DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Overview
overview
7Static
static
722.vbs
windows7-x64
122.vbs
windows10-2004-x64
1222.vbs
windows7-x64
1222.vbs
windows10-2004-x64
122222.vbs
windows7-x64
122222.vbs
windows10-2004-x64
1444.vbs
windows7-x64
1444.vbs
windows10-2004-x64
15555.bms
windows7-x64
35555.bms
windows10-2004-x64
3BatchLZ77.exe
windows7-x64
1BatchLZ77.exe
windows10-2004-x64
1DarthNemesis.dll
windows7-x64
1DarthNemesis.dll
windows10-2004-x64
1Extractor.exe
windows7-x64
1Extractor.exe
windows10-2004-x64
1Extractor.ini
windows7-x64
1Extractor.ini
windows10-2004-x64
1ExtractorExt.dll
windows7-x64
1ExtractorExt.dll
windows10-2004-x64
1Help/Czech.chm
windows7-x64
1Help/Czech.chm
windows10-2004-x64
1Help/English.chm
windows7-x64
1Help/English.chm
windows10-2004-x64
1Help/French.chm
windows7-x64
1Help/French.chm
windows10-2004-x64
1Help/Slovak.chm
windows7-x64
1Help/Slovak.chm
windows10-2004-x64
1Languages/English.lng
windows7-x64
3Languages/English.lng
windows10-2004-x64
3Selections...es.fmt
windows7-x64
3Selections...es.fmt
windows10-2004-x64
3Behavioral task
behavioral1
Sample
22.vbs
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
22.vbs
Resource
win10v2004-20230703-en
Behavioral task
behavioral3
Sample
222.vbs
Resource
win7-20230712-en
Behavioral task
behavioral4
Sample
222.vbs
Resource
win10v2004-20230703-en
Behavioral task
behavioral5
Sample
22222.vbs
Resource
win7-20230712-en
Behavioral task
behavioral6
Sample
22222.vbs
Resource
win10v2004-20230703-en
Behavioral task
behavioral7
Sample
444.vbs
Resource
win7-20230712-en
Behavioral task
behavioral8
Sample
444.vbs
Resource
win10v2004-20230703-en
Behavioral task
behavioral9
Sample
5555.bms
Resource
win7-20230712-en
Behavioral task
behavioral10
Sample
5555.bms
Resource
win10v2004-20230703-en
Behavioral task
behavioral11
Sample
BatchLZ77.exe
Resource
win7-20230712-en
Behavioral task
behavioral12
Sample
BatchLZ77.exe
Resource
win10v2004-20230703-en
Behavioral task
behavioral13
Sample
DarthNemesis.dll
Resource
win7-20230712-en
Behavioral task
behavioral14
Sample
DarthNemesis.dll
Resource
win10v2004-20230703-en
Behavioral task
behavioral15
Sample
Extractor.exe
Resource
win7-20230712-en
Behavioral task
behavioral16
Sample
Extractor.exe
Resource
win10v2004-20230703-en
Behavioral task
behavioral17
Sample
Extractor.ini
Resource
win7-20230712-en
Behavioral task
behavioral18
Sample
Extractor.ini
Resource
win10v2004-20230703-en
Behavioral task
behavioral19
Sample
ExtractorExt.dll
Resource
win7-20230712-en
Behavioral task
behavioral20
Sample
ExtractorExt.dll
Resource
win10v2004-20230703-en
Behavioral task
behavioral21
Sample
Help/Czech.chm
Resource
win7-20230712-en
Behavioral task
behavioral22
Sample
Help/Czech.chm
Resource
win10v2004-20230703-en
Behavioral task
behavioral23
Sample
Help/English.chm
Resource
win7-20230712-en
Behavioral task
behavioral24
Sample
Help/English.chm
Resource
win10v2004-20230703-en
Behavioral task
behavioral25
Sample
Help/French.chm
Resource
win7-20230712-en
Behavioral task
behavioral26
Sample
Help/French.chm
Resource
win10v2004-20230703-en
Behavioral task
behavioral27
Sample
Help/Slovak.chm
Resource
win7-20230712-en
Behavioral task
behavioral28
Sample
Help/Slovak.chm
Resource
win10v2004-20230703-en
Behavioral task
behavioral29
Sample
Languages/English.lng
Resource
win7-20230712-en
Behavioral task
behavioral30
Sample
Languages/English.lng
Resource
win10v2004-20230703-en
Behavioral task
behavioral31
Sample
Selections/3DFiles.fmt
Resource
win7-20230712-en
Behavioral task
behavioral32
Sample
Selections/3DFiles.fmt
Resource
win10v2004-20230703-en
Target
extractor.zip
Size
1.1MB
MD5
b5a839e716a4f5d92261cdbacf4cfa4f
SHA1
eac6d34a87a3a6411e1dfe60dfd30555ac78718b
SHA256
3c2c9e49a102d40894fc3bbf3da6b6a0eaf61f4ab092fac626cc97e6ea467155
SHA512
7bb4f3ca635e8b37c95c700889621697e7be4baa0ec0682c695d7922199a12c4ff5d3f39eb2cd5c65fd4775485ba2af1b26368d49d0393ca9346fcb9ece429f2
SSDEEP
24576:3GD5QH6AbA2l1HdDei4wbEU+4SIqQd87KJcknz55XTwt:3OSI2l1BVEU+4jgHOK
Detects file using ACProtect software.
resource | yara_rule |
---|---|
static1/unpack001/ExtractorExt.dll | acprotect |
resource | yara_rule |
---|---|
static1/unpack001/revorb.exe | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/BatchLZ77.exe |
unpack001/DarthNemesis.dll |
unpack001/Extractor.exe |
unpack001/ExtractorExt.dll |
unpack001/revorb.exe |
unpack001/xbcompress.exe |
unpack001/xbdecompress.exe |
unpack001/xbdm.dll |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_CorExeMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
_controlfp
_onexit
__dllonexit
?terminate@@YAXXZ
??1type_info@@UAE@XZ
__security_error_handler
_amsg_exit
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__p___initenv
_cexit
_XcptFilter
_exit
_c_exit
exit
strncmp
memmove
fprintf
_wsplitpath
_snwprintf
__CxxFrameHandler
vsprintf
_vscprintf
_mbscmp
wcslen
atol
atoi
??3@YAXPAX@Z
??2@YAPAXI@Z
printf
memset
strncpy
strchr
_strnicmp
isdigit
fputc
sprintf
_splitpath
fputs
getenv
_vsnprintf
fgets
_iob
putchar
_purecall
_CxxThrowException
_except_handler3
free
LoadStringA
FindClose
CreateDirectoryA
RemoveDirectoryA
GetFileAttributesExA
HeapSize
HeapReAlloc
HeapDestroy
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
LocalFree
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
ExitProcess
GetModuleHandleA
CopyFileA
GetTickCount
DeleteFileA
SetFilePointer
WriteFile
SetEndOfFile
GetModuleFileNameW
GetUserDefaultLCID
LoadLibraryW
GetFileSize
ReadFile
GetTempPathA
GetSystemTimeAsFileTime
CreateFileA
OutputDebugStringA
GetModuleFileNameA
FindFirstFileA
LocalAlloc
FindNextFileA
SetFileAttributesA
SetFileTime
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
WideCharToMultiByte
GetLastError
SizeofResource
LockResource
LoadResource
FindResourceA
FindResourceExA
HeapAlloc
GetProcessHeap
HeapFree
CloseHandle
GetTempFileNameA
_DmSendFileA@8
_DmReceiveFileA@8
_DmIsSecurityEnabled@4
_DmUseSharedConnection@4
_DmCloseDir@4
_DmMkdir@4
_DmDeleteFile@8
_DmGetFileAttributes@8
_DmSetFileAttributes@8
_DmWalkDir@12
_DmTranslateErrorA@12
_DmSetXboxName@4
_DmSetXboxNameNoRegister@4
CryptGetHashParam
CryptDestroyHash
CryptHashData
CryptAcquireContextA
CryptCreateHash
CryptReleaseContext
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
_controlfp
_onexit
__dllonexit
?terminate@@YAXXZ
??1type_info@@UAE@XZ
__security_error_handler
_amsg_exit
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__p___initenv
_cexit
_XcptFilter
_exit
_c_exit
exit
strncmp
fprintf
_wsplitpath
_snwprintf
__CxxFrameHandler
vsprintf
_vscprintf
_mbscmp
wcslen
??3@YAXPAX@Z
??2@YAPAXI@Z
memset
strncpy
strchr
_strnicmp
isdigit
fputc
sprintf
_splitpath
fputs
getenv
printf
fgets
_iob
putchar
_purecall
_CxxThrowException
_except_handler3
free
LoadStringA
FindClose
CreateDirectoryA
DeleteFileA
RemoveDirectoryA
GetFileAttributesExA
HeapSize
HeapReAlloc
HeapDestroy
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
LocalFree
RaiseException
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
ExitProcess
GetModuleHandleA
CopyFileA
GetTickCount
CreateEventA
SetFilePointerEx
SetEndOfFile
SetFilePointer
GetModuleFileNameW
GetUserDefaultLCID
LoadLibraryW
GetTempFileNameA
EnterCriticalSection
GetModuleFileNameA
FindFirstFileA
LocalAlloc
FindNextFileA
SetFileAttributesA
SetFileTime
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
WideCharToMultiByte
GetLastError
SizeofResource
LockResource
LoadResource
FindResourceA
FindResourceExA
HeapAlloc
GetProcessHeap
HeapFree
CloseHandle
ReadFile
GetFileSize
CreateFileA
WriteFile
WaitForSingleObject
GetTempPathA
_DmSendFileA@8
_DmReceiveFileA@8
_DmIsSecurityEnabled@4
_DmUseSharedConnection@4
_DmCloseDir@4
_DmMkdir@4
_DmDeleteFile@8
_DmGetFileAttributes@8
_DmSetFileAttributes@8
_DmWalkDir@12
_DmTranslateErrorA@12
_DmSetXboxName@4
_DmSetXboxNameNoRegister@4
CryptDestroyHash
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptHashData
CryptAcquireContextA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
strchr
strtoul
strncmp
_strnicmp
_stricmp
isspace
printf
getenv
strrchr
_splitpath
time
_CIexp
_CIpow
__security_error_handler
??1type_info@@UAE@XZ
__CppXcptFilter
_adjust_fdiv
_initterm
_mbsicmp
_wgetenv
wcschr
_wcsicmp
_wsplitpath
_snwprintf
wcsncpy
wcsncmp
wcstoul
wcsrchr
vswprintf
_vscwprintf
wcscmp
wcslen
_snprintf
strncpy
memmove
sprintf
??_U@YAPAXI@Z
realloc
_purecall
??_V@YAXPAX@Z
malloc
??2@YAPAXI@Z
??0exception@@QAE@ABV0@@Z
??3@YAXPAX@Z
__CxxFrameHandler
??0exception@@QAE@XZ
??1exception@@UAE@XZ
wcscpy
_CxxThrowException
_except_handler3
_resetstkoflw
free
_strcmpi
sscanf
atoi
?terminate@@YAXXZ
__dllonexit
_onexit
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
UnRegisterTypeLi
SysAllocString
SysAllocStringLen
VariantClear
SysStringByteLen
SysAllocStringByteLen
SysStringLen
RegisterTypeLi
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantChangeType
LoadTypeLi
LoadRegTypeLi
SysFreeString
VarUI4FromStr
VariantCopy
CharNextA
GetDlgItem
wsprintfA
ShowWindow
IsDlgButtonChecked
CheckDlgButton
SetWindowTextA
SystemParametersInfoA
GetDC
ReleaseDC
wvsprintfA
MessageBoxA
GetWindowTextA
GetParent
PostMessageA
GetActiveWindow
DialogBoxParamA
GetWindowLongA
LoadIconA
EndDialog
SendMessageA
EnableWindow
SetWindowLongA
LoadStringW
LoadStringA
UnregisterClassA
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
CoInitializeEx
CoUninitialize
CoCreateGuid
StringFromGUID2
RegEnumKeyExA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegQueryInfoKeyA
RegQueryValueExA
RegOpenCurrentUser
RegEnumValueA
RegDeleteKeyA
RegOpenKeyExW
RegQueryValueExW
CancelWaitableTimer
ResetEvent
SetWaitableTimer
VirtualAlloc
VirtualFree
SetFilePointer
GetFileSizeEx
CreateFileA
DeleteFileA
ExitThread
GetQueuedCompletionStatus
GetSystemTimeAsFileTime
Sleep
GetTickCount
LocalAlloc
SetLastError
GetFileSize
ResumeThread
CreateThread
SetEvent
CreateEventA
CreateWaitableTimerA
VerifyVersionInfoA
VerSetConditionMask
WaitForMultipleObjects
CreateIoCompletionPort
GetCurrentThread
HeapSize
HeapReAlloc
HeapDestroy
OutputDebugStringA
FormatMessageA
SystemTimeToFileTime
LocalFileTimeToFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetCurrentThreadId
HeapAlloc
GetProcessHeap
HeapFree
GetCurrentProcess
FlushInstructionCache
GetProcAddress
CreateFileMappingA
MapViewOfFileEx
WaitForSingleObject
ReleaseMutex
CreateMutexA
GetModuleFileNameW
GetUserDefaultLCID
LoadLibraryW
lstrcatA
lstrcpyA
UnmapViewOfFile
GetFileInformationByHandle
FlushFileBuffers
SetEndOfFile
SetFilePointerEx
WriteFile
ReadFile
CreateFileW
LocalFree
GetComputerNameA
FindResourceExA
LockResource
GetModuleHandleA
LoadLibraryExA
FindResourceA
LoadResource
SizeofResource
FreeLibrary
LeaveCriticalSection
EnterCriticalSection
GetModuleFileNameA
IsDBCSLeadByte
CloseHandle
lstrcpynA
lstrcmpiA
lstrlenA
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
GetLastError
RaiseException
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
LoadLibraryA
GetSystemDirectoryA
SetErrorMode
LocalSize
TerminateThread
ExitProcess
QueryPerformanceCounter
GetCurrentProcessId
MapViewOfFile
GetDeviceCaps
DeleteObject
CreateFontIndirectA
ord155
ord25
SHGetDesktopFolder
ord2
SHOpenFolderAndSelectItems
ShellExecuteExW
PathFindExtensionA
PathAddBackslashW
PathAppendW
PropertySheetA
ImageList_Create
ImageList_ReplaceIcon
ntohs
WSAEventSelect
bind
getpeername
ntohl
getsockname
listen
socket
WSAStartup
closesocket
WSAGetLastError
recvfrom
select
sendto
htons
htonl
setsockopt
WSAGetOverlappedResult
inet_addr
connect
ioctlsocket
send
recv
__WSAFDIsSet
WSASend
accept
memset
VerQueryValueA
TransmitFile
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
DmAbortProfiling
DmAddUser
DmAutomationBindController
DmAutomationClearGamepadQueue
DmAutomationConnectController
DmAutomationDisconnectController
DmAutomationGetInputProcess
DmAutomationGetUserDefaultProfile
DmAutomationQueryGamepadQueue
DmAutomationQueueGamepadState
DmAutomationSetGamepadState
DmAutomationSetUserDefaultProfile
DmAutomationUnbindController
DmCloseCommittedMemory
DmCloseConnection
DmCloseCounters
DmCloseDir
DmCloseLoadedModules
DmCloseModuleSections
DmCloseNotificationSession
DmCloseUserList
DmConnectDebugger
DmContinueThread
DmCrashDump
DmDedicateConnection
DmDeleteFile
DmEnableGPUCounter
DmEnableSecurity
DmFindConsole
DmFindPdbSignature
DmGetAltAddress
DmGetAvailableXboxes
DmGetDbgHelpPath
DmGetDiskFreeSpace
DmGetDriveList
DmGetDumpMode
DmGetDumpSettings
DmGetEventDeferFlags
DmGetFileAttributes
DmGetMemory
DmGetMemoryChecksum
DmGetNameOfXbox
DmGetNetAddresses
DmGetNicStats
DmGetPid
DmGetProfilingStatus
DmGetSamplingProfilerInfo
DmGetSockInfo
DmGetSourceLineFromAddress
DmGetSymbolFromAddress
DmGetSystemInfo
DmGetSystemSymbolServerPathA
DmGetSystemSymbolServerPathW
DmGetSystemTime
DmGetThreadContext
DmGetThreadInfoEx
DmGetThreadList
DmGetUserAccess
DmGetVolumeFileAttributes
DmGetXbeInfo
DmGetXbeInfoEx
DmGetXboxName
DmGetXnKeyInfo
DmGetXnQosLookupInfo
DmGetXnSecAssocInfo
DmGo
DmHaltThread
DmIsBreakpoint
DmIsDebuggerPresent
DmIsFastCAPEnabled
DmIsSecurityEnabled
DmIsThreadStopped
DmLoadDebuggerExtension
DmLoadSymbolsForAllLoadedModules
DmLoadSymbolsForModule
DmLoadSymbolsForModuleEx
DmMakeSharedConnection
DmMkdir
DmNetCaptureStart
DmNetCaptureStop
DmNotify
DmOpenConnection
DmOpenNotificationSession
DmOpenSecureConnection
DmPgoSaveSnapshot
DmPgoSetAllocScale
DmPgoStartDataCollection
DmPgoStopDataCollection
DmQueryAllocationTypeName
DmQueryPerformanceCounter
DmReadFilePartial
DmReboot
DmRebootEx
DmReceiveBinary
DmReceiveFileA
DmReceiveFileW
DmReceiveSocketLine
DmReceiveStatusResponse
DmRegisterNotificationProcessor
DmRemoveBreakpoint
DmRemoveUser
DmRenameFile
DmResolveXboxName
DmResumeThread
DmScreenShot
DmSendBinary
DmSendCommand
DmSendFileA
DmSendFileW
DmSendVolumeFile
DmSetAdminPassword
DmSetBreakpoint
DmSetConfigValue
DmSetConnectionTimeout
DmSetDataBreakpoint
DmSetDumpMode
DmSetDumpSettings
DmSetEventDeferFlags
DmSetFileAttributes
DmSetFileSize
DmSetInitialBreakpoint
DmSetMemory
DmSetNetEmulationData
DmSetProfilingOptions
DmSetServerName
DmSetSymbolSearchPath
DmSetThreadContext
DmSetTitle
DmSetTitleEx
DmSetUserAccess
DmSetXboxName
DmSetXboxNameNoRegister
DmStartFileEventCapture
DmStartNetEmulation
DmStartProfiling
DmStartSamplingProfiler
DmStop
DmStopFileEventCapture
DmStopNetEmulation
DmStopOn
DmStopProfiling
DmStopSamplingProfiler
DmSuspendThread
DmTranslateErrorA
DmTranslateErrorW
DmTransmitFile
DmUnloadDebuggerExtension
DmUnloadSymbolsForModule
DmUseSharedConnection
DmWSAGetOverlappedResult
DmWalkCommittedMemory
DmWalkDir
DmWalkLoadedModules
DmWalkModuleSections
DmWalkPerformanceCounters
DmWalkUserList
DmWriteFilePartial
XcrashCloseFile
XcrashCloseLoadedModules
XcrashCloseModuleSections
XcrashGetMemory
XcrashGetThreadContext
XcrashGetThreadInfoEx
XcrashGetThreadList
XcrashIsThreadStopped
XcrashOpenFile
XcrashWalkLoadedModules
XcrashWalkModuleSections
_DmAbortProfiling@0
_DmAddUser@8
_DmAutomationBindController@8
_DmAutomationClearGamepadQueue@4
_DmAutomationConnectController@4
_DmAutomationDisconnectController@4
_DmAutomationGetInputProcess@8
_DmAutomationGetUserDefaultProfile@4
_DmAutomationQueryGamepadQueue@20
_DmAutomationQueueGamepadState@24
_DmAutomationSetGamepadState@8
_DmAutomationSetUserDefaultProfile@8
_DmAutomationUnbindController@4
_DmCloseCommittedMemory@4
_DmCloseConnection@4
_DmCloseCounters@4
_DmCloseDir@4
_DmCloseLoadedModules@4
_DmCloseModuleSections@4
_DmCloseNotificationSession@4
_DmCloseUserList@4
_DmConnectDebugger@4
_DmContinueThread@8
_DmCrashDump@0
_DmDedicateConnection@8
_DmDeleteFile@8
_DmEnableGPUCounter@4
_DmEnableSecurity@4
_DmFindConsole@8
_DmFindPdbSignature@8
_DmGetAltAddress@4
_DmGetAvailableXboxes@16
_DmGetDbgHelpPath@0
_DmGetDiskFreeSpace@16
_DmGetDriveList@8
_DmGetDumpMode@4
_DmGetDumpSettings@4
_DmGetEventDeferFlags@4
_DmGetFileAttributes@8
_DmGetMemory@16
_DmGetMemoryChecksum@20
_DmGetNameOfXbox@12
_DmGetNetAddresses@20
_DmGetNicStats@8
_DmGetPid@4
_DmGetProfilingStatus@0
_DmGetSamplingProfilerInfo@12
_DmGetSockInfo@8
_DmGetSourceLineFromAddress@16
_DmGetSymbolFromAddress@16
_DmGetSystemInfo@4
_DmGetSystemSymbolServerPathA@8
_DmGetSystemSymbolServerPathW@8
_DmGetSystemTime@4
_DmGetThreadContext@8
_DmGetThreadInfoEx@8
_DmGetThreadList@8
_DmGetUserAccess@8
_DmGetVolumeFileAttributes@12
_DmGetXbeInfo@8
_DmGetXbeInfoEx@12
_DmGetXboxName@8
_DmGetXnKeyInfo@8
_DmGetXnQosLookupInfo@8
_DmGetXnSecAssocInfo@8
_DmGo@0
_DmHaltThread@4
_DmIsBreakpoint@8
_DmIsDebuggerPresent@0
_DmIsFastCAPEnabled@0
_DmIsSecurityEnabled@4
_DmIsThreadStopped@8
_DmLoadDebuggerExtension@8
_DmLoadSymbolsForAllLoadedModules@0
_DmLoadSymbolsForModule@16
_DmLoadSymbolsForModuleEx@20
_DmMakeSharedConnection@4
_DmMkdir@4
_DmNetCaptureStart@16
_DmNetCaptureStop@4
_DmNotify@12
_DmOpenConnection@4
_DmOpenNotificationSession@8
_DmOpenSecureConnection@8
_DmPgoSaveSnapshot@12
_DmPgoSetAllocScale@8
_DmPgoStartDataCollection@4
_DmPgoStopDataCollection@4
_DmQueryAllocationTypeName@12
_DmQueryPerformanceCounter@12
_DmReadFilePartial@20
_DmReboot@4
_DmRebootEx@16
_DmReceiveBinary@16
_DmReceiveFileA@8
_DmReceiveFileW@8
_DmReceiveSocketLine@12
_DmReceiveStatusResponse@12
_DmRegisterNotificationProcessor@12
_DmRemoveBreakpoint@4
_DmRemoveUser@4
_DmRenameFile@8
_DmResolveXboxName@4
_DmResumeThread@4
_DmScreenShot@4
_DmSendBinary@12
_DmSendCommand@16
_DmSendFileA@8
_DmSendFileW@8
_DmSendVolumeFile@12
_DmSetAdminPassword@4
_DmSetBreakpoint@4
_DmSetConfigValue@16
_DmSetConnectionTimeout@8
_DmSetDataBreakpoint@12
_DmSetDumpMode@4
_DmSetDumpSettings@4
_DmSetEventDeferFlags@4
_DmSetFileAttributes@8
_DmSetFileSize@12
_DmSetInitialBreakpoint@0
_DmSetMemory@16
_DmSetNetEmulationData@4
_DmSetProfilingOptions@4
_DmSetServerName@4
_DmSetSymbolSearchPath@4
_DmSetThreadContext@8
_DmSetTitle@12
_DmSetTitleEx@16
_DmSetUserAccess@8
_DmSetXboxName@4
_DmSetXboxNameNoRegister@4
_DmStartFileEventCapture@0
_DmStartNetEmulation@4
_DmStartProfiling@8
_DmStartSamplingProfiler@12
_DmStop@0
_DmStopFileEventCapture@0
_DmStopNetEmulation@0
_DmStopOn@8
_DmStopProfiling@0
_DmStopSamplingProfiler@0
_DmSuspendThread@4
_DmTranslateErrorA@12
_DmTranslateErrorW@12
_DmTransmitFile@28
_DmUnloadDebuggerExtension@4
_DmUnloadSymbolsForModule@4
_DmUseSharedConnection@4
_DmWSAGetOverlappedResult@20
_DmWalkCommittedMemory@8
_DmWalkDir@12
_DmWalkLoadedModules@8
_DmWalkModuleSections@12
_DmWalkPerformanceCounters@8
_DmWalkUserList@8
_DmWriteFilePartial@20
_XcrashCloseFile@4
_XcrashCloseLoadedModules@4
_XcrashCloseModuleSections@4
_XcrashGetMemory@20
_XcrashGetThreadContext@12
_XcrashGetThreadInfoEx@12
_XcrashGetThreadList@12
_XcrashIsThreadStopped@16
_XcrashOpenFile@4
_XcrashWalkLoadedModules@12
_XcrashWalkModuleSections@16
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ