gdmenu[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

gdmenu.zip
Size

27.3MB
MD5

55f99139c8e6f5cdc50827e4ab93d3c9
SHA1

86b3010f6704ca3965149c61d9e2732b6baa67fa
SHA256

4d7acdcbb6a5384ecbed4a4abbd885d92cd9cd83df29a5ec30b97d3b1c96375a
SHA512

2f34141993c2a9f1922bd7fda7b89ba4c4341be5fa2b6729a285276f16283f5c8e79b6ccb6c8eaf55f93ec339c9bcdfcebf5166413e52d5f2f019806a5f9275f
SSDEEP

786432:Ep3BaigpsR6VyJj6KVUt3mUbhWQ/ymP/kOCm7Gx:WwdayZmUN/5FC+M

Score

3^/10

Malware Config

Signatures

Unsigned PE 4 IoCs

Checks for missing Authenticode signature.

resource
unpack001/GDMenu.dll
unpack001/ffmpeg.exe
unpack001/minhook.x32.dll
unpack001/xinput9_1_0.dll

Files

gdmenu.zip
.zip
GDMenu.dll
.dll windows:6 windows x86

5ad0680f8b9fdebbbbf07ad777c10967

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

minhook.x32

MH_EnableHook
MH_Initialize
MH_CreateHook

opengl32

glViewport
glFlush
glReadPixels
glPixelStorei
glGetIntegerv

libcocos2d

?isRunning@CCNode@cocos2d@@UAE_NXZ
?isIgnoreAnchorPointForPosition@CCNode@cocos2d@@UAE_NXZ
?isEqual@CCObject@cocos2d@@UAE_NPBV12@@Z
?init@CCDrawNode@cocos2d@@UAE_NXZ
?ignoreAnchorPointForPosition@CCNode@cocos2d@@UAEX_N@Z
?getZOrder@CCNode@cocos2d@@UAEHXZ
?getVertexZ@CCNode@cocos2d@@UAEMXZ
?getUserObject@CCNode@cocos2d@@UAEPAVCCObject@2@XZ
?getUserData@CCNode@cocos2d@@UAEPAXXZ
?getTag@CCObject@cocos2d@@UBEHXZ
?getSkewY@CCNode@cocos2d@@UAEMXZ
?getSkewX@CCNode@cocos2d@@UAEMXZ
?getShaderProgram@CCNode@cocos2d@@UAEPAVCCGLProgram@2@XZ
?getScheduler@CCNode@cocos2d@@UAEPAVCCScheduler@2@XZ
?getScaledContentSize@CCNode@cocos2d@@UAE?AVCCSize@2@XZ
?removeFromParentAndCleanup@CCNode@cocos2d@@UAEX_N@Z
?getScaleX@CCNode@cocos2d@@UAEMXZ
?getScale@CCNode@cocos2d@@UAEMXZ
?getRotationY@CCNode@cocos2d@@UAEMXZ
?getRotationX@CCNode@cocos2d@@UAEMXZ
?getRotation@CCNode@cocos2d@@UAEMXZ
?getPositionY@CCNode@cocos2d@@UAEMXZ
?getPositionX@CCNode@cocos2d@@UAEMXZ
?getPosition@CCNode@cocos2d@@UAEXPAM0@Z
?getPosition@CCNode@cocos2d@@UAEABVCCPoint@2@XZ
?getParent@CCNode@cocos2d@@UAEPAV12@XZ
?getOrderOfArrival@CCNode@cocos2d@@UAEIXZ
?getGrid@CCNode@cocos2d@@UAEPAVCCGridBase@2@XZ
?getGLServerState@CCNode@cocos2d@@UAE?AW4ccGLServerState@2@XZ
?getContentSize@CCNode@cocos2d@@UBEABVCCSize@2@XZ
?getChildrenCount@CCNode@cocos2d@@UBEIXZ
?getChildren@CCNode@cocos2d@@UAEPAVCCArray@2@XZ
?getChildByTag@CCNode@cocos2d@@UAEPAV12@H@Z
?getCamera@CCNode@cocos2d@@UAEPAVCCCamera@2@XZ
?getAnchorPointInPoints@CCNode@cocos2d@@UAEABVCCPoint@2@XZ
?getAnchorPoint@CCNode@cocos2d@@UAEABVCCPoint@2@XZ
?getActionManager@CCNode@cocos2d@@UAEPAVCCActionManager@2@XZ
?encodeWithCoder@CCObject@cocos2d@@UAEXPAVDS_Dictionary@@@Z
?draw@CCDrawNode@cocos2d@@UAEXXZ
?copyWithZone@CCCopying@cocos2d@@UAEPAVCCObject@2@PAVCCZone@2@@Z
?cleanup@CCNode@cocos2d@@UAEXXZ
?canEncode@CCObject@cocos2d@@UAE_NXZ
?addComponent@CCNode@cocos2d@@UAE_NPAVCCComponent@2@@Z
?addChild@CCNode@cocos2d@@UAEXPAV12@HH@Z
?addChild@CCNode@cocos2d@@UAEXPAV12@H@Z
?addChild@CCNode@cocos2d@@UAEXPAV12@@Z
?acceptVisitor@CCObject@cocos2d@@UAEXAAVCCDataVisitor@2@@Z
?_setZOrder@CCNode@cocos2d@@UAEXH@Z
??0CCDrawNode@cocos2d@@QAE@XZ
?isVisible@CCNode@cocos2d@@UAE_NXZ
?nodeToParentTransform@CCNode@cocos2d@@UAE?BUCCAffineTransform@2@XZ
?nodeToWorldTransform@CCNode@cocos2d@@UAE?AUCCAffineTransform@2@XZ
?onEnter@CCNode@cocos2d@@UAEXXZ
?removeMeAndCleanup@CCNode@cocos2d@@UAEXXZ
?reorderChild@CCNode@cocos2d@@UAEXPAV12@H@Z
?setActionManager@CCNode@cocos2d@@UAEXPAVCCActionManager@2@@Z
?setAnchorPoint@CCNode@cocos2d@@UAEXABVCCPoint@2@@Z
?setContentSize@CCNode@cocos2d@@UAEXABVCCSize@2@@Z
?setGLServerState@CCNode@cocos2d@@UAEXW4ccGLServerState@2@@Z
?setGrid@CCNode@cocos2d@@UAEXPAVCCGridBase@2@@Z
?setOrderOfArrival@CCNode@cocos2d@@UAEXI@Z
?setParent@CCNode@cocos2d@@UAEXPAV12@@Z
?setPosition@CCNode@cocos2d@@UAEXABVCCPoint@2@@Z
?setPosition@CCNode@cocos2d@@UAEXMM@Z
?setPositionX@CCNode@cocos2d@@UAEXM@Z
?setPositionY@CCNode@cocos2d@@UAEXM@Z
?setRotation@CCNode@cocos2d@@UAEXM@Z
?setRotationX@CCNode@cocos2d@@UAEXM@Z
?onEnterTransitionDidFinish@CCNode@cocos2d@@UAEXXZ
?setScale@CCNode@cocos2d@@UAEXM@Z
?setScale@CCNode@cocos2d@@UAEXMM@Z
?setScaleX@CCNode@cocos2d@@UAEXM@Z
?setScaleY@CCNode@cocos2d@@UAEXM@Z
?setScheduler@CCNode@cocos2d@@UAEXPAVCCScheduler@2@@Z
?setShaderProgram@CCNode@cocos2d@@UAEXPAVCCGLProgram@2@@Z
?setSkewX@CCNode@cocos2d@@UAEXM@Z
?setSkewY@CCNode@cocos2d@@UAEXM@Z
?setTag@CCObject@cocos2d@@UAEXH@Z
?setUserData@CCNode@cocos2d@@UAEXPAX@Z
?setUserObject@CCNode@cocos2d@@UAEXPAVCCObject@2@@Z
?setVertexZ@CCNode@cocos2d@@UAEXM@Z
?setVisible@CCNode@cocos2d@@UAEX_N@Z
?setZOrder@CCNode@cocos2d@@UAEXH@Z
?sortAllChildren@CCNode@cocos2d@@UAEXXZ
?unregisterScriptHandler@CCNode@cocos2d@@UAEXXZ
?update@CCNode@cocos2d@@UAEXM@Z
?updateTransform@CCNode@cocos2d@@UAEXXZ
?updateTweenAction@CCNode@cocos2d@@UAEXMPBD@Z
?visit@CCNode@cocos2d@@UAEXXZ
?worldToNodeTransform@CCNode@cocos2d@@UAE?AUCCAffineTransform@2@XZ
?getObjType@CCObject@cocos2d@@QBE?AW4CCObjectType@2@XZ
?clear@CCDrawNode@cocos2d@@QAEXXZ
?sharedFileUtils@CCFileUtils@cocos2d@@SAPAV12@XZ
?setFlipX@CCSprite@cocos2d@@QAEX_N@Z
?createWithTotalParticles@CCParticleSnow@cocos2d@@SAPAV12@I@Z
??0CCPoint@cocos2d@@QAE@ABV01@@Z
??0CCSize@cocos2d@@QAE@XZ
??4CCSize@cocos2d@@QAEAAV01@ABV01@@Z
??1CCArray@cocos2d@@UAE@XZ
?addObject@CCArray@cocos2d@@QAEXPAVCCObject@2@@Z
??0CCArray@cocos2d@@QAE@XZ
?create@CCSequence@cocos2d@@SAPAV12@PAVCCArray@2@@Z
?drawSegment@CCDrawNode@cocos2d@@QAEXABVCCPoint@2@0MABU_ccColor4F@2@@Z
?setFntFile@CCLabelBMFont@cocos2d@@QAEXPBD@Z
?sharedOpenGLView@CCEGLView@cocos2d@@SAPAV12@XZ
?getTimeScale@CCScheduler@cocos2d@@QAEMXZ
?autorelease@CCObject@cocos2d@@QAEPAV12@XZ
??0CCNode@cocos2d@@QAE@XZ
??1CCNode@cocos2d@@UAE@XZ
?draw@CCNode@cocos2d@@UAEXXZ
?init@CCNode@cocos2d@@UAE_NXZ
?removeObjectForKey@CCDictionary@cocos2d@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?getRunningScene@CCDirector@cocos2d@@QAEPAVCCScene@2@XZ
?showCursor@CCEGLView@cocos2d@@QAEX_N@Z
??0CCPoint@cocos2d@@QAE@ABVCCSize@1@@Z
??GCCPoint@cocos2d@@QBE?AV01@ABV01@@Z
??0CCSize@cocos2d@@QAE@ABV01@@Z
?boundingBox@CCNode@cocos2d@@QAE?AVCCRect@2@XZ
?convertToWorldSpace@CCNode@cocos2d@@QAE?AVCCPoint@2@ABV32@@Z
?getTexture@CCSpriteFrame@cocos2d@@QAEPAVCCTexture2D@2@XZ
?getEyeXYZ@CCCamera@cocos2d@@QAEXPAM00@Z
?sharedSpriteFrameCache@CCSpriteFrameCache@cocos2d@@SAPAV12@XZ
?sharedTextureCache@CCTextureCache@cocos2d@@SAPAV12@XZ
??0CCTexture2D@cocos2d@@QAE@XZ
??1CCTexture2D@cocos2d@@UAE@XZ
?initWithData@CCTexture2D@cocos2d@@QAE_NPBXW4CCTexture2DPixelFormat@2@IIABVCCSize@2@@Z
?setAliasTexParameters@CCTexture2D@cocos2d@@QAEXXZ
?setViewport@CCDirector@cocos2d@@QAEXXZ
?getContentSize@CCTexture2D@cocos2d@@UAE?AVCCSize@2@XZ
?getMaxS@CCTexture2D@cocos2d@@UAEMXZ
?getMaxT@CCTexture2D@cocos2d@@UAEMXZ
?getName@CCTexture2D@cocos2d@@UAEIXZ
?getPixelFormat@CCTexture2D@cocos2d@@UAE?AW4CCTexture2DPixelFormat@2@XZ
?getPixelsHigh@CCTexture2D@cocos2d@@UAEIXZ
?getPixelsWide@CCTexture2D@cocos2d@@UAEIXZ
?getShaderProgram@CCTexture2D@cocos2d@@UAEPAVCCGLProgram@2@XZ
?setMaxS@CCTexture2D@cocos2d@@UAEXM@Z
?setMaxT@CCTexture2D@cocos2d@@UAEXM@Z
?setShaderProgram@CCTexture2D@cocos2d@@UAEXPAVCCGLProgram@2@@Z
?update@CCObject@cocos2d@@UAEXM@Z
?getWindow@CCEGLView@cocos2d@@QBEPAUGLFWwindow@@XZ
??0CCPoint@cocos2d@@QAE@MM@Z
?onExit@CCNode@cocos2d@@UAEXXZ
?onExitTransitionDidStart@CCNode@cocos2d@@UAEXXZ
?parentToNodeTransform@CCNode@cocos2d@@UAE?BUCCAffineTransform@2@XZ
?registerScriptHandler@CCNode@cocos2d@@UAEXH@Z
?removeAllChildren@CCNode@cocos2d@@UAEXXZ
?removeAllChildrenWithCleanup@CCNode@cocos2d@@UAEX_N@Z
?removeAllComponents@CCNode@cocos2d@@UAEXXZ
?removeChild@CCNode@cocos2d@@UAEXPAV12@@Z
?removeChild@CCNode@cocos2d@@UAEXPAV12@_N@Z
?removeChildByTag@CCNode@cocos2d@@UAEXH@Z
?removeChildByTag@CCNode@cocos2d@@UAEXH_N@Z
?removeComponent@CCNode@cocos2d@@UAE_NPAVCCComponent@2@@Z
?removeComponent@CCNode@cocos2d@@UAE_NPBD@Z
?setRotationY@CCNode@cocos2d@@UAEXM@Z
?removeFromParent@CCNode@cocos2d@@UAEXXZ
?getScaleY@CCNode@cocos2d@@UAEMXZ
?drawPolygon@CCDrawNode@cocos2d@@QAEXPAVCCPoint@2@IABU_ccColor4F@2@M1@Z
??1CCDrawNode@cocos2d@@UAE@XZ
?getMaxY@CCRect@cocos2d@@QBEMXZ
?getMinY@CCRect@cocos2d@@QBEMXZ
?getMaxX@CCRect@cocos2d@@QBEMXZ
?getMinX@CCRect@cocos2d@@QBEMXZ
??0CCRect@cocos2d@@QAE@ABV01@@Z
??DCCPoint@cocos2d@@QBE?AV01@M@Z
??HCCPoint@cocos2d@@QBE?AV01@ABV01@@Z
??0CCPoint@cocos2d@@QAE@XZ
?release@CCObject@cocos2d@@QAEXXZ
?create@CCTransitionFade@cocos2d@@SAPAV12@MPAVCCScene@2@@Z
?create@CCScene@cocos2d@@SAPAV12@XZ
?replaceScene@CCDirector@cocos2d@@QAE_NPAVCCScene@2@@Z
?alignItemsHorizontallyWithPadding@CCMenu@cocos2d@@QAEXM@Z
?limitLabelWidth@CCLabelBMFont@cocos2d@@QAEXMMM@Z
?create@CCLabelBMFont@cocos2d@@SAPAV12@PBD0@Z
?createWithSpriteFrameName@CCSprite@cocos2d@@SAPAV12@PBD@Z
?getWinSize@CCDirector@cocos2d@@QAE?AVCCSize@2@XZ
?create@CCCallFunc@cocos2d@@SAPAV12@PAVCCObject@2@P832@AEXXZ@Z
?create@CCEaseBounceOut@cocos2d@@SAPAV12@PAVCCActionInterval@2@@Z
?create@CCEaseExponentialOut@cocos2d@@SAPAV12@PAVCCActionInterval@2@@Z
?create@CCEaseInOut@cocos2d@@SAPAV12@PAVCCActionInterval@2@M@Z
?create@CCDelayTime@cocos2d@@SAPAV12@M@Z
?create@CCFadeTo@cocos2d@@SAPAV12@ME@Z
?create@CCMoveTo@cocos2d@@SAPAV12@MABVCCPoint@2@@Z
?create@CCRotateTo@cocos2d@@SAPAV12@MM@Z
?create@CCSequence@cocos2d@@SAPAV12@PAVCCFiniteTimeAction@2@ZZ
?createWithFormat@CCString@cocos2d@@SAPAV12@PBDZZ
?getCString@CCString@cocos2d@@QBEPBDXZ
?runAction@CCNode@cocos2d@@QAEPAVCCAction@2@PAV32@@Z
?insertObject@CCArray@cocos2d@@QAEXPAVCCObject@2@I@Z
?lastObject@CCArray@cocos2d@@QAEPAVCCObject@2@XZ
?count@CCArray@cocos2d@@QBEIXZ
?create@CCArray@cocos2d@@SAPAV12@XZ
??4CCPoint@cocos2d@@QAEAAV01@ABV01@@Z
?getVerticalSyncEnabled@CCApplication@cocos2d@@QBE_NXZ
?sharedApplication@CCApplication@cocos2d@@SAPAV12@XZ
?setNextScene@CCDirector@cocos2d@@IAEXXZ
?sharedDirector@CCDirector@cocos2d@@SAPAV12@XZ
?getNextScene@CCDirector@cocos2d@@QAEPAVCCScene@2@XZ
?objectAtIndex@CCArray@cocos2d@@QAEPAVCCObject@2@I@Z
??0CCRect@cocos2d@@QAE@MMMM@Z
??0CCSize@cocos2d@@QAE@MM@Z

fmod

?setPosition@Channel@FMOD@@QAG?AW4FMOD_RESULT@@II@Z
?setPitch@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?setVolume@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?playSound@System@FMOD@@QAG?AW4FMOD_RESULT@@PAVSound@2@PAVChannelGroup@2@_NPAPAVChannel@2@@Z
?createSound@System@FMOD@@QAG?AW4FMOD_RESULT@@PBDIPAUFMOD_CREATESOUNDEXINFO@@PAPAVSound@2@@Z
?update@System@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?init@System@FMOD@@QAG?AW4FMOD_RESULT@@HIPAX@Z
FMOD_System_Create
?getPosition@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PAII@Z

glew32

__glewBindFramebufferEXT
__glewBindRenderbufferEXT
__glewFramebufferTexture2DEXT
__glewGenFramebuffersEXT

discord_game_sdk

DiscordCreate

kernel32

GlobalLock
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeSListHead
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
InitOnceComplete
InitOnceBeginInitialize
GetFileInformationByHandleEx
MoveFileExW
WriteFile
GetLastError
AreFileApisANSI
GetTempPathW
SetFileInformationByHandle
GetFileAttributesExW
FindNextFileW
FindFirstFileExW
IsDebuggerPresent
CreateFileW
CreateDirectoryW
FormatMessageA
LocalFree
GetTempFileNameW
GlobalFree
QueryPerformanceCounter
QueryPerformanceFrequency
GlobalUnlock
GlobalAlloc
GetModuleHandleExA
GetModuleFileNameA
WideCharToMultiByte
MultiByteToWideChar
DeactivateActCtx
ActivateActCtx
CreateActCtxA
VerifyVersionInfoW
LoadLibraryA
FreeLibraryAndExitThread
FreeLibrary
VirtualProtectEx
VirtualProtect
GetSystemDirectoryA
SetPriorityClass
CreateProcessW
GetCurrentThreadId
CreateThread
GetExitCodeProcess
WaitForSingleObject
CreatePipe
SetHandleInformation
CloseHandle
GetFileAttributesW
GetStdHandle
VerSetConditionMask
WriteProcessMemory
GetTickCount
GetCurrentProcess
GetProcAddress
GetModuleHandleA
GetCurrentProcessId
FindClose
GetSystemTimeAsFileTime

user32

GetClientRect
AdjustWindowRectEx
SetCursor
GetCursorPos
ClientToScreen
ScreenToClient
WindowFromPoint
SetWindowTextW
SetWindowLongA
SetWindowLongW
LoadCursorA
MonitorFromWindow
GetMonitorInfoA
EnumDisplayMonitors
ReleaseDC
GetDC
SetForegroundWindow
IsWindowUnicode
ReleaseCapture
GetForegroundWindow
SetCapture
GetCapture
GetKeyState
SetFocus
GetWindowLongW
BringWindowToTop
EnumDisplaySettingsA
keybd_event
SetCursorPos
TranslateMessage
DispatchMessageA
PeekMessageA
SendMessageA
GetActiveWindow
EnumWindows
GetWindowThreadProcessId
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
GetClipboardData
WindowFromDC
TrackMouseEvent
DefWindowProcA
UnregisterClassA
RegisterClassExA
CreateWindowExA
IsChild
DestroyWindow
ShowWindow
SetLayeredWindowAttributes
SetWindowPos
IsIconic

gdi32

GetDeviceCaps

shell32

SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteA

msvcp140

??1facet@locale@std@@MAE@XZ
??0facet@locale@std@@IAE@I@Z
?c_str@?$_Yarn@D@std@@QBEPBDXZ
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
??1_Locinfo@std@@QAE@XZ
??0_Locinfo@std@@QAE@PBD@Z
_Strxfrm
_Strcoll
?_Throw_Cpp_error@std@@YAXH@Z
?_Throw_C_error@std@@YAXH@Z
_Cnd_do_broadcast_at_thread_exit
_Cnd_unregister_at_thread_exit
_Cnd_register_at_thread_exit
_Cnd_broadcast
_Cnd_timedwait
_Cnd_wait
_Cnd_destroy_in_situ
_Cnd_init_in_situ
_Mtx_unlock
_Mtx_lock
_Mtx_current_owns
_Mtx_init_in_situ
_Thrd_detach
?__ExceptionPtrRethrow@@YAXPBX@Z
?__ExceptionPtrCurrentException@@YAXPAX@Z
?__ExceptionPtrToBool@@YA_NPBX@Z
?__ExceptionPtrAssign@@YAXPAXPBX@Z
?__ExceptionPtrCopy@@YAXPAXPBX@Z
?__ExceptionPtrDestroy@@YAXPAX@Z
?__ExceptionPtrCreate@@YAXPAX@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@U_Mbstatet@@@2@XZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@U_Mbstatet@@@2@@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?_Syserror_map@std@@YAPBDH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
?_Xinvalid_argument@std@@YAXPBD@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?id@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DPBUtm@@PBD3@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?always_noconv@codecvt_base@std@@QBE_NXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??Bid@locale@std@@QAEIXZ
?_Xout_of_range@std@@YAXPBD@Z
?uncaught_exception@std@@YA_NXZ
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
_Xtime_get_ticks
_Mtx_destroy_in_situ
_Query_perf_frequency
_Query_perf_counter
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z
?_Xbad_function_call@std@@YAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?tolower@?$ctype@D@std@@QBEDD@Z
?tolower@?$ctype@D@std@@QBEPBDPADPBD@Z
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??Bios_base@std@@QBE_NXZ
?id@?$collate@D@std@@2V0locale@2@A
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?id@?$ctype@D@std@@2V0locale@2@A
?_Incref@facet@locale@std@@UAEXXZ
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
?_Throw_future_error@std@@YAXABVerror_code@1@@Z
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QAEX_N@Z
??0task_continuation_context@Concurrency@@AAE@XZ
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AAEXXZ
?_Capture@_ContextCallback@details@Concurrency@@AAEXXZ
?_Reset@_ContextCallback@details@Concurrency@@AAEXXZ
?_CallInContext@_ContextCallback@details@Concurrency@@QBEXV?$function@$$A6AXXZ@std@@_N@Z
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?_Release_chore@details@Concurrency@@YAXPAU_Threadpool_chore@12@@Z
?_Schedule_chore@details@Concurrency@@YAHPAU_Threadpool_chore@12@@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?_Winerror_map@std@@YAHH@Z

imm32

ImmGetContext
ImmSetCompositionWindow
ImmSetCandidateWindow
ImmReleaseContext

vcruntime140

__std_terminate
__CxxFrameHandler3
_except_handler4_common
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__std_type_info_destroy_list
memset
memcpy
memmove
__RTtypeid
__std_type_info_name
memchr
__RTDynamicCast
_purecall
strchr
strstr
__current_exception
__current_exception_context

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
_initterm_e
_initterm
abort
_initialize_narrow_environment
_errno
_configure_narrow_argv
terminate
_beginthreadex
_invalid_parameter_noinfo_noreturn
_execute_onexit_table
_cexit
_crt_atexit
_seh_filter_dll
_register_onexit_function

api-ms-win-crt-string-l1-1-0

strncmp
strncpy
strcpy_s
toupper

api-ms-win-crt-heap-l1-1-0

_callnewh
realloc
free
malloc

api-ms-win-crt-stdio-l1-1-0

fwrite
_fseeki64
fsetpos
fread
fputc
fgetpos
fgetc
fflush
fclose
_get_stream_buffer_pointers
_wfopen
__acrt_iob_func
ftell
__stdio_common_vfprintf
__stdio_common_vsscanf
ungetc
setvbuf
__stdio_common_vsprintf
fseek

api-ms-win-crt-filesystem-l1-1-0

_unlock_file
_lock_file

api-ms-win-crt-time-l1-1-0

_time64
_localtime64

api-ms-win-crt-math-l1-1-0

_dclass
floor
ceil
_libm_sse2_acos_precise
_libm_sse2_pow_precise
_libm_sse2_sin_precise
_libm_sse2_cos_precise
_CIfmod
_libm_sse2_log_precise
_libm_sse2_sqrt_precise
_CIatan2
_dsign

api-ms-win-crt-utility-l1-1-0

rand
srand
qsort

api-ms-win-crt-convert-l1-1-0

strtoul
strtol
strtoull
strtoll
strtod
atof
atoi

api-ms-win-crt-environment-l1-1-0

_dupenv_s

api-ms-win-crt-locale-l1-1-0

localeconv
___lc_codepage_func

Sections

.text
Size: 697KB - Virtual size: 697KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
GDMenu/clicks/clicks/1.wav
GDMenu/clicks/clicks/2.wav
GDMenu/clicks/clicks/3.wav
GDMenu/clicks/mediumclicks/1.wav
GDMenu/clicks/mediumclicks/2.wav
GDMenu/clicks/mediumclicks/3.wav
GDMenu/clicks/releases/1.wav
GDMenu/clicks/releases/2.wav
GDMenu/clicks/releases/3.wav
GDMenu/mod/bypass.json
GDMenu/mod/creator.json
GDMenu/mod/global.json
GDMenu/mod/level.json
GDMenu/mod/player.json
GDMenu/mod/variables.json
discord_game_sdk.dll
.dll windows:6 windows x86

edfce0ff7a2d3e9b71bd116fc36e7bcb

Code Sign

02:8a:a6:e7:b5:16:c0:d1:55:f1:5d:62:90:a4:30:e3
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

26/03/2018, 00:00

Not After

31/03/2021, 12:00

Subject

SERIALNUMBER=5128862,CN=Discord Inc.,O=Discord Inc.,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

53:87:86:d7:51:2f:05:38:75:67:07:46:d7:0e:1f:5e:84:17:ff:bd
Signer

Actual PE Digest

53:87:86:d7:51:2f:05:38:75:67:07:46:d7:0e:1f:5e:84:17:ff:bd

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

closesocket
sendto
getaddrinfo
WSAStartup
freeaddrinfo
WSACleanup
WSASocketW
ioctlsocket
recv
bind
WSAGetLastError

kernel32

LCMapStringW
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
DecodePointer
GetModuleHandleExW
LoadLibraryExW
TlsFree
InitializeCriticalSectionAndSpinCount
EncodePointer
LoadLibraryW
GetLastError
GetProcAddress
FreeLibrary
GetModuleFileNameW
SetErrorMode
SetThreadErrorMode
lstrlenW
WaitForSingleObject
GetExitCodeProcess
CloseHandle
GetFileInformationByHandle
CancelIoEx
WriteFile
ReadFile
GetOverlappedResult
FlushFileBuffers
TlsGetValue
TlsSetValue
CreateIoCompletionPort
GetQueuedCompletionStatusEx
PostQueuedCompletionStatus
SetHandleInformation
GetSystemInfo
GetSystemTimeAsFileTime
QueryPerformanceCounter
QueryPerformanceFrequency
GetCurrentProcess
GetCurrentThread
RtlCaptureContext
LoadLibraryA
FreeEnvironmentStringsW
FindClose
LeaveCriticalSection
DeleteCriticalSection
SwitchToThread
SetLastError
GetCurrentDirectoryW
GetEnvironmentStringsW
GetEnvironmentVariableW
GetTempPathW
GetCommandLineW
SetFilePointerEx
InitializeCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcessId
HeapAlloc
HeapFree
TlsAlloc
HeapReAlloc
GetModuleHandleW
GetStdHandle
FindNextFileW
CreateFileW
DeviceIoControl
CreateDirectoryW
FindFirstFileW
DeleteFileW
FormatMessageW
ExitProcess
CreateThread
GetConsoleMode
WriteConsoleW
ReleaseMutex
WaitForSingleObjectEx
CreateMutexA
InterlockedFlushSList
GetFileType
GetStringTypeW
HeapSize
SetStdHandle
GetConsoleCP
GetProcessHeap
RaiseException
RtlUnwind
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
GetCurrentThreadId

advapi32

SystemFunction036
RegCloseKey
RegCreateKeyTransactedW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW

ktmw32

CommitTransaction
CreateTransaction

ole32

CoTaskMemFree

shell32

ShellExecuteExW
SHGetKnownFolderPath

Exports

Exports

DiscordCreate
DiscordVersion
rust_eh_personality

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 502KB - Virtual size: 501KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ffmpeg.exe
.exe windows:4 windows x64

7f79a986d1250a6769db80418985e98e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

CryptAcquireContextA
CryptAcquireContextW
CryptCreateHash
CryptDecrypt
CryptDestroyHash
CryptGenRandom
CryptGetHashParam
CryptGetProvParam
CryptReleaseContext
CryptSetHashParam
CryptSetProvParam
CryptSignHashA
DeregisterEventSource
GetUserNameA
InitializeSecurityDescriptor
RegCloseKey
RegEnumKeyExW
RegEnumValueW
RegOpenKeyExA
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExA
RegQueryValueExW
RegisterEventSourceW
ReportEventW
SetSecurityDescriptorDacl
SystemFunction036

crypt32

CertCloseStore
CertDeleteCertificateFromStore
CertEnumCRLsInStore
CertEnumCertificatesInStore
CertFindCertificateInStore
CertFreeCertificateContext
CertGetCertificateContextProperty
CertOpenStore
PFXImportCertStore

gdi32

BitBlt
ChoosePixelFormat
CombineRgn
CreateBitmap
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCW
CreateDIBSection
CreateFontIndirectW
CreateFontW
CreatePen
CreateRectRgn
CreateSolidBrush
DeleteDC
DeleteObject
DescribePixelFormat
EnumFontFamiliesW
ExtTextOutW
GetDIBColorTable
GetDIBits
GetDeviceCaps
GetDeviceGammaRamp
GetICMProfileW
GetObjectA
GetPixelFormat
GetStockObject
GetTextExtentPoint32A
GetTextExtentPoint32W
GetTextFaceW
GetTextMetricsW
Rectangle
SelectObject
SetBkMode
SetDeviceGammaRamp
SetPixelFormat
SetTextColor
SwapBuffers

imm32

ImmAssociateContext
ImmGetCandidateListW
ImmGetCompositionStringW
ImmGetContext
ImmGetIMEFileNameA
ImmNotifyIME
ImmReleaseContext
ImmSetCandidateWindow
ImmSetCompositionStringW
ImmSetCompositionWindow

iphlpapi

GetAdaptersAddresses
if_indextoname
if_nametoindex

kernel32

AddVectoredExceptionHandler
CancelIo
CancelIoEx
CloseHandle
CompareStringA
ConvertFiberToThread
ConvertThreadToFiber
CreateDirectoryW
CreateEventA
CreateEventW
CreateFiber
CreateFileA
CreateFileMappingA
CreateFileW
CreateMutexA
CreateSemaphoreA
CreateSemaphoreW
CreateThread
CreateToolhelp32Snapshot
DeleteCriticalSection
DeleteFiber
DeviceIoControl
DuplicateHandle
EnterCriticalSection
EnumResourceLanguagesA
EnumSystemLocalesA
ExitProcess
FileTimeToSystemTime
FindClose
FindFirstFileA
FindFirstFileW
FindNextFileW
FormatMessageA
FormatMessageW
FreeLibrary
GetACP
GetCommandLineW
GetComputerNameA
GetConsoleMode
GetConsoleScreenBufferInfo
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetEnvironmentVariableA
GetEnvironmentVariableW
GetFileAttributesA
GetFileAttributesExA
GetFileAttributesW
GetFileInformationByHandle
GetFileSize
GetFileSizeEx
GetFileType
GetFinalPathNameByHandleA
GetFullPathNameA
GetFullPathNameW
GetHandleInformation
GetLastError
GetLocaleInfoA
GetLongPathNameA
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExA
GetModuleHandleExW
GetModuleHandleW
GetNumaHighestNodeNumber
GetNumaNodeProcessorMaskEx
GetOverlappedResult
GetProcAddress
GetProcessAffinityMask
GetProcessHeap
GetProcessTimes
GetStartupInfoA
GetStdHandle
GetSystemDirectoryA
GetSystemDirectoryW
GetSystemInfo
GetSystemPowerStatus
GetSystemTimeAdjustment
GetSystemTimeAsFileTime
GetTempPathA
GetThreadContext
GetThreadLocale
GetThreadPriority
GetThreadTimes
GetTickCount
GetTickCount64
GetTimeZoneInformation
GetVersion
GetWindowsDirectoryA
GlobalAlloc
GlobalLock
GlobalMemoryStatusEx
GlobalUnlock
HeapAlloc
HeapFree
HeapReAlloc
InitOnceBeginInitialize
InitOnceComplete
InitializeConditionVariable
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
IsDBCSLeadByteEx
IsDebuggerPresent
IsValidCodePage
K32GetProcessMemoryInfo
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LocalFree
MapViewOfFile
MoveFileExA
MoveFileExW
MulDiv
MultiByteToWideChar
OpenFileMappingA
OpenProcess
OutputDebugStringA
OutputDebugStringW
PeekNamedPipe
Process32First
Process32Next
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadConsoleA
ReadConsoleW
ReadFile
ReleaseMutex
ReleaseSemaphore
RemoveVectoredExceptionHandler
ResetEvent
ResumeThread
RtlCaptureContext
RtlLookupFunctionEntry
RtlUnwindEx
RtlVirtualUnwind
SetConsoleCtrlHandler
SetConsoleMode
SetConsoleTextAttribute
SetDllDirectoryA
SetEnvironmentVariableA
SetErrorMode
SetEvent
SetFilePointer
SetFilePointerEx
SetHandleInformation
SetLastError
SetProcessAffinityMask
SetSystemTime
SetThreadContext
SetThreadErrorMode
SetThreadExecutionState
SetThreadGroupAffinity
SetThreadPriority
SetUnhandledExceptionFilter
SignalObjectAndWait
Sleep
SleepConditionVariableCS
SuspendThread
SwitchToFiber
SwitchToThread
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnmapViewOfFile
VerSetConditionMask
VerifyVersionInfoW
VirtualAlloc
VirtualFree
VirtualLock
VirtualProtect
VirtualQuery
VirtualUnlock
WaitForMultipleObjects
WaitForSingleObject
WaitForSingleObjectEx
WakeAllConditionVariable
WakeConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile
__C_specific_handler
lstrcmpiW

msvcrt

___lc_codepage_func
___mb_cur_max_func
__argv
__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_access
_access
_acmdln
_aligned_free
_aligned_malloc
_aligned_realloc
_amsg_exit
_assert
_beginthreadex
_cexit
_chmod
_close
_close
_commode
_dup
_dup2
_endthreadex
_errno
_exit
_fdopen
_filelengthi64
_fileno
_findclose
_fileno
_findfirst64
_findnext64
_fmode
_fstat64
_ftime64
_fullpath
_get_osfhandle
_getcwd
_getch
_getmaxstdio
_getpid
_gmtime64
_i64toa
_initterm
_hypot
_isatty
_isctype
_kbhit
_localtime64
_lock
_locking
_lseek
_itoa
_lseeki64
_ltoa
_mbsrchr
_mkdir
_mktime64
_onexit
_nextafter
_mkdir
_open
_open_osfhandle
_read
_read
_rmdir
_rmdir
_setjmp
_setmaxstdio
_setmode
_setmode
_sopen
_stat64
_stricmp
_strdup
_strdup
_strlwr
_strnicmp
_strrev
_strupr
_time64
_ui64toa
_ultoa
_unlink
_unlink
_unlock
_vscprintf
_vsnprintf
_vsnwprintf
_waccess
_wassert
_wcsdup
_wcsicmp
_wcsnicmp
_wfindfirst64
_wfindnext64
_wfopen
_wfopen_s
_wfullpath
_wgetcwd
_wmkdir
_wopen
_wrename
_wrmdir
_wsopen
_wstat64
_wunlink
abort
acos
asin
atan
atof
atoi
bsearch
calloc
clock
cosh
div
exit
fclose
feof
ferror
fflush
fgetc
fgetpos
fgets
fgetws
fopen
fprintf
fputc
fputs
fputwc
fread
free
fwprintf
fseek
fsetpos
ftell
fwrite
getc
getchar
getenv
getwc
isalnum
isalpha
iscntrl
isgraph
islower
isprint
ispunct
isspace
isupper
iswctype
isxdigit
_write
localeconv
log10
longjmp
malloc
mbstowcs
memchr
memcmp
memcpy
memmove
memset
perror
printf
putc
puts
putwc
qsort
raise
realloc
rand
rename
rewind
setlocale
setvbuf
signal
sinh
sprintf
srand
strcat
strchr
strcmp
strcoll
strcpy
strcpy_s
strcspn
strerror
strftime
strlen
strncat
strncmp
strncpy
strpbrk
strrchr
strspn
strstr
strtok
strtok_s
strtol
strtoul
strxfrm
swscanf_s
tan
tanh
tolower
toupper
towlower
towupper
ungetc
vfprintf
ungetwc
wcscat
wcschr
wcscmp
wcscoll
wcscpy
wcscspn
wcsftime
wcslen
wcsncmp
wcsrchr
wcsstr
wcstombs
wcstoul
wcsxfrm

ncrypt

BCryptCloseAlgorithmProvider
BCryptGenRandom
BCryptOpenAlgorithmProvider
NCryptDecrypt
NCryptDeleteKey
NCryptFreeObject
NCryptGetProperty
NCryptOpenKey
NCryptOpenStorageProvider
NCryptSignHash

ole32

CoCreateInstance
CoGetMalloc
CoInitialize
CoInitializeEx
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
CreateBindCtx
OleLoadFromStream
OleSaveToStream
PropVariantClear
StringFromGUID2

oleaut32

OleCreatePropertyFrame
SysFreeString

setupapi

SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA
SetupDiGetDeviceInterfaceDetailA
SetupDiGetDeviceRegistryPropertyA

shell32

CommandLineToArgvW
DragAcceptFiles
DragFinish
DragQueryFileW
ExtractIconExW
SHGetFolderPathW
SHGetSpecialFolderPathA
ShellExecuteW

shlwapi

SHCreateStreamOnFileA

user32

AdjustWindowRectEx
BeginPaint
CallNextHookEx
CallWindowProcW
ChangeDisplaySettingsExW
ClientToScreen
ClipCursor
CloseClipboard
CopyIcon
CopyImage
CreateIconFromResource
CreateIconIndirect
CreateWindowExA
CreateWindowExW
DefWindowProcA
DefWindowProcW
DestroyCursor
DestroyIcon
DestroyWindow
DialogBoxIndirectParamW
DispatchMessageA
DispatchMessageW
DrawIcon
DrawTextW
EmptyClipboard
EndDialog
EndPaint
EnumDisplayDevicesW
EnumDisplayMonitors
EnumDisplaySettingsW
FindWindowW
FlashWindowEx
FrameRect
GetAsyncKeyState
GetClassInfoExW
GetClientRect
GetClipCursor
GetClipboardData
GetClipboardSequenceNumber
GetCursorInfo
GetCursorPos
GetDC
GetDesktopWindow
GetDlgItem
GetDoubleClickTime
GetFocus
GetForegroundWindow
GetIconInfo
GetKeyState
GetKeyboardLayout
GetKeyboardState
GetMenu
GetMessageExtraInfo
GetMessageW
GetMonitorInfoW
GetParent
GetProcessWindowStation
GetPropW
GetRawInputData
GetRawInputDeviceInfoA
GetRawInputDeviceList
GetSystemMetrics
GetUpdateRect
GetUserObjectInformationW
GetWindowLongPtrA
GetWindowLongPtrW
GetWindowLongW
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
IntersectRect
InvalidateRect
IsClipboardFormatAvailable
IsIconic
IsRectEmpty
KillTimer
LoadCursorA
LoadCursorW
LoadIconW
MapVirtualKeyW
MessageBoxA
MessageBoxW
OpenClipboard
PeekMessageA
PeekMessageW
PostMessageW
PostThreadMessageW
PtInRect
RegisterClassExA
RegisterClassExW
RegisterClassW
RegisterDeviceNotificationW
RegisterRawInputDevices
RegisterWindowMessageA
ReleaseCapture
ReleaseDC
RemovePropW
ScreenToClient
SendMessageA
SendMessageW
SetCapture
SetClipboardData
SetCursor
SetCursorPos
SetFocus
SetForegroundWindow
SetLayeredWindowAttributes
SetPropW
SetTimer
SetWindowLongPtrA
SetWindowLongPtrW
SetWindowLongW
SetWindowPos
SetWindowRgn
SetWindowTextW
SetWindowsHookExW
ShowWindow
SystemParametersInfoA
SystemParametersInfoW
ToUnicode
TrackMouseEvent
TranslateMessage
UnhookWindowsHookEx
UnregisterClassA
UnregisterClassW
UnregisterDeviceNotification
ValidateRect

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

avicap32

capCreateCaptureWindowA
capGetDriverDescriptionA

winmm

timeBeginPeriod
timeEndPeriod
waveInAddBuffer
waveInClose
waveInGetDevCapsW
waveInGetNumDevs
waveInOpen
waveInPrepareHeader
waveInReset
waveInStart
waveInUnprepareHeader
waveOutClose
waveOutGetDevCapsW
waveOutGetErrorTextW
waveOutGetNumDevs
waveOutOpen
waveOutPrepareHeader
waveOutReset
waveOutUnprepareHeader
waveOutWrite

ws2_32

WSACleanup
WSACloseEvent
WSACreateEvent
WSAEventSelect
WSAGetLastError
WSAIoctl
WSARecvFrom
WSASendTo
WSASetLastError
WSASocketA
WSAStartup
WSAStringToAddressA
WSAWaitForMultipleEvents
__WSAFDIsSet
accept
bind
closesocket
connect
freeaddrinfo
getaddrinfo
gethostbyaddr
gethostbyname
gethostname
getnameinfo
getpeername
getservbyname
getservbyport
getsockname
getsockopt
htonl
htons
inet_addr
inet_ntoa
inet_ntop
inet_pton
ioctlsocket
listen
ntohl
ntohs
recv
recvfrom
select
send
sendto
setsockopt
shutdown
socket

Exports

Exports

FT_Activate_Size
FT_Add_Default_Modules
FT_Add_Module
FT_Angle_Diff
FT_Atan2
FT_Attach_File
FT_Attach_Stream
FT_Bitmap_Blend
FT_Bitmap_Convert
FT_Bitmap_Copy
FT_Bitmap_Done
FT_Bitmap_Embolden
FT_Bitmap_Init
FT_Bitmap_New
FT_CeilFix
FT_Cos
FT_DivFix
FT_Done_Face
FT_Done_FreeType
FT_Done_Glyph
FT_Done_Library
FT_Done_MM_Var
FT_Done_Size
FT_Error_String
FT_Face_GetCharVariantIndex
FT_Face_GetCharVariantIsDefault
FT_Face_GetCharsOfVariant
FT_Face_GetVariantSelectors
FT_Face_GetVariantsOfChar
FT_Face_Properties
FT_FloorFix
FT_Get_Advance
FT_Get_Advances
FT_Get_BDF_Charset_ID
FT_Get_BDF_Property
FT_Get_CMap_Format
FT_Get_CMap_Language_ID
FT_Get_Char_Index
FT_Get_Charmap_Index
FT_Get_Color_Glyph_ClipBox
FT_Get_Color_Glyph_Layer
FT_Get_Color_Glyph_Paint
FT_Get_Colorline_Stops
FT_Get_First_Char
FT_Get_Font_Format
FT_Get_Glyph
FT_Get_Glyph_Name
FT_Get_Kerning
FT_Get_MM_Blend_Coordinates
FT_Get_MM_Var
FT_Get_MM_WeightVector
FT_Get_Module
FT_Get_Multi_Master
FT_Get_Name_Index
FT_Get_Next_Char
FT_Get_PS_Font_Info
FT_Get_PS_Font_Private
FT_Get_PS_Font_Value
FT_Get_Paint
FT_Get_Paint_Layers
FT_Get_Postscript_Name
FT_Get_Renderer
FT_Get_Sfnt_LangTag
FT_Get_Sfnt_Name
FT_Get_Sfnt_Name_Count
FT_Get_Sfnt_Table
FT_Get_SubGlyph_Info
FT_Get_Track_Kerning
FT_Get_Transform
FT_Get_TrueType_Engine_Type
FT_Get_Var_Axis_Flags
FT_Get_Var_Blend_Coordinates
FT_Get_Var_Design_Coordinates
FT_Get_X11_Font_Format
FT_GlyphSlot_Embolden
FT_GlyphSlot_Oblique
FT_GlyphSlot_Own_Bitmap
FT_Glyph_Copy
FT_Glyph_Get_CBox
FT_Glyph_Stroke
FT_Glyph_StrokeBorder
FT_Glyph_To_Bitmap
FT_Glyph_Transform
FT_Gzip_Uncompress
FT_Has_PS_Glyph_Names
FT_Init_FreeType
FT_Library_SetLcdFilter
FT_Library_SetLcdFilterWeights
FT_Library_SetLcdGeometry
FT_Library_Version
FT_List_Add
FT_List_Finalize
FT_List_Find
FT_List_Insert
FT_List_Iterate
FT_List_Remove
FT_List_Up
FT_Load_Char
FT_Load_Glyph
FT_Load_Sfnt_Table
FT_Matrix_Invert
FT_Matrix_Multiply
FT_MulDiv
FT_MulFix
FT_New_Face
FT_New_Glyph
FT_New_Library
FT_New_Memory_Face
FT_New_Size
FT_Open_Face
FT_Outline_Check
FT_Outline_Copy
FT_Outline_Decompose
FT_Outline_Done
FT_Outline_Embolden
FT_Outline_EmboldenXY
FT_Outline_GetInsideBorder
FT_Outline_GetOutsideBorder
FT_Outline_Get_Bitmap
FT_Outline_Get_CBox
FT_Outline_Get_Orientation
FT_Outline_New
FT_Outline_Render
FT_Outline_Reverse
FT_Outline_Transform
FT_Outline_Translate
FT_Palette_Data_Get
FT_Palette_Select
FT_Palette_Set_Foreground_Color
FT_Property_Get
FT_Property_Set
FT_Reference_Face
FT_Reference_Library
FT_Remove_Module
FT_Render_Glyph
FT_Request_Size
FT_RoundFix
FT_Select_Charmap
FT_Select_Size
FT_Set_Char_Size
FT_Set_Charmap
FT_Set_Debug_Hook
FT_Set_Default_Log_Handler
FT_Set_Default_Properties
FT_Set_Log_Handler
FT_Set_MM_Blend_Coordinates
FT_Set_MM_Design_Coordinates
FT_Set_MM_WeightVector
FT_Set_Named_Instance
FT_Set_Pixel_Sizes
FT_Set_Renderer
FT_Set_Transform
FT_Set_Var_Blend_Coordinates
FT_Set_Var_Design_Coordinates
FT_Sfnt_Table_Info
FT_Sin
FT_Stream_OpenGzip
FT_Stream_OpenLZW
FT_Stroker_BeginSubPath
FT_Stroker_ConicTo
FT_Stroker_CubicTo
FT_Stroker_Done
FT_Stroker_EndSubPath
FT_Stroker_Export
FT_Stroker_ExportBorder
FT_Stroker_GetBorderCounts
FT_Stroker_GetCounts
FT_Stroker_LineTo
FT_Stroker_New
FT_Stroker_ParseOutline
FT_Stroker_Rewind
FT_Stroker_Set
FT_Tan
FT_Trace_Set_Default_Level
FT_Trace_Set_Level
FT_Vector_From_Polar
FT_Vector_Length
FT_Vector_Polarize
FT_Vector_Rotate
FT_Vector_Transform
FT_Vector_Unit
TT_New_Context
TT_RunIns
gme_ay_type
gme_clear_playlist
gme_delete
gme_enable_accuracy
gme_equalizer
gme_free_info
gme_gbs_type
gme_gym_type
gme_hes_type
gme_identify_extension
gme_identify_file
gme_identify_header
gme_ignore_silence
gme_kss_type
gme_load_custom
gme_load_data
gme_load_file
gme_multi_channel
gme_mute_voice
gme_mute_voices
gme_new_emu
gme_new_emu_multi_channel
gme_nsf_type
gme_nsfe_type
gme_open_data
gme_open_file
gme_play
gme_sap_type
gme_seek
gme_seek_samples
gme_set_autoload_playback_limit
gme_set_equalizer
gme_set_fade
gme_set_stereo_depth
gme_set_tempo
gme_set_user_cleanup
gme_set_user_data
gme_spc_type
gme_start_track
gme_tell
gme_tell_samples
gme_track_count
gme_track_ended
gme_track_info
gme_type
gme_type_extension
gme_type_list
gme_type_multitrack
gme_type_system
gme_user_data
gme_vgm_type
gme_vgz_type
gme_voice_count
gme_voice_name
gme_warning
gme_wrong_file_type

Sections

.text
Size: 60.7MB - Virtual size: 60.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 10.6MB - Virtual size: 10.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 843KB - Virtual size: 843KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 9.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 227KB - Virtual size: 227KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
minhook.x32.dll
.dll windows:6 windows x86

52c055e1ff53cb2f7ea2e1dcd98d19d5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualAlloc
VirtualFree
VirtualQuery
CloseHandle
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
Sleep
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
OpenThread
SuspendThread
ResumeThread
GetThreadContext
SetThreadContext
FlushInstructionCache
VirtualProtect
GetModuleHandleW
GetProcAddress
CreateToolhelp32Snapshot
Thread32First
Thread32Next
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter

vcruntime140

memset
_except_handler4_common
__std_type_info_destroy_list

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll
_initterm_e
_initterm
_execute_onexit_table
_cexit
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv

Exports

Exports

MH_ApplyQueued
MH_CreateHook
MH_CreateHookApi
MH_CreateHookApiEx
MH_DisableHook
MH_EnableHook
MH_Initialize
MH_QueueDisableHook
MH_QueueEnableHook
MH_RemoveHook
MH_StatusToString
MH_Uninitialize

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 728B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
xinput9_1_0.dll
.dll windows:6 windows x86

acf0bcdeb101041b235d83f66eb3c5a5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DisableThreadLibraryCalls
CreateThread
LoadLibraryW
GetSystemDirectoryW
GetProcAddress
GetFileAttributesExW
CreateFileW
FormatMessageA
LocalFree
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
WideCharToMultiByte
GetFileInformationByHandleEx
GetLastError
CloseHandle
AreFileApisANSI
UnhandledExceptionFilter

msvcp140

?_Xout_of_range@std@@YAXPBD@Z
?_Winerror_map@std@@YAHH@Z
?_Xlength_error@std@@YAXPBD@Z
?_Syserror_map@std@@YAPBDH@Z

vcruntime140

__CxxFrameHandler3
__std_exception_destroy
__std_exception_copy
_CxxThrowException
__std_type_info_destroy_list
memset
_except_handler4_common
memcpy
memmove

api-ms-win-crt-heap-l1-1-0

free
_callnewh
malloc

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
_execute_onexit_table
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_cexit
_invalid_parameter_noinfo_noreturn
terminate
_initialize_narrow_environment

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func

Exports

Exports

XInputGetCapabilities
XInputGetDSoundAudioDeviceGuids
XInputGetState
XInputSetState

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5ad0680f8b9fdebbbbf07ad777c10967

Headers

DLL Characteristics

File Characteristics

Imports

minhook.x32

opengl32

libcocos2d

fmod

glew32

discord_game_sdk

kernel32

user32

gdi32

shell32

msvcp140

imm32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 697KB - Virtual size: 697KB

.rdata Size: 109KB - Virtual size: 109KB

.data Size: 10KB - Virtual size: 13KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 34KB - Virtual size: 33KB

edfce0ff7a2d3e9b71bd116fc36e7bcb

Code Sign

02:8a:a6:e7:b5:16:c0:d1:55:f1:5d:62:90:a4:30:e3Certificate

Extended Key Usages

Key Usages

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5cCertificate

Extended Key Usages

Key Usages

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66Certificate

Extended Key Usages

Key Usages

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1bCertificate

Extended Key Usages

Key Usages

53:87:86:d7:51:2f:05:38:75:67:07:46:d7:0e:1f:5e:84:17:ff:bdSigner

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

kernel32

advapi32

ktmw32

ole32

shell32

Exports

Exports

Sections

.text Size: 2.4MB - Virtual size: 2.4MB

.rdata Size: 502KB - Virtual size: 501KB

.data Size: 2KB - Virtual size: 5KB

.reloc Size: 67KB - Virtual size: 67KB

7f79a986d1250a6769db80418985e98e

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

crypt32

gdi32

.text
Size: 697KB - Virtual size: 697KB

.rdata
Size: 109KB - Virtual size: 109KB

.data
Size: 10KB - Virtual size: 13KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 34KB - Virtual size: 33KB

02:8a:a6:e7:b5:16:c0:d1:55:f1:5d:62:90:a4:30:e3
Certificate

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

53:87:86:d7:51:2f:05:38:75:67:07:46:d7:0e:1f:5e:84:17:ff:bd
Signer

.text
Size: 2.4MB - Virtual size: 2.4MB

.rdata
Size: 502KB - Virtual size: 501KB

.data
Size: 2KB - Virtual size: 5KB

.reloc
Size: 67KB - Virtual size: 67KB

.text
Size: 60.7MB - Virtual size: 60.7MB

.data
Size: 1.1MB - Virtual size: 1.1MB

.rodata
Size: 15KB - Virtual size: 14KB

.rdata
Size: 10.6MB - Virtual size: 10.6MB

.pdata
Size: 843KB - Virtual size: 843KB

.xdata
Size: 1.2MB - Virtual size: 1.2MB

.bss
Size: - Virtual size: 9.5MB

.edata
Size: 7KB - Virtual size: 6KB

.idata
Size: 27KB - Virtual size: 27KB

.CRT
Size: 512B - Virtual size: 112B

.tls
Size: 512B - Virtual size: 16B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 227KB - Virtual size: 227KB

.text
Size: 10KB - Virtual size: 9KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 1024B - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 728B

.text
Size: 15KB - Virtual size: 14KB

.rdata
Size: 6KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 1KB - Virtual size: 1KB