Touhou 6 - The Embodiment of Scarlet Devil[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

Touhou 6 - The Embodiment of Scarlet Devil.zip
Size

340.4MB
MD5

482f7c2d0c59c4b4e562f010688b7509
SHA1

d910173865c9f413cf38d152d23609893793ec51
SHA256

de49a97133ce4075cdbf0a468d4392d6f3164e439440b40bf3a7b7be56b54d26
SHA512

57fd5ade64c7388c108796e6d7d9e6c480dcdf79feb52ad2698bb59a020fc44046b7aa9b02381476da64db44e863a9983dfdbe8ba47c7c64f481be1a7daf29d3
SSDEEP

6291456:8tJm2QmdpQnAdj4wb6dV1p9ADCjFgGXOKKYsL0TUHeFeQ+De0S6atlX:8tJgmvGAdHU1pYCaGdbj4+FEDe0SrlX

Score

3^/10

Malware Config

Signatures

Unsigned PE 10 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Touhou 6 - The Embodiment of Scarlet Devil/Touhou06-Config.exe
unpack001/Touhou 6 - The Embodiment of Scarlet Devil/Touhou06.exe
unpack001/Touhou 6 - The Embodiment of Scarlet Devil/custom.exe
unpack001/Touhou 6 - The Embodiment of Scarlet Devil/d3d8.dll
unpack001/Touhou 6 - The Embodiment of Scarlet Devil/thcrap/bin/jansson.dll
unpack001/Touhou 6 - The Embodiment of Scarlet Devil/thcrap/bin/libpng16.dll
unpack001/Touhou 6 - The Embodiment of Scarlet Devil/thcrap/bin/zlib-ng.dll
unpack001/Touhou 6 - The Embodiment of Scarlet Devil/vpatch.exe
unpack001/Touhou 6 - The Embodiment of Scarlet Devil/vpatch_th06_unicode.dll
unpack001/Touhou 6 - The Embodiment of Scarlet Devil/東方紅魔郷.exe

Files

Touhou 6 - The Embodiment of Scarlet Devil.zip
.zip
Touhou 6 - The Embodiment of Scarlet Devil/Instructions.txt
Touhou 6 - The Embodiment of Scarlet Devil/Touhou06-Config.exe
.exe windows:4 windows x86 arch:x86

23539a463cb3d9402ca01bb02af56c7f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateProcessW
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery

msvcrt

__dllonexit
__getmainargs
__initenv
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_fmode
_initterm
_iob
_lock
_onexit
_unlock
calloc
exit
fprintf
free
fwrite
malloc
memcpy
signal
strlen
strncmp
abort
vfprintf

user32

MessageBoxW

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Touhou 6 - The Embodiment of Scarlet Devil/Touhou06.exe
.exe windows:4 windows x86 arch:x86

23539a463cb3d9402ca01bb02af56c7f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateProcessW
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery

msvcrt

__dllonexit
__getmainargs
__initenv
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_fmode
_initterm
_iob
_lock
_onexit
_unlock
calloc
exit
fprintf
free
fwrite
malloc
memcpy
signal
strlen
strncmp
abort
vfprintf

user32

MessageBoxW

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 764B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Touhou 6 - The Embodiment of Scarlet Devil/bgm/th06_01.wav
Touhou 6 - The Embodiment of Scarlet Devil/bgm/th06_02.wav
Touhou 6 - The Embodiment of Scarlet Devil/bgm/th06_03.wav
Touhou 6 - The Embodiment of Scarlet Devil/bgm/th06_04.wav
Touhou 6 - The Embodiment of Scarlet Devil/bgm/th06_05.wav
Touhou 6 - The Embodiment of Scarlet Devil/bgm/th06_06.wav
Touhou 6 - The Embodiment of Scarlet Devil/bgm/th06_07.wav
Touhou 6 - The Embodiment of Scarlet Devil/bgm/th06_08.wav
Touhou 6 - The Embodiment of Scarlet Devil/bgm/th06_09.wav
Touhou 6 - The Embodiment of Scarlet Devil/bgm/th06_10.wav
Touhou 6 - The Embodiment of Scarlet Devil/bgm/th06_11.wav
Touhou 6 - The Embodiment of Scarlet Devil/bgm/th06_12.wav
Touhou 6 - The Embodiment of Scarlet Devil/bgm/th06_13.wav
Touhou 6 - The Embodiment of Scarlet Devil/bgm/th06_14.wav
Touhou 6 - The Embodiment of Scarlet Devil/bgm/th06_15.wav
Touhou 6 - The Embodiment of Scarlet Devil/bgm/th06_16.wav
Touhou 6 - The Embodiment of Scarlet Devil/bgm/th06_17.wav
Touhou 6 - The Embodiment of Scarlet Devil/custom.exe
.exe windows:4 windows x86 arch:x86

ccd8729ea71c40b47caaefa20872fae8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\cygwin\home\zun\prog\th_custom\Release\th_custom.pdb

Imports

dinput8

DirectInput8Create

user32

DialogBoxParamA
GetDlgItemTextA
KillTimer
EndDialog
IsDlgButtonChecked
MessageBoxA
SetTimer
GetDlgItem
SendMessageA
SetDlgItemTextA
GetWindowLongA

kernel32

LCMapStringW
LCMapStringA
VirtualQuery
GetSystemInfo
VirtualProtect
GetLocaleInfoA
SetEndOfFile
HeapSize
RtlUnwind
GetCPInfo
GetOEMCP
GetACP
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetLastError
ReadFile
GetProcAddress
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
HeapFree
CloseHandle
WriteFile
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
LoadLibraryA
HeapAlloc
SetStdHandle
FlushFileBuffers
VirtualAlloc
HeapReAlloc
CreateFileA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Touhou 6 - The Embodiment of Scarlet Devil/d3d8.dll
.dll windows:4 windows x86 arch:x86

a2a4a1290c0eb5ce6f6a653539baeaa1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

d3dx9_43

D3DXLoadSurfaceFromSurface
D3DXDisassembleShader
D3DXAssembleShaderFromFileA
D3DXAssembleShader

kernel32

GetSystemDirectoryA
SetEndOfFile
LCMapStringW
FreeLibrary
LoadLibraryA
GetProcAddress
DisableThreadLibraryCalls
ExitProcess
GetCurrentDirectoryA
CreateFileA
CloseHandle
HeapReAlloc
HeapFree
HeapAlloc
RtlUnwind
GetCurrentThreadId
GetCommandLineA
GetVersionExA
TlsAlloc
SetLastError
GetLastError
TlsFree
TlsSetValue
TlsGetValue
GetModuleHandleA
EnterCriticalSection
LeaveCriticalSection
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
VirtualAlloc
IsBadWritePtr
TerminateProcess
GetCurrentProcess
HeapSize
ReadFile
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetFilePointer
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
UnhandledExceptionFilter
WriteFile
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
GetCPInfo
GetLocaleInfoA
GetACP
GetOEMCP
SetStdHandle
FlushFileBuffers
InterlockedExchange
VirtualQuery
InitializeCriticalSection
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
VirtualProtect
GetSystemInfo
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA

user32

MessageBoxA

Exports

Exports

Direct3DCreate8

Sections

.text
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 333KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Touhou 6 - The Embodiment of Scarlet Devil/enbconvertor.ini
Touhou 6 - The Embodiment of Scarlet Devil/log.txt
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/bin/act_nut_lib.dll
.dll windows:5 windows x86 arch:x86

39848020da6837bde45a16c24f1257a4

Code Sign

17:9e:ac:0a:35:7d:c7:a0:41:b7:8a:a5:20:e9:1e:3f
Certificate

Issuer

CN=Bruno Liron,1.2.840.113549.1.9.1=#0c1262726c69726f6e40686f746d61696c2e6672

Not Before

23/10/2015, 14:17

Not After

31/12/2039, 23:59

Subject

CN=Bruno Liron,1.2.840.113549.1.9.1=#0c1262726c69726f6e40686f746d61696c2e6672

Extended Key Usages

ExtKeyUsageCodeSigning

dd:b6:88:b1:9b:1b:0c:fe:64:29:1b:55:8d:5f:2b:78:ae:5d:47:d6
Signer

Actual PE Digest

dd:b6:88:b1:9b:1b:0c:fe:64:29:1b:55:8d:5f:2b:78:ae:5d:47:d6

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

act_nut_lib.pdb

Imports

msvcp140

??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?_Xout_of_range@std@@YAXPBD@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@U_Mbstatet@@@2@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?always_noconv@codecvt_base@std@@QBE_NXZ
??Bid@locale@std@@QAEIXZ
?_Xinvalid_argument@std@@YAXPBD@Z
?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Xlength_error@std@@YAXPBD@Z
?uncaught_exception@std@@YA_NXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ

vcruntime140

memset
memmove
memcpy
memchr
_except_handler4_common
__std_type_info_destroy_list
__RTDynamicCast
strchr
__CxxFrameHandler3
__std_exception_destroy
__std_exception_copy
_purecall
__std_terminate
_CxxThrowException

api-ms-win-crt-heap-l1-1-0

malloc
free
_callnewh

api-ms-win-crt-convert-l1-1-0

strtod
strtol

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_initterm
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_configure_narrow_argv
_seh_filter_dll
_errno
_initialize_narrow_environment
_invalid_parameter_noinfo_noreturn

api-ms-win-crt-stdio-l1-1-0

fputc
fflush
_get_stream_buffer_pointers
_fseeki64
fread
fsetpos
ungetc
setvbuf
fgetpos
fwrite
fgetc
fclose

api-ms-win-crt-filesystem-l1-1-0

_unlock_file
_lock_file

api-ms-win-crt-string-l1-1-0

_strdup

kernel32

UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
SetUnhandledExceptionFilter

api-ms-win-crt-math-l1-1-0

_except1

Exports

Exports

delete_buffer
delete_object
new_MemoryBuffer
read_act_from_bytes
read_nut_from_bytes
setErrorCallback
setErrorMode

Sections

.text
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/bin/bmpfont_create_gdi.dll
.dll windows:5 windows x86 arch:x86

1366d2009078bb5e7231f3dcf61eae87

Code Sign

17:9e:ac:0a:35:7d:c7:a0:41:b7:8a:a5:20:e9:1e:3f
Certificate

Issuer

CN=Bruno Liron,1.2.840.113549.1.9.1=#0c1262726c69726f6e40686f746d61696c2e6672

Not Before

23/10/2015, 14:17

Not After

31/12/2039, 23:59

Subject

CN=Bruno Liron,1.2.840.113549.1.9.1=#0c1262726c69726f6e40686f746d61696c2e6672

Extended Key Usages

ExtKeyUsageCodeSigning

8a:43:b6:26:f4:e7:be:c0:04:d6:fd:cf:fe:0a:04:6b:23:87:64:4f
Signer

Actual PE Digest

8a:43:b6:26:f4:e7:be:c0:04:d6:fd:cf:fe:0a:04:6b:23:87:64:4f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

bmpfont_create_gdi.pdb

Imports

kernel32

TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
MultiByteToWideChar
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
UnhandledExceptionFilter

user32

ReleaseDC
DrawTextW
GetDC

gdi32

AddFontMemResourceEx
CreateCompatibleBitmap
AddFontResourceExW
SelectObject
CreateCompatibleDC
StretchBlt
RemoveFontResourceExW
RemoveFontMemResourceEx
DeleteObject
SetBkColor
SetTextColor
DeleteDC
GetDIBits
CreateFontW

vcruntime140

memcpy
memset
_except_handler4_common
__std_type_info_destroy_list

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf

api-ms-win-crt-heap-l1-1-0

realloc
malloc
free

api-ms-win-crt-convert-l1-1-0

atoi
strtol

api-ms-win-crt-runtime-l1-1-0

_cexit
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_execute_onexit_table

Exports

Exports

graphics_consume_option
graphics_consume_option_binary
graphics_free
graphics_init
graphics_put_char

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/bin/bmpfont_create_gdiplus.dll
.dll windows:5 windows x86 arch:x86

dbacfa8fe18a0cb3857fee402262cace

Code Sign

17:9e:ac:0a:35:7d:c7:a0:41:b7:8a:a5:20:e9:1e:3f
Certificate

Issuer

CN=Bruno Liron,1.2.840.113549.1.9.1=#0c1262726c69726f6e40686f746d61696c2e6672

Not Before

23/10/2015, 14:17

Not After

31/12/2039, 23:59

Subject

CN=Bruno Liron,1.2.840.113549.1.9.1=#0c1262726c69726f6e40686f746d61696c2e6672

Extended Key Usages

ExtKeyUsageCodeSigning

70:12:6d:9c:ac:20:53:b7:d3:09:d3:26:8c:14:33:25:6b:fc:21:ad
Signer

Actual PE Digest

70:12:6d:9c:ac:20:53:b7:d3:09:d3:26:8c:14:33:25:6b:fc:21:ad

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

bmpfont_create_gdiplus.pdb

Imports

gdiplus

GdipCreatePath
GdipSetSmoothingMode
GdipPrivateAddMemoryFont
GdipDeletePath
GdipCreateSolidFill
GdipDeleteBrush
GdipCreateFontFamilyFromName
GdipDeleteFontFamily
GdipCreateStringFormat
GdiplusShutdown
GdipSetInterpolationMode
GdiplusStartup
GdipFillPath
GdipAlloc
GdipGraphicsClear
GdipAddPathStringI
GdipFree
GdipDrawPath
GdipSetPenLineJoin
GdipCreateFromHDC
GdipDeleteGraphics
GdipDeleteStringFormat
GdipGetPathWorldBoundsI
GdipDeletePen
GdipCreatePen1
GdipNewPrivateFontCollection
GdipDeletePrivateFontCollection
GdipPrivateAddFontFile

kernel32

GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
DisableThreadLibraryCalls
IsDebuggerPresent
InitializeSListHead
MultiByteToWideChar

user32

GetDC
ReleaseDC

gdi32

GetDIBits
DeleteObject
CreateCompatibleDC
SelectObject
CreateCompatibleBitmap
DeleteDC

msvcp140

?_Xlength_error@std@@YAXPBD@Z

vcruntime140

memmove
_CxxThrowException
memset
_except_handler4_common
__std_exception_destroy
__CxxFrameHandler3
memcpy
__std_type_info_destroy_list
__std_exception_copy

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf

api-ms-win-crt-convert-l1-1-0

strtol
atoi

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
_seh_filter_dll
_execute_onexit_table
_initterm_e
_initterm
_cexit
_configure_narrow_argv
_invalid_parameter_noinfo_noreturn
_initialize_narrow_environment

api-ms-win-crt-heap-l1-1-0

malloc
free
_callnewh

Exports

Exports

graphics_consume_option
graphics_consume_option_binary
graphics_free
graphics_init
graphics_put_char

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 724B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/bin/jansson.dll
.dll windows:5 windows x86 arch:x86

27ab53e4ac0448610aaaf72a463cb835

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

jansson.pdb

Imports

kernel32

SwitchToThread
GetProcAddress
GetCurrentProcessId
GetModuleHandleW
InterlockedIncrement
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
IsDebuggerPresent
InitializeSListHead

vcruntime140

memcpy
__std_type_info_destroy_list
memmove
strchr
_except_handler4_common
memchr
memset

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
fopen
__stdio_common_vsprintf
fgetc
fwrite
fclose

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-string-l1-1-0

strncpy

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-convert-l1-1-0

strtoll
strtod

api-ms-win-crt-runtime-l1-1-0

_cexit
_errno
strerror
_initterm
_initterm_e
_execute_onexit_table
_seh_filter_dll
_initialize_onexit_table
_configure_narrow_argv
_initialize_narrow_environment

api-ms-win-crt-heap-l1-1-0

malloc
free

api-ms-win-crt-locale-l1-1-0

localeconv

api-ms-win-crt-math-l1-1-0

_except1
_dclass

Exports

Exports

json_array
json_array_append_new
json_array_clear
json_array_extend
json_array_get
json_array_insert_new
json_array_remove
json_array_set_new
json_array_size
json_copy
json_deep_copy
json_delete
json_dump_callback
json_dump_file
json_dumpb
json_dumpf
json_dumpfd
json_dumps
json_equal
json_false
json_get_alloc_funcs
json_integer
json_integer_set
json_integer_value
json_load_callback
json_load_file
json_loadb
json_loadf
json_loadfd
json_loads
json_null
json_number_value
json_object
json_object_clear
json_object_del
json_object_get
json_object_iter
json_object_iter_at
json_object_iter_key
json_object_iter_next
json_object_iter_set_new
json_object_iter_value
json_object_key_to_iter
json_object_seed
json_object_set_new
json_object_set_new_nocheck
json_object_size
json_object_update
json_object_update_existing
json_object_update_missing
json_pack
json_pack_ex
json_real
json_real_set
json_real_value
json_set_alloc_funcs
json_sprintf
json_string
json_string_length
json_string_nocheck
json_string_set
json_string_set_nocheck
json_string_setn
json_string_setn_nocheck
json_string_value
json_stringn
json_stringn_nocheck
json_true
json_unpack
json_unpack_ex
json_vpack_ex
json_vsprintf
json_vunpack_ex

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/bin/libpng16.dll
.dll windows:5 windows x86 arch:x86

e9a83b5436dfba6c675ee90121108d0e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

libpng16.pdb

Imports

zlib-ng

deflateReset
inflateReset
deflateEnd
inflate
inflateValidate
deflateInit2_
deflate
inflateInit2_
inflateReset2
inflateEnd
crc32
adler32

kernel32

TerminateProcess
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
ExitProcess
GetCurrentThreadId

vcruntime140

__std_type_info_destroy_list
memcpy
memset
_except_handler4_common
_setjmp3
longjmp

api-ms-win-crt-math-l1-1-0

_libm_sse2_pow_precise
floor
_except1
frexp
modf

api-ms-win-crt-stdio-l1-1-0

fflush
fread
fopen
__acrt_iob_func
__stdio_common_vfprintf
fwrite
ferror
fclose

api-ms-win-crt-heap-l1-1-0

malloc
free

api-ms-win-crt-runtime-l1-1-0

_cexit
_initialize_onexit_table
_initialize_narrow_environment
abort
_execute_onexit_table
_configure_narrow_argv
strerror
_errno
_seh_filter_dll
_initterm_e
_initterm

api-ms-win-crt-convert-l1-1-0

atof

api-ms-win-crt-time-l1-1-0

_gmtime64

api-ms-win-crt-filesystem-l1-1-0

remove

Exports

Exports

png_access_version_number
png_benign_error
png_build_grayscale_palette
png_calloc
png_chunk_benign_error
png_chunk_error
png_chunk_warning
png_convert_from_struct_tm
png_convert_from_time_t
png_convert_to_rfc1123
png_convert_to_rfc1123_buffer
png_create_info_struct
png_create_read_struct
png_create_read_struct_2
png_create_write_struct
png_create_write_struct_2
png_data_freer
png_destroy_info_struct
png_destroy_read_struct
png_destroy_write_struct
png_error
png_free
png_free_data
png_free_default
png_get_IHDR
png_get_PLTE
png_get_bKGD
png_get_bit_depth
png_get_cHRM
png_get_cHRM_XYZ
png_get_cHRM_XYZ_fixed
png_get_cHRM_fixed
png_get_channels
png_get_chunk_cache_max
png_get_chunk_malloc_max
png_get_color_type
png_get_compression_buffer_size
png_get_compression_type
png_get_copyright
png_get_current_pass_number
png_get_current_row_number
png_get_eXIf
png_get_eXIf_1
png_get_error_ptr
png_get_filter_type
png_get_gAMA
png_get_gAMA_fixed
png_get_hIST
png_get_header_ver
png_get_header_version
png_get_iCCP
png_get_image_height
png_get_image_width
png_get_int_32
png_get_interlace_type
png_get_io_chunk_type
png_get_io_ptr
png_get_io_state
png_get_libpng_ver
png_get_mem_ptr
png_get_oFFs
png_get_pCAL
png_get_pHYs
png_get_pHYs_dpi
png_get_palette_max
png_get_pixel_aspect_ratio
png_get_pixel_aspect_ratio_fixed
png_get_pixels_per_inch
png_get_pixels_per_meter
png_get_progressive_ptr
png_get_rgb_to_gray_status
png_get_rowbytes
png_get_rows
png_get_sBIT
png_get_sCAL
png_get_sCAL_fixed
png_get_sCAL_s
png_get_sPLT
png_get_sRGB
png_get_signature
png_get_tIME
png_get_tRNS
png_get_text
png_get_uint_16
png_get_uint_31
png_get_uint_32
png_get_unknown_chunks
png_get_user_chunk_ptr
png_get_user_height_max
png_get_user_transform_ptr
png_get_user_width_max
png_get_valid
png_get_x_offset_inches
png_get_x_offset_inches_fixed
png_get_x_offset_microns
png_get_x_offset_pixels
png_get_x_pixels_per_inch
png_get_x_pixels_per_meter
png_get_y_offset_inches
png_get_y_offset_inches_fixed
png_get_y_offset_microns
png_get_y_offset_pixels
png_get_y_pixels_per_inch
png_get_y_pixels_per_meter
png_handle_as_unknown
png_image_begin_read_from_file
png_image_begin_read_from_memory
png_image_begin_read_from_stdio
png_image_finish_read
png_image_free
png_image_write_to_file
png_image_write_to_memory
png_image_write_to_stdio
png_info_init_3
png_init_io
png_longjmp
png_malloc
png_malloc_default
png_malloc_warn
png_permit_mng_features
png_process_data
png_process_data_pause
png_process_data_skip
png_progressive_combine_row
png_read_end
png_read_image
png_read_info
png_read_png
png_read_row
png_read_rows
png_read_update_info
png_reset_zstream
png_save_int_32
png_save_uint_16
png_save_uint_32
png_set_IHDR
png_set_PLTE
png_set_add_alpha
png_set_alpha_mode
png_set_alpha_mode_fixed
png_set_bKGD
png_set_background
png_set_background_fixed
png_set_benign_errors
png_set_bgr
png_set_cHRM
png_set_cHRM_XYZ
png_set_cHRM_XYZ_fixed
png_set_cHRM_fixed
png_set_check_for_invalid_index
png_set_chunk_cache_max
png_set_chunk_malloc_max
png_set_compression_buffer_size
png_set_compression_level
png_set_compression_mem_level
png_set_compression_method
png_set_compression_strategy
png_set_compression_window_bits
png_set_crc_action
png_set_eXIf
png_set_eXIf_1
png_set_error_fn
png_set_expand
png_set_expand_16
png_set_expand_gray_1_2_4_to_8
png_set_filler
png_set_filter
png_set_filter_heuristics
png_set_filter_heuristics_fixed
png_set_flush
png_set_gAMA
png_set_gAMA_fixed
png_set_gamma
png_set_gamma_fixed
png_set_gray_to_rgb
png_set_hIST
png_set_iCCP
png_set_interlace_handling
png_set_invalid
png_set_invert_alpha
png_set_invert_mono
png_set_keep_unknown_chunks
png_set_longjmp_fn
png_set_mem_fn
png_set_oFFs
png_set_option
png_set_pCAL
png_set_pHYs
png_set_packing
png_set_packswap
png_set_palette_to_rgb
png_set_progressive_read_fn
png_set_quantize
png_set_read_fn
png_set_read_status_fn
png_set_read_user_chunk_fn
png_set_read_user_transform_fn
png_set_rgb_to_gray
png_set_rgb_to_gray_fixed
png_set_rows
png_set_sBIT
png_set_sCAL
png_set_sCAL_fixed
png_set_sCAL_s
png_set_sPLT
png_set_sRGB
png_set_sRGB_gAMA_and_cHRM
png_set_scale_16
png_set_shift
png_set_sig_bytes
png_set_strip_16
png_set_strip_alpha
png_set_swap
png_set_swap_alpha
png_set_tIME
png_set_tRNS
png_set_tRNS_to_alpha
png_set_text
png_set_text_compression_level
png_set_text_compression_mem_level
png_set_text_compression_method
png_set_text_compression_strategy
png_set_text_compression_window_bits
png_set_unknown_chunk_location
png_set_unknown_chunks
png_set_user_limits
png_set_user_transform_info
png_set_write_fn
png_set_write_status_fn
png_set_write_user_transform_fn
png_sig_cmp
png_start_read_image
png_warning
png_write_chunk
png_write_chunk_data
png_write_chunk_end
png_write_chunk_start
png_write_end
png_write_flush
png_write_image
png_write_info
png_write_info_before_PLTE
png_write_png
png_write_row
png_write_rows
png_write_sig

Sections

.text
Size: 115KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/bin/scripts/release_build.sh
.sh linux
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/bin/scripts/release_sign.py
.py .sh linux
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/bin/scripts/repo_update.py
.py .sh linux
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/bin/scripts/utils.py
.py .sh linux
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/bin/steam_api.dll
.dll windows:5 windows x86 arch:x86

505799f8a745662a7ae4877b9db0f7be

Code Sign

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2031, 00:00

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

08:4c:af:4d:f4:99:14:1d:40:4b:71:99:aa:2c:21:31
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

25/09/2015, 00:00

Not After

03/10/2018, 12:00

Subject

CN=Valve,O=Valve,L=Bellevue,ST=WA,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

64:36:f0:82:9e:a4:ab:c0:3b:d6:22:07:3a:5e:19:f5:f3:83:86:d2
Signer

Actual PE Digest

64:36:f0:82:9e:a4:ab:c0:3b:d6:22:07:3a:5e:19:f5:f3:83:86:d2

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\buildslave\steam_rel_client_win32\build\src\steam_api\Release\steam_api.pdb

Imports

kernel32

CloseHandle
LoadLibraryExA
LoadLibraryExW
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetExitCodeProcess
GetEnvironmentVariableA
SetEnvironmentVariableA
OutputDebugStringA
GetFileAttributesW
MultiByteToWideChar
WideCharToMultiByte
OpenProcess
FreeLibrary
GetCommandLineW
GetProcAddress
CreateFileW
WriteConsoleW
GetLastError
HeapFree
HeapAlloc
RaiseException
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
GetCurrentThreadId
IsProcessorFeaturePresent
ExitProcess
AreFileApisANSI
HeapSize
GetProcessHeap
GetStdHandle
WriteFile
SetLastError
IsDebuggerPresent
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
DeleteCriticalSection
GetFileType
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
LCMapStringW
HeapReAlloc
OutputDebugStringW
GetStringTypeW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
ReadFile
ReadConsoleW
SetFilePointerEx
SetEndOfFile

advapi32

RegOpenKeyExW
RegCloseKey
RegQueryValueExW

shell32

ShellExecuteW

Exports

Exports

CAddAppDependencyResult_t_RemoveCallResult
CAddAppDependencyResult_t_SetCallResult
CAddUGCDependencyResult_t_RemoveCallResult
CAddUGCDependencyResult_t_SetCallResult
CAssociateWithClanResult_t_RemoveCallResult
CAssociateWithClanResult_t_SetCallResult
CCheckFileSignature_t_RemoveCallResult
CCheckFileSignature_t_SetCallResult
CClanOfficerListResponse_t_RemoveCallResult
CClanOfficerListResponse_t_SetCallResult
CComputeNewPlayerCompatibilityResult_t_RemoveCallResult
CComputeNewPlayerCompatibilityResult_t_SetCallResult
CCreateItemResult_t_RemoveCallResult
CCreateItemResult_t_SetCallResult
CDeleteItemResult_t_RemoveCallResult
CDeleteItemResult_t_SetCallResult
CEncryptedAppTicketResponse_t_RemoveCallResult
CEncryptedAppTicketResponse_t_SetCallResult
CFileDetailsResult_t_RemoveCallResult
CFileDetailsResult_t_SetCallResult
CFriendsEnumerateFollowingList_t_RemoveCallResult
CFriendsEnumerateFollowingList_t_SetCallResult
CFriendsGetFollowerCount_t_RemoveCallResult
CFriendsGetFollowerCount_t_SetCallResult
CFriendsIsFollowing_t_RemoveCallResult
CFriendsIsFollowing_t_SetCallResult
CGSReputation_t_RemoveCallResult
CGSReputation_t_SetCallResult
CGSStatsReceived_t_RemoveCallResult
CGSStatsReceived_t_SetCallResult
CGSStatsStored_t_RemoveCallResult
CGSStatsStored_t_SetCallResult
CGetAppDependenciesResult_t_RemoveCallResult
CGetAppDependenciesResult_t_SetCallResult
CGetOPFSettingsResult_t_RemoveCallback
CGetOPFSettingsResult_t_SetCallback
CGetUserItemVoteResult_t_RemoveCallResult
CGetUserItemVoteResult_t_SetCallResult
CGlobalAchievementPercentagesReady_t_RemoveCallResult
CGlobalAchievementPercentagesReady_t_SetCallResult
CGlobalStatsReceived_t_RemoveCallResult
CGlobalStatsReceived_t_SetCallResult
CHTML_BrowserReady_t_RemoveCallResult
CHTML_BrowserReady_t_SetCallResult
CJoinClanChatRoomCompletionResult_t_RemoveCallResult
CJoinClanChatRoomCompletionResult_t_SetCallResult
CLeaderboardFindResult_t_RemoveCallResult
CLeaderboardFindResult_t_SetCallResult
CLeaderboardScoreUploaded_t_RemoveCallResult
CLeaderboardScoreUploaded_t_SetCallResult
CLeaderboardScoresDownloaded_t_RemoveCallResult
CLeaderboardScoresDownloaded_t_SetCallResult
CLeaderboardUGCSet_t_RemoveCallResult
CLeaderboardUGCSet_t_SetCallResult
CLobbyCreated_t_RemoveCallResult
CLobbyCreated_t_SetCallResult
CLobbyEnter_t_RemoveCallResult
CLobbyEnter_t_SetCallResult
CLobbyMatchList_t_RemoveCallResult
CLobbyMatchList_t_SetCallResult
CNumberOfCurrentPlayers_t_RemoveCallResult
CNumberOfCurrentPlayers_t_SetCallResult
CRemoteStorageDeletePublishedFileResult_t_RemoveCallResult
CRemoteStorageDeletePublishedFileResult_t_SetCallResult
CRemoteStorageDownloadUGCResult_t_RemoveCallResult
CRemoteStorageDownloadUGCResult_t_SetCallResult
CRemoteStorageEnumeratePublishedFilesByUserActionResult_t_RemoveCallResult
CRemoteStorageEnumeratePublishedFilesByUserActionResult_t_SetCallResult
CRemoteStorageEnumerateUserPublishedFilesResult_t_RemoveCallResult
CRemoteStorageEnumerateUserPublishedFilesResult_t_SetCallResult
CRemoteStorageEnumerateUserSubscribedFilesResult_t_RemoveCallResult
CRemoteStorageEnumerateUserSubscribedFilesResult_t_SetCallResult
CRemoteStorageEnumerateWorkshopFilesResult_t_RemoveCallResult
CRemoteStorageEnumerateWorkshopFilesResult_t_SetCallResult
CRemoteStorageFileReadAsyncComplete_t_RemoveCallResult
CRemoteStorageFileReadAsyncComplete_t_SetCallResult
CRemoteStorageFileShareResult_t_RemoveCallResult
CRemoteStorageFileShareResult_t_SetCallResult
CRemoteStorageFileWriteAsyncComplete_t_RemoveCallResult
CRemoteStorageFileWriteAsyncComplete_t_SetCallResult
CRemoteStorageGetPublishedFileDetailsResult_t_RemoveCallResult
CRemoteStorageGetPublishedFileDetailsResult_t_SetCallResult
CRemoteStorageGetPublishedItemVoteDetailsResult_t_RemoveCallResult
CRemoteStorageGetPublishedItemVoteDetailsResult_t_SetCallResult
CRemoteStoragePublishFileProgress_t_RemoveCallResult
CRemoteStoragePublishFileProgress_t_SetCallResult
CRemoteStorageSetUserPublishedFileActionResult_t_RemoveCallResult
CRemoteStorageSetUserPublishedFileActionResult_t_SetCallResult
CRemoteStorageSubscribePublishedFileResult_t_RemoveCallResult
CRemoteStorageSubscribePublishedFileResult_t_SetCallResult
CRemoteStorageUnsubscribePublishedFileResult_t_RemoveCallResult
CRemoteStorageUnsubscribePublishedFileResult_t_SetCallResult
CRemoteStorageUpdatePublishedFileResult_t_RemoveCallResult
CRemoteStorageUpdatePublishedFileResult_t_SetCallResult
CRemoteStorageUpdateUserPublishedItemVoteResult_t_RemoveCallResult
CRemoteStorageUpdateUserPublishedItemVoteResult_t_SetCallResult
CRemoveAppDependencyResult_t_RemoveCallResult
CRemoveAppDependencyResult_t_SetCallResult
CRemoveUGCDependencyResult_t_RemoveCallResult
CRemoveUGCDependencyResult_t_SetCallResult
CSetPersonaNameResponse_t_RemoveCallResult
CSetPersonaNameResponse_t_SetCallResult
CSetUserItemVoteResult_t_RemoveCallResult
CSetUserItemVoteResult_t_SetCallResult
CStartPlaytimeTrackingResult_t_RemoveCallResult
CStartPlaytimeTrackingResult_t_SetCallResult
CSteamInventoryEligiblePromoItemDefIDs_t_RemoveCallResult
CSteamInventoryEligiblePromoItemDefIDs_t_SetCallResult
CSteamUGCQueryCompleted_t_RemoveCallResult
CSteamUGCQueryCompleted_t_SetCallResult
CStopPlaytimeTrackingResult_t_RemoveCallResult
CStopPlaytimeTrackingResult_t_SetCallResult
CStoreAuthURLResponse_t_RemoveCallResult
CStoreAuthURLResponse_t_SetCallResult
CSubmitItemUpdateResult_t_RemoveCallResult
CSubmitItemUpdateResult_t_SetCallResult
CUserFavoriteItemsListChanged_t_RemoveCallResult
CUserFavoriteItemsListChanged_t_SetCallResult
CUserStatsReceived_t_RemoveCallResult
CUserStatsReceived_t_RemoveCallback
CUserStatsReceived_t_SetCallResult
CUserStatsReceived_t_SetCallback
GetHSteamPipe
GetHSteamUser
SteamAPI_GetHSteamPipe
SteamAPI_GetHSteamUser
SteamAPI_GetSteamInstallPath
SteamAPI_ISteamAppList_GetAppBuildId
SteamAPI_ISteamAppList_GetAppInstallDir
SteamAPI_ISteamAppList_GetAppName
SteamAPI_ISteamAppList_GetInstalledApps
SteamAPI_ISteamAppList_GetNumInstalledApps
SteamAPI_ISteamApps_BGetDLCDataByIndex
SteamAPI_ISteamApps_BIsAppInstalled
SteamAPI_ISteamApps_BIsCybercafe
SteamAPI_ISteamApps_BIsDlcInstalled
SteamAPI_ISteamApps_BIsLowViolence
SteamAPI_ISteamApps_BIsSubscribed
SteamAPI_ISteamApps_BIsSubscribedApp
SteamAPI_ISteamApps_BIsSubscribedFromFreeWeekend
SteamAPI_ISteamApps_BIsVACBanned
SteamAPI_ISteamApps_GetAppBuildId
SteamAPI_ISteamApps_GetAppInstallDir
SteamAPI_ISteamApps_GetAppOwner
SteamAPI_ISteamApps_GetAvailableGameLanguages
SteamAPI_ISteamApps_GetCurrentBetaName
SteamAPI_ISteamApps_GetCurrentGameLanguage
SteamAPI_ISteamApps_GetDLCCount
SteamAPI_ISteamApps_GetDlcDownloadProgress
SteamAPI_ISteamApps_GetEarliestPurchaseUnixTime
SteamAPI_ISteamApps_GetFileDetails
SteamAPI_ISteamApps_GetInstalledDepots
SteamAPI_ISteamApps_GetLaunchQueryParam
SteamAPI_ISteamApps_InstallDLC
SteamAPI_ISteamApps_MarkContentCorrupt
SteamAPI_ISteamApps_RequestAllProofOfPurchaseKeys
SteamAPI_ISteamApps_RequestAppProofOfPurchaseKey
SteamAPI_ISteamApps_UninstallDLC
SteamAPI_ISteamClient_BReleaseSteamPipe
SteamAPI_ISteamClient_BShutdownIfAllPipesClosed
SteamAPI_ISteamClient_ConnectToGlobalUser
SteamAPI_ISteamClient_CreateLocalUser
SteamAPI_ISteamClient_CreateSteamPipe
SteamAPI_ISteamClient_GetIPCCallCount
SteamAPI_ISteamClient_GetISteamAppList
SteamAPI_ISteamClient_GetISteamApps
SteamAPI_ISteamClient_GetISteamController
SteamAPI_ISteamClient_GetISteamFriends
SteamAPI_ISteamClient_GetISteamGameServer
SteamAPI_ISteamClient_GetISteamGameServerStats
SteamAPI_ISteamClient_GetISteamGenericInterface
SteamAPI_ISteamClient_GetISteamHTMLSurface
SteamAPI_ISteamClient_GetISteamHTTP
SteamAPI_ISteamClient_GetISteamInventory
SteamAPI_ISteamClient_GetISteamMatchmaking
SteamAPI_ISteamClient_GetISteamMatchmakingServers
SteamAPI_ISteamClient_GetISteamMusic
SteamAPI_ISteamClient_GetISteamMusicRemote
SteamAPI_ISteamClient_GetISteamNetworking
SteamAPI_ISteamClient_GetISteamParentalSettings
SteamAPI_ISteamClient_GetISteamRemoteStorage
SteamAPI_ISteamClient_GetISteamScreenshots
SteamAPI_ISteamClient_GetISteamUGC
SteamAPI_ISteamClient_GetISteamUnifiedMessages
SteamAPI_ISteamClient_GetISteamUser
SteamAPI_ISteamClient_GetISteamUserStats
SteamAPI_ISteamClient_GetISteamUtils
SteamAPI_ISteamClient_GetISteamVideo
SteamAPI_ISteamClient_ReleaseUser
SteamAPI_ISteamClient_SetLocalIPBinding
SteamAPI_ISteamClient_SetWarningMessageHook
SteamAPI_ISteamController_ActivateActionSet
SteamAPI_ISteamController_GetActionSetHandle
SteamAPI_ISteamController_GetAnalogActionData
SteamAPI_ISteamController_GetAnalogActionHandle
SteamAPI_ISteamController_GetAnalogActionOrigins
SteamAPI_ISteamController_GetConnectedControllers
SteamAPI_ISteamController_GetControllerForGamepadIndex
SteamAPI_ISteamController_GetCurrentActionSet
SteamAPI_ISteamController_GetDigitalActionData
SteamAPI_ISteamController_GetDigitalActionHandle
SteamAPI_ISteamController_GetDigitalActionOrigins
SteamAPI_ISteamController_GetGamepadIndexForController
SteamAPI_ISteamController_GetGlyphForActionOrigin
SteamAPI_ISteamController_GetMotionData
SteamAPI_ISteamController_GetStringForActionOrigin
SteamAPI_ISteamController_Init
SteamAPI_ISteamController_RunFrame
SteamAPI_ISteamController_SetLEDColor
SteamAPI_ISteamController_ShowAnalogActionOrigins
SteamAPI_ISteamController_ShowBindingPanel
SteamAPI_ISteamController_ShowDigitalActionOrigins
SteamAPI_ISteamController_Shutdown
SteamAPI_ISteamController_StopAnalogActionMomentum
SteamAPI_ISteamController_TriggerHapticPulse
SteamAPI_ISteamController_TriggerRepeatedHapticPulse
SteamAPI_ISteamController_TriggerVibration
SteamAPI_ISteamFriends_ActivateGameOverlay
SteamAPI_ISteamFriends_ActivateGameOverlayInviteDialog
SteamAPI_ISteamFriends_ActivateGameOverlayToStore
SteamAPI_ISteamFriends_ActivateGameOverlayToUser
SteamAPI_ISteamFriends_ActivateGameOverlayToWebPage
SteamAPI_ISteamFriends_ClearRichPresence
SteamAPI_ISteamFriends_CloseClanChatWindowInSteam
SteamAPI_ISteamFriends_DownloadClanActivityCounts
SteamAPI_ISteamFriends_EnumerateFollowingList
SteamAPI_ISteamFriends_GetChatMemberByIndex
SteamAPI_ISteamFriends_GetClanActivityCounts
SteamAPI_ISteamFriends_GetClanByIndex
SteamAPI_ISteamFriends_GetClanChatMemberCount
SteamAPI_ISteamFriends_GetClanChatMessage
SteamAPI_ISteamFriends_GetClanCount
SteamAPI_ISteamFriends_GetClanName
SteamAPI_ISteamFriends_GetClanOfficerByIndex
SteamAPI_ISteamFriends_GetClanOfficerCount
SteamAPI_ISteamFriends_GetClanOwner
SteamAPI_ISteamFriends_GetClanTag
SteamAPI_ISteamFriends_GetCoplayFriend
SteamAPI_ISteamFriends_GetCoplayFriendCount
SteamAPI_ISteamFriends_GetFollowerCount
SteamAPI_ISteamFriends_GetFriendByIndex
SteamAPI_ISteamFriends_GetFriendCoplayGame
SteamAPI_ISteamFriends_GetFriendCoplayTime
SteamAPI_ISteamFriends_GetFriendCount
SteamAPI_ISteamFriends_GetFriendCountFromSource
SteamAPI_ISteamFriends_GetFriendFromSourceByIndex
SteamAPI_ISteamFriends_GetFriendGamePlayed
SteamAPI_ISteamFriends_GetFriendMessage
SteamAPI_ISteamFriends_GetFriendPersonaName
SteamAPI_ISteamFriends_GetFriendPersonaNameHistory
SteamAPI_ISteamFriends_GetFriendPersonaState
SteamAPI_ISteamFriends_GetFriendRelationship
SteamAPI_ISteamFriends_GetFriendRichPresence
SteamAPI_ISteamFriends_GetFriendRichPresenceKeyByIndex
SteamAPI_ISteamFriends_GetFriendRichPresenceKeyCount
SteamAPI_ISteamFriends_GetFriendSteamLevel
SteamAPI_ISteamFriends_GetFriendsGroupCount
SteamAPI_ISteamFriends_GetFriendsGroupIDByIndex
SteamAPI_ISteamFriends_GetFriendsGroupMembersCount
SteamAPI_ISteamFriends_GetFriendsGroupMembersList
SteamAPI_ISteamFriends_GetFriendsGroupName
SteamAPI_ISteamFriends_GetLargeFriendAvatar
SteamAPI_ISteamFriends_GetMediumFriendAvatar
SteamAPI_ISteamFriends_GetPersonaName
SteamAPI_ISteamFriends_GetPersonaState
SteamAPI_ISteamFriends_GetPlayerNickname
SteamAPI_ISteamFriends_GetSmallFriendAvatar
SteamAPI_ISteamFriends_GetUserRestrictions
SteamAPI_ISteamFriends_HasFriend
SteamAPI_ISteamFriends_InviteUserToGame
SteamAPI_ISteamFriends_IsClanChatAdmin
SteamAPI_ISteamFriends_IsClanChatWindowOpenInSteam
SteamAPI_ISteamFriends_IsFollowing
SteamAPI_ISteamFriends_IsUserInSource
SteamAPI_ISteamFriends_JoinClanChatRoom
SteamAPI_ISteamFriends_LeaveClanChatRoom
SteamAPI_ISteamFriends_OpenClanChatWindowInSteam
SteamAPI_ISteamFriends_ReplyToFriendMessage
SteamAPI_ISteamFriends_RequestClanOfficerList
SteamAPI_ISteamFriends_RequestFriendRichPresence
SteamAPI_ISteamFriends_RequestUserInformation
SteamAPI_ISteamFriends_SendClanChatMessage
SteamAPI_ISteamFriends_SetInGameVoiceSpeaking
SteamAPI_ISteamFriends_SetListenForFriendsMessages
SteamAPI_ISteamFriends_SetPersonaName
SteamAPI_ISteamFriends_SetPlayedWith
SteamAPI_ISteamFriends_SetRichPresence
SteamAPI_ISteamGameServerStats_ClearUserAchievement
SteamAPI_ISteamGameServerStats_GetUserAchievement
SteamAPI_ISteamGameServerStats_GetUserStat
SteamAPI_ISteamGameServerStats_GetUserStat0
SteamAPI_ISteamGameServerStats_RequestUserStats
SteamAPI_ISteamGameServerStats_SetUserAchievement
SteamAPI_ISteamGameServerStats_SetUserStat
SteamAPI_ISteamGameServerStats_SetUserStat0
SteamAPI_ISteamGameServerStats_StoreUserStats
SteamAPI_ISteamGameServerStats_UpdateUserAvgRateStat
SteamAPI_ISteamGameServer_AssociateWithClan
SteamAPI_ISteamGameServer_BLoggedOn
SteamAPI_ISteamGameServer_BSecure
SteamAPI_ISteamGameServer_BUpdateUserData
SteamAPI_ISteamGameServer_BeginAuthSession
SteamAPI_ISteamGameServer_CancelAuthTicket
SteamAPI_ISteamGameServer_ClearAllKeyValues
SteamAPI_ISteamGameServer_ComputeNewPlayerCompatibility
SteamAPI_ISteamGameServer_CreateUnauthenticatedUserConnection
SteamAPI_ISteamGameServer_EnableHeartbeats
SteamAPI_ISteamGameServer_EndAuthSession
SteamAPI_ISteamGameServer_ForceHeartbeat
SteamAPI_ISteamGameServer_GetAuthSessionTicket
SteamAPI_ISteamGameServer_GetGameplayStats
SteamAPI_ISteamGameServer_GetNextOutgoingPacket
SteamAPI_ISteamGameServer_GetPublicIP
SteamAPI_ISteamGameServer_GetServerReputation
SteamAPI_ISteamGameServer_GetSteamID
SteamAPI_ISteamGameServer_HandleIncomingPacket
SteamAPI_ISteamGameServer_InitGameServer
SteamAPI_ISteamGameServer_LogOff
SteamAPI_ISteamGameServer_LogOn
SteamAPI_ISteamGameServer_LogOnAnonymous
SteamAPI_ISteamGameServer_RequestUserGroupStatus
SteamAPI_ISteamGameServer_SendUserConnectAndAuthenticate
SteamAPI_ISteamGameServer_SendUserDisconnect
SteamAPI_ISteamGameServer_SetBotPlayerCount
SteamAPI_ISteamGameServer_SetDedicatedServer
SteamAPI_ISteamGameServer_SetGameData
SteamAPI_ISteamGameServer_SetGameDescription
SteamAPI_ISteamGameServer_SetGameTags
SteamAPI_ISteamGameServer_SetHeartbeatInterval
SteamAPI_ISteamGameServer_SetKeyValue
SteamAPI_ISteamGameServer_SetMapName
SteamAPI_ISteamGameServer_SetMaxPlayerCount
SteamAPI_ISteamGameServer_SetModDir
SteamAPI_ISteamGameServer_SetPasswordProtected
SteamAPI_ISteamGameServer_SetProduct
SteamAPI_ISteamGameServer_SetRegion
SteamAPI_ISteamGameServer_SetServerName
SteamAPI_ISteamGameServer_SetSpectatorPort
SteamAPI_ISteamGameServer_SetSpectatorServerName
SteamAPI_ISteamGameServer_UserHasLicenseForApp
SteamAPI_ISteamGameServer_WasRestartRequested
SteamAPI_ISteamHTMLSurface_AddHeader
SteamAPI_ISteamHTMLSurface_AllowStartRequest
SteamAPI_ISteamHTMLSurface_CopyToClipboard
SteamAPI_ISteamHTMLSurface_CreateBrowser
SteamAPI_ISteamHTMLSurface_DestructISteamHTMLSurface
SteamAPI_ISteamHTMLSurface_ExecuteJavascript
SteamAPI_ISteamHTMLSurface_Find
SteamAPI_ISteamHTMLSurface_GetLinkAtPosition
SteamAPI_ISteamHTMLSurface_GoBack
SteamAPI_ISteamHTMLSurface_GoForward
SteamAPI_ISteamHTMLSurface_Init
SteamAPI_ISteamHTMLSurface_JSDialogResponse
SteamAPI_ISteamHTMLSurface_KeyChar
SteamAPI_ISteamHTMLSurface_KeyDown
SteamAPI_ISteamHTMLSurface_KeyUp
SteamAPI_ISteamHTMLSurface_LoadURL
SteamAPI_ISteamHTMLSurface_MouseDoubleClick
SteamAPI_ISteamHTMLSurface_MouseDown
SteamAPI_ISteamHTMLSurface_MouseMove
SteamAPI_ISteamHTMLSurface_MouseUp
SteamAPI_ISteamHTMLSurface_MouseWheel
SteamAPI_ISteamHTMLSurface_PasteFromClipboard
SteamAPI_ISteamHTMLSurface_Reload
SteamAPI_ISteamHTMLSurface_RemoveBrowser
SteamAPI_ISteamHTMLSurface_SetBackgroundMode
SteamAPI_ISteamHTMLSurface_SetCookie
SteamAPI_ISteamHTMLSurface_SetDPIScalingFactor
SteamAPI_ISteamHTMLSurface_SetHorizontalScroll
SteamAPI_ISteamHTMLSurface_SetKeyFocus
SteamAPI_ISteamHTMLSurface_SetPageScaleFactor
SteamAPI_ISteamHTMLSurface_SetSize
SteamAPI_ISteamHTMLSurface_SetVerticalScroll
SteamAPI_ISteamHTMLSurface_Shutdown
SteamAPI_ISteamHTMLSurface_StopFind
SteamAPI_ISteamHTMLSurface_StopLoad
SteamAPI_ISteamHTMLSurface_ViewSource
SteamAPI_ISteamHTTP_CreateCookieContainer
SteamAPI_ISteamHTTP_CreateHTTPRequest
SteamAPI_ISteamHTTP_DeferHTTPRequest
SteamAPI_ISteamHTTP_GetHTTPDownloadProgressPct
SteamAPI_ISteamHTTP_GetHTTPRequestWasTimedOut
SteamAPI_ISteamHTTP_GetHTTPResponseBodyData
SteamAPI_ISteamHTTP_GetHTTPResponseBodySize
SteamAPI_ISteamHTTP_GetHTTPResponseHeaderSize
SteamAPI_ISteamHTTP_GetHTTPResponseHeaderValue
SteamAPI_ISteamHTTP_GetHTTPStreamingResponseBodyData
SteamAPI_ISteamHTTP_PrioritizeHTTPRequest
SteamAPI_ISteamHTTP_ReleaseCookieContainer
SteamAPI_ISteamHTTP_ReleaseHTTPRequest
SteamAPI_ISteamHTTP_SendHTTPRequest
SteamAPI_ISteamHTTP_SendHTTPRequestAndStreamResponse
SteamAPI_ISteamHTTP_SetCookie
SteamAPI_ISteamHTTP_SetHTTPRequestAbsoluteTimeoutMS
SteamAPI_ISteamHTTP_SetHTTPRequestContextValue
SteamAPI_ISteamHTTP_SetHTTPRequestCookieContainer
SteamAPI_ISteamHTTP_SetHTTPRequestGetOrPostParameter
SteamAPI_ISteamHTTP_SetHTTPRequestHeaderValue
SteamAPI_ISteamHTTP_SetHTTPRequestNetworkActivityTimeout
SteamAPI_ISteamHTTP_SetHTTPRequestRawPostBody
SteamAPI_ISteamHTTP_SetHTTPRequestRequiresVerifiedCertificate
SteamAPI_ISteamHTTP_SetHTTPRequestUserAgentInfo
SteamAPI_ISteamInventory_AddPromoItem
SteamAPI_ISteamInventory_AddPromoItems
SteamAPI_ISteamInventory_CheckResultSteamID
SteamAPI_ISteamInventory_ConsumeItem
SteamAPI_ISteamInventory_DeserializeResult
SteamAPI_ISteamInventory_DestroyResult
SteamAPI_ISteamInventory_ExchangeItems
SteamAPI_ISteamInventory_GenerateItems
SteamAPI_ISteamInventory_GetAllItems
SteamAPI_ISteamInventory_GetEligiblePromoItemDefinitionIDs
SteamAPI_ISteamInventory_GetItemDefinitionIDs
SteamAPI_ISteamInventory_GetItemDefinitionProperty
SteamAPI_ISteamInventory_GetItemsByID
SteamAPI_ISteamInventory_GetResultItemProperty
SteamAPI_ISteamInventory_GetResultItems
SteamAPI_ISteamInventory_GetResultStatus
SteamAPI_ISteamInventory_GetResultTimestamp
SteamAPI_ISteamInventory_GrantPromoItems
SteamAPI_ISteamInventory_LoadItemDefinitions
SteamAPI_ISteamInventory_RequestEligiblePromoItemDefinitionsIDs
SteamAPI_ISteamInventory_SendItemDropHeartbeat
SteamAPI_ISteamInventory_SerializeResult
SteamAPI_ISteamInventory_TradeItems
SteamAPI_ISteamInventory_TransferItemQuantity
SteamAPI_ISteamInventory_TriggerItemDrop
SteamAPI_ISteamMatchmakingPingResponse_ServerFailedToRespond
SteamAPI_ISteamMatchmakingPingResponse_ServerResponded
SteamAPI_ISteamMatchmakingPlayersResponse_AddPlayerToList
SteamAPI_ISteamMatchmakingPlayersResponse_PlayersFailedToRespond
SteamAPI_ISteamMatchmakingPlayersResponse_PlayersRefreshComplete
SteamAPI_ISteamMatchmakingRulesResponse_RulesFailedToRespond
SteamAPI_ISteamMatchmakingRulesResponse_RulesRefreshComplete
SteamAPI_ISteamMatchmakingRulesResponse_RulesResponded
SteamAPI_ISteamMatchmakingServerListResponse_RefreshComplete
SteamAPI_ISteamMatchmakingServerListResponse_ServerFailedToRespond
SteamAPI_ISteamMatchmakingServerListResponse_ServerResponded
SteamAPI_ISteamMatchmakingServers_CancelQuery
SteamAPI_ISteamMatchmakingServers_CancelServerQuery
SteamAPI_ISteamMatchmakingServers_GetServerCount
SteamAPI_ISteamMatchmakingServers_GetServerDetails
SteamAPI_ISteamMatchmakingServers_IsRefreshing
SteamAPI_ISteamMatchmakingServers_PingServer
SteamAPI_ISteamMatchmakingServers_PlayerDetails
SteamAPI_ISteamMatchmakingServers_RefreshQuery
SteamAPI_ISteamMatchmakingServers_RefreshServer
SteamAPI_ISteamMatchmakingServers_ReleaseRequest
SteamAPI_ISteamMatchmakingServers_RequestFavoritesServerList
SteamAPI_ISteamMatchmakingServers_RequestFriendsServerList
SteamAPI_ISteamMatchmakingServers_RequestHistoryServerList
SteamAPI_ISteamMatchmakingServers_RequestInternetServerList
SteamAPI_ISteamMatchmakingServers_RequestLANServerList
SteamAPI_ISteamMatchmakingServers_RequestSpectatorServerList
SteamAPI_ISteamMatchmakingServers_ServerRules
SteamAPI_ISteamMatchmaking_AddFavoriteGame
SteamAPI_ISteamMatchmaking_AddRequestLobbyListCompatibleMembersFilter
SteamAPI_ISteamMatchmaking_AddRequestLobbyListDistanceFilter
SteamAPI_ISteamMatchmaking_AddRequestLobbyListFilterSlotsAvailable
SteamAPI_ISteamMatchmaking_AddRequestLobbyListNearValueFilter
SteamAPI_ISteamMatchmaking_AddRequestLobbyListNumericalFilter
SteamAPI_ISteamMatchmaking_AddRequestLobbyListResultCountFilter
SteamAPI_ISteamMatchmaking_AddRequestLobbyListStringFilter
SteamAPI_ISteamMatchmaking_CreateLobby
SteamAPI_ISteamMatchmaking_DeleteLobbyData
SteamAPI_ISteamMatchmaking_GetFavoriteGame
SteamAPI_ISteamMatchmaking_GetFavoriteGameCount
SteamAPI_ISteamMatchmaking_GetLobbyByIndex
SteamAPI_ISteamMatchmaking_GetLobbyChatEntry
SteamAPI_ISteamMatchmaking_GetLobbyData
SteamAPI_ISteamMatchmaking_GetLobbyDataByIndex
SteamAPI_ISteamMatchmaking_GetLobbyDataCount
SteamAPI_ISteamMatchmaking_GetLobbyGameServer
SteamAPI_ISteamMatchmaking_GetLobbyMemberByIndex
SteamAPI_ISteamMatchmaking_GetLobbyMemberData
SteamAPI_ISteamMatchmaking_GetLobbyMemberLimit
SteamAPI_ISteamMatchmaking_GetLobbyOwner
SteamAPI_ISteamMatchmaking_GetNumLobbyMembers
SteamAPI_ISteamMatchmaking_InviteUserToLobby
SteamAPI_ISteamMatchmaking_JoinLobby
SteamAPI_ISteamMatchmaking_LeaveLobby
SteamAPI_ISteamMatchmaking_RemoveFavoriteGame
SteamAPI_ISteamMatchmaking_RequestLobbyData
SteamAPI_ISteamMatchmaking_RequestLobbyList
SteamAPI_ISteamMatchmaking_SendLobbyChatMsg
SteamAPI_ISteamMatchmaking_SetLinkedLobby
SteamAPI_ISteamMatchmaking_SetLobbyData
SteamAPI_ISteamMatchmaking_SetLobbyGameServer
SteamAPI_ISteamMatchmaking_SetLobbyJoinable
SteamAPI_ISteamMatchmaking_SetLobbyMemberData
SteamAPI_ISteamMatchmaking_SetLobbyMemberLimit
SteamAPI_ISteamMatchmaking_SetLobbyOwner
SteamAPI_ISteamMatchmaking_SetLobbyType
SteamAPI_ISteamMusicRemote_BActivationSuccess
SteamAPI_ISteamMusicRemote_BIsCurrentMusicRemote
SteamAPI_ISteamMusicRemote_CurrentEntryDidChange
SteamAPI_ISteamMusicRemote_CurrentEntryIsAvailable
SteamAPI_ISteamMusicRemote_CurrentEntryWillChange
SteamAPI_ISteamMusicRemote_DeregisterSteamMusicRemote
SteamAPI_ISteamMusicRemote_EnableLooped

Sections

.text
Size: 111KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/bin/thcrap.dll
.dll windows:5 windows x86 arch:x86

0c75591cf4118850c8ce84cca618dda7

Code Sign

17:9e:ac:0a:35:7d:c7:a0:41:b7:8a:a5:20:e9:1e:3f
Certificate

Issuer

CN=Bruno Liron,1.2.840.113549.1.9.1=#0c1262726c69726f6e40686f746d61696c2e6672

Not Before

23/10/2015, 14:17

Not After

31/12/2039, 23:59

Subject

CN=Bruno Liron,1.2.840.113549.1.9.1=#0c1262726c69726f6e40686f746d61696c2e6672

Extended Key Usages

ExtKeyUsageCodeSigning

0a:a4:32:70:c8:33:67:27:1f:7c:c5:34:5f:36:d5:f2:31:cb:99:4a
Signer

Actual PE Digest

0a:a4:32:70:c8:33:67:27:1f:7c:c5:34:5f:36:d5:f2:31:cb:99:4a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

thcrap.pdb

Imports

shlwapi

PathIsDirectoryA
PathAddBackslashA
PathAddBackslashW
PathMatchSpecW
PathRenameExtensionA
PathAppendA
PathIsRelativeA
PathCombineA
PathFindExtensionA

psapi

EnumProcessModules

win32_utf8

GetCommandLineU
SetEnvironmentVariableU
printf_format_parse
CreateFontU
w32u8_get_wrapped_functions
LoadLibraryU
CreateProcessU
GetFileAttributesU
lower_CreateFontIndirectA
CreateFontIndirectExU
lower_CreateFontA
CreateFontIndirectU
FindNextFileU
FindFirstFileU
LoadLibraryExU
GetModuleFileNameExU
PathRemoveFileSpecU
PathIsRelativeU
DeleteFileU
PathMatchSpecU
PathAddBackslashU
CreateFileMappingU
FormatMessageU
StringToUTF8
CreateFileU
CreateDirectoryU
MessageBoxU
MoveFileExU
SetCurrentDirectoryU
PathAppendU
GetCurrentDirectoryU
ord1
PathFileExistsU
EnsureUTF8
PathFindFileNameU
GetModuleFileNameU
StringToUTF16
DrawTextU
DialogBoxParamU
CreateDialogParamU

jansson

json_number_value
json_copy
json_pack
json_string_length
json_string_value
json_object_get
json_array_get
json_delete
json_object
json_array_insert_new
json_object_iter_key
json_object_iter
json_object_iter_next
json_object_key_to_iter
json_object_iter_value
json_object_set_new
json_integer_value
json_integer
json_object_size
json_object_clear
json_set_alloc_funcs
json_false
json_true
json_equal
json_dump_file
json_array_size
json_array_append_new
json_array_set_new
json_array
json_null
json_object_set_new_nocheck
json_string
json_loadb
json_dump_callback
json_dumps
json_deep_copy

zlib-ng

inflate
inflateInit2_
inflateEnd

kernel32

IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
MultiByteToWideChar
ResetEvent
SetLastError
AreFileApisANSI
GetFileInformationByHandle
GetFileAttributesExW
FindFirstFileExW
CreateFileW
CreateDirectoryW
WaitForSingleObjectEx
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
InitializeCriticalSectionAndSpinCount
SetFileTime
DosDateTimeToFileTime
TlsSetValue
TlsGetValue
SuspendThread
ResumeThread
GetThreadContext
LocalFree
VirtualFreeEx
GetExitCodeThread
HeapFree
FlushInstructionCache
VirtualAllocEx
GetProcessHeap
HeapAlloc
LoadLibraryW
CreateRemoteThread
CreateProcessW
Sleep
GetDriveTypeA
GetLogicalDriveStringsA
InterlockedDecrement
InterlockedCompareExchange
FindNextFileW
FindFirstFileW
SetEvent
CreateThread
CreateEventW
ReadDirectoryChangesW
GetQueuedCompletionStatus
CreateIoCompletionPort
WaitForSingleObject
InterlockedIncrement
FindClose
FreeLibrary
GetModuleHandleExW
WriteFile
GetFileSize
MulDiv
FindResourceA
LoadResource
SizeofResource
RtlCaptureStackBackTrace
AddVectoredExceptionHandler
WideCharToMultiByte
VirtualQuery
VirtualProtect
VirtualQueryEx
VirtualProtectEx
ReadProcessMemory
WriteProcessMemory
GetModuleHandleA
GetProcAddress
VirtualAlloc
InitializeCriticalSection
DeleteCriticalSection
TlsFree
TlsAlloc
ReadFile
SetFilePointer
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleW
HeapSetInformation
ExitProcess
GetLastError
GetCurrentProcessId
AllocConsole
FreeConsole
CloseHandle

user32

GetDC
CreateDialogIndirectParamW
DialogBoxIndirectParamW
IsWindowVisible
EnumWindows
GetActiveWindow
GetWindowRect
GetWindowThreadProcessId

gdi32

AddFontMemResourceEx
GetTextExtentPointW
DeleteDC
GetObjectW
SetBkMode
SetBkColor
GetDeviceCaps
SetTextColor
CreateDIBSection
CreateFontW
SelectObject
DeleteObject
GetFontUnicodeRanges
CreateFontIndirectW
CreateCompatibleDC

advapi32

RegCloseKey
RegOpenKeyExA

ole32

CoInitializeEx
CoUninitialize
CoCreateInstance

msvcp140

?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?unget@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Syserror_map@std@@YAPBDH@Z
?_Execute_once@std@@YAHAAUonce_flag@1@P6GHPAX1PAPAX@Z1@Z
?_Winerror_map@std@@YAHH@Z
?_Winerror_message@std@@YAKKPADK@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?uncaught_exception@std@@YA_NXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?_Xbad_function_call@std@@YAXXZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ

winmm

timeGetTime

vcruntime140

memmove
__std_exception_destroy
_CxxThrowException
memchr
__std_exception_copy
strrchr
__std_terminate
strstr
strchr
memcpy
memset
__std_type_info_destroy_list
__CxxFrameHandler3
_except_handler4_common

api-ms-win-crt-string-l1-1-0

_stricmp
_wcsicmp
_strdup
_strnicmp
strncpy
strncmp
_strlwr
wcsncpy
strncat
tolower

api-ms-win-crt-heap-l1-1-0

_callnewh
realloc
malloc
free
calloc

api-ms-win-crt-stdio-l1-1-0

fclose
_open_osfhandle
__acrt_iob_func
fwrite
__stdio_common_vsprintf
__stdio_common_vfprintf
setvbuf
freopen
fflush

api-ms-win-crt-locale-l1-1-0

_free_locale
_create_locale
___lc_codepage_func

api-ms-win-crt-runtime-l1-1-0

_errno
_configure_narrow_argv
_initterm_e
_initterm
_cexit
_invalid_parameter_noinfo_noreturn
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
strerror
terminate
_seh_filter_dll

api-ms-win-crt-convert-l1-1-0

atof
atoi
strtol
_itoa
_strtod_l

api-ms-win-crt-math-l1-1-0

_libm_sse2_pow_precise
_dtest
_except1
_fdopen

api-ms-win-crt-utility-l1-1-0

qsort

Exports

Exports

?errorf@logger_t@@UBA$$TPBDZZ
?font_set@tlnote_env_render_t@@QAE_NABUtagLOGFONTA@@@Z
?json_xywh_value@@YA?AUjson_xywh_t@@PBUjson_t@@@Z
?reference_resolution_set@tlnote_env_render_t@@QAE_NABUvector2_t@@@Z
?region_size_set@tlnote_env_t@@QAE_NABUvector2_t@@@Z
?scale_to@tlnote_env_t@@QAE?AUxywh_t@@ABUvector2_t@@ABU2@@Z
?strings_get_fallback@@YA?AUstringref_t@@ABUstring_named_t@@@Z
?tlnote_env@@YAAAUtlnote_env_t@@XZ
?tlnote_find@@YA?AUtlnote_split_t@@Ustringref_t@@_N@Z
?tlnote_prerender@@YA?AUtlnote_encoded_index_t@@Utlnote_t@@@Z
?tlnote_removal_index@@YA?AUtlnote_encoded_index_t@@XZ
?tlnote_remove@@YAXXZ
?tlnote_show@@YAXUtlnote_t@@@Z
?tlnote_valign_value@@YA?AU?$Option@W4valign_t@@@@PBUjson_t@@@Z
?verrorf@logger_t@@UBE$$TPBDPAD@Z
BP_file_buffer
BP_file_header
BP_file_load
BP_file_loaded
BP_file_name
BP_file_size
BP_fragmented_close_file
BP_fragmented_open_file
BP_fragmented_read_file
BP_init_next_stage
CreateLink
CreateShortcuts
GetDllExportDesc
GetDllImportDesc
GetExportedFunctions
GetModuleContaining
GetNtHeader
GetRemoteModuleEntryPoint
GetRemoteModuleHandle
GetRemoteModuleNtHeader
GetRemoteProcAddress
GetSectionHeader
PROJECT_BRANCH
PROJECT_NAME
PROJECT_NAME_SHORT
PROJECT_URL
PROJECT_VERSION
PROJECT_VERSION_STRING
ReadProcessString
RepoDiscover_wrapper
RepoFree
RepoGetLocalFN
RepoLoad
RepoLoadJson
RepoLocalNext
RepoWrite
SearchForGames
ThreadWaitUntil
VirtualCheckCode
VirtualCheckRegion
WaitUntilEntryPoint
binhack_calc_size
binhack_from_json
binhack_mod_exit
binhack_render
binhacks_apply
breakpoint_cave_exec_flag
breakpoint_process
breakpoints_apply
chain_free
d3d8_device_detour
d3d9_device_detour
detour_chain
detour_chain_w32u8
detour_exit
detour_top
dialog_mod_detour
dir_create_for_fn
entry_from_context
file_mod_exit
file_mod_init
file_read
file_rep_clear
file_rep_get
file_rep_get_by_object
file_rep_init
file_rep_set_object
file_stream
file_stream_read
file_write
fn_for_build
fn_for_game
fn_for_patch
font_create_for_character
font_has_character
fontrule_parse
fr_ptr_tls_mod_thread_exit
fr_tls_get
fr_tls_mod_thread_exit
func_add
func_get
func_remove
globalconfig_get_boolean
globalconfig_get_integer
globalconfig_release
globalconfig_set_boolean
globalconfig_set_integer
iat_detour_apply
identify
identify_by_hash
identify_by_size
inject_CreateProcessU
inject_CreateProcessW
inject_LoadLibraryU
inject_LoadLibraryW
inject_mod_detour
is_valid_hex
json5_loadb
json_array_get_hex
json_array_get_string
json_array_get_string_safe
json_array_set_expand
json_array_set_new_expand
json_decref_safe
json_dump_log
json_flex_array_get
json_flex_array_get_string_safe
json_flex_array_size
json_hex_value
json_immediate_value
json_load_file_report
json_object_get_create
json_object_get_hex
json_object_get_immediate
json_object_get_keys_sorted
json_object_get_pointer
json_object_get_register
json_object_get_string
json_object_merge
json_object_numkey_get
json_pointer_value
json_register_pointer
jsondata_add
jsondata_game_add
jsondata_game_get
jsondata_get
jsondata_mod_exit
jsondata_mod_repatch
jsonvfs_add
jsonvfs_add_map
jsonvfs_game_add
jsonvfs_game_add_map
jsonvfs_get
lasterror_str
lasterror_str_for
lasterror_tls_mod_thread_exit
loader_update_with_UI_wrapper
log_exit
log_init
log_mbox
log_mbox_set_owner
log_mboxf
log_nprint
log_print
log_printf
log_set_hook
log_vmboxf
log_vprintf
mod_func_remove
motd_mod_post_init
patch_bootstrap_wrapper
patch_build
patch_dep_to_desc
patch_file_blacklisted
patch_file_delete
patch_file_exists
patch_file_load
patch_file_store
patch_file_stream
patch_free
patch_init
patch_json_load
patch_json_merge
patch_json_store
patch_print_fn
patch_rel_to_abs
patch_to_runconfig_json
patchhook_register
patchhooks_build
patchhooks_run
plugins_close
plugins_load
promote_mod_init
reg
repatch_mod_exit
repatch_mod_init
resolve_chain
resolve_chain_game
runconfig_build_get
runconfig_build_set
runconfig_console_get
runconfig_dat_dump_get
runconfig_free
runconfig_game_get
runconfig_json_get
runconfig_latest_check
runconfig_latest_get
runconfig_load
runconfig_load_from_file
runconfig_print
runconfig_runcfg_fn_get
runconfig_runcfg_fn_set
runconfig_stage_apply
runconfig_stage_count
runconfig_thcrap_dir_get
runconfig_thcrap_dir_set
runconfig_title_get
runconfig_update_url_get
set_resolve_chain
set_resolve_chain_game
srwlock_funcs
stack_add_patch
stack_add_patch_from_json
stack_chain_iterate
stack_file_resolve_chain
stack_fn_resolve_chain
stack_foreach
stack_foreach_cpp
stack_free
stack_game_file_resolve
stack_game_file_stream
stack_game_json_resolve
stack_get_size
stack_json_resolve
stack_json_resolve_chain
stack_remove_if_unneeded
stack_remove_patch
stack_show_missing
stack_update_wrapper
steam_mod_exit
steam_mod_post_init
str_address_value
str_ascii_replace
str_hexdate_format
str_num_base
str_num_digits
str_slash_normalize
str_slash_normalize_win
strings_array_add
strings_array_create
strings_array_create_and_fill
strings_array_free
strings_array_size
strings_get
strings_id
strings_lookup
strings_mod_detour
strings_mod_exit
strings_mod_init
strings_mod_repatch
strings_replace
strings_sprintf
strings_storage_get
strings_strcat
strings_strclr
strings_va_lookup
strings_vsprintf
strings_vsprintf_msvcrt14
textdisp_mod_detour
textdisp_mod_init
thcrap_alloc
thcrap_detour
thcrap_free
thcrap_init
thcrap_inject_into_new
thcrap_inject_into_running
thcrap_update_exit_wrapper
thcrap_update_module
tlnote_mod_detour
tlsstruct_free
tlsstruct_get
update_filter_games_wrapper
update_filter_global_wrapper
vtable_detour
win32_detour
zip_close
zip_comment
zip_file_load
zip_file_unzip
zip_list
zip_list_empty
zip_open

Sections

.text
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/bin/thcrap_configure.exe
.exe windows:5 windows x86 arch:x86

804a49cddf52e49eb7b392118e6d53e9

Code Sign

17:9e:ac:0a:35:7d:c7:a0:41:b7:8a:a5:20:e9:1e:3f
Certificate

Issuer

CN=Bruno Liron,1.2.840.113549.1.9.1=#0c1262726c69726f6e40686f746d61696c2e6672

Not Before

23/10/2015, 14:17

Not After

31/12/2039, 23:59

Subject

CN=Bruno Liron,1.2.840.113549.1.9.1=#0c1262726c69726f6e40686f746d61696c2e6672

Extended Key Usages

ExtKeyUsageCodeSigning

48:da:2d:fc:b4:2b:9e:85:bc:83:f9:fc:26:de:44:01:9d:00:64:fd
Signer

Actual PE Digest

48:da:2d:fc:b4:2b:9e:85:bc:83:f9:fc:26:de:44:01:9d:00:64:fd

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

thcrap_configure.pdb

Imports

thcrap_i18n

i18n_translate
i18n_lang_init

thcrap

SearchForGames
json_decref_safe
patch_bootstrap_wrapper
patch_init
json_dump_log
stack_foreach_cpp
stack_remove_patch
log_set_hook
thcrap_update_module
json_load_file_report
json_object_get_string
strings_array_add
stack_add_patch
runconfig_free
strings_mod_init
stack_free
globalconfig_release
update_filter_games_wrapper
patch_free
str_slash_normalize
log_print
strings_array_create
log_printf
patch_to_runconfig_json
strings_array_free
patch_build
stack_update_wrapper
RepoDiscover_wrapper
log_init
CreateShortcuts
thcrap_update_exit_wrapper
RepoFree
update_filter_global_wrapper

shlwapi

PathAppendA
PathAddBackslashA
PathAddBackslashW

ole32

CoTaskMemFree
CoInitialize
CoCreateInstance
CoUninitialize

comctl32

InitCommonControlsEx

win32_utf8

StringToUTF8
SHParseDisplayNameU
SetCurrentDirectoryU
fopen_u
GetModuleFileNameU
StringToUTF16
win32_utf8_entry
PathFileExistsU
PathRemoveFileSpecU
CreateDirectoryU
GetCurrentDirectoryU

jansson

json_dumps
json_object
json_array_append_new
json_object_set_new
json_object_iter_value
json_object_get
json_false
json_delete
json_object_size
json_object_iter_next
json_string
json_string_value
json_pack
json_object_iter_key
json_object_key_to_iter
json_object_clear
json_object_iter

kernel32

InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
CloseHandle
CompareStringW
GetProcAddress
GetModuleHandleW

user32

SystemParametersInfoW
DialogBoxParamW
PostMessageW
DestroyIcon
EndDialog
MessageBoxW
InvalidateRect
SendMessageW
GetDlgItem
ShowWindow
EnableWindow
GetParent
SetFocus
MapDialogRect
SetWindowLongW
LoadImageW
GetSystemMetrics
GetWindowTextLengthW
GetWindowRect
MoveWindow
GetDlgItemTextW
SetDlgItemTextW
GetWindowLongW

shell32

SHGetPathFromIDListW
SHBrowseForFolderW

msvcp140

?_Throw_C_error@std@@YAXH@Z
?_Xlength_error@std@@YAXPBD@Z
_Mtx_destroy_in_situ
_Mtx_lock
_Mtx_init_in_situ
_Cnd_do_broadcast_at_thread_exit
?__ExceptionPtrCopyException@@YAXPAXPBX1@Z
?__ExceptionPtrAssign@@YAXPAXPBX@Z
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
_Mtx_unlock
?__ExceptionPtrToBool@@YA_NPBX@Z
?_Throw_future_error@std@@YAXABVerror_code@1@@Z
?__ExceptionPtrCreate@@YAXPAX@Z
?__ExceptionPtrDestroy@@YAXPAX@Z
?__ExceptionPtrCopy@@YAXPAXPBX@Z
_Query_perf_frequency
_Query_perf_counter
?_Execute_once@std@@YAHAAUonce_flag@1@P6GHPAX1PAPAX@Z1@Z
?_Syserror_map@std@@YAPBDH@Z
_Cnd_unregister_at_thread_exit
_Cnd_register_at_thread_exit
_Cnd_destroy_in_situ
_Cnd_init_in_situ
?_Throw_Cpp_error@std@@YAXH@Z
_Mtx_destroy
_Cnd_destroy
_Cnd_signal
_Cnd_broadcast
_Cnd_wait
_Cnd_init
_Mtx_init
_Thrd_detach
_Thrd_start

vcruntime140

_except_handler4_common
memset
_CxxThrowException
wcschr
memcpy
__std_exception_destroy
__std_terminate
__CxxFrameHandler3
memmove
__std_exception_copy

api-ms-win-crt-heap-l1-1-0

malloc
_callnewh
free
_set_new_mode

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsscanf
__stdio_common_vsprintf
__p__commode
__stdio_common_vfprintf
__acrt_iob_func
fputs
_set_fmode
fclose

api-ms-win-crt-string-l1-1-0

wcscat_s
towlower
_strdup
tolower
_strnicmp

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function
_seh_filter_exe
_initialize_onexit_table
_invalid_parameter_noinfo_noreturn
_set_app_type
_cexit
_configure_wide_argv
exit
_controlfp_s
_initialize_wide_environment
_crt_atexit
terminate
_register_thread_local_exe_atexit_callback
_c_exit
_get_wide_winmain_command_line
_exit
_initterm_e
_initterm

api-ms-win-crt-convert-l1-1-0

wctob

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/bin/thcrap_i18n.dll
.dll windows:5 windows x86 arch:x86

237ab81557afc50ac192dac8de1ce340

Code Sign

17:9e:ac:0a:35:7d:c7:a0:41:b7:8a:a5:20:e9:1e:3f
Certificate

Issuer

CN=Bruno Liron,1.2.840.113549.1.9.1=#0c1262726c69726f6e40686f746d61696c2e6672

Not Before

23/10/2015, 14:17

Not After

31/12/2039, 23:59

Subject

CN=Bruno Liron,1.2.840.113549.1.9.1=#0c1262726c69726f6e40686f746d61696c2e6672

Extended Key Usages

ExtKeyUsageCodeSigning

09:6c:e3:9b:77:99:0c:e9:f3:54:a9:c7:19:56:04:5a:df:c6:f9:5c
Signer

Actual PE Digest

09:6c:e3:9b:77:99:0c:e9:f3:54:a9:c7:19:56:04:5a:df:c6:f9:5c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

thcrap_i18n.pdb

Imports

jansson

json_object_get
json_dumpf
json_loadf
json_object_key_to_iter
json_object_iter_value
json_object_iter_next
json_array_get
json_object_iter_key
json_object_iter
json_array_size
json_object_set_new
json_string_value
json_string
json_delete
json_object

kernel32

GetModuleFileNameW
TlsFree
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TlsAlloc
MultiByteToWideChar
TlsGetValue
TlsSetValue
GetFileAttributesW

user32

SendMessageW
DialogBoxParamW
EndDialog
wsprintfW
GetDlgItem

msvcp140

_Mtx_unlock
_Mtx_init_in_situ
_Mtx_lock
_Mtx_destroy_in_situ
?_Throw_C_error@std@@YAXH@Z
?_Xlength_error@std@@YAXPBD@Z

vcruntime140

memcpy
_CxxThrowException
__std_type_info_destroy_list
__CxxFrameHandler3
__std_terminate
__std_exception_copy
__std_exception_destroy
memmove
memset
_except_handler4_common

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_invalid_parameter_noinfo_noreturn
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_initterm

api-ms-win-crt-stdio-l1-1-0

_wfopen

api-ms-win-crt-heap-l1-1-0

malloc
_callnewh
calloc
free

Exports

Exports

i18n_lang_init
i18n_lang_init_quiet
i18n_lang_selector
i18n_langid
i18n_load_narrow
i18n_load_narrow_only
i18n_load_wide
i18n_load_wide_only
i18n_translate
i18n_translate_wide

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/bin/thcrap_loader.exe
.exe windows:5 windows x86 arch:x86

c2429ea44fac6e1a870e9095df3fcc1f

Code Sign

17:9e:ac:0a:35:7d:c7:a0:41:b7:8a:a5:20:e9:1e:3f
Certificate

Issuer

CN=Bruno Liron,1.2.840.113549.1.9.1=#0c1262726c69726f6e40686f746d61696c2e6672

Not Before

23/10/2015, 14:17

Not After

31/12/2039, 23:59

Subject

CN=Bruno Liron,1.2.840.113549.1.9.1=#0c1262726c69726f6e40686f746d61696c2e6672

Extended Key Usages

ExtKeyUsageCodeSigning

9e:bd:9a:8a:37:ea:59:de:03:c1:3b:da:dd:74:47:b8:ef:46:26:d3
Signer

Actual PE Digest

9e:bd:9a:8a:37:ea:59:de:03:c1:3b:da:dd:74:47:b8:ef:46:26:d3

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

thcrap_loader.pdb

Imports

thcrap

json_flex_array_size
json_flex_array_get
json_load_file_report
log_print
json_object_get_string
PROJECT_NAME
runconfig_runcfg_fn_set
loader_update_with_UI_wrapper
log_printf
log_mboxf
log_init
runconfig_load
log_mbox
runconfig_free
lasterror_str
str_slash_normalize_win
str_slash_normalize
globalconfig_release

shlwapi

PathAppendA
PathAddBackslashA
PathIsRelativeA
PathFindExtensionA

win32_utf8

FindNextFileU
FindFirstFileU
MoveFileExU
RemoveDirectoryU
CreateDirectoryU
PathFileExistsU
SetCurrentDirectoryU
DeleteFileU
PathAddBackslashU
win32_utf8_entry
PathAppendU
PathIsRelativeU
PathRemoveFileSpecU
GetCurrentDirectoryU
GetModuleFileNameU

jansson

json_delete
json_string_value
json_object_iter_value
json_string_length
json_object_get
json_object_iter_next
json_object_iter
json_object_iter_key
json_dump_file
json_string
json_object_set_new
json_array_get
json_array_size
json_object_key_to_iter

kernel32

GetLastError
GetFileAttributesA
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FindClose

msvcp140

?_Xlength_error@std@@YAXPBD@Z
?_Xbad_function_call@std@@YAXXZ

vcruntime140

__std_exception_destroy
__std_exception_copy
memmove
strchr
__CxxFrameHandler3
_CxxThrowException
memset
_except_handler4_common
memcpy

api-ms-win-crt-heap-l1-1-0

free
_set_new_mode
_callnewh
malloc

api-ms-win-crt-string-l1-1-0

strncmp
_stricmp

api-ms-win-crt-runtime-l1-1-0

_set_app_type
_configure_wide_argv
_invalid_parameter_noinfo_noreturn
_initialize_wide_environment
_get_wide_winmain_command_line
_initterm
_initterm_e
_c_exit
exit
terminate
_controlfp_s
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_register_thread_local_exe_atexit_callback
_exit
_seh_filter_exe
_cexit

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode
__p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 736B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/bin/thcrap_tasofro.dll
.dll windows:5 windows x86 arch:x86

3314c7d4af15ac3bf0bab324866099e2

Code Sign

17:9e:ac:0a:35:7d:c7:a0:41:b7:8a:a5:20:e9:1e:3f
Certificate

Issuer

CN=Bruno Liron,1.2.840.113549.1.9.1=#0c1262726c69726f6e40686f746d61696c2e6672

Not Before

23/10/2015, 14:17

Not After

31/12/2039, 23:59

Subject

CN=Bruno Liron,1.2.840.113549.1.9.1=#0c1262726c69726f6e40686f746d61696c2e6672

Extended Key Usages

ExtKeyUsageCodeSigning

32:cf:ad:3e:de:92:30:4e:4b:d9:d9:66:21:29:6b:3a:5b:bd:0a:0c
Signer

Actual PE Digest

32:cf:ad:3e:de:92:30:4e:4b:d9:d9:66:21:29:6b:3a:5b:bd:0a:0c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

thcrap_tasofro.pdb

Imports

shlwapi

PathFindExtensionA

thcrap

str_slash_normalize_win
runconfig_dat_dump_get
stack_remove_if_unneeded
log_mboxf
file_rep_init
stack_file_resolve_chain
file_stream_read
runconfig_thcrap_dir_get
file_write
chain_free
stack_fn_resolve_chain
binhacks_apply
log_print
json_flex_array_size
json_flex_array_get
log_printf
fn_for_game
runconfig_game_get
json_decref_safe
stack_json_resolve
json_object_get_create
json_object_numkey_get
json_object_get_pointer
json_object_get_immediate
json_array_get_string
stack_foreach_cpp
file_rep_clear
file_rep_get
jsonvfs_game_add
json_object_get_string
patch_print_fn
patch_file_load
stack_chain_iterate
resolve_chain_game
resolve_chain
binhack_from_json
iat_detour_apply
json_object_get_register
runconfig_json_get
detour_chain
font_create_for_character
font_has_character
BP_fragmented_open_file
BP_fragmented_read_file
BP_file_header
jsonvfs_add_map
stack_game_json_resolve
set_resolve_chain_game
jsonvfs_game_add_map
jsonvfs_add
patchhook_register
stack_game_file_resolve

libpng16

png_write_end
png_set_IHDR
png_write_row
png_init_io
png_write_info
png_create_write_struct
png_destroy_write_struct
png_read_image
png_get_rowbytes
png_read_update_info
png_set_gray_to_rgb
png_set_strip_16
png_get_valid
png_set_expand
png_get_IHDR
png_read_info
png_set_sig_bytes
png_set_read_fn
png_destroy_read_struct
png_get_io_ptr
png_set_longjmp_fn
png_sig_cmp
png_create_read_struct
png_create_info_struct

act_nut_lib

read_act_from_bytes
delete_object
delete_buffer
new_MemoryBuffer
read_nut_from_bytes

win32_utf8

fopen_u
FindNextFileU
FindFirstFileU
StringToUTF16
CharNextU
EnsureUTF8
MultiByteToWideCharU
CharToUTF16

jansson

json_copy
json_string
json_string_value
json_integer
json_object
json_array_size
json_object_get
json_object_iter_key
json_object_iter_value
json_object_iter
json_object_iter_next
json_object_set_new
json_delete
json_object_key_to_iter
json_integer_value
json_string_length
json_object_size
json_pack
json_array_get
json_load_file
json_array
json_array_append_new
json_true
json_false
json_dumpf
json_equal
json_dump_file

zlib-ng

inflateInit_
deflate
deflateInit_
inflateEnd
inflate
deflateEnd

kernel32

GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetLastError
AreFileApisANSI
GetCurrentThreadId
CreateDirectoryW
HeapFree
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
FindClose
MultiByteToWideChar
Sleep
WideCharToMultiByte
LoadLibraryW
GetProcAddress
FreeLibrary
EnterCriticalSection
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
GetProcessHeap
GetFullPathNameW
HeapAlloc

user32

CharLowerA

gdi32

SelectObject
GetObjectW
GetCurrentObject
GetGlyphOutlineW
DeleteObject

msvcp140

?_Throw_C_error@std@@YAXH@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
_Mtx_init
_Mtx_lock
_Mtx_unlock
_Cnd_init
_Cnd_wait
_Cnd_signal
_Cnd_destroy
_Thrd_start
_Mtx_destroy
_Mtx_init_in_situ
_Mtx_destroy_in_situ
_Cnd_init_in_situ
_Cnd_destroy_in_situ
?_Syserror_map@std@@YAPBDH@Z
?_Execute_once@std@@YAHAAUonce_flag@1@P6GHPAX1PAPAX@Z1@Z
?_Winerror_message@std@@YAKKPADK@Z
?_Winerror_map@std@@YAHH@Z

vcruntime140

_CxxThrowException
memmove
memchr
_setjmp3
__RTDynamicCast
__CxxFrameHandler3
__std_terminate
_purecall
strrchr
strchr
longjmp
__std_exception_destroy
__std_exception_copy
memcpy
memset
_except_handler4_common
__std_type_info_destroy_list

api-ms-win-crt-runtime-l1-1-0

perror
terminate
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_initterm
_initterm_e
_invalid_parameter_noinfo_noreturn

api-ms-win-crt-heap-l1-1-0

realloc
malloc
free
_callnewh

api-ms-win-crt-string-l1-1-0

tolower
strncpy
strncmp

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf
fclose
fopen
__acrt_iob_func
__stdio_common_vfprintf
fwrite

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func

api-ms-win-crt-math-l1-1-0

_except1

Exports

Exports

BP_bmpfont_fix_parameters
BP_detour_plugin
BP_nsml_file_header
BP_nsml_read_file
BP_th105_cv0_escape_comma
BP_th105_fix_csv_parser
BP_th105_font_spacing
BP_th105_open_file
BP_th135_file_header
BP_th135_file_name
BP_th135_read_file
BP_th175_file_desc
BP_th175_read_file
nsml_mod_detour
nsml_mod_exit
nsml_mod_init
steam_appid
tasofro_CharNextA
thcrap_plugin_init

Sections

.text
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/bin/thcrap_test.exe
.exe windows:5 windows x86 arch:x86

40814e0f8a4b505ab3f2c00772c9399e

Code Sign

17:9e:ac:0a:35:7d:c7:a0:41:b7:8a:a5:20:e9:1e:3f
Certificate

Issuer

CN=Bruno Liron,1.2.840.113549.1.9.1=#0c1262726c69726f6e40686f746d61696c2e6672

Not Before

23/10/2015, 14:17

Not After

31/12/2039, 23:59

Subject

CN=Bruno Liron,1.2.840.113549.1.9.1=#0c1262726c69726f6e40686f746d61696c2e6672

Extended Key Usages

ExtKeyUsageCodeSigning

89:bb:24:ce:af:01:0b:c8:ed:50:6b:79:4a:be:d1:53:ff:94:5b:94
Signer

Actual PE Digest

89:bb:24:ce:af:01:0b:c8:ed:50:6b:79:4a:be:d1:53:ff:94:5b:94

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

thcrap_test.pdb

Imports

thcrap

runconfig_load
RepoFree
RepoLoad
runconfig_free
runconfig_json_get
runconfig_load_from_file
runconfig_thcrap_dir_get
RepoGetLocalFN
runconfig_thcrap_dir_set
runconfig_runcfg_fn_get
func_remove
func_add
func_get
patch_dep_to_desc
patch_build
patch_rel_to_abs
patch_file_store
patch_to_runconfig_json
patch_file_load
patch_file_blacklisted
patch_file_exists
patch_free
patch_init
dir_create_for_fn
fn_for_patch
fn_for_build
fn_for_game
file_write
file_read
runconfig_latest_get
runconfig_latest_check
runconfig_dat_dump_get
runconfig_update_url_get
runconfig_title_get
runconfig_build_set
runconfig_build_get
runconfig_game_get
runconfig_console_get
runconfig_runcfg_fn_set
RepoLoadJson

thcrap_update

?makeNetworkError@HttpStatus@@SA?AV1@I@Z
?makeOk@HttpStatus@@SA?AV1@XZ
?setHttpHandleFactory@ServerCache@@QAEXV?$function@$$A6A?AV?$unique_ptr@VIHttpHandle@@U?$default_delete@VIHttpHandle@@@std@@@std@@XZ@std@@@Z
?clear@ServerCache@@QAEXXZ
?defaultHttpHandleFactory@ServerCache@@SA?AV?$unique_ptr@VIHttpHandle@@U?$default_delete@VIHttpHandle@@@std@@@std@@XZ
RepoDiscover
?get@ServerCache@@SAAAV1@XZ

jansson

json_dump_callback
json_equal
json_dump_file
json_pack
json_array
json_object
json_string_value
json_delete
json_object_get

kernel32

GetExitCodeProcess
IsDebuggerPresent
OpenThread
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
ResetEvent
InitializeCriticalSectionAndSpinCount
WideCharToMultiByte
MultiByteToWideChar
GetProcAddress
GetModuleHandleW
SetLastError
AreFileApisANSI
RemoveDirectoryW
GetFileInformationByHandle
GetFileAttributesExW
FindNextFileW
FindFirstFileExW
FindClose
DeleteFileW
CreateFileW
CreateDirectoryW
GetCurrentDirectoryW
GetTempFileNameA
DebugBreak
CreateProcessA
GetCurrentProcessId
DeleteCriticalSection
CreateThread
ResumeThread
CloseHandle
GetThreadPriority
GetCurrentThread
SetEvent
GetLastError
GetTempPathA
Sleep
CreateEventW
GetCommandLineA
OpenProcess
GetModuleFileNameA
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
EnterCriticalSection
GetCurrentProcess
GetStdHandle
InterlockedCompareExchange
OutputDebugStringA
WaitForMultipleObjects
SetThreadPriority
LeaveCriticalSection
CreatePipe
InitializeCriticalSection
SetErrorMode
WaitForSingleObject
GetCurrentThreadId
DuplicateHandle

msvcp140

?_Xbad_function_call@std@@YAXXZ
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?always_noconv@codecvt_base@std@@QBE_NXZ
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
??Bid@locale@std@@QAEIXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_New_Locimp@_Locimp@locale@std@@CAPAV123@ABV123@@Z
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?uncaught_exception@std@@YA_NXZ
?_Xout_of_range@std@@YAXPBD@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?setbase@std@@YA?AU?$_Smanip@H@1@H@Z
?_Xlength_error@std@@YAXPBD@Z
?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??4?$_Yarn@D@std@@QAEAAV01@PBD@Z
?do_encoding@?$codecvt@_WDU_Mbstatet@@@std@@MBEHXZ
?do_max_length@?$codecvt@_WDU_Mbstatet@@@std@@MBEHXZ
?do_always_noconv@?$codecvt@_WDU_Mbstatet@@@std@@MBE_NXZ
?do_length@?$codecvt@_WDU_Mbstatet@@@std@@MBEHAAU_Mbstatet@@PBD1I@Z
?do_unshift@?$codecvt@_WDU_Mbstatet@@@std@@MBEHAAU_Mbstatet@@PAD1AAPAD@Z
?do_out@?$codecvt@_WDU_Mbstatet@@@std@@MBEHAAU_Mbstatet@@PB_W1AAPB_WPAD3AAPAD@Z
?do_in@?$codecvt@_WDU_Mbstatet@@@std@@MBEHAAU_Mbstatet@@PBD1AAPBDPA_W3AAPA_W@Z
??1?$codecvt@_WDU_Mbstatet@@@std@@MAE@XZ
??0?$codecvt@_WDU_Mbstatet@@@std@@QAE@I@Z
?in@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPA_W3AAPA_W@Z
?_Addfac@_Locimp@locale@std@@AAEXPAVfacet@23@I@Z
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UAEXXZ
?_Syserror_map@std@@YAPBDH@Z
?_Execute_once@std@@YAHAAUonce_flag@1@P6GHPAX1PAPAX@Z1@Z
?_Winerror_message@std@@YAKKPADK@Z
?_Winerror_map@std@@YAHH@Z

vcruntime140

_except_handler4_common
memcpy
strrchr
strchr
strstr
__std_terminate
_purecall
__std_exception_copy
__std_exception_destroy
__CxxFrameHandler3
memmove
memchr
_CxxThrowException
memset

api-ms-win-crt-runtime-l1-1-0

__p___argc
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
abort
_configure_narrow_argv
_seh_filter_exe
_set_app_type
_get_initial_narrow_environment
terminate
_initterm
_initterm_e
_invalid_parameter_noinfo_noreturn
_set_abort_behavior
_set_error_mode
strerror
_errno
__p___argv
exit
_exit
_controlfp_s
_c_exit
_register_thread_local_exe_atexit_callback
_cexit

api-ms-win-crt-stdio-l1-1-0

_wfopen
fputc
fread
fwrite
_getcwd
_creat
_fileno
_set_fmode
_open_osfhandle
ftell
fgetc
ungetc
setvbuf
_dup2
_fseeki64
fgetpos
_read
_get_stream_buffer_pointers
_isatty
__stdio_common_vfprintf
_dup
fseek
fclose
fflush
_write
_close
__acrt_iob_func
fsetpos
__p__commode

api-ms-win-crt-heap-l1-1-0

_callnewh
free
malloc
_set_new_mode

api-ms-win-crt-time-l1-1-0

_ftime64
_localtime64_s

api-ms-win-crt-string-l1-1-0

_strdup
isxdigit
strncmp
toupper
iscntrl
isdigit
_stricmp

api-ms-win-crt-filesystem-l1-1-0

_stat64i32
_mkdir
remove
_lock_file
_unlock_file

api-ms-win-crt-convert-l1-1-0

strtol
strtoull

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func
_configthreadlocale

api-ms-win-crt-math-l1-1-0

__setusermatherr
_except1
_fdopen

Sections

.text
Size: 263KB - Virtual size: 262KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/bin/thcrap_tsa.dll
.dll windows:5 windows x86 arch:x86

cf8f5af0558a2b911ac23202cd8e8e0f

Code Sign

17:9e:ac:0a:35:7d:c7:a0:41:b7:8a:a5:20:e9:1e:3f
Certificate

Issuer

CN=Bruno Liron,1.2.840.113549.1.9.1=#0c1262726c69726f6e40686f746d61696c2e6672

Not Before

23/10/2015, 14:17

Not After

31/12/2039, 23:59

Subject

CN=Bruno Liron,1.2.840.113549.1.9.1=#0c1262726c69726f6e40686f746d61696c2e6672

Extended Key Usages

ExtKeyUsageCodeSigning

db:92:1e:45:1a:81:e3:b5:4f:7f:a4:29:38:31:4a:64:e5:12:9b:2a
Signer

Actual PE Digest

db:92:1e:45:1a:81:e3:b5:4f:7f:a4:29:38:31:4a:64:e5:12:9b:2a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

thcrap_tsa.pdb

Imports

thcrap

json_object_get_hex
json_object_get_register
jsondata_get
?strings_get_fallback@@YA?AUstringref_t@@ABUstring_named_t@@@Z
strings_vsprintf
strings_id
json_immediate_value
?errorf@logger_t@@UBA$$TPBDZZ
strings_sprintf
strings_get
json_array_get_string_safe
jsondata_game_add
str_num_digits
json_object_get_pointer
?tlnote_show@@YAXUtlnote_t@@@Z
json_decref_safe
jsondata_add
?tlnote_find@@YA?AUtlnote_split_t@@Ustringref_t@@_N@Z
strings_lookup
?tlnote_removal_index@@YA?AUtlnote_encoded_index_t@@XZ
json_hex_value
json_array_get_hex
vtable_detour
log_mbox
runconfig_json_get
breakpoint_cave_exec_flag
json_flex_array_get_string_safe
json_pointer_value
tlsstruct_free
tlsstruct_get
d3d9_device_detour
runconfig_game_get
json_object_get_immediate
str_address_value
binhack_render
json_object_get_string
stack_game_file_resolve
detour_chain
patchhook_register
log_mboxf
fn_for_game
runconfig_dat_dump_get
stack_chain_iterate
resolve_chain_game
patch_print_fn
log_mbox_set_owner
?tlnote_remove@@YAXXZ
runconfig_title_get
patch_file_load
BP_file_name
stack_remove_if_unneeded
log_print
fr_tls_get
?json_xywh_value@@YA?AUjson_xywh_t@@PBUjson_t@@@Z
BP_file_load
BP_file_size
BP_file_buffer
BP_file_loaded
file_rep_clear
patch_file_stream
binhack_calc_size
?verrorf@logger_t@@UBE$$TPBDPAD@Z
?tlnote_prerender@@YA?AUtlnote_encoded_index_t@@Utlnote_t@@@Z
json_array_get_string
json_flex_array_get
jsondata_game_get
json_flex_array_size
json_array_set_new_expand
runconfig_build_get
json_object_numkey_get
log_printf

libpng16

png_write_end
png_get_IHDR
png_create_info_struct
png_set_write_fn
png_create_read_struct
png_set_IHDR
png_destroy_read_struct
png_read_update_info
png_set_add_alpha
png_get_rowbytes
png_read_info
png_set_strip_16
png_write_image
png_set_gray_to_rgb
png_set_read_fn
png_write_info
png_image_free
png_image_begin_read_from_memory
png_image_finish_read
png_image_write_to_stdio
png_destroy_write_struct
png_create_write_struct
png_set_expand
png_get_io_ptr
png_set_longjmp_fn
png_read_image

comctl32

InitCommonControlsEx

shlwapi

PathFindExtensionA

winmm

joyGetNumDevs
joyGetDevCapsW
joyGetPosEx

win32_utf8

PathFileExistsU
CreateFileU
PathFindFileNameU
CreateWindowExU
fopen_u
GetTextExtentPoint32U
TextOutU
CreateFontU
MessageBoxU
PathMatchSpecU

jansson

json_array_get
json_array_size
json_string_value
json_array_append_new
json_stringn_nocheck
json_object_get
json_real_value
json_delete
json_object_set_new
json_string_length
json_stringn
json_object_iter_key
json_object_iter_value
json_object_iter
json_integer
json_object_iter_next
json_integer_value
json_array
json_object_key_to_iter

kernel32

HeapFree
GetProcessHeap
HeapAlloc
GetModuleHandleW
TlsAlloc
TlsFree
GetModuleHandleA
SetFilePointer
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
ReadFile
GetProcAddress
CloseHandle

user32

GetSystemMetrics
GetWindowRect
GetWindowPlacement
MsgWaitForMultipleObjects

gdi32

GetStockObject
DeleteDC
DeleteObject
GetObjectType
CreateFontIndirectW
GetObjectW
GetCurrentObject
SelectObject
CreateCompatibleDC

msvcp140

?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z

vcruntime140

longjmp
strchr
strstr
__std_terminate
__CxxFrameHandler3
__std_exception_destroy
_CxxThrowException
memset
__std_type_info_destroy_list
_except_handler4_common
__std_exception_copy
memmove
memchr
_setjmp3
memcpy
_purecall

api-ms-win-crt-stdio-l1-1-0

fclose
fflush
__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsscanf
_close
_lseek
_read
fseek
__stdio_common_vsprintf

api-ms-win-crt-heap-l1-1-0

realloc
_callnewh
malloc
free
calloc

api-ms-win-crt-string-l1-1-0

strncpy
_stricmp
_strdup
strncmp

api-ms-win-crt-runtime-l1-1-0

exit
_initterm_e
_initterm
terminate
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_seh_filter_dll
_errno
strerror
_configure_narrow_argv
_invalid_parameter_noinfo_noreturn

api-ms-win-crt-convert-l1-1-0

strtol

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-math-l1-1-0

_libm_sse2_pow_precise
_libm_sse2_sin_precise
_libm_sse2_sqrt_precise
ceil
_except1
_libm_sse2_log_precise
_libm_sse2_exp_precise
_libm_sse2_cos_precise
_libm_sse2_atan_precise
ldexp
floor

Exports

Exports

BP_ascii_params
BP_bgmmod_tranceseek_byte_offset
BP_gentext
BP_mission
BP_mission_check_furi_a
BP_mission_printf_hook
BP_music_cmt
BP_music_title
BP_ruby_offset
BP_spell_comment_line
BP_spell_id
BP_spell_name
BP_spell_owner
BP_textimage_init
BP_textimage_is_active
BP_textimage_load
BP_textimage_set
BP_th06_file_load
BP_th06_file_loaded
BP_th06_file_name
BP_th06_file_size
BP_th06_music_title_in_game
BP_widest_string
BP_widest_string_f
GetTextExtent
GetTextExtentBase
GetTextExtentForFont
GetTextExtentForFontID
ascii_mod_init
ascii_mod_repatch
ascii_vpatchf
bgm_mod_detour
bgm_mod_init
bgm_mod_repatch
devicelost_mod_detour
gc_tls_mod_thread_exit
gentext_mod_init
input_mod_detour
layout_mod_detour
layout_mod_exit
layout_mod_init
missions_mod_init
music_mod_init
patch_msg
patch_msg_dlg
patch_msg_end
png_image_clear
png_image_new
png_image_resize
png_image_store
spells_mod_init
steam_appid
textimage_mod_exit
textimage_mod_repatch
thcrap_plugin_init
tsa_mod_detour

Sections

.text
Size: 326KB - Virtual size: 326KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 143KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/bin/thcrap_update.dll
.dll windows:5 windows x86 arch:x86

40804f226481d0270b2e63dafd0ec8f2

Code Sign

17:9e:ac:0a:35:7d:c7:a0:41:b7:8a:a5:20:e9:1e:3f
Certificate

Issuer

CN=Bruno Liron,1.2.840.113549.1.9.1=#0c1262726c69726f6e40686f746d61696c2e6672

Not Before

23/10/2015, 14:17

Not After

31/12/2039, 23:59

Subject

CN=Bruno Liron,1.2.840.113549.1.9.1=#0c1262726c69726f6e40686f746d61696c2e6672

Extended Key Usages

ExtKeyUsageCodeSigning

0c:47:2a:a4:2c:57:d8:e8:0b:66:74:59:13:68:82:ce:76:43:99:c3
Signer

Actual PE Digest

0c:47:2a:a4:2c:57:d8:e8:0b:66:74:59:13:68:82:ce:76:43:99:c3

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

thcrap_update.pdb

Imports

thcrap

json_load_file_report
patch_rel_to_abs
patch_file_delete
json5_loadb
zip_close
patch_free
patch_file_store
strings_array_create
patch_json_store
patch_json_load
strings_array_free
patch_build
RepoWrite
stack_foreach_cpp
patch_file_exists
patch_init
strings_array_add
PROJECT_VERSION_STRING
log_printf
thcrap_inject_into_new
log_mboxf
file_write
log_mbox
log_mbox_set_owner
log_print
stack_show_missing
identify
runconfig_load
globalconfig_get_boolean
globalconfig_get_integer
log_set_hook
runconfig_thcrap_dir_set
runconfig_game_get
globalconfig_set_boolean
globalconfig_set_integer
runconfig_thcrap_dir_get
zip_open
str_hexdate_format
PROJECT_VERSION
json_object_get_hex
PROJECT_BRANCH
zip_list_empty
zip_file_unzip
zip_list
dir_create_for_fn
json_object_get_string
GetModuleContaining
RepoLoad
RepoLoadJson
RepoFree
PROJECT_URL
PROJECT_NAME
strings_replace
strings_strcat
strings_sprintf
PROJECT_NAME_SHORT

crypt32

CryptQueryObject
CertFreeCertificateContext
CryptImportPublicKeyInfo
CryptStringToBinaryA
CryptMsgClose
CertCloseStore
CertGetSubjectCertificateFromStore
CryptMsgGetParam

wininet

InternetReadFile
InternetQueryDataAvailable
HttpQueryInfoW
InternetSetOptionW
InternetCloseHandle
InternetOpenUrlA

comctl32

ord410
InitCommonControlsEx
ord413

win32_utf8

DeleteFileU
CreateDirectoryU
PathFileExistsU
RemoveDirectoryU
GetModuleFileNameU
CreateWindowExU
DrawTextU
SetCurrentDirectoryU
GetCommandLineU
CreateFileMappingU
StringToUTF16
SetWindowTextU
MoveFileU
GetCurrentDirectoryU
InternetOpenU
windows_version
CreateProcessU

jansson

json_array_size
json_array_get
json_object_iter_value
json_object_key_to_iter
json_object_del
json_delete
json_object_iter_next
json_null
json_string_length
json_object_iter_key
json_integer_value
json_object
json_equal
json_string_value
json_object_set_new
json_object_iter
json_object_get

kernel32

GetFileAttributesExW
FindNextFileW
FindFirstFileExW
FindClose
CreateFileW
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetFileInformationByHandle
IsDebuggerPresent
GetModuleFileNameW
GetCurrentProcessId
QueryPerformanceCounter
DeleteCriticalSection
WaitForMultipleObjects
CreateThread
CloseHandle
AreFileApisANSI
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
WaitForSingleObject
OpenProcess
MapViewOfFile
SetLastError
CreateEventW
InitializeCriticalSection
GetModuleHandleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
SetEvent
LeaveCriticalSection
EnterCriticalSection
GetLastError
InitializeSListHead
IsProcessorFeaturePresent

user32

AdjustWindowRectEx
GetSystemMetrics
DefDlgProcW
DestroyWindow
PostMessageW
GetWindowThreadProcessId
DispatchMessageW
TranslateMessage
GetMessageW
UpdateWindow
ShowWindow
CheckDlgButton
CreateWindowExW
SystemParametersInfoW
RegisterClassW
LoadCursorW
SetWindowTextW
SetWindowLongW
GetWindowLongW
InvalidateRect
ReleaseDC
DrawTextW
GetClientRect
GetDC
DefWindowProcW
GetSysColorBrush
SetWindowPos
PostQuitMessage
GetDlgItemInt
EnableWindow
SendMessageW

gdi32

SetBkMode
SelectObject
CreateFontIndirectW
DeleteObject
SetTextColor

advapi32

CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptGenRandom
CryptAcquireContextW
CryptDestroyHash
CryptVerifySignatureW

msvcp140

??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?uncaught_exception@std@@YA_NXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
_Query_perf_frequency
_Query_perf_counter
?_Xout_of_range@std@@YAXPBD@Z
?_Random_device@std@@YAIXZ
_Thrd_detach
?_Winerror_message@std@@YAKKPADK@Z
?_Winerror_map@std@@YAHH@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
?__ExceptionPtrAssign@@YAXPAXPBX@Z
?__ExceptionPtrToBool@@YA_NPBX@Z
?_Throw_future_error@std@@YAXABVerror_code@1@@Z
?__ExceptionPtrCreate@@YAXPAX@Z
?__ExceptionPtrCurrentException@@YAXPAX@Z
?__ExceptionPtrDestroy@@YAXPAX@Z
?__ExceptionPtrCopy@@YAXPAXPBX@Z
?_Execute_once@std@@YAHAAUonce_flag@1@P6GHPAX1PAPAX@Z1@Z
?_Syserror_map@std@@YAPBDH@Z
?_Xlength_error@std@@YAXPBD@Z
_Cnd_unregister_at_thread_exit
_Cnd_register_at_thread_exit
_Cnd_destroy_in_situ
_Cnd_init_in_situ
_Mtx_destroy_in_situ
_Mtx_init_in_situ
_Thrd_id
?_Throw_Cpp_error@std@@YAXH@Z
_Mtx_destroy
_Cnd_destroy
_Cnd_signal
_Cnd_broadcast
_Cnd_wait
_Cnd_init
_Mtx_unlock
_Mtx_lock
_Mtx_init
_Thrd_join
_Thrd_start
?_Throw_C_error@std@@YAXH@Z
?_Xbad_function_call@std@@YAXXZ
?__ExceptionPtrCopyException@@YAXPAXPBX1@Z
_Cnd_do_broadcast_at_thread_exit
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ

vcruntime140

__CxxFrameHandler3
__std_terminate
__std_exception_destroy
__std_exception_copy
__std_type_info_compare
_purecall
strchr
memcpy
_CxxThrowException
memset
_except_handler4_common
__std_type_info_destroy_list
memchr
memmove

api-ms-win-crt-runtime-l1-1-0

terminate
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_crt_atexit
_errno
_initialize_onexit_table
_initterm_e
_initterm
_cexit
_register_onexit_function
_execute_onexit_table
_invalid_parameter_noinfo_noreturn

api-ms-win-crt-heap-l1-1-0

_callnewh
malloc
free

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf

api-ms-win-crt-string-l1-1-0

strncmp
strncpy
_stricmp

api-ms-win-crt-convert-l1-1-0

strtoul

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func

Exports

Exports

??1HttpStatus@@QAE@XZ
??1ServerCache@@QAE@XZ
?clear@ServerCache@@QAEXXZ
?defaultHttpHandleFactory@ServerCache@@SA?AV?$unique_ptr@VIHttpHandle@@U?$default_delete@VIHttpHandle@@@std@@@std@@XZ
?get@ServerCache@@SAAAV1@XZ
?makeCancelled@HttpStatus@@SA?AV1@XZ
?makeNetworkError@HttpStatus@@SA?AV1@I@Z
?makeOk@HttpStatus@@SA?AV1@XZ
?makeSystemError@HttpStatus@@SA?AV1@IV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?setHttpHandleFactory@ServerCache@@QAEXV?$function@$$A6A?AV?$unique_ptr@VIHttpHandle@@U?$default_delete@VIHttpHandle@@@std@@@std@@XZ@std@@@Z
RepoDiscover
http_mod_exit
loader_update_with_UI
patch_bootstrap
stack_update
thcrap_update_exit
update_filter_games
update_filter_global

Sections

.text
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/bin/update.json
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/bin/vc_redist.x86.exe
.exe windows:5 windows x86 arch:x86

1a5cdbf711fee14b077e599d13fddab2

Code Sign

33:00:00:01:0d:4b:e1:d4:0b:2c:ea:40:22:00:00:00:00:01:0d
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/08/2018, 20:20

Not After

23/11/2019, 20:20

Subject

CN=Microsoft Time-Stamp service,OU=Microsoft Ireland Operations Limited+OU=Thales TSS ESN:D082-4BFD-EEBA,O=Microsoft Corporation,L=Redmond,ST=WA,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:51:9e:8d:8f:40:71:a3:0e:41:00:00:00:00:01:51
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/05/2019, 21:37

Not After

02/05/2020, 21:37

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:01:51:9e:8d:8f:40:71:a3:0e:41:00:00:00:00:01:51
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/05/2019, 21:37

Not After

02/05/2020, 21:37

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e1:e2:30:a6:01:de:67:bf:33:4c:6a:4e:fa:23:78:39:e7:b3:99:90:08:bd:f7:eb:20:13:e1:fb:65:0d:b5:31
Signer

Actual PE Digest

e1:e2:30:a6:01:de:67:bf:33:4c:6a:4e:fa:23:78:39:e7:b3:99:90:08:bd:f7:eb:20:13:e1:fb:65:0d:b5:31

Digest Algorithm

sha256

PE Digest Matches

true

2a:90:76:a3:8f:50:fd:7d:9c:c4:74:af:98:f7:84:70:1b:8f:71:2c
Signer

Actual PE Digest

2a:90:76:a3:8f:50:fd:7d:9c:c4:74:af:98:f7:84:70:1b:8f:71:2c

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

PDB Paths

C:\agent\_work\8\s\build\ship\x86\burn.pdb

Imports

advapi32

RegCloseKey
RegOpenKeyExW
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
InitiateSystemShutdownExW
GetUserNameW
RegQueryValueExW
RegDeleteValueW
ConvertStringSecurityDescriptorToSecurityDescriptorW
DecryptFileW
CreateWellKnownSid
InitializeAcl
SetEntriesInAclW
ChangeServiceConfigW
CloseServiceHandle
ControlService
OpenSCManagerW
OpenServiceW
QueryServiceStatus
SetNamedSecurityInfoW
CheckTokenMembership
AllocateAndInitializeSid
SetEntriesInAclA
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegSetValueExW
RegQueryInfoKeyW
RegEnumValueW
RegEnumKeyExW
RegDeleteKeyW
RegCreateKeyExW
GetTokenInformation
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW
QueryServiceConfigW

user32

GetMessageW
PostMessageW
IsWindow
WaitForInputIdle
PostQuitMessage
PeekMessageW
MsgWaitForMultipleObjects
PostThreadMessageW
GetMonitorInfoW
MonitorFromPoint
IsDialogMessageW
LoadCursorW
LoadBitmapW
SetWindowLongW
GetWindowLongW
GetCursorPos
MessageBoxW
CreateWindowExW
UnregisterClassW
RegisterClassW
DefWindowProcW
DispatchMessageW
TranslateMessage

oleaut32

SysFreeString
SysAllocString
VariantInit
VariantClear

gdi32

CreateCompatibleDC
DeleteObject
SelectObject
StretchBlt
GetObjectW
DeleteDC

shell32

SHGetFolderPathW
CommandLineToArgvW
ShellExecuteExW

ole32

CoUninitialize
CoInitializeEx
CoInitialize
StringFromGUID2
CoCreateInstance
CoTaskMemFree
CoInitializeSecurity
CLSIDFromProgID

kernel32

GetCommandLineA
GetCPInfo
GetOEMCP
CloseHandle
CreateFileW
GetProcAddress
LocalFree
HeapSetInformation
GetLastError
GetModuleHandleW
FormatMessageW
lstrlenA
lstrlenW
MultiByteToWideChar
WideCharToMultiByte
LCMapStringW
Sleep
GetLocalTime
GetModuleFileNameW
ExpandEnvironmentStringsW
GetTempPathW
GetTempFileNameW
CreateDirectoryW
GetFullPathNameW
CompareStringW
GetCurrentProcessId
WriteFile
SetFilePointer
LoadLibraryW
GetSystemDirectoryW
CreateFileA
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
FindClose
GetCommandLineW
GetCurrentDirectoryW
RemoveDirectoryW
SetFileAttributesW
GetFileAttributesW
DeleteFileW
FindFirstFileW
FindNextFileW
MoveFileExW
GetCurrentProcess
GetCurrentThreadId
InitializeCriticalSection
DeleteCriticalSection
ReleaseMutex
GetEnvironmentStringsW
TlsGetValue
TlsSetValue
TlsFree
CreateProcessW
GetVersionExW
VerSetConditionMask
FreeLibrary
EnterCriticalSection
LeaveCriticalSection
GetSystemTime
GetNativeSystemInfo
GetModuleHandleExW
GetWindowsDirectoryW
GetSystemWow64DirectoryW
GetComputerNameW
VerifyVersionInfoW
GetVolumePathNameW
GetDateFormatW
GetSystemDefaultLangID
GetUserDefaultLangID
GetStringTypeW
ReadFile
SetFilePointerEx
DuplicateHandle
InterlockedExchange
InterlockedCompareExchange
CreateEventW
ProcessIdToSessionId
OpenProcess
GetProcessId
WaitForSingleObject
ConnectNamedPipe
SetNamedPipeHandleState
CreateNamedPipeW
CreateThread
GetExitCodeThread
SetEvent
WaitForMultipleObjects
InterlockedIncrement
InterlockedDecrement
ResetEvent
SetEndOfFile
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
CompareStringA
GetExitCodeProcess
SetThreadExecutionState
CopyFileExW
MapViewOfFile
UnmapViewOfFile
CreateMutexW
CreateFileMappingW
GetThreadLocale
IsValidCodePage
FreeEnvironmentStringsW
TlsAlloc
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
DecodePointer
WriteConsoleW
GetModuleHandleA
GlobalAlloc
GlobalFree
GetFileSizeEx
CopyFileW
VirtualAlloc
VirtualFree
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
SystemTimeToFileTime
GetSystemInfo
VirtualProtect
VirtualQuery
SetCurrentDirectoryW
FindFirstFileExW
GetFileType
GetACP
ExitProcess
GetStdHandle
LoadLibraryExW
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RaiseException
RtlUnwind
SetLastError
LoadLibraryExA

rpcrt4

UuidCreate

Sections

.text
Size: 294KB - Virtual size: 293KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wixburn
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/bin/win32_utf8.dll
.dll windows:5 windows x86 arch:x86

be2e583189d11fe541ae97158ccb62a2

Code Sign

17:9e:ac:0a:35:7d:c7:a0:41:b7:8a:a5:20:e9:1e:3f
Certificate

Issuer

CN=Bruno Liron,1.2.840.113549.1.9.1=#0c1262726c69726f6e40686f746d61696c2e6672

Not Before

23/10/2015, 14:17

Not After

31/12/2039, 23:59

Subject

CN=Bruno Liron,1.2.840.113549.1.9.1=#0c1262726c69726f6e40686f746d61696c2e6672

Extended Key Usages

ExtKeyUsageCodeSigning

14:49:68:58:8c:b9:ec:f7:36:08:d5:05:0c:1a:f7:4b:32:27:da:7f
Signer

Actual PE Digest

14:49:68:58:8c:b9:ec:f7:36:08:d5:05:0c:1a:f7:4b:32:27:da:7f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

win32_utf8.pdb

Imports

kernel32

CreateDirectoryW
GetStartupInfoW
ReadFile
FindFirstFileW
GetFileSizeEx
WritePrivateProfileStringW
HeapFree
SetLastError
GetCommandLineW
IsDBCSLeadByteEx
GetFullPathNameW
FindNextFileW
WriteFile
GetPrivateProfileIntW
RemoveDirectoryW
GetModuleFileNameW
SetEnvironmentVariableW
SetFilePointer
GetEnvironmentVariableW
SetEndOfFile
GetTempPathW
LocalAlloc
CreateFileW
GetFileAttributesW
OpenFileMappingW
GetModuleHandleA
MultiByteToWideChar
GetPrivateProfileStringW
FormatMessageW
MoveFileWithProgressW
GetLastError
GetFileAttributesExW
DeleteFileW
CloseHandle
LoadResource
FindResourceW
HeapAlloc
GetCurrentDirectoryW
SetCurrentDirectoryW
GetProcAddress
LocalFree
GetProcessHeap
CreateProcessW
FreeLibrary
WideCharToMultiByte
CopyFileExW
CreateFileMappingW
LoadLibraryExW
SetUnhandledExceptionFilter
LoadLibraryExA
VirtualQuery
VirtualProtect
GetSystemInfo
RaiseException
GetModuleHandleW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter

vcruntime140

__std_type_info_destroy_list
_except_handler4_common
strchr
memset
memcpy

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfprintf
__acrt_iob_func
_wfopen

api-ms-win-crt-string-l1-1-0

isdigit
strncpy
strnlen

api-ms-win-crt-heap-l1-1-0

free
malloc

api-ms-win-crt-runtime-l1-1-0

_cexit
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment

Exports

Exports

CharNextU
CharToUTF16
CommandLineToArgvU
CopyFileExU
CopyFileU
CreateDialogParamU
CreateDirectoryU
CreateFileMappingU
CreateFileU
CreateFontIndirectExU
CreateFontIndirectU
CreateFontU
CreateProcessU
CreateWindowExU
DeleteFileU
DialogBoxParamU
DirectSoundCaptureEnumerateU
DirectSoundEnumerateU
DragQueryFileU
DrawTextU
EnsureUTF8
EnumFontFamiliesExU
EnumFontFamiliesU
ExtTextOutU
ExtractIconExU
ExtractIconU
FindFirstFileU
FindNextFileU
FormatMessageU
GetClassInfoExU
GetClassInfoU
GetCommandLineU
GetCurrentDirectoryU
GetEnvironmentVariableU
GetFileAttributesExU
GetFileAttributesU
GetFileVersionInfoExU
GetFileVersionInfoSizeExU
GetFileVersionInfoSizeU
GetFileVersionInfoU
GetFullPathNameU
GetGlyphOutlineU
GetModuleFileNameExU
GetModuleFileNameU
GetOpenFileNameU
GetPrivateProfileIntU
GetPrivateProfileStringU
GetSaveFileNameU
GetStartupInfoU
GetTempPathU
GetTextExtentPoint32U
InsertMenuItemU
InternetCombineUrlU
InternetCrackUrlU
InternetOpenU
InternetOpenUrlU
IsDBCSLeadByteFB
LoadLibraryExU
LoadLibraryU
LoadStringU
MessageBoxU
MoveFileExU
MoveFileU
MoveFileWithProgressU
MultiByteToWideCharU
OpenFileMappingU
PathAddBackslashU
PathAppendU
PathCanonicalizeU
PathCombineU
PathFileExistsU
PathFindFileNameU
PathIsDirectoryU
PathIsRelativeU
PathMatchSpecU
PathRemoveFileSpecU
ReadFileU
RegisterClassExU
RegisterClassU
RemoveDirectoryU
SHBrowseForFolderU
SHGetFolderPathU
SHGetPathFromIDListU
SHParseDisplayNameU
SetCurrentDirectoryU
SetDlgItemTextU
SetEnvironmentVariableU
SetWindowTextU
StringToMBFixed
StringToUTF16
StringToUTF16_VLA
StringToUTF8
TabbedTextOutU
TextOutU
UnregisterClassU
WideCharToMultiByteU
WriteFileU
WritePrivateProfileStringU
fopen_u
lower_CreateFontA
lower_CreateFontIndirectA
lower_EnumFontFamiliesA
printf_format_parse
w32u8_get_wrapped_functions
w32u8_set_fallback_codepage
win32_utf8_entry
windows_version

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/bin/zlib-ng.dll
.dll windows:5 windows x86 arch:x86

87003465686fb902abdad10c9ef81af4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

zlib-ng.pdb

Imports

vcruntime140

memset
__std_type_info_destroy_list
_except_handler4_common
memcpy

api-ms-win-crt-heap-l1-1-0

malloc
free

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_initialize_onexit_table
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_cexit
_initialize_narrow_environment

kernel32

GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
UnhandledExceptionFilter
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent

Exports

Exports

adler32
adler32_combine
adler32_combine64
adler32_z
compress
compress2
compressBound
crc32
crc32_combine
crc32_combine64
crc32_z
deflate
deflateBound
deflateCopy
deflateEnd
deflateGetDictionary
deflateInit2_
deflateInit_
deflateParams
deflatePending
deflatePrime
deflateReset
deflateResetKeep
deflateSetDictionary
deflateSetHeader
deflateTune
get_crc_table
inflate
inflateBack
inflateBackEnd
inflateBackInit_
inflateCodesUsed
inflateCopy
inflateEnd
inflateGetDictionary
inflateGetHeader
inflateInit2_
inflateInit_
inflateMark
inflatePrime
inflateReset
inflateReset2
inflateResetKeep
inflateSetDictionary
inflateSync
inflateSyncPoint
inflateUndermine
inflateValidate
uncompress
uncompress2
zError
zlibCompileFlags
zlibVersion

Sections

.text
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/config/config.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/config/games.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/config/thpatch-en.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/logs/thcrap_log.1.txt
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/logs/thcrap_log.2.txt
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/logs/thcrap_log.3.txt
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/logs/thcrap_log.4.txt
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/logs/thcrap_log.5.txt
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/logs/thcrap_log.txt
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tasofro/files.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tasofro/global.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tasofro/megamari.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tasofro/megamari.v1.00.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tasofro/nsml.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tasofro/nsml.v1.00.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tasofro/nsml.v1.10.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tasofro/patch.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tasofro/th105.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tasofro/th105.v1.06a.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tasofro/th123.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tasofro/th123.v1.10a.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tasofro/th135.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tasofro/th135.v1.34b.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tasofro/th145.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tasofro/th145.v1.31b.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tasofro/th145.v1.41.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tasofro/th155.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tasofro/th155.v0.01a.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tasofro/th155.v0.024.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tasofro/th155.v1.02b.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tasofro/th155.v1.03.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tasofro/th155.v1.10.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tasofro/versions.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/alcostg.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/alcostg.v1.00a.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/files.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/formats.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/global.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/patch.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/stringdefs.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th06.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th06.v0.13.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th06.v1.02h.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th06/front.anm
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th06/music01.anm
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th06/music02.anm
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th06/replay00.anm
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th06/result01.anm
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th06/stringlocs.v1.02h.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th06/text.anm
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th06/title01.anm
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th06/title01s.anm
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th06/title04.anm
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th06/title04s.anm
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th06_custom.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th06_custom.v0.13.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th06_custom.v1.02h.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th06_custom/dialog_103.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th06_custom/stringlocs.v0.13.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th06_custom/stringlocs.v1.00.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th06_custom/stringlocs.v1.02h.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th07.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th07.v1.00b.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th08.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th08.v1.00d.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th09.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th09.v0.02a.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th09.v1.50a.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th095.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th095.v1.02a.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th10.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th10.v0.02a.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th10.v1.00a.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th11.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th11.v0.02a.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th11.v1.00a.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th12.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th12.v1.00b.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th125.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th125.v1.00a.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th128.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th128.v1.00a.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th13.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th13.v0.01a.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th13.v1.00a.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th13.v1.00b.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th13.v1.00c.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th14.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th14.v0.01a.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th14.v0.01b.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th14.v0.01bp.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th14.v1.00a.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th14.v1.00b.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th14.v1.00bp.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th143.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th143.v1.00a.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th15.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th15.v0.01a.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th15.v0.01b.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th15.v1.00a.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th15.v1.00b.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th16.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th16.v0.01a.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th16.v1.00a.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th165.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th165.v1.00a.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th16_custom.v0.01a.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th17.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th17.v0.01a.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/th17.v1.00b.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/themes.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/base_tsa/versions.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/script_latin/Aroania.ttf
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/script_latin/Cirno.ttf
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/script_latin/THBiolinum.otf
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/script_latin/THBiolinum.ttf
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/script_latin/files.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/script_latin/global.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/script_latin/marilega.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/script_latin/marilega.v1.10.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/script_latin/patch.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/script_latin/stringdefs.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/script_latin/th06.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/script_latin/th07.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/script_latin/th08.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/script_latin/th09.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/script_latin/th105.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/script_latin/th105.v1.06a.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/script_latin/th11.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/script_latin/th12.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/script_latin/th123.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/script_latin/th123.v1.10a.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/script_latin/th125.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/script_latin/th13.v1.00c.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/script_latin/th14.v1.00b.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/script_latin/th143.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/script_latin/th143.v1.00a.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/script_latin/th15.v0.01a.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/script_latin/th15.v0.01b.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/script_latin/th15.v1.00a.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/script_latin/th15.v1.00b.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/script_latin/th155.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/script_latin/th155.v1.03.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/script_latin/th155.v1.10.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/script_latin/th155.v1.19_beta3.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/script_latin/th16.v0.01a.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/script_latin/th16.v1.00a.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/script_latin/th165.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/script_latin/th165.v1.00a.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/script_latin/th17.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/script_latin/th17.v0.01a.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/script_latin/th17.v1.00a.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/script_latin/th17.v1.00b.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/western_name_order/files.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/nmlgc/western_name_order/patch.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/thpatch/lang_en/files.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/thpatch/lang_en/patch.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/thpatch/lang_en/stringdefs.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/thpatch/lang_en/th06.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/thpatch/lang_en/th06/ascii.png
.png
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/thpatch/lang_en/th06/end00.end
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/thpatch/lang_en/th06/end00.end.jdiff
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/thpatch/lang_en/th06/end00b.end
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/thpatch/lang_en/th06/end00b.end.jdiff
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/thpatch/lang_en/th06/end01.end
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/thpatch/lang_en/th06/end01.end.jdiff
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/thpatch/lang_en/th06/end10.end
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/thpatch/lang_en/th06/end10.end.jdiff
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/thpatch/lang_en/th06/end10b.end
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/thpatch/lang_en/th06/end10b.end.jdiff
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/thpatch/lang_en/th06/end11.end
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/thpatch/lang_en/th06/end11.end.jdiff
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/thpatch/lang_en/th06/front.png
.png
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/thpatch/lang_en/th06/msg1.dat.jdiff
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/thpatch/lang_en/th06/msg2.dat.jdiff
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/thpatch/lang_en/th06/msg3.dat.jdiff
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/thpatch/lang_en/th06/msg4.dat.jdiff
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/thpatch/lang_en/th06/msg5.dat.jdiff
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/thpatch/lang_en/th06/msg6.dat.jdiff
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/thpatch/lang_en/th06/msg7.dat.jdiff
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/thpatch/lang_en/th06/music00.png
.png
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/thpatch/lang_en/th06/musiccmt.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/thpatch/lang_en/th06/replay00.png
.png
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/thpatch/lang_en/th06/result00.png
.png
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/thpatch/lang_en/th06/result02.png
.png
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/thpatch/lang_en/th06/result03.png
.png
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/thpatch/lang_en/th06/select01.png
.png
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/thpatch/lang_en/th06/select02.png
.png
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/thpatch/lang_en/th06/select03.png
.png
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/thpatch/lang_en/th06/select04.png
.png
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/thpatch/lang_en/th06/select05.png
.png
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/thpatch/lang_en/th06/slpl00b.png
.png
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/thpatch/lang_en/th06/slpl01b.png
.png
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/thpatch/lang_en/th06/spells.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/thpatch/lang_en/th06/staff01.png
.png
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/thpatch/lang_en/th06/staff02.png
.png
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/thpatch/lang_en/th06/staff03.png
.png
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/thpatch/lang_en/th06/stages.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/thpatch/lang_en/th06/th06logo.jpg
.jpg
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/thpatch/lang_en/th06/ti_bgm.png
.png
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/thpatch/lang_en/th06/ti_bossname.png
.png
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/thpatch/lang_en/th06/ti_bosstitle.png
.png
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/thpatch/lang_en/th06/ti_sttitle.png
.png
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/thpatch/lang_en/th06/title02.png
.png
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/thpatch/lang_en/th06/title03.png
.png
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/thpatch/lang_en/th06/title04.png
.png
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/thpatch/lang_en/th06/title04s.png
.png
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/thpatch/lang_en/themes.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/repos/thpatch/repo.js
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/thcrap_configure.exe
.exe windows:5 windows x86 arch:x86

2625fa29c162d968152215f0a0160339

Code Sign

17:9e:ac:0a:35:7d:c7:a0:41:b7:8a:a5:20:e9:1e:3f
Certificate

Issuer

CN=Bruno Liron,1.2.840.113549.1.9.1=#0c1262726c69726f6e40686f746d61696c2e6672

Not Before

23/10/2015, 14:17

Not After

31/12/2039, 23:59

Subject

CN=Bruno Liron,1.2.840.113549.1.9.1=#0c1262726c69726f6e40686f746d61696c2e6672

Extended Key Usages

ExtKeyUsageCodeSigning

4d:33:12:4d:38:ed:9f:1c:b6:28:36:6a:d9:07:0e:05:37:58:e3:ad
Signer

Actual PE Digest

4d:33:12:4d:38:ed:9f:1c:b6:28:36:6a:d9:07:0e:05:37:58:e3:ad

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

thcrap_configure.pdb

Imports

shlwapi

PathAppendW
PathRemoveFileSpecW

kernel32

HeapReAlloc
CloseHandle
HeapAlloc
LocalFree
FormatMessageW
CreateProcessW
GetModuleHandleW
GetVersionExW
LocalAlloc
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleFileNameW
GetCommandLineW
HeapFree
TerminateProcess
GetLastError
GetProcessHeap
IsProcessorFeaturePresent

user32

UpdateWindow
MsgWaitForMultipleObjects
DestroyWindow
PeekMessageW
TranslateMessage
DispatchMessageW
PostQuitMessage
ShowWindow
CreateWindowExW
GetMonitorInfoW
MonitorFromPoint
RegisterClassExW
LoadCursorW
LoadIconW
DefWindowProcW
EndPaint
BeginPaint
SystemParametersInfoW
MessageBoxW
LoadStringW
GetCursorPos

gdi32

SelectObject
CreateFontIndirectW
TextOutW
DeleteObject

advapi32

RegCloseKey
RegOpenKeyW
RegQueryValueExW

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 812B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Touhou 6 - The Embodiment of Scarlet Devil/thcrap/thcrap_loader.exe
.exe windows:5 windows x86 arch:x86

2625fa29c162d968152215f0a0160339

Code Sign

17:9e:ac:0a:35:7d:c7:a0:41:b7:8a:a5:20:e9:1e:3f
Certificate

Issuer

CN=Bruno Liron,1.2.840.113549.1.9.1=#0c1262726c69726f6e40686f746d61696c2e6672

Not Before

23/10/2015, 14:17

Not After

31/12/2039, 23:59

Subject

CN=Bruno Liron,1.2.840.113549.1.9.1=#0c1262726c69726f6e40686f746d61696c2e6672

Extended Key Usages

ExtKeyUsageCodeSigning

83:9b:58:b3:53:a9:96:be:57:b2:67:32:44:5a:5b:90:e9:09:86:86
Signer

Actual PE Digest

83:9b:58:b3:53:a9:96:be:57:b2:67:32:44:5a:5b:90:e9:09:86:86

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

thcrap_loader.pdb

Imports

shlwapi

PathAppendW
PathRemoveFileSpecW

kernel32

HeapReAlloc
CloseHandle
HeapAlloc
LocalFree
FormatMessageW
CreateProcessW
GetModuleHandleW
GetVersionExW
LocalAlloc
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleFileNameW
GetCommandLineW
HeapFree
TerminateProcess
GetLastError
GetProcessHeap
IsProcessorFeaturePresent

user32

UpdateWindow
MsgWaitForMultipleObjects
DestroyWindow
PeekMessageW
TranslateMessage
DispatchMessageW
PostQuitMessage
ShowWindow
CreateWindowExW
GetMonitorInfoW
MonitorFromPoint
RegisterClassExW
LoadCursorW
LoadIconW
DefWindowProcW
EndPaint
BeginPaint
SystemParametersInfoW
MessageBoxW
LoadStringW
GetCursorPos

gdi32

SelectObject
CreateFontIndirectW
TextOutW
DeleteObject

advapi32

RegCloseKey
RegOpenKeyW
RegQueryValueExW

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 812B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 624B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Touhou 6 - The Embodiment of Scarlet Devil/vpatch.exe
.exe windows:5 windows x86 arch:x86

9bd71fb8aa1025afb33c2fe29003928d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
SetCurrentDirectoryA
FindFirstFileA
FindClose
LoadLibraryA
GetProcAddress
CreateFileA
CloseHandle
GetModuleHandleW
Sleep
ExitProcess
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
WriteFile
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetLocaleInfoA
HeapAlloc
VirtualAlloc
HeapReAlloc
FlushFileBuffers
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW

user32

MessageBoxA

shlwapi

PathRemoveFileSpecA
PathSearchAndQualifyA

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Touhou 6 - The Embodiment of Scarlet Devil/vpatch.ini
Touhou 6 - The Embodiment of Scarlet Devil/vpatch_th06_unicode.dll
.dll windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\MyProjects\VsyncPatch\Release\vpatch_th06.pdb

Exports

Exports

_Initialize@4

Sections

.text
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

shared
Size: 512B - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.NewIT
Size: 512B - Virtual size: 208B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Touhou 6 - The Embodiment of Scarlet Devil/マニュアル/html/bonus.html
.html
Touhou 6 - The Embodiment of Scarlet Devil/マニュアル/html/chara.html
.html
Touhou 6 - The Embodiment of Scarlet Devil/マニュアル/html/controll.html
.html
Touhou 6 - The Embodiment of Scarlet Devil/マニュアル/html/faq.html
.html
Touhou 6 - The Embodiment of Scarlet Devil/マニュアル/html/img00.jpg
.jpg
Touhou 6 - The Embodiment of Scarlet Devil/マニュアル/html/img06.jpg
.jpg
Touhou 6 - The Embodiment of Scarlet Devil/マニュアル/html/item.html
.html
Touhou 6 - The Embodiment of Scarlet Devil/マニュアル/html/menu.html
.html
Touhou 6 - The Embodiment of Scarlet Devil/マニュアル/html/op00.jpg
.jpg
Touhou 6 - The Embodiment of Scarlet Devil/マニュアル/html/op01.jpg
.jpg
Touhou 6 - The Embodiment of Scarlet Devil/マニュアル/html/option.html
.html
Touhou 6 - The Embodiment of Scarlet Devil/マニュアル/html/rule.html
.html
Touhou 6 - The Embodiment of Scarlet Devil/マニュアル/html/select.html
.html
Touhou 6 - The Embodiment of Scarlet Devil/マニュアル/html/sl00.jpg
.jpg
Touhou 6 - The Embodiment of Scarlet Devil/マニュアル/html/sl01.jpg
.jpg
Touhou 6 - The Embodiment of Scarlet Devil/マニュアル/html/sl02.jpg
.jpg
Touhou 6 - The Embodiment of Scarlet Devil/マニュアル/html/sl03.jpg
.jpg
Touhou 6 - The Embodiment of Scarlet Devil/マニュアル/html/story.html
.html
Touhou 6 - The Embodiment of Scarlet Devil/マニュアル/html/subsys.html
.html
Touhou 6 - The Embodiment of Scarlet Devil/マニュアル/html/title.html
.html
Touhou 6 - The Embodiment of Scarlet Devil/マニュアル/html/tl00.jpg
.jpg
Touhou 6 - The Embodiment of Scarlet Devil/マニュアル/html/top.html
.html
Touhou 6 - The Embodiment of Scarlet Devil/マニュアル/html/view.html
.html
Touhou 6 - The Embodiment of Scarlet Devil/マニュアル/index.html
.html
Touhou 6 - The Embodiment of Scarlet Devil/東方紅魔郷.cfg
Touhou 6 - The Embodiment of Scarlet Devil/東方紅魔郷.exe
.exe windows:4 windows x86 arch:x86

17b55a57ba1d7e45de0a854174eb9c8f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

dinput8

DirectInput8Create

dsound

ord11

d3d8

Direct3DCreate8

winmm

mmioSeek
mmioGetInfo
mmioSetInfo
mmioDescend
mmioRead
mmioAscend
mmioOpenA
mmioClose
midiOutUnprepareHeader
timeKillEvent
timeSetEvent
timeGetDevCaps
midiOutShortMsg
midiOutPrepareHeader
midiOutLongMsg
midiOutReset
midiOutClose
midiOutOpen
timeBeginPeriod
timeGetTime
timeEndPeriod
joyGetPosEx
joyGetDevCapsA
midiOutGetNumDevs
mmioAdvance

kernel32

GetOEMCP
GetACP
GetLocaleInfoA
GetCPInfo
GetStringTypeW
GetStringTypeA
InitializeCriticalSection
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcAddress
LoadLibraryA
GetLastError
CreateMutexA
CreateThread
CreateEventA
CloseHandle
WaitForSingleObject
FindClose
FindNextFileA
FindFirstFileA
Sleep
GetFileSize
GetFileTime
SetFilePointer
IsBadReadPtr
DeleteFileA
ReadFile
WriteFile
LocalFree
LocalAlloc
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
HeapFree
GetModuleHandleA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetFileType
GetStdHandle
SetHandleCount
TlsAlloc
TlsGetValue
TlsSetValue
SetLastError
TlsFree
IsBadWritePtr
VirtualAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
VirtualFree
HeapCreate
HeapDestroy
GetModuleFileNameA
GetSystemTimeAsFileTime
IsBadCodePtr
SetStdHandle
FlushFileBuffers
LCMapStringA
LCMapStringW
VirtualProtect
GetSystemInfo
VirtualQuery
SetEndOfFile
CreateFileA
ExitProcess
HeapAlloc
RtlUnwind
RaiseException
GetLocalTime
CreateDirectoryA
SetEnvironmentVariableA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetStartupInfoA
GetCommandLineA
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId

user32

DrawTextW
MsgWaitForMultipleObjects
PostThreadMessageA
KillTimer
SetTimer
SetCursor
DefWindowProcA
LoadCursorA
RegisterClassA
CreateWindowExA
GetSystemMetrics
SystemParametersInfoA
ShowCursor
PeekMessageA
TranslateMessage
DispatchMessageA
ShowWindow
MoveWindow
DestroyWindow
DrawTextA
MessageBoxA
SetKeyboardState
GetKeyboardState
GetWindowLongA

gdi32

SetBkColor
CreateFontIndirectA
GetObjectA
GetStockObject
TextOutA
SetBkMode
SetTextColor
CreateDIBSection
DeleteDC
CreateCompatibleDC
CreateFontA
SelectObject
DeleteObject

Sections

.text
Size: 420KB - Virtual size: 418KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Touhou 6 - The Embodiment of Scarlet Devil/紅魔郷CM.DAT
Touhou 6 - The Embodiment of Scarlet Devil/紅魔郷ED.DAT
Touhou 6 - The Embodiment of Scarlet Devil/紅魔郷IN.DAT
Touhou 6 - The Embodiment of Scarlet Devil/紅魔郷MD.DAT
Touhou 6 - The Embodiment of Scarlet Devil/紅魔郷ST.DAT
Touhou 6 - The Embodiment of Scarlet Devil/紅魔郷ST.DAT.bk
Touhou 6 - The Embodiment of Scarlet Devil/紅魔郷TL.DAT

Sharing

General

Malware Config

Signatures

Files

23539a463cb3d9402ca01bb02af56c7f

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

Sections

.text Size: 6KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 28B

.rdata Size: 1024B - Virtual size: 776B

.bss Size: - Virtual size: 1KB

.idata Size: 1KB - Virtual size: 1KB

.CRT Size: 512B - Virtual size: 52B

.tls Size: 512B - Virtual size: 32B

.rsrc Size: 512B - Virtual size: 456B

23539a463cb3d9402ca01bb02af56c7f

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

Sections

.text Size: 6KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 28B

.rdata Size: 1024B - Virtual size: 764B

.bss Size: - Virtual size: 1KB

.idata Size: 1KB - Virtual size: 1KB

.CRT Size: 512B - Virtual size: 52B

.tls Size: 512B - Virtual size: 32B

.rsrc Size: 3KB - Virtual size: 2KB

ccd8729ea71c40b47caaefa20872fae8

Headers

File Characteristics

PDB Paths

Imports

dinput8

user32

kernel32

Sections

.text Size: 32KB - Virtual size: 31KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 4KB - Virtual size: 7KB

.rsrc Size: 48KB - Virtual size: 47KB

a2a4a1290c0eb5ce6f6a653539baeaa1

Headers

File Characteristics

Imports

d3dx9_43

kernel32

user32

Exports

Exports

Sections

.text Size: 64KB - Virtual size: 61KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 8KB - Virtual size: 333KB

.rsrc Size: 4KB - Virtual size: 984B

.reloc Size: 8KB - Virtual size: 6KB

39848020da6837bde45a16c24f1257a4

Code Sign

17:9e:ac:0a:35:7d:c7:a0:41:b7:8a:a5:20:e9:1e:3fCertificate

Extended Key Usages

dd:b6:88:b1:9b:1b:0c:fe:64:29:1b:55:8d:5f:2b:78:ae:5d:47:d6Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcp140

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

.text
Size: 6KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 28B

.rdata
Size: 1024B - Virtual size: 776B

.bss
Size: - Virtual size: 1KB

.idata
Size: 1KB - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 52B

.tls
Size: 512B - Virtual size: 32B

.rsrc
Size: 512B - Virtual size: 456B

.text
Size: 6KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 28B

.rdata
Size: 1024B - Virtual size: 764B

.bss
Size: - Virtual size: 1KB

.idata
Size: 1KB - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 52B

.tls
Size: 512B - Virtual size: 32B

.rsrc
Size: 3KB - Virtual size: 2KB

.text
Size: 32KB - Virtual size: 31KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 48KB - Virtual size: 47KB

.text
Size: 64KB - Virtual size: 61KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 8KB - Virtual size: 333KB

.rsrc
Size: 4KB - Virtual size: 984B

.reloc
Size: 8KB - Virtual size: 6KB

17:9e:ac:0a:35:7d:c7:a0:41:b7:8a:a5:20:e9:1e:3f
Certificate

dd:b6:88:b1:9b:1b:0c:fe:64:29:1b:55:8d:5f:2b:78:ae:5d:47:d6
Signer

.text
Size: 69KB - Virtual size: 69KB

.rdata
Size: 23KB - Virtual size: 23KB

.data
Size: 2KB - Virtual size: 3KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 6KB - Virtual size: 5KB

17:9e:ac:0a:35:7d:c7:a0:41:b7:8a:a5:20:e9:1e:3f
Certificate

8a:43:b6:26:f4:e7:be:c0:04:d6:fd:cf:fe:0a:04:6b:23:87:64:4f
Signer

.text
Size: 6KB - Virtual size: 5KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 912B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 432B

17:9e:ac:0a:35:7d:c7:a0:41:b7:8a:a5:20:e9:1e:3f
Certificate

70:12:6d:9c:ac:20:53:b7:d3:09:d3:26:8c:14:33:25:6b:fc:21:ad
Signer

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 6KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 1024B - Virtual size: 724B