c:\Projects\Win32\CastleCrashers\Dev\Castle\gamecode\win32\ProjectFiles\Release\CastleWin32.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Castle Crashers.rar
Resource
win10-20240404-en
General
-
Target
Castle Crashers.rar
-
Size
161.4MB
-
MD5
4f16e798b7d157a9adf4bbaa7b4ce607
-
SHA1
1dbbe6b798d6bfaf4ec9ee12b4a40bf2d8357304
-
SHA256
58f30b8bb197dd45e1086c0a1470283b6ae7572c634698b98c42a7be5a56f3a5
-
SHA512
a5192aa3ad394633642d4b378a5e863852ff0b53721ee724f497e9273765d831d18b2e224926a945c47915d678363bfdd11b82cb4c71951eb65fc0346f1a345d
-
SSDEEP
3145728:mpwJkBo75BO1P98tqiB7RoLIG6LEd6EYJ2MkXEzr2JkPrIzgX:XJkM5B8P98oiBUIG6Lw650MXzrBPy2
Malware Config
Signatures
-
Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/castle.exe unpack001/steam_api.dll unpack001/unins000.exe
Files
-
Castle Crashers.rar.rar
-
castle.exe.exe windows:5 windows x86 arch:x86
26bc139c27c68ff6a70e191565b90290
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
d3d9
Direct3DCreate9
d3dx9_43
D3DXCreateTextureFromFileExA
D3DXMatrixOrthoOffCenterLH
steam_api
SteamAPI_Init
SteamAPI_RestartAppIfNecessary
SteamAPI_Shutdown
SteamClient
SteamAPI_UnregisterCallback
SteamUtils
SteamAPI_RegisterCallback
SteamNetworking
SteamApps
SteamUser
SteamFriends
SteamUserStats
SteamAPI_UnregisterCallResult
SteamAPI_RegisterCallResult
SteamRemoteStorage
SteamAPI_RunCallbacks
SteamAPI_SetMiniDumpComment
SteamAPI_WriteMiniDump
SteamMatchmaking
kernel32
SetEndOfFile
WriteConsoleW
SetStdHandle
HeapReAlloc
GetStringTypeW
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
LoadLibraryW
GetConsoleMode
GetConsoleCP
HeapCreate
RtlUnwind
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
IsProcessorFeaturePresent
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetTickCount
GetCurrentProcess
GetProcAddress
GetModuleHandleA
CreateFileA
SetFilePointer
WaitForSingleObject
SetEvent
Sleep
CreateEventA
ReadFile
GetOverlappedResult
GetLastError
CloseHandle
GetUserDefaultLCID
GetFileSize
FlushFileBuffers
GetProcessHeap
GetCurrentThreadId
OutputDebugStringA
QueryPerformanceCounter
QueryPerformanceFrequency
GetLocalTime
ReleaseSemaphore
CreateSemaphoreA
SetThreadPriority
GetModuleFileNameA
IsDebuggerPresent
ResumeThread
CreateThread
LCMapStringW
WideCharToMultiByte
SetLastError
WriteFile
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RaiseException
GetStartupInfoW
HeapSetInformation
GetCommandLineW
ExitProcess
GetModuleHandleW
MultiByteToWideChar
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
EncodePointer
DecodePointer
DeleteCriticalSection
InterlockedDecrement
InterlockedIncrement
LoadLibraryA
CreateFileW
HeapSize
GetModuleFileNameW
GetStdHandle
user32
TranslateMessage
PeekMessageA
DispatchMessageA
SetRect
DestroyWindow
SetCursor
ScreenToClient
PostQuitMessage
SetForegroundWindow
LoadIconA
SetFocus
ShowCursor
GetAsyncKeyState
SetWindowLongA
MessageBoxA
UnregisterClassA
CreateWindowExA
DefWindowProcA
GetDesktopWindow
SetWindowPos
ShowWindow
AdjustWindowRectEx
MessageBoxW
GetSystemMetrics
UpdateWindow
LoadCursorA
ChangeDisplaySettingsA
RegisterClassA
MoveWindow
AdjustWindowRect
gdi32
GetStockObject
ole32
CoInitializeEx
CoCreateInstance
CoUninitialize
Sections
.text Size: 590KB - Virtual size: 589KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 299KB - Virtual size: 298KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 117KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 346KB - Virtual size: 345KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
data/bsps/bsp1.pak.zip
-
BSP1.PDAG.NREC
-
data/bsps/bsp10.pak.zip
-
BSP10.PDAG.NREC
-
data/bsps/bsp11.pak.zip
-
BSP11.PDAG.NREC
-
data/bsps/bsp12.pak.zip
-
BSP12.PDAG.NREC
-
data/bsps/bsp13.pak.zip
-
BSP13.PDAG.NREC
-
data/bsps/bsp14.pak.zip
-
BSP14.PDAG.NREC
-
data/bsps/bsp15.pak.zip
-
BSP15.PDAG.NREC
-
data/bsps/bsp16.pak.zip
-
BSP16.PDAG.NREC
-
data/bsps/bsp17.pak.zip
-
data/bsps/bsp18.pak.zip
-
data/bsps/bsp19.pak.zip
-
data/bsps/bsp2.pak.zip
-
data/bsps/bsp20.pak.zip
-
data/bsps/bsp21.pak.zip
-
data/bsps/bsp22.pak.zip
-
data/bsps/bsp23.pak.zip
-
data/bsps/bsp24a.pak.zip
-
data/bsps/bsp24b.pak.zip
-
data/bsps/bsp24c.pak.zip
-
data/bsps/bsp24d.pak.zip
-
data/bsps/bsp25.pak.zip
-
data/bsps/bsp26.pak.zip
-
data/bsps/bsp27.pak.zip
-
data/bsps/bsp28.pak.zip
-
data/bsps/bsp29.pak.zip
-
data/bsps/bsp3.pak.zip
-
data/bsps/bsp30.pak.zip
-
data/bsps/bsp31.pak.zip
-
data/bsps/bsp32.pak.zip
-
data/bsps/bsp33.pak.zip
-
data/bsps/bsp34.pak.zip
-
data/bsps/bsp35.pak.zip
-
data/bsps/bsp36.pak.zip
-
data/bsps/bsp37.pak.zip
-
data/bsps/bsp38.pak.zip
-
data/bsps/bsp39.pak.zip
-
data/bsps/bsp4.pak.zip
-
data/bsps/bsp40.pak.zip
-
data/bsps/bsp41.pak.zip
-
data/bsps/bsp42.pak.zip
-
data/bsps/bsp43.pak.zip
-
data/bsps/bsp44.pak.zip
-
data/bsps/bsp45.pak.zip
-
data/bsps/bsp46a.pak.zip
-
data/bsps/bsp46b.pak.zip
-
data/bsps/bsp46c.pak.zip
-
data/bsps/bsp46d.pak.zip
-
data/bsps/bsp47a.pak.zip
-
data/bsps/bsp47b.pak.zip
-
data/bsps/bsp47c.pak.zip
-
data/bsps/bsp47d.pak.zip
-
data/bsps/bsp48a.pak.zip
-
data/bsps/bsp48b.pak.zip
-
data/bsps/bsp48c.pak.zip
-
data/bsps/bsp48d.pak.zip
-
data/bsps/bsp49a.pak.zip
-
data/bsps/bsp49b.pak.zip
-
data/bsps/bsp49c.pak.zip
-
data/bsps/bsp49d.pak.zip
-
data/bsps/bsp5.pak.zip
-
data/bsps/bsp50.pak.zip
-
data/bsps/bsp51.pak.zip
-
data/bsps/bsp53.pak.zip
-
data/bsps/bsp54.pak.zip
-
data/bsps/bsp55.pak.zip
-
data/bsps/bsp56.pak.zip
-
data/bsps/bsp57.pak.zip
-
data/bsps/bsp58.pak.zip
-
data/bsps/bsp59.pak.zip
-
data/bsps/bsp6.pak.zip
-
data/bsps/bsp60.pak.zip
-
data/bsps/bsp7.pak.zip
-
data/bsps/bsp8.pak.zip
-
data/bsps/bsp9.pak.zip
-
data/fonts/debugfont14.fnt
-
data/fonts/debugfont14_0.dds
-
data/fonts/synjUnicode_20.fnt
-
data/fonts/synjUnicode_20_0.dds
-
data/game/amenu.pak.zip
-
data/game/animals.pak.zip
-
data/game/attract.pak.zip
-
data/game/chicken.pak.zip
-
data/game/ebarboss.pak.zip
-
data/game/ebat.pak.zip
-
data/game/ebatboss.pak.zip
-
data/game/ebee.pak.zip
-
data/game/ebeetle.pak.zip
-
data/game/ecorn.pak.zip
-
data/game/ecyclops.pak.zip
-
data/game/efish.pak.zip
-
data/game/efrost.pak.zip
-
data/game/eimp.pak.zip
-
data/game/emedusa.pak.zip
-
data/game/ending.pak.zip
-
data/game/ending2.pak.zip
-
data/game/ending3.pak.zip
-
data/game/ending4.pak.zip
-
data/game/ending5.pak.zip
-
data/game/ending6.pak.zip
-
data/game/ending7.pak.zip
-
data/game/ending8.pak.zip
-
data/game/endofdemo.pak.zip
-
data/game/endrank.pak.zip
-
data/game/epainter.pak.zip
-
data/game/escorp.pak.zip
-
data/game/eslime.pak.zip
-
data/game/esnake.pak.zip
-
data/game/etower.pak.zip
-
data/game/etroll.pak.zip
-
data/game/etrollx.pak.zip
-
data/game/eundead.pak.zip
-
data/game/ewarmach.pak.zip
-
data/game/ewizard.pak.zip
-
data/game/fx.pak.zip
-
data/game/horse.pak.zip
-
data/game/legal.pak.zip
-
data/game/loading.pak.zip
-
data/game/logo.pak.zip
-
data/game/main.pak.zip
-
data/game/map.pak.zip
-
data/game/menu.pak.zip
-
data/game/mount2.pak.zip
-
data/game/mount3.pak.zip
-
data/game/mount4.pak.zip
-
data/game/pause.pak.zip
-
data/game/player.pak.zip
-
data/game/presell.pak.zip
-
data/game/quoff.pak.zip
-
data/game/results.pak.zip
-
data/game/select.pak.zip
-
data/game/sky1.pak.zip
-
data/game/sky2.pak.zip
-
data/game/sky3.pak.zip
-
data/game/sky4.pak.zip
-
data/game/sky5.pak.zip
-
data/game/sky6.pak.zip
-
data/game/sounds.pak.zip
-
data/game/test.pak.zip
-
data/game/ufo.pak.zip
-
data/game/ufodust.pak.zip
-
data/game/upsell.pak.zip
-
data/levels/level1.pak.zip
-
data/levels/level10.pak.zip
-
data/levels/level11.pak.zip
-
data/levels/level12.pak.zip
-
data/levels/level13.pak.zip
-
data/levels/level14.pak.zip
-
data/levels/level15.pak.zip
-
data/levels/level16.pak.zip
-
data/levels/level17.pak.zip
-
data/levels/level18.pak.zip
-
data/levels/level19.pak.zip
-
data/levels/level2.pak.zip
-
data/levels/level20.pak.zip
-
data/levels/level21.pak.zip
-
data/levels/level22.pak.zip
-
data/levels/level23.pak.zip
-
data/levels/level24.pak.zip
-
data/levels/level25.pak.zip
-
data/levels/level26.pak.zip
-
data/levels/level27.pak.zip
-
data/levels/level28.pak.zip
-
data/levels/level29.pak.zip
-
data/levels/level3.pak.zip
-
data/levels/level30.pak.zip
-
data/levels/level31.pak.zip
-
data/levels/level32.pak.zip
-
data/levels/level33.pak.zip
-
data/levels/level34.pak.zip
-
data/levels/level35.pak.zip
-
data/levels/level36.pak.zip
-
data/levels/level37.pak.zip
-
data/levels/level38.pak.zip
-
data/levels/level39.pak.zip
-
data/levels/level4.pak.zip
-
data/levels/level40.pak.zip
-
data/levels/level41.pak.zip
-
data/levels/level42.pak.zip
-
data/levels/level43.pak.zip
-
data/levels/level44.pak.zip
-
data/levels/level45.pak.zip
-
data/levels/level46.pak.zip
-
data/levels/level47.pak.zip
-
data/levels/level48.pak.zip
-
data/levels/level49.pak.zip
-
data/levels/level5.pak.zip
-
data/levels/level50.pak.zip
-
data/levels/level51.pak.zip
-
data/levels/level53.pak.zip
-
data/levels/level54.pak.zip
-
data/levels/level55.pak.zip
-
data/levels/level56.pak.zip
-
data/levels/level57.pak.zip
-
data/levels/level58.pak.zip
-
data/levels/level59.pak.zip
-
data/levels/level6.pak.zip
-
data/levels/level60.pak.zip
-
data/levels/level7.pak.zip
-
data/levels/level8.pak.zip
-
data/levels/level9.pak.zip
-
data/music/006_FLOODED_CASTLE_INTRO.xma
-
data/music/007_FLOODED_CASTLE.xma
-
data/music/008_THE_RUINS.xma
-
data/music/011_SAND_CASTLE.xma
-
data/music/012_SAND.xma
-
data/music/013_ALIEN_SHIP.xma
-
data/music/015_CORN_BOSS.xma
-
data/music/017_BLACK_KNIGHT_INTRO.xma
-
data/music/018_BLACK_KNIGHT.xma
-
data/music/020_CREEPY_FROG.xma
-
data/music/DRUMLIFT.xma
-
data/music/DRUMLIFT_V2.xma
-
data/music/DavidOrr_FinalBoss.xma
-
data/music/FLUTEY.xma
-
data/music/INTRO.xma
-
data/music/MACHINER.xma
-
data/music/MEDUSA.xma
-
data/music/MUDHOLES.xma
-
data/music/NG105334.xma
-
data/music/NG112527.xma
-
data/music/NG117474.xma
-
data/music/NG120136.xma
-
data/music/NG123607.xma
-
data/music/NG21749.xma
-
data/music/NG36657.xma
-
data/music/NG37040.xma
-
data/music/NG57239.xma
-
data/music/NG64061.xma
-
data/music/NG70107.xma
-
data/music/NG86480.xma
-
data/music/NG90433.xma
-
data/music/NG90521.xma
-
data/music/NG90532.xma
-
data/music/NG91286.xma
-
data/music/WEAPONFROG.xma
-
data/music/Waterflame_Jumper.xma
-
data/music/Waterflame_RaceVictory.xma
-
data/music/Waterflame_Swamp.xma
-
data/music/Waterflame_TheShow.xma
-
data/music/barrackssong.xma
-
data/music/goldgrab.xma
-
data/music/trickyssong.xma
-
data/music/wedding1.xma
-
data/music/wedding2.xma
-
data/shaders/BlacknWhitePS.xpu
-
data/shaders/BloomPS.xpu
-
data/shaders/BlurPS.xpu
-
data/shaders/ExperimentPS.xpu
-
data/shaders/FontPS.xpu
-
data/shaders/GenericVS.xvu
-
data/shaders/GreyscalePS.xpu
-
data/shaders/HeatPS.xpu
-
data/shaders/InvertedPS.xpu
-
data/shaders/MaskPS.xpu
-
data/shaders/OutlinePS.xpu
-
data/shaders/OverlayVS.xvu
-
data/shaders/RasterHackPS.xpu
-
data/shaders/SobelEdgePS.xpu
-
data/shaders/SpritePS.xpu
-
data/shaders/VertexColorFillPS.xpu
-
data/shaders/WaterPS.xpu
-
data/sounds/sound_alarm.xma
-
data/sounds/sound_alarm2.xma
-
data/sounds/sound_alienshoot1.xma
-
data/sounds/sound_alienshoot2.xma
-
data/sounds/sound_animalstep1.xma
-
data/sounds/sound_animalstep2.xma
-
data/sounds/sound_antliondie.xma
-
data/sounds/sound_area_barb.xma
-
data/sounds/sound_area_barb1.xma
-
data/sounds/sound_area_barb2.xma
-
data/sounds/sound_area_barb3.xma
-
data/sounds/sound_area_barb4.xma
-
data/sounds/sound_area_dark.xma
-
data/sounds/sound_area_earth.xma
-
data/sounds/sound_area_fire.xma
-
data/sounds/sound_area_ice.xma
-
data/sounds/sound_area_king.xma
-
data/sounds/sound_area_lightning.xma
-
data/sounds/sound_area_necro.xma
-
data/sounds/sound_area_ninja.xma
-
data/sounds/sound_area_poison.xma
-
data/sounds/sound_area_sawblade.xma
-
data/sounds/sound_area_thief.xma
-
data/sounds/sound_area_wind.xma
-
data/sounds/sound_arrowhit.xma
-
data/sounds/sound_arrowhit1.xma
-
data/sounds/sound_arrowhit2.xma
-
data/sounds/sound_arrowhit3.xma
-
data/sounds/sound_arrowhit4.xma
-
data/sounds/sound_arrowshoot.xma
-
data/sounds/sound_arrowshot.xma
-
data/sounds/sound_batattack1.xma
-
data/sounds/sound_batattack2.xma
-
data/sounds/sound_batdeath2.xma
-
data/sounds/sound_batdeath3.xma
-
data/sounds/sound_batflap.xma
-
data/sounds/sound_batflapper.xma
-
data/sounds/sound_bats.xma
-
data/sounds/sound_batslurp.xma
-
data/sounds/sound_bee.xma
-
data/sounds/sound_bee_impact.xma
-
data/sounds/sound_beefydoorgrab.xma
-
data/sounds/sound_beefydoorrip.xma
-
data/sounds/sound_beefyscream.xma
-
data/sounds/sound_beefystep1.xma
-
data/sounds/sound_beefystep2.xma
-
data/sounds/sound_beetledie.xma
-
data/sounds/sound_beetledig.xma
-
data/sounds/sound_beetlefly.xma
-
data/sounds/sound_beetlelift.xma
-
data/sounds/sound_beetleroll.xma
-
data/sounds/sound_bigexplosion1.xma
-
data/sounds/sound_bigexplosion2.xma
-
data/sounds/sound_bigufo.xma
-
data/sounds/sound_blacksmith.xma
-
data/sounds/sound_bloopy_gurgle.xma
-
data/sounds/sound_bloopy_turn.xma
-
data/sounds/sound_bodyfall1.xma
-
data/sounds/sound_bodyfall2.xma
-
data/sounds/sound_bodyfall3.xma
-
data/sounds/sound_bodyfall4.xma
-
data/sounds/sound_bodyfall5.xma
-
data/sounds/sound_bodyfall6.xma
-
data/sounds/sound_bone.xma
-
data/sounds/sound_boneexplode.xma
-
data/sounds/sound_bonus2.xma
-
data/sounds/sound_bubble1.xma
-
data/sounds/sound_bubble2.xma
-
data/sounds/sound_bubble3.xma
-
data/sounds/sound_bubble4.xma
-
data/sounds/sound_bubble5.xma
-
data/sounds/sound_castlelift.xma
-
data/sounds/sound_catburp.xma
-
data/sounds/sound_catdie.xma
-
data/sounds/sound_catgrowl.xma
-
data/sounds/sound_cathairball.xma
-
data/sounds/sound_cavedrip.xma
-
data/sounds/sound_characterunlock.xma
-
data/sounds/sound_chestland.xma
-
data/sounds/sound_clang1.xma
-
data/sounds/sound_clang2.xma
-
data/sounds/sound_clang3.xma
-
data/sounds/sound_clang4.xma
-
data/sounds/sound_clang5.xma
-
data/sounds/sound_clang6.xma
-
data/sounds/sound_clang7.xma
-
data/sounds/sound_clang8.xma
-
data/sounds/sound_cling1.xma
-
data/sounds/sound_cling2.xma
-
data/sounds/sound_cling3.xma
-
data/sounds/sound_cling4.xma
-
data/sounds/sound_cling5.xma
-
data/sounds/sound_cling6.xma
-
data/sounds/sound_cling7.xma
-
data/sounds/sound_cling8.xma
-
data/sounds/sound_clock.xma
-
data/sounds/sound_clownhorn.xma
-
data/sounds/sound_coffin_open.xma
-
data/sounds/sound_coffinshut.xma
-
data/sounds/sound_coin1.xma
-
data/sounds/sound_coin2.xma
-
data/sounds/sound_corn_die.xma
-
data/sounds/sound_cornbag.xma
-
data/sounds/sound_cornroar.xma
-
data/sounds/sound_cornwhip.xma
-
data/sounds/sound_crow.xma
-
data/sounds/sound_crowflap.xma
-
data/sounds/sound_cryptslide.xma
-
data/sounds/sound_cutgrass.xma
-
data/sounds/sound_cyclopscry.xma
-
data/sounds/sound_cyclopsdie.xma
-
data/sounds/sound_cyclopsflush.xma
-
data/sounds/sound_cyclopsgasp.xma
-
data/sounds/sound_cyclopshit.xma
-
data/sounds/sound_cyclopsknife.xma
-
data/sounds/sound_cyclopslavadie.xma
-
data/sounds/sound_cyclopsscream.xma
-
data/sounds/sound_cyclopsskid.xma
-
data/sounds/sound_cyclopssplash.xma
-
data/sounds/sound_cyclopsstep3.xma
-
data/sounds/sound_cyclopsstep4.xma
-
data/sounds/sound_cyclopsthrowknife.xma
-
data/sounds/sound_darkfly.xma
-
data/sounds/sound_darkforce.xma
-
data/sounds/sound_darkjet.xma
-
data/sounds/sound_darkmagic1.xma
-
data/sounds/sound_dead_puff.xma
-
data/sounds/sound_deerjump.xma
-
data/sounds/sound_dragonblast.xma
-
data/sounds/sound_dragonloop.xma
-
data/sounds/sound_dramatic.xma
-
data/sounds/sound_dramatic2.xma
-
data/sounds/sound_eat.xma
-
data/sounds/sound_eat1.xma
-
data/sounds/sound_elevator1.xma
-
data/sounds/sound_elevator2.xma
-
data/sounds/sound_elevator3.xma
-
data/sounds/sound_elevatorend.xma
-
data/sounds/sound_elevatorloop.xma
-
data/sounds/sound_elevatorstart.xma
-
data/sounds/sound_emotoad_attack1.xma
-
data/sounds/sound_emotoad_attack2.xma
-
data/sounds/sound_emotoad_attack3.xma
-
data/sounds/sound_emotoad_blah1.xma
-
data/sounds/sound_emotoad_blah2.xma
-
data/sounds/sound_emotoad_die1.xma
-
data/sounds/sound_emotoad_die2.xma
-
data/sounds/sound_explosion_1.xma
-
data/sounds/sound_explosion_3.xma
-
data/sounds/sound_explosionfar.xma
-
data/sounds/sound_fart1.xma
-
data/sounds/sound_fart2.xma
-
data/sounds/sound_fireblast.xma
-
data/sounds/sound_firehit.xma
-
data/sounds/sound_fireloop.xma
-
data/sounds/sound_firemagic.xma
-
data/sounds/sound_fishbubble.xma
-
data/sounds/sound_fishpuff.xma
-
data/sounds/sound_frost_crackle.xma
-
data/sounds/sound_frost_crunch.xma
-
data/sounds/sound_frost_die.xma
-
data/sounds/sound_frost_ice.xma
-
data/sounds/sound_frost_icepop.xma
-
data/sounds/sound_frost_laugh.xma
-
data/sounds/sound_frost_orb.xma
-
data/sounds/sound_frost_orbcharge.xma
-
data/sounds/sound_frost_warpin.xma
-
data/sounds/sound_frost_warpout.xma
-
data/sounds/sound_frost_woo.xma
-
data/sounds/sound_gatorchomp.xma
-
data/sounds/sound_gemappear.xma
-
data/sounds/sound_gemblink.xma
-
data/sounds/sound_gemdie.xma
-
data/sounds/sound_gemhitground.xma
-
data/sounds/sound_gemlight1.xma
-
data/sounds/sound_gemlight2.xma
-
data/sounds/sound_gemrush.xma
-
data/sounds/sound_gemshatter.xma
-
data/sounds/sound_gemspin.xma
-
data/sounds/sound_glass1.xma
-
data/sounds/sound_glass2.xma
-
data/sounds/sound_hatchslide.xma
-
data/sounds/sound_hatty_jump_magic.xma
-
data/sounds/sound_hatty_projectile_magic1.xma
-
data/sounds/sound_hatty_projectile_magic2.xma
-
data/sounds/sound_hatty_projectile_magic2_impact.xma
-
data/sounds/sound_hatty_splash_magic.xma
-
data/sounds/sound_heartbeat.xma
-
data/sounds/sound_horn1.xma
-
data/sounds/sound_horn2.xma
-
data/sounds/sound_horn3.xma
-
data/sounds/sound_horn4.xma
-
data/sounds/sound_horndoor.xma
-
data/sounds/sound_horndoorend.xma
-
data/sounds/sound_horses.xma
-
data/sounds/sound_iking_cocky.xma
-
data/sounds/sound_iking_ha1.xma
-
data/sounds/sound_iking_nyah.xma
-
data/sounds/sound_iking_panic.xma
-
data/sounds/sound_iking_panic2.xma
-
data/sounds/sound_ikingboss_devious.xma
-
data/sounds/sound_ikingboss_die.xma
-
data/sounds/sound_ikingboss_haha.xma
-
data/sounds/sound_ikingboss_intro.xma
-
data/sounds/sound_ikingboss_panic.xma
-
data/sounds/sound_imp_growl.xma
-
data/sounds/sound_imp_laugh.xma
-
data/sounds/sound_imp_panic.xma
-
data/sounds/sound_intro_controller.xma
-
data/sounds/sound_jump_barb.xma
-
data/sounds/sound_jump_dark.xma
-
data/sounds/sound_jump_earth.xma
-
data/sounds/sound_jump_fire.xma
-
data/sounds/sound_jump_ice.xma
-
data/sounds/sound_jump_industrial.xma
-
data/sounds/sound_jump_king.xma
-
data/sounds/sound_jump_lightning.xma
-
data/sounds/sound_jump_necro.xma
-
data/sounds/sound_jump_ninja.xma
-
data/sounds/sound_jump_poison.xma
-
data/sounds/sound_jump_saracen.xma
-
data/sounds/sound_jump_thief.xma
-
data/sounds/sound_jump_wind.xma
-
data/sounds/sound_lasergate.xma
-
data/sounds/sound_lavawall.xma
-
data/sounds/sound_levelup.xma
-
data/sounds/sound_lunchbox1.xma
-
data/sounds/sound_lunchbox2.xma
-
data/sounds/sound_lunchbox3.xma
-
data/sounds/sound_lunchbox4.xma
-
data/sounds/sound_lunchbox5.xma
-
data/sounds/sound_lunchbox6.xma
-
data/sounds/sound_lunchbox7.xma
-
data/sounds/sound_lunchbox8.xma
-
data/sounds/sound_lunchbox_drop.xma
-
data/sounds/sound_magic_barb.xma
-
data/sounds/sound_magic_bee.xma
-
data/sounds/sound_magic_dark.xma
-
data/sounds/sound_magic_earth.xma
-
data/sounds/sound_magic_fire.xma
-
data/sounds/sound_magic_ice.xma
-
data/sounds/sound_magic_king.xma
-
data/sounds/sound_magic_lightning.xma
-
data/sounds/sound_magic_necro.xma
-
data/sounds/sound_magic_ninja.xma
-
data/sounds/sound_magic_poison.xma
-
data/sounds/sound_magic_poison_hit.xma
-
data/sounds/sound_magic_saracen.xma
-
data/sounds/sound_magic_sawblade.xma
-
data/sounds/sound_magic_thief.xma
-
data/sounds/sound_magic_wind.xma
-
data/sounds/sound_magicboom5.xma
-
data/sounds/sound_magicboom6.xma
-
data/sounds/sound_magicwall.xma
-
data/sounds/sound_meatypunch4.xma
-
data/sounds/sound_meatypunch5.xma
-
data/sounds/sound_meatypunch6.xma
-
data/sounds/sound_meatypunch7.xma
-
data/sounds/sound_meatypunch8.xma
-
data/sounds/sound_meatypunch9.xma
-
data/sounds/sound_medusa_gasp.xma
-
data/sounds/sound_medusa_sing.xma
-
data/sounds/sound_medusabrush1.xma
-
data/sounds/sound_medusabrush2.xma
-
data/sounds/sound_medusadie.xma
-
data/sounds/sound_medusagaze2.xma
-
data/sounds/sound_medusagaze5.xma
-
data/sounds/sound_medusahit1.xma
-
data/sounds/sound_medusahit3.xma
-
data/sounds/sound_medusapunch.xma
-
data/sounds/sound_medusastare.xma
-
data/sounds/sound_medusayell.xma
-
data/sounds/sound_millmonster.xma
-
data/sounds/sound_millmonster2.xma
-
data/sounds/sound_minivolcano.xma
-
data/sounds/sound_minivolcanodie.xma
-
data/sounds/sound_minivolcanohit.xma
-
data/sounds/sound_necro_die.xma
-
data/sounds/sound_necrowingdown.xma
-
data/sounds/sound_necrowingup.xma
-
data/sounds/sound_necrozap.xma
-
data/sounds/sound_normalexplosion1.xma
-
data/sounds/sound_normalexplosion2.xma
-
data/sounds/sound_normalexplosion3.xma
-
data/sounds/sound_organ1.xma
-
data/sounds/sound_organ2.xma
-
data/sounds/sound_organ3.xma
-
data/sounds/sound_organ4.xma
-
data/sounds/sound_organ5.xma
-
data/sounds/sound_organ6.xma
-
data/sounds/sound_organ7.xma
-
data/sounds/sound_organ8.xma
-
data/sounds/sound_organdead1.xma
-
data/sounds/sound_organdead2.xma
-
data/sounds/sound_organdead3.xma
-
data/sounds/sound_organdead4.xma
-
data/sounds/sound_paintcrazy.xma
-
data/sounds/sound_paintstroke.xma
-
data/sounds/sound_photon.xma
-
data/sounds/sound_photonhit.xma
-
data/sounds/sound_pig1.xma
-
data/sounds/sound_pig2.xma
-
data/sounds/sound_pink_knight_jump_magic.xma
-
data/sounds/sound_pink_knight_projectile_magic.xma
-
data/sounds/sound_pink_knight_splash_magic.xma
-
data/sounds/sound_player_select.xma
-
data/sounds/sound_pnk_knight_proj_mag_impact.xma
-
data/sounds/sound_popcorn.xma
-
data/sounds/sound_princess_gasp.xma
-
data/sounds/sound_princess_help1.xma
-
data/sounds/sound_princess_help2.xma
-
data/sounds/sound_princess_helpme1.xma
-
data/sounds/sound_princess_helpme2.xma
-
data/sounds/sound_princess_scream1.xma
-
data/sounds/sound_princess_scream2.xma
-
data/sounds/sound_princess_scream3.xma
-
data/sounds/sound_puke.xma
-
data/sounds/sound_purchase.xma
-
data/sounds/sound_purple_knight_jump_magic.xma
-
data/sounds/sound_purple_knight_projectile_magic.xma
-
data/sounds/sound_purple_knight_splash_magic.xma
-
data/sounds/sound_quaff_bell.xma
-
data/sounds/sound_quaff_count.xma
-
data/sounds/sound_quaff_eat1.xma
-
data/sounds/sound_quaff_eat2.xma
-
data/sounds/sound_quaff_eat3.xma
-
data/sounds/sound_quaff_eat4.xma
-
data/sounds/sound_quaff_go.xma
-
data/sounds/sound_quaff_plate1.xma
-
data/sounds/sound_quaff_plate2.xma
-
data/sounds/sound_quaff_plate3.xma
-
data/sounds/sound_quaff_plate4.xma
-
data/sounds/sound_quaff_win.xma
-
data/sounds/sound_roar2.xma
-
data/sounds/sound_rocksmash1.xma
-
data/sounds/sound_rocksmash2.xma
-
data/sounds/sound_scoretally.xma
-
data/sounds/sound_scorpiondie.xma
-
data/sounds/sound_screen.xma
-
data/sounds/sound_shield1.xma
-
data/sounds/sound_shield2.xma
-
data/sounds/sound_shield3.xma
-
data/sounds/sound_shield4.xma
-
data/sounds/sound_skeletonrise.xma
-
data/sounds/sound_slime_hit1.xma
-
data/sounds/sound_slime_hit2.xma
-
data/sounds/sound_slime_hit3.xma
-
data/sounds/sound_slime_jump1.xma
-
data/sounds/sound_slime_jump2.xma
-
data/sounds/sound_slime_jump3.xma
-
data/sounds/sound_slimeface.xma
-
data/sounds/sound_slimeland.xma
-
data/sounds/sound_spiderclicks.xma
-
data/sounds/sound_spikes.xma
-
data/sounds/sound_splash1.xma
-
data/sounds/sound_splash2.xma
-
data/sounds/sound_splashout.xma
-
data/sounds/sound_steam.xma
-
data/sounds/sound_storm.xma
-
data/sounds/sound_swinger1.xma
-
data/sounds/sound_swinger2.xma
-
data/sounds/sound_swinger3.xma
-
data/sounds/sound_swinger4.xma
-
data/sounds/sound_swinger5.xma
-
data/sounds/sound_swinger6.xma
-
data/sounds/sound_thronecry.xma
-
data/sounds/sound_thunder.xma
-
data/sounds/sound_thunderp.xma
-
data/sounds/sound_timerclick.xma
-
data/sounds/sound_toggle_b.xma
-
data/sounds/sound_tornadoloop.xma
-
data/sounds/sound_treerustle.xma
-
data/sounds/sound_trollbirth.xma
-
data/sounds/sound_trolldie.xma
-
data/sounds/sound_trolllazer.xma
-
data/sounds/sound_twirl.xma
-
data/sounds/sound_ufoengine.xma
-
data/sounds/sound_ufofly.xma
-
data/sounds/sound_ufointro.xma
-
data/sounds/sound_undeadintro.xma
-
data/sounds/sound_volleyball.xma
-
data/sounds/sound_volleyfail.xma
-
data/sounds/sound_wind.xma
-
data/sounds/sound_wizard_die.xma
-
data/sounds/sound_wizard_fall.xma
-
data/sounds/sound_wizard_sword.xma
-
data/sounds/sound_zap.xma
-
directx/APR2007_XACT_x64.cab.cab .ps1 polyglot
-
directx/APR2007_XACT_x86.cab.cab
-
directx/APR2007_d3dx10_33_x64.cab.cab
-
directx/APR2007_d3dx10_33_x86.cab.cab
-
directx/APR2007_d3dx9_33_x64.cab.cab
-
directx/APR2007_d3dx9_33_x86.cab.cab
-
directx/APR2007_xinput_x64.cab.cab
-
directx/APR2007_xinput_x86.cab.cab
-
directx/AUG2006_XACT_x64.cab.cab
-
directx/AUG2006_XACT_x86.cab.cab
-
directx/AUG2006_xinput_x64.cab.cab
-
directx/AUG2006_xinput_x86.cab.cab
-
directx/AUG2007_XACT_x64.cab.cab
-
directx/AUG2007_XACT_x86.cab.cab
-
directx/AUG2007_d3dx10_35_x64.cab.cab
-
directx/AUG2007_d3dx10_35_x86.cab.cab
-
directx/AUG2007_d3dx9_35_x64.cab.cab
-
directx/AUG2007_d3dx9_35_x86.cab.cab
-
directx/Apr2005_d3dx9_25_x64.cab.cab
-
directx/Apr2005_d3dx9_25_x86.cab.cab
-
directx/Apr2006_MDX1_x86.cab.cab
-
directx/Apr2006_MDX1_x86_Archive.cab.cab
-
directx/Apr2006_XACT_x64.cab.cab
-
directx/Apr2006_XACT_x86.cab.cab
-
directx/Apr2006_d3dx9_30_x64.cab.cab
-
directx/Apr2006_d3dx9_30_x86.cab.cab
-
directx/Apr2006_xinput_x64.cab.cab
-
directx/Apr2006_xinput_x86.cab.cab
-
directx/Aug2005_d3dx9_27_x64.cab.cab
-
directx/Aug2005_d3dx9_27_x86.cab.cab
-
directx/Aug2008_XACT_x64.cab.cab
-
directx/Aug2008_XACT_x86.cab.cab
-
directx/Aug2008_XAudio_x64.cab.cab
-
directx/Aug2008_XAudio_x86.cab.cab
-
directx/Aug2008_d3dx10_39_x64.cab.cab
-
directx/Aug2008_d3dx10_39_x86.cab.cab
-
directx/Aug2008_d3dx9_39_x64.cab.cab
-
directx/Aug2008_d3dx9_39_x86.cab.cab
-
directx/Aug2009_D3DCompiler_42_x64.cab.cab
-
directx/Aug2009_D3DCompiler_42_x86.cab.cab
-
directx/Aug2009_XACT_x64.cab.cab
-
directx/Aug2009_XACT_x86.cab.cab
-
directx/Aug2009_XAudio_x64.cab.cab
-
directx/Aug2009_XAudio_x86.cab.cab
-
directx/Aug2009_d3dcsx_42_x64.cab.cab
-
directx/Aug2009_d3dcsx_42_x86.cab.cab
-
directx/Aug2009_d3dx10_42_x64.cab.cab
-
directx/Aug2009_d3dx10_42_x86.cab.cab
-
directx/Aug2009_d3dx11_42_x64.cab.cab
-
directx/Aug2009_d3dx11_42_x86.cab.cab
-
directx/Aug2009_d3dx9_42_x64.cab.cab
-
directx/Aug2009_d3dx9_42_x86.cab.cab
-
directx/BDANT.cab.cab
-
directx/BDAXP.cab.cab
-
directx/DEC2006_XACT_x64.cab.cab
-
directx/DEC2006_XACT_x86.cab.cab
-
directx/DEC2006_d3dx10_00_x64.cab.cab
-
directx/DEC2006_d3dx10_00_x86.cab.cab
-
directx/DEC2006_d3dx9_32_x64.cab.cab
-
directx/DEC2006_d3dx9_32_x86.cab.cab
-
directx/DSETUP.dll.dll windows:6 windows x86 arch:x86
5ee93a27b334994f92812e79a2fb75bd
Code Sign
2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before22/08/2007, 22:31Not After25/08/2012, 07:00SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:01:cf:3e:00:00:00:00:00:0fCertificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before07/12/2009, 22:40Not After07/03/2011, 22:40SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before16/09/2006, 01:04Not After15/09/2019, 07:00SubjectCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:05:a2:30:00:00:00:00:00:08Certificate
IssuerCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before25/07/2008, 19:01Not After25/07/2013, 19:11SubjectCN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
e7:2c:0e:bb:86:1f:cb:57:4e:97:97:44:28:c3:0a:2d:07:1d:2d:27Signer
Actual PE Digeste7:2c:0e:bb:86:1f:cb:57:4e:97:97:44:28:c3:0a:2d:07:1d:2d:27Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
DSETUP.pdb
Imports
kernel32
LocalFree
LocalAlloc
lstrcmpA
WideCharToMultiByte
GetSystemDefaultLCID
GetModuleFileNameA
SetLastError
MultiByteToWideChar
lstrlenA
lstrlenW
CompareStringA
CreateDirectoryA
GetWindowsDirectoryA
FormatMessageA
GetCurrentThreadId
DecodePointer
GetCommandLineA
HeapFree
HeapAlloc
HeapReAlloc
GetLocalTime
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
InterlockedDecrement
Sleep
ExitProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentDirectoryA
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
WriteFile
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryW
SetFilePointer
GetConsoleCP
GetConsoleMode
SetStdHandle
FlushFileBuffers
CreateFileA
LCMapStringW
GetStringTypeW
HeapSize
WriteConsoleW
SetEndOfFile
GetProcessHeap
ReadFile
CreateFileW
GetSystemDirectoryA
SetCurrentDirectoryA
GetVersionExA
LoadLibraryA
GetProcAddress
OutputDebugStringA
CreateMutexA
GetLastError
CloseHandle
HeapCreate
FreeLibrary
user32
GetKeyboardType
DestroyWindow
SetFocus
CreateDialogParamA
SetDlgItemTextA
MessageBoxA
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
advapi32
RegCloseKey
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegCreateKeyExA
RegSetValueExW
RegCreateKeyExW
RegQueryValueExA
winmm
mmioRead
mmioDescend
mmioClose
mmioOpenA
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
ole32
StringFromGUID2
Exports
Exports
DirectXDeviceDriverSetupA
DirectXDeviceDriverSetupW
DirectXLoadString
DirectXRegisterApplicationA
DirectXRegisterApplicationW
DirectXSetupA
DirectXSetupCallback
DirectXSetupGetEULAA
DirectXSetupGetEULAW
DirectXSetupGetFileVersion
DirectXSetupGetVersion
DirectXSetupIsEng
DirectXSetupIsJapan
DirectXSetupIsJapanNec
DirectXSetupSetCallback
DirectXSetupShowEULA
DirectXSetupW
DirectXUnRegisterApplication
Sections
.text Size: 70KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
directx/DXSETUP.exe.exe windows:6 windows x86 arch:x86
9f601d1261adacd540476661fd007bc3
Code Sign
2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before22/08/2007, 22:31Not After25/08/2012, 07:00SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:01:cf:3e:00:00:00:00:00:0fCertificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before07/12/2009, 22:40Not After07/03/2011, 22:40SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before16/09/2006, 01:04Not After15/09/2019, 07:00SubjectCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:05:a2:30:00:00:00:00:00:08Certificate
IssuerCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before25/07/2008, 19:01Not After25/07/2013, 19:11SubjectCN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
b1:da:04:49:85:85:98:e8:94:a8:22:25:b7:5b:70:bb:f9:f9:02:96Signer
Actual PE Digestb1:da:04:49:85:85:98:e8:94:a8:22:25:b7:5b:70:bb:f9:f9:02:96Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
DXSETUP.pdb
Imports
advapi32
RegCloseKey
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
kernel32
FindClose
FindFirstFileA
lstrlenA
ReadFile
GetFileSize
CreateFileA
GetCurrentDirectoryA
GetCurrentProcess
GetModuleFileNameA
SetErrorMode
CreateMutexA
GetModuleHandleA
CreateThread
GetSystemDirectoryA
CloseHandle
GetVersionExA
LoadLibraryA
GetProcAddress
GetWindowsDirectoryA
FreeLibrary
CompareStringA
FormatMessageA
lstrcmpiA
GetProcessHeap
SetEndOfFile
WriteConsoleW
HeapReAlloc
GetStringTypeW
HeapSize
FlushFileBuffers
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
Sleep
LoadLibraryW
MultiByteToWideChar
LCMapStringW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
IsProcessorFeaturePresent
RaiseException
HeapAlloc
RtlUnwind
CreateFileW
LeaveCriticalSection
EnterCriticalSection
OutputDebugStringA
CreateDirectoryA
GetLastError
LocalFree
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetLocalTime
SetUnhandledExceptionFilter
GetModuleHandleW
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
HeapFree
gdi32
CreateCompatibleDC
GetObjectA
StretchBlt
DeleteDC
SelectObject
CreateFontIndirectA
DeleteObject
GetDeviceCaps
user32
ReleaseDC
GetDC
LoadImageA
SystemParametersInfoA
SendDlgItemMessageA
SetWindowTextA
GetWindowLongA
SetWindowLongA
PostMessageA
GetParent
SetDlgItemTextA
GetDlgItem
SendMessageA
ShowWindow
GetAsyncKeyState
ExitWindowsEx
EnumWindows
CharLowerA
LoadStringA
MessageBoxA
GetWindowTextA
GetClassNameA
SetForegroundWindow
SetFocus
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
comctl32
CreatePropertySheetPageA
PropertySheetA
ord17
Sections
.text Size: 71KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 436KB - Virtual size: 435KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
directx/Dec2005_d3dx9_28_x64.cab.cab
-
directx/Dec2005_d3dx9_28_x86.cab.cab
-
directx/FEB2007_XACT_x64.cab.cab
-
directx/FEB2007_XACT_x86.cab.cab
-
directx/Feb2005_d3dx9_24_x64.cab.cab
-
directx/Feb2005_d3dx9_24_x86.cab.cab
-
directx/Feb2006_XACT_x64.cab.cab
-
directx/Feb2006_XACT_x86.cab.cab
-
directx/Feb2006_d3dx9_29_x64.cab.cab
-
directx/Feb2006_d3dx9_29_x86.cab.cab
-
directx/Feb2010_X3DAudio_x64.cab.cab
-
directx/Feb2010_X3DAudio_x86.cab.cab
-
directx/Feb2010_XACT_x64.cab.cab
-
directx/Feb2010_XACT_x86.cab.cab
-
directx/Feb2010_XAudio_x64.cab.cab
-
directx/Feb2010_XAudio_x86.cab.cab
-
directx/JUN2006_XACT_x64.cab.cab
-
directx/JUN2006_XACT_x86.cab.cab
-
directx/JUN2007_XACT_x64.cab.cab
-
directx/JUN2007_XACT_x86.cab.cab
-
directx/JUN2007_d3dx10_34_x64.cab.cab
-
directx/JUN2007_d3dx10_34_x86.cab.cab
-
directx/JUN2007_d3dx9_34_x64.cab.cab
-
directx/JUN2007_d3dx9_34_x86.cab.cab
-
directx/JUN2008_X3DAudio_x64.cab.cab
-
directx/JUN2008_X3DAudio_x86.cab.cab
-
directx/JUN2008_XACT_x64.cab.cab
-
directx/JUN2008_XACT_x86.cab.cab
-
directx/JUN2008_XAudio_x64.cab.cab
-
directx/JUN2008_XAudio_x86.cab.cab
-
directx/JUN2008_d3dx10_38_x64.cab.cab
-
directx/JUN2008_d3dx10_38_x86.cab.cab
-
directx/JUN2008_d3dx9_38_x64.cab.cab
-
directx/JUN2008_d3dx9_38_x86.cab.cab
-
directx/Jun2005_d3dx9_26_x64.cab.cab
-
directx/Jun2005_d3dx9_26_x86.cab.cab
-
directx/Jun2010_D3DCompiler_43_x64.cab.cab
-
directx/Jun2010_D3DCompiler_43_x86.cab.cab
-
directx/Jun2010_XACT_x64.cab.cab
-
directx/Jun2010_XACT_x86.cab.cab
-
directx/Jun2010_XAudio_x64.cab.cab
-
directx/Jun2010_XAudio_x86.cab.cab
-
directx/Jun2010_d3dcsx_43_x64.cab.cab
-
directx/Jun2010_d3dcsx_43_x86.cab.cab
-
directx/Jun2010_d3dx10_43_x64.cab.cab
-
directx/Jun2010_d3dx10_43_x86.cab.cab
-
directx/Jun2010_d3dx11_43_x64.cab.cab
-
directx/Jun2010_d3dx11_43_x86.cab.cab
-
directx/Jun2010_d3dx9_43_x64.cab.cab
-
directx/Jun2010_d3dx9_43_x86.cab.cab
-
directx/Mar2008_X3DAudio_x64.cab.cab
-
directx/Mar2008_X3DAudio_x86.cab.cab
-
directx/Mar2008_XACT_x64.cab.cab
-
directx/Mar2008_XACT_x86.cab.cab
-
directx/Mar2008_XAudio_x64.cab.cab
-
directx/Mar2008_XAudio_x86.cab.cab
-
directx/Mar2008_d3dx10_37_x64.cab.cab
-
directx/Mar2008_d3dx10_37_x86.cab.cab
-
directx/Mar2008_d3dx9_37_x64.cab.cab
-
directx/Mar2008_d3dx9_37_x86.cab.cab
-
directx/Mar2009_X3DAudio_x64.cab.cab
-
directx/Mar2009_X3DAudio_x86.cab.cab
-
directx/Mar2009_XACT_x64.cab.cab
-
directx/Mar2009_XACT_x86.cab.cab
-
directx/Mar2009_XAudio_x64.cab.cab
-
directx/Mar2009_XAudio_x86.cab.cab
-
directx/Mar2009_d3dx10_41_x64.cab.cab
-
directx/Mar2009_d3dx10_41_x86.cab.cab
-
directx/Mar2009_d3dx9_41_x64.cab.cab
-
directx/Mar2009_d3dx9_41_x86.cab.cab
-
directx/NOV2007_X3DAudio_x64.cab.cab
-
directx/NOV2007_X3DAudio_x86.cab.cab
-
directx/NOV2007_XACT_x64.cab.cab
-
directx/NOV2007_XACT_x86.cab.cab
-
directx/Nov2007_d3dx10_36_x64.cab.cab
-
directx/Nov2007_d3dx10_36_x86.cab.cab
-
directx/Nov2007_d3dx9_36_x64.cab.cab
-
directx/Nov2007_d3dx9_36_x86.cab.cab
-
directx/Nov2008_X3DAudio_x64.cab.cab
-
directx/Nov2008_X3DAudio_x86.cab.cab
-
directx/Nov2008_XACT_x64.cab.cab
-
directx/Nov2008_XACT_x86.cab.cab
-
directx/Nov2008_XAudio_x64.cab.cab
-
directx/Nov2008_XAudio_x86.cab.cab
-
directx/Nov2008_d3dx10_40_x64.cab.cab
-
directx/Nov2008_d3dx10_40_x86.cab.cab
-
directx/Nov2008_d3dx9_40_x64.cab.cab
-
directx/Nov2008_d3dx9_40_x86.cab.cab
-
directx/OCT2006_XACT_x64.cab.cab
-
directx/OCT2006_XACT_x86.cab.cab
-
directx/OCT2006_d3dx9_31_x64.cab.cab
-
directx/OCT2006_d3dx9_31_x86.cab.cab
-
directx/Oct2005_xinput_x64.cab.cab
-
directx/Oct2005_xinput_x86.cab.cab
-
directx/dsetup32.dll.dll windows:6 windows x86 arch:x86
d1671a2cd7c955bf9903489363b7585c
Code Sign
2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before22/08/2007, 22:31Not After25/08/2012, 07:00SubjectCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:01:cf:3e:00:00:00:00:00:0fCertificate
IssuerCN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before07/12/2009, 22:40Not After07/03/2011, 22:40SubjectCN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate
IssuerCN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft CorporationNot Before16/09/2006, 01:04Not After15/09/2019, 07:00SubjectCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
61:06:94:2d:00:00:00:00:00:09Certificate
IssuerCN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USNot Before25/07/2008, 19:02Not After25/07/2013, 19:12SubjectCN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
22:9d:3f:6c:9f:d6:3c:85:3d:d2:28:5b:3e:7b:4f:07:0b:5d:a1:86Signer
Actual PE Digest22:9d:3f:6c:9f:d6:3c:85:3d:d2:28:5b:3e:7b:4f:07:0b:5d:a1:86Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
dsetup32.pdb
Imports
kernel32
FindClose
FindFirstFileA
GetSystemDirectoryA
CopyFileA
DeleteFileA
SetFileAttributesA
WideCharToMultiByte
LoadResource
FindResourceA
GetSystemDefaultLCID
GetModuleFileNameA
lstrcmpA
LockResource
SizeofResource
SetLastError
GetPrivateProfileStringA
MultiByteToWideChar
CloseHandle
GetFileSize
CreateFileA
GetPrivateProfileSectionA
lstrcmpiA
lstrlenA
FindNextFileA
GetShortPathNameA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
LoadLibraryExA
GetFileAttributesA
GetPrivateProfileSectionNamesA
GetSystemInfo
GetDiskFreeSpaceA
GetModuleHandleA
ReadFile
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
LocalFileTimeToFileTime
SystemTimeToFileTime
GetTempFileNameA
GetDriveTypeA
GetCurrentDirectoryA
ExpandEnvironmentStringsA
GetTempPathA
MoveFileExA
SetFileTime
GetFileTime
Sleep
CreateMutexA
GetCurrentThreadId
DecodePointer
GetCommandLineA
GetLocalTime
HeapFree
HeapReAlloc
EncodePointer
TlsAlloc
TlsGetValue
GetVersionExA
TlsFree
InterlockedIncrement
GetModuleHandleW
InterlockedDecrement
ExitProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
HeapAlloc
RaiseException
IsProcessorFeaturePresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
WriteFile
GetConsoleCP
GetConsoleMode
LoadLibraryW
GetModuleFileNameW
SetFilePointer
SetStdHandle
FlushFileBuffers
HeapSize
GetStringTypeW
WriteConsoleW
SetEndOfFile
GetProcessHeap
CreateFileW
GetProcAddress
LoadLibraryA
GetCurrentProcess
FreeLibrary
CompareStringA
FormatMessageA
LocalFree
GetWindowsDirectoryA
OutputDebugStringA
CreateDirectoryA
TlsSetValue
GetLastError
gdi32
GetDeviceCaps
user32
PeekMessageA
ShowWindow
GetDlgItem
SendMessageA
CharLowerA
MessageBoxA
CreateDialogParamA
SetFocus
DestroyWindow
DialogBoxParamA
GetMessageA
CharNextA
EndDialog
SetDlgItemTextA
SendDlgItemMessageA
GetDesktopWindow
GetWindowRect
GetDC
ReleaseDC
SetWindowPos
LoadStringA
DispatchMessageA
TranslateMessage
GetKeyboardType
advapi32
RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteValueA
RegQueryValueExA
shlwapi
SHDeleteKeyA
winmm
mmioDescend
mmioOpenA
mmioClose
mmioRead
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
shell32
SHFileOperationA
ole32
StringFromGUID2
Exports
Exports
DirectXLoadString
DirectXSetupCallback
DirectXSetupSetCallback
DirectXSetupShowEULA
iDirectXSetup
iDirectXSetupGetEULA
Sections
.text Size: 152KB - Virtual size: 151KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
directx/dxdllreg_x86.cab.cab
-
directx/dxnt.cab.cab
-
directx/dxupdate.cab.cab
-
icon.ico
-
steam_api.dll.dll windows:5 windows x86 arch:x86
0b51b8f33412a9315519a1eb2f908913
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetFileAttributesA
LoadLibraryA
GetFileSize
WriteFile
ReadFile
CreateDirectoryA
FindFirstFileA
FindClose
FindNextFileA
DeleteFileA
InterlockedIncrement
Sleep
GetCurrentThreadId
GetCurrentProcessId
lstrlenA
lstrcatA
lstrcpyA
CloseHandle
GetFileTime
GetModuleFileNameA
GetTickCount
CreateFileA
CreateFileW
GetLastError
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
DecodePointer
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
HeapDestroy
GetProcAddress
GetModuleHandleW
ExitProcess
GetStdHandle
GetModuleFileNameW
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
RtlUnwind
SetHandleCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
RaiseException
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
LoadLibraryW
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetFilePointer
GetConsoleCP
GetConsoleMode
SetStdHandle
FlushFileBuffers
HeapSize
HeapReAlloc
LCMapStringW
MultiByteToWideChar
GetStringTypeW
WriteConsoleW
IsProcessorFeaturePresent
user32
wsprintfA
CharLowerA
advapi32
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey
shell32
SHGetFolderPathA
Exports
Exports
GetHSteamPipe
GetHSteamUser
SteamAPI_GetHSteamPipe
SteamAPI_GetHSteamUser
SteamAPI_GetSteamInstallPath
SteamAPI_Init
SteamAPI_InitSafe
SteamAPI_IsSteamRunning
SteamAPI_RegisterCallResult
SteamAPI_RegisterCallback
SteamAPI_RestartAppIfNecessary
SteamAPI_RunCallbacks
SteamAPI_SetBreakpadAppID
SteamAPI_SetMiniDumpComment
SteamAPI_SetTryCatchCallbacks
SteamAPI_Shutdown
SteamAPI_UnregisterCallResult
SteamAPI_UnregisterCallback
SteamAPI_UseBreakpadCrashHandler
SteamAPI_WriteMiniDump
SteamApps
SteamClient
SteamContentServer
SteamContentServerUtils
SteamContentServer_Init
SteamContentServer_RunCallbacks
SteamContentServer_Shutdown
SteamFriends
SteamGameServer
SteamGameServerApps
SteamGameServerHTTP
SteamGameServerNetworking
SteamGameServerStats
SteamGameServerUtils
SteamGameServer_BSecure
SteamGameServer_GetHSteamPipe
SteamGameServer_GetHSteamUser
SteamGameServer_GetIPCCallCount
SteamGameServer_GetSteamID
SteamGameServer_Init
SteamGameServer_InitSafe
SteamGameServer_RunCallbacks
SteamGameServer_Shutdown
SteamHTTP
SteamMatchmaking
SteamMatchmakingServers
SteamNetworking
SteamRemoteStorage
SteamScreenshots
SteamUser
SteamUserStats
SteamUtils
Steam_GetHSteamUserCurrent
Steam_RegisterInterfaceFuncs
Steam_RunCallbacks
foo42
g_pSteamClientGameServer
Sections
.text Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
unins000.dat
-
unins000.exe.exe windows:1 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 605KB - Virtual size: 604KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 5KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 407KB - Virtual size: 406KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ