5a2e0ae1098ead152c7af67ceb59b311de99327fa53d54eecd70549418edf7e3

Sharing

Copy URL Twitter E-mail

General

Target

5a2e0ae1098ead152c7af67ceb59b311de99327fa53d54eecd70549418edf7e3
Size

14.5MB
MD5

c94ff7fd2df952accad4b7de26fe6f9f
SHA1

c1457df12c42e373ad0324c909fcac765d721065
SHA256

5a2e0ae1098ead152c7af67ceb59b311de99327fa53d54eecd70549418edf7e3
SHA512

ab93e00046949cb06e53a123c63c04b7a545eb352bb3f2cd9a9ccd6ec5251f5800b9617d78ba309e32a2788f415d152dc9cf1b79385e8812f8dfa4cab5c9dcc3
SSDEEP

393216:3u+imN0khNqiP4x8lEqaYUKAyProldxm5Ao+TZ1AA:3Piy6iwxQaYTXDolLmt+z

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/Разное/Программы/Soundpad/steam_api64.dll	upx

Unsigned PE 8 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Разное/Программы/Soundpad/steam_api64.dll
unpack001/Читы/Call of Duty Black Ops/Cranium BOM/Cranium BOM.dll
unpack001/Читы/Counter-Strike Source/Cranium CSS/Cranium CSS.dll
unpack001/Читы/Garry's Mod/Cranium (x86-64 - Chromium + 64 bit binaries)/Cranium Garry's Mod.dll
unpack001/Читы/Half-Life 2 Deathmatch/Cranium HL2DM/Cranium HL2DM.dll
unpack001/Читы/Team Fortress 2/SEOwnedDE/SEOwnedDE.dll
unpack001//Battlefield 4/BF4Simple/BF4Simple.exe
unpack001//Left 4 Dead 2/Dunt0/Dunt0.dll

Files

5a2e0ae1098ead152c7af67ceb59b311de99327fa53d54eecd70549418edf7e3
.zip
Конфиги/Call of Duty Black Ops/Cranium BOM/urbanichkacfgcraniumbom.crmbom
Конфиги/Call of Duty Black Ops/Cranium BOM/Путь установки.txt
Конфиги/Counter-Strike Global Offensive/Counter-Strike Global Offensive Config/urbanichka.cfg
Конфиги/Counter-Strike Global Offensive/Counter-Strike Global Offensive Config/Путь установки.txt
Конфиги/Counter-Strike Source/Сranium CSS/craniumcss.cfg
Конфиги/Counter-Strike Source/Сranium CSS/Путь установки.txt
Конфиги/Garry's Mod/Garry's Mod Config/autoexec.cfg
Конфиги/Garry's Mod/Garry's Mod Config/Путь установки.txt
Конфиги/Garry's Mod/Сranium Garry's Mod/urbanichkacfgcranium.crmgmod
Конфиги/Garry's Mod/Сranium Garry's Mod/Путь установки.txt
Конфиги/Half-Life 2 Deathmatch/Cranium HL2DM/craniumhl2dm.cfg
Конфиги/Half-Life 2 Deathmatch/Cranium HL2DM/Путь установки.txt
Конфиги/Team Fortress 2/SEOwnedDE/urbanichkacfgtf2seownedde.json
Конфиги/Team Fortress 2/SEOwnedDE/Путь установки.txt
Конфиги/Team Fortress 2/Team Fortress 2 Config/Steam config tf2.txt
Конфиги/Team Fortress 2/Team Fortress 2 Config/urbanichka.cfg
Конфиги/Team Fortress 2/Team Fortress 2 Config/Путь установки.txt
Разное/Программы/Soundpad/Profile/CRACKED BY Ray_Black/SteamUserID.cfg
Разное/Программы/Soundpad/Soundpad.exe
.exe windows:6 windows x64

43d019e6db101f731f8ec1031876208c

Code Sign

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

07/06/2005, 08:09

Not After

30/05/2020, 10:48

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

62:5c:4d:90:8c:d5:42:fb:ab:2e:a5:73:3f:f1:54:19
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

27/04/2011, 00:00

Not After

30/05/2020, 10:48

Subject

CN=COMODO Time Stamping CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2b:73:db:74:63:11:4c:5a:5b:32:4a:f2:30:57:72:49
Certificate

Issuer

CN=COMODO Time Stamping CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02/05/2019, 00:00

Not After

30/05/2020, 10:48

Subject

CN=Sectigo SHA-1 Time Stamping Signer,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:49:34:c0:ab:e3:c1:c9:81:d8:82:d3:44:50:13:52
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11/10/2017, 00:00

Not After

11/10/2019, 23:59

Subject

CN=Arthur Lepp,OU=IT,O=Arthur Lepp,POSTALCODE=50825,STREET=Iltisstr. 142,L=Köln,ST=NRW,C=DE,2.5.4.18=#13053530383235

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3c:15:4a:ff:78:19:9b:f3:fd:fd:59:f6:6a:64:63:c0:ba:f8:0d:48
Signer

Actual PE Digest

3c:15:4a:ff:78:19:9b:f3:fd:fd:59:f6:6a:64:63:c0:ba:f8:0d:48

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

usp10

ScriptBreak
ScriptItemize

dwmapi

DwmIsCompositionEnabled
DwmExtendFrameIntoClientArea

steam_api64

SteamAPI_Init
SteamAPI_Shutdown
SteamInternal_CreateInterface
SteamAPI_GetHSteamUser
SteamInternal_ContextInit
SteamAPI_GetHSteamPipe

kernel32

GetDiskFreeSpaceExW
GetFileInformationByHandle
GetVolumeInformationW
DisconnectNamedPipe
FlushFileBuffers
WriteFile
WideCharToMultiByte
CancelIo
WaitForMultipleObjects
ReadFile
ConnectNamedPipe
CreateNamedPipeW
SetUnhandledExceptionFilter
UnmapViewOfFile
GetCurrentProcessId
CreateFileW
GetTempPathW
GetProcAddress
LoadLibraryW
CopyFileW
CreateEventW
OutputDebugStringW
GetModuleHandleW
GetCurrentThreadId
GetCurrentProcess
MoveFileExW
ReplaceFileW
FreeLibrary
EnumResourceNamesW
LoadLibraryExW
FreeResource
LockResource
LoadResource
SizeofResource
FindResourceW
QueryFullProcessImageNameW
OpenProcess
Sleep
CreateDirectoryW
CloseHandle
GetExitCodeProcess
WaitForSingleObject
GetModuleFileNameW
GetLastError
WaitForSingleObjectEx
FindFirstFileW
CreateEventExW
FindNextFileW
K32GetModuleFileNameExW
CreateMutexW
FindClose
GetFileAttributesW
ReleaseMutex
OpenFileMappingW
FormatMessageW
GetFileAttributesExW
K32EnumProcesses
GetWindowsDirectoryW
K32EnumProcessModules
CreateFileMappingW
MapViewOfFile
HeapAlloc
LocalFree
GetProcessHeap
GetLocalTime
HeapSetInformation
MultiByteToWideChar
SetErrorMode
GetFileTime
GetLongPathNameW
GetTempFileNameW
SetCurrentDirectoryW
GetFileType
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
ReleaseSemaphore
ExitProcess
SetThreadPriority
GetExitCodeThread
ResumeThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetProcessAffinityMask
ExpandEnvironmentStringsW
GetACP
GetLocaleInfoW
IsValidLocale
GetThreadLocale
SetThreadLocale
GetUserDefaultLCID
QueryPerformanceCounter
QueryPerformanceFrequency
GetEnvironmentVariableW
IsDebuggerPresent
TerminateProcess
GetVersionExW
IsValidCodePage
GetCPInfo
RtlCaptureContext
GetCurrentThread
GetCommandLineW
GetSystemTimeAsFileTime
PeekNamedPipe
CreateThread
IsBadReadPtr
IsBadStringPtrA
RaiseException
GetSystemDirectoryA
GetModuleHandleA
LoadLibraryA
SetLastError
MulDiv
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalFree
HeapSize
GlobalSize
GetStdHandle
FreeConsole
AttachConsole
WriteConsoleA
WriteConsoleW
FillConsoleOutputCharacterW
GetConsoleScreenBufferInfo
SetConsoleCursorPosition
ReadConsoleOutputCharacterA
DuplicateHandle
SwitchToThread
GetStringTypeW
RtlPcToFileHeader
EncodePointer
DecodePointer
InitializeCriticalSectionAndSpinCount
GetTickCount
CompareStringW
LCMapStringW
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetStartupInfoW
InitializeSListHead
CreateTimerQueue
SignalObjectAndWait
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetThreadTimes
FreeLibraryAndExitThread
VirtualAlloc
VirtualProtect
VirtualFree
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
RtlUnwindEx
GetDriveTypeW
GetFullPathNameW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetModuleHandleExW
SetStdHandle
ExitThread
GetConsoleMode
ReadConsoleW
GetConsoleCP
SetFilePointerEx
GetTimeZoneInformation
HeapFree
GetDateFormatW
GetTimeFormatW
EnumSystemLocalesW
GetCurrentDirectoryW
RtlUnwind
HeapReAlloc
SetEndOfFile
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
FindFirstFileExW
GetCommandLineA
ResetEvent
SetEvent
DeleteFileW
GetLogicalDriveStringsW
GetFileSizeEx

user32

MapWindowPoints
WindowFromPoint
ChildWindowFromPointEx
InflateRect
PtInRect
SetParent
GetWindow
IsDialogMessageW
SetScrollInfo
GetScrollInfo
SystemParametersInfoW
CreateDialogParamW
GetDlgItem
GetWindowPlacement
SetLayeredWindowAttributes
FlashWindowEx
IsIconic
IsZoomed
CreateDialogIndirectParamW
GetDialogBaseUnits
DrawMenuBar
GetSystemMenu
EnableMenuItem
SetWindowRgn
DestroyIcon
LoadBitmapW
LoadIconW
LoadImageW
DrawStateW
SetRectEmpty
CopyRect
OffsetRect
DrawFrameControl
DrawIconEx
DestroyCursor
GetMenuState
CreateMenu
CreatePopupMenu
DestroyMenu
GetSubMenu
InsertMenuW
AppendMenuW
ModifyMenuW
RemoveMenu
SetMenuInfo
InsertMenuItemW
SetMenuItemInfoW
DrawEdge
CheckMenuItem
GetMenuItemID
GetSysColorBrush
SetRect
CheckMenuRadioItem
RegisterWindowMessageW
SetMenu
ClientToScreen
EndDialog
EnumChildWindows
ChildWindowFromPoint
GetComboBoxInfo
UnionRect
GetClassInfoW
IsRectEmpty
EnableScrollBar
keybd_event
GetWindowTextLengthW
HideCaret
ShowCaret
RegisterClipboardFormatW
GetClipboardFormatNameW
GetProcessDefaultLayout
GetWindowTextW
MessageBeep
GetClassNameW
CreateAcceleratorTableW
DestroyAcceleratorTable
TranslateAcceleratorW
GetMessageW
ValidateRect
GetWindowDC
BeginPaint
EndPaint
ValidateRgn
NotifyWinEvent
ChangeDisplaySettingsExW
EnumDisplaySettingsW
MonitorFromPoint
MonitorFromWindow
GetMonitorInfoW
EnumDisplayMonitors
IsClipboardFormatAvailable
wsprintfW
AdjustWindowRectEx
ShowCursor
BringWindowToTop
CreateWindowExW
RegisterClassW
PostMessageW
PostThreadMessageW
MessageBoxW
ScrollWindow
RedrawWindow
InvalidateRect
GetUpdateRgn
GetCursorPos
UpdateWindow
GetMenuItemInfoW
ScreenToClient
SetCursorPos
GetClientRect
FindWindowExW
TrackPopupMenu
GetMenuItemCount
IsWindowEnabled
EnableWindow
ReleaseCapture
SetCapture
GetCapture
VkKeyScanW
GetKeyState
GetFocus
GetActiveWindow
SetFocus
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
MoveWindow
AnimateWindow
ShowWindow
IsWindow
CallWindowProcW
PostQuitMessage
GetMessageTime
GetMessagePos
UnregisterHotKey
RegisterHotKey
TranslateMessage
GetParent
SetWindowLongPtrW
GetWindowLongPtrW
FillRect
DrawFocusRect
GetSysColor
DrawTextW
GetSystemMetrics
GetIconInfo
CreateIconIndirect
ReleaseDC
GetDC
DdeFreeStringHandle
DdeQueryStringW
DdeCreateStringHandleW
DdeGetLastError
DdeFreeDataHandle
DdeGetData
DdeCreateDataHandle
DdeClientTransaction
DdeNameService
DdePostAdvise
DdeDisconnect
DdeConnect
DdeUninitialize
DdeInitializeW
LoadCursorW
SetCursor
KillTimer
SetTimer
MsgWaitForMultipleObjects
DispatchMessageW
GetClassLongPtrW
SetClassLongPtrW
SendMessageW
GetWindowThreadProcessId
GetWindowLongW
SetWindowPos
MapVirtualKeyW
GetKeyNameTextW
SetWindowsHookExW
UnhookWindowsHookEx
RegisterRawInputDevices
GetRawInputData
CallNextHookEx
GetForegroundWindow
GetDesktopWindow
GetShellWindow
GetWindowRect
SendInput
GetAsyncKeyState
GetDoubleClickTime
ExitWindowsEx
SetForegroundWindow
SetWindowLongW
DestroyWindow
UnregisterClassW
SetWindowTextW
DefWindowProcW
IsMenu
PeekMessageW

advapi32

CryptDestroyHash
CryptHashData
GetUserNameW
RegEnumKeyW
RegDeleteKeyW
RegCloseKey
CryptDestroyKey
CryptAcquireContextW
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
RegCreateKeyExW
RegDeleteTreeW
RegSetValueExW
RegOpenKeyExW
RegDeleteValueW
RegEnumValueW
RegQueryValueExW
CloseServiceHandle
OpenSCManagerW
OpenServiceW
NotifyServiceStatusChangeW
OpenProcessToken
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
AdjustTokenPrivileges
LookupPrivilegeValueW

shell32

DragAcceptFiles
DragFinish
ExtractIconW
SHGetMalloc
SHBrowseForFolderW
Shell_NotifyIconW
SHGetFileInfoW
ord6
DragQueryPoint
DragQueryFileW
CommandLineToArgvW
SHGetFolderPathW
ord155
ShellExecuteExW
SHChangeNotify
SHGetPathFromIDListW
ord190
SHCreateItemFromParsingName
ExtractIconExW
SHOpenFolderAndSelectItems
SHCreateDirectoryExW

ole32

OleIsCurrentClipboard
OleFlushClipboard
RegisterDragDrop
OleGetClipboard
OleSetClipboard
DoDragDrop
CoUninitialize
CoSetProxyBlanket
CoInitializeEx
PropVariantClear
CoTaskMemFree
CLSIDFromString
CoCreateInstance
CoLockObjectExternal
ReleaseStgMedium
RevokeDragDrop
CoTaskMemAlloc
OleUninitialize
OleInitialize

unitefxcontrol

?InstallUfx@ApoRegistry@@QEAA?AUretCode@@XZ
?PlaySoundData@UniteFxControl@@QEAAJAEAV?$vector@EV?$allocator@E@std@@@std@@AEBVAudioFormat@@@Z
?SetLogLevel@ApoRegistry@@QEAA?AUretCode@@W4LogLevel@Leppsoft@@@Z
?GetLogLevel@ApoRegistry@@QEAA?AW4LogLevel@Leppsoft@@XZ
?PlaySoundFile@UniteFxControl@@QEAAJPEB_WAEA_NAEAUUfxMediaControl@@@Z
?PlaySoundFileEx@UniteFxControl@@QEAAJPEAVAudioFile@@AEA_NAEAUUfxMediaControl@@@Z
??0ApoRegistry@@QEAA@XZ
??1ApoRegistry@@QEAA@XZ
?GetDeviceList@ApoRegistry@@QEAA?AUretCode@@PEAPEAUApoDeviceInfo@@PEAHW4EnumDeviceType@@_N@Z
?IsElevated@ApoRegistry@@QEAA?AUretCode@@PEA_N@Z
?GetDrmProtection@ApoRegistry@@QEAA?AUretCode@@PEA_N@Z
??0UniteFxControl@@QEAA@XZ
??1UniteFxControl@@QEAA@XZ
?GetFilterBlockVoice@UniteFxControl@@QEAAJAEA_N@Z
?SetFilterBlockVoice@UniteFxControl@@QEAAJAEA_N@Z
?RestoreSetup@ApoRegistry@@QEAA?AUretCode@@PEAUUfxSetupStatus@@@Z
?GetSetupStatus@ApoRegistry@@QEAA?AUUfxSetupStatus@@XZ
??0ServiceControl@@QEAA@XZ
??1ServiceControl@@QEAA@XZ
?RestartService@ServiceControl@@QEAA?AUretCode@@AEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?SetDrmProtection@ApoRegistry@@QEAA?AUretCode@@_N@Z
?UnregisterApo@ApoRegistry@@QEAA?AUretCode@@XZ
?RegisterApo@ApoRegistry@@QEAA?AUretCode@@AEBV?$vector@VStr@@V?$allocator@VStr@@@std@@@std@@@Z
?UninstallUfx@ApoRegistry@@QEAA?AUretCode@@XZ

wsock32

WSACleanup
WSAStartup

comctl32

ImageList_GetImageCount
ImageList_Add
ImageList_ReplaceIcon
ImageList_SetBkColor
ImageList_Destroy
ImageList_SetDragCursorImage
ImageList_Replace
ImageList_Remove
ImageList_Create
ord16
ImageList_Draw
ImageList_GetIconSize
ImageList_GetImageInfo
ImageList_Copy
ImageList_BeginDrag
ImageList_EndDrag
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragMove
ord17

rpcrt4

UuidToStringW
RpcStringFreeW

oleacc

CreateStdAccessibleObject

uxtheme

IsThemeActive
IsAppThemed
IsThemeBackgroundPartiallyTransparent
OpenThemeData
IsThemePartDefined
GetCurrentThemeName
SetWindowTheme
GetThemeBackgroundExtent
GetThemeFont
GetThemeSysFont
GetThemeSysColor
GetThemeInt
GetThemePartSize
GetThemeMargins
CloseThemeData
GetThemeBackgroundContentRect
DrawThemeParentBackground
GetThemeColor
DrawThemeBackground

wininet

InternetOpenW
InternetQueryDataAvailable
InternetReadFile
HttpQueryInfoW
HttpSendRequestW
InternetCloseHandle
InternetConnectW
HttpOpenRequestW

mf

MFCreateTranscodeProfile
MFCreateMediaSession
MFCreateTranscodeTopology
MFGetService

mfplat

MFCreateMFByteStreamOnStream
MFCreateAttributes
MFCreateSample
MFCreateMemoryBuffer
MFShutdown
MFStartup
MFCreateSourceResolver
MFCreateMediaType

mfreadwrite

MFCreateSourceReaderFromURL
MFCreateSourceReaderFromByteStream

shlwapi

ord219
SHAutoComplete
AssocQueryStringW
ord12

avrt

AvSetMmThreadCharacteristicsW
AvRevertMmThreadCharacteristics

msimg32

GradientFill
AlphaBlend

gdi32

GetStockObject
MaskBlt
Pie
PolyPolygon
Rectangle
GetObjectType
GetClipBox
RoundRect
SelectClipRgn
ExtSelectClipRgn
GetBkColor
Ellipse
Arc
GetPixel
ExtFloodFill
CreateSolidBrush
CreatePen
BitBlt
GetRegionData
ExtCreateRegion
SetGraphicsMode
SetMapMode
SetLayout
GetLayout
SetPixel
EnumFontFamiliesExW
EndPage
StartPage
EndDoc
StartDocW
CreateDCW
SetAbortProc
GetSystemPaletteEntries
PlayEnhMetaFile
GetEnhMetaFileHeader
GetEnhMetaFileW
DeleteEnhMetaFile
CreateEnhMetaFileW
CloseEnhMetaFile
CreateICW
GetTextExtentExPointW
GetCharABCWidthsW
PtInRegion
GetRgnBox
EqualRgn
MoveToEx
LineTo
GetDIBColorTable
CreateDIBSection
GetDIBits
CreateDIBitmap
GetPaletteEntries
GetNearestPaletteIndex
CreatePalette
GetOutlineTextMetricsW
GetDeviceCaps
CreateFontIndirectW
GdiFlush
SetBrushOrgEx
GetTextMetricsW
SelectPalette
RealizePalette
ExcludeClipRect
CreateRectRgn
SetTextColor
SetBkMode
GetObjectW
SetBkColor
SelectObject
DeleteObject
DeleteDC
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
OffsetRgn
RectInRegion
CreateRectRgnIndirect
CombineRgn
GetTextExtentPoint32W
ExtCreatePen
CreatePatternBrush
CreateHatchBrush
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
PolyBezier
Polyline
Polygon
ExtTextOutW
ModifyWorldTransform
SetWorldTransform
GetWorldTransform
SetStretchBltMode
SetROP2
StretchDIBits
StretchBlt
SetPolyFillMode

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

comdlg32

GetSaveFileNameW
CommDlgExtendedError
ChooseFontW
PrintDlgW
PageSetupDlgW
GetOpenFileNameW

oleaut32

VariantClear
SysAllocString
SysFreeString
VariantInit
SysStringLen
SystemTimeToVariantTime
SafeArrayCreate
SafeArrayDestroy
SafeArrayGetVartype
VarBstrFromCy
SafeArrayLock
SafeArrayUnlock

Sections

.text
Size: 6.6MB - Virtual size: 6.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 150KB - Virtual size: 893KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 219KB - Virtual size: 218KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 916KB - Virtual size: 915KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 127KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Разное/Программы/Soundpad/SteamConfig.ini
Разное/Программы/Soundpad/UniteFxControl.dll
.dll windows:6 windows x64

38e3078f900264dff81caa6939470d10

Code Sign

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

07/06/2005, 08:09

Not After

30/05/2020, 10:48

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

62:5c:4d:90:8c:d5:42:fb:ab:2e:a5:73:3f:f1:54:19
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

27/04/2011, 00:00

Not After

30/05/2020, 10:48

Subject

CN=COMODO Time Stamping CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2b:73:db:74:63:11:4c:5a:5b:32:4a:f2:30:57:72:49
Certificate

Issuer

CN=COMODO Time Stamping CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02/05/2019, 00:00

Not After

30/05/2020, 10:48

Subject

CN=Sectigo SHA-1 Time Stamping Signer,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:49:34:c0:ab:e3:c1:c9:81:d8:82:d3:44:50:13:52
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11/10/2017, 00:00

Not After

11/10/2019, 23:59

Subject

CN=Arthur Lepp,OU=IT,O=Arthur Lepp,POSTALCODE=50825,STREET=Iltisstr. 142,L=Köln,ST=NRW,C=DE,2.5.4.18=#13053530383235

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

bc:51:8d:2d:47:58:93:91:16:14:8e:7d:9e:0f:60:6e:ca:ef:3b:2f
Signer

Actual PE Digest

bc:51:8d:2d:47:58:93:91:16:14:8e:7d:9e:0f:60:6e:ca:ef:3b:2f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

ResetEvent
SetEvent
CreateEventW
WaitForMultipleObjects
GetProcessHeap
HeapAlloc
GetTickCount64
Sleep
HeapFree
GetExitCodeProcess
VerifyVersionInfoW
CopyFileW
VerSetConditionMask
MoveFileExW
CloseHandle
GetLastError
WaitForSingleObject
WriteConsoleW
HeapSize
SetEndOfFile
FlushFileBuffers
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
GetModuleFileNameW
GetCurrentProcess
UnmapViewOfFile
CreateEventExW
FindNextFileW
CreateMutexW
FindClose
GetFileAttributesW
ReleaseMutex
OpenFileMappingW
GetSystemDirectoryW
FormatMessageW
GetFileAttributesExW
CreateFileMappingW
MapViewOfFile
CreateDirectoryW
GetCurrentThreadId
GetLocalTime
GetCurrentProcessId
LocalAlloc
LocalFree
DeleteFileW
CreateFileW
MultiByteToWideChar
QueryPerformanceCounter
QueryPerformanceFrequency
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
DuplicateHandle
WaitForSingleObjectEx
SwitchToThread
GetCurrentThread
GetExitCodeThread
GetStringTypeW
WideCharToMultiByte
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetTickCount
GetModuleHandleW
GetProcAddress
EncodePointer
DecodePointer
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
CreateTimerQueue
SignalObjectAndWait
CreateThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetThreadTimes
FreeLibrary
FreeLibraryAndExitThread
GetModuleHandleA
LoadLibraryExW
GetVersionExW
VirtualAlloc
VirtualProtect
VirtualFree
ReleaseSemaphore
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
LoadLibraryW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
ReadFile
GetFileInformationByHandle
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
ExitProcess
GetModuleHandleExW
ExitThread
GetDateFormatW
GetTimeFormatW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStdHandle
GetConsoleMode
ReadConsoleW
WriteFile
GetConsoleCP
GetFileSizeEx
SetFilePointerEx
HeapReAlloc
SetStdHandle
GetCurrentDirectoryW
GetTimeZoneInformation

advapi32

RegSetValueExW
RegCreateKeyExW
RegDeleteKeyExW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegEnumValueW
RegDeleteValueW
FreeSid
RegDeleteTreeW
RegSetKeySecurity
SetEntriesInAclW
AllocateAndInitializeSid
SetSecurityDescriptorOwner
RegGetKeySecurity
GetSecurityDescriptorDacl
AdjustTokenPrivileges
LookupPrivilegeValueW
RegEnumKeyExW
RegQueryValueExW
RegOpenKeyExW
GetTokenInformation
OpenProcessToken
QueryServiceStatusEx
OpenServiceW
StartServiceW
EnumDependentServicesW
ControlService
OpenSCManagerW
CloseServiceHandle
RegCloseKey

shell32

ShellExecuteExW

ole32

CoInitializeEx
CoSetProxyBlanket
CoUninitialize
PropVariantClear
CoCreateInstance
CoTaskMemFree
CLSIDFromString
StringFromGUID2

mfplat

MFCreateMFByteStreamOnStream
MFCreateSample
MFCreateMemoryBuffer
MFCreateAttributes
MFCreateMediaType

mfreadwrite

MFCreateSourceReaderFromURL
MFCreateSourceReaderFromByteStream

shlwapi

ord12

avrt

AvRevertMmThreadCharacteristics
AvSetMmThreadCharacteristicsW

oleaut32

SysAllocString
VariantClear
SysFreeString

Exports

Exports

??0ApoRegistry@@QEAA@XZ
??0ServiceControl@@QEAA@XZ
??0UniteFxControl@@QEAA@$$QEAV0@@Z
??0UniteFxControl@@QEAA@XZ
??1ApoRegistry@@QEAA@XZ
??1ServiceControl@@QEAA@XZ
??1UniteFxControl@@QEAA@XZ
??4UniteFxControl@@QEAAAEAV0@$$QEAV0@@Z
?GetDefaultDevice@ApoRegistry@@QEAA?AUretCode@@AEAPEB_WW4EnumDeviceType@@@Z
?GetDeviceList@ApoRegistry@@QEAA?AUretCode@@PEAPEAUApoDeviceInfo@@PEAHW4EnumDeviceType@@_N@Z
?GetDrmProtection@ApoRegistry@@QEAA?AUretCode@@PEA_N@Z
?GetDrmProtectionConfig@ApoRegistry@@QEAA?AUretCode@@PEA_N@Z
?GetFilterBlockVoice@UniteFxControl@@QEAAJAEA_N@Z
?GetLogLevel@ApoRegistry@@QEAA?AW4LogLevel@Leppsoft@@XZ
?GetSetupStatus@ApoRegistry@@QEAA?AUUfxSetupStatus@@XZ
?InstallUfx@ApoRegistry@@QEAA?AUretCode@@XZ
?IsElevated@ApoRegistry@@QEAA?AUretCode@@PEA_N@Z
?PlaySoundData@UniteFxControl@@QEAAJAEAV?$vector@EV?$allocator@E@std@@@std@@AEBVAudioFormat@@@Z
?PlaySoundFile@UniteFxControl@@QEAAJPEB_WAEA_NAEAUUfxMediaControl@@@Z
?PlaySoundFileEx@UniteFxControl@@QEAAJPEAVAudioFile@@AEA_NAEAUUfxMediaControl@@@Z
?RegisterApo@ApoRegistry@@QEAA?AUretCode@@AEBV?$vector@VStr@@V?$allocator@VStr@@@std@@@std@@@Z
?RegisterApoOnDefaultDevice@ApoRegistry@@QEAA?AUretCode@@XZ
?RestartService@ServiceControl@@QEAA?AUretCode@@AEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?RestoreSetup@ApoRegistry@@QEAA?AUretCode@@PEAUUfxSetupStatus@@@Z
?SetDrmProtection@ApoRegistry@@QEAA?AUretCode@@_N@Z
?SetFilterBlockVoice@UniteFxControl@@QEAAJAEA_N@Z
?SetLogLevel@ApoRegistry@@QEAA?AUretCode@@W4LogLevel@Leppsoft@@@Z
?Stop@UniteFxControl@@QEAAJXZ
?UninstallUfx@ApoRegistry@@QEAA?AUretCode@@XZ
?UnregisterApo@ApoRegistry@@QEAA?AUretCode@@XZ
InstallUfx
UninstallUfx

Sections

.text
Size: 770KB - Virtual size: 769KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 276KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Разное/Программы/Soundpad/UniteFxUpdate.dll
.dll regsvr32 windows:6 windows x64

a7365ab63ec74fb8102f92b17356cf77

Code Sign

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

07/06/2005, 08:09

Not After

30/05/2020, 10:48

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

62:5c:4d:90:8c:d5:42:fb:ab:2e:a5:73:3f:f1:54:19
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

27/04/2011, 00:00

Not After

30/05/2020, 10:48

Subject

CN=COMODO Time Stamping CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2b:73:db:74:63:11:4c:5a:5b:32:4a:f2:30:57:72:49
Certificate

Issuer

CN=COMODO Time Stamping CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02/05/2019, 00:00

Not After

30/05/2020, 10:48

Subject

CN=Sectigo SHA-1 Time Stamping Signer,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:49:34:c0:ab:e3:c1:c9:81:d8:82:d3:44:50:13:52
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11/10/2017, 00:00

Not After

11/10/2019, 23:59

Subject

CN=Arthur Lepp,OU=IT,O=Arthur Lepp,POSTALCODE=50825,STREET=Iltisstr. 142,L=Köln,ST=NRW,C=DE,2.5.4.18=#13053530383235

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0f:56:d6:c4:a3:f8:d9:41:0c:ed:2a:b6:5c:b6:7e:ff:a4:2d:3b:0a
Signer

Actual PE Digest

0f:56:d6:c4:a3:f8:d9:41:0c:ed:2a:b6:5c:b6:7e:ff:a4:2d:3b:0a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

EnterCriticalSection
CloseHandle
UnmapViewOfFile
CreateEventExW
FindNextFileW
GetCurrentProcess
CreateMutexW
FindClose
GetFileAttributesW
ReleaseMutex
OpenFileMappingW
Sleep
FormatMessageW
GetLastError
GetFileAttributesExW
CreateFileMappingW
MapViewOfFile
CreateDirectoryW
GetCurrentThreadId
GetLocalTime
MoveFileExW
GetCurrentProcessId
LocalFree
TryEnterCriticalSection
DuplicateHandle
WaitForSingleObjectEx
SwitchToThread
GetCurrentThread
GetExitCodeThread
MultiByteToWideChar
GetStringTypeW
WideCharToMultiByte
QueryPerformanceCounter
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetTickCount
GetModuleHandleW
GetProcAddress
EncodePointer
DecodePointer
LCMapStringW
GetCPInfo
RtlCaptureContext
LeaveCriticalSection
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
CreateTimerQueue
SignalObjectAndWait
CreateThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetThreadTimes
FreeLibrary
FreeLibraryAndExitThread
GetModuleFileNameW
GetModuleHandleA
LoadLibraryExW
GetVersionExW
VirtualAlloc
VirtualProtect
VirtualFree
ReleaseSemaphore
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
LoadLibraryW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
ExitThread
GetModuleHandleExW
ExitProcess
GetStdHandle
GetFileType
ReadFile
GetConsoleMode
ReadConsoleW
WriteFile
GetConsoleCP
GetFileSizeEx
SetFilePointerEx
HeapReAlloc
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlushFileBuffers
SetStdHandle
CreateFileW
HeapSize
SetEndOfFile
WriteConsoleW
InitializeCriticalSection
DeleteCriticalSection
HeapFree
HeapAlloc
GetProcessHeap
ResetEvent
SetEvent
RtlLookupFunctionEntry
WaitForSingleObject

advapi32

SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegNotifyChangeKeyValue
RegCloseKey
RegDeleteKeyExW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW

ole32

PropVariantClear
CoCreateInstance
CLSIDFromString
StringFromGUID2
CoTaskMemAlloc

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 274KB - Virtual size: 273KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

RT_CODE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 125KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Разное/Программы/Soundpad/installscript.vdf
Разное/Программы/Soundpad/languages/cs/translation.mo
Разное/Программы/Soundpad/languages/da/translation.mo
Разное/Программы/Soundpad/languages/de/translation.mo
Разное/Программы/Soundpad/languages/es_ES/translation.mo
Разное/Программы/Soundpad/languages/fi/translation.mo
Разное/Программы/Soundpad/languages/fr/translation.mo
Разное/Программы/Soundpad/languages/it/translation.mo
Разное/Программы/Soundpad/languages/ja/translation.mo
Разное/Программы/Soundpad/languages/ko/translation.mo
Разное/Программы/Soundpad/languages/nb_NO/translation.mo
Разное/Программы/Soundpad/languages/nl/translation.mo
Разное/Программы/Soundpad/languages/pl/translation.mo
Разное/Программы/Soundpad/languages/pt_BR/translation.mo
Разное/Программы/Soundpad/languages/ru/translation.mo
Разное/Программы/Soundpad/languages/sv/translation.mo
Разное/Программы/Soundpad/languages/th/translation.mo
Разное/Программы/Soundpad/languages/tr/translation.mo
Разное/Программы/Soundpad/languages/uk/translation.mo
Разное/Программы/Soundpad/languages/zh_CN/translation.mo
Разное/Программы/Soundpad/logs/UniteFxControl.log
Разное/Программы/Soundpad/sounds/notify/auto-keys-disabled.m4a
.ps1
Разное/Программы/Soundpad/sounds/notify/auto-keys-enabled.m4a
Разное/Программы/Soundpad/sounds/notify/default.m4a
Разное/Программы/Soundpad/sounds/notify/disabled.m4a
Разное/Программы/Soundpad/sounds/notify/enabled.m4a
Разное/Программы/Soundpad/sounds/notify/hotkeys-disabled.m4a
Разное/Программы/Soundpad/sounds/notify/hotkeys-enabled.m4a
Разное/Программы/Soundpad/sounds/notify/microphone.m4a
Разное/Программы/Soundpad/sounds/notify/recording-finished.m4a
Разное/Программы/Soundpad/sounds/notify/recording.m4a
Разное/Программы/Soundpad/sounds/notify/speakers.m4a
Разное/Программы/Soundpad/sounds/urbanichka/1 ннчик.mp3
Разное/Программы/Soundpad/sounds/urbanichka/Админ пидарас.mp3
Разное/Программы/Soundpad/sounds/urbanichka/Все лик.mp3
Разное/Программы/Soundpad/sounds/urbanichka/Да Да Я.mp3
Разное/Программы/Soundpad/sounds/urbanichka/Ебанный стримснайпер.mp3
Разное/Программы/Soundpad/sounds/urbanichka/Епт твою мать эта клоунада.mp3
Разное/Программы/Soundpad/sounds/urbanichka/Закрой ебало.mp3
Разное/Программы/Soundpad/sounds/urbanichka/Здарова.mp3
Разное/Программы/Soundpad/sounds/urbanichka/Иди нахуй.mp3
Разное/Программы/Soundpad/sounds/urbanichka/Как же заебал этот ГарисМод боже.mp3
Разное/Программы/Soundpad/sounds/urbanichka/Качественный контент.mp3
Разное/Программы/Soundpad/sounds/urbanichka/Кто ты правильно ты ннчик.mp3
Разное/Программы/Soundpad/sounds/urbanichka/Кто я я Урбаничка.mp3
Разное/Программы/Soundpad/sounds/urbanichka/Мда.mp3
Разное/Программы/Soundpad/sounds/urbanichka/Мне по кайфу.mp3
Разное/Программы/Soundpad/sounds/urbanichka/Не пукай ннчик.mp3
Разное/Программы/Soundpad/sounds/urbanichka/О чем речь.mp3
Разное/Программы/Soundpad/sounds/urbanichka/Пельмешки.mp3
Разное/Программы/Soundpad/sounds/urbanichka/Пиписечку целуйте.mp3
Разное/Программы/Soundpad/sounds/urbanichka/Пойдем.mp3
Разное/Программы/Soundpad/sounds/urbanichka/Пока.mp3
Разное/Программы/Soundpad/sounds/urbanichka/Привет от Урбанички.mp3
Разное/Программы/Soundpad/sounds/urbanichka/Просто ухади.mp3
Разное/Программы/Soundpad/sounds/urbanichka/С новым годом закрой ебало.mp3
Разное/Программы/Soundpad/sounds/urbanichka/С новым годом.mp3
Разное/Программы/Soundpad/sounds/urbanichka/Самопис.mp3
Разное/Программы/Soundpad/sounds/urbanichka/Собственно говоря.mp3
Разное/Программы/Soundpad/sounds/urbanichka/Сука.mp3
Разное/Программы/Soundpad/sounds/urbanichka/Сядь в тазик и не пукай.mp3
Разное/Программы/Soundpad/sounds/urbanichka/Ты какашка.mp3
Разное/Программы/Soundpad/sounds/urbanichka/Ты клоун.mp3
Разное/Программы/Soundpad/sounds/urbanichka/Ты кто.mp3
Разное/Программы/Soundpad/sounds/urbanichka/Ты просто бессовестное мясо.mp3
Разное/Программы/Soundpad/sounds/urbanichka/Ты разумный картофель.mp3
Разное/Программы/Soundpad/sounds/urbanichka/Уйди ннчик.mp3
Разное/Программы/Soundpad/sounds/urbanichka/Хачу питцу.mp3
Разное/Программы/Soundpad/sounds/urbanichka/Че делаешь.mp3
Разное/Программы/Soundpad/sounds/urbanichka/Читеры это те кто играют с читами.mp3
Разное/Программы/Soundpad/sounds/urbanichka/Чо с ебалом молодой.mp3
Разное/Программы/Soundpad/sounds/urbanichka/Щас этот чел убьет этого чувака потому что этот чел не сможет его убить чекай.mp3
Разное/Программы/Soundpad/steam_api64.dll
.dll windows:5 windows x64

b002b0238d9d8895d9baf8b880c22e87

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetVersion
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

ShowWindow
GetProcessWindowStation
GetUserObjectInformationW

advapi32

RegCreateKeyExW

shell32

SHGetSpecialFolderPathW

ole32

CoTaskMemAlloc

ws2_32

WSASetLastError

winhttp

WinHttpAddRequestHeaders

shlwapi

PathCombineW

psapi

GetModuleBaseNameW

bcrypt

BCryptEncrypt

Exports

Exports

Breakpad_SteamMiniDumpInit
Breakpad_SteamSetAppID
Breakpad_SteamSetSteamID
Breakpad_SteamWriteMiniDumpSetComment
Breakpad_SteamWriteMiniDumpUsingExceptionInfoWithBuildId
CAddAppDependencyResult_t_RemoveCallResult
CAddAppDependencyResult_t_SetCallResult
CAddUGCDependencyResult_t_RemoveCallResult
CAddUGCDependencyResult_t_SetCallResult
CAssociateWithClanResult_t_RemoveCallResult
CAssociateWithClanResult_t_SetCallResult
CChangeNumOpenSlotsCallback_t_RemoveCallResult
CChangeNumOpenSlotsCallback_t_SetCallResult
CCheckFileSignature_t_RemoveCallResult
CCheckFileSignature_t_SetCallResult
CClanOfficerListResponse_t_RemoveCallResult
CClanOfficerListResponse_t_SetCallResult
CComputeNewPlayerCompatibilityResult_t_RemoveCallResult
CComputeNewPlayerCompatibilityResult_t_SetCallResult
CCreateBeaconCallback_t_RemoveCallResult
CCreateBeaconCallback_t_SetCallResult
CCreateItemResult_t_RemoveCallResult
CCreateItemResult_t_SetCallResult
CDeleteItemResult_t_RemoveCallResult
CDeleteItemResult_t_SetCallResult
CEncryptedAppTicketResponse_t_RemoveCallResult
CEncryptedAppTicketResponse_t_SetCallResult
CFileDetailsResult_t_RemoveCallResult
CFileDetailsResult_t_SetCallResult
CFriendsEnumerateFollowingList_t_RemoveCallResult
CFriendsEnumerateFollowingList_t_SetCallResult
CFriendsGetFollowerCount_t_RemoveCallResult
CFriendsGetFollowerCount_t_SetCallResult
CFriendsIsFollowing_t_RemoveCallResult
CFriendsIsFollowing_t_SetCallResult
CGSReputation_t_RemoveCallResult
CGSReputation_t_SetCallResult
CGSStatsReceived_t_RemoveCallResult
CGSStatsReceived_t_SetCallResult
CGSStatsStored_t_RemoveCallResult
CGSStatsStored_t_SetCallResult
CGetAppDependenciesResult_t_RemoveCallResult
CGetAppDependenciesResult_t_SetCallResult
CGetOPFSettingsResult_t_RemoveCallback
CGetOPFSettingsResult_t_SetCallback
CGetUserItemVoteResult_t_RemoveCallResult
CGetUserItemVoteResult_t_SetCallResult
CGlobalAchievementPercentagesReady_t_RemoveCallResult
CGlobalAchievementPercentagesReady_t_SetCallResult
CGlobalStatsReceived_t_RemoveCallResult
CGlobalStatsReceived_t_SetCallResult
CHTML_BrowserReady_t_RemoveCallResult
CHTML_BrowserReady_t_SetCallResult
CJoinClanChatRoomCompletionResult_t_RemoveCallResult
CJoinClanChatRoomCompletionResult_t_SetCallResult
CJoinPartyCallback_t_RemoveCallResult
CJoinPartyCallback_t_SetCallResult
CLeaderboardFindResult_t_RemoveCallResult
CLeaderboardFindResult_t_SetCallResult
CLeaderboardScoreUploaded_t_RemoveCallResult
CLeaderboardScoreUploaded_t_SetCallResult
CLeaderboardScoresDownloaded_t_RemoveCallResult
CLeaderboardScoresDownloaded_t_SetCallResult
CLeaderboardUGCSet_t_RemoveCallResult
CLeaderboardUGCSet_t_SetCallResult
CLobbyCreated_t_RemoveCallResult
CLobbyCreated_t_SetCallResult
CLobbyEnter_t_RemoveCallResult
CLobbyEnter_t_SetCallResult
CLobbyMatchList_t_RemoveCallResult
CLobbyMatchList_t_SetCallResult
CMarketEligibilityResponse_t_RemoveCallResult
CMarketEligibilityResponse_t_SetCallResult
CNumberOfCurrentPlayers_t_RemoveCallResult
CNumberOfCurrentPlayers_t_SetCallResult
CRemoteStorageDeletePublishedFileResult_t_RemoveCallResult
CRemoteStorageDeletePublishedFileResult_t_SetCallResult
CRemoteStorageDownloadUGCResult_t_RemoveCallResult
CRemoteStorageDownloadUGCResult_t_SetCallResult
CRemoteStorageEnumeratePublishedFilesByUserActionResult_t_RemoveCallResult
CRemoteStorageEnumeratePublishedFilesByUserActionResult_t_SetCallResult
CRemoteStorageEnumerateUserPublishedFilesResult_t_RemoveCallResult
CRemoteStorageEnumerateUserPublishedFilesResult_t_SetCallResult
CRemoteStorageEnumerateUserSubscribedFilesResult_t_RemoveCallResult
CRemoteStorageEnumerateUserSubscribedFilesResult_t_SetCallResult
CRemoteStorageEnumerateWorkshopFilesResult_t_RemoveCallResult
CRemoteStorageEnumerateWorkshopFilesResult_t_SetCallResult
CRemoteStorageFileReadAsyncComplete_t_RemoveCallResult
CRemoteStorageFileReadAsyncComplete_t_SetCallResult
CRemoteStorageFileShareResult_t_RemoveCallResult
CRemoteStorageFileShareResult_t_SetCallResult
CRemoteStorageFileWriteAsyncComplete_t_RemoveCallResult
CRemoteStorageFileWriteAsyncComplete_t_SetCallResult
CRemoteStorageGetPublishedFileDetailsResult_t_RemoveCallResult
CRemoteStorageGetPublishedFileDetailsResult_t_SetCallResult
CRemoteStorageGetPublishedItemVoteDetailsResult_t_RemoveCallResult
CRemoteStorageGetPublishedItemVoteDetailsResult_t_SetCallResult
CRemoteStoragePublishFileProgress_t_RemoveCallResult
CRemoteStoragePublishFileProgress_t_SetCallResult
CRemoteStorageSetUserPublishedFileActionResult_t_RemoveCallResult
CRemoteStorageSetUserPublishedFileActionResult_t_SetCallResult
CRemoteStorageSubscribePublishedFileResult_t_RemoveCallResult
CRemoteStorageSubscribePublishedFileResult_t_SetCallResult
CRemoteStorageUnsubscribePublishedFileResult_t_RemoveCallResult
CRemoteStorageUnsubscribePublishedFileResult_t_SetCallResult
CRemoteStorageUpdatePublishedFileResult_t_RemoveCallResult
CRemoteStorageUpdatePublishedFileResult_t_SetCallResult
CRemoteStorageUpdateUserPublishedItemVoteResult_t_RemoveCallResult
CRemoteStorageUpdateUserPublishedItemVoteResult_t_SetCallResult
CRemoveAppDependencyResult_t_RemoveCallResult
CRemoveAppDependencyResult_t_SetCallResult
CRemoveUGCDependencyResult_t_RemoveCallResult
CRemoveUGCDependencyResult_t_SetCallResult
CSetPersonaNameResponse_t_RemoveCallResult
CSetPersonaNameResponse_t_SetCallResult
CSetUserItemVoteResult_t_RemoveCallResult
CSetUserItemVoteResult_t_SetCallResult
CStartPlaytimeTrackingResult_t_RemoveCallResult
CStartPlaytimeTrackingResult_t_SetCallResult
CSteamInventoryEligiblePromoItemDefIDs_t_RemoveCallResult
CSteamInventoryEligiblePromoItemDefIDs_t_SetCallResult
CSteamInventoryRequestPricesResult_t_RemoveCallResult
CSteamInventoryRequestPricesResult_t_SetCallResult
CSteamInventoryStartPurchaseResult_t_RemoveCallResult
CSteamInventoryStartPurchaseResult_t_SetCallResult
CSteamUGCQueryCompleted_t_RemoveCallResult
CSteamUGCQueryCompleted_t_SetCallResult
CStopPlaytimeTrackingResult_t_RemoveCallResult
CStopPlaytimeTrackingResult_t_SetCallResult
CStoreAuthURLResponse_t_RemoveCallResult
CStoreAuthURLResponse_t_SetCallResult
CSubmitItemUpdateResult_t_RemoveCallResult
CSubmitItemUpdateResult_t_SetCallResult
CUserFavoriteItemsListChanged_t_RemoveCallResult
CUserFavoriteItemsListChanged_t_SetCallResult
CUserStatsReceived_t_RemoveCallResult
CUserStatsReceived_t_RemoveCallback
CUserStatsReceived_t_SetCallResult
CUserStatsReceived_t_SetCallback
CreateInterface
GetHSteamPipe
GetHSteamUser
SteamAPI
SteamAPI_GetHSteamPipe
SteamAPI_GetHSteamUser
SteamAPI_GetSteamInstallPath
SteamAPI_ISteamAppList_GetAppBuildId
SteamAPI_ISteamAppList_GetAppInstallDir
SteamAPI_ISteamAppList_GetAppName
SteamAPI_ISteamAppList_GetInstalledApps
SteamAPI_ISteamAppList_GetNumInstalledApps
SteamAPI_ISteamApps_BGetDLCDataByIndex
SteamAPI_ISteamApps_BIsAppInstalled
SteamAPI_ISteamApps_BIsCybercafe
SteamAPI_ISteamApps_BIsDlcInstalled
SteamAPI_ISteamApps_BIsLowViolence
SteamAPI_ISteamApps_BIsSubscribed
SteamAPI_ISteamApps_BIsSubscribedApp
SteamAPI_ISteamApps_BIsSubscribedFromFamilySharing
SteamAPI_ISteamApps_BIsSubscribedFromFreeWeekend
SteamAPI_ISteamApps_BIsVACBanned
SteamAPI_ISteamApps_GetAppBuildId
SteamAPI_ISteamApps_GetAppInstallDir
SteamAPI_ISteamApps_GetAppOwner
SteamAPI_ISteamApps_GetAvailableGameLanguages
SteamAPI_ISteamApps_GetCurrentBetaName
SteamAPI_ISteamApps_GetCurrentGameLanguage
SteamAPI_ISteamApps_GetDLCCount
SteamAPI_ISteamApps_GetDlcDownloadProgress
SteamAPI_ISteamApps_GetEarliestPurchaseUnixTime
SteamAPI_ISteamApps_GetFileDetails
SteamAPI_ISteamApps_GetInstalledDepots
SteamAPI_ISteamApps_GetLaunchCommandLine
SteamAPI_ISteamApps_GetLaunchQueryParam
SteamAPI_ISteamApps_GetPublisherOwnedAppData
SteamAPI_ISteamApps_InstallDLC
SteamAPI_ISteamApps_MarkContentCorrupt
SteamAPI_ISteamApps_RequestAllProofOfPurchaseKeys
SteamAPI_ISteamApps_RequestAppProofOfPurchaseKey
SteamAPI_ISteamApps_RequestPublisherOwnedAppData
SteamAPI_ISteamApps_UninstallDLC
SteamAPI_ISteamClient_BReleaseSteamPipe
SteamAPI_ISteamClient_BShutdownIfAllPipesClosed
SteamAPI_ISteamClient_ConnectToGlobalUser
SteamAPI_ISteamClient_CreateLocalUser
SteamAPI_ISteamClient_CreateSteamPipe
SteamAPI_ISteamClient_GetIPCCallCount
SteamAPI_ISteamClient_GetISteamAppList
SteamAPI_ISteamClient_GetISteamApps
SteamAPI_ISteamClient_GetISteamController
SteamAPI_ISteamClient_GetISteamFriends
SteamAPI_ISteamClient_GetISteamGameSearch
SteamAPI_ISteamClient_GetISteamGameServer
SteamAPI_ISteamClient_GetISteamGameServerStats
SteamAPI_ISteamClient_GetISteamGenericInterface
SteamAPI_ISteamClient_GetISteamHTMLSurface
SteamAPI_ISteamClient_GetISteamHTTP
SteamAPI_ISteamClient_GetISteamInput
SteamAPI_ISteamClient_GetISteamInventory
SteamAPI_ISteamClient_GetISteamMatchmaking
SteamAPI_ISteamClient_GetISteamMatchmakingServers
SteamAPI_ISteamClient_GetISteamMusic
SteamAPI_ISteamClient_GetISteamMusicRemote
SteamAPI_ISteamClient_GetISteamNetworking
SteamAPI_ISteamClient_GetISteamParentalSettings
SteamAPI_ISteamClient_GetISteamParties
SteamAPI_ISteamClient_GetISteamRemoteStorage
SteamAPI_ISteamClient_GetISteamScreenshots
SteamAPI_ISteamClient_GetISteamUGC
SteamAPI_ISteamClient_GetISteamUnifiedMessages
SteamAPI_ISteamClient_GetISteamUser
SteamAPI_ISteamClient_GetISteamUserStats
SteamAPI_ISteamClient_GetISteamUtils
SteamAPI_ISteamClient_GetISteamVideo
SteamAPI_ISteamClient_ReleaseUser
SteamAPI_ISteamClient_Remove_SteamAPI_CPostAPIResultInProcess
SteamAPI_ISteamClient_RunFrame
SteamAPI_ISteamClient_SetLocalIPBinding
SteamAPI_ISteamClient_SetWarningMessageHook
SteamAPI_ISteamClient_Set_SteamAPI_CCheckCallbackRegisteredInProcess
SteamAPI_ISteamClient_Set_SteamAPI_CPostAPIResultInProcess
SteamAPI_ISteamController_ActivateActionSet
SteamAPI_ISteamController_ActivateActionSetLayer
SteamAPI_ISteamController_DeactivateActionSetLayer
SteamAPI_ISteamController_DeactivateAllActionSetLayers
SteamAPI_ISteamController_GetActionOriginFromXboxOrigin
SteamAPI_ISteamController_GetActionSetHandle
SteamAPI_ISteamController_GetActiveActionSetLayers
SteamAPI_ISteamController_GetAnalogActionData
SteamAPI_ISteamController_GetAnalogActionHandle
SteamAPI_ISteamController_GetAnalogActionOrigins
SteamAPI_ISteamController_GetConnectedControllers
SteamAPI_ISteamController_GetControllerForGamepadIndex
SteamAPI_ISteamController_GetControllerState
SteamAPI_ISteamController_GetCurrentActionSet
SteamAPI_ISteamController_GetDigitalActionData
SteamAPI_ISteamController_GetDigitalActionHandle
SteamAPI_ISteamController_GetDigitalActionOrigins
SteamAPI_ISteamController_GetGamepadIndexForController
SteamAPI_ISteamController_GetGlyphForActionOrigin
SteamAPI_ISteamController_GetInputTypeForHandle
SteamAPI_ISteamController_GetMotionData
SteamAPI_ISteamController_GetStringForActionOrigin
SteamAPI_ISteamController_Init
SteamAPI_ISteamController_RunFrame
SteamAPI_ISteamController_SetLEDColor
SteamAPI_ISteamController_SetOverrideMode
SteamAPI_ISteamController_ShowAnalogActionOrigins
SteamAPI_ISteamController_ShowBindingPanel
SteamAPI_ISteamController_ShowDigitalActionOrigins
SteamAPI_ISteamController_Shutdown
SteamAPI_ISteamController_StopAnalogActionMomentum
SteamAPI_ISteamController_TriggerHapticPulse
SteamAPI_ISteamController_TriggerRepeatedHapticPulse
SteamAPI_ISteamController_TriggerVibration
SteamAPI_ISteamFriends_ActivateGameOverlay
SteamAPI_ISteamFriends_ActivateGameOverlayInviteDialog
SteamAPI_ISteamFriends_ActivateGameOverlayToStore
SteamAPI_ISteamFriends_ActivateGameOverlayToUser
SteamAPI_ISteamFriends_ActivateGameOverlayToWebPage
SteamAPI_ISteamFriends_ClearRichPresence
SteamAPI_ISteamFriends_CloseClanChatWindowInSteam
SteamAPI_ISteamFriends_DownloadClanActivityCounts
SteamAPI_ISteamFriends_EnumerateFollowingList
SteamAPI_ISteamFriends_GetChatMemberByIndex
SteamAPI_ISteamFriends_GetClanActivityCounts
SteamAPI_ISteamFriends_GetClanByIndex
SteamAPI_ISteamFriends_GetClanChatMemberCount
SteamAPI_ISteamFriends_GetClanChatMessage
SteamAPI_ISteamFriends_GetClanCount
SteamAPI_ISteamFriends_GetClanName
SteamAPI_ISteamFriends_GetClanOfficerByIndex
SteamAPI_ISteamFriends_GetClanOfficerCount
SteamAPI_ISteamFriends_GetClanOwner
SteamAPI_ISteamFriends_GetClanTag
SteamAPI_ISteamFriends_GetCoplayFriend
SteamAPI_ISteamFriends_GetCoplayFriendCount
SteamAPI_ISteamFriends_GetFollowerCount
SteamAPI_ISteamFriends_GetFriendByIndex
SteamAPI_ISteamFriends_GetFriendCoplayGame
SteamAPI_ISteamFriends_GetFriendCoplayTime
SteamAPI_ISteamFriends_GetFriendCount
SteamAPI_ISteamFriends_GetFriendCountFromSource
SteamAPI_ISteamFriends_GetFriendFromSourceByIndex
SteamAPI_ISteamFriends_GetFriendGamePlayed
SteamAPI_ISteamFriends_GetFriendMessage
SteamAPI_ISteamFriends_GetFriendPersonaName
SteamAPI_ISteamFriends_GetFriendPersonaNameHistory
SteamAPI_ISteamFriends_GetFriendPersonaState
SteamAPI_ISteamFriends_GetFriendRelationship
SteamAPI_ISteamFriends_GetFriendRichPresence
SteamAPI_ISteamFriends_GetFriendRichPresenceKeyByIndex
SteamAPI_ISteamFriends_GetFriendRichPresenceKeyCount
SteamAPI_ISteamFriends_GetFriendSteamLevel
SteamAPI_ISteamFriends_GetFriendsGroupCount
SteamAPI_ISteamFriends_GetFriendsGroupIDByIndex
SteamAPI_ISteamFriends_GetFriendsGroupMembersCount
SteamAPI_ISteamFriends_GetFriendsGroupMembersList
SteamAPI_ISteamFriends_GetFriendsGroupName
SteamAPI_ISteamFriends_GetLargeFriendAvatar
SteamAPI_ISteamFriends_GetMediumFriendAvatar
SteamAPI_ISteamFriends_GetPersonaName
SteamAPI_ISteamFriends_GetPersonaState
SteamAPI_ISteamFriends_GetPlayerNickname
SteamAPI_ISteamFriends_GetSmallFriendAvatar
SteamAPI_ISteamFriends_GetUserRestrictions
SteamAPI_ISteamFriends_HasFriend
SteamAPI_ISteamFriends_InviteUserToGame
SteamAPI_ISteamFriends_IsClanChatAdmin
SteamAPI_ISteamFriends_IsClanChatWindowOpenInSteam
SteamAPI_ISteamFriends_IsClanOfficialGameGroup
SteamAPI_ISteamFriends_IsClanPublic
SteamAPI_ISteamFriends_IsFollowing
SteamAPI_ISteamFriends_IsUserInSource
SteamAPI_ISteamFriends_JoinClanChatRoom
SteamAPI_ISteamFriends_LeaveClanChatRoom
SteamAPI_ISteamFriends_OpenClanChatWindowInSteam
SteamAPI_ISteamFriends_ReplyToFriendMessage
SteamAPI_ISteamFriends_RequestClanOfficerList
SteamAPI_ISteamFriends_RequestFriendRichPresence
SteamAPI_ISteamFriends_RequestUserInformation
SteamAPI_ISteamFriends_SendClanChatMessage
SteamAPI_ISteamFriends_SetInGameVoiceSpeaking
SteamAPI_ISteamFriends_SetListenForFriendsMessages
SteamAPI_ISteamFriends_SetPersonaName
SteamAPI_ISteamFriends_SetPlayedWith
SteamAPI_ISteamFriends_SetRichPresence
SteamAPI_ISteamGameServerStats_ClearUserAchievement
SteamAPI_ISteamGameServerStats_GetUserAchievement
SteamAPI_ISteamGameServerStats_GetUserStat
SteamAPI_ISteamGameServerStats_GetUserStat0
SteamAPI_ISteamGameServerStats_RequestUserStats
SteamAPI_ISteamGameServerStats_SetUserAchievement
SteamAPI_ISteamGameServerStats_SetUserStat
SteamAPI_ISteamGameServerStats_SetUserStat0
SteamAPI_ISteamGameServerStats_StoreUserStats
SteamAPI_ISteamGameServerStats_UpdateUserAvgRateStat
SteamAPI_ISteamGameServer_AssociateWithClan
SteamAPI_ISteamGameServer_BLoggedOn
SteamAPI_ISteamGameServer_BSecure
SteamAPI_ISteamGameServer_BUpdateUserData
SteamAPI_ISteamGameServer_BeginAuthSession
SteamAPI_ISteamGameServer_CancelAuthTicket
SteamAPI_ISteamGameServer_ClearAllKeyValues
SteamAPI_ISteamGameServer_ComputeNewPlayerCompatibility
SteamAPI_ISteamGameServer_CreateUnauthenticatedUserConnection
SteamAPI_ISteamGameServer_EnableHeartbeats
SteamAPI_ISteamGameServer_EndAuthSession
SteamAPI_ISteamGameServer_ForceHeartbeat
SteamAPI_ISteamGameServer_GetAuthSessionTicket
SteamAPI_ISteamGameServer_GetGameplayStats
SteamAPI_ISteamGameServer_GetNextOutgoingPacket
SteamAPI_ISteamGameServer_GetPublicIP
SteamAPI_ISteamGameServer_GetServerReputation
SteamAPI_ISteamGameServer_GetSteamID
SteamAPI_ISteamGameServer_HandleIncomingPacket
SteamAPI_ISteamGameServer_InitGameServer
SteamAPI_ISteamGameServer_LogOff
SteamAPI_ISteamGameServer_LogOn
SteamAPI_ISteamGameServer_LogOnAnonymous
SteamAPI_ISteamGameServer_RequestUserGroupStatus
SteamAPI_ISteamGameServer_SendUserConnectAndAuthenticate
SteamAPI_ISteamGameServer_SendUserDisconnect
SteamAPI_ISteamGameServer_SetBotPlayerCount
SteamAPI_ISteamGameServer_SetDedicatedServer
SteamAPI_ISteamGameServer_SetGameData
SteamAPI_ISteamGameServer_SetGameDescription
SteamAPI_ISteamGameServer_SetGameTags
SteamAPI_ISteamGameServer_SetHeartbeatInterval
SteamAPI_ISteamGameServer_SetKeyValue
SteamAPI_ISteamGameServer_SetMapName
SteamAPI_ISteamGameServer_SetMaxPlayerCount
SteamAPI_ISteamGameServer_SetModDir
SteamAPI_ISteamGameServer_SetPasswordProtected
SteamAPI_ISteamGameServer_SetProduct
SteamAPI_ISteamGameServer_SetRegion
SteamAPI_ISteamGameServer_SetServerName
SteamAPI_ISteamGameServer_SetSpectatorPort
SteamAPI_ISteamGameServer_SetSpectatorServerName
SteamAPI_ISteamGameServer_UserHasLicenseForApp
SteamAPI_ISteamGameServer_WasRestartRequested
SteamAPI_ISteamHTMLSurface_AddHeader
SteamAPI_ISteamHTMLSurface_AllowStartRequest
SteamAPI_ISteamHTMLSurface_CopyToClipboard
SteamAPI_ISteamHTMLSurface_CreateBrowser
SteamAPI_ISteamHTMLSurface_DestructISteamHTMLSurface
SteamAPI_ISteamHTMLSurface_ExecuteJavascript
SteamAPI_ISteamHTMLSurface_FileLoadDialogResponse
SteamAPI_ISteamHTMLSurface_Find
SteamAPI_ISteamHTMLSurface_GetLinkAtPosition
SteamAPI_ISteamHTMLSurface_GoBack
SteamAPI_ISteamHTMLSurface_GoForward
SteamAPI_ISteamHTMLSurface_Init
SteamAPI_ISteamHTMLSurface_JSDialogResponse
SteamAPI_ISteamHTMLSurface_KeyChar
SteamAPI_ISteamHTMLSurface_KeyDown
SteamAPI_ISteamHTMLSurface_KeyUp
SteamAPI_ISteamHTMLSurface_LoadURL
SteamAPI_ISteamHTMLSurface_MouseDoubleClick
SteamAPI_ISteamHTMLSurface_MouseDown
SteamAPI_ISteamHTMLSurface_MouseMove
SteamAPI_ISteamHTMLSurface_MouseUp
SteamAPI_ISteamHTMLSurface_MouseWheel
SteamAPI_ISteamHTMLSurface_PasteFromClipboard
SteamAPI_ISteamHTMLSurface_Reload
SteamAPI_ISteamHTMLSurface_RemoveBrowser
SteamAPI_ISteamHTMLSurface_SetBackgroundMode
SteamAPI_ISteamHTMLSurface_SetCookie
SteamAPI_ISteamHTMLSurface_SetDPIScalingFactor
SteamAPI_ISteamHTMLSurface_SetHorizontalScroll
SteamAPI_ISteamHTMLSurface_SetKeyFocus
SteamAPI_ISteamHTMLSurface_SetPageScaleFactor
SteamAPI_ISteamHTMLSurface_SetSize
SteamAPI_ISteamHTMLSurface_SetVerticalScroll
SteamAPI_ISteamHTMLSurface_Shutdown
SteamAPI_ISteamHTMLSurface_StopFind
SteamAPI_ISteamHTMLSurface_StopLoad
SteamAPI_ISteamHTMLSurface_ViewSource
SteamAPI_ISteamHTTP_CreateCookieContainer
SteamAPI_ISteamHTTP_CreateHTTPRequest
SteamAPI_ISteamHTTP_DeferHTTPRequest
SteamAPI_ISteamHTTP_GetHTTPDownloadProgressPct
SteamAPI_ISteamHTTP_GetHTTPRequestWasTimedOut
SteamAPI_ISteamHTTP_GetHTTPResponseBodyData
SteamAPI_ISteamHTTP_GetHTTPResponseBodySize
SteamAPI_ISteamHTTP_GetHTTPResponseHeaderSize
SteamAPI_ISteamHTTP_GetHTTPResponseHeaderValue
SteamAPI_ISteamHTTP_GetHTTPStreamingResponseBodyData
SteamAPI_ISteamHTTP_PrioritizeHTTPRequest
SteamAPI_ISteamHTTP_ReleaseCookieContainer
SteamAPI_ISteamHTTP_ReleaseHTTPRequest
SteamAPI_ISteamHTTP_SendHTTPRequest
SteamAPI_ISteamHTTP_SendHTTPRequestAndStreamResponse
SteamAPI_ISteamHTTP_SetCookie
SteamAPI_ISteamHTTP_SetHTTPRequestAbsoluteTimeoutMS
SteamAPI_ISteamHTTP_SetHTTPRequestContextValue
SteamAPI_ISteamHTTP_SetHTTPRequestCookieContainer
SteamAPI_ISteamHTTP_SetHTTPRequestGetOrPostParameter
SteamAPI_ISteamHTTP_SetHTTPRequestHeaderValue
SteamAPI_ISteamHTTP_SetHTTPRequestNetworkActivityTimeout
SteamAPI_ISteamHTTP_SetHTTPRequestRawPostBody
SteamAPI_ISteamHTTP_SetHTTPRequestRequiresVerifiedCertificate
SteamAPI_ISteamHTTP_SetHTTPRequestUserAgentInfo
SteamAPI_ISteamInventory_AddPromoItem
SteamAPI_ISteamInventory_AddPromoItems
SteamAPI_ISteamInventory_CheckResultSteamID
SteamAPI_ISteamInventory_ConsumeItem
SteamAPI_ISteamInventory_DeserializeResult
SteamAPI_ISteamInventory_DestroyResult
SteamAPI_ISteamInventory_ExchangeItems
SteamAPI_ISteamInventory_GenerateItems
SteamAPI_ISteamInventory_GetAllItems
SteamAPI_ISteamInventory_GetEligiblePromoItemDefinitionIDs
SteamAPI_ISteamInventory_GetItemDefinitionIDs
SteamAPI_ISteamInventory_GetItemDefinitionProperty
SteamAPI_ISteamInventory_GetItemPrice
SteamAPI_ISteamInventory_GetItemsByID
SteamAPI_ISteamInventory_GetItemsWithPrices
SteamAPI_ISteamInventory_GetNumItemsWithPrices
SteamAPI_ISteamInventory_GetResultItemProperty
SteamAPI_ISteamInventory_GetResultItems
SteamAPI_ISteamInventory_GetResultStatus
SteamAPI_ISteamInventory_GetResultTimestamp
SteamAPI_ISteamInventory_GrantPromoItems
SteamAPI_ISteamInventory_LoadItemDefinitions
SteamAPI_ISteamInventory_RemoveProperty
SteamAPI_ISteamInventory_RequestEligiblePromoItemDefinitionsIDs
SteamAPI_ISteamInventory_RequestPrices
SteamAPI_ISteamInventory_SendItemDropHeartbeat
SteamAPI_ISteamInventory_SerializeResult
SteamAPI_ISteamInventory_SetProperty
SteamAPI_ISteamInventory_SetProperty0
SteamAPI_ISteamInventory_SetProperty1
SteamAPI_ISteamInventory_SetProperty2
SteamAPI_ISteamInventory_StartPurchase
SteamAPI_ISteamInventory_StartUpdateProperties
SteamAPI_ISteamInventory_SubmitUpdateProperties
SteamAPI_ISteamInventory_TradeItems
SteamAPI_ISteamInventory_TransferItemQuantity
SteamAPI_ISteamInventory_TriggerItemDrop
SteamAPI_ISteamMatchmakingPingResponse_ServerFailedToRespond
SteamAPI_ISteamMatchmakingPingResponse_ServerResponded
SteamAPI_ISteamMatchmakingPlayersResponse_AddPlayerToList
SteamAPI_ISteamMatchmakingPlayersResponse_PlayersFailedToRespond
SteamAPI_ISteamMatchmakingPlayersResponse_PlayersRefreshComplete
SteamAPI_ISteamMatchmakingRulesResponse_RulesFailedToRespond
SteamAPI_ISteamMatchmakingRulesResponse_RulesRefreshComplete
SteamAPI_ISteamMatchmakingRulesResponse_RulesResponded
SteamAPI_ISteamMatchmakingServerListResponse_RefreshComplete
SteamAPI_ISteamMatchmakingServerListResponse_ServerFailedToRespond
SteamAPI_ISteamMatchmakingServerListResponse_ServerResponded
SteamAPI_ISteamMatchmakingServers_CancelQuery
SteamAPI_ISteamMatchmakingServers_CancelServerQuery
SteamAPI_ISteamMatchmakingServers_GetServerCount
SteamAPI_ISteamMatchmakingServers_GetServerDetails
SteamAPI_ISteamMatchmakingServers_IsRefreshing
SteamAPI_ISteamMatchmakingServers_PingServer
SteamAPI_ISteamMatchmakingServers_PlayerDetails
SteamAPI_ISteamMatchmakingServers_RefreshQuery
SteamAPI_ISteamMatchmakingServers_RefreshServer

Sections

.text
Size: - Virtual size: 420KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 218KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 10.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.UPX0
Size: - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.UPX1
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Читы/Call of Duty Black Ops/Cranium BOM/Cranium BOM.dll
.dll windows:6 windows x86

9d0cc695af8c9922c93d93e6f50015f5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

QueryPerformanceFrequency
GetProcAddress
QueryPerformanceCounter
GetModuleHandleA
FillConsoleOutputCharacterA
RemoveVectoredExceptionHandler
GetConsoleScreenBufferInfo
GetStdHandle
FreeLibraryAndExitThread
Sleep
CreateThread
FillConsoleOutputAttribute
AddVectoredExceptionHandler
GetCurrentProcessId
SetConsoleCursorPosition
VirtualFree
VirtualAlloc
VirtualQuery
HeapCreate
VirtualProtect
HeapFree
GetCurrentProcess
Thread32Next
Thread32First
GetCurrentThreadId
SuspendThread
ResumeThread
CreateToolhelp32Snapshot
HeapReAlloc
CloseHandle
HeapAlloc
GetThreadContext
FlushInstructionCache
SetThreadContext
OpenThread
GetFileSizeEx
ReadFile
WideCharToMultiByte
UnmapViewOfFile
CreateFileMappingA
LocalFree
FormatMessageA
GetLocaleInfoEx
CreateDirectoryW
CreateFileW
FindClose
FindFirstFileW
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
SetFileInformationByHandle
AreFileApisANSI
GetLastError
GlobalLock
GlobalFree
GetFileInformationByHandleEx
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetSystemTimeAsFileTime
InitializeSListHead
GlobalUnlock
GlobalAlloc
MapViewOfFile
MultiByteToWideChar
CreateFileA

user32

OpenClipboard
GetCursorPos
SetCursorPos
ReleaseCapture
CloseClipboard
DefWindowProcA
GetClientRect
SetCursor
SetCapture
GetForegroundWindow
IsChild
ClientToScreen
GetCapture
ScreenToClient
SetClipboardData
GetClipboardData
LoadCursorA
GetAsyncKeyState
SetWindowLongA
CallWindowProcA
FindWindowA
DestroyWindow
GetKeyState
CreateWindowExA
UnregisterClassA
RegisterClassExA
EmptyClipboard

msvcp140

?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?good@ios_base@std@@QBE_NXZ
?always_noconv@codecvt_base@std@@QBE_NXZ
??1facet@locale@std@@MAE@XZ
??0facet@locale@std@@IAE@I@Z
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UAEXXZ
??Bid@locale@std@@QAEIXZ
?_Gettrue@_Locinfo@std@@QBEPBDXZ
?_Getfalse@_Locinfo@std@@QBEPBDXZ
??1_Locinfo@std@@QAE@XZ
??0_Locinfo@std@@QAE@PBD@Z
?_Syserror_map@std@@YAPBDH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?id@?$numpunct@D@std@@2V0locale@2@A
?_Xbad_function_call@std@@YAXXZ
?_Winerror_map@std@@YAHH@Z
?_Xbad_alloc@std@@YAXXZ
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?_Xlength_error@std@@YAXPBD@Z
?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ
?_Xout_of_range@std@@YAXPBD@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?uncaught_exceptions@std@@YAHXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ

imm32

ImmGetContext
ImmSetCompositionWindow
ImmReleaseContext

xinput1_3

ord4
ord2

vcruntime140

__CxxFrameHandler3
__std_exception_copy
__std_terminate
strstr
strrchr
longjmp
memcpy
memmove
memset
__std_type_info_destroy_list
_except_handler4_common
_CxxThrowException
__current_exception_context
__current_exception
_setjmp3
memchr
__std_exception_destroy

api-ms-win-crt-heap-l1-1-0

_callnewh
malloc
free
calloc

api-ms-win-crt-runtime-l1-1-0

_cexit
_initterm
_invalid_parameter_noinfo_noreturn
_crt_atexit
_execute_onexit_table
_register_onexit_function
exit
_initterm_e
_errno
abort
terminate
system
_initialize_onexit_table
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment

api-ms-win-crt-stdio-l1-1-0

fgetc
__stdio_common_vfprintf
__stdio_common_vsscanf
fread
__stdio_common_vsprintf
_wfopen
fwrite
fgetpos
fseek
fclose
fflush
__acrt_iob_func
setvbuf
ftell
__stdio_common_vsprintf_s
ungetc
fsetpos
_fseeki64
_get_stream_buffer_pointers
fputc

api-ms-win-crt-utility-l1-1-0

rand
qsort

api-ms-win-crt-string-l1-1-0

strncpy
strncmp
toupper

api-ms-win-crt-convert-l1-1-0

strtoll
strtol
strtod
atof
strtoull

api-ms-win-crt-math-l1-1-0

_CIatan2
_CIfmod
_libm_sse2_sin_precise
_dclass
_libm_sse2_sqrt_precise
floor
_fdclass
_dsign
_ldclass
_libm_sse2_acos_precise
_libm_sse2_cos_precise
_fdsign
_libm_sse2_pow_precise
_ldsign
ceil

api-ms-win-crt-filesystem-l1-1-0

_unlock_file
_lock_file

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func
localeconv

api-ms-win-crt-environment-l1-1-0

getenv

Sections

.text
Size: 884KB - Virtual size: 883KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 575KB - Virtual size: 575KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 345KB - Virtual size: 346KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Читы/Counter-Strike Source/Cranium CSS/Cranium CSS.dll
.dll windows:6 windows x86

5001b7aacbe79affc27a6c2c7df1f12f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleA
Sleep
DisableThreadLibraryCalls
CreateThread
MultiByteToWideChar
GetTickCount64
GlobalAlloc
GlobalFree
GlobalLock
WideCharToMultiByte
GlobalUnlock
LoadLibraryA
GetProcAddress
FreeLibrary
GetCurrentProcess
K32GetModuleInformation
VirtualQuery
GetFileInformationByHandle
GetFileAttributesExW
FindNextFileW
FindFirstFileExW
FindFirstFileW
FindClose
CreateFileW
CreateDirectoryW
GetFileAttributesA
AreFileApisANSI
CloseHandle
GetLastError
DeviceIoControl
CopyFileW
CreateHardLinkW
GetFileInformationByHandleEx
QueryPerformanceCounter
QueryPerformanceFrequency
GetTickCount
GetCurrentDirectoryA
CreateSymbolicLinkW
LocalFree
FormatMessageA
GetLocaleInfoEx
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
FreeLibraryAndExitThread
VirtualProtect
GetModuleFileNameA

user32

SetClipboardData
GetClipboardData
EmptyClipboard
CloseClipboard
SetWindowLongA
CallWindowProcA
OpenClipboard
GetCursorPos
GetAsyncKeyState
GetKeyState
SetCursorPos
LoadCursorA
ReleaseCapture
GetClientRect
SetCursor
SetCapture
ScreenToClient
FindWindowA
IsChild
ClientToScreen
GetCapture
GetForegroundWindow

shell32

ShellExecuteA

msvcp140

?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?always_noconv@codecvt_base@std@@QBE_NXZ
??Bid@locale@std@@QAEIXZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?uncaught_exceptions@std@@YAHXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Winerror_map@std@@YAHH@Z
?_Syserror_map@std@@YAPBDH@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Xbad_function_call@std@@YAXXZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z

imm32

ImmGetContext
ImmSetCompositionWindow
ImmReleaseContext

vcruntime140

__current_exception_context
__current_exception
strstr
__std_terminate
__std_exception_copy
_CxxThrowException
__CxxFrameHandler3
_except_handler4_common
memmove
__std_type_info_destroy_list
memchr
memcmp
memcpy
__std_exception_destroy
memset

api-ms-win-crt-heap-l1-1-0

malloc
free
_callnewh

api-ms-win-crt-math-l1-1-0

_libm_sse2_pow_precise
remainderf
_libm_sse2_sin_precise
_libm_sse2_sqrt_precise
ceil
_CIatan2
_CIfmod
_dsign
_dclass
_libm_sse2_acos_precise
roundf
_libm_sse2_cos_precise

api-ms-win-crt-runtime-l1-1-0

exit
terminate
_invalid_parameter_noinfo_noreturn
_wassert
_initterm_e
_initterm
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_errno

api-ms-win-crt-string-l1-1-0

toupper
tolower
_stricmp
strncpy

api-ms-win-crt-stdio-l1-1-0

fflush
fclose
__stdio_common_vsprintf
fputc
__stdio_common_vsscanf
_wfopen
fseek
fwrite
fgetc
__acrt_iob_func
ftell
fgetpos
__stdio_common_vsprintf_s
_get_stream_buffer_pointers
_fseeki64
fread
fsetpos
ungetc
setvbuf

api-ms-win-crt-convert-l1-1-0

atof
strtod
strtoull
strtoll
mbstowcs

api-ms-win-crt-filesystem-l1-1-0

_unlock_file
remove
_lock_file

api-ms-win-crt-locale-l1-1-0

localeconv
___lc_codepage_func

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-utility-l1-1-0

qsort

Sections

.text
Size: 442KB - Virtual size: 442KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 241KB - Virtual size: 241KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 337KB - Virtual size: 342KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Читы/Garry's Mod/Cranium (x86-64 - Chromium + 64 bit binaries)/Cranium Garry's Mod.dll
.dll windows:6 windows x64

cf2d6d68b9e4802f3e0f85d320cf8043

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

QueryPerformanceFrequency
GetProcAddress
QueryPerformanceCounter
GetModuleHandleA
VirtualFree
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapCreate
VirtualProtect
HeapFree
GetCurrentProcess
Thread32Next
Thread32First
GetCurrentThreadId
SuspendThread
ResumeThread
CreateToolhelp32Snapshot
Sleep
HeapReAlloc
CloseHandle
HeapAlloc
HeapDestroy
GetThreadContext
GetCurrentProcessId
FlushInstructionCache
SetThreadContext
OpenThread
GetLastError
DisableThreadLibraryCalls
GetModuleFileNameA
GetFileSizeEx
ReadFile
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
LocalFree
WideCharToMultiByte
GetLocaleInfoEx
CreateDirectoryW
CreateFileW
FindClose
FindFirstFileW
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
SetFileInformationByHandle
AreFileApisANSI
GetFileInformationByHandleEx
GlobalLock
GlobalFree
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitializeSListHead
GetSystemTimeAsFileTime
WakeAllConditionVariable
SleepConditionVariableSRW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GlobalUnlock
GlobalAlloc
FormatMessageA
MultiByteToWideChar
CreateFileA

user32

CloseClipboard
OpenClipboard
GetCursorPos
SetCursorPos
ReleaseCapture
GetClientRect
SetCursor
GetClipboardData
GetForegroundWindow
IsChild
ClientToScreen
GetCapture
ScreenToClient
LoadCursorA
GetKeyState
RegisterClassExA
EmptyClipboard
SetClipboardData
SetCapture
UnregisterClassA
MessageBoxA
CallWindowProcA
FindWindowW
SetWindowLongPtrA
GetAsyncKeyState
DestroyWindow
DefWindowProcA
CreateWindowExA

shell32

ShellExecuteA

msvcp140

?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
??Bid@locale@std@@QEAA_KXZ
?_Xbad_function_call@std@@YAXXZ
_Strxfrm
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?id@?$ctype@D@std@@2V0locale@2@A
?id@?$collate@D@std@@2V0locale@2@A
_Strcoll
_Xtime_get_ticks
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
?tolower@?$ctype@D@std@@QEBADD@Z
??1facet@locale@std@@MEAA@XZ
??0facet@locale@std@@IEAA@_K@Z
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
??1_Locinfo@std@@QEAA@XZ
??0_Locinfo@std@@QEAA@PEBD@Z
_Mtx_destroy_in_situ
_Mtx_init_in_situ
?_Throw_Cpp_error@std@@YAXH@Z
_Mtx_lock
_Mtx_unlock
_Cnd_do_broadcast_at_thread_exit
_Thrd_detach
?uncaught_exceptions@std@@YAHXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?good@ios_base@std@@QEBA_NXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
??1_Lockit@std@@QEAA@XZ
?_Syserror_map@std@@YAPEBDH@Z
??0_Lockit@std@@QEAA@H@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Winerror_map@std@@YAHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?_Xlength_error@std@@YAXPEBD@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ

imm32

ImmGetContext
ImmSetCompositionWindow
ImmReleaseContext

xinput1_3

ord2
ord4

vcruntime140_1

__CxxFrameHandler4

vcruntime140

longjmp
memcpy
memmove
__std_exception_destroy
__std_exception_copy
__std_terminate
strstr
strchr
__std_type_info_compare
memset
memchr
__std_type_info_destroy_list
_CxxThrowException
__intrinsic_setjmp
__C_specific_handler
__current_exception_context
__current_exception
memcmp
strrchr

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf
ftell
_get_stream_buffer_pointers
fseek
_wfopen
__stdio_common_vsscanf
_fseeki64
fread
fsetpos
ungetc
setvbuf
fwrite
fgetc
fclose
fflush
__stdio_common_vfprintf
fputc
__acrt_iob_func
fgetpos

api-ms-win-crt-heap-l1-1-0

malloc
calloc
free
_callnewh
realloc

api-ms-win-crt-filesystem-l1-1-0

_unlock_file
_lock_file

api-ms-win-crt-runtime-l1-1-0

_cexit
abort
_initterm
_initterm_e
_errno
_beginthreadex
_seh_filter_dll
terminate
_configure_narrow_argv
exit
_initialize_narrow_environment
_initialize_onexit_table
_invalid_parameter_noinfo_noreturn
_register_onexit_function
_crt_atexit
_execute_onexit_table

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-string-l1-1-0

toupper
strcmp
strncpy
strncmp
strcpy_s

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-convert-l1-1-0

strtoull
strtoul
strtol
strtoll
atof
strtod

api-ms-win-crt-math-l1-1-0

cos
_dclass
acosf
cosf
fmodf
atan2f
atanf
floor
log
logf
powf
sin
pow
_dsign
tanf
roundf
sinf
ceilf
sqrtf
_fdclass

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func
localeconv

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1016KB - Virtual size: 1015KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.7MB - Virtual size: 383.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Читы/Half-Life 2 Deathmatch/Cranium HL2DM/Cranium HL2DM.dll
.dll windows:6 windows x86

1725fa88f28301a754e00b0af310dd7a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalLock
WideCharToMultiByte
GlobalUnlock
LoadLibraryA
QueryPerformanceFrequency
QueryPerformanceCounter
GetModuleFileNameA
ExitProcess
VirtualFree
VirtualAlloc
VirtualQuery
HeapCreate
HeapFree
GetCurrentProcess
Thread32Next
Thread32First
GetCurrentThreadId
SuspendThread
ResumeThread
CreateToolhelp32Snapshot
HeapReAlloc
CloseHandle
HeapAlloc
GetThreadContext
GetModuleHandleW
FlushInstructionCache
SetThreadContext
OpenThread
GetFileSizeEx
InitializeSListHead
GetSystemTimeAsFileTime
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateEventW
WaitForSingleObjectEx
GlobalAlloc
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
GetLastError
AreFileApisANSI
GetCurrentProcessId
GetProcAddress
CreateThread
Sleep
ReadFile
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
LocalFree
FormatMessageA
CreateFileA
GetLocaleInfoEx
GlobalFree
GetModuleHandleA
VirtualProtect
ResetEvent
MultiByteToWideChar

user32

DestroyWindow
DefWindowProcA
CreateWindowExA
UnregisterClassA
RegisterClassExA
GetKeyState
GetMessageExtraInfo
LoadCursorA
ScreenToClient
GetCapture
ClientToScreen
TrackMouseEvent
GetForegroundWindow
SetCapture
SetCursor
GetClientRect
IsWindowUnicode
ReleaseCapture
SetCursorPos
wsprintfW
MessageBoxA
GetAsyncKeyState
OpenClipboard
GetCursorPos
FindWindowA
EnumWindows
CallWindowProcA
SetWindowLongA
GetWindowThreadProcessId
SetClipboardData
GetClipboardData
EmptyClipboard
CloseClipboard

shell32

ShellExecuteA

msvcp140

?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_N@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
?always_noconv@codecvt_base@std@@QBE_NXZ
??Bid@locale@std@@QAEIXZ
?_Syserror_map@std@@YAPBDH@Z
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Winerror_map@std@@YAHH@Z
?uncaught_exception@std@@YA_NXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z

imm32

ImmGetContext
ImmReleaseContext
ImmSetCandidateWindow
ImmSetCompositionWindow

vcruntime140

memcmp
_setjmp3
__current_exception
memset
memchr
_CxxThrowException
_except_handler4_common
__CxxFrameHandler3
__std_type_info_destroy_list
__std_exception_destroy
__std_exception_copy
memmove
_purecall
strstr
strrchr
__current_exception_context
memcpy
longjmp

api-ms-win-crt-heap-l1-1-0

calloc
_callnewh
malloc
free

api-ms-win-crt-runtime-l1-1-0

_cexit
_invalid_parameter_noinfo_noreturn
_seh_filter_dll
exit
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_initterm_e
_initterm
terminate
_crt_atexit
_execute_onexit_table

api-ms-win-crt-stdio-l1-1-0

fflush
fputc
__stdio_common_vsprintf_s
setvbuf
fsetpos
__stdio_common_vfprintf_s
ungetc
fclose
fopen_s
__stdio_common_vsnprintf_s
fread
_fseeki64
fgetc
__stdio_common_vsscanf
__stdio_common_vsprintf
_wfopen
fwrite
__stdio_common_vfprintf
fseek
__acrt_iob_func
ftell
fgetpos
_get_stream_buffer_pointers

api-ms-win-crt-convert-l1-1-0

mbstowcs
strtol

api-ms-win-crt-string-l1-1-0

strncpy
strcat_s
strncmp
strcpy_s

api-ms-win-crt-filesystem-l1-1-0

_unlock_file
_lock_file

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-utility-l1-1-0

qsort
rand

api-ms-win-crt-time-l1-1-0

_localtime64_s
_time64

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func

api-ms-win-crt-math-l1-1-0

ceil
_libm_sse2_sqrt_precise
_libm_sse2_sin_precise
_libm_sse2_pow_precise
_libm_sse2_cos_precise
_libm_sse2_atan_precise
_libm_sse2_acos_precise
_CIfmod
_CIatan2

Sections

.text
Size: 682KB - Virtual size: 682KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 297KB - Virtual size: 296KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 341KB - Virtual size: 349KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Читы/Team Fortress 2/SEOwnedDE/SEOwnedDE.dll
.dll windows:6 windows x86

6fc4291bb78f7ed42ffdacf0bb728f86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

CallWindowProcA
FindWindowA
GetAsyncKeyState
GetForegroundWindow
GetKeyNameTextA
GetKeyState
MapVirtualKeyW
MessageBoxA
SetWindowLongA
wsprintfW

kernel32

AreFileApisANSI
CloseHandle
CreateDirectoryW
CreateEventW
CreateFileW
CreateThread
CreateToolhelp32Snapshot
DeleteCriticalSection
EnterCriticalSection
FindClose
FindFirstFileExW
FindFirstFileW
FindNextFileW
FlushInstructionCache
FormatMessageA
FreeLibraryAndExitThread
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFileAttributesExW
GetFileInformationByHandleEx
GetLastError
GetLocaleInfoEx
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetSystemTimeAsFileTime
GetThreadContext
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
InitializeCriticalSectionAndSpinCount
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
K32GetModuleInformation
LeaveCriticalSection
LocalFree
MultiByteToWideChar
OpenThread
QueryPerformanceCounter
ResetEvent
ResumeThread
SetEvent
SetFileInformationByHandle
SetThreadContext
SetUnhandledExceptionFilter
Sleep
SuspendThread
TerminateProcess
Thread32First
Thread32Next
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForSingleObjectEx
WideCharToMultiByte

msvcp140

??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0_Locinfo@std@@QAE@PBD@Z
??0_Lockit@std@@QAE@H@Z
??0facet@locale@std@@IAE@I@Z
??0ios_base@std@@IAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1_Locinfo@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
??1facet@locale@std@@MAE@XZ
??1ios_base@std@@UAE@XZ
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Id_cnt@id@locale@std@@0HA
?_Incref@facet@locale@std@@UAEXXZ
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?_Random_device@std@@YAIXZ
?_Syserror_map@std@@YAPBDH@Z
?_Winerror_map@std@@YAHH@Z
?_Xbad_alloc@std@@YAXXZ
?_Xbad_function_call@std@@YAXXZ
?_Xinvalid_argument@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?id@?$collate@D@std@@2V0locale@2@A
?id@?$ctype@D@std@@2V0locale@2@A
?id@?$numpunct@D@std@@2V0locale@2@A
?id@?$numpunct@_W@std@@2V0locale@2@A
?init@?$basic_ios@DU?$char_traits@D@std@@@std@@IAEXPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@_N@Z
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
_Mbrtowc
_Query_perf_counter
_Query_perf_frequency
_Strcoll
_Strxfrm

vcruntime140

_CxxThrowException
__CxxFrameHandler3
__std_exception_copy
__std_exception_destroy
__std_terminate
__std_type_info_destroy_list
__std_type_info_hash
_except_handler4_common
memchr
memcmp
memcpy
memmove
memset
strstr

api-ms-win-crt-heap-l1-1-0

_callnewh
calloc
free
malloc
realloc

api-ms-win-crt-runtime-l1-1-0

_cexit
_configure_narrow_argv
_crt_atexit
_errno
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_invalid_parameter_noinfo_noreturn
_register_onexit_function
_seh_filter_dll
terminate

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func
localeconv

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf
__stdio_common_vsprintf_s
__stdio_common_vswprintf_s
_fseeki64
_get_stream_buffer_pointers
fclose
fflush
fgetc
fgetpos
fputc
fread
fsetpos
fwrite
setvbuf
ungetc

api-ms-win-crt-math-l1-1-0

_dsign
_dtest
_fdsign
_fdtest
_ldsign
_ldtest
acos
atan
atan2
cos
exp2
fmod
lroundf
remainderf
sin
sqrt
tan

api-ms-win-crt-time-l1-1-0

_localtime64_s
_time64

api-ms-win-crt-filesystem-l1-1-0

_lock_file
_unlock_file

api-ms-win-crt-convert-l1-1-0

strtod
strtof
strtoll
strtoul
strtoull

api-ms-win-crt-string-l1-1-0

strlen
tolower
toupper
wcslen

Sections

.text
Size: 767KB - Virtual size: 766KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 422KB - Virtual size: 422KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/Battlefield 4/BF4Simple/BF4Simple.exe
.exe windows:4 windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
/Left 4 Dead 2/Dunt0/Dunt0.dll
.dll windows:6 windows x86

a825f1ee171e609c575f920e7c181e93

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetTickCount
VirtualQuery
MultiByteToWideChar
QueryPerformanceCounter
EnterCriticalSection
SetLastError
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FlushInstructionCache
GetProcAddress
CreateThread
QueryPerformanceFrequency
DisableThreadLibraryCalls
Sleep
GetModuleHandleA
GetCurrentProcess
VirtualProtect
GetPrivateProfileStringA
CreateDirectoryA
WritePrivateProfileStringA
GetModuleHandleW
CreateEventW
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
CloseHandle
WaitForSingleObjectEx

user32

SetWindowLongA
CallWindowProcA
GetForegroundWindow
GetKeyState
GetCursorPos
ScreenToClient
FindWindowA
GetAsyncKeyState
CallNextHookEx

shell32

SHGetFolderPathA

msvcp140

?_Xout_of_range@std@@YAXPBD@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAPAD0PAH001@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBE_JXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBE_JXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?always_noconv@codecvt_base@std@@QBE_NXZ
??Bid@locale@std@@QAEIXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?uncaught_exception@std@@YA_NXZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?width@ios_base@std@@QAE_J_J@Z
?width@ios_base@std@@QBE_JXZ
?flags@ios_base@std@@QBEHXZ
?good@ios_base@std@@QBE_NXZ
?_Xlength_error@std@@YAXPBD@Z

d3dx9_43

D3DXCreateFontA
D3DXCreateSprite

vcruntime140

memcmp
memcpy
__CxxFrameHandler3
memset
_CxxThrowException
__std_exception_destroy
__std_exception_copy
_except_handler4_common
__current_exception_context
__current_exception
strstr
memmove
_purecall
__std_type_info_destroy_list

api-ms-win-crt-heap-l1-1-0

malloc
_callnewh
free

api-ms-win-crt-stdio-l1-1-0

fgetc
fwrite
__stdio_common_vsprintf_s
fgetpos
__stdio_common_vsprintf
setvbuf
ungetc
fputc
fopen
fflush
fclose
fread
_get_stream_buffer_pointers
_fseeki64
fsetpos

api-ms-win-crt-convert-l1-1-0

atoi
atof

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function
_execute_onexit_table
_crt_atexit
_initialize_onexit_table
_initterm
_initterm_e
_seh_filter_dll
_initialize_narrow_environment
_invalid_parameter_noinfo_noreturn
_cexit
_configure_narrow_argv
terminate

api-ms-win-crt-string-l1-1-0

strcpy_s
strcat_s
_stricmp

api-ms-win-crt-filesystem-l1-1-0

_unlock_file
_lock_file

api-ms-win-crt-environment-l1-1-0

_dupenv_s

api-ms-win-crt-math-l1-1-0

_libm_sse2_cos_precise
_libm_sse2_atan_precise
_libm_sse2_acos_precise
ceil
_libm_sse2_sin_precise
_libm_sse2_sqrt_precise

Exports

Exports

NextHook

Sections

.text
Size: 186KB - Virtual size: 186KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 172KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

43d019e6db101f731f8ec1031876208c

Code Sign

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4bCertificate

Key Usages

62:5c:4d:90:8c:d5:42:fb:ab:2e:a5:73:3f:f1:54:19Certificate

Extended Key Usages

Key Usages

2b:73:db:74:63:11:4c:5a:5b:32:4a:f2:30:57:72:49Certificate

Extended Key Usages

Key Usages

47:49:34:c0:ab:e3:c1:c9:81:d8:82:d3:44:50:13:52Certificate

Extended Key Usages

Key Usages

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

3c:15:4a:ff:78:19:9b:f3:fd:fd:59:f6:6a:64:63:c0:ba:f8:0d:48Signer

Headers

DLL Characteristics

File Characteristics

Imports

usp10

dwmapi

steam_api64

kernel32

user32

advapi32

shell32

ole32

unitefxcontrol

wsock32

comctl32

rpcrt4

oleacc

uxtheme

wininet

mf

mfplat

mfreadwrite

shlwapi

avrt

msimg32

gdi32

winspool.drv

comdlg32

oleaut32

Sections

.text Size: 6.6MB - Virtual size: 6.6MB

.rdata Size: 2.9MB - Virtual size: 2.9MB

.data Size: 150KB - Virtual size: 893KB

.pdata Size: 219KB - Virtual size: 218KB

_RDATA Size: 3KB - Virtual size: 2KB

.rsrc Size: 916KB - Virtual size: 915KB

.reloc Size: 127KB - Virtual size: 127KB

38e3078f900264dff81caa6939470d10

Code Sign

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4bCertificate

Key Usages

62:5c:4d:90:8c:d5:42:fb:ab:2e:a5:73:3f:f1:54:19Certificate

Extended Key Usages

Key Usages

2b:73:db:74:63:11:4c:5a:5b:32:4a:f2:30:57:72:49Certificate

Extended Key Usages

Key Usages

47:49:34:c0:ab:e3:c1:c9:81:d8:82:d3:44:50:13:52Certificate

Extended Key Usages

Key Usages

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

bc:51:8d:2d:47:58:93:91:16:14:8e:7d:9e:0f:60:6e:ca:ef:3b:2fSigner

Headers

DLL Characteristics

File Characteristics

Imports

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

62:5c:4d:90:8c:d5:42:fb:ab:2e:a5:73:3f:f1:54:19
Certificate

2b:73:db:74:63:11:4c:5a:5b:32:4a:f2:30:57:72:49
Certificate

47:49:34:c0:ab:e3:c1:c9:81:d8:82:d3:44:50:13:52
Certificate

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

3c:15:4a:ff:78:19:9b:f3:fd:fd:59:f6:6a:64:63:c0:ba:f8:0d:48
Signer

.text
Size: 6.6MB - Virtual size: 6.6MB

.rdata
Size: 2.9MB - Virtual size: 2.9MB

.data
Size: 150KB - Virtual size: 893KB

.pdata
Size: 219KB - Virtual size: 218KB

_RDATA
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 916KB - Virtual size: 915KB

.reloc
Size: 127KB - Virtual size: 127KB

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

62:5c:4d:90:8c:d5:42:fb:ab:2e:a5:73:3f:f1:54:19
Certificate

2b:73:db:74:63:11:4c:5a:5b:32:4a:f2:30:57:72:49
Certificate

47:49:34:c0:ab:e3:c1:c9:81:d8:82:d3:44:50:13:52
Certificate

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

bc:51:8d:2d:47:58:93:91:16:14:8e:7d:9e:0f:60:6e:ca:ef:3b:2f
Signer

.text
Size: 770KB - Virtual size: 769KB

.rdata
Size: 276KB - Virtual size: 276KB

.data
Size: 15KB - Virtual size: 23KB

.pdata
Size: 33KB - Virtual size: 32KB

_RDATA
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 6KB - Virtual size: 5KB

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

62:5c:4d:90:8c:d5:42:fb:ab:2e:a5:73:3f:f1:54:19
Certificate

2b:73:db:74:63:11:4c:5a:5b:32:4a:f2:30:57:72:49
Certificate

47:49:34:c0:ab:e3:c1:c9:81:d8:82:d3:44:50:13:52
Certificate

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

0f:56:d6:c4:a3:f8:d9:41:0c:ed:2a:b6:5c:b6:7e:ff:a4:2d:3b:0a
Signer

.text
Size: 274KB - Virtual size: 273KB

RT_CODE
Size: 1KB - Virtual size: 1KB

.rdata
Size: 125KB - Virtual size: 124KB

.data
Size: 10KB - Virtual size: 18KB

.pdata
Size: 17KB - Virtual size: 16KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 4KB