Fivem_Cheat[.]rar

Resubmissions

30/04/2024, 19:14

240430-xxvk3aea9y 7

30/04/2024, 18:39

240430-xa2e4adc2v 7

Sharing

Copy URL Twitter E-mail

General

Target

Fivem_Cheat.rar
Size

25.5MB
MD5

e4868c47f5d4ef138c0a1cf9951d690a
SHA1

ede3eb59b0c833e788ee55f7354f54592f0c4473
SHA256

b3ed899238901ecbd9a3740c3ac0102f8c6b7311922b1f222f417f09e81fe590
SHA512

46c5a2222694b3a7fd8718dc64d09593053e5f0c3c3d16cfbd8ed2249cb436fc1828132e22899c55d77bd14fa889c0ecfbe683873d9d6c271c1b40d64300eb07
SSDEEP

786432:azYy1q/+iVKDAFhP6YQvtlg6rolrsmOlguSTqVTz:whpiV8WhP6YUng6r2rsmOlNSWZ

Score

7^/10

pyinstaller upx

Malware Config

Signatures

ACProtect 1.3x - 1.4x DLL software 2 IoCs

Detects file using ACProtect software.

resource	yara_rule
static1/unpack001/devil.dll	acprotect
static1/unpack001/python27.dll	acprotect

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/devil.dll	upx

Detects Pyinstaller 1 IoCs

pyinstaller

resource	yara_rule
static1/unpack001/Loader.exe	pyinstaller

Unsigned PE 7 IoCs

Checks for missing Authenticode signature.

resource
unpack001/CShield.dll
unpack001/Loader.exe
unpack001/MSS32.DLL
unpack001/SpeedTreeRT.dll
unpack001/devil.dll
unpack001/granny2.dll
unpack001/python27.dll

Files

Fivem_Cheat.rar
.rar

Password: fhjzfghjzfghjghj
CShield.dll
.dll windows:6 windows x86 arch:x86

Password: fhjzfghjzfghjghj

cf4ae71fd099853c58d1b72731e2e2ee

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

K32GetMappedFileNameW

Exports

Exports

?CheckAttackspeed@@YA_NMM_N0@Z
?CheckMove@@YA_N_N0MM@Z
?CheckMovespeed@@YA_NM@Z
?CheckValues@@YA_NXZ
?CheckValuesCython@@YA_NXZ
?GenKey@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_NK@Z
?GetCShieldCaptcha@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBD@Z
?GetCShieldLoginKey@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBD@Z
?InitializeCShield@@YA?AU_CShieldData@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0K@Z
?charName@@3PADA
?clientCode@@3KA

Sections

.text
Size: - Virtual size: 624KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DPw
Size: - Virtual size: 4.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.|VC
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.;ed
Size: 7.1MB - Virtual size: 7.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 937B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Loader.exe
.exe windows:5 windows x64 arch:x64

Password: fhjzfghjzfghjghj

f4f2e2b03fe5666a721620fcea3aea9b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

user32

CreateWindowExW
PostMessageW
GetMessageW
MessageBoxW
MessageBoxA
SystemParametersInfoW
DestroyIcon
SetWindowLongPtrW
GetWindowLongPtrW
GetClientRect
InvalidateRect
ReleaseDC
GetDC
DrawTextW
GetDialogBaseUnits
EndDialog
DialogBoxIndirectParamW
MoveWindow
SendMessageW

comctl32

ord380

kernel32

IsValidCodePage
GetStringTypeW
GetFileAttributesExW
HeapReAlloc
FlushFileBuffers
GetCurrentDirectoryW
GetACP
GetOEMCP
GetModuleHandleW
MulDiv
GetLastError
SetDllDirectoryW
CreateFileW
GetFinalPathNameByHandleW
CloseHandle
GetModuleFileNameW
CreateSymbolicLinkW
GetCPInfo
GetCommandLineW
GetEnvironmentVariableW
SetEnvironmentVariableW
ExpandEnvironmentStringsW
CreateDirectoryW
GetTempPathW
WaitForSingleObject
Sleep
GetExitCodeProcess
CreateProcessW
GetStartupInfoW
FreeLibrary
LoadLibraryExW
SetConsoleCtrlHandler
FindClose
FindFirstFileExW
GetCurrentProcess
LocalFree
FormatMessageW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetTimeZoneInformation
HeapSize
WriteConsoleW
SetEndOfFile
GetProcAddress
GetSystemTimeAsFileTime
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
IsDebuggerPresent
RtlUnwindEx
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EncodePointer
RaiseException
RtlPcToFileHeader
GetCommandLineA
GetDriveTypeW
GetFileInformationByHandle
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetFullPathNameW
RemoveDirectoryW
FindNextFileW
SetStdHandle
DeleteFileW
ReadFile
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
HeapFree
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetConsoleOutputCP
GetFileSizeEx
HeapAlloc
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CompareStringW
LCMapStringW

advapi32

OpenProcessToken
GetTokenInformation
ConvertStringSecurityDescriptorToSecurityDescriptorW
ConvertSidToStringSidW

gdi32

SelectObject
DeleteObject
CreateFontIndirectW

Sections

.text
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Loader.pyc
MSS32.DLL
.dll windows:4 windows x86 arch:x86

Password: fhjzfghjzfghjghj

1b2a3736acbf394c9ae08b2808ea97fd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

FreeEnvironmentStringsW
ResumeThread
SuspendThread
WaitForMultipleObjects
ReleaseMutex
WaitForSingleObject
CloseHandle
SetEvent
CreateMutexA
Sleep
SetThreadPriority
CreateThread
CreateEventA
GetModuleHandleA
GetCurrentProcessId
GetSystemDirectoryA
GetWindowsDirectoryA
GetModuleFileNameA
DisableThreadLibraryCalls
QueryPerformanceCounter
QueryPerformanceFrequency
GetVersionExA
OutputDebugStringA
GetProfileStringA
DuplicateHandle
GetCurrentThread
GetCurrentProcess
GlobalAlloc
GlobalFree
WriteFile
CreateFileA
FreeLibrary
GetProcAddress
LoadLibraryA
SetErrorMode
lstrcatA
SetFilePointer
ReadFile
OpenFile
GetTempPathA
CreateDirectoryA
FindClose
FindNextFileA
FindFirstFileA
RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetCommandLineA
GetVersion
WideCharToMultiByte
HeapFree
GetLastError
MultiByteToWideChar
LCMapStringA
LCMapStringW
ExitProcess
TerminateProcess
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
RaiseException
GetEnvironmentStrings
GetEnvironmentStringsW
HeapAlloc
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA

user32

IsWindow
GetActiveWindow
GetWindowThreadProcessId
GetWindowLongA
GetWindow
GetTopWindow
GetForegroundWindow
MessageBoxA
SetTimer
KillTimer
wsprintfA

winmm

timeGetTime
waveOutPrepareHeader
waveOutUnprepareHeader
waveOutGetDevCapsA
waveOutGetID
waveOutOpen
waveOutClose
waveOutReset
waveOutWrite
midiOutLongMsg
midiOutShortMsg
midiOutClose
midiOutReset
midiOutUnprepareHeader
midiOutPrepareHeader
midiOutOpen
auxGetDevCapsA
auxGetNumDevs
mixerClose
mixerGetControlDetailsA
mixerGetLineInfoA
mixerOpen
mixerGetLineControlsA
mixerGetNumDevs
mciSendCommandA
auxGetVolume
auxSetVolume
mixerSetControlDetails
waveInAddBuffer
waveInPrepareHeader
waveInOpen
waveInClose
waveInUnprepareHeader
waveInReset
waveInStart

Exports

Exports

@stream_background@0
AIL_debug_printf
AIL_sprintf
DLSClose
DLSCompactMemory
DLSGetInfo
DLSLoadFile
DLSLoadMemFile
DLSMSSOpen
DLSSetAttribute
DLSUnloadAll
DLSUnloadFile
RIB_alloc_provider_handle
RIB_enumerate_interface
RIB_error
RIB_find_file_provider
RIB_free_provider_handle
RIB_free_provider_library
RIB_load_provider_library
RIB_register_interface
RIB_request_interface
RIB_request_interface_entry
RIB_type_string
RIB_unregister_interface
_AIL_3D_distance_factor@4
_AIL_3D_doppler_factor@4
_AIL_3D_orientation@28
_AIL_3D_position@16
_AIL_3D_provider_attribute@12
_AIL_3D_rolloff_factor@4
_AIL_3D_room_type@4
_AIL_3D_sample_attribute@12
_AIL_3D_sample_cone@16
_AIL_3D_sample_distances@12
_AIL_3D_sample_effects_level@4
_AIL_3D_sample_exclusion@4
_AIL_3D_sample_length@4
_AIL_3D_sample_loop_count@4
_AIL_3D_sample_obstruction@4
_AIL_3D_sample_occlusion@4
_AIL_3D_sample_offset@4
_AIL_3D_sample_playback_rate@4
_AIL_3D_sample_status@4
_AIL_3D_sample_volume@4
_AIL_3D_speaker_type@4
_AIL_3D_user_data@8
_AIL_3D_velocity@16
_AIL_DLS_close@8
_AIL_DLS_compact@4
_AIL_DLS_get_info@12
_AIL_DLS_get_reverb_levels@12
_AIL_DLS_load_file@12
_AIL_DLS_load_memory@12
_AIL_DLS_open@28
_AIL_DLS_set_reverb_levels@12
_AIL_DLS_unload@8
_AIL_HWND@0
_AIL_MIDI_handle_reacquire@4
_AIL_MIDI_handle_release@4
_AIL_MIDI_to_XMI@20
_AIL_MMX_available@0
_AIL_WAV_file_write@20
_AIL_WAV_info@8
_AIL_XMIDI_master_volume@4
_AIL_active_3D_sample_count@4
_AIL_active_sample_count@4
_AIL_active_sequence_count@4
_AIL_allocate_3D_sample_handle@4
_AIL_allocate_file_sample@12
_AIL_allocate_sample_handle@4
_AIL_allocate_sequence_handle@4
_AIL_auto_service_stream@8
_AIL_auto_update_3D_position@8
_AIL_background@0
_AIL_branch_index@8
_AIL_channel_notes@8
_AIL_close_3D_listener@4
_AIL_close_3D_object@4
_AIL_close_3D_provider@4
_AIL_close_XMIDI_driver@4
_AIL_close_digital_driver@4
_AIL_close_filter@4
_AIL_close_input@4
_AIL_close_stream@4
_AIL_compress_ADPCM@12
_AIL_compress_ASI@20
_AIL_compress_DLS@20
_AIL_controller_value@12
_AIL_create_wave_synthesizer@16
_AIL_decompress_ADPCM@12
_AIL_decompress_ASI@24
_AIL_delay@4
_AIL_destroy_wave_synthesizer@4
_AIL_digital_CPU_percent@4
_AIL_digital_configuration@16
_AIL_digital_handle_reacquire@4
_AIL_digital_handle_release@4
_AIL_digital_latency@4
_AIL_digital_master_reverb@16
_AIL_digital_master_reverb_levels@12
_AIL_digital_master_volume_level@4
_AIL_end_3D_sample@4
_AIL_end_sample@4
_AIL_end_sequence@4
_AIL_enumerate_3D_provider_attributes@12
_AIL_enumerate_3D_providers@12
_AIL_enumerate_3D_sample_attributes@12
_AIL_enumerate_filter_attributes@12
_AIL_enumerate_filter_sample_attributes@12
_AIL_enumerate_filters@12
_AIL_extract_DLS@28
_AIL_file_error@0
_AIL_file_read@8
_AIL_file_size@4
_AIL_file_type@8
_AIL_file_write@12
_AIL_filter_DLS_attribute@12
_AIL_filter_DLS_with_XMI@24
_AIL_filter_attribute@12
_AIL_filter_sample_attribute@12
_AIL_filter_stream_attribute@12
_AIL_find_DLS@24
_AIL_get_DirectSound_info@12
_AIL_get_input_info@4
_AIL_get_preference@4
_AIL_get_timer_highest_delay@0
_AIL_init_sample@4
_AIL_init_sequence@12
_AIL_last_error@0
_AIL_list_DLS@20
_AIL_list_MIDI@20
_AIL_load_sample_buffer@16
_AIL_lock@0
_AIL_lock_channel@4
_AIL_lock_mutex@0
_AIL_map_sequence_channel@12
_AIL_mem_alloc_lock@4
_AIL_mem_free_lock@4
_AIL_mem_use_free@4
_AIL_mem_use_malloc@4
_AIL_merge_DLS_with_XMI@16
_AIL_midiOutClose@4
_AIL_midiOutOpen@12
_AIL_minimum_sample_buffer_size@12
_AIL_ms_count@0
_AIL_open_3D_listener@4
_AIL_open_3D_object@4
_AIL_open_3D_provider@4
_AIL_open_XMIDI_driver@4
_AIL_open_digital_driver@16
_AIL_open_filter@8
_AIL_open_input@4
_AIL_open_stream@12
_AIL_pause_stream@8
_AIL_primary_digital_driver@4
_AIL_process_digital_audio@24
_AIL_quick_copy@4
_AIL_quick_halt@4
_AIL_quick_handles@12
_AIL_quick_load@4
_AIL_quick_load_and_play@12
_AIL_quick_load_mem@8
_AIL_quick_ms_length@4
_AIL_quick_ms_position@4
_AIL_quick_play@8
_AIL_quick_set_low_pass_cut_off@8
_AIL_quick_set_ms_position@8
_AIL_quick_set_reverb_levels@12
_AIL_quick_set_speed@8
_AIL_quick_set_volume@12
_AIL_quick_shutdown@0
_AIL_quick_startup@20
_AIL_quick_status@4
_AIL_quick_type@4
_AIL_quick_unload@4
_AIL_redbook_close@4
_AIL_redbook_eject@4
_AIL_redbook_id@4
_AIL_redbook_open@4
_AIL_redbook_open_drive@4
_AIL_redbook_pause@4
_AIL_redbook_play@12
_AIL_redbook_position@4
_AIL_redbook_resume@4
_AIL_redbook_retract@4
_AIL_redbook_set_volume_level@8
_AIL_redbook_status@4
_AIL_redbook_stop@4
_AIL_redbook_track@4
_AIL_redbook_track_info@16
_AIL_redbook_tracks@4
_AIL_redbook_volume_level@4
_AIL_register_3D_EOS_callback@8
_AIL_register_EOB_callback@8
_AIL_register_EOF_callback@8
_AIL_register_EOS_callback@8
_AIL_register_ICA_array@8
_AIL_register_SOB_callback@8
_AIL_register_beat_callback@8
_AIL_register_event_callback@8
_AIL_register_prefix_callback@8
_AIL_register_sequence_callback@8
_AIL_register_stream_callback@8
_AIL_register_timbre_callback@8
_AIL_register_timer@4
_AIL_register_trigger_callback@8
_AIL_release_3D_sample_handle@4
_AIL_release_all_timers@0
_AIL_release_channel@8
_AIL_release_sample_handle@4
_AIL_release_sequence_handle@4
_AIL_release_timer_handle@4
_AIL_request_EOB_ASI_reset@8
_AIL_resume_3D_sample@4
_AIL_resume_sample@4
_AIL_resume_sequence@4
_AIL_sample_buffer_info@20
_AIL_sample_buffer_ready@4
_AIL_sample_granularity@4
_AIL_sample_loop_count@4
_AIL_sample_low_pass_cut_off@4
_AIL_sample_ms_position@12
_AIL_sample_playback_rate@4
_AIL_sample_position@4
_AIL_sample_reverb_levels@12
_AIL_sample_status@4
_AIL_sample_user_data@8
_AIL_sample_volume_levels@12
_AIL_sample_volume_pan@12
_AIL_send_channel_voice_message@20
_AIL_send_sysex_message@8
_AIL_sequence_loop_count@4
_AIL_sequence_ms_position@12
_AIL_sequence_position@12
_AIL_sequence_status@4
_AIL_sequence_tempo@4
_AIL_sequence_user_data@8
_AIL_sequence_volume@4
_AIL_serve@0
_AIL_service_stream@8
_AIL_set_3D_distance_factor@8
_AIL_set_3D_doppler_factor@8
_AIL_set_3D_orientation@28
_AIL_set_3D_position@16
_AIL_set_3D_provider_preference@12
_AIL_set_3D_rolloff_factor@8
_AIL_set_3D_room_type@8
_AIL_set_3D_sample_cone@16
_AIL_set_3D_sample_distances@12
_AIL_set_3D_sample_effects_level@8
_AIL_set_3D_sample_exclusion@8
_AIL_set_3D_sample_file@8
_AIL_set_3D_sample_info@8
_AIL_set_3D_sample_loop_block@12
_AIL_set_3D_sample_loop_count@8
_AIL_set_3D_sample_obstruction@8
_AIL_set_3D_sample_occlusion@8
_AIL_set_3D_sample_offset@8
_AIL_set_3D_sample_playback_rate@8
_AIL_set_3D_sample_preference@12
_AIL_set_3D_sample_volume@8
_AIL_set_3D_speaker_type@8
_AIL_set_3D_user_data@12
_AIL_set_3D_velocity@20
_AIL_set_3D_velocity_vector@16
_AIL_set_DLS_processor@12
_AIL_set_DirectSound_HWND@8
_AIL_set_XMIDI_master_volume@8
_AIL_set_digital_driver_processor@12
_AIL_set_digital_master_reverb@16
_AIL_set_digital_master_reverb_levels@12
_AIL_set_digital_master_room_type@8
_AIL_set_digital_master_volume_level@8
_AIL_set_error@4
_AIL_set_file_async_callbacks@20
_AIL_set_file_callbacks@16
_AIL_set_filter_DLS_preference@12
_AIL_set_filter_preference@12
_AIL_set_filter_sample_preference@12
_AIL_set_filter_stream_preference@12
_AIL_set_input_state@8
_AIL_set_named_sample_file@20
_AIL_set_preference@8
_AIL_set_redist_directory@4
_AIL_set_sample_address@12
_AIL_set_sample_adpcm_block_size@8
_AIL_set_sample_file@12
_AIL_set_sample_loop_block@12
_AIL_set_sample_loop_count@8
_AIL_set_sample_low_pass_cut_off@8
_AIL_set_sample_ms_position@8
_AIL_set_sample_playback_rate@8
_AIL_set_sample_position@8
_AIL_set_sample_processor@12
_AIL_set_sample_reverb_levels@12
_AIL_set_sample_type@12
_AIL_set_sample_user_data@12
_AIL_set_sample_volume_levels@12
_AIL_set_sample_volume_pan@12
_AIL_set_sequence_loop_count@8
_AIL_set_sequence_ms_position@8
_AIL_set_sequence_tempo@12
_AIL_set_sequence_user_data@12
_AIL_set_sequence_volume@12
_AIL_set_stream_loop_block@12
_AIL_set_stream_loop_count@8
_AIL_set_stream_low_pass_cut_off@8
_AIL_set_stream_ms_position@8
_AIL_set_stream_playback_rate@8
_AIL_set_stream_position@8
_AIL_set_stream_processor@12
_AIL_set_stream_reverb_levels@12
_AIL_set_stream_user_data@12
_AIL_set_stream_volume_levels@12
_AIL_set_stream_volume_pan@12
_AIL_set_timer_divisor@8
_AIL_set_timer_frequency@8
_AIL_set_timer_period@8
_AIL_set_timer_user@8
_AIL_shutdown@0
_AIL_size_processed_digital_audio@16
_AIL_start_3D_sample@4
_AIL_start_all_timers@0
_AIL_start_sample@4
_AIL_start_sequence@4
_AIL_start_stream@4
_AIL_start_timer@4
_AIL_startup@0
_AIL_stop_3D_sample@4
_AIL_stop_all_timers@0
_AIL_stop_sample@4
_AIL_stop_sequence@4
_AIL_stop_timer@4
_AIL_stream_info@20
_AIL_stream_loop_count@4
_AIL_stream_low_pass_cut_off@4
_AIL_stream_ms_position@12
_AIL_stream_playback_rate@4
_AIL_stream_position@4
_AIL_stream_reverb_levels@12
_AIL_stream_status@4
_AIL_stream_user_data@8
_AIL_stream_volume_levels@12
_AIL_stream_volume_pan@12
_AIL_true_sequence_channel@8
_AIL_unlock@0
_AIL_unlock_mutex@0
_AIL_update_3D_position@8
_AIL_us_count@0
_AIL_waveOutClose@4
_AIL_waveOutOpen@16
_DLSMSSGetCPU@4
_DllMain@12
_RIB_enumerate_providers@12
_RIB_find_file_dec_provider@20
_RIB_find_files_provider@20
_RIB_find_provider@12
_RIB_load_application_providers@4
_RIB_provider_library_handle@0
_RIB_provider_system_data@8
_RIB_provider_user_data@8
_RIB_set_provider_system_data@12
_RIB_set_provider_user_data@12

Sections

.text
Size: 224KB - Virtual size: 223KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

MSSMIXER
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SpeedTreeRT.dll
.dll windows:4 windows x86 arch:x86

Password: fhjzfghjzfghjghj

95eaa2d7437a8181dc4a9d24df2d005b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcp60

?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?what@runtime_error@std@@UBEPBDXZ
?_Doraise@runtime_error@std@@MBEXXZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Xran@std@@YAXXZ
??1runtime_error@std@@UAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??_7runtime_error@std@@6B@
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
??0_Winit@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?_Xlen@std@@YAXXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??0logic_error@std@@QAE@ABV01@@Z
??1logic_error@std@@UAE@XZ
??_7logic_error@std@@6B@
??1_Winit@std@@QAE@XZ
??0runtime_error@std@@QAE@ABV01@@Z

msvcrt

srand
_ftol
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
_CxxThrowException
memmove
??0exception@@QAE@ABQBD@Z
strerror
_errno
_CIpow
rand
vsprintf
fclose
fread
ftell
fseek
fopen
_CIasin
__CxxFrameHandler
atoi
atof
sscanf
isspace
time
free
??1type_info@@UAE@XZ
__dllonexit
_onexit
_except_handler3
?terminate@@YAXXZ
_initterm
malloc
_adjust_fdiv
??2@YAPAXI@Z
_CIacos

kernel32

DisableThreadLibraryCalls

Exports

Exports

??0CSpeedTreeRT@@AAE@PBV0@@Z
??0CSpeedTreeRT@@QAE@XZ
??0SBillboard@SGeometry@CSpeedTreeRT@@QAE@XZ
??0SGeometry@CSpeedTreeRT@@QAE@XZ
??0SIndexed@SGeometry@CSpeedTreeRT@@QAE@XZ
??0SLeaf@SGeometry@CSpeedTreeRT@@QAE@XZ
??0STextures@CSpeedTreeRT@@QAE@XZ
??1CSpeedTreeRT@@QAE@XZ
??1SBillboard@SGeometry@CSpeedTreeRT@@QAE@XZ
??1SGeometry@CSpeedTreeRT@@QAE@XZ
??1SIndexed@SGeometry@CSpeedTreeRT@@QAE@XZ
??1SLeaf@SGeometry@CSpeedTreeRT@@QAE@XZ
??1STextures@CSpeedTreeRT@@QAE@XZ
??2CSpeedTreeRT@@SAPAXI@Z
??3CSpeedTreeRT@@SAXPAX@Z
??4CSpeedTreeRT@@QAEAAV0@ABV0@@Z
??4SBillboard@SGeometry@CSpeedTreeRT@@QAEAAU012@ABU012@@Z
??4SGeometry@CSpeedTreeRT@@QAEAAU01@ABU01@@Z
??4SIndexed@SGeometry@CSpeedTreeRT@@QAEAAU012@ABU012@@Z
??4SLeaf@SGeometry@CSpeedTreeRT@@QAEAAU012@ABU012@@Z
??4STextures@CSpeedTreeRT@@QAEAAU01@ABU01@@Z
??_UCSpeedTreeRT@@SAPAXI@Z
??_VCSpeedTreeRT@@SAXPAX@Z
?Authorize@CSpeedTreeRT@@SAXPBD@Z
?Clone@CSpeedTreeRT@@QBEPAV1@MMMI@Z
?Compute@CSpeedTreeRT@@QAE_NPBMI_N@Z
?ComputeLeafStaticLighting@CSpeedTreeRT@@AAEXXZ
?ComputeLodLevel@CSpeedTreeRT@@QAEXXZ
?ComputeSelfShadowTexCoords@CSpeedTreeRT@@AAEXXZ
?ComputeWindEffects@CSpeedTreeRT@@QAEX_N00@Z
?CopyUserData@CSpeedTreeRT@@CAPADPBD@Z
?DeleteBranchGeometry@CSpeedTreeRT@@QAEXXZ
?DeleteFrondGeometry@CSpeedTreeRT@@QAEXXZ
?DeleteTransientData@CSpeedTreeRT@@QAEXXZ
?Get360BillboardGeometry@CSpeedTreeRT@@AAEXAAUSGeometry@1@@Z
?GetBoundingBox@CSpeedTreeRT@@QBEXPAM@Z
?GetBranchGeometry@CSpeedTreeRT@@AAEXAAUSGeometry@1@F@Z
?GetBranchLightingMethod@CSpeedTreeRT@@QBE?AW4ELightingMethod@1@XZ
?GetBranchMaterial@CSpeedTreeRT@@QBEPBMXZ
?GetBranchTriangleCount@CSpeedTreeRT@@QBEIM@Z
?GetBranchWindMethod@CSpeedTreeRT@@QBE?AW4EWindMethod@1@XZ
?GetCamera@CSpeedTreeRT@@SAXPAM0@Z
?GetCollisionObject@CSpeedTreeRT@@QAEXIAAW4ECollisionObjectType@1@PAM1@Z
?GetCollisionObjectCount@CSpeedTreeRT@@QAEIXZ
?GetCurrentError@CSpeedTreeRT@@SAPBDXZ
?GetDiscreteBranchLodLevel@CSpeedTreeRT@@QBEFM@Z
?GetDiscreteFrondLodLevel@CSpeedTreeRT@@QBEFM@Z
?GetDiscreteLeafLodLevel@CSpeedTreeRT@@QBEGM@Z
?GetFrondGeometry@CSpeedTreeRT@@AAEXAAUSGeometry@1@F@Z
?GetFrondGeometryMapIndexes@CSpeedTreeRT@@QBEPAEH@Z
?GetFrondLightingMethod@CSpeedTreeRT@@QBE?AW4ELightingMethod@1@XZ
?GetFrondMaterial@CSpeedTreeRT@@QBEPBMXZ
?GetFrondTriangleCount@CSpeedTreeRT@@QBEIM@Z
?GetFrondWindMethod@CSpeedTreeRT@@QBE?AW4EWindMethod@1@XZ
?GetGeometry@CSpeedTreeRT@@QAEXAAUSGeometry@1@KFFF@Z
?GetLeafBillboardTable@CSpeedTreeRT@@QBEPBMAAI@Z
?GetLeafGeometry@CSpeedTreeRT@@AAEXAAUSGeometry@1@KF@Z
?GetLeafLightingAdjustment@CSpeedTreeRT@@QBEMXZ
?GetLeafLightingMethod@CSpeedTreeRT@@QBE?AW4ELightingMethod@1@XZ
?GetLeafLodSizeAdjustments@CSpeedTreeRT@@QAEPBMXZ
?GetLeafMaterial@CSpeedTreeRT@@QBEPBMXZ
?GetLeafRockingState@CSpeedTreeRT@@QBE_NXZ
?GetLeafTriangleCount@CSpeedTreeRT@@QBEIM@Z
?GetLeafWindMethod@CSpeedTreeRT@@QBE?AW4EWindMethod@1@XZ
?GetLightAttributes@CSpeedTreeRT@@SAPBMI@Z
?GetLightState@CSpeedTreeRT@@SA_NI@Z
?GetLocalMatrices@CSpeedTreeRT@@QAEXAAI0@Z
?GetLodLevel@CSpeedTreeRT@@QBEMXZ
?GetLodLimits@CSpeedTreeRT@@QBEXAAM0@Z
?GetNumBranchLodLevels@CSpeedTreeRT@@QBEGXZ
?GetNumFrondLodLevels@CSpeedTreeRT@@QBEGXZ
?GetNumLeafLodLevels@CSpeedTreeRT@@QBEGXZ
?GetSeed@CSpeedTreeRT@@QBEIXZ
?GetSimpleBillboardGeometry@CSpeedTreeRT@@AAEXAAUSGeometry@1@@Z
?GetStaticLightingStyle@CSpeedTreeRT@@QBE?AW4EStaticLightingStyle@1@XZ
?GetTextureFlip@CSpeedTreeRT@@SA_NXZ
?GetTextures@CSpeedTreeRT@@QBEXAAUSTextures@1@@Z
?GetTransitionValues@CSpeedTreeRT@@CAXMGMMMMAAM0AAF1@Z
?GetTreePosition@CSpeedTreeRT@@QBEPBMXZ
?GetTreeSize@CSpeedTreeRT@@QBEXAAM0@Z
?GetUserData@CSpeedTreeRT@@QBEPBDXZ
?GetWindStrength@CSpeedTreeRT@@QBEMXZ
?InstanceOf@CSpeedTreeRT@@QBEPBV1@XZ
?IsAuthorized@CSpeedTreeRT@@SA_NXZ
?LoadTree@CSpeedTreeRT@@QAE_NPBD@Z
?LoadTree@CSpeedTreeRT@@QAE_NPBEI@Z
?MakeInstance@CSpeedTreeRT@@QAEPAV1@XZ
?NotifyAllTreesOfEvent@CSpeedTreeRT@@CAXH@Z
?ParseCollisionObjects@CSpeedTreeRT@@AAEXPAVCTreeFileAccess@@@Z
?ParseLodInfo@CSpeedTreeRT@@AAEXPAVCTreeFileAccess@@@Z
?ParseShadowProjectionInfo@CSpeedTreeRT@@AAEXPAVCTreeFileAccess@@@Z
?ParseSupplementalTexCoordInfo@CSpeedTreeRT@@AAEXPAVCTreeFileAccess@@@Z
?ParseTextureCoordInfo@CSpeedTreeRT@@AAEXPAVCTreeFileAccess@@@Z
?ParseUserData@CSpeedTreeRT@@AAEXPAVCTreeFileAccess@@@Z
?ParseWindInfo@CSpeedTreeRT@@AAEXPAVCTreeFileAccess@@@Z
?ResetError@CSpeedTreeRT@@SAXXZ
?ResetLeafWindState@CSpeedTreeRT@@QAEXXZ
?SaveCollisionObjects@CSpeedTreeRT@@ABEXPAVCTreeFileAccess@@@Z
?SaveSupplementalTexCoordInfo@CSpeedTreeRT@@ABEXPAVCTreeFileAccess@@@Z
?SaveTextureCoords@CSpeedTreeRT@@ABEXPAVCTreeFileAccess@@@Z
?SaveTree@CSpeedTreeRT@@QBEPAEAAI_N@Z
?SaveUserData@CSpeedTreeRT@@ABEXPAVCTreeFileAccess@@@Z
?SetBranchLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetBranchMaterial@CSpeedTreeRT@@QAEXPBM@Z
?SetBranchTextureFilename@CSpeedTreeRT@@QAEXPBD@Z
?SetBranchWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetCamera@CSpeedTreeRT@@SAXPBM0@Z
?SetDropToBillboard@CSpeedTreeRT@@SAX_N@Z
?SetError@CSpeedTreeRT@@CAXPBD@Z
?SetFrondLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetFrondMaterial@CSpeedTreeRT@@QAEXPBM@Z
?SetFrondTextureCoords@CSpeedTreeRT@@QAEXIPBM@Z
?SetFrondTextureFilename@CSpeedTreeRT@@QAEXIPBD@Z
?SetFrondWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetLeafLightingAdjustment@CSpeedTreeRT@@QAEXM@Z
?SetLeafLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetLeafMaterial@CSpeedTreeRT@@QAEXPBM@Z
?SetLeafRockingState@CSpeedTreeRT@@QAEX_N@Z
?SetLeafTargetAlphaMask@CSpeedTreeRT@@QAEXE@Z
?SetLeafTextureCoords@CSpeedTreeRT@@QAEXIPBM@Z
?SetLeafTextureFilename@CSpeedTreeRT@@QAEXIPBD@Z
?SetLeafWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetLightAttributes@CSpeedTreeRT@@SAXIPBM@Z
?SetLightState@CSpeedTreeRT@@SAXI_N@Z
?SetLocalMatrices@CSpeedTreeRT@@QAEXII@Z
?SetLodLevel@CSpeedTreeRT@@QAEXM@Z
?SetLodLimits@CSpeedTreeRT@@QAEXMM@Z
?SetNumLeafRockingGroups@CSpeedTreeRT@@QAEXI@Z
?SetNumWindMatrices@CSpeedTreeRT@@SAXI@Z
?SetStaticLightingStyle@CSpeedTreeRT@@QAEXW4EStaticLightingStyle@1@@Z
?SetTextureFlip@CSpeedTreeRT@@SAX_N@Z
?SetTime@CSpeedTreeRT@@SAXM@Z
?SetTreePosition@CSpeedTreeRT@@QAEXMMM@Z
?SetTreeSize@CSpeedTreeRT@@QAEXMM@Z
?SetWindMatrix@CSpeedTreeRT@@SAXIPBM@Z
?SetWindStrength@CSpeedTreeRT@@QAEMMMM@Z
?SetupHorizontalBillboard@CSpeedTreeRT@@AAEXXZ
?m_bDropToBillboard@CSpeedTreeRT@@0_NA
?m_bTextureFlip@CSpeedTreeRT@@0_NA

Sections

.text
Size: 172KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
bdvid32.dll
.dll windows:5 windows x86 arch:x86

Password: fhjzfghjzfghjghj

a7ab6c153af410d4929535281e3613ce

Code Sign

36:12:22:96:c5:e3:38:a5:20:a1:d2:5f:4c:d7:09:54
Certificate

Issuer

CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6d

Not Before

01/08/1996, 00:00

Not After

01/01/2021, 23:59

Subject

CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6d

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

23:3b:ba:fc:e9:94:ec:7f:e8:d2:ca:56:8f:2a:b6:4b
Certificate

Issuer

CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US

Not Before

23/11/2011, 00:00

Not After

21/02/2014, 23:59

Subject

CN=Bandisoft,OU=Dev Team,O=Bandisoft,L=Yeongdeungpo-gu,ST=Seoul,C=KR

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

33:65:50:08:79:ad:73:e2:30:b9:e0:1d:0d:7f:ac:91
Certificate

Issuer

CN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6d

Not Before

17/11/2006, 00:00

Not After

30/12/2020, 23:59

Subject

CN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5e
Certificate

Issuer

CN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\w\devel\CAP\bandivid\bin\bdvid32.pdb

Imports

dsound

ord11

kernel32

GetProcAddress
GetModuleHandleW
GetCurrentProcess
GetFileSize
WideCharToMultiByte
WaitForSingleObject
GetCurrentProcessId
TerminateProcess
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateEventW
SetEvent
CloseHandle
InterlockedExchange
SetLastError
InterlockedDecrement
MulDiv
SetThreadPriority
ResumeThread
QueryPerformanceCounter
QueryPerformanceFrequency
ReadFile
SetFilePointer
SetEnvironmentVariableA
CompareStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetModuleHandleA
SetStdHandle
InitializeCriticalSectionAndSpinCount
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetLocaleInfoA
LoadLibraryA
GetTickCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetConsoleMode
GetConsoleCP
GetStartupInfoA
GetFileType
SetHandleCount
CompareStringW
HeapCreate
VirtualAlloc
VirtualFree
GetSystemTimeAsFileTime
InterlockedIncrement
CreateFileW
GetLastError
DisableThreadLibraryCalls
GetModuleFileNameW
FreeLibrary
MultiByteToWideChar
GetSystemTime
ResetEvent
ExitProcess
VirtualQuery
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStdHandle
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCommandLineA
RtlUnwind
CreateThread
GetCurrentThreadId
ExitThread
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
Sleep
GetSystemInfo
RaiseException
DeleteFileA
CreateFileA
FlushFileBuffers
GetFileAttributesExA
WriteFile
CreateEventA
GetModuleFileNameA

user32

DefWindowProcW
DestroyWindow
UnregisterClassW
CreateWindowExW
RegisterClassW
RegisterWindowMessageW

ole32

CoUninitialize
CoTaskMemAlloc
CoTaskMemFree

Exports

Exports

CreateBandiVideo2

Sections

.text
Size: 6.4MB - Virtual size: 6.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 368KB - Virtual size: 367KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 377KB - Virtual size: 489KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
channel.inf
devil.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

_icalloc@8
iBindImageTemp
iConvertImage
iConvertPal
iCopyPal
iGetFlipped
ialloc
ifree
ilActiveImage
ilActiveLayer
ilActiveMipmap
ilApplyPal
ilApplyProfile
ilBindImage
ilBlit
ilClearColour
ilClearImage
ilClearImage_
ilCloneCurImage
ilCloseImage
ilClosePal
ilCompressFunc
ilConvertBuffer
ilConvertImage
ilConvertPal
ilCopyImage
ilCopyImageAttr
ilCopyImage_
ilCopyPixels
ilCreateSubImage
ilDefaultImage
ilDeleteImages
ilDisable
ilEnable
ilFormatFunc
ilGenImages
ilGetAlpha
ilGetBoolean
ilGetBooleanv
ilGetBppFormat
ilGetBppPal
ilGetBppType
ilGetClear
ilGetCurImage
ilGetCurName
ilGetDXTCData
ilGetData
ilGetError
ilGetInteger
ilGetIntegerv
ilGetLumpPos
ilGetPalBaseType
ilGetPalette
ilGetString
ilGetTypeBpc
ilHint
ilInit
ilIsDisabled
ilIsEnabled
ilIsImage
ilIsValid
ilIsValidF
ilIsValidL
ilIsValidPal
ilKeyColour
ilLoad
ilLoadData
ilLoadDataF
ilLoadDataL
ilLoadF
ilLoadFromJpegStruct
ilLoadImage
ilLoadL
ilLoadPal
ilNewImage
ilNextPower2
ilOriginFunc
ilOverlayImage
ilPopAttrib
ilPushAttrib
ilRegisterFormat
ilRegisterLoad
ilRegisterMipNum
ilRegisterNumImages
ilRegisterOrigin
ilRegisterPal
ilRegisterSave
ilRegisterType
ilRemoveLoad
ilRemoveSave
ilReplaceCurImage
ilResetMemory
ilResetRead
ilResetWrite
ilResizeImage
ilSave
ilSaveData
ilSaveF
ilSaveFromJpegStruct
ilSaveImage
ilSaveL
ilSavePal
ilSetCurImage
ilSetData
ilSetDuration
ilSetError
ilSetInteger
ilSetMemory
ilSetPal
ilSetPixels
ilSetRead
ilSetString
ilSetWrite
ilShutDown
ilTexImage
ilTexImage_
ilTexSubImage_
ilTypeFromExt
ilTypeFunc

Sections

UPX0
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 253KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
granny2.dll
.dll windows:6 windows x86 arch:x86

Password: fhjzfghjzfghjghj

c77c31397454bc492fdef6d4f7b567f7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\devel\build\granny\Release\rt\granny2.pdb

Imports

kernel32

GetTempPathA
CreateFileA
GetFileSize
ReadFile
CloseHandle
WriteFile
HeapAlloc
HeapFree
GetProcessHeap
DisableThreadLibraryCalls
QueryPerformanceCounter
QueryPerformanceFrequency
GetTickCount
SwitchToThread
SetFilePointer
GetLastError
LocalFree
FormatMessageA
GetSystemDirectoryA
GetWindowsDirectoryA
GetModuleFileNameA
IsProcessorFeaturePresent
EncodePointer
IsDebuggerPresent
DecodePointer
InterlockedIncrement
InterlockedDecrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
GetCurrentThreadId
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TerminateProcess
TlsGetValue
TlsSetValue
GetProcAddress
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
Sleep
WideCharToMultiByte
GetStringTypeW
GetStdHandle
GetModuleFileNameW
LoadLibraryExW
RtlUnwind
LCMapStringW
RaiseException
OutputDebugStringW
LoadLibraryW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
CreateFileW

user32

MessageBoxA

Exports

Exports

GrannyARGB8888PixelFormat
GrannyAnimationType
GrannyArtToolInfoType
GrannyBGR555PixelFormat
GrannyBGR565PixelFormat
GrannyBGR888PixelFormat
GrannyBGRA4444PixelFormat
GrannyBGRA5551PixelFormat
GrannyBGRA8888PixelFormat
GrannyBoneBindingType
GrannyBoneType
GrannyCurve2Type
GrannyCurveDataD3Constant32fType
GrannyCurveDataD3I1K16uC16uType
GrannyCurveDataD3I1K32fC32fType
GrannyCurveDataD3I1K8uC8uType
GrannyCurveDataD3K16uC16uType
GrannyCurveDataD3K8uC8uType
GrannyCurveDataD4Constant32fType
GrannyCurveDataD4nK16uC15uType
GrannyCurveDataD4nK8uC7uType
GrannyCurveDataD9I1K16uC16uType
GrannyCurveDataD9I1K8uC8uType
GrannyCurveDataD9I3K16uC16uType
GrannyCurveDataD9I3K8uC8uType
GrannyCurveDataDaConstant32fType
GrannyCurveDataDaIdentityType
GrannyCurveDataDaK16uC16uType
GrannyCurveDataDaK32fC32fType
GrannyCurveDataDaK8uC8uType
GrannyCurveDataDaKeyframes32fType
GrannyCurveDataHeaderType
GrannyCurveIdentityNormal
GrannyCurveIdentityOrientation
GrannyCurveIdentityPosition
GrannyCurveIdentityScale
GrannyCurveIdentityScaleShear
GrannyCurveIdentityShear
GrannyDefinedTypes
GrannyEmptyType
GrannyExporterInfoType
GrannyFileInfoType
GrannyGBX333VertexType
GrannyGRNFileMV_32Bit_BigEndian
GrannyGRNFileMV_32Bit_LittleEndian
GrannyGRNFileMV_64Bit_BigEndian
GrannyGRNFileMV_64Bit_LittleEndian
GrannyGRNFileMV_Old
GrannyGRNFileMV_ThisPlatform
GrannyIdentityTrackMask
GrannyInt16Type
GrannyInt32Type
GrannyLocalPoseTransformType
GrannyLocalPoseType
GrannyMaterialBindingType
GrannyMaterialMapType
GrannyMaterialType
GrannyMatrix4x4Type
GrannyMeshType
GrannyModFileInfoType
GrannyModelMeshBindingType
GrannyModelType
GrannyMorphTargetType
GrannyNullTrackMask
GrannyOldCurveType
GrannyP3VertexType
GrannyPN33VertexType
GrannyPNG333VertexType
GrannyPNGB3333VertexType
GrannyPNGBT33332VertexType
GrannyPNGBT33333VertexType
GrannyPNGT3332VertexType
GrannyPNT332VertexType
GrannyPNT333VertexType
GrannyPNTG3323VertexType
GrannyPT32VertexType
GrannyPWN313VertexType
GrannyPWN323VertexType
GrannyPWN343VertexType
GrannyPWNG3133VertexType
GrannyPWNG3233VertexType
GrannyPWNG3433VertexType
GrannyPWNGB31333VertexType
GrannyPWNGB32333VertexType
GrannyPWNGB34333VertexType
GrannyPWNGBT313332VertexType
GrannyPWNGBT323332VertexType
GrannyPWNGBT343332VertexType
GrannyPWNGT31332VertexType
GrannyPWNGT32332VertexType
GrannyPWNGT34332VertexType
GrannyPWNT3132VertexType
GrannyPWNT3232VertexType
GrannyPWNT3432VertexType
GrannyPWT322VertexType
GrannyPeriodicLoopType
GrannyPixelLayoutType
GrannyQuadType
GrannyRGB555PixelFormat
GrannyRGB565PixelFormat
GrannyRGB888PixelFormat
GrannyRGBA4444PixelFormat
GrannyRGBA5551PixelFormat
GrannyRGBA8888PixelFormat
GrannyReal32Type
GrannySPUAnimationInfoType
GrannySPUAnimationType
GrannySPUTrackGroupType
GrannySPUTransformTrackType
GrannySkeletonType
GrannyStringDatabaseType
GrannyStringType
GrannyTextTrackEntryType
GrannyTextTrackType
GrannyTextureImageType
GrannyTextureMIPLevelType
GrannyTextureType
GrannyTrackGroupType
GrannyTrackMaskType
GrannyTransformTrackType
GrannyTransformType
GrannyTriAnnotationSetType
GrannyTriMaterialGroupType
GrannyTriTopologyType
GrannyTripleType
GrannyUInt16Type
GrannyUInt32Type
GrannyUInt8Type
GrannyUnboundTrackMaskType
GrannyVariantType
GrannyVectorTrackType
GrannyVertexAnnotationSetType
GrannyVertexDataType
GrannyVertexWeightArraysType
_GrannyARGB8888SwizzleNGC@20
_GrannyARGB8888SwizzleWii@20
_GrannyAbortCurveBuilder@4
_GrannyAbortFile@4
_GrannyAbortVariant@4
_GrannyAccumulateControlledAnimation@36
_GrannyAccumulateControlledAnimationMotionVectors@44
_GrannyAccumulateLocalTransform@28
_GrannyAccumulateModelAnimations@16
_GrannyAccumulateModelAnimationsLOD@20
_GrannyAccumulateModelAnimationsLODSparse@24
_GrannyAccumulationModeFromTrackGroup@4
_GrannyAcquireAnimationBinding@4
_GrannyAcquireAnimationBindingFromID@4
_GrannyAcquireMemorySpinlock@0
_GrannyAcquireRetargeter@8
_GrannyAcquireSPUAnimationBinding@4
_GrannyAcquireSPUAnimationBindingFromID@4
_GrannyAddBone@32
_GrannyAddBoneWithInverse@24
_GrannyAddBoolArrayMember@16
_GrannyAddBoolMember@12
_GrannyAddDynamicArrayMember@20
_GrannyAddIntegerArrayMember@16
_GrannyAddIntegerMember@12
_GrannyAddPointerToHash@12
_GrannyAddReferenceMember@16
_GrannyAddScalarArrayMember@16
_GrannyAddScalarMember@12
_GrannyAddStringMember@12
_GrannyAddTextEntry@12
_GrannyAddToCRC32@16
_GrannyAddUnsignedIntegerMember@12
_GrannyAddWeight@12
_GrannyAdditiveBlend@24
_GrannyAlignWriterTo@8
_GrannyAlignWriterToWith@12
_GrannyAll16SwizzleNGC@20
_GrannyAll16SwizzleWii@20
_GrannyAllocateBSplineSolver@12
_GrannyAllocateCompositeBuffer@4
_GrannyAllocateCompositeBufferTransposed@4
_GrannyAllocateLODErrorSpace@4
_GrannyAllocationIntentString@4
_GrannyAllocationsBegin@0
_GrannyAllocationsEnd@0
_GrannyApplyRootMotionVectorsToLocalPose@12
_GrannyApplyRootMotionVectorsToMatrix@16
_GrannyBasisConversionRequiresCurveDecompression@24
_GrannyBeginAllocationCheck@0
_GrannyBeginBestMatchS3TCTexture@8
_GrannyBeginBinkTexture@16
_GrannyBeginCRC32@4
_GrannyBeginControlledAnimation@8
_GrannyBeginControlledSPUAnimation@8
_GrannyBeginCurve@16
_GrannyBeginCurveCopy@4
_GrannyBeginFile@20
_GrannyBeginFileCompression@20
_GrannyBeginFileDataTreeWriting@16
_GrannyBeginFileDecompression@24
_GrannyBeginFileInMemory@16
_GrannyBeginLocalPoseAccumulation@16
_GrannyBeginMesh@20
_GrannyBeginRawTexture@16
_GrannyBeginS3TCTexture@12
_GrannyBeginSampledAnimation@8
_GrannyBeginSampledAnimationNonBlocked@8
_GrannyBeginSkeleton@4
_GrannyBeginTextTrack@8
_GrannyBeginTrackGroup@20
_GrannyBeginTransformTrack@12
_GrannyBeginVariant@4
_GrannyBeginYCoCgTexture@8
_GrannyBindTrackmaskToModel@12
_GrannyBindTrackmaskToTrackGroup@12
_GrannyBinkCompressTexture@28
_GrannyBinkDecompressTexture@32
_GrannyBitKnitCompress@12
_GrannyBitKnitCompressEnd@8
_GrannyBitKnitDecompress@16
_GrannyBuildCameraMatrices@4
_GrannyBuildCompositeBuffer@20
_GrannyBuildCompositeBufferTransposed@20
_GrannyBuildCompositeTransform4x3@8
_GrannyBuildCompositeTransform4x4@8
_GrannyBuildCompositeTransform@12
_GrannyBuildFullJointChainFromJointChain@20
_GrannyBuildIndexedCompositeBuffer@20
_GrannyBuildIndexedCompositeBufferTransposed@20
_GrannyBuildInverse@8
_GrannyBuildMeshBinding4x4Array@20
_GrannyBuildMirroringIndices@16
_GrannyBuildRestLocalPose@16
_GrannyBuildRestWorldPose@20
_GrannyBuildSkeletonRelativeTransform@24
_GrannyBuildSkeletonRelativeTransforms@28
_GrannyBuildTangentSpace@4
_GrannyBuildWorldPose@24
_GrannyBuildWorldPoseComposites@16
_GrannyBuildWorldPoseLOD@32
_GrannyBuildWorldPoseNoComposite@24
_GrannyBuildWorldPoseNoCompositeLOD@32
_GrannyBuildWorldPoseSparse@32
_GrannyCalculateAnimationLODAddMeshBinding@16
_GrannyCalculateAnimationLODBegin@8
_GrannyCalculateAnimationLODCleanup@4
_GrannyCalculateAnimationLODEnd@4
_GrannyCheckedAllocationsEnd@4
_GrannyClearArena@4
_GrannyClearOldStructures@8
_GrannyClearPointerHash@4
_GrannyClearPoseCache@4
_GrannyCloneTrackMask@4
_GrannyColumnMatrixMultiply4x3@12
_GrannyColumnMatrixMultiply4x3Transpose@12
_GrannyColumnMatrixMultiply4x4@12
_GrannyCompleteControlAt@8
_GrannyCompressContentsOfFile@12
_GrannyCompressContentsOfMemory@12
_GrannyCompressContentsOfReader@12
_GrannyCompressCurve@32
_GrannyComputeBasisConversion@36
_GrannyConstructBSplineBuffers@52
_GrannyConstructQuaternion4@12
_GrannyControlHasEffect@4
_GrannyControlIsActive@4
_GrannyControlIsComplete@4
_GrannyControlModelsBegin@4
_GrannyControlModelsEnd@4
_GrannyControlModelsNext@4
_GrannyConvertFileInfoToRaw@8
_GrannyConvertFileToRaw@8
_GrannyConvertIndices@20
_GrannyConvertPixelFormat@32
_GrannyConvertSingleObject@20
_GrannyConvertTree@20
_GrannyConvertTreeInPlace@20
_GrannyConvertVertexLayouts@20
_GrannyCopyLocalPose@8
_GrannyCopyLocalPoseBoneCount@16
_GrannyCopyMeshIndices@12
_GrannyCopyMeshMorphVertices@16
_GrannyCopyMeshVertices@12
_GrannyCopyTextureImage@32
_GrannyCopyTrackMask@8
_GrannyCreateControl@8
_GrannyCreateMemoryFileReader@8
_GrannyCreateMemoryFileWriter@4
_GrannyCreateMemoryFileWriterWithInitialCapacity@8
_GrannyCreatePlatformFileReader@4
_GrannyCreatePlatformFileWriter@8
_GrannyCreateStringDatabaseCRC@4
_GrannyCurveConvertToDaK32fC32f@8
_GrannyCurveConvertToDaK32fC32fInPlace@12
_GrannyCurveExtractKnotValue@16
_GrannyCurveExtractKnotValues@24
_GrannyCurveFindCloseKnot@12
_GrannyCurveFindKnot@8
_GrannyCurveFormatIsInitializedCorrectly@8
_GrannyCurveGetContentsOfDaK32fC32f@4
_GrannyCurveGetDataTypeDefinition@4
_GrannyCurveGetDegree@4
_GrannyCurveGetDimension@4
_GrannyCurveGetKnotCount@4
_GrannyCurveGetSize@4
_GrannyCurveInitializeFormat@4
_GrannyCurveIsConstantNotIdentity@4
_GrannyCurveIsConstantOrIdentity@4
_GrannyCurveIsIdentity@4
_GrannyCurveIsKeyframed@4
_GrannyCurveIsTypeDaK32fC32f@4
_GrannyCurveMakeStaticDaK32fC32f@28
_GrannyCurveScaleOffsetSwizzle@20
_GrannyCurveSetAllKnotValues@20
_GrannyDataTypeBeginsWith@12
_GrannyDataTypesAreEqual@8
_GrannyDataTypesAreEqualWithNameCallback@12
_GrannyDataTypesAreEqualWithNames@8
_GrannyDeallocateBSplineSolver@4
_GrannyDecodeGRNReference@8
_GrannyDecompressData@32
_GrannyDecompressDataChunk@24
_GrannyDecompressIncremental@12
_GrannyDeformVertices@24
_GrannyDegreesFromOrientationTolerance@4
_GrannyDeletePointerHash@4
_GrannyDeletePointerHashIterator@8
_GrannyDisableTangentVertexSplits@4
_GrannyDisableVertexMerging@4
_GrannyEaseControlIn@12
_GrannyEaseControlOut@8
_GrannyEncodeImage@24
_GrannyEndAllocationCheck@4
_GrannyEndCRC32@4
_GrannyEndControlledAnimation@4
_GrannyEndControlledSPUAnimation@4
_GrannyEndCurve@4
_GrannyEndCurveDataInPlace@12
_GrannyEndCurveInPlace@8
_GrannyEndFile@8
_GrannyEndFileCompression@8
_GrannyEndFileDataTreeWriting@4
_GrannyEndFileDecompression@4
_GrannyEndFileRaw@8
_GrannyEndFileRawToWriter@8
_GrannyEndFileToWriter@8
_GrannyEndLocalPoseAccumulation@20
_GrannyEndLocalPoseAccumulationLOD@32
_GrannyEndMesh@12
_GrannyEndMeshInPlace@20
_GrannyEndSampledAnimation@4
_GrannyEndSkeleton@8
_GrannyEndSkeletonInPlace@12
_GrannyEndTextTrack@4
_GrannyEndTexture@4
_GrannyEndTextureInPlace@8
_GrannyEndTrackGroup@4
_GrannyEndTrackGroupInPlace@8
_GrannyEndTransformTrack@4
_GrannyEndVariant@12
_GrannyEndVariantInPlace@20
_GrannyEnsureCameraSeesPoint@8
_GrannyEnsureExactOneNorm@8
_GrannyEnsureQuaternionContinuity@8
_GrannyEvaluateCurveAtKnotIndex@40
_GrannyEvaluateCurveAtT@36
_GrannyExtractTrackMask@24
_GrannyFileCRCIsValid@4
_GrannyFileCRCIsValidFromMemory@8
_GrannyFilterAllMessages@4
_GrannyFilterMessage@8
_GrannyFindAllowedLODError@16
_GrannyFindBoneByName@12
_GrannyFindBoneByNameLowercase@12
_GrannyFindBoneByRule@16
_GrannyFindCloseKnot@16
_GrannyFindKnot@12
_GrannyFindMaskIndexForName@8
_GrannyFindMatchingMember@16
_GrannyFindMorphTrackGroupForMesh@12
_GrannyFindSPUTrackGroupForModel@12
_GrannyFindTextTrackByName@12
_GrannyFindTrackByName@12
_GrannyFindTrackByRule@16
_GrannyFindTrackGroupForModel@12
_GrannyFindVectorTrack@16
_GrannyFitBSplineToSamples@56
_GrannyFixupFileSectionPhase1@12
_GrannyFixupFileSectionPhase2@16
_GrannyFlushAllBindingsForAnimation@4
_GrannyFlushAllUnusedAnimationBindings@0
_GrannyFlushAnimationBinding@4
_GrannyFlushBindingsInMemoryRange@8
_GrannyFreeAllFileSections@4
_GrannyFreeBuilderResult@4
_GrannyFreeCompletedModelControls@4
_GrannyFreeCompositeBuffer@4
_GrannyFreeControl@4
_GrannyFreeControlIfComplete@4
_GrannyFreeControlOnceUnused@4
_GrannyFreeCurve@4
_GrannyFreeFile@4
_GrannyFreeFileSection@8
_GrannyFreeFixupArray@4
_GrannyFreeLODErrorSpace@4
_GrannyFreeLocalPose@4
_GrannyFreeMemoryArena@4
_GrannyFreeMemoryWriterBuffer@4
_GrannyFreeMeshBinding@4
_GrannyFreeMeshDeformer@4
_GrannyFreeMirrorSpecification@4
_GrannyFreeModelInstance@4
_GrannyFreePoseCache@4
_GrannyFreeStringTable@4
_GrannyFreeTrackMask@4
_GrannyFreeUnboundTrackMask@4
_GrannyFreeWorldPose@4
_GrannyGRNFixUp@16
_GrannyGRNMarshall@16
_GrannyGenerateTangentSpaceFromUVs@4
_GrannyGetAllocationInformation@8
_GrannyGetAllocator@8
_GrannyGetAllowGlobalStateChanges@0
_GrannyGetAnimationBindingFromControlBinding@4
_GrannyGetAttachmentOffset@28
_GrannyGetBinkPixelLayout@4
_GrannyGetBoneCountForLOD@8
_GrannyGetCacheLocalPose@8
_GrannyGetCacheRestLocalPose@8
_GrannyGetCacheTrackMask@8
_GrannyGetCameraBack@8
_GrannyGetCameraDown@8
_GrannyGetCameraForward@8
_GrannyGetCameraLeft@8
_GrannyGetCameraLocation@8
_GrannyGetCameraRelativePlanarBases@24
_GrannyGetCameraRight@8
_GrannyGetCameraUp@8
_GrannyGetChannelComponentCount@8
_GrannyGetCompressedBytesPaddingSize@4
_GrannyGetCompressionTypeFlags@4
_GrannyGetControlClampedLocalClock@4
_GrannyGetControlClock@4
_GrannyGetControlCompletionCheckFlag@4
_GrannyGetControlCompletionClock@4
_GrannyGetControlCycleDuration@4
_GrannyGetControlDuration@4
_GrannyGetControlDurationLeft@4
_GrannyGetControlEaseCurveMultiplier@4
_GrannyGetControlEffectiveWeight@4
_GrannyGetControlForceClampedLooping@4
_GrannyGetControlFromBinding@4
_GrannyGetControlLocalCompletion@4
_GrannyGetControlLocalDuration@4
_GrannyGetControlLocalEase@4
_GrannyGetControlLoopCount@4
_GrannyGetControlLoopIndex@4
_GrannyGetControlLoopState@12
_GrannyGetControlRawLocalClock@4
_GrannyGetControlSpeed@4
_GrannyGetControlTrackGroupModelMask@8
_GrannyGetControlTrackGroupTrackMask@12
_GrannyGetControlUserDataArray@4
_GrannyGetControlWeight@4
_GrannyGetConvertedTreeSize@16
_GrannyGetCurrentClearedFenceSPU@4
_GrannyGetDataTreeFromFile@8
_GrannyGetDefaultFileReaderOpenCallback@0
_GrannyGetDefaultFileWriterOpenCallback@0
_GrannyGetDefinedTypeCount@0
_GrannyGetFileInfo@4
_GrannyGetFileInfoType@0
_GrannyGetFileSectionOfLoadedObject@8
_GrannyGetFileTypeTag@4
_GrannyGetFirstBindingForAnimation@4
_GrannyGetFirstUnusedAnimationBinding@0
_GrannyGetGRNSectionArray@4
_GrannyGetGlobalControlsBegin@0
_GrannyGetGlobalControlsEnd@0
_GrannyGetGlobalLODFadingFactor@0
_GrannyGetGlobalModelInstancesBegin@0
_GrannyGetGlobalModelInstancesEnd@0
_GrannyGetGlobalNextControl@4
_GrannyGetGlobalNextModelInstance@4
_GrannyGetHashedPointerData@12
_GrannyGetInMemoryFileCRC@4
_GrannyGetLastInsertedFenceSPU@4
_GrannyGetLocalPoseBoneCount@4
_GrannyGetLocalPoseFillThreshold@4
_GrannyGetLocalPoseFromControlBinding@4
_GrannyGetLocalPoseOpaqueTransformArray@4
_GrannyGetLocalPoseTransform@8
_GrannyGetLogCallback@4
_GrannyGetLogMessageOriginString@4
_GrannyGetLogMessageTypeString@4
_GrannyGetMagicValueForPlatform@12
_GrannyGetMagicValueProperties@12
_GrannyGetMaterialTextureByChannelName@8
_GrannyGetMaterialTextureByType@8
_GrannyGetMaximumAnimationBindingCount@0
_GrannyGetMaximumBinkImageSize@16
_GrannyGetMaximumKnotCountForSampleCount@8
_GrannyGetMaximumSPUAnimationBindingCount@0
_GrannyGetMemberArrayWidth@4
_GrannyGetMemberCTypeName@4

Sections

.text
Size: 497KB - Virtual size: 497KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
python27.dll
.dll windows:5 windows x86 arch:x86

Password: fhjzfghjzfghjghj

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

PyAST_Compile
PyAST_FromNode
PyArena_AddPyObject
PyArena_Free
PyArena_Malloc
PyArena_New
PyArg_Parse
PyArg_ParseTuple
PyArg_ParseTupleAndKeywords
PyArg_UnpackTuple
PyArg_VaParse
PyArg_VaParseTupleAndKeywords
PyBaseObject_Type
PyBaseString_Type
PyBool_FromLong
PyBool_Type
PyBuffer_FillContiguousStrides
PyBuffer_FillInfo
PyBuffer_FromContiguous
PyBuffer_FromMemory
PyBuffer_FromObject
PyBuffer_FromReadWriteMemory
PyBuffer_FromReadWriteObject
PyBuffer_GetPointer
PyBuffer_IsContiguous
PyBuffer_New
PyBuffer_Release
PyBuffer_ToContiguous
PyBuffer_Type
PyByteArrayIter_Type
PyByteArray_AsString
PyByteArray_Concat
PyByteArray_Fini
PyByteArray_FromObject
PyByteArray_FromStringAndSize
PyByteArray_Init
PyByteArray_Resize
PyByteArray_Size
PyByteArray_Type
PyCFunction_Call
PyCFunction_ClearFreeList
PyCFunction_Fini
PyCFunction_GetFlags
PyCFunction_GetFunction
PyCFunction_GetSelf
PyCFunction_New
PyCFunction_NewEx
PyCFunction_Type
PyCObject_AsVoidPtr
PyCObject_FromVoidPtr
PyCObject_FromVoidPtrAndDesc
PyCObject_GetDesc
PyCObject_Import
PyCObject_SetVoidPtr
PyCObject_Type
PyCallIter_New
PyCallIter_Type
PyCallable_Check
PyCapsule_GetContext
PyCapsule_GetDestructor
PyCapsule_GetName
PyCapsule_GetPointer
PyCapsule_Import
PyCapsule_IsValid
PyCapsule_New
PyCapsule_SetContext
PyCapsule_SetDestructor
PyCapsule_SetName
PyCapsule_SetPointer
PyCapsule_Type
PyCell_Get
PyCell_New
PyCell_Set
PyCell_Type
PyClassMethod_New
PyClassMethod_Type
PyClass_IsSubclass
PyClass_New
PyClass_Type
PyCode_Addr2Line
PyCode_New
PyCode_NewEmpty
PyCode_Optimize
PyCode_Type
PyCodec_BackslashReplaceErrors
PyCodec_Decode
PyCodec_Decoder
PyCodec_Encode
PyCodec_Encoder
PyCodec_IgnoreErrors
PyCodec_IncrementalDecoder
PyCodec_IncrementalEncoder
PyCodec_LookupError
PyCodec_Register
PyCodec_RegisterError
PyCodec_ReplaceErrors
PyCodec_StreamReader
PyCodec_StreamWriter
PyCodec_StrictErrors
PyCodec_XMLCharRefReplaceErrors
PyComplex_AsCComplex
PyComplex_FromCComplex
PyComplex_FromDoubles
PyComplex_ImagAsDouble
PyComplex_RealAsDouble
PyComplex_Type
PyDescr_NewClassMethod
PyDescr_NewGetSet
PyDescr_NewMember
PyDescr_NewMethod
PyDescr_NewWrapper
PyDictItems_Type
PyDictIterItem_Type
PyDictIterKey_Type
PyDictIterValue_Type
PyDictKeys_Type
PyDictProxy_New
PyDictProxy_Type
PyDictValues_Type
PyDict_Clear
PyDict_Contains
PyDict_Copy
PyDict_DelItem
PyDict_DelItemString
PyDict_Fini
PyDict_GetItem
PyDict_GetItemString
PyDict_Items
PyDict_Keys
PyDict_Merge
PyDict_MergeFromSeq2
PyDict_New
PyDict_Next
PyDict_SetItem
PyDict_SetItemString
PyDict_Size
PyDict_Type
PyDict_Update
PyDict_Values
PyEllipsis_Type
PyEnum_Type
PyErr_BadArgument
PyErr_BadInternalCall
PyErr_CheckSignals
PyErr_Clear
PyErr_Display
PyErr_ExceptionMatches
PyErr_Fetch
PyErr_Format
PyErr_GivenExceptionMatches
PyErr_NewException
PyErr_NewExceptionWithDoc
PyErr_NoMemory
PyErr_NormalizeException
PyErr_Occurred
PyErr_Print
PyErr_PrintEx
PyErr_ProgramText
PyErr_Restore
PyErr_SetExcFromWindowsErr
PyErr_SetExcFromWindowsErrWithFilename
PyErr_SetExcFromWindowsErrWithFilenameObject
PyErr_SetExcFromWindowsErrWithUnicodeFilename
PyErr_SetFromErrno
PyErr_SetFromErrnoWithFilename
PyErr_SetFromErrnoWithFilenameObject
PyErr_SetFromErrnoWithUnicodeFilename
PyErr_SetFromWindowsErr
PyErr_SetFromWindowsErrWithFilename
PyErr_SetFromWindowsErrWithUnicodeFilename
PyErr_SetInterrupt
PyErr_SetNone
PyErr_SetObject
PyErr_SetString
PyErr_SyntaxLocation
PyErr_Warn
PyErr_WarnEx
PyErr_WarnExplicit
PyErr_WriteUnraisable
PyEval_AcquireLock
PyEval_AcquireThread
PyEval_CallFunction
PyEval_CallMethod
PyEval_CallObjectWithKeywords
PyEval_EvalCode
PyEval_EvalCodeEx
PyEval_EvalFrame
PyEval_EvalFrameEx
PyEval_GetBuiltins
PyEval_GetCallStats
PyEval_GetFrame
PyEval_GetFuncDesc
PyEval_GetFuncName
PyEval_GetGlobals
PyEval_GetLocals
PyEval_GetRestricted
PyEval_InitThreads
PyEval_MergeCompilerFlags
PyEval_ReInitThreads
PyEval_ReleaseLock
PyEval_ReleaseThread
PyEval_RestoreThread
PyEval_SaveThread
PyEval_SetProfile
PyEval_SetTrace
PyEval_ThreadsInitialized
PyExc_ArithmeticError
PyExc_AssertionError
PyExc_AttributeError
PyExc_BaseException
PyExc_BufferError
PyExc_BytesWarning
PyExc_DeprecationWarning
PyExc_EOFError
PyExc_EnvironmentError
PyExc_Exception
PyExc_FloatingPointError
PyExc_FutureWarning
PyExc_GeneratorExit
PyExc_IOError
PyExc_ImportError
PyExc_ImportWarning
PyExc_IndentationError
PyExc_IndexError
PyExc_KeyError
PyExc_KeyboardInterrupt
PyExc_LookupError
PyExc_MemoryError
PyExc_MemoryErrorInst
PyExc_NameError
PyExc_NotImplementedError
PyExc_OSError
PyExc_OverflowError
PyExc_PendingDeprecationWarning
PyExc_RecursionErrorInst
PyExc_ReferenceError
PyExc_RuntimeError
PyExc_RuntimeWarning
PyExc_StandardError
PyExc_StopIteration
PyExc_SyntaxError
PyExc_SyntaxWarning
PyExc_SystemError
PyExc_SystemExit
PyExc_TabError
PyExc_TypeError
PyExc_UnboundLocalError
PyExc_UnicodeDecodeError
PyExc_UnicodeEncodeError
PyExc_UnicodeError
PyExc_UnicodeTranslateError
PyExc_UnicodeWarning
PyExc_UserWarning
PyExc_ValueError
PyExc_Warning
PyExc_WindowsError
PyExc_ZeroDivisionError
PyFile_AsFile
PyFile_DecUseCount
PyFile_FromFile
PyFile_FromString
PyFile_GetLine
PyFile_IncUseCount
PyFile_Name
PyFile_SetBufSize
PyFile_SetEncoding
PyFile_SetEncodingAndErrors
PyFile_SoftSpace
PyFile_Type
PyFile_WriteObject
PyFile_WriteString
PyFloat_AsDouble
PyFloat_AsReprString
PyFloat_AsString
PyFloat_ClearFreeList
PyFloat_Fini
PyFloat_FromDouble
PyFloat_FromString
PyFloat_GetInfo
PyFloat_GetMax
PyFloat_GetMin
PyFloat_Type
PyFrame_BlockPop
PyFrame_BlockSetup
PyFrame_ClearFreeList
PyFrame_FastToLocals
PyFrame_Fini
PyFrame_GetLineNumber
PyFrame_LocalsToFast
PyFrame_New
PyFrame_Type
PyFrozenSet_New
PyFrozenSet_Type
PyFunction_GetClosure
PyFunction_GetCode
PyFunction_GetDefaults
PyFunction_GetGlobals
PyFunction_GetModule
PyFunction_New
PyFunction_SetClosure
PyFunction_SetDefaults
PyFunction_Type
PyFuture_FromAST
PyGC_Collect
PyGILState_Ensure
PyGILState_GetThisThreadState
PyGILState_Release
PyGen_NeedsFinalizing
PyGen_New
PyGen_Type
PyGetSetDescr_Type
PyImport_AddModule
PyImport_AppendInittab
PyImport_Cleanup
PyImport_ExecCodeModule
PyImport_ExecCodeModuleEx
PyImport_ExtendInittab
PyImport_FrozenModules
PyImport_GetImporter
PyImport_GetMagicNumber
PyImport_GetModuleDict
PyImport_Import
PyImport_ImportFrozenModule
PyImport_ImportModule
PyImport_ImportModuleLevel
PyImport_ImportModuleNoBlock
PyImport_Inittab
PyImport_ReloadModule
PyInstance_New
PyInstance_NewRaw
PyInstance_Type
PyInt_AsLong
PyInt_AsSsize_t
PyInt_AsUnsignedLongLongMask
PyInt_AsUnsignedLongMask
PyInt_ClearFreeList
PyInt_Fini
PyInt_FromLong
PyInt_FromSize_t
PyInt_FromSsize_t
PyInt_FromString
PyInt_FromUnicode
PyInt_GetMax
PyInt_Type
PyInterpreterState_Clear
PyInterpreterState_Delete
PyInterpreterState_Head
PyInterpreterState_New
PyInterpreterState_Next
PyInterpreterState_ThreadHead
PyIter_Next
PyList_Append
PyList_AsTuple
PyList_Fini
PyList_GetItem
PyList_GetSlice
PyList_Insert
PyList_New
PyList_Reverse
PyList_SetItem
PyList_SetSlice
PyList_Size
PyList_Sort
PyList_Type
PyLong_AsDouble
PyLong_AsLong
PyLong_AsLongAndOverflow
PyLong_AsLongLong
PyLong_AsLongLongAndOverflow
PyLong_AsSsize_t
PyLong_AsUnsignedLong
PyLong_AsUnsignedLongLong
PyLong_AsUnsignedLongLongMask
PyLong_AsUnsignedLongMask
PyLong_AsVoidPtr
PyLong_FromDouble
PyLong_FromLong
PyLong_FromLongLong
PyLong_FromSize_t
PyLong_FromSsize_t
PyLong_FromString
PyLong_FromUnicode
PyLong_FromUnsignedLong
PyLong_FromUnsignedLongLong
PyLong_FromVoidPtr
PyLong_GetInfo
PyLong_Type
PyMapping_Check
PyMapping_GetItemString
PyMapping_HasKey
PyMapping_HasKeyString
PyMapping_Length
PyMapping_SetItemString
PyMapping_Size
PyMarshal_ReadLastObjectFromFile
PyMarshal_ReadLongFromFile
PyMarshal_ReadObjectFromFile
PyMarshal_ReadObjectFromString
PyMarshal_ReadShortFromFile
PyMarshal_WriteLongToFile
PyMarshal_WriteObjectToFile
PyMarshal_WriteObjectToString
PyMem_Free
PyMem_Malloc
PyMem_Realloc
PyMemberDescr_Type
PyMember_Get
PyMember_GetOne
PyMember_Set
PyMember_SetOne
PyMemoryView_FromBuffer
PyMemoryView_FromObject
PyMemoryView_GetContiguous
PyMemoryView_Type
PyMethod_Class
PyMethod_ClearFreeList
PyMethod_Fini
PyMethod_Function
PyMethod_New
PyMethod_Self
PyMethod_Type
PyModule_AddIntConstant
PyModule_AddObject
PyModule_AddStringConstant
PyModule_GetDict
PyModule_GetFilename
PyModule_GetName
PyModule_New
PyModule_Type
PyNode_AddChild
PyNode_Compile
PyNode_Free
PyNode_ListTree
PyNode_New
PyNullImporter_Type
PyNumber_Absolute
PyNumber_Add
PyNumber_And
PyNumber_AsSsize_t
PyNumber_Check
PyNumber_Coerce
PyNumber_CoerceEx
PyNumber_Divide
PyNumber_Divmod
PyNumber_Float
PyNumber_FloorDivide
PyNumber_InPlaceAdd
PyNumber_InPlaceAnd
PyNumber_InPlaceDivide
PyNumber_InPlaceFloorDivide
PyNumber_InPlaceLshift
PyNumber_InPlaceMultiply
PyNumber_InPlaceOr
PyNumber_InPlacePower
PyNumber_InPlaceRemainder
PyNumber_InPlaceRshift
PyNumber_InPlaceSubtract
PyNumber_InPlaceTrueDivide
PyNumber_InPlaceXor
PyNumber_Index
PyNumber_Int
PyNumber_Invert
PyNumber_Long
PyNumber_Lshift
PyNumber_Multiply
PyNumber_Negative
PyNumber_Or
PyNumber_Positive
PyNumber_Power
PyNumber_Remainder
PyNumber_Rshift
PyNumber_Subtract
PyNumber_ToBase
PyNumber_TrueDivide
PyNumber_Xor
PyOS_AfterFork
PyOS_CheckStack
PyOS_FiniInterrupts
PyOS_InitInterrupts
PyOS_InputHook
PyOS_InterruptOccurred
PyOS_Readline
PyOS_ReadlineFunctionPointer
PyOS_ascii_atof
PyOS_ascii_formatd
PyOS_ascii_strtod
PyOS_double_to_string
PyOS_getsig
PyOS_mystricmp
PyOS_mystrnicmp
PyOS_setsig
PyOS_snprintf
PyOS_string_to_double
PyOS_strtol
PyOS_strtoul
PyOS_vsnprintf
PyObject_AsCharBuffer
PyObject_AsFileDescriptor
PyObject_AsReadBuffer
PyObject_AsWriteBuffer

Sections

data0
Size: - Virtual size: 1.7MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

data1
Size: 792KB - Virtual size: 792KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Resubmissions

Sharing

General

Malware Config

Signatures

Files

Password: fhjzfghjzfghjghj

Password: fhjzfghjzfghjghj

cf4ae71fd099853c58d1b72731e2e2ee

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: - Virtual size: 624KB

.rdata Size: - Virtual size: 67KB

.data Size: - Virtual size: 10KB

.DPw Size: - Virtual size: 4.2MB

.|VC Size: 512B - Virtual size: 40B

.;ed Size: 7.1MB - Virtual size: 7.1MB

.rsrc Size: 1024B - Virtual size: 937B

.reloc Size: 1024B - Virtual size: 896B

Password: fhjzfghjzfghjghj

f4f2e2b03fe5666a721620fcea3aea9b

Headers

DLL Characteristics

File Characteristics

Imports

user32

comctl32

kernel32

advapi32

gdi32

Sections

.text Size: 172KB - Virtual size: 171KB

.rdata Size: 76KB - Virtual size: 75KB

.data Size: 3KB - Virtual size: 12KB

.pdata Size: 9KB - Virtual size: 8KB

_RDATA Size: 512B - Virtual size: 500B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 1KB

Password: fhjzfghjzfghjghj

1b2a3736acbf394c9ae08b2808ea97fd

Headers

File Characteristics

Imports

kernel32

user32

winmm

Exports

Exports

Sections

.text Size: 224KB - Virtual size: 223KB

MSSMIXER Size: 18KB - Virtual size: 17KB

.rdata Size: 57KB - Virtual size: 56KB

.data Size: 17KB - Virtual size: 40KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 21KB - Virtual size: 21KB

Password: fhjzfghjzfghjghj

95eaa2d7437a8181dc4a9d24df2d005b

Headers

File Characteristics

Imports

msvcp60

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 172KB - Virtual size: 168KB

.rdata Size: 1.5MB - Virtual size: 1.5MB

.data Size: 8KB - Virtual size: 7KB

.reloc Size: 16KB - Virtual size: 14KB

Password: fhjzfghjzfghjghj

a7ab6c153af410d4929535281e3613ce

Code Sign

36:12:22:96:c5:e3:38:a5:20:a1:d2:5f:4c:d7:09:54Certificate

.text
Size: - Virtual size: 624KB

.rdata
Size: - Virtual size: 67KB

.data
Size: - Virtual size: 10KB

.DPw
Size: - Virtual size: 4.2MB

.|VC
Size: 512B - Virtual size: 40B

.;ed
Size: 7.1MB - Virtual size: 7.1MB

.rsrc
Size: 1024B - Virtual size: 937B

.reloc
Size: 1024B - Virtual size: 896B

.text
Size: 172KB - Virtual size: 171KB

.rdata
Size: 76KB - Virtual size: 75KB

.data
Size: 3KB - Virtual size: 12KB

.pdata
Size: 9KB - Virtual size: 8KB

_RDATA
Size: 512B - Virtual size: 500B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB

.text
Size: 224KB - Virtual size: 223KB

MSSMIXER
Size: 18KB - Virtual size: 17KB

.rdata
Size: 57KB - Virtual size: 56KB

.data
Size: 17KB - Virtual size: 40KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 21KB - Virtual size: 21KB

.text
Size: 172KB - Virtual size: 168KB

.rdata
Size: 1.5MB - Virtual size: 1.5MB

.data
Size: 8KB - Virtual size: 7KB

.reloc
Size: 16KB - Virtual size: 14KB

36:12:22:96:c5:e3:38:a5:20:a1:d2:5f:4c:d7:09:54
Certificate

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

23:3b:ba:fc:e9:94:ec:7f:e8:d2:ca:56:8f:2a:b6:4b
Certificate

33:65:50:08:79:ad:73:e2:30:b9:e0:1d:0d:7f:ac:91
Certificate

47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5e
Certificate

.text
Size: 6.4MB - Virtual size: 6.4MB

.rdata
Size: 368KB - Virtual size: 367KB

.data
Size: 377KB - Virtual size: 489KB

.rodata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 80KB - Virtual size: 80KB

UPX0
Size: - Virtual size: 1.2MB

UPX1
Size: 253KB - Virtual size: 256KB

.rsrc
Size: 9KB - Virtual size: 12KB

.text
Size: 497KB - Virtual size: 497KB

.rdata
Size: 98KB - Virtual size: 97KB

.data
Size: 30KB - Virtual size: 46KB

.rsrc
Size: 11KB - Virtual size: 10KB

.reloc
Size: 19KB - Virtual size: 18KB

data0
Size: - Virtual size: 1.7MB

data1
Size: 792KB - Virtual size: 792KB

.rsrc
Size: 33KB - Virtual size: 36KB