Lucas' Simpsons Hit & Run Mod Launcher 1[.]26[.]1[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

Lucas' Simpsons Hit & Run Mod Launcher 1.26.1.zip
Size

5.1MB
MD5

607b66774da6795c08ab27c7f86337e9
SHA1

a6959d64130c9193720aa2c6bd78c36ff9f31ff6
SHA256

76d8be60c508258c0844c23ccfcf59c19082834c5331dd3871974b53063cd888
SHA512

291af8138208b531ad854a335cb93b6a7b8d899ef77956b14920a7ea42412dd05138a48b71dc96a85425fc8152b0e070a7a414f472db2ff46d5d111742751dc7
SSDEEP

98304:Ftagl+gUz9QpapNwvDxgyMZYTCJQAV0lZ08+cjY9V/0bI2zPx+HQI/z:FFclMx7WJQhlZqHVh2Hyz

Score

3^/10

Malware Config

Signatures

Unsigned PE 6 IoCs

Checks for missing Authenticode signature.

resource
unpack001/DLLs/Hacks.dll
unpack001/DLLs/crypto-42.dll
unpack001/DLLs/curl.dll
unpack001/DLLs/ssl-44.dll
unpack001/DLLs/zlib.dll
unpack001/Lucas Simpsons Hit & Run Mod Launcher.exe

Files

Lucas' Simpsons Hit & Run Mod Launcher 1.26.1.zip
.zip
DLLs/GfeSDK.dll
.dll windows x86

6c18277c9f6ca9c5ac61a7b4070a4f57

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

14:78:1b:c8:62:e8:dc:50:3a:55:93:46:f5:dc:c5:18
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

28/07/2015, 00:00

Not After

26/07/2018, 23:59

Subject

CN=NVIDIA Corporation,O=NVIDIA Corporation,L=SANTA CLARA,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:c1:5a:f2:13:67:d0:75:8b:ed:dc:ca:11:86:42:de
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

13/07/2015, 00:00

Not After

13/07/2018, 23:59

Subject

CN=NVIDIA Corporation,OU=IT MIIS,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07
Certificate

Issuer

CN=Starfield Root Certificate Authority - G2,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

03/05/2011, 07:00

Not After

03/05/2031, 07:00

Subject

CN=Starfield Secure Certificate Authority - G2,OU=http://certs.starfieldtech.com/repository/,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

ef:95:c2:f4:80:e3:1b:93
Certificate

Issuer

CN=Starfield Secure Certificate Authority - G2,OU=http://certs.starfieldtech.com/repository/,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

14/11/2017, 07:00

Not After

14/11/2022, 07:00

Subject

CN=Starfield Timestamp Authority - G2,O=Starfield Technologies\, LLC,L=Scottsdale,ST=Arizona,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

52:83:6e:af:b7:ab:bb:21:f8:d1:d4:e4:ef:0c:1e:50:23:86:70:c8:34:eb:1e:46:32:72:c2:b0:fc:b3:d0:65
Signer

Actual PE Digest

52:83:6e:af:b7:ab:bb:21:f8:d1:d4:e4:ef:0c:1e:50:23:86:70:c8:34:eb:1e:46:32:72:c2:b0:fc:b3:d0:65

Digest Algorithm

sha256

PE Digest Matches

true

fe:88:81:f2:55:4f:69:6b:b8:ae:94:49:98:cf:9b:8a:6a:28:d5:56
Signer

Actual PE Digest

fe:88:81:f2:55:4f:69:6b:b8:ae:94:49:98:cf:9b:8a:6a:28:d5:56

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InitOnceExecuteOnce
GetTickCount64
FreeLibrary
GetProcAddress
LoadLibraryExW
LoadLibraryW
CompareFileTime
DeleteFileW
FindFirstFileW
FindNextFileW
VerSetConditionMask
ExpandEnvironmentStringsW
CreateFileW
GetFileAttributesW
GetFullPathNameW
OutputDebugStringW
CloseHandle
GetLastError
SetLastError
GetCurrentProcess
SetErrorMode
CreateProcessW
GetSystemDirectoryW
GetModuleHandleA
GetModuleHandleW
LocalAlloc
LocalFree
lstrcmpA
lstrcmpW
VerifyVersionInfoW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
Sleep
SetEndOfFile
WriteConsoleW
HeapSize
SetStdHandle
SetEnvironmentVariableW
SetEnvironmentVariableA
GetErrorMode
GetModuleFileNameW
CreateProcessA
GetCurrentProcessId
QueryPerformanceCounter
QueryPerformanceFrequency
TryEnterCriticalSection
GetCurrentThreadId
DuplicateHandle
WaitForSingleObjectEx
GetCurrentThread
GetExitCodeThread
GetNativeSystemInfo
EncodePointer
DecodePointer
RaiseException
FormatMessageW
WideCharToMultiByte
MultiByteToWideChar
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetTickCount
GetStringTypeW
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
SetEvent
ResetEvent
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
CreateTimerQueue
SignalObjectAndWait
SwitchToThread
CreateThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetThreadTimes
FreeLibraryAndExitThread
GetVersionExW
VirtualAlloc
VirtualProtect
VirtualFree
SetProcessAffinityMask
ReleaseSemaphore
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
WaitForMultipleObjectsEx
WaitForSingleObject
RtlUnwind
ExitProcess
GetModuleHandleExW
HeapAlloc
HeapFree
ExitThread
ResumeThread
HeapReAlloc
GetModuleFileNameA
ReadFile
GetConsoleMode
ReadConsoleW
WriteFile
GetConsoleCP
OutputDebugStringA
GetDateFormatW
GetTimeFormatW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStdHandle
GetFileType
FlushFileBuffers
GetACP
GetTimeZoneInformation
GetProcessHeap
SetConsoleCtrlHandler
SetFilePointerEx
FindClose
FindFirstFileExA
FindFirstFileExW
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
RtlCaptureStackBackTrace

user32

LoadStringW

shell32

SHCreateDirectoryExA
SHGetFolderPathW

advapi32

RegCreateKeyExW
RegCloseKey
RegGetValueW

Exports

Exports

NVGSDK_AttachLogListener
NVGSDK_Create
NVGSDK_EscapeUWPSandboxMessageBus
NVGSDK_GetUILanguageAsync
NVGSDK_Highlights_CloseGroupAsync
NVGSDK_Highlights_ConfigureAsync
NVGSDK_Highlights_GetNumberOfHighlightsAsync
NVGSDK_Highlights_GetUserSettingsAsync
NVGSDK_Highlights_OpenGroupAsync
NVGSDK_Highlights_OpenSummaryAsync
NVGSDK_Highlights_SetScreenshotHighlightAsync
NVGSDK_Highlights_SetVideoHighlightAsync
NVGSDK_Poll
NVGSDK_Release
NVGSDK_RequestPermissionsAsync
NVGSDK_SetListenerLogLevel
NVGSDK_SetLogLevel

Sections

.text
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 357KB - Virtual size: 357KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DLLs/Hacks.dll
.dll windows x86

6f17109c8e7efa89aabfc29d83187cf3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentThread
LockResource
CloseHandle
FreeConsole
LoadLibraryW
ResetEvent
LoadResource
SetStdHandle
GetProcAddress
GetModuleHandleW
FreeLibrary
QueryPerformanceCounter
AllocConsole
FormatMessageA
UnregisterWaitEx
QueryDepthSList
InterlockedPopEntrySList
ReleaseSemaphore
VirtualAlloc
GetThreadTimes
UnregisterWait
RegisterWaitForSingleObject
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
AttachConsole
SetEvent
GetLastError
CreateEventW
GetVersionExW
WaitForSingleObject
TerminateProcess
GetStdHandle
GetCurrentProcess
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
ExitProcess
IsBadWritePtr
lstrcmpiW
lstrcmpW
Sleep
VirtualQuery
SetWaitableTimer
CreateWaitableTimerW
SetThreadAffinityMask
ResumeThread
GetModuleHandleA
CreateThread
SetLastError
GetLocalTime
GetTickCount
ReadFile
WriteFile
CreateNamedPipeW
DisconnectNamedPipe
GetOverlappedResult
ConnectNamedPipe
CreateActCtxW
ActivateActCtx
WriteProcessMemory
VirtualFree
GetModuleHandleExW
GetModuleFileNameW
WaitForMultipleObjects
SetErrorMode
DeactivateActCtx
MultiByteToWideChar
GetExitCodeThread
TerminateThread
GetCurrentDirectoryW
VirtualAllocEx
CreateProcessW
CreateRemoteThread
VirtualFreeEx
SetConsoleTitleW
OpenThread
LoadLibraryExW
CreateDirectoryW
FindFirstFileW
SetConsoleCtrlHandler
VirtualProtect
EnterCriticalSection
FindNextFileW
RemoveDirectoryW
SetFileTime
LeaveCriticalSection
InitializeCriticalSection
SetEndOfFile
FindClose
CreateFileW
GetFileAttributesW
SetFileAttributesW
FileTimeToSystemTime
DeleteFileW
SetCurrentDirectoryW
SetFilePointerEx
DeleteCriticalSection
SystemTimeToFileTime
FlushInstructionCache
WideCharToMultiByte
GetFileTime
FlushFileBuffers
WriteConsoleW
WriteConsoleA
FindResourceW
EnumResourceNamesW
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
SetConsoleTitleA
GetConsoleWindow
RtlUnwind
RaiseException
InterlockedPushEntrySList
InterlockedFlushSList
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleFileNameA
GetFileType
GetACP
HeapAlloc
HeapFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetEnvironmentVariableW
GetProcessHeap
GetStringTypeW
DecodePointer
GetConsoleMode
ReadConsoleW
GetConsoleCP
GetExitCodeProcess
CreateProcessA
GetFileAttributesExW
HeapReAlloc
OutputDebugStringW
WaitForSingleObjectEx
HeapSize
SignalObjectAndWait
CreateTimerQueue
FreeLibraryAndExitThread
ExitThread
DuplicateHandle
TryEnterCriticalSection
LoadLibraryExA
GetSystemInfo
SizeofResource
GetTimeZoneInformation
GetTempPathW
MoveFileExW
WaitNamedPipeW
PeekNamedPipe
SwitchToThread
FormatMessageW
lstrcmpA
lstrcmpiA
lstrlenW
lstrlenA
GetFileSizeEx
QueryPerformanceFrequency
CreatePipe

user32

LoadCursorA
GetSystemMetrics
SetWindowTextA
DispatchMessageA
OpenClipboard
CloseClipboard
EmptyClipboard
LoadImageA
MessageBoxW
MessageBoxA
ClipCursor
SetClipboardData
RegisterClassExA
LoadImageW
ShowCursor
GetWindowRect
SetWindowPos
MonitorFromWindow
GetWindowPlacement
SetTimer
GetMonitorInfoW
SetWindowLongA
SetWindowPlacement
AdjustWindowRect
SetWindowLongW
KillTimer
EnumDisplaySettingsW
MapWindowPoints
DispatchMessageW
PeekMessageW
TranslateMessage
IsWindow
GetClientRect
GetWindowThreadProcessId
IsIconic
GetKeyNameTextW
PeekMessageA
GetWindowLongW
GetKeyState
MapVirtualKeyW

gdi32

GetStockObject

advapi32

RegQueryValueExW
RegDeleteValueW
RegOpenKeyExW
RegSetValueExW
RegCloseKey
RegCreateKeyExW

ole32

CoCreateInstance

winmm

PlaySoundW

psapi

GetProcessMemoryInfo
GetModuleInformation

shlwapi

PathFileExistsW
PathIsDirectoryW

Exports

Exports

BeginStartingGame
HackEntryPoint_3DPhoneBoothPreviewSupport
HackEntryPoint_AdditionalScriptFunctionality
HackEntryPoint_AnalogueMouseInput
HackEntryPoint_Antialiasing
HackEntryPoint_AspectRatioSupport
HackEntryPoint_Borderless
HackEntryPoint_BugFixes
HackEntryPoint_CancellableInitialWalk
HackEntryPoint_CheatKeys
HackEntryPoint_Console
HackEntryPoint_CustomAnimationSetSupport
HackEntryPoint_CustomAudioFormatSupport
HackEntryPoint_CustomAudioSupport
HackEntryPoint_CustomBonusMissionSupport
HackEntryPoint_CustomCarSupport
HackEntryPoint_CustomCharacterSupport
HackEntryPoint_CustomControllerSupport
HackEntryPoint_CustomDialogueCharacterCodes
HackEntryPoint_CustomFiles
HackEntryPoint_CustomHeadlights
HackEntryPoint_CustomInteriorSupport
HackEntryPoint_CustomLicenseScreenTime
HackEntryPoint_CustomLimits
HackEntryPoint_CustomMainMenuItems
HackEntryPoint_CustomMissionSkipFailCounts
HackEntryPoint_CustomRoadBehaviour
HackEntryPoint_CustomSaveData
HackEntryPoint_CustomShopSupport
HackEntryPoint_CustomSkinPreviewAnimations
HackEntryPoint_CustomStatsTotals
HackEntryPoint_CustomText
HackEntryPoint_CustomTrafficSupport
HackEntryPoint_CustomTriggerActions
HackEntryPoint_CustomVertexShaderSupport
HackEntryPoint_DebugChecks
HackEntryPoint_DebugCommunication
HackEntryPoint_DebugHashes
HackEntryPoint_DebugTest
HackEntryPoint_DebugText
HackEntryPoint_Direct3D9
HackEntryPoint_DiscordRichPresence
HackEntryPoint_DynamicTreeNodeEntityLimits
HackEntryPoint_FLACSupport
HackEntryPoint_FileSystemRCFs
HackEntryPoint_FlippableCars
HackEntryPoint_ForceMissionSelectLevelReload
HackEntryPoint_FrameLimiter
HackEntryPoint_FreeRoam
HackEntryPoint_HUDMapIgnorePlayerHeight
HackEntryPoint_HoverCarRefraction
HackEntryPoint_IncreasedRewardLimits
HackEntryPoint_IncreasedVideoResolutionSupport
HackEntryPoint_InteriorJumping
HackEntryPoint_InteriorKicking
HackEntryPoint_InteriorSprinting
HackEntryPoint_InterprocessCommunication
HackEntryPoint_LensFlare
HackEntryPoint_Letterbox
HackEntryPoint_LoadManagerThreadCoordination
HackEntryPoint_LuaSupport
HackEntryPoint_MirrorMode
HackEntryPoint_ModernComputerSupport
HackEntryPoint_ModernResolutionSupport
HackEntryPoint_MultipleInstanceSupport
HackEntryPoint_NVIDIAHighlights
HackEntryPoint_NoAudio
HackEntryPoint_NoAutomaticSavedGameLoad
HackEntryPoint_NoBonusGame
HackEntryPoint_NoBustedHitAndRunMeterReset
HackEntryPoint_NoCheats
HackEntryPoint_NoCursorUntilMouseMove
HackEntryPoint_NoFastCarReset
HackEntryPoint_NoGoToObjectiveCameraFocus
HackEntryPoint_NoHitAndRunMusic
HackEntryPoint_NoInactiveDynamicObjectCollisions
HackEntryPoint_NoIntroductionMovies
HackEntryPoint_NoJumpLimit
HackEntryPoint_NoMainMenuCameraAnimations
HackEntryPoint_NoMissionStartCameras
HackEntryPoint_NoMuteOnDefocus
HackEntryPoint_NoNeitherRoadArrowProcessing
HackEntryPoint_NoPauseOnDefocus
HackEntryPoint_NoRenderer
HackEntryPoint_NoSavedGames
HackEntryPoint_NoSuppressedDrivers
HackEntryPoint_NoTimeLimits
HackEntryPoint_NoWrenches
HackEntryPoint_OggVorbisSupport
HackEntryPoint_OneTapPlayerCarDeath
HackEntryPoint_OrbitCamera
HackEntryPoint_OverrideShaderParameters
HackEntryPoint_RebindableMenuInputs
HackEntryPoint_RefractionShaderSupport
HackEntryPoint_ReplayableBonusMissions
HackEntryPoint_ResizableWindow
HackEntryPoint_RoadNames
HackEntryPoint_Screenshots
HackEntryPoint_SkipMainMenu
HackEntryPoint_SkippableFMVs
HackEntryPoint_SkippableStartCameras
HackEntryPoint_SphereMaps
HackEntryPoint_StartingCoins
HackEntryPoint_TextBinarySearch
HackEntryPoint_UnlockAllMissions
HackEntryPoint_UnlockAllOutfits
HackEntryPoint_UnlockAllVehicles
HackEntryPoint_UnlockBonusGame
HackEntryPoint_VideoTextureSupport
HackEntryPoint_XInput
WaitForGameToStart

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 605KB - Virtual size: 605KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 57KB - Virtual size: 10.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 216KB - Virtual size: 215KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 142KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DLLs/cacert.pem
DLLs/crypto-42.dll
.dll windows x86

94f5f87a1bb82cd9a66c95e6652a473a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

ioctlsocket
closesocket
send
connect
recv
getsockopt
setsockopt
recvfrom
sendto
htonl
htons
shutdown
WSAStartup
WSAGetLastError
accept
bind
gethostbyname
listen
getaddrinfo
socket
ntohs
freeaddrinfo
getnameinfo

kernel32

HeapSize
GetTimeZoneInformation
SetEndOfFile
WriteConsoleW
GetProcessHeap
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileA
FormatMessageA
VirtualFree
GetCurrentProcess
InterlockedCompareExchange
VirtualAlloc
TerminateProcess
CreateMutexA
WaitForSingleObject
ReleaseMutex
CloseHandle
GetSystemInfo
Sleep
MoveFileExA
SystemTimeToFileTime
GetSystemTime
GetStdHandle
SetConsoleMode
GetConsoleMode
GetFileType
FindFirstFileExA
DecodePointer
TlsGetValue
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
RaiseException
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ReadFile
ExitProcess
GetModuleHandleExW
CreateFileW
GetDriveTypeW
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
SetConsoleCtrlHandler
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
ReadConsoleW
SetFilePointerEx
WriteFile
GetConsoleCP
HeapFree
HeapAlloc
HeapReAlloc
GetACP
GetStringTypeW
CompareStringW
LCMapStringW
FlushFileBuffers
GetCurrentDirectoryW
GetFullPathNameW
SetStdHandle
FindClose

advapi32

CryptGenRandom
CryptReleaseContext
CryptAcquireContextA

Exports

Exports

ACCESS_DESCRIPTION_free
ACCESS_DESCRIPTION_it
ACCESS_DESCRIPTION_new
AES_cbc_encrypt
AES_cfb128_encrypt
AES_cfb1_encrypt
AES_cfb8_encrypt
AES_ctr128_encrypt
AES_decrypt
AES_ecb_encrypt
AES_encrypt
AES_ige_encrypt
AES_ofb128_encrypt
AES_options
AES_set_decrypt_key
AES_set_encrypt_key
AES_unwrap_key
AES_wrap_key
ASN1_ANY_it
ASN1_BIT_STRING_check
ASN1_BIT_STRING_free
ASN1_BIT_STRING_get_bit
ASN1_BIT_STRING_it
ASN1_BIT_STRING_name_print
ASN1_BIT_STRING_new
ASN1_BIT_STRING_num_asc
ASN1_BIT_STRING_set
ASN1_BIT_STRING_set_asc
ASN1_BIT_STRING_set_bit
ASN1_BMPSTRING_free
ASN1_BMPSTRING_it
ASN1_BMPSTRING_new
ASN1_BOOLEAN_it
ASN1_ENUMERATED_free
ASN1_ENUMERATED_get
ASN1_ENUMERATED_it
ASN1_ENUMERATED_new
ASN1_ENUMERATED_set
ASN1_ENUMERATED_to_BN
ASN1_FBOOLEAN_it
ASN1_GENERALIZEDTIME_adj
ASN1_GENERALIZEDTIME_check
ASN1_GENERALIZEDTIME_free
ASN1_GENERALIZEDTIME_it
ASN1_GENERALIZEDTIME_new
ASN1_GENERALIZEDTIME_print
ASN1_GENERALIZEDTIME_set
ASN1_GENERALIZEDTIME_set_string
ASN1_GENERALSTRING_free
ASN1_GENERALSTRING_it
ASN1_GENERALSTRING_new
ASN1_IA5STRING_free
ASN1_IA5STRING_it
ASN1_IA5STRING_new
ASN1_INTEGER_cmp
ASN1_INTEGER_dup
ASN1_INTEGER_free
ASN1_INTEGER_get
ASN1_INTEGER_it
ASN1_INTEGER_new
ASN1_INTEGER_set
ASN1_INTEGER_to_BN
ASN1_NULL_free
ASN1_NULL_it
ASN1_NULL_new
ASN1_OBJECT_create
ASN1_OBJECT_free
ASN1_OBJECT_it
ASN1_OBJECT_new
ASN1_OCTET_STRING_NDEF_it
ASN1_OCTET_STRING_cmp
ASN1_OCTET_STRING_dup
ASN1_OCTET_STRING_free
ASN1_OCTET_STRING_it
ASN1_OCTET_STRING_new
ASN1_OCTET_STRING_set
ASN1_PCTX_free
ASN1_PCTX_get_cert_flags
ASN1_PCTX_get_flags
ASN1_PCTX_get_nm_flags
ASN1_PCTX_get_oid_flags
ASN1_PCTX_get_str_flags
ASN1_PCTX_new
ASN1_PCTX_set_cert_flags
ASN1_PCTX_set_flags
ASN1_PCTX_set_nm_flags
ASN1_PCTX_set_oid_flags
ASN1_PCTX_set_str_flags
ASN1_PRINTABLESTRING_free
ASN1_PRINTABLESTRING_it
ASN1_PRINTABLESTRING_new
ASN1_PRINTABLE_free
ASN1_PRINTABLE_it
ASN1_PRINTABLE_new
ASN1_PRINTABLE_type
ASN1_SEQUENCE_ANY_it
ASN1_SEQUENCE_it
ASN1_SET_ANY_it
ASN1_STRING_TABLE_add
ASN1_STRING_TABLE_cleanup
ASN1_STRING_TABLE_get
ASN1_STRING_cmp
ASN1_STRING_copy
ASN1_STRING_data
ASN1_STRING_dup
ASN1_STRING_free
ASN1_STRING_get_default_mask
ASN1_STRING_length
ASN1_STRING_length_set
ASN1_STRING_new
ASN1_STRING_print
ASN1_STRING_print_ex
ASN1_STRING_print_ex_fp
ASN1_STRING_set
ASN1_STRING_set0
ASN1_STRING_set_by_NID
ASN1_STRING_set_default_mask
ASN1_STRING_set_default_mask_asc
ASN1_STRING_to_UTF8
ASN1_STRING_type
ASN1_STRING_type_new
ASN1_T61STRING_free
ASN1_T61STRING_it
ASN1_T61STRING_new
ASN1_TBOOLEAN_it
ASN1_TIME_adj
ASN1_TIME_check
ASN1_TIME_free
ASN1_TIME_it
ASN1_TIME_new
ASN1_TIME_print
ASN1_TIME_set
ASN1_TIME_set_string
ASN1_TIME_set_tm
ASN1_TIME_to_generalizedtime
ASN1_TYPE_cmp
ASN1_TYPE_free
ASN1_TYPE_get
ASN1_TYPE_get_int_octetstring
ASN1_TYPE_get_octetstring
ASN1_TYPE_new
ASN1_TYPE_set
ASN1_TYPE_set1
ASN1_TYPE_set_int_octetstring
ASN1_TYPE_set_octetstring
ASN1_UNIVERSALSTRING_free
ASN1_UNIVERSALSTRING_it
ASN1_UNIVERSALSTRING_new
ASN1_UNIVERSALSTRING_to_string
ASN1_UTCTIME_adj
ASN1_UTCTIME_check
ASN1_UTCTIME_cmp_time_t
ASN1_UTCTIME_free
ASN1_UTCTIME_it
ASN1_UTCTIME_new
ASN1_UTCTIME_print
ASN1_UTCTIME_set
ASN1_UTCTIME_set_string
ASN1_UTF8STRING_free
ASN1_UTF8STRING_it
ASN1_UTF8STRING_new
ASN1_VISIBLESTRING_free
ASN1_VISIBLESTRING_it
ASN1_VISIBLESTRING_new
ASN1_add_oid_module
ASN1_bn_print
ASN1_check_infinite_end
ASN1_const_check_infinite_end
ASN1_d2i_bio
ASN1_d2i_fp
ASN1_dup
ASN1_generate_nconf
ASN1_generate_v3
ASN1_get_object
ASN1_i2d_bio
ASN1_i2d_fp
ASN1_item_d2i
ASN1_item_d2i_bio
ASN1_item_d2i_fp
ASN1_item_digest
ASN1_item_dup
ASN1_item_ex_d2i
ASN1_item_ex_free
ASN1_item_ex_i2d
ASN1_item_ex_new
ASN1_item_free
ASN1_item_i2d
ASN1_item_i2d_bio
ASN1_item_i2d_fp
ASN1_item_ndef_i2d
ASN1_item_new
ASN1_item_pack
ASN1_item_print
ASN1_item_sign
ASN1_item_sign_ctx
ASN1_item_unpack
ASN1_item_verify
ASN1_mbstring_copy
ASN1_mbstring_ncopy
ASN1_object_size
ASN1_pack_string
ASN1_parse
ASN1_parse_dump
ASN1_primitive_free
ASN1_primitive_new
ASN1_put_eoc
ASN1_put_object
ASN1_seq_pack
ASN1_seq_unpack
ASN1_tag2bit
ASN1_tag2str
ASN1_template_d2i
ASN1_template_free
ASN1_template_i2d
ASN1_template_new
ASN1_time_parse
ASN1_time_tm_clamp_notafter
ASN1_time_tm_cmp
ASN1_unpack_string
AUTHORITY_INFO_ACCESS_free
AUTHORITY_INFO_ACCESS_it
AUTHORITY_INFO_ACCESS_new
AUTHORITY_KEYID_free
AUTHORITY_KEYID_it
AUTHORITY_KEYID_new
BASIC_CONSTRAINTS_free
BASIC_CONSTRAINTS_it
BASIC_CONSTRAINTS_new
BF_cbc_encrypt
BF_cfb64_encrypt
BF_decrypt
BF_ecb_encrypt
BF_encrypt
BF_ofb64_encrypt
BF_options
BF_set_key
BIGNUM_it
BIO_CONNECT_free
BIO_CONNECT_new
BIO_accept
BIO_asn1_get_prefix
BIO_asn1_get_suffix
BIO_asn1_set_prefix
BIO_asn1_set_suffix
BIO_callback_ctrl
BIO_clear_flags
BIO_copy_next_retry
BIO_ctrl
BIO_ctrl_get_read_request
BIO_ctrl_get_write_guarantee
BIO_ctrl_pending
BIO_ctrl_reset_read_request
BIO_ctrl_wpending
BIO_debug_callback
BIO_dgram_non_fatal_error
BIO_dump
BIO_dump_cb
BIO_dump_fp
BIO_dump_indent
BIO_dump_indent_cb
BIO_dump_indent_fp
BIO_dup_chain
BIO_f_asn1
BIO_f_base64
BIO_f_buffer
BIO_f_cipher
BIO_f_md
BIO_f_nbio_test
BIO_f_null
BIO_fd_non_fatal_error
BIO_fd_should_retry
BIO_find_type
BIO_free
BIO_free_all
BIO_get_accept_socket
BIO_get_callback
BIO_get_callback_arg
BIO_get_ex_data
BIO_get_ex_new_index
BIO_get_host_ip
BIO_get_port
BIO_get_retry_BIO
BIO_get_retry_reason
BIO_gethostbyname
BIO_gets
BIO_indent
BIO_int_ctrl
BIO_method_name
BIO_method_type
BIO_new
BIO_new_NDEF
BIO_new_PKCS7
BIO_new_accept
BIO_new_bio_pair
BIO_new_connect
BIO_new_dgram
BIO_new_fd
BIO_new_file
BIO_new_fp
BIO_new_mem_buf
BIO_new_socket
BIO_next
BIO_nread
BIO_nread0
BIO_number_read
BIO_number_written
BIO_nwrite
BIO_nwrite0
BIO_pop
BIO_printf
BIO_ptr_ctrl
BIO_push
BIO_puts
BIO_read
BIO_s_accept
BIO_s_bio
BIO_s_connect
BIO_s_datagram
BIO_s_fd
BIO_s_file
BIO_s_mem
BIO_s_null
BIO_s_socket
BIO_set
BIO_set_callback
BIO_set_callback_arg
BIO_set_cipher
BIO_set_ex_data
BIO_set_flags
BIO_set_tcp_ndelay
BIO_snprintf
BIO_sock_cleanup
BIO_sock_error
BIO_sock_init
BIO_sock_non_fatal_error
BIO_sock_should_retry
BIO_socket_ioctl
BIO_socket_nbio
BIO_test_flags
BIO_vfree
BIO_vprintf
BIO_vsnprintf
BIO_write
BN_BLINDING_convert
BN_BLINDING_convert_ex
BN_BLINDING_create_param
BN_BLINDING_free
BN_BLINDING_get_flags
BN_BLINDING_get_thread_id
BN_BLINDING_invert
BN_BLINDING_invert_ex
BN_BLINDING_new
BN_BLINDING_set_flags
BN_BLINDING_set_thread_id
BN_BLINDING_thread_id
BN_BLINDING_update
BN_CTX_end
BN_CTX_free
BN_CTX_get
BN_CTX_init
BN_CTX_new
BN_CTX_start
BN_GENCB_call
BN_GF2m_add
BN_GF2m_arr2poly
BN_GF2m_mod
BN_GF2m_mod_arr
BN_GF2m_mod_div
BN_GF2m_mod_div_arr
BN_GF2m_mod_exp
BN_GF2m_mod_exp_arr
BN_GF2m_mod_inv
BN_GF2m_mod_inv_arr
BN_GF2m_mod_mul
BN_GF2m_mod_mul_arr
BN_GF2m_mod_solve_quad
BN_GF2m_mod_solve_quad_arr
BN_GF2m_mod_sqr
BN_GF2m_mod_sqr_arr
BN_GF2m_mod_sqrt
BN_GF2m_mod_sqrt_arr
BN_GF2m_poly2arr
BN_MONT_CTX_copy
BN_MONT_CTX_free
BN_MONT_CTX_init
BN_MONT_CTX_new
BN_MONT_CTX_set
BN_MONT_CTX_set_locked
BN_RECP_CTX_free
BN_RECP_CTX_init
BN_RECP_CTX_new
BN_RECP_CTX_set
BN_X931_derive_prime_ex
BN_X931_generate_Xpq
BN_X931_generate_prime_ex
BN_add
BN_add_word
BN_asc2bn
BN_bin2bn
BN_bn2bin
BN_bn2dec
BN_bn2hex
BN_bn2mpi
BN_clear
BN_clear_bit
BN_clear_free
BN_cmp
BN_consttime_swap
BN_copy
BN_dec2bn
BN_div
BN_div_recp
BN_div_word
BN_dup
BN_exp
BN_free
BN_from_montgomery
BN_gcd
BN_generate_prime
BN_generate_prime_ex
BN_get0_nist_prime_192
BN_get0_nist_prime_224
BN_get0_nist_prime_256
BN_get0_nist_prime_384
BN_get0_nist_prime_521
BN_get_params
BN_get_word
BN_hex2bn
BN_init
BN_is_bit_set
BN_is_prime
BN_is_prime_ex
BN_is_prime_fasttest
BN_is_prime_fasttest_ex
BN_kronecker
BN_lshift
BN_lshift1
BN_mask_bits
BN_mod_add
BN_mod_add_quick
BN_mod_exp
BN_mod_exp2_mont
BN_mod_exp_mont
BN_mod_exp_mont_consttime
BN_mod_exp_mont_word
BN_mod_exp_recp
BN_mod_exp_simple
BN_mod_inverse
BN_mod_lshift
BN_mod_lshift1
BN_mod_lshift1_quick
BN_mod_lshift_quick
BN_mod_mul
BN_mod_mul_montgomery
BN_mod_mul_reciprocal
BN_mod_sqr
BN_mod_sqrt
BN_mod_sub
BN_mod_sub_quick
BN_mod_word
BN_mpi2bn
BN_mul
BN_mul_word
BN_new
BN_nist_mod_192
BN_nist_mod_224
BN_nist_mod_256
BN_nist_mod_384
BN_nist_mod_521
BN_nnmod
BN_num_bits
BN_num_bits_word
BN_options
BN_print
BN_print_fp
BN_pseudo_rand
BN_pseudo_rand_range
BN_rand
BN_rand_range
BN_reciprocal
BN_rshift
BN_rshift1
BN_set_bit
BN_set_negative
BN_set_params
BN_set_word
BN_sqr
BN_sub
BN_sub_word
BN_swap
BN_to_ASN1_ENUMERATED
BN_to_ASN1_INTEGER
BN_uadd
BN_ucmp
BN_usub
BN_value_one
BUF_MEM_free
BUF_MEM_grow
BUF_MEM_grow_clean
BUF_MEM_new

Sections

.text
Size: 954KB - Virtual size: 954KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 382KB - Virtual size: 382KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DLLs/curl.dll
.dll windows x86

8685ea812c625fddb97cc16d2b62becf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

__WSAFDIsSet
select
ioctlsocket
WSACleanup
WSAStartup
gethostname
getaddrinfo
freeaddrinfo
bind
WSAIoctl
send
WSASetLastError
getpeername
getsockname
socket
ntohs
connect
recv
getsockopt
htons
setsockopt
closesocket
WSAGetLastError

kernel32

RaiseException
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
DecodePointer
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
SleepEx
MultiByteToWideChar
WideCharToMultiByte
WaitForSingleObject
CloseHandle
ExpandEnvironmentStringsA
Sleep
SetLastError
GetLastError
FormatMessageA
VerSetConditionMask
VerifyVersionInfoW
GetTickCount
LoadLibraryExW
SetEndOfFile
HeapSize
GetTimeZoneInformation
WriteConsoleW
GetFileAttributesExW
GetProcessHeap
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
FindClose
FlushFileBuffers
SetStdHandle
GetFullPathNameW
GetCurrentDirectoryW
SetFilePointerEx
HeapReAlloc
GetStdHandle
LCMapStringW
CompareStringW
GetACP
GetStringTypeW
HeapAlloc
HeapFree
GetConsoleCP
WriteFile
ReadConsoleW
GetConsoleMode
GetModuleFileNameA
ExitProcess
ReadFile
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetFileType
GetDriveTypeW
CreateFileW
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
UnhandledExceptionFilter

ssl-44

BIO_f_ssl
SSL_connect
SSL_CTX_set_default_passwd_cb
SSL_free
SSL_CTX_get_cert_store
SSL_get1_session
SSL_set_connect_state
SSL_get_error
SSL_CTX_add_client_CA
SSL_CTX_set_next_proto_select_cb
SSL_CTX_set_msg_callback
SSL_get_current_cipher
SSL_shutdown
SSL_CTX_check_private_key
SSL_CIPHER_get_name
SSL_CTX_use_certificate_chain_file
SSL_CTX_load_verify_locations
SSL_CTX_set_cipher_list
SSL_read
SSL_CTX_use_certificate
SSL_pending
SSL_get_privatekey
SSL_CTX_set_verify
SSL_get_peer_cert_chain
SSL_set_bio
SSL_ctrl
SSL_CTX_set_default_passwd_cb_userdata
SSL_get_verify_result
SSL_write
SSL_CTX_new
SSL_set_fd
SSL_CTX_use_PrivateKey_file
SSL_CTX_use_certificate_file
SSL_CTX_use_PrivateKey
SSL_version
SSL_load_error_strings
SSL_get0_alpn_selected
SSL_library_init
SSL_CTX_ctrl
SSL_CTX_free
SSL_new
SSL_get_certificate
SSL_CTX_set_alpn_protos
SSL_get_peer_certificate
SSL_set_session
SSL_SESSION_free
SSLv23_client_method

crypto-42

PKCS12_PBE_add
EVP_PKEY_get1_RSA
EVP_PKEY_free
X509_verify_cert_error_string
EVP_cleanup
ASN1_STRING_data
CRYPTO_free
OCSP_response_get1_basic
RAND_bytes
X509_EXTENSION_get_object
OCSP_BASICRESP_free
BIO_s_mem
OCSP_crl_reason_str
GENERAL_NAMES_free
CONF_modules_free
CRYPTO_malloc
ASN1_INTEGER_get
OCSP_resp_count
X509_NAME_ENTRY_get_data
sk_pop_free
X509V3_EXT_print
sk_pop
X509_get_subject_name
RSA_flags
ERR_get_error
RAND_file_name
OCSP_response_status
PKCS12_free
BIO_printf
X509_NAME_get_index_by_NID
ERR_free_strings
RSA_free
OCSP_response_status_str
X509_get_issuer_name
PKCS12_parse
RAND_status
i2t_ASN1_OBJECT
OCSP_resp_get0
d2i_OCSP_RESPONSE
X509_STORE_set_flags
ASN1_STRING_to_UTF8
ERR_peek_error
PEM_write_bio_X509
X509_STORE_add_lookup
BIO_ctrl
i2a_ASN1_OBJECT
BIO_new
X509_get_pubkey
OPENSSL_load_builtin_modules
ERR_remove_thread_state
X509_LOOKUP_file
X509_NAME_get_entry
i2d_X509_PUBKEY
MD4_Final
MD4_Init
DES_set_key
DES_ecb_encrypt
MD4_Update
DES_set_odd_parity
X509_load_crl_file
BIO_free
ERR_error_string_n
BIO_puts
OCSP_single_get0_status
X509_NAME_print_ex
OCSP_RESPONSE_free
CONF_modules_load_file
OPENSSL_add_all_algorithms_noconf
ASN1_STRING_type
BN_print
X509_get_serialNumber
sk_value
X509_check_issued
RAND_add
ERR_clear_error
X509_free
PEM_read_X509
ASN1_STRING_length
RAND_load_file
X509_get_ext_d2i
sk_num
OCSP_basic_verify
OCSP_check_validity
d2i_PKCS12_fp
X509_EXTENSION_get_data
ASN1_TIME_print
BN_num_bits
OCSP_cert_status_str
EVP_PKEY_copy_parameters
SHA256_Init
SHA256_Final
SHA256_Update
MD5_Init
MD5_Final
MD5_Update
ASN1_STRING_print

zlib

inflateEnd
inflate
inflateInit2_
zlibVersion
inflateInit_

Exports

Exports

curl_easy_cleanup
curl_easy_duphandle
curl_easy_escape
curl_easy_getinfo
curl_easy_init
curl_easy_pause
curl_easy_perform
curl_easy_recv
curl_easy_reset
curl_easy_send
curl_easy_setopt
curl_easy_strerror
curl_easy_unescape
curl_escape
curl_formadd
curl_formfree
curl_formget
curl_free
curl_getdate
curl_getenv
curl_global_cleanup
curl_global_init
curl_global_init_mem
curl_global_sslset
curl_maprintf
curl_mfprintf
curl_mime_addpart
curl_mime_data
curl_mime_data_cb
curl_mime_encoder
curl_mime_filedata
curl_mime_filename
curl_mime_free
curl_mime_headers
curl_mime_init
curl_mime_name
curl_mime_subparts
curl_mime_type
curl_mprintf
curl_msnprintf
curl_msprintf
curl_multi_add_handle
curl_multi_assign
curl_multi_cleanup
curl_multi_fdset
curl_multi_info_read
curl_multi_init
curl_multi_perform
curl_multi_remove_handle
curl_multi_setopt
curl_multi_socket
curl_multi_socket_action
curl_multi_socket_all
curl_multi_strerror
curl_multi_timeout
curl_multi_wait
curl_mvaprintf
curl_mvfprintf
curl_mvprintf
curl_mvsnprintf
curl_mvsprintf
curl_pushheader_byname
curl_pushheader_bynum
curl_share_cleanup
curl_share_init
curl_share_setopt
curl_share_strerror
curl_slist_append
curl_slist_free_all
curl_strequal
curl_strnequal
curl_unescape
curl_version
curl_version_info

Sections

.text
Size: 291KB - Virtual size: 290KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DLLs/dbghelp.dll
.dll windows x86

fa6b094f828920cf8999743ff0004319

Code Sign

61:05:f7:1e:00:00:00:00:00:32
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

13/07/2009, 23:00

Not After

13/10/2010, 23:10

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:03:dc:f6:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:12

Not After

25/07/2011, 19:22

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:159C-A3F7-2570,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:15:08:27:00:00:00:00:00:0c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

25/01/2006, 23:22

Not After

25/01/2017, 23:32

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

8f:30:24:0d:35:ff:73:8c:8f:ce:2e:fe:f2:26:b5:b2:12:d2:d0:aa
Signer

Actual PE Digest

8f:30:24:0d:35:ff:73:8c:8f:ce:2e:fe:f2:26:b5:b2:12:d2:d0:aa

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_isatty
_write
_lseeki64
??3@YAXPAX@Z
_fileno
_read
__pioinfo
__badioinfo
ferror
wctomb
_snprintf
isleadbyte
mbtowc
_onexit
_lock
__dllonexit
_unlock
_ismbblead
_amsg_exit
_initterm
_XcptFilter
memmove
_iob
__mb_cur_max
strchr
_vsnwprintf
_errno
__CxxFrameHandler
iswspace
calloc
_itoa
_wcsdup
towlower
tolower
_wcslwr
time
_wctime
_ltoa
_strnicmp
_wcsnicmp
_purecall
ctime
malloc
strncmp
isspace
_stricmp
_strlwr
free
wcsrchr
strstr
memcpy
_wcsicmp
qsort
wcschr
wcsstr
wcsncmp
iswxdigit
memset
??2@YAPAXI@Z
iswprint
fflush
fprintf
atol
fclose
__unDName
iswdigit
_CxxThrowException
bsearch
_wfsopen
fread
fseek
wcstol
_wfullpath
_wgetenv
_get_osfhandle
_chsize
_close
_open_osfhandle
ftell
_memicmp
_mbscmp
??1type_info@@UAE@XZ
_wsopen

kernel32

HeapFree
MapViewOfFileEx
GetCurrentDirectoryW
InitializeCriticalSectionAndSpinCount
GetFileType
DeviceIoControl
SetFileAttributesW
CreateFileMappingW
InterlockedIncrement
InterlockedDecrement
LocalFree
FormatMessageW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetTickCount
QueryPerformanceCounter
RtlUnwind
InterlockedExchange
GetThreadSelectorEntry
CreateThread
TerminateThread
VirtualQueryEx
GetPriorityClass
GetThreadPriority
GetThreadTimes
GetThreadContext
ResumeThread
SuspendThread
GetCurrentThreadId
GetSystemTimeAsFileTime
Sleep
GetVersion
GetSystemInfo
LoadLibraryExA
InterlockedCompareExchange
DelayLoadFailureHook
ReadProcessMemory
GetProcessHeap
GetFileAttributesA
SetErrorMode
WriteFile
OutputDebugStringA
VirtualFree
OpenProcess
GetCurrentProcessId
GetModuleHandleA
CreateFileMappingA
MapViewOfFile
DuplicateHandle
VirtualAlloc
VirtualProtect
CreateDirectoryA
UnmapViewOfFile
GetCurrentProcess
SetFilePointer
IsDBCSLeadByte
HeapAlloc
HeapReAlloc
GetVersionExA
InitializeCriticalSection
FindClose
SetLastError
LocalAlloc
LeaveCriticalSection
EnterCriticalSection
CloseHandle
ReadFile
GetFileSize
CreateFileA
GetLastError
TlsSetValue
TlsGetValue
FreeLibrary
LoadLibraryA
TlsAlloc
TlsFree
DeleteCriticalSection
HeapDestroy
HeapCreate
FlushViewOfFile

Exports

Exports

DbgHelpCreateUserDump
DbgHelpCreateUserDumpW
EnumDirTree
EnumDirTreeW
EnumerateLoadedModules
EnumerateLoadedModules64
EnumerateLoadedModulesEx
EnumerateLoadedModulesExW
EnumerateLoadedModulesW64
ExtensionApiVersion
FindDebugInfoFile
FindDebugInfoFileEx
FindDebugInfoFileExW
FindExecutableImage
FindExecutableImageEx
FindExecutableImageExW
FindFileInPath
FindFileInSearchPath
GetTimestampForLoadedLibrary
ImageDirectoryEntryToData
ImageDirectoryEntryToDataEx
ImageNtHeader
ImageRvaToSection
ImageRvaToVa
ImagehlpApiVersion
ImagehlpApiVersionEx
MakeSureDirectoryPathExists
MapDebugInformation
MiniDumpReadDumpStream
MiniDumpWriteDump
SearchTreeForFile
SearchTreeForFileW
StackWalk
StackWalk64
SymAddSourceStream
SymAddSourceStreamA
SymAddSourceStreamW
SymAddSymbol
SymAddSymbolW
SymCleanup
SymDeleteSymbol
SymDeleteSymbolW
SymEnumLines
SymEnumLinesW
SymEnumProcesses
SymEnumSourceFileTokens
SymEnumSourceFiles
SymEnumSourceFilesW
SymEnumSourceLines
SymEnumSourceLinesW
SymEnumSym
SymEnumSymbols
SymEnumSymbolsForAddr
SymEnumSymbolsForAddrW
SymEnumSymbolsW
SymEnumTypes
SymEnumTypesByName
SymEnumTypesByNameW
SymEnumTypesW
SymEnumerateModules
SymEnumerateModules64
SymEnumerateModulesW64
SymEnumerateSymbols
SymEnumerateSymbols64
SymEnumerateSymbolsW
SymEnumerateSymbolsW64
SymFindDebugInfoFile
SymFindDebugInfoFileW
SymFindExecutableImage
SymFindExecutableImageW
SymFindFileInPath
SymFindFileInPathW
SymFromAddr
SymFromAddrW
SymFromIndex
SymFromIndexW
SymFromName
SymFromNameW
SymFromToken
SymFromTokenW
SymFunctionTableAccess
SymFunctionTableAccess64
SymGetFileLineOffsets64
SymGetHomeDirectory
SymGetHomeDirectoryW
SymGetLineFromAddr
SymGetLineFromAddr64
SymGetLineFromAddrW64
SymGetLineFromName
SymGetLineFromName64
SymGetLineFromNameW64
SymGetLineNext
SymGetLineNext64
SymGetLineNextW64
SymGetLinePrev
SymGetLinePrev64
SymGetLinePrevW64
SymGetModuleBase
SymGetModuleBase64
SymGetModuleInfo
SymGetModuleInfo64
SymGetModuleInfoW
SymGetModuleInfoW64
SymGetOmapBlockBase
SymGetOmaps
SymGetOptions
SymGetScope
SymGetScopeW
SymGetSearchPath
SymGetSearchPathW
SymGetSourceFile
SymGetSourceFileFromToken
SymGetSourceFileFromTokenW
SymGetSourceFileToken
SymGetSourceFileTokenW
SymGetSourceFileW
SymGetSourceVarFromToken
SymGetSourceVarFromTokenW
SymGetSymFromAddr
SymGetSymFromAddr64
SymGetSymFromName
SymGetSymFromName64
SymGetSymNext
SymGetSymNext64
SymGetSymPrev
SymGetSymPrev64
SymGetSymbolFile
SymGetSymbolFileW
SymGetTypeFromName
SymGetTypeFromNameW
SymGetTypeInfo
SymGetTypeInfoEx
SymGetUnwindInfo
SymInitialize
SymInitializeW
SymLoadModule
SymLoadModule64
SymLoadModuleEx
SymLoadModuleExW
SymMatchFileName
SymMatchFileNameW
SymMatchString
SymMatchStringA
SymMatchStringW
SymNext
SymNextW
SymPrev
SymPrevW
SymRefreshModuleList
SymRegisterCallback
SymRegisterCallback64
SymRegisterCallbackW64
SymRegisterFunctionEntryCallback
SymRegisterFunctionEntryCallback64
SymSearch
SymSearchW
SymSetContext
SymSetHomeDirectory
SymSetHomeDirectoryW
SymSetOptions
SymSetParentWindow
SymSetScopeFromAddr
SymSetScopeFromIndex
SymSetSearchPath
SymSetSearchPathW
SymSrvDeltaName
SymSrvDeltaNameW
SymSrvGetFileIndexInfo
SymSrvGetFileIndexInfoW
SymSrvGetFileIndexString
SymSrvGetFileIndexStringW
SymSrvGetFileIndexes
SymSrvGetFileIndexesW
SymSrvGetSupplement
SymSrvGetSupplementW
SymSrvIsStore
SymSrvIsStoreW
SymSrvStoreFile
SymSrvStoreFileW
SymSrvStoreSupplement
SymSrvStoreSupplementW
SymUnDName
SymUnDName64
SymUnloadModule
SymUnloadModule64
UnDecorateSymbolName
UnDecorateSymbolNameW
UnmapDebugInformation
WinDbgExtensionDllInit
block
chksym
dbghelp
dh
fptr
homedir
itoldyouso
lmi
lminfo
omap
srcfiles
stack_force_ebp
stackdbg
sym
symsrv
vc7fpo

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DLLs/ssl-44.dll
.dll windows x86

c4dfbb51180b38553108ca1ab200892e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FindFirstFileW
GetFullPathNameW
FindNextFileW
FindClose
CreateFileW
DecodePointer
WriteConsoleW
CloseHandle
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
WriteFile
SetStdHandle
HeapReAlloc
HeapSize
GetStringTypeW
GetFileType
GetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
GetACP
LCMapStringW
HeapAlloc
HeapFree
GetModuleFileNameA
GetModuleHandleExW
ExitProcess
MultiByteToWideChar
WideCharToMultiByte
LoadLibraryExW
GetProcAddress
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
SetLastError
GetLastError
RtlUnwind
InterlockedFlushSList
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RaiseException

crypto-42

EVP_aes_128_gcm
EVP_aes_256_gcm
EVP_gostr341194
EVP_streebog512
EVP_sha512
EVP_aes_256_cbc_hmac_sha1
EVP_aes_192_cbc
EVP_des_ede3_cbc
EVP_gost2814789imit
EVP_sha1
EVP_add_digest
EVP_md5_sha1
EVP_streebog256
EVP_add_cipher
EVP_aes_128_cbc
EVP_sha224
OBJ_NAME_add
EVP_rc4
EVP_rc2_cbc
EVP_gost2814789_cnt
EVP_sha256
EVP_md5
EVP_aes_128_cbc_hmac_sha1
EVP_rc2_40_cbc
EVP_camellia_128_cbc
EVP_gost2814789_cfb64
EVP_des_cbc
EVP_sha384
EVP_ecdsa
EVP_aes_256_cbc
d2i_X509
i2d_X509
X509_STORE_CTX_init
BUF_MEM_free
X509_STORE_CTX_cleanup
BUF_MEM_new
X509_verify_cert
BUF_MEM_grow
X509_get_pubkey
EC_KEY_dup
asprintf
X509_NAME_cmp
X509_STORE_CTX_get0_param
X509_STORE_CTX_set_verify_cb
sk_set_cmp_func
BIO_s_file
PEM_read_bio_X509
X509_STORE_CTX_set_default
X509_STORE_CTX_set_ex_data
X509_get_subject_name
sk_new
X509_VERIFY_PARAM_set1
X509_NAME_dup
CRYPTO_lock
X509_STORE_CTX_get_ex_new_index
BN_dup
reallocarray
EVP_aead_aes_256_gcm
EVP_aead_aes_128_gcm
strlcpy
EVP_aead_chacha20_poly1305
EVP_get_digestbyname
EVP_enc_null
sk_dup
sk_sort
EVP_PKEY_meth_find
EVP_get_cipherbyname
DH_generate_key
EVP_DigestFinal_ex
BN_bin2bn
BN_num_bits
DH_size
BN_CTX_free
X25519
EC_GROUP_new_by_curve_name
explicit_bzero
BN_CTX_new
DH_compute_key
EVP_PKEY_CTX_new
EVP_PKEY_size
EVP_PKEY_CTX_ctrl
RSA_public_encrypt
RSA_size
EVP_DigestInit
EVP_SignFinal
EC_POINT_point2oct
EC_KEY_get0_public_key
ENGINE_load_ssl_client_cert
X509_certificate_type
EVP_PKEY_encrypt
EVP_PKEY_get_default_digest_nid
RSA_verify
ECDSA_sign
EVP_MD_CTX_create
RSA_sign
EVP_Digest
EC_KEY_set_public_key
DH_new
d2i_X509_NAME
EVP_PKEY_derive_set_peer
EVP_PKEY_sign_init
RSA_free
EC_KEY_generate_key
EVP_VerifyFinal
EVP_PKEY_missing_parameters
EVP_PKEY_sign
BN_bn2bin
ECDH_size
ECDH_compute_key
EVP_PKEY_CTX_free
X25519_keypair
EVP_PKEY_encrypt_init
OBJ_nid2sn
EC_POINT_oct2point
ERR_load_crypto_strings
ERR_func_error_string
ERR_load_strings
BIO_method_type
get_rfc3526_prime_2048
get_rfc3526_prime_8192
X509_check_purpose
EC_GFp_mont_method
lh_free
X509_VERIFY_PARAM_set_depth
BIO_int_ctrl
EVP_PKEY_bits
OCSP_RESPID_free
X509_check_private_key
X509_STORE_load_mem
BIO_pop
lh_new
get_rfc2409_prime_1024
strlcat
get_rfc3526_prime_3072
ENGINE_finish
X509_VERIFY_PARAM_inherit
BIO_get_retry_reason
X509_STORE_load_locations
BN_set_word
X509_VERIFY_PARAM_new
OBJ_bsearch_
CRYPTO_free_ex_data
CRYPTO_new_ex_data
X509_VERIFY_PARAM_set_purpose
lh_retrieve
X509_VERIFY_PARAM_free
EVP_AEAD_CTX_cleanup
CRYPTO_get_ex_data
X509_VERIFY_PARAM_get_depth
X509_STORE_set_default_paths
X509_STORE_free
lh_num_items
ERR_peek_error
X509_STORE_new
X509_VERIFY_PARAM_set_trust
get_rfc3526_prime_4096
X509_EXTENSION_free
CRYPTO_set_ex_data
get_rfc3526_prime_1536
CRYPTO_dup_ex_data
BIO_s_socket
sk_set
BIO_read
EVP_CIPHER_CTX_iv_length
EVP_PKEY_copy_parameters
BIO_new_mem_buf
d2i_X509_bio
PEM_read_bio_PrivateKey
EVP_PKEY_assign
ERR_peek_last_error
RSA_flags
PEM_read_bio_RSAPrivateKey
PEM_read_bio_X509_AUX
d2i_RSAPrivateKey
d2i_RSAPrivateKey_bio
d2i_PrivateKey
d2i_PrivateKey_bio
RSA_up_ref
ENGINE_init
PEM_ASN1_write
lh_delete
ENGINE_get_ssl_client_cert_function
lh_insert
PEM_ASN1_read_bio
lh_doall_arg
PEM_ASN1_write_bio
PEM_ASN1_read
sk_shift
HMAC_CTX_init
EC_KEY_new_by_curve_name
EVP_EncryptUpdate
EC_KEY_get0_private_key
EVP_EncryptFinal_ex
EC_POINT_copy
HMAC_Update
ECDSA_verify
EVP_PKEY_verify
EVP_PKEY_verify_init
i2d_X509_NAME
RSA_private_decrypt
HMAC_Init_ex
EVP_EncryptInit_ex
EVP_CIPHER_CTX_cleanup
EVP_CIPHER_CTX_init
ASN1_get_object
EC_KEY_set_private_key
BN_clear_free
HMAC_CTX_cleanup
EVP_PKEY_decrypt
HMAC_Final
EVP_PKEY_decrypt_init
i2d_OCSP_RESPID
d2i_X509_EXTENSIONS
i2d_X509_EXTENSIONS
d2i_OCSP_RESPID
BIO_dump_indent
BIO_puts
X509_verify_cert_error_string
BIO_printf
EVP_CIPHER_key_length
EVP_MD_CTX_ctrl
EVP_AEAD_max_overhead
EVP_AEAD_CTX_seal
EVP_CIPHER_CTX_ctrl
EVP_AEAD_CTX_init
EVP_DigestSignInit
EVP_AEAD_CTX_open
EVP_MD_CTX_copy
EVP_CipherInit_ex
EVP_DigestSignFinal
BIO_s_mem
EVP_PKEY_new_mac_key
EVP_AEAD_nonce_length
EVP_AEAD_key_length
EVP_CIPHER_CTX_new
EVP_CIPHER_iv_length
EVP_MD_CTX_copy_ex
OBJ_sn2nid
EC_GROUP_method_of
EC_KEY_get_conv_form
EC_curve_nist2nid
OBJ_ln2nid
EVP_DecryptInit_ex
EC_METHOD_get_field_type
EVP_DecryptFinal_ex
EVP_DecryptUpdate
strsep
EVP_camellia_256_cbc
EVP_PKEY_new
DHparams_dup
DH_free
BN_free
sk_pop_free
EC_KEY_set_group
X509_NAME_free
EC_POINT_free
EC_KEY_free
BN_set_bit
EVP_PKEY_free
EC_GROUP_free
EC_POINT_new
EC_KEY_new
EC_GROUP_set_generator
EC_GROUP_get_curve_name
BN_new
sk_find
sk_value
X509_free
EC_KEY_get0_group
sk_num
EC_GROUP_set_curve_name
EC_GROUP_new
EVP_PKEY_set1_DH
EVP_PKEY_set1_EC_KEY
SHA512_Init
SHA256_Transform
SHA1_Transform
SHA384_Init
EVP_DigestFinal
EVP_MD_CTX_cleanup
MD5_Init
SHA512_Transform
EVP_DigestUpdate
SHA256_Init
EVP_DigestInit_ex
SHA1_Init
SHA224_Init
MD5_Transform
EVP_MD_CTX_init
EVP_MD_type
sk_push
sk_free
sk_new_null
EVP_CIPHER_CTX_flags
ERR_asprintf_error_data
gettimeofday
EVP_CIPHER_CTX_cipher
arc4random_buf
EVP_Cipher
BIO_test_flags
ERR_clear_error
EVP_MD_size
EVP_CIPHER_block_size
EVP_CIPHER_flags
BUF_MEM_grow_clean
EVP_MD_CTX_md
EVP_MD_CTX_destroy
OpenSSLDie
EVP_CIPHER_CTX_free
timingsafe_memcmp
strndup
recallocarray
freezero
CRYPTO_add_lock
BIO_new
BIO_ctrl
BIO_push
BIO_s_connect
BIO_f_buffer
BIO_set_flags
BIO_clear_flags
BIO_free_all
BIO_copy_next_retry
BIO_write
BIO_free
BIO_callback_ctrl
BIO_find_type
ERR_put_error
CRYPTO_get_ex_new_index

Exports

Exports

BIO_f_ssl
BIO_new_buffer_ssl_connect
BIO_new_ssl
BIO_new_ssl_connect
BIO_ssl_copy_session_id
BIO_ssl_shutdown
DTLSv1_client_method
DTLSv1_method
DTLSv1_server_method
ERR_load_SSL_strings
PEM_read_SSL_SESSION
PEM_read_bio_SSL_SESSION
PEM_write_SSL_SESSION
PEM_write_bio_SSL_SESSION
SSL_CIPHER_description
SSL_CIPHER_get_bits
SSL_CIPHER_get_by_id
SSL_CIPHER_get_by_value
SSL_CIPHER_get_id
SSL_CIPHER_get_name
SSL_CIPHER_get_value
SSL_CIPHER_get_version
SSL_COMP_add_compression_method
SSL_COMP_get_compression_methods
SSL_COMP_get_name
SSL_CTX_add_client_CA
SSL_CTX_add_session
SSL_CTX_callback_ctrl
SSL_CTX_check_private_key
SSL_CTX_ctrl
SSL_CTX_flush_sessions
SSL_CTX_free
SSL_CTX_get_cert_store
SSL_CTX_get_client_CA_list
SSL_CTX_get_client_cert_cb
SSL_CTX_get_ex_data
SSL_CTX_get_ex_new_index
SSL_CTX_get_info_callback
SSL_CTX_get_quiet_shutdown
SSL_CTX_get_timeout
SSL_CTX_get_verify_callback
SSL_CTX_get_verify_depth
SSL_CTX_get_verify_mode
SSL_CTX_load_verify_locations
SSL_CTX_load_verify_mem
SSL_CTX_new
SSL_CTX_remove_session
SSL_CTX_sess_get_get_cb
SSL_CTX_sess_get_new_cb
SSL_CTX_sess_get_remove_cb
SSL_CTX_sess_set_get_cb
SSL_CTX_sess_set_new_cb
SSL_CTX_sess_set_remove_cb
SSL_CTX_sessions
SSL_CTX_set1_groups
SSL_CTX_set1_groups_list
SSL_CTX_set1_param
SSL_CTX_set_alpn_protos
SSL_CTX_set_alpn_select_cb
SSL_CTX_set_cert_store
SSL_CTX_set_cert_verify_callback
SSL_CTX_set_cipher_list
SSL_CTX_set_client_CA_list
SSL_CTX_set_client_cert_cb
SSL_CTX_set_client_cert_engine
SSL_CTX_set_cookie_generate_cb
SSL_CTX_set_cookie_verify_cb
SSL_CTX_set_default_passwd_cb
SSL_CTX_set_default_passwd_cb_userdata
SSL_CTX_set_default_verify_paths
SSL_CTX_set_ex_data
SSL_CTX_set_generate_session_id
SSL_CTX_set_info_callback
SSL_CTX_set_max_proto_version
SSL_CTX_set_min_proto_version
SSL_CTX_set_msg_callback
SSL_CTX_set_next_proto_select_cb
SSL_CTX_set_next_protos_advertised_cb
SSL_CTX_set_purpose
SSL_CTX_set_quiet_shutdown
SSL_CTX_set_session_id_context
SSL_CTX_set_ssl_version
SSL_CTX_set_timeout
SSL_CTX_set_tlsext_use_srtp
SSL_CTX_set_tmp_dh_callback
SSL_CTX_set_tmp_ecdh_callback
SSL_CTX_set_tmp_rsa_callback
SSL_CTX_set_trust
SSL_CTX_set_verify
SSL_CTX_set_verify_depth
SSL_CTX_use_PrivateKey
SSL_CTX_use_PrivateKey_ASN1
SSL_CTX_use_PrivateKey_file
SSL_CTX_use_RSAPrivateKey
SSL_CTX_use_RSAPrivateKey_ASN1
SSL_CTX_use_RSAPrivateKey_file
SSL_CTX_use_certificate
SSL_CTX_use_certificate_ASN1
SSL_CTX_use_certificate_chain_file
SSL_CTX_use_certificate_chain_mem
SSL_CTX_use_certificate_file
SSL_SESSION_free
SSL_SESSION_get0_peer
SSL_SESSION_get_compress_id
SSL_SESSION_get_ex_data
SSL_SESSION_get_ex_new_index
SSL_SESSION_get_id
SSL_SESSION_get_time
SSL_SESSION_get_timeout
SSL_SESSION_new
SSL_SESSION_print
SSL_SESSION_print_fp
SSL_SESSION_set1_id_context
SSL_SESSION_set_ex_data
SSL_SESSION_set_time
SSL_SESSION_set_timeout
SSL_accept
SSL_add_client_CA
SSL_add_dir_cert_subjects_to_stack
SSL_add_file_cert_subjects_to_stack
SSL_alert_desc_string
SSL_alert_desc_string_long
SSL_alert_type_string
SSL_alert_type_string_long
SSL_cache_hit
SSL_callback_ctrl
SSL_check_private_key
SSL_clear
SSL_connect
SSL_copy_session_id
SSL_ctrl
SSL_do_handshake
SSL_dup
SSL_dup_CA_list
SSL_export_keying_material
SSL_free
SSL_get0_alpn_selected
SSL_get0_next_proto_negotiated
SSL_get1_session
SSL_get_SSL_CTX
SSL_get_certificate
SSL_get_cipher_list
SSL_get_ciphers
SSL_get_client_CA_list
SSL_get_current_cipher
SSL_get_current_compression
SSL_get_current_expansion
SSL_get_default_timeout
SSL_get_error
SSL_get_ex_data
SSL_get_ex_data_X509_STORE_CTX_idx
SSL_get_ex_new_index
SSL_get_fd
SSL_get_finished
SSL_get_info_callback
SSL_get_peer_cert_chain
SSL_get_peer_certificate
SSL_get_peer_finished
SSL_get_privatekey
SSL_get_quiet_shutdown
SSL_get_rbio
SSL_get_read_ahead
SSL_get_rfd
SSL_get_selected_srtp_profile
SSL_get_servername
SSL_get_servername_type
SSL_get_session
SSL_get_shared_ciphers
SSL_get_shutdown
SSL_get_srtp_profiles
SSL_get_ssl_method
SSL_get_verify_callback
SSL_get_verify_depth
SSL_get_verify_mode
SSL_get_verify_result
SSL_get_version
SSL_get_wbio
SSL_get_wfd
SSL_has_matching_session_id
SSL_library_init
SSL_load_client_CA_file
SSL_load_error_strings
SSL_new
SSL_peek
SSL_pending
SSL_read
SSL_renegotiate
SSL_renegotiate_abbreviated
SSL_renegotiate_pending
SSL_rstate_string
SSL_rstate_string_long
SSL_select_next_proto
SSL_set1_groups
SSL_set1_groups_list
SSL_set1_param
SSL_set_SSL_CTX
SSL_set_accept_state
SSL_set_alpn_protos
SSL_set_bio
SSL_set_cipher_list
SSL_set_client_CA_list
SSL_set_connect_state
SSL_set_debug
SSL_set_ex_data
SSL_set_fd
SSL_set_generate_session_id
SSL_set_info_callback
SSL_set_max_proto_version
SSL_set_min_proto_version
SSL_set_msg_callback
SSL_set_purpose
SSL_set_quiet_shutdown
SSL_set_read_ahead
SSL_set_rfd
SSL_set_session
SSL_set_session_id_context
SSL_set_session_secret_cb
SSL_set_session_ticket_ext
SSL_set_session_ticket_ext_cb
SSL_set_shutdown
SSL_set_ssl_method
SSL_set_state
SSL_set_tlsext_use_srtp
SSL_set_tmp_dh_callback
SSL_set_tmp_ecdh_callback
SSL_set_tmp_rsa_callback
SSL_set_trust
SSL_set_verify
SSL_set_verify_depth
SSL_set_verify_result
SSL_set_wfd
SSL_shutdown
SSL_state
SSL_state_string
SSL_state_string_long
SSL_use_PrivateKey
SSL_use_PrivateKey_ASN1
SSL_use_PrivateKey_file
SSL_use_RSAPrivateKey
SSL_use_RSAPrivateKey_ASN1
SSL_use_RSAPrivateKey_file
SSL_use_certificate
SSL_use_certificate_ASN1
SSL_use_certificate_file
SSL_version
SSL_version_str
SSL_want
SSL_write
SSLv23_client_method
SSLv23_method
SSLv23_server_method
TLS_client_method
TLS_method
TLS_server_method
TLSv1_1_client_method
TLSv1_1_method
TLSv1_1_server_method
TLSv1_2_client_method
TLSv1_2_method
TLSv1_2_server_method
TLSv1_client_method
TLSv1_method
TLSv1_server_method
d2i_SSL_SESSION
i2d_SSL_SESSION

Sections

.text
Size: 200KB - Virtual size: 200KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DLLs/zlib.dll
.dll windows x86

1e2be33be78a1aca082b938d2013245a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
SetFilePointerEx
CreateFileW
GetFileType
CloseHandle
WideCharToMultiByte
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
MultiByteToWideChar
ReadFile
GetConsoleMode
ReadConsoleW
WriteFile
GetConsoleCP
HeapFree
HeapAlloc
SetStdHandle
GetStdHandle
SetEndOfFile
GetACP
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
WriteConsoleW
GetStringTypeW
HeapSize
HeapReAlloc
FlushFileBuffers
DecodePointer
RaiseException

Exports

Exports

adler32
adler32_combine
adler32_z
compress
compress2
compressBound
crc32
crc32_combine
crc32_z
deflate
deflateBound
deflateCopy
deflateEnd
deflateGetDictionary
deflateInit2_
deflateInit_
deflateParams
deflatePending
deflatePrime
deflateReset
deflateResetKeep
deflateSetDictionary
deflateSetHeader
deflateTune
get_crc_table
gzbuffer
gzclearerr
gzclose
gzclose_r
gzclose_w
gzdirect
gzdopen
gzeof
gzerror
gzflush
gzfread
gzfwrite
gzgetc
gzgetc_
gzgets
gzoffset
gzoffset64
gzopen
gzopen64
gzopen_w
gzprintf
gzputc
gzputs
gzread
gzrewind
gzseek
gzseek64
gzsetparams
gztell
gztell64
gzungetc
gzvprintf
gzwrite
inflate
inflateBack
inflateBackEnd
inflateBackInit_
inflateCodesUsed
inflateCopy
inflateEnd
inflateGetDictionary
inflateGetHeader
inflateInit2_
inflateInit_
inflateMark
inflatePrime
inflateReset
inflateReset2
inflateResetKeep
inflateSetDictionary
inflateSync
inflateSyncPoint
inflateUndermine
inflateValidate
uncompress
uncompress2
zError
zlibCompileFlags
zlibVersion

Sections

.text
Size: 111KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Lucas Simpsons Hit & Run Mod Launcher.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Lucas Simpsons Hit & Run Mod Launcher.exe.config
Mods/NeverBusted.lmlm
Mods/NoAudio.lmlm
Mods/NoHUD.lmlm
Mods/NoLicenseScreenDelay.lmlm
Mods/NoTraffic.lmlm
Mods/RepairCarOnReset.lmlm
Mods/Speedometer.lmlm
Mods/TextNames.lmlm
Mods/UnlockAllRewards.lmlm

Sharing

General

Malware Config

Signatures

Files

6c18277c9f6ca9c5ac61a7b4070a4f57

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

14:78:1b:c8:62:e8:dc:50:3a:55:93:46:f5:dc:c5:18Certificate

Extended Key Usages

Key Usages

61:19:93:e4:00:00:00:00:00:1cCertificate

Key Usages

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7Certificate

Extended Key Usages

Key Usages

7b:c1:5a:f2:13:67:d0:75:8b:ed:dc:ca:11:86:42:deCertificate

Extended Key Usages

Key Usages

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2aCertificate

Extended Key Usages

Key Usages

61:19:93:e4:00:00:00:00:00:1cCertificate

Key Usages

07Certificate

Key Usages

ef:95:c2:f4:80:e3:1b:93Certificate

Extended Key Usages

Key Usages

52:83:6e:af:b7:ab:bb:21:f8:d1:d4:e4:ef:0c:1e:50:23:86:70:c8:34:eb:1e:46:32:72:c2:b0:fc:b3:d0:65Signer

fe:88:81:f2:55:4f:69:6b:b8:ae:94:49:98:cf:9b:8a:6a:28:d5:56Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shell32

advapi32

Exports

Exports

Sections

.text Size: 2.6MB - Virtual size: 2.6MB

.rdata Size: 357KB - Virtual size: 357KB

.data Size: 34KB - Virtual size: 46KB

.idata Size: 5KB - Virtual size: 5KB

.tls Size: 1KB - Virtual size: 1KB

.00cfg Size: 512B - Virtual size: 260B

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 93KB - Virtual size: 92KB

6f17109c8e7efa89aabfc29d83187cf3

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

winmm

psapi

shlwapi

Exports

Exports

Sections

.text Size: 2.0MB - Virtual size: 2.0MB

.rdata Size: 605KB - Virtual size: 605KB

.data Size: 57KB - Virtual size: 10.2MB

.rsrc Size: 216KB - Virtual size: 215KB

.reloc Size: 142KB - Virtual size: 142KB

94f5f87a1bb82cd9a66c95e6652a473a

Headers

DLL Characteristics

File Characteristics

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

14:78:1b:c8:62:e8:dc:50:3a:55:93:46:f5:dc:c5:18
Certificate

61:19:93:e4:00:00:00:00:00:1c
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

7b:c1:5a:f2:13:67:d0:75:8b:ed:dc:ca:11:86:42:de
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

61:19:93:e4:00:00:00:00:00:1c
Certificate

07
Certificate

ef:95:c2:f4:80:e3:1b:93
Certificate

52:83:6e:af:b7:ab:bb:21:f8:d1:d4:e4:ef:0c:1e:50:23:86:70:c8:34:eb:1e:46:32:72:c2:b0:fc:b3:d0:65
Signer

fe:88:81:f2:55:4f:69:6b:b8:ae:94:49:98:cf:9b:8a:6a:28:d5:56
Signer

.text
Size: 2.6MB - Virtual size: 2.6MB

.rdata
Size: 357KB - Virtual size: 357KB

.data
Size: 34KB - Virtual size: 46KB

.idata
Size: 5KB - Virtual size: 5KB

.tls
Size: 1KB - Virtual size: 1KB

.00cfg
Size: 512B - Virtual size: 260B

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 93KB - Virtual size: 92KB

.text
Size: 2.0MB - Virtual size: 2.0MB

.rdata
Size: 605KB - Virtual size: 605KB

.data
Size: 57KB - Virtual size: 10.2MB

.rsrc
Size: 216KB - Virtual size: 215KB

.reloc
Size: 142KB - Virtual size: 142KB

.text
Size: 954KB - Virtual size: 954KB

.rdata
Size: 382KB - Virtual size: 382KB

.data
Size: 14KB - Virtual size: 25KB

.reloc
Size: 44KB - Virtual size: 44KB

.text
Size: 291KB - Virtual size: 290KB

.rdata
Size: 63KB - Virtual size: 62KB

.data
Size: 2KB - Virtual size: 5KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 13KB - Virtual size: 12KB

61:05:f7:1e:00:00:00:00:00:32
Certificate

61:03:dc:f6:00:00:00:00:00:0c
Certificate

61:16:68:34:00:00:00:00:00:1c
Certificate

61:15:08:27:00:00:00:00:00:0c
Certificate

8f:30:24:0d:35:ff:73:8c:8f:ce:2e:fe:f2:26:b5:b2:12:d2:d0:aa
Signer

.text
Size: 1.1MB - Virtual size: 1.1MB

.data
Size: 18KB - Virtual size: 112KB

.rsrc
Size: 1024B - Virtual size: 1008B

.reloc
Size: 60KB - Virtual size: 59KB

.text
Size: 200KB - Virtual size: 200KB

.rdata
Size: 60KB - Virtual size: 60KB

.data
Size: 9KB - Virtual size: 11KB