindNextFileW
GetFileAttributesW
GetFileAttributesExW
GetFileInformationByHandle
SetFileInformationByHandle
GetTempPathW
AreFileApisANSI
CloseHandle
DeviceIoControl
CopyFileW
CreateHardLinkW
GetFileInformationByHandleEx
CreateSymbolicLinkW
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
FormatMessageA

user32

MessageBoxA

msvcp140

?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?always_noconv@codecvt_base@std@@QBE_NXZ
??Bid@locale@std@@QAEIXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Xout_of_range@std@@YAXPBD@Z
?_Winerror_map@std@@YAHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Xlength_error@std@@YAXPBD@Z
?_Syserror_map@std@@YAPBDH@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ

vcruntime140

memcpy
_CxxThrowException
__std_exception_copy
__std_exception_destroy
__CxxFrameHandler3
memset
__std_type_info_destroy_list
_except_handler4_common
__std_terminate
memchr
memmove

api-ms-win-crt-stdio-l1-1-0

fread
fsetpos
ungetc
setvbuf
fgetpos
fwrite
fgetc
fclose
fflush
_get_stream_buffer_pointers
fputc
_fseeki64

api-ms-win-crt-heap-l1-1-0

free
_callnewh
malloc

api-ms-win-crt-filesystem-l1-1-0

_lock_file
_unlock_file

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
terminate
_execute_onexit_table
_crt_atexit
_cexit
_invalid_parameter_noinfo_noreturn

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func

Exports

Exports

?main_unload@@YAXXZ

Sections

.text
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
GDHM_TASBOT_v32.92/ToastedMarshmellow.dll
.dll windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

?$TSS0@?1??getClassTypeInfo@CCCallFuncN@cocos2d@@UAEJXZ@4HA
?$TSS0@?1??getClassTypeInfo@CCCallFuncND@cocos2d@@UAEJXZ@4HA
?$TSS0@?1??getClassTypeInfo@CCCallFuncO@cocos2d@@UAEJXZ@4HA
?$TSS0@?1??getClassTypeInfo@CCDirector@cocos2d@@UAEJXZ@4HA
?$TSS0@?1??getClassTypeInfo@CCFileUtils@cocos2d@@UAEJXZ@4HA
??0?$MemPoolT@$0CE@@tinyxml2@@QAE@ABV01@@Z
??0?$MemPoolT@$0CM@@tinyxml2@@QAE@ABV01@@Z
??0?$MemPoolT@$0DA@@tinyxml2@@QAE@ABV01@@Z
??0?$MemPoolT@$0DE@@tinyxml2@@QAE@ABV01@@Z
??0CCAccelAmplitude@cocos2d@@QAE@ABV01@@Z
??0CCAccelAmplitude@cocos2d@@QAE@XZ
??0CCAccelDeccelAmplitude@cocos2d@@QAE@ABV01@@Z
??0CCAccelDeccelAmplitude@cocos2d@@QAE@XZ
??0CCAccelerometerDelegate@cocos2d@@QAE@$$QAV01@@Z
??0CCAccelerometerDelegate@cocos2d@@QAE@ABV01@@Z
??0CCAccelerometerDelegate@cocos2d@@QAE@XZ
??0CCAction@cocos2d@@QAE@ABV01@@Z
??0CCActionCamera@cocos2d@@QAE@ABV01@@Z
??0CCActionCamera@cocos2d@@QAE@XZ
??0CCActionEase@cocos2d@@QAE@ABV01@@Z
??0CCActionEase@cocos2d@@QAE@XZ
??0CCActionInstant@cocos2d@@QAE@ABV01@@Z
??0CCActionInterval@cocos2d@@QAE@$$QAV01@@Z
??0CCActionInterval@cocos2d@@QAE@ABV01@@Z
??0CCActionInterval@cocos2d@@QAE@XZ
??0CCActionManager@cocos2d@@QAE@ABV01@@Z
??0CCActionTween@cocos2d@@QAE@$$QAV01@@Z
??0CCActionTween@cocos2d@@QAE@ABV01@@Z
??0CCActionTween@cocos2d@@QAE@XZ
??0CCActionTweenDelegate@cocos2d@@QAE@ABV01@@Z
??0CCActionTweenDelegate@cocos2d@@QAE@XZ
??0CCAnimate@cocos2d@@QAE@ABV01@@Z
??0CCAnimation@cocos2d@@QAE@ABV01@@Z
??0CCAnimationCache@cocos2d@@QAE@ABV01@@Z
??0CCAnimationFrame@cocos2d@@QAE@ABV01@@Z
??0CCApplication@cocos2d@@QAE@ABV01@@Z
??0CCApplicationProtocol@cocos2d@@QAE@ABV01@@Z
??0CCApplicationProtocol@cocos2d@@QAE@XZ
??0CCArray@cocos2d@@QAE@ABV01@@Z
??0CCAtlasNode@cocos2d@@QAE@ABV01@@Z
??0CCAutoreleasePool@cocos2d@@QAE@ABV01@@Z
??0CCBMFontConfiguration@cocos2d@@QAE@ABV01@@Z
??0CCBezierBy@cocos2d@@QAE@$$QAV01@@Z
??0CCBezierBy@cocos2d@@QAE@ABV01@@Z
??0CCBezierBy@cocos2d@@QAE@XZ
??0CCBezierTo@cocos2d@@QAE@$$QAV01@@Z
??0CCBezierTo@cocos2d@@QAE@ABV01@@Z
??0CCBezierTo@cocos2d@@QAE@XZ
??0CCBlendProtocol@cocos2d@@QAE@$$QAV01@@Z
??0CCBlendProtocol@cocos2d@@QAE@ABV01@@Z
??0CCBlendProtocol@cocos2d@@QAE@XZ
??0CCBlink@cocos2d@@QAE@$$QAV01@@Z
??0CCBlink@cocos2d@@QAE@ABV01@@Z
??0CCBlink@cocos2d@@QAE@XZ
??0CCBool@cocos2d@@QAE@$$QAV01@@Z
??0CCBool@cocos2d@@QAE@ABV01@@Z
??0CCBool@cocos2d@@QAE@_N@Z
??0CCCallFunc@cocos2d@@QAE@ABV01@@Z
??0CCCallFunc@cocos2d@@QAE@XZ
??0CCCallFuncN@cocos2d@@QAE@ABV01@@Z
??0CCCallFuncN@cocos2d@@QAE@XZ
??0CCCallFuncND@cocos2d@@QAE@$$QAV01@@Z
??0CCCallFuncND@cocos2d@@QAE@ABV01@@Z
??0CCCallFuncND@cocos2d@@QAE@XZ
??0CCCallFuncO@cocos2d@@QAE@ABV01@@Z
??0CCCardinalSplineBy@cocos2d@@QAE@$$QAV01@@Z
??0CCCardinalSplineBy@cocos2d@@QAE@ABV01@@Z
??0CCCardinalSplineTo@cocos2d@@QAE@ABV01@@Z
??0CCCatmullRomBy@cocos2d@@QAE@$$QAV01@@Z
??0CCCatmullRomBy@cocos2d@@QAE@ABV01@@Z
??0CCCatmullRomBy@cocos2d@@QAE@XZ
??0CCCatmullRomTo@cocos2d@@QAE@$$QAV01@@Z
??0CCCatmullRomTo@cocos2d@@QAE@ABV01@@Z
??0CCCatmullRomTo@cocos2d@@QAE@XZ
??0CCClippingNode@cocos2d@@QAE@ABV01@@Z
??0CCComponent@cocos2d@@QAE@ABV01@@Z
??0CCComponentContainer@cocos2d@@QAE@ABV01@@Z
??0CCConfiguration@cocos2d@@QAE@ABV01@@Z
??0CCCopying@cocos2d@@QAE@$$QAV01@@Z
??0CCCopying@cocos2d@@QAE@ABV01@@Z
??0CCCopying@cocos2d@@QAE@XZ
??0CCDataVisitor@cocos2d@@QAE@ABV01@@Z
??0CCDataVisitor@cocos2d@@QAE@XZ
??0CCDeccelAmplitude@cocos2d@@QAE@ABV01@@Z
??0CCDeccelAmplitude@cocos2d@@QAE@XZ
??0CCDelayTime@cocos2d@@QAE@$$QAV01@@Z
??0CCDelayTime@cocos2d@@QAE@ABV01@@Z
??0CCDelayTime@cocos2d@@QAE@XZ
??0CCDictionary@cocos2d@@QAE@ABV01@@Z
??0CCDirectorDelegate@cocos2d@@QAE@$$QAV01@@Z
??0CCDirectorDelegate@cocos2d@@QAE@ABV01@@Z
??0CCDirectorDelegate@cocos2d@@QAE@XZ
??0CCDouble@cocos2d@@QAE@$$QAV01@@Z
??0CCDouble@cocos2d@@QAE@ABV01@@Z
??0CCDouble@cocos2d@@QAE@N@Z
??0CCDrawNode@cocos2d@@QAE@ABV01@@Z
??0CCEGLView@cocos2d@@QAE@$$QAV01@@Z
??0CCEGLView@cocos2d@@QAE@ABV01@@Z
??0CCEGLViewProtocol@cocos2d@@QAE@ABV01@@Z
??0CCEaseBackIn@cocos2d@@QAE@$$QAV01@@Z
??0CCEaseBackIn@cocos2d@@QAE@ABV01@@Z
??0CCEaseBackIn@cocos2d@@QAE@XZ
??0CCEaseBackInOut@cocos2d@@QAE@$$QAV01@@Z
??0CCEaseBackInOut@cocos2d@@QAE@ABV01@@Z
??0CCEaseBackInOut@cocos2d@@QAE@XZ
??0CCEaseBackOut@cocos2d@@QAE@$$QAV01@@Z
??0CCEaseBackOut@cocos2d@@QAE@ABV01@@Z
??0CCEaseBackOut@cocos2d@@QAE@XZ
??0CCEaseBounce@cocos2d@@QAE@$$QAV01@@Z
??0CCEaseBounce@cocos2d@@QAE@ABV01@@Z
??0CCEaseBounce@cocos2d@@QAE@XZ
??0CCEaseBounceIn@cocos2d@@QAE@$$QAV01@@Z
??0CCEaseBounceIn@cocos2d@@QAE@ABV01@@Z
??0CCEaseBounceIn@cocos2d@@QAE@XZ
??0CCEaseBounceInOut@cocos2d@@QAE@$$QAV01@@Z
??0CCEaseBounceInOut@cocos2d@@QAE@ABV01@@Z
??0CCEaseBounceInOut@cocos2d@@QAE@XZ
??0CCEaseBounceOut@cocos2d@@QAE@$$QAV01@@Z
??0CCEaseBounceOut@cocos2d@@QAE@ABV01@@Z
??0CCEaseBounceOut@cocos2d@@QAE@XZ
??0CCEaseElastic@cocos2d@@QAE@$$QAV01@@Z
??0CCEaseElastic@cocos2d@@QAE@ABV01@@Z
??0CCEaseElastic@cocos2d@@QAE@XZ
??0CCEaseElasticIn@cocos2d@@QAE@$$QAV01@@Z
??0CCEaseElasticIn@cocos2d@@QAE@ABV01@@Z
??0CCEaseElasticIn@cocos2d@@QAE@XZ
??0CCEaseElasticInOut@cocos2d@@QAE@$$QAV01@@Z
??0CCEaseElasticInOut@cocos2d@@QAE@ABV01@@Z
??0CCEaseElasticInOut@cocos2d@@QAE@XZ
??0CCEaseElasticOut@cocos2d@@QAE@$$QAV01@@Z
??0CCEaseElasticOut@cocos2d@@QAE@ABV01@@Z
??0CCEaseElasticOut@cocos2d@@QAE@XZ
??0CCEaseExponentialIn@cocos2d@@QAE@$$QAV01@@Z
??0CCEaseExponentialIn@cocos2d@@QAE@ABV01@@Z
??0CCEaseExponentialIn@cocos2d@@QAE@XZ
??0CCEaseExponentialInOut@cocos2d@@QAE@$$QAV01@@Z
??0CCEaseExponentialInOut@cocos2d@@QAE@ABV01@@Z
??0CCEaseExponentialInOut@cocos2d@@QAE@XZ
??0CCEaseExponentialOut@cocos2d@@QAE@$$QAV01@@Z
??0CCEaseExponentialOut@cocos2d@@QAE@ABV01@@Z
??0CCEaseExponentialOut@cocos2d@@QAE@XZ
??0CCEaseIn@cocos2d@@QAE@$$QAV01@@Z
??0CCEaseIn@cocos2d@@QAE@ABV01@@Z
??0CCEaseIn@cocos2d@@QAE@XZ
??0CCEaseInOut@cocos2d@@QAE@$$QAV01@@Z
??0CCEaseInOut@cocos2d@@QAE@ABV01@@Z
??0CCEaseInOut@cocos2d@@QAE@XZ
??0CCEaseOut@cocos2d@@QAE@$$QAV01@@Z
??0CCEaseOut@cocos2d@@QAE@ABV01@@Z
??0CCEaseOut@cocos2d@@QAE@XZ
??0CCEaseRateAction@cocos2d@@QAE@ABV01@@Z
??0CCEaseRateAction@cocos2d@@QAE@XZ
??0CCEaseSineIn@cocos2d@@QAE@$$QAV01@@Z
??0CCEaseSineIn@cocos2d@@QAE@ABV01@@Z
??0CCEaseSineIn@cocos2d@@QAE@XZ
??0CCEaseSineInOut@cocos2d@@QAE@$$QAV01@@Z
??0CCEaseSineInOut@cocos2d@@QAE@ABV01@@Z
??0CCEaseSineInOut@cocos2d@@QAE@XZ
??0CCEaseSineOut@cocos2d@@QAE@$$QAV01@@Z
??0CCEaseSineOut@cocos2d@@QAE@ABV01@@Z
??0CCEaseSineOut@cocos2d@@QAE@XZ
??0CCEvent@cocos2d@@QAE@$$QAV01@@Z
??0CCEvent@cocos2d@@QAE@ABV01@@Z
??0CCEvent@cocos2d@@QAE@XZ
??0CCFadeIn@cocos2d@@QAE@$$QAV01@@Z
??0CCFadeIn@cocos2d@@QAE@ABV01@@Z
??0CCFadeIn@cocos2d@@QAE@XZ
??0CCFadeOut@cocos2d@@QAE@$$QAV01@@Z
??0CCFadeOut@cocos2d@@QAE@ABV01@@Z
??0CCFadeOut@cocos2d@@QAE@XZ
??0CCFadeOutBLTiles@cocos2d@@QAE@$$QAV01@@Z
??0CCFadeOutBLTiles@cocos2d@@QAE@ABV01@@Z
??0CCFadeOutBLTiles@cocos2d@@QAE@XZ
??0CCFadeOutDownTiles@cocos2d@@QAE@$$QAV01@@Z
??0CCFadeOutDownTiles@cocos2d@@QAE@ABV01@@Z
??0CCFadeOutDownTiles@cocos2d@@QAE@XZ
??0CCFadeOutTRTiles@cocos2d@@QAE@$$QAV01@@Z
??0CCFadeOutTRTiles@cocos2d@@QAE@ABV01@@Z
??0CCFadeOutTRTiles@cocos2d@@QAE@XZ
??0CCFadeOutUpTiles@cocos2d@@QAE@$$QAV01@@Z
??0CCFadeOutUpTiles@cocos2d@@QAE@ABV01@@Z
??0CCFadeOutUpTiles@cocos2d@@QAE@XZ
??0CCFadeTo@cocos2d@@QAE@$$QAV01@@Z
??0CCFadeTo@cocos2d@@QAE@ABV01@@Z
??0CCFadeTo@cocos2d@@QAE@XZ
??0CCFileUtils@cocos2d@@QAE@ABV01@@Z
??0CCFiniteTimeAction@cocos2d@@QAE@ABV01@@Z
??0CCFiniteTimeAction@cocos2d@@QAE@XZ
??0CCFlipX3D@cocos2d@@QAE@$$QAV01@@Z
??0CCFlipX3D@cocos2d@@QAE@ABV01@@Z
??0CCFlipX3D@cocos2d@@QAE@XZ
??0CCFlipX@cocos2d@@QAE@ABV01@@Z
??0CCFlipX@cocos2d@@QAE@XZ
??0CCFlipY3D@cocos2d@@QAE@$$QAV01@@Z
??0CCFlipY3D@cocos2d@@QAE@ABV01@@Z
??0CCFlipY3D@cocos2d@@QAE@XZ
??0CCFlipY@cocos2d@@QAE@ABV01@@Z
??0CCFlipY@cocos2d@@QAE@XZ
??0CCFloat@cocos2d@@QAE@$$QAV01@@Z
??0CCFloat@cocos2d@@QAE@ABV01@@Z
??0CCFloat@cocos2d@@QAE@M@Z
??0CCFollow@cocos2d@@QAE@ABV01@@Z
??0CCFollow@cocos2d@@QAE@XZ
??0CCGLProgram@cocos2d@@QAE@ABV01@@Z
??0CCGrid3D@cocos2d@@QAE@ABV01@@Z
??0CCGrid3DAction@cocos2d@@QAE@$$QAV01@@Z
??0CCGrid3DAction@cocos2d@@QAE@ABV01@@Z
??0CCGrid3DAction@cocos2d@@QAE@XZ
??0CCGridAction@cocos2d@@QAE@$$QAV01@@Z
??0CCGridAction@cocos2d@@QAE@ABV01@@Z
??0CCGridAction@cocos2d@@QAE@XZ
??0CCGridBase@cocos2d@@QAE@ABV01@@Z
??0CCGridBase@cocos2d@@QAE@XZ
??0CCHide@cocos2d@@QAE@ABV01@@Z
??0CCHide@cocos2d@@QAE@XZ
??0CCIMEDelegate@cocos2d@@QAE@ABV01@@Z
??0CCInteger@cocos2d@@QAE@$$QAV01@@Z
??0CCInteger@cocos2d@@QAE@ABV01@@Z
??0CCInteger@cocos2d@@QAE@H@Z
??0CCJumpBy@cocos2d@@QAE@$$QAV01@@Z
??0CCJumpBy@cocos2d@@QAE@ABV01@@Z
??0CCJumpBy@cocos2d@@QAE@XZ
??0CCJumpTiles3D@cocos2d@@QAE@$$QAV01@@Z
??0CCJumpTiles3D@cocos2d@@QAE@ABV01@@Z
??0CCJumpTiles3D@cocos2d@@QAE@XZ
??0CCJumpTo@cocos2d@@QAE@$$QAV01@@Z
??0CCJumpTo@cocos2d@@QAE@ABV01@@Z
??0CCJumpTo@cocos2d@@QAE@XZ
??0CCKeypadDelegate@cocos2d@@QAE@$$QAV01@@Z
??0CCKeypadDelegate@cocos2d@@QAE@ABV01@@Z
??0CCKeypadDelegate@cocos2d@@QAE@XZ
??0CCKeypadDispatcher@cocos2d@@QAE@ABV01@@Z
??0CCKeypadHandler@cocos2d@@QAE@ABV01@@Z
??0CCKeypadHandler@cocos2d@@QAE@XZ
??0CCLabelAtlas@cocos2d@@QAE@ABV01@@Z
??0CCLabelAtlas@cocos2d@@QAE@XZ
??0CCLabelBMFont@cocos2d@@QAE@ABV01@@Z
??0CCLabelProtocol@cocos2d@@QAE@$$QAV01@@Z
??0CCLabelProtocol@cocos2d@@QAE@ABV01@@Z
??0CCLabelProtocol@cocos2d@@QAE@XZ
??0CCLabelTTF@cocos2d@@QAE@ABV01@@Z
??0CCLayer@cocos2d@@QAE@ABV01@@Z
??0CCLayerColor@cocos2d@@QAE@ABV01@@Z
??0CCLayerGradient@cocos2d@@QAE@$$QAV01@@Z
??0CCLayerGradient@cocos2d@@QAE@ABV01@@Z
??0CCLayerGradient@cocos2d@@QAE@XZ
??0CCLayerMultiplex@cocos2d@@QAE@ABV01@@Z
??0CCLayerRGBA@cocos2d@@QAE@ABV01@@Z
??0CCLens3D@cocos2d@@QAE@$$QAV01@@Z
??0CCLens3D@cocos2d@@QAE@ABV01@@Z
??0CCLens3D@cocos2d@@QAE@XZ
??0CCLiquid@cocos2d@@QAE@$$QAV01@@Z
??0CCLiquid@cocos2d@@QAE@ABV01@@Z
??0CCLiquid@cocos2d@@QAE@XZ
??0CCMenu@cocos2d@@QAE@ABV01@@Z
??0CCMenu@cocos2d@@QAE@XZ
??0CCMenuItem@cocos2d@@QAE@ABV01@@Z
??0CCMenuItem@cocos2d@@QAE@XZ
??0CCMenuItemAtlasFont@cocos2d@@QAE@ABV01@@Z
??0CCMenuItemAtlasFont@cocos2d@@QAE@XZ
??0CCMenuItemFont@cocos2d@@QAE@ABV01@@Z
??0CCMenuItemFont@cocos2d@@QAE@XZ
??0CCMenuItemImage@cocos2d@@QAE@ABV01@@Z
??0CCMenuItemImage@cocos2d@@QAE@XZ
??0CCMenuItemLabel@cocos2d@@QAE@ABV01@@Z
??0CCMenuItemLabel@cocos2d@@QAE@XZ
??0CCMenuItemSprite@cocos2d@@QAE@$$QAV01@@Z
??0CCMenuItemSprite@cocos2d@@QAE@ABV01@@Z
??0CCMenuItemSprite@cocos2d@@QAE@XZ
??0CCMenuItemToggle@cocos2d@@QAE@ABV01@@Z
??0CCMenuItemToggle@cocos2d@@QAE@XZ
??0CCMotionStreak@cocos2d@@QAE@ABV01@@Z
??0CCMoveBy@cocos2d@@QAE@$$QAV01@@Z
??0CCMoveBy@cocos2d@@QAE@ABV01@@Z
??0CCMoveBy@cocos2d@@QAE@XZ
??0CCMoveTo@cocos2d@@QAE@$$QAV01@@Z
??0CCMoveTo@cocos2d@@QAE@ABV01@@Z
??0CCMoveTo@cocos2d@@QAE@XZ
??0CCNodeRGBA@cocos2d@@QAE@ABV01@@Z
??0CCNotificationCenter@cocos2d@@QAE@ABV01@@Z
??0CCNotificationObserver@cocos2d@@QAE@ABV01@@Z
??0CCOrbitCamera@cocos2d@@QAE@ABV01@@Z
??0CCOrbitCamera@cocos2d@@QAE@XZ
??0CCPageTurn3D@cocos2d@@QAE@$$QAV01@@Z
??0CCPageTurn3D@cocos2d@@QAE@ABV01@@Z
??0CCPageTurn3D@cocos2d@@QAE@XZ
??0CCParallaxNode@cocos2d@@QAE@ABV01@@Z
??0CCParticleBatchNode@cocos2d@@QAE@ABV01@@Z
??0CCParticleExplosion@cocos2d@@QAE@ABV01@@Z
??0CCParticleExplosion@cocos2d@@QAE@XZ
??0CCParticleFire@cocos2d@@QAE@ABV01@@Z
??0CCParticleFire@cocos2d@@QAE@XZ
??0CCParticleFireworks@cocos2d@@QAE@ABV01@@Z
??0CCParticleFireworks@cocos2d@@QAE@XZ
??0CCParticleFlower@cocos2d@@QAE@ABV01@@Z
??0CCParticleFlower@cocos2d@@QAE@XZ
??0CCParticleGalaxy@cocos2d@@QAE@ABV01@@Z
??0CCParticleGalaxy@cocos2d@@QAE@XZ
??0CCParticleMeteor@cocos2d@@QAE@ABV01@@Z
??0CCParticleMeteor@cocos2d@@QAE@XZ
??0CCParticleRain@cocos2d@@QAE@ABV01@@Z
??0CCParticleRain@cocos2d@@QAE@XZ
??0CCParticleSmoke@cocos2d@@QAE@ABV01@@Z
??0CCParticleSmoke@cocos2d@@QAE@XZ
??0CCParticleSnow@cocos2d@@QAE@ABV01@@Z
??0CCParticleSnow@cocos2d@@QAE@XZ
??0CCParticleSpiral@cocos2d@@QAE@ABV01@@Z
??0CCParticleSpiral@cocos2d@@QAE@XZ
??0CCParticleSun@cocos2d@@QAE@ABV01@@Z
??0CCParticleSun@cocos2d@@QAE@XZ
??0CCParticleSystem@cocos2d@@QAE@ABV01@@Z
??0CCParticleSystemQuad@cocos2d@@QAE@ABV01@@Z
??0CCPlace@cocos2d@@QAE@ABV01@@Z
??0CCPlace@cocos2d@@QAE@XZ
??0CCPointArray@cocos2d@@QAE@ABV01@@Z
??0CCPrettyPrinter@cocos2d@@QAE@$$QAV01@@Z
??0CCPrettyPrinter@cocos2d@@QAE@ABV01@@Z
??0CCProfiler@cocos2d@@QAE@ABV01@@Z
??0CCProfiler@cocos2d@@QAE@XZ
??0CCProgressFromTo@cocos2d@@QAE@$$QAV01@@Z
??0CCProgressFromTo@cocos2d@@QAE@ABV01@@Z
??0CCProgressFromTo@cocos2d@@QAE@XZ
??0CCProgressTimer@cocos2d@@QAE@ABV01@@Z
??0CCProgressTo@cocos2d@@QAE@$$QAV01@@Z
??0CCProgressTo@cocos2d@@QAE@ABV01@@Z
??0CCProgressTo@cocos2d@@QAE@XZ
??0CCRGBAProtocol@cocos2d@@QAE@$$QAV01@@Z
??0CCRGBAProtocol@cocos2d@@QAE@ABV01@@Z
??0CCRGBAProtocol@cocos2d@@QAE@XZ
??0CCRemoveSelf@cocos2d@@QAE@ABV01@@Z
??0CCRemoveSelf@cocos2d@@QAE@XZ
??0CCRenderTexture@cocos2d@@QAE@ABV01@@Z
??0CCRepeat@cocos2d@@QAE@ABV01@@Z
??0CCRepeat@cocos2d@@QAE@XZ
??0CCRepeatForever@cocos2d@@QAE@ABV01@@Z
??0CCRepeatForever@cocos2d@@QAE@XZ
??0CCReuseGrid@cocos2d@@QAE@$$QAV01@@Z
??0CCReuseGrid@cocos2d@@QAE@ABV01@@Z
??0CCReuseGrid@cocos2d@@QAE@XZ
??0CCReverseTime@cocos2d@@QAE@ABV01@@Z
??0CCRipple3D@cocos2d@@QAE@$$QAV01@@Z
??0CCRipple3D@cocos2d@@QAE@ABV01@@Z
??0CCRipple3D@cocos2d@@QAE@XZ
??0CCRotateBy@cocos2d@@QAE@$$QAV01@@Z
??0CCRotateBy@cocos2d@@QAE@ABV01@@Z
??0CCRotateBy@cocos2d@@QAE@XZ
??0CCRotateTo@cocos2d@@QAE@$$QAV01@@Z
??0CCRotateTo@cocos2d@@QAE@ABV01@@Z
??0CCRotateTo@cocos2d@@QAE@XZ
??0CCSAXDelegator@cocos2d@@QAE@$$QAV01@@Z
??0CCSAXDelegator@cocos2d@@QAE@ABV01@@Z
??0CCSAXDelegator@cocos2d@@QAE@XZ
??0CCScaleBy@cocos2d@@QAE@$$QAV01@@Z
??0CCScaleBy@cocos2d@@QAE@ABV01@@Z
??0CCScaleBy@cocos2d@@QAE@XZ
??0CCScaleTo@cocos2d@@QAE@$$QAV01@@Z
??0CCScaleTo@cocos2d@@QAE@ABV01@@Z
??0CCScaleTo@cocos2d@@QAE@XZ
??0CCScheduler@cocos2d@@QAE@ABV01@@Z
??0CCScriptEngineManager@cocos2d@@AAE@XZ
??0CCScriptEngineProtocol@cocos2d@@QAE@ABV01@@Z
??0CCScriptEngineProtocol@cocos2d@@QAE@XZ
??0CCSequence@cocos2d@@QAE@ABV01@@Z
??0CCSequence@cocos2d@@QAE@XZ
??0CCShaderCache@cocos2d@@QAE@ABV01@@Z
??0CCShaky3D@cocos2d@@QAE@$$QAV01@@Z
??0CCShaky3D@cocos2d@@QAE@ABV01@@Z
??0CCShaky3D@cocos2d@@QAE@XZ
??0CCShakyTiles3D@cocos2d@@QAE@$$QAV01@@Z
??0CCShakyTiles3D@cocos2d@@QAE@ABV01@@Z
??0CCShakyTiles3D@cocos2d@@QAE@XZ
??0CCShatteredTiles3D@cocos2d@@QAE@$$QAV01@@Z
??0CCShatteredTiles3D@cocos2d@@QAE@ABV01@@Z
??0CCShatteredTiles3D@cocos2d@@QAE@XZ
??0CCShow@cocos2d@@QAE@ABV01@@Z
??0CCShow@cocos2d@@QAE@XZ
??0CCShuffleTiles@cocos2d@@QAE@ABV01@@Z
??0CCShuffleTiles@cocos2d@@QAE@XZ
??0CCSkewBy@cocos2d@@QAE@$$QAV01@@Z
??0CCSkewBy@cocos2d@@QAE@ABV01@@Z
??0CCSkewBy@cocos2d@@QAE@XZ
??0CCSkewTo@cocos2d@@QAE@$$QAV01@@Z
??0CCSkewTo@cocos2d@@QAE@ABV01@@Z
??0CCSpawn@cocos2d@@QAE@ABV01@@Z
??0CCSpawn@cocos2d@@QAE@XZ
??0CCSpeed@cocos2d@@QAE@ABV01@@Z
??0CCSpeed@cocos2d@@QAE@XZ
??0CCSplitCols@cocos2d@@QAE@$$QAV01@@Z
??0CCSplitCols@cocos2d@@QAE@ABV01@@Z
??0CCSplitCols@cocos2d@@QAE@XZ
??0CCSplitRows@cocos2d@@QAE@$$QAV01@@Z
??0CCSplitRows@cocos2d@@QAE@ABV01@@Z
??0CCSplitRows@cocos2d@@QAE@XZ
??0CCSprite@cocos2d@@QAE@ABV01@@Z
??0CCSpriteBatchNode@cocos2d@@QAE@ABV01@@Z
??0CCSpriteFrame@cocos2d@@QAE@ABV01@@Z
??0CCSpriteFrame@cocos2d@@QAE@XZ
??0CCSpriteFrameCache@cocos2d@@IAE@XZ
??0CCSpriteFrameCache@cocos2d@@QAE@ABV01@@Z
??0CCStandardTouchDelegate@cocos2d@@QAE@$$QAV01@@Z
??0CCStandardTouchDelegate@cocos2d@@QAE@ABV01@@Z
??0CCStandardTouchDelegate@cocos2d@@QAE@XZ
??0CCStandardTouchHandler@cocos2d@@QAE@$$QAV01@@Z
??0CCStandardTouchHandler@cocos2d@@QAE@ABV01@@Z
??0CCStandardTouchHandler@cocos2d@@QAE@XZ
??0CCStopGrid@cocos2d@@QAE@$$QAV01@@Z
??0CCStopGrid@cocos2d@@QAE@ABV01@@Z
??0CCStopGrid@cocos2d@@QAE@XZ
??0CCTMXLayer@cocos2d@@QAE@ABV01@@Z
??0CCTMXLayerInfo@cocos2d@@QAE@ABV01@@Z
??0CCTMXMapInfo@cocos2d@@QAE@ABV01@@Z
??0CCTMXObjectGroup@cocos2d@@QAE@ABV01@@Z
??0CCTMXTiledMap@cocos2d@@QAE@ABV01@@Z
??0CCTMXTilesetInfo@cocos2d@@QAE@ABV01@@Z
??0CCTargetedAction@cocos2d@@QAE@ABV01@@Z
??0CCTargetedTouchDelegate@cocos2d@@QAE@$$QAV01@@Z
??0CCTargetedTouchDelegate@cocos2d@@QAE@ABV01@@Z
??0CCTargetedTouchDelegate@cocos2d@@QAE@XZ
??0CCTargetedTouchHandler@cocos2d@@QAE@ABV01@@Z
??0CCTargetedTouchHandler@cocos2d@@QAE@XZ
??0CCTextFieldDelegate@cocos2d@@QAE@$$QAV01@@Z
??0CCTextFieldDelegate@cocos2d@@QAE@ABV01@@Z
??0CCTextFieldDelegate@cocos2d@@QAE@XZ
??0CCTextFieldTTF@cocos2d@@QAE@ABV01@@Z
??0CCTexture2D@cocos2d@@QAE@ABV01@@Z
??0CCTextureAtlas@cocos2d@@QAE@ABV01@@Z
??0CCTextureCache@cocos2d@@QAE@ABV01@@Z
??0CCTextureProtocol@cocos2d@@QAE@$$QAV01@@Z
??0CCTextureProtocol@cocos2d@@QAE@ABV01@@Z
??0CCTextureProtocol@cocos2d@@QAE@XZ
??0CCThread@cocos2d@@QAE@XZ
??0CCTileMapAtlas@cocos2d@@QAE@ABV01@@Z
??0CCTiledGrid3D@cocos2d@@QAE@ABV01@@Z
??0CCTiledGrid3DAction@cocos2d@@QAE@$$QAV01@@Z
??0CCTiledGrid3DAction@cocos2d@@QAE@ABV01@@Z
??0CCTiledGrid3DAction@cocos2d@@QAE@XZ
??0CCTimer@cocos2d@@QAE@$$QAV01@@Z
??0CCTimer@cocos2d@@QAE@ABV01@@Z
??0CCTintBy@cocos2d@@QAE@$$QAV01@@Z
??0CCTintBy@cocos2d@@QAE@ABV01@@Z
??0CCTintBy@cocos2d@@QAE@XZ
??0CCTintTo@cocos2d@@QAE@$$QAV01@@Z
??0CCTintTo@cocos2d@@QAE@ABV01@@Z
??0CCTintTo@cocos2d@@QAE@XZ
??0CCToggleVisibility@cocos2d@@QAE@ABV01@@Z
??0CCToggleVisibility@cocos2d@@QAE@XZ
??0CCTouch@cocos2d@@QAE@$$QAV01@@Z
??0CCTouch@cocos2d@@QAE@ABV01@@Z
??0CCTouch@cocos2d@@QAE@XZ
??0CCTouchDelegate@cocos2d@@QAE@ABV01@@Z
??0CCTouchDelegate@cocos2d@@QAE@XZ
??0CCTouchDispatcher@cocos2d@@QAE@ABV01@@Z
??0CCTouchDispatcher@cocos2d@@QAE@XZ
??0CCTouchHandler@cocos2d@@QAE@ABV01@@Z
??0CCTouchHandler@cocos2d@@QAE@XZ
??0CCTransitionCrossFade@cocos2d@@QAE@ABV01@@Z
??0CCTransitionEaseScene@cocos2d@@QAE@$$QAV01@@Z
??0CCTransitionEaseScene@cocos2d@@QAE@ABV01@@Z
??0CCTransitionEaseScene@cocos2d@@QAE@XZ
??0CCTransitionFade@cocos2d@@QAE@ABV01@@Z
??0CCTransitionFadeBL@cocos2d@@QAE@ABV01@@Z
??0CCTransitionFadeDown@cocos2d@@QAE@ABV01@@Z
??0CCTransitionFadeTR@cocos2d@@QAE@ABV01@@Z
??0CCTransitionFadeUp@cocos2d@@QAE@ABV01@@Z
??0CCTransitionFlipAngular@cocos2d@@QAE@ABV01@@Z
??0CCTransitionFlipX@cocos2d@@QAE@ABV01@@Z
??0CCTransitionFlipY@cocos2d@@QAE@ABV01@@Z
??0CCTransitionJumpZoom@cocos2d@@QAE@ABV01@@Z
??0CCTransitionMoveInB@cocos2d@@QAE@ABV01@@Z
??0CCTransitionMoveInL@cocos2d@@QAE@ABV01@@Z
??0CCTransitionMoveInR@cocos2d@@QAE@ABV01@@Z
??0CCTransitionMoveInT@cocos2d@@QAE@ABV01@@Z
??0CCTransitionPageTurn@cocos2d@@QAE@ABV01@@Z
??0CCTransitionProgress@cocos2d@@QAE@$$QAV01@@Z
??0CCTransitionProgress@cocos2d@@QAE@ABV01@@Z
??0CCTransitionProgressHorizontal@cocos2d@@QAE@$$QAV01@@Z
??0CCTransitionProgressHorizontal@cocos2d@@QAE@ABV01@@Z
??0CCTransitionProgressHorizontal@cocos2d@@QAE@XZ
??0CCTransitionProgressInOut@cocos2d@@QAE@$$QAV01@@Z
??0CCTransitionProgressInOut@cocos2d@@QAE@ABV01@@Z
??0CCTransitionProgressInOut@cocos2d@@QAE@XZ
??0CCTransitionProgressOutIn@cocos2d@@QAE@$$QAV01@@Z
??0CCTransitionProgressOutIn@cocos2d@@QAE@ABV01@@Z
??0CCTransitionProgressOutIn@cocos2d@@QAE@XZ
??0CCTransitionProgressRadialCCW@cocos2d@@QAE@$$QAV01@@Z
??0CCTransitionProgressRadialCCW@cocos2d@@QAE@ABV01@@Z
??0CCTransitionProgressRadialCCW@cocos2d@@QAE@XZ
??0CCTransitionProgressRadialCW@cocos2d@@QAE@$$QAV01@@Z
??0CCTransitionProgressRadialCW@cocos2d@@QAE@ABV01@@Z
??0CCTransitionProgressRadialCW@cocos2d@@QAE@XZ
??0CCTransitionProgressVertical@cocos2d@@QAE@$$QAV01@@Z
??0CCTransitionProgressVertical@cocos2d@@QAE@ABV01@@Z
??0CCTransitionProgressVertical@cocos2d@@QAE@XZ
??0CCTransitionRotoZoom@cocos2d@@QAE@ABV01@@Z
??0CCTransitionScene@cocos2d@@QAE@ABV01@@Z
??0CCTransitionSceneOriented@cocos2d@@QAE@ABV01@@Z
??0CCTransitionShrinkGrow@cocos2d@@QAE@ABV01@@Z
??0CCTransitionSlideInB@cocos2d@@QAE@ABV01@@Z
??0CCTransitionSlideInL@cocos2d@@QAE@ABV01@@Z
??0CCTransitionSlideInR@cocos2d@@QAE@ABV01@@Z

Sections

Size: 2.0MB - Virtual size: 4.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: 480KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 14KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 9B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 2.5MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 130KB - Virtual size: 243KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.exports
Size: 119KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.imports
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.themida
Size: - Virtual size: 8.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.boot
Size: 4.8MB - Virtual size: 4.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 16B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
GDHM_TASBOT_v32.92/msacm32.dll
.dll windows x86

ff2254b955841b66716ba336e93a1b35

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DisableThreadLibraryCalls
CreateThread
GetModuleFileNameA
LoadLibraryW
GetSystemDirectoryW
GetProcAddress
FindClose
CreateFileW
FormatMessageA
LocalFree
FindNextFileW
GetFileAttributesW
GetFileAttributesExW
SetFileInformationByHandle
GetTempPathW
AreFileApisANSI
CloseHandle
GetLastError
GetFileInformationByHandleEx
MultiByteToWideChar
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
FindFirstFileExW

msvcp140

?always_noconv@codecvt_base@std@@QBE_NXZ
??Bid@locale@std@@QAEIXZ
?_Xlength_error@std@@YAXPBD@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Xout_of_range@std@@YAXPBD@Z
?_Winerror_map@std@@YAHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?_Syserror_map@std@@YAPBDH@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ

vcruntime140

_except_handler4_common
memset
memcpy
_CxxThrowException
__std_terminate
__std_exception_copy
__std_exception_destroy
__CxxFrameHandler3
__std_type_info_destroy_list
memmove

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_invalid_parameter_noinfo_noreturn
terminate

api-ms-win-crt-stdio-l1-1-0

ungetc
setvbuf
fgetpos
fwrite
_fseeki64
fread
fgetc
fsetpos
fclose
fflush
_get_stream_buffer_pointers
fputc

api-ms-win-crt-heap-l1-1-0

malloc
_callnewh
free

api-ms-win-crt-string-l1-1-0

tolower

api-ms-win-crt-filesystem-l1-1-0

_lock_file
_unlock_file

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func

Exports

Exports

acmDriverAddA
acmDriverAddW
acmDriverClose
acmDriverDetailsA
acmDriverDetailsW
acmDriverEnum
acmDriverID
acmDriverMessage
acmDriverOpen
acmDriverPriority
acmDriverRemove
acmFilterChooseA
acmFilterChooseW
acmFilterDetailsA
acmFilterDetailsW
acmFilterEnumA
acmFilterEnumW
acmFilterTagDetailsA
acmFilterTagDetailsW
acmFilterTagEnumA
acmFilterTagEnumW
acmFormatChooseA
acmFormatChooseW
acmFormatDetailsA
acmFormatDetailsW
acmFormatEnumA
acmFormatEnumW
acmFormatSuggest
acmFormatTagDetailsA
acmFormatTagDetailsW
acmFormatTagEnumA
acmFormatTagEnumW
acmGetVersion
acmMetrics
acmStreamClose
acmStreamConvert
acmStreamMessage
acmStreamOpen
acmStreamPrepareHeader
acmStreamReset
acmStreamSize
acmStreamUnprepareHeader

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
GDHM_TASBOT_v32.92/tBot.dll
.dll windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

?get_current_frame@bot@@YAIXZ
?get_display_delta@bot@@YAMXZ
?get_display_fps@bot@@YAMXZ
?get_dual_fps@bot@@YA_NXZ
?get_enable_background_noise@bot@@YA_NXZ
?get_enable_click@bot@@YA_NXZ
?get_enable_pickup_macro@bot@@YA_NXZ
?get_extra_version@bot@@YAIXZ
?get_folder_name@bot@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?get_frame_advance@bot@@YA_NXZ
?get_frame_queue@bot@@YAIXZ
?get_full_save@bot@@YA_NXZ
?get_is_donator@bot@@YA_NXZ
?get_is_external@bot@@YA_NXZ
?get_is_premium@bot@@YA_NXZ
?get_physics_delta@bot@@YAMXZ
?get_physics_fps@bot@@YAMXZ
?get_pickup_macro_click@bot@@YAHXZ
?get_pickup_macro_player_1_id@bot@@YAHXZ
?get_pickup_macro_player_2_id@bot@@YAHXZ
?get_pickup_macro_release@bot@@YAHXZ
?get_practice_fix@bot@@YA_NXZ
?get_replay@bot@@YA_NXZ
?get_sequence_macro@bot@@YA_NXZ
?get_sequence_macro_index@bot@@YAIXZ
?get_sequence_macro_random@bot@@YA_NXZ
?get_show_timeline@bot@@YA_NXZ
?get_toggle_bot@bot@@YA_NXZ
?get_toggle_clean_macro@bot@@YA_NXZ
?get_toggle_frame_counter@bot@@YA_NXZ
?get_version@bot@@YAIXZ
?init_MinHook@bot@@YAXXZ
?init_hook@bot@@YAXXZ
?load@bot@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?load_click_config@bot@@YA_NXZ
?reset_all@bot@@YAXXZ
?save@bot@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?save_click_config@bot@@YA_NXZ
?set_current_frame@bot@@YAXI@Z
?set_display_fps@bot@@YAXM@Z
?set_dual_fps@bot@@YAX_N@Z
?set_enable_background_noise@bot@@YAX_N@Z
?set_enable_click@bot@@YAX_N@Z
?set_enable_pickup_macro@bot@@YAX_N@Z
?set_extra_version@bot@@YAXI@Z
?set_folder_name@bot@@YAXV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?set_frame_advance@bot@@YAX_N@Z
?set_frame_queue@bot@@YAXI@Z
?set_full_save@bot@@YAX_N@Z
?set_is_donator@bot@@YAX_N@Z
?set_is_external@bot@@YAX_N@Z
?set_is_premium@bot@@YAX_N@Z
?set_physics_fps@bot@@YAXM@Z
?set_pickup_macro_click@bot@@YAXH@Z
?set_pickup_macro_player_1_id@bot@@YAXH@Z
?set_pickup_macro_player_2_id@bot@@YAXH@Z
?set_pickup_macro_release@bot@@YAXH@Z
?set_practice_fix@bot@@YAX_N@Z
?set_replay@bot@@YAX_N@Z
?set_sequence_macro@bot@@YAX_N@Z
?set_sequence_macro_index@bot@@YAXI@Z
?set_sequence_macro_random@bot@@YAX_N@Z
?set_show_timeline@bot@@YAX_N@Z
?set_toggle_bot@bot@@YAX_N@Z
?set_toggle_clean_macro@bot@@YAX_N@Z
?set_toggle_frame_counter@bot@@YAX_N@Z
?set_version@bot@@YAXI@Z
?toggle_sequence_macro@bot@@YAX_N@Z

Sections

Size: 635KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: 108KB - Virtual size: 230KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 2KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 339KB - Virtual size: 652KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 35KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.exports
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.imports
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.themida
Size: - Virtual size: 4.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.boot
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 16B - Virtual size: 4KB

IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

06ddf77692562574239d617140687265

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcp140

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

Exports

Exports

Sections

.text Size: 61KB - Virtual size: 61KB

.rdata Size: 127KB - Virtual size: 126KB

.data Size: 1024B - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 3KB - Virtual size: 2KB

5633319c28d2514cae6bf0126c1da38d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcp140

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-locale-l1-1-0

Exports

Exports

Sections

.text Size: 25KB - Virtual size: 24KB

.rdata Size: 19KB - Virtual size: 19KB

.data Size: 1024B - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 2KB - Virtual size: 2KB

3cb670276d26003b3e60cc547afc3c3e

Headers

File Characteristics

Imports

msvcrt

wsock32

kernel32

Exports

Exports

Sections

.text Size: 48KB - Virtual size: 44KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 4KB - Virtual size: 1KB

.idata Size: 4KB - Virtual size: 2KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 2KB

823440f5ee6148cb480f6f1197128ee1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

msvcp140

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-locale-l1-1-0

Exports

Exports

.text
Size: 61KB - Virtual size: 61KB

.rdata
Size: 127KB - Virtual size: 126KB

.data
Size: 1024B - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 3KB - Virtual size: 2KB

.text
Size: 25KB - Virtual size: 24KB

.rdata
Size: 19KB - Virtual size: 19KB

.data
Size: 1024B - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 2KB - Virtual size: 2KB

.text
Size: 48KB - Virtual size: 44KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 4KB - Virtual size: 1KB

.idata
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 2KB

.text
Size: 82KB - Virtual size: 82KB

.rdata
Size: 14KB - Virtual size: 13KB

.data
Size: 1KB - Virtual size: 2KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 3KB - Virtual size: 2KB

.exports
Size: 119KB - Virtual size: 119KB

.imports
Size: 1KB - Virtual size: 4KB

.tls
Size: 512B - Virtual size: 4KB

.rsrc
Size: 1024B - Virtual size: 4KB

.themida
Size: - Virtual size: 8.0MB

.boot
Size: 4.8MB - Virtual size: 4.8MB

.reloc
Size: 16B - Virtual size: 4KB

.text
Size: 32KB - Virtual size: 32KB

.rdata
Size: 20KB - Virtual size: 20KB

.data
Size: 1024B - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 2KB - Virtual size: 2KB

.exports
Size: 3KB - Virtual size: 4KB

.imports
Size: 1024B - Virtual size: 4KB

.tls
Size: 512B - Virtual size: 4KB

.rsrc
Size: 512B - Virtual size: 4KB

.themida
Size: - Virtual size: 4.1MB

.boot
Size: 2.6MB - Virtual size: 2.6MB

.reloc
Size: 16B - Virtual size: 4KB