f26b08b398a3125e8a89710cbb0feac999eed8b9b3f4679cf2013be3a03eaf06

Sharing

Copy URL Twitter E-mail

General

Target

f26b08b398a3125e8a89710cbb0feac999eed8b9b3f4679cf2013be3a03eaf06
Size

5.5MB
MD5

684c84b4631ccc934ef426bf2e95643e
SHA1

9bc1c6fc12da4969a36e8d6357f06eb5292d27a5
SHA256

f26b08b398a3125e8a89710cbb0feac999eed8b9b3f4679cf2013be3a03eaf06
SHA512

fcfca6fb2ee549cfdd483411f41edd3da762b689a4daaedf4b0fbb37f64d7235d654c9b40b8a11e911749927ca85f1c1211a99cab878e121106c592d8f25b3b4
SSDEEP

98304:GSYz6VzIq0WgKYqnwt1s0w+8dgjW9dUKv59osRdOXivpehf3rc+coN85GqxpaMn3:GSoSzIX1sltG69zvzosRdaepeZ3rcyNw

Score

3^/10

Malware Config

Signatures

Unsigned PE 6 IoCs

Checks for missing Authenticode signature.

resource
f26b08b398a3125e8a89710cbb0feac999eed8b9b3f4679cf2013be3a03eaf06
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/nsDialogs.dll
unpack001/Openplanet.dll
unpack001/OpenplanetUninstall.exe
unpack001/dinput8.dll

Files

f26b08b398a3125e8a89710cbb0feac999eed8b9b3f4679cf2013be3a03eaf06
.exe windows:4 windows x86 arch:x86

f4639a0b3116c2cfc71144b88a929cfd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegEnumValueW
RegEnumKeyW
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegOpenKeyExW
RegCreateKeyExW

shell32

SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFileInfoW
SHFileOperationW
ShellExecuteExW

ole32

CoCreateInstance
OleUninitialize
OleInitialize
IIDFromString
CoTaskMemFree

comctl32

ImageList_Destroy
ord17
ImageList_AddMasked
ImageList_Create

user32

MessageBoxIndirectW
GetDlgItemTextW
SetDlgItemTextW
CreatePopupMenu
AppendMenuW
TrackPopupMenu
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
IsWindowVisible
CallWindowProcW
GetMessagePos
CheckDlgButton
LoadCursorW
SetCursor
GetSysColor
SetWindowPos
GetWindowLongW
IsWindowEnabled
SetClassLongW
GetSystemMenu
EnableMenuItem
GetWindowRect
ScreenToClient
EndDialog
RegisterClassW
SystemParametersInfoW
CharPrevW
GetClassInfoW
DialogBoxParamW
CharNextW
ExitWindowsEx
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
FindWindowExW
IsWindow
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
ReleaseDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndPaint
CharNextA
wsprintfA
DispatchMessageW
CreateWindowExW
PeekMessageW
GetSystemMetrics

gdi32

GetDeviceCaps
SetBkColor
SelectObject
DeleteObject
CreateBrushIndirect
CreateFontIndirectW
SetBkMode
SetTextColor

kernel32

lstrcmpiA
CreateFileW
GetTempFileNameW
RemoveDirectoryW
CreateProcessW
CreateDirectoryW
GetLastError
CreateThread
GlobalLock
GlobalUnlock
GetDiskFreeSpaceW
WideCharToMultiByte
lstrcpynW
lstrlenW
SetErrorMode
GetVersionExW
GetCommandLineW
GetTempPathW
GetWindowsDirectoryW
WriteFile
CopyFileW
ExitProcess
GetCurrentProcess
GetModuleFileNameW
GetFileSize
GetTickCount
Sleep
SetFileAttributesW
GetFileAttributesW
SetCurrentDirectoryW
MoveFileW
GetFullPathNameW
GetShortPathNameW
SearchPathW
CompareFileTime
SetFileTime
CloseHandle
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalFree
GlobalAlloc
GetModuleHandleW
LoadLibraryExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
lstrlenA
MultiByteToWideChar
ReadFile
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
MulDiv
lstrcpyA
MoveFileExW
lstrcatW
GetSystemDirectoryW
GetProcAddress
GetModuleHandleA
GetExitCodeProcess
WaitForSingleObject
SetEnvironmentVariableW

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 148KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:4 windows x86 arch:x86

509a34b3a68a773e0afb4259e68f9f82

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalAlloc
GlobalFree
GlobalSize
lstrcpynW
lstrcpyW
GetProcAddress
WideCharToMultiByte
VirtualFree
FreeLibrary
lstrlenW
LoadLibraryW
GetModuleHandleW
MultiByteToWideChar
VirtualAlloc
VirtualProtect
GetLastError

user32

wsprintfW

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 867B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 662B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/modern-header.bmp
$PLUGINSDIR/modern-wizard.bmp
$PLUGINSDIR/nsDialogs.dll
.dll windows:4 windows x86 arch:x86

3b477381217c97b22146297f93df2a92

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpyW
GetFileAttributesW
lstrcmpiW
MulDiv
lstrlenW
HeapFree
GetProcessHeap
GetCurrentDirectoryW
HeapReAlloc
GlobalFree
lstrcpynW
GlobalAlloc
HeapAlloc
SetCurrentDirectoryW

user32

GetPropW
DestroyWindow
CallWindowProcW
SetCursor
LoadCursorW
RemovePropW
CharPrevW
GetWindowLongW
DrawTextW
GetWindowTextW
SetWindowLongW
GetDlgItem
GetSysColor
SetWindowPos
CreateDialogParamW
MapWindowPoints
GetWindowRect
SetPropW
CreateWindowExW
IsWindow
SetTimer
KillTimer
DispatchMessageW
TranslateMessage
GetMessageW
IsDialogMessageW
ShowWindow
wsprintfW
MapDialogRect
GetClientRect
CharNextW
SendMessageW
DrawFocusRect

gdi32

SetTextColor

shell32

SHBrowseForFolderW
SHGetPathFromIDListW

comdlg32

GetSaveFileNameW
GetOpenFileNameW
CommDlgExtendedError

ole32

CoTaskMemFree

Exports

Exports

Create
CreateControl
CreateItem
CreateTimer
GetUserData
KillTimer
OnBack
OnChange
OnClick
OnNotify
SelectFileDialog
SelectFolderDialog
SetRTL
SetUserData
Show

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 638B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Openplanet.dll
.dll windows:6 windows x64 arch:x64

f54cfa02768a2b2c2ef5807860e2bc9a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\Games\Trackmania\Openplanet.pdb

Imports

kernel32

LockResource
SizeofResource
FindResourceA
EnumResourceNamesW
SetErrorMode
GetVersionExW
FindResourceW
IsValidCodePage
GetCPInfo
MulDiv
GetCommandLineW
ExitProcess
GetLocaleInfoW
GetUserDefaultLCID
FreeConsole
AttachConsole
WriteConsoleA
WriteConsoleW
FillConsoleOutputCharacterW
ReadConsoleA
SetConsoleCursorPosition
ReadConsoleOutputCharacterA
GetLongPathNameW
GetExitCodeThread
SetCurrentDirectoryW
ResumeThread
lstrlenW
WaitNamedPipeW
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SleepConditionVariableSRW
WakeAllConditionVariable
InitOnceComplete
InitOnceBeginInitialize
SetConsoleMode
GetConsoleMode
RtlVirtualUnwind
ConvertThreadToFiberEx
ConvertFiberToThread
GetACP
GetEnvironmentVariableW
FindClose
CreateFiberEx
DeleteFiber
SwitchToFiber
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
AcquireSRWLockShared
ReleaseSRWLockShared
InitializeSRWLock
GetSystemDirectoryA
GetFileSizeEx
VerifyVersionInfoW
SleepEx
WaitForMultipleObjects
PeekNamedPipe
GetFileType
MoveFileExW
SetLastError
GetModuleHandleW
GetSystemDirectoryW
InitializeCriticalSectionEx
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetLocaleInfoA
GetModuleHandleA
LoadResource
CreateEventW
RaiseException
GetThreadLocale
VerSetConditionMask
FindNextFileW
InitializeSListHead
FindFirstFileW
GetCurrentThreadId
TryEnterCriticalSection
AreFileApisANSI
HeapCreate
GetFullPathNameW
GetDiskFreeSpaceW
LockFile
SetFilePointer
GetFullPathNameA
SetEndOfFile
UnlockFileEx
GetTempPathW
CreateMutexW
GetFileAttributesW
HeapValidate
HeapSize
GetTempPathA
FormatMessageW
GetDiskFreeSpaceA
GetFileAttributesA
GetFileAttributesExW
OutputDebugStringW
FlushViewOfFile
WaitForSingleObjectEx
LoadLibraryW
HeapCompact
HeapDestroy
UnlockFile
LocalFree
LockFileEx
GetFileSize
SystemTimeToFileTime
ReadConsoleW
GetSystemTimeAsFileTime
GetSystemTime
FormatMessageA
FlushFileBuffers
SetThreadPriority
CreateThread
CreateSemaphoreW
CreateEventA
WaitForSingleObject
ReleaseSemaphore
ResetEvent
SetEvent
WriteFile
ReadFile
GetFileInformationByHandle
CreateFileW
CreateFileA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
GetTickCount
QueryPerformanceFrequency
QueryPerformanceCounter
OutputDebugStringA
GetStdHandle
Module32First
CreateToolhelp32Snapshot
MoveFileW
GlobalFree
GlobalLock
GlobalUnlock
GlobalAlloc
GetModuleFileNameW
TerminateProcess
GetProcessHeap
HeapFree
HeapReAlloc
HeapAlloc
CloseHandle
RemoveDirectoryW
DeleteFileW
CreateDirectoryW
GetLastError
VirtualFree
VirtualProtect
GetSystemInfo
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
VirtualAlloc
GetCurrentProcessId
Sleep
IsDebuggerPresent
SetEnvironmentVariableA
GetEnvironmentVariableA
CopyFileA
LoadLibraryA
GetProcAddress
FreeLibrary
DeleteFileA
SetThreadExecutionState
WriteProcessMemory
VirtualProtectEx
WideCharToMultiByte
MultiByteToWideChar
ReadProcessMemory
GetConsoleScreenBufferInfo
GetCurrentProcess

user32

GetAsyncKeyState
MonitorFromWindow
GetMonitorInfoA
EnumDisplayMonitors
GetProcessWindowStation
GetUserObjectInformationW
MessageBoxW
IsWindowVisible
GetSystemMetrics
GetWindowRect
GetWindow
LoadImageW
MonitorFromRect
LoadBitmapW
LoadIconW
GetIconInfo
PostMessageW
RegisterClassW
CreateWindowExW
TranslateMessage
DispatchMessageW
PeekMessageW
GetWindowTextW
GetWindowTextLengthW
GetClassNameW
DestroyIcon
UnregisterClassW
GetProcessDefaultLayout
LoadCursorW
CreateIconIndirect
DrawFrameControl
FillRect
InflateRect
DrawIconEx
GetMessagePos
GetMessageTime
SendMessageW
DefWindowProcW
PostQuitMessage
CallWindowProcW
IsWindow
AnimateWindow
MoveWindow
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
GetActiveWindow
GetFocus
VkKeyScanW
MapVirtualKeyW
EnableWindow
IsWindowEnabled
GetMenuItemCount
TrackPopupMenu
GetMenuItemInfoW
UpdateWindow
GetUpdateRgn
RedrawWindow
ScrollWindow
EnableScrollBar
MapWindowPoints
ChildWindowFromPointEx
GetSysColor
PtInRect
GetWindowLongPtrW
SetWindowLongPtrW
GetParent
SetParent
SetWindowTextA
UnhookWindowsHookEx
CallNextHookEx
IsDialogMessageW
SetScrollInfo
GetScrollInfo
GetDoubleClickTime
SystemParametersInfoW
CreateDialogParamW
GetDlgItem
SetWindowRgn
FlashWindowEx
GetWindowPlacement
IsZoomed
CreateDialogIndirectParamW
GetDialogBaseUnits
DrawMenuBar
GetSystemMenu
EnableMenuItem
GetDesktopWindow
InvalidateRect
DrawTextW
DrawFocusRect
DrawStateW
SetRectEmpty
CopyRect
OffsetRect
SetActiveWindow
FindWindowExW
PostThreadMessageW
ChangeDisplaySettingsExW
EnumDisplaySettingsW
MonitorFromPoint
GetMonitorInfoW
DestroyCursor
GetWindowDC
BeginPaint
SetMenu
CheckMenuRadioItem
GetMenuItemID
CheckMenuItem
SetMenuItemInfoW
InsertMenuItemW
SetMenuInfo
RemoveMenu
ModifyMenuW
AppendMenuW
InsertMenuW
GetSubMenu
DestroyMenu
CreatePopupMenu
CreateMenu
GetMenuState
KillTimer
SetTimer
GetWindowTextA
SetWindowLongPtrA
EnumWindows
GetClassNameA
GetWindowThreadProcessId
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
GetClipboardData
GetKeyboardLayout
TrackMouseEvent
GetMessageExtraInfo
DefWindowProcA
UnregisterClassA
RegisterClassExA
CreateWindowExA
IsChild
DestroyWindow
ValidateRect
GetMessageW
EndPaint
MsgWaitForMultipleObjects
ShowWindow
SetLayeredWindowAttributes
SetWindowPos
IsIconic
BringWindowToTop
SetFocus
GetKeyState
GetCapture
SetCapture
ReleaseCapture
IsWindowUnicode
GetForegroundWindow
SetForegroundWindow
GetDC
ReleaseDC
SetWindowTextW
GetClientRect
AdjustWindowRectEx
SetCursorPos
SetCursor
GetCursorPos
ClientToScreen
ScreenToClient
WindowFromPoint
GetWindowLongW
SetWindowLongW
SetWindowLongA
CallWindowProcA
LoadCursorA
SetWindowsHookExW

gdi32

GetCharABCWidthsW
SetViewportOrgEx
GetTextExtentExPointW
SetViewportExtEx
Polyline
Polygon
ExtTextOutW
SetTextColor
SetStretchBltMode
SetROP2
StretchDIBits
StretchBlt
SetPolyFillMode
SetPixel
GetLayout
SetLayout
SetMapMode
ExtSelectClipRgn
SelectClipRgn
RoundRect
Rectangle
PolyPolygon
Pie
MaskBlt
GetStockObject
GetPixel
GetObjectType
GetClipBox
GetBkColor
ExtFloodFill
Ellipse
CreateSolidBrush
Arc
SetBkColor
DeleteDC
PtInRegion
RectInRegion
GetRgnBox
EqualRgn
CombineRgn
GetDIBColorTable
CreateDIBSection
GetDIBits
CreateDIBitmap
CreatePatternBrush
CreateHatchBrush
ExtCreatePen
CreatePen
OffsetRgn
GetRegionData
ExtCreateRegion
GdiFlush
ExcludeClipRect
SetBrushOrgEx
SetWindowOrgEx
SetBkMode
SetWindowExtEx
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
BitBlt
GetTextMetricsW
SelectObject
GetOutlineTextMetricsW
CreateFontIndirectW
MoveToEx
LineTo
GetObjectW
GetDeviceCaps
GetTextExtentPoint32W
CreateRectRgn
DeleteObject

advapi32

RegOpenKeyExA
CryptAcquireContextW
CryptReleaseContext
CryptGetHashParam
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptDestroyKey
CryptImportKey
CryptEncrypt
DeregisterEventSource
RegisterEventSourceW
ReportEventW
CryptSetHashParam
CryptGetProvParam
RegOpenKeyExW
RegCreateKeyExW
GetUserNameW
RegSetValueExW
RegQueryValueExW
SystemFunction036
RegDeleteValueA
RegCreateKeyExA
RegCloseKey
CryptEnumProvidersW
CryptSignHashW
CryptDecrypt
CryptExportKey
CryptGetUserKey

shell32

DragQueryFileW
ShellExecuteExW
SHCreateDirectoryExW
SHGetFolderPathW
SHFileOperationW
DragFinish
DragQueryPoint
ShellExecuteW
CommandLineToArgvW
ExtractIconExW
ExtractIconW

ole32

CoTaskMemFree
OleSetContainedObject
OleUninitialize
OleInitialize
CoCreateInstance
OleRun
OleLockRunning

oleaut32

SafeArrayLock
SafeArrayUnlock
SysStringLen
VarBstrFromCy
VariantInit
SafeArrayGetVartype
SafeArrayCreate
SysFreeString
SafeArrayCreateVector
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayDestroy
SysAllocString

msvcp140

_Cnd_destroy
_Cnd_init
_Mtx_destroy
_Mtx_init
_Thrd_start
?__ExceptionPtrSwap@@YAXPEAX0@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEA_J@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAH@Z
?_ReportUnobservedException@details@Concurrency@@YAXXZ
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEA_N@Z
??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_N@Z
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXH@Z
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
_Thrd_hardware_concurrency
_Thrd_yield
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Throw_C_error@std@@YAXH@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?width@ios_base@std@@QEAA_J_J@Z
?width@ios_base@std@@QEBA_JXZ
?flags@ios_base@std@@QEBAHXZ
?good@ios_base@std@@QEBA_NXZ
??Bios_base@std@@QEBA_NXZ
?uncaught_exception@std@@YA_NXZ
?id@?$collate@D@std@@2V0locale@2@A
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?id@?$ctype@D@std@@2V0locale@2@A
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Random_device@std@@YAIXZ
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
?tolower@?$ctype@D@std@@QEBADD@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
??1facet@locale@std@@MEAA@XZ
??0facet@locale@std@@IEAA@_K@Z
??Bid@locale@std@@QEAA_KXZ
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
??1_Locinfo@std@@QEAA@XZ
??0_Locinfo@std@@QEAA@PEBD@Z
_Strxfrm
_Strcoll
_Cnd_do_broadcast_at_thread_exit
_Cnd_signal
_Thrd_id
_Thrd_join
?_Xout_of_range@std@@YAXPEBD@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z
??0task_continuation_context@Concurrency@@AEAA@XZ
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ
?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ
?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ
?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z
?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z
?_Xbad_function_call@std@@YAXXZ
?_Syserror_map@std@@YAPEBDH@Z
_Cnd_unregister_at_thread_exit
_Cnd_register_at_thread_exit
_Mtx_init_in_situ
_Mtx_destroy_in_situ
_Mtx_lock
_Mtx_unlock
?_Throw_Cpp_error@std@@YAXH@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z
?_Xlength_error@std@@YAXPEBD@Z
_Xtime_get_ticks
_Query_perf_counter
_Query_perf_frequency
_Mtx_current_owns
_Cnd_init_in_situ
_Cnd_destroy_in_situ
_Cnd_wait
_Cnd_timedwait
_Cnd_broadcast

ws2_32

ioctlsocket
htons
recvfrom
sendto
socket
gethostbyname
getsockopt
WSACreateEvent
WSAEnumNetworkEvents
WSAEventSelect
WSAResetEvent
WSAWaitForMultipleEvents
WSAGetLastError
WSASetLastError
inet_ntop
WSAIoctl
htonl
inet_pton
__WSAFDIsSet
gethostname
inet_addr
inet_ntoa
gethostbyaddr
getservbyport
getservbyname
WSACleanup
connect
WSASocketW
shutdown
setsockopt
WSACloseEvent
accept
bind
closesocket
getpeername
getaddrinfo
freeaddrinfo
getsockname
listen
send
select
recv
getnameinfo
ntohs
WSAStartup

d3dcompiler_47

D3DCompile

ntdll

RtlInitUnicodeString
RtlCaptureContext
RtlLookupFunctionEntry

shlwapi

PathFileExistsW

imm32

ImmReleaseContext
ImmSetCompositionWindow
ImmSetCandidateWindow
ImmGetContext

bcrypt

BCryptGenRandom

uxtheme

IsThemePartDefined
GetThemePartSize
IsAppThemed
IsThemeActive
GetThemeMargins
DrawThemeParentBackground
GetThemeColor
IsThemeBackgroundPartiallyTransparent
GetThemeBackgroundContentRect
DrawThemeBackground
CloseThemeData
OpenThemeData

crypt32

CryptStringToBinaryA
CertGetCertificateContextProperty
CertDuplicateCertificateContext
CertFreeCertificateChain
CertGetCertificateChain
CertFreeCertificateChainEngine
CertCreateCertificateChainEngine
CryptQueryObject
CertGetNameStringW
CertFindExtension
CertAddCertificateContextToStore
CryptDecodeObjectEx
PFXImportCertStore
CryptStringToBinaryW
CertFreeCertificateContext
CertFindCertificateInStore
CertEnumCertificatesInStore
CertCloseStore
CertOpenStore

msimg32

GradientFill
AlphaBlend

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

vcruntime140

memmove
_CxxThrowException
__std_terminate
memset
memcpy
_set_se_translator
__current_exception
__current_exception_context
__std_type_info_destroy_list
memcmp
strstr
strchr
wcsstr
_purecall
__std_type_info_compare
__RTtypeid
__C_specific_handler
__CxxFrameHandler3
wcschr
strrchr
memchr
__std_exception_destroy
__std_exception_copy

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-heap-l1-1-0

_msize
calloc
_callnewh
realloc
malloc
free

api-ms-win-crt-string-l1-1-0

isalpha
isdigit
towlower
towupper
iswspace
iswalpha
isalnum
_strdup
strncpy_s
strcat_s
strcpy_s
wcsncpy
strpbrk
wcsncmp
wcspbrk
_wcsdup
strcmp
strspn
strnlen
_stricmp
iswalnum
strncpy
strcspn
isupper
strncmp
tolower
_strnicmp
toupper
_wcsicmp
isspace

api-ms-win-crt-stdio-l1-1-0

_lseeki64
fgetc
fputs
_wopen
fgetpos
fputc
_fileno
_setmode
fopen
setvbuf
__acrt_iob_func
__stdio_common_vsprintf_s
_get_stream_buffer_pointers
__stdio_common_vsnwprintf_s
_wfopen_s
fsetpos
_wfsopen
_getcwd
_ftelli64
_telli64
__stdio_common_vsnprintf_s
ferror
ftell
fseek
fread
fgets
fflush
_wfopen
fwrite
_write
_read
fopen_s
__stdio_common_vswscanf
fclose
_wsopen_dispatch
_fseeki64
__stdio_common_vswprintf_p
ungetc
__stdio_common_vfwprintf
__stdio_common_vsprintf
__stdio_common_vswprintf
__stdio_common_vfprintf
__stdio_common_vsscanf
feof
_close

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn
abort
_errno
_seh_filter_dll
_wassert
raise
_controlfp_s
terminate
exit
_endthreadex
_configure_narrow_argv
_beginthreadex
signal
_initialize_narrow_environment
strerror
_set_invalid_parameter_handler
_exit
strerror_s
_initterm_e
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_initterm
__sys_errlist
__sys_nerr
_crt_atexit
_cexit

api-ms-win-crt-convert-l1-1-0

strtoull
strtof
_wtoi
_wcstoui64
_wcstoi64
wcstod
_wtol
strtod
strtol
strtoll
atoi
wcstombs
strtoul
atof
atoll

api-ms-win-crt-filesystem-l1-1-0

_wstat64i32
_stat64i32
_waccess
_unlock_file
_fstat64
_lock_file
_unlink
_wstat64

api-ms-win-crt-utility-l1-1-0

srand
abs
qsort_s
bsearch
qsort

api-ms-win-crt-math-l1-1-0

logbf
atanf
expf
floorf
log10f
logf
sinf
fmaxf
fminf
pow
fmod
round
cosf
atan2f
log2f
log1pf
log2
asinf
roundf
acosf
_fdopen
ceilf
powf
tanf
cos
ldexp
_fdclass
floor
exp
log
sin
sqrt
fmodf
ceil
sqrtf

api-ms-win-crt-time-l1-1-0

strftime
_gmtime64
_mktime64
_localtime64
_gmtime64_s
_time64
clock
_localtime64_s

api-ms-win-crt-locale-l1-1-0

setlocale

api-ms-win-crt-environment-l1-1-0

_wgetcwd
_wgetenv
getenv

comctl32

ord17
ImageList_Create
ImageList_Destroy
ImageList_Add
ImageList_SetBkColor
ImageList_Draw
ImageList_Replace
ImageList_GetIconSize
ImageList_GetImageInfo

rpcrt4

RpcStringFreeW
UuidCreate
UuidToStringW

wininet

InternetQueryOptionA
HttpQueryInfoA
InternetReadFileExW
InternetCrackUrlA
InternetSetStatusCallbackW
InternetOpenUrlA
InternetCloseHandle
InternetOpenW

Exports

Exports

DinputInit

Sections

.text
Size: 8.0MB - Virtual size: 8.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 118KB - Virtual size: 430KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 351KB - Virtual size: 351KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Openplanet/Fonts/DroidSans-Bold.ttf
Openplanet/Fonts/DroidSans.ttf
Openplanet/Fonts/DroidSansMono.ttf
Openplanet/Fonts/ManiaIcons.ttf
Openplanet/Plugins/BigDecor/.manifest
Openplanet/Plugins/BigDecor/CreateUI.as
Openplanet/Plugins/BigDecor/Main.as
Openplanet/Plugins/BigDecor/info.toml
Openplanet/Plugins/Camera/.manifest
Openplanet/Plugins/Camera/Export.as
Openplanet/Plugins/Camera/Impl.as
Openplanet/Plugins/Camera/Main.as
Openplanet/Plugins/Camera/info.toml
Openplanet/Plugins/ClassicMenu/.manifest
Openplanet/Plugins/ClassicMenu/ClassicMenu.as
Openplanet/Plugins/ClassicMenu/info.toml
Openplanet/Plugins/Discord/.manifest
Openplanet/Plugins/Discord/Main.as
.js
Openplanet/Plugins/Discord/Notify.as
Openplanet/Plugins/Discord/Services.as
Openplanet/Plugins/Discord/Settings.as
Openplanet/Plugins/Discord/Titles.as
Openplanet/Plugins/Discord/info.toml
Openplanet/Plugins/EditorDeveloper/.manifest
Openplanet/Plugins/EditorDeveloper/Main.as
Openplanet/Plugins/EditorDeveloper/info.toml
Openplanet/Plugins/InfiniteEmbedSize/.manifest
Openplanet/Plugins/InfiniteEmbedSize/EmbedLimit.as
Openplanet/Plugins/InfiniteEmbedSize/Main.as
Openplanet/Plugins/InfiniteEmbedSize/MaxChallengeSize.as
Openplanet/Plugins/InfiniteEmbedSize/NetConfig.as
Openplanet/Plugins/InfiniteEmbedSize/Settings.as
Openplanet/Plugins/InfiniteEmbedSize/info.toml
Openplanet/Plugins/NadeoServices/.manifest
Openplanet/Plugins/NadeoServices/AccessToken.as
Openplanet/Plugins/NadeoServices/CoreToken.as
Openplanet/Plugins/NadeoServices/Export.as
Openplanet/Plugins/NadeoServices/IToken.as
Openplanet/Plugins/NadeoServices/Main.as
Openplanet/Plugins/NadeoServices/NadeoServices.as
Openplanet/Plugins/NadeoServices/info.toml
Openplanet/Plugins/PluginManager/.manifest
Openplanet/Plugins/PluginManager/info.toml
Openplanet/Plugins/PluginManager/src/Interface/Controls/PluginCard.as
Openplanet/Plugins/PluginManager/src/Interface/Controls/PluginChangelog.as
Openplanet/Plugins/PluginManager/src/Interface/Controls/PluginTag.as
Openplanet/Plugins/PluginManager/src/Interface/Controls/Tag.as
Openplanet/Plugins/PluginManager/src/Interface/Tab.as
Openplanet/Plugins/PluginManager/src/Interface/Tabs/Featured.as
Openplanet/Plugins/PluginManager/src/Interface/Tabs/Installed.as
Openplanet/Plugins/PluginManager/src/Interface/Tabs/LastUpdated.as
Openplanet/Plugins/PluginManager/src/Interface/Tabs/Newest.as
Openplanet/Plugins/PluginManager/src/Interface/Tabs/Plugin.as
Openplanet/Plugins/PluginManager/src/Interface/Tabs/PluginList.as
Openplanet/Plugins/PluginManager/src/Interface/Tabs/Popular.as
Openplanet/Plugins/PluginManager/src/Interface/Tabs/Search.as
Openplanet/Plugins/PluginManager/src/Interface/Tabs/Updates.as
Openplanet/Plugins/PluginManager/src/Interface/Window.as
Openplanet/Plugins/PluginManager/src/MenuMain.as
Openplanet/Plugins/PluginManager/src/PluginCache.as
Openplanet/Plugins/PluginManager/src/Settings.as
Openplanet/Plugins/PluginManager/src/Update.as
Openplanet/Plugins/PluginManager/src/UpdateCheck.as
Openplanet/Plugins/PluginManager/src/Utils/API.as
Openplanet/Plugins/PluginManager/src/Utils/CachedImage.as
Openplanet/Plugins/PluginManager/src/Utils/ColoredButtons.as
Openplanet/Plugins/PluginManager/src/Utils/Formatting.as
Openplanet/Plugins/PluginManager/src/Utils/PluginChangelog.as
Openplanet/Plugins/PluginManager/src/Utils/PluginInfo.as
Openplanet/Plugins/PluginManager/src/Utils/TagInfo.as
Openplanet/Plugins/PluginManager/src/Utils/Version.as
Openplanet/Plugins/PluginManager/src/main.as
Openplanet/Plugins/Stats/.manifest
Openplanet/Plugins/Stats/Main.as
Openplanet/Plugins/Stats/Statistics.as
Openplanet/Plugins/Stats/info.toml
Openplanet/Plugins/UsefulInformation/.manifest
Openplanet/Plugins/UsefulInformation/Main.as
Openplanet/Plugins/UsefulInformation/info.toml
Openplanet/Plugins/VehicleState/.manifest
Openplanet/Plugins/VehicleState/Debugger/Main.as
Openplanet/Plugins/VehicleState/Export.as
Openplanet/Plugins/VehicleState/Internal/Impl.as
Openplanet/Plugins/VehicleState/Internal/SceneVis.as
Openplanet/Plugins/VehicleState/Internal/Vehicle/VehicleMP4.as
Openplanet/Plugins/VehicleState/Internal/Vehicle/VehicleNext.as
Openplanet/Plugins/VehicleState/Internal/Vehicle/VehicleTurbo.as
Openplanet/Plugins/VehicleState/Settings.as
Openplanet/Plugins/VehicleState/StateWrappers.as
Openplanet/Plugins/VehicleState/info.toml
Openplanet/READ_ME.txt
Openplanet/Scripts/Compatibility.as
Openplanet/Scripts/Compatibility.as.sig
Openplanet/Scripts/Dialogs.as
Openplanet/Scripts/Dialogs.as.sig
Openplanet/Scripts/Patch.as
Openplanet/Scripts/Patch.as.sig
Openplanet/Scripts/Plugin_MapAudioFix.as
Openplanet/Scripts/Plugin_MapAudioFix.as.sig
Openplanet/cacert.pem
OpenplanetUninstall.exe
.exe windows:4 windows x86 arch:x86

f4639a0b3116c2cfc71144b88a929cfd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegEnumValueW
RegEnumKeyW
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegOpenKeyExW
RegCreateKeyExW

shell32

SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFileInfoW
SHFileOperationW
ShellExecuteExW

ole32

CoCreateInstance
OleUninitialize
OleInitialize
IIDFromString
CoTaskMemFree

comctl32

ImageList_Destroy
ord17
ImageList_AddMasked
ImageList_Create

user32

MessageBoxIndirectW
GetDlgItemTextW
SetDlgItemTextW
CreatePopupMenu
AppendMenuW
TrackPopupMenu
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
IsWindowVisible
CallWindowProcW
GetMessagePos
CheckDlgButton
LoadCursorW
SetCursor
GetSysColor
SetWindowPos
GetWindowLongW
IsWindowEnabled
SetClassLongW
GetSystemMenu
EnableMenuItem
GetWindowRect
ScreenToClient
EndDialog
RegisterClassW
SystemParametersInfoW
CharPrevW
GetClassInfoW
DialogBoxParamW
CharNextW
ExitWindowsEx
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
FindWindowExW
IsWindow
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
ReleaseDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndPaint
CharNextA
wsprintfA
DispatchMessageW
CreateWindowExW
PeekMessageW
GetSystemMetrics

gdi32

GetDeviceCaps
SetBkColor
SelectObject
DeleteObject
CreateBrushIndirect
CreateFontIndirectW
SetBkMode
SetTextColor

kernel32

lstrcmpiA
CreateFileW
GetTempFileNameW
RemoveDirectoryW
CreateProcessW
CreateDirectoryW
GetLastError
CreateThread
GlobalLock
GlobalUnlock
GetDiskFreeSpaceW
WideCharToMultiByte
lstrcpynW
lstrlenW
SetErrorMode
GetVersionExW
GetCommandLineW
GetTempPathW
GetWindowsDirectoryW
WriteFile
CopyFileW
ExitProcess
GetCurrentProcess
GetModuleFileNameW
GetFileSize
GetTickCount
Sleep
SetFileAttributesW
GetFileAttributesW
SetCurrentDirectoryW
MoveFileW
GetFullPathNameW
GetShortPathNameW
SearchPathW
CompareFileTime
SetFileTime
CloseHandle
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalFree
GlobalAlloc
GetModuleHandleW
LoadLibraryExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
lstrlenA
MultiByteToWideChar
ReadFile
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
MulDiv
lstrcpyA
MoveFileExW
lstrcatW
GetSystemDirectoryW
GetProcAddress
GetModuleHandleA
GetExitCodeProcess
WaitForSingleObject
SetEnvironmentVariableW

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 148KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
dinput8.dll
.dll windows:6 windows x64 arch:x64

885d58a1a1acc19303e105daee7f6e42

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\Games\Trackmania\dinput8.pdb

Imports

kernel32

GetEnvironmentVariableA
SetEnvironmentVariableA
GetLastError
GetSystemDirectoryA
GetModuleFileNameA
GetModuleFileNameW
GetProcAddress
LoadLibraryA
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext

user32

GetAsyncKeyState

vcruntime140

wcsrchr
memmove
__std_type_info_destroy_list
__C_specific_handler
memset
strrchr
memcpy

api-ms-win-crt-string-l1-1-0

strcat_s

api-ms-win-crt-stdio-l1-1-0

fclose
__stdio_common_vfprintf
_wfopen

api-ms-win-crt-time-l1-1-0

_localtime64
_time64

api-ms-win-crt-runtime-l1-1-0

_cexit
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_initterm_e
_initterm
_seh_filter_dll

Exports

Exports

DirectInput8Create

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f4639a0b3116c2cfc71144b88a929cfd

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

Sections

.text Size: 26KB - Virtual size: 26KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 1KB - Virtual size: 170KB

.ndata Size: - Virtual size: 148KB

.rsrc Size: 22KB - Virtual size: 22KB

509a34b3a68a773e0afb4259e68f9f82

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

ole32

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 8KB

.rdata Size: 1024B - Virtual size: 867B

.data Size: 512B - Virtual size: 120B

.reloc Size: 1024B - Virtual size: 662B

3b477381217c97b22146297f93df2a92

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

comdlg32

ole32

Exports

Exports

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 8KB

.rsrc Size: 512B - Virtual size: 152B

.reloc Size: 1024B - Virtual size: 638B

f54cfa02768a2b2c2ef5807860e2bc9a

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

msvcp140

ws2_32

d3dcompiler_47

ntdll

shlwapi

imm32

bcrypt

uxtheme

crypt32

msimg32

.text
Size: 26KB - Virtual size: 26KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 1KB - Virtual size: 170KB

.ndata
Size: - Virtual size: 148KB

.rsrc
Size: 22KB - Virtual size: 22KB

.text
Size: 8KB - Virtual size: 8KB

.rdata
Size: 1024B - Virtual size: 867B

.data
Size: 512B - Virtual size: 120B

.reloc
Size: 1024B - Virtual size: 662B

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 8KB

.rsrc
Size: 512B - Virtual size: 152B

.reloc
Size: 1024B - Virtual size: 638B

.text
Size: 8.0MB - Virtual size: 8.0MB

.rdata
Size: 2.3MB - Virtual size: 2.3MB

.data
Size: 118KB - Virtual size: 430KB

.pdata
Size: 351KB - Virtual size: 351KB

.rsrc
Size: 1024B - Virtual size: 824B

.reloc
Size: 79KB - Virtual size: 79KB

.text
Size: 26KB - Virtual size: 26KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 1KB - Virtual size: 170KB

.ndata
Size: - Virtual size: 148KB

.rsrc
Size: 22KB - Virtual size: 22KB

.text
Size: 5KB - Virtual size: 5KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 35KB

.pdata
Size: 1024B - Virtual size: 576B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 44B