h:\播放库代码svn\7.3.5.44临时版本\out\win32\PDB\PlayCtrl.pdb
Static task
static1
Behavioral task
behavioral1
Sample
PlayCtrl.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
PlayCtrl.dll
Resource
win10v2004-20240508-en
General
-
Target
PlayCtrl.dll
-
Size
3.5MB
-
MD5
69c898d6bc4c27a09fdc78723a5a22a1
-
SHA1
c17e465101d0224054a43dc7e47fa5b14b5db576
-
SHA256
f288145ef30106797fe36c689719c68cbea85dcfac217cc7987f7ba9918cdbc0
-
SHA512
9fcf031f5bdd73020c1ecd4e2a158c0aa194d4d6c05dd99579611a945966f5bf17c8efe337de8d7bd44db86ce9a91975209aca32c4d73d9e68e239edc512bcb9
-
SSDEEP
49152:HwyioCCZXYD4VxDDwAMe59FIMlZQjkNp+rVHV4l0owFyp7GPt+a9s:Vio9XY03nbOj1pFyS+a9s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource PlayCtrl.dll
Files
-
PlayCtrl.dll.dll windows:5 windows x86 arch:x86
7e47bafb889a1f9ab4038ef02e61bbbb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
superrender
_SR_Display@12
_SR_SetVerticalSyncPeriod@12
_SR_AddSubPort@12
_SR_Init@16
_SR_CreateHandle@0
_SR_SetConfig@12
_SR_DelSubPort@8
_SR_DisplaySurface@16
_SR_DisplaySurfaceEx@20
_SR_SetDisplayRect@16
_SR_GetLastError@12
_SR_UpdateFrameDataExCrop@28
_SR_DestroyHandle@4
_SR_DrawPolygon@24
_SR_Capture@16
_SR_Rotate@12
_SR_DrawLines@24
_SR_DrawFont@28
_SR_SetCallBack@20
audiorender
AR_SetVolume
AR_DestroyHandle
AR_Play
AR_SetParam
AR_QueryDevice
AR_CreateHandle
AR_InputData
AR_GetVolume
AR_Stop
AR_AdjustWaveAudio
psapi
GetProcessMemoryInfo
kernel32
InterlockedExchange
InitializeCriticalSectionAndSpinCount
SetStdHandle
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetStringTypeA
GetLocaleInfoA
GetLocaleInfoW
WaitForSingleObject
SetEvent
CreateEventA
GetLocalTime
GetTickCount
QueryPerformanceCounter
QueryPerformanceFrequency
Sleep
GetProcAddress
OutputDebugStringA
LoadLibraryExA
LoadLibraryA
GetModuleFileNameA
GetModuleHandleA
GetStringTypeW
GetCurrentProcess
MultiByteToWideChar
DeleteFileA
IsBadReadPtr
IsBadWritePtr
SetThreadPriority
CloseHandle
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CreateFileA
ReadFile
WriteFile
GetLastError
SetFilePointer
GetFileSize
SleepEx
CancelWaitableTimer
SetWaitableTimer
CreateWaitableTimerA
CreateThread
ReleaseSemaphore
ResetEvent
GetHandleInformation
CreateSemaphoreA
SetConsoleCtrlHandler
GetTimeZoneInformation
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
SetEnvironmentVariableA
EnumSystemLocalesA
IsValidLocale
CreateFileW
SetEndOfFile
GetProcessHeap
CompareStringA
CompareStringW
FreeLibrary
GetFileType
SetHandleCount
HeapSize
LCMapStringW
LCMapStringA
IsValidCodePage
RtlUnwind
ExitThread
GetCurrentThreadId
HeapFree
HeapAlloc
RaiseException
GetCommandLineA
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetCurrentThread
TerminateProcess
IsDebuggerPresent
GetStdHandle
ExitProcess
HeapCreate
HeapDestroy
VirtualFree
FatalAppExitA
VirtualAlloc
HeapReAlloc
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
user32
GetMessageA
PeekMessageA
PostThreadMessageA
GetClientRect
IsWindowVisible
IsWindow
FillRect
gdi32
DeleteDC
DeleteObject
GetDIBits
SelectObject
CreateFontA
CreateCompatibleBitmap
CreateSolidBrush
SetTextColor
SetBkColor
CreateCompatibleDC
TextOutW
winmm
timeKillEvent
timeSetEvent
timeBeginPeriod
timeGetDevCaps
timeEndPeriod
Exports
Exports
?MP_AdjustWaveAudio@@YGHQAXJ@Z
?MP_BackPlay@@YGHQAX@Z
?MP_CalculateFiletimeByGolbeTime@@YGIQAXPAU_MP_SYSTEM_TIME_@@1@Z
?MP_Close@@YGHQAX@Z
?MP_CompareMediaHeader@@YGHQAXPAEIPAI@Z
?MP_CreateHandle@@YGHPAPAXW4_THREAD_STATUS_@@H@Z
?MP_DestroyHandle@@YGHQAX@Z
?MP_DisplayLostFrames@@YGHQAXHHH@Z
?MP_FEC_DelPort@@YGHQAXH@Z
?MP_FEC_Disable@@YGHQAX@Z
?MP_FEC_Enable@@YGHQAX@Z
?MP_FEC_GetCurrentPTZPort@@YGHQAXMMPAI@Z
?MP_FEC_GetParam@@YGHQAXHPAUtagFECParam@@@Z
?MP_FEC_GetPort@@YGHQAXW4tagFECPlaceType@@W4tagFECCorrectType@@PAH@Z
?MP_FEC_GetViewParam@@YGHQAXIW4tagPLAYM4HRViewParamType@@PAM@Z
?MP_FEC_PTZ2Window@@YGHQAXIUtagPTZParam@@11PAM2@Z
?MP_FEC_PTZ2WindowEx@@YGHQAXIIUtagPTZParam@@11PAM2@Z
?MP_FEC_Rotate@@YGHQAXPAUtagPLAYM4SRTransformParam@@@Z
?MP_FEC_Scan@@YGHQAXIMPAM1W4tagFECPlaceType@@@Z
?MP_FEC_SetCallBack@@YGHQAXHP6GXPAXII1II@Z1@Z
?MP_FEC_SetConfig@@YGHQAXI@Z
?MP_FEC_SetCurrentPTZPort@@YGHQAXI@Z
?MP_FEC_SetPTZOutLineShowMode@@YGHQAXW4tagFECShowMode@@@Z
?MP_FEC_SetParam@@YGHQAXHPAUtagFECParam@@@Z
?MP_FEC_SetViewParam@@YGHQAXIW4tagPLAYM4HRViewParamType@@M@Z
?MP_FEC_SetWnd@@YGHQAXHPAX@Z
?MP_FrameBackward@@YGHQAX@Z
?MP_FrameForward@@YGHQAX@Z
?MP_GetAudioEngine@@YGHQAXPAW4_AUDIO_ENGINE_@@@Z
?MP_GetBufferValue@@YGHQAXW4_MP_BUFFER_@@PAIH@Z
?MP_GetCropPictureData@@YGHQAXW4_MP_PICTURE_@@HPAUMP_CROP_PIC_INFO@@@Z
?MP_GetCurrentFrameInfo@@YGHQAXPAU_MP_FRAME_INFO_@@H@Z
?MP_GetCurrentStatus@@YGHQAXPAI@Z
?MP_GetDecodeEngine@@YGHQAXPAI@Z
?MP_GetDecryptKey@@YGHQAXPAU_MP_DECRYPT_KEY_@@H@Z
?MP_GetDisplayType@@YGHQAXPAJ@Z
?MP_GetEagleStatus@@YGHQAXPAH@Z
?MP_GetFECCaptureData@@YGHQAXIIPADHH@Z
?MP_GetKeyFramePos@@YGHQAXW4_MP_POS_TYPE_@@IPAUMP_FRAME_POS@@H@Z
?MP_GetMediaInfo@@YGHQAXPAU_MP_MEDIA_INFO_@@@Z
?MP_GetNextKeyFramePos@@YGHQAXW4_MP_POS_TYPE_@@IPAUMP_FRAME_POS@@H@Z
?MP_GetPictureData@@YGHQAXW4_MP_PICTURE_@@HPBEPAIHH@Z
?MP_GetPictureFile@@YGHQAXW4_MP_PICTURE_@@HPBDHH@Z
?MP_GetPlayPosition@@YGHQAXW4_MP_POS_TYPE_@@PAT_MP_POS_INFO_@@@Z
?MP_GetPlaySpeed@@YGHQAXPAH@Z
?MP_GetPreBufSize@@YGHQAXPAI@Z
?MP_GetRefValue@@YGHQAXPAEPAI@Z
?MP_GetRefValueEx@@YGHQAXPAEPAI@Z
?MP_GetSdkVersion@@YGIXZ
?MP_GetStreamAdditionalInfo@@YGHQAXIPAEPAIH@Z
?MP_GetStreamMode@@YGHQAXPAU_MP_STREAM_PARA_@@@Z
?MP_GetSystemTime@@YGHQAXPAU_MP_SYSTEM_TIME_@@@Z
?MP_GetTimerType@@YGHQAXPAW4_MP_TIMER_@@@Z
?MP_GetVideoEffect@@YGHQAXW4_MP_VIDEO_EFFECT_@@PAHHH@Z
?MP_GetVideoEngine@@YGHQAXPAW4_VIDEO_ENGINE_@@@Z
?MP_GetVolume@@YGHQAXPAG@Z
?MP_InputData@@YGHQAXPBU_MP_STREAM_DATA_@@H@Z
?MP_MotionFlow@@YGHQAXI@Z
?MP_OpenFile@@YGHQAXPBD@Z
?MP_OpenStream@@YGHQAXPBU_MP_STREAM_DATA_@@@Z
?MP_OpenStreamAdvanced@@YGHQAXHPAU_PLAYM4_SESSION_INFO_@@@Z
?MP_OpenURL@@YGHQAXPBD@Z
?MP_Pause@@YGHQAXH@Z
?MP_Play@@YGHQAX@Z
?MP_RefreshPlay@@YGHQAXH@Z
?MP_RegisterAdditionDataCB@@YGHQAXIP6GX0PBUMP_ADDITION_DATA@@0H@Z0H@Z
?MP_RegisterDecodeCB@@YGHQAXP6GX0PBU_MP_FRAME_INFO_@@0H@Z0H@Z
?MP_RegisterDisplayCB@@YGHQAXP6GX0PBU_MP_FRAME_INFO_@@0HH@Z0HH@Z
?MP_RegisterDisplayInnerCB@@YGHQAXP6GX0PBU_MP_FRAME_INFO_@@PBEI0HH@Z0HH@Z
?MP_RegisterDrawCB@@YGHQAXP6GX0QAUHDC__@@0HH@Z0HH@Z
?MP_RegisterEncryptTypeCB@@YGHQAXIP6GX0PBU_MP_ENCRYPT_INFO_@@0H@Z0H@Z
?MP_RegisterFileIndexCB@@YGHQAXP6GX0H0@Z0@Z
?MP_RegisterIVSDrawFunCB@@YGHQAXP6GX0QAUHDC__@@PBU_MP_FRAME_INFO_@@0HH@Z0HH@Z
?MP_RegisterPlayEndCB@@YGHQAXP6GX00H@Z0@Z
?MP_RegisterPreRecordCB@@YGHQAXP6GX0PBUMP_RECORD_DATA_INFO@@0H@Z0H@Z
?MP_RegisterRunTimeInfoCB@@YGHQAXP6GX0PBUMP_RUNTIME_INFO@@0H@Z0H@Z
?MP_RegisterRunTimeInfoCBEx@@YGHQAXHP6GX0PBUMP_RUNTIME_INFO@@0H@Z0H@Z
?MP_RegisterSourceBufCB@@YGHQAXHP6GX0K0@Z0HH@Z
?MP_RegisterVideoDimensionCB@@YGHQAXP6GX00IIH@Z0H@Z
?MP_RegisterWatermarkCB@@YGHQAXP6GX0PBU_MP_FRAME_INFO_@@0H@Z0H@Z
?MP_RenderPrivateData@@YGHQAXHH@Z
?MP_RenderPrivateDataEx@@YGHQAXHHH@Z
?MP_ResetBuffer@@YGHQAXW4_MP_BUFFER_@@H@Z
?MP_ResetSourceBufFlag@@YGHQAXH@Z
?MP_SR_Capture@@YGHQAXIPAD@Z
?MP_SR_Rotate@@YGHQAXPAUtagPLAYM4SRTransformParam@@@Z
?MP_SR_SetConfig@@YGHQAXHPAX@Z
?MP_SetAudioEngine@@YGHQAXW4_AUDIO_ENGINE_@@@Z
?MP_SetBufferValue@@YGHQAXW4_MP_BUFFER_@@IH@Z
?MP_SetDecodeERC@@YGHQAXI@Z
?MP_SetDecodeEngine@@YGHQAXI@Z
?MP_SetDecodeThreadNum@@YGHQAXI@Z
?MP_SetDecodeType@@YGHQAXW4_MP_DECODE_TYPE_@@H@Z
?MP_SetDecryptKey@@YGHQAXPBU_MP_DECRYPT_KEY_@@H@Z
?MP_SetDisplayMode@@YGHQAXH@Z
?MP_SetDisplayType@@YGHQAXJ@Z
?MP_SetOpenFileType@@YGHQAXI@Z
?MP_SetOverlayPriInfoFlag@@YGHQAXHH@Z
?MP_SetPlayPosition@@YGHQAXW4_MP_POS_TYPE_@@T_MP_POS_INFO_@@@Z
?MP_SetPlaySpeed@@YGHQAXH@Z
?MP_SetPreRecordFlag@@YGHQAXH@Z
?MP_SetRefValue@@YGHQAXPAEH@Z
?MP_SetRegionOnWnd@@YGHQAXPBU_MP_RECT_@@H@Z
?MP_SetRotateAngle@@YGHQAXII@Z
?MP_SetSkipType@@YGHQAXW4_MP_SKIP_TYPE_@@H@Z
?MP_SetSkipTypeEx@@YGHQAXW4_MP_SKIP_TYPE_@@H@Z
?MP_SetStreamMode@@YGHQAXPBU_MP_STREAM_PARA_@@@Z
?MP_SetSyncGroup@@YGHQAXI@Z
?MP_SetSyncStartTime@@YGHQAXPAU_MP_SYSTEM_TIME_@@@Z
?MP_SetTimerType@@YGHQAXW4_MP_TIMER_@@@Z
?MP_SetVideoDisplayRegion@@YGHQAXPBU_MP_RECT_@@HH@Z
?MP_SetVideoDisplayRegionOnWnd@@YGHQAXPBU_MP_RECT_@@HH@Z
?MP_SetVideoEffect@@YGHQAXW4_MP_VIDEO_EFFECT_@@HHH@Z
?MP_SetVideoEngine@@YGHQAXW4_VIDEO_ENGINE_@@@Z
?MP_SetVideoWindow@@YGHQAXQAUHWND__@@HH@Z
?MP_SetVolume@@YGHQAXG@Z
?MP_Stop@@YGHQAX@Z
?MP_SyncToAudio@@YGHQAXH@Z
?MP_VIE_GetModuConfig@@YGHQAXPAH@Z
?MP_VIE_GetParaConfig@@YGHQAXPAU_PLAYM4_VIE_DYNPARAM_@@@Z
?MP_VIE_SetModuConfig@@YGHQAXHH@Z
?MP_VIE_SetParaConfig@@YGHQAXPAU_PLAYM4_VIE_DYNPARAM_@@@Z
?MP_VIE_SetRegion@@YGHQAXHPAU_MP_RECT_@@@Z
PLayM4_ConvertToBmpFile
PlayM4_AdjustWaveAudio
PlayM4_CheckDiscontinuousFrameNum
PlayM4_CloseFile
PlayM4_CloseStream
PlayM4_CloseStreamEx
PlayM4_ConvertToBmp
PlayM4_ConvertToBmpFile
PlayM4_ConvertToJpeg
PlayM4_ConvertToJpegFile
PlayM4_DisplayLostFrames
PlayM4_EnableIVS
PlayM4_FEC_Capture
PlayM4_FEC_DelPort
PlayM4_FEC_Disable
PlayM4_FEC_Enable
PlayM4_FEC_GetCurrentPTZPort
PlayM4_FEC_GetParam
PlayM4_FEC_GetPort
PlayM4_FEC_GetViewParam
PlayM4_FEC_PTZ2Window
PlayM4_FEC_PTZ2WindowEx
PlayM4_FEC_Rotate
PlayM4_FEC_Scan
PlayM4_FEC_SetCallBack
PlayM4_FEC_SetConfig
PlayM4_FEC_SetCurrentPTZPort
PlayM4_FEC_SetPTZOutLineShowMode
PlayM4_FEC_SetParam
PlayM4_FEC_SetViewParam
PlayM4_FEC_SetWnd
PlayM4_Fast
PlayM4_FreePort
PlayM4_GetAbsFrameNum
PlayM4_GetAbsFrameTime
PlayM4_GetBMP
PlayM4_GetBufferValue
PlayM4_GetCaps
PlayM4_GetCapsEx
PlayM4_GetColor
PlayM4_GetColorKey
PlayM4_GetCropBMP
PlayM4_GetCropJPEG
PlayM4_GetCurrentFrameNum
PlayM4_GetCurrentFrameRate
PlayM4_GetCurrentFrameRateEx
PlayM4_GetDDrawDeviceInfo
PlayM4_GetDDrawDeviceTotalNums
PlayM4_GetDecodeEngine
PlayM4_GetDisplayBuf
PlayM4_GetDisplayType
PlayM4_GetFileHeadLength
PlayM4_GetFileSpecialAttr
PlayM4_GetFileTime
PlayM4_GetFileTimeEx
PlayM4_GetFileTotalFrames
PlayM4_GetJPEG
PlayM4_GetKeyFramePos
PlayM4_GetLastError
PlayM4_GetLastKeyDataSize
PlayM4_GetNextKeyFramePos
PlayM4_GetOriginalFrameCallBack
PlayM4_GetOverlayMode
PlayM4_GetPictureQuality
PlayM4_GetPictureSize
PlayM4_GetPlayPos
PlayM4_GetPlayedFrames
PlayM4_GetPlayedTime
PlayM4_GetPlayedTimeEx
PlayM4_GetPort
PlayM4_GetRefValue
PlayM4_GetRefValueEx
PlayM4_GetSdkVersion
PlayM4_GetSourceBufferRemain
PlayM4_GetSparePortNum
PlayM4_GetSpecialData
PlayM4_GetSpecialDataEx
PlayM4_GetStreamAdditionalInfo
PlayM4_GetStreamOpenMode
PlayM4_GetSystemTime
PlayM4_GetThrowBFrameCallBack
PlayM4_GetTimerType
PlayM4_GetVolume
PlayM4_InitDDraw
PlayM4_InitDDrawDevice
PlayM4_InitLastKeyBuf
PlayM4_InputAudioData
PlayM4_InputData
PlayM4_InputFileHead
PlayM4_InputVideoData
PlayM4_LockLastKeyBuf
PlayM4_MotionFlow
PlayM4_OneByOne
PlayM4_OneByOneBack
PlayM4_OpenFile
PlayM4_OpenStream
PlayM4_OpenStreamAdvanced
PlayM4_OpenStreamEx
PlayM4_Pause
PlayM4_PauseDecoder
PlayM4_Play
PlayM4_PlaySound
PlayM4_PlaySoundEx
PlayM4_PlaySoundShare
PlayM4_RealeseDDraw
PlayM4_RefreshPlay
PlayM4_RefreshPlayEx
PlayM4_RegisterDecCallBack
PlayM4_RegisterDrawFun
PlayM4_RegisterDrawFunEx
PlayM4_RegisterIVSDrawFunCB
PlayM4_ReleaseDDrawDevice
PlayM4_ReleaseLastKeyBuf
PlayM4_RenderPrivateData
PlayM4_RenderPrivateDataEx
PlayM4_ResetBuffer
PlayM4_ResetSourceBufFlag
PlayM4_ResetSourceBuffer
PlayM4_ReversePlay
PlayM4_RigisterDrawFun
PlayM4_SR_Capture
PlayM4_SR_Rotate
PlayM4_SR_SetConfig
PlayM4_SetAdditionDataCallBack
PlayM4_SetAudioCallBack
PlayM4_SetCheckWatermarkCallBack
PlayM4_SetColor
PlayM4_SetCurrentFrameNum
PlayM4_SetDDrawDevice
PlayM4_SetDDrawDeviceEx
PlayM4_SetDecCBStream
PlayM4_SetDecCallBack
PlayM4_SetDecCallBackEx
PlayM4_SetDecCallBackExMend
PlayM4_SetDecCallBackMend
PlayM4_SetDecodeERC
PlayM4_SetDecodeEngineEx
PlayM4_SetDecodeFrameType
PlayM4_SetDecodeThreadNum
PlayM4_SetDeflash
PlayM4_SetDisplayBuf
PlayM4_SetDisplayBufAddtionalLen
PlayM4_SetDisplayCallBack
PlayM4_SetDisplayCallBackEx
PlayM4_SetDisplayEngine
PlayM4_SetDisplayInnerCB
PlayM4_SetDisplayMode
PlayM4_SetDisplayRegion
PlayM4_SetDisplayRegionOnWnd
PlayM4_SetDisplayType
PlayM4_SetEncChangeMsg
PlayM4_SetEncTypeChangeCallBack
PlayM4_SetEncryptTypeCallBack
PlayM4_SetFileEndCallback
PlayM4_SetFileEndMsg
PlayM4_SetFileRefCallBack
PlayM4_SetGetUserDataCallBack
PlayM4_SetIFrameCallBack
PlayM4_SetIVSSyncBuf
PlayM4_SetImageSharpen
PlayM4_SetJpegQuality
PlayM4_SetOverlayFlipMode
PlayM4_SetOverlayMode
PlayM4_SetOverlayPriInfoFlag
PlayM4_SetPicQuality
PlayM4_SetPlayMode
PlayM4_SetPlayPos
PlayM4_SetPlayedTimeEx
PlayM4_SetPreRecordCallBack
PlayM4_SetPreRecordFlag
PlayM4_SetRefValue
PlayM4_SetRegionOnWnd
PlayM4_SetRotateAngle
PlayM4_SetRunTimeInfoCallBack
PlayM4_SetRunTimeInfoCallBackEx
PlayM4_SetSecretKey
PlayM4_SetSourceBufCallBack
PlayM4_SetStreamOpenMode
PlayM4_SetSycGroup
PlayM4_SetSycStartTime
PlayM4_SetTimerType
PlayM4_SetVerifyCallBack
PlayM4_SetVideoSyncBuf
PlayM4_SetVideoWindow
PlayM4_SetVolume
PlayM4_SkipErrorData
PlayM4_Slow
PlayM4_SpeedNormal
PlayM4_Stop
PlayM4_StopSound
PlayM4_StopSoundEx
PlayM4_StopSoundShare
PlayM4_SyncToAudio
PlayM4_ThrowBFrameNum
PlayM4_UnlockLastKeyBuf
PlayM4_VIE_GetModuConfig
PlayM4_VIE_GetParaConfig
PlayM4_VIE_SetModuConfig
PlayM4_VIE_SetParaConfig
PlayM4_VIE_SetRegion
_PlayM4_SetDecodeEngine@8
_PlayM4_SetOpenFileType@8
Sections
.text Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rodata Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 633KB - Virtual size: 632KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_RDATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ