GDHM_TASBOT_v34[.]0 (1)[.]rar

Sharing

Copy URL

Twitter E-mail

General

Target

GDHM_TASBOT_v34.0 (1).rar
Size

34.9MB
MD5

502a1718ddba58231790af75a49bdbde
SHA1

511764b3273a98cfe2427b3e858aa219869256c6
SHA256

5be0790ffd87b76ccf89d56ceebac7d282683f5bcec80201b33354fb36066407
SHA512

9120d93b8fef4201626cebcfaf73ad98b277fc1f12f887cde1b3ed2a135c978f3c14f2f95456429d484bbd2d162cf6a7a9a4f232da503110cce9153d1b7715a9
SSDEEP

786432:yYjXenbgeY3ToQdUaeSSffpf1UqnIMZhZEpuKDvYyBNZxC3SfZ:yYjXenMtjDia1qKWZhWT7PbC3SfZ

Score

7^/10

upx themida

Malware Config

Signatures

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
static1/unpack001/GDHM_TASBOT_v34.0/RoastedMarshmellow.dll	acprotect

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

themida

resource	yara_rule
static1/unpack001/GDHM_TASBOT_v34.0/tBot.dll	themida

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/GDHM_TASBOT_v34.0/RoastedMarshmellow.dll	upx

Unsigned PE 9 IoCs

Checks for missing Authenticode signature.

resource
unpack001/GDHM_TASBOT_v34.0/.GDHM/tools/backup/GDHM_CLIENT.exe
unpack001/GDHM_TASBOT_v34.0/.GDHM/tools/backup/msacm32.dll.bak
unpack001/GDHM_TASBOT_v34.0/.GDHM/tools/backup/pthreadVCE2.dll.bak
unpack001/GDHM_TASBOT_v34.0/RoastedMarshmellow.dll
unpack002/out.upx
unpack001/GDHM_TASBOT_v34.0/ToastedMarshmellow.dll
unpack001/GDHM_TASBOT_v34.0/ffmpeg/ffmpeg.exe
unpack001/GDHM_TASBOT_v34.0/msacm32.dll
unpack001/GDHM_TASBOT_v34.0/tBot.dll

Files

GDHM_TASBOT_v34.0 (1).rar
.rar
GDHM_TASBOT_v34.0/.GDHM/.GDHM_Geometrize2GD.bat
GDHM_TASBOT_v34.0/.GDHM/.GDHM_uninstall.bat
GDHM_TASBOT_v34.0/.GDHM/mod/bypass.json
GDHM_TASBOT_v34.0/.GDHM/mod/core.json
GDHM_TASBOT_v34.0/.GDHM/mod/creator.json
GDHM_TASBOT_v34.0/.GDHM/mod/global.json
GDHM_TASBOT_v34.0/.GDHM/mod/player.json
GDHM_TASBOT_v34.0/.GDHM/mod/variables.json
GDHM_TASBOT_v34.0/.GDHM/tools/Geometrize2GD.py/gd_object.py
GDHM_TASBOT_v34.0/.GDHM/tools/Geometrize2GD.py/gd_object_dict.py
GDHM_TASBOT_v34.0/.GDHM/tools/Geometrize2GD.py/gd_pipe.py
GDHM_TASBOT_v34.0/.GDHM/tools/Geometrize2GD.py/main.py
GDHM_TASBOT_v34.0/.GDHM/tools/Geometrize2GD.py/pipe_name.config
GDHM_TASBOT_v34.0/.GDHM/tools/Geometrize2GD.py/requirements/install.bat
GDHM_TASBOT_v34.0/.GDHM/tools/Geometrize2GD.py/requirements/requirements.txt
GDHM_TASBOT_v34.0/.GDHM/tools/Geometrize2GD.py/sample.json
GDHM_TASBOT_v34.0/.GDHM/tools/backup/GDHM_CLIENT.exe
.exe windows:6 windows x86 arch:x86

2e65c8be3d451499deddda40c57dc834

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
CreateFileA
CloseHandle
CreateFileW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwind
RaiseException
GetLastError
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
GetStdHandle
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
GetCommandLineA
GetCommandLineW
HeapFree
HeapAlloc
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
GetStringTypeW
CompareStringW
LCMapStringW
GetProcessHeap
SetFilePointerEx
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
DecodePointer
WriteConsoleW

Sections

.text
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
GDHM_TASBOT_v34.0/.GDHM/tools/backup/msacm32.dll.bak
.dll windows:6 windows x86 arch:x86

5633319c28d2514cae6bf0126c1da38d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DisableThreadLibraryCalls
CreateThread
GetModuleFileNameA
LoadLibraryW
GetSystemDirectoryW
GetProcAddress
CreateFileW
FormatMessageA
LocalFree
GetFileAttributesExW
AreFileApisANSI
CloseHandle
GetLastError
GetFileInformationByHandleEx
MultiByteToWideChar
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent

msvcp140

?always_noconv@codecvt_base@std@@QBE_NXZ
??Bid@locale@std@@QAEIXZ
?_Xlength_error@std@@YAXPBD@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Xout_of_range@std@@YAXPBD@Z
?_Winerror_map@std@@YAHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?_Syserror_map@std@@YAPBDH@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ

vcruntime140

_except_handler4_common
memset
memcpy
_CxxThrowException
__std_terminate
__std_exception_copy
__std_exception_destroy
__CxxFrameHandler3
__std_type_info_destroy_list
memmove

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_invalid_parameter_noinfo_noreturn
_cexit
terminate

api-ms-win-crt-stdio-l1-1-0

ungetc
setvbuf
fgetpos
fwrite
_fseeki64
fgetc
fclose
fflush
fread
fputc
_get_stream_buffer_pointers
fsetpos

api-ms-win-crt-heap-l1-1-0

malloc
_callnewh
free

api-ms-win-crt-filesystem-l1-1-0

_lock_file
_unlock_file

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func

Exports

Exports

acmDriverAddA
acmDriverAddW
acmDriverClose
acmDriverDetailsA
acmDriverDetailsW
acmDriverEnum
acmDriverID
acmDriverMessage
acmDriverOpen
acmDriverPriority
acmDriverRemove
acmFilterChooseA
acmFilterChooseW
acmFilterDetailsA
acmFilterDetailsW
acmFilterEnumA
acmFilterEnumW
acmFilterTagDetailsA
acmFilterTagDetailsW
acmFilterTagEnumA
acmFilterTagEnumW
acmFormatChooseA
acmFormatChooseW
acmFormatDetailsA
acmFormatDetailsW
acmFormatEnumA
acmFormatEnumW
acmFormatSuggest
acmFormatTagDetailsA
acmFormatTagDetailsW
acmFormatTagEnumA
acmFormatTagEnumW
acmGetVersion
acmMetrics
acmStreamClose
acmStreamConvert
acmStreamMessage
acmStreamOpen
acmStreamPrepareHeader
acmStreamReset
acmStreamSize
acmStreamUnprepareHeader

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
GDHM_TASBOT_v34.0/.GDHM/tools/backup/pthreadVCE2.dll.bak
.dll windows:4 windows x86 arch:x86

3cb670276d26003b3e60cc547afc3c3e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

calloc
_onexit
__dllonexit
_adjust_fdiv
_initterm
??1type_info@@UAE@XZ
??3@YAXPAX@Z
_ftime
_beginthreadex
malloc
exit
_errno
_CxxThrowException
__CxxFrameHandler
_endthreadex
?set_terminate@@YAP6AXXZP6AXXZ@Z
?terminate@@YAXXZ
free

wsock32

WSAGetLastError
WSASetLastError

kernel32

TlsGetValue
CloseHandle
SetLastError
CreateSemaphoreA
GetCurrentProcessId
OpenProcess
SetThreadPriority
LoadLibraryA
WaitForMultipleObjects
GetCurrentThreadId
GetCurrentThread
DuplicateHandle
GetThreadPriority
InterlockedExchangeAdd
CreateEventA
FreeLibrary
GetProcAddress
SuspendThread
ResumeThread
TlsFree
ReleaseSemaphore
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
TlsAlloc
TlsSetValue
SetEvent
GetProcessAffinityMask
GetCurrentProcess
GetLastError
Sleep
WaitForSingleObject
SetThreadContext
InterlockedDecrement
ResetEvent
GetThreadContext

Exports

Exports

pthreadCancelableTimedWait
pthreadCancelableWait
pthread_attr_destroy
pthread_attr_getdetachstate
pthread_attr_getinheritsched
pthread_attr_getschedparam
pthread_attr_getschedpolicy
pthread_attr_getscope
pthread_attr_getstackaddr
pthread_attr_getstacksize
pthread_attr_init
pthread_attr_setdetachstate
pthread_attr_setinheritsched
pthread_attr_setschedparam
pthread_attr_setschedpolicy
pthread_attr_setscope
pthread_attr_setstackaddr
pthread_attr_setstacksize
pthread_barrier_destroy
pthread_barrier_init
pthread_barrier_wait
pthread_barrierattr_destroy
pthread_barrierattr_getpshared
pthread_barrierattr_init
pthread_barrierattr_setpshared
pthread_cancel
pthread_cond_broadcast
pthread_cond_destroy
pthread_cond_init
pthread_cond_signal
pthread_cond_timedwait
pthread_cond_wait
pthread_condattr_destroy
pthread_condattr_getpshared
pthread_condattr_init
pthread_condattr_setpshared
pthread_create
pthread_delay_np
pthread_detach
pthread_equal
pthread_exit
pthread_getconcurrency
pthread_getschedparam
pthread_getspecific
pthread_getw32threadhandle_np
pthread_join
pthread_key_create
pthread_key_delete
pthread_kill
pthread_mutex_destroy
pthread_mutex_init
pthread_mutex_lock
pthread_mutex_timedlock
pthread_mutex_trylock
pthread_mutex_unlock
pthread_mutexattr_destroy
pthread_mutexattr_getkind_np
pthread_mutexattr_getpshared
pthread_mutexattr_gettype
pthread_mutexattr_init
pthread_mutexattr_setkind_np
pthread_mutexattr_setpshared
pthread_mutexattr_settype
pthread_num_processors_np
pthread_once
pthread_rwlock_destroy
pthread_rwlock_init
pthread_rwlock_rdlock
pthread_rwlock_timedrdlock
pthread_rwlock_timedwrlock
pthread_rwlock_tryrdlock
pthread_rwlock_trywrlock
pthread_rwlock_unlock
pthread_rwlock_wrlock
pthread_rwlockattr_destroy
pthread_rwlockattr_getpshared
pthread_rwlockattr_init
pthread_rwlockattr_setpshared
pthread_self
pthread_setcancelstate
pthread_setcanceltype
pthread_setconcurrency
pthread_setschedparam
pthread_setspecific
pthread_spin_destroy
pthread_spin_init
pthread_spin_lock
pthread_spin_trylock
pthread_spin_unlock
pthread_testcancel
pthread_timechange_handler_np
pthread_win32_process_attach_np
pthread_win32_process_detach_np
pthread_win32_test_features_np
pthread_win32_thread_attach_np
pthread_win32_thread_detach_np
ptw32_get_exception_services_code
ptw32_pop_cleanup
ptw32_push_cleanup
sched_get_priority_max
sched_get_priority_min
sched_getscheduler
sched_setscheduler
sched_yield
sem_close
sem_destroy
sem_getvalue
sem_init
sem_open
sem_post
sem_post_multiple
sem_timedwait
sem_trywait
sem_unlink
sem_wait

Sections

.text
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
GDHM_TASBOT_v34.0/.tasbot/third_party_licenses/LICENSE_CappucinoSDK.txt
GDHM_TASBOT_v34.0/.tasbot/third_party_licenses/LICENSE_Kazmath.txt
GDHM_TASBOT_v34.0/.tasbot/third_party_licenses/LICENSE_NSWFL.txt
GDHM_TASBOT_v34.0/.tasbot/third_party_licenses/LICENSE_ProxyDll.txt
GDHM_TASBOT_v34.0/.tasbot/third_party_licenses/LICENSE_ReplayBot.txt
GDHM_TASBOT_v34.0/.tasbot/third_party_licenses/LICENSE_StackWalker.txt
GDHM_TASBOT_v34.0/.tasbot/third_party_licenses/LICENSE_bada_pthread.txt
GDHM_TASBOT_v34.0/.tasbot/third_party_licenses/LICENSE_cocos2d-x.txt
GDHM_TASBOT_v34.0/.tasbot/third_party_licenses/LICENSE_cocosdenshion.txt
GDHM_TASBOT_v34.0/.tasbot/third_party_licenses/LICENSE_cpp-httplib.txt
GDHM_TASBOT_v34.0/.tasbot/third_party_licenses/LICENSE_curl.txt
GDHM_TASBOT_v34.0/.tasbot/third_party_licenses/LICENSE_detours.txt
GDHM_TASBOT_v34.0/.tasbot/third_party_licenses/LICENSE_discord-rpc.txt
GDHM_TASBOT_v34.0/.tasbot/third_party_licenses/LICENSE_gd.h_combined.txt
GDHM_TASBOT_v34.0/.tasbot/third_party_licenses/LICENSE_gd.h_pie.txt
GDHM_TASBOT_v34.0/.tasbot/third_party_licenses/LICENSE_gdrpc.txt
GDHM_TASBOT_v34.0/.tasbot/third_party_licenses/LICENSE_imgui.txt
GDHM_TASBOT_v34.0/.tasbot/third_party_licenses/LICENSE_jsoncpp.txt
GDHM_TASBOT_v34.0/.tasbot/third_party_licenses/LICENSE_jsonhpp.txt
GDHM_TASBOT_v34.0/.tasbot/third_party_licenses/LICENSE_kiero.txt
GDHM_TASBOT_v34.0/.tasbot/third_party_licenses/LICENSE_libmem.txt
GDHM_TASBOT_v34.0/.tasbot/third_party_licenses/LICENSE_libmem_new.txt
GDHM_TASBOT_v34.0/.tasbot/third_party_licenses/LICENSE_minhook.txt
GDHM_TASBOT_v34.0/.tasbot/third_party_licenses/LICENSE_openssl.txt
GDHM_TASBOT_v34.0/.tasbot/third_party_licenses/LICENSE_pugixml.txt
GDHM_TASBOT_v34.0/.tasbot/third_party_licenses/LICENSE_spdlog.txt
GDHM_TASBOT_v34.0/.tasbot/third_party_licenses/LICENSE_toml11.txt
GDHM_TASBOT_v34.0/.tasbot/third_party_licenses/LICENSE_zlib.txt
GDHM_TASBOT_v34.0/RoastedMarshmellow.dll
.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

?main_unload@@YAXXZ

Sections

UPX0
Size: - Virtual size: 184KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 129KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 212KB - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
GDHM_TASBOT_v34.0/ToastedMarshmellow.dll
.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

?$TSS0@?1??getClassTypeInfo@CCCallFuncN@cocos2d@@UAEJXZ@4HA
?$TSS0@?1??getClassTypeInfo@CCCallFuncND@cocos2d@@UAEJXZ@4HA
?$TSS0@?1??getClassTypeInfo@CCCallFuncO@cocos2d@@UAEJXZ@4HA
?$TSS0@?1??getClassTypeInfo@CCDirector@cocos2d@@UAEJXZ@4HA
?$TSS0@?1??getClassTypeInfo@CCFileUtils@cocos2d@@UAEJXZ@4HA
??0?$MemPoolT@$0CE@@tinyxml2@@QAE@ABV01@@Z
??0?$MemPoolT@$0CM@@tinyxml2@@QAE@ABV01@@Z
??0?$MemPoolT@$0DA@@tinyxml2@@QAE@ABV01@@Z
??0?$MemPoolT@$0DE@@tinyxml2@@QAE@ABV01@@Z
??0CCAccelAmplitude@cocos2d@@QAE@ABV01@@Z
??0CCAccelAmplitude@cocos2d@@QAE@XZ
??0CCAccelDeccelAmplitude@cocos2d@@QAE@ABV01@@Z
??0CCAccelDeccelAmplitude@cocos2d@@QAE@XZ
??0CCAccelerometerDelegate@cocos2d@@QAE@$$QAV01@@Z
??0CCAccelerometerDelegate@cocos2d@@QAE@ABV01@@Z
??0CCAccelerometerDelegate@cocos2d@@QAE@XZ
??0CCAction@cocos2d@@QAE@ABV01@@Z
??0CCActionCamera@cocos2d@@QAE@ABV01@@Z
??0CCActionCamera@cocos2d@@QAE@XZ
??0CCActionEase@cocos2d@@QAE@ABV01@@Z
??0CCActionEase@cocos2d@@QAE@XZ
??0CCActionInstant@cocos2d@@QAE@ABV01@@Z
??0CCActionInterval@cocos2d@@QAE@$$QAV01@@Z
??0CCActionInterval@cocos2d@@QAE@ABV01@@Z
??0CCActionInterval@cocos2d@@QAE@XZ
??0CCActionManager@cocos2d@@QAE@ABV01@@Z
??0CCActionTween@cocos2d@@QAE@$$QAV01@@Z
??0CCActionTween@cocos2d@@QAE@ABV01@@Z
??0CCActionTween@cocos2d@@QAE@XZ
??0CCActionTweenDelegate@cocos2d@@QAE@ABV01@@Z
??0CCActionTweenDelegate@cocos2d@@QAE@XZ
??0CCAnimate@cocos2d@@QAE@ABV01@@Z
??0CCAnimation@cocos2d@@QAE@ABV01@@Z
??0CCAnimationCache@cocos2d@@QAE@ABV01@@Z
??0CCAnimationFrame@cocos2d@@QAE@ABV01@@Z
??0CCApplication@cocos2d@@QAE@ABV01@@Z
??0CCApplicationProtocol@cocos2d@@QAE@ABV01@@Z
??0CCApplicationProtocol@cocos2d@@QAE@XZ
??0CCArray@cocos2d@@QAE@ABV01@@Z
??0CCAtlasNode@cocos2d@@QAE@ABV01@@Z
??0CCAutoreleasePool@cocos2d@@QAE@ABV01@@Z
??0CCBMFontConfiguration@cocos2d@@QAE@ABV01@@Z
??0CCBezierBy@cocos2d@@QAE@$$QAV01@@Z
??0CCBezierBy@cocos2d@@QAE@ABV01@@Z
??0CCBezierBy@cocos2d@@QAE@XZ
??0CCBezierTo@cocos2d@@QAE@$$QAV01@@Z
??0CCBezierTo@cocos2d@@QAE@ABV01@@Z
??0CCBezierTo@cocos2d@@QAE@XZ
??0CCBlendProtocol@cocos2d@@QAE@$$QAV01@@Z
??0CCBlendProtocol@cocos2d@@QAE@ABV01@@Z
??0CCBlendProtocol@cocos2d@@QAE@XZ
??0CCBlink@cocos2d@@QAE@$$QAV01@@Z
??0CCBlink@cocos2d@@QAE@ABV01@@Z
??0CCBlink@cocos2d@@QAE@XZ
??0CCBool@cocos2d@@QAE@$$QAV01@@Z
??0CCBool@cocos2d@@QAE@ABV01@@Z
??0CCBool@cocos2d@@QAE@_N@Z
??0CCCallFunc@cocos2d@@QAE@ABV01@@Z
??0CCCallFunc@cocos2d@@QAE@XZ
??0CCCallFuncN@cocos2d@@QAE@ABV01@@Z
??0CCCallFuncN@cocos2d@@QAE@XZ
??0CCCallFuncND@cocos2d@@QAE@$$QAV01@@Z
??0CCCallFuncND@cocos2d@@QAE@ABV01@@Z
??0CCCallFuncND@cocos2d@@QAE@XZ
??0CCCallFuncO@cocos2d@@QAE@ABV01@@Z
??0CCCardinalSplineBy@cocos2d@@QAE@$$QAV01@@Z
??0CCCardinalSplineBy@cocos2d@@QAE@ABV01@@Z
??0CCCardinalSplineTo@cocos2d@@QAE@ABV01@@Z
??0CCCatmullRomBy@cocos2d@@QAE@$$QAV01@@Z
??0CCCatmullRomBy@cocos2d@@QAE@ABV01@@Z
??0CCCatmullRomBy@cocos2d@@QAE@XZ
??0CCCatmullRomTo@cocos2d@@QAE@$$QAV01@@Z
??0CCCatmullRomTo@cocos2d@@QAE@ABV01@@Z
??0CCCatmullRomTo@cocos2d@@QAE@XZ
??0CCClippingNode@cocos2d@@QAE@ABV01@@Z
??0CCComponent@cocos2d@@QAE@ABV01@@Z
??0CCComponentContainer@cocos2d@@QAE@ABV01@@Z
??0CCConfiguration@cocos2d@@QAE@ABV01@@Z
??0CCCopying@cocos2d@@QAE@$$QAV01@@Z
??0CCCopying@cocos2d@@QAE@ABV01@@Z
??0CCCopying@cocos2d@@QAE@XZ
??0CCDataVisitor@cocos2d@@QAE@ABV01@@Z
??0CCDataVisitor@cocos2d@@QAE@XZ
??0CCDeccelAmplitude@cocos2d@@QAE@ABV01@@Z
??0CCDeccelAmplitude@cocos2d@@QAE@XZ
??0CCDelayTime@cocos2d@@QAE@$$QAV01@@Z
??0CCDelayTime@cocos2d@@QAE@ABV01@@Z
??0CCDelayTime@cocos2d@@QAE@XZ
??0CCDictionary@cocos2d@@QAE@ABV01@@Z
??0CCDirectorDelegate@cocos2d@@QAE@$$QAV01@@Z
??0CCDirectorDelegate@cocos2d@@QAE@ABV01@@Z
??0CCDirectorDelegate@cocos2d@@QAE@XZ
??0CCDouble@cocos2d@@QAE@$$QAV01@@Z
??0CCDouble@cocos2d@@QAE@ABV01@@Z
??0CCDouble@cocos2d@@QAE@N@Z
??0CCDrawNode@cocos2d@@QAE@ABV01@@Z
??0CCEGLView@cocos2d@@QAE@$$QAV01@@Z
??0CCEGLView@cocos2d@@QAE@ABV01@@Z
??0CCEGLViewProtocol@cocos2d@@QAE@ABV01@@Z
??0CCEaseBackIn@cocos2d@@QAE@$$QAV01@@Z
??0CCEaseBackIn@cocos2d@@QAE@ABV01@@Z
??0CCEaseBackIn@cocos2d@@QAE@XZ
??0CCEaseBackInOut@cocos2d@@QAE@$$QAV01@@Z
??0CCEaseBackInOut@cocos2d@@QAE@ABV01@@Z
??0CCEaseBackInOut@cocos2d@@QAE@XZ
??0CCEaseBackOut@cocos2d@@QAE@$$QAV01@@Z
??0CCEaseBackOut@cocos2d@@QAE@ABV01@@Z
??0CCEaseBackOut@cocos2d@@QAE@XZ
??0CCEaseBounce@cocos2d@@QAE@$$QAV01@@Z
??0CCEaseBounce@cocos2d@@QAE@ABV01@@Z
??0CCEaseBounce@cocos2d@@QAE@XZ
??0CCEaseBounceIn@cocos2d@@QAE@$$QAV01@@Z
??0CCEaseBounceIn@cocos2d@@QAE@ABV01@@Z
??0CCEaseBounceIn@cocos2d@@QAE@XZ
??0CCEaseBounceInOut@cocos2d@@QAE@$$QAV01@@Z
??0CCEaseBounceInOut@cocos2d@@QAE@ABV01@@Z
??0CCEaseBounceInOut@cocos2d@@QAE@XZ
??0CCEaseBounceOut@cocos2d@@QAE@$$QAV01@@Z
??0CCEaseBounceOut@cocos2d@@QAE@ABV01@@Z
??0CCEaseBounceOut@cocos2d@@QAE@XZ
??0CCEaseElastic@cocos2d@@QAE@$$QAV01@@Z
??0CCEaseElastic@cocos2d@@QAE@ABV01@@Z
??0CCEaseElastic@cocos2d@@QAE@XZ
??0CCEaseElasticIn@cocos2d@@QAE@$$QAV01@@Z
??0CCEaseElasticIn@cocos2d@@QAE@ABV01@@Z
??0CCEaseElasticIn@cocos2d@@QAE@XZ
??0CCEaseElasticInOut@cocos2d@@QAE@$$QAV01@@Z
??0CCEaseElasticInOut@cocos2d@@QAE@ABV01@@Z
??0CCEaseElasticInOut@cocos2d@@QAE@XZ
??0CCEaseElasticOut@cocos2d@@QAE@$$QAV01@@Z
??0CCEaseElasticOut@cocos2d@@QAE@ABV01@@Z
??0CCEaseElasticOut@cocos2d@@QAE@XZ
??0CCEaseExponentialIn@cocos2d@@QAE@$$QAV01@@Z
??0CCEaseExponentialIn@cocos2d@@QAE@ABV01@@Z
??0CCEaseExponentialIn@cocos2d@@QAE@XZ
??0CCEaseExponentialInOut@cocos2d@@QAE@$$QAV01@@Z
??0CCEaseExponentialInOut@cocos2d@@QAE@ABV01@@Z
??0CCEaseExponentialInOut@cocos2d@@QAE@XZ
??0CCEaseExponentialOut@cocos2d@@QAE@$$QAV01@@Z
??0CCEaseExponentialOut@cocos2d@@QAE@ABV01@@Z
??0CCEaseExponentialOut@cocos2d@@QAE@XZ
??0CCEaseIn@cocos2d@@QAE@$$QAV01@@Z
??0CCEaseIn@cocos2d@@QAE@ABV01@@Z
??0CCEaseIn@cocos2d@@QAE@XZ
??0CCEaseInOut@cocos2d@@QAE@$$QAV01@@Z
??0CCEaseInOut@cocos2d@@QAE@ABV01@@Z
??0CCEaseInOut@cocos2d@@QAE@XZ
??0CCEaseOut@cocos2d@@QAE@$$QAV01@@Z
??0CCEaseOut@cocos2d@@QAE@ABV01@@Z
??0CCEaseOut@cocos2d@@QAE@XZ
??0CCEaseRateAction@cocos2d@@QAE@ABV01@@Z
??0CCEaseRateAction@cocos2d@@QAE@XZ
??0CCEaseSineIn@cocos2d@@QAE@$$QAV01@@Z
??0CCEaseSineIn@cocos2d@@QAE@ABV01@@Z
??0CCEaseSineIn@cocos2d@@QAE@XZ
??0CCEaseSineInOut@cocos2d@@QAE@$$QAV01@@Z
??0CCEaseSineInOut@cocos2d@@QAE@ABV01@@Z
??0CCEaseSineInOut@cocos2d@@QAE@XZ
??0CCEaseSineOut@cocos2d@@QAE@$$QAV01@@Z
??0CCEaseSineOut@cocos2d@@QAE@ABV01@@Z
??0CCEaseSineOut@cocos2d@@QAE@XZ
??0CCEvent@cocos2d@@QAE@$$QAV01@@Z
??0CCEvent@cocos2d@@QAE@ABV01@@Z
??0CCEvent@cocos2d@@QAE@XZ
??0CCFadeIn@cocos2d@@QAE@$$QAV01@@Z
??0CCFadeIn@cocos2d@@QAE@ABV01@@Z
??0CCFadeIn@cocos2d@@QAE@XZ
??0CCFadeOut@cocos2d@@QAE@$$QAV01@@Z
??0CCFadeOut@cocos2d@@QAE@ABV01@@Z
??0CCFadeOut@cocos2d@@QAE@XZ
??0CCFadeOutBLTiles@cocos2d@@QAE@$$QAV01@@Z
??0CCFadeOutBLTiles@cocos2d@@QAE@ABV01@@Z
??0CCFadeOutBLTiles@cocos2d@@QAE@XZ
??0CCFadeOutDownTiles@cocos2d@@QAE@$$QAV01@@Z
??0CCFadeOutDownTiles@cocos2d@@QAE@ABV01@@Z
??0CCFadeOutDownTiles@cocos2d@@QAE@XZ
??0CCFadeOutTRTiles@cocos2d@@QAE@$$QAV01@@Z
??0CCFadeOutTRTiles@cocos2d@@QAE@ABV01@@Z
??0CCFadeOutTRTiles@cocos2d@@QAE@XZ
??0CCFadeOutUpTiles@cocos2d@@QAE@$$QAV01@@Z
??0CCFadeOutUpTiles@cocos2d@@QAE@ABV01@@Z
??0CCFadeOutUpTiles@cocos2d@@QAE@XZ
??0CCFadeTo@cocos2d@@QAE@$$QAV01@@Z
??0CCFadeTo@cocos2d@@QAE@ABV01@@Z
??0CCFadeTo@cocos2d@@QAE@XZ
??0CCFileUtils@cocos2d@@QAE@ABV01@@Z
??0CCFiniteTimeAction@cocos2d@@QAE@ABV01@@Z
??0CCFiniteTimeAction@cocos2d@@QAE@XZ
??0CCFlipX3D@cocos2d@@QAE@$$QAV01@@Z
??0CCFlipX3D@cocos2d@@QAE@ABV01@@Z
??0CCFlipX3D@cocos2d@@QAE@XZ
??0CCFlipX@cocos2d@@QAE@ABV01@@Z
??0CCFlipX@cocos2d@@QAE@XZ
??0CCFlipY3D@cocos2d@@QAE@$$QAV01@@Z
??0CCFlipY3D@cocos2d@@QAE@ABV01@@Z
??0CCFlipY3D@cocos2d@@QAE@XZ
??0CCFlipY@cocos2d@@QAE@ABV01@@Z
??0CCFlipY@cocos2d@@QAE@XZ
??0CCFloat@cocos2d@@QAE@$$QAV01@@Z
??0CCFloat@cocos2d@@QAE@ABV01@@Z
??0CCFloat@cocos2d@@QAE@M@Z
??0CCFollow@cocos2d@@QAE@ABV01@@Z
??0CCFollow@cocos2d@@QAE@XZ
??0CCGLProgram@cocos2d@@QAE@ABV01@@Z
??0CCGrid3D@cocos2d@@QAE@ABV01@@Z
??0CCGrid3DAction@cocos2d@@QAE@$$QAV01@@Z
??0CCGrid3DAction@cocos2d@@QAE@ABV01@@Z
??0CCGrid3DAction@cocos2d@@QAE@XZ
??0CCGridAction@cocos2d@@QAE@$$QAV01@@Z
??0CCGridAction@cocos2d@@QAE@ABV01@@Z
??0CCGridAction@cocos2d@@QAE@XZ
??0CCGridBase@cocos2d@@QAE@ABV01@@Z
??0CCGridBase@cocos2d@@QAE@XZ
??0CCHide@cocos2d@@QAE@ABV01@@Z
??0CCHide@cocos2d@@QAE@XZ
??0CCIMEDelegate@cocos2d@@QAE@ABV01@@Z
??0CCInteger@cocos2d@@QAE@$$QAV01@@Z
??0CCInteger@cocos2d@@QAE@ABV01@@Z
??0CCInteger@cocos2d@@QAE@H@Z
??0CCJumpBy@cocos2d@@QAE@$$QAV01@@Z
??0CCJumpBy@cocos2d@@QAE@ABV01@@Z
??0CCJumpBy@cocos2d@@QAE@XZ
??0CCJumpTiles3D@cocos2d@@QAE@$$QAV01@@Z
??0CCJumpTiles3D@cocos2d@@QAE@ABV01@@Z
??0CCJumpTiles3D@cocos2d@@QAE@XZ
??0CCJumpTo@cocos2d@@QAE@$$QAV01@@Z
??0CCJumpTo@cocos2d@@QAE@ABV01@@Z
??0CCJumpTo@cocos2d@@QAE@XZ
??0CCKeypadDelegate@cocos2d@@QAE@$$QAV01@@Z
??0CCKeypadDelegate@cocos2d@@QAE@ABV01@@Z
??0CCKeypadDelegate@cocos2d@@QAE@XZ
??0CCKeypadDispatcher@cocos2d@@QAE@ABV01@@Z
??0CCKeypadHandler@cocos2d@@QAE@ABV01@@Z
??0CCKeypadHandler@cocos2d@@QAE@XZ
??0CCLabelAtlas@cocos2d@@QAE@ABV01@@Z
??0CCLabelAtlas@cocos2d@@QAE@XZ
??0CCLabelBMFont@cocos2d@@QAE@ABV01@@Z
??0CCLabelProtocol@cocos2d@@QAE@$$QAV01@@Z
??0CCLabelProtocol@cocos2d@@QAE@ABV01@@Z
??0CCLabelProtocol@cocos2d@@QAE@XZ
??0CCLabelTTF@cocos2d@@QAE@ABV01@@Z
??0CCLayer@cocos2d@@QAE@ABV01@@Z
??0CCLayerColor@cocos2d@@QAE@ABV01@@Z
??0CCLayerGradient@cocos2d@@QAE@$$QAV01@@Z
??0CCLayerGradient@cocos2d@@QAE@ABV01@@Z
??0CCLayerGradient@cocos2d@@QAE@XZ
??0CCLayerMultiplex@cocos2d@@QAE@ABV01@@Z
??0CCLayerRGBA@cocos2d@@QAE@ABV01@@Z
??0CCLens3D@cocos2d@@QAE@$$QAV01@@Z
??0CCLens3D@cocos2d@@QAE@ABV01@@Z
??0CCLens3D@cocos2d@@QAE@XZ
??0CCLiquid@cocos2d@@QAE@$$QAV01@@Z
??0CCLiquid@cocos2d@@QAE@ABV01@@Z
??0CCLiquid@cocos2d@@QAE@XZ
??0CCMenu@cocos2d@@QAE@ABV01@@Z
??0CCMenu@cocos2d@@QAE@XZ
??0CCMenuItem@cocos2d@@QAE@ABV01@@Z
??0CCMenuItem@cocos2d@@QAE@XZ
??0CCMenuItemAtlasFont@cocos2d@@QAE@ABV01@@Z
??0CCMenuItemAtlasFont@cocos2d@@QAE@XZ
??0CCMenuItemFont@cocos2d@@QAE@ABV01@@Z
??0CCMenuItemFont@cocos2d@@QAE@XZ
??0CCMenuItemImage@cocos2d@@QAE@ABV01@@Z
??0CCMenuItemImage@cocos2d@@QAE@XZ
??0CCMenuItemLabel@cocos2d@@QAE@ABV01@@Z
??0CCMenuItemLabel@cocos2d@@QAE@XZ
??0CCMenuItemSprite@cocos2d@@QAE@$$QAV01@@Z
??0CCMenuItemSprite@cocos2d@@QAE@ABV01@@Z
??0CCMenuItemSprite@cocos2d@@QAE@XZ
??0CCMenuItemToggle@cocos2d@@QAE@ABV01@@Z
??0CCMenuItemToggle@cocos2d@@QAE@XZ
??0CCMotionStreak@cocos2d@@QAE@ABV01@@Z
??0CCMoveBy@cocos2d@@QAE@$$QAV01@@Z
??0CCMoveBy@cocos2d@@QAE@ABV01@@Z
??0CCMoveBy@cocos2d@@QAE@XZ
??0CCMoveTo@cocos2d@@QAE@$$QAV01@@Z
??0CCMoveTo@cocos2d@@QAE@ABV01@@Z
??0CCMoveTo@cocos2d@@QAE@XZ
??0CCNodeRGBA@cocos2d@@QAE@ABV01@@Z
??0CCNotificationCenter@cocos2d@@QAE@ABV01@@Z
??0CCNotificationObserver@cocos2d@@QAE@ABV01@@Z
??0CCOrbitCamera@cocos2d@@QAE@ABV01@@Z
??0CCOrbitCamera@cocos2d@@QAE@XZ
??0CCPageTurn3D@cocos2d@@QAE@$$QAV01@@Z
??0CCPageTurn3D@cocos2d@@QAE@ABV01@@Z
??0CCPageTurn3D@cocos2d@@QAE@XZ
??0CCParallaxNode@cocos2d@@QAE@ABV01@@Z
??0CCParticleBatchNode@cocos2d@@QAE@ABV01@@Z
??0CCParticleExplosion@cocos2d@@QAE@ABV01@@Z
??0CCParticleExplosion@cocos2d@@QAE@XZ
??0CCParticleFire@cocos2d@@QAE@ABV01@@Z
??0CCParticleFire@cocos2d@@QAE@XZ
??0CCParticleFireworks@cocos2d@@QAE@ABV01@@Z
??0CCParticleFireworks@cocos2d@@QAE@XZ
??0CCParticleFlower@cocos2d@@QAE@ABV01@@Z
??0CCParticleFlower@cocos2d@@QAE@XZ
??0CCParticleGalaxy@cocos2d@@QAE@ABV01@@Z
??0CCParticleGalaxy@cocos2d@@QAE@XZ
??0CCParticleMeteor@cocos2d@@QAE@ABV01@@Z
??0CCParticleMeteor@cocos2d@@QAE@XZ
??0CCParticleRain@cocos2d@@QAE@ABV01@@Z
??0CCParticleRain@cocos2d@@QAE@XZ
??0CCParticleSmoke@cocos2d@@QAE@ABV01@@Z
??0CCParticleSmoke@cocos2d@@QAE@XZ
??0CCParticleSnow@cocos2d@@QAE@ABV01@@Z
??0CCParticleSnow@cocos2d@@QAE@XZ
??0CCParticleSpiral@cocos2d@@QAE@ABV01@@Z
??0CCParticleSpiral@cocos2d@@QAE@XZ
??0CCParticleSun@cocos2d@@QAE@ABV01@@Z
??0CCParticleSun@cocos2d@@QAE@XZ
??0CCParticleSystem@cocos2d@@QAE@ABV01@@Z
??0CCParticleSystemQuad@cocos2d@@QAE@ABV01@@Z
??0CCPlace@cocos2d@@QAE@ABV01@@Z
??0CCPlace@cocos2d@@QAE@XZ
??0CCPointArray@cocos2d@@QAE@ABV01@@Z
??0CCPrettyPrinter@cocos2d@@QAE@$$QAV01@@Z
??0CCPrettyPrinter@cocos2d@@QAE@ABV01@@Z
??0CCProfiler@cocos2d@@QAE@ABV01@@Z
??0CCProfiler@cocos2d@@QAE@XZ
??0CCProgressFromTo@cocos2d@@QAE@$$QAV01@@Z
??0CCProgressFromTo@cocos2d@@QAE@ABV01@@Z
??0CCProgressFromTo@cocos2d@@QAE@XZ
??0CCProgressTimer@cocos2d@@QAE@ABV01@@Z
??0CCProgressTo@cocos2d@@QAE@$$QAV01@@Z
??0CCProgressTo@cocos2d@@QAE@ABV01@@Z
??0CCProgressTo@cocos2d@@QAE@XZ
??0CCRGBAProtocol@cocos2d@@QAE@$$QAV01@@Z
??0CCRGBAProtocol@cocos2d@@QAE@ABV01@@Z
??0CCRGBAProtocol@cocos2d@@QAE@XZ
??0CCRemoveSelf@cocos2d@@QAE@ABV01@@Z
??0CCRemoveSelf@cocos2d@@QAE@XZ
??0CCRenderTexture@cocos2d@@QAE@ABV01@@Z
??0CCRepeat@cocos2d@@QAE@ABV01@@Z
??0CCRepeat@cocos2d@@QAE@XZ
??0CCRepeatForever@cocos2d@@QAE@ABV01@@Z
??0CCRepeatForever@cocos2d@@QAE@XZ
??0CCReuseGrid@cocos2d@@QAE@$$QAV01@@Z
??0CCReuseGrid@cocos2d@@QAE@ABV01@@Z
??0CCReuseGrid@cocos2d@@QAE@XZ
??0CCReverseTime@cocos2d@@QAE@ABV01@@Z
??0CCRipple3D@cocos2d@@QAE@$$QAV01@@Z
??0CCRipple3D@cocos2d@@QAE@ABV01@@Z
??0CCRipple3D@cocos2d@@QAE@XZ
??0CCRotateBy@cocos2d@@QAE@$$QAV01@@Z
??0CCRotateBy@cocos2d@@QAE@ABV01@@Z
??0CCRotateBy@cocos2d@@QAE@XZ
??0CCRotateTo@cocos2d@@QAE@$$QAV01@@Z
??0CCRotateTo@cocos2d@@QAE@ABV01@@Z
??0CCRotateTo@cocos2d@@QAE@XZ
??0CCSAXDelegator@cocos2d@@QAE@$$QAV01@@Z
??0CCSAXDelegator@cocos2d@@QAE@ABV01@@Z
??0CCSAXDelegator@cocos2d@@QAE@XZ
??0CCScaleBy@cocos2d@@QAE@$$QAV01@@Z
??0CCScaleBy@cocos2d@@QAE@ABV01@@Z
??0CCScaleBy@cocos2d@@QAE@XZ
??0CCScaleTo@cocos2d@@QAE@$$QAV01@@Z
??0CCScaleTo@cocos2d@@QAE@ABV01@@Z
??0CCScaleTo@cocos2d@@QAE@XZ
??0CCScheduler@cocos2d@@QAE@ABV01@@Z
??0CCScriptEngineManager@cocos2d@@AAE@XZ
??0CCScriptEngineProtocol@cocos2d@@QAE@ABV01@@Z
??0CCScriptEngineProtocol@cocos2d@@QAE@XZ
??0CCSequence@cocos2d@@QAE@ABV01@@Z
??0CCSequence@cocos2d@@QAE@XZ
??0CCShaderCache@cocos2d@@QAE@ABV01@@Z
??0CCShaky3D@cocos2d@@QAE@$$QAV01@@Z
??0CCShaky3D@cocos2d@@QAE@ABV01@@Z
??0CCShaky3D@cocos2d@@QAE@XZ
??0CCShakyTiles3D@cocos2d@@QAE@$$QAV01@@Z
??0CCShakyTiles3D@cocos2d@@QAE@ABV01@@Z
??0CCShakyTiles3D@cocos2d@@QAE@XZ
??0CCShatteredTiles3D@cocos2d@@QAE@$$QAV01@@Z
??0CCShatteredTiles3D@cocos2d@@QAE@ABV01@@Z
??0CCShatteredTiles3D@cocos2d@@QAE@XZ
??0CCShow@cocos2d@@QAE@ABV01@@Z
??0CCShow@cocos2d@@QAE@XZ
??0CCShuffleTiles@cocos2d@@QAE@ABV01@@Z
??0CCShuffleTiles@cocos2d@@QAE@XZ
??0CCSkewBy@cocos2d@@QAE@$$QAV01@@Z
??0CCSkewBy@cocos2d@@QAE@ABV01@@Z
??0CCSkewBy@cocos2d@@QAE@XZ
??0CCSkewTo@cocos2d@@QAE@$$QAV01@@Z
??0CCSkewTo@cocos2d@@QAE@ABV01@@Z
??0CCSpawn@cocos2d@@QAE@ABV01@@Z
??0CCSpawn@cocos2d@@QAE@XZ
??0CCSpeed@cocos2d@@QAE@ABV01@@Z
??0CCSpeed@cocos2d@@QAE@XZ
??0CCSplitCols@cocos2d@@QAE@$$QAV01@@Z
??0CCSplitCols@cocos2d@@QAE@ABV01@@Z
??0CCSplitCols@cocos2d@@QAE@XZ
??0CCSplitRows@cocos2d@@QAE@$$QAV01@@Z
??0CCSplitRows@cocos2d@@QAE@ABV01@@Z
??0CCSplitRows@cocos2d@@QAE@XZ
??0CCSprite@cocos2d@@QAE@ABV01@@Z
??0CCSpriteBatchNode@cocos2d@@QAE@ABV01@@Z
??0CCSpriteFrame@cocos2d@@QAE@ABV01@@Z
??0CCSpriteFrame@cocos2d@@QAE@XZ
??0CCSpriteFrameCache@cocos2d@@IAE@XZ
??0CCSpriteFrameCache@cocos2d@@QAE@ABV01@@Z
??0CCStandardTouchDelegate@cocos2d@@QAE@$$QAV01@@Z
??0CCStandardTouchDelegate@cocos2d@@QAE@ABV01@@Z
??0CCStandardTouchDelegate@cocos2d@@QAE@XZ
??0CCStandardTouchHandler@cocos2d@@QAE@$$QAV01@@Z
??0CCStandardTouchHandler@cocos2d@@QAE@ABV01@@Z
??0CCStandardTouchHandler@cocos2d@@QAE@XZ
??0CCStopGrid@cocos2d@@QAE@$$QAV01@@Z
??0CCStopGrid@cocos2d@@QAE@ABV01@@Z
??0CCStopGrid@cocos2d@@QAE@XZ
??0CCTMXLayer@cocos2d@@QAE@ABV01@@Z
??0CCTMXLayerInfo@cocos2d@@QAE@ABV01@@Z
??0CCTMXMapInfo@cocos2d@@QAE@ABV01@@Z
??0CCTMXObjectGroup@cocos2d@@QAE@ABV01@@Z
??0CCTMXTiledMap@cocos2d@@QAE@ABV01@@Z
??0CCTMXTilesetInfo@cocos2d@@QAE@ABV01@@Z
??0CCTargetedAction@cocos2d@@QAE@ABV01@@Z
??0CCTargetedTouchDelegate@cocos2d@@QAE@$$QAV01@@Z
??0CCTargetedTouchDelegate@cocos2d@@QAE@ABV01@@Z
??0CCTargetedTouchDelegate@cocos2d@@QAE@XZ
??0CCTargetedTouchHandler@cocos2d@@QAE@ABV01@@Z
??0CCTargetedTouchHandler@cocos2d@@QAE@XZ
??0CCTextFieldDelegate@cocos2d@@QAE@$$QAV01@@Z
??0CCTextFieldDelegate@cocos2d@@QAE@ABV01@@Z
??0CCTextFieldDelegate@cocos2d@@QAE@XZ
??0CCTextFieldTTF@cocos2d@@QAE@ABV01@@Z
??0CCTexture2D@cocos2d@@QAE@ABV01@@Z
??0CCTextureAtlas@cocos2d@@QAE@ABV01@@Z
??0CCTextureCache@cocos2d@@QAE@ABV01@@Z
??0CCTextureProtocol@cocos2d@@QAE@$$QAV01@@Z
??0CCTextureProtocol@cocos2d@@QAE@ABV01@@Z
??0CCTextureProtocol@cocos2d@@QAE@XZ
??0CCThread@cocos2d@@QAE@XZ
??0CCTileMapAtlas@cocos2d@@QAE@ABV01@@Z
??0CCTiledGrid3D@cocos2d@@QAE@ABV01@@Z
??0CCTiledGrid3DAction@cocos2d@@QAE@$$QAV01@@Z
??0CCTiledGrid3DAction@cocos2d@@QAE@ABV01@@Z
??0CCTiledGrid3DAction@cocos2d@@QAE@XZ
??0CCTimer@cocos2d@@QAE@$$QAV01@@Z
??0CCTimer@cocos2d@@QAE@ABV01@@Z
??0CCTintBy@cocos2d@@QAE@$$QAV01@@Z
??0CCTintBy@cocos2d@@QAE@ABV01@@Z
??0CCTintBy@cocos2d@@QAE@XZ
??0CCTintTo@cocos2d@@QAE@$$QAV01@@Z
??0CCTintTo@cocos2d@@QAE@ABV01@@Z
??0CCTintTo@cocos2d@@QAE@XZ
??0CCToggleVisibility@cocos2d@@QAE@ABV01@@Z
??0CCToggleVisibility@cocos2d@@QAE@XZ
??0CCTouch@cocos2d@@QAE@$$QAV01@@Z
??0CCTouch@cocos2d@@QAE@ABV01@@Z
??0CCTouch@cocos2d@@QAE@XZ
??0CCTouchDelegate@cocos2d@@QAE@ABV01@@Z
??0CCTouchDelegate@cocos2d@@QAE@XZ
??0CCTouchDispatcher@cocos2d@@QAE@ABV01@@Z
??0CCTouchDispatcher@cocos2d@@QAE@XZ
??0CCTouchHandler@cocos2d@@QAE@ABV01@@Z
??0CCTouchHandler@cocos2d@@QAE@XZ
??0CCTransitionCrossFade@cocos2d@@QAE@ABV01@@Z
??0CCTransitionEaseScene@cocos2d@@QAE@$$QAV01@@Z
??0CCTransitionEaseScene@cocos2d@@QAE@ABV01@@Z
??0CCTransitionEaseScene@cocos2d@@QAE@XZ
??0CCTransitionFade@cocos2d@@QAE@ABV01@@Z
??0CCTransitionFadeBL@cocos2d@@QAE@ABV01@@Z
??0CCTransitionFadeDown@cocos2d@@QAE@ABV01@@Z
??0CCTransitionFadeTR@cocos2d@@QAE@ABV01@@Z
??0CCTransitionFadeUp@cocos2d@@QAE@ABV01@@Z
??0CCTransitionFlipAngular@cocos2d@@QAE@ABV01@@Z
??0CCTransitionFlipX@cocos2d@@QAE@ABV01@@Z
??0CCTransitionFlipY@cocos2d@@QAE@ABV01@@Z
??0CCTransitionJumpZoom@cocos2d@@QAE@ABV01@@Z
??0CCTransitionMoveInB@cocos2d@@QAE@ABV01@@Z
??0CCTransitionMoveInL@cocos2d@@QAE@ABV01@@Z
??0CCTransitionMoveInR@cocos2d@@QAE@ABV01@@Z
??0CCTransitionMoveInT@cocos2d@@QAE@ABV01@@Z
??0CCTransitionPageTurn@cocos2d@@QAE@ABV01@@Z
??0CCTransitionProgress@cocos2d@@QAE@$$QAV01@@Z
??0CCTransitionProgress@cocos2d@@QAE@ABV01@@Z
??0CCTransitionProgressHorizontal@cocos2d@@QAE@$$QAV01@@Z
??0CCTransitionProgressHorizontal@cocos2d@@QAE@ABV01@@Z
??0CCTransitionProgressHorizontal@cocos2d@@QAE@XZ
??0CCTransitionProgressInOut@cocos2d@@QAE@$$QAV01@@Z
??0CCTransitionProgressInOut@cocos2d@@QAE@ABV01@@Z
??0CCTransitionProgressInOut@cocos2d@@QAE@XZ
??0CCTransitionProgressOutIn@cocos2d@@QAE@$$QAV01@@Z
??0CCTransitionProgressOutIn@cocos2d@@QAE@ABV01@@Z
??0CCTransitionProgressOutIn@cocos2d@@QAE@XZ
??0CCTransitionProgressRadialCCW@cocos2d@@QAE@$$QAV01@@Z
??0CCTransitionProgressRadialCCW@cocos2d@@QAE@ABV01@@Z
??0CCTransitionProgressRadialCCW@cocos2d@@QAE@XZ
??0CCTransitionProgressRadialCW@cocos2d@@QAE@$$QAV01@@Z
??0CCTransitionProgressRadialCW@cocos2d@@QAE@ABV01@@Z
??0CCTransitionProgressRadialCW@cocos2d@@QAE@XZ
??0CCTransitionProgressVertical@cocos2d@@QAE@$$QAV01@@Z
??0CCTransitionProgressVertical@cocos2d@@QAE@ABV01@@Z
??0CCTransitionProgressVertical@cocos2d@@QAE@XZ
??0CCTransitionRotoZoom@cocos2d@@QAE@ABV01@@Z
??0CCTransitionScene@cocos2d@@QAE@ABV01@@Z
??0CCTransitionSceneOriented@cocos2d@@QAE@ABV01@@Z
??0CCTransitionShrinkGrow@cocos2d@@QAE@ABV01@@Z
??0CCTransitionSlideInB@cocos2d@@QAE@ABV01@@Z
??0CCTransitionSlideInL@cocos2d@@QAE@ABV01@@Z
??0CCTransitionSlideInR@cocos2d@@QAE@ABV01@@Z

Sections

Size: 3.2MB - Virtual size: 7.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: 767KB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 19KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 9B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 2.5MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 201KB - Virtual size: 362KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.exports
Size: 119KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.imports
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.themida
Size: - Virtual size: 7.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.boot
Size: 4.6MB - Virtual size: 4.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 16B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
GDHM_TASBOT_v34.0/ffmpeg/ffmpeg.exe
.exe windows:4 windows x64 arch:x64

040c7920b09f8a95c4ab017777436c15

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

CryptAcquireContextA
CryptAcquireContextW
CryptCreateHash
CryptDecrypt
CryptDestroyHash
CryptGenRandom
CryptGetHashParam
CryptGetProvParam
CryptReleaseContext
CryptSetHashParam
CryptSetProvParam
CryptSignHashA
DeregisterEventSource
GetUserNameA
InitializeSecurityDescriptor
RegCloseKey
RegEnumKeyExW
RegEnumValueW
RegOpenKeyExA
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExA
RegQueryValueExW
RegisterEventSourceW
ReportEventW
SetSecurityDescriptorDacl
SystemFunction036

crypt32

CertCloseStore
CertDeleteCertificateFromStore
CertEnumCRLsInStore
CertEnumCertificatesInStore
CertFindCertificateInStore
CertFreeCertificateContext
CertGetCertificateContextProperty
CertOpenStore
PFXImportCertStore

gdi32

BitBlt
ChoosePixelFormat
CombineRgn
CreateBitmap
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCW
CreateDIBSection
CreateFontIndirectW
CreateFontW
CreatePen
CreateRectRgn
CreateSolidBrush
DeleteDC
DeleteObject
DescribePixelFormat
EnumFontFamiliesW
ExtTextOutW
GetDIBColorTable
GetDIBits
GetDeviceCaps
GetDeviceGammaRamp
GetICMProfileW
GetObjectA
GetPixelFormat
GetStockObject
GetTextExtentPoint32A
GetTextExtentPoint32W
GetTextFaceW
GetTextMetricsW
Rectangle
SelectObject
SetBkMode
SetDeviceGammaRamp
SetPixelFormat
SetTextColor
SwapBuffers

imm32

ImmAssociateContext
ImmGetCandidateListW
ImmGetCompositionStringW
ImmGetContext
ImmGetIMEFileNameA
ImmNotifyIME
ImmReleaseContext
ImmSetCandidateWindow
ImmSetCompositionStringW
ImmSetCompositionWindow

iphlpapi

GetAdaptersAddresses
if_indextoname
if_nametoindex

kernel32

AddVectoredExceptionHandler
CancelIo
CancelIoEx
CloseHandle
CompareStringA
ConvertFiberToThread
ConvertThreadToFiber
CreateDirectoryW
CreateEventA
CreateEventW
CreateFiber
CreateFileA
CreateFileMappingA
CreateFileW
CreateMutexA
CreateSemaphoreA
CreateSemaphoreW
CreateThread
CreateToolhelp32Snapshot
DeleteCriticalSection
DeleteFiber
DeviceIoControl
DuplicateHandle
EnterCriticalSection
EnumResourceLanguagesA
EnumSystemLocalesA
ExitProcess
FileTimeToSystemTime
FindClose
FindFirstFileA
FindFirstFileW
FindNextFileW
FormatMessageA
FormatMessageW
FreeLibrary
GetACP
GetCommandLineW
GetComputerNameA
GetConsoleMode
GetConsoleScreenBufferInfo
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetEnvironmentVariableA
GetEnvironmentVariableW
GetFileAttributesA
GetFileAttributesExA
GetFileAttributesW
GetFileInformationByHandle
GetFileSize
GetFileSizeEx
GetFileType
GetFinalPathNameByHandleA
GetFullPathNameA
GetFullPathNameW
GetHandleInformation
GetLastError
GetLocaleInfoA
GetLongPathNameA
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExA
GetModuleHandleExW
GetModuleHandleW
GetNumaHighestNodeNumber
GetNumaNodeProcessorMaskEx
GetOverlappedResult
GetProcAddress
GetProcessAffinityMask
GetProcessTimes
GetStartupInfoA
GetStdHandle
GetSystemDirectoryA
GetSystemDirectoryW
GetSystemInfo
GetSystemPowerStatus
GetSystemTimeAdjustment
GetSystemTimeAsFileTime
GetTempPathA
GetThreadContext
GetThreadLocale
GetThreadPriority
GetThreadTimes
GetTickCount
GetTickCount64
GetTimeZoneInformation
GetVersion
GetWindowsDirectoryA
GlobalAlloc
GlobalLock
GlobalMemoryStatusEx
GlobalUnlock
InitOnceBeginInitialize
InitOnceComplete
InitializeConditionVariable
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
IsDBCSLeadByteEx
IsDebuggerPresent
IsValidCodePage
K32GetProcessMemoryInfo
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LocalFree
MapViewOfFile
MoveFileExA
MoveFileExW
MulDiv
MultiByteToWideChar
OpenFileMappingA
OpenProcess
OutputDebugStringA
OutputDebugStringW
PeekNamedPipe
Process32First
Process32Next
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadConsoleA
ReadConsoleW
ReadFile
ReleaseMutex
ReleaseSemaphore
RemoveVectoredExceptionHandler
ResetEvent
ResumeThread
RtlCaptureContext
RtlLookupFunctionEntry
RtlUnwindEx
RtlVirtualUnwind
SetConsoleCtrlHandler
SetConsoleMode
SetConsoleTextAttribute
SetDllDirectoryA
SetEnvironmentVariableA
SetErrorMode
SetEvent
SetFilePointer
SetFilePointerEx
SetHandleInformation
SetLastError
SetProcessAffinityMask
SetSystemTime
SetThreadContext
SetThreadErrorMode
SetThreadExecutionState
SetThreadGroupAffinity
SetThreadPriority
SetUnhandledExceptionFilter
SignalObjectAndWait
Sleep
SleepConditionVariableCS
SuspendThread
SwitchToFiber
SwitchToThread
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnmapViewOfFile
VerSetConditionMask
VerifyVersionInfoW
VirtualAlloc
VirtualFree
VirtualLock
VirtualProtect
VirtualQuery
VirtualUnlock
WaitForMultipleObjects
WaitForSingleObject
WaitForSingleObjectEx
WakeAllConditionVariable
WakeConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile
__C_specific_handler
lstrcmpiW

msvcrt

___lc_codepage_func
___mb_cur_max_func
__argv
__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_access
_access
_acmdln
_aligned_free
_aligned_malloc
_aligned_realloc
_amsg_exit
_assert
_beginthreadex
_cexit
_chmod
_close
_close
_commode
_dup
_dup2
_endthreadex
_errno
_exit
_fdopen
_filelengthi64
_fileno
_findclose
_fileno
_findfirst64
_findnext64
_fmode
_fstat64
_ftime64
_fullpath
_get_osfhandle
_getcwd
_getch
_getmaxstdio
_getpid
_gmtime64
_i64toa
_initterm
_hypot
_isatty
_isctype
_kbhit
_localtime64
_lock
_locking
_lseek
_itoa
_lseeki64
_ltoa
_mbsrchr
_mkdir
_mktime64
_onexit
_nextafter
_open
_open_osfhandle
_read
_read
_rmdir
_rmdir
_setjmp
_setmaxstdio
_setmode
_setmode
_sopen
_stat64
_stricmp
_strdup
_strdup
_strlwr
_strnicmp
_strrev
_strupr
_time64
_ui64toa
_ultoa
_unlink
_unlink
_unlock
_vscprintf
_vsnprintf
_vsnwprintf
_waccess
_wassert
_wcsdup
_wcsicmp
_wcsnicmp
_wfindfirst64
_wfindnext64
_wfopen
_wfopen_s
_wfullpath
_wmkdir
_wopen
_wrename
_wrmdir
_wsopen
_wstat64
_wunlink
abort
acos
asin
atan
atof
atoi
bsearch
calloc
clock
cosh
div
exit
fclose
feof
ferror
fflush
fgetc
fgetpos
fgets
fgetws
fopen
fprintf
fputc
fputs
fputwc
fread
free
fwprintf
fseek
fsetpos
ftell
fwrite
getc
getchar
getenv
getwc
isalnum
isalpha
iscntrl
isgraph
islower
isprint
ispunct
isspace
isupper
iswctype
isxdigit
_write
localeconv
log10
longjmp
malloc
mbstowcs
memchr
memcmp
memcpy
memmove
memset
perror
printf
putc
puts
putwc
qsort
raise
realloc
rand
rename
rewind
setlocale
setvbuf
signal
sinh
sprintf
srand
strcat
strchr
strcmp
strcoll
strcpy
strcpy_s
strcspn
strerror
strftime
strlen
strncat
strncmp
strncpy
strpbrk
strrchr
strspn
strstr
strtok
strtok_s
strtol
strtoul
strxfrm
swscanf_s
tan
tanh
tolower
toupper
towlower
towupper
ungetc
vfprintf
ungetwc
wcscat
wcschr
wcscmp
wcscoll
wcscpy
wcscspn
wcsftime
wcslen
wcsncmp
wcsrchr
wcsstr
wcstombs
wcstoul
wcsxfrm

ncrypt

BCryptCloseAlgorithmProvider
BCryptGenRandom
BCryptOpenAlgorithmProvider
NCryptDecrypt
NCryptDeleteKey
NCryptFreeObject
NCryptGetProperty
NCryptOpenKey
NCryptOpenStorageProvider
NCryptSignHash

ole32

CoCreateInstance
CoGetMalloc
CoInitialize
CoInitializeEx
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
CreateBindCtx
OleLoadFromStream
OleSaveToStream
PropVariantClear
StringFromGUID2

oleaut32

OleCreatePropertyFrame
SysFreeString

setupapi

SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA
SetupDiGetDeviceInterfaceDetailA
SetupDiGetDeviceRegistryPropertyA

shell32

CommandLineToArgvW
DragAcceptFiles
DragFinish
DragQueryFileW
ExtractIconExW
SHGetFolderPathW
SHGetSpecialFolderPathA
ShellExecuteW

shlwapi

SHCreateStreamOnFileA

user32

AdjustWindowRectEx
BeginPaint
CallNextHookEx
CallWindowProcW
ChangeDisplaySettingsExW
ClientToScreen
ClipCursor
CloseClipboard
CopyIcon
CreateIconFromResource
CreateIconIndirect
CreateWindowExA
CreateWindowExW
DefWindowProcA
DefWindowProcW
DestroyCursor
DestroyIcon
DestroyWindow
DialogBoxIndirectParamW
DispatchMessageA
DispatchMessageW
DrawIcon
DrawTextW
EmptyClipboard
EndDialog
EndPaint
EnumDisplayDevicesW
EnumDisplayMonitors
EnumDisplaySettingsW
FindWindowA
FlashWindowEx
FrameRect
GetAsyncKeyState
GetClassInfoExW
GetClientRect
GetClipCursor
GetClipboardData
GetClipboardSequenceNumber
GetCursorInfo
GetCursorPos
GetDC
GetDesktopWindow
GetDlgItem
GetDoubleClickTime
GetFocus
GetForegroundWindow
GetIconInfo
GetKeyState
GetKeyboardLayout
GetKeyboardState
GetMenu
GetMessageExtraInfo
GetMessageW
GetMonitorInfoW
GetParent
GetProcessWindowStation
GetPropW
GetRawInputData
GetRawInputDeviceInfoA
GetRawInputDeviceList
GetSystemMetrics
GetUpdateRect
GetUserObjectInformationW
GetWindowLongPtrA
GetWindowLongPtrW
GetWindowLongW
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
InvalidateRect
IsClipboardFormatAvailable
IsIconic
IsRectEmpty
KillTimer
LoadCursorA
LoadCursorW
LoadIconW
MapVirtualKeyW
MessageBoxA
MessageBoxW
OpenClipboard
PeekMessageA
PeekMessageW
PostMessageW
PostThreadMessageW
PtInRect
RegisterClassExA
RegisterClassExW
RegisterClassW
RegisterDeviceNotificationW
RegisterRawInputDevices
RegisterWindowMessageA
ReleaseCapture
ReleaseDC
RemovePropW
ScreenToClient
SendMessageA
SendMessageW
SetCapture
SetClipboardData
SetCursor
SetCursorPos
SetFocus
SetForegroundWindow
SetLayeredWindowAttributes
SetPropW
SetTimer
SetWindowLongPtrA
SetWindowLongPtrW
SetWindowLongW
SetWindowPos
SetWindowRgn
SetWindowTextW
SetWindowsHookExW
ShowWindow
SystemParametersInfoA
SystemParametersInfoW
ToUnicode
TrackMouseEvent
TranslateMessage
UnhookWindowsHookEx
UnregisterClassA
UnregisterClassW
UnregisterDeviceNotification
ValidateRect

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

avicap32

capCreateCaptureWindowA
capGetDriverDescriptionA

winmm

timeBeginPeriod
timeEndPeriod
timeGetTime
waveInAddBuffer
waveInClose
waveInGetDevCapsW
waveInGetNumDevs
waveInOpen
waveInPrepareHeader
waveInReset
waveInStart
waveInUnprepareHeader
waveOutClose
waveOutGetDevCapsW
waveOutGetErrorTextW
waveOutGetNumDevs
waveOutOpen
waveOutPrepareHeader
waveOutReset
waveOutUnprepareHeader
waveOutWrite

ws2_32

WSACleanup
WSACloseEvent
WSACreateEvent
WSAEventSelect
WSAGetLastError
WSAIoctl
WSARecvFrom
WSASendTo
WSASetLastError
WSASocketA
WSAStartup
WSAStringToAddressA
WSAWaitForMultipleEvents
__WSAFDIsSet
accept
bind
closesocket
connect
freeaddrinfo
getaddrinfo
gethostbyaddr
gethostbyname
gethostname
getnameinfo
getpeername
getservbyname
getservbyport
getsockname
getsockopt
htonl
htons
inet_addr
inet_ntoa
inet_ntop
inet_pton
ioctlsocket
listen
ntohl
ntohs
recv
recvfrom
select
send
sendto
setsockopt
shutdown
socket

Exports

Exports

gme_ay_type
gme_clear_playlist
gme_delete
gme_enable_accuracy
gme_equalizer
gme_free_info
gme_gbs_type
gme_gym_type
gme_hes_type
gme_identify_extension
gme_identify_file
gme_identify_header
gme_ignore_silence
gme_kss_type
gme_load_custom
gme_load_data
gme_load_file
gme_multi_channel
gme_mute_voice
gme_mute_voices
gme_new_emu
gme_new_emu_multi_channel
gme_nsf_type
gme_nsfe_type
gme_open_data
gme_open_file
gme_play
gme_sap_type
gme_seek
gme_seek_samples
gme_set_autoload_playback_limit
gme_set_equalizer
gme_set_fade
gme_set_stereo_depth
gme_set_tempo
gme_set_user_cleanup
gme_set_user_data
gme_spc_type
gme_start_track
gme_tell
gme_tell_samples
gme_track_count
gme_track_ended
gme_track_info
gme_type
gme_type_extension
gme_type_list
gme_type_multitrack
gme_type_system
gme_user_data
gme_vgm_type
gme_vgz_type
gme_voice_count
gme_voice_name
gme_warning
gme_wrong_file_type

Sections

.text
Size: 60.0MB - Virtual size: 60.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 10.2MB - Virtual size: 10.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 836KB - Virtual size: 836KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 10.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 226KB - Virtual size: 225KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
GDHM_TASBOT_v34.0/msacm32.dll
.dll windows:6 windows x86 arch:x86

ff2254b955841b66716ba336e93a1b35

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DisableThreadLibraryCalls
CreateThread
GetModuleFileNameA
LoadLibraryW
GetSystemDirectoryW
GetProcAddress
FindClose
CreateFileW
FormatMessageA
LocalFree
FindNextFileW
GetFileAttributesW
GetFileAttributesExW
SetFileInformationByHandle
GetTempPathW
AreFileApisANSI
CloseHandle
GetLastError
GetFileInformationByHandleEx
MultiByteToWideChar
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
FindFirstFileExW

msvcp140

?always_noconv@codecvt_base@std@@QBE_NXZ
??Bid@locale@std@@QAEIXZ
?_Xlength_error@std@@YAXPBD@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Xout_of_range@std@@YAXPBD@Z
?_Winerror_map@std@@YAHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?_Syserror_map@std@@YAPBDH@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ

vcruntime140

_except_handler4_common
memset
memcpy
_CxxThrowException
__std_terminate
__std_exception_copy
__std_exception_destroy
__CxxFrameHandler3
__std_type_info_destroy_list
memmove

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_invalid_parameter_noinfo_noreturn
terminate

api-ms-win-crt-stdio-l1-1-0

ungetc
setvbuf
fgetpos
fwrite
_fseeki64
fread
fgetc
fsetpos
fclose
fflush
_get_stream_buffer_pointers
fputc

api-ms-win-crt-heap-l1-1-0

malloc
_callnewh
free

api-ms-win-crt-string-l1-1-0

tolower

api-ms-win-crt-filesystem-l1-1-0

_lock_file
_unlock_file

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func

Exports

Exports

acmDriverAddA
acmDriverAddW
acmDriverClose
acmDriverDetailsA
acmDriverDetailsW
acmDriverEnum
acmDriverID
acmDriverMessage
acmDriverOpen
acmDriverPriority
acmDriverRemove
acmFilterChooseA
acmFilterChooseW
acmFilterDetailsA
acmFilterDetailsW
acmFilterEnumA
acmFilterEnumW
acmFilterTagDetailsA
acmFilterTagDetailsW
acmFilterTagEnumA
acmFilterTagEnumW
acmFormatChooseA
acmFormatChooseW
acmFormatDetailsA
acmFormatDetailsW
acmFormatEnumA
acmFormatEnumW
acmFormatSuggest
acmFormatTagDetailsA
acmFormatTagDetailsW
acmFormatTagEnumA
acmFormatTagEnumW
acmGetVersion
acmMetrics
acmStreamClose
acmStreamConvert
acmStreamMessage
acmStreamOpen
acmStreamPrepareHeader
acmStreamReset
acmStreamSize
acmStreamUnprepareHeader

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
GDHM_TASBOT_v34.0/tBot.dll
.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

?get_audio_string@bot@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABVpath@filesystem@3@0V23@_N@Z
?get_backwards_stepping@bot@@YA_NXZ
?get_clicker_click@bot@@YA_NXZ
?get_clicker_click_interval@bot@@YAHXZ
?get_clicker_player_1@bot@@YA_NXZ
?get_clicker_player_2@bot@@YA_NXZ
?get_clicker_release@bot@@YA_NXZ
?get_clicker_release_interval@bot@@YAHXZ
?get_current_frame@bot@@YAIXZ
?get_display_delta@bot@@YAMXZ
?get_display_fps@bot@@YAMXZ
?get_dual_fps@bot@@YA_NXZ
?get_enable_background_noise@bot@@YA_NXZ
?get_enable_click@bot@@YA_NXZ
?get_enable_pickup_macro@bot@@YA_NXZ
?get_extra_version@bot@@YAIXZ
?get_folder_name@bot@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?get_frame_advance@bot@@YA_NXZ
?get_frame_queue@bot@@YAIXZ
?get_full_save@bot@@YA_NXZ
?get_ignore_inputs_on_replay@bot@@YA_NXZ
?get_is_donator@bot@@YA_NXZ
?get_is_external@bot@@YA_NXZ
?get_is_premium@bot@@YA_NXZ
?get_macro_length@bot@@YAIXZ
?get_max_backwards_stepping@bot@@YAIXZ
?get_physics_delta@bot@@YAMXZ
?get_physics_fps@bot@@YAMXZ
?get_pickup_macro_click@bot@@YAHXZ
?get_pickup_macro_player_1_id@bot@@YAHXZ
?get_pickup_macro_player_2_id@bot@@YAHXZ
?get_pickup_macro_release@bot@@YAHXZ
?get_practice_fix@bot@@YA_NXZ
?get_practice_rotation_fix@bot@@YA_NXZ
?get_replay@bot@@YA_NXZ
?get_sequence_macro@bot@@YA_NXZ
?get_sequence_macro_index@bot@@YAIXZ
?get_sequence_macro_random@bot@@YA_NXZ
?get_show_timeline@bot@@YA_NXZ
?get_toggle_bot@bot@@YA_NXZ
?get_toggle_clean_macro@bot@@YA_NXZ
?get_toggle_frame_counter@bot@@YA_NXZ
?get_universal_frame_advance@bot@@YA_NXZ
?get_version@bot@@YAIXZ
?get_wave_trail_visibility_fix@bot@@YA_NXZ
?go_back_to_frame@bot@@YA_NI@Z
?init_MinHook@bot@@YAXXZ
?init_hook@bot@@YAXXZ
?load@bot@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?load_click_config@bot@@YA_NXZ
?reset_all@bot@@YAXXZ
?save@bot@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?save_click_config@bot@@YA_NXZ
?set_backwards_stepping@bot@@YAX_N@Z
?set_clicker_click@bot@@YAX_N@Z
?set_clicker_click_interval@bot@@YAXH@Z
?set_clicker_player_1@bot@@YAX_N@Z
?set_clicker_player_2@bot@@YAX_N@Z
?set_clicker_release@bot@@YAX_N@Z
?set_clicker_release_interval@bot@@YAXH@Z
?set_current_frame@bot@@YAXI@Z
?set_display_fps@bot@@YAXM@Z
?set_dual_fps@bot@@YAX_N@Z
?set_enable_background_noise@bot@@YAX_N@Z
?set_enable_click@bot@@YAX_N@Z
?set_enable_pickup_macro@bot@@YAX_N@Z
?set_extra_version@bot@@YAXI@Z
?set_folder_name@bot@@YAXV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?set_frame_advance@bot@@YAX_N@Z
?set_frame_queue@bot@@YAXI@Z
?set_full_save@bot@@YAX_N@Z
?set_ignore_inputs_on_replay@bot@@YAX_N@Z
?set_is_donator@bot@@YAX_N@Z
?set_is_external@bot@@YAX_N@Z
?set_is_premium@bot@@YAX_N@Z
?set_max_backwards_stepping@bot@@YAXI@Z
?set_physics_fps@bot@@YAXM@Z
?set_pickup_macro_click@bot@@YAXH@Z
?set_pickup_macro_player_1_id@bot@@YAXH@Z
?set_pickup_macro_player_2_id@bot@@YAXH@Z
?set_pickup_macro_release@bot@@YAXH@Z
?set_practice_fix@bot@@YAX_N@Z
?set_practice_rotation_fix@bot@@YAX_N@Z
?set_replay@bot@@YAX_N@Z
?set_sequence_macro@bot@@YAX_N@Z
?set_sequence_macro_index@bot@@YAXI@Z
?set_sequence_macro_random@bot@@YAX_N@Z
?set_show_timeline@bot@@YAX_N@Z
?set_toggle_bot@bot@@YAX_N@Z
?set_toggle_clean_macro@bot@@YAX_N@Z
?set_toggle_frame_counter@bot@@YAX_N@Z
?set_universal_frame_advance@bot@@YAX_N@Z
?set_version@bot@@YAXI@Z
?set_wave_trail_visibility_fix@bot@@YAX_N@Z
?toggle_sequence_macro@bot@@YAX_N@Z

Sections

Size: 782KB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: 140KB - Virtual size: 351KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 6KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 339KB - Virtual size: 652KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 43KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.exports
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.imports
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.themida
Size: - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.boot
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 16B - Virtual size: 4KB

IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2e65c8be3d451499deddda40c57dc834

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 72KB - Virtual size: 72KB

.rdata Size: 28KB - Virtual size: 28KB

.data Size: 2KB - Virtual size: 4KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 4KB - Virtual size: 4KB

5633319c28d2514cae6bf0126c1da38d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcp140

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-locale-l1-1-0

Exports

Exports

Sections

.text Size: 25KB - Virtual size: 24KB

.rdata Size: 19KB - Virtual size: 19KB

.data Size: 1024B - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 2KB - Virtual size: 2KB

3cb670276d26003b3e60cc547afc3c3e

Headers

File Characteristics

Imports

msvcrt

wsock32

kernel32

Exports

Exports

Sections

.text Size: 48KB - Virtual size: 44KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 4KB - Virtual size: 1KB

.idata Size: 4KB - Virtual size: 2KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 2KB

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

UPX0 Size: - Virtual size: 184KB

UPX1 Size: 129KB - Virtual size: 132KB

.rsrc Size: 1024B - Virtual size: 4KB

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 212KB - Virtual size: 212KB

.rdata Size: 60KB - Virtual size: 60KB

.data Size: 4KB - Virtual size: 7KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 9KB - Virtual size: 8KB

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

Size: 3.2MB - Virtual size: 7.6MB

Size: 767KB - Virtual size: 2.4MB

.text
Size: 72KB - Virtual size: 72KB

.rdata
Size: 28KB - Virtual size: 28KB

.data
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 4KB - Virtual size: 4KB

.text
Size: 25KB - Virtual size: 24KB

.rdata
Size: 19KB - Virtual size: 19KB

.data
Size: 1024B - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 2KB - Virtual size: 2KB

.text
Size: 48KB - Virtual size: 44KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 4KB - Virtual size: 1KB

.idata
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 2KB

UPX0
Size: - Virtual size: 184KB

UPX1
Size: 129KB - Virtual size: 132KB

.rsrc
Size: 1024B - Virtual size: 4KB

.text
Size: 212KB - Virtual size: 212KB

.rdata
Size: 60KB - Virtual size: 60KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 9KB - Virtual size: 8KB

.exports
Size: 119KB - Virtual size: 119KB

.imports
Size: 1KB - Virtual size: 4KB

.tls
Size: 512B - Virtual size: 4KB

.rsrc
Size: 1024B - Virtual size: 4KB

.themida
Size: - Virtual size: 7.8MB

.boot
Size: 4.6MB - Virtual size: 4.6MB

.reloc
Size: 16B - Virtual size: 4KB

.text
Size: 60.0MB - Virtual size: 60.0MB

.data
Size: 1.4MB - Virtual size: 1.4MB

.rodata
Size: 15KB - Virtual size: 14KB

.rdata
Size: 10.2MB - Virtual size: 10.2MB

.pdata
Size: 836KB - Virtual size: 836KB

.xdata
Size: 1.1MB - Virtual size: 1.1MB

.bss
Size: - Virtual size: 10.5MB

.edata
Size: 1KB - Virtual size: 1KB

.idata
Size: 27KB - Virtual size: 27KB

.CRT
Size: 512B - Virtual size: 112B

.tls
Size: 512B - Virtual size: 16B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 226KB - Virtual size: 225KB