373db0ac2c8887382e54025501dffe0e

Sharing

Copy URL Twitter E-mail

General

Target

373db0ac2c8887382e54025501dffe0e
Size

14.2MB
MD5

373db0ac2c8887382e54025501dffe0e
SHA1

5b6ecd1b044e6df5bc6511bd9c9e83050999c69f
SHA256

534dd8a9252d72be597ccd745140343640b67c50f0a95cc91caf927997c91963
SHA512

673c0f8aac8fec79493538120e134fbf4da65029fb3cd1ad2fafabf099c9d7de288c04bf8ca760c6f6d79b23d1cd2daef4fd58d39de38bb2eb92c6dac8e2ce00
SSDEEP

393216:3/pBSMyBDeTnLRbTYvWOT7CHExhaT60XDnlLc2PF/:3zyBDerLREr/Uu8TtXZjF/

Score

7^/10

themida upx

Malware Config

Signatures

ACProtect 1.3x - 1.4x DLL software 5 IoCs

Detects file using ACProtect software.

resource	yara_rule
static1/unpack001/npcipher.dll	acprotect
static1/unpack001/npgmup.dll	acprotect
static1/unpack001/nppsk.dll	acprotect
static1/unpack001/npupdate0.dll	acprotect
static1/unpack001/npx.dll	acprotect

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

themida

resource	yara_rule
static1/unpack001/esthus.dll	themida

UPX packed file 4 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/npcipher.dll	upx
static1/unpack001/nppsk.dll	upx
static1/unpack001/npupdate0.dll	upx
static1/unpack001/npx.dll	upx

Unsigned PE 22 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Launcher.exe
unpack001/esthus.dll
unpack001/main.exe
unpack001/mfsvc2.dll
unpack001/mu_al.dll
unpack001/mumsg.dll
unpack001/npchk.dll
unpack001/npcipher.dll
unpack002/out.upx
unpack001/npgmup.dll
unpack001/nppsk.dll
unpack003/out.upx
unpack001/npupdate0.dll
unpack004/out.upx
unpack001/npx.dll
unpack005/out.upx
unpack001/ogg.dll
unpack001/vorbisfile.dll
unpack001/wsctlc.dll
unpack001/wsctlcd.dll
unpack001/wzAudio.dll
unpack001/wz_zp.dll

Files

373db0ac2c8887382e54025501dffe0e
.rar
Data/Custom/Item/coins.bmd
Data/Custom/Item/coins2.bmd
Data/Effect/Change_Up_Eff.bmd
Data/Effect/arrowsre06.bmd
Data/Effect/atshild.bmd
Data/Effect/atshild2.bmd
Data/Effect/bladetonedo.bmd
Data/Effect/cantasarrow.bmd
Data/Effect/changup_nasa.bmd
Data/Effect/choarms_06.bmd
Data/Effect/chusukgam.bmd
Data/Effect/chusukseung1.bmd
Data/Effect/chusukseung2.bmd
Data/Effect/chysukmoon.bmd
Data/Effect/clinderlight.bmd
Data/Effect/down_left_punch.bmd
Data/Effect/down_right_punch.bmd
Data/Effect/dragon_kick_dummy.bmd
Data/InGameShopBanner/000.0000.000/IBSBanner.txt
Data/InGameShopScript/000.0000.000/IBSCategory.txt
Data/InGameShopScript/000.0000.000/IBSPackage.txt
Data/InGameShopScript/000.0000.000/IBSProduct.txt
Data/Item/Antidote01.bmd
Data/Item/Arrows01.bmd
Data/Item/Arrows02.bmd
Data/Item/Axe01.bmd
Data/Item/Axe02.bmd
Data/Item/Axe03.bmd
Data/Item/Axe04.bmd
Data/Item/Axe05.bmd
Data/Item/Axe06.bmd
Data/Item/Axe07.bmd
Data/Item/Axe08.bmd
Data/Item/Axe09.bmd
Data/Item/Bead.bmd
Data/Item/Beer01.bmd
Data/Item/Beer02.bmd
Data/Item/Book01.bmd
Data/Item/Book02.bmd
Data/Item/Book03.bmd
Data/Item/Book04.bmd
Data/Item/Book05.bmd
Data/Item/Book06.bmd
Data/Item/Book07.bmd
Data/Item/Book08.bmd
Data/Item/Book09.bmd
Data/Item/Book10.bmd
Data/Item/Book11.bmd
Data/Item/Book12.bmd
Data/Item/Book13.bmd
Data/Item/Book14.bmd
Data/Item/Book15.bmd
Data/Item/Book16.bmd
Data/Item/Book17.bmd
Data/Item/Book18.bmd
Data/Item/Book19.bmd
Data/Item/Book_of_Neil.bmd
Data/Item/Book_of_Rargle.bmd
Data/Item/Book_of_Sahamutt.bmd
Data/Item/Bow01.bmd
Data/Item/Bow02.bmd
Data/Item/Bow03.bmd
Data/Item/Bow04.bmd
Data/Item/Bow05.bmd
Data/Item/Bow06.bmd
Data/Item/Bow07.bmd
Data/Item/Bow18.bmd
Data/Item/Bow19.bmd
Data/Item/Bow20.bmd
Data/Item/Bow_24.bmd
Data/Item/CW_Bow.bmd
Data/Item/CW_Mace.bmd
Data/Item/CW_Staff.bmd
Data/Item/CW_Sword.bmd
Data/Item/CW_Sword2.bmd
Data/Item/ConChip00.bmd
Data/Item/Covenant.bmd
Data/Item/CrossBow01.bmd
Data/Item/CrossBow02.bmd
Data/Item/CrossBow03.bmd
Data/Item/CrossBow04.bmd
Data/Item/CrossBow05.bmd
Data/Item/CrossBow06.bmd
Data/Item/CrossBow07.bmd
Data/Item/CrossBow17.bmd
Data/Item/CrossBow20.bmd
Data/Item/Crystal.bmd
Data/Item/DarkHorseHorn.bmd
Data/Item/DarkHorseSoul.bmd
Data/Item/DarkLordRobe.bmd
Data/Item/DarkLordRobe02.bmd
Data/Item/DarkLordSleeve.bmd
Data/Item/Devil00.bmd
Data/Item/Devil01.bmd
Data/Item/Devil02.bmd
Data/Item/Deye.bmd
Data/Item/Drink00.bmd
Data/Item/Ingameshop/alice1wing.bmd
Data/Item/Ingameshop/angel_wing.bmd
Data/Item/Ingameshop/charactercard.bmd
Data/Item/Ingameshop/devil_wing.bmd
Data/Item/PartCharge6/amulet_cloak.bmd
Data/Item/PartCharge6/amulet_dark.bmd
Data/Item/PartCharge6/amulet_despair.bmd
Data/Item/PartCharge6/amulet_disaster.bmd
Data/Item/PartCharge6/amulet_dragon.bmd
Data/Item/PartCharge6/amulet_elf.bmd
Data/Item/PartCharge6/amulet_satan.bmd
Data/Item/PartCharge6/amulet_sky.bmd
Data/Item/PartCharge6/amulet_soul.bmd
Data/Item/PartCharge6/amulet_spirit.bmd
Data/Item/agnecklace.bmd
Data/Item/blue01.bmd
Data/Item/bubsa.bmd
Data/Item/cherryblossom/chbranche.bmd
Data/Item/cherryblossom/chbranche_red.bmd
Data/Item/cherryblossom/chbranche_yellow.bmd
Data/Item/cherryblossom/cherrybox.bmd
Data/Item/cherryblossom/chgateaux.bmd
Data/Item/cherryblossom/chpetal.bmd
Data/Item/cherryblossom/chwine.bmd
Data/Item/class15_armleft.bmd
Data/Item/class15_armright.bmd
Data/Item/class15_bodyleft.bmd
Data/Item/class15_bodyright.bmd
Data/Item/class15_bootleft.bmd
Data/Item/class15_bootright.bmd
Data/Item/class15_head.bmd
Data/Item/class15_pantleft.bmd
Data/Item/class15_pantright.bmd
Data/Item/coin7.bmd
Data/Item/condolstone.bmd
Data/Item/condolwing.bmd
Data/Item/crosssheild.bmd
Data/Item/dark_05.bmd
Data/Item/deathbeamstone.bmd
Data/Item/dn3_darksw.bmd
Data/Item/doubt_paper.bmd
Data/Item/partCharge1/bujuck01.bmd
Data/Item/partCharge3/alicecard.bmd
Data/Item/partCharge8/Barca7Card.bmd
Data/Item/partCharge8/BarcaCard.bmd
Data/Item/partCharge8/DoppelCard.bmd
Data/Item/partcharge4/battlescroll.bmd
Data/Item/partcharge4/curemark.bmd
Data/Item/partcharge4/demon.bmd
Data/Local/BuffEffect.bmd
Data/Local/NpcName(Jpn).txt
Data/Local/credit.bmd
Data/Local/dialog.bmd
Data/Logo/Card01.bmd
Data/Logo/Card02.bmd
Data/Logo/Card03.bmd
Data/Logo/Card04.bmd
Data/Macro.txt
Data/MixShader/ColorTransforms/NoBoneColorTransforms.txt
Data/MixShader/ColorTransforms/OneLinkColorTransforms.txt
Data/MixShader/ColorTransforms/TwoLinkColorTransforms.txt
Data/MixShader/Definitions.txt
Data/MixShader/NormTransforms/NoBoneNormTransforms.txt
Data/MixShader/NormTransforms/OneLinkNormTransforms.txt
Data/MixShader/NormTransforms/TwoLinkNormTransforms.txt
Data/MixShader/TexTransforms/TexDefTransforms.txt
Data/MixShader/TexTransforms/TexTransforms.txt
Data/MixShader/VertexTransforms/NoBoneVertexTransforms.txt
Data/MixShader/VertexTransforms/OneLinkVertexTransforms.txt
Data/MixShader/VertexTransforms/TwoLinkVertexTransforms.txt
Data/Monster/Boss_Karane_sword_left01.bmd
Data/Monster/Boss_Karane_sword_left02.bmd
Data/Monster/Boss_Karane_sword_main01.bmd
Data/Monster/Boss_Karane_sword_right01.bmd
Data/Monster/Boss_Karane_sword_right02.bmd
Data/Monster/arrowstusk.bmd
Data/Monster/assassin_dieg.bmd
Data/Monster/assassin_dier.bmd
Data/Monster/cd71a.bmd
Data/Monster/cd71b.bmd
Data/Monster/cd71c.bmd
Data/Monster/cd71d.bmd
Data/Monster/cd71e.bmd
Data/Monster/cd71f.bmd
Data/Monster/cd71g.bmd
Data/Monster/cd71h.bmd
Data/Monster/condra_7_arm_left.bmd
Data/Monster/condra_7_arm_left_2.bmd
Data/Monster/condra_7_arm_right.bmd
Data/Monster/condra_7_arm_right_2.bmd
Data/Monster/condra_7_cone_left.bmd
Data/Monster/condra_7_cone_right.bmd
Data/Monster/condra_7_shoulder_right.bmd
Data/Monster/condra_7_stone.bmd
Data/Monster/condra_7_stone_2.bmd
Data/Monster/condra_7_stone_3.bmd
Data/Monster/condra_7_stone_4.bmd
Data/Monster/condra_7_stone_5.bmd
Data/Monster/condra_7_stone_6.bmd
Data/Monster/cundun_gone.bmd
Data/Monster/deasther_boomerang.bmd
Data/NPC/BloodCastle01.bmd
Data/NPC/BloodCastle02.bmd
Data/NPC/Breeder.bmd
Data/NPC/DeviasTrader01.bmd
Data/NPC/DevilNpc01.bmd
Data/NPC/DoppelgangerBox.bmd
Data/NPC/allied.bmd
Data/NPC/barnert.bmd
Data/NPC/bena.bmd
Data/NPC/box.bmd
Data/NPC/c_mon.bmd
Data/NPC/cherryblossom/cherry_blossom.bmd
Data/NPC/cry2doorhead.bmd
Data/NPC/devin.bmd
Data/Object1/Beer01.bmd
Data/Object1/Beer02.bmd
Data/Object1/Beer03.bmd
Data/Object1/Bird01.bmd
Data/Object1/Bonfire01.bmd
Data/Object1/Bridge01.bmd
Data/Object1/BridgeStone01.bmd
Data/Object1/Butterfly01.bmd
Data/Object1/Candle01.bmd
Data/Object1/Cannon01.bmd
Data/Object1/Cannon02.bmd
Data/Object1/Cannon03.bmd
Data/Object1/Carriage01.bmd
Data/Object1/Carriage02.bmd
Data/Object1/Carriage03.bmd
Data/Object1/Carriage04.bmd
Data/Object1/Curtain01.bmd
Data/Object1/DoungeonGate01.bmd
Data/Object11/cloud.bmd
Data/Object12/Crow01.bmd
Data/Object2/Bat01.bmd
Data/Object2/DungeonStone01.bmd
Data/Object34/centi.bmd
Data/Object40/BossHead01.bmd
Data/Object5/Bug01.bmd
Data/Object63/BossHead01.bmd
Data/Object7/Bug01.bmd
Data/Object9/Bug02.bmd
Data/Player/Angel.bmd
Data/Player/ArmorClass01.bmd
Data/Player/ArmorClass02.bmd
Data/Player/ArmorClass03.bmd
Data/Player/ArmorClass04.bmd
Data/Player/ArmorClass05.bmd
Data/Player/ArmorClass06.bmd
Data/Player/ArmorClass07.bmd
Data/Player/ArmorClass201.bmd
Data/Player/ArmorClass202.bmd
Data/Player/ArmorClass203.bmd
Data/Player/ArmorClass206.bmd
Data/Player/ArmorClass301.bmd
Data/Player/ArmorClass302.bmd
Data/Player/ArmorClass303.bmd
Data/Player/ArmorClass304.bmd
Data/Player/ArmorClass305.bmd
Data/Player/ArmorClass306.bmd
Data/Player/ArmorClass307.bmd
Data/Player/ArmorElf01.bmd
Data/Player/ArmorElf02.bmd
Data/Player/ArmorElf03.bmd
Data/Player/ArmorElf04.bmd
Data/Player/ArmorElf05.bmd
Data/Player/ArmorElfC01.bmd
Data/Player/ArmorElfC02.bmd
Data/Player/ArmorMale01.bmd
Data/Player/ArmorMale02.bmd
Data/Player/ArmorMale03.bmd
Data/Player/ArmorMale04.bmd
Data/Player/ArmorMale05.bmd
Data/Player/ArmorMale06.bmd
Data/Player/ArmorMale07.bmd
Data/Player/ArmorMale08.bmd
Data/Player/ArmorMale09.bmd
Data/Player/ArmorMale10.bmd
Data/Player/ArmorMale16.bmd
Data/Player/ArmorMale17.bmd
Data/Player/ArmorMale18.bmd
Data/Player/ArmorMale19.bmd
Data/Player/ArmorMale20.bmd
Data/Player/ArmorMale21.bmd
Data/Player/ArmorMale22.bmd
Data/Player/ArmorMale23.bmd
Data/Player/ArmorMale24.bmd
Data/Player/ArmorMale25.bmd
Data/Player/ArmorMale26.bmd
Data/Player/ArmorMale27.bmd
Data/Player/ArmorMale28.bmd
Data/Player/ArmorMale29.bmd
Data/Player/ArmorMale40.bmd
Data/Player/ArmorMale41.bmd
Data/Player/ArmorMale42.bmd
Data/Player/ArmorMale43.bmd
Data/Player/ArmorMale44.bmd
Data/Player/ArmorMale45.bmd
Data/Player/ArmorMale46.bmd
Data/Player/ArmorMale47.bmd
Data/Player/ArmorMale48.bmd
Data/Player/ArmorMale49.bmd
Data/Player/ArmorMale50.bmd
Data/Player/ArmorMale51.bmd
Data/Player/ArmorMale52.bmd
Data/Player/ArmorMale53.bmd
Data/Player/ArmorMale54.bmd
Data/Player/ArmorMale60.bmd
Data/Player/ArmorMale61.bmd
Data/Player/ArmorMale61_inventory.bmd
Data/Player/ArmorMale62.bmd
Data/Player/ArmorMale62_inventory.bmd
Data/Player/ArmorMaleTest20.bmd
Data/Player/ArmorMonk01.bmd
Data/Player/ArmorMonk02.bmd
Data/Player/ArmorMonk03.bmd
Data/Player/ArmorMonk04.bmd
Data/Player/Armor_inventory60.bmd
Data/Player/BootClass01.bmd
Data/Player/BootClass02.bmd
Data/Player/BootClass03.bmd
Data/Player/BootClass04.bmd
Data/Player/BootClass05.bmd
Data/Player/BootClass06.bmd
Data/Player/BootClass07.bmd
Data/Player/BootClass201.bmd
Data/Player/BootClass202.bmd
Data/Player/BootClass203.bmd
Data/Player/BootClass206.bmd
Data/Player/BootClass301.bmd
Data/Player/BootClass302.bmd
Data/Player/BootClass303.bmd
Data/Player/BootClass304.bmd
Data/Player/BootClass305.bmd
Data/Player/BootClass306.bmd
Data/Player/BootClass307.bmd
Data/Player/BootElf01.bmd
Data/Player/BootElf02.bmd
Data/Player/BootElf03.bmd
Data/Player/BootElf04.bmd
Data/Player/BootElf05.bmd
Data/Player/BootElfC01.bmd
Data/Player/BootElfC02.bmd
Data/Player/BootMale01.bmd
Data/Player/BootMale02.bmd
Data/Player/BootMale03.bmd
Data/Player/BootMale04.bmd
Data/Player/BootMale05.bmd
Data/Player/BootMale06.bmd
Data/Player/BootMale07.bmd
Data/Player/BootMale08.bmd
Data/Player/BootMale09.bmd
Data/Player/BootMale10.bmd
Data/Player/BootMale16.bmd
Data/Player/BootMale17.bmd
Data/Player/BootMale18.bmd
Data/Player/BootMale19.bmd
Data/Player/BootMale20.bmd
Data/Player/BootMale21.bmd
Data/Player/BootMale22.bmd
Data/Player/BootMale23.bmd
Data/Player/BootMale24.bmd
Data/Player/BootMale25.bmd
Data/Player/BootMale26.bmd
Data/Player/BootMale27.bmd
Data/Player/BootMale28.bmd
Data/Player/BootMale29.bmd
Data/Player/BootMale40.bmd
Data/Player/BootMale41.bmd
Data/Player/BootMale42.bmd
Data/Player/BootMale43.bmd
Data/Player/BootMale44.bmd
Data/Player/BootMale45.bmd
Data/Player/BootMale46.bmd
Data/Player/BootMale47.bmd
Data/Player/BootMale48.bmd
Data/Player/BootMale49.bmd
Data/Player/BootMale50.bmd
Data/Player/BootMale51.bmd
Data/Player/BootMale52.bmd
Data/Player/BootMale53.bmd
Data/Player/BootMale54.bmd
Data/Player/BootMale60.bmd
Data/Player/BootMale61.bmd
Data/Player/BootMale62.bmd
Data/Player/BootMaleTest20.bmd
Data/Player/BootMonk01.bmd
Data/Player/BootMonk02.bmd
Data/Player/BootMonk03.bmd
Data/Player/BootMonk04.bmd
Data/Player/CW_ArmorMale01.bmd
Data/Player/CW_ArmorMale02.bmd
Data/Player/CW_ArmorMale03.bmd
Data/Player/CW_ArmorMale04.bmd
Data/Player/CW_ArmorMale05.bmd
Data/Player/CW_BootMale01.bmd
Data/Player/CW_BootMale02.bmd
Data/Player/CW_BootMale03.bmd
Data/Player/CW_BootMale04.bmd
Data/Player/CW_BootMale05.bmd
Data/Player/CW_GloveMale01.bmd
Data/Player/CW_GloveMale02.bmd
Data/Player/CW_GloveMale03.bmd
Data/Player/CW_GloveMale04.bmd
Data/Player/CW_GloveMale05.bmd
Data/Player/CW_HelmMale01.bmd
Data/Player/CW_HelmMale02.bmd
Data/Player/CW_HelmMale03.bmd
Data/Player/CW_HelmMale05.bmd
Data/Player/CW_PantMale01.bmd
Data/Player/CW_PantMale02.bmd
Data/Player/CW_PantMale03.bmd
Data/Player/CW_PantMale04.bmd
Data/Player/CW_PantMale05.bmd
Data/Skill/Arrow01.bmd
Data/Skill/ArrowBomb01.bmd
Data/Skill/ArrowDouble01.bmd
Data/Skill/ArrowImpact.bmd
Data/Skill/ArrowLaser01.bmd
Data/Skill/ArrowNature01.bmd
Data/Skill/ArrowSaw01.bmd
Data/Skill/ArrowSteel01.bmd
Data/Skill/ArrowThunder01.bmd
Data/Skill/ArrowV01.bmd
Data/Skill/ArrowWing01.bmd
Data/Skill/Arrow_Spark.bmd
Data/Skill/Aurora.bmd
Data/Skill/Ball01.bmd
Data/Skill/BigStone01.bmd
Data/Skill/BigStone02.bmd
Data/Skill/Blast01.bmd
Data/Skill/Bone01.bmd
Data/Skill/Bone02.bmd
Data/Skill/CW_Bow_Skill.bmd
Data/Skill/Carow.bmd
Data/Skill/Circle01.bmd
Data/Skill/Circle02.bmd
Data/Skill/DarkHorse.bmd
Data/Skill/DarkLordSkill.bmd
Data/Skill/airforce.bmd
Data/Skill/arrowsre01.bmd
Data/Skill/arrowsre02.bmd
Data/Skill/arrowsre03.bmd
Data/Skill/arrowsre04.bmd
Data/Skill/arrowsre05.bmd
Data/Skill/arrowsrefill.bmd
Data/Skill/blizzard.bmd
Data/Skill/bossrock.bmd
Data/Skill/bossrocklight.bmd
Data/Skill/boswind.bmd
Data/Skill/chain_lightning_ani.bmd
Data/Skill/combo.bmd
Data/Skill/darkfirescrem01.bmd
Data/Skill/darkfirescrem02.bmd
Data/Skill/darkspirit.bmd
Data/Skill/darkwing_hetachi.bmd
Data/Skill/deathsp_eff.bmd
Data/Skill/desair.bmd
Data/Skill/dragonhead.bmd
Data/World1/EncTerrain1.att
Data/World1/EncTerrain1.obj
Data/World10/EncTerrain10.att
Data/World10/EncTerrain10.obj
Data/World11/EncTerrain11.att
Data/World11/EncTerrain11.obj
Data/World12/EncTerrain12.att
Data/World12/EncTerrain12.obj
Data/World19/EncTerrain19.att
Data/World19/EncTerrain19.obj
Data/World2/EncTerrain2.att
Data/World2/EncTerrain2.obj
Data/World2/EncTerrain21--.att
Data/World25/EncTerrain25.att
Data/World25/EncTerrain25.obj
Data/World3/EncTerrain3.att
Data/World3/EncTerrain3.obj
Data/World3/EncTerrainTest3.att
Data/World3/EncTerrainTest3.obj
Data/World31/EncTerrain31.att
Data/World31/EncTerrain31.obj
Data/World31/EncTerrain312.att
Data/World32/EncTerrain32.att
Data/World32/EncTerrain32.obj
Data/World34/EncTerrain34.att
Data/World34/EncTerrain34.obj
Data/World34/EncTerrainTest34.att
Data/World34/EncTerrainTest34.obj
Data/World34/Terrain.att
Data/World34/Terrain.obj
Data/World34/TerrainServer.att
Data/World35/EncTerrain35.att
Data/World35/EncTerrain35.obj
Data/World35/EncTerrain351.att
Data/World35/EncTerrain352.att
Data/World38/EncTerrain38.att
Data/World38/EncTerrain38.obj
Data/World38/EncTerrainTest38.att
Data/World38/EncTerrainTest38.obj
Data/World38/Terrain.att
Data/World38/Terrain.obj
Data/World39/EncTerrain39.att
Data/World39/EncTerrain39.obj
Data/World4/EncTerrain4.att
Data/World4/EncTerrain4.obj
Data/World40/EncTerrain40.att
Data/World40/EncTerrain40.obj
Data/World40/EncTerrain401.att
Data/World40/EncTerrain401.obj
Data/World41/EncTerrain41.att
Data/World41/EncTerrain41.obj
Data/World42/EncTerrain42.att
Data/World42/EncTerrain42.obj
Data/World43/EncTerrain43.att
Data/World43/EncTerrain43.obj
Data/World47/EncTerrain47.att
Data/World47/EncTerrain47.obj
Data/World5/EncTerrain5.att
Data/World5/EncTerrain5.obj
Data/World52/EncTerrain52.att
Data/World52/EncTerrain52.obj
Data/World52/Terrain.att
Data/World52/Terrain.obj
Data/World52/TerrainServer.att
Data/World57/EncTerrain57.att
Data/World57/EncTerrain57.obj
Data/World57/Terrain.att
Data/World57/Terrain.obj
Data/World58/EncTerrain58.att
Data/World58/EncTerrain58.obj
Data/World58/Terrain.att
Data/World58/Terrain.obj
Data/World59/EncTerrain59.att
Data/World59/EncTerrain59.obj
Data/World63/EncTerrain63.att
Data/World63/EncTerrain63.obj
Data/World64/EncTerrain64.att
Data/World64/EncTerrain64.obj
Data/World65/EncTerrain65.att
Data/World65/EncTerrain65.obj
Data/World66/EncTerrain66.att
Data/World66/EncTerrain66.obj
Data/World67/EncTerrain67.att
Data/World67/EncTerrain67.obj
Data/World68/EncTerrain68.att
Data/World68/EncTerrain68.obj
Data/World69/EncTerrain69.att
Data/World69/EncTerrain69.obj
Data/World7/EncTerrain7.att
Data/World7/EncTerrain7.obj
Data/World70/EncTerrain70.att
Data/World70/EncTerrain70.obj
Data/World71/EncTerrain71.att
Data/World71/EncTerrain71.obj
Data/World72/EncTerrain72.att
Data/World72/EncTerrain72.obj
Data/World73/EncTerrain73.att
Data/World73/EncTerrain73.obj
Data/World74/EncTerrain74.att
Data/World74/EncTerrain74.obj
Data/World75/EncTerrain75.att
Data/World75/EncTerrain75.obj
Data/World78/EncTerrain78.att
Data/World78/EncTerrain78.obj
Data/World79/EncTerrain79.att
Data/World79/EncTerrain79.obj
Data/World79/TerrainServer.att
Data/World8/EncTerrain8.att
Data/World8/EncTerrain8.obj
Data/World80/EncTerrain80.att
Data/World80/EncTerrain80.obj
Data/World81/EncTerrain81.att
Data/World81/EncTerrain81.obj
Data/World82/EncTerrain82.att
Data/World82/EncTerrain82.obj
Data/World9/EncTerrain9.att
Data/World9/EncTerrain9.obj
Launcher.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 535KB - Virtual size: 534KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 774KB - Virtual size: 774KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
esthus.dll
.dll windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

Size: 75KB - Virtual size: 328KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Themida
Size: 797KB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
main.exe
.exe windows:4 windows x86 arch:x86

5b42f5f6ea9f57742e9dc3cfde8c538c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

imm32

ImmGetIMEFileNameA
ImmGetDefaultIMEWnd
ImmGetCompositionStringA
ImmGetCompositionWindow
ImmGetDescriptionA
ImmGetContext
ImmGetOpenStatus
ImmSetOpenStatus
ImmGetConversionStatus
ImmSetConversionStatus
ImmReleaseContext
ImmSetCompositionWindow

dsound

ord1
ord2

opengl32

glColor4f
glDisable
glEnd
glVertex2f
glTexCoord2f
glColor4ub
glBegin
glColor3f
glTexImage2D
glBindTexture
glFlush
glClear
glPopMatrix
glAlphaFunc
glDepthFunc
glTranslatef
glRotatef
glLoadIdentity
glPushMatrix
glMatrixMode
wglDeleteContext
wglMakeCurrent
glGetString
wglCreateContext
glClearColor
glVertex3f
glNormal3f
glVertex3fv
glColor3fv
glDeleteTextures
glTexParameteri
glGenTextures
glTexEnvf
glDepthMask
glPolygonMode
glFrontFace
glStencilFunc
glColorMask
glStencilOp
glScalef
glGetFloatv
glReadPixels
glBlendFunc
glViewport
glFogfv
glFogf
glFogi
glTexEnvi
glColor3ub
glGetIntegerv
glEnable

glu32

gluPerspective
gluOrtho2D

winmm

timeGetTime
mmioClose
mmioAscend
mmioRead
mmioDescend
mmioOpenA
mmioWrite
timeBeginPeriod
timeGetDevCaps
timeSetEvent
timeEndPeriod
timeKillEvent

kernel32

InitializeCriticalSection
MoveFileA
TlsSetValue
TlsGetValue
ExitThread
FatalAppExitA
HeapReAlloc
HeapSize
DeleteCriticalSection
SetEndOfFile
GetModuleHandleA
ResumeThread
ResetEvent
GetExitCodeProcess
WaitForMultipleObjects
CreateProcessA
MoveFileExA
lstrcatA
LeaveCriticalSection
EnterCriticalSection
OpenMutexA
CreateThread
GetTickCount
IsBadReadPtr
lstrlenA
GlobalUnlock
GlobalLock
WideCharToMultiByte
MultiByteToWideChar
CreateFileA
GetCommandLineA
CloseHandle
ReadFile
GetFileSize
GetLastError
GetPrivateProfileStringA
GetCurrentDirectoryA
DeleteFileA
CopyFileA
SetFileAttributesA
Process32Next
TerminateProcess
OpenProcess
Process32First
CreateToolhelp32Snapshot
WinExec
Sleep
FindClose
FindFirstFileA
CreateMutexA
GetLocalTime
GetCurrentThreadId
ExitProcess
SetEvent
OpenEventA
TerminateThread
WaitForSingleObject
QueryPerformanceCounter
QueryPerformanceFrequency
WriteFile
SetFilePointer
GetSystemDirectoryA
lstrcmpiA
GetVersionExA
SetProcessAffinityMask
SetThreadPriority
SetPriorityClass
GetProcessAffinityMask
GetThreadPriority
GetPriorityClass
GetCurrentThread
GetCurrentProcess
FreeLibrary
GetProcAddress
LoadLibraryA
GlobalMemoryStatus
SetConsoleMode
GetStdHandle
AllocConsole
FreeConsole
SetConsoleTitleA
GetConsoleTitleA
SetLastError
SetConsoleCursorPosition
FillConsoleOutputAttribute
FillConsoleOutputCharacterA
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
ReadConsoleOutputA
GetCurrentProcessId
GetThreadContext
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
SetUnhandledExceptionFilter
lstrcpynA
Module32Next
Module32First
GetModuleFileNameA
CreateDirectoryA
GetFileAttributesA
RemoveDirectoryA
FindNextFileA
GetFullPathNameA
FileTimeToSystemTime
FileTimeToLocalFileTime
TlsAlloc
TlsFree
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
SetHandleCount
GetVersion
GetFileType
GetEnvironmentVariableA
HeapDestroy
HeapCreate
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
FlushFileBuffers
IsBadCodePtr
GetStringTypeA
GetStringTypeW
CreateFileW
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetConsoleCtrlHandler
GetLocaleInfoW
ReleaseMutex
GetComputerNameA
lstrcmpA
GetModuleFileNameW
VirtualProtect
OpenFileMappingA
VirtualQuery
VirtualAlloc
VirtualFree
LoadLibraryExA
GetTempFileNameA
GetTempPathA
HeapFree
GetProcessHeap
HeapAlloc
GetFileInformationByHandle
DuplicateHandle
SetStdHandle
CreatePipe
PeekNamedPipe
lstrcpyA
RtlUnwind
RaiseException
InterlockedDecrement
InterlockedIncrement
GetTimeZoneInformation
GetSystemTime
GetSystemTimeAsFileTime
GetStartupInfoA
CreateEventA

user32

ShowWindow
GetDC
SetWindowPos
SetWindowTextA
GetWindowTextA
GetCaretPos
GetWindowLongA
GetAsyncKeyState
SendMessageA
CallWindowProcA
GetFocus
CloseClipboard
SetWindowLongA
DestroyWindow
SetRect
GetActiveWindow
GetCursorPos
ScreenToClient
CreateWindowExA
PtInRect
OffsetRect
MessageBoxA
PostMessageA
IsWindowVisible
GetScrollPos
SetScrollPos
SetTimer
wsprintfA
IntersectRect
FindWindowA
ShowCursor
ChangeDisplaySettingsA
ReleaseDC
SystemParametersInfoA
DefWindowProcA
ReleaseCapture
SetCapture
GetDoubleClickTime
SetFocus
PostQuitMessage
EndPaint
BeginPaint
RegisterClassA
LoadCursorA
LoadIconA
SetForegroundWindow
GetSystemMetrics
AdjustWindowRect
IsIconic
DispatchMessageA
TranslateMessage
GetMessageA
PeekMessageA
UpdateWindow
EnumDisplaySettingsA
GetDesktopWindow
SetWindowsHookExA
UnhookWindowsHookEx
CallNextHookEx
GetWindowRect
RegisterHotKey
UnregisterHotKey
GetWindowThreadProcessId
GetClassNameA
GetSystemMenu
DrawMenuBar
RemoveMenu
EnumChildWindows
GetKeyboardLayout
GetKeyboardLayoutNameA
wvsprintfA
KillTimer
GetClipboardData
SetCursorPos
OpenClipboard

gdi32

SetPixelFormat
ChoosePixelFormat
GetTextExtentPointA
SetBkColor
GetStockObject
CreateDIBSection
CreateCompatibleDC
SelectObject
DeleteObject
CreateFontA
SwapBuffers
SetTextColor
TextOutA
DeleteDC
GetTextExtentPoint32A

advapi32

InitializeSecurityDescriptor
CryptGetHashParam
CryptDeriveKey
CryptDecrypt
CryptCreateHash
CryptHashData
CryptVerifySignatureA
CryptDestroyHash
RegEnumValueA
GetUserNameA
CryptAcquireContextA
CryptImportKey
SetSecurityDescriptorDacl
RegCreateKeyA
CryptReleaseContext
CryptDestroyKey
CryptEncrypt
RegOpenKeyExA
RegDeleteKeyA
RegQueryValueExA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegCloseKey

shell32

ShellExecuteA

ole32

CoCreateInstance
CoInitialize
CoUninitialize

ws2_32

htons
inet_addr
gethostbyname
connect
WSAAsyncSelect
setsockopt
socket
shutdown
recv
closesocket
WSAStartup
WSACleanup
send
WSAGetLastError
WSASend
sendto

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

wzaudio

wzAudioCreate
wzAudioDestroy
wzAudioGetStreamOffsetRange
wzAudioPlay
wzAudioStop
wzAudioOption

mu_al

_AdrOpenSampleSource@8
_AdrOpenSound@12
_AdrOpenDevice@8

wininet

FtpOpenFileA
InternetQueryDataAvailable
InternetReadFile
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA
InternetConnectA
InternetOpenA
InternetCloseHandle
FtpFindFirstFileA

urlmon

URLDownloadToFileA

Sections

.text
Size: 5.1MB - Virtual size: 5.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 216KB - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 216KB - Virtual size: 137.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mfsvc2.dll
.dll windows:4 windows x86 arch:x86

9d120818772f6f1b105f47e936c2eee9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

BeginPaint
SendMessageTimeoutA
FindWindowA
ShowWindow
CharUpperA
GetDC
ReleaseDC
GetClientRect
wsprintfA
EndPaint
BringWindowToTop
DestroyWindow
SendMessageA
CreateDialogParamA

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegDeleteValueA

kernel32

SetStdHandle
SetConsoleCtrlHandler
LoadLibraryA
Sleep
FlushFileBuffers
IsValidLocale
IsValidCodePage
GetLocaleInfoA
UnmapViewOfFile
CloseHandle
CreateMutexA
MapViewOfFile
GetLastError
CreateFileMappingA
GetTickCount
GetCurrentProcessId
OutputDebugStringA
VirtualQuery
ReleaseMutex
WaitForSingleObject
ReadFile
CreateFileA
lstrcmpA
lstrlenA
EnumSystemLocalesA
EnterCriticalSection
CreateEventA
InitializeCriticalSection
DeleteCriticalSection
lstrcatA
lstrcpyA
CreateProcessA
OpenEventA
ResetEvent
SetEvent
WaitForMultipleObjects
GetFileSize
DeleteFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileTime
GlobalFree
GlobalAlloc
GetModuleFileNameA
GetSystemDirectoryA
Process32Next
OpenProcess
Process32First
CreateToolhelp32Snapshot
GetProcAddress
GetStringTypeW
GetStringTypeA
InterlockedIncrement
GetUserDefaultLCID
GetVersionExA
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetLocaleInfoW
LeaveCriticalSection
RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetLocalTime
ResumeThread
CreateThread
TlsSetValue
ExitThread
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
GetCurrentThreadId
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCurrentThread
ExitProcess
FatalAppExitA
GetCPInfo
GetACP
GetOEMCP
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetFilePointer
InterlockedDecrement

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

gdi32

BitBlt
SelectObject
CreateCompatibleDC
DeleteObject
DeleteDC
CreateDIBitmap

Exports

Exports

MFGS2_CheckFileIntegrity
MFGS2_Initialize
MFGS2_SetScanInterval
MFGS2_Start
MFGS2_StartUpdate
MFGS2_Terminate
MFGS2_Uninitialize

Sections

.text
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
msvcr100.dll
.dll windows:5 windows x86 arch:x86

5271d5ce8b44dd47bc92563e27585466

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:cf:3e:00:00:00:00:00:0f
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/12/2009, 22:40

Not After

07/03/2011, 22:40

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:05:a2:30:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:01

Not After

25/07/2013, 19:11

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

42:49:74:54:aa:4d:83:7a:e5:5d:a1:1f:f1:e8:b6:0a:d3:24:a0:ae
Signer

Actual PE Digest

42:49:74:54:aa:4d:83:7a:e5:5d:a1:1f:f1:e8:b6:0a:d3:24:a0:ae

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

EncodePointer
DecodePointer
RaiseException
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetCurrentThreadId
TlsGetValue
GetCommandLineW
GetCommandLineA
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
ExitThread
CloseHandle
GetLastError
ResumeThread
CreateThread
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetCurrentThread
FindNextFileA
FindFirstFileExA
FindClose
FindNextFileW
FindFirstFileExW
GetLogicalDrives
GetDiskFreeSpaceA
FileTimeToSystemTime
FileTimeToLocalFileTime
SetErrorMode
Sleep
Beep
GetFileAttributesA
SetFileAttributesA
SetEnvironmentVariableA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetCurrentDirectoryW
SetCurrentDirectoryW
GetFullPathNameA
GetDriveTypeW
GetCurrentProcessId
CreateDirectoryA
MoveFileA
RemoveDirectoryA
GetDriveTypeA
DeleteFileA
GetFileAttributesW
SetEnvironmentVariableW
SetFileAttributesW
GetFullPathNameW
CreateDirectoryW
MoveFileW
RemoveDirectoryW
DeleteFileW
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
LoadLibraryA
FreeLibrary
CreateProcessW
ReadFile
DuplicateHandle
GetCurrentProcess
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetLocalTime
WideCharToMultiByte
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetLocalTime
InterlockedPopEntrySList
InterlockedFlushSList
QueryDepthSList
InterlockedPushEntrySList
CreateTimerQueue
CreateTimerQueueTimer
DeleteTimerQueueTimer
SetEvent
CreateEventW
SwitchToThread
SignalObjectAndWait
TryEnterCriticalSection
GetTickCount
VirtualFree
GetVersionExW
SetThreadPriority
VirtualAlloc
GetSystemInfo
GetProcessAffinityMask
VirtualProtect
SetThreadAffinityMask
InitializeSListHead
ReleaseSemaphore
CreateSemaphoreW
WaitForMultipleObjects
GetThreadPriority
LoadLibraryW
SleepEx
OutputDebugStringW
FreeLibraryAndExitThread
GetModuleHandleA
GetThreadTimes
DebugBreak
MultiByteToWideChar
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetTimeFormatA
GetDateFormatA
GetTimeFormatW
GetDateFormatW
RtlUnwind
HeapAlloc
HeapFree
HeapCreate
HeapDestroy
HeapQueryInformation
HeapReAlloc
HeapSize
HeapValidate
HeapCompact
HeapWalk
VirtualQuery
SetHandleCount
GetFileType
GetStartupInfoW
GetFileInformationByHandle
PeekNamedPipe
CreateFileA
CreateFileW
SetFilePointer
GetConsoleCP
GetConsoleMode
FlushFileBuffers
CreatePipe
SetStdHandle
ReadConsoleInputA
SetConsoleMode
PeekConsoleInputA
GetNumberOfConsoleInputEvents
ReadConsoleInputW
WriteConsoleW
ReadConsoleW
SetEndOfFile
GetProcessHeap
InterlockedExchange
LockFile
UnlockFile
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
SetConsoleCtrlHandler
GetLocaleInfoW
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
LCMapStringW
CompareStringW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsProcessorFeaturePresent

Exports

Exports

$I10_OUTPUT
??0?$_SpinWait@$00@details@Concurrency@@QAE@P6AXXZ@Z
??0?$_SpinWait@$0A@@details@Concurrency@@QAE@P6AXXZ@Z
??0SchedulerPolicy@Concurrency@@QAA@IZZ
??0SchedulerPolicy@Concurrency@@QAE@ABV01@@Z
??0SchedulerPolicy@Concurrency@@QAE@XZ
??0_NonReentrantBlockingLock@details@Concurrency@@QAE@XZ
??0_NonReentrantPPLLock@details@Concurrency@@QAE@XZ
??0_ReaderWriterLock@details@Concurrency@@QAE@XZ
??0_ReentrantBlockingLock@details@Concurrency@@QAE@XZ
??0_ReentrantLock@details@Concurrency@@QAE@XZ
??0_ReentrantPPLLock@details@Concurrency@@QAE@XZ
??0_Scoped_lock@_NonReentrantPPLLock@details@Concurrency@@QAE@AAV123@@Z
??0_Scoped_lock@_ReentrantPPLLock@details@Concurrency@@QAE@AAV123@@Z
??0_SpinLock@details@Concurrency@@QAE@ACJ@Z
??0_TaskCollection@details@Concurrency@@QAE@XZ
??0_Timer@details@Concurrency@@IAE@I_N@Z
??0__non_rtti_object@std@@QAE@ABV01@@Z
??0__non_rtti_object@std@@QAE@PBD@Z
??0bad_cast@std@@AAE@PBQBD@Z
??0bad_cast@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@PBD@Z
??0bad_target@Concurrency@@QAE@PBD@Z
??0bad_target@Concurrency@@QAE@XZ
??0bad_typeid@std@@QAE@ABV01@@Z
??0bad_typeid@std@@QAE@PBD@Z
??0context_self_unblock@Concurrency@@QAE@PBD@Z
??0context_self_unblock@Concurrency@@QAE@XZ
??0context_unblock_unbalanced@Concurrency@@QAE@PBD@Z
??0context_unblock_unbalanced@Concurrency@@QAE@XZ
??0critical_section@Concurrency@@QAE@XZ
??0default_scheduler_exists@Concurrency@@QAE@PBD@Z
??0default_scheduler_exists@Concurrency@@QAE@XZ
??0event@Concurrency@@QAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABQBDH@Z
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@XZ
??0improper_lock@Concurrency@@QAE@PBD@Z
??0improper_lock@Concurrency@@QAE@XZ
??0improper_scheduler_attach@Concurrency@@QAE@PBD@Z
??0improper_scheduler_attach@Concurrency@@QAE@XZ
??0improper_scheduler_detach@Concurrency@@QAE@PBD@Z
??0improper_scheduler_detach@Concurrency@@QAE@XZ
??0improper_scheduler_reference@Concurrency@@QAE@PBD@Z
??0improper_scheduler_reference@Concurrency@@QAE@XZ
??0invalid_link_target@Concurrency@@QAE@PBD@Z
??0invalid_link_target@Concurrency@@QAE@XZ
??0invalid_multiple_scheduling@Concurrency@@QAE@PBD@Z
??0invalid_multiple_scheduling@Concurrency@@QAE@XZ
??0invalid_operation@Concurrency@@QAE@PBD@Z
??0invalid_operation@Concurrency@@QAE@XZ
??0invalid_oversubscribe_operation@Concurrency@@QAE@PBD@Z
??0invalid_oversubscribe_operation@Concurrency@@QAE@XZ
??0invalid_scheduler_policy_key@Concurrency@@QAE@PBD@Z
??0invalid_scheduler_policy_key@Concurrency@@QAE@XZ
??0invalid_scheduler_policy_thread_specification@Concurrency@@QAE@PBD@Z
??0invalid_scheduler_policy_thread_specification@Concurrency@@QAE@XZ
??0invalid_scheduler_policy_value@Concurrency@@QAE@PBD@Z
??0invalid_scheduler_policy_value@Concurrency@@QAE@XZ
??0message_not_found@Concurrency@@QAE@PBD@Z
??0message_not_found@Concurrency@@QAE@XZ
??0missing_wait@Concurrency@@QAE@PBD@Z
??0missing_wait@Concurrency@@QAE@XZ
??0nested_scheduler_missing_detach@Concurrency@@QAE@PBD@Z
??0nested_scheduler_missing_detach@Concurrency@@QAE@XZ
??0operation_timed_out@Concurrency@@QAE@PBD@Z
??0operation_timed_out@Concurrency@@QAE@XZ
??0reader_writer_lock@Concurrency@@QAE@XZ
??0scheduler_not_attached@Concurrency@@QAE@PBD@Z
??0scheduler_not_attached@Concurrency@@QAE@XZ
??0scheduler_resource_allocation_error@Concurrency@@QAE@J@Z
??0scheduler_resource_allocation_error@Concurrency@@QAE@PBDJ@Z
??0scoped_lock@critical_section@Concurrency@@QAE@AAV12@@Z
??0scoped_lock@reader_writer_lock@Concurrency@@QAE@AAV12@@Z
??0scoped_lock_read@reader_writer_lock@Concurrency@@QAE@AAV12@@Z
??0task_canceled@details@Concurrency@@QAE@PBD@Z
??0task_canceled@details@Concurrency@@QAE@XZ
??0unsupported_os@Concurrency@@QAE@PBD@Z
??0unsupported_os@Concurrency@@QAE@XZ
??1SchedulerPolicy@Concurrency@@QAE@XZ
??1_NonReentrantBlockingLock@details@Concurrency@@QAE@XZ
??1_ReentrantBlockingLock@details@Concurrency@@QAE@XZ
??1_Scoped_lock@_NonReentrantPPLLock@details@Concurrency@@QAE@XZ
??1_Scoped_lock@_ReentrantPPLLock@details@Concurrency@@QAE@XZ
??1_SpinLock@details@Concurrency@@QAE@XZ
??1_TaskCollection@details@Concurrency@@QAE@XZ
??1_Timer@details@Concurrency@@IAE@XZ
??1__non_rtti_object@std@@UAE@XZ
??1bad_cast@std@@UAE@XZ
??1bad_typeid@std@@UAE@XZ
??1critical_section@Concurrency@@QAE@XZ
??1event@Concurrency@@QAE@XZ
??1exception@std@@UAE@XZ
??1reader_writer_lock@Concurrency@@QAE@XZ
??1scoped_lock@critical_section@Concurrency@@QAE@XZ
??1scoped_lock@reader_writer_lock@Concurrency@@QAE@XZ
??1scoped_lock_read@reader_writer_lock@Concurrency@@QAE@XZ
??1type_info@@UAE@XZ
??2@YAPAXI@Z
??2@YAPAXIHPBDH@Z
??3@YAXPAX@Z
??4?$_SpinWait@$00@details@Concurrency@@QAEAAV012@ABV012@@Z
??4?$_SpinWait@$0A@@details@Concurrency@@QAEAAV012@ABV012@@Z
??4SchedulerPolicy@Concurrency@@QAEAAV01@ABV01@@Z
??4__non_rtti_object@std@@QAEAAV01@ABV01@@Z
??4bad_cast@std@@QAEAAV01@ABV01@@Z
??4bad_typeid@std@@QAEAAV01@ABV01@@Z
??4exception@std@@QAEAAV01@ABV01@@Z
??8type_info@@QBE_NABV0@@Z
??9type_info@@QBE_NABV0@@Z
??_7__non_rtti_object@std@@6B@
??_7bad_cast@std@@6B@
??_7bad_typeid@std@@6B@
??_7exception@@6B@
??_7exception@std@@6B@
??_F?$_SpinWait@$00@details@Concurrency@@QAEXXZ
??_F?$_SpinWait@$0A@@details@Concurrency@@QAEXXZ
??_Fbad_cast@std@@QAEXXZ
??_Fbad_typeid@std@@QAEXXZ
??_U@YAPAXI@Z
??_U@YAPAXIHPBDH@Z
??_V@YAXPAX@Z
?Alloc@Concurrency@@YAPAXI@Z
?Block@Context@Concurrency@@SAXXZ
?Create@CurrentScheduler@Concurrency@@SAXABVSchedulerPolicy@2@@Z
?Create@Scheduler@Concurrency@@SAPAV12@ABVSchedulerPolicy@2@@Z
?CreateResourceManager@Concurrency@@YAPAUIResourceManager@1@XZ
?CreateScheduleGroup@CurrentScheduler@Concurrency@@SAPAVScheduleGroup@2@XZ
?CurrentContext@Context@Concurrency@@SAPAV12@XZ
?Detach@CurrentScheduler@Concurrency@@SAXXZ
?DisableTracing@Concurrency@@YAJXZ
?EnableTracing@Concurrency@@YAJXZ
?Free@Concurrency@@YAXPAX@Z
?Get@CurrentScheduler@Concurrency@@SAPAVScheduler@2@XZ
?GetExecutionContextId@Concurrency@@YAIXZ
?GetNumberOfVirtualProcessors@CurrentScheduler@Concurrency@@SAIXZ
?GetOSVersion@Concurrency@@YA?AW4OSVersion@IResourceManager@1@XZ
?GetPolicy@CurrentScheduler@Concurrency@@SA?AVSchedulerPolicy@2@XZ
?GetPolicyValue@SchedulerPolicy@Concurrency@@QBEIW4PolicyElementKey@2@@Z
?GetProcessorCount@Concurrency@@YAIXZ
?GetProcessorNodeCount@Concurrency@@YAIXZ
?GetSchedulerId@Concurrency@@YAIXZ
?GetSharedTimerQueue@details@Concurrency@@YAPAXXZ
?Id@Context@Concurrency@@SAIXZ
?Id@CurrentScheduler@Concurrency@@SAIXZ
?IsCurrentTaskCollectionCanceling@Context@Concurrency@@SA_NXZ
?Log2@details@Concurrency@@YAKI@Z
?Oversubscribe@Context@Concurrency@@SAX_N@Z
?RegisterShutdownEvent@CurrentScheduler@Concurrency@@SAXPAX@Z
?ResetDefaultSchedulerPolicy@Scheduler@Concurrency@@SAXXZ
?ScheduleGroupId@Context@Concurrency@@SAIXZ
?ScheduleTask@CurrentScheduler@Concurrency@@SAXP6AXPAX@Z0@Z
?SetConcurrencyLimits@SchedulerPolicy@Concurrency@@QAEXII@Z
?SetDefaultSchedulerPolicy@Scheduler@Concurrency@@SAXABVSchedulerPolicy@2@@Z
?SetPolicyValue@SchedulerPolicy@Concurrency@@QAEIW4PolicyElementKey@2@I@Z
?VirtualProcessorId@Context@Concurrency@@SAIXZ
?Yield@Context@Concurrency@@SAXXZ
?_Abort@_StructuredTaskCollection@details@Concurrency@@AAEXXZ
?_Acquire@_NonReentrantBlockingLock@details@Concurrency@@QAEXXZ
?_Acquire@_NonReentrantPPLLock@details@Concurrency@@QAEXPAX@Z
?_Acquire@_ReentrantBlockingLock@details@Concurrency@@QAEXXZ
?_Acquire@_ReentrantLock@details@Concurrency@@QAEXXZ
?_Acquire@_ReentrantPPLLock@details@Concurrency@@QAEXPAX@Z
?_AcquireRead@_ReaderWriterLock@details@Concurrency@@QAEXXZ
?_AcquireWrite@_ReaderWriterLock@details@Concurrency@@QAEXXZ
?_Cancel@_StructuredTaskCollection@details@Concurrency@@QAEXXZ
?_Cancel@_TaskCollection@details@Concurrency@@QAEXXZ
?_CheckTaskCollection@_UnrealizedChore@details@Concurrency@@IAEXXZ
?_ConcRT_Assert@details@Concurrency@@YAXPBD0H@Z
?_ConcRT_CoreAssert@details@Concurrency@@YAXPBD0H@Z
?_ConcRT_DumpMessage@details@Concurrency@@YAXPB_WZZ
?_ConcRT_Trace@details@Concurrency@@YAXHPB_WZZ
?_Copy_str@exception@std@@AAEXPBD@Z
?_DoYield@?$_SpinWait@$00@details@Concurrency@@IAEXXZ
?_DoYield@?$_SpinWait@$0A@@details@Concurrency@@IAEXXZ
?_IsCanceling@_StructuredTaskCollection@details@Concurrency@@QAE_NXZ
?_IsCanceling@_TaskCollection@details@Concurrency@@QAE_NXZ
?_Name_base@type_info@@CAPBDPBV1@PAU__type_info_node@@@Z
?_Name_base_internal@type_info@@CAPBDPBV1@PAU__type_info_node@@@Z
?_NumberOfSpins@?$_SpinWait@$00@details@Concurrency@@IAEKXZ
?_NumberOfSpins@?$_SpinWait@$0A@@details@Concurrency@@IAEKXZ
?_Release@_NonReentrantBlockingLock@details@Concurrency@@QAEXXZ
?_Release@_NonReentrantPPLLock@details@Concurrency@@QAEXXZ
?_Release@_ReentrantBlockingLock@details@Concurrency@@QAEXXZ
?_Release@_ReentrantLock@details@Concurrency@@QAEXXZ
?_Release@_ReentrantPPLLock@details@Concurrency@@QAEXXZ
?_ReleaseRead@_ReaderWriterLock@details@Concurrency@@QAEXXZ
?_ReleaseWrite@_ReaderWriterLock@details@Concurrency@@QAEXXZ
?_Reset@?$_SpinWait@$00@details@Concurrency@@IAEXXZ
?_Reset@?$_SpinWait@$0A@@details@Concurrency@@IAEXXZ
?_RunAndWait@_StructuredTaskCollection@details@Concurrency@@QAG?AW4_TaskCollectionStatus@23@PAV_UnrealizedChore@23@@Z
?_RunAndWait@_TaskCollection@details@Concurrency@@QAG?AW4_TaskCollectionStatus@23@PAV_UnrealizedChore@23@@Z
?_Schedule@_StructuredTaskCollection@details@Concurrency@@QAEXPAV_UnrealizedChore@23@@Z
?_Schedule@_TaskCollection@details@Concurrency@@QAEXPAV_UnrealizedChore@23@@Z
?_SetSpinCount@?$_SpinWait@$00@details@Concurrency@@QAEXI@Z
?_SetSpinCount@?$_SpinWait@$0A@@details@Concurrency@@QAEXI@Z
?_ShouldSpinAgain@?$_SpinWait@$00@details@Concurrency@@IAE_NXZ
?_ShouldSpinAgain@?$_SpinWait@$0A@@details@Concurrency@@IAE_NXZ
?_SpinOnce@?$_SpinWait@$00@details@Concurrency@@QAE_NXZ
?_SpinOnce@?$_SpinWait@$0A@@details@Concurrency@@QAE_NXZ
?_SpinYield@Context@Concurrency@@SAXXZ
?_Start@_Timer@details@Concurrency@@IAEXXZ
?_Stop@_Timer@details@Concurrency@@IAEXXZ
?_Tidy@exception@std@@AAEXXZ
?_Trace_ppl_function@Concurrency@@YAXABU_GUID@@EW4ConcRT_EventType@1@@Z
?_TryAcquire@_NonReentrantBlockingLock@details@Concurrency@@QAE_NXZ
?_TryAcquire@_ReentrantBlockingLock@details@Concurrency@@QAE_NXZ
?_TryAcquire@_ReentrantLock@details@Concurrency@@QAE_NXZ
?_TryAcquireWrite@_ReaderWriterLock@details@Concurrency@@QAE_NXZ
?_Type_info_dtor@type_info@@CAXPAV1@@Z
?_Type_info_dtor_internal@type_info@@CAXPAV1@@Z
?_UnderlyingYield@details@Concurrency@@YAXXZ
?_ValidateExecute@@YAHP6GHXZ@Z
?_ValidateRead@@YAHPBXI@Z
?_ValidateWrite@@YAHPAXI@Z
?_Value@_SpinCount@details@Concurrency@@SAIXZ
?__ExceptionPtrAssign@@YAXPAXPBX@Z
?__ExceptionPtrCompare@@YA_NPBX0@Z
?__ExceptionPtrCopy@@YAXPAXPBX@Z
?__ExceptionPtrCopyException@@YAXPAXPBX1@Z
?__ExceptionPtrCreate@@YAXPAX@Z
?__ExceptionPtrCurrentException@@YAXPAX@Z
?__ExceptionPtrDestroy@@YAXPAX@Z
?__ExceptionPtrRethrow@@YAXPBX@Z
?_inconsistency@@YAXXZ
?_invalid_parameter@@YAXPBG00II@Z
?_is_exception_typeof@@YAHABVtype_info@@PAU_EXCEPTION_POINTERS@@@Z
?_name_internal_method@type_info@@QBEPBDPAU__type_info_node@@@Z
?_open@@YAHPBDHH@Z
?_query_new_handler@@YAP6AHI@ZXZ
?_query_new_mode@@YAHXZ
?_set_new_handler@@YAP6AHI@ZH@Z
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
?_set_new_mode@@YAHH@Z
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZH@Z
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
?_sopen@@YAHPBDHHH@Z
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?_wopen@@YAHPB_WHH@Z
?_wsopen@@YAHPB_WHHH@Z
?before@type_info@@QBEHABV1@@Z
?get_error_code@scheduler_resource_allocation_error@Concurrency@@QBEJXZ
?lock@critical_section@Concurrency@@QAEXXZ
?lock@reader_writer_lock@Concurrency@@QAEXXZ
?lock_read@reader_writer_lock@Concurrency@@QAEXXZ
?name@type_info@@QBEPBDPAU__type_info_node@@@Z
?native_handle@critical_section@Concurrency@@QAEAAV12@XZ
?raw_name@type_info@@QBEPBDXZ
?reset@event@Concurrency@@QAEXXZ
?set@event@Concurrency@@QAEXXZ
?set_new_handler@@YAP6AXXZP6AXXZ@Z
?set_terminate@@YAP6AXXZH@Z
?set_terminate@@YAP6AXXZP6AXXZ@Z
?set_unexpected@@YAP6AXXZH@Z
?set_unexpected@@YAP6AXXZP6AXXZ@Z
?swprintf@@YAHPAGIPBGZZ
?swprintf@@YAHPA_WIPB_WZZ
?terminate@@YAXXZ
?try_lock@critical_section@Concurrency@@QAE_NXZ
?try_lock@reader_writer_lock@Concurrency@@QAE_NXZ
?try_lock_read@reader_writer_lock@Concurrency@@QAE_NXZ
?unexpected@@YAXXZ
?unlock@critical_section@Concurrency@@QAEXXZ
?unlock@reader_writer_lock@Concurrency@@QAEXXZ
?vswprintf@@YAHPA_WIPB_WPAD@Z
?wait@Concurrency@@YAXI@Z
?wait@event@Concurrency@@QAEII@Z
?wait_for_multiple@event@Concurrency@@SAIPAPAV12@I_NI@Z
?what@exception@std@@UBEPBDXZ
_CIacos
_CIasin
_CIatan
_CIatan2
_CIcos
_CIcosh
_CIexp
_CIfmod
_CIlog
_CIlog10
_CIpow
_CIsin
_CIsinh
_CIsqrt
_CItan
_CItanh
_CRT_RTC_INIT
_CRT_RTC_INITW
_CreateFrameInfo
_CxxThrowException
_EH_prolog
_FindAndUnlinkFrame
_Getdays
_Getmonths
_Gettnames
_HUGE
_IsExceptionObjectToBeDestroyed
_NLG_Dispatch2
_NLG_Return
_NLG_Return2
_Strftime
_XcptFilter
__AdjustPointer
__BuildCatchObject
__BuildCatchObjectHelper
__CppXcptFilter
__CxxCallUnwindDelDtor
__CxxCallUnwindDtor
__CxxCallUnwindStdDelDtor
__CxxCallUnwindVecDtor
__CxxDetectRethrow
__CxxExceptionFilter
__CxxFrameHandler
__CxxFrameHandler2
__CxxFrameHandler3
__CxxLongjmpUnwind
__CxxQueryExceptionSize
__CxxRegisterExceptionObject
__CxxUnregisterExceptionObject
__DestructExceptionObject
__FrameUnwindFilter
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__STRINGTOLD
__STRINGTOLD_L
__TypeMatch
___fls_getvalue@4
___fls_setvalue@8
___lc_codepage_func
___lc_collate_cp_func
___lc_handle_func
___mb_cur_max_func
___mb_cur_max_l_func
___setlc_active_func
___unguarded_readlc_active_add_func
__argc
__argv
__badioinfo
__clean_type_info_names_internal
__control87_2
__create_locale
__crtCompareStringA
__crtCompareStringW
__crtLCMapStringA
__crtLCMapStringW
__daylight
__dllonexit
__doserrno
__dstbias
__fpecode
__free_locale
__get_current_locale
__get_flsindex
__get_tlsindex
__getmainargs
__initenv
__iob_func
__isascii
__iscsym
__iscsymf
__iswcsym
__iswcsymf
__lconv
__lconv_init
__libm_sse2_acos
__libm_sse2_acosf
__libm_sse2_asin
__libm_sse2_asinf
__libm_sse2_atan
__libm_sse2_atan2
__libm_sse2_atanf
__libm_sse2_cos
__libm_sse2_cosf
__libm_sse2_exp
__libm_sse2_expf
__libm_sse2_log
__libm_sse2_log10
__libm_sse2_log10f
__libm_sse2_logf
__libm_sse2_pow
__libm_sse2_powf
__libm_sse2_sin
__libm_sse2_sinf
__libm_sse2_tan
__libm_sse2_tanf
__mb_cur_max
__p___argc
__p___argv
__p___initenv
__p___mb_cur_max
__p___wargv
__p___winitenv
__p__acmdln
__p__commode
__p__daylight
__p__dstbias
__p__environ
__p__fmode
__p__iob
__p__mbcasemap
__p__mbctype
__p__pctype
__p__pgmptr
__p__pwctype
__p__timezone
__p__tzname
__p__wcmdln
__p__wenviron
__p__wpgmptr
__pctype_func
__pioinfo
__pwctype_func
__pxcptinfoptrs
__report_gsfailure
__set_app_type
__set_flsgetvalue
__setlc_active
__setusermatherr
__strncnt
__swprintf_l
__sys_errlist
__sys_nerr
__threadhandle
__threadid
__timezone
__toascii
__tzname
__unDName
__unDNameEx
__unDNameHelper
__uncaught_exception
__unguarded_readlc_active
__vswprintf_l
__wargv
__wcserror
__wcserror_s
__wcsncnt
__wgetmainargs
__winitenv
_abnormal_termination
_abs64
_access
_access_s
_acmdln
_aligned_free
_aligned_malloc
_aligned_msize
_aligned_offset_malloc
_aligned_offset_realloc
_aligned_offset_recalloc
_aligned_realloc
_aligned_recalloc
_amsg_exit
_assert
_atodbl
_atodbl_l
_atof_l
_atoflt
_atoflt_l
_atoi64
_atoi64_l
_atoi_l
_atol_l
_atoldbl
_atoldbl_l
_beep
_beginthread
_beginthreadex
_byteswap_uint64
_byteswap_ulong
_byteswap_ushort
_c_exit
_cabs
_callnewh
_calloc_crt
_cexit
_cgets
_cgets_s
_cgetws
_cgetws_s
_chdir
_chdrive
_chgsign
_chkesp
_chmod
_chsize
_chsize_s
_clearfp
_close
_commit
_commode
_configthreadlocale
_control87
_controlfp
_controlfp_s
_copysign
_cprintf
_cprintf_l
_cprintf_p

Sections

.text
Size: 705KB - Virtual size: 705KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
mu_al.dll
.dll windows:5 windows x86 arch:x86

c094577139e04f599aceae5e08deddf2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

waveOutWrite
mciGetErrorStringA
waveOutOpen
mciSendStringA
timeGetTime
waveOutReset
waveOutUnprepareHeader
waveOutClose
waveOutPrepareHeader

rpcrt4

UuidFromStringA

kernel32

GetModuleHandleW
SetEndOfFile
SetEnvironmentVariableA
CompareStringW
CompareStringA
CreateFileA
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoW
GetDriveTypeA
GetModuleHandleA
OutputDebugStringA
Sleep
CreateEventA
CloseHandle
WaitForSingleObject
GetVersionExA
ResumeThread
SetThreadPriority
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetEvent
QueryPerformanceCounter
QueryPerformanceFrequency
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
InitializeCriticalSectionAndSpinCount
LoadLibraryA
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
InterlockedExchange
MultiByteToWideChar
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetLastError
HeapFree
HeapAlloc
HeapReAlloc
ExitThread
GetCurrentThreadId
CreateThread
GetCommandLineA
GetProcessHeap
GetProcAddress
ExitProcess
LCMapStringA
LCMapStringW
GetCPInfo
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
WriteFile
GetStdHandle
GetModuleFileNameA
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetHandleCount
GetFileType
GetStartupInfoA
HeapSize
HeapCreate
HeapDestroy
VirtualFree
VirtualAlloc
ReadFile
SetFilePointer
GetACP
GetOEMCP
IsValidCodePage
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime

user32

DestroyWindow
SetWindowLongA
GetWindowLongA
CreateWindowExA
DefWindowProcA
RegisterClassA

ole32

CoInitialize
CoUninitialize
CoCreateInstance

Exports

Exports

_AdrCreateLoopPointSource@4
_AdrCreateMemoryFile@8
_AdrCreatePinkNoise@0
_AdrCreateSampleBuffer@20
_AdrCreateSampleBufferFromSource@4
_AdrCreateSquareWave@8
_AdrCreateTone@8
_AdrCreateWhiteNoise@0
_AdrEnumerateCDDevices@0
_AdrGetSampleSize@4
_AdrGetSupportedAudioDevices@0
_AdrGetSupportedFileFormats@0
_AdrGetVersion@0
_AdrOpenCDDevice@4
_AdrOpenDevice@8
_AdrOpenFile@8
_AdrOpenMIDIDevice@4
_AdrOpenSampleSource@8
_AdrOpenSampleSourceFromFile@8
_AdrOpenSound@12
_AdrOpenSoundEffect@12

Sections

.text
Size: 514KB - Virtual size: 514KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
mumsg.dll
.dll windows:4 windows x86 arch:x86

6bdd810e99dea218ea8ba34db49abd74

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

wsprintfA
MessageBoxA

kernel32

HeapDestroy
GetVersionExA
RtlUnwind
GetCommandLineA
GetVersion
EnterCriticalSection
LeaveCriticalSection
GetLastError
ReadFile
HeapFree
CloseHandle
InitializeCriticalSection
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
SetEndOfFile
HeapCreate
VirtualFree
WriteFile
SetStdHandle
SetFilePointer
VirtualAlloc
HeapReAlloc
FlushFileBuffers
CreateFileA
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement

Exports

Exports

??0CMsg@@QAE@XZ
??1CMsg@@QAE@XZ
??4CMsg@@QAEAAV0@ABV0@@Z
?DataFileLoadVer01@CMsg@@AAEXPAU_iobuf@@@Z
?Get@CMsg@@QAEPADH@Z
?LoadWTF@CMsg@@QAEXPAD@Z
?XorBuffer@CMsg@@AAEXPADH@Z
?fnMsg@@YAHXZ
?lMsgFree@CMsg@@AAEXXZ
?lMsgListAdd@CMsg@@AAEHHPAE@Z
?lMsgListInit@CMsg@@AAEHXZ
?lMsgListNew@CMsg@@AAEPAUMSG_STRUCT@@XZ
?lMsgListPrint@CMsg@@QAEXXZ
?nMsg@@3HA

Sections

.text
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
npchk.dll
.dll windows:4 windows x86 arch:x86

6df0c2538626ddf56ed2e6671e5ded88

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
CreateFileA
ReadFile
FreeEnvironmentStringsA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
CloseHandle
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
RtlUnwind

advapi32

CryptReleaseContext
CryptDestroyHash
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptAcquireContextA

Exports

Exports

CheckCRC

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
npcipher.dll
.dll windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DataDecryption
DataEncryption

Sections

UPX0
Size: - Virtual size: 80KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 50KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.dll windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 103B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
npgmup.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

text
Size: - Virtual size: 92KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: 55KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nppsk.dll
.dll windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

KillTask

Sections

UPX0
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.dll windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 69B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
npupdate0.dll
.dll windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

LoadUpdateModule

Sections

UPX0
Size: - Virtual size: 264KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 154KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.dll windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 320KB - Virtual size: 319KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 81B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
npx.dll
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

UPX0
Size: - Virtual size: 196KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 172KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ogg.dll
.dll windows:4 windows x86 arch:x86

6735c42b0686b3434395406c0333d3d6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapAlloc
HeapReAlloc
HeapFree
GetCommandLineA
GetVersion
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
RtlUnwind
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Exports

Exports

ogg_packet_clear
ogg_page_bos
ogg_page_continued
ogg_page_eos
ogg_page_granulepos
ogg_page_packets
ogg_page_pageno
ogg_page_serialno
ogg_page_version
ogg_stream_clear
ogg_stream_destroy
ogg_stream_eos
ogg_stream_flush
ogg_stream_init
ogg_stream_packetin
ogg_stream_packetout
ogg_stream_packetpeek
ogg_stream_pagein
ogg_stream_pageout
ogg_stream_reset
ogg_stream_reset_serialno
ogg_sync_buffer
ogg_sync_clear
ogg_sync_destroy
ogg_sync_init
ogg_sync_pageout
ogg_sync_pageseek
ogg_sync_reset
ogg_sync_wrote
oggpack_adv
oggpack_adv1
oggpack_bits
oggpack_bytes
oggpack_get_buffer
oggpack_look
oggpack_look1
oggpack_read
oggpack_read1
oggpack_readinit
oggpack_reset
oggpack_write
oggpack_writealign
oggpack_writeclear
oggpack_writeinit

Sections

.text
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
vorbisfile.dll
.dll windows:4 windows x86 arch:x86

b6220e63fcea816421d3355524337df0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ogg

ogg_stream_packetpeek
ogg_page_continued
ogg_stream_reset
ogg_page_eos
ogg_page_granulepos
ogg_sync_reset
ogg_sync_pageseek
ogg_page_serialno
ogg_stream_reset_serialno
ogg_stream_pagein
ogg_stream_packetout
ogg_sync_init
ogg_sync_buffer
ogg_sync_wrote
ogg_stream_init
ogg_stream_clear
ogg_sync_clear
oggpack_writealign
oggpack_readinit
oggpack_look
oggpack_adv
oggpack_read
oggpack_write
oggpack_writeclear
oggpack_writeinit
oggpack_bytes

msvcrt

_adjust_fdiv
_initterm
fseek
fread
ftell
_errno
ldexp
ceil
frexp
exit
qsort
realloc
malloc
floor
free
calloc
_CIpow
_ftol
fclose

kernel32

DisableThreadLibraryCalls

Exports

Exports

ov_bitrate
ov_bitrate_instant
ov_clear
ov_comment
ov_info
ov_open
ov_open_callbacks
ov_pcm_seek
ov_pcm_seek_page
ov_pcm_tell
ov_pcm_total
ov_raw_seek
ov_raw_tell
ov_raw_total
ov_read
ov_read_float
ov_seekable
ov_serialnumber
ov_streams
ov_test
ov_test_callbacks
ov_test_open
ov_time_seek
ov_time_seek_page
ov_time_tell
ov_time_total

Sections

.text
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 892KB - Virtual size: 904KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
wsctlc.dll
.dll windows:4 windows x86 arch:x86

e0463f9ec9b80d13e5f81b2f72ff2d10

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

MessageBoxA
wsprintfA

ws2_32

socket
send
htons
inet_addr
gethostbyname
connect
WSAAsyncSelect
WSAGetLastError
shutdown
recv
closesocket
WSAStartup
WSACleanup

kernel32

GetModuleHandleA
GetEnvironmentVariableA
GetModuleFileNameA
InterlockedIncrement
InterlockedDecrement
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetStringTypeW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetCPInfo
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetProcAddress
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
LCMapStringW
GetStringTypeA
LoadLibraryA
RtlUnwind
MultiByteToWideChar
LCMapStringA

Exports

Exports

??0CWsctlc@@QAE@XZ
??1CWsctlc@@QAE@XZ
??4CWsctlc@@QAEAAV0@ABV0@@Z
?AddStack@CWsctlc@@AAEHPAEH@Z
?Cleanup@CWsctlc@@QAEXXZ
?Close@CWsctlc@@QAEHAAI@Z
?Close@CWsctlc@@QAEHXZ
?Connect@CWsctlc@@QAEHPADGK@Z
?Create@CWsctlc@@QAEHPAUHWND__@@@Z
?FDWriteSend@CWsctlc@@QAEHXZ
?GetReadMsg@CWsctlc@@QAEPAEXZ
?GetSocket@CWsctlc@@QAEIXZ
?LogHexPrint@CWsctlc@@QAEXPAEH@Z
?LogPrint@CWsctlc@@QAAXPADZZ
?LogPrintOff@CWsctlc@@QAEXXZ
?LogPrintOn@CWsctlc@@QAEXXZ
?ShutdownConnection@CWsctlc@@AAEHI@Z
?Startup@CWsctlc@@QAEHXZ
?fnWsctlc@@YAHXZ
?nRecv@CWsctlc@@QAEHXZ
?nWsctlc@@3HA
?sSend@CWsctlc@@QAEHIPADH@Z
?sSend@CWsctlc@@QAEHPADH@Z

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
wsctlcd.dll
.dll windows:4 windows x86 arch:x86

93a03327866c3ac9111d82716cb9e7f4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

MessageBoxA
wsprintfA

ws2_32

connect
recv
send
htons
inet_addr
gethostbyname
WSAAsyncSelect
closesocket
socket
WSAGetLastError
WSAStartup
WSACleanup

kernel32

IsBadReadPtr
HeapValidate
GetCurrentThread
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoW
GetTimeZoneInformation
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
SetStdHandle
CloseHandle
GetCommandLineA
GetVersion
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
EnterCriticalSection
LeaveCriticalSection
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
LCMapStringW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
IsBadWritePtr
FatalAppExitA
InitializeCriticalSection
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
HeapFree
VirtualFree
SetConsoleCtrlHandler
GetStringTypeW
LCMapStringA
UnhandledExceptionFilter
RtlUnwind
HeapAlloc
HeapReAlloc
VirtualAlloc
GetCPInfo
GetACP
GetOEMCP
FlushFileBuffers
Sleep
SetFilePointer
MultiByteToWideChar
GetStringTypeA

Exports

Exports

??0CWsctlc@@QAE@XZ
??1CWsctlc@@QAE@XZ
??4CWsctlc@@QAEAAV0@ABV0@@Z
?AddStack@CWsctlc@@AAEHPAEH@Z
?Cleanup@CWsctlc@@QAEXXZ
?Close@CWsctlc@@QAEHAAI@Z
?Close@CWsctlc@@QAEHXZ
?Connect@CWsctlc@@QAEHPADGK@Z
?Create@CWsctlc@@QAEHPAUHWND__@@@Z
?FDWriteSend@CWsctlc@@QAEHXZ
?GetReadMsg@CWsctlc@@QAEPAEXZ
?GetSocket@CWsctlc@@QAEIXZ
?LogHexPrint@CWsctlc@@QAEXPAEH@Z
?LogPrintOff@CWsctlc@@QAEXXZ
?LogPrintOn@CWsctlc@@QAEXXZ
?Startup@CWsctlc@@QAEHXZ
?fnWsctlc@@YAHXZ
?nRecv@CWsctlc@@QAEHXZ
?nWsctlc@@3HA
?sSend@CWsctlc@@QAEHIPADH@Z
?sSend@CWsctlc@@QAEHPADH@Z

Sections

.text
Size: 176KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
wzAudio.dll
.dll windows:4 windows x86 arch:x86

2812bc594b86151ba488c2abfb4e07ec

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetEvent
EnterCriticalSection
WaitForSingleObject
GetModuleFileNameA
GetFileAttributesA
GetModuleHandleA
CreateThread
TerminateThread
lstrcpynA
SetFilePointer
ReadFile
CreateFileA
FreeLibrary
GetProcAddress
LoadLibraryA
FindClose
FindNextFileA
LeaveCriticalSection
lstrcmpiA
SetThreadPriority
GetCurrentThread
VirtualAlloc
VirtualFree
Sleep
GetFileSize
SetEnvironmentVariableA
CompareStringW
CompareStringA
CloseHandle
SetEndOfFile
RaiseException
FlushFileBuffers
FindFirstFileA
DeleteCriticalSection
SetStdHandle
InterlockedIncrement
InterlockedDecrement
CreateEventA
InitializeCriticalSection
lstrcpyA
lstrcatA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
WriteFile
GetOEMCP
GetACP
lstrlenA
GetCPInfo
RtlUnwind
ExitProcess
HeapReAlloc
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
SetLastError
TlsFree
TlsAlloc
GetVersion
GetCommandLineA
ExitThread
TlsGetValue
TlsSetValue
GetCurrentThreadId
GetTimeZoneInformation
GetSystemTime
GetLocalTime
HeapAlloc
HeapFree
GetLastError

user32

MsgWaitForMultipleObjects
DefWindowProcA
DestroyWindow
CreateWindowExA
RegisterClassExA
PostThreadMessageA
PostMessageA
SetTimer
WaitMessage
GetWindowLongA
PeekMessageA

gdi32

DeleteObject

ole32

CoUninitialize
CoInitialize

advapi32

RegCreateKeyExA
RegSetValueExA
RegCloseKey

winmm

waveOutGetNumDevs
waveOutSetVolume
waveOutPause
waveOutWrite
waveOutRestart
waveOutReset
waveOutUnprepareHeader
waveOutPrepareHeader
timeSetEvent
timeKillEvent
mixerGetControlDetailsA
mixerSetControlDetails
waveOutOpen
mixerOpen
mixerGetDevCapsA
mixerGetLineInfoA
mixerGetLineControlsA
waveOutClose
mixerClose

dsound

ord1

wininet

InternetCloseHandle
InternetOpenUrlA
InternetOpenA
InternetSetOptionA
InternetReadFileExA

comdlg32

GetSaveFileNameA
GetOpenFileNameA

vorbisfile

ov_time_total
ov_bitrate
ov_info
ov_streams
ov_open_callbacks
ov_clear
ov_pcm_seek
ov_pcm_total
ov_read
ov_time_tell

Exports

Exports

wzAudioCreate
wzAudioDestroy
wzAudioGetStreamInfo
wzAudioGetStreamOffsetRange
wzAudioGetStreamOffsetSec
wzAudioGetVolume
wzAudioOpenFile
wzAudioOption
wzAudioPause
wzAudioPlay
wzAudioSeek
wzAudioSetEqualizer
wzAudioSetMixerMode
wzAudioSetVolume
wzAudioStop
wzAudioVolumeDown
wzAudioVolumeUp

Sections

.text
Size: 92KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
wz_zp.dll
.dll windows:4 windows x86 arch:x86

c4ff1c06e0b4fa267d2b363da567d1f9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetVersionExA
CloseHandle
ReadFile
CreateFileA
HeapCreate
GetCPInfo
EnterCriticalSection
LeaveCriticalSection
ExitProcess
TerminateProcess
GetCurrentProcess
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetCommandLineA
GetVersion
DebugBreak
GetStdHandle
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
InitializeCriticalSection
FatalAppExitA
GetModuleHandleA
RtlUnwind
HeapAlloc
HeapReAlloc
HeapFree
GetLastError
VirtualFree
VirtualAlloc
GetEnvironmentVariableA
WriteFile
HeapDestroy
GetEnvironmentStringsW
GetEnvironmentStrings
GetACP
GetOEMCP
FlushFileBuffers
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetCurrentThread
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
CompareStringW
SetEnvironmentVariableA
SetConsoleCtrlHandler
LCMapStringA
LCMapStringW
SetFilePointer
SetStdHandle
UnhandledExceptionFilter
Sleep
SetEndOfFile
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetTimeZoneInformation
GetLocaleInfoW
CompareStringA

user32

wsprintfA

Exports

Exports

BZ2_bzBuffToBuffCompress
BZ2_bzBuffToBuffDecompress
BZ2_bzCompress
BZ2_bzCompressEnd
BZ2_bzCompressInit
BZ2_bzDecompress
BZ2_bzDecompressEnd
BZ2_bzDecompressInit
BZ2_bzRead
BZ2_bzReadClose
BZ2_bzReadGetUnused
BZ2_bzReadOpen
BZ2_bzWrite
BZ2_bzWriteClose
BZ2_bzWriteClose64
BZ2_bzWriteOpen
BZ2_bzclose
BZ2_bzdopen
BZ2_bzerror
BZ2_bzflush
BZ2_bzlibVersion
BZ2_bzopen
BZ2_bzread
BZ2_bzwrite
WZCompressFile
WZDecompressFile

Sections

.text
Size: 316KB - Virtual size: 312KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

CODE Size: 535KB - Virtual size: 534KB

DATA Size: 10KB - Virtual size: 10KB

BSS Size: - Virtual size: 3KB

.idata Size: 10KB - Virtual size: 10KB

.tls Size: - Virtual size: 16B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 32KB - Virtual size: 32KB

.rsrc Size: 774KB - Virtual size: 774KB

Headers

DLL Characteristics

File Characteristics

Sections

Size: 75KB - Virtual size: 328KB

.rsrc Size: 1024B - Virtual size: 1KB

.idata Size: 512B - Virtual size: 4KB

Themida Size: 797KB - Virtual size: 1.8MB

5b42f5f6ea9f57742e9dc3cfde8c538c

Headers

File Characteristics

Imports

imm32

dsound

opengl32

glu32

winmm

kernel32

user32

gdi32

advapi32

shell32

ole32

ws2_32

version

wzaudio

mu_al

wininet

urlmon

Sections

.text Size: 5.1MB - Virtual size: 5.1MB

.rdata Size: 216KB - Virtual size: 212KB

.data Size: 216KB - Virtual size: 137.3MB

.rsrc Size: 12KB - Virtual size: 8KB

9d120818772f6f1b105f47e936c2eee9

Headers

File Characteristics

Imports

user32

advapi32

kernel32

version

gdi32

Exports

Exports

Sections

.text Size: 80KB - Virtual size: 79KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 16KB - Virtual size: 18KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 8KB - Virtual size: 4KB

5271d5ce8b44dd47bc92563e27585466

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate

Extended Key Usages

Key Usages

61:01:cf:3e:00:00:00:00:00:0fCertificate

Extended Key Usages

Key Usages

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate

Extended Key Usages

Key Usages

61:05:a2:30:00:00:00:00:00:08Certificate

Extended Key Usages

CODE
Size: 535KB - Virtual size: 534KB

DATA
Size: 10KB - Virtual size: 10KB

BSS
Size: - Virtual size: 3KB

.idata
Size: 10KB - Virtual size: 10KB

.tls
Size: - Virtual size: 16B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 32KB - Virtual size: 32KB

.rsrc
Size: 774KB - Virtual size: 774KB

.rsrc
Size: 1024B - Virtual size: 1KB

.idata
Size: 512B - Virtual size: 4KB

Themida
Size: 797KB - Virtual size: 1.8MB

.text
Size: 5.1MB - Virtual size: 5.1MB

.rdata
Size: 216KB - Virtual size: 212KB

.data
Size: 216KB - Virtual size: 137.3MB

.rsrc
Size: 12KB - Virtual size: 8KB

.text
Size: 80KB - Virtual size: 79KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 16KB - Virtual size: 18KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 8KB - Virtual size: 4KB

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

61:01:cf:3e:00:00:00:00:00:0f
Certificate

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

61:05:a2:30:00:00:00:00:00:08
Certificate

42:49:74:54:aa:4d:83:7a:e5:5d:a1:1f:f1:e8:b6:0a:d3:24:a0:ae
Signer

.text
Size: 705KB - Virtual size: 705KB

.data
Size: 19KB - Virtual size: 22KB

.rsrc
Size: 1024B - Virtual size: 1008B

.reloc
Size: 19KB - Virtual size: 19KB

.text
Size: 514KB - Virtual size: 514KB

.rdata
Size: 82KB - Virtual size: 82KB

.data
Size: 55KB - Virtual size: 111KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 21KB - Virtual size: 21KB

.text
Size: 24KB - Virtual size: 22KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 17KB

.reloc
Size: 4KB - Virtual size: 3KB

.text
Size: 12KB - Virtual size: 11KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 1KB

UPX0
Size: - Virtual size: 80KB

UPX1
Size: 50KB - Virtual size: 52KB

.rsrc
Size: 3KB - Virtual size: 4KB