7212cb29f53f4b8ed9e6d04741461e55c0358f05db5efbd744219d435c5eed38

Sharing

Copy URL Twitter E-mail

General

Target

7212cb29f53f4b8ed9e6d04741461e55c0358f05db5efbd744219d435c5eed38
Size

12.0MB
MD5

0df078a54ba806e982b3109960f43c05
SHA1

03af863f0e0b13b76e279bfb1e39f3496b8699c1
SHA256

7212cb29f53f4b8ed9e6d04741461e55c0358f05db5efbd744219d435c5eed38
SHA512

d4424a442e7e1d9a0291df6bd02c407fdc9bee17fce785ad0aed912dbc1f162ead44b29cbf63a5902840b300195fdcdd52de972aa0e378d41609980256bf8cf9
SSDEEP

393216:Dqihi0qZymiOQHOxRhkx8IIj3r1vAo+FzpBT/TjL9:DqihciOTRGxzQ7pl+1jTT9

Score

3^/10

Malware Config

Signatures

Unsigned PE 11 IoCs

Checks for missing Authenticode signature.

resource
unpack001/DEN-Maps.dll
unpack001/SeamlessCoop/crashpad/crashpad_handler.exe
unpack001/SeamlessCoop/elden_ring_seamless_coop.dll
unpack001/launch_elden_ring_seamlesscoop.exe
unpack001/modengine2/bin/lua.dll
unpack001/modengine2/bin/modengine2.dll
unpack001/modengine2/crashpad/crashpad_handler.exe
unpack001/modengine2/crashpad/zlib1.dll
unpack001/modengine2/tools/scyllahide/HookLibraryx64.dll
unpack001/modengine2/tools/scyllahide/InjectorCLIx64.exe
unpack001/modengine2_launcher.exe

Files

7212cb29f53f4b8ed9e6d04741461e55c0358f05db5efbd744219d435c5eed38
.zip
DEN-Maps.dll
.dll windows:6 windows x64 arch:x64

fe0a8c7396a06bf36d832d87aa83ee95

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\ADHD Reorganization of Files Test\MODDING\~Souls Modding\~Projects\Shared Projects\DEN-Maps-Dev\dll_modding\DEN-Maps\x64\Release\DEN-Maps.pdb

Imports

kernel32

GetDynamicTimeZoneInformation
GetCurrentThreadId
Sleep
GetCurrentProcessId
GetModuleHandleW
SetConsoleTextAttribute
GetConsoleScreenBufferInfo
WriteConsoleA
WriteFile
GetStdHandle
GetConsoleMode
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetProcAddress
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
CloseHandle

msvcp140

_Cnd_do_broadcast_at_thread_exit
??1facet@locale@std@@MEAA@XZ
??0facet@locale@std@@IEAA@_K@Z
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
??Bid@locale@std@@QEAA_KXZ
?_Gettrue@_Locinfo@std@@QEBAPEBDXZ
?_Getlconv@_Locinfo@std@@QEBAPEBUlconv@@XZ
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
??1_Locinfo@std@@QEAA@XZ
??0_Locinfo@std@@QEAA@PEBD@Z
?id@?$numpunct@D@std@@2V0locale@2@A
?_Throw_C_error@std@@YAXH@Z
_Xtime_get_ticks
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
?_Xlength_error@std@@YAXPEBD@Z
?_Syserror_map@std@@YAPEBDH@Z
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Getfalse@_Locinfo@std@@QEBAPEBDXZ
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPEBD@Z
_Thrd_id
?_Throw_Cpp_error@std@@YAXH@Z
_Thrd_join
_Cnd_signal
_Cnd_destroy_in_situ
_Mtx_unlock
_Mtx_lock
_Mtx_destroy_in_situ
_Mtx_init_in_situ
_Thrd_detach

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memcmp
memcpy
__std_type_info_destroy_list
memset
__C_specific_handler
__current_exception_context
__current_exception
__std_exception_destroy
__std_exception_copy
__std_terminate
memmove
_CxxThrowException

api-ms-win-crt-math-l1-1-0

_fdclass
_dclass
_dsign
_ldclass
_fdsign
ceilf
_ldsign

api-ms-win-crt-time-l1-1-0

_gmtime64_s
_localtime64_s
strftime

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf

api-ms-win-crt-heap-l1-1-0

calloc
_callnewh
free
malloc

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll
_register_onexit_function
_execute_onexit_table
_beginthreadex
_crt_atexit
_initialize_onexit_table
_initialize_narrow_environment
_initterm_e
_errno
_initterm
_invalid_parameter_noinfo_noreturn
terminate
_cexit
_configure_narrow_argv

api-ms-win-crt-string-l1-1-0

toupper
isdigit

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 167KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
README.txt
SeamlessCoop/crashpad/crashpad_handler.exe
.exe windows:6 windows x64 arch:x64

9f6e61c22777af70323494d32383223d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Luke\crashpad\crashpad\out\Default\crashpad_handler.pdb

Imports

kernel32

InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
DeleteCriticalSection
SetLastError
GetModuleFileNameW
GetFileInformationByHandleEx
GetCurrentProcess
RegisterWaitForSingleObject
TerminateProcess
GetQueuedCompletionStatus
WaitForSingleObject
DuplicateHandle
DisconnectNamedPipe
OpenProcess
PostQueuedCompletionStatus
CreateEventW
SetEvent
CreateThread
UnregisterWaitEx
CreateIoCompletionPort
ConnectNamedPipe
SetNamedPipeHandleState
CreateNamedPipeW
CreateFileW
GetVersion
TransactNamedPipe
WaitNamedPipeW
LoadLibraryW
GetProcAddress
FindClose
CloseHandle
ReleaseSemaphore
CreateSemaphoreW
ReadFile
GetFileSizeEx
GetStdHandle
WriteFile
EnterCriticalSection
UnlockFileEx
SetFilePointerEx
LockFileEx
GetFileType
GetModuleHandleW
FormatMessageA
LocalFree
CreateDirectoryW
GetFileAttributesW
DeleteFileW
GetTimeZoneInformation
GetSystemInfo
IsProcessorFeaturePresent
VerSetConditionMask
VerifyVersionInfoW
GetProcessId
Wow64GetThreadContext
SuspendThread
ResumeThread
GetThreadContext
GetProcessTimes
GetSystemDefaultLCID
GetThreadLocale
GetUserDefaultLCID
IsWow64Process
Sleep
RaiseException
CreateProcessW
SleepEx
GetFullPathNameW
GetCurrentProcessId
GetLocalTime
OutputDebugStringW
GetLastError
FormatMessageW
GetCurrentThreadId
SetUnhandledExceptionFilter
SetProcessShutdownParameters
SetEndOfFile
GetCurrentDirectoryW
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetFileInformationByHandle
GetDriveTypeW
SetConsoleCtrlHandler
InitOnceExecuteOnce
InitializeCriticalSection
VirtualQueryEx
ReadProcessMemory
GetFileTime
RemoveDirectoryW
WriteConsoleW
HeapSize
GetProcessHeap
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
WideCharToMultiByte
InitOnceComplete
InitOnceBeginInitialize
InitializeCriticalSectionEx
EncodePointer
DecodePointer
MultiByteToWideChar
LCMapStringEx
GetStringTypeW
GetCPInfo
ResetEvent
WaitForSingleObjectEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlPcToFileHeader
RtlUnwindEx
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
RtlUnwind
GetCommandLineA
GetCommandLineW
ExitProcess
GetModuleHandleExW
HeapAlloc
HeapFree
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
EnumSystemLocalesW
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
HeapReAlloc
FindFirstFileExW
FindNextFileW

advapi32

SystemFunction036
RegCloseKey
RegQueryValueExA
RegOpenKeyExW
RegQueryValueExW
BuildExplicitAccessWithNameW
ConvertStringSecurityDescriptorToSecurityDescriptorW
BuildSecurityDescriptorW
RevertToSelf
ImpersonateNamedPipeClient

user32

TranslateMessage
RegisterClassW
DispatchMessageW
GetWindowLongPtrW
UnregisterClassW
CreateWindowExW
SetWindowLongPtrW
DestroyWindow
PostMessageW
DefWindowProcW
GetMessageW

winhttp

WinHttpWriteData
WinHttpSendRequest
WinHttpSetTimeouts
WinHttpCrackUrl
WinHttpCloseHandle
WinHttpOpenRequest
WinHttpReadData
WinHttpQueryHeaders
WinHttpAddRequestHeaders
WinHttpOpen
WinHttpReceiveResponse
WinHttpConnect

powrprof

CallNtPowerInformation

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

Sections

.text
Size: 595KB - Virtual size: 595KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

CPADinfo
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeamlessCoop/elden_ring_seamless_coop.dll
.dll windows:6 windows x64 arch:x64

b4a27929bff5151e0314a453895c0d83

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Luke\source\repos\elden_ring_seamless_coop\x64\Release\elden_ring_seamless_coop.pdb

Imports

kernel32

AcquireSRWLockExclusive
AddVectoredExceptionHandler
AreFileApisANSI
CloseHandle
CloseThreadpoolWork
CompareStringW
CreateDirectoryW
CreateEventW
CreateFileA
CreateFileW
CreateNamedPipeW
CreateProcessW
CreateThread
CreateThreadpoolWork
CreateToolhelp32Snapshot
DecodePointer
DeleteCriticalSection
DeleteFileW
EncodePointer
EnterCriticalSection
EnumSystemLocalesW
ExitProcess
ExitThread
FileTimeToSystemTime
FindClose
FindFirstFileExW
FindFirstFileW
FindNextFileW
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FlushInstructionCache
FormatMessageA
FormatMessageW
FreeEnvironmentStringsW
FreeLibrary
FreeLibraryAndExitThread
FreeLibraryWhenCallbackReturns
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatW
GetDriveTypeW
GetEnvironmentStringsW
GetEnvironmentVariableA
GetExitCodeThread
GetFileAttributesExW
GetFileAttributesW
GetFileInformationByHandle
GetFileInformationByHandleEx
GetFileSize
GetFileSizeEx
GetFileTime
GetFileType
GetFullPathNameW
GetLastError
GetLocalTime
GetLocaleInfoEx
GetLocaleInfoW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExA
GetModuleHandleExW
GetModuleHandleW
GetNativeSystemInfo
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemDirectoryA
GetSystemInfo
GetSystemTimeAsFileTime
GetThreadContext
GetTickCount
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
GetVersion
HeapAlloc
HeapCreate
HeapFree
HeapReAlloc
HeapSize
InitOnceBeginInitialize
InitOnceComplete
InitializeConditionVariable
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
InitializeSListHead
InitializeSRWLock
InterlockedFlushSList
InterlockedPushEntrySList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
K32GetModuleInformation
LCMapStringEx
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
LoadLibraryW
LocalFree
LockFileEx
MoveFileExA
MultiByteToWideChar
OpenFile
OpenProcess
OpenThread
OutputDebugStringW
PeekNamedPipe
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadConsoleW
ReadFile
ReleaseSRWLockExclusive
RemoveDirectoryW
ResetEvent
ResumeThread
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwind
RtlUnwindEx
RtlVirtualUnwind
SetConsoleCtrlHandler
SetEndOfFile
SetEnvironmentVariableW
SetEvent
SetFilePointerEx
SetLastError
SetNamedPipeHandleState
SetStdHandle
SetThreadContext
SetUnhandledExceptionFilter
Sleep
SleepConditionVariableSRW
SleepEx
SubmitThreadpoolWork
SuspendThread
SystemTimeToTzSpecificLocalTime
TerminateProcess
Thread32First
Thread32Next
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TransactNamedPipe
TryAcquireSRWLockExclusive
UnhandledExceptionFilter
UnlockFileEx
VerSetConditionMask
VerifyVersionInfoA
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObjectEx
WaitNamedPipeW
WakeAllConditionVariable
WakeConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile

user32

GetAsyncKeyState
IsCharAlphaNumericA
MessageBoxA

steam_api64

SteamAPI_GetHSteamPipe
SteamAPI_GetHSteamUser
SteamAPI_RegisterCallback
SteamAPI_UnregisterCallback
SteamInternal_ContextInit
SteamInternal_CreateInterface
SteamInternal_FindOrCreateGameServerInterface
SteamInternal_FindOrCreateUserInterface

ole32

CoGetApartmentType
CoGetObjectContext

advapi32

BuildExplicitAccessWithNameW
BuildSecurityDescriptorW
ConvertStringSecurityDescriptorToSecurityDescriptorW
CryptAcquireContextA
CryptCreateHash
CryptDestroyHash
CryptDestroyKey
CryptEncrypt
CryptGenRandom
CryptGetHashParam
CryptHashData
CryptImportKey
CryptReleaseContext
SystemFunction036

ws2_32

WSACleanup
WSACloseEvent
WSACreateEvent
WSAEnumNetworkEvents
WSAEventSelect
WSAGetLastError
WSAIoctl
WSASetLastError
WSAStartup
__WSAFDIsSet
accept
bind
closesocket
connect
freeaddrinfo
getaddrinfo
gethostname
getpeername
getsockname
getsockopt
htonl
htons
ioctlsocket
listen
ntohl
ntohs
recv
recvfrom
select
send
sendto
setsockopt
socket

wldap32

ord301
ord45
ord22
ord32
ord26
ord30
ord35
ord143
ord200
ord41
ord33
ord27
ord50
ord211
ord60
ord217
ord46
ord79

normaliz

IdnToAscii

crypt32

CertAddCertificateContextToStore
CertCloseStore
CertCreateCertificateChainEngine
CertEnumCertificatesInStore
CertFindCertificateInStore
CertFindExtension
CertFreeCertificateChain
CertFreeCertificateChainEngine
CertFreeCertificateContext
CertGetCertificateChain
CertGetNameStringA
CertOpenStore
CryptDecodeObjectEx
CryptQueryObject
CryptStringToBinaryA
PFXImportCertStore

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 440KB - Virtual size: 440KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gxfg
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.retplne
Size: 512B - Virtual size: 92B

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SeamlessCoop/locale/brazilian.json
SeamlessCoop/locale/english.json
SeamlessCoop/locale/french.json
SeamlessCoop/locale/german.json
SeamlessCoop/locale/hungarian.json
SeamlessCoop/locale/italian.json
SeamlessCoop/locale/japanese.json
SeamlessCoop/locale/koreana.json
SeamlessCoop/locale/latam.json
SeamlessCoop/locale/polish.json
SeamlessCoop/locale/russian.json
SeamlessCoop/locale/schinese.json
SeamlessCoop/locale/spanish.json
SeamlessCoop/locale/tchinese.json
SeamlessCoop/locale/thai.json
SeamlessCoop/seamlesscoopsettings.ini
config_darksouls3.toml
config_denmaps_june_v1.4.toml
config_eldenring.toml
denmaps_june_v1.4_mod/event/common.emevd.dcx
denmaps_june_v1.4_mod/event/common.emevd.dcx.bak
denmaps_june_v1.4_mod/event/m11_10_00_00.emevd.dcx
denmaps_june_v1.4_mod/event/m34_14_00_00.emevd.dcx
denmaps_june_v1.4_mod/event/m34_15_00_00.emevd.dcx
denmaps_june_v1.4_mod/event/m45_00_00_00.emevd.dcx
denmaps_june_v1.4_mod/event/m45_00_00_00.emevd.dcx.bak
denmaps_june_v1.4_mod/event/m45_01_00_00.emevd.dcx
denmaps_june_v1.4_mod/event/m45_01_00_00.emevd.dcx.bak
denmaps_june_v1.4_mod/event/m45_02_00_00.emevd.dcx
denmaps_june_v1.4_mod/event/m45_02_00_00.emevd.dcx.bak
denmaps_june_v1.4_mod/map/MapStudio/Simplified versions/m34_14_00_00.msb.dcx
denmaps_june_v1.4_mod/map/MapStudio/Simplified versions/m34_15_00_00.msb.dcx
denmaps_june_v1.4_mod/map/MapStudio/Simplified versions/m45_00_00_00.msb.dcx
denmaps_june_v1.4_mod/map/MapStudio/Simplified versions/m45_01_00_00.msb.dcx
denmaps_june_v1.4_mod/map/MapStudio/Simplified versions/m45_02_00_00.msb.dcx
denmaps_june_v1.4_mod/map/MapStudio/Standard versions/m34_14_00_00.msb.dcx
denmaps_june_v1.4_mod/map/MapStudio/Standard versions/m34_15_00_00.msb.dcx
denmaps_june_v1.4_mod/map/MapStudio/Standard versions/m45_00_00_00.msb.dcx
denmaps_june_v1.4_mod/map/MapStudio/Standard versions/m45_01_00_00.msb.dcx
denmaps_june_v1.4_mod/map/MapStudio/Standard versions/m45_02_00_00.msb.dcx
denmaps_june_v1.4_mod/map/MapStudio/m11_10_00_00.msb.dcx
denmaps_june_v1.4_mod/map/MapStudio/m34_14_00_00.msb.dcx
denmaps_june_v1.4_mod/map/MapStudio/m34_14_00_99.msb.dcx
denmaps_june_v1.4_mod/map/MapStudio/m34_15_00_00.msb.dcx
denmaps_june_v1.4_mod/map/MapStudio/m34_15_00_99.msb.dcx
denmaps_june_v1.4_mod/map/MapStudio/m45_00_00_00.msb.dcx
denmaps_june_v1.4_mod/map/MapStudio/m45_00_00_99.msb.dcx
denmaps_june_v1.4_mod/map/MapStudio/m45_01_00_00.msb.dcx
denmaps_june_v1.4_mod/map/MapStudio/m45_01_00_99.msb.dcx
denmaps_june_v1.4_mod/map/MapStudio/m45_02_00_00.msb.dcx
denmaps_june_v1.4_mod/map/MapStudio/m45_02_00_99.msb.dcx
denmaps_june_v1.4_mod/map/m34/m34_14_00_00/m34_14_00_00_0000.btl.dcx
denmaps_june_v1.4_mod/map/m34/m34_14_00_00/m34_14_00_00_0000.btl.dcx.bak
denmaps_june_v1.4_mod/map/m34/m34_15_00_00/m34_15_00_00_0000.btl.dcx
denmaps_june_v1.4_mod/map/m34/m34_15_00_00/m34_15_00_00_0000.btl.dcx.bak
denmaps_june_v1.4_mod/map/m45/m45_00_00_00/m45_00_00_00_0000.btl.dcx
denmaps_june_v1.4_mod/map/m45/m45_00_00_00/m45_00_00_00_0000.btl.dcx.bak
denmaps_june_v1.4_mod/map/m45/m45_01_00_00/m45_01_00_00_0000.btl.dcx
denmaps_june_v1.4_mod/map/m45/m45_01_00_00/m45_01_00_00_0000.btl.dcx.bak
denmaps_june_v1.4_mod/msg/engus/item-msgbnd-dcx/GR/data/INTERROOT_win64/msg/engUS/AccessoryCaption.fmg
denmaps_june_v1.4_mod/msg/engus/item-msgbnd-dcx/GR/data/INTERROOT_win64/msg/engUS/AccessoryInfo.fmg
denmaps_june_v1.4_mod/msg/engus/item-msgbnd-dcx/GR/data/INTERROOT_win64/msg/engUS/AccessoryName.fmg
denmaps_june_v1.4_mod/msg/engus/item-msgbnd-dcx/GR/data/INTERROOT_win64/msg/engUS/ArtsCaption.fmg
denmaps_june_v1.4_mod/msg/engus/item-msgbnd-dcx/GR/data/INTERROOT_win64/msg/engUS/ArtsName.fmg
denmaps_june_v1.4_mod/msg/engus/item-msgbnd-dcx/GR/data/INTERROOT_win64/msg/engUS/GemCaption.fmg
denmaps_june_v1.4_mod/msg/engus/item-msgbnd-dcx/GR/data/INTERROOT_win64/msg/engUS/GemEffect.fmg
denmaps_june_v1.4_mod/msg/engus/item-msgbnd-dcx/GR/data/INTERROOT_win64/msg/engUS/GemInfo.fmg
denmaps_june_v1.4_mod/msg/engus/item-msgbnd-dcx/GR/data/INTERROOT_win64/msg/engUS/GemName.fmg
denmaps_june_v1.4_mod/msg/engus/item-msgbnd-dcx/GR/data/INTERROOT_win64/msg/engUS/GoodsCaption.fmg
denmaps_june_v1.4_mod/msg/engus/item-msgbnd-dcx/GR/data/INTERROOT_win64/msg/engUS/GoodsCaption.fmg.bak
denmaps_june_v1.4_mod/msg/engus/item-msgbnd-dcx/GR/data/INTERROOT_win64/msg/engUS/GoodsCaption.fmg.xml
denmaps_june_v1.4_mod/msg/engus/item-msgbnd-dcx/GR/data/INTERROOT_win64/msg/engUS/GoodsDialog.fmg
denmaps_june_v1.4_mod/msg/engus/item-msgbnd-dcx/GR/data/INTERROOT_win64/msg/engUS/GoodsInfo.fmg
denmaps_june_v1.4_mod/msg/engus/item-msgbnd-dcx/GR/data/INTERROOT_win64/msg/engUS/GoodsInfo.fmg.bak
denmaps_june_v1.4_mod/msg/engus/item-msgbnd-dcx/GR/data/INTERROOT_win64/msg/engUS/GoodsInfo.fmg.xml
denmaps_june_v1.4_mod/msg/engus/item-msgbnd-dcx/GR/data/INTERROOT_win64/msg/engUS/GoodsInfo2.fmg
denmaps_june_v1.4_mod/msg/engus/item-msgbnd-dcx/GR/data/INTERROOT_win64/msg/engUS/GoodsName.fmg
denmaps_june_v1.4_mod/msg/engus/item-msgbnd-dcx/GR/data/INTERROOT_win64/msg/engUS/GoodsName.fmg.bak
denmaps_june_v1.4_mod/msg/engus/item-msgbnd-dcx/GR/data/INTERROOT_win64/msg/engUS/GoodsName.fmg.xml
denmaps_june_v1.4_mod/msg/engus/item-msgbnd-dcx/GR/data/INTERROOT_win64/msg/engUS/MagicCaption.fmg
denmaps_june_v1.4_mod/msg/engus/item-msgbnd-dcx/GR/data/INTERROOT_win64/msg/engUS/MagicInfo.fmg
denmaps_june_v1.4_mod/msg/engus/item-msgbnd-dcx/GR/data/INTERROOT_win64/msg/engUS/MagicName.fmg
denmaps_june_v1.4_mod/msg/engus/item-msgbnd-dcx/GR/data/INTERROOT_win64/msg/engUS/NpcName.fmg
denmaps_june_v1.4_mod/msg/engus/item-msgbnd-dcx/GR/data/INTERROOT_win64/msg/engUS/PlaceName.fmg
denmaps_june_v1.4_mod/msg/engus/item-msgbnd-dcx/GR/data/INTERROOT_win64/msg/engUS/PlaceName.fmg.bak
denmaps_june_v1.4_mod/msg/engus/item-msgbnd-dcx/GR/data/INTERROOT_win64/msg/engUS/PlaceName.fmg.xml
denmaps_june_v1.4_mod/msg/engus/item-msgbnd-dcx/GR/data/INTERROOT_win64/msg/engUS/ProtectorCaption.fmg
denmaps_june_v1.4_mod/msg/engus/item-msgbnd-dcx/GR/data/INTERROOT_win64/msg/engUS/ProtectorInfo.fmg
denmaps_june_v1.4_mod/msg/engus/item-msgbnd-dcx/GR/data/INTERROOT_win64/msg/engUS/ProtectorName.fmg
denmaps_june_v1.4_mod/msg/engus/item-msgbnd-dcx/GR/data/INTERROOT_win64/msg/engUS/WeaponCaption.fmg
denmaps_june_v1.4_mod/msg/engus/item-msgbnd-dcx/GR/data/INTERROOT_win64/msg/engUS/WeaponEffect.fmg
denmaps_june_v1.4_mod/msg/engus/item-msgbnd-dcx/GR/data/INTERROOT_win64/msg/engUS/WeaponInfo.fmg
denmaps_june_v1.4_mod/msg/engus/item-msgbnd-dcx/GR/data/INTERROOT_win64/msg/engUS/WeaponName.fmg
denmaps_june_v1.4_mod/msg/engus/item-msgbnd-dcx/_yabber-bnd4.xml
denmaps_june_v1.4_mod/msg/engus/item.msgbnd.dcx
denmaps_june_v1.4_mod/msg/engus/item.msgbnd.dcx.bak
denmaps_june_v1.4_mod/msg/engus/menu-msgbnd-dcx/GR/data/INTERROOT_win64/msg/engUS/ActionButtonText.fmg
denmaps_june_v1.4_mod/msg/engus/menu-msgbnd-dcx/GR/data/INTERROOT_win64/msg/engUS/BloodMsg.fmg
denmaps_june_v1.4_mod/msg/engus/menu-msgbnd-dcx/GR/data/INTERROOT_win64/msg/engUS/EventTextForMap.fmg
denmaps_june_v1.4_mod/msg/engus/menu-msgbnd-dcx/GR/data/INTERROOT_win64/msg/engUS/EventTextForTalk.fmg
denmaps_june_v1.4_mod/msg/engus/menu-msgbnd-dcx/GR/data/INTERROOT_win64/msg/engUS/GR_Dialogues.fmg
denmaps_june_v1.4_mod/msg/engus/menu-msgbnd-dcx/GR/data/INTERROOT_win64/msg/engUS/GR_KeyGuide.fmg
denmaps_june_v1.4_mod/msg/engus/menu-msgbnd-dcx/GR/data/INTERROOT_win64/msg/engUS/GR_LineHelp.fmg
denmaps_june_v1.4_mod/msg/engus/menu-msgbnd-dcx/GR/data/INTERROOT_win64/msg/engUS/GR_MenuText.fmg
denmaps_june_v1.4_mod/msg/engus/menu-msgbnd-dcx/GR/data/INTERROOT_win64/msg/engUS/GR_System_Message_win64.fmg
denmaps_june_v1.4_mod/msg/engus/menu-msgbnd-dcx/GR/data/INTERROOT_win64/msg/engUS/LoadingText.fmg
denmaps_june_v1.4_mod/msg/engus/menu-msgbnd-dcx/GR/data/INTERROOT_win64/msg/engUS/LoadingTitle.fmg
denmaps_june_v1.4_mod/msg/engus/menu-msgbnd-dcx/GR/data/INTERROOT_win64/msg/engUS/MovieSubtitle.fmg
denmaps_june_v1.4_mod/msg/engus/menu-msgbnd-dcx/GR/data/INTERROOT_win64/msg/engUS/NetworkMessage.fmg
denmaps_june_v1.4_mod/msg/engus/menu-msgbnd-dcx/GR/data/INTERROOT_win64/msg/engUS/TalkMsg.fmg
denmaps_june_v1.4_mod/msg/engus/menu-msgbnd-dcx/GR/data/INTERROOT_win64/msg/engUS/TextEmbedImageName_win64.fmg
denmaps_june_v1.4_mod/msg/engus/menu-msgbnd-dcx/GR/data/INTERROOT_win64/msg/engUS/ToS_win64.fmg
denmaps_june_v1.4_mod/msg/engus/menu-msgbnd-dcx/GR/data/INTERROOT_win64/msg/engUS/TutorialBody.fmg
denmaps_june_v1.4_mod/msg/engus/menu-msgbnd-dcx/GR/data/INTERROOT_win64/msg/engUS/TutorialTitle.fmg
denmaps_june_v1.4_mod/msg/engus/menu-msgbnd-dcx/_yabber-bnd4.xml
denmaps_june_v1.4_mod/msg/engus/menu.msgbnd.dcx
denmaps_june_v1.4_mod/param/drawparam/m31_03_0000.gparam.dcx
denmaps_june_v1.4_mod/param/drawparam/m34_14_0000.gparam.dcx
denmaps_june_v1.4_mod/param/drawparam/m34_15_0000.gparam.dcx
denmaps_june_v1.4_mod/param/drawparam/m45_00_0000.gparam.dcx
denmaps_june_v1.4_mod/param/drawparam/m45_01_0000.gparam.dcx
denmaps_june_v1.4_mod/param/drawparam/m45_02_0000.gparam.dcx
denmaps_june_v1.4_mod/regulation.bin
launch_elden_ring_seamlesscoop.exe
.exe windows:6 windows x64 arch:x64

34b1a464d815088b63909eb24f3d1876

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Luke\source\repos\launch_modded_eldenring\x64\Release\launch_modded_eldenring.pdb

Imports

kernel32

CloseHandle
CreateFile2
CreateProcessA
CreateRemoteThread
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetProcessId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
OpenProcess
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetEnvironmentVariableA
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
VirtualAllocEx
VirtualFreeEx
WaitForSingleObject
WriteProcessMemory

vcruntime140

_CxxThrowException
__C_specific_handler
__CxxFrameHandler3
__current_exception
__current_exception_context
__std_exception_copy
__std_exception_destroy
memcpy
memset

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__p__commode
__stdio_common_vfprintf_s
__stdio_common_vfwprintf_s
_set_fmode

api-ms-win-crt-runtime-l1-1-0

__p___argc
__p___argv
_c_exit
_cexit
_configure_narrow_argv
_crt_atexit
_exit
_get_initial_narrow_environment
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_invalid_parameter_noinfo_noreturn
_register_onexit_function
_register_thread_local_exe_atexit_callback
_seh_filter_exe
_set_app_type
exit
system
terminate

api-ms-win-crt-heap-l1-1-0

_callnewh
_set_new_mode
free
malloc

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 540B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.retplne
Size: 512B - Virtual size: 92B

.rsrc
Size: 376KB - Virtual size: 376KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
launchmod_darksouls3.bat
launchmod_denmaps_june_v1.4.bat
launchmod_eldenring.bat
modengine2/assets/debug_menu/adhoc/FontShader/debugFont_ps.ppo
modengine2/assets/debug_menu/adhoc/FontShader/debugFont_vs.vpo
modengine2/assets/debug_menu/font/DSFont24.ccm
modengine2/assets/debug_menu/font/DSFont24.tpf
modengine2/assets/debug_menu/font/TalkFont24.ccm
modengine2/assets/debug_menu/font/TalkFont24.tpf
modengine2/assets/debug_menu/font/dbgfont14h.ccm
modengine2/assets/debug_menu/font/dbgfont14h.tpf
modengine2/assets/debug_menu/paramdef/paramdef.paramdefbnd.dcx
modengine2/assets/debug_menu/stayparamdef/stayparamdef.parambnd.dcx
modengine2/assets/debug_menu/testdata/debugBootMenu.textlist
modengine2/assets/debug_menu/testdata/signboard/testsignboard.pwt
modengine2/bin/lua.dll
.dll windows:6 windows x64 arch:x64

3d947857953cd102fbb0e30bb69b827b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\ModEngine2\ModEngine2\vcpkg\buildtrees\lua\x64-windows-rel\lua.pdb

Imports

kernel32

GetLastError
FreeLibrary
GetModuleFileNameA
GetProcAddress
LoadLibraryExA
FormatMessageA
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext

vcruntime140

memchr
__intrinsic_setjmp
__C_specific_handler
memcmp
strrchr
__std_type_info_destroy_list
longjmp
memset
strchr
memcpy
strstr

api-ms-win-crt-runtime-l1-1-0

_cexit
_execute_onexit_table
_initialize_onexit_table
exit
system
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
abort
_initterm_e
_initterm
strerror
_errno

api-ms-win-crt-stdio-l1-1-0

getc
tmpnam
freopen
fread
fopen
__stdio_common_vfprintf
fflush
ferror
feof
fwrite
fgets
clearerr
fclose
_fseeki64
_ftelli64
_pclose
_popen
setvbuf
__stdio_common_vsprintf
tmpfile
ungetc
__acrt_iob_func

api-ms-win-crt-heap-l1-1-0

free
realloc

api-ms-win-crt-string-l1-1-0

strcoll
isalnum
tolower
iscntrl
strncmp
isgraph
ispunct
islower
isupper
isalpha
toupper
isdigit
strspn
isxdigit
isspace
strpbrk

api-ms-win-crt-locale-l1-1-0

setlocale
localeconv

api-ms-win-crt-math-l1-1-0

frexp
tan
log2
sqrt
pow
acos
asin
atan2
ceil
cos
exp
floor
fmod
log
log10
sin

api-ms-win-crt-time-l1-1-0

_gmtime64
_localtime64
strftime
clock
_mktime64
_time64
_difftime64

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-convert-l1-1-0

strtod

api-ms-win-crt-filesystem-l1-1-0

remove
rename

Exports

Exports

luaL_addgsub
luaL_addlstring
luaL_addstring
luaL_addvalue
luaL_argerror
luaL_buffinit
luaL_buffinitsize
luaL_callmeta
luaL_checkany
luaL_checkinteger
luaL_checklstring
luaL_checknumber
luaL_checkoption
luaL_checkstack
luaL_checktype
luaL_checkudata
luaL_checkversion_
luaL_error
luaL_execresult
luaL_fileresult
luaL_getmetafield
luaL_getsubtable
luaL_gsub
luaL_len
luaL_loadbufferx
luaL_loadfilex
luaL_loadstring
luaL_newmetatable
luaL_newstate
luaL_openlibs
luaL_optinteger
luaL_optlstring
luaL_optnumber
luaL_prepbuffsize
luaL_pushresult
luaL_pushresultsize
luaL_ref
luaL_requiref
luaL_setfuncs
luaL_setmetatable
luaL_testudata
luaL_tolstring
luaL_traceback
luaL_typeerror
luaL_unref
luaL_where
lua_absindex
lua_arith
lua_atpanic
lua_callk
lua_checkstack
lua_close
lua_closeslot
lua_compare
lua_concat
lua_copy
lua_createtable
lua_dump
lua_error
lua_gc
lua_getallocf
lua_getfield
lua_getglobal
lua_gethook
lua_gethookcount
lua_gethookmask
lua_geti
lua_getinfo
lua_getiuservalue
lua_getlocal
lua_getmetatable
lua_getstack
lua_gettable
lua_gettop
lua_getupvalue
lua_iscfunction
lua_isinteger
lua_isnumber
lua_isstring
lua_isuserdata
lua_isyieldable
lua_len
lua_load
lua_newstate
lua_newthread
lua_newuserdatauv
lua_next
lua_pcallk
lua_pushboolean
lua_pushcclosure
lua_pushfstring
lua_pushinteger
lua_pushlightuserdata
lua_pushlstring
lua_pushnil
lua_pushnumber
lua_pushstring
lua_pushthread
lua_pushvalue
lua_pushvfstring
lua_rawequal
lua_rawget
lua_rawgeti
lua_rawgetp
lua_rawlen
lua_rawset
lua_rawseti
lua_rawsetp
lua_resetthread
lua_resume
lua_rotate
lua_setallocf
lua_setcstacklimit
lua_setfield
lua_setglobal
lua_sethook
lua_seti
lua_setiuservalue
lua_setlocal
lua_setmetatable
lua_settable
lua_settop
lua_setupvalue
lua_setwarnf
lua_status
lua_stringtonumber
lua_toboolean
lua_tocfunction
lua_toclose
lua_tointegerx
lua_tolstring
lua_tonumberx
lua_topointer
lua_tothread
lua_touserdata
lua_type
lua_typename
lua_upvalueid
lua_upvaluejoin
lua_version
lua_warning
lua_xmove
lua_yieldk
luaopen_base
luaopen_coroutine
luaopen_debug
luaopen_io
luaopen_math
luaopen_os
luaopen_package
luaopen_string
luaopen_table
luaopen_utf8

Sections

.text
Size: 185KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 948B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
modengine2/bin/modengine2.dll
.dll windows:6 windows x64 arch:x64

9c1a03de942a22da941af675d0935a61

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

lua

luaL_setfuncs
lua_close
lua_rotate
lua_copy
lua_callk
lua_pcallk
luaL_error
lua_setupvalue
luaL_openlibs
luaL_loadbufferx
luaL_newstate
luaL_newmetatable
luaL_ref
lua_absindex
luaL_unref
lua_error
lua_gettop
lua_setmetatable
lua_seti
lua_setfield
lua_settable
lua_setglobal
lua_getmetatable
lua_newuserdatauv
lua_createtable
lua_rawgeti
lua_rawget
lua_geti
lua_getfield
lua_getglobal
lua_pushlightuserdata
lua_pushboolean
lua_pushcclosure
lua_pushstring
lua_pushlstring
lua_pushinteger
lua_pushnumber
lua_pushnil
lua_rawequal
lua_touserdata
lua_tolstring
lua_toboolean
lua_tointegerx
lua_tonumberx
lua_type
lua_isinteger
lua_xmove
lua_pushvalue
lua_settop

kernel32

AreFileApisANSI
GetFileAttributesExW
FindNextFileW
GetCurrentDirectoryW
GetFileInformationByHandleEx
InitOnceBeginInitialize
InitOnceComplete
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockExclusive
AcquireSRWLockShared
ResetEvent
WaitForSingleObjectEx
RtlCaptureContext
GetStdHandle
WriteFile
IsDebuggerPresent
DebugBreak
Sleep
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
VirtualQueryEx
GetModuleFileNameW
GetDynamicTimeZoneInformation
GetConsoleMode
WriteConsoleA
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
GetModuleHandleW
GetProcAddress
LoadLibraryW
K32EnumProcessModules
VirtualProtect
GetModuleHandleA
GetLastError
CreateThread
WideCharToMultiByte
TlsAlloc
TlsGetValue
TlsSetValue
GlobalAlloc
CloseHandle
WaitForSingleObject
CreateProcessW
RtlLookupFunctionEntry
GlobalLock
GlobalFree
MultiByteToWideChar
VerSetConditionMask
QueryPerformanceCounter
QueryPerformanceFrequency
LoadLibraryA
VerifyVersionInfoW
GetFileAttributesA
AllocConsole
SetLastError
VirtualQuery
TerminateProcess
ResumeThread
OpenProcess
VirtualProtectEx
GetThreadContext
SetThreadContext
FlushInstructionCache
VirtualAlloc
VirtualFree
CreateDirectoryW
CreateFileW
DeleteFileW
GetFileAttributesW
LockFileEx
SetEndOfFile
UnlockFileEx
GetFileType
SetUnhandledExceptionFilter
SetEvent
SleepEx
CreateEventW
GetVersion
FindClose
ReadFile
SetFilePointerEx
InitializeCriticalSection
FormatMessageA
SetNamedPipeHandleState
TransactNamedPipe
CreateNamedPipeW
WaitNamedPipeW
LocalFree
FindFirstFileExW
RemoveDirectoryW
GetSystemTimeAsFileTime
OutputDebugStringW
GetLocalTime
FormatMessageW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
RtlVirtualUnwind
UnhandledExceptionFilter
IsProcessorFeaturePresent
GlobalUnlock
InitializeSListHead

user32

GetCapture
EnumDisplayMonitors
GetMonitorInfoA
MonitorFromWindow
LoadCursorA
SetWindowLongW
SetWindowLongA
GetWindowLongW
WindowFromPoint
ScreenToClient
ClientToScreen
GetCursorPos
SetCursor
SetCursorPos
AdjustWindowRectEx
GetClientRect
SetWindowTextW
ReleaseDC
GetDC
SetForegroundWindow
CallWindowProcA
ReleaseCapture
SetCapture
GetForegroundWindow
GetKeyState
SetFocus
BringWindowToTop
IsIconic
SetWindowPos
SetLayeredWindowAttributes
ShowWindow
DestroyWindow
IsChild
CreateWindowExA
RegisterClassExA
DefWindowProcA
EmptyClipboard
GetClipboardData
SetClipboardData
CloseClipboard
OpenClipboard
SetWindowLongPtrA

gdi32

GetDeviceCaps

advapi32

SystemFunction036
ConvertStringSecurityDescriptorToSecurityDescriptorW
BuildSecurityDescriptorW
BuildExplicitAccessWithNameW

ntdll

RtlImageNtHeader

msvcp140

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?pubsetbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAPEAV12@PEAD_J@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?uncaught_exceptions@std@@YAHXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
?id@?$numpunct@_W@std@@2V0locale@2@A
?id@?$ctype@_W@std@@2V0locale@2@A
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z
?tolower@?$ctype@_W@std@@QEBA_W_W@Z
?is@?$ctype@_W@std@@QEBA_NF_W@Z
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
_Wcsxfrm
_Wcscoll
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?id@?$collate@_W@std@@2V0locale@2@A
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Xbad_alloc@std@@YAXXZ
_Mbrtowc
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
?_Xlength_error@std@@YAXPEBD@Z
_Xtime_get_ticks
_Thrd_join
_Thrd_id
_Mtx_init_in_situ
_Mtx_destroy_in_situ
_Mtx_lock
_Mtx_unlock
_Cnd_destroy_in_situ
_Cnd_signal
?_Throw_C_error@std@@YAXH@Z
?_Throw_Cpp_error@std@@YAXH@Z
?_Xbad_function_call@std@@YAXXZ
?_Syserror_map@std@@YAPEBDH@Z
?_Winerror_map@std@@YAHH@Z
??0_Locinfo@std@@QEAA@PEBD@Z
??1_Locinfo@std@@QEAA@XZ
?_Getfalse@_Locinfo@std@@QEBAPEBDXZ
?_Gettrue@_Locinfo@std@@QEBAPEBDXZ
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
??Bid@locale@std@@QEAA_KXZ
??0facet@locale@std@@IEAA@_K@Z
??1facet@locale@std@@MEAA@XZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Incref@facet@locale@std@@UEAAXXZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?id@?$numpunct@D@std@@2V0locale@2@A
?_Xout_of_range@std@@YAXPEBD@Z
_Query_perf_counter
_Query_perf_frequency
_Thrd_sleep
_Thrd_yield
_Cnd_do_broadcast_at_thread_exit
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z

msvcp140_atomic_wait

__std_bulk_submit_threadpool_work
__std_create_threadpool_work
__std_parallel_algorithms_hw_threads
__std_close_threadpool_work
__std_wait_for_threadpool_work_callbacks

concrt140

?_Internal_capacity@_Concurrent_vector_base_v4@details@Concurrency@@IEBA_KXZ
?_Internal_push_back@_Concurrent_vector_base_v4@details@Concurrency@@IEAAPEAX_KAEA_K@Z
?_Byte_reverse_table@details@Concurrency@@3QBEB
??1_Concurrent_vector_base_v4@details@Concurrency@@IEAA@XZ
?_Internal_clear@_Concurrent_vector_base_v4@details@Concurrency@@IEAA_KP6AXPEAX_K@Z@Z
?_Segment_index_of@_Concurrent_vector_base_v4@details@Concurrency@@KA_K_K@Z

d3dcompiler_47

D3DCompile

imm32

ImmReleaseContext
ImmSetCompositionWindow
ImmGetContext

vcruntime140

__C_specific_handler
__std_type_info_destroy_list
__current_exception
__current_exception_context
strstr
strchr
_CxxThrowException
__std_exception_destroy
__std_exception_copy
memset
memmove
memcmp
memchr
__std_terminate
_purecall
memcpy

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-string-l1-1-0

wcslen
strncpy
strncmp
strcmp
tolower
_wcsicmp
isblank
isdigit
strlen

api-ms-win-crt-heap-l1-1-0

realloc
free
_callnewh
malloc
calloc

api-ms-win-crt-runtime-l1-1-0

_beginthreadex
abort
_seh_filter_dll
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_initterm
_initterm_e
terminate
_invalid_parameter_noinfo_noreturn
_errno
_configure_narrow_argv
signal
strerror_s

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-math-l1-1-0

pow
atan2f
fabs
log
fmodf
_dsign
_ldsign
_fdsign
_dtest
_ldtest
_fdtest
ceilf
acosf
cosf
floorf
llround
sinf
logf
powf
sqrtf

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfprintf
__stdio_common_vsnprintf_s
ungetc
setvbuf
__acrt_iob_func
__stdio_common_vswprintf_s
fwrite
_wfopen
fseek
ftell
__stdio_common_vsprintf
__stdio_common_vsscanf
_fseeki64
fsetpos
fread
fputc
fgetpos
fgetc
fflush
fclose
__stdio_common_vsprintf_p
_get_stream_buffer_pointers
freopen_s
_fsopen

api-ms-win-crt-time-l1-1-0

_localtime64_s
_time64
_mktime64
strftime
_gmtime64_s

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func
localeconv

api-ms-win-crt-filesystem-l1-1-0

_unlock_file
_mkdir
_lock_file
remove
_wstat64

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-convert-l1-1-0

atof

Exports

Exports

DirectInput8Create

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 230KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.detourc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.detourd
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
modengine2/crashpad/crashpad_handler.exe
.exe windows:6 windows x64 arch:x64

788017a21fc285e58065ec4301196b40

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\a\ModEngine2\ModEngine2\vcpkg\buildtrees\crashpad\x64-windows-rel\crashpad_handler.pdb

Imports

kernel32

LockFileEx
SetEndOfFile
UnlockFileEx
GetLastError
GetStdHandle
GetFileType
CloseHandle
SetEvent
WaitForSingleObject
SleepEx
CreateEventW
Sleep
GetCurrentProcess
GetCurrentProcessId
TerminateProcess
CreateThread
GetCurrentThreadId
CreateProcessW
OpenProcess
GetVersion
OutputDebugStringW
GetLocalTime
FormatMessageW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetModuleFileNameW
DuplicateHandle
ConnectNamedPipe
DisconnectNamedPipe
CreateIoCompletionPort
GetQueuedCompletionStatus
PostQueuedCompletionStatus
UnregisterWaitEx
GetFileAttributesW
GetFileInformationByHandleEx
SetLastError
IsWow64Process
GetModuleHandleW
FormatMessageA
ReadFile
SetFilePointerEx
WriteFile
InitializeCriticalSection
GetProcAddress
LoadLibraryW
GetSystemInfo
VirtualQueryEx
ReadProcessMemory
SetNamedPipeHandleState
TransactNamedPipe
CreateNamedPipeW
WaitNamedPipeW
ReleaseSemaphore
CreateSemaphoreW
LocalFree
RemoveDirectoryW
GetSystemTimeAsFileTime
GetProcessTimes
SuspendThread
ResumeThread
GetProcessId
GetThreadContext
Wow64GetThreadContext
IsProcessorFeaturePresent
GetVersionExW
GetTimeZoneInformation
GetThreadLocale
GetSystemDefaultLCID
GetUserDefaultLCID
WaitForSingleObjectEx
DeleteFileW
CreateFileW
CreateDirectoryW
SetConsoleCtrlHandler
SetProcessShutdownParameters
RegisterWaitForSingleObject
RtlCaptureContext
SetUnhandledExceptionFilter
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
QueryPerformanceCounter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
ResetEvent

advapi32

ConvertStringSecurityDescriptorToSecurityDescriptorW
BuildExplicitAccessWithNameW
BuildSecurityDescriptorW
RevertToSelf
ImpersonateNamedPipeClient
SystemFunction036

user32

TranslateMessage
DispatchMessageW
PostMessageW
DefWindowProcW
GetMessageW
GetWindowLongPtrW
DestroyWindow
CreateWindowExW
UnregisterClassW
RegisterClassW
SetWindowLongPtrW

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

winhttp

WinHttpWriteData
WinHttpCrackUrl
WinHttpOpen
WinHttpCloseHandle
WinHttpSetTimeouts
WinHttpConnect
WinHttpOpenRequest
WinHttpAddRequestHeaders
WinHttpSendRequest
WinHttpReceiveResponse
WinHttpQueryHeaders
WinHttpReadData

zlib1

deflateInit2_
zError
deflateEnd
deflate

powrprof

CallNtPowerInformation

msvcp140

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?_Xbad_alloc@std@@YAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
?_Xout_of_range@std@@YAXPEBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Raise_handler@std@@3P6AXAEBVexception@stdext@@@ZEA
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z

vcruntime140_1

__CxxFrameHandler4

vcruntime140

_purecall
memmove
_CxxThrowException
__std_exception_destroy
__std_exception_copy
__current_exception_context
__current_exception
__C_specific_handler
strchr
memcmp
memcpy
__std_terminate
memchr
memset

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn
__p___wargv
__p___argc
_seh_filter_exe
_set_app_type
_errno
_configure_wide_argv
_initialize_wide_environment
_get_wide_winmain_command_line
_initterm
_initterm_e
exit
_exit
_crt_atexit
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
abort
_invoke_watson
terminate
_initialize_onexit_table
_register_onexit_function
signal

api-ms-win-crt-stdio-l1-1-0

fflush
_set_fmode
__stdio_common_vsprintf_p
__acrt_iob_func
__stdio_common_vfprintf
__p__commode
__stdio_common_vsprintf

api-ms-win-crt-string-l1-1-0

isspace
wcsnlen
strnlen
tolower
strncmp
_wcsicmp
wcsncmp

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-filesystem-l1-1-0

_wstat64

api-ms-win-crt-heap-l1-1-0

free
_aligned_free
_callnewh
malloc
_aligned_malloc
_set_new_mode

api-ms-win-crt-convert-l1-1-0

strtoull
strtoul

api-ms-win-crt-math-l1-1-0

_dclass
__setusermatherr

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 357KB - Virtual size: 356KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 130KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

CPADinfo
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
modengine2/crashpad/zlib1.dll
.dll windows:6 windows x64 arch:x64

3e00cc5294fc2fcbabd14c323443ba4e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\ModEngine2\ModEngine2\vcpkg\buildtrees\zlib\x64-windows-rel\zlib.pdb

Imports

vcruntime140

__std_type_info_destroy_list
__C_specific_handler
memchr
memset
memcpy

api-ms-win-crt-stdio-l1-1-0

_wopen
_write
_read
_close
__stdio_common_vsprintf
_open
_lseeki64

api-ms-win-crt-heap-l1-1-0

malloc
free

api-ms-win-crt-convert-l1-1-0

wcstombs

api-ms-win-crt-runtime-l1-1-0

_errno
_cexit
strerror
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm

kernel32

GetSystemTimeAsFileTime
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
RtlCaptureContext
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent

Exports

Exports

adler32
adler32_combine
adler32_z
compress
compress2
compressBound
crc32
crc32_combine
crc32_z
deflate
deflateBound
deflateCopy
deflateEnd
deflateGetDictionary
deflateInit2_
deflateInit_
deflateParams
deflatePending
deflatePrime
deflateReset
deflateResetKeep
deflateSetDictionary
deflateSetHeader
deflateTune
get_crc_table
gzbuffer
gzclearerr
gzclose
gzclose_r
gzclose_w
gzdirect
gzdopen
gzeof
gzerror
gzflush
gzfread
gzfwrite
gzgetc
gzgetc_
gzgets
gzoffset
gzoffset64
gzopen
gzopen64
gzopen_w
gzprintf
gzputc
gzputs
gzread
gzrewind
gzseek
gzseek64
gzsetparams
gztell
gztell64
gzungetc
gzvprintf
gzwrite
inflate
inflateBack
inflateBackEnd
inflateBackInit_
inflateCodesUsed
inflateCopy
inflateEnd
inflateGetDictionary
inflateGetHeader
inflateInit2_
inflateInit_
inflateMark
inflatePrime
inflateReset
inflateReset2
inflateResetKeep
inflateSetDictionary
inflateSync
inflateSyncPoint
inflateUndermine
inflateValidate
uncompress
uncompress2
zError
zlibCompileFlags
zlibVersion

Sections

.text
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
modengine2/include/MINT.h
modengine2/include/README.md
modengine2/include/fmt/chrono.h
modengine2/include/fmt/color.h
modengine2/include/fmt/compile.h
modengine2/include/fmt/core.h
modengine2/include/fmt/format-inl.h
modengine2/include/fmt/format.h
modengine2/include/fmt/locale.h
modengine2/include/fmt/os.h
modengine2/include/fmt/ostream.h
modengine2/include/fmt/posix.h
modengine2/include/fmt/printf.h
modengine2/include/fmt/ranges.h
modengine2/include/lauxlib.h
modengine2/include/lua.h
modengine2/include/lua.hpp
modengine2/include/luaconf.h
modengine2/include/lualib.h
modengine2/include/modengine/extension.h
modengine2/include/modengine/extension_logger.h
modengine2/include/modengine/game_type.h
modengine2/include/modengine/hook.h
modengine2/include/modengine/settings.h
modengine2/include/modengine/util/memory_scanner.h
modengine2/include/sol/config.hpp
modengine2/include/sol/forward.hpp
modengine2/include/sol/sol.hpp
modengine2/include/spdlog/async.h
modengine2/include/spdlog/async_logger-inl.h
modengine2/include/spdlog/async_logger.h
modengine2/include/spdlog/cfg/argv.h
modengine2/include/spdlog/cfg/env.h
modengine2/include/spdlog/cfg/helpers-inl.h
modengine2/include/spdlog/cfg/helpers.h
modengine2/include/spdlog/common-inl.h
modengine2/include/spdlog/common.h
modengine2/include/spdlog/details/backtracer-inl.h
modengine2/include/spdlog/details/backtracer.h
modengine2/include/spdlog/details/circular_q.h
modengine2/include/spdlog/details/console_globals.h
modengine2/include/spdlog/details/file_helper-inl.h
modengine2/include/spdlog/details/file_helper.h
modengine2/include/spdlog/details/fmt_helper.h
modengine2/include/spdlog/details/log_msg-inl.h
modengine2/include/spdlog/details/log_msg.h
modengine2/include/spdlog/details/log_msg_buffer-inl.h
modengine2/include/spdlog/details/log_msg_buffer.h
modengine2/include/spdlog/details/mpmc_blocking_q.h
modengine2/include/spdlog/details/null_mutex.h
modengine2/include/spdlog/details/os-inl.h
modengine2/include/spdlog/details/os.h
modengine2/include/spdlog/details/periodic_worker-inl.h
modengine2/include/spdlog/details/periodic_worker.h
modengine2/include/spdlog/details/registry-inl.h
modengine2/include/spdlog/details/registry.h
modengine2/include/spdlog/details/synchronous_factory.h
modengine2/include/spdlog/details/tcp_client-windows.h
modengine2/include/spdlog/details/tcp_client.h
modengine2/include/spdlog/details/thread_pool-inl.h
modengine2/include/spdlog/details/thread_pool.h
modengine2/include/spdlog/details/windows_include.h
modengine2/include/spdlog/fmt/bin_to_hex.h
modengine2/include/spdlog/fmt/chrono.h
modengine2/include/spdlog/fmt/fmt.h
modengine2/include/spdlog/fmt/ostr.h
modengine2/include/spdlog/formatter.h
modengine2/include/spdlog/fwd.h
modengine2/include/spdlog/logger-inl.h
modengine2/include/spdlog/logger.h
modengine2/include/spdlog/pattern_formatter-inl.h
modengine2/include/spdlog/pattern_formatter.h
modengine2/include/spdlog/sinks/android_sink.h
modengine2/include/spdlog/sinks/ansicolor_sink-inl.h
modengine2/include/spdlog/sinks/ansicolor_sink.h
modengine2/include/spdlog/sinks/base_sink-inl.h
modengine2/include/spdlog/sinks/base_sink.h
modengine2/include/spdlog/sinks/basic_file_sink-inl.h
modengine2/include/spdlog/sinks/basic_file_sink.h
modengine2/include/spdlog/sinks/daily_file_sink.h
modengine2/include/spdlog/sinks/dist_sink.h
modengine2/include/spdlog/sinks/dup_filter_sink.h
modengine2/include/spdlog/sinks/hourly_file_sink.h
modengine2/include/spdlog/sinks/msvc_sink.h
modengine2/include/spdlog/sinks/null_sink.h
modengine2/include/spdlog/sinks/ostream_sink.h
modengine2/include/spdlog/sinks/ringbuffer_sink.h
modengine2/include/spdlog/sinks/rotating_file_sink-inl.h
modengine2/include/spdlog/sinks/rotating_file_sink.h
modengine2/include/spdlog/sinks/sink-inl.h
modengine2/include/spdlog/sinks/sink.h
modengine2/include/spdlog/sinks/stdout_color_sinks-inl.h
modengine2/include/spdlog/sinks/stdout_color_sinks.h
modengine2/include/spdlog/sinks/stdout_sinks-inl.h
modengine2/include/spdlog/sinks/stdout_sinks.h
modengine2/include/spdlog/sinks/syslog_sink.h
modengine2/include/spdlog/sinks/systemd_sink.h
modengine2/include/spdlog/sinks/tcp_sink.h
modengine2/include/spdlog/sinks/win_eventlog_sink.h
.js
modengine2/include/spdlog/sinks/wincolor_sink-inl.h
.vbs
modengine2/include/spdlog/sinks/wincolor_sink.h
modengine2/include/spdlog/spdlog-inl.h
modengine2/include/spdlog/spdlog.h
modengine2/include/spdlog/stopwatch.h
modengine2/include/spdlog/tweakme.h
modengine2/include/spdlog/version.h
modengine2/include/toml++/toml.h
modengine2/include/toml++/toml_array.h
modengine2/include/toml++/toml_array.hpp
modengine2/include/toml++/toml_common.h
modengine2/include/toml++/toml_date_time.h
modengine2/include/toml++/toml_default_formatter.h
modengine2/include/toml++/toml_default_formatter.hpp
modengine2/include/toml++/toml_formatter.h
modengine2/include/toml++/toml_instantiations.hpp
modengine2/include/toml++/toml_json_formatter.h
modengine2/include/toml++/toml_json_formatter.hpp
modengine2/include/toml++/toml_node.h
modengine2/include/toml++/toml_node.hpp
modengine2/include/toml++/toml_node_view.h
modengine2/include/toml++/toml_parse_error.h
modengine2/include/toml++/toml_parser.h
modengine2/include/toml++/toml_parser.hpp
modengine2/include/toml++/toml_preprocessor.h
modengine2/include/toml++/toml_print_to_stream.h
modengine2/include/toml++/toml_table.h
modengine2/include/toml++/toml_table.hpp
modengine2/include/toml++/toml_utf8.h
modengine2/include/toml++/toml_utf8_streams.h
.js
modengine2/include/toml++/toml_utf8_streams.hpp
modengine2/include/toml++/toml_value.h
modengine2/include/toml++/toml_version.h
modengine2/lib/lua.lib
modengine2/lib/modengine2.lib
modengine2/share/cmake/modengine/ModEngineConfig.cmake
modengine2/share/cmake/modengine/ModEngineConfigVersion.cmake
modengine2/share/cmake/modengine/ModEngineTargets-minsizerel.cmake
modengine2/share/cmake/modengine/ModEngineTargets.cmake
modengine2/tools/scyllahide/HookLibraryx64.dll
.dll windows:5 windows x64 arch:x64

73b0a41dd52079dd6cc2d7796cae803b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

ntdll

LdrGetProcedureAddress
RtlEqualUnicodeString
LdrGetDllHandle
DbgBreakPoint
RtlImageNtHeader
NtQueryObject
DbgPrint
NtOpenProcessToken
NtFreeVirtualMemory
NtOpenThread
RtlAllocateHeap
NtQuerySystemInformation
NtWriteFile
RtlTimeToTimeFields
NtQueryInformationProcess
NtOpenProcess
RtlInitUnicodeString
RtlDosPathNameToNtPathName_U
NtAllocateVirtualMemory
NtReadVirtualMemory
NtClose
RtlAdjustPrivilege
RtlFreeHeap
NtCreateDebugObject
NtPrivilegeCheck
NtSetInformationProcess
NtQueryInformationThread
NtCreateFile
NtTerminateProcess
LdrDisableThreadCalloutsForDll
memcpy
memset

Exports

Exports

HookDllData
HookedGetLocalTime
HookedGetSystemTime
HookedGetTickCount
HookedGetTickCount64
HookedKiUserExceptionDispatcher
HookedNativeCallInternal
HookedNtClose
HookedNtContinue
HookedNtCreateThread
HookedNtCreateThreadEx
HookedNtDuplicateObject
HookedNtGetContextThread
HookedNtQueryInformationProcess
HookedNtQueryObject
HookedNtQueryPerformanceCounter
HookedNtQuerySystemInformation
HookedNtQuerySystemTime
HookedNtResumeThread
HookedNtSetContextThread
HookedNtSetDebugFilterState
HookedNtSetInformationProcess
HookedNtSetInformationThread
HookedNtUserBlockInput
HookedNtUserBuildHwndList
HookedNtUserBuildHwndList_Eight
HookedNtUserFindWindowEx
HookedNtUserQueryWindow
HookedNtYieldExecution
HookedOutputDebugStringA

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
modengine2/tools/scyllahide/InjectorCLIx64.exe
.exe windows:5 windows x64 arch:x64

ef494800d4d6b3d20ea9129a8886c068

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\projects\scyllahide\build\Release\x64\InjectorCLIx64.pdb

Imports

ntdll

RtlLookupFunctionEntry
RtlUnwindEx
RtlPcToFileHeader
RtlCaptureContext
RtlInitAnsiString
RtlEqualString
RtlGetVersion
LdrAccessResource
LdrFindResource_U
NtResumeThread
RtlFreeHeap
NtClose
RtlImageNtHeader
NtQueryInformationProcess
NtSuspendThread
NtQuerySystemInformation
RtlAllocateHeap
RtlVirtualUnwind
NtOpenThread
RtlUnwind

kernel32

GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
HeapReAlloc
SetEndOfFile
ReadFile
WriteProcessMemory
CreateFileW
OpenProcess
CloseHandle
VirtualProtectEx
GetProcAddress
VirtualAllocEx
GetFileSize
GetCurrentProcessId
GetModuleHandleW
FreeLibrary
FreeEnvironmentStringsW
ReadProcessMemory
VirtualFree
VirtualAlloc
GetModuleHandleA
LoadLibraryA
GetCurrentProcess
CreateToolhelp32Snapshot
Process32NextW
Process32FirstW
IsWow64Process
LoadLibraryExW
lstrlenW
GetModuleFileNameW
GetPrivateProfileSectionNamesW
GetPrivateProfileStringW
WriteFile
ReadConsoleW
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
GetTimeZoneInformation
SetFilePointerEx
GetFileSizeEx
GetProcessHeap
SetEnvironmentVariableW
SetStdHandle
VirtualFreeEx
WriteConsoleW
GetFileType
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
HeapSize
GetDateFormatW
GetLastError
QueryPerformanceCounter
MultiByteToWideChar
WideCharToMultiByte
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetLastError
InitializeCriticalSectionAndSpinCount
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetCurrentThreadId
InitializeSListHead
TerminateProcess
RaiseException
ExitProcess
GetModuleHandleExW
GetStdHandle
GetCommandLineA
GetCommandLineW
HeapAlloc
HeapFree

user32

MessageBoxA

advapi32

AdjustTokenPrivileges
OpenProcessToken
LookupPrivilegeValueW

psapi

EnumProcessModules
GetModuleFileNameExW

Sections

.text
Size: 426KB - Virtual size: 425KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 216KB - Virtual size: 215KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
modengine2/tools/scyllahide/scylla_hide.ini
modengine2_launcher.exe
.exe windows:6 windows x64 arch:x64

eecd646cce6776803d56ff60df278c30

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

CloseHandle
GetLastError
GetCurrentProcessId
GetCurrentThreadId
GetModuleFileNameW
GetProcAddress
LoadLibraryW
GetDynamicTimeZoneInformation
GetConsoleMode
WriteConsoleA
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
OutputDebugStringA
SetLastError
TerminateProcess
ResumeThread
IsDebuggerPresent
VirtualAllocEx
VirtualProtectEx
VirtualQueryEx
ReadProcessMemory
WriteProcessMemory
IsWow64Process
MultiByteToWideChar
GetCurrentProcess
GetModuleHandleW
GetSystemTimeAsFileTime
WriteFile
SetEnvironmentVariableW
CreateProcessW
GetStdHandle
QueryPerformanceCounter
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
WideCharToMultiByte
GetFileInformationByHandleEx
AreFileApisANSI
GetFullPathNameW
GetFileAttributesExW
CreateFileW
FormatMessageA
LocalFree
InitializeSListHead

advapi32

RegCreateKeyExW
RegCloseKey
RegGetValueW

msvcp140

?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?_Xbad_function_call@std@@YAXXZ
?_Incref@facet@locale@std@@UEAAXXZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?id@?$ctype@D@std@@2V0locale@2@A
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?id@?$numpunct@D@std@@2V0locale@2@A
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?tolower@?$ctype@D@std@@QEBADD@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
?uncaught_exception@std@@YA_NXZ
?_Xbad_alloc@std@@YAXXZ
?_Xinvalid_argument@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
_Xtime_get_ticks
_Thrd_join
_Thrd_id
_Mtx_init_in_situ
_Mtx_destroy_in_situ
_Mtx_lock
_Mtx_unlock
_Cnd_destroy_in_situ
_Cnd_signal
?_Throw_C_error@std@@YAXH@Z
?_Throw_Cpp_error@std@@YAXH@Z
?_Syserror_map@std@@YAPEBDH@Z
?_Winerror_map@std@@YAHH@Z
??0_Locinfo@std@@QEAA@PEBD@Z
??1_Locinfo@std@@QEAA@XZ
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
?_Getfalse@_Locinfo@std@@QEBAPEBDXZ
?_Gettrue@_Locinfo@std@@QEBAPEBDXZ
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
??Bid@locale@std@@QEAA_KXZ
??0facet@locale@std@@IEAA@_K@Z
??1facet@locale@std@@MEAA@XZ

vcruntime140

__current_exception_context
__current_exception
_purecall
__C_specific_handler
_CxxThrowException
__std_exception_destroy
__std_exception_copy
memmove
memcpy
memcmp
memchr
__std_terminate
memset

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv
_set_app_type
_seh_filter_exe
_cexit
_get_initial_narrow_environment
_crt_atexit
_invalid_parameter_noinfo_noreturn
_register_thread_local_exe_atexit_callback
_initialize_onexit_table
_c_exit
_errno
strerror_s
__p___argv
terminate
__p___argc
_register_onexit_function
_exit
exit
_initterm_e
_initialize_narrow_environment
_initterm

api-ms-win-crt-string-l1-1-0

strlen
isdigit
wcslen
wcscpy_s
isspace

api-ms-win-crt-heap-l1-1-0

malloc
calloc
_callnewh
free
_set_new_mode

api-ms-win-crt-utility-l1-1-0

abs

api-ms-win-crt-convert-l1-1-0

strtold
strtoll

api-ms-win-crt-environment-l1-1-0

_dupenv_s
getenv

api-ms-win-crt-math-l1-1-0

_dtest
_ldtest
_ldsign
_fdtest
ceilf
_dsign
_fdsign
__setusermatherr

api-ms-win-crt-stdio-l1-1-0

fgetpos
fgetc
fflush
fclose
_get_stream_buffer_pointers
__acrt_iob_func
fputc
_fseeki64
fwrite
ungetc
__stdio_common_vfprintf
__stdio_common_vsnprintf_s
setvbuf
fsetpos
__p__commode
_set_fmode
fread

api-ms-win-crt-filesystem-l1-1-0

_unlock_file
_lock_file

api-ms-win-crt-time-l1-1-0

_localtime64_s
strftime
_gmtime64_s

api-ms-win-crt-locale-l1-1-0

_configthreadlocale
localeconv
___lc_codepage_func

Sections

.text
Size: 353KB - Virtual size: 353KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.detourc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.detourd
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fe0a8c7396a06bf36d832d87aa83ee95

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

msvcp140

vcruntime140_1

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

Sections

.text Size: 119KB - Virtual size: 118KB

.rdata Size: 167KB - Virtual size: 166KB

.data Size: 10KB - Virtual size: 12KB

.pdata Size: 7KB - Virtual size: 6KB

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 1KB - Virtual size: 1KB

9f6e61c22777af70323494d32383223d

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

advapi32

user32

winhttp

powrprof

version

Sections

.text Size: 595KB - Virtual size: 595KB

.rdata Size: 160KB - Virtual size: 160KB

.data Size: 13KB - Virtual size: 19KB

.pdata Size: 29KB - Virtual size: 28KB

_RDATA Size: 512B - Virtual size: 348B

CPADinfo Size: 512B - Virtual size: 56B

.reloc Size: 5KB - Virtual size: 4KB

b4a27929bff5151e0314a453895c0d83

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

steam_api64

ole32

advapi32

ws2_32

wldap32

normaliz

crypt32

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.rdata Size: 440KB - Virtual size: 440KB

.data Size: 25KB - Virtual size: 34KB

.pdata Size: 52KB - Virtual size: 52KB

.00cfg Size: 512B - Virtual size: 56B

.gxfg Size: 12KB - Virtual size: 12KB

.retplne Size: 512B - Virtual size: 92B

.tls Size: 512B - Virtual size: 9B

_RDATA Size: 512B - Virtual size: 348B

.rsrc Size: 512B - Virtual size: 232B

.reloc Size: 6KB - Virtual size: 5KB

34b1a464d815088b63909eb24f3d1876

Headers

DLL Characteristics

File Characteristics

PDB Paths

.text
Size: 119KB - Virtual size: 118KB

.rdata
Size: 167KB - Virtual size: 166KB

.data
Size: 10KB - Virtual size: 12KB

.pdata
Size: 7KB - Virtual size: 6KB

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 1KB - Virtual size: 1KB

.text
Size: 595KB - Virtual size: 595KB

.rdata
Size: 160KB - Virtual size: 160KB

.data
Size: 13KB - Virtual size: 19KB

.pdata
Size: 29KB - Virtual size: 28KB

_RDATA
Size: 512B - Virtual size: 348B

CPADinfo
Size: 512B - Virtual size: 56B

.reloc
Size: 5KB - Virtual size: 4KB

.text
Size: 1.4MB - Virtual size: 1.4MB

.rdata
Size: 440KB - Virtual size: 440KB

.data
Size: 25KB - Virtual size: 34KB

.pdata
Size: 52KB - Virtual size: 52KB

.00cfg
Size: 512B - Virtual size: 56B

.gxfg
Size: 12KB - Virtual size: 12KB

.retplne
Size: 512B - Virtual size: 92B

.tls
Size: 512B - Virtual size: 9B

_RDATA
Size: 512B - Virtual size: 348B

.rsrc
Size: 512B - Virtual size: 232B

.reloc
Size: 6KB - Virtual size: 5KB

.text
Size: 6KB - Virtual size: 5KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 1024B - Virtual size: 540B

.00cfg
Size: 512B - Virtual size: 56B

.retplne
Size: 512B - Virtual size: 92B

.rsrc
Size: 376KB - Virtual size: 376KB

.reloc
Size: 512B - Virtual size: 92B

.text
Size: 185KB - Virtual size: 184KB

.rdata
Size: 35KB - Virtual size: 35KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 12KB - Virtual size: 11KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 1024B - Virtual size: 948B