Extracted

• Executor.zip

  .zip
• Main/CED3D10Hook.dll

  .dll windows:5 windows x86 arch:x86

  54e6baf4a7fc30cce7ae3af2ae401782

  
  

  Code Sign

  01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

  Certificate

  Issuer

  CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

  Not Before

  19/09/2018, 00:00 UTC

  Not After

  28/01/2028, 12:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  28/07/2020, 00:00 UTC

  Not After

  18/03/2029, 00:00 UTC

  Subject

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  30:38:81:1f:dd:43:0a:77:db:5b:3c:c2

  Certificate

  Issuer

  CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

  Not Before

  13/04/2021, 18:52 UTC

  Not After

  04/07/2022, 16:21 UTC

  Subject

  SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

  Certificate

  Issuer

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Not Before

  28/07/2020, 00:00 UTC

  Not After

  28/07/2030, 00:00 UTC

  Subject

  CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f

  Certificate

  Issuer

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Not Before

  27/05/2021, 09:55 UTC

  Not After

  28/06/2032, 09:55 UTC

  Subject

  CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Not Before

  20/06/2018, 00:00 UTC

  Not After

  10/12/2034, 00:00 UTC

  Subject

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  20/02/2019, 00:00 UTC

  Not After

  18/03/2029, 10:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  04:00:00:00:00:01:21:58:53:08:a2

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  18/03/2009, 10:00 UTC

  Not After

  18/03/2029, 10:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

  Certificate

  Issuer

  CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

  Not Before

  19/09/2018, 00:00 UTC

  Not After

  28/01/2028, 12:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  28/07/2020, 00:00 UTC

  Not After

  18/03/2029, 00:00 UTC

  Subject

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  30:38:81:1f:dd:43:0a:77:db:5b:3c:c2

  Certificate

  Issuer

  CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

  Not Before

  13/04/2021, 18:52 UTC

  Not After

  04/07/2022, 16:21 UTC

  Subject

  SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

  Certificate

  Issuer

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Not Before

  28/07/2020, 00:00 UTC

  Not After

  28/07/2030, 00:00 UTC

  Subject

  CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f

  Certificate

  Issuer

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Not Before

  27/05/2021, 09:55 UTC

  Not After

  28/06/2032, 09:55 UTC

  Subject

  CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Not Before

  20/06/2018, 00:00 UTC

  Not After

  10/12/2034, 00:00 UTC

  Subject

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  20/02/2019, 00:00 UTC

  Not After

  18/03/2029, 10:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  04:00:00:00:00:01:21:58:53:08:a2

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  18/03/2009, 10:00 UTC

  Not After

  18/03/2029, 10:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  bd:be:1c:37:94:22:c4:12:f9:57:59:9d:9e:d9:69:c8:c7:5f:45:5f:29:42:f7:33:31:0f:d9:ff:d0:95:ea:13

  Signer

  Actual PE Digest

  bd:be:1c:37:94:22:c4:12:f9:57:59:9d:9e:d9:69:c8:c7:5f:45:5f:29:42:f7:33:31:0f:d9:ff:d0:95:ea:13

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  90:9d:b0:40:58:f8:27:4b:fc:2f:c8:ee:82:5b:7c:3e:02:83:20:b1

  Signer

  Actual PE Digest

  90:9d:b0:40:58:f8:27:4b:fc:2f:c8:ee:82:5b:7c:3e:02:83:20:b1

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  f:\svn\Cheat Engine\bin\CED3D10Hook.pdb

  Imports

  d3dx10_43

  D3DXMatrixRotationZ

  D3DX10CompileFromFileA

  D3DX10CreateTextureFromMemory

  D3DX10SaveTextureToMemory

  D3DX10SaveTextureToFileA

  kernel32

  VirtualFree

  FlushFileBuffers

  CreateFileA

  WriteFile

  VirtualQuery

  CloseHandle

  WaitForSingleObject

  OutputDebugStringA

  SetEvent

  GetTickCount

  WriteConsoleW

  GetConsoleOutputCP

  WriteConsoleA

  SetStdHandle

  HeapAlloc

  GetLastError

  HeapReAlloc

  HeapFree

  TerminateProcess

  GetCurrentProcess

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  IsDebuggerPresent

  GetCurrentThreadId

  GetCommandLineA

  RaiseException

  RtlUnwind

  GetModuleHandleW

  GetProcAddress

  TlsGetValue

  TlsAlloc

  TlsSetValue

  TlsFree

  InterlockedIncrement

  SetLastError

  InterlockedDecrement

  Sleep

  HeapSize

  ExitProcess

  DeleteCriticalSection

  LeaveCriticalSection

  EnterCriticalSection

  GetModuleHandleA

  VirtualAlloc

  HeapCreate

  HeapDestroy

  GetStdHandle

  GetModuleFileNameA

  SetHandleCount

  GetFileType

  GetStartupInfoA

  FreeEnvironmentStringsA

  GetEnvironmentStrings

  FreeEnvironmentStringsW

  WideCharToMultiByte

  GetEnvironmentStringsW

  QueryPerformanceCounter

  GetCurrentProcessId

  GetSystemTimeAsFileTime

  GetCPInfo

  GetACP

  GetOEMCP

  IsValidCodePage

  LoadLibraryA

  InitializeCriticalSectionAndSpinCount

  SetFilePointer

  GetConsoleCP

  GetConsoleMode

  GetLocaleInfoA

  GetStringTypeA

  MultiByteToWideChar

  GetStringTypeW

  LCMapStringA

  LCMapStringW

  user32

  GetClientRect

  GetAsyncKeyState

  ScreenToClient

  GetCursorPos

  Exports

  Exports

  D3D10Hook_DrawAuto_imp

  D3D10Hook_DrawIndexedInstanced_imp

  D3D10Hook_DrawIndexed_imp

  D3D10Hook_DrawInstanced_imp

  D3D10Hook_Draw_imp

  D3D10Hook_SwapChain_Present_imp

  D3D10Hook_SwapChain_ResizeBuffers_imp

  Sections

  .text

  Size: 75KB - Virtual size: 75KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 13KB - Virtual size: 12KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 5KB - Virtual size: 12KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 512B - Virtual size: 436B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 7KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Main/CED3D10Hook64.dll

  .dll windows:5 windows x64 arch:x64

  9ecc17e8125484bf6d22b853aa6333a7

  
  

  Code Sign

  01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

  Certificate

  Issuer

  CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

  Not Before

  19/09/2018, 00:00 UTC

  Not After

  28/01/2028, 12:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  28/07/2020, 00:00 UTC

  Not After

  18/03/2029, 00:00 UTC

  Subject

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  30:38:81:1f:dd:43:0a:77:db:5b:3c:c2

  Certificate

  Issuer

  CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

  Not Before

  13/04/2021, 18:52 UTC

  Not After

  04/07/2022, 16:21 UTC

  Subject

  SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

  Certificate

  Issuer

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Not Before

  28/07/2020, 00:00 UTC

  Not After

  28/07/2030, 00:00 UTC

  Subject

  CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f

  Certificate

  Issuer

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Not Before

  27/05/2021, 09:55 UTC

  Not After

  28/06/2032, 09:55 UTC

  Subject

  CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Not Before

  20/06/2018, 00:00 UTC

  Not After

  10/12/2034, 00:00 UTC

  Subject

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  20/02/2019, 00:00 UTC

  Not After

  18/03/2029, 10:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  04:00:00:00:00:01:21:58:53:08:a2

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  18/03/2009, 10:00 UTC

  Not After

  18/03/2029, 10:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

  Certificate

  Issuer

  CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

  Not Before

  19/09/2018, 00:00 UTC

  Not After

  28/01/2028, 12:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  28/07/2020, 00:00 UTC

  Not After

  18/03/2029, 00:00 UTC

  Subject

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  30:38:81:1f:dd:43:0a:77:db:5b:3c:c2

  Certificate

  Issuer

  CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

  Not Before

  13/04/2021, 18:52 UTC

  Not After

  04/07/2022, 16:21 UTC

  Subject

  SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

  Certificate

  Issuer

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Not Before

  28/07/2020, 00:00 UTC

  Not After

  28/07/2030, 00:00 UTC

  Subject

  CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f

  Certificate

  Issuer

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Not Before

  27/05/2021, 09:55 UTC

  Not After

  28/06/2032, 09:55 UTC

  Subject

  CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Not Before

  20/06/2018, 00:00 UTC

  Not After

  10/12/2034, 00:00 UTC

  Subject

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  20/02/2019, 00:00 UTC

  Not After

  18/03/2029, 10:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  04:00:00:00:00:01:21:58:53:08:a2

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  18/03/2009, 10:00 UTC

  Not After

  18/03/2029, 10:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  ac:0e:d5:0f:7b:93:84:98:5d:ad:8e:3d:e1:92:46:cf:1b:09:ba:54:93:90:74:92:c2:60:3e:5b:1a:39:5a:5d

  Signer

  Actual PE Digest

  ac:0e:d5:0f:7b:93:84:98:5d:ad:8e:3d:e1:92:46:cf:1b:09:ba:54:93:90:74:92:c2:60:3e:5b:1a:39:5a:5d

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  16:11:4c:cc:ce:00:52:f1:da:59:c0:20:76:16:ac:65:32:89:4f:b5

  Signer

  Actual PE Digest

  16:11:4c:cc:ce:00:52:f1:da:59:c0:20:76:16:ac:65:32:89:4f:b5

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  f:\svn\Cheat Engine\bin\CED3D10Hook64.pdb

  Imports

  d3dx10_43

  D3DXMatrixRotationZ

  D3DX10CompileFromFileA

  D3DX10CreateTextureFromMemory

  D3DX10SaveTextureToMemory

  D3DX10SaveTextureToFileA

  kernel32

  GetStdHandle

  FlushFileBuffers

  WriteConsoleW

  CreateFileA

  WriteFile

  VirtualQuery

  CloseHandle

  WaitForSingleObject

  OutputDebugStringA

  SetEvent

  GetTickCount

  GetConsoleOutputCP

  WriteConsoleA

  SetStdHandle

  LCMapStringW

  HeapAlloc

  GetLastError

  HeapReAlloc

  HeapFree

  TerminateProcess

  GetCurrentProcess

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  IsDebuggerPresent

  RtlVirtualUnwind

  RtlLookupFunctionEntry

  RtlCaptureContext

  GetCurrentThreadId

  FlsSetValue

  GetCommandLineA

  RaiseException

  RtlPcToFileHeader

  RtlUnwindEx

  EncodePointer

  DecodePointer

  FlsGetValue

  FlsFree

  SetLastError

  FlsAlloc

  Sleep

  HeapSize

  GetModuleHandleW

  GetProcAddress

  ExitProcess

  GetModuleFileNameA

  HeapSetInformation

  HeapCreate

  HeapDestroy

  SetHandleCount

  GetFileType

  GetStartupInfoA

  DeleteCriticalSection

  FreeEnvironmentStringsA

  GetEnvironmentStrings

  FreeEnvironmentStringsW

  WideCharToMultiByte

  GetEnvironmentStringsW

  QueryPerformanceCounter

  GetCurrentProcessId

  GetSystemTimeAsFileTime

  LeaveCriticalSection

  EnterCriticalSection

  GetCPInfo

  GetACP

  GetOEMCP

  IsValidCodePage

  LoadLibraryA

  InitializeCriticalSectionAndSpinCount

  SetFilePointer

  GetConsoleCP

  GetConsoleMode

  GetLocaleInfoA

  GetStringTypeA

  MultiByteToWideChar

  GetStringTypeW

  LCMapStringA

  user32

  GetClientRect

  GetAsyncKeyState

  ScreenToClient

  GetCursorPos

  Exports

  Exports

  D3D10Hook_DrawAuto_imp

  D3D10Hook_DrawIndexedInstanced_imp

  D3D10Hook_DrawIndexed_imp

  D3D10Hook_DrawInstanced_imp

  D3D10Hook_Draw_imp

  D3D10Hook_SwapChain_Present_imp

  D3D10Hook_SwapChain_ResizeBuffers_imp

  Sections

  .text

  Size: 81KB - Virtual size: 81KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 19KB - Virtual size: 18KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 7KB - Virtual size: 15KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 4KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 512B - Virtual size: 436B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Main/CED3D11Hook.dll

  .dll windows:5 windows x86 arch:x86

  a3258c6ee97d726a9efc2336a95f2c30

  
  

  Code Sign

  01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

  Certificate

  Issuer

  CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

  Not Before

  19/09/2018, 00:00 UTC

  Not After

  28/01/2028, 12:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  28/07/2020, 00:00 UTC

  Not After

  18/03/2029, 00:00 UTC

  Subject

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  30:38:81:1f:dd:43:0a:77:db:5b:3c:c2

  Certificate

  Issuer

  CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

  Not Before

  13/04/2021, 18:52 UTC

  Not After

  04/07/2022, 16:21 UTC

  Subject

  SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

  Certificate

  Issuer

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Not Before

  28/07/2020, 00:00 UTC

  Not After

  28/07/2030, 00:00 UTC

  Subject

  CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f

  Certificate

  Issuer

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Not Before

  27/05/2021, 09:55 UTC

  Not After

  28/06/2032, 09:55 UTC

  Subject

  CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Not Before

  20/06/2018, 00:00 UTC

  Not After

  10/12/2034, 00:00 UTC

  Subject

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  20/02/2019, 00:00 UTC

  Not After

  18/03/2029, 10:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  04:00:00:00:00:01:21:58:53:08:a2

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  18/03/2009, 10:00 UTC

  Not After

  18/03/2029, 10:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

  Certificate

  Issuer

  CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

  Not Before

  19/09/2018, 00:00 UTC

  Not After

  28/01/2028, 12:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  28/07/2020, 00:00 UTC

  Not After

  18/03/2029, 00:00 UTC

  Subject

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  30:38:81:1f:dd:43:0a:77:db:5b:3c:c2

  Certificate

  Issuer

  CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

  Not Before

  13/04/2021, 18:52 UTC

  Not After

  04/07/2022, 16:21 UTC

  Subject

  SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

  Certificate

  Issuer

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Not Before

  28/07/2020, 00:00 UTC

  Not After

  28/07/2030, 00:00 UTC

  Subject

  CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f

  Certificate

  Issuer

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Not Before

  27/05/2021, 09:55 UTC

  Not After

  28/06/2032, 09:55 UTC

  Subject

  CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Not Before

  20/06/2018, 00:00 UTC

  Not After

  10/12/2034, 00:00 UTC

  Subject

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  20/02/2019, 00:00 UTC

  Not After

  18/03/2029, 10:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  04:00:00:00:00:01:21:58:53:08:a2

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  18/03/2009, 10:00 UTC

  Not After

  18/03/2029, 10:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  05:cc:b3:71:9c:07:8b:4b:84:b6:b8:13:d6:43:81:62:1b:a7:ee:3f:04:77:d4:62:d4:0d:8f:91:ac:16:7b:19

  Signer

  Actual PE Digest

  05:cc:b3:71:9c:07:8b:4b:84:b6:b8:13:d6:43:81:62:1b:a7:ee:3f:04:77:d4:62:d4:0d:8f:91:ac:16:7b:19

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  1c:27:96:c2:8f:cf:24:e6:9d:e0:46:2f:b9:64:6f:47:a6:69:f9:2f

  Signer

  Actual PE Digest

  1c:27:96:c2:8f:cf:24:e6:9d:e0:46:2f:b9:64:6f:47:a6:69:f9:2f

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  f:\svn\Cheat Engine\bin\CED3D11Hook.pdb

  Imports

  d3dx11_43

  D3DX11CompileFromFileA

  D3DX11CreateTextureFromMemory

  D3DX11SaveTextureToMemory

  D3DX11SaveTextureToFileA

  kernel32

  VirtualFree

  FlushFileBuffers

  EnterCriticalSection

  CreateFileA

  WriteFile

  VirtualQuery

  CloseHandle

  LeaveCriticalSection

  WaitForSingleObject

  OutputDebugStringA

  SetEvent

  InitializeCriticalSection

  GetTickCount

  WriteConsoleW

  GetConsoleOutputCP

  WriteConsoleA

  SetStdHandle

  HeapAlloc

  GetLastError

  HeapReAlloc

  HeapFree

  TerminateProcess

  GetCurrentProcess

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  IsDebuggerPresent

  GetCurrentThreadId

  GetCommandLineA

  RaiseException

  RtlUnwind

  GetModuleHandleW

  GetProcAddress

  TlsGetValue

  TlsAlloc

  TlsSetValue

  TlsFree

  InterlockedIncrement

  SetLastError

  InterlockedDecrement

  Sleep

  HeapSize

  ExitProcess

  DeleteCriticalSection

  GetModuleHandleA

  VirtualAlloc

  HeapCreate

  HeapDestroy

  GetStdHandle

  GetModuleFileNameA

  SetHandleCount

  GetFileType

  GetStartupInfoA

  FreeEnvironmentStringsA

  GetEnvironmentStrings

  FreeEnvironmentStringsW

  WideCharToMultiByte

  GetEnvironmentStringsW

  QueryPerformanceCounter

  GetCurrentProcessId

  GetSystemTimeAsFileTime

  GetCPInfo

  GetACP

  GetOEMCP

  IsValidCodePage

  LoadLibraryA

  InitializeCriticalSectionAndSpinCount

  SetFilePointer

  GetConsoleCP

  GetConsoleMode

  GetLocaleInfoA

  GetStringTypeA

  MultiByteToWideChar

  GetStringTypeW

  LCMapStringA

  LCMapStringW

  user32

  GetClientRect

  GetAsyncKeyState

  ScreenToClient

  GetCursorPos

  Exports

  Exports

  D3D11Hook_DrawAuto_imp

  D3D11Hook_DrawIndexedInstanced_imp

  D3D11Hook_DrawIndexed_imp

  D3D11Hook_DrawInstanced_imp

  D3D11Hook_Draw_imp

  D3D11Hook_SwapChain_Present_imp

  D3D11Hook_SwapChain_ResizeBuffers_imp

  Sections

  .text

  Size: 80KB - Virtual size: 79KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 17KB - Virtual size: 17KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 5KB - Virtual size: 12KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 512B - Virtual size: 436B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 7KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Main/CED3D11Hook64.dll

  .dll windows:5 windows x64 arch:x64

  7b490c73f6a24a175ff2ab5985e57ccc

  
  

  Code Sign

  01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

  Certificate

  Issuer

  CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

  Not Before

  19/09/2018, 00:00 UTC

  Not After

  28/01/2028, 12:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  28/07/2020, 00:00 UTC

  Not After

  18/03/2029, 00:00 UTC

  Subject

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  30:38:81:1f:dd:43:0a:77:db:5b:3c:c2

  Certificate

  Issuer

  CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

  Not Before

  13/04/2021, 18:52 UTC

  Not After

  04/07/2022, 16:21 UTC

  Subject

  SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

  Certificate

  Issuer

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Not Before

  28/07/2020, 00:00 UTC

  Not After

  28/07/2030, 00:00 UTC

  Subject

  CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f

  Certificate

  Issuer

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Not Before

  27/05/2021, 09:55 UTC

  Not After

  28/06/2032, 09:55 UTC

  Subject

  CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Not Before

  20/06/2018, 00:00 UTC

  Not After

  10/12/2034, 00:00 UTC

  Subject

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  20/02/2019, 00:00 UTC

  Not After

  18/03/2029, 10:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  04:00:00:00:00:01:21:58:53:08:a2

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  18/03/2009, 10:00 UTC

  Not After

  18/03/2029, 10:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

  Certificate

  Issuer

  CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

  Not Before

  19/09/2018, 00:00 UTC

  Not After

  28/01/2028, 12:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  28/07/2020, 00:00 UTC

  Not After

  18/03/2029, 00:00 UTC

  Subject

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  30:38:81:1f:dd:43:0a:77:db:5b:3c:c2

  Certificate

  Issuer

  CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

  Not Before

  13/04/2021, 18:52 UTC

  Not After

  04/07/2022, 16:21 UTC

  Subject

  SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

  Certificate

  Issuer

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Not Before

  28/07/2020, 00:00 UTC

  Not After

  28/07/2030, 00:00 UTC

  Subject

  CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f

  Certificate

  Issuer

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Not Before

  27/05/2021, 09:55 UTC

  Not After

  28/06/2032, 09:55 UTC

  Subject

  CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Not Before

  20/06/2018, 00:00 UTC

  Not After

  10/12/2034, 00:00 UTC

  Subject

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  20/02/2019, 00:00 UTC

  Not After

  18/03/2029, 10:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  04:00:00:00:00:01:21:58:53:08:a2

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  18/03/2009, 10:00 UTC

  Not After

  18/03/2029, 10:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  a3:0c:7a:88:66:a8:cf:56:48:4b:0b:3a:33:74:9c:aa:03:22:cf:0e:e9:9a:29:99:ea:f4:de:91:b0:09:57:18

  Signer

  Actual PE Digest

  a3:0c:7a:88:66:a8:cf:56:48:4b:0b:3a:33:74:9c:aa:03:22:cf:0e:e9:9a:29:99:ea:f4:de:91:b0:09:57:18

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  02:05:3b:2b:7a:d9:f6:4a:bf:53:64:7b:49:65:12:f2:45:93:9e:60

  Signer

  Actual PE Digest

  02:05:3b:2b:7a:d9:f6:4a:bf:53:64:7b:49:65:12:f2:45:93:9e:60

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  f:\svn\Cheat Engine\bin\CED3D11Hook64.pdb

  Imports

  d3dx11_43

  D3DX11CompileFromFileA

  D3DX11CreateTextureFromMemory

  D3DX11SaveTextureToMemory

  D3DX11SaveTextureToFileA

  kernel32

  GetProcAddress

  FlushFileBuffers

  EnterCriticalSection

  CreateFileA

  WriteFile

  VirtualQuery

  CloseHandle

  LeaveCriticalSection

  WaitForSingleObject

  OutputDebugStringA

  SetEvent

  InitializeCriticalSection

  GetTickCount

  WriteConsoleW

  GetConsoleOutputCP

  WriteConsoleA

  SetStdHandle

  HeapAlloc

  GetLastError

  HeapReAlloc

  HeapFree

  TerminateProcess

  GetCurrentProcess

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  IsDebuggerPresent

  RtlVirtualUnwind

  RtlLookupFunctionEntry

  RtlCaptureContext

  GetCurrentThreadId

  FlsSetValue

  GetCommandLineA

  RaiseException

  RtlPcToFileHeader

  RtlUnwindEx

  EncodePointer

  DecodePointer

  FlsGetValue

  FlsFree

  SetLastError

  FlsAlloc

  Sleep

  HeapSize

  GetModuleHandleW

  ExitProcess

  GetStdHandle

  GetModuleFileNameA

  HeapSetInformation

  HeapCreate

  HeapDestroy

  SetHandleCount

  GetFileType

  GetStartupInfoA

  DeleteCriticalSection

  FreeEnvironmentStringsA

  GetEnvironmentStrings

  FreeEnvironmentStringsW

  WideCharToMultiByte

  GetEnvironmentStringsW

  QueryPerformanceCounter

  GetCurrentProcessId

  GetSystemTimeAsFileTime

  GetCPInfo

  GetACP

  GetOEMCP

  IsValidCodePage

  LoadLibraryA

  InitializeCriticalSectionAndSpinCount

  SetFilePointer

  GetConsoleCP

  GetConsoleMode

  GetLocaleInfoA

  GetStringTypeA

  MultiByteToWideChar

  GetStringTypeW

  LCMapStringA

  LCMapStringW

  user32

  GetClientRect

  GetAsyncKeyState

  ScreenToClient

  GetCursorPos

  Exports

  Exports

  D3D11Hook_DrawAuto_imp

  D3D11Hook_DrawIndexedInstanced_imp

  D3D11Hook_DrawIndexed_imp

  D3D11Hook_DrawInstanced_imp

  D3D11Hook_Draw_imp

  D3D11Hook_SwapChain_Present_imp

  D3D11Hook_SwapChain_ResizeBuffers_imp

  Sections

  .text

  Size: 86KB - Virtual size: 86KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 19KB - Virtual size: 19KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 7KB - Virtual size: 15KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 4KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 512B - Virtual size: 436B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Main/RUN_ME.bat
• Main/autorun/AddToNewGroup.LUA

  .js
• Main/autorun/DotNetInject.lua
• Main/autorun/DotNetInterface.lua

  .js
• Main/autorun/JavaInfo.lua

  .js
• Main/autorun/JavaSearch.lua

  .js
• Main/autorun/MethodInvokeDialog.lua

  .js
• Main/autorun/SpeedhackV3.lua
• Main/autorun/affinity.lua
• Main/autorun/andtools.lua

  .js
• Main/autorun/andtools/files that should be here.txt
• Main/autorun/autosave.LUA

  .js
• Main/autorun/babyce.lua

  .js
• Main/autorun/bigendian.lua

  .js
• Main/autorun/celib.lua
• Main/autorun/ceshare.lua

  .js
• Main/autorun/ceshare/ceshare_account.lua

  .js
• Main/autorun/ceshare/ceshare_comments.lua

  .js
• Main/autorun/ceshare/ceshare_fulltablelist.lua

  .js
• Main/autorun/ceshare/ceshare_permissions.lua

  .js
• Main/autorun/ceshare/ceshare_processlistextention.lua

  .js
• Main/autorun/ceshare/ceshare_publish.lua

  .js
• Main/autorun/ceshare/ceshare_querycheats.lua

  .js
• Main/autorun/ceshare/ceshare_requests.lua

  .js
• Main/autorun/ceshare/forms/BrowseCheats.FRM

  .xml .ps1 polyglot
• Main/autorun/ceshare/forms/CommentsOrRequests.FRM

  .xml
• Main/autorun/ceshare/forms/InitialSetup.FRM

  .xml
• Main/autorun/ceshare/forms/Permissions.FRM

  .xml
• Main/autorun/ceshare/forms/PublishCheat.FRM

  .xml
• Main/autorun/ceshare/forms/UpdateOrNew.FRM

  .xml
• Main/autorun/ceshare/images/link.png

  .png
• Main/autorun/copytoclipboardastext.lua

  .js
• Main/autorun/cpuid.lua
• Main/autorun/custom/Lua files in this folder get executed automatically as well.txt
• Main/autorun/dlls/32/CEJVMTI.dll

  .dll windows:5 windows x86 arch:x86

  f169cd83c1b5a46b223f247f34ac4096

  
  

  Code Sign

  04:00:00:00:00:01:2f:4e:e1:52:d7

  Certificate

  Issuer

  CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

  Not Before

  13/04/2011, 10:00 UTC

  Not After

  28/01/2028, 12:00 UTC

  Subject

  CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  04:00:00:00:00:01:2f:4e:e1:35:5c

  Certificate

  Issuer

  CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

  Not Before

  13/04/2011, 10:00 UTC

  Not After

  13/04/2019, 10:00 UTC

  Subject

  CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  11:21:06:a0:81:d3:3f:d8:7a:e5:82:4c:c1:6b:52:09:4e:03

  Certificate

  Issuer

  CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

  Not Before

  03/02/2015, 00:00 UTC

  Not After

  03/03/2026, 00:00 UTC

  Subject

  CN=GlobalSign TSA for MS Authenticode - G2,O=GMO GlobalSign Pte Ltd,C=SG

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  11:21:6e:d7:c0:bc:cc:41:4e:44:b3:51:50:de:3a:b6:f9:9d

  Certificate

  Issuer

  CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

  Not Before

  21/07/2015, 14:34 UTC

  Not After

  21/09/2016, 11:08 UTC

  Subject

  CN=Cheat Engine,O=Cheat Engine,L=Eindhoven,C=NL,1.2.840.113549.1.9.1=#0c156461726b5f6279746540686f746d61696c2e636f6d

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  dc:1b:76:93:c1:f1:c7:ea:51:8d:8d:ac:a8:61:de:6f:9b:64:79:14

  Signer

  Actual PE Digest

  dc:1b:76:93:c1:f1:c7:ea:51:8d:8d:ac:a8:61:de:6f:9b:64:79:14

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  f:\svn\Cheat Engine\bin\autorun\dlls\32\CEJVMTI.pdb

  Imports

  kernel32

  OutputDebugStringA

  GetCurrentProcessId

  CreateNamedPipeW

  ConnectNamedPipe

  Sleep

  CloseHandle

  InitializeCriticalSection

  EnterCriticalSection

  LeaveCriticalSection

  ReadFile

  WriteFile

  GetCurrentThreadId

  GetTickCount

  QueryPerformanceCounter

  IsDebuggerPresent

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  GetCurrentProcess

  TerminateProcess

  InterlockedCompareExchange

  InterlockedExchange

  GetSystemTimeAsFileTime

  msvcp90

  ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

  ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z

  ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z

  msvcr90

  ??0exception@std@@QAE@XZ

  free

  _unlock

  __dllonexit

  _encode_pointer

  _lock

  _onexit

  _decode_pointer

  _malloc_crt

  _encoded_null

  _initterm

  _initterm_e

  memmove_s

  _adjust_fdiv

  __CppXcptFilter

  _crt_debugger_hook

  ?terminate@@YAXXZ

  ?_type_info_dtor_internal_method@type_info@@QAEXXZ

  _except_handler4_common

  __clean_type_info_names_internal

  malloc

  _vswprintf_c_l

  ??3@YAXPAX@Z

  ??2@YAPAXI@Z

  ??0exception@std@@QAE@ABQBD@Z

  ?what@exception@std@@UBEPBDXZ

  ??0exception@std@@QAE@ABV01@@Z

  ??1exception@std@@UAE@XZ

  _amsg_exit

  _invalid_parameter_noinfo

  calloc

  _CxxThrowException

  __CxxFrameHandler3

  memset

  Exports

  Exports

  ??4CCEJVMTI@@QAEAAV0@ABV0@@Z

  _Agent_OnAttach@12

  _Agent_OnLoad@12

  Sections

  .text

  Size: 32KB - Virtual size: 32KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 5KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 688B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Main/autorun/dlls/64/CEJVMTI.dll

  .dll windows:5 windows x64 arch:x64

  323de1ff7655e597353e5677c1bc8a83

  
  

  Code Sign

  04:00:00:00:00:01:2f:4e:e1:52:d7

  Certificate

  Issuer

  CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

  Not Before

  13/04/2011, 10:00 UTC

  Not After

  28/01/2028, 12:00 UTC

  Subject

  CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  04:00:00:00:00:01:2f:4e:e1:35:5c

  Certificate

  Issuer

  CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

  Not Before

  13/04/2011, 10:00 UTC

  Not After

  13/04/2019, 10:00 UTC

  Subject

  CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  11:21:06:a0:81:d3:3f:d8:7a:e5:82:4c:c1:6b:52:09:4e:03

  Certificate

  Issuer

  CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

  Not Before

  03/02/2015, 00:00 UTC

  Not After

  03/03/2026, 00:00 UTC

  Subject

  CN=GlobalSign TSA for MS Authenticode - G2,O=GMO GlobalSign Pte Ltd,C=SG

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  11:21:6e:d7:c0:bc:cc:41:4e:44:b3:51:50:de:3a:b6:f9:9d

  Certificate

  Issuer

  CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE

  Not Before

  21/07/2015, 14:34 UTC

  Not After

  21/09/2016, 11:08 UTC

  Subject

  CN=Cheat Engine,O=Cheat Engine,L=Eindhoven,C=NL,1.2.840.113549.1.9.1=#0c156461726b5f6279746540686f746d61696c2e636f6d

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  bc:49:c7:33:0c:3c:dd:77:11:eb:34:d1:57:43:1b:81:d3:6d:88:1a

  Signer

  Actual PE Digest

  bc:49:c7:33:0c:3c:dd:77:11:eb:34:d1:57:43:1b:81:d3:6d:88:1a

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  f:\svn\Cheat Engine\bin\autorun\dlls\64\CEJVMTI.pdb

  Imports

  kernel32

  OutputDebugStringA

  GetCurrentProcessId

  CreateNamedPipeW

  ConnectNamedPipe

  Sleep

  CloseHandle

  InitializeCriticalSection

  EnterCriticalSection

  LeaveCriticalSection

  ReadFile

  WriteFile

  GetCurrentThreadId

  GetTickCount

  QueryPerformanceCounter

  RtlCaptureContext

  RtlLookupFunctionEntry

  RtlVirtualUnwind

  IsDebuggerPresent

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  GetCurrentProcess

  TerminateProcess

  GetSystemTimeAsFileTime

  msvcp90

  ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ

  ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@AEBV01@@Z

  ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@PEBD@Z

  msvcr90

  _invalid_parameter_noinfo

  __C_specific_handler

  _unlock

  __dllonexit

  _encode_pointer

  _lock

  _onexit

  _decode_pointer

  _malloc_crt

  _initterm

  _initterm_e

  ??0exception@std@@QEAA@XZ

  _amsg_exit

  __CppXcptFilter

  __crt_debugger_hook

  ?terminate@@YAXXZ

  ?_type_info_dtor_internal_method@type_info@@QEAAXXZ

  __clean_type_info_names_internal

  free

  malloc

  _vswprintf_c_l

  ??3@YAXPEAX@Z

  ??2@YAPEAX_K@Z

  memmove_s

  ??0exception@std@@QEAA@AEBQEBD@Z

  ?what@exception@std@@UEBAPEBDXZ

  ??0exception@std@@QEAA@AEBV01@@Z

  _encoded_null

  ??1exception@std@@UEAA@XZ

  calloc

  _CxxThrowException

  __CxxFrameHandler3

  memset

  Exports

  Exports

  ??4CCEJVMTI@@QEAAAEAV0@AEBV0@@Z

  Agent_OnAttach

  Agent_OnLoad

  Sections

  .text

  Size: 40KB - Virtual size: 39KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 9KB - Virtual size: 9KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 688B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 198B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Main/autorun/dotnetinfo.lua

  .js
• Main/autorun/dotnetpatch.lua
• Main/autorun/dotnetsearch.lua

  .js
• Main/autorun/emurpm.frm

  .xml
• Main/autorun/emurpm.lua

  .js
• Main/autorun/forms/DotNetInfo.frm

  .xml
• Main/autorun/forms/DotNetSearch.frm

  .xml
• Main/autorun/forms/JavaInfo.frm

  .xml
• Main/autorun/forms/JavaSearch.frm

  .xml
• Main/autorun/forms/MonoDataCollector.frm

  .xml
• Main/autorun/forms/frmUltimap2.FRM

  .xml
• Main/autorun/images/export128x128.png

  .png
• Main/autorun/images/import128x128.png

  .png
• Main/autorun/java.lua

  .js
• Main/autorun/java/androidloadagent.CEA
• Main/autorun/java/cejvmtiagent.c
• Main/autorun/java/jvarscan.c
• Main/autorun/javaClassEditor.lua
• Main/autorun/javaclass.lua
• Main/autorun/luahook.lua
• Main/autorun/luasymbols.lua
• Main/autorun/modulelistscan.lua

  .js
• Main/autorun/monoscript.lua

  .js
• Main/autorun/patchscan.lua

  .js
• Main/autorun/pseudocode.lua

  .js
• Main/autorun/pseudocodediagram.lua

  .js
• Main/autorun/roblox.lua

  .js
• Main/autorun/savesession.lua

  .js
• Main/autorun/splitscanintonewtab.lua
• Main/autorun/threadsafegui.lua
• Main/autorun/ultimap2.lua

  .js
• Main/autorun/versioncheck.lua

  .js
• Main/autorun/xml/xmlSimple.lua
• Main/build.exe

  .exe windows:4 windows x64 arch:x64

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Sections

  .text

  Size: 76KB - Virtual size: 76KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Main/buildsigs.bat
• Main/ced3d9hook.dll

  .dll windows:5 windows x86 arch:x86

  1918101ac90906330d7a2616375c55e0

  
  

  Code Sign

  01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

  Certificate

  Issuer

  CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

  Not Before

  19/09/2018, 00:00 UTC

  Not After

  28/01/2028, 12:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  28/07/2020, 00:00 UTC

  Not After

  18/03/2029, 00:00 UTC

  Subject

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  30:38:81:1f:dd:43:0a:77:db:5b:3c:c2

  Certificate

  Issuer

  CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

  Not Before

  13/04/2021, 18:52 UTC

  Not After

  04/07/2022, 16:21 UTC

  Subject

  SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

  Certificate

  Issuer

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Not Before

  28/07/2020, 00:00 UTC

  Not After

  28/07/2030, 00:00 UTC

  Subject

  CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f

  Certificate

  Issuer

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Not Before

  27/05/2021, 09:55 UTC

  Not After

  28/06/2032, 09:55 UTC

  Subject

  CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Not Before

  20/06/2018, 00:00 UTC

  Not After

  10/12/2034, 00:00 UTC

  Subject

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  20/02/2019, 00:00 UTC

  Not After

  18/03/2029, 10:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  04:00:00:00:00:01:21:58:53:08:a2

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  18/03/2009, 10:00 UTC

  Not After

  18/03/2029, 10:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

  Certificate

  Issuer

  CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

  Not Before

  19/09/2018, 00:00 UTC

  Not After

  28/01/2028, 12:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  28/07/2020, 00:00 UTC

  Not After

  18/03/2029, 00:00 UTC

  Subject

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  30:38:81:1f:dd:43:0a:77:db:5b:3c:c2

  Certificate

  Issuer

  CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

  Not Before

  13/04/2021, 18:52 UTC

  Not After

  04/07/2022, 16:21 UTC

  Subject

  SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

  Certificate

  Issuer

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Not Before

  28/07/2020, 00:00 UTC

  Not After

  28/07/2030, 00:00 UTC

  Subject

  CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f

  Certificate

  Issuer

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Not Before

  27/05/2021, 09:55 UTC

  Not After

  28/06/2032, 09:55 UTC

  Subject

  CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Not Before

  20/06/2018, 00:00 UTC

  Not After

  10/12/2034, 00:00 UTC

  Subject

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  20/02/2019, 00:00 UTC

  Not After

  18/03/2029, 10:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  04:00:00:00:00:01:21:58:53:08:a2

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  18/03/2009, 10:00 UTC

  Not After

  18/03/2029, 10:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  d9:d9:47:08:30:fc:4e:55:fb:22:f7:9e:29:5a:d2:7e:55:6b:dc:5f:2b:9d:7b:c3:44:a6:0b:b3:47:70:2a:81

  Signer

  Actual PE Digest

  d9:d9:47:08:30:fc:4e:55:fb:22:f7:9e:29:5a:d2:7e:55:6b:dc:5f:2b:9d:7b:c3:44:a6:0b:b3:47:70:2a:81

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  d9:06:4e:65:86:aa:82:4d:ab:65:3f:97:82:7b:dc:ec:91:1c:7c:3a

  Signer

  Actual PE Digest

  d9:06:4e:65:86:aa:82:4d:ab:65:3f:97:82:7b:dc:ec:91:1c:7c:3a

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  f:\svn\Cheat Engine\bin\ced3d9hook.pdb

  Imports

  d3dx9_43

  D3DXCreateSprite

  D3DXMatrixTransformation2D

  D3DXCreateTextureFromFileInMemory

  D3DXCreateTextureFromFileInMemoryEx

  D3DXMatrixTransformation

  D3DXSaveSurfaceToFileInMemory

  D3DXSaveSurfaceToFileA

  kernel32

  EnterCriticalSection

  FlushFileBuffers

  WriteConsoleW

  GetConsoleOutputCP

  CreateFileA

  WriteFile

  VirtualQuery

  CloseHandle

  WaitForSingleObject

  OutputDebugStringA

  SetEvent

  GetTickCount

  WriteConsoleA

  SetStdHandle

  LCMapStringW

  LCMapStringA

  HeapAlloc

  GetLastError

  HeapReAlloc

  HeapFree

  TerminateProcess

  GetCurrentProcess

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  IsDebuggerPresent

  GetCurrentThreadId

  GetCommandLineA

  RaiseException

  RtlUnwind

  GetModuleHandleW

  GetProcAddress

  TlsGetValue

  TlsAlloc

  TlsSetValue

  TlsFree

  InterlockedIncrement

  SetLastError

  InterlockedDecrement

  Sleep

  HeapSize

  ExitProcess

  DeleteCriticalSection

  LeaveCriticalSection

  GetModuleHandleA

  VirtualFree

  VirtualAlloc

  HeapCreate

  HeapDestroy

  GetStdHandle

  GetModuleFileNameA

  SetHandleCount

  GetFileType

  GetStartupInfoA

  FreeEnvironmentStringsA

  GetEnvironmentStrings

  FreeEnvironmentStringsW

  WideCharToMultiByte

  GetEnvironmentStringsW

  QueryPerformanceCounter

  GetCurrentProcessId

  GetSystemTimeAsFileTime

  GetCPInfo

  GetACP

  GetOEMCP

  IsValidCodePage

  LoadLibraryA

  InitializeCriticalSectionAndSpinCount

  SetFilePointer

  GetConsoleCP

  GetConsoleMode

  GetLocaleInfoA

  GetStringTypeA

  MultiByteToWideChar

  GetStringTypeW

  user32

  GetClientRect

  GetAsyncKeyState

  ScreenToClient

  GetCursorPos

  Exports

  Exports

  D3D9Hook_DrawIndexedPrimitiveUP_imp

  D3D9Hook_DrawIndexedPrimitive_imp

  D3D9Hook_DrawPrimitiveUP_imp

  D3D9Hook_DrawPrimitive_imp

  D3D9Hook_DrawRectPatch_imp

  D3D9Hook_DrawTriPatch_imp

  D3D9Hook_Present_imp

  D3D9Hook_Reset_imp

  Sections

  .text

  Size: 71KB - Virtual size: 70KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 13KB - Virtual size: 13KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 5KB - Virtual size: 12KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 512B - Virtual size: 436B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 7KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Main/ced3d9hook64.dll

  .dll windows:5 windows x64 arch:x64

  4b9b84d7aa5c3523fdc75de4312d466e

  
  

  Code Sign

  01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

  Certificate

  Issuer

  CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

  Not Before

  19/09/2018, 00:00 UTC

  Not After

  28/01/2028, 12:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  28/07/2020, 00:00 UTC

  Not After

  18/03/2029, 00:00 UTC

  Subject

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  30:38:81:1f:dd:43:0a:77:db:5b:3c:c2

  Certificate

  Issuer

  CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

  Not Before

  13/04/2021, 18:52 UTC

  Not After

  04/07/2022, 16:21 UTC

  Subject

  SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

  Certificate

  Issuer

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Not Before

  28/07/2020, 00:00 UTC

  Not After

  28/07/2030, 00:00 UTC

  Subject

  CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f

  Certificate

  Issuer

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Not Before

  27/05/2021, 09:55 UTC

  Not After

  28/06/2032, 09:55 UTC

  Subject

  CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Not Before

  20/06/2018, 00:00 UTC

  Not After

  10/12/2034, 00:00 UTC

  Subject

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  20/02/2019, 00:00 UTC

  Not After

  18/03/2029, 10:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  04:00:00:00:00:01:21:58:53:08:a2

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  18/03/2009, 10:00 UTC

  Not After

  18/03/2029, 10:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

  Certificate

  Issuer

  CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

  Not Before

  19/09/2018, 00:00 UTC

  Not After

  28/01/2028, 12:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  28/07/2020, 00:00 UTC

  Not After

  18/03/2029, 00:00 UTC

  Subject

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  30:38:81:1f:dd:43:0a:77:db:5b:3c:c2

  Certificate

  Issuer

  CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

  Not Before

  13/04/2021, 18:52 UTC

  Not After

  04/07/2022, 16:21 UTC

  Subject

  SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

  Certificate

  Issuer

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Not Before

  28/07/2020, 00:00 UTC

  Not After

  28/07/2030, 00:00 UTC

  Subject

  CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f

  Certificate

  Issuer

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Not Before

  27/05/2021, 09:55 UTC

  Not After

  28/06/2032, 09:55 UTC

  Subject

  CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Not Before

  20/06/2018, 00:00 UTC

  Not After

  10/12/2034, 00:00 UTC

  Subject

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  20/02/2019, 00:00 UTC

  Not After

  18/03/2029, 10:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  04:00:00:00:00:01:21:58:53:08:a2

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  18/03/2009, 10:00 UTC

  Not After

  18/03/2029, 10:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  15:25:9f:28:1c:da:6a:d0:91:39:07:e3:a8:7e:88:b3:f0:fd:02:38:da:dd:68:fe:a0:30:10:07:87:23:fe:35

  Signer

  Actual PE Digest

  15:25:9f:28:1c:da:6a:d0:91:39:07:e3:a8:7e:88:b3:f0:fd:02:38:da:dd:68:fe:a0:30:10:07:87:23:fe:35

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  ea:f3:85:05:5b:92:37:23:6b:00:fe:d7:bb:f7:f6:53:25:01:b8:3d

  Signer

  Actual PE Digest

  ea:f3:85:05:5b:92:37:23:6b:00:fe:d7:bb:f7:f6:53:25:01:b8:3d

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  f:\svn\Cheat Engine\bin\ced3d9hook64.pdb

  Imports

  d3dx9_43

  D3DXCreateSprite

  D3DXMatrixTransformation2D

  D3DXCreateTextureFromFileInMemory

  D3DXCreateTextureFromFileInMemoryEx

  D3DXMatrixTransformation

  D3DXSaveSurfaceToFileInMemory

  D3DXSaveSurfaceToFileA

  kernel32

  ExitProcess

  FlushFileBuffers

  WriteConsoleW

  GetConsoleOutputCP

  WriteConsoleA

  CreateFileA

  WriteFile

  VirtualQuery

  CloseHandle

  WaitForSingleObject

  OutputDebugStringA

  SetEvent

  GetTickCount

  SetStdHandle

  LCMapStringW

  LCMapStringA

  GetStringTypeW

  HeapAlloc

  GetLastError

  HeapReAlloc

  HeapFree

  TerminateProcess

  GetCurrentProcess

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  IsDebuggerPresent

  RtlVirtualUnwind

  RtlLookupFunctionEntry

  RtlCaptureContext

  GetCurrentThreadId

  FlsSetValue

  GetCommandLineA

  RaiseException

  RtlPcToFileHeader

  RtlUnwindEx

  EncodePointer

  DecodePointer

  FlsGetValue

  FlsFree

  SetLastError

  FlsAlloc

  Sleep

  HeapSize

  GetModuleHandleW

  GetProcAddress

  GetStdHandle

  GetModuleFileNameA

  HeapSetInformation

  HeapCreate

  HeapDestroy

  SetHandleCount

  GetFileType

  GetStartupInfoA

  DeleteCriticalSection

  FreeEnvironmentStringsA

  GetEnvironmentStrings

  FreeEnvironmentStringsW

  WideCharToMultiByte

  GetEnvironmentStringsW

  QueryPerformanceCounter

  GetCurrentProcessId

  GetSystemTimeAsFileTime

  LeaveCriticalSection

  EnterCriticalSection

  GetCPInfo

  GetACP

  GetOEMCP

  IsValidCodePage

  LoadLibraryA

  InitializeCriticalSectionAndSpinCount

  SetFilePointer

  GetConsoleCP

  GetConsoleMode

  GetLocaleInfoA

  GetStringTypeA

  MultiByteToWideChar

  user32

  GetClientRect

  GetAsyncKeyState

  ScreenToClient

  GetCursorPos

  Exports

  Exports

  D3D9Hook_DrawIndexedPrimitiveUP_imp

  D3D9Hook_DrawIndexedPrimitive_imp

  D3D9Hook_DrawPrimitiveUP_imp

  D3D9Hook_DrawPrimitive_imp

  D3D9Hook_DrawRectPatch_imp

  D3D9Hook_DrawTriPatch_imp

  D3D9Hook_Present_imp

  D3D9Hook_Reset_imp

  Sections

  .text

  Size: 77KB - Virtual size: 76KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 19KB - Virtual size: 19KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 7KB - Virtual size: 15KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 4KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 512B - Virtual size: 436B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Main/cedebug.txt
• Main/celua.txt
• Main/class.lua

  .js
• Main/classwrapper.lua
• Main/clibs64/lfs.dll

  .dll windows:6 windows x64 arch:x64

  4f96687c5feff2c3645a5c06bd5349eb

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  D:\svn\Cheat Engine\bin\clibs64\LFS.pdb

  Imports

  lua53-64

  lua_touserdata

  lua_pushboolean

  luaL_error

  luaL_optinteger

  lua_newuserdata

  lua_isstring

  lua_pushlstring

  lua_gettop

  lua_pushfstring

  lua_setmetatable

  lua_pushvalue

  luaL_checkudata

  luaL_optnumber

  lua_setglobal

  lua_getfield

  lua_pushstring

  luaL_argerror

  lua_pushinteger

  lua_pushnil

  luaL_newmetatable

  lua_pushcclosure

  lua_setfield

  lua_settable

  luaL_checkversion_

  lua_type

  lua_rawset

  lua_createtable

  luaL_checklstring

  luaL_checkoption

  luaL_setfuncs

  lua_tolstring

  kernel32

  InitializeCriticalSectionAndSpinCount

  LCMapStringW

  CompareStringW

  HeapSize

  SetEndOfFile

  GetStringTypeW

  WriteConsoleW

  FlushFileBuffers

  GetTimeZoneInformation

  HeapReAlloc

  OutputDebugStringW

  LoadLibraryExW

  CreateFileW

  GetFullPathNameW

  PeekNamedPipe

  GetFileInformationByHandle

  FileTimeToLocalFileTime

  GetCPInfo

  GetOEMCP

  GetACP

  IsValidCodePage

  GetConsoleCP

  FreeEnvironmentStringsW

  GetEnvironmentStringsW

  CreateFileA

  GetLastError

  CloseHandle

  LockFileEx

  UnlockFileEx

  HeapFree

  HeapAlloc

  SystemTimeToTzSpecificLocalTime

  FileTimeToSystemTime

  FindClose

  LocalFileTimeToFileTime

  SetFileTime

  SystemTimeToFileTime

  SetEnvironmentVariableA

  SetCurrentDirectoryA

  GetCurrentDirectoryA

  ReadFile

  GetDriveTypeW

  GetFullPathNameA

  GetCommandLineA

  GetCurrentThreadId

  IsDebuggerPresent

  IsProcessorFeaturePresent

  EncodePointer

  DecodePointer

  SetStdHandle

  GetFileType

  EnterCriticalSection

  LeaveCriticalSection

  SetFilePointerEx

  RtlCaptureContext

  RtlLookupFunctionEntry

  RtlVirtualUnwind

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  SetLastError

  Sleep

  GetCurrentProcess

  TerminateProcess

  TlsAlloc

  TlsGetValue

  TlsSetValue

  TlsFree

  GetStartupInfoW

  GetModuleHandleW

  GetProcAddress

  RtlUnwindEx

  GetStdHandle

  DeleteCriticalSection

  GetProcessHeap

  FindFirstFileExW

  ExitProcess

  GetModuleHandleExW

  AreFileApisANSI

  MultiByteToWideChar

  WideCharToMultiByte

  WriteFile

  GetModuleFileNameW

  FindNextFileW

  CreateDirectoryW

  GetSystemTimeAsFileTime

  RemoveDirectoryW

  GetConsoleMode

  ReadConsoleW

  GetCurrentDirectoryW

  GetModuleFileNameA

  QueryPerformanceCounter

  GetCurrentProcessId

  Exports

  Exports

  luaopen_lfs

  Sections

  .text

  Size: 79KB - Virtual size: 78KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 32KB - Virtual size: 31KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 6KB - Virtual size: 15KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 512B - Virtual size: 480B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Main/commonmodulelist.txt
• Main/d3dhook.dll

  .dll windows:5 windows x86 arch:x86

  a4cee279203b8eef2b26aa769c0003a5

  
  

  Code Sign

  01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

  Certificate

  Issuer

  CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

  Not Before

  19/09/2018, 00:00 UTC

  Not After

  28/01/2028, 12:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  28/07/2020, 00:00 UTC

  Not After

  18/03/2029, 00:00 UTC

  Subject

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  30:38:81:1f:dd:43:0a:77:db:5b:3c:c2

  Certificate

  Issuer

  CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

  Not Before

  13/04/2021, 18:52 UTC

  Not After

  04/07/2022, 16:21 UTC

  Subject

  SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

  Certificate

  Issuer

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Not Before

  28/07/2020, 00:00 UTC

  Not After

  28/07/2030, 00:00 UTC

  Subject

  CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f

  Certificate

  Issuer

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Not Before

  27/05/2021, 09:55 UTC

  Not After

  28/06/2032, 09:55 UTC

  Subject

  CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Not Before

  20/06/2018, 00:00 UTC

  Not After

  10/12/2034, 00:00 UTC

  Subject

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  20/02/2019, 00:00 UTC

  Not After

  18/03/2029, 10:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  04:00:00:00:00:01:21:58:53:08:a2

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  18/03/2009, 10:00 UTC

  Not After

  18/03/2029, 10:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

  Certificate

  Issuer

  CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

  Not Before

  19/09/2018, 00:00 UTC

  Not After

  28/01/2028, 12:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  28/07/2020, 00:00 UTC

  Not After

  18/03/2029, 00:00 UTC

  Subject

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  30:38:81:1f:dd:43:0a:77:db:5b:3c:c2

  Certificate

  Issuer

  CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

  Not Before

  13/04/2021, 18:52 UTC

  Not After

  04/07/2022, 16:21 UTC

  Subject

  SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

  Certificate

  Issuer

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Not Before

  28/07/2020, 00:00 UTC

  Not After

  28/07/2030, 00:00 UTC

  Subject

  CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f

  Certificate

  Issuer

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Not Before

  27/05/2021, 09:55 UTC

  Not After

  28/06/2032, 09:55 UTC

  Subject

  CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Not Before

  20/06/2018, 00:00 UTC

  Not After

  10/12/2034, 00:00 UTC

  Subject

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  20/02/2019, 00:00 UTC

  Not After

  18/03/2029, 10:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  04:00:00:00:00:01:21:58:53:08:a2

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  18/03/2009, 10:00 UTC

  Not After

  18/03/2029, 10:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  db:62:b3:07:f7:fb:1c:7f:a5:80:2a:7d:d7:42:08:fd:62:21:2f:29:f3:b1:b7:25:10:4b:fa:8a:96:f1:c1:59

  Signer

  Actual PE Digest

  db:62:b3:07:f7:fb:1c:7f:a5:80:2a:7d:d7:42:08:fd:62:21:2f:29:f3:b1:b7:25:10:4b:fa:8a:96:f1:c1:59

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  b7:8f:0f:b1:70:d8:43:04:dd:64:4b:77:96:93:f6:23:64:9d:dc:d5

  Signer

  Actual PE Digest

  b7:8f:0f:b1:70:d8:43:04:dd:64:4b:77:96:93:f6:23:64:9d:dc:d5

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  f:\svn\Cheat Engine\bin\d3dhook.pdb

  Imports

  kernel32

  CreateThread

  OutputDebugStringA

  GetModuleHandleW

  LoadLibraryA

  GetProcAddress

  SetEvent

  WaitForSingleObject

  GetLastError

  GetCurrentProcessId

  OpenFileMappingA

  MapViewOfFile

  OpenEventA

  CloseHandle

  FlushFileBuffers

  CreateFileA

  WriteConsoleW

  GetConsoleOutputCP

  WriteConsoleA

  SetStdHandle

  LCMapStringW

  LCMapStringA

  GetStringTypeW

  MultiByteToWideChar

  GetStringTypeA

  TerminateProcess

  GetCurrentProcess

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  IsDebuggerPresent

  GetCurrentThreadId

  GetCommandLineA

  HeapAlloc

  HeapFree

  TlsGetValue

  TlsAlloc

  TlsSetValue

  TlsFree

  InterlockedIncrement

  SetLastError

  InterlockedDecrement

  Sleep

  HeapSize

  ExitProcess

  RaiseException

  SetHandleCount

  GetStdHandle

  GetFileType

  GetStartupInfoA

  DeleteCriticalSection

  GetModuleFileNameA

  FreeEnvironmentStringsA

  GetEnvironmentStrings

  FreeEnvironmentStringsW

  WideCharToMultiByte

  GetEnvironmentStringsW

  HeapCreate

  HeapDestroy

  VirtualFree

  QueryPerformanceCounter

  GetTickCount

  GetSystemTimeAsFileTime

  LeaveCriticalSection

  EnterCriticalSection

  VirtualAlloc

  HeapReAlloc

  WriteFile

  GetCPInfo

  GetACP

  GetOEMCP

  IsValidCodePage

  InitializeCriticalSectionAndSpinCount

  RtlUnwind

  SetFilePointer

  GetConsoleCP

  GetConsoleMode

  GetLocaleInfoA

  GetModuleHandleA

  user32

  SetWindowLongW

  GetWindowLongW

  CallWindowProcW

  PtInRect

  ClipCursor

  ClientToScreen

  GetClientRect

  DefWindowProcA

  ToAscii

  GetKeyboardState

  DestroyWindow

  CreateWindowExW

  AdjustWindowRect

  RegisterClassExW

  LoadCursorW

  DefWindowProcW

  Sections

  .text

  Size: 66KB - Virtual size: 66KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 13KB - Virtual size: 13KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 5KB - Virtual size: 12KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 512B - Virtual size: 436B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 7KB - Virtual size: 7KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Main/d3dhook64.dll

  .dll windows:5 windows x64 arch:x64

  e1df8870766f8039f1e65ca890989bfe

  
  

  Code Sign

  01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

  Certificate

  Issuer

  CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

  Not Before

  19/09/2018, 00:00 UTC

  Not After

  28/01/2028, 12:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  28/07/2020, 00:00 UTC

  Not After

  18/03/2029, 00:00 UTC

  Subject

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  30:38:81:1f:dd:43:0a:77:db:5b:3c:c2

  Certificate

  Issuer

  CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

  Not Before

  13/04/2021, 18:52 UTC

  Not After

  04/07/2022, 16:21 UTC

  Subject

  SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

  Certificate

  Issuer

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Not Before

  28/07/2020, 00:00 UTC

  Not After

  28/07/2030, 00:00 UTC

  Subject

  CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f

  Certificate

  Issuer

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Not Before

  27/05/2021, 09:55 UTC

  Not After

  28/06/2032, 09:55 UTC

  Subject

  CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Not Before

  20/06/2018, 00:00 UTC

  Not After

  10/12/2034, 00:00 UTC

  Subject

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  20/02/2019, 00:00 UTC

  Not After

  18/03/2029, 10:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  04:00:00:00:00:01:21:58:53:08:a2

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  18/03/2009, 10:00 UTC

  Not After

  18/03/2029, 10:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

  Certificate

  Issuer

  CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

  Not Before

  19/09/2018, 00:00 UTC

  Not After

  28/01/2028, 12:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  28/07/2020, 00:00 UTC

  Not After

  18/03/2029, 00:00 UTC

  Subject

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  30:38:81:1f:dd:43:0a:77:db:5b:3c:c2

  Certificate

  Issuer

  CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

  Not Before

  13/04/2021, 18:52 UTC

  Not After

  04/07/2022, 16:21 UTC

  Subject

  SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

  Certificate

  Issuer

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Not Before

  28/07/2020, 00:00 UTC

  Not After

  28/07/2030, 00:00 UTC

  Subject

  CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f

  Certificate

  Issuer

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Not Before

  27/05/2021, 09:55 UTC

  Not After

  28/06/2032, 09:55 UTC

  Subject

  CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Not Before

  20/06/2018, 00:00 UTC

  Not After

  10/12/2034, 00:00 UTC

  Subject

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  20/02/2019, 00:00 UTC

  Not After

  18/03/2029, 10:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  04:00:00:00:00:01:21:58:53:08:a2

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  18/03/2009, 10:00 UTC

  Not After

  18/03/2029, 10:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  dc:2f:d1:2f:d9:e4:b1:1e:ec:f0:43:93:2b:e9:00:26:fd:18:f5:30:c2:5d:db:c2:6b:05:9b:00:74:ea:35:fb

  Signer

  Actual PE Digest

  dc:2f:d1:2f:d9:e4:b1:1e:ec:f0:43:93:2b:e9:00:26:fd:18:f5:30:c2:5d:db:c2:6b:05:9b:00:74:ea:35:fb

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  c0:dc:20:7b:2f:2f:12:5d:4d:8c:5b:e8:f6:0f:e9:17:a1:71:90:8c

  Signer

  Actual PE Digest

  c0:dc:20:7b:2f:2f:12:5d:4d:8c:5b:e8:f6:0f:e9:17:a1:71:90:8c

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  f:\svn\Cheat Engine\bin\d3dhook64.pdb

  Imports

  kernel32

  CreateThread

  OutputDebugStringA

  GetModuleHandleW

  LoadLibraryA

  GetProcAddress

  SetEvent

  WaitForSingleObject

  GetLastError

  GetCurrentProcessId

  OpenFileMappingA

  MapViewOfFile

  OpenEventA

  CloseHandle

  FlushFileBuffers

  CreateFileA

  WriteConsoleW

  GetConsoleOutputCP

  WriteConsoleA

  SetStdHandle

  LCMapStringW

  LCMapStringA

  GetStringTypeW

  MultiByteToWideChar

  GetStringTypeA

  TerminateProcess

  GetCurrentProcess

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  IsDebuggerPresent

  RtlVirtualUnwind

  RtlLookupFunctionEntry

  RtlCaptureContext

  GetCurrentThreadId

  FlsSetValue

  GetCommandLineA

  HeapAlloc

  HeapFree

  EncodePointer

  DecodePointer

  FlsGetValue

  FlsFree

  SetLastError

  FlsAlloc

  Sleep

  HeapSize

  ExitProcess

  RtlUnwindEx

  RaiseException

  RtlPcToFileHeader

  SetHandleCount

  GetStdHandle

  GetFileType

  GetStartupInfoA

  DeleteCriticalSection

  GetModuleFileNameA

  FreeEnvironmentStringsA

  GetEnvironmentStrings

  FreeEnvironmentStringsW

  WideCharToMultiByte

  GetEnvironmentStringsW

  HeapSetInformation

  HeapCreate

  HeapDestroy

  QueryPerformanceCounter

  GetTickCount

  GetSystemTimeAsFileTime

  WriteFile

  LeaveCriticalSection

  EnterCriticalSection

  GetCPInfo

  GetACP

  GetOEMCP

  IsValidCodePage

  HeapReAlloc

  InitializeCriticalSectionAndSpinCount

  SetFilePointer

  GetConsoleCP

  GetConsoleMode

  GetLocaleInfoA

  user32

  SetWindowLongPtrW

  GetWindowLongPtrW

  CallWindowProcW

  PtInRect

  ClipCursor

  ClientToScreen

  GetClientRect

  DefWindowProcA

  ToAscii

  GetKeyboardState

  DestroyWindow

  CreateWindowExW

  AdjustWindowRect

  RegisterClassExW

  LoadCursorW

  DefWindowProcW

  Sections

  .text

  Size: 73KB - Virtual size: 73KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 19KB - Virtual size: 18KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 6KB - Virtual size: 14KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 512B - Virtual size: 436B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Main/defines.lua
• Main/donottrace.txt
• Main/include/_mingw.h
• Main/include/assert.h
• Main/include/celib.h
• Main/include/celog.h
• Main/include/cepipelib.c
• Main/include/cesocket.h
• Main/include/conio.h
• Main/include/ctype.h
• Main/include/dir.h
• Main/include/direct.h
• Main/include/dirent.h
• Main/include/dos.h
• Main/include/errno.h
• Main/include/excpt.h
• Main/include/fcntl.h
• Main/include/fenv.h
• Main/include/float.h
• Main/include/inttypes.h
• Main/include/io.h
• Main/include/jni.h
• Main/include/limits.h
• Main/include/locale.h
• Main/include/malloc.h
• Main/include/math.h
• Main/include/mem.h
• Main/include/memory.h
• Main/include/process.h
• Main/include/sec_api/conio_s.h
• Main/include/sec_api/crtdbg_s.h
• Main/include/sec_api/io_s.h
• Main/include/sec_api/mbstring_s.h
• Main/include/sec_api/search_s.h
• Main/include/sec_api/stdio_s.h
• Main/include/sec_api/stdlib_s.h
• Main/include/sec_api/stralign_s.h
• Main/include/sec_api/string_s.h
• Main/include/sec_api/sys/timeb_s.h
• Main/include/sec_api/tchar_s.h
• Main/include/sec_api/time_s.h
• Main/include/sec_api/wchar_s.h
• Main/include/setjmp.h
• Main/include/share.h
• Main/include/signal.h
• Main/include/stdarg.h
• Main/include/stdbool.h
• Main/include/stddef.h
• Main/include/stdint.h
• Main/include/stdio.h
• Main/include/stdlib.h
• Main/include/string.h
• Main/include/sys/fcntl.h
• Main/include/sys/file.h
• Main/include/sys/locking.h
• Main/include/sys/stat.h
• Main/include/sys/time.h
• Main/include/sys/timeb.h
• Main/include/sys/types.h
• Main/include/sys/unistd.h
• Main/include/sys/utime.h
• Main/include/tccdefs.h
• Main/include/tchar.h
• Main/include/time.h
• Main/include/vadefs.h
• Main/include/values.h
• Main/include/varargs.h
• Main/include/wchar.h
• Main/include/wctype.h
• Main/include/winapi/basetsd.h
• Main/include/winapi/basetyps.h
• Main/include/winapi/guiddef.h
• Main/include/winapi/poppack.h
• Main/include/winapi/pshpack1.h
• Main/include/winapi/pshpack2.h
• Main/include/winapi/pshpack4.h
• Main/include/winapi/pshpack8.h
• Main/include/winapi/winbase.h
• Main/include/winapi/wincon.h
• Main/include/winapi/windef.h
• Main/include/winapi/windows.h
• Main/include/winapi/winerror.h
• Main/include/winapi/wingdi.h
• Main/include/winapi/winnt.h
• Main/include/winapi/winreg.h
• Main/include/winapi/winuser.h
• Main/include/winapi/winver.h
• Main/include/windowslite.h
• Main/languages/CeShare.po
• Main/languages/How to add languages.txt
• Main/languages/Java.po
• Main/languages/SaveSessions.po
• Main/languages/VersionCheck.po
• Main/languages/cheatengine-x86_64.pot
• Main/languages/fr_FR/LisezMoi.md
• Main/languages/fr_FR/cheatengine-x86_64.mo
• Main/languages/fr_FR/cheatengine-x86_64.po
• Main/languages/fr_FR/lclstrconsts.mo
• Main/languages/fr_FR/lclstrconsts.po
• Main/languages/fr_FR/tutorial-x86_64.mo
• Main/languages/fr_FR/tutorial-x86_64.po
• Main/languages/it_IT/Java.po
• Main/languages/it_IT/LICENSE.MD
• Main/languages/it_IT/SaveSessions.po
• Main/languages/it_IT/VersionCheck.po
• Main/languages/it_IT/lclstrconsts.po
• Main/languages/it_IT/monoscript.po
• Main/languages/it_IT/name.txt
• Main/languages/language.ini
• Main/languages/lclstrconsts.po
• Main/languages/monoscript.po
• Main/languages/patchscan.po
• Main/languages/pseudocodediagram.po
• Main/languages/ru_RU/CeShare.po
• Main/languages/ru_RU/Java.po
• Main/languages/ru_RU/SaveSessions.po
• Main/languages/ru_RU/VersionCheck.po
• Main/languages/ru_RU/cheatengine-x86_64.po
• Main/languages/ru_RU/lclstrconsts.po
• Main/languages/ru_RU/monoscript.po
• Main/languages/ru_RU/name.txt
• Main/languages/ru_RU/patchscan.po
• Main/languages/ru_RU/pseudocodediagram.po
• Main/languages/ru_RU/tutorial-x86_64.po
• Main/languages/zh_CN/CeShare.po
• Main/languages/zh_CN/SaveSessions.po
• Main/languages/zh_CN/VersionCheck.po
• Main/languages/zh_CN/cheatengine-x86_64.po
• Main/languages/zh_CN/cheatengine.po
• Main/languages/zh_CN/java.po
• Main/languages/zh_CN/lclstrconsts.po
• Main/languages/zh_CN/monoscript.po
• Main/languages/zh_CN/patchscan.po
• Main/languages/zh_CN/pseudocodediagram.po
• Main/languages/zh_CN/tutorial-x86_64.po
• Main/languages/zh_TW/Java.po
• Main/languages/zh_TW/SaveSessions.po
• Main/languages/zh_TW/VersionCheck.po
• Main/languages/zh_TW/cheatengine-x86_64.po
• Main/languages/zh_TW/lclstrconsts.po
• Main/languages/zh_TW/monoscript.po
• Main/languages/zh_TW/patchscan.po
• Main/languages/zh_TW/pseudocodediagram.po
• Main/languages/zh_TW/tutorial-x86_64.po
• Main/libipt-32.dll

  .dll windows:5 windows x86 arch:x86

  1555e32b624d5f5e3a4b0f72821c0777

  
  

  Code Sign

  01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

  Certificate

  Issuer

  CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

  Not Before

  19/09/2018, 00:00 UTC

  Not After

  28/01/2028, 12:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  28/07/2020, 00:00 UTC

  Not After

  18/03/2029, 00:00 UTC

  Subject

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  30:38:81:1f:dd:43:0a:77:db:5b:3c:c2

  Certificate

  Issuer

  CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

  Not Before

  13/04/2021, 18:52 UTC

  Not After

  04/07/2022, 16:21 UTC

  Subject

  SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

  Certificate

  Issuer

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Not Before

  28/07/2020, 00:00 UTC

  Not After

  28/07/2030, 00:00 UTC

  Subject

  CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f

  Certificate

  Issuer

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Not Before

  27/05/2021, 09:55 UTC

  Not After

  28/06/2032, 09:55 UTC

  Subject

  CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Not Before

  20/06/2018, 00:00 UTC

  Not After

  10/12/2034, 00:00 UTC

  Subject

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  20/02/2019, 00:00 UTC

  Not After

  18/03/2029, 10:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  04:00:00:00:00:01:21:58:53:08:a2

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  18/03/2009, 10:00 UTC

  Not After

  18/03/2029, 10:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

  Certificate

  Issuer

  CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

  Not Before

  19/09/2018, 00:00 UTC

  Not After

  28/01/2028, 12:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  28/07/2020, 00:00 UTC

  Not After

  18/03/2029, 00:00 UTC

  Subject

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  30:38:81:1f:dd:43:0a:77:db:5b:3c:c2

  Certificate

  Issuer

  CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

  Not Before

  13/04/2021, 18:52 UTC

  Not After

  04/07/2022, 16:21 UTC

  Subject

  SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

  Certificate

  Issuer

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Not Before

  28/07/2020, 00:00 UTC

  Not After

  28/07/2030, 00:00 UTC

  Subject

  CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f

  Certificate

  Issuer

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Not Before

  27/05/2021, 09:55 UTC

  Not After

  28/06/2032, 09:55 UTC

  Subject

  CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Not Before

  20/06/2018, 00:00 UTC

  Not After

  10/12/2034, 00:00 UTC

  Subject

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  20/02/2019, 00:00 UTC

  Not After

  18/03/2029, 10:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  04:00:00:00:00:01:21:58:53:08:a2

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  18/03/2009, 10:00 UTC

  Not After

  18/03/2029, 10:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  f4:ac:eb:10:b8:28:a9:d0:be:91:7b:7a:31:aa:3d:2f:74:dd:77:de:45:2e:84:39:fc:fe:2e:86:ae:e3:83:28

  Signer

  Actual PE Digest

  f4:ac:eb:10:b8:28:a9:d0:be:91:7b:7a:31:aa:3d:2f:74:dd:77:de:45:2e:84:39:fc:fe:2e:86:ae:e3:83:28

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  ea:0c:4e:23:27:3c:f1:b3:e2:2e:3e:a8:db:33:36:c8:da:43:4e:7a

  Signer

  Actual PE Digest

  ea:0c:4e:23:27:3c:f1:b3:e2:2e:3e:a8:db:33:36:c8:da:43:4e:7a

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  D:\svn\Cheat Engine\bin\libipt-32.pdb

  Imports

  kernel32

  CreateFileA

  MapViewOfFile

  UnmapViewOfFile

  GetLastError

  CreateFileMappingA

  GetSystemInfo

  CloseHandle

  HeapFree

  HeapAlloc

  ReadFile

  FileTimeToLocalFileTime

  GetFileInformationByHandle

  GetFileType

  PeekNamedPipe

  FileTimeToSystemTime

  SetStdHandle

  EnterCriticalSection

  LeaveCriticalSection

  GetCommandLineA

  GetCurrentThreadId

  IsDebuggerPresent

  IsProcessorFeaturePresent

  EncodePointer

  DecodePointer

  IsValidCodePage

  GetACP

  GetOEMCP

  GetCPInfo

  SetLastError

  MultiByteToWideChar

  GetProcessHeap

  ExitProcess

  GetModuleHandleExW

  GetProcAddress

  AreFileApisANSI

  WideCharToMultiByte

  GetStdHandle

  WriteFile

  GetModuleFileNameW

  GetConsoleMode

  ReadConsoleW

  SetFilePointerEx

  DeleteCriticalSection

  GetStartupInfoW

  CreateFileW

  GetModuleHandleW

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  InitializeCriticalSectionAndSpinCount

  Sleep

  GetCurrentProcess

  TerminateProcess

  TlsAlloc

  TlsGetValue

  TlsSetValue

  TlsFree

  GetModuleFileNameA

  QueryPerformanceCounter

  GetCurrentProcessId

  GetSystemTimeAsFileTime

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  GetStringTypeW

  CompareStringW

  LCMapStringW

  LoadLibraryExW

  OutputDebugStringW

  RtlUnwind

  FlushFileBuffers

  GetConsoleCP

  GetTimeZoneInformation

  SetEndOfFile

  HeapReAlloc

  HeapSize

  WriteConsoleW

  SetEnvironmentVariableA

  Exports

  Exports

  pt_alloc_encoder

  pt_cpu_errata

  pt_cpu_read

  pt_enc_get_config

  pt_enc_get_offset

  pt_enc_next

  pt_enc_sync_set

  pt_errstr

  pt_free_encoder

  pt_image_add_file

  pt_image_alloc

  pt_image_copy

  pt_image_free

  pt_image_name

  pt_image_remove_by_asid

  pt_image_remove_by_filename

  pt_image_set_callback

  pt_insn_alloc_decoder

  pt_insn_core_bus_ratio

  pt_insn_free_decoder

  pt_insn_get_config

  pt_insn_get_image

  pt_insn_get_offset

  pt_insn_get_sync_offset

  pt_insn_next

  pt_insn_set_image

  pt_insn_sync_backward

  pt_insn_sync_forward

  pt_insn_sync_set

  pt_insn_time

  pt_library_version

  pt_pkt_alloc_decoder

  pt_pkt_free_decoder

  pt_pkt_get_config

  pt_pkt_get_offset

  pt_pkt_get_sync_offset

  pt_pkt_next

  pt_pkt_sync_backward

  pt_pkt_sync_forward

  pt_pkt_sync_set

  pt_qry_alloc_decoder

  pt_qry_cond_branch

  pt_qry_core_bus_ratio

  pt_qry_event

  pt_qry_free_decoder

  pt_qry_get_config

  pt_qry_get_offset

  pt_qry_get_sync_offset

  pt_qry_indirect_branch

  pt_qry_sync_backward

  pt_qry_sync_forward

  pt_qry_sync_set

  pt_qry_time

  Sections

  .text

  Size: 97KB - Virtual size: 97KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 21KB - Virtual size: 21KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 6KB - Virtual size: 15KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 512B - Virtual size: 480B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 5KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Main/libipt-64.dll

  .dll windows:6 windows x64 arch:x64

  e32e16398aad7a038ba38d4ca24cf3c9

  
  

  Code Sign

  01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

  Certificate

  Issuer

  CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

  Not Before

  19/09/2018, 00:00 UTC

  Not After

  28/01/2028, 12:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  28/07/2020, 00:00 UTC

  Not After

  18/03/2029, 00:00 UTC

  Subject

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  30:38:81:1f:dd:43:0a:77:db:5b:3c:c2

  Certificate

  Issuer

  CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

  Not Before

  13/04/2021, 18:52 UTC

  Not After

  04/07/2022, 16:21 UTC

  Subject

  SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

  Certificate

  Issuer

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Not Before

  28/07/2020, 00:00 UTC

  Not After

  28/07/2030, 00:00 UTC

  Subject

  CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f

  Certificate

  Issuer

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Not Before

  27/05/2021, 09:55 UTC

  Not After

  28/06/2032, 09:55 UTC

  Subject

  CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Not Before

  20/06/2018, 00:00 UTC

  Not After

  10/12/2034, 00:00 UTC

  Subject

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  20/02/2019, 00:00 UTC

  Not After

  18/03/2029, 10:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  04:00:00:00:00:01:21:58:53:08:a2

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  18/03/2009, 10:00 UTC

  Not After

  18/03/2029, 10:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

  Certificate

  Issuer

  CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

  Not Before

  19/09/2018, 00:00 UTC

  Not After

  28/01/2028, 12:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  28/07/2020, 00:00 UTC

  Not After

  18/03/2029, 00:00 UTC

  Subject

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  30:38:81:1f:dd:43:0a:77:db:5b:3c:c2

  Certificate

  Issuer

  CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

  Not Before

  13/04/2021, 18:52 UTC

  Not After

  04/07/2022, 16:21 UTC

  Subject

  SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

  Certificate

  Issuer

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Not Before

  28/07/2020, 00:00 UTC

  Not After

  28/07/2030, 00:00 UTC

  Subject

  CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f

  Certificate

  Issuer

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Not Before

  27/05/2021, 09:55 UTC

  Not After

  28/06/2032, 09:55 UTC

  Subject

  CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Not Before

  20/06/2018, 00:00 UTC

  Not After

  10/12/2034, 00:00 UTC

  Subject

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  20/02/2019, 00:00 UTC

  Not After

  18/03/2029, 10:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  04:00:00:00:00:01:21:58:53:08:a2

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  18/03/2009, 10:00 UTC

  Not After

  18/03/2029, 10:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  99:df:6f:7c:27:f1:90:3f:02:6c:ce:bb:5e:3c:dd:54:16:6a:00:24:e9:4b:43:80:8f:31:12:46:a2:8f:78:c5

  Signer

  Actual PE Digest

  99:df:6f:7c:27:f1:90:3f:02:6c:ce:bb:5e:3c:dd:54:16:6a:00:24:e9:4b:43:80:8f:31:12:46:a2:8f:78:c5

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  bb:0d:27:0e:2f:a3:ef:47:61:7f:45:f2:b1:36:03:ce:8b:b9:cf:4b

  Signer

  Actual PE Digest

  bb:0d:27:0e:2f:a3:ef:47:61:7f:45:f2:b1:36:03:ce:8b:b9:cf:4b

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  D:\svn\Cheat Engine\bin\libipt-64.pdb

  Imports

  kernel32

  CreateFileA

  MapViewOfFile

  UnmapViewOfFile

  GetLastError

  CreateFileMappingA

  GetSystemInfo

  CloseHandle

  HeapFree

  HeapAlloc

  ReadFile

  FileTimeToLocalFileTime

  GetFileInformationByHandle

  GetFileType

  PeekNamedPipe

  FileTimeToSystemTime

  SetStdHandle

  EnterCriticalSection

  LeaveCriticalSection

  GetCommandLineA

  GetCurrentThreadId

  IsDebuggerPresent

  IsProcessorFeaturePresent

  EncodePointer

  DecodePointer

  IsValidCodePage

  GetACP

  GetOEMCP

  GetCPInfo

  SetLastError

  MultiByteToWideChar

  GetProcessHeap

  ExitProcess

  GetModuleHandleExW

  GetProcAddress

  AreFileApisANSI

  WideCharToMultiByte

  GetStdHandle

  WriteFile

  GetModuleFileNameW

  GetConsoleMode

  ReadConsoleW

  RtlUnwindEx

  SetFilePointerEx

  DeleteCriticalSection

  GetStartupInfoW

  CreateFileW

  GetModuleHandleW

  RtlCaptureContext

  RtlLookupFunctionEntry

  RtlVirtualUnwind

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  InitializeCriticalSectionAndSpinCount

  Sleep

  GetCurrentProcess

  TerminateProcess

  TlsAlloc

  TlsGetValue

  TlsSetValue

  TlsFree

  GetModuleFileNameA

  QueryPerformanceCounter

  GetCurrentProcessId

  GetSystemTimeAsFileTime

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  GetStringTypeW

  CompareStringW

  LCMapStringW

  LoadLibraryExW

  OutputDebugStringW

  FlushFileBuffers

  GetConsoleCP

  GetTimeZoneInformation

  SetEndOfFile

  HeapReAlloc

  HeapSize

  WriteConsoleW

  SetEnvironmentVariableA

  Exports

  Exports

  pt_alloc_encoder

  pt_cpu_errata

  pt_cpu_read

  pt_enc_get_config

  pt_enc_get_offset

  pt_enc_next

  pt_enc_sync_set

  pt_errstr

  pt_free_encoder

  pt_image_add_file

  pt_image_alloc

  pt_image_copy

  pt_image_free

  pt_image_name

  pt_image_remove_by_asid

  pt_image_remove_by_filename

  pt_image_set_callback

  pt_insn_alloc_decoder

  pt_insn_core_bus_ratio

  pt_insn_free_decoder

  pt_insn_get_config

  pt_insn_get_image

  pt_insn_get_offset

  pt_insn_get_sync_offset

  pt_insn_next

  pt_insn_set_image

  pt_insn_sync_backward

  pt_insn_sync_forward

  pt_insn_sync_set

  pt_insn_time

  pt_library_version

  pt_pkt_alloc_decoder

  pt_pkt_free_decoder

  pt_pkt_get_config

  pt_pkt_get_offset

  pt_pkt_get_sync_offset

  pt_pkt_next

  pt_pkt_sync_backward

  pt_pkt_sync_forward

  pt_pkt_sync_set

  pt_qry_alloc_decoder

  pt_qry_cond_branch

  pt_qry_core_bus_ratio

  pt_qry_event

  pt_qry_free_decoder

  pt_qry_get_config

  pt_qry_get_offset

  pt_qry_get_sync_offset

  pt_qry_indirect_branch

  pt_qry_sync_backward

  pt_qry_sync_forward

  pt_qry_sync_set

  pt_qry_time

  Sections

  .text

  Size: 107KB - Virtual size: 106KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 33KB - Virtual size: 32KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 7KB - Virtual size: 18KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 6KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 512B - Virtual size: 480B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Main/libmikmod32.dll

  .dll windows:6 windows x86 arch:x86

  83efea949fe36df0b049975dd492d8a8

  
  

  Code Sign

  01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

  Certificate

  Issuer

  CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

  Not Before

  19/09/2018, 00:00 UTC

  Not After

  28/01/2028, 12:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  28/07/2020, 00:00 UTC

  Not After

  18/03/2029, 00:00 UTC

  Subject

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  30:38:81:1f:dd:43:0a:77:db:5b:3c:c2

  Certificate

  Issuer

  CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

  Not Before

  13/04/2021, 18:52 UTC

  Not After

  04/07/2022, 16:21 UTC

  Subject

  SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

  Certificate

  Issuer

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Not Before

  28/07/2020, 00:00 UTC

  Not After

  28/07/2030, 00:00 UTC

  Subject

  CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f

  Certificate

  Issuer

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Not Before

  27/05/2021, 09:55 UTC

  Not After

  28/06/2032, 09:55 UTC

  Subject

  CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Not Before

  20/06/2018, 00:00 UTC

  Not After

  10/12/2034, 00:00 UTC

  Subject

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  20/02/2019, 00:00 UTC

  Not After

  18/03/2029, 10:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  04:00:00:00:00:01:21:58:53:08:a2

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  18/03/2009, 10:00 UTC

  Not After

  18/03/2029, 10:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

  Certificate

  Issuer

  CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

  Not Before

  19/09/2018, 00:00 UTC

  Not After

  28/01/2028, 12:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  28/07/2020, 00:00 UTC

  Not After

  18/03/2029, 00:00 UTC

  Subject

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  30:38:81:1f:dd:43:0a:77:db:5b:3c:c2

  Certificate

  Issuer

  CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

  Not Before

  13/04/2021, 18:52 UTC

  Not After

  04/07/2022, 16:21 UTC

  Subject

  SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

  Certificate

  Issuer

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Not Before

  28/07/2020, 00:00 UTC

  Not After

  28/07/2030, 00:00 UTC

  Subject

  CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f

  Certificate

  Issuer

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Not Before

  27/05/2021, 09:55 UTC

  Not After

  28/06/2032, 09:55 UTC

  Subject

  CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Not Before

  20/06/2018, 00:00 UTC

  Not After

  10/12/2034, 00:00 UTC

  Subject

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  20/02/2019, 00:00 UTC

  Not After

  18/03/2029, 10:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  04:00:00:00:00:01:21:58:53:08:a2

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  18/03/2009, 10:00 UTC

  Not After

  18/03/2029, 10:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  2a:1a:4a:93:85:c8:c3:e8:de:7f:a9:ca:0f:e6:9f:6d:be:fb:5e:98:e7:15:f9:cc:7f:6b:e9:fa:00:a4:dc:a6

  Signer

  Actual PE Digest

  2a:1a:4a:93:85:c8:c3:e8:de:7f:a9:ca:0f:e6:9f:6d:be:fb:5e:98:e7:15:f9:cc:7f:6b:e9:fa:00:a4:dc:a6

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  ce:a3:a2:89:fc:5c:05:34:ec:2f:d6:e8:14:66:09:05:b8:69:ae:9b

  Signer

  Actual PE Digest

  ce:a3:a2:89:fc:5c:05:34:ec:2f:d6:e8:14:66:09:05:b8:69:ae:9b

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  D:\svn\Cheat Engine\bin\libmikmod32.pdb

  Imports

  dsound

  ord1

  kernel32

  WaitForSingleObject

  SetEvent

  CreateEventA

  ReleaseMutex

  CloseHandle

  ResumeThread

  CreateThread

  Sleep

  CreateMutexA

  HeapSize

  OutputDebugStringW

  WriteConsoleW

  LCMapStringW

  GetLastError

  HeapFree

  HeapReAlloc

  IsDebuggerPresent

  IsProcessorFeaturePresent

  ReadFile

  GetCommandLineA

  GetCurrentThreadId

  GetProcessHeap

  EncodePointer

  DecodePointer

  CreateFileW

  GetFileType

  GetModuleHandleW

  GetProcAddress

  ExitProcess

  GetModuleHandleExW

  AreFileApisANSI

  MultiByteToWideChar

  WideCharToMultiByte

  SetStdHandle

  EnterCriticalSection

  LeaveCriticalSection

  GetStdHandle

  DeleteCriticalSection

  GetStartupInfoW

  RtlUnwind

  HeapAlloc

  IsValidCodePage

  GetACP

  GetOEMCP

  GetCPInfo

  SetLastError

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  InitializeCriticalSectionAndSpinCount

  GetCurrentProcess

  TerminateProcess

  TlsAlloc

  TlsGetValue

  TlsSetValue

  TlsFree

  GetConsoleMode

  ReadConsoleW

  WriteFile

  GetConsoleCP

  SetFilePointerEx

  GetModuleFileNameA

  QueryPerformanceCounter

  GetCurrentProcessId

  GetSystemTimeAsFileTime

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  SetEndOfFile

  GetModuleFileNameW

  LoadLibraryExW

  FlushFileBuffers

  GetStringTypeW

  DeleteFileW

  user32

  GetForegroundWindow

  winmm

  waveOutUnprepareHeader

  waveOutWrite

  waveOutGetNumDevs

  waveOutPrepareHeader

  waveOutClose

  waveOutOpen

  waveOutReset

  Exports

  Exports

  MikMod_Active

  MikMod_DisableOutput

  MikMod_DriverFromAlias

  MikMod_EnableOutput

  MikMod_Exit

  MikMod_GetVersion

  MikMod_InfoDriver

  MikMod_InfoLoader

  MikMod_Init

  MikMod_InitThreads

  MikMod_Lock

  MikMod_RegisterAllDrivers

  MikMod_RegisterAllLoaders

  MikMod_RegisterDriver

  MikMod_RegisterErrorHandler

  MikMod_RegisterLoader

  MikMod_RegisterPlayer

  MikMod_Reset

  MikMod_SetNumVoices

  MikMod_Unlock

  MikMod_Update

  MikMod_critical

  MikMod_errno

  MikMod_strerror

  Player_Active

  Player_Free

  Player_GetChannelPeriod

  Player_GetChannelVoice

  Player_GetLoop

  Player_GetModule

  Player_GetWrap

  Player_Load

  Player_LoadFP

  Player_LoadGeneric

  Player_LoadTitle

  Player_LoadTitleFP

  Player_Mute

  Player_Muted

  Player_NextPosition

  Player_Paused

  Player_PrevPosition

  Player_SetLoop

  Player_SetPosition

  Player_SetSpeed

  Player_SetTempo

  Player_SetVolume

  Player_SetWrap

  Player_Start

  Player_Stop

  Player_ToggleMute

  Player_TogglePause

  Player_Unmute

  Sample_Free

  Sample_Load

  Sample_LoadFP

  Sample_LoadGeneric

  Sample_Play

  VC_Exit

  VC_Init

  VC_PlayStart

  VC_PlayStop

  VC_SampleLength

  VC_SampleLoad

  VC_SampleSpace

  VC_SampleUnload

  VC_SetNumVoices

  VC_SilenceBytes

  VC_VoiceGetFrequency

  VC_VoiceGetPanning

  VC_VoiceGetPosition

  VC_VoiceGetVolume

  VC_VoicePlay

  VC_VoiceRealVolume

  VC_VoiceSetFrequency

  VC_VoiceSetPanning

  VC_VoiceSetVolume

  VC_VoiceStop

  VC_VoiceStopped

  VC_WriteBytes

  Voice_GetFrequency

  Voice_GetPanning

  Voice_GetPosition

  Voice_GetVolume

  Voice_Play

  Voice_RealVolume

  Voice_SetFrequency

  Voice_SetPanning

  Voice_SetVolume

  Voice_Stop

  Voice_Stopped

  drv_ds

  drv_nos

  drv_raw

  drv_stdout

  drv_wav

  drv_win

  load_669

  load_amf

  load_dsm

  load_far

  load_gdm

  load_imf

  load_it

  load_m15

  load_med

  load_mod

  load_mtm

  load_okt

  load_s3m

  load_stm

  load_stx

  load_ult

  load_uni

  load_xm

  md_device

  md_driver

  md_mixfreq

  md_mode

  md_musicvolume

  md_pansep

  md_reverb

  md_sndfxvolume

  md_volume

  Sections

  .text

  Size: 220KB - Virtual size: 219KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 30KB - Virtual size: 29KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 6KB - Virtual size: 16KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 512B - Virtual size: 480B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 17KB - Virtual size: 17KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Main/libmikmod64.dll

  .dll windows:6 windows x64 arch:x64

  2620c385706125032143f584b27b115a

  
  

  Code Sign

  01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

  Certificate

  Issuer

  CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

  Not Before

  19/09/2018, 00:00 UTC

  Not After

  28/01/2028, 12:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  28/07/2020, 00:00 UTC

  Not After

  18/03/2029, 00:00 UTC

  Subject

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  30:38:81:1f:dd:43:0a:77:db:5b:3c:c2

  Certificate

  Issuer

  CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

  Not Before

  13/04/2021, 18:52 UTC

  Not After

  04/07/2022, 16:21 UTC

  Subject

  SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

  Certificate

  Issuer

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Not Before

  28/07/2020, 00:00 UTC

  Not After

  28/07/2030, 00:00 UTC

  Subject

  CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f

  Certificate

  Issuer

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Not Before

  27/05/2021, 09:55 UTC

  Not After

  28/06/2032, 09:55 UTC

  Subject

  CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Not Before

  20/06/2018, 00:00 UTC

  Not After

  10/12/2034, 00:00 UTC

  Subject

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  20/02/2019, 00:00 UTC

  Not After

  18/03/2029, 10:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  04:00:00:00:00:01:21:58:53:08:a2

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  18/03/2009, 10:00 UTC

  Not After

  18/03/2029, 10:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

  Certificate

  Issuer

  CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

  Not Before

  19/09/2018, 00:00 UTC

  Not After

  28/01/2028, 12:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  28/07/2020, 00:00 UTC

  Not After

  18/03/2029, 00:00 UTC

  Subject

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  30:38:81:1f:dd:43:0a:77:db:5b:3c:c2

  Certificate

  Issuer

  CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

  Not Before

  13/04/2021, 18:52 UTC

  Not After

  04/07/2022, 16:21 UTC

  Subject

  SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

  Certificate

  Issuer

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Not Before

  28/07/2020, 00:00 UTC

  Not After

  28/07/2030, 00:00 UTC

  Subject

  CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f

  Certificate

  Issuer

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Not Before

  27/05/2021, 09:55 UTC

  Not After

  28/06/2032, 09:55 UTC

  Subject

  CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Not Before

  20/06/2018, 00:00 UTC

  Not After

  10/12/2034, 00:00 UTC

  Subject

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  20/02/2019, 00:00 UTC

  Not After

  18/03/2029, 10:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  04:00:00:00:00:01:21:58:53:08:a2

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  18/03/2009, 10:00 UTC

  Not After

  18/03/2029, 10:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  37:4b:14:1e:be:cc:84:d4:50:f3:3d:d6:7b:2e:b7:10:78:65:52:03:fd:b9:bb:41:7f:f8:63:e3:bc:2a:f4:73

  Signer

  Actual PE Digest

  37:4b:14:1e:be:cc:84:d4:50:f3:3d:d6:7b:2e:b7:10:78:65:52:03:fd:b9:bb:41:7f:f8:63:e3:bc:2a:f4:73

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  cb:0b:67:63:bb:28:f7:4c:fc:8d:57:88:36:c8:19:c3:5e:c4:e5:66

  Signer

  Actual PE Digest

  cb:0b:67:63:bb:28:f7:4c:fc:8d:57:88:36:c8:19:c3:5e:c4:e5:66

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  D:\svn\Cheat Engine\bin\libmikmod64.pdb

  Imports

  dsound

  ord1

  kernel32

  WaitForSingleObject

  SetEvent

  CreateEventA

  ReleaseMutex

  CloseHandle

  ResumeThread

  CreateThread

  Sleep

  CreateMutexA

  HeapSize

  OutputDebugStringW

  WriteConsoleW

  LCMapStringW

  GetLastError

  HeapFree

  HeapReAlloc

  IsDebuggerPresent

  IsProcessorFeaturePresent

  ReadFile

  GetCommandLineA

  GetCurrentThreadId

  GetProcessHeap

  EncodePointer

  DecodePointer

  CreateFileW

  GetFileType

  GetModuleHandleW

  GetProcAddress

  ExitProcess

  GetModuleHandleExW

  AreFileApisANSI

  MultiByteToWideChar

  WideCharToMultiByte

  SetStdHandle

  EnterCriticalSection

  LeaveCriticalSection

  RtlUnwindEx

  GetStdHandle

  DeleteCriticalSection

  GetStartupInfoW

  HeapAlloc

  IsValidCodePage

  GetACP

  GetOEMCP

  GetCPInfo

  SetLastError

  RtlCaptureContext

  RtlLookupFunctionEntry

  RtlVirtualUnwind

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  InitializeCriticalSectionAndSpinCount

  GetCurrentProcess

  TerminateProcess

  TlsAlloc

  TlsGetValue

  TlsSetValue

  TlsFree

  GetConsoleMode

  ReadConsoleW

  WriteFile

  GetConsoleCP

  SetFilePointerEx

  GetModuleFileNameA

  QueryPerformanceCounter

  GetCurrentProcessId

  GetSystemTimeAsFileTime

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  SetEndOfFile

  GetModuleFileNameW

  LoadLibraryExW

  FlushFileBuffers

  GetStringTypeW

  DeleteFileW

  user32

  GetForegroundWindow

  winmm

  waveOutUnprepareHeader

  waveOutWrite

  waveOutGetNumDevs

  waveOutPrepareHeader

  waveOutClose

  waveOutOpen

  waveOutReset

  Exports

  Exports

  MikMod_Active

  MikMod_DisableOutput

  MikMod_DriverFromAlias

  MikMod_EnableOutput

  MikMod_Exit

  MikMod_GetVersion

  MikMod_InfoDriver

  MikMod_InfoLoader

  MikMod_Init

  MikMod_InitThreads

  MikMod_Lock

  MikMod_RegisterAllDrivers

  MikMod_RegisterAllLoaders

  MikMod_RegisterDriver

  MikMod_RegisterErrorHandler

  MikMod_RegisterLoader

  MikMod_RegisterPlayer

  MikMod_Reset

  MikMod_SetNumVoices

  MikMod_Unlock

  MikMod_Update

  MikMod_critical

  MikMod_errno

  MikMod_strerror

  Player_Active

  Player_Free

  Player_GetChannelPeriod

  Player_GetChannelVoice

  Player_GetLoop

  Player_GetModule

  Player_GetWrap

  Player_Load

  Player_LoadFP

  Player_LoadGeneric

  Player_LoadTitle

  Player_LoadTitleFP

  Player_Mute

  Player_Muted

  Player_NextPosition

  Player_Paused

  Player_PrevPosition

  Player_SetLoop

  Player_SetPosition

  Player_SetSpeed

  Player_SetTempo

  Player_SetVolume

  Player_SetWrap

  Player_Start

  Player_Stop

  Player_ToggleMute

  Player_TogglePause

  Player_Unmute

  Sample_Free

  Sample_Load

  Sample_LoadFP

  Sample_LoadGeneric

  Sample_Play

  VC_Exit

  VC_Init

  VC_PlayStart

  VC_PlayStop

  VC_SampleLength

  VC_SampleLoad

  VC_SampleSpace

  VC_SampleUnload

  VC_SetNumVoices

  VC_SilenceBytes

  VC_VoiceGetFrequency

  VC_VoiceGetPanning

  VC_VoiceGetPosition

  VC_VoiceGetVolume

  VC_VoicePlay

  VC_VoiceRealVolume

  VC_VoiceSetFrequency

  VC_VoiceSetPanning

  VC_VoiceSetVolume

  VC_VoiceStop

  VC_VoiceStopped

  VC_WriteBytes

  Voice_GetFrequency

  Voice_GetPanning

  Voice_GetPosition

  Voice_GetVolume

  Voice_Play

  Voice_RealVolume

  Voice_SetFrequency

  Voice_SetPanning

  Voice_SetVolume

  Voice_Stop

  Voice_Stopped

  drv_ds

  drv_nos

  drv_raw

  drv_stdout

  drv_wav

  drv_win

  load_669

  load_amf

  load_dsm

  load_far

  load_gdm

  load_imf

  load_it

  load_m15

  load_med

  load_mod

  load_mtm

  load_okt

  load_s3m

  load_stm

  load_stx

  load_ult

  load_uni

  load_xm

  md_device

  md_driver

  md_mixfreq

  md_mode

  md_musicvolume

  md_pansep

  md_reverb

  md_sndfxvolume

  md_volume

  Sections

  .text

  Size: 235KB - Virtual size: 234KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 47KB - Virtual size: 47KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 8KB - Virtual size: 20KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 512B - Virtual size: 480B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Main/lua/lauxlib.pas
• Main/lua/lua.pas

  .js
• Main/lua/lualib.pas
• Main/lua53-32.dll

  .dll windows:5 windows x86 arch:x86

  3991c01e50953690ce06a82b4aab452d

  
  

  Code Sign

  01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

  Certificate

  Issuer

  CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

  Not Before

  19/09/2018, 00:00 UTC

  Not After

  28/01/2028, 12:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  28/07/2020, 00:00 UTC

  Not After

  18/03/2029, 00:00 UTC

  Subject

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  30:38:81:1f:dd:43:0a:77:db:5b:3c:c2

  Certificate

  Issuer

  CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

  Not Before

  13/04/2021, 18:52 UTC

  Not After

  04/07/2022, 16:21 UTC

  Subject

  SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

  Certificate

  Issuer

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Not Before

  28/07/2020, 00:00 UTC

  Not After

  28/07/2030, 00:00 UTC

  Subject

  CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f

  Certificate

  Issuer

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Not Before

  27/05/2021, 09:55 UTC

  Not After

  28/06/2032, 09:55 UTC

  Subject

  CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Not Before

  20/06/2018, 00:00 UTC

  Not After

  10/12/2034, 00:00 UTC

  Subject

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  20/02/2019, 00:00 UTC

  Not After

  18/03/2029, 10:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  04:00:00:00:00:01:21:58:53:08:a2

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  18/03/2009, 10:00 UTC

  Not After

  18/03/2029, 10:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

  Certificate

  Issuer

  CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

  Not Before

  19/09/2018, 00:00 UTC

  Not After

  28/01/2028, 12:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  28/07/2020, 00:00 UTC

  Not After

  18/03/2029, 00:00 UTC

  Subject

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  30:38:81:1f:dd:43:0a:77:db:5b:3c:c2

  Certificate

  Issuer

  CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

  Not Before

  13/04/2021, 18:52 UTC

  Not After

  04/07/2022, 16:21 UTC

  Subject

  SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

  Certificate

  Issuer

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Not Before

  28/07/2020, 00:00 UTC

  Not After

  28/07/2030, 00:00 UTC

  Subject

  CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f

  Certificate

  Issuer

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Not Before

  27/05/2021, 09:55 UTC

  Not After

  28/06/2032, 09:55 UTC

  Subject

  CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Not Before

  20/06/2018, 00:00 UTC

  Not After

  10/12/2034, 00:00 UTC

  Subject

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  20/02/2019, 00:00 UTC

  Not After

  18/03/2029, 10:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  04:00:00:00:00:01:21:58:53:08:a2

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  18/03/2009, 10:00 UTC

  Not After

  18/03/2029, 10:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  66:f1:82:b9:ac:cb:79:f5:91:30:16:5e:f7:1d:55:44:76:8b:4c:b7:eb:fa:3a:28:1b:2b:36:3d:99:e1:ae:e6

  Signer

  Actual PE Digest

  66:f1:82:b9:ac:cb:79:f5:91:30:16:5e:f7:1d:55:44:76:8b:4c:b7:eb:fa:3a:28:1b:2b:36:3d:99:e1:ae:e6

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  b7:e3:aa:fa:3a:68:03:ad:48:ef:fc:5e:b7:36:a9:f6:9a:06:cc:08

  Signer

  Actual PE Digest

  b7:e3:aa:fa:3a:68:03:ad:48:ef:fc:5e:b7:36:a9:f6:9a:06:cc:08

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  D:\git\cheat-engine\Cheat Engine\bin\lua53-32.pdb

  Imports

  kernel32

  GetModuleFileNameA

  LoadLibraryExA

  GetLastError

  GetProcAddress

  FreeLibrary

  FormatMessageA

  EnterCriticalSection

  LeaveCriticalSection

  InitializeCriticalSection

  DeleteCriticalSection

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  GetCurrentProcess

  TerminateProcess

  IsProcessorFeaturePresent

  QueryPerformanceCounter

  GetCurrentProcessId

  GetCurrentThreadId

  GetSystemTimeAsFileTime

  InitializeSListHead

  IsDebuggerPresent

  GetStartupInfoW

  GetModuleHandleW

  InterlockedFlushSList

  RtlUnwind

  SetLastError

  InitializeCriticalSectionAndSpinCount

  TlsAlloc

  TlsGetValue

  TlsSetValue

  TlsFree

  LoadLibraryExW

  RaiseException

  CloseHandle

  DuplicateHandle

  CreateProcessA

  GetTempPathW

  ReadFile

  ExitProcess

  GetModuleHandleExW

  QueryPerformanceFrequency

  MultiByteToWideChar

  WideCharToMultiByte

  GetCommandLineA

  GetCommandLineW

  HeapAlloc

  HeapFree

  GetDateFormatW

  GetTimeFormatW

  CompareStringW

  LCMapStringW

  GetLocaleInfoW

  IsValidLocale

  GetUserDefaultLCID

  EnumSystemLocalesW

  GetStdHandle

  GetFileType

  FlushFileBuffers

  WriteFile

  GetConsoleCP

  GetConsoleMode

  HeapReAlloc

  GetACP

  ReadConsoleW

  WaitForSingleObject

  GetExitCodeProcess

  GetFileAttributesExW

  CreatePipe

  CreateFileW

  SetFilePointerEx

  GetStringTypeW

  DeleteFileW

  GetTimeZoneInformation

  MoveFileExW

  GetCPInfo

  FindClose

  FindFirstFileExA

  FindNextFileA

  IsValidCodePage

  GetOEMCP

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  SetEnvironmentVariableA

  GetProcessHeap

  SetStdHandle

  WriteConsoleW

  HeapSize

  SetEndOfFile

  DecodePointer

  Exports

  Exports

  luaL_addlstring

  luaL_addstring

  luaL_addvalue

  luaL_argerror

  luaL_buffinit

  luaL_buffinitsize

  luaL_callmeta

  luaL_checkany

  luaL_checkinteger

  luaL_checklstring

  luaL_checknumber

  luaL_checkoption

  luaL_checkstack

  luaL_checktype

  luaL_checkudata

  luaL_checkversion_

  luaL_error

  luaL_execresult

  luaL_fileresult

  luaL_getmetafield

  luaL_getsubtable

  luaL_gsub

  luaL_len

  luaL_loadbufferx

  luaL_loadfilex

  luaL_loadstring

  luaL_newmetatable

  luaL_newstate

  luaL_openlib

  luaL_openlibs

  luaL_optinteger

  luaL_optlstring

  luaL_optnumber

  luaL_prepbuffsize

  luaL_pushmodule

  luaL_pushresult

  luaL_pushresultsize

  luaL_ref

  luaL_requiref

  luaL_setfuncs

  luaL_setmetatable

  luaL_testudata

  luaL_tolstring

  luaL_traceback

  luaL_unref

  luaL_where

  lua_absindex

  lua_arith

  lua_atpanic

  lua_callk

  lua_checkstack

  lua_close

  lua_compare

  lua_concat

  lua_copy

  lua_createtable

  lua_dump

  lua_error

  lua_gc

  lua_getallocf

  lua_getfield

  lua_getglobal

  lua_gethook

  lua_gethookcount

  lua_gethookmask

  lua_geti

  lua_getinfo

  lua_getlocal

  lua_getmetatable

  lua_getstack

  lua_gettable

  lua_gettop

  lua_getupvalue

  lua_getuservalue

  lua_iscfunction

  lua_isinteger

  lua_isnumber

  lua_isstring

  lua_isuserdata

  lua_isyieldable

  lua_len

  lua_load

  lua_newstate

  lua_newthread

  lua_newuserdata

  lua_next

  lua_pcallk

  lua_pushboolean

  lua_pushcclosure

  lua_pushfstring

  lua_pushinteger

  lua_pushlightuserdata

  lua_pushlstring

  lua_pushnil

  lua_pushnumber

  lua_pushstring

  lua_pushthread

  lua_pushvalue

  lua_pushvfstring

  lua_rawequal

  lua_rawget

  lua_rawgeti

  lua_rawgetp

  lua_rawlen

  lua_rawset

  lua_rawseti

  lua_rawsetp

  lua_resume

  lua_rotate

  lua_setallocf

  lua_setfield

  lua_setglobal

  lua_sethook

  lua_seti

  lua_setlocal

  lua_setmetatable

  lua_settable

  lua_settop

  lua_setupvalue

  lua_setuservalue

  lua_status

  lua_stringtonumber

  lua_toboolean

  lua_tocfunction

  lua_tointegerx

  lua_tolstring

  lua_tonumberx

  lua_topointer

  lua_tothread

  lua_touserdata

  lua_type

  lua_typename

  lua_upvalueid

  lua_upvaluejoin

  lua_version

  lua_xmove

  lua_yieldk

  luaopen_base

  luaopen_bit32

  luaopen_coroutine

  luaopen_debug

  luaopen_io

  luaopen_math

  luaopen_os

  luaopen_package

  luaopen_string

  luaopen_table

  luaopen_utf8

  Sections

  .text

  Size: 328KB - Virtual size: 327KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 82KB - Virtual size: 82KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 2KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 512B - Virtual size: 480B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 13KB - Virtual size: 12KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Main/lua53-64.dll

  .dll windows:5 windows x64 arch:x64

  779703c2d47ce86829a9221b077786f6

  
  

  Code Sign

  01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

  Certificate

  Issuer

  CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

  Not Before

  19/09/2018, 00:00 UTC

  Not After

  28/01/2028, 12:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  28/07/2020, 00:00 UTC

  Not After

  18/03/2029, 00:00 UTC

  Subject

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  30:38:81:1f:dd:43:0a:77:db:5b:3c:c2

  Certificate

  Issuer

  CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

  Not Before

  13/04/2021, 18:52 UTC

  Not After

  04/07/2022, 16:21 UTC

  Subject

  SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

  Certificate

  Issuer

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Not Before

  28/07/2020, 00:00 UTC

  Not After

  28/07/2030, 00:00 UTC

  Subject

  CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f

  Certificate

  Issuer

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Not Before

  27/05/2021, 09:55 UTC

  Not After

  28/06/2032, 09:55 UTC

  Subject

  CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Not Before

  20/06/2018, 00:00 UTC

  Not After

  10/12/2034, 00:00 UTC

  Subject

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  20/02/2019, 00:00 UTC

  Not After

  18/03/2029, 10:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  04:00:00:00:00:01:21:58:53:08:a2

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  18/03/2009, 10:00 UTC

  Not After

  18/03/2029, 10:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

  Certificate

  Issuer

  CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

  Not Before

  19/09/2018, 00:00 UTC

  Not After

  28/01/2028, 12:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  28/07/2020, 00:00 UTC

  Not After

  18/03/2029, 00:00 UTC

  Subject

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  30:38:81:1f:dd:43:0a:77:db:5b:3c:c2

  Certificate

  Issuer

  CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

  Not Before

  13/04/2021, 18:52 UTC

  Not After

  04/07/2022, 16:21 UTC

  Subject

  SERIALNUMBER=50212036,CN=Cheat Engine,O=Cheat Engine,STREET=Irenelaan 24,L=Waalre,ST=Noord-Brabant,C=NL,1.3.6.1.4.1.311.60.2.1.3=#13024e4c,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

  Certificate

  Issuer

  CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

  Not Before

  28/07/2020, 00:00 UTC

  Not After

  28/07/2030, 00:00 UTC

  Subject

  CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:00:46:69:50:a6:04:a9:d9:70:e8:1d:d2:4d:41:9f

  Certificate

  Issuer

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Not Before

  27/05/2021, 09:55 UTC

  Not After

  28/06/2032, 09:55 UTC

  Subject

  CN=Globalsign TSA for Advanced - G4,O=GlobalSign nv-sa,C=BE

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Not Before

  20/06/2018, 00:00 UTC

  Not After

  10/12/2034, 00:00 UTC

  Subject

  CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  01:f2:40:42:40:ce:fd:22:db:e9:6c:71:fc

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  20/02/2019, 00:00 UTC

  Not After

  18/03/2029, 10:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  04:00:00:00:00:01:21:58:53:08:a2

  Certificate

  Issuer

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Not Before

  18/03/2009, 10:00 UTC

  Not After

  18/03/2029, 10:00 UTC

  Subject

  CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  81:24:f5:6e:29:14:f8:4e:f1:41:77:d6:d5:6f:d1:de:1e:6f:c9:aa:eb:80:59:e4:25:e8:0a:a4:2e:7e:d4:28

  Signer

  Actual PE Digest

  81:24:f5:6e:29:14:f8:4e:f1:41:77:d6:d5:6f:d1:de:1e:6f:c9:aa:eb:80:59:e4:25:e8:0a:a4:2e:7e:d4:28

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  63:38:84:cf:4a:92:39:93:31:3d:d1:94:0f:fe:b6:98:63:14:7b:89

  Signer

  Actual PE Digest

  63:38:84:cf:4a:92:39:93:31:3d:d1:94:0f:fe:b6:98:63:14:7b:89

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  D:\git\cheat-engine\Cheat Engine\bin\lua53-64.pdb

  Imports

  kernel32

  GetModuleFileNameA

  LoadLibraryExA

  GetLastError

  GetProcAddress

  FreeLibrary

  FormatMessageA

  EnterCriticalSection

  LeaveCriticalSection

  InitializeCriticalSection

  DeleteCriticalSection

  RtlCaptureContext

  RtlLookupFunctionEntry

  RtlVirtualUnwind

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  GetCurrentProcess

  TerminateProcess

  IsProcessorFeaturePresent

  QueryPerformanceCounter

  GetCurrentProcessId

  GetCurrentThreadId

  GetSystemTimeAsFileTime

  InitializeSListHead

  IsDebuggerPresent

  GetStartupInfoW

  GetModuleHandleW

  RtlUnwindEx

  InterlockedFlushSList

  SetLastError

  EncodePointer

  RaiseException

  InitializeCriticalSectionAndSpinCount

  TlsAlloc

  TlsGetValue

  TlsSetValue

  TlsFree

  LoadLibraryExW

  RtlPcToFileHeader

  CloseHandle

  DuplicateHandle

  CreateProcessA

  GetTempPathW

  ReadFile

  ExitProcess

  GetModuleHandleExW

  QueryPerformanceFrequency

  MultiByteToWideChar

  WideCharToMultiByte

  GetCommandLineA

  GetCommandLineW

  HeapAlloc

  HeapFree

  GetDateFormatW

  GetTimeFormatW

  CompareStringW

  LCMapStringW

  GetLocaleInfoW

  IsValidLocale

  GetUserDefaultLCID

  EnumSystemLocalesW

  GetStdHandle

  GetFileType

  FlushFileBuffers

  WriteFile

  GetConsoleCP

  GetConsoleMode

  HeapReAlloc

  GetACP

  ReadConsoleW

  WaitForSingleObject

  GetExitCodeProcess

  GetFileAttributesExW

  CreatePipe

  CreateFileW

  SetFilePointerEx

  GetStringTypeW

  DeleteFileW

  GetTimeZoneInformation

  MoveFileExW

  GetCPInfo

  FindClose

  FindFirstFileExA

  FindNextFileA

  IsValidCodePage

  GetOEMCP

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  SetEnvironmentVariableA

  GetProcessHeap

  SetStdHandle

  WriteConsoleW

  HeapSize

  SetEndOfFile

  RtlUnwind

  Exports

  Exports

  ?luaL_buffinit@@YAXPEAUlua_State@@PEAUluaL_Buffer@@@Z

  ?luaL_openlib@@YAXPEAUlua_State@@PEBDPEBUluaL_Reg@@H@Z

  ?luaL_pushmodule@@YAXPEAUlua_State@@PEBDH@Z

  luaL_addlstring

  luaL_addstring

  luaL_addvalue

  luaL_argerror

  luaL_buffinitsize

  luaL_callmeta

  luaL_checkany

  luaL_checkinteger

  luaL_checklstring

  luaL_checknumber

  luaL_checkoption

  luaL_checkstack

  luaL_checktype

  luaL_checkudata

  luaL_checkversion_

  luaL_error

  luaL_execresult

  luaL_fileresult

  luaL_getmetafield

  luaL_getsubtable

  luaL_gsub

  luaL_len

  luaL_loadbufferx

  luaL_loadfilex

  luaL_loadstring

  luaL_newmetatable

  luaL_newstate

  luaL_openlibs

  luaL_optinteger

  luaL_optlstring

  luaL_optnumber

  luaL_prepbuffsize

  luaL_pushresult

  luaL_pushresultsize

  luaL_ref

  luaL_requiref

  luaL_setfuncs

  luaL_setmetatable

  luaL_testudata

  luaL_tolstring

  luaL_traceback

  luaL_unref

  luaL_where

  lua_absindex

  lua_arith

  lua_atpanic

  lua_callk

  lua_checkstack

  lua_close

  lua_compare

  lua_concat

  lua_copy

  lua_createtable

  lua_dump

  lua_error

  lua_gc

  lua_getallocf

  lua_getfield

  lua_getglobal

  lua_gethook

  lua_gethookcount

  lua_gethookmask

  lua_geti

  lua_getinfo

  lua_getlocal

  lua_getmetatable

  lua_getstack

  lua_gettable

  lua_gettop

  lua_getupvalue

  lua_getuservalue

  lua_iscfunction

  lua_isinteger

  lua_isnumber

  lua_isstring

  lua_isuserdata

  lua_isyieldable

  lua_len

  lua_load

  lua_newstate

  lua_newthread

  lua_newuserdata

  lua_next

  lua_pcallk

  lua_pushboolean

  lua_pushcclosure

  lua_pushfstring

  lua_pushinteger

  lua_pushlightuserdata

  lua_pushlstring

  lua_pushnil

  lua_pushnumber

  lua_pushstring

  lua_pushthread

  lua_pushvalue

  lua_pushvfstring

  lua_rawequal

  lua_rawget

  lua_rawgeti

  lua_rawgetp

  lua_rawlen

  lua_rawset

  lua_rawseti

  lua_rawsetp

  lua_resume

  lua_rotate

  lua_setallocf

  lua_setfield

  lua_setglobal

  lua_sethook

  lua_seti

  lua_setlocal

  lua_setmetatable

  lua_settable

  lua_settop

  lua_setupvalue

  lua_setuservalue

  lua_status

  lua_stringtonumber

  lua_toboolean

  lua_tocfunction

  lua_tointegerx

  lua_tolstring

  lua_tonumberx

  lua_topointer

  lua_tothread

  lua_touserdata

  lua_type

  lua_typename

  lua_upvalueid

  lua_upvaluejoin

  lua_version

  lua_xmove

  lua_yieldk

  luaopen_base

  luaopen_bit32

  luaopen_coroutine

  luaopen_debug

  luaopen_io

  luaopen_math

  luaopen_os

  luaopen_package

  luaopen_string

  luaopen_table

  luaopen_utf8

  Sections

  .text

  Size: 374KB - Virtual size: 374KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 100KB - Virtual size: 99KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 3KB - Virtual size: 7KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 20KB - Virtual size: 20KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 512B - Virtual size: 480B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Main/lua_extra/lua.exe

  .exe windows:6 windows x64 arch:x64

  305a3483275b958c6b18c492ecca8d26

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  lua53-64

  luaL_openlibs

  luaL_traceback

  luaL_len

  luaL_newstate

  luaL_loadbufferx

  luaL_loadfilex

  luaL_error

  luaL_checkstack

  luaL_callmeta

  luaL_checkversion_

  lua_sethook

  lua_concat

  lua_pcallk

  lua_rawseti

  lua_setfield

  lua_setglobal

  lua_createtable

  lua_rawgeti

  lua_getglobal

  lua_pushlightuserdata

  lua_pushboolean

  lua_pushcclosure

  lua_pushfstring

  lua_pushstring

  lua_pushlstring

  lua_pushinteger

  lua_touserdata

  lua_tolstring

  lua_toboolean

  lua_tointegerx

  lua_typename

  lua_type

  lua_rotate

  lua_pushvalue

  lua_settop

  lua_gettop

  lua_close

  kernel32

  FlushFileBuffers

  CreateFileW

  CloseHandle

  LCMapStringW

  CompareStringW

  HeapSize

  GetStringTypeW

  OutputDebugStringW

  SetEnvironmentVariableA

  ReadConsoleW

  ReadFile

  WriteConsoleW

  SetFilePointerEx

  SetStdHandle

  HeapReAlloc

  HeapAlloc

  LoadLibraryExW

  GetCPInfo

  GetOEMCP

  GetACP

  IsValidCodePage

  GetModuleHandleW

  TlsFree

  TlsSetValue

  TlsGetValue

  TlsAlloc

  TerminateProcess

  GetCurrentProcess

  Sleep

  EncodePointer

  DecodePointer

  GetLastError

  SetConsoleCtrlHandler

  EnterCriticalSection

  LeaveCriticalSection

  GetCommandLineA

  IsDebuggerPresent

  IsProcessorFeaturePresent

  DeleteCriticalSection

  SetLastError

  GetCurrentThreadId

  ExitProcess

  GetModuleHandleExW

  GetProcAddress

  MultiByteToWideChar

  WideCharToMultiByte

  RtlUnwindEx

  HeapFree

  WriteFile

  GetConsoleCP

  GetConsoleMode

  GetStdHandle

  GetFileType

  GetStartupInfoW

  GetProcessHeap

  GetModuleFileNameA

  GetModuleFileNameW

  QueryPerformanceCounter

  GetCurrentProcessId

  GetSystemTimeAsFileTime

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  RtlCaptureContext

  RtlLookupFunctionEntry

  RtlVirtualUnwind

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  InitializeCriticalSectionAndSpinCount

  Sections

  .text

  Size: 60KB - Virtual size: 60KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 28KB - Virtual size: 28KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 6KB - Virtual size: 14KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Main/lua_extra/lua53-32.exp
• Main/lua_extra/lua53-32.lib
• Main/lua_extra/lua53-64.exp
• Main/lua_extra/lua53-64.lib
• Main/lua_extra/luac32.exe

  .exe windows:6 windows x86 arch:x86

  df3bb821a427e60e03315ecf0d446170

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  PDB Paths

  D:\svn\Cheat Engine\bin\lua_extra\luac32.pdb

  Imports

  kernel32

  FreeLibrary

  FormatMessageA

  GetLastError

  GetProcAddress

  GetModuleFileNameA

  LoadLibraryExA

  LeaveCriticalSection

  EnterCriticalSection

  DeleteCriticalSection

  HeapFree

  HeapReAlloc

  IsDebuggerPresent

  IsProcessorFeaturePresent

  RtlUnwind

  GetTempPathA

  ReadFile

  CloseHandle

  DuplicateHandle

  GetCurrentProcess

  CreateProcessA

  AreFileApisANSI

  MultiByteToWideChar

  GetSystemTimeAsFileTime

  WideCharToMultiByte

  EncodePointer

  DecodePointer

  ExitProcess

  GetModuleHandleExW

  GetCommandLineA

  GetProcessHeap

  SetLastError

  GetCurrentThreadId

  FlushFileBuffers

  WriteFile

  GetConsoleCP

  GetConsoleMode

  ReadConsoleW

  GetStdHandle

  GetFileType

  GetStartupInfoW

  HeapAlloc

  IsValidCodePage

  GetACP

  GetOEMCP

  GetCPInfo

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  InitializeCriticalSectionAndSpinCount

  Sleep

  TerminateProcess

  TlsAlloc

  TlsGetValue

  TlsSetValue

  TlsFree

  GetModuleHandleW

  GetCurrentProcessId

  SetFilePointerEx

  WaitForSingleObject

  GetExitCodeProcess

  CreatePipe

  RaiseException

  MoveFileExW

  GetTimeZoneInformation

  DeleteFileW

  GetModuleFileNameW

  LoadLibraryExW

  QueryPerformanceCounter

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  SetStdHandle

  WriteConsoleW

  GetStringTypeW

  GetLocaleInfoW

  IsValidLocale

  GetUserDefaultLCID

  EnumSystemLocalesW

  GetDateFormatW

  GetTimeFormatW

  CompareStringW

  LCMapStringW

  GetFileAttributesExW

  CreateFileW

  SetEnvironmentVariableA

  OutputDebugStringW

  HeapSize

  SetEndOfFile

  Sections

  .text

  Size: 316KB - Virtual size: 315KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 122KB - Virtual size: 122KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 5KB - Virtual size: 13KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 512B - Virtual size: 480B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 13KB - Virtual size: 12KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Main/lua_extra/luac64.exe

  .exe windows:6 windows x64 arch:x64

  7c1b0e130d7d46ddb9e63b559288e6d4

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  D:\svn\Cheat Engine\bin\lua_extra\luac64.pdb

  Imports

  kernel32

  FreeLibrary

  FormatMessageA

  GetLastError

  GetProcAddress

  GetModuleFileNameA

  LoadLibraryExA

  LeaveCriticalSection

  EnterCriticalSection

  DeleteCriticalSection

  HeapFree

  HeapReAlloc

  IsDebuggerPresent

  IsProcessorFeaturePresent

  RtlUnwindEx

  GetTempPathA

  ReadFile

  CloseHandle

  DuplicateHandle

  GetCurrentProcess

  CreateProcessA

  AreFileApisANSI

  MultiByteToWideChar

  GetSystemTimeAsFileTime

  WideCharToMultiByte

  EncodePointer

  DecodePointer

  ExitProcess

  GetModuleHandleExW

  GetCommandLineA

  GetProcessHeap

  SetLastError

  GetCurrentThreadId

  FlushFileBuffers

  WriteFile

  GetConsoleCP

  GetConsoleMode

  ReadConsoleW

  GetStdHandle

  GetFileType

  GetStartupInfoW

  HeapAlloc

  IsValidCodePage

  GetACP

  GetOEMCP

  GetCPInfo

  RtlCaptureContext

  RtlLookupFunctionEntry

  RtlVirtualUnwind

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  InitializeCriticalSectionAndSpinCount

  Sleep

  TerminateProcess

  TlsAlloc

  TlsGetValue

  TlsSetValue

  TlsFree

  GetModuleHandleW

  GetCurrentProcessId

  SetFilePointerEx

  WaitForSingleObject

  GetExitCodeProcess

  CreatePipe

  RaiseException

  MoveFileExW

  GetTimeZoneInformation

  DeleteFileW

  GetModuleFileNameW

  LoadLibraryExW

  QueryPerformanceCounter

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  SetStdHandle

  WriteConsoleW

  GetStringTypeW

  GetLocaleInfoW

  IsValidLocale

  GetUserDefaultLCID

  EnumSystemLocalesW

  GetDateFormatW

  GetTimeFormatW

  CompareStringW

  LCMapStringW

  GetFileAttributesExW

  CreateFileW

  SetEnvironmentVariableA

  OutputDebugStringW

  HeapSize

  SetEndOfFile

  Sections

  .text

  Size: 350KB - Virtual size: 350KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 87KB - Virtual size: 87KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 7KB - Virtual size: 16KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 17KB - Virtual size: 16KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 512B - Virtual size: 480B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Main/main.lua
• Main/overlay.fx
• Main/packfiles.bat
• Main/process.exe

  .exe windows:6 windows x64 arch:x64

  321579003198ff3fdb695d3cf3016d0b

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\walee\Downloads\netflix\netflix\process\x64\Debug\process.pdb

  Imports

  kernel32

  Process32NextW

  Process32FirstW

  CreateToolhelp32Snapshot

  lstrcmpW

  LocalFree

  LocalAlloc

  OpenProcess

  GetLastError

  FreeLibrary

  CloseHandle

  VirtualQuery

  GetProcessHeap

  HeapFree

  HeapAlloc

  GetModuleHandleW

  GetStartupInfoW

  InitializeSListHead

  GetSystemTimeAsFileTime

  GetCurrentProcessId

  QueryPerformanceCounter

  IsProcessorFeaturePresent

  TerminateProcess

  GetCurrentProcess

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  RtlVirtualUnwind

  RtlLookupFunctionEntry

  RtlCaptureContext

  WideCharToMultiByte

  MultiByteToWideChar

  RaiseException

  IsDebuggerPresent

  GetCurrentThreadId

  GetProcAddress

  advapi32

  SetKernelObjectSecurity

  InitializeSecurityDescriptor

  InitializeAcl

  GetLengthSid

  FreeSid

  AllocateAndInitializeSid

  AddAccessDeniedAce

  SetSecurityDescriptorDacl

  msvcp140d

  ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A

  ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ

  ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ

  ?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ

  ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ

  ?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ

  ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z

  ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z

  ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z

  ??1_Lockit@std@@QEAA@XZ

  ?_Xlength_error@std@@YAXPEBD@Z

  ?_Xout_of_range@std@@YAXPEBD@Z

  ?uncaught_exception@std@@YA_NXZ

  ?good@ios_base@std@@QEBA_NXZ

  ?flags@ios_base@std@@QEBAHXZ

  ?width@ios_base@std@@QEAA_J_J@Z

  ?width@ios_base@std@@QEBA_JXZ

  ??0_Lockit@std@@QEAA@H@Z

  vcruntime140d

  __vcrt_LoadLibraryExW

  __vcrt_GetModuleHandleW

  __vcrt_GetModuleFileNameW

  __std_exception_destroy

  __current_exception

  __std_type_info_destroy_list

  __C_specific_handler_noexcept

  __C_specific_handler

  __current_exception_context

  memcpy

  memmove

  __std_exception_copy

  _CxxThrowException

  vcruntime140_1d

  __CxxFrameHandler4

  ucrtbased

  _free_dbg

  _set_new_mode

  strcat_s

  __stdio_common_vsprintf_s

  _seh_filter_dll

  _initialize_onexit_table

  _register_onexit_function

  _execute_onexit_table

  _crt_atexit

  _crt_at_quick_exit

  terminate

  _wmakepath_s

  _wsplitpath_s

  wcscpy_s

  _configthreadlocale

  _register_thread_local_exe_atexit_callback

  _c_exit

  _cexit

  __p___argv

  __p___argc

  _set_fmode

  _exit

  exit

  _initterm_e

  _initterm

  _get_initial_narrow_environment

  _initialize_narrow_environment

  _configure_narrow_argv

  __setusermatherr

  _set_app_type

  _seh_filter_exe

  malloc

  _callnewh

  _CrtDbgReport

  strlen

  _invalid_parameter

  __p__commode

  strcpy_s

  _CrtDbgReportW

  Sections

  .textbss

  Size: - Virtual size: 64KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_CNT_UNINITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .text

  Size: 57KB - Virtual size: 56KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 20KB - Virtual size: 19KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 10KB - Virtual size: 10KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .idata

  Size: 7KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .msvcjmc

  Size: 1024B - Virtual size: 551B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .00cfg

  Size: 512B - Virtual size: 373B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1024B - Virtual size: 821B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Main/robloxbb.lua

  .js
• Main/standalonephase1.dat

  .exe windows:5 windows x86 arch:x86

  8d92fa1956a6a631c642190121740197

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  shlwapi

  PathAddBackslashA

  PathStripPathA

  PathRemoveFileSpecA

  kernel32

  GetModuleFileNameA

  FindResourceA

  GetModuleHandleA

  SizeofResource

  LoadResource

  GetTempPathA

  CreateDirectoryA

  DeleteFileA

  CreateFileA

  WriteFile

  CloseHandle

  CreateProcessA

  WaitForSingleObject

  RemoveDirectoryA

  FlushFileBuffers

  GetTempFileNameA

  GetCurrentThreadId

  GetCommandLineA

  GetStartupInfoA

  TerminateProcess

  GetCurrentProcess

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  IsDebuggerPresent

  GetModuleHandleW

  Sleep

  GetProcAddress

  ExitProcess

  GetStdHandle

  FreeEnvironmentStringsA

  GetEnvironmentStrings

  FreeEnvironmentStringsW

  WideCharToMultiByte

  GetLastError

  GetEnvironmentStringsW

  SetHandleCount

  GetFileType

  DeleteCriticalSection

  TlsGetValue

  TlsAlloc

  TlsSetValue

  TlsFree

  InterlockedIncrement

  SetLastError

  InterlockedDecrement

  HeapCreate

  VirtualFree

  HeapFree

  QueryPerformanceCounter

  GetTickCount

  GetCurrentProcessId

  GetSystemTimeAsFileTime

  SetFilePointer

  GetConsoleCP

  GetConsoleMode

  EnterCriticalSection

  LeaveCriticalSection

  GetCPInfo

  GetACP

  GetOEMCP

  IsValidCodePage

  LoadLibraryA

  InitializeCriticalSectionAndSpinCount

  HeapAlloc

  VirtualAlloc

  HeapReAlloc

  RtlUnwind

  SetStdHandle

  WriteConsoleA

  GetConsoleOutputCP

  WriteConsoleW

  MultiByteToWideChar

  LCMapStringA

  LCMapStringW

  GetStringTypeA

  GetStringTypeW

  GetLocaleInfoA

  HeapSize

  user32

  MessageBoxA

  advapi32

  ConvertStringSecurityDescriptorToSecurityDescriptorA

  Sections

  .text

  Size: 35KB - Virtual size: 35KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 8KB - Virtual size: 8KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 4KB - Virtual size: 10KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 788B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Main/tiny.dat

  .exe windows:5 windows x86 arch:x86

  eae719b7384e30dfa50a17f56fc10efb

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  shlwapi

  PathAddBackslashA

  PathStripPathA

  AssocQueryStringA

  PathRemoveFileSpecA

  version

  VerQueryValueA

  GetFileVersionInfoA

  GetFileVersionInfoSizeA

  kernel32

  CompareStringA

  FlushFileBuffers

  HeapSize

  GetLocaleInfoA

  GetModuleFileNameA

  FindResourceA

  GetModuleHandleA

  SizeofResource

  LoadResource

  CompareStringW

  CreateDirectoryA

  GetTempFileNameA

  DeleteFileA

  CreateFileA

  WriteFile

  CloseHandle

  CreateProcessA

  Sleep

  RemoveDirectoryA

  GetTempPathA

  GetStdHandle

  GetStringTypeW

  HeapAlloc

  GetLastError

  HeapFree

  FindClose

  FileTimeToSystemTime

  FileTimeToLocalFileTime

  GetDriveTypeA

  FindFirstFileA

  GetCommandLineA

  GetStartupInfoA

  TerminateProcess

  GetCurrentProcess

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  IsDebuggerPresent

  DeleteCriticalSection

  LeaveCriticalSection

  EnterCriticalSection

  VirtualFree

  VirtualAlloc

  HeapReAlloc

  HeapCreate

  GetModuleHandleW

  GetProcAddress

  ExitProcess

  SetEnvironmentVariableA

  GetFullPathNameA

  GetCurrentDirectoryA

  FreeEnvironmentStringsA

  GetEnvironmentStrings

  FreeEnvironmentStringsW

  WideCharToMultiByte

  GetEnvironmentStringsW

  SetHandleCount

  GetFileType

  TlsGetValue

  TlsAlloc

  TlsSetValue

  TlsFree

  InterlockedIncrement

  SetLastError

  GetCurrentThreadId

  InterlockedDecrement

  QueryPerformanceCounter

  GetTickCount

  GetCurrentProcessId

  GetSystemTimeAsFileTime

  SetFilePointer

  GetConsoleCP

  GetConsoleMode

  GetCPInfo

  GetACP

  GetOEMCP

  IsValidCodePage

  InitializeCriticalSectionAndSpinCount

  RtlUnwind

  LoadLibraryA

  GetTimeZoneInformation

  LCMapStringA

  MultiByteToWideChar

  LCMapStringW

  SetStdHandle

  WriteConsoleA

  GetConsoleOutputCP

  WriteConsoleW

  GetStringTypeA

  user32

  MessageBoxA

  advapi32

  ConvertStringSecurityDescriptorToSecurityDescriptorA

  shell32

  ShellExecuteA

  Sections

  .text

  Size: 46KB - Virtual size: 45KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 9KB - Virtual size: 9KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 4KB - Virtual size: 10KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 788B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Main/win64/dbghelp.dll

  .dll windows:10 windows x64 arch:x64

  c3c7540a73aa6487d00a1f12dd6033c8

  
  

  Code Sign

  33:00:00:03:df:fb:6a:e3:f4:27:ec:b6:a3:00:00:00:00:03:df

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  15/12/2020, 21:24 UTC

  Not After

  02/12/2021, 21:24 UTC

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06/07/2010, 20:40 UTC

  Not After

  06/07/2025, 20:50 UTC

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  56:fb:94:17:e1:94:de:8d:50:b3:3e:f9:f8:2d:e3:16:13:55:3a:ca:e5:b5:ab:84:fb:43:cf:df:01:01:79:43

  Signer

  Actual PE Digest

  56:fb:94:17:e1:94:de:8d:50:b3:3e:f9:f8:2d:e3:16:13:55:3a:ca:e5:b5:ab:84:fb:43:cf:df:01:01:79:43

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  dbghelp.pdb

  Imports

  api-ms-win-crt-string-l1-1-0

  memset

  wcsnlen

  strlen

  wcsncmp

  strcmp

  strcspn

  strncmp

  wcscmp

  api-ms-win-crt-time-l1-1-0

  _time64

  _ctime64

  api-ms-win-crt-locale-l1-1-0

  _unlock_locales

  _lock_locales

  api-ms-win-crt-runtime-l1-1-0

  __doserrno

  _initterm

  _initterm_e

  api-ms-win-crt-private-l1-1-0

  _o__filelengthi64

  _o__fullpath

  _o__initialize_narrow_environment

  _o__initialize_onexit_table

  _o__invalid_parameter_noinfo

  _o__invalid_parameter_noinfo_noreturn

  _o__itoa_s

  _o__lseeki64

  _o__ltoa

  _o__mbscmp

  _o__memicmp

  _o__open_osfhandle

  _o__purecall

  _o__read

  _o__register_onexit_function

  _o__seh_filter_dll

  _o__splitpath_s

  _o__stricmp

  _o__strlwr

  _o__strnicmp

  _o__wcsdup

  _o__wcsicmp

  _o__wcslwr

  _o__wcsnicmp

  _o__wctime64

  _o__wdupenv_s

  _o__wfsopen

  _o__wfullpath

  _o__wgetenv

  _o__wmakepath_s

  _o__wsplitpath_s

  _o__wtoi

  _o_abort

  _o_atoi

  _o_atol

  _o_bsearch

  _o_calloc

  _o_ceilf

  _o_fclose

  _o_fflush

  _o_fread

  _o_free

  _o_frexp

  _o_fseek

  _o_ftell

  _o_isspace

  _o_iswprint

  _o_iswspace

  _o_iswxdigit

  _o_localeconv

  _o_malloc

  _o_qsort

  _o_realloc

  _o_setlocale

  _o_strcat_s

  _o_strcpy_s

  _o_strncat_s

  _o_strncpy_s

  _o_terminate

  _o_tolower

  _o_towlower

  _o_wcscat_s

  _o_wcscpy_s

  _o_wcsncat_s

  _o_wcsncpy_s

  _o_wcstoul

  _o_wmemcpy_s

  __uncaught_exception

  _CxxThrowException

  _o___stdio_common_vfprintf

  _o___std_type_info_destroy_list

  _o___std_exception_destroy

  _o___std_exception_copy

  _o___pctype_func

  _o__execute_onexit_table

  _o__errno

  _o__crt_atexit

  _o__configure_narrow_argv

  _o__close

  _o____mb_cur_max_func

  _o____lc_locale_name_func

  _o__cexit

  _o__calloc_base

  _o__callnewh

  _o____lc_codepage_func

  wcsrchr

  strstr

  wcsstr

  wcschr

  __C_specific_handler

  __CxxFrameHandler3

  _o__aligned_malloc

  _o__aligned_free

  strchr

  memcpy

  __unDName

  strrchr

  __unDNameEx

  memcmp

  memmove

  _o___stdio_common_vswprintf_s

  _o___stdio_common_vsscanf

  _o___stdio_common_vsprintf_s

  _o___stdio_common_vsnwprintf_s

  _o___stdio_common_vsnprintf_s

  api-ms-win-core-file-l1-1-0

  SetFilePointerEx

  FindClose

  DeleteFileW

  GetFileType

  SetEndOfFile

  CreateFileA

  GetFileSize

  CreateFileW

  SetFileAttributesW

  RemoveDirectoryW

  GetFinalPathNameByHandleW

  GetFileAttributesA

  FindNextFileW

  SetFileTime

  FindFirstFileW

  CreateDirectoryW

  GetFileSizeEx

  WriteFile

  ReadFile

  SetFilePointer

  CreateDirectoryA

  GetFileAttributesW

  GetFullPathNameW

  api-ms-win-core-errorhandling-l1-1-0

  SetUnhandledExceptionFilter

  SetLastError

  RaiseException

  SetErrorMode

  GetLastError

  UnhandledExceptionFilter

  api-ms-win-core-synch-l1-1-0

  InitializeCriticalSection

  OpenProcess

  DeleteCriticalSection

  LeaveCriticalSection

  EnterCriticalSection

  ReleaseSRWLockExclusive

  AcquireSRWLockExclusive

  InitializeCriticalSectionAndSpinCount

  InitializeSRWLock

  ReleaseSRWLockShared

  TryAcquireSRWLockExclusive

  InitializeCriticalSectionEx

  AcquireSRWLockShared

  api-ms-win-core-misc-l1-1-0

  Sleep

  LocalAlloc

  LocalFree

  FormatMessageW

  api-ms-win-core-handle-l1-1-0

  DuplicateHandle

  CloseHandle

  api-ms-win-core-processthreads-l1-1-0

  TlsSetValue

  GetCurrentProcess

  TlsFree

  TerminateProcess

  TlsAlloc

  GetCurrentProcessId

  TlsGetValue

  GetCurrentThread

  OpenThreadToken

  GetCurrentThreadId

  api-ms-win-core-heap-l1-1-0

  HeapFree

  GetProcessHeap

  HeapReAlloc

  HeapAlloc

  api-ms-win-core-sysinfo-l1-1-0

  GetSystemInfo

  GetVersionExW

  GetVersionExA

  GetSystemTime

  GetSystemDirectoryW

  GetSystemTimeAsFileTime

  GetTickCount

  SystemTimeToFileTime

  api-ms-win-core-libraryloader-l1-1-0

  GetProcAddress

  FreeLibrary

  LoadLibraryExW

  GetModuleFileNameW

  GetModuleHandleA

  LoadLibraryExA

  GetModuleHandleW

  GetModuleHandleExW

  api-ms-win-core-processenvironment-l1-1-0

  ExpandEnvironmentStringsW

  GetEnvironmentVariableW

  SetEnvironmentVariableA

  api-ms-win-security-base-l1-1-0

  GetFileSecurityW

  AccessCheck

  RevertToSelf

  ImpersonateSelf

  api-ms-win-core-string-l1-1-0

  MultiByteToWideChar

  GetStringTypeW

  WideCharToMultiByte

  api-ms-win-core-memory-l1-1-0

  ReadProcessMemory

  MapViewOfFile

  CreateFileMappingW

  MapViewOfFileEx

  UnmapViewOfFile

  VirtualAlloc

  VirtualQuery

  VirtualProtect

  VirtualFree

  api-ms-win-core-debug-l1-1-0

  OutputDebugStringA

  OutputDebugStringW

  IsDebuggerPresent

  DebugBreak

  api-ms-win-core-localregistry-l1-1-0

  RegCloseKey

  RegEnumKeyExW

  RegOpenKeyExW

  RegQueryInfoKeyW

  RegQueryValueExW

  api-ms-win-core-rtlsupport-l1-1-0

  RtlVirtualUnwind

  RtlCaptureContext

  RtlLookupFunctionEntry

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-util-l1-1-0

  DecodePointer

  EncodePointer

  api-ms-win-core-localization-l1-1-0

  LCMapStringEx

  LCMapStringW

  api-ms-win-core-interlocked-l1-1-0

  InitializeSListHead

  ntdll

  RtlUTF8ToUnicodeN

  RtlRunOnceExecuteOnce

  api-ms-win-downlevel-kernel32-l2-1-0

  CreateFileMappingA

  api-ms-win-core-io-l1-1-0

  DeviceIoControl

  api-ms-win-core-threadpool-l1-1-0

  CloseThreadpoolWork

  WaitForThreadpoolWorkCallbacks

  SubmitThreadpoolWork

  CreateThreadpoolWork

  api-ms-win-core-sysinfo-l1-2-0

  GetNativeSystemInfo

  Exports

  Exports

  DbgHelpCreateUserDump

  DbgHelpCreateUserDumpW

  EnumDirTree

  EnumDirTreeW

  EnumerateLoadedModules

  EnumerateLoadedModules64

  EnumerateLoadedModulesEx

  EnumerateLoadedModulesExW

  EnumerateLoadedModulesW64

  ExtensionApiVersion

  FindDebugInfoFile

  FindDebugInfoFileEx

  FindDebugInfoFileExW

  FindExecutableImage

  FindExecutableImageEx

  FindExecutableImageExW

  FindFileInPath

  FindFileInSearchPath

  GetSymLoadError

  GetTimestampForLoadedLibrary

  ImageDirectoryEntryToData

  ImageDirectoryEntryToDataEx

  ImageNtHeader

  ImageRvaToSection

  ImageRvaToVa

  ImagehlpApiVersion

  ImagehlpApiVersionEx

  MakeSureDirectoryPathExists

  MiniDumpReadDumpStream

  MiniDumpWriteDump

  RangeMapAddPeImageSections

  RangeMapCreate

  RangeMapFree

  RangeMapRead

  RangeMapRemove

  RangeMapWrite

  RemoveInvalidModuleList

  ReportSymbolLoadSummary

  SearchTreeForFile

  SearchTreeForFileW

  SetCheckUserInterruptShared

  SetSymLoadError

  StackWalk

  StackWalk64

  StackWalkEx

  SymAddSourceStream

  SymAddSourceStreamA

  SymAddSourceStreamW

  SymAddSymbol

  SymAddSymbolW

  SymAddrIncludeInlineTrace

  SymAllocDiaString

  SymCleanup

  SymCompareInlineTrace

  SymDeleteSymbol

  SymDeleteSymbolW

  SymEnumLines

  SymEnumLinesW

  SymEnumProcesses

  SymEnumSourceFileTokens

  SymEnumSourceFiles

  SymEnumSourceFilesW

  SymEnumSourceLines

  SymEnumSourceLinesW

  SymEnumSym

  SymEnumSymbols

  SymEnumSymbolsEx

  SymEnumSymbolsExW

  SymEnumSymbolsForAddr

  SymEnumSymbolsForAddrW

  SymEnumSymbolsW

  SymEnumTypes

  SymEnumTypesByName

  SymEnumTypesByNameW

  SymEnumTypesW

  SymEnumerateModules

  SymEnumerateModules64

  SymEnumerateModulesW64

  SymEnumerateSymbols

  SymEnumerateSymbols64

  SymEnumerateSymbolsW

  SymEnumerateSymbolsW64

  SymFindDebugInfoFile

  SymFindDebugInfoFileW

  SymFindExecutableImage

  SymFindExecutableImageW

  SymFindFileInPath

  SymFindFileInPathW

  SymFreeDiaString

  SymFromAddr

  SymFromAddrW

  SymFromIndex

  SymFromIndexW

  SymFromInlineContext

  SymFromInlineContextW

  SymFromName

  SymFromNameW

  SymFromToken

  SymFromTokenW

  SymFunctionTableAccess

  SymFunctionTableAccess64

  SymFunctionTableAccess64AccessRoutines

  SymGetDiaSession

  SymGetDiaSource

  SymGetExtendedOption

  SymGetFileLineOffsets64

  SymGetHomeDirectory

  SymGetHomeDirectoryW

  SymGetLineFromAddr

  SymGetLineFromAddr64

  SymGetLineFromAddrEx

  SymGetLineFromAddrW64

  SymGetLineFromInlineContext

  SymGetLineFromInlineContextW

  SymGetLineFromName

  SymGetLineFromName64

  SymGetLineFromNameEx

  SymGetLineFromNameW64

  SymGetLineNext

  SymGetLineNext64

  SymGetLineNextEx

  SymGetLineNextW64

  SymGetLinePrev

  SymGetLinePrev64

  SymGetLinePrevEx

  SymGetLinePrevW64

  SymGetModuleBase

  SymGetModuleBase64

  SymGetModuleInfo

  SymGetModuleInfo64

  SymGetModuleInfoW

  SymGetModuleInfoW64

  SymGetOmapBlockBase

  SymGetOmaps

  SymGetOptions

  SymGetScope

  SymGetScopeW

  SymGetSearchPath

  SymGetSearchPathW

  SymGetSourceFile

  SymGetSourceFileChecksum

  SymGetSourceFileChecksumW

  SymGetSourceFileFromToken

  SymGetSourceFileFromTokenByTokenName

  SymGetSourceFileFromTokenByTokenNameW

  SymGetSourceFileFromTokenW

  SymGetSourceFileToken

  SymGetSourceFileTokenByTokenName

  SymGetSourceFileTokenByTokenNameW

  SymGetSourceFileTokenW

  SymGetSourceFileW

  SymGetSourceVarFromToken

  SymGetSourceVarFromTokenW

  SymGetSymFromAddr

  SymGetSymFromAddr64

  SymGetSymFromName

  SymGetSymFromName64

  SymGetSymNext

  SymGetSymNext64

  SymGetSymPrev

  SymGetSymPrev64

  SymGetSymbolFile

  SymGetSymbolFileW

  SymGetTypeFromName

  SymGetTypeFromNameW

  SymGetTypeInfo

  SymGetTypeInfoEx

  SymGetUnwindInfo

  SymInitialize

  SymInitializeW

  SymLoadModule

  SymLoadModule64

  SymLoadModuleEx

  SymLoadModuleExW

  SymMatchFileName

  SymMatchFileNameW

  SymMatchString

  SymMatchStringA

  SymMatchStringW

  SymNext

  SymNextW

  SymPrev

  SymPrevW

  SymQueryInlineTrace

  SymRefreshModuleList

  SymRegisterCallback

  SymRegisterCallback64

  SymRegisterCallbackW64

  SymRegisterFunctionEntryCallback

  SymRegisterFunctionEntryCallback64

  SymRegisterGetSourcePathPartCallback

  SymRegisterSourceFileUrlListCallback

  SymSearch

  SymSearchW

  SymSetContext

  SymSetDiaSession

  SymSetExtendedOption

  SymSetHomeDirectory

  SymSetHomeDirectoryW

  SymSetOptions

  SymSetParentWindow

  SymSetScopeFromAddr

  SymSetScopeFromIndex

  SymSetScopeFromInlineContext

  SymSetSearchPath

  SymSetSearchPathW

  SymSrvDeltaName

  SymSrvDeltaNameW

  SymSrvGetFileIndexInfo

  SymSrvGetFileIndexInfoW

  SymSrvGetFileIndexString

  SymSrvGetFileIndexStringW

  SymSrvGetFileIndexes

  SymSrvGetFileIndexesW

  SymSrvGetSupplement

  SymSrvGetSupplementW

  SymSrvIsStore

  SymSrvIsStoreW

  SymSrvStoreFile

  SymSrvStoreFileW

  SymSrvStoreSupplement

  SymSrvStoreSupplementW

  SymUnDName

  SymUnDName64

  SymUnloadModule

  SymUnloadModule64

  UnDecorateSymbolName

  UnDecorateSymbolNameW

  WinDbgExtensionDllInit

  _EFN_DumpImage

  block

  chksym

  dbghelp

  dh

  fptr

  homedir

  inlinedbg

  itoldyouso

  lmi

  lminfo

  omap

  optdbgdump

  optdbgdumpaddr

  srcfiles

  stack_force_ebp

  stackdbg

  sym

  symsrv

  vc7fpo

  Sections

  .text

  Size: 1.5MB - Virtual size: 1.5MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 364KB - Virtual size: 363KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 36KB - Virtual size: 141KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 76KB - Virtual size: 74KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .didat

  Size: 4KB - Virtual size: 56B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .mrdata

  Size: 16KB - Virtual size: 12KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 4KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 20KB - Virtual size: 19KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Main/win64/old/dbghelp.dll

  .dll windows:6 windows x64 arch:x64

  1070d0a734a349d697cec96febe8448f

  
  

  Code Sign

  33:00:00:00:2b:39:32:48:c1:b2:c9:48:f3:00:00:00:00:00:2b

  Certificate

  Issuer

  CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  04/09/2012, 21:12 UTC

  Not After

  04/12/2013, 21:12 UTC

  Subject

  CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:C0F4-3086-DEF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  33:00:00:00:b0:11:af:0a:8b:d0:3b:9f:dd:00:01:00:00:00:b0

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  24/01/2013, 22:33 UTC

  Not After

  24/04/2014, 22:33 UTC

  Subject

  CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:33:26:1a:00:00:00:00:00:31

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

  Not Before

  31/08/2010, 22:19 UTC

  Not After

  31/08/2020, 22:29 UTC

  Subject

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:16:68:34:00:00:00:00:00:1c

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

  Not Before

  03/04/2007, 12:53 UTC

  Not After

  03/04/2021, 13:03 UTC

  Subject

  CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  33:00:00:00:16:11:04:b4:88:38:8c:be:c3:00:00:00:00:00:16

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  30/08/2012, 17:49 UTC

  Not After

  30/11/2013, 17:49 UTC

  Subject

  CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06/07/2010, 20:40 UTC

  Not After

  06/07/2025, 20:50 UTC

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  68:87:e2:48:69:c7:7c:2e:c6:a9:c0:b9:fc:ce:a2:ee:7d:25:4f:ba:15:68:4c:d7:09:17:df:2c:d2:bd:00:d3

  Signer

  Actual PE Digest

  68:87:e2:48:69:c7:7c:2e:c6:a9:c0:b9:fc:ce:a2:ee:7d:25:4f:ba:15:68:4c:d7:09:17:df:2c:d2:bd:00:d3

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  bd:f5:ff:62:11:dc:7f:f9:cc:14:b8:b8:6f:f4:51:08:f7:ff:de:8a

  Signer

  Actual PE Digest

  bd:f5:ff:62:11:dc:7f:f9:cc:14:b8:b8:6f:f4:51:08:f7:ff:de:8a

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  dbghelp.pdb

  Imports

  msvcrt

  _lseeki64

  _write

  _isatty

  __pioinfo

  __badioinfo

  _read

  ferror

  wctomb

  _itoa

  _snprintf

  _iob

  __mb_cur_max

  mbtowc

  _fileno

  isleadbyte

  ??1type_info@@UEAA@XZ

  _onexit

  __dllonexit

  _unlock

  _lock

  memset

  memcpy

  _ismbblead

  __C_specific_handler

  _initterm

  _amsg_exit

  _XcptFilter

  _CxxThrowException

  _callnewh

  ?what@exception@@UEBAPEBDXZ

  ??1exception@@UEAA@XZ

  ??0exception@@QEAA@AEBV0@@Z

  ??0exception@@QEAA@AEBQEBDH@Z

  memmove

  __CxxFrameHandler

  _errno

  iswspace

  calloc

  _wcsdup

  towlower

  tolower

  _wcslwr

  _wctime

  time

  _ltoa

  _strnicmp

  _purecall

  ctime

  malloc

  strncmp

  isspace

  _stricmp

  _strlwr

  _vsnwprintf

  iswprint

  fprintf

  fflush

  atol

  fclose

  iswdigit

  __unDName

  bsearch

  memcmp

  strchr

  fread

  fseek

  _wfsopen

  wcstoul

  _wfullpath

  _time64

  _chsize

  _close

  _get_osfhandle

  _open_osfhandle

  ftell

  _mbscmp

  _memicmp

  _wgetenv

  wcsrchr

  strstr

  free

  realloc

  qsort

  iswxdigit

  wcsncmp

  wcschr

  _wcsnicmp

  _wcsicmp

  wcsstr

  _wsopen

  strcmp

  wcscmp

  kernel32

  SetFileAttributesW

  __chkstk

  LCMapStringW

  LocalFree

  CopyFileExW

  GetVersion

  LoadLibraryExA

  GetModuleHandleW

  GetFileType

  DeviceIoControl

  InitializeCriticalSectionAndSpinCount

  MapViewOfFileEx

  FlushViewOfFile

  MoveFileW

  HeapCreate

  HeapDestroy

  VirtualQueryEx

  GetThreadTimes

  GetThreadPriority

  GetPriorityClass

  GetThreadContext

  ResumeThread

  SuspendThread

  CreateFileMappingA

  IsProcessorFeaturePresent

  GetSystemInfo

  LoadLibraryA

  lstrcmpiW

  GetCurrentThreadId

  QueryPerformanceCounter

  TerminateProcess

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  RtlVirtualUnwind

  RtlLookupFunctionEntry

  RtlCaptureContext

  ReadProcessMemory

  LoadLibraryW

  GetSystemDirectoryW

  GetFileAttributesA

  SetErrorMode

  GetVersionExW

  OutputDebugStringW

  OutputDebugStringA

  WriteFile

  VirtualFree

  OpenProcess

  GetCurrentProcessId

  GetModuleHandleA

  MapViewOfFile

  LocalAlloc

  RaiseException

  FormatMessageW

  SetLastError

  FindFirstFileW

  FindClose

  FindNextFileW

  GetDriveTypeW

  EnterCriticalSection

  LeaveCriticalSection

  GetLastError

  DeleteCriticalSection

  ExitThread

  GetTickCount

  CloseHandle

  InitializeCriticalSection

  CreateThread

  WaitForSingleObject

  GetExitCodeThread

  DeleteFileW

  RemoveDirectoryW

  CreateFileA

  GetFileSize

  ReadFile

  TlsGetValue

  TlsSetValue

  LoadLibraryExW

  GetProcAddress

  FreeLibrary

  TlsAlloc

  TlsFree

  GetVersionExA

  GetTempPathW

  GetProcessHeap

  HeapReAlloc

  HeapAlloc

  HeapFree

  IsDBCSLeadByte

  Sleep

  GetEnvironmentVariableW

  SetEnvironmentVariableA

  GetModuleFileNameW

  CreateFileW

  CopyFileW

  CreateDirectoryW

  CreateFileMappingW

  SetFilePointer

  GetSystemTimeAsFileTime

  ExpandEnvironmentStringsW

  MultiByteToWideChar

  WideCharToMultiByte

  GetFullPathNameW

  GetFileAttributesW

  CreateDirectoryA

  VirtualAlloc

  VirtualProtect

  DuplicateHandle

  GetCurrentProcess

  UnmapViewOfFile

  DelayLoadFailureHook

  advapi32

  RegOpenKeyExW

  RegEnumKeyExW

  RegCloseKey

  RegOpenKeyExA

  RegQueryValueExW

  RegQueryValueExA

  RegQueryInfoKeyW

  Exports

  Exports

  DbgHelpCreateUserDump

  DbgHelpCreateUserDumpW

  EnumDirTree

  EnumDirTreeW

  EnumerateLoadedModules

  EnumerateLoadedModules64

  EnumerateLoadedModulesEx

  EnumerateLoadedModulesExW

  EnumerateLoadedModulesW64

  ExtensionApiVersion

  FindDebugInfoFile

  FindDebugInfoFileEx

  FindDebugInfoFileExW

  FindExecutableImage

  FindExecutableImageEx

  FindExecutableImageExW

  FindFileInPath

  FindFileInSearchPath

  GetSymLoadError

  GetTimestampForLoadedLibrary

  ImageDirectoryEntryToData

  ImageDirectoryEntryToDataEx

  ImageNtHeader

  ImageRvaToSection

  ImageRvaToVa

  ImagehlpApiVersion

  ImagehlpApiVersionEx

  MakeSureDirectoryPathExists

  MiniDumpReadDumpStream

  MiniDumpWriteDump

  RangeMapAddPeImageSections

  RangeMapCreate

  RangeMapFree

  RangeMapRead

  RangeMapRemove

  RangeMapWrite

  RemoveInvalidModuleList

  ReportSymbolLoadSummary

  SearchTreeForFile

  SearchTreeForFileW

  SetCheckUserInterruptShared

  SetSymLoadError

  StackWalk

  StackWalk64

  StackWalkEx

  SymAddSourceStream

  SymAddSourceStreamA

  SymAddSourceStreamW

  SymAddSymbol

  SymAddSymbolW

  SymAddrIncludeInlineTrace

  SymCleanup

  SymCompareInlineTrace

  SymDeleteSymbol

  SymDeleteSymbolW

  SymEnumLines

  SymEnumLinesW

  SymEnumProcesses

  SymEnumSourceFileTokens

  SymEnumSourceFiles

  SymEnumSourceFilesW

  SymEnumSourceLines

  SymEnumSourceLinesW

  SymEnumSym

  SymEnumSymbols

  SymEnumSymbolsEx

  SymEnumSymbolsExW

  SymEnumSymbolsForAddr

  SymEnumSymbolsForAddrW

  SymEnumSymbolsW

  SymEnumTypes

  SymEnumTypesByName

  SymEnumTypesByNameW

  SymEnumTypesW

  SymEnumerateModules

  SymEnumerateModules64

  SymEnumerateModulesW64

  SymEnumerateSymbols

  SymEnumerateSymbols64

  SymEnumerateSymbolsW

  SymEnumerateSymbolsW64

  SymFindDebugInfoFile

  SymFindDebugInfoFileW

  SymFindExecutableImage

  SymFindExecutableImageW

  SymFindFileInPath

  SymFindFileInPathW

  SymFromAddr

  SymFromAddrW

  SymFromIndex

  SymFromIndexW

  SymFromInlineContext

  SymFromInlineContextW

  SymFromName

  SymFromNameW

  SymFromToken

  SymFromTokenW

  SymFunctionTableAccess

  SymFunctionTableAccess64

  SymFunctionTableAccess64AccessRoutines

  SymGetFileLineOffsets64

  SymGetHomeDirectory

  SymGetHomeDirectoryW

  SymGetLineFromAddr

  SymGetLineFromAddr64

  SymGetLineFromAddrW64

  SymGetLineFromInlineContext

  SymGetLineFromInlineContextW

  SymGetLineFromName

  SymGetLineFromName64

  SymGetLineFromNameW64

  SymGetLineNext

  SymGetLineNext64

  SymGetLineNextW64

  SymGetLinePrev

  SymGetLinePrev64

  SymGetLinePrevW64

  SymGetModuleBase

  SymGetModuleBase64

  SymGetModuleInfo

  SymGetModuleInfo64

  SymGetModuleInfoW

  SymGetModuleInfoW64

  SymGetOmapBlockBase

  SymGetOmaps

  SymGetOptions

  SymGetScope

  SymGetScopeW

  SymGetSearchPath

  SymGetSearchPathW

  SymGetSourceFile

  SymGetSourceFileFromToken

  SymGetSourceFileFromTokenW

  SymGetSourceFileToken

  SymGetSourceFileTokenW

  SymGetSourceFileW

  SymGetSourceVarFromToken

  SymGetSourceVarFromTokenW

  SymGetSymFromAddr

  SymGetSymFromAddr64

  SymGetSymFromName

  SymGetSymFromName64

  SymGetSymNext

  SymGetSymNext64

  SymGetSymPrev

  SymGetSymPrev64

  SymGetSymbolFile

  SymGetSymbolFileW

  SymGetTypeFromName

  SymGetTypeFromNameW

  SymGetTypeInfo

  SymGetTypeInfoEx

  SymGetUnwindInfo

  SymInitialize

  SymInitializeW

  SymLoadModule

  SymLoadModule64

  SymLoadModuleEx

  SymLoadModuleExW

  SymMatchFileName

  SymMatchFileNameW

  SymMatchString

  SymMatchStringA

  SymMatchStringW

  SymNext

  SymNextW

  SymPrev

  SymPrevW

  SymQueryInlineTrace

  SymRefreshModuleList

  SymRegisterCallback

  SymRegisterCallback64

  SymRegisterCallbackW64

  SymRegisterFunctionEntryCallback

  SymRegisterFunctionEntryCallback64

  SymSearch

  SymSearchW

  SymSetContext

  SymSetHomeDirectory

  SymSetHomeDirectoryW

  SymSetOptions

  SymSetParentWindow

  SymSetScopeFromAddr

  SymSetScopeFromIndex

  SymSetScopeFromInlineContext

  SymSetSearchPath

  SymSetSearchPathW

  SymSrvDeltaName

  SymSrvDeltaNameW

  SymSrvGetFileIndexInfo

  SymSrvGetFileIndexInfoW

  SymSrvGetFileIndexString

  SymSrvGetFileIndexStringW

  SymSrvGetFileIndexes

  SymSrvGetFileIndexesW

  SymSrvGetSupplement

  SymSrvGetSupplementW

  SymSrvIsStore

  SymSrvIsStoreW

  SymSrvStoreFile

  SymSrvStoreFileW

  SymSrvStoreSupplement

  SymSrvStoreSupplementW

  SymUnDName

  SymUnDName64

  SymUnloadModule

  SymUnloadModule64

  UnDecorateSymbolName

  UnDecorateSymbolNameW

  WinDbgExtensionDllInit

  block

  chksym

  dbghelp

  dh

  fptr

  homedir

  inlinedbg

  itoldyouso

  lmi

  lminfo

  omap

  optdbgdump

  optdbgdumpaddr

  srcfiles

  stack_force_ebp

  stackdbg

  sym

  symsrv

  vc7fpo

  Sections

  .text

  Size: 1.3MB - Virtual size: 1.3MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 23KB - Virtual size: 120KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 57KB - Virtual size: 57KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .idata

  Size: 7KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Main/win64/old/symsrv.dll

  .dll windows:6 windows x64 arch:x64

  9e212ffe0679a2b77355884e27f8770c

  
  

  Code Sign

  33:00:00:00:59:d6:73:cd:51:8e:f0:22:c5:00:00:00:00:00:59

  Certificate

  Issuer

  CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  23/05/2014, 17:13 UTC

  Not After

  23/08/2015, 17:13 UTC

  Subject

  CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:F528-3777-8A76,O=Microsoft Corporation,L=Redmond,ST=WA,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  33:00:00:00:ca:6c:d5:32:12:35:c4:e1:55:00:01:00:00:00:ca

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  22/04/2014, 17:39 UTC

  Not After

  22/07/2015, 17:39 UTC

  Subject

  CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:33:26:1a:00:00:00:00:00:31

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

  Not Before

  31/08/2010, 22:19 UTC

  Not After

  31/08/2020, 22:29 UTC

  Subject

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:16:68:34:00:00:00:00:00:1c

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

  Not Before

  03/04/2007, 12:53 UTC

  Not After

  03/04/2021, 13:03 UTC

  Subject

  CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  33:00:00:00:7b:a2:81:0b:87:11:ab:e7:fc:00:00:00:00:00:7b

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  01/10/2014, 18:06 UTC

  Not After

  01/01/2016, 18:06 UTC

  Subject

  CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06/07/2010, 20:40 UTC

  Not After

  06/07/2025, 20:50 UTC

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  17:16:5a:7f:4e:7a:38:4c:53:a9:04:b6:29:44:95:c1:12:7c:0a:c0:ae:e2:33:bc:71:e1:e4:8a:12:21:50:90

  Signer

  Actual PE Digest

  17:16:5a:7f:4e:7a:38:4c:53:a9:04:b6:29:44:95:c1:12:7c:0a:c0:ae:e2:33:bc:71:e1:e4:8a:12:21:50:90

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  15:c1:af:8a:58:5a:d0:36:44:c3:55:7d:9c:d1:ca:34:ca:13:e4:cb

  Signer

  Actual PE Digest

  15:c1:af:8a:58:5a:d0:36:44:c3:55:7d:9c:d1:ca:34:ca:13:e4:cb

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  symsrv.pdb

  Imports

  msvcrt

  ferror

  wctomb

  _itoa

  _snprintf

  _iob

  __mb_cur_max

  mbtowc

  _fileno

  isleadbyte

  memset

  memcpy

  __C_specific_handler

  _initterm

  _amsg_exit

  _XcptFilter

  __badioinfo

  __pioinfo

  _errno

  _isatty

  _write

  _lseeki64

  _vsnwprintf

  malloc

  free

  _wtoi64

  _wcslwr

  strrchr

  fclose

  wcsrchr

  fgetws

  _wfopen

  _stricmp

  ??2@YAPEAX_K@Z

  getenv

  iswspace

  ??3@YAXPEAX@Z

  wcsstr

  tolower

  isspace

  towlower

  _wcsnicmp

  _wcsicmp

  wcschr

  wcscmp

  kernel32

  FreeLibrary

  LoadLibraryExA

  VirtualQuery

  RaiseException

  GetSystemInfo

  GetCurrentThreadId

  GetCurrentProcessId

  QueryPerformanceCounter

  OutputDebugStringA

  TerminateProcess

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  RtlVirtualUnwind

  RtlLookupFunctionEntry

  RtlCaptureContext

  VirtualProtect

  Sleep

  SetErrorMode

  GetDriveTypeW

  GlobalFree

  ReleaseMutex

  OpenMutexW

  LoadLibraryW

  GetSystemDirectoryW

  GetPrivateProfileSectionW

  GetPrivateProfileIntW

  GetModuleFileNameW

  LocalFileTimeToFileTime

  ExpandEnvironmentStringsW

  DeleteFileA

  GetFileInformationByHandle

  FileTimeToLocalFileTime

  SetFileTime

  SetFilePointer

  CreateFileA

  DosDateTimeToFileTime

  FileTimeToDosDateTime

  DeleteCriticalSection

  InitializeCriticalSection

  CreateThread

  GetSystemTime

  CopyFileW

  LeaveCriticalSection

  GetFileAttributesW

  GetLastError

  SetLastError

  EnterCriticalSection

  GetEnvironmentVariableW

  GetCurrentProcess

  CreateDirectoryW

  OutputDebugStringW

  GetModuleHandleW

  GetTickCount

  GetSystemTimeAsFileTime

  WriteFile

  WideCharToMultiByte

  FormatMessageW

  GetVersionExW

  LocalReAlloc

  CreateFileW

  MultiByteToWideChar

  GetProcAddress

  LocalAlloc

  RemoveDirectoryW

  CloseHandle

  DebugBreak

  LocalFree

  DeleteFileW

  GetFileSize

  CopyFileExW

  SetWaitableTimer

  WaitForSingleObject

  ReadFile

  MoveFileW

  CreateWaitableTimerW

  GetFileTime

  LoadLibraryA

  advapi32

  GetTokenInformation

  EqualSid

  AllocateAndInitializeSid

  FreeSid

  RegQueryValueExW

  RegEnumValueW

  RegOpenKeyExW

  RegCloseKey

  OpenProcessToken

  shlwapi

  PathIsUNCServerW

  PathFindNextComponentW

  PathIsUNCW

  ws2_32

  WSAStartup

  FreeAddrInfoW

  GetAddrInfoW

  WSACleanup

  Exports

  Exports

  EulaDlgProc

  RunDllEntry

  SymbolServer

  SymbolServerByIndex

  SymbolServerByIndexW

  SymbolServerClose

  SymbolServerDeltaName

  SymbolServerDeltaNameW

  SymbolServerGetIndexString

  SymbolServerGetIndexStringW

  SymbolServerGetOptions

  SymbolServerGetSupplement

  SymbolServerGetSupplementW

  SymbolServerGetVersion

  SymbolServerIsStore

  SymbolServerIsStoreW

  SymbolServerPing

  SymbolServerPingW

  SymbolServerPingWEx

  SymbolServerSetOptions

  SymbolServerSetOptionsW

  SymbolServerStoreFile

  SymbolServerStoreFileW

  SymbolServerStoreSupplement

  SymbolServerStoreSupplementW

  SymbolServerW

  SymbolServerWEx

  httpCloseHandle

  httpOpenFileHandle

  httpOpenFileHandleW

  httpQueryDataAvailable

  httpReadFile

  Sections

  .text

  Size: 103KB - Virtual size: 103KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 7KB - Virtual size: 173KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .idata

  Size: 5KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .didat

  Size: 512B - Virtual size: 456B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1024B - Virtual size: 808B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Main/win64/sqlite3.dll

  .dll windows:6 windows x64 arch:x64

  6cc72dfd29b7bcfb61ec75e3082dfc41

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  c:\MinGW\msys\1.0\home\drh\sqlite\sqlite\sqlite3.pdb

  Imports

  kernel32

  GetVersionExA

  OutputDebugStringA

  GetFileAttributesExW

  GetSystemInfo

  GetDiskFreeSpaceA

  CreateFileMappingW

  CreateFileMappingA

  LoadLibraryA

  GetDiskFreeSpaceW

  LockFileEx

  HeapSize

  GetProcAddress

  GetLastError

  GetTempPathW

  FlushFileBuffers

  MultiByteToWideChar

  CreateFileW

  ReadFile

  GetFileAttributesW

  HeapValidate

  HeapCreate

  GetFileAttributesA

  HeapDestroy

  GetVersionExW

  FormatMessageW

  Sleep

  LoadLibraryW

  WideCharToMultiByte

  WriteFile

  FormatMessageA

  GetSystemTimeAsFileTime

  GetProcessHeap

  UnlockFileEx

  GetTickCount

  OutputDebugStringW

  WaitForSingleObjectEx

  LockFile

  UnlockFile

  WaitForSingleObject

  HeapFree

  QueryPerformanceCounter

  SystemTimeToFileTime

  HeapAlloc

  FreeLibrary

  SetEndOfFile

  UnmapViewOfFile

  MapViewOfFile

  SetFilePointer

  HeapCompact

  CreateMutexW

  GetFileSize

  CreateFileA

  HeapReAlloc

  GetFullPathNameA

  GetFullPathNameW

  DeleteFileA

  AreFileApisANSI

  GetSystemTime

  LocalFree

  GetTempPathA

  GetCurrentProcessId

  DeleteFileW

  CloseHandle

  InitializeCriticalSection

  EnterCriticalSection

  LeaveCriticalSection

  TryEnterCriticalSection

  DeleteCriticalSection

  GetCurrentThreadId

  IsDebuggerPresent

  IsProcessorFeaturePresent

  EncodePointer

  DecodePointer

  CreateThread

  ExitThread

  LoadLibraryExW

  GetCommandLineA

  RtlCaptureContext

  RtlLookupFunctionEntry

  RtlVirtualUnwind

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  FlsAlloc

  FlsGetValue

  FlsSetValue

  FlsFree

  GetCurrentProcess

  TerminateProcess

  GetStartupInfoW

  GetModuleHandleW

  ExitProcess

  GetModuleHandleExW

  GetStdHandle

  GetModuleFileNameW

  GetTimeZoneInformation

  SetLastError

  GetCurrentThread

  RtlUnwindEx

  GetFileType

  InitializeCriticalSectionAndSpinCount

  InitOnceExecuteOnce

  GetModuleFileNameA

  GetTickCount64

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  FatalAppExitA

  SetConsoleCtrlHandler

  IsValidCodePage

  GetACP

  GetOEMCP

  GetCPInfo

  GetTimeFormatEx

  GetDateFormatEx

  CompareStringEx

  GetLocaleInfoEx

  GetUserDefaultLocaleName

  LCMapStringEx

  IsValidLocaleName

  EnumSystemLocalesEx

  GetStringTypeW

  GetConsoleCP

  GetConsoleMode

  SetEnvironmentVariableA

  SetStdHandle

  SetFilePointerEx

  WriteConsoleW

  Exports

  Exports

  sqlite3_aggregate_context

  sqlite3_aggregate_count

  sqlite3_auto_extension

  sqlite3_backup_finish

  sqlite3_backup_init

  sqlite3_backup_pagecount

  sqlite3_backup_remaining

  sqlite3_backup_step

  sqlite3_bind_blob

  sqlite3_bind_blob64

  sqlite3_bind_double

  sqlite3_bind_int

  sqlite3_bind_int64

  sqlite3_bind_null

  sqlite3_bind_parameter_count

  sqlite3_bind_parameter_index

  sqlite3_bind_parameter_name

  sqlite3_bind_text

  sqlite3_bind_text16

  sqlite3_bind_text64

  sqlite3_bind_value

  sqlite3_bind_zeroblob

  sqlite3_blob_bytes

  sqlite3_blob_close

  sqlite3_blob_open

  sqlite3_blob_read

  sqlite3_blob_reopen

  sqlite3_blob_write

  sqlite3_busy_handler

  sqlite3_busy_timeout

  sqlite3_cancel_auto_extension

  sqlite3_changes

  sqlite3_clear_bindings

  sqlite3_close

  sqlite3_close_v2

  sqlite3_collation_needed

  sqlite3_collation_needed16

  sqlite3_column_blob

  sqlite3_column_bytes

  sqlite3_column_bytes16

  sqlite3_column_count

  sqlite3_column_database_name

  sqlite3_column_database_name16

  sqlite3_column_decltype

  sqlite3_column_decltype16

  sqlite3_column_double

  sqlite3_column_int

  sqlite3_column_int64

  sqlite3_column_name

  sqlite3_column_name16

  sqlite3_column_origin_name

  sqlite3_column_origin_name16

  sqlite3_column_table_name

  sqlite3_column_table_name16

  sqlite3_column_text

  sqlite3_column_text16

  sqlite3_column_type

  sqlite3_column_value

  sqlite3_commit_hook

  sqlite3_compileoption_get

  sqlite3_compileoption_used

  sqlite3_complete

  sqlite3_complete16

  sqlite3_config

  sqlite3_context_db_handle

  sqlite3_create_collation

  sqlite3_create_collation16

  sqlite3_create_collation_v2

  sqlite3_create_function

  sqlite3_create_function16

  sqlite3_create_function_v2

  sqlite3_create_module

  sqlite3_create_module_v2

  sqlite3_data_count

  sqlite3_data_directory

  sqlite3_db_config

  sqlite3_db_filename

  sqlite3_db_handle

  sqlite3_db_mutex

  sqlite3_db_readonly

  sqlite3_db_release_memory

  sqlite3_db_status

  sqlite3_declare_vtab

  sqlite3_enable_load_extension

  sqlite3_enable_shared_cache

  sqlite3_errcode

  sqlite3_errmsg

  sqlite3_errmsg16

  sqlite3_errstr

  sqlite3_exec

  sqlite3_expired

  sqlite3_extended_errcode

  sqlite3_extended_result_codes

  sqlite3_file_control

  sqlite3_finalize

  sqlite3_free

  sqlite3_free_table

  sqlite3_get_autocommit

  sqlite3_get_auxdata

  sqlite3_get_table

  sqlite3_global_recover

  sqlite3_initialize

  sqlite3_interrupt

  sqlite3_last_insert_rowid

  sqlite3_libversion

  sqlite3_libversion_number

  sqlite3_limit

  sqlite3_load_extension

  sqlite3_log

  sqlite3_malloc

  sqlite3_malloc64

  sqlite3_memory_alarm

  sqlite3_memory_highwater

  sqlite3_memory_used

  sqlite3_mprintf

  sqlite3_msize

  sqlite3_mutex_alloc

  sqlite3_mutex_enter

  sqlite3_mutex_free

  sqlite3_mutex_leave

  sqlite3_mutex_try

  sqlite3_next_stmt

  sqlite3_open

  sqlite3_open16

  sqlite3_open_v2

  sqlite3_os_end

  sqlite3_os_init

  sqlite3_overload_function

  sqlite3_prepare

  sqlite3_prepare16

  sqlite3_prepare16_v2

  sqlite3_prepare_v2

  sqlite3_profile

  sqlite3_progress_handler

  sqlite3_randomness

  sqlite3_realloc

  sqlite3_realloc64

  sqlite3_release_memory

  sqlite3_reset

  sqlite3_reset_auto_extension

  sqlite3_result_blob

  sqlite3_result_blob64

  sqlite3_result_double

  sqlite3_result_error

  sqlite3_result_error16

  sqlite3_result_error_code

  sqlite3_result_error_nomem

  sqlite3_result_error_toobig

  sqlite3_result_int

  sqlite3_result_int64

  sqlite3_result_null

  sqlite3_result_text

  sqlite3_result_text16

  sqlite3_result_text16be

  sqlite3_result_text16le

  sqlite3_result_text64

  sqlite3_result_value

  sqlite3_result_zeroblob

  sqlite3_rollback_hook

  sqlite3_rtree_geometry_callback

  sqlite3_rtree_query_callback

  sqlite3_set_authorizer

  sqlite3_set_auxdata

  sqlite3_shutdown

  sqlite3_sleep

  sqlite3_snprintf

  sqlite3_soft_heap_limit

  sqlite3_soft_heap_limit64

  sqlite3_sourceid

  sqlite3_sql

  sqlite3_status

  sqlite3_step

  sqlite3_stmt_busy

  sqlite3_stmt_readonly

  sqlite3_stmt_status

  sqlite3_strglob

  sqlite3_stricmp

  sqlite3_strnicmp

  sqlite3_table_column_metadata

  sqlite3_temp_directory

  sqlite3_test_control

  sqlite3_thread_cleanup

  sqlite3_threadsafe

  sqlite3_total_changes

  sqlite3_trace

  sqlite3_transfer_bindings

  sqlite3_update_hook

  sqlite3_uri_boolean

  sqlite3_uri_int64

  sqlite3_uri_parameter

  sqlite3_user_data

  sqlite3_value_blob

  sqlite3_value_bytes

  sqlite3_value_bytes16

  sqlite3_value_double

  sqlite3_value_int

  sqlite3_value_int64

  sqlite3_value_numeric_type

  sqlite3_value_text

  sqlite3_value_text16

  sqlite3_value_text16be

  sqlite3_value_text16le

  sqlite3_value_type

  sqlite3_version

  sqlite3_vfs_find

  sqlite3_vfs_register

  sqlite3_vfs_unregister

  sqlite3_vmprintf

  sqlite3_vsnprintf

  sqlite3_vtab_config

  sqlite3_vtab_on_conflict

  sqlite3_wal_autocheckpoint

  sqlite3_wal_checkpoint

  sqlite3_wal_checkpoint_v2

  sqlite3_wal_hook

  sqlite3_win32_is_nt

  sqlite3_win32_mbcs_to_utf8

  sqlite3_win32_set_directory

  sqlite3_win32_sleep

  sqlite3_win32_utf8_to_mbcs

  sqlite3_win32_write_debug

  Sections

  .text

  Size: 1.0MB - Virtual size: 1.0MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 167KB - Virtual size: 167KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 17KB - Virtual size: 28KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 50KB - Virtual size: 49KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .idata

  Size: 5KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 5KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 6KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Main/win64/symsrv.dll

  .dll windows:10 windows x64 arch:x64

  05f149f096a6c7f86365ddf52ede142f

  
  

  Code Sign

  33:00:00:03:df:fb:6a:e3:f4:27:ec:b6:a3:00:00:00:00:03:df

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  15/12/2020, 21:24 UTC

  Not After

  02/12/2021, 21:24 UTC

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0c:52:4c:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06/07/2010, 20:40 UTC

  Not After

  06/07/2025, 20:50 UTC

  Subject

  CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  65:32:07:62:84:03:4f:2f:ad:93:2c:09:a2:4d:fd:81:85:44:fc:0c:25:d0:bf:8d:f8:8e:d7:c8:1f:b4:38:c8

  Signer

  Actual PE Digest

  65:32:07:62:84:03:4f:2f:ad:93:2c:09:a2:4d:fd:81:85:44:fc:0c:25:d0:bf:8d:f8:8e:d7:c8:1f:b4:38:c8

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  symsrv.pdb

  Imports

  msvcrt

  _stricmp

  _wtoi64

  getenv

  swprintf_s

  _unlock

  __dllonexit

  vswprintf_s

  _wcslwr

  tolower

  _wsplitpath_s

  _onexit

  __CxxFrameHandler3

  ?terminate@@YAXXZ

  _wcslwr_s

  _wmakepath_s

  iswspace

  wcsrchr

  fgetws

  _wcsdup

  ??1type_info@@UEAA@XZ

  _wfopen

  ??_V@YAXPEAX@Z

  __C_specific_handler

  wcsncpy_s

  memmove

  wcschr

  _vsnprintf_s

  ??0exception@@QEAA@AEBV0@@Z

  memcmp

  memcpy

  _CxxThrowException

  strcat_s

  ??0exception@@QEAA@XZ

  memset

  fclose

  ??1exception@@UEAA@XZ

  _purecall

  ??3@YAXPEAX@Z

  free

  wcsstr

  _lock

  _initterm

  calloc

  _amsg_exit

  _wcsicmp

  _XcptFilter

  strpbrk

  strstr

  realloc

  iswprint

  _vsnwprintf_s

  isspace

  memcpy_s

  towlower

  ?what@exception@@UEBAPEBDXZ

  ??0exception@@QEAA@AEBQEBDH@Z

  strrchr

  _callnewh

  wcsnlen

  malloc

  _wcsupr

  wcsncmp

  _vsnwprintf

  strnlen

  wcscpy_s

  _wcsnicmp

  wcscat_s

  ??0exception@@QEAA@AEBQEBD@Z

  swscanf_s

  _errno

  strcpy_s

  wcscmp

  api-ms-win-core-libraryloader-l1-1-0

  GetModuleFileNameW

  GetModuleFileNameA

  GetModuleHandleExW

  GetProcAddress

  LoadLibraryExW

  GetModuleHandleW

  LoadLibraryExA

  FreeLibrary

  api-ms-win-core-heap-l1-1-0

  HeapAlloc

  GetProcessHeap

  HeapFree

  api-ms-win-core-processthreads-l1-1-0

  GetCurrentThreadId

  GetExitCodeThread

  GetCurrentProcessId

  CreateThread

  TerminateProcess

  GetCurrentProcess

  OpenProcessToken

  api-ms-win-core-misc-l1-1-0

  LocalAlloc

  LocalReAlloc

  GlobalFree

  LocalFree

  FormatMessageW

  Sleep

  api-ms-win-core-debug-l1-1-0

  DebugBreak

  IsDebuggerPresent

  OutputDebugStringW

  api-ms-win-security-base-l1-1-0

  AllocateAndInitializeSid

  EqualSid

  FreeSid

  GetTokenInformation

  api-ms-win-core-file-l1-1-0

  GetFileAttributesExW

  WriteFile

  GetFileTime

  GetDriveTypeW

  SetFilePointerEx

  CreateFileW

  CreateDirectoryW

  DeleteFileW

  GetFileAttributesW

  GetFinalPathNameByHandleW

  GetFullPathNameW

  GetFileSizeEx

  ReadFile

  GetFileSize

  FileTimeToLocalFileTime

  DeleteFileA

  CreateFileA

  LocalFileTimeToFileTime

  GetFileInformationByHandle

  SetFilePointer

  SetFileTime

  RemoveDirectoryW

  api-ms-win-core-errorhandling-l1-1-0

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  GetLastError

  RaiseException

  SetLastError

  SetErrorMode

  api-ms-win-core-processenvironment-l1-1-0

  GetEnvironmentVariableW

  ExpandEnvironmentStringsW

  api-ms-win-core-sysinfo-l1-1-0

  GetSystemInfo

  GetVersionExW

  GetTickCount64

  GetSystemTimeAsFileTime

  GetTickCount

  GetSystemDirectoryW

  api-ms-win-core-string-l1-1-0

  MultiByteToWideChar

  WideCharToMultiByte

  api-ms-win-core-synch-l1-1-0

  ReleaseSRWLockShared

  SetWaitableTimer

  EnterCriticalSection

  AcquireSRWLockShared

  InitializeCriticalSection

  AcquireSRWLockExclusive

  ReleaseSRWLockExclusive

  OpenMutexW

  SetEvent

  WaitForSingleObject

  InitializeSRWLock

  DeleteCriticalSection

  CreateEventW

  CreateMutexExW

  OpenSemaphoreW

  WaitForSingleObjectEx

  ReleaseMutex

  ReleaseSemaphore

  CreateSemaphoreExW

  TryAcquireSRWLockExclusive

  LeaveCriticalSection

  api-ms-win-core-handle-l1-1-0

  CloseHandle

  rpcrt4

  UuidCreate

  api-ms-win-core-localregistry-l1-1-0

  RegEnumValueW

  RegOpenKeyExW

  RegCloseKey

  RegQueryValueExW

  ws2_32

  GetAddrInfoW

  WSACleanup

  FreeAddrInfoW

  WSAStartup

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-rtlsupport-l1-1-0

  RtlVirtualUnwind

  RtlLookupFunctionEntry

  RtlCaptureContext

  oleaut32

  SysFreeString

  shlwapi

  PathFindFileNameW

  kernel32

  CancelSynchronousIo

  WaitForMultipleObjects

  ntdll

  RtlRunOnceExecuteOnce

  RtlUTF8ToUnicodeN

  crypt32

  CryptStringToBinaryW

  CryptBinaryToStringW

  bcrypt

  BCryptHashData

  BCryptDestroyHash

  BCryptCloseAlgorithmProvider

  BCryptFinishHash

  BCryptOpenAlgorithmProvider

  BCryptGetProperty

  BCryptCreateHash

  api-ms-win-core-memory-l1-1-0

  VirtualQuery

  VirtualProtect

  api-ms-win-core-threadpool-l1-1-0

  WaitForThreadpoolTimerCallbacks

  CreateThreadpoolTimer

  CloseThreadpoolTimer

  SetThreadpoolTimer

  Exports

  Exports

  EulaDlgProc

  RunDllEntry

  SymbolServer

  SymbolServerByIndex

  SymbolServerByIndexAndChecksumsW

  SymbolServerByIndexW

  SymbolServerClose

  SymbolServerDeltaName

  SymbolServerDeltaNameW

  SymbolServerGetIndexString

  SymbolServerGetIndexStringW

  SymbolServerGetOptionData

  SymbolServerGetOptions

  SymbolServerGetSupplement

  SymbolServerGetSupplementW

  SymbolServerGetVersion

  SymbolServerIsStore

  SymbolServerIsStoreW

  SymbolServerPing

  SymbolServerPingW

  SymbolServerPingWEx

  SymbolServerSetHttpAuthHeader

  SymbolServerSetOptions

  SymbolServerSetOptionsW

  SymbolServerStoreFile

  SymbolServerStoreFileW

  SymbolServerStoreSupplement

  SymbolServerStoreSupplementW

  SymbolServerW

  SymbolServerWEx

  SymbolServerWithChecksumsW

  httpCloseHandle

  httpOpenFileHandle

  httpOpenFileHandleW

  httpQueryDataAvailable

  httpReadFile

  Sections

  .text

  Size: 176KB - Virtual size: 175KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 104KB - Virtual size: 103KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 4KB - Virtual size: 212KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 8KB - Virtual size: 7KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .didat

  Size: 4KB - Virtual size: 512B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .mrdata

  Size: 16KB - Virtual size: 12KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 8KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 4KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Main/win64/symsrv.yes
• READ_ME.txt